Function at 0x1400640b0
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x318]
sub rsp, 0x400
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x14033b640]
xor rax, rsp
mov qword [rbp + 0x2d8], rax
xor r12d, r12d
lea rcx, [rbp - 0x50]
call fcn.140062e30
nop
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400625e0
mov rbx, rax
lea rsi, [0x14034d9d0]
cmp rsi, rax
je 0x140064193
mov rdx, qword [0x14034d9e8]
cmp rdx, 0xf
jbe 0x140064158
mov rcx, qword [0x14034d9d0]
inc rdx
cmp rdx, 0x1000
jb 0x140064153
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400650b8
mov rcx, r8
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqa xmmword [0x14034d9e0], xmm0
mov byte [0x14034d9d0], 0
movups xmm0, xmmword [rbx]
movaps xmmword [0x14034d9d0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [0x14034d9e0], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400641ce
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400641c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650b8
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14006421a
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064215
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650be
call fcn.1402239bc
cmp qword [0x14034d890], 0xa
jne 0x14006509c
cmp qword [0x14034d8b0], 0x40
jne 0x14006509c
mov dword [rsp + 0x68], 0x5a5c5816
mov dword [rsp + 0x6c], 0x415f6a40
mov word [rsp + 0x70], 5
mov byte [rsp + 0x72], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 9
jb 0x140064260
mov byte [rsp + 0x72], 0
lea rdx, [0x14034d880]
lea rcx, [rbp - 0x50]
call fcn.140062a10
mov r15, rax
mov dword [rsp + 0x58], 0x5d455e16
mov dword [rsp + 0x5c], 0x535f4751
mov word [rsp + 0x60], 5
mov byte [rsp + 0x62], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 9
jb 0x1400642b0
mov byte [rsp + 0x62], 0
lea rdx, [0x14034d860]
lea rcx, [rbp + 0x170]
call fcn.140062a10
mov r14, rax
mov dword [rsp + 0x40], 0x5e535f16
mov dword [rsp + 0x44], 0x1000851
mov rcx, r12
nop
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 6
jb 0x1400642f0
mov byte [rsp + 0x47], 0
lea rax, [rbp + 0x228]
mov qword [rsp + 0x38], rax
lea rdx, [0x14034d820]
lea rcx, [rbp + 0x228]
call fcn.14005caf0
mov rdi, rax
lea rax, [rbp + 0x248]
mov qword [rsp + 0x30], rax
lea rdx, [0x14034d8a0]
lea rcx, [rbp + 0x248]
call fcn.14005caf0
mov rbx, rax
mov rdx, rsi
lea rcx, [rbp + 0x1e8]
call fcn.14005caf0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x150]
call fcn.140062fb0
mov rsi, rax
mov dword [rsp + 0x48], 0x505c5416
mov dword [rsp + 0x4c], 0xa4f505f
mov word [rsp + 0x50], 0x100
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x48], al
inc rcx
cmp rcx, 8
jb 0x140064390
mov byte [rsp + 0x51], 0
lea rax, [rbp + 0x1b0]
mov qword [rbp - 0x78], rax
lea rdx, [0x14034d820]
lea rcx, [rbp + 0x1b0]
call fcn.14005caf0
mov rdi, rax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x38], rax
lea rdx, [0x14034d8a0]
lea rcx, [rbp + 0x190]
call fcn.14005caf0
mov rbx, rax
lea rdx, [0x14034d8c0]
lea rcx, [rbp + 0x298]
call fcn.14005caf0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x130]
call fcn.140062fb0
mov rdi, rax
mov dword [rsp + 0x38], 0x41574716
mov word [rsp + 0x3c], 9
mov byte [rsp + 0x3e], 1
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x38], al
inc rcx
cmp rcx, 5
jb 0x140064430
mov byte [rsp + 0x3e], 0
mov dword [rsp + 0x30], 0x475b5f59
mov word [rsp + 0x34], 0x100
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 4
jb 0x140064460
mov byte [rsp + 0x35], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
lea rax, [rsp + 0x30]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140064493
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14005cfa0
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x110]
call fcn.140062a10
mov r10, rax
mov dword [rsp + 0x30], 0x56424844
mov word [rsp + 0x34], 9
mov byte [rsp + 0x36], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0x30]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 5
jb 0x1400644e0
mov byte [rsp + 0x36], 0
lea rax, [rsp + 0x30]
mov r9, rbx
nop dword [rax]
inc r9
cmp byte [rax + r9], 0
jne 0x140064500
lea r8, [rsp + 0x30]
xor edx, edx
mov rcx, r10
call fcn.140073540
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x38]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140064550
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x10]
call fcn.14006d880
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x100], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp + 0xf0]
lea rcx, [rbp - 0x70]
call fcn.140073640
nop
lea rax, [rsp + 0x48]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400645b0
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x70]
call fcn.14006d880
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rsi
lea r8, [rbp + 0xd0]
lea rcx, [rbp + 0x70]
call fcn.140073640
nop
lea rax, [rsp + 0x40]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140064610
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x70]
call fcn.14006d880
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r14
lea r8, [rbp + 0xb0]
lea rcx, [rbp + 0x50]
call fcn.140073640
nop
lea rax, [rsp + 0x58]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140064670
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x50]
call fcn.14006d880
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r15
lea r8, [rbp + 0x90]
lea rcx, [rbp + 0x30]
call fcn.140073640
nop
lea rax, [rsp + 0x68]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400646c5
mov r8, rbx
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x30]
call fcn.14006d880
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [0x14034d820]
cmp qword [0x14034d838], 0xf
cmova rdx, qword [0x14034d820]
mov r8, qword [0x14034d830]
lea rcx, [rbp - 0x30]
call fcn.14006d880
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x2b8], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2c8], xmm6
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140064792
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006478d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650c4
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x1400647de
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400647d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650ca
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140064831
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006482b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650d0
call fcn.1402239bc
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x14006486c
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064867
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650d6
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x1400648bf
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400648b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650dc
call fcn.1402239bc
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x1400648fd
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400648f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650e2
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140064953
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006494d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650e8
call fcn.1402239bc
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x14006498e
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064989
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650ee
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x1400649e1
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400649db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650f4
call fcn.1402239bc
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x140064a1c
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064a17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400650fa
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x140064a6e
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064a69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065100
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp + 0x120], xmm0
mov byte [rbp + 0x110], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x140064ac0
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064abb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065106
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x140064b12
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064b0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006510c
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], 0
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x140064b6a
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064b65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065112
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp + 0x160], xmm0
mov byte [rbp + 0x150], 0
mov rdx, qword [rbp + 0x188]
cmp rdx, 0xf
jbe 0x140064bc2
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064bbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065118
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140064c14
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064c0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006511e
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r12
mov qword [rbp - 0x80], r12
lea r14, [rbp + 0x2b8]
movq rsi, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r15, xmm0
cmp r15, 0xf
cmova r14, rsi
movabs rbx, 0x7fffffffffffffff
movq rdi, xmm6
cmp rdi, rbx
ja 0x140065124
cmp rdi, 0xf
ja 0x140064c91
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x68], xmm0
jmp 0x140064d24
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x140064ccd
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140223980
mov rcx, rax
test rax, rax
je 0x14006512a
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140064d07
mov rbx, rax
mov ecx, reloc.WS2_32.dll_shutdown
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140064cf8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140065045
jmp 0x140064cab
test rcx, rcx
je 0x140064d04
call fcn.140223980
jmp 0x140064d07
mov rax, r12
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call fcn.140262f80
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x278]
call fcn.14006ac90
nop
lea rax, [rbp + 0x298]
mov qword [rbp - 0x78], rax
lea rdx, [0x14034d820]
lea rcx, [rbp + 0x298]
call fcn.14005caf0
mov rdi, rax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x40], rax
lea rdx, [0x14034d8a0]
lea rcx, [rbp + 0x190]
call fcn.14005caf0
mov rbx, rax
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x1b0]
call fcn.14005caf0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140063360
mov rbx, rax
lea rax, [rbp + 0x278]
cmp rax, rbx
je 0x140064e2a
mov rdx, qword [rbp + 0x290]
cmp rdx, 0xf
jbe 0x140064def
inc rdx
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064dea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065130
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp + 0x288], xmm0
mov byte [rbp + 0x278], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x278], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x288], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140064e65
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064e60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065130
call fcn.1402239bc
mov qword [rbp + 0x220], r12
lea r8, [rbp + 0x1e8]
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x268]
call fcn.140070000
nop
lea rdx, str.success
lea rcx, [rbp + 0x268]
call fcn.140070120
cmp byte [rax], 4
jne 0x140065136
lea rcx, [rbp + 0x268]
cmp byte [rax + 8], 0
je 0x140064fad
lea rdx, str.sessionid
call fcn.140070120
mov rdx, rax
lea rcx, [0x14034d9b0]
call fcn.140070260
nop
movzx edx, byte [rbp + 0x268]
lea rcx, [rbp + 0x270]
call fcn.14006e950
nop
mov rdx, qword [rbp + 0x290]
cmp rdx, 0xf
jbe 0x140064f25
inc rdx
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140064f20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006518d
call fcn.1402239bc
movdqa xmm0, xmmword [0x140310e60]
movdqu xmmword [rbp + 0x288], xmm0
mov byte [rbp + 0x278], 0
cmp r15, 0xf
jbe 0x140064f73
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140064f6b
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140065193
mov rcx, rsi
call fcn.1402239bc
mov rcx, qword [rbp + 0x2d8]
xor rcx, rsp
call fcn.140223960
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rdx, str.message
call fcn.140070120
mov rdi, rax
mov byte [rsp + 0x68], 3
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140223980
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov r8d, 0xa
lea rdx, str.invalidver
mov rcx, rax
call fcn.14005cfa0
mov qword [rsp + 0x70], rbx
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.140072ed0
movzx ebx, al
movzx edx, byte [rsp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.14006e950
nop
lea rcx, [rbp + 0x268]
test bl, bl
jne 0x14006504b
lea rdx, str.message
call fcn.140070120
lea rdx, [rbp + 0x298]
mov rcx, rax
call fcn.140070330
mov rcx, rax
call fcn.14006ac20
nop
call fcn.14005b560
nop
lea rdx, str.download
call fcn.140070120
lea rdx, [rbp + 0x298]
mov rcx, rax
call fcn.140070330
lea rcx, [rbp + 0x298]
call fcn.14005ca40
mov r8, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.140233c70
nop
lea rdx, str.Application_Not_Setup_Correctly.Please_Watch_Video_Linked_in_Main.cpp
lea rcx, [rbp + 0x298]
call fcn.14005cab0
mov rcx, rax
call fcn.14006ac20
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
nop
call fcn.14023360c
int3
call fcn.14005b600
int3
call fcn.14023360c
nop
call fcn.14023360c
nop
mov rcx, rax
call fcn.14006ee50
mov rdx, rax
lea rcx, [rbp + 0x298]
call fcn.14005cab0
nop
mov r8, rax
lea rdx, str.type_must_be_boolean__but_is
lea rcx, [rbp + 0x190]
call fcn.14006f920
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x1b0]
call fcn.1400616b0
lea rdx, [0x140334448]
lea rcx, [rbp + 0x1b0]
call fcn.140225c50
nop
call fcn.14023360c
nop
call fcn.14023360c
int3