Function at 0x1400580c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4a0]
sub rsp, 0x5a0
mov rax, qword [0x1400db100]
xor rax, rsp
mov qword [rbp + 0x490], rax
mov r14, rcx
xor ebx, ebx
mov dword [rsp + 0x50], ebx
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14005c2c0]
xor edx, edx
xor ecx, ecx
call qword [0x1400b61a8]
cmp qword [r14 + 0x30], 0xa
jne 0x1400599ca
cmp qword [r14 + 0x50], 0x40
jne 0x1400599ca
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x1b8], xmm1
mov qword [rbp + 0x1c8], rbx
mov qword [rbp + 0x1d0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1b8], bl
lea rcx, [rbp + 0x270]
call qword [0x1400b6798]
mov qword [rbp + 0x108], rbx
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x270]
call qword [0x1400b67a0]
test eax, eax
jne 0x1400581ac
mov rdx, qword [rbp + 0x108]
lea rcx, [rbp + 0x1b8]
call fcn.14004e6b0
lea rcx, [rbp + 0x108]
call qword [0x1400b6790]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f8], xmm0
mov qword [rbp + 0x208], rbx
mov qword [rbp + 0x210], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1f8], 0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
mov r8d, reloc.WS2_32.dll_recv
cmp qword [rbp + 0x1c8], r8
cmovb r8, qword [rbp + 0x1c8]
lea rdx, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 0xf
cmova rdx, qword [rbp + 0x1b8]
lea rcx, [rbp - 0x68]
call fcn.14002c870
movups xmm1, xmmword [rbp - 0x68]
movups xmmword [rbp + 0x1f8], xmm1
movups xmm0, xmmword [rbp - 0x58]
movups xmmword [rbp + 0x208], xmm0
movzx eax, word [0x1400be088]
mov word [rsp + 0x50], ax
cmp byte [0x1400be089], 0
je 0x140058245
mov byte [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_45
xor byte [rsp + 0x51], 0x34
lea rax, [rsp + 0x50]
mov rsi, 0xffffffffffffffff
mov rbx, rsi
inc rbx
cmp byte [rax + rbx], 0
jne 0x140058254
movabs r12, 0x7fffffffffffffff
mov rax, r12
movq rdx, xmm0
mov qword [rsp + 0x58], rdx
sub rax, rdx
cmp rax, rbx
jb 0x140059a1c
lea rax, [rbp + 0x1f8]
movq rcx, xmm1
mov qword [rsp + 0x40], rcx
psrldq xmm0, 8
movq r8, xmm0
mov qword [rbp + 0x60], r8
cmp r8, 0xf
cmova rax, rcx
mov qword [rbp - 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x148], xmm1
lea r13, [rdx + rbx]
mov edi, reloc.WS2_32.dll_ntohs
lea r15, [rbp + 0x138]
cmp r13, rdi
jbe 0x140058368
mov rdi, r13
or rdi, 0xf
cmp rdi, r12
jbe 0x14005831e
mov rdi, r12
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b04bc
test rax, rax
je 0x140058465
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
mov rdx, qword [rsp + 0x58]
mov rax, qword [rbp - 0x70]
jmp 0x140058361
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140058346
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140059a16
jmp 0x1400582f6
test rcx, rcx
je 0x14005835e
call fcn.1400b04bc
mov r15, rax
mov rdx, qword [rsp + 0x58]
mov rax, qword [rbp - 0x70]
jmp 0x140058361
xor r15d, r15d
mov qword [rbp + 0x138], r15
mov qword [rbp + 0x148], r13
mov qword [rbp + 0x150], rdi
mov r8, rdx
mov rdx, rax
mov rcx, r15
call fcn.1400b1f0a
mov rdi, qword [rsp + 0x58]
lea rcx, [rdi + r15]
mov r8, rbx
lea rdx, [rsp + 0x50]
call fcn.1400b1f0a
mov byte [r15 + r13], 0
lea rdx, [r14 + 0x40]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1400583b1
mov rdx, qword [rdx]
lea rcx, [rbp + 0x138]
call fcn.140043110
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
xor r15d, r15d
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r15b
lea rcx, [r14 + 0x278]
lea rdx, [rbp - 0x68]
call fcn.14004e620
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x14005842d
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058427
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058427
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x140058471
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005846c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005846c
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
lea rcx, [rbp + 0x1d8]
call fcn.140051320
nop
call fcn.140061da0
mov r13, rax
mov dword [rsp + 0x60], 0xafb7d098
mov dword [rsp + 0x64], 0xa1adb1a7
mov word [rsp + 0x68], 0xfb
mov byte [rsp + 0x6a], 1
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x1400584af
mov rdx, qword [r14]
xor r8d, r8d
mov rcx, r13
call fcn.1400608a0
mov rbx, rax
mov dword [rsp + 0x58], 0xaca1d198
mov dword [rsp + 0x5c], 0x100fea7
mov dword [rbp + 0x118], 0xa2aeda98
mov dword [rbp + 0x11c], 0xf8bda6a9
mov word [rbp + 0x120], 0x100
mov dword [rbp - 0x70], 0xb2a1d798
mov dword [rbp - 0x6c], 0x100feaa
mov dword [rbp - 0x78], 0xb3a5c998
mov word [rbp - 0x74], 0xff
mov byte [rbp - 0x72], 1
mov dword [rsp + 0x78], 0xa4b0c6ca
mov dword [rsp + 0x7c], 0xacaaaaff
mov word [rbp - 0x80], 0xb2
mov byte [rbp - 0x7e], 1
mov rcx, r15
nop word [rax + rax]
lea eax, [rcx - 0x42]
xor byte [rbp + rcx - 0x78], al
inc rcx
cmp rcx, 5
jb 0x140058530
mov byte [rbp - 0x72], 0
lea r9, [rbp + 0x110]
lea r8, [rbp - 0x73]
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x68]
call fcn.14002bf40
nop
cmp byte [rbp - 0x7e], 0
je 0x140058584
mov rcx, r15
nop word [rax + rax]
lea eax, [rcx - 0x42]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 9
jb 0x140058570
mov byte [rbp - 0x7e], 0
lea r9, [rbp + 0x110]
lea r8, [rbp - 0x7f]
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x218]
call fcn.14002bf40
nop
lea r9, [rbp - 0x68]
lea r8, [rbp + 0x218]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x48]
call fcn.14004d680
nop
mov rdx, qword [rbp + 0x230]
cmp rdx, 0xf
jbe 0x140058602
inc rdx
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400585fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400585fc
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x140058641
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005863b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005863b
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
nop
lea rdx, [r14 + 0x60]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140058653
mov rdx, qword [rdx]
lea rcx, [rbp - 0x48]
call fcn.140043110
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x168], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x158]
lea rcx, [rbp - 0x28]
call fcn.140046d40
nop
lea rdx, [rbp + 0x1d8]
cmp qword [rbp + 0x1f0], 0xf
cmova rdx, qword [rbp + 0x1d8]
mov r8, qword [rbp + 0x1e8]
mov rcx, rax
call fcn.140043110
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rbp + 0x118]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0xe8]
call fcn.140046f40
nop
lea rdx, [rbp + 0x1f8]
cmp qword [rbp + 0x60], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, rdi
mov rcx, rax
call fcn.140043110
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x138], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x148], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r15d, 0x3ff
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0xc8]
call fcn.140046d40
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.140046c60
nop
lea r8, [rsp + 0x60]
mov rdx, rax
lea rcx, [rbp + 0x88]
call fcn.140047020
nop
lea r8, [r14 + 0x20]
mov rdx, rax
lea rcx, [rbp + 0x238]
call fcn.14002c610
nop
lea rcx, [rbp + 0x88]
call fcn.1400303d0
nop
lea rcx, [rbp + 0xa8]
call fcn.1400303d0
nop
lea rcx, [rbp + 0xc8]
call fcn.1400303d0
nop
lea rcx, [rbp + 0x138]
call fcn.1400303d0
nop
lea rcx, [rbp + 0xe8]
call fcn.1400303d0
nop
lea rcx, [rbp + 0x68]
call fcn.1400303d0
nop
lea rcx, [rbp - 0x28]
call fcn.1400303d0
nop
lea rcx, [rbp + 0x158]
call fcn.1400303d0
nop
lea rcx, [rbp - 0x48]
call fcn.1400303d0
lea rdi, [r14 + 0xa0]
mov r8, qword [rdi + 0x10]
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140058810
mov rcx, qword [rdi]
test r8, r8
jne 0x140058833
lea rdx, [0x1400bb0f9]
call fcn.1400b1f46
test eax, eax
jne 0x140058833
cmp qword [r14 + 0xb0], 0
je 0x140058c56
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp + 0x158]
call fcn.14002c070
nop
lea rcx, [rbp + 0x158]
call fcn.140057100
movzx ebx, al
lea rcx, [rbp + 0x158]
call fcn.140043000
test bl, bl
jne 0x1400588bc
movdqa xmm0, xmmword [0x1400bea90]
movdqu xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x1400bea10]
movdqu xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [0x1400be9d0]
movdqu xmmword [rbp + 0x30], xmm0
mov word [rbp + 0x40], 0xc0
mov byte [rbp + 0x42], 1
lea rcx, [rbp + 0x10]
call fcn.1400502f0
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
xor r8d, r8d
xor ecx, ecx
call qword [0x1400b67d0]
xor ecx, ecx
call qword [0x1400b6c50]
int3
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x280]
call fcn.1400b1f10
cmp qword [rdi + 0x18], 0xf
jbe 0x1400588da
mov rdi, qword [rdi]
lea rax, [0x1400bb210]
mov qword [rbp + 0x280], rax
lea rcx, [rbp + 0x330]
call qword [0x1400b6578]
nop
mov dword [rsp + 0x50], 0x8003ff
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x280]
call qword [0x1400b6530]
nop
mov rax, qword [rbp + 0x280]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x280], rbx
mov rax, qword [rbp + 0x280]
movsxd rcx, dword [rax + 4]
lea r8d, [rcx - 0xb0]
mov dword [rbp + rcx + 0x27c], r8d
lea rcx, [rbp + 0x290]
call fcn.14002eca0
nop
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
mov rdx, rdi
lea rcx, [rbp + 0x290]
call fcn.140043d60
test rax, rax
jne 0x14005899b
mov rax, qword [rbp + 0x280]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x280]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [0x1400b65a0]
nop
mov rax, qword [rbp + 0x280]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x280], rbx
mov rax, qword [rbp + 0x280]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x27c], edx
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
xor edi, edi
mov qword [rbp + 0x148], rdi
mov qword [rbp + 0x150], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x138], dil
movups xmmword [rbp + 0x218], xmm0
movdqa xmm1, xmmword [0x1400bd830]
movdqu xmmword [rbp + 0x228], xmm1
mov byte [rbp + 0x218], dil
mov rax, qword [rbp + 0x280]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x280]
add rcx, rax
mov dl, 0xa
call qword [0x1400b6580]
movzx r8d, al
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x280]
call fcn.140049990
movdqa xmm0, xmmword [0x1400bea50]
movdqu xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x1400beac0]
movdqu xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [0x1400bea40]
movdqu xmmword [rbp + 0x30], xmm0
mov word [rbp + 0x40], 0x100
lea r8, [r14 + 0xa0]
mov rcx, qword [r8 + 0x10]
mov rax, r12
sub rax, rcx
cmp rax, 0x14
jb 0x140059a22
mov rax, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x140058a92
mov rax, qword [r8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_sendto
lea r9, str.certutil__hashfile__
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp + 0x158]
call fcn.14002f070
nop
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x158]
lea rcx, [rbp - 0x68]
call fcn.140047100
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140058adf
mov rax, qword [rax]
mov r8, rax
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x110]
call fcn.14004ee00
mov rdx, rax
lea rcx, [rbp + 0x218]
call fcn.14004e620
lea rcx, [rbp + 0x68]
call fcn.1400303d0
nop
lea rcx, [rbp - 0x68]
call fcn.1400303d0
nop
lea rcx, [rbp + 0x158]
call fcn.1400303d0
mov dword [rsp + 0x40], 0xaaafcb98
mov dword [rsp + 0x44], 0xf9ada7
mov byte [rsp + 0x48], 1
lea rcx, [rsp + 0x40]
call fcn.140050260
mov r9, rax
inc rsi
cmp byte [rax + rsi], 0
jne 0x140058b43
mov rax, r12
mov rcx, qword [rbp + 0x148]
sub rax, rcx
cmp rax, rsi
jb 0x140059a28
lea rax, [rbp + 0x138]
cmp qword [rbp + 0x150], 0xf
cmova rax, qword [rbp + 0x138]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x138]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x68]
call fcn.14002f070
mov r15d, 0xe003ff
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rdx, qword [rbp - 0x68]
mov r8, qword [rbp - 0x58]
lea rcx, [rbp + 0x238]
call fcn.140043110
nop
lea rcx, [rbp - 0x68]
call fcn.1400303d0
mov dword [rsp + 0x40], 0xa0a8cb98
mov dword [rsp + 0x44], 0xf9abb1
mov byte [rsp + 0x48], 1
lea rcx, [rsp + 0x40]
call fcn.140050260
mov rdx, rax
lea r8, [r14 + 0xa0]
lea rcx, [rbp + 0x158]
call fcn.140046cd0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140058c11
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x238]
call fcn.140043110
nop
lea rcx, [rbp + 0x158]
call fcn.1400303d0
nop
lea rcx, [rbp + 0x218]
call fcn.1400303d0
nop
lea rcx, [rbp + 0x138]
call fcn.1400303d0
nop
lea rcx, [rbp + 0x280]
call fcn.140031030
jmp 0x140058c58
xor edi, edi
mov rcx, r13
call fcn.140061d50
lea rax, [rbp + 0x158]
mov qword [rsp + 0x40], rax
lea rdx, [r14 + 0x80]
lea rcx, [rbp + 0x158]
call fcn.14002ef10
mov rbx, rax
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x68]
call fcn.14002ef10
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.14005dbb0
nop
movdqa xmm0, xmmword [0x1400be970]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x70], 1
cmp qword [rbp + 0x188], 0x10
jne 0x140058d45
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x42]
xor byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 0xf
jb 0x140058cd0
mov byte [rsp + 0x70], 0
lea r9, [rbp + 0x110]
lea r8, [rsp + 0x6f]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14002bf40
or r15d, 0x180000
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rdx, qword [rbp - 0x68]
lea rcx, [rbp + 0x178]
cmp qword [rbp + 0x190], 0xf
cmova rcx, qword [rbp + 0x178]
mov r8, qword [rbp + 0x188]
cmp r8, qword [rbp - 0x58]
jne 0x140058d45
call fcn.1400b1f46
test eax, eax
jne 0x140058d45
mov bl, 1
jmp 0x140058d47
xor bl, bl
bt r15d, 0x13
jae 0x140058d57
lea rcx, [rbp - 0x68]
call fcn.1400303d0
test bl, bl
je 0x140058dc0
movdqa xmm0, xmmword [0x1400bea80]
movdqu xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x1400be9e0]
movdqu xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [0x1400be9b0]
movdqu xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x1400be9c0]
movdqu xmmword [rbp + 0x40], xmm1
mov dword [rbp + 0x50], 0x2e9b8c
mov byte [rbp + 0x54], 1
lea rcx, [rbp + 0x10]
call fcn.140050320
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
xor r8d, r8d
xor ecx, ecx
call qword [0x1400b67d0]
xor ecx, ecx
call qword [0x1400b6c50]
int3
mov qword [rbp + 0x48], rdi
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x128]
call fcn.14004adb0
nop
mov dword [rsp + 0x40], 0xb2b3dad3
mov dword [rsp + 0x44], 0xa1a4a3
mov byte [rsp + 0x48], 1
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x40]
call fcn.14004ed40
nop
mov rbx, qword [rsp + 0x40]
movzx ecx, byte [rbp + 0x128]
test cl, cl
jne 0x140058e34
mov byte [rbp + 0x128], 1
call fcn.140049250
mov qword [rbp + 0x130], rax
movzx ecx, byte [rbp + 0x128]
jmp 0x140058e3b
mov rax, qword [rbp + 0x130]
cmp cl, 1
jne 0x140058e4f
lea rdx, [rbp - 0x48]
mov rcx, rax
call fcn.14004ec50
mov rbx, rax
lea rdx, [rbp + 0x198]
mov rcx, rbx
call fcn.140046c00
nop
lea rcx, [rbp - 0x48]
call fcn.1400303d0
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x390]
call fcn.1400b1f10
mov edx, 1
lea rcx, [rbp + 0x390]
call fcn.14004d9e0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x258], xmm0
mov qword [rbp + 0x268], rax
lea r8, [rbp + 0x110]
lea edx, [rax + 0x20]
lea rcx, [rbp + 0x258]
call fcn.14004dc00
nop
mov r13, qword [rbp + 0x260]
mov rax, r13
mov r15, qword [rbp + 0x258]
sub rax, r15
lea r8, [rbp + 0x178]
cmp qword [rbp + 0x190], 0xf
cmova r8, qword [rbp + 0x178]
lea rcx, [r14 + 0x40]
cmp qword [rcx + 0x18], 0xf
jbe 0x140058ef1
mov rcx, qword [rcx]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9, qword [rbp + 0x188]
mov rdx, qword [r14 + 0x50]
call fcn.140065400
mov rsi, r15
cmp r15, r13
je 0x140058f77
movzx edi, byte [rsi]
lea rdx, [0x140057f00]
lea rcx, [rbp + 0x3a0]
call qword [0x1400b6458]
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0x30
call qword [0x1400b6758]
mov edx, 2
lea rcx, [rsp + 0x60]
call fcn.1400b1dea
mov r8, qword [rax]
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov rdx, qword [rax + 8]
call r8
mov edx, edi
mov rcx, rbx
call qword [0x1400b6460]
inc rsi
cmp rsi, r13
jne 0x140058f13
xor edi, edi
lea rbx, [0x1400db058]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rbx, qword [0x1400db058]
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x390]
call fcn.140060200
cmp qword [rax + 0x18], 0xf
jbe 0x140058fb0
mov rax, qword [rax]
nop dword [rax + rax]
movd xmm2, dword [rax]
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
psrad xmm2, 0x18
movd xmm0, dword [rbx]
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm2, xmm0
movd xmm1, dword [rbx + 4]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
psrad xmm1, 0x18
movd xmm0, dword [rax + 4]
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
orps xmm1, xmm2
movdqa xmm0, xmm1
psrldq xmm0, 8
orps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
orps xmm1, xmm0
movd ebx, xmm1
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x140059059
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059054
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059054
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
test ebx, ebx
je 0x1400590c2
mov rcx, qword [rbp + 0x1a8]
sub r12, rcx
cmp r12, 0x6b
jb 0x140059a10
lea rax, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 0xf
cmova rax, qword [rbp + 0x198]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], WSAStartup
lea r9, str.Signature_checksum_failed._Request_was_tampered_with_or_session_ended_most_likely.__echo:__echo_Message:
lea r8, [rbp + 0x198]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x48]
call fcn.14002f070
lea rcx, [rbp - 0x48]
call fcn.1400566d0
lea rdx, [rbp + 0x128]
lea rcx, [rsp + 0x60]
call fcn.14004d410
mov rdx, rax
mov rcx, r14
call fcn.14005b2e0
mov rax, qword [str._AVURKJ:_QBeRKJSTR]
mov qword [rsp + 0x58], rax
cmp byte [0x1400be137], 0
je 0x14005923f
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1400591fa
movdqa xmm4, xmmword [0x1400be990]
movdqa xmm2, xmmword [0x1400bd840]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.7777]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400bd8d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400be9a0]
movd xmm0, dword [rsp + 0x58]
xorps xmm2, xmm0
movd dword [rsp + 0x58], xmm2
movdqa xmm3, xmmword [0x1400bd850]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.7777]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400bd8d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400be9a0]
movd xmm0, dword [rsp + 0x5c]
xorps xmm2, xmm0
movd dword [rsp + 0x5c], xmm2
jmp 0x14005923f
lea r9, [rsp + 0x58]
mov r8d, edi
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140059210
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x128]
call fcn.140046b20
lea rcx, [rax + 8]
cmp byte [rax], 4
cmovne rcx, rdi
cmp byte [rcx], 0
je 0x1400594bc
movsd xmm0, qword [0x1400be138]
movsd qword [rbp + 0x118], xmm0
movzx ecx, word [0x1400be140]
mov word [rbp + 0x120], cx
movzx eax, byte [0x1400be142]
mov byte [rbp + 0x118], WSAStartup
xor byte [rbp + 0x119], 0x34
xor byte [rbp + 0x11a], 0x35
xor byte [rbp + 0x11b], 0x36
xor byte [rbp + 0x11c], 0x37
xor byte [rbp + 0x11d], 0x38
xor byte [rbp + 0x11e], 0x39
xor byte [rbp + 0x11f], 0x3a
xor cl, 0x3b
mov byte [rbp + 0x120], cl
xor byte [rbp + 0x121], 0x3c
xor al, 0x3d
mov byte [rbp + 0x122], al
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x128]
call fcn.140046b20
lea rcx, [rax + 8]
cmp byte [rax], 4
cmovne rcx, rdi
cmp byte [rcx], 0
je 0x140059307
mov ecx, 0x64
call qword [0x1400b6328]
mov dword [rsp + 0x78], 0xb2b3dacd
mov dword [rsp + 0x7c], 0xacaaacab
mov word [rbp - 0x80], 0xa2
mov byte [rbp - 0x7e], 1
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x42]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 9
jb 0x140059330
mov byte [rbp - 0x7e], 0
lea r9, [rbp + 0x110]
lea r8, [rbp - 0x7f]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x48]
call fcn.14002bf40
nop
movzx ecx, byte [rbp + 0x128]
test cl, cl
jne 0x140059385
mov byte [rbp + 0x128], 1
call fcn.140049250
mov qword [rbp + 0x130], rax
movzx ecx, byte [rbp + 0x128]
jmp 0x14005938c
mov rax, qword [rbp + 0x130]
cmp cl, 1
jne 0x14005939f
lea rdx, [rbp - 0x48]
mov rcx, rax
call fcn.14004ec50
jmp 0x1400593a4
mov rax, qword [rsp + 0x40]
lea rcx, [r14 + 0x258]
mov rdx, rax
call fcn.140046a40
nop
lea rcx, [rbp - 0x48]
call fcn.1400303d0
mov byte [0x1400dbf00], 1
mov dword [rsp + 0x40], 0xa8b0cfdf
mov dword [rsp + 0x44], 0xaba5ac
mov byte [rsp + 0x48], 1
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x42]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 7
jb 0x1400593e0
mov byte [rsp + 0x48], 0
lea r9, [rbp + 0x110]
lea r8, [rsp + 0x47]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.14002bf40
nop
movzx ecx, byte [rbp + 0x128]
test cl, cl
jne 0x140059437
mov byte [rbp + 0x128], 1
call fcn.140049250
mov qword [rbp + 0x130], rax
movzx ecx, byte [rbp + 0x128]
jmp 0x14005943e
mov rax, qword [rbp + 0x130]
cmp cl, 1
jne 0x140059451
lea rdx, [rbp - 0x48]
mov rcx, rax
call fcn.14004ec50
jmp 0x140059456
mov rax, qword [rsp + 0x40]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14004d410
mov rdx, rax
mov rcx, r14
call fcn.14005b200
nop
lea rcx, [rbp - 0x48]
call fcn.1400303d0
nop
test r15, r15
je 0x140059732
mov rdx, qword [rbp + 0x268]
sub rdx, r15
mov rax, r15
cmp rdx, 0x1000
jb 0x140059729
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059729
call qword [0x1400b6c60]
nop
mov dword [rsp + 0x60], 0xa0b6d1d7
mov dword [rsp + 0x64], 0xb3a0aaae
mov dword [rsp + 0x68], 0x100b5a3
xor eax, eax
mov qword [rbp - 0x80], rax
mov byte [rsp + 0x78], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x118], xmm0
lea ecx, [rax + 0x20]
call fcn.1400b04bc
mov rbx, rax
lea rax, [rbp + 0x110]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x120], rbx
cmp byte [rsp + 0x6b], 0
je 0x140059535
mov rdx, rdi
nop dword [rax]
nop word [rax + rax]
lea ecx, [rdx - 0x42]
xor byte [rsp + rdx + 0x60], cl
inc rdx
cmp rdx, 0xa
jb 0x140059520
mov byte [rsp + 0x6b], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x6a]
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.14002bf40
nop
mov qword [rbp - 0x80], rbx
mov dword [rsp + 0x40], 0xb2b3dad3
mov dword [rsp + 0x44], 0xa1a4a3
mov byte [rsp + 0x48], 1
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x42]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 7
jb 0x140059570
mov byte [rsp + 0x48], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x47]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x48]
call fcn.14002bf40
nop
movzx ecx, byte [rbp + 0x128]
test cl, cl
jne 0x1400595c5
mov byte [rbp + 0x128], 1
call fcn.140049250
mov qword [rbp + 0x130], rax
movzx ecx, byte [rbp + 0x128]
jmp 0x1400595cc
mov rax, qword [rbp + 0x130]
cmp cl, 1
jne 0x1400595df
lea rdx, [rbp - 0x48]
mov rcx, rax
call fcn.14004ec50
jmp 0x1400595e4
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.14004e730
movzx ebx, al
lea rcx, [rbp - 0x48]
call fcn.1400303d0
nop
movzx edx, byte [rsp + 0x78]
lea rcx, [rbp - 0x80]
call fcn.140053da0
test bl, bl
je 0x140059479
mov dword [rbp + 0x118], 0xafb7d0da
mov dword [rbp + 0x11c], 0xa1a5acae
mov word [rbp + 0x120], 0x100
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x118]
call fcn.14004ed80
nop
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x128]
call fcn.14004eb00
lea rdx, [rbp + 0x158]
mov rcx, rax
call fcn.140046c00
nop
lea rcx, [rbp - 0x48]
call fcn.1400303d0
lea rdx, [0x1400bb0f9]
lea rcx, [rbp + 0x158]
call fcn.140046ad0
test al, al
je 0x1400596da
movdqa xmm0, xmmword [0x1400bea20]
movdqu xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1400beab0]
movdqu xmmword [rbp - 0x18], xmm1
mov dword [rbp - 8], 0xc192b0b8
mov dword [rbp - 4], 0x9591c383
mov dword [rbp], 0x8c9c8682
mov word [rbp + 4], Ordinal_200
mov byte [rbp + 6], 1
lea rcx, [rbp - 0x28]
call fcn.1400502c0
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
xor r8d, r8d
xor ecx, ecx
call qword [0x1400b67d0]
jmp 0x140059720
lea rcx, [rbp + 0x158]
call fcn.140050350
mov rbx, rax
mov dword [rsp + 0x50], 0xafa5cfd1
mov word [rsp + 0x54], 0x100
lea rcx, [rsp + 0x50]
call fcn.140050230
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [0x1400b67b0]
xor ecx, ecx
call qword [0x1400b6c50]
nop
mov rcx, r15
call fcn.1400b04f8
nop
mov rax, qword [rbp + 0x390]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x390], rax
mov rax, qword [rbp + 0x390]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x38c], edx
lea rcx, [rbp + 0x3a8]
call fcn.14004dfa0
lea rcx, [rbp + 0x3b0]
call qword [0x1400b6470]
lea rcx, [rbp + 0x428]
call qword [0x1400b65a8]
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0xf
jbe 0x1400597cf
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400597ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400597ca
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
mov qword [rbp + 0x1a8], rdi
mov qword [rbp + 0x1b0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x198], 0
movzx edx, byte [rbp + 0x128]
lea rcx, [rbp + 0x130]
call fcn.140053da0
nop
mov rdx, qword [rbp + 0x190]
cmp rdx, 0xf
jbe 0x140059840
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005983b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005983b
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
mov qword [rbp + 0x188], rdi
mov qword [rbp + 0x190], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x178], 0
mov rdx, qword [rbp + 0x250]
cmp rdx, 0xf
jbe 0x14005989d
inc rdx
mov rcx, qword [rbp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059898
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059898
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
movdqa xmm0, xmmword [0x1400bd830]
movdqu xmmword [rbp + 0x248], xmm0
mov byte [rbp + 0x238], 0
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 0xf
jbe 0x1400598f8
inc rdx
mov rcx, qword [rbp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400598f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400598f3
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
mov qword [rbp + 0x1e8], rdi
mov qword [rbp + 0x1f0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1d8], 0
mov rdx, qword [rbp + 0x210]
cmp rdx, 0xf
jbe 0x140059956
inc rdx
mov rcx, qword [rbp + 0x1f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059950
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059950
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
nop
mov rdx, qword [rbp + 0x1d0]
cmp rdx, 0xf
jbe 0x14005999a
inc rdx
mov rcx, qword [rbp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059995
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059995
call qword [0x1400b6c60]
int3
call fcn.1400b04f8
mov rcx, qword [rbp + 0x490]
xor rcx, rsp
call fcn.1400b0620
lea r11, [rsp + 0x5a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movdqa xmm0, xmmword [0x1400bea70]
movdqu xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x1400beaa0]
movdqu xmmword [rbp - 0x18], xmm1
mov word [rbp - 8], 0x100
lea rcx, [rbp - 0x28]
call fcn.140050290
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
xor r8d, r8d
xor ecx, ecx
call qword [0x1400b67d0]
xor ecx, ecx
call qword [0x1400b6c50]
nop
call fcn.1400430b0
nop
call fcn.140042c70
int3
call fcn.1400430b0
nop
call fcn.1400430b0
int3
call fcn.1400430b0
int3