Function at 0x14007bac0
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2a0]
sub rsp, 0x3a0
mov rax, qword [0x140a2bf88]
xor rax, rsp
mov qword [rbp + 0x298], rax
mov r15, rcx
lea rcx, [rsp + 0x70]
call fcn.14007cea0
nop
mov rdx, rax
lea rcx, [rbp + 0x238]
call fcn.140082d30
mov rdx, rax
lea rcx, [r15 + 0x170]
call fcn.140067a00
mov rdx, qword [rbp + 0x250]
cmp rdx, 0x10
jb 0x14007bb65
inc rdx
mov rcx, qword [rbp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007bb60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c9eb
call fcn.140220548
xor r12d, r12d
mov qword [rbp + 0x248], r12
mov qword [rbp + 0x250], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x238], r12b
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14007bbbd
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007bbb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c9f1
call fcn.140220548
cmp qword [r15 + 0x30], 0xa
jne 0x14007c9cf
cmp qword [r15 + 0x50], 0x40
jne 0x14007c9cf
lea rax, [rbp + 0x1c8]
mov qword [rbp + 0x160], rax
lea rax, [rbp + 0x1e8]
mov qword [rbp - 0x10], rax
lea rax, [rbp + 0x168]
mov qword [rbp - 8], rax
lea rax, [rbp + 0x188]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0xb8a2a4a0
mov word [rsp + 0x34], 0x100
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0x37]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 4
jb 0x14007bc20
mov byte [rsp + 0x35], 0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
lea rax, [rsp + 0x30]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007bc60
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x30]
call fcn.140071690
nop
lea rdx, [r15 + 0x20]
lea rcx, [rbp + 0x100]
call fcn.140077850
mov r13, rax
mov rdx, r15
lea rcx, [rbp + 0xe0]
call fcn.140077850
mov r12, rax
lea rdx, [0x140a37be8]
lea rcx, [rbp + 0x1c8]
call fcn.140063ef0
mov rdi, rax
lea rdx, [r15 + 0x40]
lea rcx, [rbp + 0x1e8]
call fcn.140063ef0
mov rbx, rax
lea rdx, [r15 + 0x170]
lea rcx, [rbp + 0x208]
call fcn.140063ef0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.140077b30
mov r14, rax
lea rdx, [0x140a37be8]
lea rcx, [rbp + 0x168]
call fcn.140063ef0
mov rdi, rax
lea rdx, [r15 + 0x40]
lea rcx, [rbp + 0x188]
call fcn.140063ef0
mov rbx, rax
lea rdx, [r15 + 0x60]
lea rcx, [rbp + 0x278]
call fcn.140063ef0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.140077b30
mov rbx, rax
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x80]
call fcn.140077850
mov r10, rax
mov dword [rsp + 0x30], 0xa9bbb3bd
mov word [rsp + 0x34], 0xf0
mov byte [rsp + 0x36], 1
xor edi, edi
mov ecx, edi
lea eax, [rcx - 0x37]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 5
jb 0x14007bd70
mov byte [rsp + 0x36], dil
lea rax, [rsp + 0x30]
mov r9, rsi
nop dword [rax]
inc r9
cmp byte [rax + r9], dil
jne 0x14007bd90
lea r8, [rsp + 0x30]
xor edx, edx
mov rcx, r10
call fcn.14007ca70
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
mov dword [rsp + 0x30], 0xbeaebcef
mov word [rsp + 0x34], 0xf0
mov byte [rsp + 0x36], 1
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x37]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 5
jb 0x14007bdf0
mov byte [rsp + 0x36], 0
lea rax, [rsp + 0x30]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007be10
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400715d0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rbx
lea r8, [rsp + 0x70]
movzx edx, byte [rsp + 0x38]
lea rcx, [rbp + 0x60]
call fcn.140064010
nop
mov dword [rsp + 0x40], 0xafa5afef
mov dword [rsp + 0x44], 0xedb6aba6
mov word [rsp + 0x48], 0x100
mov rcx, rdi
nop dword [rax + rax]
lea eax, [rcx - 0x37]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 8
jb 0x14007be80
mov byte [rsp + 0x49], 0
lea rax, [rsp + 0x40]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007bea0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x60]
call fcn.1400715d0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x140], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x150], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r14
lea r8, [rbp + 0x140]
movzx edx, byte [rsp + 0x38]
lea rcx, [rbp + 0x40]
call fcn.140064010
nop
mov dword [rsp + 0x30], 0xa1aaa4ef
mov dword [rsp + 0x34], 0x100f3a8
mov rcx, rdi
nop dword [rax + rax]
lea eax, [rcx - 0x37]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 6
jb 0x14007bf10
mov byte [rsp + 0x37], 0
lea rax, [rsp + 0x30]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007bf30
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x40]
call fcn.1400715d0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r12
lea r8, [rbp + 0x120]
movzx edx, byte [rsp + 0x38]
lea rcx, [rbp + 0x20]
call fcn.140064010
nop
mov dword [rsp + 0x40], 0xa2bca5ef
mov dword [rsp + 0x44], 0xb4a6bca8
mov word [rsp + 0x48], 0xec
mov byte [rsp + 0x4a], 1
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x37]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 9
jb 0x14007bfb0
mov byte [rsp + 0x4a], 0
lea rax, [rsp + 0x40]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007bfd0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.1400715d0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r13
lea r8, [rsp + 0x50]
movzx edx, byte [rsp + 0x38]
lea rcx, [rbp]
call fcn.140064010
nop
mov dword [rsp + 0x40], 0xa5a5a3ef
mov dword [rsp + 0x44], 0xa6a691b9
mov word [rsp + 0x48], 0xec
mov byte [rsp + 0x4a], 1
mov rcx, rdi
nop
lea eax, [rcx - 0x37]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 9
jb 0x14007c040
mov byte [rsp + 0x4a], 0
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14007c060
mov r8, rsi
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.1400715d0
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [0x140a37be8]
cmp qword [0x140a37c00], 0x10
cmovae rdx, qword [0x140a37be8]
mov r8, qword [0x140a37bf8]
lea rcx, [rbp - 0x70]
call fcn.1400715d0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x238], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x248], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14007c12a
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c125
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c9f7
call fcn.140220548
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14007c175
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c170
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c9fd
call fcn.140220548
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14007c1c3
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c1bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca03
call fcn.140220548
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x14007c1fe
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c1f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca09
call fcn.140220548
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x14007c250
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c24a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca0f
call fcn.140220548
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x14007c28b
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c286
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca15
call fcn.140220548
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0x10
jb 0x14007c2dd
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c2d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca1b
call fcn.140220548
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x14007c318
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c313
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca21
call fcn.140220548
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14007c365
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c35f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca27
call fcn.140220548
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x14007c3a0
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c39b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca2d
call fcn.140220548
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x14007c3f1
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c3ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca33
call fcn.140220548
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x14007c44b
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c446
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca39
call fcn.140220548
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x14007c4a5
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c4a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca3f
call fcn.140220548
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0x10
jb 0x14007c4ff
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c4fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca45
call fcn.140220548
mov qword [rbp + 0xf0], rdi
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
mov byte [rbp + 0xe0], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0x10
jb 0x14007c559
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c554
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca4b
call fcn.140220548
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14007c5ad
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c5a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca51
call fcn.140220548
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea rdi, [rbp + 0x238]
cmp qword [rbp + 0x250], 0x10
cmovae rdi, qword [rbp + 0x238]
mov rsi, qword [rbp + 0x248]
cmp rsi, 0x10
jae 0x14007c605
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x50], xmm0
mov ebx, reloc.WS2_32.dll_ntohs
xor r12d, r12d
jmp 0x14007c685
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14007c65c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14007ca57
mov rcx, rax
call fcn.140220630
mov rcx, rax
test rax, rax
je 0x14007ca5d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
xor r12d, r12d
jmp 0x14007c671
test rcx, rcx
je 0x14007c66b
call fcn.140220630
xor r12d, r12d
jmp 0x14007c671
xor r12d, r12d
mov eax, r12d
mov qword [rsp + 0x50], rax
lea r8, [rsi + 1]
mov rdx, rdi
mov rcx, rax
call fcn.1402219e0
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x258]
call fcn.140080ad0
nop
lea rax, [rbp + 0x278]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x188]
mov qword [rbp - 8], rax
lea rdx, [0x140a37be8]
lea rcx, [rbp + 0x278]
call fcn.140063ef0
mov rdi, rax
lea rdx, [r15 + 0x40]
lea rcx, [rbp + 0x188]
call fcn.140063ef0
mov rbx, rax
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x168]
call fcn.140063ef0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400748e0
mov rbx, rax
lea rax, [rbp + 0x258]
cmp rax, rbx
je 0x14007c793
mov rdx, qword [rbp + 0x270]
cmp rdx, 0x10
jb 0x14007c758
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c753
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca63
call fcn.140220548
movdqa xmm0, xmmword [0x140267fd0]
movdqu xmmword [rbp + 0x268], xmm0
mov byte [rbp + 0x258], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x258], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x268], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14007c7cf
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c7ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca63
call fcn.140220548
mov qword [rbp + 0x1c0], r12
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0x188]
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x228]
call fcn.140060770
nop
lea rdx, str.success
lea rcx, [rbp + 0x228]
call fcn.14005bf00
mov rcx, rax
call fcn.14005f2a0
lea rcx, [rbp + 0x228]
test al, al
je 0x14007c8e5
lea rdx, str.sessionid
call fcn.14005bf00
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.14005c1c0
lea rcx, [r15 + 0x150]
mov rdx, rax
call fcn.140067a00
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14007c888
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c882
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007ca69
call fcn.140220548
nop
movzx edx, byte [rbp + 0x228]
lea rcx, [rbp + 0x230]
call fcn.140075030
nop
lea rcx, [rbp + 0x258]
call fcn.140066b00
nop
lea rcx, [rbp + 0x238]
call fcn.140066b00
mov rcx, qword [rbp + 0x298]
xor rcx, rsp
call fcn.140220610
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, str.message
call fcn.14005bf00
mov rdi, rax
mov byte [rsp + 0x40], 3
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140220630
mov rbx, rax
mov qword [rax], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov r8d, 0xa
lea rdx, str.invalidver
mov rcx, rax
call fcn.140071690
mov qword [rsp + 0x48], rbx
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140067aa0
movzx ebx, al
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140075030
nop
lea rcx, [rbp + 0x228]
test bl, bl
jne 0x14007c97e
lea rdx, str.message
call fcn.14005bf00
mov rcx, rax
lea rdx, [rbp + 0x278]
call fcn.14005c1c0
mov rcx, rax
call fcn.140078a30
int3
lea rdx, str.download
call fcn.14005bf00
mov rcx, rax
lea rdx, [rbp + 0x278]
call fcn.14005c1c0
lea rcx, [rbp + 0x278]
call fcn.1400728b0
mov r8, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, [0x140266064]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.1402339b8
nop
lea rdx, str.Application_Not_Setup_Correctly.Please_Watch_Video_Linked_in_Main.cpp
lea rcx, [rbp + 0x278]
call fcn.140063fd0
mov rcx, rax
call fcn.140078a30
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
int3
call fcn.140071190
int3
call fcn.140233360
nop
call fcn.140233360
nop
call fcn.140233360
int3