Function at 0x14003fd10
Capabilities:
Contain obfuscated stackstrings
Execute command
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rax, qword [0x1400eb0c0]
xor rax, rsp
mov qword [rbp + 0xe0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xor r14d, r14d
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xd8], r14
lea r8d, [r14 + 0xa]
lea rdx, str.SickkGuard
lea rcx, [rbp + 0xc0]
call fcn.140041250
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.140045700
movdqa xmm0, xmmword [str._n_n_Connecting..]
movdqu xmmword [rbp - 0x40], xmm0
lea rdx, [rbp - 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140040c10
lea rcx, [0x1400decbc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14003f9e0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xc0], r14b
movdqa xmm0, xmmword [0x1400dfea0]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x50], reloc.WLDAP32.dll_Ordinal_32
lea rdx, [rbp - 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140040c10
lea rdx, [rbp + 0xc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140041040
mov dword [rsp + 0x30], 0x636f6c42
mov dword [rsp + 0x34], 0x72656b
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x48], 0x61477663
mov dword [rsp + 0x4c], 0x6e716a6a
mov word [rsp + 0x50], 0x466e
mov byte [rsp + 0x52], r14b
movdqa xmm0, xmmword [0x1400dfeb0]
movdqa xmm1, xmmword [0x1400dfe90]
movdqa xmm2, xmmword [0x1400dfed0]
movdqa xmm3, xmmword [0x1400dfec0]
movaps xmmword [rbp + 0x70], xmm0
movaps xmmword [rbp + 0x80], xmm1
movaps xmmword [rbp + 0x90], xmm2
movaps xmmword [rbp + 0xa0], xmm3
mov byte [rbp + 0xb0], r14b
mov dword [rsp + 0x30], 0x302e31
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x30], eax
movdqa xmm0, xmmword [str.https:__keyauth.90632d43dc020795_n_Enter_license:45f79edd1fc2db4cac7f2eec9fd454bcf0768a09295d923d_]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0x2f6e6977
mov dword [rsp + 0x74], 0x2f697061
mov dword [rsp + 0x78], 0x2f322e31
mov byte [rsp + 0x7c], r14b
lea rax, [rbp - 0x80]
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
lea rsi, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rsi, qword [rbp + 0xc0]
movabs rbx, 0x7fffffffffffffff
mov rdi, qword [rbp + 0xd0]
cmp rdi, rbx
jbe 0x14003ff0b
call fcn.14003f330
int3
cmp rdi, 0xf
ja 0x14003ff29
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x80], xmm0
jmp 0x14003ffbe
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x14003ff61
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400cbe20
mov rcx, rax
test rax, rax
je 0x14003ff8c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14003ffa2
mov rbx, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003ff93
lea rax, [rcx + 0x27]
cmp rax, rcx
ja 0x14003ff43
call fcn.14003f260
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14003ff9f
call fcn.1400cbe20
jmp 0x14003ffa2
mov rax, r14
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rax, [rbp - 0x60]
mov qword [rbp + 0x68], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
lea rax, [rsp + 0x60]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14003ffe4
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.140041250
nop
lea rax, [rbp - 0x30]
mov qword [rbp - 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], r14
lea rax, [rsp + 0x30]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140040020
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x30]
call fcn.140041250
nop
lea rax, [rbp - 0x10]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r14
mov qword [rbp + 8], r14
lea rax, [rbp + 0x70]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140040060
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x10]
call fcn.140041250
nop
lea rax, [rbp + 0x10]
mov qword [rbp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], r14
lea rax, [rsp + 0x48]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400400a0
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x10]
call fcn.140041250
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], r14
lea rax, [rsp + 0x58]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400400d0
mov r8, rbx
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x30]
call fcn.140041250
nop
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.140049980
test al, al
je 0x140040319
call fcn.14003f9d0
call fcn.14003f9e0
lea rcx, str._n_Now_Running..._n
call fcn.14003f0a0
call fcn.14003fad0
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x58], rax
lea rdx, [rbp - 0x80]
call fcn.1400403a0
mov r13, rax
mov qword [rsp + 0x30], rax
movzx ecx, byte [rax + 1]
movzx edx, byte [rax + 2]
movzx r8d, byte [rax + 3]
movzx r9d, byte [rax + 4]
movzx r10d, byte [rax + 5]
movzx r11d, byte [rax + 6]
movzx ebx, byte [rax + 7]
movzx eax, byte [rax + 8]
movzx edi, byte [r13 + 9]
movzx esi, byte [r13 + 0xa]
movzx r14d, byte [r13 + 0xb]
movzx r15d, byte [r13 + 0xc]
movzx r12d, byte [r13 + 0xd]
movzx r13d, byte [r13 + 0xe]
mov byte [rsp + 0x38], r13b
mov r13, qword [rsp + 0x30]
movzx r13d, byte [r13 + 0xf]
mov byte [rsp + 0x39], r13b
mov r13, qword [rsp + 0x30]
movzx r13d, byte [r13 + 0x10]
mov byte [rsp + 0x3a], r13b
mov r13, qword [rsp + 0x30]
movzx r13d, byte [r13 + 0x11]
mov byte [rsp + 0x3b], r13b
mov r13, qword [rsp + 0x30]
movzx r13d, byte [r13 + 0x12]
mov byte [rsp + 0x3c], r13b
mov r13, qword [rsp + 0x30]
movzx r13d, byte [r13 + 0x13]
mov byte [rsp + 0x3d], r13b
mov r13, qword [rsp + 0x30]
movzx r13d, byte [r13 + 0x14]
mov byte [rsp + 0x3e], r13b
mov r13, qword [rsp + 0x30]
movzx r13d, byte [r13 + 0x15]
mov byte [rsp + 0x3f], r13b
mov r13, qword [rsp + 0x30]
movzx r13d, byte [r13 + 0x16]
mov byte [rsp + 0x40], r13b
mov r13, qword [rsp + 0x30]
movzx r13d, byte [r13 + 0x17]
mov byte [rsp + 0x41], r13b
mov r13, qword [rsp + 0x30]
xor byte [r13], 0xc0
xor cl, 0xc0
mov byte [r13 + 1], cl
xor dl, 0xc0
mov rcx, r13
mov byte [r13 + 2], dl
xor r8b, 0xc0
mov byte [r13 + 3], r8b
xor r9b, 0xc0
mov byte [r13 + 4], r9b
xor r10b, 0xc0
mov byte [r13 + 5], r10b
xor r11b, 0xc0
mov byte [r13 + 6], r11b
xor bl, 0xc0
mov byte [r13 + 7], bl
xor al, 0xc0
mov byte [r13 + 8], al
xor dil, 0xc0
mov byte [r13 + 9], dil
xor sil, 0xc0
mov byte [r13 + 0xa], sil
xor r14b, 0xc0
mov byte [r13 + 0xb], r14b
xor r15b, 0xc0
mov byte [r13 + 0xc], r15b
xor r12b, 0xc0
mov byte [r13 + 0xd], r12b
movzx r13d, byte [rsp + 0x38]
xor r13b, 0xc0
mov byte [rcx + 0xe], r13b
movzx eax, byte [rsp + 0x39]
xor al, 0xc0
mov byte [rcx + 0xf], al
movzx eax, byte [rsp + 0x3a]
xor al, 0xc0
mov byte [rcx + 0x10], al
movzx eax, byte [rsp + 0x3b]
xor al, 0xc0
mov byte [rcx + 0x11], al
movzx eax, byte [rsp + 0x3c]
xor al, 0xc0
mov byte [rcx + 0x12], al
movzx eax, byte [rsp + 0x3d]
xor al, 0xc0
mov byte [rcx + 0x13], al
movzx eax, byte [rsp + 0x3e]
xor al, 0xc0
mov byte [rcx + 0x14], al
movzx eax, byte [rsp + 0x3f]
xor al, 0xc0
mov byte [rcx + 0x15], al
movzx eax, byte [rsp + 0x40]
xor al, 0xc0
mov byte [rcx + 0x16], al
movzx eax, byte [rsp + 0x41]
xor al, 0xc0
mov byte [rcx + 0x17], al
mov rdx, rcx
mov rcx, qword [rsp + 0x58]
call fcn.140040c10
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x50]
call fcn.140040380
xor byte [rax], 0xbc
xor byte [rax + 1], 0xbc
xor byte [rax + 2], 0xbc
xor byte [rax + 3], 0xbc
xor byte [rax + 4], 0xbc
xor byte [rax + 5], 0xbc
xor byte [rax + 6], 0xbc
xor byte [rax + 7], 0xbc
xor byte [rax + 8], 0xbc
xor byte [rax + 9], 0xbc
xor byte [rax + 0xa], 0xbc
xor byte [rax + 0xb], 0xbc
xor byte [rax + 0xc], 0xbc
mov rdx, rax
call fcn.140040c10
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3