Function at 0x1400195a0
Capabilities:
Delete file
Encode data using xor
Execute command
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
movaps xmmword [rsp + 0x150], xmm6
xor ebx, ebx
cmp byte [0x1400f08d0], bl
jne 0x14001975f
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0xa0]
call fcn.140018c60
mov r9, rax
cmp byte [rax + 0xe], bl
je 0x14001972e
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1400196f9
movdqa xmm4, xmmword [0x140094e10]
movdqa xmm2, xmmword [0x140094cf0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140094dd0]
movd xmm0, dword [rax]
xorps xmm2, xmm0
movd dword [rax], xmm2
movdqa xmm3, xmmword [0x140094d00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140094dd0]
movd xmm0, dword [rax + 4]
xorps xmm2, xmm0
movd dword [rax + 4], xmm2
mov ebx, 8
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, bl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xf
jl 0x140019700
mov rdx, r9
mov rcx, r10
call fcn.14000c6c0
mov rcx, rax
lea rdx, [0x1400f08d8]
call fcn.14000c460
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea r12, str.C:Windowslogin.conf
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], reloc.WS2_32.dll_setsockopt
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.14000ce80
nop
lea rcx, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova rcx, qword [rsp + 0x70]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0x10]
call fcn.14008c290
mov edx, eax
test eax, eax
jne 0x1400197fd
mov eax, dword [rbp + 0x20]
test al, 1
mov ecx, 0x1ff
mov r8d, 0x16d
cmovne ecx, r8d
mov dword [rsp + 0x34], ecx
bt eax, 0xa
jae 0x1400197ef
mov ecx, dword [rbp + 0x24]
cmp ecx, 0xa000000c
jne 0x1400197e0
lea eax, [rdx + 4]
jmp 0x140019820
cmp ecx, 0xa0000003
jne 0x1400197ef
mov eax, 0xa
jmp 0x140019820
movzx eax, al
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x140019820
mov dword [rsp + 0x34], 0xffff
sub eax, 2
je 0x14001981b
sub eax, 1
je 0x14001981b
sub eax, 0x32
je 0x14001981b
cmp eax, 0x46
mov eax, ebx
jne 0x140019820
mov eax, 1
mov dword [rsp + 0x30], edx
lea rcx, [0x1400b9d48]
mov qword [rsp + 0x38], rcx
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
test eax, eax
je 0x140019b5f
cmp eax, 1
setne dil
lea rcx, [rsp + 0x70]
call fcn.14001d490
xorps xmm0, xmm0
test dil, dil
je 0x14001a1d8
lea rax, [rsp + 0x30]
mov qword [rbp + 0xa0], rax
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov r15d, 0x6469
mov word [rsp + 0x30], r15w
mov byte [rsp + 0x32], 0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14008aeb8
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], reloc.WS2_32.dll_setsockopt
mov qword [rbp - 0x58], Ordinal_35
movups xmm0, xmmword [str.C:Windowslogin.conf]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400933d0]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x1400933d4]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.140019160
test al, al
jne 0x140019d0f
lea rax, [rsp + 0x70]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], 7
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov rax, qword [str.license]
mov dword [rsp + 0x70], eax
movzx eax, word [0x1400933dc]
mov word [rsp + 0x74], ax
movzx eax, byte [0x1400933de]
mov byte [rsp + 0x76], al
mov byte [rsp + 0x77], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0xa
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.login.conf]
movsd qword [rsp + 0x50], xmm0
movzx eax, word [0x1400933e8]
mov word [rsp + 0x58], ax
mov byte [rsp + 0x5a], 0
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.14001b320
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x10]
call fcn.140015ce0
mov rdx, rax
lea rcx, [0x1400f06c0]
call fcn.1400364d0
cmp byte [0x1400f08d0], 0
jne 0x140019b6f
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0xa0]
call fcn.140018c90
mov r9, rax
cmp byte [rax + 0xe], 0
je 0x140019b2e
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140019af7
movdqa xmm4, xmmword [0x140094e10]
movdqa xmm2, xmmword [0x140094cf0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
mov eax, dword [0x140094dd0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9]
xorps xmm2, xmm0
movd dword [r9], xmm2
movdqa xmm3, xmmword [0x140094d00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm2, xmm0
movd dword [r9 + 4], xmm2
mov ebx, 8
movsxd r8, ebx
add r8, r9
nop dword [rax]
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, bl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xf
jl 0x140019b00
mov rdx, r9
mov rcx, r10
call fcn.14000c6c0
mov rcx, rax
lea rdx, [0x1400f08d8]
call fcn.14000c460
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
xor dil, dil
test edx, edx
jne 0x14001acb1
jmp 0x14001984a
movsd xmm0, qword [0x140093328]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x140093330]
mov dword [rsp + 0x38], eax
movzx eax, word [0x140093334]
mov word [rsp + 0x3c], ax
movzx eax, byte [0x140093336]
mov byte [rsp + 0x3e], al
mov ecx, ebx
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140019cb6
movdqa xmm4, xmmword [0x140094e10]
movdqa xmm2, xmmword [0x140094cf0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
mov eax, dword [0x140094dd0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140093328]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x140094d00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov ecx, 8
movsxd rax, ecx
lea r8, [rsp + 0x30]
add r8, rax
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, cl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0xf
jl 0x140019cc1
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c6c0
nop
lea rcx, [rbp + 0x10]
call fcn.140017280
jmp 0x14001ac5d
lea rax, [rsp + 0x50]
mov qword [rbp + 0xa0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 2
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov word [rsp + 0x50], r15w
mov byte [rsp + 0x52], 0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14008aeb8
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], reloc.WS2_32.dll_setsockopt
mov qword [rbp - 0x78], Ordinal_35
movups xmm0, xmmword [str.C:Windowslogin.conf]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400933d0]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x1400933d4]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x10]
call fcn.14001b320
nop
lea rax, [rbp - 0x50]
mov qword [rbp + 0xa0], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], 4
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov dword [rbp - 0x50], 0x73736170
mov byte [rbp - 0x4c], 0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14008aeb8
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x60], reloc.WS2_32.dll_setsockopt
mov qword [rbp - 0x58], Ordinal_35
movups xmm0, xmmword [str.C:Windowslogin.conf]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400933d0]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x1400933d4]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x10]
call fcn.14001b320
nop
lea rax, [rbp - 0x30]
mov qword [rbp + 0xa0], rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x30]
call fcn.140015ce0
mov rdi, rax
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x70]
call fcn.140015ce0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [0x1400f06c0]
call fcn.140037830
cmp byte [0x1400f08d0], 0
jne 0x14001a021
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0xa0]
call fcn.140018cc0
mov r9, rax
cmp byte [rax + 0xe], 0
je 0x140019ff0
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140019fbc
movdqa xmm4, xmmword [0x140094e10]
movdqa xmm2, xmmword [0x140094cf0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
mov eax, dword [0x140094dd0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9]
xorps xmm2, xmm0
movd dword [r9], xmm2
movdqa xmm3, xmmword [0x140094d00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [r9 + 4]
xorps xmm2, xmm0
movd dword [r9 + 4], xmm2
mov ebx, 8
movsxd r8, ebx
add r8, r9
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, bl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xf
jl 0x140019fc2
mov rdx, r9
mov rcx, r10
call fcn.14000c6c0
mov rcx, rax
lea rdx, [0x1400f08d8]
call fcn.14000c460
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsd xmm0, qword [0x140093348]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [0x140093350]
mov dword [rsp + 0x38], eax
movzx eax, word [0x140093354]
mov word [rsp + 0x3c], ax
movzx eax, byte [0x140093356]
mov byte [rsp + 0x3e], al
mov ecx, ebx
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14001a168
movdqa xmm4, xmmword [0x140094e10]
movdqa xmm2, xmmword [0x140094cf0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
mov eax, dword [0x140094dd0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140093348]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
movdqa xmm3, xmmword [0x140094d00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x34]
xorps xmm2, xmm1
movd dword [rsp + 0x34], xmm2
mov ecx, 8
movsxd rax, ecx
lea r8, [rsp + 0x30]
add r8, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, cl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0xf
jl 0x14001a180
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c6c0
nop
lea rcx, [rbp + 0x10]
call fcn.140017280
nop
lea rcx, [rbp - 0x10]
call fcn.140017280
jmp 0x14001ac5d
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x70], 0
movups xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x140094c70]
movdqu xmmword [rbp + 0x20], xmm1
mov byte [rbp + 0x10], 0
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rax, qword [0x140093358]
mov qword [rbp + 0xa0], rax
mov r14d, dword [reloc.WS2_32.dll_accept]
cmp byte [reloc.WS2_32.dll_gethostname], 0
je 0x14001a393
cmp r14d, 2
jl 0x14001a356
movdqa xmm4, xmmword [0x140094e10]
movdqa xmm2, xmmword [0x140094cf0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
mov eax, dword [0x140094dd0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xa0]
xorps xmm2, xmm1
movd dword [rbp + 0xa0], xmm2
movdqa xmm3, xmmword [0x140094d00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140094d10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0xa4]
xorps xmm2, xmm1
movd dword [rbp + 0xa4], xmm2
jmp 0x14001a393
lea r9, [rbp + 0xa0]
mov r8d, ebx
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14001a360
lea rdx, [rbp + 0xa0]
mov rcx, r10
call fcn.14000c6c0
lea rdx, [rbp - 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14000c200
movsd xmm0, qword [0x140093360]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movsd qword [rsp + 0x30], xmm0
movzx eax, byte [0x140093368]
mov byte [rsp + 0x30], 0xa
xor byte [rsp + 0x31], 0x33
xor byte [rsp + 0x32], 0x34
xor byte [rsp + 0x33], 0x35
xor byte [rsp + 0x34], 0x36
xor byte [rsp + 0x35], 0x37
xor byte [rsp + 0x36], 0x38
xor byte [rsp + 0x37], 0x39
xor al, 0x3a
mov byte [rsp + 0x38], al
lea rdx, [rsp + 0x30]
call fcn.14000c6c0
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14000c200
lea rax, [rbp - 0x10]
mov qword [rbp + 0xa0], rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x10]
call fcn.140015ce0
mov rdi, rax
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x30]
call fcn.140015ce0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [0x1400f06c0]
call fcn.140037830
cmp byte [0x1400f08d0], 0
jne 0x14001a631
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xa0]
call fcn.140018cf0
mov rcx, rax
cmp byte [rax + 0xf], 0
je 0x14001a600
cmp r14d, 2
jl 0x14001a5c7
movdqa xmm5, xmmword [0x140094cf0]
movdqa xmm4, xmmword [0x140094e10]
movdqa xmm6, xmmword [0x140094d10]
movdqa xmm0, xmmword [0x140094dd0]
movdqa xmmword [rsp + 0x30], xmm0
mov rdx, rax
mov r8d, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx + 4]
xorps xmm2, xmm0
movd dword [rdx + 4], xmm2
add ebx, 8
lea rdx, [rdx + 8]
cmp ebx, 0x10
jl 0x14001a4c0
jmp 0x14001a600
mov r9, rcx
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x3a
movzx eax, bl
sub al, r8b
add al, 0x32
xor byte [r9], al
inc ebx
lea r9, [r9 + 1]
cmp ebx, 0x10
jl 0x14001a5d0
mov rdx, rcx
mov rcx, r10
call fcn.14000c6c0
mov rcx, rax
lea rdx, [0x1400f08d8]
call fcn.14000c460
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp qword [rbp - 0x60], 0
je 0x14001a8e3
cmp qword [rbp - 0x80], 0
je 0x14001a8e3
lea rax, [rbp - 0x10]
mov qword [rbp + 0xa0], rax
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x10]
call fcn.140015ce0
mov rsi, rax
lea rax, [rbp - 0x50]
mov qword [rbp + 0xa8], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], 4
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov dword [rbp - 0x50], 0x73736170
mov byte [rbp - 0x4c], 0
lea rax, [rbp + 0x30]
mov qword [rbp + 0xb0], rax
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x30]
call fcn.140015ce0
mov rdi, rax
lea rax, [rsp + 0x50]
mov qword [rbp + 0xb8], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 2
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov r15d, 0x6469
mov word [rsp + 0x50], r15w
mov byte [rsp + 0x52], 0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov r8d, reloc.WS2_32.dll_setsockopt
mov rdx, r12
lea rcx, [rbp - 0x30]
call fcn.14000cc40
nop
mov qword [rsp + 0x28], rsi
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9b, 1
mov r8, rdi
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x30]
call fcn.14001b7e0
movups xmm0, xmmword [str.qAQTBR_]
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x1400933b0]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x1400933b8]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x1400933bc]
mov byte [rsp + 0x6c], al
mov ecx, ebx
cmp r14d, 2
jl 0x14001a89e
movdqa xmm5, xmmword [0x140094cf0]
movdqa xmm4, xmmword [0x140094e10]
movdqa xmm6, xmmword [0x140094d10]
movdqa xmm0, xmmword [0x140094dd0]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x54]
mov r8d, dword [rsp + 0x30]
nop
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x18
jl 0x14001a790
cmp ecx, 0x1d
jge 0x14001ab8e
movsxd rax, ecx
lea r8, [rsp + 0x50]
add r8, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, cl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x1d
jl 0x14001a8b0
jmp 0x14001ab8e
lea rax, [rbp - 0x30]
mov qword [rbp + 0xa0], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
lea rax, [rbp - 0x50]
mov qword [rbp + 0xa8], rax
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
lea rax, [rbp + 0x30]
mov qword [rbp + 0xb0], rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.140015ce0
mov rdi, rax
lea rax, [rsp + 0x50]
mov qword [rbp + 0xb8], rax
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], 7
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov rcx, qword [str.license]
mov dword [rsp + 0x50], ecx
movzx ecx, word [0x1400933dc]
mov word [rsp + 0x54], cx
movzx eax, byte [0x1400933de]
mov byte [rsp + 0x56], al
mov byte [rsp + 0x57], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
mov r8d, reloc.WS2_32.dll_setsockopt
mov rdx, r12
lea rcx, [rbp - 0x10]
call fcn.14000cc40
nop
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, rdi
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x10]
call fcn.14001b7e0
movups xmm0, xmmword [0x140093380]
movups xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [0x140093390]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x140093398]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x14009339c]
mov byte [rsp + 0x6c], al
mov ecx, ebx
cmp r14d, 2
jl 0x14001ab4a
movdqa xmm5, xmmword [0x140094cf0]
movdqa xmm4, xmmword [0x140094e10]
movdqa xmm6, xmmword [0x140094d10]
movdqa xmm0, xmmword [0x140094dd0]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x54]
mov r8d, dword [rsp + 0x30]
nop dword [rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140094d80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x18
jl 0x14001aa40
cmp ecx, 0x1d
jge 0x14001ab8e
movsxd rax, ecx
lea r8, [rsp + 0x50]
add r8, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, cl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x1d
jl 0x14001ab60
lea rdx, [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c6c0
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x14001abdf
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001abd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001abd9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008aef4
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14001ac1f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ac19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ac19
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008aef4
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x14001ac5d
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ac58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ac58
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008aef4
mov dword [rbp + 0xa0], 0x3e2028
mov byte [rbp + 0xa4], 1
nop
lea eax, [rbx + 0x4b]
xor byte [rbp + rbx + 0xa0], al
inc rbx
cmp rbx, 3
jb 0x14001ac70
mov byte [rbp + 0xa4], 0
lea rcx, [rbp + 0xa0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm6, xmmword [rsp + 0x150]
add rsp, 0x160
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x30]
lea rcx, str.exists
call fcn.14001d0b0
int3