Function at 0x1400c9660
Capabilities:
Delete file
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x220
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
xor r13d, r13d
mov eax, dword [0x14037e684]
mov dword [rbp + 0x150], eax
movzx ecx, word [0x14037e688]
mov word [rbp + 0x154], cx
movzx eax, byte [0x14037e68a]
mov byte [rbp + 0x150], gethostname
xor byte [rbp + 0x151], 0x37
xor byte [rbp + 0x152], 0x38
xor byte [rbp + 0x153], 0x39
xor cl, 0x3a
mov byte [rbp + 0x154], cl
xor byte [rbp + 0x155], 0x3b
xor al, 0x3c
mov byte [rbp + 0x156], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea rax, [rbp + 0x150]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400c9710
lea rdx, [rbp + 0x150]
lea rcx, [rsp + 0x40]
call fcn.14006d8c0
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0xe8]
lea rcx, [0x1408a6cd0]
call fcn.140126900
nop
mov eax, dword [0x14037e68c]
mov dword [rbp + 0x150], eax
movzx ecx, word [0x14037e690]
mov word [rbp + 0x154], cx
movzx eax, byte [0x14037e692]
mov byte [rbp + 0x150], 0x31
xor byte [rbp + 0x151], 0x37
xor byte [rbp + 0x152], 0x38
xor byte [rbp + 0x153], 0x39
xor cl, 0x3a
mov byte [rbp + 0x154], cl
xor byte [rbp + 0x155], 0x3b
xor al, 0x3c
mov byte [rbp + 0x156], al
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r13
lea rax, [rbp + 0x150]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400c97b1
lea rdx, [rbp + 0x150]
lea rcx, [rbp]
call fcn.14006d8c0
lea r8, [rbp]
lea rdx, [rbp + 0x20]
lea rcx, [0x1408a6cd0]
call fcn.140126900
nop
mov eax, dword [0x14037e694]
mov dword [rbp + 0x150], eax
movzx ecx, word [0x14037e698]
mov word [rbp + 0x154], cx
movzx eax, byte [0x14037e69a]
mov byte [rbp + 0x150], gethostname
xor byte [rbp + 0x151], 0x37
xor byte [rbp + 0x152], 0x38
xor byte [rbp + 0x153], 0x39
xor cl, 0x3a
mov byte [rbp + 0x154], cl
xor byte [rbp + 0x155], 0x3b
xor al, 0x3c
mov byte [rbp + 0x156], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea rax, [rbp + 0x150]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400c9851
lea rdx, [rbp + 0x150]
lea rcx, [rsp + 0x40]
call fcn.14006d8c0
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x70]
lea rcx, [0x1408a6cd0]
call fcn.140126900
nop
mov eax, dword [0x14037e6c0]
mov dword [rbp + 0x150], eax
movzx eax, byte [0x14037e6c4]
mov byte [rbp + 0x150], 0x2e
xor byte [rbp + 0x151], 0x37
xor byte [rbp + 0x152], 0x38
xor byte [rbp + 0x153], 0x39
xor al, 0x3a
mov byte [rbp + 0x154], al
mov edx, 5
lea rcx, [rbp + 0x38]
call fcn.1400c72f0
mov r10, rax
movups xmm0, xmmword [0x14037e6a0]
movups xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x14037e6b0]
movsd qword [rbp - 0x50], xmm0
mov ecx, dword [0x14037e6b8]
mov dword [rbp - 0x48], ecx
movzx ecx, byte [0x14037e6bc]
mov byte [rbp - 0x44], cl
mov r8d, r13d
movdqa xmm6, xmmword [0x14037bad0]
mov edi, dword [reloc.WS2_32.dll_accept]
cmp edi, 2
jl 0x1400c9a2f
movdqa xmm4, xmmword [0x140379a20]
movdqa xmm3, xmmword [0x140380750]
movdqa xmm5, xmmword [str.::::HKRC_NGO]
movdqa xmm0, xmmword [0x14037bae0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x5c]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c9940
cmp r8d, 0x1d
jge 0x1400c9a73
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x1400c9a40
lea r8, [rbp - 0x60]
xor edx, edx
mov rcx, r10
call fcn.140102c30
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], r13
mov byte [rax], 0
lea rax, [rbp + 0x150]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400c9ac4
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x88]
call fcn.14006ec50
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x1400c9b52
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c9b4d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c9b4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqa xmm7, xmmword [0x14037a260]
movdqu xmmword [rbp + 0x98], xmm7
mov byte [rbp + 0x88], 0
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x1400c9ba7
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c9ba2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c9ba2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp + 0x48], xmm7
mov byte [rbp + 0x38], 0
mov eax, dword [0x14037e6e8]
mov dword [rbp + 0x150], eax
movzx eax, byte [0x14037e6ec]
mov byte [rbp + 0x150], 0x2e
xor byte [rbp + 0x151], 0x37
xor byte [rbp + 0x152], 0x38
xor byte [rbp + 0x153], 0x39
xor al, 0x3a
mov byte [rbp + 0x154], al
mov edx, 5
lea rcx, [rbp + 0xc8]
call fcn.1400c72f0
mov r10, rax
movups xmm0, xmmword [str.u_rdnSUXRIL]
movups xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x14037e6d8]
movsd qword [rbp - 0x50], xmm0
mov ecx, dword [0x14037e6e0]
mov dword [rbp - 0x48], ecx
movzx ecx, byte [0x14037e6e4]
mov byte [rbp - 0x44], cl
mov r8d, r13d
cmp edi, 2
jl 0x1400c9d4f
movdqa xmm4, xmmword [0x140379a20]
movdqa xmm3, xmmword [0x140380750]
movdqa xmm5, xmmword [str.::::HKRC_NGO]
movdqa xmm0, xmmword [0x14037bae0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp - 0x5c]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c9c60
cmp r8d, 0x1d
jge 0x1400c9d93
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x1400c9d60
lea r8, [rbp - 0x60]
xor edx, edx
mov rcx, r10
call fcn.140102c30
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb8], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], r13
mov byte [rax], 0
lea rax, [rbp + 0x150]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400c9de4
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xa8]
call fcn.14006ec50
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x1400c9e77
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c9e72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c9e72
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp + 0xb8], xmm7
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0xf
jbe 0x1400c9eca
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c9ec5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c9ec5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp + 0xd8], xmm7
mov byte [rbp + 0xc8], 0
movups xmm0, xmmword [0x14037e6f0]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [0x14037e700]
movups xmmword [rbp + 0x48], xmm1
movups xmm0, xmmword [0x14037e710]
movups xmmword [rbp + 0x58], xmm0
movzx eax, word [0x14037e720]
mov word [rbp + 0x68], ax
movzx eax, byte [0x14037e722]
mov byte [rbp + 0x6a], al
mov r8d, r13d
cmp edi, 2
jl 0x1400ca03f
movdqa xmm4, xmmword [0x140379a20]
movdqa xmm3, xmmword [0x140380750]
movdqa xmm5, xmmword [str.::::HKRC_NGO]
movdqa xmm0, xmmword [0x14037bae0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp + 0x3c]
mov edx, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400c9f50
cmp r8d, 0x33
jge 0x1400ca083
movsxd rax, r8d
lea r9, [rbp + 0x38]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x1400ca050
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rbp + 0x38]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400ca0a0
lea rdx, [rbp + 0x38]
lea rcx, [rsp + 0x40]
call fcn.14006d8c0
nop
lea rdx, [rsp + 0x40]
mov rcx, qword [0x1408a6be0]
call fcn.1400a2fa0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400ca10b
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ca106
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ca106
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x80]
call fcn.1400e9880
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.1400e9880
movups xmm0, xmmword [0x14037e728]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [str.__ie]
movups xmmword [rbp + 0x48], xmm1
movups xmm0, xmmword [0x14037e748]
movups xmmword [rbp + 0x58], xmm0
movzx eax, word [0x14037e758]
mov word [rbp + 0x68], ax
movzx eax, byte [0x14037e75a]
mov byte [rbp + 0x6a], al
mov r8d, r13d
cmp edi, 2
jl 0x1400ca290
movdqa xmm4, xmmword [0x140379a20]
movdqa xmm3, xmmword [0x140380750]
movdqa xmm5, xmmword [str.::::HKRC_NGO]
movdqa xmm0, xmmword [0x14037bae0]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rbp + 0x3c]
mov edx, dword [rsp + 0x30]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x1400ca1a1
cmp r8d, 0x33
jge 0x1400ca2d3
movsxd rax, r8d
lea r9, [rbp + 0x38]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x33
jl 0x1400ca2a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rax, [rbp + 0x38]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400ca2f0
lea rdx, [rbp + 0x38]
lea rcx, [rsp + 0x40]
call fcn.14006d8c0
nop
lea rdx, [rsp + 0x40]
mov rcx, qword [0x1408a6be0]
call fcn.1400a2fa0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400ca35b
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ca356
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ca356
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movsd xmm0, qword [0x14037e760]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [0x14037e768]
mov dword [rsp + 0x38], ecx
cmp byte [0x14037e76b], 0
je 0x1400ca509
mov r8d, r13d
cmp edi, 2
jl 0x1400ca4d9
movdqa xmm4, xmmword [0x140380750]
movdqa xmm5, xmmword [str.::::HKRC_NGO]
movdqa xmm3, xmmword [0x140379a20]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
mov eax, dword [0x14037bae0]
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [0x14037e760]
xorps xmm3, xmm0
movd dword [rsp + 0x30], xmm3
movdqa xmm2, xmmword [0x14037ba80]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
movdqa xmm3, xmmword [0x14037ba90]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, eax
paddb xmm3, xmm0
movd xmm1, ecx
xorps xmm3, xmm1
movd dword [rsp + 0x38], xmm3
jmp 0x1400ca509
lea r9, [rsp + 0x30]
nop
mov eax, 0x8d3dcb09
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x1400ca4e0
lea rax, [rsp + 0x30]
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400ca510
mov r15, qword [rsp + 0x70]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, rbx
jb 0x1400caaaf
lea r12, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova r12, qword [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
lea r14, [rbx + r15]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp - 0x20]
cmp r14, rdi
jbe 0x1400ca5e3
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x1400ca5a5
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14022485c
test rax, rax
je 0x1400ca89e
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400ca5df
mov eax, socket
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x1400ca5bf
mov rsi, r13
jmp 0x1400ca5df
cmp rcx, 0x1000
jb 0x1400ca5d7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400caab5
jmp 0x1400ca586
call fcn.14022485c
mov rsi, rax
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], rdi
mov r8, rbx
lea rdx, [rsp + 0x30]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + rbx]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r14], 0
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 8]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1400ca644
lea rax, [rcx + 1]
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x20]
mov word [rax + rcx], 0x20
lea rax, [rbp - 0x20]
jmp 0x1400ca66a
mov qword [rsp + 0x20], 1
lea r9, [0x14037e77c]
movzx r8d, byte [rbp + 0x150]
mov edx, 1
lea rcx, [rbp - 0x20]
call fcn.14006dfe0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
lea rcx, [rsp + 0x40]
call fcn.14006ec50
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x28]
mov rax, rdx
sub rax, rcx
cmp rax, 0xb
jb 0x1400ca72f
lea rax, [rcx + 0xb]
mov qword [rbp - 0x30], rax
lea rbx, [rbp - 0x40]
cmp rdx, 0xf
cmova rbx, qword [rbp - 0x40]
add rbx, rcx
mov r8d, listen
lea rdx, str.___NUL_2_1
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xb], 0
lea rax, [rbp - 0x40]
jmp 0x1400ca755
mov qword [rsp + 0x20], listen
lea r9, str.___NUL_2_1
movzx r8d, byte [rbp + 0x150]
mov edx, listen
lea rcx, [rbp - 0x40]
call fcn.14006dfe0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp]
mov rcx, qword [0x1408a6be0]
call fcn.1400a2fa0
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400ca7d1
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ca7cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ca7cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp + 0x10], xmm7
mov byte [rbp], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400ca818
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ca813
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ca813
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp - 0x30], xmm7
mov byte [rbp - 0x40], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400ca861
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ca85c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ca85c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rsp + 0x50], xmm7
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400ca8aa
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ca8a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ca8a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov rcx, qword [rbp + 0x20]
cmp rcx, qword [rbp + 0x28]
je 0x1400ca8ee
mov qword [rbp + 0x28], rcx
mov r8, qword [rbp + 0x70]
cmp r8, qword [rbp + 0x78]
je 0x1400ca8fc
mov qword [rbp + 0x78], r8
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400ca944
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ca937
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ca937
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
mov rcx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x70]
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400ca99d
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ca990
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ca990
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
mov rcx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x70]
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
test r8, r8
je 0x1400ca9fc
mov rdx, qword [rbp + 0x80]
sub rdx, r8
mov rax, r8
cmp rdx, 0x1000
jb 0x1400ca9e4
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ca9e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.140224898
mov qword [rbp + 0x70], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x78], xmm0
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x1400caa41
mov rdx, qword [rbp + 0x30]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400caa30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400caa30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
mov qword [rbp + 0x20], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x28], xmm0
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
je 0x1400caa84
mov rdx, qword [rbp + 0xf8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400caa7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400caa7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14006ec10
nop
call fcn.140048fb0
int3