Function at 0x140009830
Capabilities:
Enumerate processes
Execute command
Query environment variable

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x708]
sub rsp, 0x7e0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x1400f4140]
xor rax, rsp
mov qword [rbp + 0x690], rax
xor ebx, ebx
mov dword [rsp + 0x48], ebx
cmp byte [reloc.WS2_32.dll_accept], bl
je 0x14000ba84
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x14011da54], eax
jle 0x1400098ef
lea rcx, [0x14011da54]
call fcn.1400be564
cmp dword [0x14011da54], 0xffffffff
jne 0x1400098ef
xor edx, edx
lea rcx, [0x14011daa8]
call fcn.14000d6e0
lea rcx, [0x14011daa8]
call fcn.14000d880
nop
lea rcx, [0x1400c17f0]
call fcn.1400be4a4
lea rcx, [0x14011da54]
call fcn.1400be4f8
lea rcx, str.appdata
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], rbx
mov qword [rbp + 0x208], rbx
mov r14, 0xffffffffffffffff
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140009920
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.1400040d0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rbp + 0x200]
sub rax, rsi
cmp rax, 0x13
jb 0x14000bb10
lea r13, [rbp + 0x1f0]
mov r12, qword [rbp + 0x1f0]
mov rax, qword [rbp + 0x208]
mov qword [rsp + 0x68], rax
cmp rax, 0xf
cmova r13, r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x188], rbx
lea r15, [rsi + 0x13]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0x170]
movabs rax, 0x8000000000000000
lea edx, [rbx + 7]
cmp r15, rbx
jbe 0x140009a27
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400099e5
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.1400be170
test rax, rax
je 0x140009a08
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140009a20
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140009a0f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000bb04
jmp 0x1400099ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140009a1e
call fcn.1400be170
mov rdi, rax
jmp 0x140009a20
xor edi, edi
mov qword [rbp + 0x170], rdi
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], rbx
mov r8, rsi
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.OvixRDR2ovi.json]
movups xmmword [rdi + rsi], xmm0
movzx eax, word [0x1400d3238]
mov word [rdi + rsi + 0x10], ax
movzx eax, byte [0x1400d323a]
mov byte [rdi + rsi + 0x12], al
mov byte [rdi + r15], 0
lea r13, [rbp + 0x1f0]
cmp qword [rsp + 0x68], 0xf
cmova r13, r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1c0], xmm1
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0x1b0]
cmp r15, rbx
jbe 0x140009b2f
mov rbx, r15
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140009ae7
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400be170
test rax, rax
je 0x140009b10
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140009b28
cmp rbx, 0x16
mov eax, socket
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140009b17
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000bb0a
jmp 0x140009acc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140009b26
call fcn.1400be170
mov rdi, rax
jmp 0x140009b28
xor edi, edi
mov qword [rbp + 0x1b0], rdi
mov qword [rbp + 0x1c0], r15
mov qword [rbp + 0x1c8], rbx
mov r8, rsi
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.OvixRDR2Ovix.dll]
movups xmmword [rdi + rsi], xmm0
movzx eax, word [0x1400d3250]
mov word [rdi + rsi + 0x10], ax
movzx eax, byte [0x1400d3252]
mov byte [rdi + rsi + 0x12], al
mov byte [rdi + r15], 0
mov esi, 6
lea rcx, [rbp + 0x320]
call fcn.140009440
nop
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140009caa
mov rdi, qword [rbp + 0x180]
lea rbx, [rbp + 0x170]
cmp qword [rbp + 0x188], 0xf
cmova rbx, qword [rbp + 0x170]
call fcn.1400bdc28
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rdi
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.140006dd0
nop
mov esi, 0x1f
mov dword [rsp + 0x48], esi
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 7
cmova rcx, qword [rbp - 0x30]
mov r9d, 0xffffffff
lea r8d, [rsi - 0x1c]
lea rdx, [rbp + 0x190]
call fcn.1400bdd64
mov edx, eax
test eax, eax
jne 0x140009c53
mov eax, dword [rbp + 0x1a0]
test al, 1
mov ecx, 0x1ff
mov r8d, 0x16d
cmovne ecx, r8d
mov dword [rsp + 0x74], ecx
bt eax, 0xa
jae 0x140009c45
mov ecx, dword [rbp + 0x1a4]
cmp ecx, 0xa000000c
jne 0x140009c36
lea eax, [rsi - 0x1b]
jmp 0x140009c78
cmp ecx, 0xa0000003
jne 0x140009c45
mov eax, 0xa
jmp 0x140009c78
movzx eax, al
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x140009c78
mov dword [rsp + 0x74], 0xffff
sub eax, 2
je 0x140009c73
sub eax, 1
je 0x140009c73
sub eax, 0x32
je 0x140009c73
cmp eax, 0x46
je 0x140009c73
xor eax, eax
jmp 0x140009c78
mov eax, 1
mov dword [rsp + 0x50], edx
lea rcx, [0x1400f41c8]
mov qword [rsp + 0x58], rcx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp + 0x150], xmm0
test eax, eax
je 0x140009ca2
cmp eax, 1
je 0x140009caa
mov bl, 1
jmp 0x140009cac
test edx, edx
jne 0x14000bb16
xor bl, bl
test sil, 1
je 0x140009d0f
and esi, 0xfffffffe
mov rdx, qword [rbp - 0x18]
cmp rdx, 7
jbe 0x140009cf8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009cf3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009cf3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be4c4
movdqa xmm0, xmmword [0x1400e0760]
movdqu xmmword [rbp - 0x20], xmm0
xor r13d, r13d
mov word [rbp - 0x30], r13w
jmp 0x140009d12
xor r13d, r13d
lea r15, [0x140000000]
lea rdi, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
test bl, bl
je 0x14000a559
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x340]
call sub.VCRUNTIME140.dll_memset
lea rbx, [rbp + 0x170]
cmp qword [rbp + 0x188], 0xf
cmova rbx, qword [rbp + 0x170]
lea rax, [r15 + 0xd2ae0]
mov qword [rbp + 0x340], rax
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or esi, 0x20
mov dword [rsp + 0x48], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x340]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
lea r15, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x340], r15
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x33c], edx
lea rcx, [rbp + 0x350]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
mov qword [rbp + 0x350], rdi
mov byte [rbp + 0x3cc], 0
mov byte [rbp + 0x3c1], 0
lea rcx, [rbp + 0x350]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x3d0], r13
mov rax, qword [0x14011d968]
mov qword [rbp + 0x3c4], rax
mov qword [rbp + 0x3b8], r13
mov r8d, 1
mov rdx, rbx
lea rcx, [rbp + 0x350]
call fcn.14000e1c0
test rax, rax
jne 0x140009e4b
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x340]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x340], r15
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x33c], edx
mov qword [rbp + 0x100], r13
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x150]
call fcn.14000ebe0
mov rdi, rax
mov rcx, rax
call fcn.14000d880
movzx edx, byte [0x14011daa8]
movzx ecx, byte [rdi]
mov byte [0x14011daa8], cl
mov byte [rdi], dl
mov rcx, qword [0x14011dab0]
mov rdx, qword [rdi + 8]
mov qword [0x14011dab0], rdx
mov qword [rdi + 8], rcx
lea rcx, [0x14011daa8]
call fcn.14000d880
nop
mov rcx, rdi
call fcn.14000d880
movzx edx, byte [rdi]
lea rcx, [rdi + 8]
call fcn.14000d290
nop
xor edx, edx
mov r8d, 0x138
lea rcx, [rbp + 0x450]
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x128]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x88]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
mov r8d, 8
lea rdx, str.username
lea rcx, [rsp + 0x70]
call fcn.1400040d0
lea rdx, [rsp + 0x70]
call fcn.140011350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x88], 0
bts esi, 9
mov dword [rsp + 0x48], esi
cmp byte [rax], 3
jne 0x14000bb27
mov r9, qword [rax + 8]
lea rax, [rbp + 0x88]
cmp rax, r9
je 0x140009fcd
mov rbx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x140009f9c
mov r9, qword [r9]
lea rcx, [rbp + 0x88]
cmp rbx, 0xf
ja 0x140009fc5
mov qword [rbp + 0x98], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x88], 0
jmp 0x140009fcd
mov rdx, rbx
call fcn.14000f6e0
btr esi, 9
or esi, 0x180
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
mov r8d, 8
lea rdx, str.username
lea rcx, [rbp - 0x70]
call fcn.1400040d0
nop
lea r8, [rbp + 0x88]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x210]
call fcn.140007910
nop
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
mov r8d, 8
lea rdx, str.password
lea rcx, [rbp - 0x70]
call fcn.1400040d0
lea rdx, [rbp - 0x70]
call fcn.140011350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa8], 0
bts esi, 0xc
mov dword [rsp + 0x48], esi
cmp byte [rax], 3
jne 0x14000bb67
mov r9, qword [rax + 8]
lea rax, [rbp + 0xa8]
cmp rax, r9
je 0x14000a0d3
mov rbx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x14000a0a2
mov r9, qword [r9]
lea rcx, [rbp + 0xa8]
cmp rbx, 0xf
ja 0x14000a0cb
mov qword [rbp + 0xb8], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0xa8], 0
jmp 0x14000a0d3
mov rdx, rbx
call fcn.14000f6e0
btr esi, 0xc
or esi, 0xc00
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], r13
mov r8d, 8
lea rdx, str.password
lea rcx, [rbp + 0x28]
call fcn.1400040d0
nop
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x250]
call fcn.140007910
nop
lea rax, [rbp + 0x48]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], r13
mov r8d, 5
lea rdx, str.4.0.0
lea rcx, [rbp + 0x48]
call fcn.1400040d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], r13
mov r8d, 7
lea rdx, str.version
lea rcx, [rbp + 0x68]
call fcn.1400040d0
nop
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x290]
call fcn.140007910
nop
lea rax, [rbp + 0x108]
mov qword [rsp + 0x60], rax
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x108]
call fcn.140003800
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
mov r8d, 4
lea rdx, str.hwid
lea rcx, [rbp - 0x50]
call fcn.1400040d0
nop
mov r8, rbx
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x2d0]
call fcn.140007910
nop
lea rax, [rbp + 0x210]
mov qword [rbp + 0x150], rax
lea rax, [rbp + 0x310]
mov qword [rbp + 0x158], rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x128]
call fcn.14007d570
mov rbx, rax
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov ecx, 0x60
call fcn.1400be170
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x70], rax
lea rax, vtable.cpr::StringHolder_class_cpr::Url_.0
mov qword [rbp - 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
mov r8d, 0x28
lea rdx, str.https:__ovix.mindfulkratom.com_api_logon
lea rcx, [rbp - 8]
call fcn.1400040d0
lea rax, vtable.cpr::Url.0
mov qword [rbp - 0x10], rax
lea rdx, [rbp - 0x10]
lea rcx, [0x14011be28]
call fcn.14007c6a0
lea rdx, [rsp + 0x50]
lea rcx, [0x14011be28]
call fcn.14007c080
mov rdx, rbx
lea rcx, [0x14011be28]
call fcn.14007c640
lea rdx, [rbp + 0x450]
lea rcx, [0x14011be28]
call fcn.14007bfb0
bts esi, 0xd
mov r8, qword [rsp + 0x50]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400043a0
mov edx, 0x60
mov rcx, qword [rsp + 0x50]
call fcn.1400be4c4
nop
mov rcx, rbx
call fcn.140001c00
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x14000a34a
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a345
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a345
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be4c4
movdqa xmm0, xmmword [0x1400e0780]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
lea r9, [fcn.1400047f0]
mov edx, 0x40
lea r8d, [rdx - 0x3c]
lea rcx, [rbp + 0x210]
call fcn.1400be1ac
mov qword [rbp + 0x100], r13
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x468]
lea rcx, [rsp + 0x70]
call fcn.14000ed40
mov rdi, rax
mov rcx, rax
call fcn.14000d880
movzx edx, byte [0x14011daa8]
movzx ecx, byte [rdi]
mov byte [0x14011daa8], cl
mov byte [rdi], dl
mov rcx, qword [0x14011dab0]
mov rdx, qword [rdi + 8]
mov qword [0x14011dab0], rdx
mov qword [rdi + 8], rcx
lea rcx, [0x14011daa8]
call fcn.14000d880
nop
mov rcx, rdi
call fcn.14000d880
movzx edx, byte [rdi]
lea rcx, [rdi + 8]
call fcn.14000d290
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
mov r8d, 4
lea rdx, str.Auth
lea rcx, [rbp - 0x50]
call fcn.1400040d0
lea rdx, [rbp - 0x50]
call fcn.140011350
cmp byte [rax], 4
jne 0x14000bba6
cmp byte [rax + 8], 0
je 0x14000a42f
mov byte [0x14011d980], 1
lea rcx, [rbp + 0x350]
call fcn.140003bd0
test rax, rax
jne 0x14000a462
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x340]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [rsp + 0x70], 0
xor eax, eax
mov qword [rsp + 0x78], rax
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.14000d290
mov byte [rsp + 0x70], 5
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x70]
call fcn.14000d880
movzx ebx, byte [0x14011daa8]
mov byte [0x14011daa8], 5
mov byte [rsp + 0x70], bl
mov rax, qword [0x14011dab0]
mov qword [0x14011dab0], r13
mov qword [rsp + 0x78], rax
lea rcx, [0x14011daa8]
call fcn.14000d880
nop
lea rcx, [rsp + 0x70]
call fcn.14000d880
movzx edx, bl
lea rcx, [rsp + 0x78]
call fcn.14000d290
nop
lea rax, str.Welcome_
mov qword [str.Welcome_], rax
movups xmm0, xmmword [0x1400d2c18]
movups xmmword [0x1400f41f0], xmm0
lea rcx, [rbp + 0x450]
call fcn.140002550
nop
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x340], r15
mov rax, qword [rbp + 0x340]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x33c], edx
lea rcx, [rbp + 0x350]
call fcn.140003530
lea rcx, [rbp + 0x358]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [0x14011d988]
call fcn.140036850
xorps xmm8, xmm8
movss xmm1, dword [0x14011d994]
mov rbx, qword [0x14011d9b0]
movss xmm0, dword [0x14011d990]
unpcklps xmm0, xmm1
movsd qword [rbx + 0x48f4], xmm0
xorps xmm1, xmm1
unpcklps xmm1, xmm8
movsd qword [rbx + 0x48fc], xmm1
mov dword [rbx + 0x48e4], 2
mov byte [rbx + 0x491c], 1
mov dword [rbx + 0x4904], 0x442f0000
mov dword [rbx + 0x4908], 0x43c80000
mov dword [rbx + 0x48e8], 1
or dword [rbx + 0x48e0], 0x43
mov dword [rbx + 0x4940], 0x3e4ccccd
mov dword [rbp + 0x150], 7
movups xmm0, xmmword [rbx + 0x3a2c]
movups xmmword [rbp + 0x154], xmm0
lea rcx, [rbx + 0x4970]
lea rdx, [rbp + 0x150]
call fcn.140053500
mov dword [rbx + 0x3a2c], 0x3f666666
mov dword [rbx + 0x3a30], 0x3f666666
mov dword [rbx + 0x3a34], 0x3f7ae148
mov dword [rbx + 0x3a38], 0x3f333333
mov rbx, qword [0x14011d9b0]
mov dword [rbp + reloc.WS2_32.dll_setsockopt0], 0x15
movups xmm0, xmmword [rbx + 0x3b0c]
movups xmmword [rbp + 0x154], xmm0
lea rcx, [rbx + 0x4970]
lea rdx, [rbp + 0x150]
call fcn.140053500
mov dword [rbx + 0x3b0c], 0x3f666666
mov dword [rbx + 0x3b10], 0x3f666666
mov dword [rbx + 0x3b14], 0x3f666666
mov dword [rbx + 0x3b18], 0x3f333333
mov edx, 0xfae2ebeb
mov ecx, socket
call fcn.140027080
mov edx, 0xfae2ebeb
mov ecx, reloc.WS2_32.dll_socket
call fcn.140027080
mov r8d, 0x1ab
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Ovix
call fcn.140032860
test al, al
je 0x14000b932
mov rcx, qword [0x14011d9b0]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xed], 1
mov r15, qword [rcx + 0x4008]
mov byte [r15 + 0xed], 1
mov rax, qword [rcx + 0x4008]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
movss xmm9, dword [0x1400e0678]
addss xmm1, xmm9
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
addss xmm0, xmm9
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
mov byte [rax + 0x179], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
movaps xmm1, xmmword [0x1400e0880]
movups xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x48], 0x3f800000
mov dword [rsp + 0x4c], 0x3f800000
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x40], 0x442f0000
mov dword [rsp + 0x44], 0x43960000
lea rax, [rbp + 0x150]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
mov rcx, qword [0x14011d998]
call fcn.14006ee50
mov rbx, qword [0x14011d9b0]
cmp byte [0x14011d980], 0
je 0x14000a985
movss xmm0, dword [r15 + 0x64]
subss xmm0, dword [0x1400e06e0]
mov rax, qword [rbx + 0x4008]
mov byte [rax + 0xed], 1
mov rax, qword [rbx + 0x4008]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
addss xmm0, dword [0x1400e06e4]
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
mov byte [rax + 0x179], 1
mov dword [rbp + 0x150], r13d
movups xmm0, xmmword [rbx + 0x39bc]
movups xmmword [rbp + 0x154], xmm0
lea rcx, [rbx + 0x4970]
lea rdx, [rbp + 0x150]
call fcn.140053500
mov dword [rbx + 0x39bc], 0x3dcccccd
mov dword [rbx + 0x39c0], 0x3dcccccd
mov dword [rbx + 0x39c4], 0x3dcccccd
mov dword [rbx + 0x39c8], 0x3f666666
mov dword [rsp + 0x40], 0x430c0000
mov dword [rsp + 0x44], 0x41c80000
lea rdx, [rsp + 0x40]
lea rcx, str.Inject
call fcn.14006d540
test al, al
je 0x14000a932
mov dword [rbp + 0x450], 0x238
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0x450]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x14000a90d
lea rdx, [rbp + 0x450]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
jne 0x14000a90d
nop dword [rax]
nop dword [rax + rax]
lea rdx, str.RDR2.exe
lea rcx, [rbp + 0x47c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rbx
test eax, eax
je 0x14000a941
lea rdx, [rbp + 0x450]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x14000a8e0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, str.Process_Not_Found_
movups xmm0, xmmword [0x1400d2c28]
movups xmmword [0x1400f41f0], xmm0
mov qword [str.Welcome_], rax
mov ecx, 1
call fcn.140027150
jmp 0x14000b622
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp + 0x458]
test ebx, ebx
je 0x14000a916
lea rcx, [rbp + 0x1b0]
call fcn.140009740
test al, al
jne 0x14000a96a
lea rax, str.Files_Not_Found_
jmp 0x14000a91d
lea rdx, [rbp + 0x1b0]
mov ecx, ebx
call fcn.1400091f0
test eax, eax
jne 0x14000a932
lea rax, str.Failed_To_Inject_
jmp 0x14000a92b
lea rcx, [rbx + 0x4980]
movss xmm0, dword [rbx + 0x3924]
mov dword [rsp + 0x70], select
movss dword [rsp + 0x74], xmm0
lea rdx, [rsp + 0x70]
call fcn.140053410
mov dword [rbx + 0x3924], 0x40000000
mov rdi, qword [0x14011d9b0]
mov rax, qword [rdi + 0x4008]
mov byte [rax + 0xed], 1
mov rax, qword [rdi + 0x4008]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
addss xmm1, dword [0x1400e06b0]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
movss xmm7, dword [0x1400e06cc]
addss xmm0, xmm7
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
mov byte [rax + 0x179], 1
mov rax, qword [rdi + 0x4008]
lea rcx, [rax + 0x200]
lea rbx, [rax + 0x1f4]
mov rdx, rbx
call fcn.140053a80
mov dword [rbx], 0x437a0000
and dword [rdi + 0x4890], 0xfffffffe
lea rcx, str.Username:
call fcn.14006cb70
mov rbx, qword [0x14011d9b0]
mov rax, qword [rbx + 0x4008]
mov byte [rax + 0xed], 1
mov rax, qword [rbx + 0x4008]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
addss xmm1, dword [0x1400e06ac]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
movss xmm6, dword [0x1400e06d8]
addss xmm0, xmm6
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
mov byte [rax + 0x179], 1
mov dword [rbp + 0x150], r13d
movups xmm0, xmmword [rbx + 0x39bc]
movups xmmword [rbp + 0x154], xmm0
lea rcx, [rbx + 0x4970]
lea rdx, [rbp + 0x150]
call fcn.140053500
mov dword [rbx + 0x39bc], 0x3dcccccd
mov dword [rbx + 0x39c0], 0x3dcccccd
mov dword [rbx + 0x39c4], 0x3dcccccd
mov dword [rbx + 0x39c8], 0x3f666666
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x14011c111]
xor edx, edx
lea rcx, str.Username
call fcn.1400729e0
mov ecx, 1
call fcn.140027150
mov rdi, qword [0x14011d9b0]
mov rax, qword [rdi + 0x4008]
mov byte [rax + 0xed], 1
mov rax, qword [rdi + 0x4008]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
addss xmm1, xmm7
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
addss xmm0, xmm7
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
mov byte [rax + 0x179], 1
mov rax, qword [rdi + 0x4008]
lea rcx, [rax + 0x200]
lea rbx, [rax + 0x1f4]
mov rdx, rbx
call fcn.140053a80
mov dword [rbx], 0x437a0000
and dword [rdi + 0x4890], 0xfffffffe
lea rcx, str.Password:
call fcn.14006cb70
mov rbx, qword [0x14011d9b0]
mov rax, qword [rbx + 0x4008]
mov byte [rax + 0xed], 1
mov rax, qword [rbx + 0x4008]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
addss xmm1, dword [0x1400e06c8]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
addss xmm0, xmm6
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
mov byte [rax + 0x179], 1
mov dword [rbp + 0x150], r13d
movups xmm0, xmmword [rbx + 0x39bc]
movups xmmword [rbp + 0x154], xmm0
lea rcx, [rbx + 0x4970]
lea rdx, [rbp + 0x150]
call fcn.140053500
mov dword [rbx + 0x39bc], 0x3dcccccd
mov dword [rbx + 0x39c0], 0x3dcccccd
mov dword [rbx + 0x39c4], 0x3dcccccd
mov dword [rbx + 0x39c8], 0x3f666666
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea rdi, [0x14011c210]
mov r8, rdi
xor edx, edx
lea rcx, str.Password
call fcn.1400729e0
mov ecx, 1
call fcn.140027150
mov ecx, 1
call fcn.140027300
mov rbx, qword [0x14011d9b0]
lea rcx, [rbx + 0x4980]
movss xmm0, dword [rbx + 0x3924]
mov dword [rsp + 0x70], select
movss dword [rsp + 0x74], xmm0
lea rdx, [rsp + 0x70]
call fcn.140053410
mov dword [rbx + 0x3924], 0x41000000
mov rbx, qword [0x14011d9b0]
mov rax, qword [rbx + 0x4008]
mov byte [rax + 0xed], 1
mov rax, qword [rbx + 0x4008]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
addss xmm1, dword [0x1400e06d0]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
addss xmm0, dword [0x1400e06e8]
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
mov byte [rax + 0x179], 1
mov dword [rbp + 0x150], r13d
movups xmm0, xmmword [rbx + 0x39bc]
movups xmmword [rbp + 0x154], xmm0
lea rcx, [rbx + 0x4970]
lea rdx, [rbp + 0x150]
call fcn.140053500
mov dword [rbx + 0x39bc], 0x3dcccccd
mov dword [rbx + 0x39c0], 0x3dcccccd
mov dword [rbx + 0x39c4], 0x3dcccccd
mov dword [rbx + 0x39c8], 0x3f666666
mov dword [rsp + 0x40], 0x42c80000
mov dword [rsp + 0x44], 0x41c80000
lea rdx, [rsp + 0x40]
lea rcx, str.Login
call fcn.14006d540
test al, al
je 0x14000b60e
xor edx, edx
mov r8d, 0x138
lea rcx, [rbp + 0x450]
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x108]
mov qword [rsp + 0x70], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
mov r8, r14
lea rdx, [0x14011c111]
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000ae20
lea rcx, [rbp - 0x50]
call fcn.1400040d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], r13
mov r8d, 8
lea rdx, str.username
lea rcx, [rbp + 0x68]
call fcn.1400040d0
nop
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x210]
call fcn.140007910
nop
lea rax, [rbp + 0x48]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], r13
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x14000ae90
mov rdx, rdi
lea rcx, [rbp + 0x48]
call fcn.1400040d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], r13
mov r8d, 8
lea rdx, str.password
lea rcx, [rbp + 0x28]
call fcn.1400040d0
nop
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x250]
call fcn.140007910
nop
lea rax, [rbp - 0x70]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
mov r8d, 5
lea rdx, str.4.0.0
lea rcx, [rbp - 0x70]
call fcn.1400040d0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r13
mov r8d, 7
lea rdx, str.version
lea rcx, [rbp - 0x30]
call fcn.1400040d0
nop
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x290]
call fcn.140007910
nop
lea rax, [rbp + 0x128]
mov qword [rsp + 0x40], rax
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x128]
call fcn.140003800
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r13
mov qword [rbp + 0x1a8], r13
mov r8d, 4
lea rdx, str.hwid
lea rcx, [rbp + 0x190]
call fcn.1400040d0
nop
mov r8, rbx
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x2d0]
call fcn.140007910
nop
lea rax, [rbp + 0x210]
mov qword [rbp + 0x150], rax
lea rax, [rbp + 0x310]
mov qword [rbp + 0x158], rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x108]
call fcn.14007d570
mov rbx, rax
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov ecx, 0x60
call fcn.1400be170
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x48], rax
lea rax, vtable.cpr::StringHolder_class_cpr::Url_.0
mov qword [rbp - 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
mov r8d, 0x28
lea rdx, str.https:__ovix.mindfulkratom.com_api_logon
lea rcx, [rbp - 8]
call fcn.1400040d0
lea rax, vtable.cpr::Url.0
mov qword [rbp - 0x10], rax
lea rdx, [rbp - 0x10]
lea rcx, [0x14011be28]
call fcn.14007c6a0
lea rdx, [rsp + 0x50]
lea rcx, [0x14011be28]
call fcn.14007c080
mov rdx, rbx
lea rcx, [0x14011be28]
call fcn.14007c640
lea rdx, [rbp + 0x450]
lea rcx, [0x14011be28]
call fcn.14007bfb0
bts esi, 0x11
mov r8, qword [rsp + 0x50]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400043a0
mov edx, 0x60
mov rcx, qword [rsp + 0x50]
call fcn.1400be4c4
nop
mov rcx, rbx
call fcn.140001c00
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x14000b11d
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b118
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b118
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be4c4
movdqa xmm0, xmmword [0x1400e0780]
movdqu xmmword [rbp + 8], xmm0
mov byte [rbp - 8], 0
lea r9, [fcn.1400047f0]
mov edx, 0x40
lea r8d, [rdx - 0x3c]
lea rcx, [rbp + 0x210]
call fcn.1400be1ac
mov qword [rbp + 0x100], r13
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x468]
lea rcx, [rsp + 0x70]
call fcn.14000ed40
mov rdi, rax
mov rcx, rax
call fcn.14000d880
movzx r8d, byte [0x14011daa8]
movzx edx, byte [rdi]
mov byte [0x14011daa8], dl
mov byte [rdi], r8b
mov rdx, qword [0x14011dab0]
mov r8, qword [rdi + 8]
mov qword [0x14011dab0], r8
mov qword [rdi + 8], rdx
lea rcx, [0x14011daa8]
call fcn.14000d880
nop
mov rcx, rdi
call fcn.14000d880
movzx edx, byte [rdi]
lea rcx, [rdi + 8]
call fcn.14000d290
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r13
mov qword [rbp + 0x1a8], r13
mov r8d, 7
lea rdx, str.Message
lea rcx, [rbp + 0x190]
call fcn.1400040d0
lea rdx, [rbp + 0x190]
call fcn.140011350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
movdqa xmm1, xmmword [0x1400e0780]
movdqu xmmword [rbp + 0x1e0], xmm1
mov byte [rbp + 0x1d0], 0
bts esi, 0x10
mov dword [rsp + 0x48], esi
cmp byte [rax], 3
jne 0x14000bbe8
mov r9, qword [rax + 8]
lea rax, [rbp + 0x1d0]
cmp rax, r9
je 0x14000b27f
mov rbx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x14000b24e
mov r9, qword [r9]
lea rcx, [rbp + 0x1d0]
cmp rbx, 0xf
ja 0x14000b277
mov qword [rbp + 0x1e0], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x1d0], 0
jmp 0x14000b27f
mov rdx, rbx
call fcn.14000f6e0
btr esi, 0x10
or esi, 0xc000
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r13
mov qword [rbp + 0x1a8], r13
mov r8d, 4
lea rdx, str.Auth
lea rcx, [rbp + 0x190]
call fcn.1400040d0
lea rdx, [rbp + 0x190]
call fcn.140011350
cmp byte [rax], 4
jne 0x14000bac8
cmp byte [rax + 8], 0
je 0x14000b5a1
lea rcx, [rbp + 0x210]
call fcn.140002540
lea rbx, [rbp + 0x170]
cmp qword [rbp + 0x188], 0xf
cmova rbx, qword [rbp + 0x170]
lea rax, [0x140000000]
lea rax, [rax + 0xd1980]
mov qword [rbp + 0x210], rax
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
bts esi, 0x12
mov dword [rsp + 0x48], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x210]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x210], rdi
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x20c], edx
lea rcx, [rbp + 0x218]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x218], rax
mov byte [rbp + 0x294], 0
mov byte [rbp + 0x289], 0
lea rcx, [rbp + 0x218]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x298], r13
mov rax, qword [0x14011d968]
mov qword [rbp + 0x28c], rax
mov qword [rbp + 0x280], r13
mov r8d, 2
mov rdx, rbx
lea rcx, [rbp + 0x218]
call fcn.14000e1c0
test rax, rax
jne 0x14000b403
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x210]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x210], rdi
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x20c], edx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x70], rax
mov byte [rsp + 0x50], 0
xor eax, eax
mov qword [rsp + 0x58], rax
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.14000d290
mov byte [rsp + 0x50], 3
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
mov ecx, 0x20
call fcn.1400be170
mov rbx, rax
lea rax, [rbp + 0x148]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x158], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r13
lea rax, [0x14011c111]
inc r14
cmp byte [rax + r14], 0
jne 0x14000b496
mov r8, r14
mov rdx, rax
mov rcx, rbx
call fcn.1400040d0
nop
mov qword [rsp + 0x58], rbx
lea rdx, str.username
call fcn.14000ecf0
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.14000c020
lea rax, [rbp + 0x150]
mov qword [rsp + 0x70], rax
lea rdx, [0x14011c210]
lea rcx, [rbp + 0x150]
call fcn.14000ee60
mov rbx, rax
lea rdx, str.password
call fcn.14000ecf0
mov rcx, rax
mov rdx, rbx
call fcn.14000c020
lea rcx, [rbp + 0x210]
call fcn.14000bd00
lea rcx, [rbp + 0x210]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
lea rcx, [rbp + 0x210]
call fcn.14000c090
lea rax, str.Welcome
mov qword [str.Welcome_], rax
movups xmm0, xmmword [0x1400d2c18]
movups xmmword [0x1400f41f0], xmm0
mov byte [0x14011d980], 1
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x210], rdi
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x20c], edx
lea rcx, [rbp + 0x218]
call fcn.140003530
lea rcx, [rbp + 0x220]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2b8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x14000b5bd
lea rax, str.Login_Failed
mov qword [str.Welcome_], rax
movups xmm0, xmmword [0x1400d2c28]
movups xmmword [0x1400f41f0], xmm0
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0xf
jbe 0x14000b602
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b5fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b5fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be4c4
nop
lea rcx, [rbp + 0x450]
call fcn.140002550
mov ecx, 1
call fcn.140027150
mov ecx, 1
call fcn.140027300
movss xmm0, dword [r15 + 0x64]
subss xmm0, dword [0x1400e06bc]
movss xmm2, dword [r15 + 0x60]
mov rcx, qword [0x14011d9b0]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x4008]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
subss xmm2, dword [0x1400e06b4]
addss xmm0, xmm2
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
mov byte [rax + 0x179], 1
mov dword [rsp + 0x40], 0x42b40000
mov dword [rsp + 0x44], 0x41c80000
lea rdx, [rsp + 0x40]
lea rcx, str.Exit
call fcn.14006d540
test al, al
je 0x14000b6bf
mov byte [reloc.WS2_32.dll_accept], 0
mov rdx, qword [str.Welcome_]
mov rcx, qword [0x14011d9b0]
test rdx, rdx
je 0x14000b739
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rdx
movss xmm0, dword [0x1400e071c]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x1400e070c]
movss xmm2, dword [rcx + 0x3d40]
lea rdx, [rsp + 0x40]
mov rcx, qword [rcx + 0x3d38]
call fcn.140065670
movss xmm0, dword [rsp + 0x40]
addss xmm0, dword [0x1400e061c]
cvttss2si eax, xmm0
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mov rdx, qword [str.Welcome_]
mov rcx, qword [0x14011d9b0]
movss xmm3, dword [r15 + 0x60]
mulss xmm3, dword [0x1400e05e0]
mulss xmm8, dword [0x1400e05e0]
subss xmm3, xmm8
addss xmm3, xmm9
movss xmm2, dword [r15 + 0x64]
subss xmm2, dword [0x1400e06c4]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x4008]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xbc]
addss xmm2, xmm0
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0xb8]
addss xmm1, xmm3
movss dword [rax + 0x138], xmm1
movss dword [rax + 0x13c], xmm2
mov byte [rax + 0x179], 1
lea rcx, [0x1400f41f0]
call fcn.14006ccb0
movss xmm0, dword [r15 + 0x64]
movss xmm6, dword [0x1400e06c0]
subss xmm0, xmm6
mov rcx, qword [0x14011d9b0]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x4008]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
movss xmm7, dword [0x1400e0690]
addss xmm0, xmm7
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
mov byte [rax + 0x179], 1
mov dword [rsp + 0x40], 0x42fa0000
mov dword [rsp + 0x44], 0x42200000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400d33a8]
call fcn.14006d540
test al, al
je 0x14000b863
lea rcx, str.start_https:__ovix.lol_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movss xmm0, dword [r15 + 0x64]
subss xmm0, xmm6
mov rcx, qword [0x14011d9b0]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x4008]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
addss xmm0, xmm7
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
mov byte [rax + 0x179], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
movaps xmm1, xmmword [0x1400e0880]
movups xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x44], 0x3f800000
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x48], 0x42fa0000
mov dword [rsp + 0x4c], 0x42200000
lea rax, [rbp + 0x150]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x48]
mov rcx, qword [0x14011d9a0]
call fcn.14006ee50
call fcn.140035ab0
mov ecx, 4
call fcn.140027150
call fcn.140036910
nop
mov rdx, qword [rbp + 0x338]
cmp rdx, 0xf
jbe 0x14000b98c
inc rdx
mov rcx, qword [rbp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b986
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b986
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be4c4
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x14000b9d0
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b9cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b9cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be4c4
movdqa xmm0, xmmword [0x1400e0780]
movdqu xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1b0], 0
mov rdx, qword [rbp + 0x188]
cmp rdx, 0xf
jbe 0x14000ba2b
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ba26
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400be4c4
mov qword [rbp + 0x180], r13
mov qword [rbp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x170], 0
mov rax, qword [rsp + 0x68]
cmp rax, 0xf
jbe 0x14000ba84
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14000ba7c
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ba7c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1400be4c4
mov rcx, qword [rbp + 0x690]
xor rcx, rsp
call fcn.1400be150
lea r11, [rsp + 0x7e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, rax
call fcn.1400120e0
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x68]
lea rcx, [rbp + 0x108]
call fcn.140023f00
nop
mov r8, rax
lea rcx, [rbp - 0x10]
call fcn.140023cd0
lea rdx, [0x1400efa18]
lea rcx, [rbp - 0x10]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.1400018a0
nop
call fcn.1400018a0
nop
call fcn.140001940
nop
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x150]
call fcn.140007840
nop
mov rcx, rax
call fcn.1400120e0
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.140023c10
nop
mov r8, rax
lea rcx, [rbp + 0xc8]
call fcn.140023cd0
lea rdx, [0x1400efa18]
lea rcx, [rbp + 0xc8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.1400120e0
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x68]
lea rcx, [rbp - 0x70]
call fcn.140023c10
nop
mov r8, rax
lea rcx, [rbp + 0xc8]
call fcn.140023cd0
lea rdx, [0x1400efa18]
lea rcx, [rbp + 0xc8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.1400120e0
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x68]
lea rcx, [rbp + 0x190]
call fcn.140023f00
nop
mov r8, rax
lea rcx, [rbp + 0xc8]
call fcn.140023cd0
lea rdx, [0x1400efa18]
lea rcx, [rbp + 0xc8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.1400120e0
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x68]
lea rcx, [rbp + 0x128]
call fcn.140023c10
nop
mov r8, rax
lea rcx, [rbp + 0xc8]
call fcn.140023cd0
lea rdx, [0x1400efa18]
lea rcx, [rbp + 0xc8]
call sub.VCRUNTIME140.dll__CxxThrowException
int3