Function at 0x180060e00
Capabilities:
Allocate or change rwx memory
Create thread
Encode data using xor
Enumerate threads
Execute shellcode via indirect call
Spawn thread to rwx shellcode
Terminate process
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rax, qword [0x180107070]
xor rax, rsp
mov qword [rbp + 0x60], rax
cmp edx, 1
jne 0x180062054
lea rcx, [rbp - 8]
call fcn.180045bb0
mov rbx, rax
lea r12, [0x18014e990]
xor r14d, r14d
cmp r12, rax
je 0x180060ed0
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0x10
jb 0x180060e94
mov rcx, qword [0x18014e990]
inc rdx
cmp rdx, 0x1000
jb 0x180060e8f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180060f02
mov rcx, r8
call fcn.1800cf59c
movdqa xmm0, xmmword [0x1800f3160]
movdqu xmmword [0x18014e9a0], xmm0
mov byte [0x18014e990], r14b
movups xmm0, xmmword [rbx]
movups xmmword [0x18014e990], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x18014e9a0], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x180060f0e
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180060f09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180060f09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cf59c
lea rcx, [rbp - 8]
call fcn.180045e70
mov rbx, rax
lea r15, [0x18014e9d0]
cmp r15, rax
je 0x180060fa0
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0x10
jb 0x180060f63
mov rcx, qword [0x18014e9d0]
inc rdx
cmp rdx, 0x1000
jb 0x180060f5e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180060fd2
mov rcx, r8
call fcn.1800cf59c
movdqa xmm0, xmmword [0x1800f3160]
movdqu xmmword [0x18014e9e0], xmm0
mov byte [0x18014e9d0], 0
movups xmm0, xmmword [rbx]
movups xmmword [0x18014e9d0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x18014e9e0], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x180060fde
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180060fd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180060fd9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cf59c
lea rcx, [rbp - 8]
call fcn.180046940
mov rbx, rax
lea rsi, [0x18014e9b0]
cmp rsi, rax
je 0x180061070
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0x10
jb 0x180061033
mov rcx, qword [0x18014e9b0]
inc rdx
cmp rdx, 0x1000
jb 0x18006102e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800610a2
mov rcx, r8
call fcn.1800cf59c
movdqa xmm0, xmmword [0x1800f3160]
movdqu xmmword [0x18014e9c0], xmm0
mov byte [0x18014e9b0], 0
movups xmm0, xmmword [rbx]
movups xmmword [0x18014e9b0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x18014e9c0], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0x10
jb 0x1800610ae
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800610a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800610a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800cf59c
movdqa xmm0, xmmword [0x1800f3410]
movdqu xmmword [rbp - 8], xmm0
mov byte [rbp + 8], 1
mov rcx, r14
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x19]
xor byte [rbp + rcx - 8], al
inc rcx
cmp rcx, 0xf
jb 0x1800610d0
mov byte [rbp + 8], 0
lea rax, [rbp - 8]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1800610f2
lea rdx, [rbp - 8]
lea rcx, [0x18014ea10]
call fcn.180046fa0
nop
mov byte [rbp + 0x20], 0
xor edx, edx
lea rcx, [rbp + 0x28]
call fcn.180067040
lea rcx, [rbp + 0x20]
call fcn.1800662f0
lea rcx, [rbp + 0x20]
call fcn.1800662f0
nop
lea rax, [rbp - 0x30]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x40], 0x8d878194
mov dword [rsp + 0x44], 0x1008282
mov rcx, r14
nop dword [rax + rax]
lea eax, [rcx - 0x19]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 6
jb 0x180061150
mov byte [rsp + 0x47], 0
mov byte [rbp - 0x30], 0
xor eax, eax
mov qword [rbp - 0x28], rax
xor edx, edx
lea rcx, [rbp - 0x28]
call fcn.180065db0
mov byte [rbp - 0x30], 3
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1800cfa1c
mov rdi, rax
lea rax, [rbp - 0x10]
mov qword [rbp - 8], rax
mov qword [rbp], rdi
mov qword [rdi], r14
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1800611b2
mov r8, rbx
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.180046fa0
nop
mov qword [rbp - 0x28], rdi
lea rcx, [rbp - 0x30]
call fcn.1800662f0
lea rcx, [rbp - 0x30]
call fcn.1800662f0
nop
mov dword [rsp + 0x70], 0x829d8d8a
mov dword [rsp + 0x74], 0x1008884
lea rcx, [rsp + 0x70]
call fcn.18004fc70
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.180068b10
mov rcx, rax
lea rdx, [rbp - 0x30]
call fcn.180063b30
lea rax, [rbp - 8]
mov qword [rsp + 0x50], rax
lea rdx, [0x18014ea10]
lea rcx, [rbp - 8]
call fcn.180068c60
mov rbx, rax
mov dword [rbp - 0x10], 0x8f848989
mov word [rbp - 0xc], 0x100
lea rcx, [rbp - 0x10]
call fcn.180045a20
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.180068b10
mov rcx, rax
mov rdx, rbx
call fcn.180063b30
lea rax, [rbp - 8]
mov qword [rsp + 0x50], rax
mov rdx, r12
lea rcx, [rbp - 8]
call fcn.180068c60
mov rbx, rax
mov dword [rbp - 0x10], 0x858f868e
mov word [rbp - 0xc], 0x100
lea rcx, [rbp - 0x10]
call fcn.180045a20
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.180068b10
mov r8, rax
mov dword [rsp + 0x40], 0x8e809d92
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.180045a20
mov rdx, rax
mov rcx, r8
call fcn.180068b10
mov rcx, rax
mov rdx, rbx
call fcn.180063b30
lea rax, [rbp - 8]
mov qword [rsp + 0x50], rax
mov rdx, r15
lea rcx, [rbp - 8]
call fcn.180068c60
mov rbx, rax
mov dword [rsp + 0x40], 0x858f868e
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.180045a20
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.180068b10
mov r8, rax
mov dword [rbp - 0x10], 0xdc8c8a
mov byte [rbp - 0xc], 1
lea rcx, [rbp - 0x10]
call fcn.1800478e0
mov rdx, rax
mov rcx, r8
call fcn.180068b10
mov rcx, rax
mov rdx, rbx
call fcn.180063b30
lea rax, [rbp - 8]
mov qword [rsp + 0x50], rax
mov rdx, rsi
lea rcx, [rbp - 8]
call fcn.180068c60
mov rbx, rax
mov dword [rsp + 0x40], 0x858f868e
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.180045a20
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.180068b10
mov r8, rax
mov dword [rbp - 0x10], 0x8f8d8991
mov word [rbp - 0xc], 0x100
lea rcx, [rbp - 0x10]
call fcn.180045a20
mov rdx, rax
mov rcx, r8
call fcn.180068b10
mov rcx, rax
mov rdx, rbx
call fcn.180063b30
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 8]
call fcn.180063ba0
mov r8, rax
movdqa xmm0, xmmword [0x1800f3910]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0xd49c9c96
mov dword [rbp - 0x1c], 0xd1909398
mov word [rbp - 0x18], 0x100
lea rcx, [rbp - 0x30]
call fcn.18004fd90
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.180045820
nop
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.180064700
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1800454e0
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.180064630
lea rcx, [rsp + 0x70]
call fcn.180044b00
mov qword [rbp - 0x38], r14
lea rcx, [rbp + 0x40]
call fcn.180064570
mov qword [rsp + 0x70], rax
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x30]
call fcn.180068d20
nop
mov dword [rsp + 0x50], 0xbea8bcb4
mov dword [rsp + 0x54], 0xbdb2bfbe
mov dword [rsp + 0x58], 0xb7b2b3ba
mov dword [rsp + 0x5c], 0x100a7a0
lea rcx, [rsp + 0x50]
call fcn.180046f10
mov rbx, rax
mov dword [rsp + 0x40], 0x8f8d8784
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.180045a20
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.180068b10
mov rdx, rbx
mov rcx, rax
call fcn.180068e50
test al, al
je 0x180062037
mov dword [rsp + 0x40], 0x858f868e
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.180045a20
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.180068b10
mov r8, rax
movdqa xmm0, xmmword [0x1800f3ce0]
movdqu xmmword [rbp - 8], xmm0
mov dword [rbp + 8], 0x1008a92
lea rcx, [rbp - 8]
call fcn.180046e50
mov rdx, rax
mov rcx, r8
call fcn.180068b10
mov rdx, rax
lea rcx, [0x18014e930]
call fcn.180068f20
mov dword [rsp + 0x40], 0x858f868e
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.180045a20
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.180068b10
mov r8, rax
movdqa xmm0, xmmword [0x1800f3ce0]
movdqu xmmword [rbp - 8], xmm0
mov dword [rbp + 8], 0x8ea68a92
mov dword [rbp + 0xc], 0x989192
mov byte [rbp + 0x10], 1
lea rcx, [rbp - 8]
call fcn.18004fe80
mov rdx, rax
mov rcx, r8
call fcn.180068b10
mov rdx, rax
lea rcx, [0x18014e950]
call fcn.180068f20
mov dword [rsp + 0x40], 0x858f868e
mov word [rsp + 0x44], 0x100
lea rcx, [rsp + 0x40]
call fcn.180045a20
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.180068b10
mov r8, rax
movdqa xmm0, xmmword [0x1800f3ce0]
movdqu xmmword [rbp - 8], xmm0
mov dword [rbp + 8], 0x89a68a92
mov dword [rbp + 0xc], 0x8b899d8f
mov word [rbp + 0x10], Ordinal_143
mov byte [rbp + 0x12], 1
lea rcx, [rbp - 8]
call fcn.18004fdc0
mov rdx, rax
mov rcx, r8
call fcn.180068b10
mov rdx, rax
lea rcx, [0x18014ea30]
call fcn.180068f20
mov dword [rbp - 0x10], 0x100959c
lea rcx, [rbp - 0x10]
call fcn.180046e80
mov rdx, rax
lea rcx, [0x18014e930]
call fcn.180068050
test al, al
jne 0x180062037
movzx eax, byte [0x1800e4a40]
xor al, 0xe7
mov byte [rbp - 0x10], al
mov word [rbp - 0xf], 0x100
lea rcx, [rbp - 0x10]
call fcn.180047210
mov rdx, rax
lea rcx, [0x18014ea30]
call fcn.180068050
test al, al
jne 0x180061662
movzx eax, byte [0x1800e4a48]
xor al, 0xe7
mov byte [rbp - 0x10], al
mov word [rbp - 0xf], 0x100
lea rcx, [rbp - 0x10]
call fcn.180047210
mov rdx, rax
lea rcx, [0x18014ea30]
call fcn.180068050
test al, al
je 0x180062037
xor edx, edx
lea ecx, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x18006169a
lea rcx, [rbp + 0x30]
call fcn.180063b00
nop
lea rcx, [rbp + 0x40]
call fcn.180044b00
nop
lea rcx, [rbp + 0x20]
call fcn.180063b00
xor eax, eax
jmp 0x180062059
mov dword [rbp - 0x30], Ordinal_30
lea rdx, [rbp - 0x30]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Thread32First]
test eax, eax
je 0x180061778
mov dword [rsp + 0x50], 0xc4829b88
mov dword [rsp + 0x54], 0x88948e
mov byte [rsp + 0x58], 1
lea rcx, [rsp + 0x50]
call fcn.18004feb0
mov rcx, rax
call fcn.1800450f0
mov rdi, rax
mov eax, dword [rbp - 0x24]
cmp rax, rdi
jne 0x180061763
mov r8d, dword [rbp - 0x28]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rbx, rax
mov rcx, rax
call fcn.180060cf0
mov r8d, eax
mov edx, edi
lea rcx, [rbp - 8]
call fcn.180060c00
mov dword [rsp + 0x50], 0x998b8993
mov dword [rsp + 0x54], 0x8ac38e80
mov dword [rsp + 0x58], 0x1009c83
lea rcx, [rsp + 0x50]
call fcn.18004ff10
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.180064490
cmp rax, 0xffffffffffffffff
je 0x180061751
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp - 8]
call fcn.180044b00
lea rdx, [rbp - 0x30]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Thread32Next]
test eax, eax
jne 0x1800616e0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..METABL
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x18014fc70], rax
call fcn.180051ac0
test al, al
jne 0x18006180b
mov word [rbp - 0x10], 0x100
lea rcx, [rbp - 0x10]
call fcn.180055980
mov r8, rax
movdqa xmm0, xmmword [0x1800f3e90]
movdqu xmmword [rbp - 8], xmm0
mov dword [rbp + 8], 0x9e9897bb
mov dword [rbp + 0xc], 0x1008e9e
lea rcx, [rbp - 8]
call fcn.18004fd30
xor r9d, r9d
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x18014ffd8], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x18014ff18], eax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x1800609f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movdqa xmm0, xmmword [0x1800f3b30]
movdqu xmmword [rbp - 8], xmm0
mov dword [rbp + 8], 0xd7d6d9
mov byte [rbp + 0xc], 1
lea rcx, [rbp - 8]
call fcn.180046ee0
mov rdx, rax
lea rcx, [0x18014e970]
call fcn.180046f80
xor bl, bl
nop word [rax + rax]
mov dword [rsp + 0x70], 0x9e9d89a5
mov dword [rsp + 0x74], 0x80c38987
mov dword [rsp + 0x78], 0x97df848a
mov dword [rsp + 0x7c], 0x100918b
lea rcx, [rsp + 0x70]
call fcn.180046f10
mov rcx, rax
call fcn.1800450f0
test rax, rax
je 0x1800618e8
movdqa xmm0, xmmword [0x1800f3be0]
movdqu xmmword [rbp - 8], xmm0
mov dword [rbp + 8], 0x1009d8f
lea rcx, [rbp - 8]
call fcn.180046e50
mov rcx, rax
call fcn.1800450f0
test rax, rax
je 0x1800618e8
mov bl, 1
jmp 0x1800619f6
mov dword [rsp + 0x40], 0x9e9d89a5
mov dword [rsp + 0x44], 0x80c38987
mov dword [rsp + 0x48], 0x97df848a
mov dword [rsp + 0x4c], 0x100918b
lea rcx, [rsp + 0x40]
call fcn.180046f10
mov rcx, rax
call fcn.1800450f0
test rax, rax
je 0x18006192b
mov byte [reloc.WS2_32.dll_accept], 1
jmp 0x1800619f6
movdqa xmm0, xmmword [0x1800f3be0]
movdqu xmmword [rbp - 8], xmm0
mov dword [rbp + 8], 0x1009d8f
lea rcx, [rbp - 8]
call fcn.180046e50
mov rcx, rax
call fcn.1800450f0
test rax, rax
je 0x1800619f6
mov byte [reloc.WS2_32.dll_accept], 0
mov dword [0x1801070b8], 0x147d3b70
mov dword [0x18013b368], 0x147d32c8
mov dword [0x180119244], 0xdb978b0
mov dword [0x18010c924], 0x150567b0
mov dword [0x1801070b4], 0x10f80
mov dword [0x1801414e0], 0x1138f8c0
mov dword [0x1801262e8], 0x146bd1c0
mov dword [0x18012fc18], 0xcad8a58
mov dword [0x18011b764], 0x13dc0
mov dword [0x18013b364], 0x131ed
mov dword [0x1801070b0], 0x13310
mov dword [0x18011b768], 0x1260e
mov dword [0x180132528], 0x12ac1
mov dword [0x180119248], 0x3fe
mov dword [0x18010c928], 0x4e4b8
mov dword [rsp + 0x50], 0xc48d8784
mov dword [rsp + 0x54], 0x88948e
mov byte [rsp + 0x58], 1
lea rcx, [rsp + 0x50]
call fcn.18004feb0
mov rcx, rax
call fcn.1800450f0
test rax, rax
jne 0x180061a32
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180061880
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
test bl, bl
je 0x180061a6d
movdqa xmm0, xmmword [0x1800f3b50]
movdqu xmmword [rbp - 8], xmm0
movdqa xmm1, xmmword [0x1800f38a0]
movdqu xmmword [rbp + 8], xmm1
mov dword [rbp + 0x18], 0x100216a
lea rcx, [rbp - 8]
call fcn.180062090
jmp 0x180061a89
movdqa xmm0, xmmword [0x1800f3ac0]
movdqu xmmword [rbp - 8], xmm0
mov word [rbp + 8], 0x100
lea rcx, [rbp - 8]
call fcn.18004fcd0
mov rdx, rax
lea rcx, [0x18014e970]
call fcn.180046f80
lea rsi, [0x180068ae0]
lea rdi, [0x180000000]
nop word [rax + rax]
mov dword [rbp - 0x10], 0x77
lea rcx, [rbp - 8]
call fcn.180060970
lea rcx, [rbp - 8]
test bl, bl
je 0x180061e3a
lea r15, [rbp + 0x88]
mov rdx, r15
call fcn.180041980
nop
mov ecx, r14d
mov rax, qword [0x18016e6d0]
test rax, rax
je 0x180061b19
mov rdx, r14
nop
cmp rax, rsi
je 0x180061b08
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0x16e6d0]
test rax, rax
jne 0x180061af0
jmp 0x180061b19
mov r8, qword [rdi + rdx*8 + 0x16dd60]
test r8, r8
jne 0x180061bff
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x180061b40
mov r8, r14
jmp 0x180061bde
mov rax, rsi
mov rcx, r8
mov edx, 3
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x180061b50
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x18016e9f0]
mov qword [rdi + rax*8 + 0x16e6d0], rsi
mov qword [rdi + rax*8 + 0x16dd60], r8
inc rax
mov qword [0x18016e9f0], rax
lea rdx, [rbp - 0x10]
mov rcx, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call r8
movzx r8d, ax
mov rcx, qword [rbp]
xor rcx, qword [rbp - 8]
mov rax, qword [rbp + 8]
mov qword [rax], rcx
test r8w, r8w
jne 0x180061fa4
mov dword [rbp - 0x10], 0x78
lea rcx, [rbp - 8]
call fcn.180060970
mov rdx, r15
lea rcx, [rbp - 8]
call fcn.180041980
nop
mov ecx, r14d
mov rax, qword [0x18016e6d0]
test rax, rax
je 0x180061c89
mov rdx, r14
nop dword [rax]
cmp rax, rsi
je 0x180061c78
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0x16e6d0]
test rax, rax
jne 0x180061c60
jmp 0x180061c89
mov r8, qword [rdi + rdx*8 + 0x16dd60]
test r8, r8
jne 0x180061d6f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x180061cb0
mov r8, r14
jmp 0x180061d4e
mov rax, rsi
mov rcx, r8
mov edx, 3
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x180061cc0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x18016e9f0]
mov qword [rdi + rax*8 + 0x16e6d0], rsi
mov qword [rdi + rax*8 + 0x16dd60], r8
inc rax
mov qword [0x18016e9f0], rax
lea rdx, [rbp - 0x10]
mov rcx, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call r8
movzx edx, ax
mov rcx, qword [rbp - 8]
xor rcx, qword [rbp]
mov rax, qword [rbp + 8]
mov qword [rax], rcx
test dx, dx
je 0x180061f94
mov byte [reloc.WS2_32.dll_accept], 0
mov dword [0x1801070b8], 0x147d3b70
mov dword [0x18013b368], 0x147d32c8
mov dword [0x180119244], 0xdb978b0
mov dword [0x18010c924], 0x150567b0
mov dword [0x1801070b4], 0x10f80
mov dword [0x1801414e0], 0x1138f8c0
mov dword [0x1801262e8], 0x146bd1c0
mov dword [0x18012fc18], 0xcad8a58
mov dword [0x18011b764], 0x13dc0
mov dword [0x18013b364], 0x131ed
mov dword [0x1801070b0], 0x13310
mov dword [0x18011b768], 0x1260e
mov dword [0x180132528], 0x12ac1
mov dword [0x180119248], 0x3fe
mov dword [0x18010c928], 0x4e4b8
jmp 0x180061fab
lea rdx, [rbp + 0x88]
call fcn.180041980
nop
mov ecx, r14d
mov rax, qword [0x18016e6d0]
test rax, rax
je 0x180061e89
mov rdx, r14
nop dword [rax]
cmp rax, rsi
je 0x180061e78
inc ecx
mov edx, ecx
mov rax, qword [rdi + rcx*8 + 0x16e6d0]
test rax, rax
jne 0x180061e60
jmp 0x180061e89
mov r8, qword [rdi + rdx*8 + 0x16dd60]
test r8, r8
jne 0x180061f6f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x180061eb0
mov r8, r14
jmp 0x180061f4e
mov rcx, rsi
mov edx, 3
nop dword [rax + rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x180061ec0
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
mov ecx, dword [rcx + 0x70]
mov dword [rax + 0x70], ecx
mov rax, qword [0x18016e9f0]
mov qword [rdi + rax*8 + 0x16e6d0], rsi
mov qword [rdi + rax*8 + 0x16dd60], r8
inc rax
mov qword [0x18016e9f0], rax
lea rdx, [rbp - 0x10]
mov rcx, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call r8
movzx edx, ax
mov rcx, qword [rbp - 8]
xor rcx, qword [rbp]
mov rax, qword [rbp + 8]
mov qword [rax], rcx
test dx, dx
jne 0x180061fab
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180061ab0
mov byte [reloc.WS2_32.dll_accept], 1
lea rdx, [0x1800e2e62]
lea rcx, [0x18014e970]
call fcn.180046f80
mov dword [rsp + 0x50], 0xc48d8784
mov dword [rsp + 0x54], 0x88948e
mov byte [rsp + 0x58], 1
lea rcx, [rsp + 0x50]
call fcn.18004feb0
mov rcx, rax
call fcn.1800450f0
mov qword [0x18014fc58], rax
mov ecx, Ordinal_301
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.180051b60
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x180058180]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x18014fa6b], 1
lea rcx, [rbp + 0x30]
call fcn.180063b00
nop
lea rcx, [rbp + 0x40]
call fcn.180044b00
nop
lea rcx, [rbp + 0x20]
call fcn.180063b00
mov eax, 1
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.1800cf2e0
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret