Function at 0x14007cbe0
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2a0]
sub rsp, 0x3a0
mov rax, qword [0x140401ac0]
xor rax, rsp
mov qword [rbp + 0x298], rax
mov r15, rcx
xor esi, esi
lea rcx, [rbp - 0x20]
call fcn.14007df40
nop
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.140084ab0
mov rdx, rax
lea rcx, [r15 + 0x170]
call fcn.14006b020
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14007cc80
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cc7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d9e4
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14007ccce
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007ccc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d9ea
call fcn.140222bac
cmp qword [r15 + 0x30], 0xa
jne 0x14007d9c8
cmp qword [r15 + 0x50], 0x40
jne 0x14007d9c8
lea rax, [rbp + 0x1e8]
mov qword [rbp + 0x160], rax
lea rax, [rbp + 0x208]
mov qword [rbp - 0x50], rax
lea rax, [rbp + 0x188]
mov qword [rbp - 0x48], rax
lea rax, [rbp + 0x1a8]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], 0xc6d8dec6
mov word [rsp + 0x34], 0x100
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 4
jb 0x14007cd30
mov byte [rsp + 0x35], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
lea rax, [rsp + 0x30]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14007cd63
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x40]
call fcn.14005ccb0
nop
lea rdx, [r15 + 0x20]
lea rcx, [rbp - 0x20]
call fcn.140078570
mov r13, rax
mov rdx, r15
lea rcx, [rbp + 0x140]
call fcn.140078570
mov r12, rax
lea rdx, [0x14040d728]
lea rcx, [rbp + 0x1e8]
call fcn.1400672e0
mov rdi, rax
lea rdx, [r15 + 0x40]
lea rcx, [rbp + 0x208]
call fcn.1400672e0
mov rbx, rax
lea rdx, [r15 + 0x170]
lea rcx, [rbp + 0x168]
call fcn.1400672e0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.140078840
mov r14, rax
lea rdx, [0x14040d728]
lea rcx, [rbp + 0x188]
call fcn.1400672e0
mov rdi, rax
lea rdx, [r15 + 0x40]
lea rcx, [rbp + 0x1a8]
call fcn.1400672e0
mov rbx, rax
lea rdx, [r15 + 0x60]
lea rcx, [rbp + 0x238]
call fcn.1400672e0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.140078840
mov rbx, rax
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0xe0]
call fcn.140078570
mov r10, rax
mov dword [rsp + 0x30], 0xd7c1c9db
mov word [rsp + 0x34], Ordinal_143
mov byte [rsp + 0x36], 1
xor edi, edi
mov ecx, edi
lea eax, [rcx - 0x51]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 5
jb 0x14007ce70
mov byte [rsp + 0x36], dil
lea rax, [rsp + 0x30]
mov r9, rsi
nop dword [rax]
inc r9
cmp byte [rax + r9], dil
jne 0x14007ce90
lea r8, [rsp + 0x30]
xor edx, edx
mov rcx, r10
call fcn.14007da60
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
mov dword [rsp + 0x30], 0xc0d4c689
mov word [rsp + 0x34], Ordinal_143
mov byte [rsp + 0x36], 1
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x51]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 5
jb 0x14007cef0
mov byte [rsp + 0x36], 0
lea rax, [rsp + 0x30]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007cf10
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.140072800
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp]
movzx edx, byte [rsp + 0x38]
lea rcx, [rsp + 0x50]
call fcn.140067440
nop
mov dword [rsp + 0x40], 0xd1dfd589
mov dword [rsp + 0x44], 0x8bccd1d8
mov word [rsp + 0x48], 0x100
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 8
jb 0x14007cf80
mov byte [rsp + 0x49], 0
lea rax, [rsp + 0x40]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007cfa0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140072800
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r14
lea r8, [rbp + 0xc0]
movzx edx, byte [rsp + 0x38]
lea rcx, [rbp + 0x60]
call fcn.140067440
nop
mov dword [rsp + 0x30], 0xdfd0de89
mov dword [rsp + 0x34], 0x10089d6
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x51]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 6
jb 0x14007d010
mov byte [rsp + 0x37], 0
lea rax, [rsp + 0x30]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007d030
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.140072800
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r12
lea r8, [rbp + 0xa0]
movzx edx, byte [rsp + 0x38]
lea rcx, [rbp + 0x40]
call fcn.140067440
nop
mov dword [rsp + 0x40], 0xdcc6df89
mov dword [rsp + 0x44], 0xd2dcc6d6
mov word [rsp + 0x48], Ordinal_143
mov byte [rsp + 0x4a], 1
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 9
jb 0x14007d0b0
mov byte [rsp + 0x4a], 0
lea rax, [rsp + 0x40]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007d0d0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140072800
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r13
lea r8, [rbp + 0x80]
movzx edx, byte [rsp + 0x38]
lea rcx, [rbp + 0x20]
call fcn.140067440
nop
mov dword [rsp + 0x40], 0xdbdfd989
mov dword [rsp + 0x44], 0xc0dcebc7
mov word [rsp + 0x48], Ordinal_143
mov byte [rsp + 0x4a], 1
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 9
jb 0x14007d150
mov byte [rsp + 0x4a], 0
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14007d170
mov r8, rsi
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.140072800
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [0x14040d728]
cmp qword [0x14040d740], 0xf
cmova rdx, qword [0x14040d728]
mov r8, qword [0x14040d738]
lea rcx, [rsp + 0x70]
call fcn.140072800
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x278], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x288], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14007d241
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d23c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d9f0
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14007d28e
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d289
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d9f6
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14007d2e1
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d2db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d9fc
call fcn.140222bac
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14007d31c
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d317
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da02
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14007d36f
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d369
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da08
call fcn.140222bac
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14007d3aa
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d3a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da0e
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14007d3fd
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d3f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da14
call fcn.140222bac
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14007d43a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d435
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da1a
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14007d489
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d483
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da20
call fcn.140222bac
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x14007d4c4
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d4bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da26
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14007d516
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d511
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da2c
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 0xf0], xmm0
mov byte [rbp + 0xe0], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14007d56e
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d569
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da32
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 0x110], xmm0
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x14007d5c6
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d5c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da38
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x120], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x14007d61e
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d619
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da3e
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14007d670
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d66b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da44
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp - 0x10], xmm0
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14007d6bc
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d6b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da4a
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
lea rdx, [rbp + 0x278]
lea rcx, [rbp]
call fcn.1400672e0
mov rdx, rax
lea rcx, [rbp + 0x258]
call fcn.140082980
nop
lea rax, [rbp + 0x238]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x1a8]
mov qword [rbp - 0x48], rax
lea rdx, [0x14040d728]
lea rcx, [rbp + 0x238]
call fcn.1400672e0
mov rdi, rax
lea rdx, [r15 + 0x40]
lea rcx, [rbp + 0x1a8]
call fcn.1400672e0
mov rbx, rax
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x188]
call fcn.1400672e0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.140075680
mov rbx, rax
lea rax, [rbp + 0x258]
cmp rax, rbx
je 0x14007d7e9
mov rdx, qword [rbp + 0x270]
cmp rdx, 0xf
jbe 0x14007d7aa
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d7a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007da50
call fcn.140222bac
movdqa xmm0, xmmword [0x14026eb10]
movdqu xmmword [rbp + 0x268], xmm0
mov byte [rbp + 0x258], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x258], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x268], xmm1
xor esi, esi
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], sil
jmp 0x14007d7eb
xor esi, esi
lea rcx, [rbp + 0x168]
call fcn.14006a100
mov qword [rbp + 0x1e0], rsi
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0x1a8]
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x228]
call fcn.140063a30
nop
lea rdx, str.success
lea rcx, [rbp + 0x228]
call fcn.14005c140
mov rcx, rax
call fcn.140062770
lea rcx, [rbp + 0x228]
test al, al
je 0x14007d8df
lea rdx, str.sessionid
call fcn.14005c140
mov rcx, rax
lea rdx, [rbp + 0x238]
call fcn.14005c3f0
lea rcx, [r15 + 0x150]
mov rdx, rax
call fcn.14006b020
lea rcx, [rbp + 0x238]
call fcn.14006a100
nop
movzx edx, byte [rbp + 0x228]
lea rcx, [rbp + 0x230]
call fcn.140075e00
nop
lea rcx, [rbp + 0x258]
call fcn.14006a100
nop
lea rcx, [rbp + 0x278]
call fcn.14006a100
mov rcx, qword [rbp + 0x298]
xor rcx, rsp
call fcn.140222c70
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, str.message
call fcn.14005c140
mov rdi, rax
mov byte [rsp + 0x40], 3
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140222c90
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rsi
mov r8d, 0xa
lea rdx, str.invalidver
mov rcx, rax
call fcn.14005ccb0
mov qword [rsp + 0x48], rbx
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.14006b0c0
movzx ebx, al
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140075e00
nop
lea rcx, [rbp + 0x228]
test bl, bl
jne 0x14007d977
lea rdx, str.message
call fcn.14005c140
mov rcx, rax
lea rdx, [rbp + 0x238]
call fcn.14005c3f0
mov rcx, rax
call fcn.140079780
int3
lea rdx, str.download
call fcn.14005c140
mov rcx, rax
lea rdx, [rbp + 0x238]
call fcn.14005c3f0
lea rcx, [rbp + 0x238]
call fcn.1400737c0
mov r8, rax
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, [0x14026bfe4]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.140238768
nop
lea rdx, str.Application_Not_Setup_Correctly.Please_Watch_Video_Linked_in_Main.cpp
lea rcx, [rbp + 0x238]
call fcn.140067400
mov rcx, rax
call fcn.140079780
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
nop
call fcn.140238238
int3