Function at 0x14055fe40
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x300]
sub rsp, 0x400
movaps xmmword [rsp + 0x3f0], xmm6
mov rax, qword [0x1406dc5c0]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
mov qword [rsp + 0x40], r8
mov r15, rcx
mov qword [rsp + 0x30], rcx
xor edi, edi
mov dword [rsp + 0x20], edi
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1d0]
call fcn.14063d484
mov qword [rbp - 0x30], rdi
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], dil
lea r8d, [rdi + 8]
lea rdx, str.SMTD.log
lea rcx, [rbp - 0x30]
call fcn.14054ed20
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x1d0]
call fcn.1405595f0
nop
lea rcx, [rbp - 0x30]
call fcn.14054ecc0
call fcn.140561030
mov r9, rax
cmp byte [rax + 0x49], dil
je 0x14055ff22
mov r8d, edi
movabs r10, 0x75eb2f5947b10f6b
nop
movzx ecx, r8b
and cl, 7
shl cl, 3
mov rax, r10
shr rax, cl
xor byte [r8 + r9], al
inc r8
cmp r8, 0x49
jb 0x14055ff00
mov byte [r9 + 0x49], 0
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x40], rdi
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [r9 + r8], 0
jne 0x14055ff40
mov rdx, r9
lea rcx, [rbp + 0x30]
call fcn.14054ed20
nop
call fcn.1405e42e0
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x14055ff9c
call fcn.140561140
mov rcx, rax
call fcn.140565e00
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.14054f7d0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x1d0]
call fcn.140559aa0
mov ecx, 0xfffffffa
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movdqa xmm0, xmmword [0x1406c2370]
mov dword [rbp - 0x60], 0x342426c0
mov dword [rbp - 0x5c], 0xa4d4c3ce
mov word [rbp - 0x58], 0x70d5
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov ecx, 0x5a4
mov eax, dword [rcx + r14]
mov ebx, 0x8d8
test al, 1
jne 0x14056003c
or eax, 1
mov dword [rcx + r14], eax
lea rcx, [rbx + r14]
mov byte [rcx + 0x1b], 1
lea rax, [rcx + 0x1a]
lea rdx, [rbp - 0x56]
cmp rcx, rdx
ja 0x140560016
lea rdx, [rbp - 0x70]
cmp rax, rdx
jb 0x140560016
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp - 0x60]
movsd qword [rcx + 0x10], xmm0
movzx eax, word [rbp - 0x58]
mov word [rcx + 0x18], ax
mov byte [rcx + 0x1a], 0x49
jmp 0x14056002f
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp - 0x60]
movsd qword [rcx + 0x10], xmm0
movzx eax, word [rbp - 0x58]
mov word [rcx + 0x18], ax
mov byte [rcx + 0x1a], 0x49
lea rcx, [0x1406433f0]
call fcn.14063c804
nop
lea r9, [rbx + r14]
cmp byte [r9 + 0x1b], 0
je 0x140560081
mov rdx, rdi
movabs r8, 0x8bbdb3af1b4949a3
nop dword [rax]
nop dword [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + r9], al
inc rdx
cmp rdx, 0x1b
jb 0x140560060
mov byte [r9 + 0x1b], 0
mov qword [rbp + 0xb0], rdi
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rbp + 0xc0], xmm0
mov byte [rbp + 0xb0], 0
mov r8, rsi
inc r8
cmp byte [r9 + r8], 0
jne 0x1405600a2
mov rdx, r9
lea rcx, [rbp + 0xb0]
call fcn.14054ed20
nop
movdqa xmm0, xmmword [0x1406c1d10]
mov dword [rbp - 0x60], 0x8bafacd6
mov ecx, 0x8cc
mov eax, dword [rcx + r14]
mov ebx, 0x898
test al, 1
jne 0x140560123
or eax, 1
mov dword [rcx + r14], eax
lea rcx, [rbx + r14]
mov byte [rcx + 0x14], 1
lea rax, [rcx + 0x13]
lea rdx, [rbp - 0x5d]
cmp rcx, rdx
ja 0x14056010d
lea rdx, [rbp - 0x70]
cmp rax, rdx
jb 0x14056010d
movups xmmword [rcx], xmm0
mov eax, dword [rbp - 0x60]
mov dword [rcx + 0x10], eax
jmp 0x140560116
movups xmmword [rcx], xmm0
mov eax, dword [rbp - 0x60]
mov dword [rcx + 0x10], eax
lea rcx, [0x1406433d0]
call fcn.14063c804
nop
lea r9, [rbx + r14]
cmp byte [r9 + 0x14], 0
je 0x140560161
mov rdx, rdi
movabs r8, 0x717f5d0f8b9d9be7
nop dword [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + r9], al
inc rdx
cmp rdx, 0x14
jb 0x140560140
mov byte [r9 + 0x14], 0
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x90], 0
mov r8, rsi
inc r8
cmp byte [r9 + r8], 0
jne 0x140560184
mov rdx, r9
lea rcx, [rbp + 0x90]
call fcn.14054ed20
nop
mov ecx, 0x54c
mov eax, dword [rcx + r14]
mov ebx, 0x840
test al, 1
jne 0x1405601dd
or eax, 1
mov dword [rcx + r14], eax
mov dword [rbx + r14 + 6], 0x191d80b
mov dword [rbx + r14], 0xf5938f2
mov word [rbx + r14 + 4], 0xd17a
lea rcx, [0x1406433b0]
call fcn.14063c804
nop
lea rdx, [rbx + r14]
cmp byte [rdx + 9], 0
je 0x14056020e
xor byte [rdx], 0x91
xor byte [rdx + 1], 0x57
xor byte [rdx + 2], 0x37
xor byte [rdx + 3], 0x7b
xor byte [rdx + 4], 0x1f
xor byte [rdx + 5], 0xbf
xor byte [rdx + 6], 0x7f
xor byte [rdx + 7], 0xe5
xor byte [rdx + 8], 0x91
mov byte [rdx + 9], 0
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], 0
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140560230
lea rcx, [rbp + 0x70]
call fcn.14054ed20
nop
mov rbx, rsi
nop word [rax + rax]
inc rbx
cmp byte [r15 + rbx], 0
jne 0x140560250
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r13, qword [rbp + 0x80]
sub rax, r13
cmp rax, rbx
jb 0x140561015
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0x10
cmovae rdx, qword [rbp + 0x70]
mov qword [rsp + 0x20], rdx
mov qword [rbp - 0x30], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
lea rax, [rbx + r13]
mov r15d, reloc.WS2_32.dll_ntohs
lea r12, [rbp - 0x30]
lea r8d, [r15 + 7]
cmp rax, r15
jbe 0x14056033b
mov r15, rax
or r15, 0xf
cmp r15, rcx
jbe 0x1405602c8
mov r15, rcx
jmp 0x1405602cf
cmp r15, r8
cmovb r15, r8
mov rcx, r15
add rcx, 1
cmovb rcx, rsi
cmp rcx, 0x1000
jb 0x14056031c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14056101b
mov rcx, rax
call fcn.14063c358
test rax, rax
je 0x140560315
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
lea rax, [rbx + r13]
mov rdx, qword [rsp + 0x20]
jmp 0x140560337
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140560334
call fcn.14063c358
mov r12, rax
lea rax, [rbx + r13]
mov rdx, qword [rsp + 0x20]
jmp 0x140560337
mov r12, rdi
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], r15
mov r8, r13
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r12 + r13]
mov r8, rbx
mov rdx, qword [rsp + 0x30]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbx + r13]
mov byte [r12 + rax], 0
movdqa xmm0, xmmword [0x1406c22c0]
mov dword [rbp - 0x60], 0x6f698984
mov ecx, 0x84c
mov eax, dword [rcx + r14]
mov ebx, 0x5a8
test al, 1
jne 0x1405603cf
or eax, 1
mov dword [rcx + r14], eax
lea rcx, [rbx + r14]
mov byte [rcx + 0x14], 1
lea rax, [rcx + 0x13]
lea rdx, [rbp - 0x5d]
cmp rcx, rdx
ja 0x1405603b9
lea rdx, [rbp - 0x70]
cmp rax, rdx
jb 0x1405603b9
movups xmmword [rcx], xmm0
mov eax, dword [rbp - 0x60]
mov dword [rcx + 0x10], eax
jmp 0x1405603c2
movups xmmword [rcx], xmm0
mov eax, dword [rbp - 0x60]
mov dword [rcx + 0x10], eax
lea rcx, [0x140643390]
call fcn.14063c804
nop
lea r9, [rbx + r14]
cmp byte [r9 + 0x14], 0
je 0x140560411
mov rdx, rdi
movabs r8, 0xdff77dcf6f49fdeb
nop word [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + r9], al
inc rdx
cmp rdx, 0x14
jb 0x1405603f0
mov byte [r9 + 0x14], 0
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x50], 0
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [r9 + r8], 0
jne 0x140560430
mov rdx, r9
lea rcx, [rbp + 0x50]
call fcn.14054ed20
nop
movdqa xmm0, xmmword [0x1406c27f0]
mov dword [rbp - 0x60], 0xa6a20f45
mov dword [rbp - 0x5c], 0xfab2714e
mov dword [rbp - 0x58], 0xb6a14c5b
mov word [rbp - 0x54], 0x6b40
mov ecx, 0x554
mov eax, dword [rcx + r14]
mov ebx, 0x878
test al, 1
jne 0x1405604ee
or eax, 1
mov dword [rcx + r14], eax
lea rcx, [rbx + r14]
mov byte [rcx + 0x1f], 1
lea rax, [rcx + 0x1e]
lea rdx, [rbp - 0x52]
cmp rcx, rdx
ja 0x1405604c2
lea rdx, [rbp - 0x70]
cmp rax, rdx
jb 0x1405604c2
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp - 0x60]
movsd qword [rcx + 0x10], xmm0
mov eax, dword [rbp - 0x58]
mov dword [rcx + 0x18], eax
movzx eax, word [rbp - 0x54]
mov word [rcx + 0x1c], ax
mov byte [rcx + 0x1e], 0xdb
jmp 0x1405604e1
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp - 0x60]
movsd qword [rcx + 0x10], xmm0
mov eax, dword [rbp - 0x58]
mov dword [rcx + 0x18], eax
movzx eax, word [rbp - 0x54]
mov word [rcx + 0x1c], ax
mov byte [rcx + 0x1e], 0xdb
lea rcx, [0x140643360]
call fcn.14063c804
nop
lea r13, [rbx + r14]
cmp byte [r13 + 0x1f], 0
je 0x140560531
mov rdx, rdi
movabs r8, 0x95db052fc5cb6335
nop word [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + r13], al
inc rdx
cmp rdx, 0x1f
jb 0x140560510
mov byte [r13 + 0x1f], 0
movabs r8, 0x7fffffffffffffff
mov rax, r8
mov r12, qword [rbp + 0x60]
sub rax, r12
mov rcx, qword [rbp + 0x40]
cmp rax, rcx
jb 0x140561021
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0x10
cmovae rdx, qword [rbp + 0x50]
mov qword [rsp + 0x28], rdx
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
cmovae rax, qword [rbp + 0x30]
mov qword [rsp + 0x38], rax
mov qword [rbp - 0x70], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
lea rax, [rcx + r12]
mov qword [rsp + 0x20], rax
mov ebx, reloc.WS2_32.dll_ntohs
lea r15, [rbp - 0x70]
cmp rax, rbx
jbe 0x14056062a
mov rbx, rax
or rbx, 0xf
cmp rbx, r8
jbe 0x1405605b0
mov rbx, r8
jmp 0x1405605bd
cmp rbx, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rcx
mov rcx, rbx
add rcx, 1
cmovb rcx, rsi
cmp rcx, 0x1000
jb 0x14056060a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140561027
mov rcx, rax
call fcn.14063c358
test rax, rax
je 0x140560603
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
mov rax, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
jmp 0x140560626
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140560623
call fcn.14063c358
mov r15, rax
mov rax, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
jmp 0x140560626
mov r15, rdi
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rbx
mov r8, r12
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r15 + r12]
mov r8, qword [rbp + 0x40]
mov rdx, qword [rsp + 0x38]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x20]
mov byte [r15 + rax], 0
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rdx, qword [rbp - 0x70]
xor ecx, ecx
call fcn.1405e46a0
mov rbx, rax
lea rcx, [rbp - 0x70]
call fcn.14054ecc0
mov rdx, r13
mov rcx, rbx
call fcn.1405e46a0
mov r13, rax
mov qword [rbp + 0x10], rdi
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
xor r8d, r8d
lea rdx, [0x140677ee0]
lea rcx, [rbp + 0x10]
call fcn.14054ed20
nop
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0xd0]
call fcn.14063d484
lea rax, [0x140678b08]
mov qword [rbp + 0xd0], rax
lea rax, [0x140678a48]
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x168]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x20], 7
xor r8d, r8d
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0xd0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0xd0], rax
mov rax, qword [rbp + 0xd0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0xcc], edx
lea rcx, [rbp + 0xe8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0x150], rdi
mov dword [rbp + 0x158], edi
call fcn.140561210
mov r10, rax
cmp byte [rax + 0x66], 0
je 0x1405607cd
lea r8, [rax + 1]
mov r9, rsi
sub r9, rax
movabs r11, 0x7f0965650969d1c5
nop dword [rax + rax]
lea ecx, [r8 + r9]
and cl, 7
shl cl, 3
mov rdx, r11
shr rdx, cl
xor byte [r8 - 1], dl
movzx ecx, r8b
sub cl, r10b
and cl, 7
shl cl, 3
mov rdx, r11
shr rdx, cl
xor byte [r8], dl
add r8, 2
lea rax, [r9 + r8]
cmp rax, 0x66
jb 0x140560790
mov byte [r10 + 0x66], 0
mov rdx, r10
lea rcx, [rbp + 0xe0]
call fcn.14055c050
mov rcx, rax
mov rdx, qword [rsp + 0x40]
call fcn.14055c050
mov rcx, rax
lea rdx, str._:
call fcn.14055c050
mov rbx, rax
lea rcx, [rsp + 0x70]
call fcn.14054f810
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140560814
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.14055cc70
mov r15, rax
movdqa xmm0, xmmword [0x1406c1c60]
mov dword [rbp - 0x60], 0x53dff97b
mov dword [rbp - 0x5c], 0x709dce68
mov dword [rbp - 0x58], 0x53c5fb29
mov ecx, 0xb4c
mov eax, dword [rcx + r14]
mov ebx, 0x858
test al, 1
jne 0x1405608b3
or eax, 1
mov dword [rcx + r14], eax
lea rcx, [rbx + r14]
mov byte [rcx + 0x1d], 1
lea rax, [rcx + 0x1c]
lea rdx, [rbp - 0x54]
cmp rcx, rdx
ja 0x14056088f
lea rdx, [rbp - 0x70]
cmp rax, rdx
jb 0x14056088f
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp - 0x60]
movsd qword [rcx + 0x10], xmm0
mov eax, dword [rbp - 0x58]
mov dword [rcx + 0x18], eax
mov byte [rcx + 0x1c], listen
jmp 0x1405608a6
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp - 0x60]
movsd qword [rcx + 0x10], xmm0
mov eax, dword [rbp - 0x58]
mov dword [rcx + 0x18], eax
mov byte [rcx + 0x1c], listen
lea rcx, [0x1406432f0]
call fcn.14063c804
nop
lea r8, [rbx + r14]
cmp byte [r8 + 0x1d], 0
je 0x1405608f1
mov rdx, rdi
movabs r9, 0x1ff1a10b71ffd95b
nop dword [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r9
shr rax, cl
xor byte [rdx + r8], al
inc rdx
cmp rdx, 0x1d
jb 0x1405608d0
mov byte [r8 + 0x1d], 0
mov rdx, r8
mov rcx, r15
call fcn.14055c050
mov edx, dword [0x1406dd8b4]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rbx, rax
call fcn.140561350
mov r10, rax
cmp byte [rax + 0x80], 0
je 0x140560982
lea r8, [rax + 1]
mov r9, rsi
sub r9, rax
movabs r11, 0xef379d67b145a519
nop dword [rax]
nop word [rax + rax]
lea ecx, [r8 + r9]
and cl, 7
shl cl, 3
mov rdx, r11
shr rdx, cl
xor byte [r8 - 1], dl
movzx ecx, r8b
sub cl, r10b
and cl, 7
shl cl, 3
mov rdx, r11
shr rdx, cl
xor byte [r8], dl
add r8, 2
lea rax, [r9 + r8]
cmp rax, 0x80
jb 0x140560940
mov byte [r10 + 0x80], 0
mov rdx, r10
mov rcx, rbx
call fcn.14055c050
mov rbx, rax
lea rcx, [rsp + 0x50]
call fcn.14054f8d0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x1405609a9
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.14055cc70
mov rbx, rax
call fcn.140561490
mov r9, rax
cmp byte [rax + 0xa9], 0
je 0x140560a08
mov r8, rdi
movabs r10, 0x75915999efed2135
nop word [rax + rax]
movzx ecx, r8b
and cl, 7
shl cl, 3
mov rax, r10
shr rax, cl
xor byte [r8 + r9], al
inc r8
cmp r8, 0xa9
jb 0x1405609e0
mov byte [r9 + 0xa9], 0
mov rdx, r9
mov rcx, rbx
call fcn.14055c050
mov rbx, rax
lea rcx, [rbp - 0x10]
call fcn.14054fb70
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140560a2e
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.14055cc70
mov rbx, rax
call fcn.1405616e0
mov r9, rax
cmp byte [rax + 0xa5], 0
je 0x140560a88
mov r8, rdi
movabs r10, 0xf9a5637305338b95
nop word [rax + rax]
movzx ecx, r8b
and cl, 7
shl cl, 3
mov rax, r10
shr rax, cl
xor byte [r8 + r9], al
inc r8
cmp r8, 0xa5
jb 0x140560a60
mov byte [r9 + 0xa5], 0
mov rdx, r9
mov rcx, rbx
call fcn.14055c050
mov rcx, rax
mov rdx, qword [rsp + 0x30]
call fcn.14055c050
mov rbx, rax
call fcn.140561920
mov r10, rax
cmp byte [rax + 0x48], 0
je 0x140560b0d
lea r8, [rax + 1]
mov r9, rsi
sub r9, rax
movabs r11, 0x5d8743751dc5cf41
nop word [rax + rax]
lea ecx, [r9 + r8]
and cl, 7
shl cl, 3
mov rdx, r11
shr rdx, cl
xor byte [r8 - 1], dl
movzx ecx, r8b
sub cl, r10b
and cl, 7
shl cl, 3
mov rdx, r11
shr rdx, cl
xor byte [r8], dl
add r8, 2
lea rax, [r8 + r9]
cmp rax, 0x48
jb 0x140560ad0
mov byte [r10 + 0x48], 0
mov rdx, r10
mov rcx, rbx
call fcn.14055c050
nop
lea rcx, [rbp - 0x10]
call fcn.14054ecc0
nop
lea rcx, [rsp + 0x50]
call fcn.14054ecc0
nop
lea rcx, [rsp + 0x70]
call fcn.14054ecc0
nop
mov qword [rbp - 0x10], rdi
movdqa xmm6, xmmword [0x1406c10d0]
movdqu xmmword [rbp], xmm6
mov byte [rbp - 0x10], 0
mov dword [rsp + 0x20], reloc.WS2_32.dll_socket
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov ecx, dword [rbp + 0x158]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140560b98
mov rax, qword [rbp + 0x128]
mov r8, qword [rax]
test r8, r8
je 0x140560b98
mov rax, qword [rbp + 0x108]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x150]
cmovb r8, qword [rbp + 0x150]
sub r8, rdx
jmp 0x140560bd0
test cl, 4
jne 0x140560bc8
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
test rcx, rcx
je 0x140560bc8
mov rax, qword [rbp + 0x100]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x138]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x140560bd0
mov r8, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x140560be3
lea rcx, [rbp - 0x10]
call fcn.14054ed20
movdqu xmm6, xmmword [rbp]
lea rcx, [rbp + 0x10]
call fcn.14054ecc0
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm6
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
lea rcx, [rbp - 0x10]
call fcn.14054ecc0
mov qword [rbp - 0x50], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
lea r12, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0x10
cmovae r12, qword [rbp + 0xb0]
mov r15, qword [rbp + 0xc0]
cmp r15, 0x10
jae 0x140560c55
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
jmp 0x140560ccd
mov rbx, r15
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140560ca9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14056100f
mov rcx, rax
call fcn.14063c358
test rax, rax
je 0x140560ca2
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140560cb6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140560cb6
call fcn.14063c358
mov rdi, rax
mov qword [rbp - 0x50], rdi
lea r8, [r15 + 1]
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x40], r15
mov ecx, 0x688
mov eax, dword [rcx + r14]
mov ebx, 0x6b0
test al, 1
jne 0x140560d11
or eax, 1
mov dword [rcx + r14], eax
mov dword [rbx + r14 + 8], 0x173b2c0
mov dword [rbx + r14], 0xb21bfe9c
mov dword [rbx + r14 + 4], 0x53c2efcd
lea rcx, [0x1406431a0]
call fcn.14063c804
nop
lea rdx, [rbx + r14]
cmp byte [rdx + 0xb], 0
je 0x140560d4a
xor byte [rdx], 0xb3
xor byte [rdx + 1], 0x9d
xor byte [rdx + 2], 0x73
xor byte [rdx + 3], 0xd3
xor byte [rdx + 4], 0xa3
xor byte [rdx + 5], 0x81
xor byte [rdx + 6], 0xa7
xor byte [rdx + 7], 0x3f
xor byte [rdx + 8], 0xb3
xor byte [rdx + 9], 0x9d
xor byte [rdx + 0xa], 0x73
mov byte [rdx + 0xb], 0
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140560d50
lea rcx, [rbp - 0x50]
call fcn.140557910
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0x10
cmovae rdx, qword [rbp + 0x90]
mov r8, qword [rbp + 0xa0]
lea rcx, [rbp - 0x50]
call fcn.140557910
mov ecx, 0x8d0
mov eax, dword [rcx + r14]
mov ebx, 0x5d0
test al, 1
jne 0x140560dcf
or eax, 1
mov dword [rcx + r14], eax
mov word [rbx + r14 + 9], 0x183
mov dword [rbx + r14], 0x22aeee36
mov dword [rbx + r14 + 4], 0x46383620
mov byte [rbx + r14 + 8], WSAGetLastError
lea rcx, [0x140643180]
call fcn.14063c804
nop
lea rdx, [rbx + r14]
cmp byte [rdx + 0xa], 0
je 0x140560e04
xor byte [rdx], 0x19
xor byte [rdx + 1], 0x83
xor byte [rdx + 2], 0xcb
xor byte [rdx + 3], 0x51
xor byte [rdx + 4], 0x53
xor byte [rdx + 5], 0x57
xor byte [rdx + 6], 0x5f
xor byte [rdx + 7], 0x23
xor byte [rdx + 8], 0x19
xor byte [rdx + 9], 0x83
mov byte [rdx + 0xa], 0
inc rsi
cmp byte [rdx + rsi], 0
jne 0x140560e04
mov r8, rsi
lea rcx, [rbp - 0x50]
call fcn.140557910
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae r8, qword [rbp - 0x50]
mov edx, 0x2712
mov rdi, qword [rsp + 0x48]
mov rcx, rdi
call fcn.1405e9430
xor r8d, r8d
lea edx, [r8 + 0x40]
mov rcx, rdi
call fcn.1405e9430
mov edx, Ordinal_50
lea r8d, [rdx - 0x2e]
mov rcx, rdi
call fcn.1405e9430
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae r8, qword [rbp + 0x10]
mov edx, 0x271f
mov rcx, rdi
call fcn.1405e9430
mov r8, r13
mov edx, 0x2727
mov rcx, rdi
call fcn.1405e9430
mov rcx, rdi
call fcn.1405e4350
mov ebx, eax
test eax, eax
je 0x140560edb
call fcn.140561a20
mov rcx, rax
call fcn.140565dd0
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.14054f7d0
nop
mov ecx, ebx
call fcn.1405e5ce0
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1405578d0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x1d0]
call fcn.140559aa0
mov ecx, 0xfffffffa
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, r13
call fcn.1405e4740
mov rcx, rdi
call fcn.1405e42c0
nop
lea rcx, [rbp - 0x50]
call fcn.14054ecc0
nop
mov rax, qword [rbp + 0xd0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0xd0], rax
mov rax, qword [rbp + 0xd0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0xcc], edx
lea rcx, [rbp + 0xe8]
call fcn.140566430
lea rcx, [rbp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x168]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x10]
call fcn.14054ecc0
nop
lea rcx, [rbp + 0x50]
call fcn.14054ecc0
nop
lea rcx, [rbp - 0x30]
call fcn.14054ecc0
nop
lea rcx, [rbp + 0x70]
call fcn.14054ecc0
nop
lea rcx, [rbp + 0x90]
call fcn.14054ecc0
nop
lea rcx, [rbp + 0xb0]
call fcn.14054ecc0
nop
lea rcx, [rbp + 0x30]
call fcn.14054ecc0
nop
lea rcx, [rbp + 0x1d8]
call fcn.14055bb30
test rax, rax
jne 0x140560fce
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rcx, [rbp + 0x1d0]
call fcn.140559990
nop
mov al, 1
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.14063c0a0
mov rbx, qword [rsp + 0x448]
movaps xmm6, xmmword [rsp + 0x3f0]
add rsp, 0x400
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140547a30
nop
call fcn.140547ad0
int3
call fcn.140547a30
nop
call fcn.140547ad0
int3
call fcn.140547a30
int3