Function at 0x140063fd0
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x318]
sub rsp, 0x400
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x14033b620]
xor rax, rsp
mov qword [rbp + 0x2d8], rax
xor r12d, r12d
lea rcx, [rbp - 0x50]
call fcn.140062d50
nop
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140062500
mov rbx, rax
lea rsi, [0x14034d950]
cmp rsi, rax
je 0x1400640b3
mov rdx, qword [0x14034d968]
cmp rdx, 0x10
jb 0x140064078
mov rcx, qword [0x14034d950]
inc rdx
cmp rdx, 0x1000
jb 0x140064073
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140064fd8
mov rcx, r8
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqa xmmword [0x14034d960], xmm0
mov byte [0x14034d950], 0
movups xmm0, xmmword [rbx]
movaps xmmword [0x14034d950], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [0x14034d960], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x1400640ee
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400640e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064fd8
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x14006413a
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064135
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064fde
call fcn.1402240ec
cmp qword [0x14034d810], 0xa
jne 0x140064fbc
cmp qword [0x14034d830], 0x40
jne 0x140064fbc
mov dword [rsp + 0x68], 0x8e888cc2
mov dword [rsp + 0x6c], 0x9d83b69c
mov word [rsp + 0x70], Ordinal_211
mov byte [rsp + 0x72], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0x1c]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 9
jb 0x140064180
mov byte [rsp + 0x72], 0
lea rdx, [0x14034d800]
lea rcx, [rbp - 0x50]
call fcn.140062930
mov r15, rax
mov dword [rsp + 0x58], 0x89918ac2
mov dword [rsp + 0x5c], 0x8f839b8d
mov word [rsp + 0x60], Ordinal_211
mov byte [rsp + 0x62], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0x1c]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 9
jb 0x1400641d0
mov byte [rsp + 0x62], 0
lea rdx, [0x14034d7e0]
lea rcx, [rbp + 0x170]
call fcn.140062930
mov r14, rax
mov dword [rsp + 0x40], 0x8a878bc2
mov dword [rsp + 0x44], 0x100d48d
mov rcx, r12
nop
lea eax, [rcx - 0x1c]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 6
jb 0x140064210
mov byte [rsp + 0x47], 0
lea rax, [rbp + 0x228]
mov qword [rsp + 0x38], rax
lea rdx, [0x14034d7a0]
lea rcx, [rbp + 0x228]
call fcn.14005cad0
mov rdi, rax
lea rax, [rbp + 0x248]
mov qword [rsp + 0x30], rax
lea rdx, [0x14034d820]
lea rcx, [rbp + 0x248]
call fcn.14005cad0
mov rbx, rax
mov rdx, rsi
lea rcx, [rbp + 0x1e8]
call fcn.14005cad0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x150]
call fcn.140062ed0
mov rsi, rax
mov dword [rsp + 0x48], 0x848880c2
mov dword [rsp + 0x4c], 0xd6938c83
mov word [rsp + 0x50], 0x100
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx - 0x1c]
xor byte [rsp + rcx + 0x48], al
inc rcx
cmp rcx, 8
jb 0x1400642b0
mov byte [rsp + 0x51], 0
lea rax, [rbp + 0x1b0]
mov qword [rbp - 0x78], rax
lea rdx, [0x14034d7a0]
lea rcx, [rbp + 0x1b0]
call fcn.14005cad0
mov rdi, rax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x38], rax
lea rdx, [0x14034d820]
lea rcx, [rbp + 0x190]
call fcn.14005cad0
mov rbx, rax
lea rdx, [0x14034d840]
lea rcx, [rbp + 0x298]
call fcn.14005cad0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x130]
call fcn.140062ed0
mov rdi, rax
mov dword [rsp + 0x38], 0x958393c2
mov word [rsp + 0x3c], 0xd5
mov byte [rsp + 0x3e], 1
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx - 0x1c]
xor byte [rsp + rcx + 0x38], al
inc rcx
cmp rcx, 5
jb 0x140064350
mov byte [rsp + 0x3e], 0
mov dword [rsp + 0x30], 0x938f8b8d
mov word [rsp + 0x34], 0x100
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0x1c]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 4
jb 0x140064380
mov byte [rsp + 0x35], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
lea rax, [rsp + 0x30]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400643b3
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14005cf80
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x110]
call fcn.140062930
mov r10, rax
mov dword [rsp + 0x30], 0x82969c90
mov word [rsp + 0x34], 0xd5
mov byte [rsp + 0x36], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0x1c]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 5
jb 0x140064400
mov byte [rsp + 0x36], 0
lea rax, [rsp + 0x30]
mov r9, rbx
nop dword [rax]
inc r9
cmp byte [rax + r9], 0
jne 0x140064420
lea r8, [rsp + 0x30]
xor edx, edx
mov rcx, r10
call fcn.1400740d0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x38]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140064470
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x10]
call fcn.14006e860
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x100], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp + 0xf0]
lea rcx, [rbp - 0x70]
call fcn.1400741d0
nop
lea rax, [rsp + 0x48]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400644d0
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x70]
call fcn.14006e860
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rsi
lea r8, [rbp + 0xd0]
lea rcx, [rbp + 0x70]
call fcn.1400741d0
nop
lea rax, [rsp + 0x40]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140064530
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x70]
call fcn.14006e860
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r14
lea r8, [rbp + 0xb0]
lea rcx, [rbp + 0x50]
call fcn.1400741d0
nop
lea rax, [rsp + 0x58]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140064590
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x50]
call fcn.14006e860
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r15
lea r8, [rbp + 0x90]
lea rcx, [rbp + 0x30]
call fcn.1400741d0
nop
lea rax, [rsp + 0x68]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400645e5
mov r8, rbx
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x30]
call fcn.14006e860
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [0x14034d7a0]
cmp qword [0x14034d7b8], 0x10
cmovae rdx, qword [0x14034d7a0]
mov r8, qword [0x14034d7b0]
lea rcx, [rbp - 0x30]
call fcn.14006e860
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x2b8], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2c8], xmm6
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400646b2
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400646ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064fe4
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x1400646fe
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400646f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064fea
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x140064751
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006474b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064ff0
call fcn.1402240ec
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x14006478c
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064787
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064ff6
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x1400647df
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400647d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140064ffc
call fcn.1402240ec
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x14006481d
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064818
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065002
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x140064873
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006486d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065008
call fcn.1402240ec
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x1400648ae
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400648a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006500e
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x140064901
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400648fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065014
call fcn.1402240ec
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14006493c
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064937
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006501a
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0x10
jb 0x14006498e
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064989
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065020
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp + 0x120], xmm0
mov byte [rbp + 0x110], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x1400649e0
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400649db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065026
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x140064a32
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064a2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006502c
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], 0
mov rdx, qword [rbp + 0x168]
cmp rdx, 0x10
jb 0x140064a8a
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064a85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065032
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp + 0x160], xmm0
mov byte [rbp + 0x150], 0
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x140064ae2
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064add
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065038
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140064b34
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064b2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006503e
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
lea r14, [rbp + 0x2b8]
movq rsi, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 0x10
cmovae r14, rsi
movabs rbx, 0x7fffffffffffffff
movq rdi, xmm6
cmp rdi, rbx
ja 0x140065044
mov qword [rbp - 0x80], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x140064bb1
mov qword [rsp + 0x78], rdi
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x68], xmm0
jmp 0x140064c44
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140064bed
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1402240b0
mov rcx, rax
test rax, rax
je 0x14006504a
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140064c27
mov rbx, rax
mov ecx, reloc.WS2_32.dll_shutdown
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140064c18
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140064f65
jmp 0x140064bcb
test rcx, rcx
je 0x140064c24
call fcn.1402240b0
jmp 0x140064c27
mov rax, r12
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call fcn.140226450
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x278]
call fcn.14006bf50
nop
lea rax, [rbp + 0x298]
mov qword [rbp - 0x78], rax
lea rdx, [0x14034d7a0]
lea rcx, [rbp + 0x298]
call fcn.14005cad0
mov rdi, rax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x40], rax
lea rdx, [0x14034d820]
lea rcx, [rbp + 0x190]
call fcn.14005cad0
mov rbx, rax
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x1b0]
call fcn.14005cad0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140063280
mov rbx, rax
lea rax, [rbp + 0x278]
cmp rax, rbx
je 0x140064d4a
mov rdx, qword [rbp + 0x290]
cmp rdx, 0x10
jb 0x140064d0f
inc rdx
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064d0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065050
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp + 0x288], xmm0
mov byte [rbp + 0x278], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x278], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x288], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140064d85
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064d80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065050
call fcn.1402240ec
mov qword [rbp + 0x220], r12
lea r8, [rbp + 0x1e8]
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x268]
call fcn.1400710b0
nop
lea rdx, str.success
lea rcx, [rbp + 0x268]
call fcn.1400711d0
cmp byte [rax], 4
jne 0x140065056
lea rcx, [rbp + 0x268]
cmp byte [rax + 8], 0
je 0x140064ecd
lea rdx, str.sessionid
call fcn.1400711d0
mov rdx, rax
lea rcx, [0x14034d930]
call fcn.140071310
nop
movzx edx, byte [rbp + 0x268]
lea rcx, [rbp + 0x270]
call fcn.14006f930
nop
mov rdx, qword [rbp + 0x290]
cmp rdx, 0x10
jb 0x140064e45
inc rdx
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064e40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650ad
call fcn.1402240ec
movdqa xmm0, xmmword [0x140310c10]
movdqu xmmword [rbp + 0x288], xmm0
mov byte [rbp + 0x278], 0
cmp r15, 0x10
jb 0x140064e93
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140064e8b
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650b3
mov rcx, rsi
call fcn.1402240ec
mov rcx, qword [rbp + 0x2d8]
xor rcx, rsp
call fcn.140224090
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rdx, str.message
call fcn.1400711d0
mov rdi, rax
mov byte [rsp + 0x68], 3
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1402240b0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov r8d, 0xa
lea rdx, str.invalidver
mov rcx, rax
call fcn.14005cf80
mov qword [rsp + 0x70], rbx
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.140073bc0
movzx ebx, al
movzx edx, byte [rsp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.14006f930
nop
lea rcx, [rbp + 0x268]
test bl, bl
jne 0x140064f6b
lea rdx, str.message
call fcn.1400711d0
lea rdx, [rbp + 0x298]
mov rcx, rax
call fcn.1400713e0
mov rcx, rax
call fcn.14006bee0
nop
call fcn.14005b520
nop
lea rdx, str.download
call fcn.1400711d0
lea rdx, [rbp + 0x298]
mov rcx, rax
call fcn.1400713e0
lea rcx, [rbp + 0x298]
call fcn.14005ca20
mov r8, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.140233dc8
nop
lea rdx, str.Application_Not_Setup_Correctly.Please_Watch_Video_Linked_in_Main.cpp
lea rcx, [rbp + 0x298]
call fcn.14005ca90
mov rcx, rax
call fcn.14006bee0
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
nop
call fcn.140233764
int3
call fcn.14005b5c0
int3
call fcn.140233764
nop
call fcn.140233764
nop
mov rcx, rax
call fcn.14006fe20
mov rdx, rax
lea rcx, [rbp + 0x298]
call fcn.14005ca90
nop
mov r8, rax
lea rdx, str.type_must_be_boolean__but_is
lea rcx, [rbp + 0x190]
call fcn.1400709d0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x1b0]
call fcn.1400615d0
lea rdx, [0x1403342a8]
lea rcx, [rbp + 0x1b0]
call fcn.140226378
nop
call fcn.140233764
nop
call fcn.140233764
int3