Function at 0x140019080
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x318]
sub rsp, 0x3f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x140353c70]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov r15, rcx
mov qword [rbp + 0x28], rcx
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_105]
call fcn.140007440
test eax, eax
jne 0x140019121
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x140019114
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14001910f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a6aa
mov rcx, r8
call fcn.140247544
xor ebx, ebx
mov byte [r15], bl
lea eax, [rbx + 1]
jmp 0x14001a65f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x10], rax
mov eax, dword [str.q_VxOH_]
mov dword [rbp - 0x30], eax
movzx eax, word [0x14030282c]
mov word [rbp - 0x2c], ax
movzx ecx, byte [0x14030282e]
mov byte [rbp - 0x30], 0x48
xor byte [rbp - 0x2f], 0x3a
xor byte [rbp - 0x2e], 0x3b
xor byte [rbp - 0x2d], 0x3c
xor al, 0x3d
mov byte [rbp - 0x2c], al
xor byte [rbp - 0x2b], 0x3e
xor cl, 0x3f
mov byte [rbp - 0x2a], cl
movups xmmword [rsp + 0x70], xmm0
xor ebx, ebx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
lea rax, [rbp - 0x30]
mov r12, 0xffffffffffffffff
mov r8, r12
inc r8
cmp byte [rax + r8], bl
jne 0x140019194
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x70]
call fcn.140002ef0
nop
lea rax, [rsp + 0x50]
mov qword [rbp + 0x20], rax
movzx eax, word [0x1403028e0]
mov word [rbp - 0x30], ax
mov byte [rbp - 0x30], gethostbyname
xor byte [rbp - 0x2f], 0x3a
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
lea rax, [rbp - 0x30]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x1400191e1
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x50]
call fcn.140002ef0
nop
mov rdx, r15
lea rcx, [rbp - 0x70]
call fcn.140004590
nop
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
mov r8, rax
lea rdx, [rbp + 0x260]
call fcn.140004220
nop
mov rcx, qword [rbp + 0x260]
cmp byte [rcx], 0x4d
je 0x1400192c0
mov rdx, qword [rbp + 0x270]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019265
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a605
call fcn.140247544
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], rbx
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x1400192b6
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x1400192b1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a6aa
mov rcx, r8
call fcn.140247544
mov eax, 2
jmp 0x14001a65b
lea rax, [rsp + 0x30]
mov qword [rbp - 0x10], rax
movzx eax, word [0x1403028e0]
mov word [rbp - 0x30], ax
cmp byte [0x1403028e1], 0
je 0x1400192e5
mov byte [rbp - 0x30], gethostbyname
xor byte [rbp - 0x2f], 0x3a
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
lea rax, [rbp - 0x30]
mov r8, r12
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140019300
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x30]
call fcn.140002ef0
nop
mov rdx, r15
lea rcx, [rbp - 8]
call fcn.140004590
nop
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.140018ab0
mov edi, eax
test eax, eax
je 0x1400193d0
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x14001938f
mov rdx, qword [rbp + 0x270]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019378
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a605
call fcn.140247544
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], rbx
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x1400193c9
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x1400193c4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a6aa
mov rcx, r8
call fcn.140247544
mov eax, edi
jmp 0x14001a65b
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], rax
lea rax, [rsp + 0x30]
mov qword [rbp - 0x10], rax
movsd xmm0, qword [0x140302f10]
movsd qword [rbp - 0x20], xmm0
mov eax, dword [0x140302f18]
mov dword [rbp - 0x18], eax
movzx eax, byte [0x140302f1c]
mov byte [rbp - 0x14], al
mov r8d, ebx
mov edi, 4
lea esi, [rdi + 0x1b]
mov r14d, dword [0x140353c80]
cmp r14d, 2
jl 0x140019529
movdqa xmm4, xmmword [0x140304290]
movd xmm6, edi
movd xmm5, esi
movdqa xmm2, xmmword [0x140304160]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1403041a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140304200]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140304270]
movd xmm0, dword [0x140302f10]
pxor xmm2, xmm0
movd dword [rbp - 0x20], xmm2
movdqa xmm3, xmmword [0x140304170]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1403041a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140304200]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140304270]
movd xmm0, dword [rbp - 0x1c]
pxor xmm2, xmm0
movd dword [rbp - 0x1c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x20]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140019540
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
lea rax, [rbp - 0x20]
mov r8, r12
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019590
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x30]
call fcn.140002ef0
nop
lea rax, [rbp - 8]
mov qword [rbp + 0x20], rax
movzx eax, word [0x1403028e0]
mov word [rbp - 0x30], ax
mov byte [rbp - 0x30], gethostbyname
xor byte [rbp - 0x2f], 0x3a
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], rbx
lea rax, [rbp - 0x30]
mov r8, r12
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400195e0
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 8]
call fcn.140002ef0
nop
mov rdx, r15
lea rcx, [rbp - 0x50]
call fcn.140004590
nop
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 8]
mov r8, rax
lea rdx, [rbp + 0x280]
call fcn.140004220
nop
mov rcx, qword [rbp + 0x280]
cmp qword [rbp + 0x288], rcx
jne 0x140019718
test rcx, rcx
je 0x140019682
mov rdx, qword [rbp + 0x290]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001966b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a5a9
call fcn.140247544
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], rbx
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x1400196d4
mov rdx, qword [rbp + 0x270]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400196bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a605
call fcn.140247544
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], rbx
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14001970e
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x140019709
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a6aa
mov rcx, r8
call fcn.140247544
mov eax, shutdown
jmp 0x14001a65b
mov ecx, 0x38
call fcn.140247500
mov r13, rax
mov qword [rbp - 0x10], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r13], xmm0
movups xmmword [r13 + 0x10], xmm0
movups xmmword [r13 + 0x20], xmm0
mov qword [r13 + 0x30], rax
lea rax, [rsp + 0x70]
mov qword [rbp + 0x20], rax
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov rdx, qword [rbp + 0x288]
sub rdx, qword [rbp + 0x280]
je 0x1400197bf
movabs rax, 0x7fffffffffffffff
cmp rdx, rax
ja 0x14001a6b1
lea rcx, [rsp + 0x70]
call fcn.140007250
mov r14, qword [rsp + 0x70]
mov rdi, qword [rbp + 0x280]
mov rsi, qword [rbp + 0x288]
mov r8, rsi
sub r8, rdi
mov rdx, rdi
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
sub rsi, rdi
add rsi, r14
mov qword [rsp + 0x78], rsi
mov r14d, dword [0x140353c80]
mov edi, 4
lea esi, [rdi + 0x1b]
movsd xmm0, qword [0x1403032c0]
movsd qword [rbp - 0x20], xmm0
mov eax, dword [0x1403032c8]
mov dword [rbp - 0x18], eax
mov r8d, ebx
cmp r14d, 2
jl 0x1400198e9
movdqa xmm4, xmmword [0x140304290]
movd xmm6, edi
movd xmm5, esi
movdqa xmm2, xmmword [0x140304160]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1403041a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140304200]
packuswb xmm2, xmm2
mov eax, dword [0x140304270]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [0x1403032c0]
pxor xmm2, xmm1
movd dword [rbp - 0x20], xmm2
movdqa xmm3, xmmword [0x140304170]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1403041a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140304200]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x1c]
pxor xmm2, xmm1
movd dword [rbp - 0x1c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x20]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140019900
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
lea rax, [rbp - 0x20]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x140019946
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x70]
call fcn.140002ef0
nop
lea r9, [rsp + 0x70]
lea rdx, [rbp - 0x70]
mov rcx, r13
call fcn.140018720
mov rsi, rax
mov qword [rbp + 0x2a8], rax
mov ecx, 0x18
call fcn.140247500
mov rdi, rax
mov qword [rbp - 0x10], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
movups xmm0, xmmword [str.owso]
movups xmmword [rsp + 0x50], xmm0
movsd xmm1, qword [0x1403032e0]
movsd qword [rsp + 0x60], xmm1
mov eax, dword [0x1403032e8]
mov dword [rsp + 0x68], eax
mov r13d, 4
cmp byte [0x1403032eb], 0
je 0x140019b70
mov r8d, ebx
cmp r14d, 2
jl 0x140019b27
movdqa xmm5, xmmword [0x140304160]
movdqa xmm4, xmmword [0x140304290]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1403041a0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [0x140304270]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rsp + 0x50]
mov edx, dword [rbp - 0x20]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140304200]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140304200]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140019a20
cmp r8d, 0x1c
jge 0x140019b70
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1c
jl 0x140019b40
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
lea rax, [rsp + 0x50]
mov r8, r12
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140019b90
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140002ef0
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.1400076b0
nop
mov rcx, qword [rsi]
mov qword [rsi], rax
test rcx, rcx
je 0x140019bcc
mov edx, 0x18
call fcn.140247544
mov qword [rbp + 0x2a0], rbx
mov dword [rbp + 0x278], ebx
mov rdi, qword [rsi]
mov eax, dword [0x140302918]
mov dword [rsp + 0x40], eax
movups xmm0, xmmword [str.USY_XX]
movzx eax, word [0x14030291c]
movups xmmword [rsp + 0x30], xmm0
mov ecx, WSAGetLastError
mov word [rsp + 0x30], cx
xor word [rsp + 0x32], 0x3a
xor word [rsp + 0x34], 0x3b
xor word [rsp + 0x36], 0x3c
xor word [rsp + 0x38], 0x3d
xor word [rsp + 0x3a], 0x3e
xor word [rsp + 0x3c], 0x3f
xor word [rsp + 0x3e], 0x40
xor word [rsp + 0x40], 0x41
xor word [rsp + 0x42], 0x42
xor ax, 0x43
mov word [rsp + 0x44], ax
xor edx, edx
mov r8d, 0x204
lea rcx, [rbp + 0x34]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [rdi]
mov dword [rbp + 0x30], eax
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x238], rax
lea rax, [rbp + 0x278]
mov qword [rbp + 0x240], rax
lea r8, [rsp + 0x30]
mov edx, 0xff
lea rcx, [rbp + 0x34]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov dword [rbp - 0x20], 0x13387676
mov dword [rbp - 0x1c], 6
lea rax, [rbp + 0x30]
mov qword [rbp - 0x18], rax
lea rax, [rbp - 0x20]
mov qword [rbp + 0x258], rax
mov qword [rbp - 0x30], rbx
xor r9d, r9d
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x258]
xor ecx, ecx
call qword [0x14035a9d0]
mov qword [rbp + 0x18], rbx
mov dword [rbp + 0x298], ebx
mov rdi, qword [rsi]
movups xmm0, xmmword [str.JNN]
movups xmmword [rbp - 8], xmm0
movzx eax, word [0x140303b40]
mov ecx, reloc.WS2_32.dll_WSAStartup
mov word [rbp - 8], cx
xor word [rbp - 6], 0x3a
xor word [rbp - 4], 0x3b
xor word [rbp - 2], 0x3c
xor word [rbp], 0x3d
xor word [rbp + 2], 0x3e
xor word [rbp + 4], 0x3f
xor word [rbp + 6], 0x40
xor ax, 0x41
mov word [rbp + 8], ax
xor edx, edx
mov r8d, 0x204
lea rcx, [rbp + 0x34]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [rdi]
mov dword [rbp + 0x30], eax
lea rax, [rbp + 0x18]
mov qword [rbp + 0x238], rax
lea rax, [rbp + 0x298]
mov qword [rbp + 0x240], rax
lea r8, [rbp - 8]
mov edx, 0xff
lea rcx, [rbp + 0x34]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov dword [rbp - 0x20], 0x13387676
mov dword [rbp - 0x1c], 6
lea rax, [rbp + 0x30]
mov qword [rbp - 0x18], rax
lea rax, [rbp - 0x20]
mov qword [rbp - 0x30], rax
mov qword [rbp + 0x258], rbx
xor r9d, r9d
lea r8, [rbp + 0x258]
lea rdx, [rbp - 0x30]
xor ecx, ecx
call qword [0x14035a9d0]
mov byte [rbp + 0x250], 0
mov rdi, rbx
nop dword [rax]
mov rdx, qword [rbp + 0x18]
add rdx, 0x4a2000
add rdx, rdi
mov r9d, 1
lea r8, [rbp + 0x250]
mov rcx, qword [rsi]
call fcn.140007a30
mov rdx, qword [rbp + 0x18]
add rdx, 0x4a2000
add rdx, rdi
mov rcx, qword [rsi]
call fcn.140007e80
inc rdi
cmp rdi, 0xf
jb 0x140019da0
mov dword [rbp + 0x254], 0xc3018b48
mov rdi, rbx
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0x4a2030
add rdx, rdi
mov r9d, r13d
lea r8, [rbp + 0x254]
mov rcx, qword [rsi]
call fcn.140007a30
mov rdx, qword [rbp + 0x18]
add rdx, 0x4a2030
add rdx, rdi
mov rcx, qword [rsi]
call fcn.140007e80
inc rdi
cmp rdi, 4
jb 0x140019df0
mov rdi, rbx
nop dword [rax]
nop word [rax + rax]
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 0x18]
add rdx, 0x4a2060
add rdx, rdi
mov r9d, 1
lea r8, [rbp - 0x30]
mov rcx, qword [rsi]
call fcn.140007a30
mov rdx, qword [rbp + 0x18]
add rdx, 0x4a2060
add rdx, rdi
mov rcx, qword [rsi]
call fcn.140007e80
inc rdi
cmp rdi, 0x320
jb 0x140019e40
mov rax, qword [rbp + 0x2a0]
add rax, 0x5a0e300
mov qword [rsi + 0x30], rax
movups xmm0, xmmword [str.owso]
movups xmmword [rsp + 0x50], xmm0
movsd xmm1, qword [0x1403032e0]
movsd qword [rsp + 0x60], xmm1
mov eax, dword [0x1403032e8]
mov dword [rsp + 0x68], eax
mov r8d, ebx
cmp r14d, 2
jl 0x14001a017
movdqa xmm5, xmmword [0x140304160]
movdqa xmm4, xmmword [0x140304290]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1403041a0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [0x140304270]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rsp + 0x50]
mov edx, dword [rbp - 0x20]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140304200]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140304200]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140019f10
cmp r8d, 0x1c
jge 0x14001a060
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1c
jl 0x14001a030
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
lea rax, [rsp + 0x50]
nop word [rax + rax]
inc r12
cmp byte [rax + r12], 0
jne 0x14001a080
mov r8, r12
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.140002ef0
lea rax, [rsp + 0x30]
mov qword [rbp - 0x10], rax
mov rax, qword [rsi + 0x30]
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x18]
lea rcx, [rbp - 8]
test rax, rax
je 0x14001a0cb
mov byte [rsp + 0x20], 1
mov r9, r8
mov r8, rax
call fcn.140009ad0
jmp 0x14001a0d3
mov r9b, 1
call fcn.140009510
movups xmm0, xmmword [rbp - 8]
movups xmmword [rsi + 8], xmm0
cmp qword [rsi + 8], 0
jne 0x14001a0eb
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14001a12b
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a126
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a126
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140247544
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x14001a149
imul rcx, rax, 0x64
jmp 0x14001a164
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rcx, rax
movabs rax, 0x112e0be826d694b3
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, qword [rsi]
xor rdx, 0x68694866
mov qword [rax + 0x10], rdx
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movzx eax, word [0x140303ec0]
mov word [rsp + 0x40], ax
movzx eax, byte [0x140303ec2]
movups xmm0, xmmword [0x140303eb0]
mov byte [rsp + 0x42], al
movups xmmword [rsp + 0x30], xmm0
mov r8d, ebx
cmp r14d, 2
jl 0x14001a317
movdqa xmm5, xmmword [0x140304160]
movdqa xmm4, xmmword [0x140304290]
movd xmm6, r13d
movdqa xmm7, xmmword [0x1403041a0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [0x140304270]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rsp + 0x30]
mov edx, dword [rbp - 0x20]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140304200]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140304200]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14001a210
cmp r8d, 0x13
jge 0x14001a360
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x13
jl 0x14001a330
movsd xmm0, qword [0x1403030e8]
movzx eax, byte [0x1403030f0]
movsd qword [rbp - 0x20], xmm0
mov byte [rbp - 0x20], 0x4b
xor byte [rbp - 0x1f], 0x3a
xor byte [rbp - 0x1e], 0x3b
xor byte [rbp - 0x1d], 0x3c
xor byte [rbp - 0x1c], 0x3d
xor byte [rbp - 0x1b], 0x3e
xor byte [rbp - 0x1a], 0x3f
xor byte [rbp - 0x19], 0x40
xor al, 0x41
mov byte [rbp - 0x18], al
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
movups xmm0, xmmword [str.LIN]
movups xmmword [rsp + 0x50], xmm0
mov ecx, dword [0x140303b28]
mov dword [rsp + 0x60], ecx
movzx r9d, word [0x140303b2c]
mov eax, 0x75
mov word [rsp + 0x50], ax
xor word [rsp + 0x52], 0x3a
xor word [rsp + 0x54], 0x3b
xor word [rsp + 0x56], 0x3c
xor word [rsp + 0x58], 0x3d
xor word [rsp + 0x5a], 0x3e
xor word [rsp + 0x5c], 0x3f
xor word [rsp + 0x5e], 0x40
xor cx, 0x41
mov word [rsp + 0x60], cx
xor word [rsp + 0x62], 0x42
xor r9w, 0x43
mov word [rsp + 0x64], r9w
mov rdi, qword [rsi]
xor edx, edx
mov r8d, 0x204
lea rcx, [rbp + 0x34]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [rdi]
mov dword [rbp + 0x30], eax
lea rax, [rbp - 0x10]
mov qword [rbp + 0x238], rax
lea rax, [rbp - 0x30]
mov qword [rbp + 0x240], rax
lea r8, [rsp + 0x50]
mov edx, 0xff
lea rcx, [rbp + 0x34]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov dword [rbp - 8], 0x13387676
mov dword [rbp - 4], 6
lea rax, [rbp + 0x30]
mov qword [rbp], rax
lea rax, [rbp - 8]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x258], rbx
xor r9d, r9d
lea r8, [rbp + 0x258]
lea rdx, [rbp + 0x20]
xor ecx, ecx
call qword [0x14035a9d0]
mov rcx, rbx
mov rdx, qword [rbp - 0x10]
lea rax, [rdx + 2]
nop dword [rax]
cmp qword [rax - 2], r14
je 0x14001a4e9
cmp qword [rax - 1], r14
je 0x14001a4e6
cmp qword [rax], r14
je 0x14001a4e0
cmp qword [rax + 1], r14
je 0x14001a4da
add rcx, 4
add rax, 4
cmp rcx, 0x100000
jb 0x14001a4b0
jmp 0x14001a4e9
add rcx, 3
jmp 0x14001a4e9
add rcx, 2
jmp 0x14001a4e9
inc rcx
lea r9, [rcx + rdx]
mov rdx, qword [rsi + 0x10]
sub rdx, 0x300
mov r8, qword [rsi + 8]
mov rcx, qword [rsi]
call fcn.14000a4b0
call fcn.140007fa0
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_505]
nop
mov rcx, qword [rsi + 0x18]
test rcx, rcx
je 0x14001a552
mov rdx, qword [rsi + 0x28]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14001a541
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a5b0
mov rcx, r8
call fcn.140247544
mov qword [rsi + 0x18], rbx
mov qword [rsi + 0x20], rbx
mov qword [rsi + 0x28], rbx
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001a564
mov edx, 0x18
call fcn.140247544
mov edx, 0x38
mov rcx, rsi
call fcn.140247544
nop
mov rcx, qword [rbp + 0x280]
test rcx, rcx
je 0x14001a5ce
mov rdx, qword [rbp + 0x290]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a5b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a5b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140247544
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], rbx
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x14001a623
mov rdx, qword [rbp + 0x270]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a60c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a60c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140247544
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], rbx
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14001a659
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14001a654
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a6aa
mov rcx, r8
call fcn.140247544
xor eax, eax
mov byte [r15], 0
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov qword [r15 + 0x10], rbx
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.1402474e0
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140007230
nop
int3