Function at 0x140004dc0
Capabilities:
Contain obfuscated stackstrings
Delete file
Set console window title
Terminate process

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x3e8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x350], xmm6
mov qword [rbp + 0x348], 0xfffffffffffffffe
mov dword [rbp + 0x2c0], 0
xor ebx, ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rsi, rax
mov r14, qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea rdi, [rbp + 0x2c0]
mov edx, 0x1000
mov rcx, rax
mov r8d, 4
mov r9, rdi
call r14
lea rcx, [0x1400a8ec0]
mov r8d, 0x1000
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 0x1000
mov rcx, rsi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8d, dword [rbp + 0x2c0]
mov edx, 0x1000
mov rcx, rsi
mov r9, rdi
call r14
xorps xmm0, xmm0
movaps xmmword [rbp + 0x2d0], xmm0
movaps xmmword [rbp + 0x2c0], xmm0
mov rsi, qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea rdi, str.abcdefghi9182345jklmnopqrstuv211935960473wxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
nop
call rsi
cdqe
imul rcx, rax, 0x66666667
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x25
add ecx, edx
shl ecx, 4
lea ecx, [rcx + rcx*4]
sub eax, ecx
cdqe
movzx eax, word [rdi + rax*2]
add word [rbp + rbx*2 + 0x2c0], ax
inc rbx
cmp rbx, 0xf
jne 0x140004e80
lea rsi, [rbp + 0x2c0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov qword [0x1400a8bb0], 0
mov qword [0x1400a8bb5], 0
mov qword [0x1400a8bc0], 0
mov dword [0x1400a8bc7], 0
xorps xmm6, xmm6
movaps xmmword [0x1400a8bd0], xmm6
movaps xmmword [0x1400a8be0], xmm6
movaps xmmword [0x1400a8bf0], xmm6
movaps xmmword [0x1400a8c00], xmm6
mov byte [0x1400a8c10], 0
mov dword [0x1400a8c14], 0
movups xmmword [0x1400a8c18], xmm6
movups xmmword [0x1400a8c25], xmm6
mov byte [rbp + 0x300], 0
lea rcx, [rbp + 0x300]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rbx, rax
mov rdi, qword [0x1400a8b80]
movabs r12, 0x7fffffffffffffff
mov rax, rdi
xor rax, r12
cmp rax, rbx
jb 0x1400062fe
mov r15, qword [0x1400a8b88]
mov rax, qword [0x1400a8b70]
movaps xmmword [rbp + 0x320], xmm6
lea r13, [rdi + rbx]
cmp r13, 0x10
jb 0x140004fc7
mov qword [rbp + 0x198], rax
test r13, r13
js 0x140004faf
mov rax, r13
or rax, 0xf
cmp rax, 0x17
mov r12d, reloc.WLDAP32.dll_Ordinal_22
cmovae r12, rax
cmp r12, 0xfff
jb 0x140004fd6
lea rcx, [r12 + 0x28]
call fcn.140037db0
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140004fe3
lea r14, [rbp + 0x320]
mov r12d, reloc.WS2_32.dll_ntohs
jmp 0x140004ff1
lea rcx, [r12 + 1]
call fcn.140037db0
mov r14, rax
mov qword [rbp + 0x320], r14
mov rax, qword [rbp + 0x198]
cmp r15, 0x10
lea r15, [0x1400a8b70]
cmovae r15, rax
mov qword [rbp + 0x330], r13
mov qword [rbp + 0x338], r12
lea rdx, [rbp + 0x300]
mov rcx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rbx, r14
mov rcx, rbx
mov rdx, r15
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r13], 0
mov rcx, qword [rbp + 0x330]
mov rdx, qword [rbp + 0x338]
cmp rdx, rcx
jne 0x140005073
mov qword [rsp + 0x20], 1
lea r9, [0x14008b289]
lea rcx, [rbp + 0x320]
mov edx, 1
call fcn.1400080e0
mov r15, qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x1400050a3
lea rax, [rcx + 1]
mov qword [rbp + 0x330], rax
lea rax, [rbp + 0x320]
mov r8, rax
cmp rdx, 0x10
mov r15, qword [sym.imp.KERNEL32.dll_VirtualProtect]
jb 0x14000509c
mov r8, qword [rbp + 0x320]
mov word [r8 + rcx], reloc.WLDAP32.dll_Ordinal_32
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp + 0x2d0], xmm1
movaps xmmword [rbp + 0x2c0], xmm0
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8, qword [0x1400a8ba0]
cmp qword [0x1400a8ba8], 0x10
jb 0x1400050e5
mov r9, qword [0x1400a8b90]
jmp 0x1400050ec
lea r9, [0x1400a8b90]
mov rcx, qword [rbp + 0x2d0]
mov rax, qword [rbp + 0x2d8]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x14000511e
mov qword [rsp + 0x20], r8
lea rcx, [rbp + 0x2c0]
mov rdx, r8
call fcn.1400080e0
mov rsi, rax
jmp 0x140005148
lea rdi, [rcx + r8]
mov qword [rbp + 0x2d0], rdi
mov rbx, rsi
cmp rax, 0x10
jb 0x140005139
mov rbx, qword [rbp + 0x2c0]
add rcx, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rbp + 0x1b0], xmm1
movaps xmmword [rbp + 0x1a0], xmm0
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rax, qword [rbp + 0x2d8]
cmp rax, 0x10
jb 0x1400051b5
mov rcx, qword [rbp + 0x2c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400051b0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400062f8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140037df4
mov qword [rbp + 0x2d0], 0
mov qword [rbp + 0x2d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2c0], 0
mov rax, qword [rbp + 0x338]
cmp rax, 0x10
jb 0x140005217
mov rcx, qword [rbp + 0x320]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140005212
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400062f8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140037df4
cmp qword [rbp + 0x1b8], 0x10
jb 0x14000522a
mov rcx, qword [rbp + 0x1a0]
jmp 0x140005231
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
movaps xmm0, xmmword [str._n_n___Connecting_n____Enter_licen1234]
movaps xmmword [rbp + 0x2c0], xmm0
mov dword [rbp + 0x2d0], 0x2e2e2e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x2c0]
call fcn.140003c20
mov dword [rbp + 0x2c0], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rsi, rax
lea rdi, [rbp + 0x2c0]
mov edx, 0x1000
mov rcx, rax
mov r8d, 4
mov r9, rdi
call r15
lea rdx, [0x1400a8ec0]
mov r8d, 0x1000
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov r8d, dword [rbp + 0x2c0]
mov edx, 0x1000
mov rcx, rsi
mov r9, rdi
call r15
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400a8c38]
call fcn.140021180
cmp byte [0x1400a8e48], 0
je 0x1400063c6
lea rcx, [0x1400a8c38]
call fcn.1400233f0
test al, al
jne 0x140006303
lea rax, str.test.json
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x2c8], 9
call fcn.140038698
lea rdi, [rbp + 0x320]
lea r8, [rbp + 0x2c0]
mov rcx, rdi
mov edx, eax
call fcn.14000b0f0
cmp qword [rbp + 0x338], 8
jb 0x14000533b
mov rdi, qword [rbp + 0x320]
lea rsi, [rbp + 0x2c0]
mov rcx, rdi
mov rdx, rsi
mov r8d, 3
mov r9d, 0xffffffff
call fcn.140038370
xor edi, edi
cmp eax, 0x34
jg 0x140005375
lea ecx, [rax - 2]
cmp ecx, 2
jb 0x140005383
test eax, eax
jne 0x1400063dc
mov dil, 1
jmp 0x140005383
cmp eax, 0x35
je 0x140005383
cmp eax, 0x7b
jne 0x1400063dc
mov rax, qword [rbp + 0x338]
cmp rax, 8
jb 0x1400053cf
mov rcx, qword [rbp + 0x320]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x1400053ca
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400062f8
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.140037df4
test dil, dil
je 0x14000557a
mov qword [rbp - 0x48], 0
mov qword [rbp - 0x40], 8
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
movabs rsi, 0x656d616e72657375
mov qword [rbp - 0x50], rsi
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 9
mov qword [rbp + 0x90], reloc.WS2_32.dll_ntohs
movabs rdi, 0x6f736a2e74736574
mov qword [rbp + 0x78], rdi
mov byte [rbp + 0x80], WSACleanup
lea rcx, [rbp + 0x78]
lea rdx, [rbp - 0x50]
call fcn.140001c30
test al, al
je 0x1400057a6
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], 8
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x30], rsi
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xc8], 9
mov qword [rbp + 0xd0], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xb8], rdi
mov byte [rbp + 0xc0], WSACleanup
lea rsi, [rbp + 0x2c0]
lea rdx, [rbp + 0xb8]
lea r8, [rbp - 0x30]
mov rcx, rsi
call section..text
mov qword [rbp - 8], 0
mov qword [rbp], 8
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
movabs rax, 0x64726f7773736170
mov qword [rbp - 0x10], rax
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xe8], 9
mov qword [rbp + reloc.WS2_32.dll_ntohs0], 0xf
mov qword [rbp + 0xd8], rdi
mov byte [rbp + 0xe0], WSACleanup
lea rdi, [rbp + 0x320]
lea rdx, [rbp + 0xd8]
lea r8, [rbp - 0x10]
mov rcx, rdi
call section..text
xorps xmm0, xmm0
movaps xmmword [rbp + 0x270], xmm0
movaps xmmword [rbp + 0x260], xmm0
mov rbx, qword [rbp + 0x330]
cmp qword [rbp + 0x338], 0x10
jb 0x140005546
mov rdi, qword [rbp + 0x320]
test rbx, rbx
js 0x14000631a
cmp rbx, 0xf
ja 0x140005abc
mov qword [rbp + 0x270], rbx
mov qword [rbp + 0x278], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rdi]
movaps xmmword [rbp + 0x260], xmm0
jmp 0x140005d73
xorps xmm0, xmm0
movaps xmmword [rbp + 0x2c0], xmm0
mov qword [rbp + 0x2d0], 0
mov qword [rbp + 0x2d8], reloc.WS2_32.dll_ntohs
movaps xmmword [rbp + 0x320], xmm0
mov qword [rbp + 0x330], 0
mov qword [rbp + 0x338], reloc.WS2_32.dll_ntohs
movaps xmmword [rbp + 0x300], xmm0
mov qword [rbp + 0x310], 0
mov qword [rbp + 0x318], reloc.WS2_32.dll_ntohs
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp + 0x2a0], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
lea rbx, [rbp + 0x2a0]
mov edx, 0x1000
mov rcx, rax
mov r8d, 4
mov r9, rbx
call r15
lea rcx, [0x1400a8ec0]
mov r8d, 0x1000
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 0x1000
mov rcx, rdi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8d, dword [rbp + 0x2a0]
mov edx, 0x1000
mov rcx, rdi
mov r9, rbx
call r15
movaps xmm0, xmmword [0x1400852f0]
movaps xmmword [rbp + 0x2a0], xmm0
mov dword [rbp + 0x2b0], 0x203a6573
mov byte [rbp + 0x2b4], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x2a0]
call fcn.140003c20
mov dword [rbp + 0x2a0], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
mov edx, 0x1000
mov rcx, rax
mov r8d, 4
mov r9, rbx
call r15
lea rdx, [0x1400a8ec0]
mov r8d, 0x1000
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r8d, dword [rbp + 0x2a0]
mov edx, 0x1000
mov rcx, rdi
mov r9, rbx
call r15
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdi, [rbp + 0x300]
mov rdx, rdi
call fcn.1400067c0
mov dword [rbp + 0x2a0], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rbx, rax
lea r14, [rbp + 0x2a0]
mov edx, 0x1000
mov rcx, rax
mov r8d, 4
mov r9, r14
call r15
lea rdx, [0x1400a8ec0]
mov r8d, 0x1000
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8d, dword [rbp + 0x2a0]
mov edx, 0x1000
mov rcx, rbx
mov r9, r14
call r15
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x210], xmm0
movaps xmmword [rbp + 0x200], xmm0
mov rbx, qword [rbp + 0x310]
cmp qword [rbp + 0x318], 0x10
jb 0x140005772
mov rdi, qword [rbp + 0x300]
test rbx, rbx
js 0x14000630b
cmp rbx, 0xf
ja 0x1400058e1
mov qword [rbp + 0x210], rbx
mov qword [rbp + 0x218], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rdi]
movaps xmmword [rbp + 0x200], xmm0
jmp 0x140005986
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x168], 7
mov qword [rbp + 0x170], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x158], 0x6563696c
mov dword [rbp + 0x15b], 0x65736e65
mov byte [rbp + 0x15f], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xa8], 9
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x98], rdi
mov byte [rbp + 0xa0], WSACleanup
lea rsi, [rbp + 0x2c0]
lea rdx, [rbp + 0x98]
lea r8, [rbp + 0x158]
mov rcx, rsi
call section..text
mov dword [rbp + 0x320], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
lea rbx, [rbp + 0x320]
mov edx, 0x1000
mov rcx, rax
mov r8d, 4
mov r9, rbx
call r15
lea rdx, [0x1400a8ec0]
mov r8d, 0x1000
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r8d, dword [rbp + 0x320]
mov edx, 0x1000
mov rcx, rdi
mov r9, rbx
call r15
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1c0], xmm0
movaps xmmword [rbp + 0x1d0], xmm0
mov rdi, qword [rbp + 0x2d0]
cmp qword [rbp + 0x2d8], 0x10
jb 0x1400058b1
mov rsi, qword [rbp + 0x2c0]
test rdi, rdi
js 0x140006315
cmp rdi, 0xf
ja 0x140005919
mov qword [rbp + 0x1d0], rdi
mov qword [rbp + 0x1d8], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x1c0], xmm0
jmp 0x140005c78
mov rax, rbx
or rax, 0xf
cmp rax, 0x17
mov r14d, reloc.WLDAP32.dll_Ordinal_22
cmovae r14, rax
cmp r14, 0xfff
jb 0x140005957
lea rcx, [r14 + 0x28]
call fcn.140037db0
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140005963
mov rax, rdi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x140005c49
lea rcx, [rbx + 0x28]
call fcn.140037db0
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140005c55
lea rcx, [r14 + 1]
call fcn.140037db0
mov rcx, rax
mov qword [rbp + 0x200], rcx
mov qword [rbp + 0x210], rbx
mov qword [rbp + 0x218], r14
inc rbx
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [0x1400a8c38]
lea rdx, [rbp + 0x200]
call fcn.1400225a0
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1400a8e48], 0
je 0x1400063c6
mov rdi, qword [rbp + 0x2d0]
test rdi, rdi
je 0x1400059f4
mov rbx, qword [rbp + 0x330]
test rbx, rbx
je 0x1400059f4
xorps xmm0, xmm0
movaps xmmword [rbp + 0x290], xmm0
movaps xmmword [rbp + 0x280], xmm0
cmp qword [rbp + 0x338], 0x10
jb 0x140005afb
mov r14, qword [rbp + 0x320]
jmp 0x140005b02
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
movaps xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
movaps xmmword [rbp + 0x220], xmm0
movaps xmmword [rbp + 0x230], xmm0
mov rsi, qword [rbp + 0x310]
cmp qword [rbp + 0x318], 0x10
jb 0x140005a47
mov rdi, qword [rbp + 0x300]
jmp 0x140005a4e
lea rdi, [rbp + 0x300]
test rsi, rsi
js 0x140006310
cmp rsi, 0xf
ja 0x140005a7e
mov qword [rbp + 0x230], rsi
mov qword [rbp + 0x238], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rdi]
movaps xmmword [rbp + 0x220], xmm0
jmp 0x140005ba0
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x140005b71
lea rcx, [rbx + 0x28]
call fcn.140037db0
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140005b7d
mov rax, rbx
or rax, 0xf
cmp rax, 0x17
mov r14d, reloc.WLDAP32.dll_Ordinal_22
cmovae r14, rax
cmp r14, 0xfff
jb 0x140005d44
lea rcx, [r14 + 0x28]
call fcn.140037db0
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140005d50
lea r14, [rbp + 0x320]
test rbx, rbx
js 0x14000640a
cmp rbx, 0xf
ja 0x140005b33
mov qword [rbp + 0x290], rbx
mov qword [rbp + 0x298], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r14]
movaps xmmword [rbp + 0x280], xmm0
jmp 0x140005f3f
mov rax, rbx
or rax, 0xf
cmp rax, 0x17
mov edi, reloc.WLDAP32.dll_Ordinal_22
cmovae rdi, rax
cmp rdi, 0xfff
jb 0x140005f09
lea rcx, [rdi + 0x28]
call fcn.140037db0
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140005f15
lea rcx, [rbx + 1]
call fcn.140037db0
mov rcx, rax
mov qword [rbp + 0x220], rcx
mov qword [rbp + 0x230], rsi
mov qword [rbp + 0x238], rbx
inc rsi
mov rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x188], 7
mov qword [rbp + 0x190], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x178], 0x6563696c
mov dword [rbp + 0x17b], 0x65736e65
mov byte [rbp + 0x17f], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x108], 9
mov qword [rbp + 0x110], reloc.WS2_32.dll_ntohs
movabs rax, 0x6f736a2e74736574
mov qword [rbp + 0xf8], rax
mov byte [rbp + 0x100], WSACleanup
lea rax, [rbp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0xf8]
lea rdx, [rbp + 0x178]
lea r8, [rbp + 0x220]
xor r9d, r9d
call fcn.140001ff0
jmp 0x1400060b7
lea rcx, [rbx + 1]
call fcn.140037db0
mov rcx, rax
mov qword [rbp + 0x1c0], rcx
mov qword [rbp + 0x1d0], rdi
mov qword [rbp + 0x1d8], rbx
inc rdi
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [0x1400a8c38]
lea rdx, [rbp + 0x1c0]
call fcn.1400225a0
cmp byte [0x1400a8e48], 0
je 0x14000631f
movups xmm0, xmmword [0x1400850ab]
movaps xmmword [rbp + 0x320], xmm0
movups xmm1, xmmword [0x1400850b8]
movups xmmword [rbp + 0x32d], xmm1
xorps xmm0, xmmword [0x140085300]
movss dword [rbp + 0x320], xmm0
xor dword [rbp + 0x324], 0x38373635
movsd xmm0, qword [rbp + 0x328]
xorps xmm0, xmmword [str.9:__]
movss dword [rbp + 0x328], xmm0
xor dword [rbp + 0x32c], 0x403f3e3d
movaps xmm0, xmmword [rbp + 0x330]
xorps xmm0, xmmword [str.ABCD]
movss dword [rbp + 0x330], xmm0
xor dword [rbp + 0x334], 0x48474645
movsd xmm0, qword [rbp + 0x338]
xorps xmm0, xmmword [str.IJKL]
movss dword [rbp + 0x338], xmm0
xor byte [rbp + 0x33c], 0x4d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x320]
call fcn.140003c20
jmp 0x140006141
lea rcx, [r14 + 1]
call fcn.140037db0
mov rcx, rax
mov qword [rbp + 0x260], rcx
mov qword [rbp + 0x270], rbx
mov qword [rbp + 0x278], r14
inc rbx
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movaps xmmword [rbp + 0x1e0], xmm0
mov rdi, qword [rbp + 0x2d0]
cmp qword [rbp + 0x2d8], 0x10
jb 0x140005d9c
mov rsi, qword [rbp + 0x2c0]
test rdi, rdi
js 0x140006371
cmp rdi, 0xf
ja 0x140005dc9
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x1e0], xmm0
jmp 0x140005e2f
mov rax, rdi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x140005e00
lea rcx, [rbx + 0x28]
call fcn.140037db0
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140005e0c
lea rcx, [rbx + 1]
call fcn.140037db0
mov rcx, rax
mov qword [rbp + 0x1e0], rcx
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], rbx
inc rdi
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [0x1400a8c38]
lea rdx, [rbp + 0x1e0]
lea r8, [rbp + 0x260]
call fcn.140024060
cmp byte [0x1400a8e48], 0
je 0x140006376
movups xmm0, xmmword [0x1400850c8]
movaps xmmword [rbp + 0x300], xmm0
movups xmm1, xmmword [0x1400850d6]
movups xmmword [rbp + 0x30e], xmm1
xorps xmm0, xmmword [0x140085300]
movss dword [rbp + 0x300], xmm0
xor dword [rbp + 0x304], 0x38373635
movsd xmm0, qword [rbp + 0x308]
xorps xmm0, xmmword [str.9:__]
movss dword [rbp + 0x308], xmm0
xor dword [rbp + 0x30c], 0x403f3e3d
movaps xmm0, xmmword [rbp + 0x310]
xorps xmm0, xmmword [str.ABCD]
movss dword [rbp + 0x310], xmm0
xor dword [rbp + 0x314], 0x48474645
movsd xmm0, qword [rbp + 0x318]
xorps xmm0, xmmword [str.IJKL]
movss dword [rbp + 0x318], xmm0
xor byte [rbp + 0x31c], 0x4d
xor byte [rbp + 0x31d], 0x4e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x300]
call fcn.140003c20
jmp 0x1400060fc
lea rcx, [rdi + 1]
call fcn.140037db0
mov rcx, rax
mov qword [rbp + 0x280], rcx
mov qword [rbp + 0x290], rbx
mov qword [rbp + 0x298], rdi
inc rbx
mov rdx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov rdi, qword [rbp + 0x2d0]
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x128], 8
mov qword [rbp + 0x130], reloc.WS2_32.dll_ntohs
movabs rax, 0x64726f7773736170
mov qword [rbp + 0x118], rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0x240], xmm0
movaps xmmword [rbp + 0x250], xmm0
cmp qword [rbp + 0x2d8], 0x10
jb 0x140005f93
mov rsi, qword [rbp + 0x2c0]
test rdi, rdi
js 0x14000640f
cmp rdi, 0xf
ja 0x140005fc0
mov qword [rbp + 0x250], rdi
mov qword [rbp + 0x258], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0x240], xmm0
jmp 0x140006026
mov rax, rdi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x140005ff7
lea rcx, [rbx + 0x28]
call fcn.140037db0
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140006003
lea rcx, [rbx + 1]
call fcn.140037db0
mov rcx, rax
mov qword [rbp + 0x240], rcx
mov qword [rbp + 0x250], rdi
mov qword [rbp + 0x258], rbx
inc rdi
mov rdx, rsi
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x18], 0
mov qword [rbp + 0x20], 8
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
movabs rax, 0x656d616e72657375
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x148], 9
mov qword [rbp + 0x150], reloc.WS2_32.dll_ntohs
movabs rax, 0x6f736a2e74736574
mov qword [rbp + 0x138], rax
mov byte [rbp + 0x140], WSACleanup
lea rax, [rbp + 0x280]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x138]
lea rdx, [rbp + 0x10]
lea r8, [rbp + 0x240]
mov r9b, 1
call fcn.140001ff0
mov rax, qword [rbp + 0x318]
cmp rax, 0x10
jb 0x1400060fc
mov rcx, qword [rbp + 0x300]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400060f7
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400062f8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140037df4
mov rax, qword [rbp + 0x338]
cmp rax, 0x10
jb 0x140006141
mov rcx, qword [rbp + 0x320]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000613c
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400062f8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140037df4
mov rax, qword [rbp + 0x2d8]
cmp rax, 0x10
jb 0x140006186
mov rcx, qword [rbp + 0x2c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140006181
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400062f8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140037df4
xor edi, edi
lea rsi, [rbp + 0x2c0]
jmp 0x1400061a7
call fcn.140037df4
inc edi
mov eax, edi
mov rcx, qword [0x1400a8e20]
mov rdx, qword [0x1400a8e18]
sub rcx, rdx
sar rcx, 6
cmp rcx, rax
jbe 0x140006285
shl rax, 6
add rdx, rax
mov rcx, rsi
call fcn.140006b10
mov rax, qword [rbp + 0x2f8]
cmp rax, 0x10
jb 0x14000621b
mov rcx, qword [rbp + 0x2e0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140006216
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400062f8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140037df4
mov qword [rbp + 0x2f0], 0
mov qword [rbp + 0x2f8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2e0], 0
mov rax, qword [rbp + 0x2d8]
cmp rax, 0x10
jb 0x1400061a5
mov rcx, qword [rbp + 0x2c0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400061a0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400062f8
add rax, 0x28
mov rdx, rax
mov rcx, r8
jmp 0x1400061a0
call fcn.140003970
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400043f0
mov rax, qword [rbp + 0x1b8]
cmp rax, 0x10
jb 0x1400062db
mov rcx, qword [rbp + 0x1a0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400062d6
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400062f8
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140037df4
xor eax, eax
movaps xmm6, xmmword [rbp + 0x350]
add rsp, 0x3e8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.1400070d0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.1400070d0
call fcn.1400070d0
call fcn.1400070d0
call fcn.1400070d0
lea rcx, str.test.json
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
movabs rax, 0x737574617453200a
mov qword [rbp + 0x320], rax
mov word [rbp + 0x328], 0x203a
mov byte [rbp + 0x32a], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x320]
call fcn.140003c20
lea rdx, [0x1400a8e50]
mov rcx, rax
call fcn.1400067a0
jmp 0x1400063c6
call fcn.1400070d0
lea rcx, str.test.json
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
movabs rax, 0x737574617453200a
mov qword [rbp + 0x300], rax
mov word [rbp + 0x308], 0x203a
mov byte [rbp + 0x30a], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x300]
call fcn.140003c20
lea rdx, [0x1400a8e50]
mov rcx, rax
call fcn.1400067a0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov dword [rbp + 0x2c0], eax
lea rax, [0x140085390]
mov qword [rbp + 0x2c8], rax
lea rcx, str.exists
lea rdx, [rbp + 0x2c0]
lea r8, [rbp + 0x320]
call fcn.140006cd0
call fcn.1400070d0
call fcn.1400070d0
int3