Function at 0x1406c91c0
Capabilities:
Create process on windows
Encode data using xor
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x118]
sub rsp, 0x1f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movups xmm3, xmmword [0x1407564f8]
movups xmmword [rsp + 0x4a], xmm3
movups xmm0, xmmword [0x140756508]
movups xmmword [rsp + 0x5a], xmm0
mov eax, dword [0x140756518]
mov dword [rsp + 0x6a], eax
movzx eax, word [0x14075651c]
mov word [rsp + 0x6e], ax
xor ebx, ebx
mov r8d, ebx
movdqa xmm4, xmmword [0x14075fc80]
movdqa xmm5, xmmword [0x14075fc70]
movdqa xmm8, xmmword [0x14075fcf0]
movdqa xmm7, xmmword [str.4444]
movdqa xmm6, xmmword [0x14075fd30]
mov r15d, dword [reloc.WS2_32.dll_accept]
cmp r15d, 2
jl 0x1406c93f1
movdqa xmm2, xmm5
punpckldq xmm2, xmm5
pmuldq xmm2, xmm6
movdqa xmm0, xmm5
punpckhdq xmm0, xmm5
pmuldq xmm0, xmm6
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm1, xmm2
psrld xmm1, 0x1f
paddd xmm1, xmm2
pmulld xmm1, xmm7
movdqa xmm0, xmm5
psubd xmm0, xmm1
pshufhw xmm0, xmm0, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmm8
movq xmm1, xmm3
xorps xmm2, xmm1
movq qword [rsp + 0x4a], xmm2
movdqa xmm2, xmm4
punpckldq xmm2, xmm4
pmuldq xmm2, xmm6
movdqa xmm0, xmm4
punpckhdq xmm0, xmm4
pmuldq xmm0, xmm6
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm1, xmm2
psrld xmm1, 0x1f
paddd xmm1, xmm2
pmulld xmm1, xmm7
movdqa xmm0, xmm4
psubd xmm0, xmm1
pshufhw xmm0, xmm0, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmm8
movq xmm0, qword [rsp + 0x52]
xorps xmm2, xmm0
movq qword [rsp + 0x52], xmm2
movdqa xmm3, xmmword [0x14075fc90]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmm8
movq xmm0, qword [rsp + 0x5a]
xorps xmm2, xmm0
movq qword [rsp + 0x5a], xmm2
movdqa xmm3, xmmword [0x14075fca0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshufhw xmm0, xmm3, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmm8
movq xmm0, qword [rsp + 0x62]
xorps xmm2, xmm0
movq qword [rsp + 0x62], xmm2
mov r8d, reloc.WS2_32.dll_recv
mov eax, r8d
lea r9, [rsp + 0x4a]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x35
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x13
jl 0x1406c9400
lea r10, [rsp + 0x4a]
movups xmm9, xmmword [0x1407565d0]
movups xmmword [rsp + 0x3a], xmm9
pextrw eax, xmm9, 7
test ax, ax
je 0x1406c955d
mov r8d, ebx
cmp r15d, 2
jl 0x1406c9524
movdqa xmm1, xmm5
punpckldq xmm1, xmm5
pmuldq xmm1, xmm6
movdqa xmm0, xmm5
punpckhdq xmm0, xmm5
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm5, xmm0
pshufhw xmm0, xmm5, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm8
paddw xmm3, xmm2
movq xmm1, xmm9
xorps xmm3, xmm1
movq qword [rsp + 0x3a], xmm3
movdqa xmm1, xmm4
punpckldq xmm1, xmm4
pmuldq xmm1, xmm6
movdqa xmm0, xmm4
punpckhdq xmm0, xmm4
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm4, xmm0
pshufhw xmm0, xmm4, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm8
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x42]
xorps xmm3, xmm0
movq qword [rsp + 0x42], xmm3
jmp 0x1406c955d
lea r9, [rsp + 0x3a]
nop dword [rax]
mov eax, 0x4ec4ec4f
mul r8d
shr edx, 4
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x35
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 8
jl 0x1406c9530
movsd xmm0, qword [0x140756838]
movsd qword [rsp + 0x30], xmm0
movzx eax, word [reloc.WS2_32.dll_gethostname]
mov ecx, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x30], cx
xor word [rsp + 0x32], 0x36
xor word [rsp + 0x34], 0x37
xor word [rsp + 0x36], 0x38
xor ax, 0x39
mov word [rsp + 0x38], ax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9, r10
lea r8, [rsp + 0x3a]
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, str.powershell__Confirm_SecureBootUEFI____C:_secureboot_status.txt
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm7, xmmword [str.v_fkKYNNXP_5]
movups xmmword [rsp + 0x4a], xmm7
movups xmm0, xmmword [0x1407565a8]
movups xmmword [rsp + 0x5a], xmm0
movups xmm1, xmmword [0x1407565b8]
movups xmmword [rsp + 0x6a], xmm1
movzx eax, word [0x1407565c8]
mov word [rsp + 0x7a], ax
mov r8d, ebx
cmp r15d, 2
jl 0x1406c9885
movdqa xmm4, xmmword [0x14075fd30]
movdqa xmm5, xmmword [str.4444]
movdqa xmm6, xmmword [0x14075fcf0]
movdqa xmm2, xmmword [0x14075fc70]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm1, xmm7
xorps xmm3, xmm1
movq qword [rsp + 0x4a], xmm3
movdqa xmm2, xmmword [0x14075fc80]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x52]
xorps xmm3, xmm0
movq qword [rsp + 0x52], xmm3
movdqa xmm2, xmmword [0x14075fc90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x5a]
xorps xmm3, xmm0
movq qword [rsp + 0x5a], xmm3
movdqa xmm2, xmmword [0x14075fca0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x62]
xorps xmm3, xmm0
movq qword [rsp + 0x62], xmm3
movdqa xmm2, xmmword [0x14075fcb0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x6a]
xorps xmm3, xmm0
movq qword [rsp + 0x6a], xmm3
movdqa xmm2, xmmword [0x14075fcc0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rsp + 0x72]
xorps xmm3, xmm0
movq qword [rsp + 0x72], xmm3
mov r8d, Ordinal_26
mov eax, r8d
lea r9, [rsp + 0x4a]
lea r9, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x35
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x19
jl 0x1406c98a0
lea rdx, [rsp + 0x4a]
lea rcx, [rbp - 0x60]
call fcn.1406d0590
nop
cmp qword [rbp + 0x30], 0
je 0x1406c9e60
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], bx
xor r12b, r12b
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x60]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
movzx r8d, ax
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.1406d57e0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x1406c9aa9
mov ecx, 0x54
mov r13d, 0x46
nop dword [rax]
nop word [rax + rax]
movsd xmm0, qword [0x14075fbb0]
movsd qword [rsp + 0x30], xmm0
movzx eax, word [reloc.WS2_32.dll_gethostname]
mov word [rsp + 0x30], cx
xor word [rsp + 0x32], 0x36
xor word [rsp + 0x34], 0x37
xor word [rsp + 0x36], 0x38
xor ax, 0x39
mov word [rsp + 0x38], ax
lea rcx, [rsp + 0x30]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1406c99a1
lea rcx, [rbp - 0x80]
mov rdi, qword [rbp - 0x80]
mov rsi, qword [rbp - 0x68]
cmp rsi, 7
cmova rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x30]
mov r14, qword [rbp - 0x70]
mov rdx, r14
call fcn.1406d4240
cmp rax, 0xffffffffffffffff
jne 0x1406c9aa6
movsd xmm0, qword [0x14075f040]
movsd qword [rsp + 0x3a], xmm0
mov eax, dword [0x14075f048]
mov dword [rsp + 0x42], eax
cmp word [0x14075f04a], 0
je 0x1406c9a25
mov word [rsp + 0x3a], r13w
xor word [rsp + 0x3c], 0x36
xor word [rsp + 0x3e], 0x37
xor word [rsp + 0x40], 0x38
xor word [rsp + 0x42], 0x39
xor word [rsp + 0x44], 0x3a
lea rcx, [rsp + 0x3a]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1406c9a31
lea rcx, [rbp - 0x80]
cmp rsi, 7
cmova rcx, rdi
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x3a]
mov rdx, r14
call fcn.1406d4240
cmp rax, 0xffffffffffffffff
jne 0x1406c9aa9
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x60]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
movzx r8d, ax
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.1406d57e0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
mov ecx, 0x54
jne 0x1406c9960
jmp 0x1406c9aa9
mov r12b, 1
lea rcx, [rbp - 0x50]
call fcn.1406d2a20
test rax, rax
jne 0x1406c9ad4
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x60]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool____ptr64]
test r12b, r12b
je 0x1406c9e0d
lea rdx, [rsp + 0x3a]
call fcn.1406c9f20
mov r8, rax
movzx eax, word [rax + 0xa]
test ax, ax
je 0x1406c9b19
xor word [r8], 0x35
xor word [r8 + 2], 0x36
xor word [r8 + 4], 0x37
xor word [r8 + 6], 0x38
xor word [r8 + 8], 0x39
xor ax, 0x3a
mov word [r8 + 0xa], ax
lea rdx, [rsp + 0x4a]
call fcn.1406c9ee0
mov r11, rax
cmp word [rax + 0x34], 0
je 0x1406c9df0
cmp r15d, 2
jl 0x1406c9db4
movdqa xmm4, xmmword [0x14075fd30]
movdqa xmm5, xmmword [str.4444]
movdqa xmm6, xmmword [0x14075fcf0]
movdqa xmm2, xmmword [0x14075fc70]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rax]
xorps xmm3, xmm0
movq qword [rax], xmm3
movdqa xmm2, xmmword [0x14075fc80]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rax + 8]
xorps xmm3, xmm0
movq qword [rax + 8], xmm3
movdqa xmm2, xmmword [0x14075fc90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rax + 0x10]
xorps xmm3, xmm0
movq qword [rax + 0x10], xmm3
movdqa xmm2, xmmword [0x14075fca0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rax + 0x18]
xorps xmm3, xmm0
movq qword [rax + 0x18], xmm3
movdqa xmm2, xmmword [0x14075fcb0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rax + 0x20]
xorps xmm3, xmm0
movq qword [rax + 0x20], xmm3
movdqa xmm2, xmmword [0x14075fcc0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm6
paddw xmm3, xmm2
movq xmm0, qword [rax + 0x28]
xorps xmm3, xmm0
movq qword [rax + 0x28], xmm3
mov ebx, Ordinal_26
mov eax, ebx
lea r10, [r11 + rax*2]
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, bx
sub ax, cx
add ax, 0x35
xor word [r10], ax
inc ebx
lea r10, [r10 + 2]
cmp ebx, 0x1b
jl 0x1406c9dc0
mov r9d, reloc.WS2_32.dll_recv
mov rdx, r11
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x1406c9e50
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1406c9e4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1406c9e4b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140741b18
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], bx
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x50]
call fcn.1406d0520
lea rcx, [rbp - 0x48]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret