Function at 0x140068d60
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2e0]
sub rsp, 0x3e0
mov rax, qword [0x14033b600]
xor rax, rsp
mov qword [rbp + 0x2d8], rax
lea rcx, [rbp + 0x10]
call fcn.140067b20
nop
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.1400672c0
mov rbx, rax
lea rsi, [0x140345b30]
xor r12d, r12d
cmp rsi, rax
je 0x140068e3c
mov rdx, qword [0x140345b48]
cmp rdx, 0x10
jb 0x140068e01
mov rcx, qword [0x140345b30]
inc rdx
cmp rdx, 0x1000
jb 0x140068dfc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140069dd0
mov rcx, r8
call fcn.140223f10
movdqa xmm0, xmmword [0x140311360]
movdqa xmmword [0x140345b40], xmm0
mov byte [0x140345b30], r12b
movups xmm0, xmmword [rbx]
movaps xmmword [0x140345b30], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [0x140345b40], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r12b
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140068e77
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068e72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069dd0
call fcn.140223f10
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], r12b
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140068ec2
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068ebd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069dd6
call fcn.140223f10
cmp qword [0x1403459f0], 0xa
jne 0x140069db4
cmp qword [0x140345a10], 0x40
jne 0x140069db4
mov dword [rsp + 0x68], 0xf0b0d45
mov dword [rsp + 0x6c], 0x1c003713
mov word [rsp + 0x70], 0x56
mov byte [rsp + 0x72], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0x63]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 9
jb 0x140068f00
mov byte [rsp + 0x72], 0
lea rdx, [0x1403459e0]
lea rcx, [rbp + 0x110]
call fcn.1400676f0
mov r15, rax
mov dword [rsp + 0x58], 0x8120b45
mov dword [rsp + 0x5c], 0xe001a02
mov word [rsp + 0x60], 0x56
mov byte [rsp + 0x62], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 9
jb 0x140068f50
mov byte [rsp + 0x62], 0
lea rdx, [0x1403459c0]
lea rcx, [rbp + 0xf0]
call fcn.1400676f0
mov r14, rax
mov dword [rsp + 0x40], 0xb040a45
mov dword [rsp + 0x44], 0x1005502
mov rcx, r12
nop
lea eax, [rcx + 0x63]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 6
jb 0x140068f90
mov byte [rsp + 0x47], 0
lea rax, [rbp + 0x228]
mov qword [rsp + 0x38], rax
lea rdx, [0x1403458b0]
lea rcx, [rbp + 0x228]
call fcn.14005f950
mov rdi, rax
lea rax, [rbp + 0x248]
mov qword [rsp + 0x30], rax
lea rdx, [0x140345a00]
lea rcx, [rbp + 0x248]
call fcn.14005f950
mov rbx, rax
mov rdx, rsi
lea rcx, [rbp + 0x1b0]
call fcn.14005f950
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.140067c70
mov rsi, rax
mov dword [rsp + 0x48], 0x50b0145
mov dword [rsp + 0x4c], 0x57100d0c
mov word [rsp + 0x50], 0x100
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rsp + rcx + 0x48], al
inc rcx
cmp rcx, 8
jb 0x140069030
mov byte [rsp + 0x51], 0
lea rax, [rbp + 0x1f0]
mov qword [rbp - 0x78], rax
lea rdx, [0x1403458b0]
lea rcx, [rbp + 0x1f0]
call fcn.14005f950
mov rdi, rax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x38], rax
lea rdx, [0x140345a00]
lea rcx, [rbp + 0x190]
call fcn.14005f950
mov rbx, rax
lea rdx, [0x140345a20]
lea rcx, [rbp + 0x298]
call fcn.14005f950
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.140067c70
mov rdi, rax
mov dword [rsp + 0x38], 0x14001245
mov word [rsp + 0x3c], 0x5a
mov byte [rsp + 0x3e], 1
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rsp + rcx + 0x38], al
inc rcx
cmp rcx, 5
jb 0x1400690d0
mov byte [rsp + 0x3e], 0
mov dword [rsp + 0x30], 0x120c0a0a
mov word [rsp + 0x34], 0x100
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 4
jb 0x140069100
mov byte [rsp + 0x35], 0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
lea rax, [rsp + 0x30]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140069140
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.140060430
nop
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x90]
call fcn.1400676f0
mov r10, rax
mov dword [rsp + 0x30], 0x3151d17
mov word [rsp + 0x34], 0x5a
mov byte [rsp + 0x36], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x63]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 5
jb 0x140069190
mov byte [rsp + 0x36], 0
lea rax, [rsp + 0x30]
mov r9, rbx
nop dword [rax]
inc r9
cmp byte [rax + r9], 0
jne 0x1400691b0
lea r8, [rsp + 0x30]
xor edx, edx
mov rcx, r10
call fcn.140079e20
mov qword [rbp - 0x10], r12
mov qword [rbp], r12
mov qword [rbp + 8], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x38]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140069200
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x10]
call fcn.140060590
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp + 0x10]
lea rcx, [rbp - 0x50]
call fcn.140079f30
nop
lea rax, [rsp + 0x48]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140069250
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x50]
call fcn.140060590
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x170], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x180], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rsi
lea r8, [rbp + 0x170]
lea rcx, [rbp + 0x70]
call fcn.140079f30
nop
lea rax, [rsp + 0x40]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400692b0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x70]
call fcn.140060590
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x160], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r14
lea r8, [rbp + 0x150]
lea rcx, [rbp + 0x50]
call fcn.140079f30
nop
lea rax, [rsp + 0x58]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140069310
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x50]
call fcn.140060590
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x140], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r15
lea r8, [rbp + 0x130]
lea rcx, [rbp + 0x30]
call fcn.140079f30
nop
lea rax, [rsp + 0x68]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140069365
mov r8, rbx
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x30]
call fcn.140060590
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [0x1403458b0]
cmp qword [0x1403458c8], 0x10
cmovae rdx, qword [0x1403458b0]
mov r8, qword [0x1403458c0]
lea rcx, [rbp - 0x30]
call fcn.140060590
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2b8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2c8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14006942f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006942a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069ddc
call fcn.140223f10
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x14006947a
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069475
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069de2
call fcn.140223f10
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x1400694cc
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400694c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069de8
call fcn.140223f10
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140069507
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069502
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069dee
call fcn.140223f10
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0x168]
cmp rdx, 0x10
jb 0x140069559
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069553
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069df4
call fcn.140223f10
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x140069597
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069592
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069dfa
call fcn.140223f10
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1400695ef
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400695e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e00
call fcn.140223f10
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x14006962a
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069625
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e06
call fcn.140223f10
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140069676
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069670
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e0c
call fcn.140223f10
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x1400696b1
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400696ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e12
call fcn.140223f10
mov qword [rbp], r12
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x140069702
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400696fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e18
call fcn.140223f10
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140069756
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069751
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e1e
call fcn.140223f10
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x1400697a7
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400697a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e24
call fcn.140223f10
mov qword [rbp + 0xc0], r12
mov qword [rbp + 0xc8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x140069801
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400697fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e2a
call fcn.140223f10
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xd0], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x14006985b
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069856
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e30
call fcn.140223f10
mov qword [rbp + 0x100], r12
mov qword [rbp + 0x108], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0x10
jb 0x1400698b5
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400698b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e36
call fcn.140223f10
mov qword [rbp + 0x120], r12
mov qword [rbp + 0x128], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x110], 0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
lea rsi, [rbp + 0x2b8]
mov rdi, qword [rbp + 0x2b8]
mov r15, qword [rbp + 0x2d0]
cmp r15, 0x10
cmovae rsi, rdi
movabs rax, 0x7fffffffffffffff
mov r14, qword [rbp + 0x2c8]
cmp r14, 0x10
jae 0x14006991f
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x68], xmm0
mov ebx, reloc.WS2_32.dll_ntohs
jmp 0x14006998c
mov rbx, r14
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140069969
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140069e3c
mov rcx, rax
call fcn.1402241b0
mov rcx, rax
test rax, rax
je 0x140069e42
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140069978
test rcx, rcx
je 0x140069975
call fcn.1402241b0
jmp 0x140069978
mov rax, r12
mov qword [rsp + 0x68], rax
lea r8, [r14 + 1]
mov rdx, rsi
mov rcx, rax
call fcn.140226410
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], rbx
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x268]
call fcn.14006d790
nop
lea rax, [rbp + 0x298]
mov qword [rbp - 0x78], rax
lea rdx, [0x1403458b0]
lea rcx, [rbp + 0x298]
call fcn.14005f950
mov r12, rax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x40], rax
lea rdx, [0x140345a00]
lea rcx, [rbp + 0x190]
call fcn.14005f950
mov r13, rax
xor eax, eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
mov rsi, qword [rbp + 0x278]
lea r14, [rbp + 0x268]
cmp qword [rbp + 0x280], 0x10
cmovae r14, qword [rbp + 0x268]
cmp rsi, 0x10
jae 0x140069a29
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x70], xmm0
lea ebx, [rax + 0xf]
jmp 0x140069a9a
mov rbx, rsi
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
cmova rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140069a7d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140069e48
mov rcx, rax
call fcn.1402241b0
mov rcx, rax
test rax, rax
je 0x140069e4e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140069a87
test rcx, rcx
je 0x140069a87
call fcn.1402241b0
mov qword [rbp - 0x70], rax
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call fcn.140226410
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rbx
mov r9, r12
mov r8, r13
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.140068010
mov rbx, rax
lea rax, [rbp + 0x268]
cmp rax, rbx
je 0x140069b4a
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x140069b09
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069b04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e4e
call fcn.140223f10
xor esi, esi
mov qword [rbp + 0x278], rsi
mov qword [rbp + 0x280], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x268], sil
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x268], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x278], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], sil
jmp 0x140069b4c
xor esi, esi
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140069b87
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069b82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069e4e
call fcn.140223f10
mov qword [rbp + 0x1e8], rsi
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x288]
call fcn.1400774d0
nop
lea rdx, str.success
lea rcx, [rbp + 0x288]
call fcn.140077600
cmp byte [rax], 4
jne 0x140069e54
lea rcx, [rbp + 0x288]
cmp byte [rax + 8], 0
je 0x140069cc7
lea rdx, str.sessionid
call fcn.140077600
mov rdx, rax
lea rcx, [0x140345b10]
call fcn.140077730
nop
movzx edx, byte [rbp + 0x288]
lea rcx, [rbp + 0x290]
call fcn.140075f00
nop
mov rdx, qword [rbp + 0x280]
cmp rdx, 0x10
jb 0x140069c47
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069c42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069eab
call fcn.140223f10
mov qword [rbp + 0x278], rsi
mov qword [rbp + 0x280], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x268], 0
cmp r15, 0x10
jb 0x140069c97
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140069c8f
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069eb1
mov rcx, rdi
call fcn.140223f10
mov rcx, qword [rbp + 0x2d8]
xor rcx, rsp
call fcn.140223ef0
lea r11, [rsp + 0x3e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, str.message
call fcn.140077600
mov rdi, rax
mov byte [rsp + 0x68], 3
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1402241b0
mov rbx, rax
mov qword [rax], rsi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov r8d, 0xa
lea rdx, str.invalidver
mov rcx, rax
call fcn.140060430
mov qword [rsp + 0x70], rbx
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.140079900
movzx ebx, al
movzx edx, byte [rsp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.140075f00
nop
lea rcx, [rbp + 0x288]
test bl, bl
jne 0x140069d60
lea rdx, str.message
call fcn.140077600
lea rdx, [rbp + 0x298]
mov rcx, rax
call fcn.1400777b0
mov rcx, rax
call fcn.14006d710
int3
lea rdx, str.download
call fcn.140077600
lea rdx, [rbp + 0x298]
mov rcx, rax
call fcn.1400777b0
lea rcx, [rbp + 0x298]
call fcn.14005f8a0
mov r8, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 1
call fcn.140234cac
nop
lea rdx, str.Application_Not_Setup_Correctly.Please_Watch_Video_Linked_in_Main.cpp
lea rcx, [rbp + 0x298]
call fcn.14005f910
mov rcx, rax
call fcn.14006d710
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
nop
call fcn.14023482c
int3
call fcn.14005b550
int3
call fcn.14023482c
nop
call fcn.14005b550
int3
call fcn.14023482c
nop
mov rcx, rax
call fcn.140076400
mov rdx, rax
lea rcx, [rbp + 0x298]
call fcn.14005f910
nop
mov r8, rax
lea rdx, str.type_must_be_boolean__but_is
lea rcx, [rbp + 0x190]
call fcn.140076e50
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x1f0]
call fcn.140066490
lea rdx, [0x140334548]
lea rcx, [rbp + 0x1f0]
call fcn.140226334
nop
call fcn.14023482c
nop
call fcn.14023482c
int3