Function at 0x140078c60
Capabilities:
Access peb ldr_data
Check internet connectivity via wininet
Create thread
Encode data using xor
Enumerate processes
Execute command
Hash data using fnv
Log keystrokes via polling
Resolve function by fnv-1a hash
Resolve function by parsing pe exports
Set console window title
Terminate process
Terminate process by name

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2f8]
sub rsp, 0x3d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x14010c080]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov rbx, rdx
xor r13d, r13d
lea ecx, [r13 + 8]
call fcn.1400e2798
lea rcx, [0x140045ef0]
mov qword [rax], rcx
mov qword [rbp + 0xb8], rax
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x14007f1d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x14007b572
cmp dword [rbp + 0xc8], r13d
je 0x14007b566
movaps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x90], xmm0
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14007b566
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [0x14010d260]
call fcn.14008bf20
lea ecx, [r13 + 8]
call fcn.1400e2798
lea rcx, [0x14006d370]
mov qword [rax], rcx
mov qword [rbp + 0xb8], rax
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x14007f1d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x14007b553
cmp dword [rbp + 0xc8], r13d
je 0x14007b547
movaps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x90], xmm0
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14007b547
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0x90]
call fcn.1400463d0
cmp qword [rax + 0x18], 0x10
jb 0x140078de7
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x140078e34
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078e2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140078e2f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2150
mov rdx, qword [rbx]
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], r13
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140078e56
lea rcx, [rbp + 0xd0]
call fcn.14007de90
nop
lea rcx, [rbp + 0xd0]
call fcn.140046590
test al, al
jne 0x140078f0e
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x140078ec5
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078ec0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140078ec0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2150
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.1400e2060
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov byte [rsp + 0x60], 0x43
mov al, reloc.WLDAP32.dll_Ordinal_32
mov cl, 0x2f
mov dl, 0x30
xor r8d, r8d
xor al, 0x43
mov byte [rsp + 0x61], al
xor cl, 0x43
mov byte [rsp + 0x62], cl
xor dl, 0x43
mov byte [rsp + 0x63], dl
mov byte [rsp + 0x64], r8b
lea rcx, [rsp + 0x61]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, str.https:__www.google.com_
call qword [sym.imp.WININET.dll_InternetCheckConnectionA]
test eax, eax
setne byte [0x14010d0b1]
test eax, eax
jne 0x140078f78
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rdi, qword [rcx + r10 + 0x88]
mov edi, edi
add rdi, r10
cmp rdi, r10
je 0x140079006
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140079006
mov ebx, dword [rdi + 0x20]
nop word [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140079001
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140078fe0
cmp r8d, 0xe76fb4aa
je 0x14007900b
test r9d, r9d
jne 0x140078fc0
mov rax, qword [rax]
jmp 0x140078f90
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
movsd xmm0, qword [0x1400fa718]
movsd qword [rbp - 0x30], xmm0
mov eax, dword [0x1400fa720]
mov dword [rbp - 0x28], eax
mov r8d, r13d
mov esi, Ordinal_33
lea r12d, [rsi - 0x1a]
mov r14d, dword [reloc.WS2_32.dll_accept]
cmp r14d, 2
jl 0x14007915c
movdqa xmm4, xmmword [0x1400fbaa0]
movd xmm6, r12d
movd xmm5, esi
movdqa xmm2, xmmword [0x1400fb580]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fb5a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400fb7e0]
movd xmm0, dword [0x1400fa718]
xorps xmm2, xmm0
movd dword [rbp - 0x30], xmm2
movdqa xmm3, xmmword [0x1400fb590]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fb5a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400fb7e0]
movd xmm0, dword [rbp - 0x2c]
xorps xmm2, xmm0
movd dword [rbp - 0x2c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140079170
lea rcx, [rbp - 0x30]
call r11
mov byte [rsp + 0x60], 0x64
mov al, 7
mov cl, 8
mov dl, reloc.WS2_32.dll_socket
xor r8d, r8d
xor al, 0x64
mov byte [rsp + 0x61], al
xor cl, 0x64
mov byte [rsp + 0x62], cl
xor dl, 0x64
mov byte [rsp + 0x63], dl
mov byte [rsp + 0x64], r8b
lea rcx, [rsp + 0x61]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r15, [0x14010d478]
cmp byte [0x14010d470], 0
jne 0x140079594
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rdi, qword [rcx + r10 + 0x88]
mov edi, edi
add rdi, r10
cmp rdi, r10
je 0x140079286
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140079286
mov ebx, dword [rdi + 0x20]
nop word [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140079281
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140079260
cmp r8d, 0xe76fb4aa
je 0x14007928b
test r9d, r9d
jne 0x140079240
mov rax, qword [rax]
jmp 0x140079210
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
movsd xmm0, qword [0x1400fa3d8]
mov eax, dword [0x1400fa3e0]
movsd qword [rbp - 0x60], xmm0
mov dword [rbp - 0x58], eax
movzx eax, byte [0x1400fa3e4]
mov byte [rbp - 0x54], al
cmp qword [0x14010d490], 0x10
mov r10, qword [0x14010d478]
jae 0x1400792d7
mov r10, r15
mov r8d, r13d
cmp r14d, 2
jl 0x1400793f0
movdqa xmm4, xmmword [0x1400fbaa0]
movd xmm6, r12d
movd xmm5, esi
movdqa xmm2, xmmword [0x1400fb580]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fb5a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
mov eax, dword [0x1400fb7e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1400fa3d8]
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
movdqa xmm3, xmmword [0x1400fb590]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fb5a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x5c]
xorps xmm2, xmm1
movd dword [rbp - 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140079400
mov rdx, r10
lea rcx, [rbp - 0x60]
call r11
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rdi, qword [rcx + r10 + 0x88]
mov edi, edi
add rdi, r10
cmp rdi, r10
je 0x1400794c6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400794c6
mov ebx, dword [rdi + 0x20]
nop word [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400794c1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400794a0
cmp r8d, 0x2fa62ca8
je 0x1400794cb
test r9d, r9d
jne 0x140079480
mov rax, qword [rax]
jmp 0x140079450
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x5dc
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rdi, qword [rcx + r10 + 0x88]
mov edi, edi
add rdi, r10
cmp rdi, r10
je 0x140079576
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140079576
mov ebx, dword [rdi + 0x20]
nop word [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140079571
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140079550
cmp r8d, 0xa52bcaf9
je 0x14007957b
test r9d, r9d
jne 0x140079530
mov rax, qword [rax]
jmp 0x140079500
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
lea rcx, [0x14010d260]
call fcn.1400889e0
test al, al
je 0x140079654
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rdi, qword [rcx + r10 + 0x88]
mov edi, edi
add rdi, r10
cmp rdi, r10
je 0x140079636
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140079636
mov ebx, dword [rdi + 0x20]
nop word [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140079631
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140079610
cmp r8d, 0xa52bcaf9
je 0x14007963b
test r9d, r9d
jne 0x1400795f0
mov rax, qword [rax]
jmp 0x1400795c0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r13
mov qword [rbp + 0x108], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf0], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rdi, qword [rcx + r10 + 0x88]
mov edi, edi
add rdi, r10
cmp rdi, r10
je 0x140079706
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140079706
mov ebx, dword [rdi + 0x20]
nop word [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140079701
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400796e0
cmp r8d, 0xe76fb4aa
je 0x14007970b
test r9d, r9d
jne 0x1400796c0
mov rax, qword [rax]
jmp 0x140079690
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
movsd xmm0, qword [0x1400faab8]
movsd qword [rbp], xmm0
mov eax, dword [str.vfzaB]
mov dword [rbp + 8], eax
movzx eax, word [0x1400faac4]
mov word [rbp + 0xc], ax
cmp byte [0x1400faac5], 0
je 0x1400798b3
mov r8d, r13d
cmp r14d, 2
jl 0x14007986a
movdqa xmm4, xmmword [0x1400fbaa0]
movd xmm6, r12d
movd xmm5, esi
movdqa xmm2, xmmword [0x1400fb580]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fb5a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
mov eax, dword [0x1400fb7e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1400faab8]
xorps xmm2, xmm0
movd dword [rbp], xmm2
movdqa xmm3, xmmword [0x1400fb590]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fb5a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 4]
xorps xmm2, xmm1
movd dword [rbp + 4], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x140079880
lea rcx, [rbp]
call r11
lea rdx, [rbp + 0xf0]
mov rcx, qword [0x1400e64a8]
call fcn.14007d5c0
lea rdx, [rbp + 0xf0]
lea rcx, [rbp]
call fcn.14007c610
mov rdx, rax
lea rcx, [0x14010d260]
call fcn.14008d740
mov byte [rbp + 0xb8], 0x51
mov al, 5
mov cl, 0x34
mov dl, reloc.WLDAP32.dll_Ordinal_41
mov r8b, Ordinal_50
mov r9b, Ordinal_35
xor r10d, r10d
xor al, 0x51
mov byte [rbp + 0xb9], al
xor cl, 0x51
mov byte [rbp + 0xba], cl
xor dl, 0x51
mov byte [rbp + 0xbb], dl
xor r8b, 0x51
mov byte [rbp + 0xbc], r8b
xor r9b, 0x51
mov byte [rbp + 0xbd], r9b
mov byte [rbp + 0xbe], r10b
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r13
lea rax, [rbp + 0xb9]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r10b
jne 0x140079956
lea rdx, [rbp + 0xb9]
lea rcx, [rbp]
call fcn.14007de90
lea rdx, [rbp]
lea rcx, [0x14010d260]
call fcn.14008ec90
mov esi, r13d
mov rcx, qword [0x14010d448]
mov rax, rcx
mov rdx, qword [0x14010d440]
sub rax, rdx
sar rax, 6
test rax, rax
je 0x140079d4b
mov rbx, r13
lea r12, str.Texas
nop dword [rax]
sub rcx, rdx
sar rcx, 6
cmp rcx, rbx
jbe 0x14007b585
shl rbx, 6
add rbx, rdx
mov rdx, rbx
lea rcx, [rbp + 0x110]
call fcn.14007c610
nop
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x130]
call fcn.14007c610
nop
lea rdx, [rbp + 0x110]
cmp qword [rbp + 0x128], 0x10
cmovae rdx, qword [rbp + 0x110]
cmp qword [rbp + 0x120], 5
jne 0x140079df6
mov rcx, r13
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r12 + rcx - 1]
jne 0x140079a2d
mov eax, 5
cmp rcx, rax
jne 0x140079a10
mov eax, r13d
jmp 0x140079a32
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140079df6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rdi, qword [rcx + r10 + 0x88]
mov edi, edi
add rdi, r10
cmp rdi, r10
je 0x140079ac6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140079ac6
mov ebx, dword [rdi + 0x20]
nop word [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140079ac1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140079aa0
cmp r8d, 0xe76fb4aa
je 0x140079acb
test r9d, r9d
jne 0x140079a80
mov rax, qword [rax]
jmp 0x140079a50
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
movsd xmm0, qword [0x1400fb250]
movsd qword [rbp - 0x40], xmm0
mov eax, dword [0x1400fb258]
mov dword [rbp - 0x38], eax
movzx eax, byte [0x1400fb25c]
mov byte [rbp - 0x34], al
mov r8d, r13d
cmp r14d, 2
jl 0x140079c25
movdqa xmm4, xmmword [0x1400fbaa0]
mov eax, 5
movd xmm6, eax
mov eax, Ordinal_33
movd xmm5, eax
movdqa xmm2, xmmword [0x1400fb580]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fb5a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
mov eax, dword [0x1400fb7e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1400fb250]
xorps xmm2, xmm0
movd dword [rbp - 0x40], xmm2
movdqa xmm3, xmmword [0x1400fb590]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fb5a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x3c]
xorps xmm2, xmm1
movd dword [rbp - 0x3c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x40]
add r9, rax
nop
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140079c30
lea rcx, [rbp - 0x40]
call r11
mov byte [rsp + 0x78], Ordinal_45
mov al, 0x48
mov cl, 0x47
mov dl, 0x58
xor r8d, r8d
xor al, 0x2b
mov byte [rsp + 0x79], al
xor cl, 0x2b
mov byte [rsp + 0x7a], cl
xor dl, 0x2b
mov byte [rsp + 0x7b], dl
mov byte [rsp + 0x7c], r8b
lea rcx, [rsp + 0x79]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x140079cde
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079cd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140079def
call fcn.1400e2150
mov rdx, qword [rbp + 0x128]
cmp rdx, 0x10
jb 0x140079d1f
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079d1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140079def
call fcn.1400e2150
inc esi
movsxd rbx, esi
mov rcx, qword [0x14010d448]
mov rax, rcx
mov rdx, qword [0x14010d440]
sub rax, rdx
sar rax, 6
cmp rbx, rax
jb 0x1400799b0
mov r12d, 5
cmp byte [0x14010d470], 0
jne 0x14007a3e4
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140079dea
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140079dea
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140079de5
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140079dc0
cmp r8d, 0xe76fb4aa
je 0x14007a0d7
test r9d, r9d
jne 0x140079da0
mov rax, qword [rax]
jmp 0x140079d70
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov byte [rsp + 0x68], 0x7b
mov al, 0x18
mov cl, reloc.WS2_32.dll_socket
mov dl, 8
xor r8d, r8d
xor al, 0x7b
mov byte [rsp + 0x69], al
xor cl, 0x7b
mov byte [rsp + 0x6a], cl
xor dl, 0x7b
mov byte [rsp + 0x6b], dl
mov byte [rsp + 0x6c], r8b
lea rcx, [rsp + 0x69]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140079eb6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140079eb6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140079eb1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140079e90
cmp r8d, 0xe76fb4aa
je 0x140079ebb
test r9d, r9d
jne 0x140079e70
mov rax, qword [rax]
jmp 0x140079e40
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
lea rdx, [rbp - 0x20]
call fcn.14007b590
mov r9, rax
cmp byte [rax + 0xf], 0
je 0x14007a083
cmp r14d, 2
jl 0x14007a047
movdqa xmm5, xmmword [0x1400fb580]
movdqa xmm4, xmmword [0x1400fbaa0]
mov eax, 5
movd xmm6, eax
movdqa xmm7, xmmword [0x1400fb5a0]
mov eax, Ordinal_33
movd xmm8, eax
movdqa xmm0, xmmword [0x1400fb7e0]
movdqa xmmword [rbp + 0x90], xmm0
mov rcx, r9
mov edx, dword [rbp + 0x90]
nop word [rax + rax]
movd xmm2, r13d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r13 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r13d, 8
lea rcx, [rcx + 8]
cmp r13d, 0x10
jl 0x140079f40
jmp 0x14007a083
mov r8, r9
nop word [rax + rax]
mov eax, 0x92492493
imul r13d
add edx, r13d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, r13b
sub al, dl
add al, 0x35
xor byte [r8], al
inc r13d
lea r8, [r8 + 1]
cmp r13d, 0x10
jl 0x14007a050
mov rcx, r9
call r11
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rsp + 0x70], 0x43
mov al, reloc.WLDAP32.dll_Ordinal_32
mov cl, 0x2f
mov dl, 0x30
xor r8d, r8d
xor al, 0x43
mov byte [rsp + 0x71], al
xor cl, 0x43
mov byte [rsp + 0x72], cl
xor dl, 0x43
mov byte [rsp + 0x73], dl
mov byte [rsp + 0x74], r8b
lea rcx, [rsp + 0x71]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140078bc0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
movsd xmm0, qword [0x1400fa3d8]
mov eax, dword [0x1400fa3e0]
movsd qword [rbp - 0x50], xmm0
mov dword [rbp - 0x48], eax
movzx eax, byte [0x1400fa3e4]
mov byte [rbp - 0x44], al
cmp qword [0x14010d490], 0x10
jb 0x14007a120
mov r15, qword [0x14010d478]
mov r8d, r13d
cmp r14d, 2
jl 0x14007a23e
movdqa xmm4, xmmword [0x1400fbaa0]
movd xmm6, r12d
mov eax, Ordinal_33
movd xmm5, eax
movdqa xmm2, xmmword [0x1400fb580]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fb5a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
mov eax, dword [0x1400fb7e0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1400fa3d8]
xorps xmm2, xmm0
movd dword [rbp - 0x50], xmm2
movdqa xmm3, xmmword [0x1400fb590]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400fb5a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400fb6d0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x4c]
xorps xmm2, xmm1
movd dword [rbp - 0x4c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x14007a250
mov rdx, r15
lea rcx, [rbp - 0x50]
call r11
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14007a316
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14007a316
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14007a311
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14007a2f0
cmp r8d, 0x2fa62ca8
je 0x14007a31b
test r9d, r9d
jne 0x14007a2d0
mov rax, qword [rax]
jmp 0x14007a2a0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov ecx, 0x5dc
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14007a3c6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14007a3c6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14007a3c1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14007a3a0
cmp r8d, 0xa52bcaf9
je 0x14007a3cb
test r9d, r9d
jne 0x14007a380
mov rax, qword [rax]
jmp 0x14007a350
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
call rax
movdqa xmm1, xmmword [0x1400fb760]
movdqu xmmword [rbp], xmm1
movdqa xmm2, xmmword [0x1400fb7b0]
movdqu xmmword [rbp + 0x10], xmm2
mov cl, 0x4a
mov dl, 3
mov r9b, 0x35
mov r10b, 1
mov r11b, Ordinal_79
mov bl, reloc.WLDAP32.dll_Ordinal_50
mov dil, reloc.WS2_32.dll_sendto
mov sil, 0x57
mov r14b, 0xa
xor r15b, r15b
movzx r12d, r14b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r8d, xmm1
xor al, r8b
mov byte [rbp + 1], al
xor byte [rbp + 2], r8b
xor byte [rbp + 3], r8b
xor byte [rbp + 4], r8b
xor byte [rbp + 5], r8b
xor byte [rbp + 6], r8b
xor byte [rbp + 7], r8b
xor byte [rbp + 8], r8b
xor byte [rbp + 9], r8b
xor byte [rbp + 0xa], r8b
xor byte [rbp + 0xb], r8b
xor byte [rbp + 0xc], r8b
xor byte [rbp + 0xd], r8b
xor byte [rbp + 0xe], r8b
xor byte [rbp + 0xf], r8b
movd eax, xmm2
xor al, r8b
mov byte [rbp + 0x10], al
xor byte [rbp + 0x11], r8b
xor byte [rbp + 0x12], r8b
xor byte [rbp + 0x13], r8b
xor byte [rbp + 0x14], r8b
xor byte [rbp + 0x15], r8b
xor byte [rbp + 0x16], r8b
xor byte [rbp + 0x17], r8b
xor byte [rbp + 0x18], r8b
xor byte [rbp + 0x19], r8b
xor byte [rbp + 0x1a], r8b
xor byte [rbp + 0x1b], r8b
xor byte [rbp + 0x1c], r8b
xor byte [rbp + 0x1d], r8b
xor byte [rbp + 0x1e], r8b
xor byte [rbp + 0x1f], r8b
xor cl, r8b
mov byte [rbp + 0x20], cl
xor dl, r8b
mov byte [rbp + 0x21], dl
xor r9b, r8b
mov byte [rbp + 0x22], r9b
xor r10b, r8b
mov byte [rbp + 0x23], r10b
xor r11b, r8b
mov byte [rbp + 0x24], r11b
xor bl, r8b
mov byte [rbp + 0x25], bl
xor dil, r8b
mov byte [rbp + 0x26], dil
xor sil, r8b
mov byte [rbp + 0x27], sil
xor r14b, r8b
mov byte [rbp + 0x28], r14b
xor r15b, r8b
mov byte [rbp + 0x29], r15b
xor r12b, r8b
mov byte [rbp + 0x2a], r12b
mov byte [rbp + 0x2b], 0
lea rcx, [rbp + 1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, str..pymodule
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x14010d0a0], rax
mov byte [rsp + 0x70], 0x58
mov al, Ordinal_60
mov cl, 0x34
mov dl, 0x2b
xor r8d, r8d
xor al, 0x58
mov byte [rsp + 0x71], al
xor cl, 0x58
mov byte [rsp + 0x72], cl
xor dl, 0x58
mov byte [rsp + 0x73], dl
mov byte [rsp + 0x74], r8b
lea rcx, [rsp + 0x71]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm1, xmmword [str.e_N8E_]
movdqu xmmword [rbp], xmm1
mov dl, 1
mov r8b, ntohl
mov r9b, listen
mov r10b, 2
mov r11b, 0x4b
movzx ebx, r11b
movzx edi, r11b
mov sil, reloc.WS2_32.dll_WSAGetLastError
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 1], al
xor byte [rbp + 2], cl
xor byte [rbp + 3], cl
xor byte [rbp + 4], cl
xor byte [rbp + 5], cl
xor byte [rbp + 6], cl
xor byte [rbp + 7], cl
xor byte [rbp + 8], cl
xor byte [rbp + 9], cl
xor byte [rbp + 0xa], cl
xor byte [rbp + 0xb], cl
xor byte [rbp + 0xc], cl
xor byte [rbp + 0xd], cl
xor byte [rbp + 0xe], cl
xor byte [rbp + 0xf], cl
xor dl, cl
mov byte [rbp + 0x10], dl
xor r8b, cl
mov byte [rbp + 0x11], r8b
xor r9b, cl
mov byte [rbp + 0x12], r9b
xor r10b, cl
mov byte [rbp + 0x13], r10b
xor r11b, cl
mov byte [rbp + 0x14], r11b
xor bl, cl
mov byte [rbp + 0x15], bl
xor dil, cl
mov byte [rbp + 0x16], dil
xor sil, cl
mov byte [rbp + 0x17], sil
mov byte [rbp + 0x18], 0
lea rcx, [rbp + 1]
call fcn.140041b10
mov rax, qword [0x14010d0a0]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14007b38b
movdqa xmm1, xmmword [0x1400fb990]
movdqu xmmword [rbp], xmm1
mov dl, 0x4b
mov r8b, 0x4a
movzx r9d, dl
mov r10b, 0x25
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 1], al
xor byte [rbp + 2], cl
xor byte [rbp + 3], cl
xor byte [rbp + 4], cl
xor byte [rbp + 5], cl
xor byte [rbp + 6], cl
xor byte [rbp + 7], cl
xor byte [rbp + 8], cl
xor byte [rbp + 9], cl
xor byte [rbp + 0xa], cl
xor byte [rbp + 0xb], cl
xor byte [rbp + 0xc], cl
xor byte [rbp + 0xd], cl
xor byte [rbp + 0xe], cl
xor byte [rbp + 0xf], cl
xor dl, cl
mov byte [rbp + 0x10], dl
xor r8b, cl
mov byte [rbp + 0x11], r8b
xor r9b, cl
mov byte [rbp + 0x12], r9b
xor r10b, cl
mov byte [rbp + 0x13], r10b
mov byte [rbp + 0x14], 0
lea rcx, [rbp + 1]
call fcn.140041b10
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [rsp + 0x68], Ordinal_79
mov al, reloc.WLDAP32.dll_Ordinal_45
mov cl, Ordinal_35
mov dl, 0x3d
xor r8d, r8d
xor al, 0x4e
mov byte [rsp + 0x69], al
xor cl, 0x4e
mov byte [rsp + 0x6a], cl
xor dl, 0x4e
mov byte [rsp + 0x6b], dl
mov byte [rsp + 0x6c], r8b
lea rcx, [rsp + 0x69]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm1, xmmword [0x1400fb730]
movdqu xmmword [rbp], xmm1
movdqa xmm2, xmmword [0x1400fb720]
movdqu xmmword [rbp + 0x10], xmm2
movdqa xmm3, xmmword [0x1400fb980]
movdqu xmmword [rbp + 0x20], xmm3
mov r8b, 0x69
movzx r9d, r8b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp + 1], al
xor byte [rbp + 2], dl
xor byte [rbp + 3], dl
xor byte [rbp + 4], dl
xor byte [rbp + 5], dl
xor byte [rbp + 6], dl
xor byte [rbp + 7], dl
xor byte [rbp + 8], dl
xor byte [rbp + 9], dl
xor byte [rbp + 0xa], dl
xor byte [rbp + 0xb], dl
xor byte [rbp + 0xc], dl
xor byte [rbp + 0xd], dl
xor byte [rbp + 0xe], dl
xor byte [rbp + 0xf], dl
movd eax, xmm2
xor al, dl
mov byte [rbp + 0x10], al
xor byte [rbp + 0x11], dl
xor byte [rbp + 0x12], dl
xor byte [rbp + 0x13], dl
xor byte [rbp + 0x14], dl
xor byte [rbp + 0x15], dl
xor byte [rbp + 0x16], dl
xor byte [rbp + 0x17], dl
xor byte [rbp + 0x18], dl
xor byte [rbp + 0x19], dl
xor byte [rbp + 0x1a], dl
xor byte [rbp + 0x1b], dl
xor byte [rbp + 0x1c], dl
xor byte [rbp + 0x1d], dl
xor byte [rbp + 0x1e], dl
xor byte [rbp + 0x1f], dl
movd eax, xmm3
xor al, dl
mov byte [rbp + 0x20], al
xor byte [rbp + 0x21], dl
xor byte [rbp + 0x22], dl
xor byte [rbp + 0x23], dl
xor byte [rbp + 0x24], dl
xor byte [rbp + 0x25], dl
xor byte [rbp + 0x26], dl
xor byte [rbp + 0x27], dl
xor byte [rbp + 0x28], dl
xor byte [rbp + 0x29], dl
xor byte [rbp + 0x2a], dl
xor byte [rbp + 0x2b], dl
xor byte [rbp + 0x2c], dl
xor byte [rbp + 0x2d], dl
xor byte [rbp + 0x2e], dl
xor byte [rbp + 0x2f], dl
xor r8b, dl
mov byte [rbp + 0x30], r8b
xor r9b, dl
mov byte [rbp + 0x31], r9b
mov byte [rbp + 0x32], 0
lea rdx, [rbp + 1]
mov rcx, qword [0x1400e6470]
call fcn.14007d7b0
mov ecx, WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14007a80e
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14007a7f3
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, str..pymodule
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x14010d0a0], rax
call fcn.14007c320
mov rdi, qword [rax]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp + 0x150], 0x130
lea rdx, [rbp + 0x150]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14007a8a8
mov rdx, rdi
lea rcx, [rbp + 0x17c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rbx
test eax, eax
je 0x14007a89a
lea rdx, [rbp + 0x150]
call qword [sym.imp.KERNEL32.dll_Process32Next]
jmp 0x14007a870
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [rbp + 0x158]
jmp 0x14007a8b4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, r13d
movsxd rax, ecx
mov qword [0x14010d098], rax
mov qword [rbp + 0xb8], r13
mov dword [rbp - 0x20], 0xcabd5e5
mov dword [rbp - 0x1c], ecx
lea rax, [rbp + 0xb8]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp - 0x20]
mov edx, 0x223fb8
mov rcx, qword [0x14010d0a0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0xb8]
mov qword [0x14010d090], rax
mov ebx, dword [0x14010d098]
call fcn.14007c320
mov dword [rax + 8], ebx
mov rbx, qword [0x14010d090]
call fcn.14007c320
mov qword [rax + 0x10], rbx
mov byte [rbp - 0x80], reloc.WLDAP32.dll_Ordinal_35
mov al, 0x40
mov cl, reloc.WLDAP32.dll_Ordinal_79
mov dl, 0x50
xor r8d, r8d
xor al, 0x23
mov byte [rbp - 0x7f], al
xor cl, 0x23
mov byte [rbp - 0x7e], cl
xor dl, 0x23
mov byte [rbp - 0x7d], dl
mov byte [rbp - 0x7c], r8b
lea rcx, [rbp - 0x7f]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14007c320
mov ebx, dword [rax + 8]
movdqa xmm1, xmmword [0x1400fb920]
movdqu xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x1f], al
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
xor byte [rbp - 0x1a], cl
xor byte [rbp - 0x19], cl
xor byte [rbp - 0x18], cl
xor byte [rbp - 0x17], cl
xor byte [rbp - 0x16], cl
xor byte [rbp - 0x15], cl
xor byte [rbp - 0x14], cl
xor byte [rbp - 0x13], cl
xor byte [rbp - 0x12], cl
xor byte [rbp - 0x11], cl
mov byte [rbp - 0x10], 0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r13
lea rax, [rbp - 0x1f]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14007a9d5
lea rdx, [rbp - 0x1f]
lea rcx, [rbp]
call fcn.14007de90
mov rdx, rbx
lea rcx, [rbp]
call fcn.14006d6e0
call fcn.14007c320
mov r12, qword [rax + 0x10]
mov byte [rbp - 0x70], Ordinal_79
mov al, reloc.WS2_32.dll_setsockopt
mov cl, 0x65
mov dl, reloc.WS2_32.dll_send
mov r8b, WSASetLastError
mov r9b, ntohl
mov r10b, 0x2f
mov r11b, 0x3d
mov bl, 0x2b
mov dil, 7
mov sil, 0x2a
mov r14b, reloc.WS2_32.dll_WSACleanup
movzx r15d, r8b
xor r13d, r13d
xor al, 0x4e
mov byte [rbp - 0x6f], al
xor cl, 0x4e
mov byte [rbp - 0x6e], cl
xor dl, 0x4e
mov byte [rbp - 0x6d], dl
xor r8b, 0x4e
mov byte [rbp - 0x6c], r8b
xor r9b, 0x4e
mov byte [rbp - 0x6b], r9b
xor r10b, 0x4e
mov byte [rbp - 0x6a], r10b
xor r11b, 0x4e
mov byte [rbp - 0x69], r11b
xor bl, 0x4e
mov byte [rbp - 0x68], bl
xor dil, 0x4e
mov byte [rbp - 0x67], dil
xor sil, 0x4e
mov byte [rbp - 0x66], sil
xor r14b, 0x4e
mov byte [rbp - 0x65], r14b
xor r15b, 0x4e
mov byte [rbp - 0x64], r15b
mov byte [rbp - 0x63], r13b
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
lea rax, [rbp - 0x6f]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], r13b
jne 0x14007aaa0
lea rdx, [rbp - 0x6f]
lea rcx, [rbp - 0x20]
call fcn.14007de90
mov rdx, r12
lea rcx, [rbp - 0x20]
call fcn.14006d6e0
call fcn.14007c320
cmp dword [rax + 8], r13d
je 0x14007b127
call fcn.14007c320
cmp qword [rax + 0x10], r13
je 0x14007b127
xor edx, edx
lea rcx, str.UnrealWindow
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
je 0x14007ab44
call fcn.14007c320
mov qword [rax + 0x18], rbx
call fcn.14007c320
lea rdx, [rbp + 0x90]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp + 0x90]
mov dword [rbp + 0xb0], eax
mov eax, dword [rbp + 0x94]
mov dword [rbp + 0xb4], eax
call fcn.14007c320
lea rdx, [rbp + 0xb0]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x14006d7b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
xor r9d, r9d
lea r8, [0x1400741f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14007c320
lea rdx, [rbp + 0xc0]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov ebx, dword [rbp + 0xc8]
sub ebx, dword [rbp + 0xc0]
call fcn.14007c320
mov dword [rax + 0x2c], ebx
mov ebx, dword [rbp + 0xcc]
sub ebx, dword [rbp + 0xc4]
call fcn.14007c320
mov dword [rax + 0x28], ebx
call fcn.14007c320
mov ecx, dword [rbp + 0xc0]
mov dword [rax + 0x30], ecx
call fcn.14007c320
mov ecx, dword [rbp + 0xc8]
mov dword [rax + 0x34], ecx
call fcn.14007c320
mov ecx, dword [rbp + 0xc4]
mov dword [rax + 0x38], ecx
call fcn.14007c320
mov ecx, dword [rbp + 0xcc]
mov dword [rax + 0x3c], ecx
lea rcx, [rbp + 0x90]
call fcn.1400422e0
cmp qword [rax + 0x18], 0x10
jb 0x14007ac1d
mov rax, qword [rax]
mov qword [0x14010d150], rax
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x14007ac68
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007ac63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007ac63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e2150
mov qword [rbp], 0x50
lea rax, [0x140078a50]
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r13
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x20], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp + 0x28], rax
xorps xmm6, xmm6
mov rax, qword [0x14010d150]
mov qword [rbp + 0x40], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp + 0x48], rax
movups xmm0, xmmword [rbp]
movups xmmword [0x14010d160], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [0x14010d170], xmm1
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [0x14010d180], xmm0
movups xmmword [0x14010d190], xmm6
movups xmm0, xmmword [rbp + 0x40]
movups xmmword [0x14010d1a0], xmm0
lea rcx, [0x14010d160]
call qword [sym.imp.USER32.dll_RegisterClassExA]
call fcn.14007c320
cmp qword [rax + 0x18], r13
je 0x14007ad6f
call fcn.14007c320
lea rdx, [0x14010d5d8]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_GetClientRect]
call fcn.14007c320
lea rdx, [0x14010d628]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x14010d628]
mov dword [0x14010d5d8], eax
mov eax, dword [0x14010d62c]
mov dword [0x14010d5dc], eax
mov ebx, dword [0x14010d5e0]
call fcn.14007c320
mov dword [rax + 0x2c], ebx
mov ebx, dword [0x14010d5e4]
call fcn.14007c320
mov dword [rax + 0x28], ebx
call fcn.14007c320
mov esi, dword [rax + 0x28]
call fcn.14007c320
mov edi, dword [rax + 0x2c]
call fcn.14007c320
mov ebx, dword [rax + 0x38]
call fcn.14007c320
mov ecx, dword [rax + 0x30]
mov rdx, qword [0x14010d150]
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ecx
mov r9d, 0x90000000
mov r8, rdx
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x14010d158], rax
lea rdx, [0x14010c0c0]
mov rcx, rax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, qword [0x14010d158]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov edx, 5
mov rcx, qword [0x14010d158]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14010d158]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.140078710
mov r15, qword [0x14010d0b8]
mov rcx, qword [r15 + 0xa8]
call fcn.140023c50
mov r12, qword [r15 + 0xa8]
lea rdx, [0x1400f55dc]
lea rcx, str.C:WindowsFonts_tahomabd.ttf
call fcn.140003310
mov rbx, rax
test rax, rax
je 0x14007b0eb
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov edi, eax
cmp eax, 0xffffffff
je 0x14007b0e2
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rbx
call qword [0x1400e6c20]
test eax, eax
jne 0x14007b0e2
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
movsxd r14, eax
cmp r14d, 0xffffffff
je 0x14007b0e2
xor r8d, r8d
mov edx, edi
mov rcx, rbx
call qword [0x1400e6c20]
test eax, eax
jne 0x14007b0e2
cmp r14, 0xffffffffffffffff
je 0x14007b0e2
mov rax, qword [0x14010d0b8]
test rax, rax
je 0x14007aeca
inc dword [rax + 0x3b4]
mov rcx, r14
call qword [0x1400e69f0]
mov rsi, rax
test rax, rax
je 0x14007b0e2
mov r9, rbx
mov r8, r14
mov edx, 1
mov rcx, rax
call qword [0x1400e6c18]
mov rcx, rbx
cmp rax, r14
je 0x14007af21
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rax, qword [0x14010d0b8]
test rax, rax
je 0x14007af13
dec dword [rax + 0x3b4]
mov rcx, rsi
call qword [0x1400e69e8]
jmp 0x14007b0eb
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rbp + 0x150], xmm2
movups xmmword [rbp + 0x160], xmm2
movups xmmword [rbp + 0x190], xmm2
movups xmmword [rbp + 0x1a0], xmm2
mov qword [rbp + 0x1d0], rax
mov byte [rbp + 0x15c], 1
mov dword [rbp + 0x168], 3
mov dword [rbp + 0x16c], 1
mov dword [rbp + 0x194], 0x7f7fffff
mov dword [rbp + 0x1a0], 0x3f800000
mov eax, 0xffff
mov word [rbp + 0x1a4], ax
movups xmm3, xmmword [rbp + 0x150]
movups xmmword [rbp], xmm3
movups xmm4, xmmword [rbp + 0x160]
movups xmmword [rbp + 0x10], xmm4
movups xmmword [rbp + 0x20], xmm2
xorps xmm5, xmm5
movups xmmword [rbp + 0x30], xmm5
movups xmm6, xmmword [rbp + 0x190]
movups xmmword [rbp + 0x40], xmm6
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rbp + 0x50], xmm1
xorps xmm7, xmm7
movups xmmword [rbp + 0x60], xmm7
xorps xmm8, xmm8
movups xmmword [rbp + 0x70], xmm8
movsd xmm9, qword [rbp + 0x1d0]
movsd qword [rbp + 0x80], xmm9
movdqa xmm0, xmm1
psrldq xmm0, 6
movd eax, xmm0
test al, al
jne 0x14007b066
lea r9, [0x1400fa29d]
lea rdx, str.C:WindowsFonts_tahomabd.ttf
lea rcx, [r9 - 1]
movzx eax, byte [rcx]
cmp al, 0x2f
je 0x14007b019
cmp al, 0x5c
je 0x14007b019
mov r9, rcx
cmp rcx, rdx
ja 0x14007b002
movsd xmm0, qword [0x1400fb3b0]
movsd qword [rsp + 0x20], xmm0
lea r8, str._s___.0fpx
mov edx, Ordinal_41
lea rcx, [rbp + 0x56]
call fcn.1400031e0
movsd xmm9, qword [rbp + 0x80]
movups xmm8, xmmword [rbp + 0x70]
movups xmm7, xmmword [rbp + 0x60]
movups xmm1, xmmword [rbp + 0x50]
movups xmm6, xmmword [rbp + 0x40]
movups xmm5, xmmword [rbp + 0x30]
movups xmm2, xmmword [rbp + 0x20]
movups xmm4, xmmword [rbp + 0x10]
movups xmm3, xmmword [rbp]
movups xmmword [rbp + 0x150], xmm3
movups xmmword [rbp + 0x160], xmm4
movups xmmword [rbp + 0x170], xmm2
movups xmmword [rbp + 0x180], xmm5
movups xmmword [rbp + 0x190], xmm6
movups xmmword [rbp + 0x1a0], xmm1
movups xmmword [rbp + 0x1b0], xmm7
movups xmmword [rbp + 0x1c0], xmm8
movsd qword [rbp + 0x1d0], xmm9
mov qword [rbp + 0x150], rsi
mov dword [rbp + 0x158], r14d
mov dword [rbp + 0x164], 0x41800000
lea rax, [0x1400f98b0]
mov qword [rbp + 0x188], rax
lea rdx, [rbp + 0x150]
mov rcx, r12
call fcn.1400239a0
mov r13, rax
jmp 0x14007b0eb
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov qword [0x14010d148], r13
mov rcx, qword [r15 + 0xa8]
mov rax, qword [rcx + 0x478]
test rax, rax
jne 0x14007b11a
lea rax, [0x140024220]
mov qword [0x14010d618], rax
lea rax, [0x14010d618]
call qword [rax]
nop dword [rax]
call fcn.140078350
jmp 0x14007b120
movdqa xmm1, xmmword [0x1400fb910]
movdqu xmmword [rbp + 0x90], xmm1
mov cl, 0x43
mov dl, 0x58
mov r8b, ntohl
mov r9b, 0x4a
movzx r11d, cl
mov bl, 0x59
mov dil, 0x42
mov sil, 0x48
mov r14b, 2
movzx r15d, r14b
movzx r12d, r14b
mov r13b, 0x26
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r10d, xmm1
xor al, r10b
mov byte [rbp + 0x91], al
xor byte [rbp + 0x92], r10b
xor byte [rbp + 0x93], r10b
xor byte [rbp + 0x94], r10b
xor byte [rbp + 0x95], r10b
xor byte [rbp + 0x96], r10b
xor byte [rbp + 0x97], r10b
xor byte [rbp + 0x98], r10b
xor byte [rbp + 0x99], r10b
xor byte [rbp + 0x9a], r10b
xor byte [rbp + 0x9b], r10b
xor byte [rbp + 0x9c], r10b
xor byte [rbp + 0x9d], r10b
xor byte [rbp + 0x9e], r10b
xor byte [rbp + 0x9f], r10b
xor cl, r10b
mov byte [rbp + 0xa0], cl
xor dl, r10b
mov byte [rbp + 0xa1], dl
xor r8b, r10b
mov byte [rbp + 0xa2], r8b
xor r9b, r10b
mov byte [rbp + 0xa3], r9b
xor r11b, r10b
mov byte [rbp + 0xa4], r11b
xor bl, r10b
mov byte [rbp + 0xa5], bl
xor dil, r10b
mov byte [rbp + 0xa6], dil
xor sil, r10b
mov byte [rbp + 0xa7], sil
xor r14b, r10b
mov byte [rbp + 0xa8], r14b
xor r15b, r10b
mov byte [rbp + 0xa9], r15b
xor r12b, r10b
mov byte [rbp + 0xaa], r12b
xor r13b, r10b
mov byte [rbp + 0xab], r13b
mov al, 0x26
xor al, r10b
mov byte [rbp + 0xac], al
mov byte [rbp + 0xad], 0
lea rdx, [rbp + 0x91]
mov rcx, qword [0x1400e6470]
call fcn.14007d7b0
movdqa xmm1, xmmword [0x1400fb970]
movdqu xmmword [rbp + 0x90], xmm1
mov r8b, 0x4b
mov r9b, reloc.WS2_32.dll_WSAGetLastError
movzx r10d, r9b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp + 0x91], al
xor byte [rbp + 0x92], dl
xor byte [rbp + 0x93], dl
xor byte [rbp + 0x94], dl
xor byte [rbp + 0x95], dl
xor byte [rbp + 0x96], dl
xor byte [rbp + 0x97], dl
xor byte [rbp + 0x98], dl
xor byte [rbp + 0x99], dl
xor byte [rbp + 0x9a], dl
xor byte [rbp + 0x9b], dl
xor byte [rbp + 0x9c], dl
xor byte [rbp + 0x9d], dl
xor byte [rbp + 0x9e], dl
xor byte [rbp + 0x9f], dl
xor r8b, dl
mov byte [rbp + 0xa0], r8b
xor r9b, dl
mov byte [rbp + 0xa1], r9b
xor r10b, dl
mov byte [rbp + 0xa2], r10b
mov byte [rbp + 0xa3], 0
lea rdx, [rbp + 0x91]
mov rcx, qword [0x1400e6470]
call fcn.14007d7b0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140078bc0
mov byte [rbp + 0xb0], Ordinal_45
mov al, 0x44
mov cl, 0x4b
mov dl, 0x54
xor r8d, r8d
xor al, 0x27
mov byte [rbp + 0xb1], al
xor cl, 0x27
mov byte [rbp + 0xb2], cl
xor dl, 0x27
mov byte [rbp + 0xb3], dl
mov byte [rbp + 0xb4], r8b
lea rcx, [rbp + 0xb1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [rbp + 0xb0], WSAGetLastError
mov al, 0xa
mov cl, 5
mov dl, reloc.WLDAP32.dll_Ordinal_26
xor r8d, r8d
xor al, 0x69
mov byte [rbp + 0xb1], al
xor cl, 0x69
mov byte [rbp + 0xb2], cl
xor dl, 0x69
mov byte [rbp + 0xb3], dl
mov byte [rbp + 0xb4], r8b
lea rcx, [rbp + 0xb1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm1, xmmword [str.i2D4I__b]
movdqu xmmword [rbp], xmm1
movdqa xmm2, xmmword [0x1400fb7a0]
movdqu xmmword [rbp + 0x10], xmm2
movdqa xmm3, xmmword [0x1400fb710]
movdqu xmmword [rbp + 0x20], xmm3
movdqa xmm4, xmmword [0x1400fb700]
movdqu xmmword [rbp + 0x30], xmm4
mov r8b, reloc.WS2_32.dll_ntohl
mov r9b, reloc.WLDAP32.dll_Ordinal_27
mov r10b, 8
mov r11b, 4
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp + 1], al
xor byte [rbp + 2], dl
xor byte [rbp + 3], dl
xor byte [rbp + 4], dl
xor byte [rbp + 5], dl
xor byte [rbp + 6], dl
xor byte [rbp + 7], dl
xor byte [rbp + 8], dl
xor byte [rbp + 9], dl
xor byte [rbp + 0xa], dl
xor byte [rbp + 0xb], dl
xor byte [rbp + 0xc], dl
xor byte [rbp + 0xd], dl
xor byte [rbp + 0xe], dl
xor byte [rbp + 0xf], dl
movd eax, xmm2
xor al, dl
mov byte [rbp + 0x10], al
xor byte [rbp + 0x11], dl
xor byte [rbp + 0x12], dl
xor byte [rbp + 0x13], dl
xor byte [rbp + 0x14], dl
xor byte [rbp + 0x15], dl
xor byte [rbp + 0x16], dl
xor byte [rbp + 0x17], dl
xor byte [rbp + 0x18], dl
xor byte [rbp + 0x19], dl
xor byte [rbp + 0x1a], dl
xor byte [rbp + 0x1b], dl
xor byte [rbp + 0x1c], dl
xor byte [rbp + 0x1d], dl
xor byte [rbp + 0x1e], dl
xor byte [rbp + 0x1f], dl
movd eax, xmm3
xor al, dl
mov byte [rbp + 0x20], al
xor byte [rbp + 0x21], dl
xor byte [rbp + 0x22], dl
xor byte [rbp + 0x23], dl
xor byte [rbp + 0x24], dl
xor byte [rbp + 0x25], dl
xor byte [rbp + 0x26], dl
xor byte [rbp + 0x27], dl
xor byte [rbp + 0x28], dl
xor byte [rbp + 0x29], dl
xor byte [rbp + 0x2a], dl
xor byte [rbp + 0x2b], dl
xor byte [rbp + 0x2c], dl
xor byte [rbp + 0x2d], dl
xor byte [rbp + 0x2e], dl
xor byte [rbp + 0x2f], dl
movd eax, xmm4
xor al, dl
mov byte [rbp + 0x30], al
xor byte [rbp + 0x31], dl
xor byte [rbp + 0x32], dl
xor byte [rbp + 0x33], dl
xor byte [rbp + 0x34], dl
xor byte [rbp + 0x35], dl
xor byte [rbp + 0x36], dl
xor byte [rbp + 0x37], dl
xor byte [rbp + 0x38], dl
xor byte [rbp + 0x39], dl
xor byte [rbp + 0x3a], dl
xor byte [rbp + 0x3b], dl
xor byte [rbp + 0x3c], dl
xor byte [rbp + 0x3d], dl
xor byte [rbp + 0x3e], dl
xor byte [rbp + 0x3f], dl
xor r8b, dl
mov byte [rbp + 0x40], r8b
xor r9b, dl
mov byte [rbp + 0x41], r9b
xor r10b, dl
mov byte [rbp + 0x42], r10b
xor r11b, dl
mov byte [rbp + 0x43], r11b
mov byte [rbp + 0x44], 0
lea rdx, [rbp + 1]
mov rcx, qword [0x1400e6470]
call fcn.14007d7b0
lea rdx, [0x14007d4a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140078bc0
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xc8], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xc8], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.14007c910
int3