Function at 0x14003331c
Capabilities:
Encode data using xor
Execute command
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r13
push r14
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1401cd300]
xor rax, rsp
mov qword [rbp - 0x10], rax
lea rcx, [0x1401ce2f0]
call fcn.14004d490
xor ebx, ebx
cmp byte [0x1401ce500], bl
jne 0x1400333d9
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x60]
call fcn.14002f6e0
mov r8, rax
cmp byte [rax + 0xa], bl
je 0x1400333a8
mov r9, rax
mov eax, 0x2f684bdb
mul ebx
mov eax, ebx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x36
mov al, bl
sub al, cl
add al, 0x39
xor byte [r9], al
inc ebx
inc r9
cmp ebx, 0xb
jl 0x14003337d
mov rdx, r8
mov rcx, r10
call fcn.14002c6e0
mov rcx, rax
lea rdx, [0x1401ce508]
call fcn.14002c6cc
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x1400e8c44]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], bl
movups xmm0, xmmword [str.30eySJZ2a__17f_____toPZVH_]
movups xmmword [rbp - 0x58], xmm0
movsd xmm0, qword [0x1400e8bf0]
movsd qword [rbp - 0x48], xmm0
cmp byte [0x1400e8bf7], bl
je 0x140033460
mov r8d, ebx
lea r9, [rbp - 0x58]
mov eax, 0x2f684bdb
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x36
mov al, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
inc r9
cmp r8d, 0x18
jl 0x140033430
lea rdx, [rbp - 0x58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002c6e0
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14002c48c
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rbx
lea r13, [rbp - 0x30]
mov rsi, qword [rbp - 0x30]
mov ecx, reloc.WS2_32.dll_ntohs
cmp qword [rbp - 0x18], rcx
cmova r13, rsi
movabs rdi, 0x7fffffffffffffff
mov r14, qword [rbp - 0x20]
cmp r14, rdi
ja 0x140033760
cmp r14, rcx
ja 0x1400334d4
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], rcx
movups xmm0, xmmword [r13]
movdqu xmmword [rbp - 0x58], xmm0
jmp 0x140033538
mov rax, r14
or rax, rcx
cmp rax, rdi
jbe 0x1400334eb
movabs rcx, 0x8000000000000000
jmp 0x140033511
mov rdi, rax
mov ecx, socket
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140033508
mov rax, rbx
jmp 0x14003351d
cmp rcx, 0x1000
jb 0x140033518
call fcn.140023438
jmp 0x14003351d
call fcn.1400df460
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], rdi
lea r8, [r14 + 1]
mov rdx, r13
mov rcx, rax
call fcn.1400e0af0
lea rdx, [rbp - 0x58]
lea rcx, [0x1401ce2f0]
call fcn.14004fff0
cmp byte [0x1401ce500], bl
jne 0x140033668
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x60]
call fcn.14002f8fc
mov r8, rax
cmp byte [rax + 3], bl
je 0x14003359f
mov r9d, ebx
mov r10, rax
mov eax, 0x2f684bdb
mul r9d
mov ecx, r9d
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 5
movsx eax, cl
imul ecx, eax, 0x36
mov al, r9b
sub al, cl
add al, 0x39
xor byte [r10], al
inc r9d
inc r10
cmp r9d, 4
jl 0x14003356f
mov rcx, r8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x60]
call fcn.14002f9a0
mov r9, rax
cmp byte [rax + 7], bl
je 0x1400335f3
mov r8d, ebx
mov r10, rax
mov eax, 0x2f684bdb
mul r8d
mov ecx, r8d
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 5
movsx eax, cl
imul ecx, eax, 0x36
mov al, r8b
sub al, cl
add al, 0x39
xor byte [r10], al
inc r8d
inc r10
cmp r8d, 8
jl 0x1400335c3
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x60]
call fcn.14002f9b0
mov r8, rax
cmp byte [rax + 0x21], bl
je 0x140033646
mov r9, rax
mov eax, 0x2f684bdb
mul ebx
mov ecx, ebx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 5
movsx eax, cl
imul edx, eax, 0x36
mov al, bl
sub al, dl
add al, 0x39
xor byte [r9], al
inc ebx
inc r9
cmp ebx, 0x22
jl 0x14003361b
mov rdx, r8
mov rcx, r10
call fcn.14002c6e0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x1400e8c44]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.color_a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.30epT_Z.2c2_._ikK]
movups xmmword [rbp - 0x58], xmm0
movzx eax, word [0x1400e8c40]
mov word [rbp - 0x48], ax
mov al, byte [0x1400e8c42]
mov byte [rbp - 0x46], al
lea r8, [rbp - 0x58]
mov eax, 0x2f684bdb
mul ebx
mov eax, ebx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul edx, eax, 0x36
mov al, bl
sub al, dl
add al, 0x39
xor byte [r8], al
inc ebx
inc r8
cmp ebx, 0x13
jl 0x1400336a5
lea rdx, [rbp - 0x58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002c6e0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400e8c44]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rax, qword [rbp - 0x18]
cmp rax, 0xf
jbe 0x140033737
lea rdx, [rax + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14003372f
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003372f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400defec
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400df3e0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop r13
pop rbp
ret
call fcn.140036860
nop
int3