Function at 0x1400116a0
Capabilities:
Contain obfuscated stackstrings
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x7b0
mov rax, qword [0x1401b3fd8]
xor rax, rsp
mov qword [rsp + 0x7a8], rax
xor r13d, r13d
mov dword [rsp + 0x30], r13d
mov byte [rsp + 0x3e0], r13b
xor edx, edx
lea rcx, [rsp + 0x3e8]
call fcn.140007da0
nop
lea rax, str.TZDll
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], 5
xor r8d, r8d
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x38]
call fcn.1400033a0
mov r14d, 0x80000
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rcx, qword [rsp + 0x38]
call fcn.1400b7074
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x140012bae
lea rcx, [rsp + 0x38]
call fcn.14000c920
test bl, bl
jne 0x14001177c
movzx edx, byte [rsp + 0x3e0]
lea rcx, [rsp + 0x3e8]
call fcn.14000d2d0
nop
jmp 0x140012b7c
lea rcx, [0x1401b6b60]
call fcn.14000c990
mov r15, rax
mov qword [rsp + 0x120], rax
lea rcx, [0x1401b6b60]
call fcn.14000c9a0
mov qword [rsp + 0x1f0], rax
movzx ebx, byte [rsp + 0x34]
movzx edi, byte [rsp + 0x34]
movzx esi, byte [rsp + 0x34]
cmp r15, rax
je 0x1400123a4
mov rcx, r15
call fcn.140005ab0
mov qword [rsp + 0x2c0], rax
mov rcx, r15
call fcn.140005aa0
lea rcx, [rsp + 0x2f0]
mov qword [rsp + 0x150], rcx
mov rdx, rax
lea rcx, [rsp + 0x2f0]
call fcn.140002540
mov r15, rax
lea rdx, str.token
lea rcx, [rsp + 0x3e0]
call fcn.140002c40
nop
mov rdx, r15
mov rcx, rax
call fcn.1400094e0
mov edx, 0x20
lea rcx, [rsp + 0x418]
call fcn.14000cb50
lea rax, [rsp + 0x300]
mov qword [rsp + 0x2e8], rax
mov dword [rsp + 0xa0], 0x5943426e
mov dword [rsp + 0xa4], 0x594348
mov dword [rsp + 0xa8], 0x485d5479
mov byte [rsp + 0xac], 0x2d
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov r10d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], r10
mov byte [rsp + 0x68], 0
or r14d, 2
mov dword [rsp + 0x30], r14d
mov eax, reloc.WS2_32.dll_listen
mov qword [rsp + 0x78], rax
xor r9d, r9d
mov qword [rsp + 0x68], r9
mov dword [rsp + 0x70], r9d
mov word [rsp + 0x74], r9w
mov edx, r13d
nop dword [rax]
cmp edx, 0xd
jge 0x1400118ff
movsxd rcx, edx
cmp rcx, 0xd
jae 0x140012bc6
movzx r8d, byte [rsp + rcx + 0xa0]
xor r8b, 0x2d
cmp rax, rcx
jbe 0x140012bd3
lea rax, [rsp + 0x68]
cmp r10, 0x10
cmovae rax, r9
mov byte [rax + rcx], r8b
inc edx
mov r10, qword [rsp + 0x80]
mov rax, qword [rsp + 0x78]
mov r9, qword [rsp + 0x68]
jmp 0x1400118b0
lea rcx, [rsp + 0x68]
call fcn.14000cee0
mov qword [rsp + 0x150], rax
movdqa xmm0, xmmword [0x1400f6fc0]
movdqu xmmword [rsp + 0x100], xmm0
mov byte [rsp + 0x110], 0x2e
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
or r14d, 0x20
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, reloc.WS2_32.dll_recvfrom
movzx r8d, dil
mov edx, r9d
lea rcx, [rsp + 0x38]
call fcn.140004610
mov edx, r13d
nop dword [rax]
cmp edx, 0x11
jge 0x1400119b3
movsxd rcx, edx
cmp rcx, 0x11
jae 0x140012bd9
movzx r8d, byte [rsp + rcx + 0x100]
xor r8b, 0x2e
cmp qword [rsp + 0x48], rcx
jbe 0x140012be6
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140011970
lea rcx, [rsp + 0x38]
call fcn.14000cee0
mov qword [rsp + 0x100], rax
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x360]
call fcn.140002660
nop
mov dword [rsp + 0x88], 0x13041234
mov dword [rsp + 0x8c], 0x406204c
mov word [rsp + 0x90], 0x150f
mov byte [rsp + 0x92], 0x61
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
mov r10d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x178], r10
mov byte [rsp + 0x160], 0
or r14d, 0x40
mov dword [rsp + 0x30], r14d
mov eax, ntohs
mov qword [rsp + 0x170], rax
xor r9d, r9d
mov qword [rsp + 0x160], r9
mov dword [rsp + 0x168], r9d
mov edx, r13d
cmp edx, 0xb
jge 0x140011ab0
movsxd rcx, edx
cmp rcx, 0xb
jae 0x140012bec
movzx r8d, byte [rsp + rcx + 0x88]
xor r8b, 0x61
cmp rax, rcx
jbe 0x140012bf9
lea rax, [rsp + 0x160]
cmp r10, 0x10
cmovae rax, r9
mov byte [rax + rcx], r8b
inc edx
mov r10, qword [rsp + 0x178]
mov rax, qword [rsp + 0x170]
mov r9, qword [rsp + 0x160]
jmp 0x140011a58
lea rcx, [rsp + 0x160]
call fcn.14000cee0
mov qword [rsp + 0x100], rax
movdqa xmm0, xmmword [str.___0_:_f]
movdqu xmmword [rsp + 0xc0], xmm0
mov dword [rsp + 0xd0], 0x3c0c2445
mov byte [rsp + 0xd4], reloc.WS2_32.dll_WSACleanup
xorps xmm0, xmm0
movups xmmword [rsp + 0x128], xmm0
mov qword [rsp + 0x138], r13
mov qword [rsp + 0x140], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x128], 0
or r14d, 0x10
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, reloc.WS2_32.dll_setsockopt
movzx r8d, bl
mov edx, r9d
lea rcx, [rsp + 0x128]
call fcn.140004610
mov edx, r13d
nop dword [rax + rax]
cmp edx, 0x15
jge 0x140011b8f
movsxd rcx, edx
cmp rcx, 0x15
jae 0x140012bff
movzx r8d, byte [rsp + rcx + 0xc0]
xor r8b, 0x74
cmp qword [rsp + 0x138], rcx
jbe 0x140012c0c
lea rax, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rax, qword [rsp + 0x128]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140011b40
lea rcx, [rsp + 0x128]
call fcn.14000cee0
mov qword [rsp + 0x150], rax
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x3a0]
call fcn.140002660
nop
lea r8, [rsp + 0x3e0]
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x350]
call fcn.140006ea0
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x150], xmm0
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x300]
call fcn.140006f80
mov r12, rax
lea rax, [rsp + 0x290]
mov qword [rsp + 0x150], rax
mov dword [rsp + 0x28], r13d
mov byte [rsp + 0x20], 0
mov r9b, 0x20
mov r8d, 0xffffffff
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x3e0]
call fcn.14000d9d0
nop
lea r8, [rsp + 0x2e8]
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x330]
call fcn.140006ea0
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x290]
call fcn.1400070e0
mov r15, rax
movdqa xmm0, xmmword [0x1400f6e40]
movdqa xmm1, xmmword [0x1400f6e10]
movdqa xmm2, xmmword [0x1400f6e60]
mov word [rsp + 0xf0], 0x7507
movups xmmword [rsp + 0x200], xmm0
movups xmmword [rsp + 0x210], xmm1
movups xmmword [rsp + 0x220], xmm2
movzx eax, word [rsp + 0xf0]
mov word [rsp + 0x230], ax
xorps xmm0, xmm0
movups xmmword [rsp + 0x270], xmm0
mov qword [rsp + 0x280], r13
mov qword [rsp + 0x288], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x270], 0
bts r14d, 8
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, 0x32
movzx r8d, sil
mov edx, r9d
lea rcx, [rsp + 0x270]
call fcn.140004610
mov edx, r13d
cmp edx, 0x32
jge 0x140011d67
movsxd rcx, edx
cmp rcx, 0x32
jae 0x140012c12
movzx r8d, byte [rsp + rcx + 0x200]
xor r8b, 0x75
cmp qword [rsp + 0x280], rcx
jbe 0x140012c1f
lea rax, [rsp + 0x270]
cmp qword [rsp + 0x288], 0x10
cmovae rax, qword [rsp + 0x270]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140011d18
lea rcx, [rsp + 0x270]
call fcn.14000cee0
mov rdx, rax
lea rcx, [rsp + 0x310]
call fcn.140006b90
nop
lea r8, [rsp + 0x330]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x340]
call fcn.140006ea0
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x100], xmm0
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x180]
call fcn.1400075e0
nop
mov r9, r12
mov r8, r15
mov rdx, rax
lea rcx, [rsp + 0x418]
call fcn.140002de0
nop
lea r9, [fcn.1400088d0]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rsp + 0x310]
call fcn.1400b7c5c
btr r14d, 8
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x270]
call fcn.1400088d0
nop
lea r9, [fcn.1400088d0]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rsp + 0x2c8]
call fcn.1400b7c5c
nop
lea r9, [fcn.1400089b0]
mov edx, 0x40
lea r8d, [rdx - 0x3e]
lea rcx, [rsp + 0x360]
call fcn.1400b7c5c
and r14d, 0xffffffef
lea rcx, [rsp + 0x128]
call fcn.1400088d0
and r14d, 0xffffffbf
lea rcx, [rsp + 0x160]
call fcn.1400088d0
and r14d, 0xffffffdf
lea rcx, [rsp + 0x38]
call fcn.1400088d0
and r14d, 0xfffffffd
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x68]
call fcn.1400088d0
mov edx, 0x138
lea rcx, [rsp + 0x660]
call fcn.14000cb50
lea rdx, [rsp + 0x660]
lea rcx, [rsp + 0x418]
call fcn.14000f590
nop
lea rcx, [rsp + 0x678]
call fcn.14000f1f0
test al, al
jne 0x140011f21
mov dword [rsp + 0xb0], 0x2f323205
mov dword [rsp + 0xb4], 0x2f146032
mov dword [rsp + 0xb8], 0x402e252b
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0xb0]
call fcn.14000d1a0
or r14d, 1
mov rcx, rax
call fcn.14000cee0
mov rdx, rax
lea rcx, [rsp + 0x678]
call fcn.140002bf0
test al, al
jne 0x140011f21
xor r15b, r15b
jmp 0x140011f24
mov r15b, 1
test r14b, 1
je 0x140011f3b
and r14d, 0xfffffffe
lea rcx, [rsp + 0x2c8]
call fcn.1400088d0
test r15b, r15b
je 0x140012044
movdqa xmm0, xmmword [0x1400f7020]
movdqa xmm1, xmmword [0x1400f70c0]
mov dword [rsp + 0x1a0], 0x4c5b4c41
mov dword [rsp + 0x1a4], 0x4c5d094d
mov dword [rsp + 0x1a8], 0x29075d51
movups xmmword [rsp + 0x290], xmm0
movups xmmword [rsp + 0x2a0], xmm1
movsd xmm0, qword [rsp + 0x1a0]
movsd qword [rsp + 0x2b0], xmm0
mov eax, dword [rsp + 0x1a8]
mov dword [rsp + 0x2b8], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 0x10
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x2c]
lea rcx, [rsp + 0x38]
call fcn.140010740
mov edx, r13d
nop
cmp edx, 0x2c
jge 0x140012023
movsxd rcx, edx
cmp rcx, 0x2c
jae 0x140012c25
movzx r8d, byte [rsp + rcx + 0x290]
xor r8b, 0x29
cmp qword [rsp + 0x48], rcx
jbe 0x140012c32
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140011fe0
lea rcx, [rsp + 0x38]
call fcn.14000cee0
mov rcx, rax
call fcn.14004ff40
btr r14d, 0x10
lea rcx, [rsp + 0x38]
call fcn.1400088d0
mov dword [rsp + 0x60], 0x26262e64
mov byte [rsp + 0x64], 0x4a
xorps xmm0, xmm0
movups xmmword [rsp + 0x128], xmm0
mov qword [rsp + 0x138], r13
mov qword [rsp + 0x140], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x128], 0
bts r14d, 0xb
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 5]
lea rcx, [rsp + 0x128]
call fcn.140010740
mov edx, r13d
nop dword [rax]
cmp edx, 5
jge 0x1400120ec
movsxd rcx, edx
cmp rcx, 5
jae 0x140012c38
movzx r8d, byte [rsp + rcx + 0x60]
xor r8b, 0x4a
cmp qword [rsp + 0x138], rcx
jbe 0x140012c42
lea rax, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rax, qword [rsp + 0x128]
mov byte [rax + rcx], r8b
inc edx
jmp 0x1400120a0
lea rcx, [rsp + 0x128]
call fcn.14000cee0
mov r15, rax
mov dword [rsp + 0x58], 0x9213f31
mov word [rsp + 0x5c], 0x4a09
mov byte [rsp + 0x5e], 0x65
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 0xc
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 7]
lea rcx, [rsp + 0x38]
call fcn.140010740
mov edx, r13d
nop dword [rax]
cmp edx, 7
jge 0x140012190
movsxd rcx, edx
cmp rcx, 7
jae 0x140012c48
movzx r8d, byte [rsp + rcx + 0x58]
xor r8b, 0x65
cmp qword [rsp + 0x48], rcx
jbe 0x140012c52
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012150
lea rcx, [rsp + 0x38]
call fcn.14000cee0
mov rdx, rax
mov r8, qword [rsp + 0x2c0]
lea rcx, [rsp + 0x2c8]
call fcn.140002d00
nop
mov r8, r15
mov rdx, rax
lea rcx, [rsp + 0x3f0]
call fcn.140002c90
nop
lea rcx, [rsp + 0x2c8]
call fcn.1400088d0
btr r14d, 0xc
lea rcx, [rsp + 0x38]
call fcn.1400088d0
btr r14d, 0xb
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x128]
call fcn.1400088d0
mov edx, 0x108
lea rcx, [rsp + 0x550]
call fcn.14000cb50
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
lea rdx, [rsp + 0x3f0]
lea rcx, [rsp + 0x550]
call fcn.1400066e0
nop
lea rcx, [rsp + 0x550]
call fcn.14000fd90
test al, al
jne 0x140012329
movdqa xmm0, xmmword [0x1400f6ed0]
movdqu xmmword [rsp + 0xc0], xmm0
mov dword [rsp + 0xd0], 0x1d181751
mov dword [rsp + 0xd4], 0x14195114
mov word [rsp + 0xd8], 0x1403
mov byte [rsp + 0xda], WSACleanup
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], al
bts r14d, 0x11
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x1b]
lea rcx, [rsp + 0x38]
call fcn.140010740
mov edx, r13d
nop word [rax + rax]
cmp edx, 0x1b
jge 0x140012303
movsxd rcx, edx
cmp rcx, 0x1b
jae 0x140012c58
movzx r8d, byte [rsp + rcx + 0xc0]
xor r8b, 0x71
cmp qword [rsp + 0x48], rcx
jbe 0x140012c65
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x1400122c0
lea rcx, [rsp + 0x38]
call fcn.14000cee0
mov rcx, rax
call fcn.14004ff40
btr r14d, 0x11
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x38]
call fcn.1400088d0
lea rdx, [rsp + 0x678]
lea rcx, [rsp + 0x550]
call fcn.140002910
lea rcx, [rsp + 0x550]
call fcn.14000d070
nop
lea rcx, [rsp + 0x550]
call fcn.140009fc0
nop
lea rcx, [rsp + 0x3f0]
call fcn.1400088d0
nop
lea rcx, [rsp + 0x660]
call fcn.140008dd0
nop
lea rcx, [rsp + 0x418]
call fcn.140008390
mov r15, qword [rsp + 0x120]
add r15, 0x40
mov qword [rsp + 0x120], r15
mov rax, qword [rsp + 0x1f0]
jmp 0x1400117b6
mov edx, 0x108
lea rcx, [rsp + 0x440]
call fcn.14000cb50
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, str.readme.md
lea rcx, [rsp + 0x440]
call fcn.140006730
nop
lea rcx, [rsp + 0x440]
call fcn.14000fd90
test al, al
jne 0x1400124b4
movdqa xmm0, xmmword [0x1400f6ee0]
movdqu xmmword [rsp + 0xc0], xmm0
mov dword [rsp + 0xd0], 0x1f171e1b
mov byte [rsp + 0xd4], 0x7a
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], al
bts r14d, 0x12
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x15]
lea rcx, [rsp + 0x38]
call fcn.140010740
mov edx, r13d
nop
cmp edx, 0x15
jge 0x140012493
movsxd rcx, edx
cmp rcx, 0x15
jae 0x140012c6b
movzx r8d, byte [rsp + rcx + 0xc0]
xor r8b, 0x7a
cmp qword [rsp + 0x48], rcx
jbe 0x140012c78
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012450
lea rcx, [rsp + 0x38]
call fcn.14000cee0
mov rcx, rax
call fcn.14004ff40
btr r14d, 0x12
lea rcx, [rsp + 0x38]
call fcn.1400088d0
movdqa xmm0, xmmword [str.________________fjlzz__________Dficpunsbankbnihruwkr_nitnAMe_anAMe]
movdqa xmm1, xmmword [0x1400f70b0]
movdqa xmm2, xmmword [0x1400f6f00]
movdqa xmm3, xmmword [str.______________]
movaps xmmword [rsp + 0x200], xmm0
movaps xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x220], xmm2
movaps xmmword [rsp + 0x230], xmm3
mov byte [rsp + 0x240], 9
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 0xd
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x41]
lea rcx, [rsp + 0x38]
call fcn.140010740
mov edx, r13d
cmp edx, 0x41
jge 0x140012578
movsxd rcx, edx
cmp rcx, 0x41
jae 0x140012c7e
movzx r8d, byte [rsp + rcx + 0x200]
xor r8b, 9
cmp qword [rsp + 0x48], rcx
jbe 0x140012c8b
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012535
lea rcx, [rsp + 0x38]
call fcn.14000cee0
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140002930
btr r14d, 0xd
lea rcx, [rsp + 0x38]
call fcn.1400088d0
movdqa xmm0, xmmword [0x1400f7040]
movdqu xmmword [rsp + 0xc0], xmm0
mov dword [rsp + 0xd0], 0x4d071818
mov dword [rsp + 0xd4], 0x29234545
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 0xe
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x18]
lea rcx, [rsp + 0x38]
call fcn.140010740
mov edx, r13d
cmp edx, 0x18
jge 0x140012644
movsxd rcx, edx
cmp rcx, 0x18
jae 0x140012c91
movzx r8d, byte [rsp + rcx + 0xc0]
xor r8b, 0x29
cmp qword [rsp + 0x48], rcx
jbe 0x140012c9e
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012601
lea rcx, [rsp + 0x38]
call fcn.14000cee0
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140002930
btr r14d, 0xe
lea rcx, [rsp + 0x38]
call fcn.1400088d0
movdqa xmm0, xmmword [0x1400f6f50]
movdqa xmm1, xmmword [0x1400f6f90]
movdqa xmm2, xmmword [0x1400f70f0]
movdqa xmm3, xmmword [0x1400f7060]
movaps xmmword [rsp + 0x200], xmm0
movaps xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x220], xmm2
movaps xmmword [rsp + 0x230], xmm3
mov byte [rsp + 0x240], 0x5b
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
or r14d, 4
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, 0x41
movzx r8d, byte [rsp + 0x34]
mov edx, r9d
lea rcx, [rsp + 0x38]
call fcn.140004610
mov edx, r13d
nop word [rax + rax]
cmp edx, 0x41
jge 0x140012743
movsxd rcx, edx
cmp rcx, 0x41
jae 0x140012ca4
movzx r8d, byte [rsp + rcx + 0x200]
xor r8b, 0x5b
cmp qword [rsp + 0x48], rcx
jbe 0x140012cb1
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012700
lea rcx, [rsp + 0x38]
call fcn.14000cee0
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140002930
and r14d, 0xfffffffb
lea rcx, [rsp + 0x38]
call fcn.1400088d0
movdqa xmm0, xmmword [0x1400f6f60]
movdqa xmm1, xmmword [0x1400f6fb0]
movdqa xmm2, xmmword [0x1400f6fa0]
mov dword [rsp + 0x1b0], 0x5e54303b
movups xmmword [rsp + 0x200], xmm0
movups xmmword [rsp + 0x210], xmm1
movups xmmword [rsp + 0x220], xmm2
mov eax, dword [rsp + 0x1b0]
mov dword [rsp + 0x230], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
or r14d, 8
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, gethostname
movzx r8d, byte [rsp + 0x34]
mov edx, r9d
lea rcx, [rsp + 0x38]
call fcn.140004610
mov edx, r13d
nop dword [rax]
cmp edx, 0x34
jge 0x140012843
movsxd rcx, edx
cmp rcx, 0x34
jae 0x140012cb7
movzx r8d, byte [rsp + rcx + 0x200]
xor r8b, 0x5e
cmp qword [rsp + 0x48], rcx
jbe 0x140012cc4
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012800
lea rcx, [rsp + 0x38]
call fcn.14000cee0
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140002930
and r14d, 0xfffffff7
lea rcx, [rsp + 0x38]
call fcn.1400088d0
movdqa xmm0, xmmword [0x1400f7000]
movdqa xmm1, xmmword [0x1400f7010]
mov dword [rsp + 0x410], 0x80d0922
mov dword [rsp + 0x414], 0x6746471e
movups xmmword [rsp + 0x418], xmm0
movups xmmword [rsp + 0x428], xmm1
movsd xmm0, qword [rsp + 0x410]
movsd qword [rsp + 0x438], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 7
mov dword [rsp + 0x30], r14d
mov byte [rsp + 0x20], 0
mov r9d, 0x28
movzx r8d, byte [rsp + 0x34]
mov edx, r9d
lea rcx, [rsp + 0x38]
call fcn.140004610
mov edx, r13d
nop dword [rax]
cmp edx, 0x28
jge 0x140012943
movsxd rcx, edx
cmp rcx, 0x28
jae 0x140012cca
movzx r8d, byte [rsp + rcx + 0x418]
xor r8b, 0x67
cmp qword [rsp + 0x48], rcx
jbe 0x140012cd7
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], r8b
inc edx
jmp 0x140012900
lea rcx, [rsp + 0x38]
call fcn.14000cee0
mov rdx, rax
lea rcx, [rsp + 0x440]
call fcn.140002930
btr r14d, 7
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x38]
call fcn.1400088d0
lea rcx, [rsp + 0x440]
call fcn.14000d070
mov dword [rsp + 0x58], 0x1610
mov dword [rsp + 0x5c], 0x43101006
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x70], r13
mov r9d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], r9
mov byte [rsp + 0x68], 0
bts r14d, 9
mov dword [rsp + 0x30], r14d
mov eax, 8
mov qword [rsp + 0x78], rax
xor r10d, r10d
mov qword [rsp + 0x68], r10
mov byte [rsp + 0x70], r10b
mov edx, r13d
cmp edx, 8
jge 0x140012a26
movsxd rcx, edx
cmp rcx, 8
jae 0x140012cdd
movzx r8d, byte [rsp + rcx + 0x120]
xor r8b, 0x43
cmp rax, rcx
jbe 0x140012cea
lea rax, [rsp + 0x68]
cmp r9, 0x10
cmovae rax, r10
mov byte [rax + rcx], r8b
inc edx
mov r9, qword [rsp + 0x80]
mov rax, qword [rsp + 0x78]
mov r10, qword [rsp + 0x68]
jmp 0x1400129d7
lea rcx, [rsp + 0x68]
call fcn.14000cee0
mov rbx, rax
movdqa xmm0, xmmword [0x1400f70d0]
movdqa xmm1, xmmword [0x1400f6ea0]
movdqa xmm2, xmmword [0x1400f6e90]
movdqa xmm3, xmmword [0x1400f6ec0]
movdqa xmm4, xmmword [str.LPQK]
movdqa xmm5, xmmword [0x1400f7030]
mov dword [rsp + 0x1e0], 0x1616184b
mov word [rsp + 0x1e4], 0x3816
movaps xmmword [rsp + 0x200], xmm0
movaps xmmword [rsp + 0x210], xmm1
movaps xmmword [rsp + 0x220], xmm2
movaps xmmword [rsp + 0x230], xmm3
movaps xmmword [rsp + 0x240], xmm4
movaps xmmword [rsp + 0x250], xmm5
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0x260], eax
movzx eax, word [rsp + 0x1e4]
mov word [rsp + 0x264], ax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
bts r14d, 0xa
mov dword [rsp + 0x30], r14d
xor r8d, r8d
lea edx, [r8 + 0x66]
lea rcx, [rsp + 0x38]
call fcn.140010740
nop dword [rax]
cmp r13d, 0x66
jge 0x140012b42
movsxd rcx, r13d
cmp rcx, 0x66
jae 0x140012cf0
movzx edx, byte [rsp + rcx + 0x200]
xor dl, 0x38
cmp qword [rsp + 0x48], rcx
jbe 0x140012cfd
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rax, qword [rsp + 0x38]
mov byte [rax + rcx], dl
inc r13d
jmp 0x140012b00
lea rcx, [rsp + 0x38]
call fcn.14000cee0
xor r9d, r9d
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
lea rcx, [rsp + 0x38]
call fcn.1400088d0
nop
lea rcx, [rsp + 0x68]
call fcn.1400088d0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [rsp + 0x7a8]
xor rcx, rsp
call fcn.1400b80d0
lea r11, [rsp + 0x7b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
shr rbx, 0x20
lea r8, [rsp + 0x38]
mov edx, ebx
lea rcx, str.create_directory
call fcn.14000c460
nop
lea rcx, [rsp + 0xa0]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x100]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x88]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0xc0]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x200]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x290]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x60]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x58]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0xc0]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0xc0]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x200]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0xc0]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x200]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x200]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x418]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x120]
call fcn.14000cb30
call fcn.14000cb10
nop
lea rcx, [rsp + 0x200]
call fcn.14000cb30
call fcn.14000cb10
int3