Function at 0x140062280
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x348]
sub rsp, 0x430
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x14031f680]
xor rax, rsp
mov qword [rbp + 0x2f0], rax
xor r12d, r12d
lea rcx, [rbp - 0x50]
call fcn.140061300
nop
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140060ab0
mov rdx, rax
lea rcx, [0x1403297d8]
call fcn.140067d20
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140062327
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062322
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063187
call fcn.140213960
movdqa xmm6, xmmword [0x1402f5de0]
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140062373
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006236e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006318d
call fcn.140213960
cmp qword [0x140329700], 0xa
jne 0x14006311f
cmp qword [0x140329720], 0x40
jne 0x14006311f
mov dword [rsp + 0x6e], 0x3d7669
mov dword [rsp + 0x68], 0x696e6926
mov word [rsp + 0x6c], 0x5f74
mov byte [rsp + 0x72], 0
lea rdx, [0x1403296f0]
lea rcx, [rbp - 0x50]
call fcn.140060ee0
mov r15, rax
mov dword [rsp + 0x5e], 0x3d6469
mov dword [rsp + 0x58], 0x6e776f26
mov word [rsp + 0x5c], 0x7265
mov byte [rsp + 0x62], 0
lea rdx, [0x1403296d0]
lea rcx, [rbp + 0x1c0]
call fcn.140060ee0
mov r14, rax
mov word [rsp + 0x45], 0x3d
mov dword [rsp + 0x40], 0x6d616e26
mov byte [rsp + 0x44], 0x65
mov byte [rsp + 0x47], 0
lea rax, [rbp + 0x240]
mov qword [rsp + 0x38], rax
lea rdx, [0x140329670]
lea rcx, [rbp + 0x240]
call fcn.140067df0
mov rdi, rax
lea rax, [rbp + 0x260]
mov qword [rsp + 0x30], rax
lea rdx, [0x140329710]
lea rcx, [rbp + 0x260]
call fcn.140067df0
mov rbx, rax
lea rdx, [0x1403297d8]
lea rcx, [rbp + 0x200]
call fcn.140067df0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1a0]
call fcn.140061430
mov rsi, rax
mov word [rsp + 0x4f], 0x3d
mov dword [rsp + 0x48], 0x636e6526
mov word [rsp + 0x4c], 0x656b
mov byte [rsp + 0x4e], 0x79
mov byte [rsp + 0x51], 0
lea rax, [rbp - 0x30]
mov qword [rbp - 0x78], rax
lea rdx, [0x140329670]
lea rcx, [rbp - 0x30]
call fcn.140067df0
mov rdi, rax
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x38], rax
lea rdx, [0x140329710]
lea rcx, [rbp + 0x1e0]
call fcn.140067df0
mov rbx, rax
lea rdx, [0x140329730]
lea rcx, [rbp + 0x2b0]
call fcn.140067df0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.140061430
mov rdi, rax
mov dword [rsp + 0x3a], 0x3d7265
mov word [rsp + 0x38], 0x7626
mov byte [rsp + 0x3e], 0
mov word [rsp + 0x33], reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x30], 0x6e69
mov byte [rsp + 0x32], 0x69
mov byte [rsp + 0x35], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
lea rax, [rsp + 0x30]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140062550
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.14006b930
nop
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x160]
call fcn.140060ee0
nop
mov dword [rsp + 0x32], 0x3d6570
mov word [rsp + 0x30], 0x7974
mov byte [rsp + 0x36], 0
lea rcx, [rsp + 0x30]
mov r9, rbx
inc r9
cmp byte [rcx + r9], 0
jne 0x140062596
lea r8, [rsp + 0x30]
xor edx, edx
mov rcx, rax
call fcn.14006ccf0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x38]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400625e4
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x40]
call fcn.140067c30
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x140], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x150], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp + 0x140]
lea rcx, [rbp - 0x70]
call fcn.14006cdf0
nop
lea rax, [rsp + 0x48]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140062640
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x70]
call fcn.140067c30
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rsi
lea r8, [rbp + 0x120]
lea rcx, [rbp + 0xc0]
call fcn.14006cdf0
nop
lea rax, [rsp + 0x40]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400626a0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xc0]
call fcn.140067c30
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x110], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r14
lea r8, [rbp + 0x100]
lea rcx, [rbp + 0xa0]
call fcn.14006cdf0
nop
lea rax, [rsp + 0x58]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140062700
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0xa0]
call fcn.140067c30
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r15
lea r8, [rbp + 0xe0]
lea rcx, [rbp + 0x80]
call fcn.14006cdf0
nop
lea rax, [rsp + 0x68]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140062760
mov r8, rbx
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x80]
call fcn.140067c30
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [0x140329670]
cmp qword [0x140329688], 0xf
cmova rdx, qword [0x140329670]
mov r8, qword [0x140329680]
lea rcx, [rbp + 0x20]
call fcn.140067c30
movups xmm8, xmmword [rax]
movups xmmword [rbp + 0x2d0], xmm8
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2e0], xmm7
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140062832
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006282d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063193
call fcn.140213960
movdqu xmmword [rbp + 0x30], xmm6
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14006287c
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062877
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063199
call fcn.140213960
movdqu xmmword [rbp + 0x90], xmm6
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x1400628cd
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400628c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006319f
call fcn.140213960
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14006290e
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062909
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631a5
call fcn.140213960
movdqu xmmword [rbp + 0xb0], xmm6
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14006295f
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062959
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631ab
call fcn.140213960
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x1400629a0
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006299b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631b1
call fcn.140213960
movdqu xmmword [rbp + 0xd0], xmm6
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x1400629f1
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400629eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631b7
call fcn.140213960
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140062a2c
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062a27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631bd
call fcn.140213960
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x140062a77
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062a71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631c3
call fcn.140213960
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140062ab2
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062aad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631c9
call fcn.140213960
movdqu xmmword [rbp + 0x50], xmm6
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x140062afc
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062af7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631cf
call fcn.140213960
movdqu xmmword [rbp + 0x170], xmm6
mov byte [rbp + 0x160], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140062b46
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062b41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631d5
call fcn.140213960
movdqu xmmword [rbp + 0x70], xmm6
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140062b90
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062b8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631db
call fcn.140213960
movdqu xmmword [rbp + 0x190], xmm6
mov byte [rbp + 0x180], 0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0xf
jbe 0x140062be0
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062bdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631e1
call fcn.140213960
movdqu xmmword [rbp + 0x1b0], xmm6
mov byte [rbp + 0x1a0], 0
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 0xf
jbe 0x140062c30
inc rdx
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062c2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631e7
call fcn.140213960
movdqu xmmword [rbp + 0x1d0], xmm6
mov byte [rbp + 0x1c0], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140062c7a
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062c75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631ed
call fcn.140213960
movdqu xmmword [rbp - 0x40], xmm6
mov byte [rbp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
lea r14, [rbp + 0x2d0]
movq rsi, xmm8
movdqa xmm0, xmm7
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 0xf
cmova r14, rsi
movabs rbx, 0x7fffffffffffffff
movq rdi, xmm7
cmp rdi, rbx
ja 0x1400631f3
cmp rdi, 0xf
ja 0x140062cef
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x68], xmm0
jmp 0x140062d82
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140062d2b
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140213a5c
mov rcx, rax
test rax, rax
je 0x1400631f9
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140062d65
mov rbx, rax
mov ecx, reloc.WS2_32.dll_shutdown
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140062d48
mov rax, r12
jmp 0x140062d65
cmp rcx, 0x1000
jb 0x140062d60
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400630c1
jmp 0x140062d09
call fcn.140213a5c
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call fcn.140251d30
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x290]
call fcn.140065610
nop
lea rax, [rbp + 0x2b0]
mov qword [rbp - 0x78], rax
lea rdx, [0x140329670]
lea rcx, [rbp + 0x2b0]
call fcn.140067df0
mov rdi, rax
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x40], rax
lea rdx, [0x140329710]
lea rcx, [rbp + 0x1e0]
call fcn.140067df0
mov rbx, rax
lea rdx, [rbp + 0x290]
lea rcx, [rbp - 0x30]
call fcn.140067df0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140061740
mov rbx, rax
lea rax, [rbp + 0x290]
cmp rax, rbx
je 0x140062e7d
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 0xf
jbe 0x140062e4a
inc rdx
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062e45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631ff
call fcn.140213960
movdqu xmmword [rbp + 0x2a0], xmm6
mov byte [rbp + 0x290], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x290], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x2a0], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140062eb8
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062eb3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400631ff
call fcn.140213960
mov qword [rbp + 0x238], r12
lea r8, [rbp + 0x200]
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x280]
call fcn.14006aa30
nop
lea rdx, str.success
lea rcx, [rbp + 0x280]
call fcn.14006ab50
cmp byte [rax], 4
jne 0x140063205
lea rcx, [rbp + 0x280]
cmp byte [rax + 8], 0
je 0x140062ffd
lea rdx, str.sessionid
call fcn.14006ab50
mov rdx, rax
lea rcx, [0x1403297b8]
call fcn.14006ac90
nop
movzx edx, byte [rbp + 0x280]
lea rcx, [rbp + 0x288]
call fcn.1400690b0
nop
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 0xf
jbe 0x140062f78
inc rdx
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062f73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140063256
call fcn.140213960
movdqu xmmword [rbp + 0x2a0], xmm6
mov byte [rbp + 0x290], 0
cmp r15, 0xf
jbe 0x140062fbe
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140062fb6
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006325c
mov rcx, rsi
call fcn.140213960
mov rcx, qword [rbp + 0x2f0]
xor rcx, rsp
call fcn.140213940
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rdx, str.message
call fcn.14006ab50
mov rdi, rax
mov byte [rsp + 0x68], 3
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140213a5c
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov r8d, 0xa
lea rdx, str.invalidver
mov rcx, rax
call fcn.14006b930
mov qword [rsp + 0x70], rbx
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.14006c870
movzx ebx, al
movzx edx, byte [rsp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.1400690b0
nop
test bl, bl
jne 0x1400630c7
lea rdx, [0x1402f40a4]
call fcn.14006a750
lea rdx, str.message
lea rcx, [rbp + 0x280]
call fcn.14006ab50
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.14006add0
nop
mov rdx, rax
call fcn.14006ae70
nop
lea rcx, [rbp + 0x2b0]
call fcn.140067cc0
mov ecx, 0x1194
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call fcn.14022267c
nop
call fcn.14005ba00
nop
lea rdx, str.download
lea rcx, [rbp + 0x280]
call fcn.14006ab50
lea rdx, [rbp + 0x2b0]
mov rcx, rax
call fcn.14006ad10
lea rcx, [rbp + 0x2b0]
call fcn.140067c20
mov r8, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.14022267c
nop
movdqa xmm0, xmmword [0x1402f5ea0]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x1402f5ed0]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [0x1402f5e90]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x1402f5ec0]
movdqa xmmword [rbp], xmm1
mov dword [rbp + 0x10], 0x5e577814
mov dword [rbp + 0x14], 0x4b591756
mov word [rbp + 0x18], Ordinal_79
mov byte [rbp + 0x1a], 1
lea rdx, [rbp - 0x30]
call fcn.140063270
mov ecx, 0x1194
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call fcn.14022267c
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
nop
call fcn.140227c40
int3
call fcn.14005baa0
int3
call fcn.140227c40
nop
call fcn.140227c40
nop
mov rcx, rax
call fcn.1400695b0
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.140067db0
nop
mov r8, rax
lea rdx, str.type_must_be_boolean__but_is
lea rcx, [rbp + 0x1e0]
call fcn.14006a330
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp - 0x30]
call fcn.14005fb90
lea rdx, [0x1403176d8]
lea rcx, [rbp - 0x30]
call fcn.140215c58
nop
call fcn.140227c40
nop
call fcn.140227c40
int3