Function at 0x14005ff70
Capabilities:
Encode data using xor
Execute command

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x600
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14014b0c0]
xor rax, rsp
mov qword [rbp + 0x580], rax
xor r14d, r14d
mov dword [rbp + 8], r14d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x328], xmm0
mov qword [rbp + 0x338], rax
movabs rax, 0xc6ee00e1d8ca6bf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs r15, 0xe2727d9e47389f36
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs r12, 0xc6e8d6b78e8c3ed
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4f8], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x4f0]
movdqa xmmword [rbp + 0x40], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x210], xmm1
lea rax, [rbp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r14b
jne 0x140060050
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x200]
call fcn.14004ebe0
nop
lea rax, [rbp + 0x200]
mov qword [rbp + 0x220], rax
lea rax, [rbp + 0x220]
mov qword [rbp + 0x228], rax
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x328]
call fcn.140064010
nop
lea r9, [fcn.14004c630]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x1f]
lea rcx, [rbp + 0x200]
call fcn.1400f1b40
movabs rsi, 0xc6e8d6b78e8c3e7
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movdqa xmm0, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x4e0]
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0xc0]
call fcn.140053460
mov edi, r14d
mov rax, qword [rbp + 0x330]
sub rax, qword [rbp + 0x328]
sar rax, 5
movabs rbx, 0xc6e8d6b78c8e3cd
test rax, rax
je 0x14006033c
mov rbx, r14
movabs rsi, 0xc6e8d6b78e2b0c8
movabs r13, 0xc6e8d6b78c8e3cd
nop
lea edx, [rdi + 1]
movsxd rdi, edx
lea rcx, [rbp + 0x3b0]
call fcn.140053520
nop
shl rbx, 5
add rbx, qword [rbp + 0x328]
mov rdx, rbx
lea rcx, [rbp + 0x3d0]
call fcn.140051a50
nop
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x470], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x478], rax
movdqa xmm0, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x470]
movdqa xmmword [rbp + 0xd0], xmm0
lea rcx, [rbp + 0xd0]
call fcn.140053460
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x460], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x468], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x460]
movdqa xmmword [rbp + 0xe0], xmm0
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x2e0]
call fcn.140051a50
movups xmm7, xmmword [rbp + 0x3d0]
movaps xmmword [rbp + 0x2a0], xmm7
movups xmm6, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x2b0], xmm6
lea r8, [rbp + 0x2a0]
lea rdx, [rbp + 0xe0]
mov rcx, rax
call fcn.1400670d0
nop
psrldq xmm6, 8
movq rdx, xmm6
cmp rdx, 0xf
jbe 0x1400602c9
inc rdx
movq rcx, xmm7
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400602c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140060862
call fcn.1400f1e50
nop
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 0xf
jbe 0x14006030a
inc rdx
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140060305
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140061168
call fcn.1400f1e50
mov rax, qword [rbp + 0x330]
sub rax, qword [rbp + 0x328]
sar rax, 5
mov rbx, rdi
cmp rdi, rax
jb 0x140060160
movabs rbx, 0xc6e8d6b78c8e3cd
movabs rsi, 0xc6e8d6b78e8c3e7
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
movdqa xmm0, xmmword [rbp + 0xf0]
xorps xmm0, xmmword [rbp + 0x500]
movdqa xmmword [rbp + 0xf0], xmm0
lea rcx, [rbp + 0xf0]
call fcn.140053460
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x518], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x510]
movdqa xmmword [rbp + 0x100], xmm0
lea rcx, [rbp + 0x100]
call fcn.140053460
movabs rax, 0xc6e8d6b789baf8e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x520]
movdqa xmmword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x530], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x538], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x530]
movdqa xmmword [rbp + 0x120], xmm0
lea rcx, [rbp + 0x120]
call fcn.140053460
mov rsi, qword [rbp + 0x328]
mov byte [0x14014cd00], 0
lea rdi, [0x14014b148]
mov r13d, 7
nop
movabs rax, 0xc6ee00e1d8ca6bf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x548], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x540]
movdqa xmmword [rbp + 0x50], xmm0
lea rcx, [rbp + 0x50]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140060540
mov r8, qword [rsi + 0x10]
mov rcx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14006055a
mov rcx, qword [rsi]
cmp r8, rax
jne 0x140060f73
lea rdx, [rbp + 0x50]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140060f73
xorps xmm0, xmm0
movups xmmword [rbp + 0x360], xmm0
mov qword [rbp + 0x370], r14
mov qword [rbp + 0x378], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x360], al
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
movdqa xmm0, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x410]
movdqa xmmword [rbp + 0x130], xmm0
lea rcx, [rbp + 0x130]
call fcn.140053460
lea rdx, [0x14014c7f8]
cmp qword [0x14014c810], 0xf
cmova rdx, qword [0x14014c7f8]
movabs rax, 0xc6e8d6b78e8b0c8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x420]
movdqa xmmword [rbp + 0x140], xmm0
lea rcx, [rbp + 0x140]
call fcn.1400672f0
lea rdx, [rbp + 0x360]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140067370
movabs rax, 0xc6e8d6b78e8c3e7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x430], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
movdqa xmm0, xmmword [rbp + 0x150]
xorps xmm0, xmmword [rbp + 0x430]
movdqa xmmword [rbp + 0x150], xmm0
lea rcx, [rbp + 0x150]
call fcn.140053460
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x300]
call fcn.140051a50
mov rdx, rax
lea rcx, [0x14014caf0]
call fcn.14009df80
cmp byte [0x14014cd00], 0
jne 0x140060869
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
movdqa xmm0, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x160], xmm0
lea rcx, [rbp + 0x160]
call fcn.140053460
lea rdx, [0x14014cd08]
cmp qword [0x14014cd20], 0xf
cmova rdx, qword [0x14014cd08]
movabs rax, 0x7e0bad05118faca1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xe80158be7d4af044
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rcx, 0x16a8ebb900d6dc3f
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs r8, 0x13bff1ac9e4524d0
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x568], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x570], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x578], rax
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x560]
vmovdqa ymmword [rbp + 0x1c0], ymm1
lea rcx, [rbp + 0x1c0]
vzeroupper
call fcn.140066cd0
jmp 0x140060f19
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
movabs rax, 0x780fe9340a8db098
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xe2727dea265cb157
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x450], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x458], rax
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x450]
movdqa xmmword [rbp + 0x60], xmm0
lea rax, [rbp + 0x60]
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400608d0
call fcn.1400f2ca0
lea rcx, [rbp + 0x60]
mov qword [rbp + 0x260], rcx
mov qword [rbp + 0x268], rbx
lea r8, [rbp + 0x260]
mov edx, eax
lea rcx, [rbp + 0x198]
call fcn.140056b30
mov ebx, dword [rbp + 8]
or ebx, 3
mov dword [rbp + 8], ebx
lea rcx, [rbp + 0x1e0]
call fcn.140057a20
nop
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140057080
or ebx, 4
mov dword [rbp + 8], ebx
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x80]
call fcn.140056da0
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rcx, qword [rbp + 0x80]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0x3f0]
call fcn.1400f2e18
mov r8d, eax
test eax, eax
jne 0x1400609b4
mov edx, dword [rbp + 0x400]
bt edx, 0xa
jae 0x1400609a6
mov eax, dword [rbp + 0x404]
cmp eax, 0xa000000c
jne 0x140060998
lea eax, [r8 + 4]
jmp 0x1400609da
cmp eax, 0xa0000003
jne 0x1400609a6
mov eax, 0xa
jmp 0x1400609da
movzx eax, dl
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x1400609da
mov dword [rbp + 0x294], 0xffff
sub eax, 2
je 0x1400609d5
sub eax, 1
je 0x1400609d5
sub eax, 0x32
je 0x1400609d5
cmp eax, 0x46
mov eax, r14d
jne 0x1400609da
mov eax, 1
mov dword [rbp + 0x250], r8d
mov qword [rbp + 0x258], rdi
movaps xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x390], xmm0
test eax, eax
je 0x140060a12
mov dword [rbp + 0x390], r14d
mov qword [rbp + 0x398], rdi
cmp eax, 1
sete dil
jmp 0x140060a1e
mov dil, 1
test r8d, r8d
jne 0x14006116f
and ebx, 0xfffffffb
mov dword [rbp + 8], ebx
mov rdx, qword [rbp + 0x98]
cmp rdx, 7
jbe 0x140060a6a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140060a65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006114c
call fcn.1400f1e50
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], r13
mov word [rbp + 0x80], r14w
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 7
jbe 0x140060ac6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140060ac1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140061153
call fcn.1400f1e50
mov qword [rbp + 0x1f0], r14
mov qword [rbp + 0x1f8], r13
mov word [rbp + 0x1e0], r14w
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 7
jbe 0x140060b22
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140060b1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006115a
call fcn.1400f1e50
mov qword [rbp + 0x1a8], r14
mov qword [rbp + 0x1b0], r13
mov word [rbp + 0x198], r14w
test dil, dil
je 0x140060e29
xor edx, edx
lea rcx, [rbp + 0x380]
call fcn.140065da0
nop
lea rax, [rbp + 0x10]
mov qword [rbp + 0x190], rax
mov byte [rbp + 0x10], 0
xor eax, eax
mov qword [rbp + 0x18], rax
xor edx, edx
lea rcx, [rbp + 0x18]
call fcn.1400658a0
mov byte [rbp + 0x10], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x3a0], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400f216c
mov rbx, rax
lea rax, [rbp + 0x320]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0x3a8], rbx
lea rdx, [rbp + 0x360]
mov rcx, rbx
call fcn.140051a50
mov qword [rbp + 0x3a8], r14
mov qword [rbp + 0x18], rbx
movabs rax, 0xc6e8d6b78e8c398
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x480], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x488], rax
movdqa xmm0, xmmword [rbp + 0x70]
xorps xmm0, xmmword [rbp + 0x480]
movdqa xmmword [rbp + 0x70], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x240], r14
mov qword [rbp + 0x248], r14
lea rax, [rbp + 0x70]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140060c30
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x230]
call fcn.14004ebe0
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x380]
call fcn.14006a640
nop
movzx edx, byte [rax]
movzx ecx, byte [rbp + 0x10]
mov byte [rax], cl
mov byte [rbp + 0x10], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rbp + 0x18]
mov qword [rax + 8], rdx
mov qword [rbp + 0x18], rcx
movzx edx, byte [rbp + 0x10]
lea rcx, [rbp + 0x18]
call fcn.1400658a0
nop
mov dword [rsp + 0x28], r14d
mov byte [rsp + 0x20], 0
mov r9b, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 0xffffffff
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x380]
call fcn.140064160
nop
mov ecx, r14d
mov rdx, r14
cmp qword [rbp + 0x350], rcx
jbe 0x140060ced
nop
lea rax, [rbp + 0x340]
cmp qword [rbp + 0x358], 0xf
cmova rax, qword [rbp + 0x340]
xor byte [rax + rdx], 0xcc
inc ecx
lea rdx, [rdx + 1]
movsxd rax, ecx
cmp rax, qword [rbp + 0x350]
jb 0x140060cc0
lea rax, [rbp + 0x2c0]
mov qword [rbp + 0x190], rax
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x2c0]
call fcn.140051a50
mov rbx, rax
movabs rax, 0x780fe9340a8db098
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x20], rcx
movabs rax, 0xe2727dea265cb157
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x28], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x490], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x498], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x490]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
mov qword [rbp + 0x280], r14
mov qword [rbp + 0x288], r14
lea rax, [rbp + 0x20]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140060d90
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x270]
call fcn.14004ebe0
nop
mov rdx, rbx
lea rcx, [rbp + 0x270]
call fcn.140059460
nop
mov rdx, qword [rbp + 0x358]
cmp rdx, 0xf
jbe 0x140060dfc
inc rdx
mov rcx, qword [rbp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140060df7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140061161
call fcn.1400f1e50
mov qword [rbp + 0x350], r14
mov qword [rbp + 0x358], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x340], 0
movzx edx, byte [rbp + 0x380]
lea rcx, [rbp + 0x388]
call fcn.1400658a0
nop
movabs rbx, 0xc6e8d6b78c8e3cd
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movdqa xmm0, xmmword [rbp + 0x170]
xorps xmm0, xmmword [rbp + 0x4a0]
movdqa xmmword [rbp + 0x170], xmm0
lea rcx, [rbp + 0x170]
call fcn.140053460
lea rdx, [0x14014c818]
cmp qword [0x14014c830], 0xf
cmova rdx, qword [0x14014c818]
movabs rax, 0xc6e8d6b78e8b0c8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movdqa xmm0, xmmword [rbp + 0x180]
xorps xmm0, xmmword [rbp + 0x4b0]
movdqa xmmword [rbp + 0x180], xmm0
lea rcx, [rbp + 0x180]
call fcn.140066d50
lea rdi, [0x14014b148]
mov rdx, qword [rbp + 0x378]
cmp rdx, 0xf
jbe 0x140060f5a
inc rdx
mov rcx, qword [rbp + 0x360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140060f55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140061168
call fcn.1400f1e50
mov qword [rbp + 0x370], r14
mov qword [rbp + 0x378], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x360], 0
movabs rax, 0xc6e8d1b1d8dafbe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x4c0]
movdqa xmmword [rbp + 0xa0], xmm0
movabs rax, 0x3e5de10e169aa686
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0xe2727d9e2b54fb18
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x4d0]
movdqa xmmword [rbp + 0x30], xmm0
lea rcx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
jne 0x14006104e
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
test rax, rax
je 0x140061069
lea rdx, [rbp + 0xa0]
mov rcx, rax
call fcn.140046f30
test rax, rax
je 0x140061069
mov ecx, 0x1388
call rax
movabs rax, 0xc6e8d6b789baf8e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x558], rax
movdqa xmm0, xmmword [rbp + 0xb0]
xorps xmm0, xmmword [rbp + 0x550]
movdqa xmmword [rbp + 0xb0], xmm0
lea rcx, [rbp + 0xb0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r13w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
cmp byte [0x14014cd00], 0
jne 0x140061106
call fcn.14005ff70
cmp byte [0x14014cd00], 0
je 0x1400604e0
lea rcx, [rbp + 0x328]
call fcn.140063fa0
mov rcx, qword [rbp + 0x580]
xor rcx, rsp
call fcn.1400f1a00
lea r11, [rsp + 0x600]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x390]
call fcn.1400579c0
int3