Function at 0x140011960
Capabilities:
Contain obfuscated stackstrings
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x7b0
mov rax, qword [0x1401b3fd8]
xor rax, rsp
mov qword [rsp + 0x7a8], rax
xor r13d, r13d
mov dword [rsp + 0x30], r13d
mov byte [rsp + 0x3e0], r13b
xor edx, edx
lea rcx, [rsp + 0x3e8]
call fcn.140008060
nop
lea rax, str.TZDll
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 5
xor r8d, r8d
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x38]
call fcn.140003660
mov r14d, 0x80000
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rcx, qword [rsp + 0x38]
call fcn.1400b7334
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x140012e6e
lea rcx, [rsp + 0x38]
call fcn.14000cbe0
test bl, bl
jne 0x140011a3c
movzx edx, byte [rsp + 0x3e0]
lea rcx, [rsp + 0x3e8]
call fcn.14000d590
nop
jmp 0x140012e3c
lea rcx, [0x1401b6b60]
call fcn.14000cc50
mov r15, rax
mov qword [rsp + 0x120], rax
lea rcx, [0x1401b6b60]
call fcn.14000cc60
mov qword [rsp + 0x1f0], rax
movzx ebx, byte [rsp + 0x34]
movzx edi, byte [rsp + 0x34]
movzx esi, byte [rsp + 0x34]
cmp r15, rax
je 0x140012664
mov rcx, r15
call fcn.140005d70
mov qword [rsp + 0x2c0], rax
mov rcx, r15
call fcn.140005d60
lea rcx, [rsp + 0x2f0]
mov qword [rsp + 0x150], rcx
mov rdx, rax
lea rcx, [rsp + 0x2f0]
call fcn.140002800
mov r15, rax
lea rdx, str.token
lea rcx, [rsp + 0x3e0]
call fcn.140002f00
nop
mov rdx, r15
mov rcx, rax
call fcn.1400097a0
mov edx, 0x20
lea rcx, [rsp + 0x418]
call fcn.14000ce10
lea rax, [rsp + 0x300]
mov qword [rsp + 0x2e8], rax
mov dword [rsp + 0xa0], 0x61c1d31
mov dword [rsp + 0xa4], 0x5f061c17
mov dword [rsp + 0xa8], 0x17020b26
mov byte [rsp + 0xac], WSACleanup
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov r10d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], r10
mov byte [rsp + 0x68], 0
or r14d, 2
mov dword [rsp + 0x30], r14d
mov eax, reloc.WS2_32.dll_listen
mov qword [rsp + 0x78], rax
xor r9d, r9d
mov qword [rsp + 0x68], r9
mov dword [rsp + 0x70], r9d
mov word [rsp + 0x74], r9w
mov edx, r13d
nop dword [rax]
cmp edx, 0xd
jge 0x140011bbf
movsxd rcx, edx
cmp rcx, 0xd
jae 0x140012e86
movzx r8d, byte [rsp + rcx + 0xa0]
xor r8b, 0x72
cmp rax, rcx
jbe 0x140012e93
lea rax, [rsp + 0x68]
cmp r10, 0x10
cmovae rax, r9
mov byte [rax + rcx], r8b
inc edx
mov r10, qword [rsp + 0x80]
mov rax, qword [rsp + 0x78]
mov r9, qword [rsp + 0x68]
jmp 0x140011b70
lea rcx, [rsp + 0x68]
call fcn.14000d1a0
mov qword [rsp + 0x150], rax
movdqa xmm0, xmmword [0x1400f6e10]
movdqu xmmword [rsp + 0x100], xmm0
mov byte [rsp + 0x110], 0x7e
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
or r14d, 0x20
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, reloc.WS2_32.dll_recvfrom
movzx r8d, dil
mov edx, r9d
lea rcx, [rsp + 0x38]
call fcn.1400048d0
mov edx, r13d
nop dword [rax]
cmp edx, 0x11
jge 0x140011c73
movsxd rcx, edx
cmp rcx, 0x11
jae 0x140012e99
movzx r8d, byte [rsp + rcx + 0x100]
xor r8b, 0x7e
cmp qword [rsp + 0x48], rcx
jbe 0x140012ea6
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140011c30
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
mov qword [rsp + 0x100], rax
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x360]
call fcn.140002920
nop
mov dword [rsp + 0x88], 0x14031533
mov dword [rsp + 0x8c], 0x301274b
mov word [rsp + 0x90], 0x1208
mov byte [rsp + 0x92], 0x66
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
mov r10d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x178], r10
mov byte [rsp + 0x160], 0
or r14d, 0x40
mov dword [rsp + 0x30], r14d
mov eax, ntohs
mov qword [rsp + 0x170], rax
xor r9d, r9d
mov qword [rsp + 0x160], r9
mov dword [rsp + 0x168], r9d
mov edx, r13d
cmp edx, 0xb
jge 0x140011d70
movsxd rcx, edx
cmp rcx, 0xb
jae 0x140012eac
movzx r8d, byte [rsp + rcx + 0x88]
xor r8b, 0x66
cmp rax, rcx
jbe 0x140012eb9
lea rax, [rsp + 0x160]
cmp r10, 0x10
cmovae rax, r9
mov byte [rax + rcx], r8b
inc edx
mov r10, qword [rsp + 0x178]
mov rax, qword [rsp + 0x170]
mov r9, qword [rsp + 0x160]
jmp 0x140011d18
lea rcx, [rsp + 0x160]
call fcn.14000d1a0
mov qword [rsp + 0x100], rax
movdqa xmm0, xmmword [0x1400f7040]
movdqu xmmword [rsp + 0xc0], xmm0
mov dword [rsp + 0xd0], 0x4c7c5435
mov byte [rsp + 0xd4], 4
xorps xmm0, xmm0
movups xmmword [rsp + 0x128], xmm0
mov qword [rsp + 0x138], r13
mov qword [rsp + 0x140], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x128], 0
or r14d, 0x10
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, reloc.WS2_32.dll_setsockopt
movzx r8d, bl
mov edx, r9d
lea rcx, [rsp + 0x128]
call fcn.1400048d0
mov edx, r13d
nop dword [rax + rax]
cmp edx, 0x15
jge 0x140011e4f
movsxd rcx, edx
cmp rcx, 0x15
jae 0x140012ebf
movzx r8d, byte [rsp + rcx + 0xc0]
xor r8b, 4
cmp qword [rsp + 0x138], rcx
jbe 0x140012ecc
lea rax, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rax, qword [rsp + 0x128]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140011e00
lea rcx, [rsp + 0x128]
call fcn.14000d1a0
mov qword [rsp + 0x150], rax
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x3a0]
call fcn.140002920
nop
lea r8, [rsp + 0x3e0]
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x350]
call fcn.140007160
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x150], xmm0
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x300]
call fcn.140007240
mov r12, rax
lea rax, [rsp + 0x290]
mov qword [rsp + 0x150], rax
mov dword [rsp + 0x28], r13d
mov byte [rsp + 0x20], 0
mov r9b, 0x20
mov r8d, 0xffffffff
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x3e0]
call fcn.14000dc90
nop
lea r8, [rsp + 0x2e8]
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x330]
call fcn.140007160
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x290]
call fcn.1400073a0
mov r15, rax
movdqa xmm0, xmmword [0x1400f6fa0]
movdqa xmm1, xmmword [0x1400f6fb0]
movdqa xmm2, xmmword [0x1400f6fc0]
mov word [rsp + 0xf0], 0x3240
movups xmmword [rsp + 0x200], xmm0
movups xmmword [rsp + 0x210], xmm1
movups xmmword [rsp + 0x220], xmm2
movzx eax, word [rsp + 0xf0]
mov word [rsp + 0x230], ax
xorps xmm0, xmm0
movups xmmword [rsp + 0x270], xmm0
mov qword [rsp + 0x280], r13
mov qword [rsp + 0x288], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x270], 0
bts r14d, 8
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, 0x32
movzx r8d, sil
mov edx, r9d
lea rcx, [rsp + 0x270]
call fcn.1400048d0
mov edx, r13d
cmp edx, 0x32
jge 0x140012027
movsxd rcx, edx
cmp rcx, 0x32
jae 0x140012ed2
movzx r8d, byte [rsp + rcx + 0x200]
xor r8b, 0x32
cmp qword [rsp + 0x280], rcx
jbe 0x140012edf
lea rax, [rsp + 0x270]
cmp qword [rsp + 0x288], 0x10
cmovae rax, qword [rsp + 0x270]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140011fd8
lea rcx, [rsp + 0x270]
call fcn.14000d1a0
mov rdx, rax
lea rcx, [rsp + 0x310]
call fcn.140006e50
nop
lea r8, [rsp + 0x330]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x340]
call fcn.140007160
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x180]
call fcn.1400078a0
nop
mov r9, r12
mov r8, r15
mov rdx, rax
lea rcx, [rsp + 0x418]
call fcn.1400030a0
nop
lea r9, [fcn.140008b90]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rsp + 0x310]
call fcn.1400b7f1c
btr r14d, 8
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x270]
call fcn.140008b90
nop
lea r9, [fcn.140008b90]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rsp + 0x2c8]
call fcn.1400b7f1c
nop
lea r9, [fcn.140008c70]
mov edx, 0x40
lea r8d, [rdx - 0x3e]
lea rcx, [rsp + 0x360]
call fcn.1400b7f1c
and r14d, 0xffffffef
lea rcx, [rsp + 0x128]
call fcn.140008b90
and r14d, 0xffffffbf
lea rcx, [rsp + 0x160]
call fcn.140008b90
and r14d, 0xffffffdf
lea rcx, [rsp + 0x38]
call fcn.140008b90
and r14d, 0xfffffffd
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x68]
call fcn.140008b90
mov edx, 0x138
lea rcx, [rsp + 0x660]
call fcn.14000ce10
lea rdx, [rsp + 0x660]
lea rcx, [rsp + 0x418]
call fcn.14000f850
nop
lea rcx, [rsp + 0x678]
call fcn.14000f4b0
test al, al
jne 0x1400121e1
mov dword [rsp + 0xb0], 0x362b2b1c
mov dword [rsp + 0xb4], 0x360d792b
mov dword [rsp + 0xb8], 0x59373c32
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0xb0]
call fcn.14000d460
or r14d, 1
mov rcx, rax
call fcn.14000d1a0
mov rdx, rax
lea rcx, [rsp + 0x678]
call fcn.140002eb0
test al, al
jne 0x1400121e1
xor r15b, r15b
jmp 0x1400121e4
mov r15b, 1
test r14b, 1
je 0x1400121fb
and r14d, 0xfffffffe
lea rcx, [rsp + 0x2c8]
call fcn.140008b90
test r15b, r15b
je 0x140012304
movdqa xmm0, xmmword [0x1400f7030]
movdqa xmm1, xmmword [0x1400f7100]
mov dword [rsp + 0x1a0], 0x687f6865
mov dword [rsp + 0x1a4], 0x68792d69
mov dword [rsp + 0x1a8], 0xd237975
movups xmmword [rsp + 0x290], xmm0
movups xmmword [rsp + 0x2a0], xmm1
movsd xmm0, qword [rsp + 0x1a0]
movsd qword [rsp + 0x2b0], xmm0
mov eax, dword [rsp + 0x1a8]
mov dword [rsp + 0x2b8], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 0x10
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x2c]
lea rcx, [rsp + 0x38]
call fcn.140010a00
mov edx, r13d
nop
cmp edx, 0x2c
jge 0x1400122e3
movsxd rcx, edx
cmp rcx, 0x2c
jae 0x140012ee5
movzx r8d, byte [rsp + rcx + 0x290]
xor r8b, 0xd
cmp qword [rsp + 0x48], rcx
jbe 0x140012ef2
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x1400122a0
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
mov rcx, rax
call fcn.140050200
btr r14d, 0x10
lea rcx, [rsp + 0x38]
call fcn.140008b90
mov dword [rsp + 0x60], 0x33333b71
mov byte [rsp + 0x64], 0x5f
xorps xmm0, xmm0
movups xmmword [rsp + 0x128], xmm0
mov qword [rsp + 0x138], r13
mov qword [rsp + 0x140], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x128], 0
bts r14d, 0xb
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 5]
lea rcx, [rsp + 0x128]
call fcn.140010a00
mov edx, r13d
nop dword [rax]
cmp edx, 5
jge 0x1400123ac
movsxd rcx, edx
cmp rcx, 5
jae 0x140012ef8
movzx r8d, byte [rsp + rcx + 0x60]
xor r8b, 0x5f
cmp qword [rsp + 0x138], rcx
jbe 0x140012f02
lea rax, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rax, qword [rsp + 0x128]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012360
lea rcx, [rsp + 0x128]
call fcn.14000d1a0
mov r15, rax
mov dword [rsp + 0x58], 0x31190709
mov word [rsp + 0x5c], 0x7231
mov byte [rsp + 0x5e], 0x5d
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 0xc
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 7]
lea rcx, [rsp + 0x38]
call fcn.140010a00
mov edx, r13d
nop dword [rax]
cmp edx, 7
jge 0x140012450
movsxd rcx, edx
cmp rcx, 7
jae 0x140012f08
movzx r8d, byte [rsp + rcx + 0x58]
xor r8b, 0x5d
cmp qword [rsp + 0x48], rcx
jbe 0x140012f12
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012410
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
mov rdx, rax
mov r8, qword [rsp + 0x2c0]
lea rcx, [rsp + 0x2c8]
call fcn.140002fc0
nop
mov r8, r15
mov rdx, rax
lea rcx, [rsp + 0x3f0]
call fcn.140002f50
nop
lea rcx, [rsp + 0x2c8]
call fcn.140008b90
btr r14d, 0xc
lea rcx, [rsp + 0x38]
call fcn.140008b90
btr r14d, 0xb
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x128]
call fcn.140008b90
mov edx, 0x108
lea rcx, [rsp + 0x550]
call fcn.14000ce10
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
lea rdx, [rsp + 0x3f0]
lea rcx, [rsp + 0x550]
call fcn.1400069a0
nop
lea rcx, [rsp + 0x550]
call fcn.140010050
test al, al
jne 0x1400125e9
movdqa xmm0, xmmword [0x1400f7090]
movdqu xmmword [rsp + 0xc0], xmm0
mov dword [rsp + 0xd0], 0x797c7335
mov dword [rsp + 0xd4], 0x707d3570
mov word [rsp + 0xd8], 0x7067
mov byte [rsp + 0xda], reloc.WS2_32.dll_setsockopt
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], al
bts r14d, 0x11
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x1b]
lea rcx, [rsp + 0x38]
call fcn.140010a00
mov edx, r13d
nop word [rax + rax]
cmp edx, 0x1b
jge 0x1400125c3
movsxd rcx, edx
cmp rcx, 0x1b
jae 0x140012f18
movzx r8d, byte [rsp + rcx + 0xc0]
xor r8b, 0x15
cmp qword [rsp + 0x48], rcx
jbe 0x140012f25
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012580
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
mov rcx, rax
call fcn.140050200
btr r14d, 0x11
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x38]
call fcn.140008b90
lea rdx, [rsp + 0x678]
lea rcx, [rsp + 0x550]
call fcn.140002bd0
lea rcx, [rsp + 0x550]
call fcn.14000d330
nop
lea rcx, [rsp + 0x550]
call fcn.14000a280
nop
lea rcx, [rsp + 0x3f0]
call fcn.140008b90
nop
lea rcx, [rsp + 0x660]
call fcn.140009090
nop
lea rcx, [rsp + 0x418]
call fcn.140008650
mov r15, qword [rsp + 0x120]
add r15, 0x40
mov qword [rsp + 0x120], r15
mov rax, qword [rsp + 0x1f0]
jmp 0x140011a76
mov edx, 0x108
lea rcx, [rsp + 0x440]
call fcn.14000ce10
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, str.readme.md
lea rcx, [rsp + 0x440]
call fcn.1400069f0
nop
lea rcx, [rsp + 0x440]
call fcn.140010050
test al, al
jne 0x140012774
movdqa xmm0, xmmword [0x1400f7020]
movdqu xmmword [rsp + 0xc0], xmm0
mov dword [rsp + 0xd0], 0x626a6366
mov byte [rsp + 0xd4], 7
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], al
bts r14d, 0x12
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x15]
lea rcx, [rsp + 0x38]
call fcn.140010a00
mov edx, r13d
nop
cmp edx, 0x15
jge 0x140012753
movsxd rcx, edx
cmp rcx, 0x15
jae 0x140012f2b
movzx r8d, byte [rsp + rcx + 0xc0]
xor r8b, 7
cmp qword [rsp + 0x48], rcx
jbe 0x140012f38
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012710
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
mov rcx, rax
call fcn.140050200
btr r14d, 0x12
lea rcx, [rsp + 0x38]
call fcn.140008b90
movdqa xmm0, xmmword [0x1400f6ff0]
movdqa xmm1, xmmword [0x1400f6e60]
movdqa xmm2, xmmword [0x1400f6fe0]
movdqa xmm3, xmmword [0x1400f70e0]
movaps xmmword [rsp + 0x200], xmm0
movaps xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x220], xmm2
movaps xmmword [rsp + 0x230], xmm3
mov byte [rsp + 0x240], 0x76
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 0xd
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x41]
lea rcx, [rsp + 0x38]
call fcn.140010a00
mov edx, r13d
cmp edx, 0x41
jge 0x140012838
movsxd rcx, edx
cmp rcx, 0x41
jae 0x140012f3e
movzx r8d, byte [rsp + rcx + 0x200]
xor r8b, 0x76
cmp qword [rsp + 0x48], rcx
jbe 0x140012f4b
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x1400127f5
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140002bf0
btr r14d, 0xd
lea rcx, [rsp + 0x38]
call fcn.140008b90
movdqa xmm0, xmmword [0x1400f7010]
movdqu xmmword [rsp + 0xc0], xmm0
mov dword [rsp + 0xd0], 0x612b3434
mov dword [rsp + 0xd4], 0x50f6969
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 0xe
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x18]
lea rcx, [rsp + 0x38]
call fcn.140010a00
mov edx, r13d
cmp edx, 0x18
jge 0x140012904
movsxd rcx, edx
cmp rcx, 0x18
jae 0x140012f51
movzx r8d, byte [rsp + rcx + 0xc0]
xor r8b, 5
cmp qword [rsp + 0x48], rcx
jbe 0x140012f5e
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x1400128c1
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140002bf0
btr r14d, 0xe
lea rcx, [rsp + 0x38]
call fcn.140008b90
movdqa xmm0, xmmword [0x1400f6e50]
movdqa xmm1, xmmword [0x1400f6f30]
movdqa xmm2, xmmword [0x1400f7110]
movdqa xmm3, xmmword [0x1400f6fd0]
movaps xmmword [rsp + 0x200], xmm0
movaps xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x220], xmm2
movaps xmmword [rsp + 0x230], xmm3
mov byte [rsp + 0x240], 0x50
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
or r14d, 4
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, 0x41
movzx r8d, byte [rsp + 0x34]
mov edx, r9d
lea rcx, [rsp + 0x38]
call fcn.1400048d0
mov edx, r13d
nop word [rax + rax]
cmp edx, 0x41
jge 0x140012a03
movsxd rcx, edx
cmp rcx, 0x41
jae 0x140012f64
movzx r8d, byte [rsp + rcx + 0x200]
xor r8b, 0x50
cmp qword [rsp + 0x48], rcx
jbe 0x140012f71
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x1400129c0
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140002bf0
and r14d, 0xfffffffb
lea rcx, [rsp + 0x38]
call fcn.140008b90
movdqa xmm0, xmmword [0x1400f7080]
movdqa xmm1, xmmword [0x1400f70a0]
movdqa xmm2, xmmword [0x1400f70c0]
mov dword [rsp + 0x1b0], 0x1913777c
movups xmmword [rsp + 0x200], xmm0
movups xmmword [rsp + 0x210], xmm1
movups xmmword [rsp + 0x220], xmm2
mov eax, dword [rsp + 0x1b0]
mov dword [rsp + 0x230], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
or r14d, 8
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, gethostname
movzx r8d, byte [rsp + 0x34]
mov edx, r9d
lea rcx, [rsp + 0x38]
call fcn.1400048d0
mov edx, r13d
nop dword [rax]
cmp edx, 0x34
jge 0x140012b03
movsxd rcx, edx
cmp rcx, 0x34
jae 0x140012f77
movzx r8d, byte [rsp + rcx + 0x200]
xor r8b, 0x19
cmp qword [rsp + 0x48], rcx
jbe 0x140012f84
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012ac0
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140002bf0
and r14d, 0xfffffff7
lea rcx, [rsp + 0x38]
call fcn.140008b90
movdqa xmm0, xmmword [0x1400f6f20]
movdqa xmm1, xmmword [0x1400f6f10]
mov dword [rsp + 0x410], 0x6065614a
mov dword [rsp + 0x414], 0xf2e2f76
movups xmmword [rsp + 0x418], xmm0
movups xmmword [rsp + 0x428], xmm1
movsd xmm0, qword [rsp + 0x410]
movsd qword [rsp + 0x438], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 7
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, 0x28
movzx r8d, byte [rsp + 0x34]
mov edx, r9d
lea rcx, [rsp + 0x38]
call fcn.1400048d0
mov edx, r13d
nop dword [rax]
cmp edx, 0x28
jge 0x140012c03
movsxd rcx, edx
cmp rcx, 0x28
jae 0x140012f8a
movzx r8d, byte [rsp + rcx + 0x418]
xor r8b, 0xf
cmp qword [rsp + 0x48], rcx
jbe 0x140012f97
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012bc0
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140002bf0
btr r14d, 7
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x38]
call fcn.140008b90
lea rcx, [rsp + 0x440]
call fcn.14000d330
mov dword [rsp + 0x58], 0x77776167
mov dword [rsp + 0x5c], 0x34676771
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x70], r13
mov r9d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], r9
mov byte [rsp + 0x68], 0
bts r14d, 9
mov dword [rsp + 0x30], r14d
mov eax, 8
mov qword [rsp + 0x78], rax
xor r10d, r10d
mov qword [rsp + 0x68], r10
mov byte [rsp + 0x70], r10b
mov edx, r13d
cmp edx, 8
jge 0x140012ce6
movsxd rcx, edx
cmp rcx, 8
jae 0x140012f9d
movzx r8d, byte [rsp + rcx + 0x120]
xor r8b, 0x34
cmp rax, rcx
jbe 0x140012faa
lea rax, [rsp + 0x68]
cmp r9, 0x10
cmovae rax, r10
mov byte [rax + rcx], r8b
inc edx
mov r9, qword [rsp + 0x80]
mov rax, qword [rsp + 0x78]
mov r10, qword [rsp + 0x68]
jmp 0x140012c97
lea rcx, [rsp + 0x68]
call fcn.14000d1a0
mov rbx, rax
movdqa xmm0, xmmword [0x1400f7070]
movdqa xmm1, xmmword [0x1400f6e80]
movdqa xmm2, xmmword [0x1400f6e70]
movdqa xmm3, xmmword [0x1400f6ea0]
movdqa xmm4, xmmword [0x1400f6e90]
movdqa xmm5, xmmword [0x1400f70b0]
mov dword [rsp + 0x1e0], 0x2626287b
mov word [rsp + 0x1e4], 0x826
movaps xmmword [rsp + 0x200], xmm0
movaps xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x220], xmm2
movaps xmmword [rsp + 0x230], xmm3
movaps xmmword [rsp + 0x240], xmm4
movaps xmmword [rsp + 0x250], xmm5
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0x260], eax
movzx eax, word [rsp + 0x1e4]
mov word [rsp + 0x264], ax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 0xa
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x66]
lea rcx, [rsp + 0x38]
call fcn.140010a00
nop dword [rax]
cmp r13d, 0x66
jge 0x140012e02
movsxd rcx, r13d
cmp rcx, 0x66
jae 0x140012fb0
movzx edx, byte [rsp + rcx + 0x200]
xor dl, 8
cmp qword [rsp + 0x48], rcx
jbe 0x140012fbd
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], dl
inc r13d
jmp 0x140012dc0
lea rcx, [rsp + 0x38]
call fcn.14000d1a0
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rsp + 0x38]
call fcn.140008b90
nop
lea rcx, [rsp + 0x68]
call fcn.140008b90
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [rsp + 0x7a8]
xor rcx, rsp
call fcn.1400b8390
lea r11, [rsp + 0x7b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
shr rbx, 0x20
lea r8, [rsp + 0x38]
mov edx, ebx
lea rcx, str.create_directory
call fcn.14000c720
nop
lea rcx, [rsp + 0xa0]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x100]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x88]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0xc0]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x200]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x290]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x60]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x58]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0xc0]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0xc0]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x200]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0xc0]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x200]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x200]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x418]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x120]
call fcn.14000cdf0
call fcn.14000cdd0
nop
lea rcx, [rsp + 0x200]
call fcn.14000cdf0
call fcn.14000cdd0
int3