Function at 0x140039c60
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x90
xor esi, esi
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rsi
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x68], rsi
nop dword [rax]
inc r8
cmp byte [rcx + r8], sil
jne 0x140039c90
mov rdx, rcx
lea rcx, [rsp + 0x50]
call fcn.1400464e0
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [0x1401a49c0]
call fcn.140062a80
lea rbx, [0x1401a3688]
mov rdi, rax
cmp rbx, rax
je 0x140039d45
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x140039d08
mov rcx, qword [0x1401a3688]
inc rdx
cmp rdx, 0x1000
jb 0x140039d03
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140039d7c
mov rcx, r8
call fcn.14004d314
mov qword [0x1401a3698], rsi
mov qword [reloc.WS2_32.dll_ntohs], 0xf
mov byte [0x1401a3688], sil
movups xmm0, xmmword [rdi]
movups xmmword [0x1401a3688], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [0x1401a3698], xmm1
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], sil
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x140039d88
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039d83
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039d83
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004d314
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.1400450f0
mov r8, rax
lea rdx, [rsp + 0x50]
lea rcx, [0x1401a49c0]
call fcn.140059320
mov rdi, rax
lea rax, [0x1401a47c0]
cmp rax, rdi
je 0x140039e31
mov rcx, qword [0x1401a47c0]
test rcx, rcx
je 0x140039e06
mov rdx, qword [0x1401a47d0]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140039def
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140039e64
mov rcx, r8
call fcn.14004d314
xorps xmm0, xmm0
mov qword [0x1401a47d0], rsi
movdqu xmmword [0x1401a47c0], xmm0
mov rax, qword [rdi]
mov qword [0x1401a47c0], rax
mov rax, qword [rdi + 8]
mov qword [0x1401a47c8], rax
mov rax, qword [rdi + 0x10]
mov qword [0x1401a47d0], rax
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rsi
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140039e70
mov rdx, qword [rsp + 0x60]
mov rax, rcx
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140039e6b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039e6b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004d314
call fcn.1400474c0
mov rdi, rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x140039e8c
mov byte [0x1401a461e], 1
mov rdx, qword [0x1401a47c0]
mov rcx, rdi
call fcn.14004b0f0
test rax, rax
jne 0x140039eaf
mov rcx, rdi
mov byte [0x1401a461e], 1
call fcn.1400478e0
mov rcx, rdi
call fcn.1400478e0
lea rcx, str.start_cmd__c__rmdir__s__q_C:Users_username_AppDataLocalTemp___exit
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword [0x1401a47d8]
cmp rax, qword [0x1401a47e0]
je 0x140039edb
mov qword [0x1401a47e0], rax
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
mov rax, rbx
mov qword [0x1401a3698], rsi
xorps xmm0, xmm0
cmova rax, qword [0x1401a3688]
mov byte [rax], sil
mov rcx, qword [0x1401a47c0]
mov rdx, qword [0x1401a47d0]
mov qword [0x1401a47d0], rsi
movdqu xmmword [0x1401a47c0], xmm0
test rcx, rcx
je 0x140039f46
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140039f41
mov rdi, qword [rcx - 8]
add rdx, 0x27
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140039f8c
mov rcx, rdi
call fcn.14004d314
mov rdi, qword [0x1401a47c0]
lea r11, [rsp + 0x90]
mov rcx, qword [0x1401a47c8]
xor eax, eax
mov rsi, qword [r11 + 0x20]
sub rcx, rdi
rep stosb byte [rdi], al
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
mov rcx, qword [0x1401a3698]
cmova rbx, qword [0x1401a3688]
mov rdi, rbx
mov rbx, qword [r11 + 0x10]
rep stosb byte [rdi], al
mov rsp, r11
pop rdi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3