Function at 0x1400d62f0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Delete file
Encode data using base64
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x140]
sub rsp, 0x240
mov rax, qword [0x1403f20c0]
xor rax, rsp
mov qword [rbp + 0x130], rax
lea rcx, [0x14048d6c2]
call fcn.140289ea0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov cl, 0x3e
mov word [rbp - 0x70], 0x3e
movsx edx, cl
movzx ecx, dx
xor cx, 0x62
mov word [rbp - 0x6e], cx
mov word [rbp - 0x6c], cx
movzx eax, dx
xor ax, 0x10
mov word [rbp - 0x6a], ax
mov word [rbp - 0x68], cx
movzx eax, dx
xor ax, 0x70
mov word [rbp - 0x66], ax
movzx eax, dx
xor ax, 0x5f
mov word [rbp - 0x64], ax
xor dx, 0x52
mov word [rbp - 0x62], dx
xor r14d, r14d
mov word [rbp - 0x60], r14w
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x6e]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400d656c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov cl, 0x78
mov word [rsp + 0x40], 0x78
movsx r11d, cl
movzx eax, r11w
xor ax, 0x23
mov word [rsp + 0x42], ax
movzx eax, r11w
xor ax, 0x55
mov word [rsp + 0x44], ax
movzx eax, r11w
xor ax, 0x25
mov word [rsp + 0x46], ax
movzx r10d, r11w
xor r10w, 0x58
mov word [rsp + 0x48], r10w
movzx ecx, r11w
xor cx, 0x24
mov word [rsp + 0x4a], cx
movzx eax, r11w
xor ax, 0x3c
mov word [rsp + 0x4c], ax
movzx r9d, r11w
xor r9w, 0x1d
mov word [rsp + 0x4e], r9w
movzx eax, r11w
xor ax, 0xe
mov word [rsp + 0x50], ax
movzx r8d, r11w
xor r8w, 0x11
mov word [rsp + 0x52], r8w
movzx eax, r11w
xor ax, 0x1b
mov word [rsp + 0x54], ax
mov word [rsp + 0x56], r9w
mov word [rsp + 0x58], cx
movzx eax, r11w
xor ax, 0x36
mov word [rsp + 0x5a], ax
movzx ecx, r11w
xor cx, 0x19
mov word [rsp + 0x5c], cx
movzx eax, r11w
xor ax, 0x14
mov word [rsp + 0x5e], ax
mov word [rsp + 0x60], r10w
mov word [rsp + 0x62], r8w
movzx edx, r11w
xor dx, 0xb
mov word [rsp + 0x64], dx
mov word [rsp + 0x66], r10w
mov word [rsp + 0x68], cx
mov word [rsp + 0x6a], ax
movzx eax, r11w
xor ax, 0xa
mov word [rsp + 0x6c], ax
mov word [rsp + 0x6e], r9w
mov word [rsp + 0x70], cx
movzx eax, r11w
xor ax, 0x1c
mov word [rsp + 0x72], ax
movzx eax, r11w
xor ax, 1
mov word [rsp + 0x74], ax
mov word [rsp + 0x76], r10w
mov word [rsp + 0x78], r8w
movzx eax, r11w
xor ax, 0x16
mov word [rsp + 0x7a], ax
mov word [rsp + 0x7c], r10w
movzx eax, r11w
xor ax, 0xd
mov word [rsp + 0x7e], ax
mov word [rbp - 0x80], dx
mov word [rbp - 0x7e], r9w
xor r11w, 0x56
mov word [rbp - 0x7c], r11w
mov word [rbp - 0x7a], r14w
lea rdx, [rsp + 0x42]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400e0430
lea rdx, [0x1400e0620]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rax, 0xffffffffffffffff
jmp 0x1400d762f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x140466450], xmm0
movups xmmword [0x140466460], xmm0
movups xmmword [0x140466470], xmm0
movups xmmword [0x140466480], xmm0
movups xmmword [0x140466490], xmm0
movups xmmword [0x1404664a0], xmm0
mov dword [0x1404664b0], eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub r8d, ecx
add r8d, 0xa
mov rbx, r14
movsxd rdi, r8d
test r8d, r8d
jle 0x1400d6616
movabs r15, 0x4ec4ec4ec4ec4ec5
lea rsi, [0x140000000]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, r15
mul rcx
shr rdx, 4
imul rax, rdx, 0x34
sub rcx, rax
movzx eax, byte [rcx + rsi + 0x3b9858]
mov byte [rbx + rsi + 0x466450], al
inc rbx
cmp rbx, rdi
jl 0x1400d65e5
mov cl, 0xa
mov word [rbp - 0x40], 0xa
movsx esi, cl
movzx eax, si
xor ax, 0x51
mov word [rbp - 0x3e], ax
movzx eax, si
xor ax, 0x36
mov word [rbp - 0x3c], ax
movzx eax, si
xor ax, 0x57
mov word [rbp - 0x3a], ax
movzx edi, si
xor di, 0x2a
mov word [rbp - 0x38], di
movzx eax, si
xor ax, 0x46
mov word [rbp - 0x36], ax
movzx eax, si
xor ax, 0x65
mov word [rbp - 0x34], ax
movzx ebx, si
xor bx, 0x6b
mov word [rbp - 0x32], bx
movzx r11d, si
xor r11w, 0x6e
mov word [rbp - 0x30], r11w
movzx r10d, si
xor r10w, 0x63
mov word [rbp - 0x2e], r10w
movzx ecx, si
xor cx, 0x64
mov word [rbp - 0x2c], cx
movzx eax, si
xor ax, 0x6d
mov word [rbp - 0x2a], ax
mov word [rbp - 0x28], di
movzx r8d, si
xor r8w, 0x7c
mov word [rbp - 0x26], r8w
movzx eax, si
xor ax, 0x7f
mov word [rbp - 0x24], ax
movzx edx, si
xor dx, 0x66
mov word [rbp - 0x22], dx
mov word [rbp - 0x20], cx
movzx r9d, si
xor r9w, 0x6f
mov word [rbp - 0x1e], r9w
movzx ecx, si
xor cx, 0x78
mov word [rbp - 0x1c], cx
mov word [rbp - 0x1a], bx
movzx eax, si
xor ax, 0x68
mov word [rbp - 0x18], ax
mov word [rbp - 0x16], dx
mov word [rbp - 0x14], r9w
mov word [rbp - 0x12], di
mov word [rbp - 0x10], r11w
mov word [rbp - 0xe], cx
mov word [rbp - 0xc], r10w
mov word [rbp - 0xa], r8w
mov word [rbp - 8], r9w
mov word [rbp - 6], cx
movzx eax, si
xor ax, 0x26
mov word [rbp - 4], ax
mov word [rbp - 2], di
movzx eax, si
xor ax, 0x44
mov word [rbp], ax
mov word [rbp + 2], bx
movzx eax, si
xor ax, 0x67
mov word [rbp + 4], ax
mov word [rbp + 6], r9w
xor si, 0x30
mov word [rbp + 8], si
mov word [rbp + 0xa], di
mov word [rbp + 0xc], r14w
lea rdx, [rbp - 0x3e]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400e0430
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.1400d5f70
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 7
jbe 0x1400d6788
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.1400e1980
lea rdx, [0x1400e0620]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
lea rcx, [rsp + 0x40]
call fcn.1400d1160
lea rcx, [rbp + 0xd0]
call fcn.1400d60f0
nop
cmp qword [rbp + 0xe0], 0
jne 0x1400d692a
mov cl, 0x35
mov word [rsp + 0x40], gethostname
movsx r10d, cl
movzx eax, r10w
xor ax, 0x6e
mov word [rsp + 0x42], ax
movzx eax, r10w
xor ax, 0x18
mov word [rsp + 0x44], ax
movzx eax, r10w
xor ax, 0x68
mov word [rsp + 0x46], ax
movzx r9d, r10w
xor r9w, 0x15
mov word [rsp + 0x48], r9w
movzx eax, r10w
xor ax, 0x76
mov word [rsp + 0x4a], ax
movzx eax, r10w
xor ax, 0x54
mov word [rsp + 0x4c], ax
movzx ecx, r10w
xor cx, 0x5b
mov word [rsp + 0x4e], cx
movzx eax, r10w
xor ax, 0x12
mov word [rsp + 0x50], ax
movzx eax, r10w
xor ax, 0x41
mov word [rsp + 0x52], ax
mov word [rsp + 0x54], r9w
movzx r8d, r10w
xor r8w, 0x53
mov word [rsp + 0x56], r8w
movzx eax, r10w
xor ax, 0x5c
mov word [rsp + 0x58], ax
mov word [rsp + 0x5a], cx
movzx edx, r10w
xor dx, 0x51
mov word [rsp + 0x5c], dx
mov word [rsp + 0x5e], r9w
movzx eax, r10w
xor ax, 0x61
mov word [rsp + 0x60], ax
movzx eax, r10w
xor ax, 0x70
mov word [rsp + 0x62], ax
movzx eax, r10w
xor ax, 0x78
mov word [rsp + 0x64], ax
movzx eax, r10w
xor ax, 0x65
mov word [rsp + 0x66], ax
mov word [rsp + 0x68], r9w
mov word [rsp + 0x6a], r8w
movzx eax, r10w
xor ax, 0x5a
mov word [rsp + 0x6c], ax
movzx eax, r10w
xor ax, 0x59
mov word [rsp + 0x6e], ax
mov word [rsp + 0x70], dx
movzx eax, r10w
xor ax, 0x50
mov word [rsp + 0x72], ax
xor r10w, 0x47
mov word [rsp + 0x74], r10w
mov word [rsp + 0x76], r14w
lea rdx, [rsp + 0x42]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400e0430
lea rdx, [0x1400e0620]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x1400d7619
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 7
cmova rcx, qword [rbp + 0xd0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 7
cmova rdx, qword [rbp + 0xd0]
lea rcx, [rbp - 0x40]
call fcn.1400e0120
nop
mov r8d, 0x8708
lea rdx, [0x1402c46a0]
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
lea rcx, [rbp - 0x38]
test al, al
je 0x1400d6ae5
call fcn.14005afe0
test rax, rax
jne 0x1400d69d4
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x40]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x38]
call fcn.140057440
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x68]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov al, reloc.WS2_32.dll_gethostname
mov dword [rbp - 0x40], 0x620039
mov dword [rbp - 0x3c], 0x640014
mov dword [rbp - 0x38], 0x7f0019
mov dword [rbp - 0x34], 0x500058
mov dword [rbp - 0x30], 0x5c0055
mov dword [rbp - 0x2c], 0x19005d
mov dword [rbp - 0x28], 0x56004d
mov dword [rbp - 0x24], 0x5a0019
mov dword [rbp - 0x20], 0x5c004b
mov dword [rbp - 0x1c], 0x4d0058
mov dword [rbp - 0x18], 0x19005c
mov dword [rbp - 0x14], 0x4c004f
mov dword [rbp - 0x10], 0x570055
mov dword [rbp - 0xc], 0x4b005c
mov dword [rbp - 8], 0x5b0058
mov dword [rbp - 4], 0x5c0055
mov dword [rbp], 0x5d0019
mov dword [rbp + 4], 0x50004b
mov dword [rbp + 8], 0x5c004f
mov dword [rbp + 0xc], 0x19004b
mov dword [rbp + 0x10], 0x50005f
mov dword [rbp + 0x14], 0x5c0055
mov word [rbp + 0x18], r14w
mov rcx, r14
nop dword [rax + rax]
movsx eax, al
xor word [rbp + rcx*2 - 0x3e], ax
inc rcx
cmp rcx, 0x2b
jae 0x1400d6ad7
movzx eax, byte [rbp - 0x40]
jmp 0x1400d6ac0
mov word [rbp + 0x18], r14w
lea rdx, [rbp - 0x3e]
jmp 0x1400d6909
call fcn.14005afe0
test rax, rax
jne 0x1400d6b0d
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x40]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x38]
call fcn.140057440
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x68]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xd0]
call fcn.1400e4ee0
test al, al
jne 0x1400d6c3e
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [rbp - 0x40]
call fcn.1400d7660
mov r9, rax
lea rdx, [rax + 2]
lea r8, [rax + 4]
mov r10d, 6
nop word [rax + rax]
movsx ecx, byte [r9]
xor word [r8 - 2], cx
movsx ecx, byte [r9]
xor word [r8], cx
movsx eax, byte [r9]
xor word [r8 + 2], ax
movsx eax, byte [r9]
xor word [r8 + 4], ax
movsx eax, byte [r9]
xor word [r8 + 6], ax
movsx eax, byte [r9]
xor word [r8 + 8], ax
movsx eax, byte [r9]
xor word [r8 + 0xa], ax
movsx eax, byte [r9]
xor word [r8 + 0xc], ax
movsx eax, byte [r9]
xor word [r8 + 0xe], ax
movsx eax, byte [r9]
xor word [r8 + 0x10], ax
movsx eax, byte [r9]
xor word [r8 + 0x12], ax
lea r8, [r8 + 0x16]
sub r10, 1
jne 0x1400d6b90
mov word [rdx + 0x84], r14w
mov rcx, rbx
call fcn.1400e0430
lea rdx, [0x1400e0620]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 7
cmova rcx, qword [rbp + 0xd0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
jmp 0x1400d7619
mov cl, 0x26
mov word [rbp - 0x58], Ordinal_41
movsx edx, cl
movzx ecx, dx
xor cx, 0x7a
mov word [rbp - 0x56], cx
mov word [rbp - 0x54], cx
movzx eax, dx
xor ax, 8
mov word [rbp - 0x52], ax
mov word [rbp - 0x50], cx
movzx eax, dx
xor ax, 0x68
mov word [rbp - 0x4e], ax
movzx eax, dx
xor ax, 0x47
mov word [rbp - 0x4c], ax
xor dx, 0x4a
mov word [rbp - 0x4a], dx
mov word [rbp - 0x48], r14w
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rbp - 0x56]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1400d74a8
mov dword [rbp - 0x70], 0x6f746e22
mov dword [rbp - 0x6c], 0x6e726b73
mov dword [rbp - 0x68], 0x78652e6c
mov word [rbp - 0x64], 0x65
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
lea rax, [rbp - 0x6f]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400d6d00
lea rdx, [rbp - 0x6f]
lea rcx, [rsp + 0x40]
call fcn.140043b60
nop
lea rcx, [rsp + 0x40]
call fcn.1400e6250
mov qword [0x1404664b8], rax
lea rcx, [rsp + 0x40]
call fcn.14005bde0
mov r8, qword [0x1404664b8]
test r8, r8
jne 0x1400d6e99
mov cl, 0x71
mov word [rsp + 0x40], WSAStartup
movsx r11d, cl
movzx eax, r11w
xor ax, 0x2a
mov word [rsp + 0x42], ax
movzx eax, r11w
xor ax, 0x5c
mov word [rsp + 0x44], ax
movzx eax, r11w
xor ax, 0x2c
mov word [rsp + 0x46], ax
movzx edx, r11w
xor dx, 0x51
mov word [rsp + 0x48], dx
movzx eax, r11w
xor ax, 0x37
mov word [rsp + 0x4a], ax
movzx eax, r11w
xor ax, 0x10
mov word [rsp + 0x4c], ax
movzx eax, r11w
xor ax, 0x18
mov word [rsp + 0x4e], ax
movzx r9d, r11w
xor r9w, 0x1d
mov word [rsp + 0x50], r9w
movzx r10d, r11w
xor r10w, 0x14
mov word [rsp + 0x52], r10w
movzx eax, r11w
xor ax, 0x15
mov word [rsp + 0x54], ax
mov word [rsp + 0x56], dx
movzx r8d, r11w
xor r8w, 5
mov word [rsp + 0x58], r8w
movzx ecx, r11w
xor cx, 0x1e
mov word [rsp + 0x5a], cx
mov word [rsp + 0x5c], dx
movzx eax, r11w
xor ax, 0x16
mov word [rsp + 0x5e], ax
mov word [rsp + 0x60], r10w
mov word [rsp + 0x62], r8w
mov word [rsp + 0x64], dx
movzx edx, r11w
xor dx, 0x1f
mov word [rsp + 0x66], dx
mov word [rsp + 0x68], r8w
mov word [rsp + 0x6a], cx
movzx eax, r11w
xor ax, 2
mov word [rsp + 0x6c], ax
movzx eax, r11w
xor ax, 0x1a
mov word [rsp + 0x6e], ax
movzx eax, r11w
xor ax, 3
mov word [rsp + 0x70], ax
mov word [rsp + 0x72], dx
mov word [rsp + 0x74], r9w
movzx eax, r11w
xor ax, 0x5f
mov word [rsp + 0x76], ax
mov word [rsp + 0x78], r10w
xor r11w, 9
mov word [rsp + 0x7a], r11w
mov word [rsp + 0x7c], r10w
mov word [rsp + 0x7e], r14w
lea rdx, [rsp + 0x42]
jmp 0x1400d75f5
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
mov r9d, 0x40
lea rdx, [rbp + 0xf0]
mov rcx, rsi
call fcn.1400d8a70
test al, al
je 0x1400d73b9
mov eax, 0x5a4d
cmp word [rbp + 0xf0], ax
jne 0x1400d73b9
mov rcx, rsi
call fcn.1400db0c0
test al, al
jne 0x1400d706e
mov cl, reloc.WS2_32.dll_gethostname
mov word [rsp + 0x40], reloc.WS2_32.dll_gethostname
movsx r11d, cl
movzx eax, r11w
xor ax, 0x62
mov word [rsp + 0x42], ax
movzx eax, r11w
xor ax, 0x14
mov word [rsp + 0x44], ax
movzx eax, r11w
xor ax, 0x64
mov word [rsp + 0x46], ax
movzx ecx, r11w
xor cx, 0x19
mov word [rsp + 0x48], cx
movzx eax, r11w
xor ax, 0x7f
mov word [rsp + 0x4a], ax
movzx r10d, r11w
xor r10w, 0x58
mov word [rsp + 0x4c], r10w
movzx edx, r11w
xor dx, 0x50
mov word [rsp + 0x4e], dx
movzx r9d, r11w
xor r9w, 0x55
mov word [rsp + 0x50], r9w
movzx r8d, r11w
xor r8w, 0x5c
mov word [rsp + 0x52], r8w
movzx eax, r11w
xor ax, 0x5d
mov word [rsp + 0x54], ax
mov word [rsp + 0x56], cx
movzx eax, r11w
xor ax, 0x4d
mov word [rsp + 0x58], ax
movzx eax, r11w
xor ax, 0x56
mov word [rsp + 0x5a], ax
mov word [rsp + 0x5c], cx
movzx ecx, r11w
xor cx, 0x7a
mov word [rsp + 0x5e], cx
mov word [rsp + 0x60], r9w
mov word [rsp + 0x62], r8w
mov word [rsp + 0x64], r10w
movzx eax, r11w
xor ax, 0x4b
mov word [rsp + 0x66], ax
movzx eax, r11w
xor ax, 0x69
mov word [rsp + 0x68], ax
mov word [rsp + 0x6a], dx
movzx eax, r11w
xor ax, 0x7d
mov word [rsp + 0x6c], ax
mov word [rsp + 0x6e], ax
movzx eax, r11w
xor ax, 0x7b
mov word [rsp + 0x70], ax
mov word [rsp + 0x72], cx
mov word [rsp + 0x74], r10w
movzx eax, r11w
xor ax, 0x5a
mov word [rsp + 0x76], ax
movzx eax, r11w
xor ax, 0x51
mov word [rsp + 0x78], ax
mov word [rsp + 0x7a], r8w
movzx eax, r11w
xor ax, 0x6d
mov word [rsp + 0x7c], ax
mov word [rsp + 0x7e], r10w
xor r11w, 0x5b
mov word [rbp - 0x80], r11w
mov word [rbp - 0x7e], r9w
mov word [rbp - 0x7c], r8w
mov word [rbp - 0x7a], r14w
lea rdx, [rsp + 0x42]
jmp 0x1400d75f5
mov rcx, rsi
call fcn.1400dcc80
test al, al
jne 0x1400d71e5
mov cl, 0x51
mov word [rbp - 0x40], 0x51
movsx ebx, cl
movzx eax, bx
xor ax, 0xa
mov word [rbp - 0x3e], ax
movzx eax, bx
xor ax, 0x7c
mov word [rbp - 0x3c], ax
movzx eax, bx
xor ax, 0xc
mov word [rbp - 0x3a], ax
movzx ecx, bx
xor cx, 0x71
mov word [rbp - 0x38], cx
movzx eax, bx
xor ax, 0x17
mov word [rbp - 0x36], ax
movzx r8d, bx
xor r8w, 0x30
mov word [rbp - 0x34], r8w
movzx r11d, bx
xor r11w, 0x38
mov word [rbp - 0x32], r11w
movzx edx, bx
xor dx, 0x3d
mov word [rbp - 0x30], dx
movzx r10d, bx
xor r10w, 0x34
mov word [rbp - 0x2e], r10w
movzx eax, bx
xor ax, 0x35
mov word [rbp - 0x2c], ax
mov word [rbp - 0x2a], cx
movzx r9d, bx
xor r9w, 0x25
mov word [rbp - 0x28], r9w
movzx eax, bx
xor ax, 0x3e
mov word [rbp - 0x26], ax
mov word [rbp - 0x24], cx
movzx eax, bx
xor ax, 0x12
mov word [rbp - 0x22], ax
mov word [rbp - 0x20], dx
mov word [rbp - 0x1e], r10w
mov word [rbp - 0x1c], r8w
movzx ecx, bx
xor cx, 0x23
mov word [rbp - 0x1a], cx
movzx eax, bx
xor ax, 0x1a
mov word [rbp - 0x18], ax
mov word [rbp - 0x16], r10w
mov word [rbp - 0x14], cx
movzx eax, bx
xor ax, 0x3f
mov word [rbp - 0x12], ax
mov word [rbp - 0x10], r10w
mov word [rbp - 0xe], dx
movzx eax, bx
xor ax, 0x19
mov word [rbp - 0xc], ax
mov word [rbp - 0xa], r8w
movzx edx, bx
xor dx, 0x22
mov word [rbp - 8], dx
movzx eax, bx
xor ax, 0x39
mov word [rbp - 6], ax
movzx eax, bx
xor ax, 0x13
mov word [rbp - 4], ax
movzx eax, bx
xor ax, 0x24
mov word [rbp - 2], ax
movzx eax, bx
xor ax, 0x32
mov word [rbp], ax
movzx eax, bx
xor ax, 0x3a
mov word [rbp + 2], ax
mov word [rbp + 4], r10w
mov word [rbp + 6], r9w
xor bx, 0x1d
mov word [rbp + 0xa], r11w
mov word [rbp + 0xc], dx
mov word [rbp + 0xe], r9w
mov word [rbp + 0x10], r14w
jmp 0x1400d75ed
mov rcx, rsi
call fcn.1400d9a60
test al, al
jne 0x1400d7364
mov cl, 0x5c
mov word [rsp + 0x40], 0x5c
movsx edi, cl
movzx eax, di
xor ax, 7
mov word [rsp + 0x42], ax
movzx eax, di
xor ax, 0x7d
mov word [rsp + 0x44], ax
movzx eax, di
xor ax, 1
mov word [rsp + 0x46], ax
movzx edx, di
xor dx, 0x7c
mov word [rsp + 0x48], dx
movzx eax, di
xor ax, 0x1a
mov word [rsp + 0x4a], ax
movzx r11d, di
xor r11w, 0x3d
mov word [rsp + 0x4c], r11w
movzx ebx, di
xor bx, 0x35
mov word [rsp + 0x4e], bx
movzx r9d, di
xor r9w, 0x30
mov word [rsp + 0x50], r9w
movzx r10d, di
xor r10w, 0x39
mov word [rsp + 0x52], r10w
movzx r8d, di
xor r8w, 0x38
mov word [rsp + 0x54], r8w
mov word [rsp + 0x56], dx
movzx eax, di
xor ax, 0x28
mov word [rsp + 0x58], ax
movzx ecx, di
xor cx, 0x33
mov word [rsp + 0x5a], cx
mov word [rsp + 0x5c], dx
movzx eax, di
xor ax, 0x1f
mov word [rsp + 0x5e], ax
mov word [rsp + 0x60], r9w
mov word [rsp + 0x62], r10w
mov word [rsp + 0x64], r11w
movzx edx, di
xor dx, 0x2e
mov word [rsp + 0x66], dx
movzx eax, di
xor ax, 0x11
mov word [rsp + 0x68], ax
movzx eax, di
xor ax, 0x31
mov word [rsp + 0x6a], ax
movzx eax, di
xor ax, 9
mov word [rsp + 0x6c], ax
movzx eax, di
xor ax, 0x32
mov word [rsp + 0x6e], ax
mov word [rsp + 0x70], r9w
mov word [rsp + 0x72], cx
mov word [rsp + 0x74], r11w
mov word [rsp + 0x76], r8w
mov word [rsp + 0x78], r10w
mov word [rsp + 0x7a], r8w
movzx eax, di
xor ax, 0x18
mov word [rsp + 0x7c], ax
mov word [rsp + 0x7e], dx
mov word [rbp - 0x80], bx
movzx eax, di
xor ax, 0x2a
mov word [rbp - 0x7e], ax
mov word [rbp - 0x7c], r10w
mov word [rbp - 0x7a], dx
xor di, 0x2f
mov word [rbp - 0x78], di
mov word [rbp - 0x76], r14w
lea rdx, [rsp + 0x42]
jmp 0x1400d75f5
mov rcx, rsi
call fcn.1400d7910
test al, al
jne 0x1400d7620
movdqa xmm0, xmmword [0x1403c0020]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1403c0910]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0x694c7265
mov word [rsp + 0x64], 0x7473
mov byte [rsp + 0x66], al
lea rdx, [rsp + 0x41]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400e0670
jmp 0x1400d7601
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [rbp - 0x40]
call fcn.1400d77a0
mov r9, rax
lea rdx, [rax + 2]
lea r8, [rax + 4]
mov r10d, 4
nop word [rax + rax]
movsx ecx, byte [r9]
xor word [r8 - 2], cx
movsx ecx, byte [r9]
xor word [r8], cx
movsx eax, byte [r9]
xor word [r8 + 2], ax
movsx eax, byte [r9]
xor word [r8 + 4], ax
movsx eax, byte [r9]
xor word [r8 + 6], ax
movsx eax, byte [r9]
xor word [r8 + 8], ax
movsx eax, byte [r9]
xor word [r8 + 0xa], ax
movsx eax, byte [r9]
xor word [r8 + 0xc], ax
movsx eax, byte [r9]
xor word [r8 + 0xe], ax
movsx eax, byte [r9]
xor word [r8 + 0x10], ax
movsx eax, byte [r9]
xor word [r8 + 0x12], ax
movsx eax, byte [r9]
xor word [r8 + 0x14], ax
movsx eax, byte [r9]
xor word [r8 + 0x16], ax
movsx eax, byte [r9]
xor word [r8 + 0x18], ax
movsx eax, byte [r9]
xor word [r8 + 0x1a], ax
movsx eax, byte [r9]
xor word [r8 + 0x1c], ax
movsx eax, byte [r9]
xor word [r8 + 0x1e], ax
movsx eax, byte [r9]
xor word [r8 + 0x20], ax
movsx eax, byte [r9]
xor word [r8 + 0x22], ax
lea r8, [r8 + 0x26]
sub r10, 1
jne 0x1400d73e0
mov word [rdx + 0x98], r14w
mov rcx, rbx
jmp 0x1400d75fc
mov cl, 0x56
mov word [rbp - 0x40], 0x56
movsx ebx, cl
movzx eax, bx
xor ax, 0xd
mov word [rbp - 0x3e], ax
movzx eax, bx
xor ax, 0x7b
mov word [rbp - 0x3c], ax
movzx eax, bx
xor ax, 0xb
mov word [rbp - 0x3a], ax
movzx r11d, bx
xor r11w, 0x76
mov word [rbp - 0x38], r11w
movzx eax, bx
xor ax, 0x10
mov word [rbp - 0x36], ax
movzx r8d, bx
xor r8w, 0x37
mov word [rbp - 0x34], r8w
movzx r9d, bx
xor r9w, 0x3f
mov word [rbp - 0x32], r9w
movzx edx, bx
xor dx, 0x3a
mov word [rbp - 0x30], dx
movzx r10d, bx
xor r10w, 0x33
mov word [rbp - 0x2e], r10w
movzx ecx, bx
xor cx, 0x32
mov word [rbp - 0x2c], cx
mov word [rbp - 0x2a], r11w
movzx eax, bx
xor ax, 0x22
mov word [rbp - 0x28], ax
movzx eax, bx
xor ax, 0x39
mov word [rbp - 0x26], ax
mov word [rbp - 0x24], r11w
mov word [rbp - 0x22], dx
mov word [rbp - 0x20], ax
mov word [rbp - 0x1e], r8w
mov word [rbp - 0x1c], cx
mov word [rbp - 0x1a], r11w
mov word [rbp - 0x18], cx
movzx eax, bx
xor ax, 0x24
mov word [rbp - 0x16], ax
mov word [rbp - 0x14], r9w
movzx ecx, bx
xor cx, 0x20
mov word [rbp - 0x12], cx
mov word [rbp - 0x10], r10w
mov word [rbp - 0xe], ax
mov word [rbp - 0xc], r11w
mov word [rbp - 0xa], r9w
movzx eax, bx
xor ax, 0x27
mov word [rbp - 8], ax
mov word [rbp - 6], cx
movzx eax, bx
xor ax, 0x21
mov word [rbp - 4], ax
movzx eax, bx
xor ax, 0x60
mov word [rbp - 2], ax
movzx eax, bx
xor ax, 0x62
mov word [rbp], ax
mov word [rbp + 2], r10w
movzx eax, bx
xor ax, 0x78
mov word [rbp + 4], ax
movzx eax, bx
xor ax, 0x25
mov word [rbp + 6], ax
xor bx, 0x2f
mov word [rbp + 0xa], ax
mov word [rbp + 0xc], r14w
lea rdx, [rbp - 0x3e]
mov word [rbp + 8], bx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.1400e0430
lea rdx, [0x1400e0620]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, rsi
call fcn.1400d8480
mov rsi, 0xffffffffffffffff
lea rcx, [rbp + 0xd0]
call fcn.1400d1160
mov rax, rsi
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.1402889f0
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret