Function at 0x14009cdd0
Capabilities:
Create thread
Download url
Encode data using xor
Execute command
Query environment variable
Receive data
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2d8]
sub rsp, 0x3b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14016bc40]
xor rax, rsp
mov qword [rbp + 0x280], rax
xor r12d, r12d
mov edx, 1
lea rcx, [0x140035760]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea rcx, str.Color_0A
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rsi, str.Ruby_Proxy
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov byte [rsp + 0x40], r12b
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016450
lea rcx, [0x14016ffc0]
call fcn.1400bb020
cmp byte [0x1401701d8], r12b
jne 0x14009cee2
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.1400317f0
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14009ceb0
xor byte [rax], 0x34
xor byte [rax + 1], 0x35
xor byte [rax + 2], 0x36
xor byte [rax + 3], 0x37
xor byte [rax + 4], 0x38
xor byte [rax + 5], 0x39
xor byte [rax + 6], 0x3a
xor byte [rax + 7], 0x3b
xor byte [rax + 8], 0x3c
xor byte [rax + 9], 0x3d
xor cl, 0x3e
mov byte [rax + 0xa], cl
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016450
mov rcx, rax
lea rdx, [0x1401701e0]
call fcn.1400161f0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x14016ffc0]
call fcn.1400b8410
test al, al
je 0x14009cef9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
lea rcx, [0x14012d6f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
movdqa xmm6, xmmword [0x14012a190]
movdqu xmmword [rbp + 0x240], xmm6
mov byte [rbp + 0x230], r12b
movups xmm0, xmmword [0x14012d6c0]
movups xmmword [rsp + 0x50], xmm0
movzx eax, word [0x14012d6d0]
mov word [rsp + 0x60], ax
movzx eax, byte [0x14012d6d2]
mov byte [rsp + 0x62], al
mov r8d, r12d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14009d080
movdqa xmm4, xmmword [0x14013a4d0]
movdqa xmm3, xmmword [0x14013a580]
movdqa xmm5, xmmword [str.3333]
movdqa xmm0, xmmword [str.4444444444444444]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x54]
movdqa xmm7, xmmword [0x14013a540]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14009cf91
cmp r8d, 0x13
jge 0x14009d0c3
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x13
jl 0x14009d090
lea rdx, [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016450
lea rdx, [rbp + 0x230]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140015fb0
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x70]
call fcn.140027d70
mov rdx, rax
lea rcx, [0x14016ffc0]
call fcn.1400bc610
cmp byte [0x1401701d8], 0
jne 0x14009d185
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.140033ab0
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x14009d153
xor byte [rax], 0x34
xor byte [rax + 1], 0x35
xor byte [rax + 2], 0x36
xor byte [rax + 3], 0x37
xor byte [rax + 4], 0x38
xor byte [rax + 5], 0x39
xor byte [rax + 6], 0x3a
xor byte [rax + 7], 0x3b
xor byte [rax + 8], 0x3c
xor byte [rax + 9], 0x3d
xor cl, 0x3e
mov byte [rax + 0xa], cl
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016450
mov rcx, rax
lea rdx, [0x1401701e0]
call fcn.1400161f0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdi, qword [0x1401701a8]
mov rbx, qword [0x1401701a0]
cmp rbx, rdi
je 0x14009d1dc
nop dword [rax + rax]
mov rdx, rbx
lea rcx, [rbp + 0x70]
call fcn.140027d70
lea rcx, [0x14012d6f4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8, qword [rbp + 0x88]
cmp r8, 0xf
jbe 0x14009d1d3
mov rdx, qword [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.1400392a0
add rbx, 0x20
cmp rbx, rdi
jne 0x14009d1a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r12
xor r8d, r8d
lea rdx, [0x14012a325]
lea rcx, [rbp + 0x70]
call fcn.140017900
nop
mov r14, qword [0x1401701a0]
mov r13, qword [0x1401701a8]
movabs rax, 0x7fffffffffffffff
movabs rcx, 0x8000000000000000
mov edx, reloc.WS2_32.dll_shutdown
mov r15d, reloc.WS2_32.dll_ntohs
cmp r14, r13
je 0x14009d398
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], r12
mov r12, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14009d25c
mov r12, qword [r14]
mov rsi, qword [r14 + 0x10]
cmp rsi, rax
ja 0x14009e4ff
cmp rsi, 0xf
ja 0x14009d28d
mov qword [rbp + 0x60], rsi
mov rbx, r15
mov qword [rbp + 0x68], rbx
movups xmm0, xmmword [r12]
movups xmmword [rbp + 0x50], xmm0
movq rdi, xmm0
jmp 0x14009d310
mov rbx, rsi
or rbx, 0xf
cmp rbx, rax
jbe 0x14009d2a2
mov rbx, rax
lea rax, [rcx + 0x27]
jmp 0x14009d2cd
cmp rbx, 0x16
cmovb rbx, rdx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14009d2b7
xor edi, edi
jmp 0x14009d2f4
cmp rcx, 0x1000
jb 0x14009d2ec
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14009e4f9
mov rcx, rax
call fcn.14010fb70
test rax, rax
je 0x14009d38a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009d2f4
call fcn.14010fb70
mov rdi, rax
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x68], rbx
lea r8, [rsi + 1]
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp + 0x50]
cmp rbx, 0xf
cmova rdx, rdi
mov r8, rsi
lea rcx, [rbp + 0x70]
call fcn.14003fa70
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x14009d360
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009d35b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009d38a
call fcn.14010fbac
add r14, 0x20
xor r12d, r12d
cmp r14, r13
je 0x14009d391
movabs rax, 0x7fffffffffffffff
movabs rcx, 0x8000000000000000
mov edx, reloc.WS2_32.dll_shutdown
jmp 0x14009d240
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rsi, str.Ruby_Proxy
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rcx, qword [rbp + 0x70]
mov r8, qword [rbp + 0x80]
cmp r8, 4
jne 0x14009d3cc
lea rdx, [0x14012d6f8]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14009d3cc
mov byte [0x14016f3d5], al
mov edx, 0xa
lea rcx, str.Ruby_Premium_Proxy_n
call fcn.1400a1bf0
xor r9d, r9d
mov r8d, 1
lea rdx, [rbp + 0x250]
lea rcx, str.1250076370676088944
call fcn.1400aa780
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
lea rax, str.Plan:Premium_User
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x50], rsi
call sub.MSVCP140.dll__Xtime_get_ticks
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp - 0x40], rdx
mov qword [rbp - 0x38], r12
lea rax, str.ruby
mov qword [rbp - 0x30], rax
lea rax, str.Ruby_Proxy_V1.5
mov qword [rbp - 0x28], rax
lea rax, str.Ruby_Proxy_Discord
mov qword [rbp + 0x28], rax
lea rax, str.https:__discord.gg_f8scj89mER
mov qword [rbp + 0x30], rax
lea rcx, [rbp - 0x50]
call fcn.1400aa9b0
mov edx, reloc.WS2_32.dll_ntohl
lea rcx, str.Downloading_RTTEX_Files_n
call fcn.1400a1bf0
lea rcx, str.USERNAME
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14009d4d0
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140017900
nop
mov r8, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
sub rax, r8
mov r14d, 9
lea rsi, str.C:Users_
cmp rax, r14
jb 0x14009d57f
lea rax, [r8 + 9]
mov qword [rbp - 0x60], rax
lea rbx, [rbp - 0x70]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x70]
lea rax, [0x14012d781]
cmp rax, rbx
jbe 0x14009d543
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x14009d543
cmp rbx, rsi
ja 0x14009d53b
mov rdi, r12
jmp 0x14009d546
mov rdi, rbx
sub rdi, rsi
jmp 0x14009d546
mov rdi, r14
lea rcx, [rbx + 9]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
sub r14, rdi
lea rdx, [rsi + 9]
add rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x70]
jmp 0x14009d59b
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp - 0x70]
call fcn.14001d740
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r15
mov byte [rax], 0
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x78]
mov rax, rdx
sub rax, rcx
cmp rax, 0x28
jb 0x14009d614
lea rax, [rcx + 0x28]
mov qword [rbp - 0x80], rax
lea rbx, [rsp + 0x70]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x70]
add rbx, rcx
mov r8d, Ordinal_41
lea rdx, str.AppDataLocalGrowtopiainterfacelarge
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x28], 0
lea rax, [rsp + 0x70]
jmp 0x14009d636
mov qword [rsp + 0x20], Ordinal_41
lea r9, str.AppDataLocalGrowtopiainterfacelarge
xor r8d, r8d
mov edx, Ordinal_41
lea rcx, [rsp + 0x70]
call fcn.14000bfa0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm7
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r15
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14009d68f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009d68a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009d68a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010fbac
movdqu xmmword [rbp - 0x80], xmm6
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x14009d6d7
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009d6d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009d6d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010fbac
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f0], xmm1
mov r8d, 0x46
lea rdx, str.https:__github.com_dorukalak_kingdomrttex_raw_main_kingdom_trick.rttex
lea rcx, [rbp + 0x1e0]
call fcn.140017900
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1d0], xmm1
mov r8d, 0x47
lea rdx, str.https:__github.com_dorukalak_kingdomrttex_raw_main_kingdom_casino.rttex
lea rcx, [rbp + 0x1c0]
call fcn.140017900
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b0], xmm1
mov r8d, 0x47
lea rdx, str.https:__github.com_dorukalak_kingdomrttex_raw_main_kingdom_visual.rttex
lea rcx, [rbp + 0x1a0]
call fcn.140017900
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x190], xmm1
mov r8d, 0x46
lea rdx, str.https:__github.com_dorukalak_kingdomrttex_raw_main_kingdom_other.rttex
lea rcx, [rbp + 0x180]
call fcn.140017900
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
mov r8d, 0x46
lea rdx, str.https:__github.com_dorukalak_ruby_raw_main_ruby_20general_20broo.rttex
lea rcx, [rbp + 0x160]
call fcn.140017900
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov r8d, 0x49
lea rdx, str.https:__github.com_dorukalak_kingdomrttex_raw_main_kingdombanner123.rttex
lea rcx, [rbp + 0x140]
call fcn.140017900
nop
movabs rax, 0x7fffffffffffffff
movq rcx, xmm7
sub rax, rcx
cmp rax, 0xc
jb 0x14009e505
lea r9, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova r9, qword [rbp + 0x50]
mov qword [rsp + 0x30], ntohl
lea rax, str._trick.rttex
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x50]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x200]
call fcn.14000c320
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rbx, qword [rbp + 0x60]
sub rax, rbx
cmp rax, 0xd
jb 0x14009e50b
lea rax, [rbp + 0x50]
mov r13, qword [rbp + 0x50]
mov r12, qword [rbp + 0x68]
cmp r12, 0xf
cmova rax, r13
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm1
lea r14, [rbx + 0xd]
mov rdi, r15
lea rsi, [rbp + 0x120]
cmp r14, r15
jbe 0x14009d93c
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x14009d8ef
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14010fb70
test rax, rax
je 0x14009d921
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14009d930
cmp rdi, 0x16
mov ecx, reloc.WS2_32.dll_shutdown
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14009d909
xor esi, esi
jmp 0x14009d935
cmp rcx, 0x1000
jb 0x14009d928
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14009e4ca
jmp 0x14009d8d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010fb70
mov rsi, rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x120], rsi
mov qword [rbp + 0x130], r14
mov qword [rbp + 0x138], rdi
mov r8, rbx
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.casino.rttex]
movsd qword [rsi + rbx], xmm0
mov eax, dword [0x14012d988]
mov dword [rsi + rbx + 8], eax
movzx eax, byte [0x14012d98c]
mov byte [rsi + rbx + 0xc], al
mov byte [rsi + r14], 0
lea rax, [rbp + 0x50]
cmp r12, 0xf
cmova rax, r13
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
mov rdi, r15
lea rsi, [rbp + 0x100]
cmp r14, r15
jbe 0x14009da47
mov rdi, r14
or rdi, 0xf
movabs rsi, 0x7fffffffffffffff
cmp rdi, rsi
jbe 0x14009d9fa
mov rdi, rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14010fb70
test rax, rax
je 0x14009da2c
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14009da3b
cmp rdi, 0x16
mov ecx, reloc.WS2_32.dll_shutdown
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14009da14
xor esi, esi
jmp 0x14009da40
cmp rcx, 0x1000
jb 0x14009da33
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14009e4d0
jmp 0x14009d9df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010fb70
mov rsi, rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x100], rsi
mov qword [rbp + 0x110], r14
mov qword [rbp + 0x118], rdi
mov r8, rbx
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str._visual.rttex]
movsd qword [rsi + rbx], xmm0
mov eax, dword [0x14012d998]
mov dword [rsi + rbx + 8], eax
movzx eax, byte [0x14012d99c]
mov byte [rsi + rbx + 0xc], al
mov byte [rsi + r14], 0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rbx
cmp rax, 0xc
jb 0x14009e511
lea rax, [rbp + 0x50]
cmp r12, 0xf
cmova rax, r13
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
lea r14, [rbx + 0xc]
mov rdi, r15
lea rsi, [rbp + 0xe0]
cmp r14, r15
jbe 0x14009db66
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x14009db19
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14010fb70
test rax, rax
je 0x14009db4b
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14009db5a
cmp rdi, 0x16
mov ecx, reloc.WS2_32.dll_shutdown
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14009db33
xor esi, esi
jmp 0x14009db5f
cmp rcx, 0x1000
jb 0x14009db52
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14009e4d6
jmp 0x14009dafe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010fb70
mov rsi, rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xf0], r14
mov qword [rbp + 0xf8], rdi
mov r8, rbx
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.other.rttex]
movsd qword [rbx + rsi], xmm0
mov eax, dword [0x14012d9a8]
mov dword [rbx + rsi + 8], eax
mov byte [rsi + r14], 0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rbx
cmp rax, 0xe
jb 0x14009e517
lea rax, [rbp + 0x50]
cmp r12, 0xf
cmova rax, r13
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
lea r14, [rbx + 0xe]
mov rdi, r15
lea rsi, [rbp + 0xc0]
cmp r14, r15
jbe 0x14009dc7a
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x14009dc2d
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14010fb70
test rax, rax
je 0x14009dc5f
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14009dc6e
cmp rdi, 0x16
mov ecx, reloc.WS2_32.dll_shutdown
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14009dc47
xor esi, esi
jmp 0x14009dc73
cmp rcx, 0x1000
jb 0x14009dc66
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14009e4dc
jmp 0x14009dc12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010fb70
mov rsi, rax
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xd8], rdi
mov r8, rbx
mov rdx, rax
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.general.rttex]
movsd qword [rbx + rsi], xmm0
mov eax, dword [0x14012d9b8]
mov dword [rbx + rsi + 8], eax
movzx eax, word [0x14012d9bc]
mov word [rbx + rsi + 0xc], ax
mov byte [rsi + r14], 0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rbx
cmp rax, 0x10
jb 0x14009e51d
lea r14, [rbp + 0x50]
cmp r12, 0xf
cmova r14, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
lea rsi, [rbx + 0x10]
lea rdi, [rbp + 0xa0]
cmp rsi, 0xf
jbe 0x14009dd8e
mov r15, rsi
or r15, 0xf
cmp r15, rcx
jbe 0x14009dd46
mov r15, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14010fb70
test rax, rax
je 0x14009dd78
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009dd87
cmp r15, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb r15, rax
lea rcx, [r15 + 1]
test rcx, rcx
jne 0x14009dd60
xor edi, edi
jmp 0x14009dd87
cmp rcx, 0x1000
jb 0x14009dd7f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14009e4e2
jmp 0x14009dd2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010fb70
mov rdi, rax
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], r15
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str._bannernew.rttex]
movups xmmword [rdi + rbx], xmm0
mov byte [rdi + rsi], 0
lea rdx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], 0xf
cmova rdx, qword [rbp + 0x1e0]
lea r8, [rbp + 0x200]
cmp qword [rbp + 0x218], 0xf
cmova r8, qword [rbp + 0x200]
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rdx, [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], 0xf
cmova rdx, qword [rbp + 0x1c0]
lea r8, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
cmova r8, qword [rbp + 0x120]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rdx, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 0xf
cmova rdx, qword [rbp + 0x1a0]
lea r8, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova r8, qword [rbp + 0x100]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rdx, [rbp + 0x180]
cmp qword [rbp + 0x198], 0xf
cmova rdx, qword [rbp + 0x180]
lea r8, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova r8, qword [rbp + 0xe0]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rdx, [rbp + 0x160]
cmp qword [rbp + 0x178], 0xf
cmova rdx, qword [rbp + 0x160]
lea r8, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova r8, qword [rbp + 0xc0]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rdx, qword [rbp + 0x140]
lea r8, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova r8, qword [rbp + 0xa0]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov edx, reloc.WS2_32.dll_ntohl
lea rcx, str.Done_n
call fcn.1400a1bf0
call fcn.14008b270
mov ecx, 8
call fcn.14010fb70
test rax, rax
je 0x14009df5a
lea rcx, [0x14008c320]
mov qword [rax], rcx
jmp 0x14009df5d
mov rax, rbx
mov qword [rsp + 0x70], rax
lea rcx, [rbp + 0x98]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14001c9d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x90], rax
test rax, rax
je 0x14009e4e8
mov ecx, 8
call fcn.14010fb70
test rax, rax
je 0x14009dfb1
lea rcx, [0x1400351c0]
mov qword [rax], rcx
jmp 0x14009dfb4
mov rax, rbx
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14001c9d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14009e4bb
cmp dword [rsp + 0x58], 0
je 0x14009e53f
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x14009e53f
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
mov ecx, 8
call fcn.14010fb70
test rax, rax
je 0x14009e035
lea rcx, [0x140071220]
mov qword [rax], rcx
jmp 0x14009e038
mov rax, rbx
mov qword [rsp + 0x70], rax
lea rcx, [rbp + 0x228]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14001c9d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x220], rax
test rax, rax
je 0x14009e52e
call fcn.140074ba0
cmp byte [0x14016f4ac], 0
jne 0x14009e0a7
mov edx, 4
lea rcx, str.Failed_to_edit_Hosts_File_n
call fcn.1400a1bf0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400444e0
cmp dword [rbp + 0x98], 0
je 0x14009e523
movaps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x14009e523
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x90], xmm0
call fcn.1400156d0
mov rcx, qword [0x14016fc38]
call fcn.1400a80f0
mov rcx, qword [0x14016fc38]
call fcn.1400a7880
test al, al
je 0x14009e1c8
lea rcx, str.Color_0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Color_0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Main_Settings_Loaded_n
call fcn.140015550
lea rdx, str.Server__client_proxy_is_running._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016450
lea rdx, str.You_can_now_connect_to_Growtopia_n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016450
mov edx, reloc.WS2_32.dll_ntohl
lea rcx, str.If_Proxy_doesnt_connect_restart_Growtopia_n
call fcn.1400a1bf0
movabs rbx, 0x7fffffffffb3b4bf
movabs rsi, 0x7fffffffffffffff
nop dword [rax]
mov rcx, qword [0x14016fc38]
call fcn.1400a5d20
lea rcx, [rsp + 0x70]
call fcn.140078c90
mov rax, qword [rsp + 0x70]
cmp rax, rbx
jge 0x14009e1b7
add rax, 0x4c4b40
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
call fcn.140025ac0
jmp 0x14009e180
mov qword [rsp + 0x50], rsi
lea rcx, [rsp + 0x50]
call fcn.140025ac0
jmp 0x14009e180
mov edx, 4
lea rcx, str.Failed_to_start_server_or_proxy._n
call fcn.1400a1bf0
nop
cmp dword [rbp + 0x228], 0
je 0x14009e1ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp + 0x98], 0
je 0x14009e1fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov r8, qword [rbp + 0xb8]
cmp r8, 0xf
jbe 0x14009e21a
mov rdx, qword [rbp + 0xa0]
lea rcx, [rbp + 0xa0]
call fcn.1400392a0
movdqu xmmword [rbp + 0xb0], xmm6
mov byte [rbp + 0xa0], 0
mov r8, qword [rbp + 0xd8]
cmp r8, 0xf
jbe 0x14009e249
mov rdx, qword [rbp + 0xc0]
lea rcx, [rbp + 0xc0]
call fcn.1400392a0
movdqu xmmword [rbp + 0xd0], xmm6
mov byte [rbp + 0xc0], 0
mov r8, qword [rbp + 0xf8]
cmp r8, 0xf
jbe 0x14009e278
mov rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0xe0]
call fcn.1400392a0
movdqu xmmword [rbp + 0xf0], xmm6
mov byte [rbp + 0xe0], 0
mov r8, qword [rbp + 0x118]
cmp r8, 0xf
jbe 0x14009e2a7
mov rdx, qword [rbp + 0x100]
lea rcx, [rbp + 0x100]
call fcn.1400392a0
movdqu xmmword [rbp + 0x110], xmm6
mov byte [rbp + 0x100], 0
mov r8, qword [rbp + 0x138]
cmp r8, 0xf
jbe 0x14009e2d6
mov rdx, qword [rbp + 0x120]
lea rcx, [rbp + 0x120]
call fcn.1400392a0
movdqu xmmword [rbp + 0x130], xmm6
mov byte [rbp + 0x120], 0
mov r8, qword [rbp + 0x218]
cmp r8, 0xf
jbe 0x14009e305
mov rdx, qword [rbp + 0x200]
lea rcx, [rbp + 0x200]
call fcn.1400392a0
movdqu xmmword [rbp + 0x210], xmm6
mov byte [rbp + 0x200], 0
mov r8, qword [rbp + 0x158]
cmp r8, 0xf
jbe 0x14009e334
mov rdx, qword [rbp + 0x140]
lea rcx, [rbp + 0x140]
call fcn.1400392a0
movdqu xmmword [rbp + 0x150], xmm6
mov byte [rbp + 0x140], 0
mov r8, qword [rbp + 0x178]
cmp r8, 0xf
jbe 0x14009e363
mov rdx, qword [rbp + 0x160]
lea rcx, [rbp + 0x160]
call fcn.1400392a0
movdqu xmmword [rbp + 0x170], xmm6
mov byte [rbp + 0x160], 0
mov r8, qword [rbp + 0x198]
cmp r8, 0xf
jbe 0x14009e392
mov rdx, qword [rbp + 0x180]
lea rcx, [rbp + 0x180]
call fcn.1400392a0
movdqu xmmword [rbp + 0x190], xmm6
mov byte [rbp + 0x180], 0
mov r8, qword [rbp + 0x1b8]
cmp r8, 0xf
jbe 0x14009e3c1
mov rdx, qword [rbp + 0x1a0]
lea rcx, [rbp + 0x1a0]
call fcn.1400392a0
movdqu xmmword [rbp + 0x1b0], xmm6
mov byte [rbp + 0x1a0], 0
mov r8, qword [rbp + 0x1d8]
cmp r8, 0xf
jbe 0x14009e3f0
mov rdx, qword [rbp + 0x1c0]
lea rcx, [rbp + 0x1c0]
call fcn.1400392a0
movdqu xmmword [rbp + 0x1d0], xmm6
mov byte [rbp + 0x1c0], 0
mov r8, qword [rbp + 0x1f8]
cmp r8, 0xf
jbe 0x14009e41f
mov rdx, qword [rbp + 0x1e0]
lea rcx, [rbp + 0x1e0]
call fcn.1400392a0
movdqu xmmword [rbp + 0x1f0], xmm6
mov byte [rbp + 0x1e0], 0
cmp r12, 0xf
jbe 0x14009e444
mov r8, r12
mov rdx, r13
lea rcx, [rbp + 0x50]
call fcn.1400392a0
nop
mov r8, qword [rbp + 0x88]
cmp r8, 0xf
jbe 0x14009e45f
mov rdx, qword [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.1400392a0
nop
mov r8, qword [rbp + 0x248]
cmp r8, 0xf
jbe 0x14009e47f
mov rdx, qword [rbp + 0x230]
lea rcx, [rbp + 0x230]
call fcn.1400392a0
xor eax, eax
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.14010fcc0
lea r11, [rsp + 0x3b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rsp + 0x58], ebx
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.14000c600
nop
call fcn.14000c600
nop
call fcn.14000c600
nop
call fcn.14000c600
nop
call fcn.14000c600
nop
mov dword [rbp + 0x98], ebx
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.14000c600
int3
call fcn.14000c620
nop
call fcn.14000c620
nop
call fcn.14000c620
nop
call fcn.14000c620
nop
call fcn.14000c620
nop
call fcn.14000c620
nop
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rbp + 0x228], ebx
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3