Function at 0x140007620
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14010e098]
xor rax, rsp
mov qword [rbp + 0x40], rax
xor r12d, r12d
mov dword [rsp + 0x40], r12d
cmp byte [0x14010fb60], r12b
je 0x140008abd
mov ecx, dword [0x14010fe60]
test ecx, ecx
je 0x1400083e7
cmp ecx, 1
jne 0x140008abd
mov qword [rbp], r12
movss xmm0, dword [0x14010e0f0]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x14010e0f4]
movss dword [rsp + 0x44], xmm1
lea r8, [rbp]
lea edx, [rcx + 1]
lea rcx, [rsp + 0x40]
call fcn.14001d7d0
movss xmm0, dword [0x14010e0f8]
movss dword [rbp], xmm0
movss xmm1, dword [0x14010e0fc]
movss dword [rbp + 4], xmm1
xor edx, edx
lea rcx, [rbp]
call fcn.14001d870
mov rax, qword [0x14010f3a0]
or dword [rax + 0x1dc0], 0x40
mov dword [rax + 0x1e20], 0x3f800000
mov byte [rbp - 0x30], reloc.WS2_32.dll_WSAStartup
mov al, Ordinal_60
mov cl, 0x37
mov dl, 0x5e
mov r8b, reloc.WLDAP32.dll_Ordinal_35
mov r9b, Ordinal_32
mov r10b, reloc.WS2_32.dll_select
mov r11b, 0xa
mov bl, reloc.WLDAP32.dll_Ordinal_22
mov dil, 1
mov sil, 0x5d
movzx r14d, bl
mov r15b, listen
movzx r12d, bl
xor r13d, r13d
xor al, 0x73
mov byte [rbp - 0x2f], al
xor cl, 0x73
mov byte [rbp - 0x2e], cl
xor dl, 0x73
mov byte [rbp - 0x2d], dl
xor r8b, 0x73
mov byte [rbp - 0x2c], r8b
xor r9b, 0x73
mov byte [rbp - 0x2b], r9b
xor r10b, 0x73
mov byte [rbp - 0x2a], r10b
xor r11b, 0x73
mov byte [rbp - 0x29], r11b
xor bl, 0x73
mov byte [rbp - 0x28], bl
xor dil, 0x73
mov byte [rbp - 0x27], dil
xor sil, 0x73
mov byte [rbp - 0x26], sil
xor r14b, 0x73
mov byte [rbp - 0x25], r14b
xor r15b, 0x73
mov byte [rbp - 0x24], r15b
xor r12b, 0x73
mov byte [rbp - 0x23], r12b
mov byte [rbp - 0x22], r13b
lea rcx, [rbp - 0x2f]
call fcn.140005bf0
mov r8d, eax
xor edx, edx
lea ecx, [rdx + 0x38]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r13, rax
mov qword [rbp + 0x10], rax
mov r8d, Ordinal_301
lea rdx, [0x14010fb60]
lea rcx, str.UdClient_Loadert.me_udclient
call fcn.1400195b0
mov dword [rsp + 0x40], 0x438e0000
mov dword [rsp + 0x44], 0x43250000
mov byte [rbp], 0x48
mov al, 0x2b
mov cl, reloc.WLDAP32.dll_Ordinal_32
mov dl, reloc.WLDAP32.dll_Ordinal_33
mov r8b, 0x24
mov r9b, Ordinal_45
mov r10b, 0x79
xor r11d, r11d
xor al, 0x48
mov byte [rbp + 1], al
xor cl, 0x48
mov byte [rbp + 2], cl
xor dl, 0x48
mov byte [rbp + 3], dl
xor r8b, 0x48
mov byte [rbp + 4], r8b
xor r9b, 0x48
mov byte [rbp + 5], r9b
xor r10b, 0x48
mov byte [rbp + 6], r10b
mov byte [rbp + 7], r11b
mov rcx, qword [0x14010f3a0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
xor r8d, r8d
lea rdx, [rbp + 1]
mov rcx, qword [rcx + 0x1d18]
call fcn.140010b40
mov edx, eax
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov r9b, 1
lea r8, [rsp + 0x40]
lea rcx, [rbp + 1]
call fcn.140016510
lea rdx, [0x14010f428]
lea rcx, [rbp + 0x20]
call fcn.140005a90
nop
cmp qword [rbp + 0x30], r12
je 0x1400078fb
lea rcx, [rbp + 0x20]
call fcn.14000a410
mov r11, rax
movdqa xmm1, xmmword [0x1400fbca0]
movdqu xmmword [rbp - 0x30], xmm1
mov dl, 2
mov r8b, Ordinal_26
mov r9b, Ordinal_30
mov r10b, 0x4b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd ecx, xmm0
movd eax, xmm1
xor cl, al
mov byte [rbp - 0x2f], cl
xor byte [rbp - 0x2e], al
xor byte [rbp - 0x2d], al
xor byte [rbp - 0x2c], al
xor byte [rbp - 0x2b], al
xor byte [rbp - 0x2a], al
xor byte [rbp - 0x29], al
xor byte [rbp - 0x28], al
xor byte [rbp - 0x27], al
xor byte [rbp - 0x26], al
xor byte [rbp - 0x25], al
xor byte [rbp - 0x24], al
xor byte [rbp - 0x23], al
xor byte [rbp - 0x22], al
xor byte [rbp - 0x21], al
xor dl, al
mov byte [rbp - 0x20], dl
xor r8b, al
mov byte [rbp - 0x1f], r8b
xor r9b, al
mov byte [rbp - 0x1e], r9b
xor r10b, al
mov byte [rbp - 0x1d], r10b
mov byte [rbp - 0x1c], r12b
mov rdx, r11
lea rcx, [rbp - 0x2f]
call fcn.14004c450
jmp 0x140007966
movdqa xmm1, xmmword [0x1400fbc90]
movdqu xmmword [rbp - 0x30], xmm1
mov dl, 0x5b
mov r8b, 0x5a
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x2f], al
xor byte [rbp - 0x2e], cl
xor byte [rbp - 0x2d], cl
xor byte [rbp - 0x2c], cl
xor byte [rbp - 0x2b], cl
xor byte [rbp - 0x2a], cl
xor byte [rbp - 0x29], cl
xor byte [rbp - 0x28], cl
xor byte [rbp - 0x27], cl
xor byte [rbp - 0x26], cl
xor byte [rbp - 0x25], cl
xor byte [rbp - 0x24], cl
xor byte [rbp - 0x23], cl
xor byte [rbp - 0x22], cl
xor byte [rbp - 0x21], cl
xor dl, cl
mov byte [rbp - 0x20], dl
xor r8b, cl
mov byte [rbp - 0x1f], r8b
mov byte [rbp - 0x1e], 0
lea rcx, [rbp - 0x2f]
call fcn.14004c450
mov dword [rbp], 0x42480000
mov dword [rbp + 4], 0x41a00000
mov byte [rsp + 0x40], 0x7b
mov al, 0x37
mov cl, reloc.WS2_32.dll_sendto
mov dl, reloc.WLDAP32.dll_Ordinal_26
mov r8b, Ordinal_32
xor r9d, r9d
xor al, 0x7b
mov byte [rsp + 0x41], al
xor cl, 0x7b
mov byte [rsp + 0x42], cl
xor dl, 0x7b
mov byte [rsp + 0x43], dl
xor r8b, 0x7b
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
xor r8d, r8d
lea rdx, [rbp]
lea rcx, [rsp + 0x41]
call fcn.14004cd70
test al, al
je 0x140008266
cmp qword [rbp + 0x30], 0
je 0x140007e01
movdqa xmm1, xmmword [0x1400fb8c0]
movdqu xmmword [rbp - 0x30], xmm1
mov dl, reloc.WS2_32.dll_ntohs
mov r8b, 7
mov r9b, Ordinal_32
mov r10b, 0x42
movzx r11d, r10b
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x2f], al
xor byte [rbp - 0x2e], cl
xor byte [rbp - 0x2d], cl
xor byte [rbp - 0x2c], cl
xor byte [rbp - 0x2b], cl
xor byte [rbp - 0x2a], cl
xor byte [rbp - 0x29], cl
xor byte [rbp - 0x28], cl
xor byte [rbp - 0x27], cl
xor byte [rbp - 0x26], cl
xor byte [rbp - 0x25], cl
xor byte [rbp - 0x24], cl
xor byte [rbp - 0x23], cl
xor byte [rbp - 0x22], cl
xor byte [rbp - 0x21], cl
xor dl, cl
mov byte [rbp - 0x20], dl
xor r8b, cl
mov byte [rbp - 0x1f], r8b
xor r9b, cl
mov byte [rbp - 0x1e], r9b
xor r10b, cl
mov byte [rbp - 0x1d], r10b
xor r11b, cl
mov byte [rbp - 0x1c], r11b
xor bl, cl
mov byte [rbp - 0x1b], bl
mov byte [rbp - 0x1a], 0
lea rcx, [rbp - 0x2f]
call fcn.14004c450
test r13, r13
jne 0x140007ded
movdqa xmm1, xmmword [0x1400fbd60]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x1400fbc70]
movdqa xmmword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x1400fbcb0]
movdqa xmmword [rsp + 0x70], xmm3
movdqa xmm4, xmmword [0x1400fbcc0]
movdqa xmmword [rbp - 0x80], xmm4
movdqa xmm5, xmmword [0x1400fbcd0]
movdqa xmmword [rbp - 0x70], xmm5
movdqa xmm6, xmmword [0x1400fbcf0]
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmm7, xmmword [0x1400fb8e0]
movdqa xmmword [rbp - 0x50], xmm7
mov dl, 0x4a
mov r8b, 0x34
mov r9b, 0x6b
movzx r10d, r8b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x70], al
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
movd eax, xmm4
xor al, cl
mov byte [rbp - 0x80], al
xor byte [rbp - 0x7f], cl
xor byte [rbp - 0x7e], cl
xor byte [rbp - 0x7d], cl
xor byte [rbp - 0x7c], cl
xor byte [rbp - 0x7b], cl
xor byte [rbp - 0x7a], cl
xor byte [rbp - 0x79], cl
xor byte [rbp - 0x78], cl
xor byte [rbp - 0x77], cl
xor byte [rbp - 0x76], cl
xor byte [rbp - 0x75], cl
xor byte [rbp - 0x74], cl
xor byte [rbp - 0x73], cl
xor byte [rbp - 0x72], cl
xor byte [rbp - 0x71], cl
movd eax, xmm5
xor al, cl
mov byte [rbp - 0x70], al
xor byte [rbp - 0x6f], cl
xor byte [rbp - 0x6e], cl
xor byte [rbp - 0x6d], cl
xor byte [rbp - 0x6c], cl
xor byte [rbp - 0x6b], cl
xor byte [rbp - 0x6a], cl
xor byte [rbp - 0x69], cl
xor byte [rbp - 0x68], cl
xor byte [rbp - 0x67], cl
xor byte [rbp - 0x66], cl
xor byte [rbp - 0x65], cl
xor byte [rbp - 0x64], cl
xor byte [rbp - 0x63], cl
xor byte [rbp - 0x62], cl
xor byte [rbp - 0x61], cl
movd eax, xmm6
xor al, cl
mov byte [rbp - 0x60], al
xor byte [rbp - 0x5f], cl
xor byte [rbp - 0x5e], cl
xor byte [rbp - 0x5d], cl
xor byte [rbp - 0x5c], cl
xor byte [rbp - 0x5b], cl
xor byte [rbp - 0x5a], cl
xor byte [rbp - 0x59], cl
xor byte [rbp - 0x58], cl
xor byte [rbp - 0x57], cl
xor byte [rbp - 0x56], cl
xor byte [rbp - 0x55], cl
xor byte [rbp - 0x54], cl
xor byte [rbp - 0x53], cl
xor byte [rbp - 0x52], cl
xor byte [rbp - 0x51], cl
movd eax, xmm7
xor al, cl
mov byte [rbp - 0x50], al
xor byte [rbp - 0x4f], cl
xor byte [rbp - 0x4e], cl
xor byte [rbp - 0x4d], cl
xor byte [rbp - 0x4c], cl
xor byte [rbp - 0x4b], cl
xor byte [rbp - 0x4a], cl
xor byte [rbp - 0x49], cl
xor byte [rbp - 0x48], cl
xor byte [rbp - 0x47], cl
xor byte [rbp - 0x46], cl
xor byte [rbp - 0x45], cl
xor byte [rbp - 0x44], cl
xor byte [rbp - 0x43], cl
xor byte [rbp - 0x42], cl
xor byte [rbp - 0x41], cl
xor dl, cl
mov byte [rbp - 0x40], dl
xor r8b, cl
mov byte [rbp - 0x3f], r8b
xor r9b, cl
mov byte [rbp - 0x3e], r9b
xor r10b, cl
mov byte [rbp - 0x3d], r10b
mov byte [rbp - 0x3c], r13b
movdqa xmm1, xmmword [0x1400fb8f0]
movdqu xmmword [rbp - 0x30], xmm1
movdqa xmm2, xmmword [0x1400fbd40]
movdqu xmmword [rbp - 0x20], xmm2
mov cl, 7
mov r8b, reloc.WLDAP32.dll_Ordinal_32
mov r9b, Ordinal_60
mov r10b, reloc.WS2_32.dll_sendto
mov r11b, 0x25
movzx ebx, r11b
mov dil, 0x7b
mov sil, Ordinal_50
mov r14b, reloc.WLDAP32.dll_Ordinal_45
movzx r15d, sil
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp - 0x2f], al
xor byte [rbp - 0x2e], dl
xor byte [rbp - 0x2d], dl
xor byte [rbp - 0x2c], dl
xor byte [rbp - 0x2b], dl
xor byte [rbp - 0x2a], dl
xor byte [rbp - 0x29], dl
xor byte [rbp - 0x28], dl
xor byte [rbp - 0x27], dl
xor byte [rbp - 0x26], dl
xor byte [rbp - 0x25], dl
xor byte [rbp - 0x24], dl
xor byte [rbp - 0x23], dl
xor byte [rbp - 0x22], dl
xor byte [rbp - 0x21], dl
movd eax, xmm2
xor al, dl
mov byte [rbp - 0x20], al
xor byte [rbp - 0x1f], dl
xor byte [rbp - 0x1e], dl
xor byte [rbp - 0x1d], dl
xor byte [rbp - 0x1c], dl
xor byte [rbp - 0x1b], dl
xor byte [rbp - 0x1a], dl
xor byte [rbp - 0x19], dl
xor byte [rbp - 0x18], dl
xor byte [rbp - 0x17], dl
xor byte [rbp - 0x16], dl
xor byte [rbp - 0x15], dl
xor byte [rbp - 0x14], dl
xor byte [rbp - 0x13], dl
xor byte [rbp - 0x12], dl
xor byte [rbp - 0x11], dl
xor cl, dl
mov byte [rbp - 0x10], cl
xor r8b, dl
mov byte [rbp - 0xf], r8b
xor r9b, dl
mov byte [rbp - 0xe], r9b
xor r10b, dl
mov byte [rbp - 0xd], r10b
xor r11b, dl
mov byte [rbp - 0xc], r11b
xor bl, dl
mov byte [rbp - 0xb], bl
xor dil, dl
mov byte [rbp - 0xa], dil
xor sil, dl
mov byte [rbp - 9], sil
xor r14b, dl
mov byte [rbp - 8], r14b
xor r15b, dl
mov byte [rbp - 7], r15b
mov byte [rbp - 6], r13b
mov byte [rsp + 0x40], 0x5a
mov al, 0x35
mov cl, 0x2a
mov dl, 0x3f
mov r8b, 0x34
xor r9d, r9d
xor al, 0x5a
mov byte [rsp + 0x41], al
xor cl, 0x5a
mov byte [rsp + 0x42], cl
xor dl, 0x5a
mov byte [rsp + 0x43], dl
xor r8b, 0x5a
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x51]
lea r8, [rbp - 0x2f]
lea rdx, [rsp + 0x41]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
test r13, r13
je 0x140007ea9
mov byte [rbp - 0x30], 0x25
mov al, 0x6d
mov cl, 0x61
mov dl, 8
mov r8b, 0x75
mov r9b, 0x49
mov r10b, 0x44
mov r11b, 0x5c
mov bl, 0x40
mov dil, 0x57
mov sil, listen
movzx r14d, bl
mov r15b, 0x5d
movzx r12d, bl
xor r13d, r13d
xor al, 0x25
mov byte [rbp - 0x2f], al
xor cl, 0x25
mov byte [rbp - 0x2e], cl
xor dl, 0x25
mov byte [rbp - 0x2d], dl
xor r8b, 0x25
mov byte [rbp - 0x2c], r8b
xor r9b, 0x25
mov byte [rbp - 0x2b], r9b
xor r10b, 0x25
mov byte [rbp - 0x2a], r10b
xor r11b, 0x25
mov byte [rbp - 0x29], r11b
xor bl, 0x25
mov byte [rbp - 0x28], bl
xor dil, 0x25
mov byte [rbp - 0x27], dil
xor sil, 0x25
mov byte [rbp - 0x26], sil
xor r14b, 0x25
mov byte [rbp - 0x25], r14b
xor r15b, 0x25
mov byte [rbp - 0x24], r15b
xor r12b, 0x25
mov byte [rbp - 0x23], r12b
mov byte [rbp - 0x22], r13b
lea rcx, [rbp - 0x2f]
call fcn.140005cb0
mov r13, qword [rbp + 0x10]
xor r12d, r12d
lea rdx, [0x1400064b0]
lea rcx, [rbp]
call fcn.14000a9a0
nop
lea rcx, [rbp]
call fcn.140003df0
test r13, r13
jne 0x140008252
movdqa xmm1, xmmword [0x1400fbc80]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x1400fbce0]
movdqa xmmword [rsp + 0x60], xmm2
movdqa xmm3, xmmword [0x1400fbc50]
movdqa xmmword [rsp + 0x70], xmm3
movdqa xmm4, xmmword [0x1400fbc30]
movdqa xmmword [rbp - 0x80], xmm4
movdqa xmm5, xmmword [0x1400fbc40]
movdqa xmmword [rbp - 0x70], xmm5
movdqa xmm6, xmmword [0x1400fbc60]
movdqa xmmword [rbp - 0x60], xmm6
movdqa xmm7, xmmword [str._TS_E]
movdqa xmmword [rbp - 0x50], xmm7
mov dl, 0x6d
mov r8b, reloc.WS2_32.dll_send
mov r9b, 0x4c
movzx r10d, r8b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x60], al
xor byte [rsp + 0x61], cl
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
movd eax, xmm3
xor al, cl
mov byte [rsp + 0x70], al
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
movd eax, xmm4
xor al, cl
mov byte [rbp - 0x80], al
xor byte [rbp - 0x7f], cl
xor byte [rbp - 0x7e], cl
xor byte [rbp - 0x7d], cl
xor byte [rbp - 0x7c], cl
xor byte [rbp - 0x7b], cl
xor byte [rbp - 0x7a], cl
xor byte [rbp - 0x79], cl
xor byte [rbp - 0x78], cl
xor byte [rbp - 0x77], cl
xor byte [rbp - 0x76], cl
xor byte [rbp - 0x75], cl
xor byte [rbp - 0x74], cl
xor byte [rbp - 0x73], cl
xor byte [rbp - 0x72], cl
xor byte [rbp - 0x71], cl
movd eax, xmm5
xor al, cl
mov byte [rbp - 0x70], al
xor byte [rbp - 0x6f], cl
xor byte [rbp - 0x6e], cl
xor byte [rbp - 0x6d], cl
xor byte [rbp - 0x6c], cl
xor byte [rbp - 0x6b], cl
xor byte [rbp - 0x6a], cl
xor byte [rbp - 0x69], cl
xor byte [rbp - 0x68], cl
xor byte [rbp - 0x67], cl
xor byte [rbp - 0x66], cl
xor byte [rbp - 0x65], cl
xor byte [rbp - 0x64], cl
xor byte [rbp - 0x63], cl
xor byte [rbp - 0x62], cl
xor byte [rbp - 0x61], cl
movd eax, xmm6
xor al, cl
mov byte [rbp - 0x60], al
xor byte [rbp - 0x5f], cl
xor byte [rbp - 0x5e], cl
xor byte [rbp - 0x5d], cl
xor byte [rbp - 0x5c], cl
xor byte [rbp - 0x5b], cl
xor byte [rbp - 0x5a], cl
xor byte [rbp - 0x59], cl
xor byte [rbp - 0x58], cl
xor byte [rbp - 0x57], cl
xor byte [rbp - 0x56], cl
xor byte [rbp - 0x55], cl
xor byte [rbp - 0x54], cl
xor byte [rbp - 0x53], cl
xor byte [rbp - 0x52], cl
xor byte [rbp - 0x51], cl
movd eax, xmm7
xor al, cl
mov byte [rbp - 0x50], al
xor byte [rbp - 0x4f], cl
xor byte [rbp - 0x4e], cl
xor byte [rbp - 0x4d], cl
xor byte [rbp - 0x4c], cl
xor byte [rbp - 0x4b], cl
xor byte [rbp - 0x4a], cl
xor byte [rbp - 0x49], cl
xor byte [rbp - 0x48], cl
xor byte [rbp - 0x47], cl
xor byte [rbp - 0x46], cl
xor byte [rbp - 0x45], cl
xor byte [rbp - 0x44], cl
xor byte [rbp - 0x43], cl
xor byte [rbp - 0x42], cl
xor byte [rbp - 0x41], cl
xor dl, cl
mov byte [rbp - 0x40], dl
xor r8b, cl
mov byte [rbp - 0x3f], r8b
xor r9b, cl
mov byte [rbp - 0x3e], r9b
xor r10b, cl
mov byte [rbp - 0x3d], r10b
mov byte [rbp - 0x3c], r13b
movdqa xmm1, xmmword [0x1400fbd30]
movdqu xmmword [rbp - 0x30], xmm1
movdqa xmm2, xmmword [0x1400fba40]
movdqu xmmword [rbp - 0x20], xmm2
mov cl, 0x40
mov r8b, 0x67
mov r9b, 0x7c
mov r10b, 0x53
mov r11b, 0x62
movzx ebx, r11b
mov dil, reloc.WLDAP32.dll_Ordinal_60
mov sil, 0x77
mov r14b, 0x6a
movzx r15d, sil
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp - 0x2f], al
xor byte [rbp - 0x2e], dl
xor byte [rbp - 0x2d], dl
xor byte [rbp - 0x2c], dl
xor byte [rbp - 0x2b], dl
xor byte [rbp - 0x2a], dl
xor byte [rbp - 0x29], dl
xor byte [rbp - 0x28], dl
xor byte [rbp - 0x27], dl
xor byte [rbp - 0x26], dl
xor byte [rbp - 0x25], dl
xor byte [rbp - 0x24], dl
xor byte [rbp - 0x23], dl
xor byte [rbp - 0x22], dl
xor byte [rbp - 0x21], dl
movd eax, xmm2
xor al, dl
mov byte [rbp - 0x20], al
xor byte [rbp - 0x1f], dl
xor byte [rbp - 0x1e], dl
xor byte [rbp - 0x1d], dl
xor byte [rbp - 0x1c], dl
xor byte [rbp - 0x1b], dl
xor byte [rbp - 0x1a], dl
xor byte [rbp - 0x19], dl
xor byte [rbp - 0x18], dl
xor byte [rbp - 0x17], dl
xor byte [rbp - 0x16], dl
xor byte [rbp - 0x15], dl
xor byte [rbp - 0x14], dl
xor byte [rbp - 0x13], dl
xor byte [rbp - 0x12], dl
xor byte [rbp - 0x11], dl
xor cl, dl
mov byte [rbp - 0x10], cl
xor r8b, dl
mov byte [rbp - 0xf], r8b
xor r9b, dl
mov byte [rbp - 0xe], r9b
xor r10b, dl
mov byte [rbp - 0xd], r10b
xor r11b, dl
mov byte [rbp - 0xc], r11b
xor bl, dl
mov byte [rbp - 0xb], bl
xor dil, dl
mov byte [rbp - 0xa], dil
xor sil, dl
mov byte [rbp - 9], sil
xor r14b, dl
mov byte [rbp - 8], r14b
xor r15b, dl
mov byte [rbp - 7], r15b
mov byte [rbp - 6], r13b
mov byte [rsp + 0x40], Ordinal_45
mov al, 0x44
mov cl, 0x5b
mov dl, Ordinal_79
mov r8b, 0x45
xor r9d, r9d
xor al, 0x2b
mov byte [rsp + 0x41], al
xor cl, 0x2b
mov byte [rsp + 0x42], cl
xor dl, 0x2b
mov byte [rsp + 0x43], dl
xor r8b, 0x2b
mov byte [rsp + 0x44], r8b
mov byte [rsp + 0x45], r9b
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], r12
lea r9, [rsp + 0x51]
lea r8, [rbp - 0x2f]
lea rdx, [rsp + 0x41]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movss xmm1, dword [0x1400fb784]
xorps xmm0, xmm0
call fcn.14001e5d0
mov dword [rbp], 0x42c80000
mov dword [rbp + 4], 0x41a00000
mov byte [rbp + 0x10], reloc.WS2_32.dll_WSACleanup
mov al, reloc.WLDAP32.dll_Ordinal_33
mov cl, 4
mov dl, reloc.WS2_32.dll_recv
mov r8b, reloc.WS2_32.dll_setsockopt
xor r9b, r9b
mov r10b, reloc.WS2_32.dll_recvfrom
mov r11b, 0x54
movzx ebx, dl
mov dil, Ordinal_26
movzx esi, dil
xor r14d, r14d
xor al, 0x74
mov byte [rbp + 0x11], al
xor cl, 0x74
mov byte [rbp + 0x12], cl
xor dl, 0x74
mov byte [rbp + 0x13], dl
xor r8b, 0x74
mov byte [rbp + 0x14], r8b
xor r9b, 0x74
mov byte [rbp + 0x15], r9b
xor r10b, 0x74
mov byte [rbp + 0x16], r10b
xor r11b, 0x74
mov byte [rbp + 0x17], r11b
xor bl, 0x74
mov byte [rbp + 0x18], bl
xor dil, 0x74
mov byte [rbp + 0x19], dil
xor sil, 0x74
mov byte [rbp + 0x1a], sil
mov byte [rbp + 0x1b], r14b
xor r8d, r8d
lea rdx, [rbp]
lea rcx, [rbp + 0x11]
call fcn.14004cd70
test al, al
je 0x1400083d3
test r13, r13
je 0x1400083ab
mov byte [rbp - 0x30], 0x6a
mov al, Ordinal_35
mov cl, reloc.WLDAP32.dll_Ordinal_46
mov dl, 0x47
mov r8b, Ordinal_60
mov r9b, 6
mov r10b, listen
mov r11b, reloc.WS2_32.dll_send
mov bl, reloc.WS2_32.dll_ntohs
mov dil, Ordinal_26
mov sil, 0x44
movzx r14d, bl
mov r15b, reloc.WS2_32.dll_select
movzx r12d, bl
xor r13d, r13d
xor al, 0x6a
mov byte [rbp - 0x2f], al
xor cl, 0x6a
mov byte [rbp - 0x2e], cl
xor dl, 0x6a
mov byte [rbp - 0x2d], dl
xor r8b, 0x6a
mov byte [rbp - 0x2c], r8b
xor r9b, 0x6a
mov byte [rbp - 0x2b], r9b
xor r10b, 0x6a
mov byte [rbp - 0x2a], r10b
xor r11b, 0x6a
mov byte [rbp - 0x29], r11b
xor bl, 0x6a
mov byte [rbp - 0x28], bl
xor dil, 0x6a
mov byte [rbp - 0x27], dil
xor sil, 0x6a
mov byte [rbp - 0x26], sil
xor r14b, 0x6a
mov byte [rbp - 0x25], r14b
xor r15b, 0x6a
mov byte [rbp - 0x24], r15b
xor r12b, 0x6a
mov byte [rbp - 0x23], r12b
mov byte [rbp - 0x22], r13b
lea rcx, [rbp - 0x2f]
call fcn.140005cb0
lea rdx, [0x1400064b0]
lea rcx, [rbp + 0x10]
call fcn.14000c1f0
nop
lea rcx, [rbp + 0x10]
call fcn.140003df0
nop
cmp dword [rbp + 0x18], 0
je 0x1400083d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call fcn.140016720
nop
lea rcx, [rbp + 0x20]
call fcn.140009c70
jmp 0x140008ab8
call fcn.140006e00
mov qword [rbp], r12
movss xmm1, dword [0x14010e0f0]
movss dword [rbp + 0x10], xmm1
movss xmm0, dword [0x14010e0f4]
movss dword [rbp + 0x14], xmm0
lea r8, [rbp]
mov edx, 2
lea rcx, [rbp + 0x10]
call fcn.14001d7d0
movss xmm0, dword [0x14010e0f8]
movss dword [rbp + 0x10], xmm0
movss xmm1, dword [0x14010e0fc]
movss dword [rbp + 0x14], xmm1
xor edx, edx
lea rcx, [rbp + 0x10]
call fcn.14001d870
mov rax, qword [0x14010f3a0]
or dword [rax + 0x1dc0], 0x40
mov dword [rax + 0x1e20], 0x3f800000
mov r8d, Ordinal_301
lea rdx, [0x14010fb60]
lea rcx, str.UdClient_Loadert.me_udclient
call fcn.1400195b0
mov dword [rbp + 0x10], 0x438e0000
mov dword [rbp + 0x14], 0x43250000
mov byte [rbp], reloc.WLDAP32.dll_Ordinal_46
mov al, 0x4d
mov cl, 0x46
mov dl, 0x47
mov r8b, 0x42
mov r9b, 0x4a
mov r10b, Ordinal_32
xor r11d, r11d
xor al, 0x2e
mov byte [rbp + 1], al
xor cl, 0x2e
mov byte [rbp + 2], cl
xor dl, 0x2e
mov byte [rbp + 3], dl
xor r8b, 0x2e
mov byte [rbp + 4], r8b
xor r9b, 0x2e
mov byte [rbp + 5], r9b
xor r10b, 0x2e
mov byte [rbp + 6], r10b
mov byte [rbp + 7], r11b
mov rcx, qword [0x14010f3a0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
xor r8d, r8d
lea rdx, [rbp + 1]
mov rcx, qword [rcx + 0x1d18]
call fcn.140010b40
mov edx, eax
mov dword [rsp + 0x20], r12d
mov r9b, 1
lea r8, [rbp + 0x10]
lea rcx, [rbp + 1]
call fcn.140016510
mov rax, qword [0x14010f3a0]
or dword [rax + 0x1e58], 1
mov dword [rax + 0x1e5c], 0x43860000
mov byte [rbp], 0x7a
mov al, 0x2f
mov cl, 9
mov dl, Ordinal_32
mov r8b, 8
mov r9b, reloc.WS2_32.dll_sendto
mov r10b, reloc.WLDAP32.dll_Ordinal_27
mov r11b, reloc.WS2_32.dll_socket
movzx ebx, dl
xor edi, edi
xor al, 0x7a
mov byte [rbp + 1], al
xor cl, 0x7a
mov byte [rbp + 2], cl
xor dl, 0x7a
mov byte [rbp + 3], dl
xor r8b, 0x7a
mov byte [rbp + 4], r8b
xor r9b, 0x7a
mov byte [rbp + 5], r9b
xor r10b, 0x7a
mov byte [rbp + 6], r10b
xor r11b, 0x7a
mov byte [rbp + 7], r11b
xor bl, 0x7a
mov byte [rbp + 8], bl
mov byte [rbp + 9], dil
mov byte [rbp - Ordinal_50], 0x30
mov al, reloc.WS2_32.dll_send
movzx ecx, al
mov dl, 0x45
mov r8b, 0x43
mov r9b, 0x55
mov r10b, 0x42
mov r11b, 0x5e
mov bl, 0x51
mov dil, 0x5d
movzx esi, r9b
xor al, 0x30
mov byte [rbp - 0x2f], al
xor cl, 0x30
mov byte [rbp - 0x2e], cl
xor dl, 0x30
mov byte [rbp - 0x2d], dl
xor r8b, 0x30
mov byte [rbp - 0x2c], r8b
xor r9b, 0x30
mov byte [rbp - 0x2b], r9b
xor r10b, 0x30
mov byte [rbp - 0x2a], r10b
xor r11b, 0x30
mov byte [rbp - 0x29], r11b
xor bl, 0x30
mov byte [rbp - 0x28], bl
xor dil, 0x30
mov byte [rbp - 0x27], dil
xor sil, 0x30
mov byte [rbp - 0x26], sil
mov byte [rbp - 0x25], r12b
mov qword [rbp + 0x10], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x14010fb61]
lea rdx, [rbp + 1]
lea rcx, [rbp - 0x2f]
call fcn.140051500
mov rax, qword [0x14010f3a0]
or dword [rax + 0x1e58], 1
mov dword [rax + 0x1e5c], 0x43860000
mov byte [rbp], Ordinal_50
mov al, 0x60
mov cl, 0x51
mov dl, 0x43
movzx r8d, dl
mov r9b, 0x47
mov r10b, 0x5f
mov r11b, 0x42
mov bl, 0x54
xor edi, edi
xor al, 0x30
mov byte [rbp + 1], al
xor cl, 0x30
mov byte [rbp + 2], cl
xor dl, 0x30
mov byte [rbp + 3], dl
xor r8b, 0x30
mov byte [rbp + 4], r8b
xor r9b, 0x30
mov byte [rbp + 5], r9b
xor r10b, 0x30
mov byte [rbp + 6], r10b
xor r11b, 0x30
mov byte [rbp + 7], r11b
xor bl, 0x30
mov byte [rbp + 8], bl
mov byte [rbp + 9], dil
mov byte [rbp - 0x30], gethostname
mov al, reloc.WS2_32.dll_setsockopt
movzx ecx, al
mov dl, 0x46
mov r8b, 0x57
mov r9b, 0x45
movzx r10d, r9b
mov r11b, 0x41
mov bl, 0x59
mov dil, 0x44
mov sil, 0x52
xor al, 0x36
mov byte [rbp - 0x2f], al
xor cl, 0x36
mov byte [rbp - 0x2e], cl
xor dl, 0x36
mov byte [rbp - 0x2d], dl
xor r8b, 0x36
mov byte [rbp - 0x2c], r8b
xor r9b, 0x36
mov byte [rbp - 0x2b], r9b
xor r10b, 0x36
mov byte [rbp - 0x2a], r10b
xor r11b, 0x36
mov byte [rbp - 0x29], r11b
xor bl, 0x36
mov byte [rbp - 0x28], bl
xor dil, 0x36
mov byte [rbp - 0x27], dil
xor sil, 0x36
mov byte [rbp - 0x26], sil
mov byte [rbp - 0x25], r12b
mov qword [rbp + 0x10], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x14010fc60]
lea rdx, [rbp + 1]
lea rcx, [rbp - 0x2f]
call fcn.140051500
mov dword [rbp + 0x10], 0x43860000
mov dword [rbp + 0x14], 0x41a00000
mov byte [rbp], WSAGetLastError
mov al, reloc.WLDAP32.dll_Ordinal_33
mov cl, 2
mov dl, 0xa
mov r8b, 4
mov r9b, 3
xor r10d, r10d
xor al, 0x6d
mov byte [rbp + 1], al
xor cl, 0x6d
mov byte [rbp + 2], cl
xor dl, 0x6d
mov byte [rbp + 3], dl
xor r8b, 0x6d
mov byte [rbp + 4], r8b
xor r9b, 0x6d
mov byte [rbp + 5], r9b
mov byte [rbp + 6], r10b
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 1]
call fcn.14004cd70
test al, al
je 0x1400087a9
mov byte [0x14010f390], 1
lea rdx, [0x140006b20]
lea rcx, [rbp - 0x30]
call fcn.14000c1f0
nop
lea rcx, [rbp - 0x30]
call fcn.140003e60
nop
cmp dword [rbp - 0x28], 0
je 0x1400087a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov dword [rbp + 0x10], 0x43860000
mov dword [rbp + 0x14], 0x41a00000
mov byte [rbp - 0x30], 0x34
mov al, 0x76
mov cl, 0x41
mov dl, 0x4d
mov r8b, reloc.WS2_32.dll_sendto
mov r9b, 0x58
mov r10b, 0x5d
mov r11b, 0x57
mov bl, 0x51
mov dil, 0x5a
mov sil, 0x47
movzx r14d, bl
xor r15d, r15d
xor al, 0x34
mov byte [rbp - 0x2f], al
xor cl, 0x34
mov byte [rbp - 0x2e], cl
xor dl, 0x34
mov byte [rbp - 0x2d], dl
xor r8b, 0x34
mov byte [rbp - 0x2c], r8b
xor r9b, 0x34
mov byte [rbp - 0x2b], r9b
xor r10b, 0x34
mov byte [rbp - 0x2a], r10b
xor r11b, 0x34
mov byte [rbp - 0x29], r11b
xor bl, 0x34
mov byte [rbp - 0x28], bl
xor dil, 0x34
mov byte [rbp - 0x27], dil
xor sil, 0x34
mov byte [rbp - 0x26], sil
xor r14b, 0x34
mov byte [rbp - 0x25], r14b
mov byte [rbp - 0x24], r15b
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x2f]
call fcn.14004cd70
test al, al
je 0x140008918
movdqa xmm1, xmmword [0x1400fb890]
movdqu xmmword [rbp + 0x20], xmm1
mov dl, 2
mov r8b, reloc.WS2_32.dll_listen
mov r9b, 8
mov r10b, 4
mov r11b, reloc.WS2_32.dll_ntohs
mov bl, reloc.WS2_32.dll_setsockopt
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x21], al
xor byte [rbp + 0x22], cl
xor byte [rbp + 0x23], cl
xor byte [rbp + 0x24], cl
xor byte [rbp + 0x25], cl
xor byte [rbp + 0x26], cl
xor byte [rbp + 0x27], cl
xor byte [rbp + 0x28], cl
xor byte [rbp + 0x29], cl
xor byte [rbp + 0x2a], cl
xor byte [rbp + 0x2b], cl
xor byte [rbp + 0x2c], cl
xor byte [rbp + 0x2d], cl
xor byte [rbp + 0x2e], cl
xor byte [rbp + 0x2f], cl
xor dl, cl
mov byte [rbp + 0x30], dl
xor r8b, cl
mov byte [rbp + 0x31], r8b
xor r9b, cl
mov byte [rbp + 0x32], r9b
xor r10b, cl
mov byte [rbp + 0x33], r10b
xor r11b, cl
mov byte [rbp + 0x34], r11b
xor bl, cl
mov byte [rbp + 0x35], bl
mov byte [rbp + 0x36], r15b
mov byte [rbp], 0x7a
mov al, reloc.WS2_32.dll_setsockopt
mov cl, 0xa
mov dl, Ordinal_32
mov r8b, reloc.WS2_32.dll_sendto
xor r9d, r9d
xor al, 0x7a
mov byte [rbp + 1], al
xor cl, 0x7a
mov byte [rbp + 2], cl
xor dl, 0x7a
mov byte [rbp + 3], dl
xor r8b, 0x7a
mov byte [rbp + 4], r8b
mov byte [rbp + 5], r9b
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x21]
lea rdx, [rbp + 1]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp byte [0x14010f6e0], r15b
jne 0x1400089d5
mov byte [0x14010f391], 1
mov byte [rbp], reloc.WS2_32.dll_sendto
mov al, reloc.WS2_32.dll_WSASetLastError
mov cl, 0x75
mov dl, 0x60
movzx r8d, cl
mov r9b, Ordinal_60
mov r10b, 0x61
movzx r11d, al
xor ebx, ebx
xor al, 0x14
mov byte [rbp + 1], al
xor cl, 0x14
mov byte [rbp + 2], cl
xor dl, 0x14
mov byte [rbp + 3], dl
xor r8b, 0x14
mov byte [rbp + 4], r8b
xor r9b, 0x14
mov byte [rbp + 5], r9b
xor r10b, 0x14
mov byte [rbp + 6], r10b
xor r11b, 0x14
mov byte [rbp + 7], r11b
mov byte [rbp + 8], bl
lea rax, [rbp + 1]
mov qword [rbp + 0x10], rax
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x30]
call fcn.14000bf50
nop
lea rdx, [0x14010f448]
lea rcx, [rbp + 0x20]
call fcn.140009a50
mov dword [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_32
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x20]
call fcn.140004040
lea rcx, [rbp + 0x20]
call fcn.140005910
nop
lea rcx, [rbp + 0x20]
call fcn.140004360
nop
lea rcx, [rbp - 0x30]
call fcn.140004360
cmp byte [0x14010f390], 0
je 0x140008a70
mov dword [rbp + 0x10], 0x428c0000
mov dword [rbp + 0x14], 0x42d20000
lea rcx, [rbp + 0x10]
call fcn.14001e680
mov byte [rbp - 0x30], 0x58
mov al, 0x34
mov cl, 0x37
mov dl, reloc.WS2_32.dll_gethostname
mov r8b, reloc.WLDAP32.dll_Ordinal_60
mov r9b, Ordinal_50
mov r10b, 0x36
mov r11b, 0x3f
mov bl, 0x76
movzx edi, bl
movzx esi, bl
xor r14d, r14d
xor al, 0x58
mov byte [rbp - 0x2f], al
xor cl, 0x58
mov byte [rbp - 0x2e], cl
xor dl, 0x58
mov byte [rbp - 0x2d], dl
xor r8b, 0x58
mov byte [rbp - 0x2c], r8b
xor r9b, 0x58
mov byte [rbp - 0x2b], r9b
xor r10b, 0x58
mov byte [rbp - 0x2a], r10b
xor r11b, 0x58
mov byte [rbp - 0x29], r11b
xor bl, 0x58
mov byte [rbp - 0x28], bl
xor dil, 0x58
mov byte [rbp - 0x27], dil
xor sil, 0x58
mov byte [rbp - 0x26], sil
mov byte [rbp - 0x25], r14b
lea rcx, [rbp - 0x2f]
call fcn.14004c450
jmp 0x140008ab3
cmp byte [0x14010f391], 0
je 0x140008ab3
mov dword [rbp + 0x10], 0x429e0000
mov dword [rbp + 0x14], 0x42c80000
lea rcx, [rbp + 0x10]
call fcn.14001e680
lea rcx, [0x14010f6e8]
call fcn.14000a410
movaps xmm0, xmmword [0x1400fba20]
movups xmmword [rbp - 0x30], xmm0
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.14004c550
call fcn.140016720
call fcn.14001c7d0
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.1400bce20
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret