Function at 0x14006daf0
Capabilities:
Create http request
Delete file
Encode data using xor
Execute command
Initialize winsock library
Move file
Read data from internet
Receive data
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2620]
mov eax, 0x2720
call fcn.1400738a0
sub rsp, rax
movaps xmmword [rsp + 0x2710], xmm6
movaps xmmword [rsp + 0x2700], xmm7
movaps xmmword [rsp + 0x26f0], xmm8
mov rax, qword [0x140091010]
xor rax, rsp
mov qword [rbp + 0x25e0], rax
xor r12d, r12d
mov dword [rbp + 0x20], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov ebx, r12d
mov qword [rbp + 0x58], rbx
mov edi, send
mov qword [rbp + 0x60], rdi
mov byte [rbp + 0x48], bl
mov dword [rbp + 0x20], 1
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea esi, [rdi + 0xf]
lea r13, [0x140000000]
nop word [rax + rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, eax
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x3e
sub ecx, eax
movsxd rax, ecx
movzx r9d, byte [rax + r13 + 0x85820]
cmp rbx, rdi
jae 0x14006dbe1
lea rax, [rbx + 1]
mov qword [rbp + 0x58], rax
lea rax, [rbp + 0x48]
cmp rdi, 0x10
cmovae rax, qword [rbp + 0x48]
mov byte [rax + rbx], r9b
mov byte [rax + rbx + 1], 0
jmp 0x14006dbea
lea rcx, [rbp + 0x48]
call fcn.14005a7a0
sub rsi, 1
je 0x14006dbfa
mov rdi, qword [rbp + 0x60]
mov rbx, qword [rbp + 0x58]
jmp 0x14006db90
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], send
mov byte [rbp + 0x28], 0
mov edi, 3
mov dword [rbp + 0x20], edi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea ebx, [rdi + 0x1b]
nop dword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ecx, eax
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x3e
sub ecx, eax
movsxd rax, ecx
movzx r9d, byte [rax + r13 + 0x85820]
mov rcx, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x40]
cmp rcx, rdx
jae 0x14006dc89
lea rax, [rcx + 1]
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x28]
cmp rdx, 0x10
cmovae rax, qword [rbp + 0x28]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14006dc92
lea rcx, [rbp + 0x28]
call fcn.14005a7a0
sub rbx, 1
jne 0x14006dc30
lea r8d, [rbx + 0x1e]
lea rdx, str.________FrezzyHook.com_______
lea rcx, [rbp + 0x28]
call fcn.140070df0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], send
mov byte [rax], bl
or edi, 4
mov dword [rbp + 0x20], edi
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x1a8]
lea rcx, [rbp + 0x188]
call fcn.140071eb0
or edi, 8
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x14006dd33
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006dd2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006dd2e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
and edi, 0xfffffffd
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x14006dd74
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006dd6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006dd6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], send
mov byte [rbp + 0x28], 0
and edi, 0xfffffffe
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14006ddc5
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ddc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006ddc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
lea rcx, [rbp + 0x188]
cmp qword [rbp + 0x1a0], 0x10
cmovae rcx, qword [rbp + 0x188]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov r8d, 0x104
lea rdx, [rbp + 0x4d0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
movups xmm0, xmmword [str.jJTS_WQa]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x1400856d8]
movsd qword [rsp + 0x70], xmm0
mov esi, 4
lea eax, [rsi + 0x1b]
mov r14d, dword [0x140091018]
cmp byte [0x1400856df], 0
je 0x14006dfb0
cmp r14d, 2
jl 0x14006df70
movdqa xmm5, xmmword [0x140085b80]
mov edx, r12d
movdqa xmm4, xmmword [0x140085c80]
movd xmm6, esi
movdqa xmm7, xmmword [0x140085ba0]
movd xmm8, eax
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x64]
mov r8d, dword [rsp + 0x40]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x18
jl 0x14006de73
jmp 0x14006dfb0
lea r9, [rsp + 0x60]
mov r8d, r12d
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, r8b
sub al, dl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x18
jl 0x14006df80
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], r12
lea rax, [rbp + 0x4d0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14006dfe1
lea rdx, [rbp + 0x4d0]
lea rcx, [rbp + 0x68]
call fcn.14005a6a0
nop
lea rdx, [rbp + 0x68]
mov r10, qword [rbp + 0x68]
mov r11, qword [rbp + 0x80]
cmp r11, 0x10
cmovae rdx, r10
mov r9, qword [rbp + 0x78]
test r9, r9
je 0x14006e048
lea rax, [r9 - 1]
mov rcx, 0xffffffffffffffff
cmp rax, rcx
cmovb rcx, rax
add rcx, rdx
cmp byte [rcx], 0x5c
je 0x14006e043
cmp rcx, rdx
je 0x14006e048
dec rcx
cmp byte [rcx], 0x5c
jne 0x14006e036
sub rcx, rdx
jmp 0x14006e04f
mov rcx, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x118], xmm1
lea rbx, [rcx + 1]
mov r8, rbx
cmp r9, rbx
cmovb r8, r9
lea rdx, [rbp + 0x68]
cmp r11, 0x10
cmovae rdx, r10
lea rcx, [rbp + 0x108]
call fcn.14005a6a0
or edi, 0x10
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], r12
mov qword [rbp + 0x180], r12
mov rax, qword [rbp + 0x78]
cmp rax, rbx
jb 0x140070691
sub rax, rbx
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rdx, qword [rbp + 0x68]
add rdx, rbx
lea rcx, [rbp + 0x168]
call fcn.14005a6a0
or edi, 0x20
mov edx, 0xa
lea rcx, [rbp + 0xa8]
call fcn.14006d7b0
nop
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0x108]
lea rcx, [rbp - 0x20]
call fcn.140071490
nop
mov r8, rsi
lea rdx, str..exe
mov rcx, rax
call fcn.140070df0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], send
mov byte [rax], 0
bts edi, 7
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14006e19d
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e198
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e198
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
movdqa xmm0, xmmword [0x140085b30]
movdqu xmmword [rbp - 0x10], xmm0
mov byte [rbp - 0x20], 0
lea rdx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae rdx, qword [rbp + 0xe8]
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
test eax, eax
je 0x14006e40e
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x14006e21e
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e219
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e219
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
movdqa xmm0, xmmword [0x140085b30]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x14006e279
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e274
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e274
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
mov qword [rbp + 0xb8], r12
mov qword [rbp + 0xc0], send
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp + 0x180]
cmp rdx, 0x10
jb 0x14006e2d7
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e2d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e2d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x14006e31b
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e316
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e316
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
movdqa xmm0, xmmword [0x140085b30]
movdqu xmmword [rbp + 0x118], xmm0
mov byte [rbp + 0x108], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x14006e373
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e36e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e36e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], send
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0x10
jb 0x14006e3ca
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e3c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e3c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
mov eax, 1
mov rcx, qword [rbp + 0x25e0]
xor rcx, rsp
call fcn.1400726c0
lea r11, [rsp + 0x2720]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
nop
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14006e42d
imul rax, rax, 0x64
jmp 0x14006e448
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rsi, 0x7ffffffff1194d7f
movabs r15, 0x7fffffffffffffff
cmp rax, rsi
jge 0x14006e46e
add rax, 0xee6b280
mov qword [rsp + 0x40], rax
jmp 0x14006e473
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.1400721c0
lea rcx, [rbp + 0x128]
call fcn.14006d880
nop
xor edx, edx
mov r8d, 0x118
lea rcx, [rbp + 0x210]
call fcn.1400736e4
lea rbx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rbx, qword [rbp + 0x108]
lea rax, [r13 + 0x858a0]
mov qword [rbp + 0x210], rax
lea rax, [0x140084cf8]
mov qword [rbp + 0x220], rax
lea rcx, [rbp + 0x2c8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
bts edi, 9
mov dword [rbp + 0x20], edi
xor r8d, r8d
lea rdx, [rbp + 0x228]
lea rcx, [rbp + 0x210]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_fstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x210], rdi
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb8]
mov dword [rbp + rcx + 0x20c], edx
lea rcx, [rbp + 0x228]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x228], rax
mov byte [rbp + 0x2a4], 0
mov byte [rbp + 0x299], 0
lea rcx, [rbp + 0x228]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x2a8], r12
mov rax, qword [0x1401bfab8]
mov qword [rbp + 0x29c], rax
mov qword [rbp + 0x290], r12
mov r8d, 0x23
mov rdx, rbx
lea rcx, [rbp + 0x228]
call fcn.140070ff0
test rax, rax
jne 0x14006e5bf
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x210]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x210], rdi
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb8]
mov dword [rbp + rcx + 0x20c], edx
xor r8d, r8d
mov edx, 0x1234
lea rcx, [rbp + 0x220]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::seekp_long_long___int64___int____ptr64]
lea rdx, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae rdx, qword [rbp + 0x128]
mov r8, qword [rbp + 0x138]
lea rcx, [rbp + 0x220]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rdx, str._nSpoofed_MD5_Hash:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
lea rdx, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae rdx, qword [rbp + 0x128]
mov r8, qword [rbp + 0x138]
mov rcx, rax
call fcn.14005ce90
lea rdx, [0x14005cdd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rax, r15
mov rcx, qword [rbp + 0x178]
sub rax, rcx
cmp rax, 0x11
jb 0x140070697
lea rax, [rbp + 0x168]
cmp qword [rbp + 0x180], 0x10
cmovae rax, qword [rbp + 0x168]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], send
lea r9, str.Old_Loader_Name:
lea rcx, [rbp + 0xc8]
call fcn.1400720a0
nop
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rdx, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xd8]
mov rcx, rbx
call fcn.14005ce90
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x14006e73a
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e735
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e735
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rax, r15
mov rcx, qword [rbp + 0xb8]
sub rax, rcx
cmp rax, 0x12
jb 0x14007069d
lea rax, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rax, qword [rbp + 0xa8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], send
lea r9, str._nNew_Loader_Name:
lea rcx, [rbp]
call fcn.1400720a0
nop
mov r13d, 4
mov r8d, r13d
lea rdx, str..exe
lea rcx, [rbp]
call fcn.140070df0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], send
mov byte [rax], 0
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
mov rcx, rbx
call fcn.14005ce90
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14006e83c
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e837
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e837
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
movdqa xmm0, xmmword [0x140085b30]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14006e88d
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006e888
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006e888
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14006e8ab
imul rax, rax, 0x64
jmp 0x14006e8c6
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
lea rcx, [rsp + 0x40]
cmp rax, rsi
jge 0x14006e8dd
add rax, 0xee6b280
mov qword [rsp + 0x40], rax
jmp 0x14006e8e2
mov qword [rsp + 0x40], r15
call fcn.1400721c0
movsd xmm0, qword [0x1400858b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movzx eax, byte [0x1400858b8]
movsd qword [rsp + 0x40], xmm0
mov byte [rsp + 0x40], 0xa
xor byte [rsp + 0x41], 0x3a
xor byte [rsp + 0x42], 0x3b
xor byte [rsp + 0x43], 0x3c
xor byte [rsp + 0x44], 0x3d
xor byte [rsp + 0x45], 0x3e
xor byte [rsp + 0x46], 0x3f
xor byte [rsp + 0x47], 0x40
xor al, 0x41
mov byte [rsp + 0x48], al
lea rdx, [rsp + 0x40]
call fcn.14005cbe0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14006e959
imul rax, rax, 0x64
jmp 0x14006e974
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rdi, 0x7fffffffc46535ff
cmp rax, rdi
jge 0x14006e990
add rax, 0x3b9aca00
mov qword [rsp + 0x40], rax
jmp 0x14006e995
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.1400721c0
lea rcx, [0x140084fb4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.ULRQQ____d]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x140085760]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x140085768]
mov dword [rsp + 0x78], eax
cmp byte [0x14008576b], 0
je 0x14006eb6c
mov ecx, r12d
cmp r14d, 2
jl 0x14006eb30
movdqa xmm5, xmmword [0x140085b80]
movdqa xmm4, xmmword [0x140085c80]
movd xmm6, r13d
movdqa xmm7, xmmword [0x140085ba0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x64]
mov r8d, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x18
jl 0x14006ea30
cmp ecx, 0x1c
jge 0x14006eb6c
movsxd rax, ecx
lea r8, [rsp + 0x60]
add r8, rax
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, cl
sub al, dl
add al, 0x39
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x1c
jl 0x14006eb40
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14006eb9b
imul rax, rax, 0x64
jmp 0x14006ebb6
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rsi
jge 0x14006ebc8
add rax, 0xee6b280
mov qword [rsp + 0x40], rax
jmp 0x14006ebcd
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.1400721c0
call fcn.1400628c0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14006ebfa
imul rax, rax, 0x64
jmp 0x14006ec15
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rsi
jge 0x14006ec27
add rax, 0xee6b280
mov qword [rsp + 0x40], rax
jmp 0x14006ec2c
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.1400721c0
mov rax, qword [str.3TRX]
mov qword [rsp + 0x40], rax
cmp byte [0x140085747], 0
je 0x14006eda0
cmp r14d, 2
jl 0x14006ed5f
movdqa xmm4, xmmword [0x140085c80]
movd xmm6, r13d
mov esi, 0x1f
movd xmm5, esi
movdqa xmm2, xmmword [0x140085b80]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140085ba0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
mov eax, dword [str.9999999999999999]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x40]
xorps xmm2, xmm1
movd dword [rsp + 0x40], xmm2
movdqa xmm3, xmmword [0x140085b90]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140085ba0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x44]
xorps xmm2, xmm1
movd dword [rsp + 0x44], xmm2
jmp 0x14006eda5
lea r9, [rsp + 0x40]
mov r8d, r12d
nop word [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, r8b
sub al, dl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14006ed70
mov esi, 0x1f
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14006edd4
imul rax, rax, 0x64
jmp 0x14006edef
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rdi
jge 0x14006ee01
add rax, 0x3b9aca00
mov qword [rsp + 0x40], rax
jmp 0x14006ee06
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.1400721c0
lea rcx, [0x140084fb4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.offsets.ini
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rbx, str.1.1.3
mov rdx, rbx
cmp qword [0x1401bba38], 0x10
cmovae rdx, qword [str.1.1.3]
lea rcx, [0x1401bba00]
cmp qword [0x1401bba18], 0x10
cmovae rcx, qword [0x1401bba00]
mov r8, qword [0x1401bba10]
cmp r8, qword [0x1401bba30]
jne 0x140070609
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140070609
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f8], xmm1
mov r8d, socket
lea rdx, str.FrezzyHook.com___Login
lea rcx, [rbp + 0x1e8]
call fcn.14005a6a0
nop
lea rcx, [rbp + 0x1e8]
cmp qword [rbp + 0x200], 0x10
cmovae rcx, qword [rbp + 0x1e8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], r12
mov qword [rbp + 0xa0], send
mov byte [rbp + 0x88], 0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], r12
mov qword [rbp + 0x160], send
mov byte [rbp + 0x148], 0
movups xmm0, xmmword [str.TOYO]
movups xmmword [rsp + 0x60], xmm0
movzx eax, byte [0x140085738]
mov byte [rsp + 0x70], al
mov ecx, r12d
cmp r14d, 2
jl 0x14006f080
movdqa xmm5, xmmword [0x140085b80]
movdqa xmm4, xmmword [0x140085c80]
movd xmm6, r13d
movdqa xmm7, xmmword [0x140085ba0]
movd xmm8, esi
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x64]
mov r8d, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x10
jl 0x14006ef80
cmp ecx, 0x11
jge 0x14006f0bc
movsxd rax, ecx
lea r8, [rsp + 0x60]
add r8, rax
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, cl
sub al, dl
add al, 0x39
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x11
jl 0x14006f090
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
lea rdx, [rbp + 0x88]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140071980
lea r9, [rbp + 0x88]
mov rsi, qword [rbp + 0xa0]
cmp rsi, 0x10
cmovae r9, qword [rbp + 0x88]
mov rax, qword [0x1401bbe38]
mov rdi, qword [rbp + 0x98]
cmp rdi, rax
ja 0x14006f13b
lea rbx, [0x1401bbe20]
cmp rax, 0x10
cmovae rbx, qword [0x1401bbe20]
mov qword [0x1401bbe30], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x14006f158
mov rdx, rdi
lea rcx, [0x1401bbe20]
call fcn.14005d690
mov rsi, qword [rbp + 0xa0]
mov rdi, qword [rbp + 0x98]
movups xmm0, xmmword [0x140085700]
movups xmmword [rsp + 0x60], xmm0
movzx eax, byte [0x140085710]
mov byte [rsp + 0x70], al
mov ecx, r12d
cmp r14d, 2
jl 0x14006f2c0
movdqa xmm5, xmmword [0x140085b80]
movdqa xmm4, xmmword [0x140085c80]
movd xmm6, r13d
movdqa xmm7, xmmword [0x140085ba0]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x64]
mov r8d, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x10
jl 0x14006f1c0
cmp ecx, 0x11
jge 0x14006f2fc
movsxd rax, ecx
lea r8, [rsp + 0x60]
add r8, rax
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, cl
sub al, dl
add al, 0x39
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x11
jl 0x14006f2d0
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
lea rdx, [rbp + 0x148]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140071980
lea r9, [rbp + 0x148]
cmp qword [rbp + 0x160], 0x10
cmovae r9, qword [rbp + 0x148]
mov rax, qword [0x1401bb9f8]
mov r14, qword [rbp + 0x158]
cmp r14, rax
ja 0x14006f379
lea rbx, [0x1401bb9e0]
cmp rax, 0x10
cmovae rbx, qword [0x1401bb9e0]
mov qword [0x1401bb9f0], r14
mov r8, r14
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + r14], 0
jmp 0x14006f388
mov rdx, r14
lea rcx, [0x1401bb9e0]
call fcn.14005d690
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x1c8]
call fcn.1400625e0
nop
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, str.Application
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r13, rax
test rax, rax
je 0x140070222
mov rcx, r15
sub rcx, rdi
cmp rcx, 0x29
jb 0x1400706a3
lea rax, [rbp + 0x88]
cmp rsi, 0x10
cmovae rax, qword [rbp + 0x88]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x29
lea r9, str.https:__frezzyhook.com_Auth.php_username
lea rcx, [rbp - 0x80]
call fcn.1400720a0
nop
mov r8d, 0xa
lea rdx, str.password
lea rcx, [rbp - 0x80]
call fcn.140070df0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], send
mov byte [rax], 0
lea rdx, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0x10
cmovae rdx, qword [rbp + 0x1c8]
mov r8, qword [rbp + 0x1d8]
lea rcx, [rsp + 0x40]
call fcn.140070df0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], send
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14006f4f3
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f4ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006f4ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
movdqa xmm0, xmmword [0x140085b30]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14006f544
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f53f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006f53f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rdx, qword [rbp + 0xc8]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r14, rax
test rax, rax
je 0x140070194
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov rbx, r12
mov qword [rbp + 0x58], rbx
mov esi, send
mov qword [rbp + 0x60], rsi
mov byte [rbp + 0x48], bl
lea r9, [rbp + 0x20]
mov r8d, 0x1000
lea rdx, [rbp + 0x5e0]
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14006f646
nop
mov eax, dword [rbp + 0x20]
test eax, eax
je 0x14006f646
mov edi, eax
mov rax, rsi
sub rax, rbx
cmp rdi, rax
ja 0x14006f604
lea rax, [rdi + rbx]
mov qword [rbp + 0x58], rax
lea rax, [rbp + 0x48]
cmp rsi, 0x10
cmovae rax, qword [rbp + 0x48]
add rbx, rax
mov r8d, edi
lea rdx, [rbp + 0x5e0]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x14006f61c
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x5e0]
mov rdx, rdi
lea rcx, [rbp + 0x48]
call fcn.140071b60
lea r9, [rbp + 0x20]
mov r8d, 0x1000
lea rdx, [rbp + 0x5e0]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetReadFile]
mov rsi, qword [rbp + 0x60]
mov rbx, qword [rbp + 0x58]
test eax, eax
jne 0x14006f5c0
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, [rbp + 0x48]
mov r12, qword [rbp + 0x48]
cmp rsi, 0x10
cmovae rcx, r12
cmp rbx, 7
jne 0x1400701dd
mov r8, rbx
lea rdx, str.success
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400701dd
lea rcx, [rbp + 0x188]
cmp qword [rbp + 0x1a0], 0x10
cmovae rcx, qword [rbp + 0x188]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [0x140084fb4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm0, xmmword [0x140085e30]
movdqu xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140085e40]
movdqu xmmword [rbp - 0x70], xmm1
mov dword [rbp - 0x60], 0xd3d2dbc2
mov dword [rbp - 0x5c], 0xd7d3dbd5
mov dword [rbp - 0x58], 0xb0a4a7d8
mov word [rbp - 0x54], 0x100
xor ecx, ecx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x69]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 0x2c
jb 0x14006f6f0
mov byte [rbp - 0x53], 0
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
mov rcx, qword [rbp + 0x98]
sub r15, rcx
cmp r15, 0x2f
jb 0x14007068b
lea rax, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae rax, qword [rbp + 0x88]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x2f
lea r9, str.https:__frezzyhook.com_UserLegend.php_username
lea rcx, [rbp + 0x1a8]
call fcn.1400720a0
nop
lea rdx, [rbp + 0x1a8]
cmp qword [rbp + 0x1c0], 0x10
cmovae rdx, qword [rbp + 0x1a8]
xor r15d, r15d
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r14, rax
test rax, rax
je 0x140070111
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r15
mov qword [rbp + 0x40], send
mov byte [rbp + 0x28], r15b
lea r9, [rbp + 0x24]
mov r8d, 0x1000
lea rdx, [rbp + 0x15e0]
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14006f866
nop dword [rax + rax]
mov eax, dword [rbp + 0x24]
test eax, eax
je 0x14006f866
mov edi, eax
mov rcx, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x40]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x14006f82c
lea rax, [rcx + rdi]
mov qword [rbp + 0x38], rax
lea rbx, [rbp + 0x28]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 0x28]
add rbx, rcx
mov r8d, edi
lea rdx, [rbp + 0x15e0]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x14006f844
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x15e0]
mov rdx, rdi
lea rcx, [rbp + 0x28]
call fcn.140071b60
lea r9, [rbp + 0x24]
mov r8d, 0x1000
lea rdx, [rbp + 0x15e0]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x14006f7e0
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, [rbp + 0x28]
mov rbx, qword [rbp + 0x28]
mov rdi, qword [rbp + 0x40]
cmp rdi, 0x10
cmovae rcx, rbx
mov r14, qword [rbp + 0x38]
cmp r14, 0xe
jne 0x14006f8a0
mov r8, r14
lea rdx, str.Administrators
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14006f8dd
lea rcx, [rbp + 0x28]
cmp rdi, 0x10
cmovae rcx, rbx
cmp r14, 9
jne 0x14006f8c5
mov r8, r14
lea rdx, str.Moderator
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14006f8dd
lea rdx, [0x1400851e4]
lea rcx, [rbp + 0x28]
call fcn.1400123c0
test al, al
je 0x1400700d6
movdqa xmm0, xmmword [0x140085e30]
movdqu xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140085e40]
movdqu xmmword [rbp - 0x70], xmm1
mov dword [rbp - 0x60], 0xd3d2dbc2
mov dword [rbp - 0x5c], 0xd7d3dbd5
mov dword [rbp - 0x58], 0xb0a4a7d8
mov word [rbp - 0x54], 0x100
mov rcx, r15
nop word [rax + rax]
lea eax, [rcx - 0x69]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 0x2c
jb 0x14006f920
mov byte [rbp - 0x53], 0
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_GlobalFindAtomA]
test ax, ax
jne 0x14006f965
xor r9d, r9d
lea r8, str.Reverser_Detected
lea rdx, str.Nice_Try_Retard
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movsd xmm0, qword [str.n_W_RSZ___eF]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140085778]
mov dword [rsp + 0x48], eax
movzx eax, word [0x14008577c]
mov word [rsp + 0x4c], ax
cmp byte [0x14008577d], 0
je 0x14006faee
mov ecx, r15d
cmp dword [0x140091018], 2
jl 0x14006fab5
movdqa xmm4, xmmword [0x140085c80]
mov eax, 4
movd xmm6, eax
mov eax, 0x1f
movd xmm5, eax
movdqa xmm2, xmmword [0x140085b80]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140085ba0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
mov eax, dword [str.9999999999999999]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.n_W_RSZ___eF]
xorps xmm2, xmm0
movd dword [rsp + 0x40], xmm2
movdqa xmm3, xmmword [0x140085b90]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140085ba0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085be0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x44]
xorps xmm2, xmm1
movd dword [rsp + 0x44], xmm2
mov ecx, 8
movsxd rax, ecx
lea r9, [rsp + 0x40]
add r9, rax
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x34
movzx eax, cl
sub al, r8b
add al, 0x39
xor byte [r9], al
inc ecx
lea r9, [r9 + 1]
cmp ecx, 0xe
jl 0x14006fac0
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
lea rdx, [0x1401bbe20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cdb0
lea rdx, [0x14005cdd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, dword [str.HTIM]
mov dword [rsp + 0x40], eax
movzx edx, word [0x1400858ac]
mov word [rsp + 0x44], dx
movzx eax, byte [0x1400858ae]
mov byte [rsp + 0x40], 0x47
xor byte [rsp + 0x41], 0x3a
xor byte [rsp + 0x42], 0x3b
xor byte [rsp + 0x43], 0x3c
xor dl, 0x3d
mov byte [rsp + 0x44], dl
xor byte [rsp + 0x45], 0x3e
xor al, 0x3f
mov byte [rsp + 0x46], al
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
lea rdx, [rbp + 0x28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cdb0
lea rdx, [0x14005cdd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movsd xmm0, qword [str.3lNNWP.bC]
movsd qword [rsp + 0x40], xmm0
movzx edx, word [0x140085720]
mov word [rsp + 0x48], dx
movzx eax, byte [0x140085722]
mov byte [rsp + 0x40], 0xa
xor byte [rsp + 0x41], 0x3a
xor byte [rsp + 0x42], 0x3b
xor byte [rsp + 0x43], 0x3c
xor byte [rsp + 0x44], 0x3d
xor byte [rsp + 0x45], 0x3e
xor byte [rsp + 0x46], 0x3f
xor byte [rsp + 0x47], 0x40
xor dl, 0x41
mov byte [rsp + 0x48], dl
xor byte [rsp + 0x49], 0x42
xor al, 0x43
mov byte [rsp + 0x4a], al
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
cmp qword [0x1401bba38], 0x10
lea rdx, str.1.1.3
cmovae rdx, qword [str.1.1.3]
mov r8, qword [0x1401bba30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005ce90
lea rdx, [0x14005cdd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movsd xmm0, qword [str.jNZHHM]
movsd qword [rsp + 0x40], xmm0
movzx eax, byte [0x1400856f8]
mov byte [rsp + 0x40], 0x53
xor byte [rsp + 0x41], 0x3a
xor byte [rsp + 0x42], 0x3b
xor byte [rsp + 0x43], 0x3c
xor byte [rsp + 0x44], 0x3d
xor byte [rsp + 0x45], 0x3e
xor byte [rsp + 0x46], 0x3f
xor byte [rsp + 0x47], 0x40
xor al, 0x41
mov byte [rsp + 0x48], al
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
lea rdx, [0x1401bb9c0]
cmp qword [0x1401bb9d8], 0x10
cmovae rdx, qword [0x1401bb9c0]
mov r8, qword [0x1401bb9d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005ce90
lea rdx, [0x14005cdd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x40], 0xb4abebf4
mov dword [rsp + 0x44], 0xf8e4fe
mov byte [rsp + 0x48], 1
mov rcx, r15
nop dword [rax]
lea eax, [rcx - 0x69]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 7
jb 0x14006fcf0
mov byte [rsp + 0x48], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rax, [rsp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14006fd22
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.14005a6a0
lea rcx, [rsp + 0x60]
call fcn.1400122b0
mov ebx, eax
mov r8, qword [rsp + 0x78]
cmp r8, 0x10
jb 0x14006fd5f
inc r8
mov rdx, qword [rsp + 0x60]
call fcn.140055ae0
test ebx, ebx
jne 0x14006fe71
nop word [rax + rax]
mov dword [rsp + 0x40], 0xb4abebf4
mov dword [rsp + 0x44], 0xf8e4fe
mov byte [rsp + 0x48], 1
mov rax, r15
nop dword [rax + rax]
lea ecx, [rax - 0x69]
xor byte [rsp + rax + 0x40], cl
inc rax
cmp rax, 7
jb 0x14006fd90
mov byte [rsp + 0x48], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
lea rax, [rsp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14006fdc3
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.14005a6a0
lea rcx, [rsp + 0x60]
call fcn.1400122b0
mov ebx, eax
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14006fe21
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006fe1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006fe6a
call fcn.1400727b0
test ebx, ebx
jne 0x14006fe71
call fcn.140064120
lea rcx, [0x140084fb4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Game_not_found._Waiting_for_it_to_start...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
lea rdx, [0x14005cdd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14006fd70
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rsp + 0x40], 0xb4abebf4
mov dword [rsp + 0x44], 0xf8e4fe
mov byte [rsp + 0x48], 1
lea rcx, [rsp + 0x40]
call fcn.140066fa0
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140055680
lea rcx, [rbp - 0x80]
call fcn.1400122b0
mov ebx, eax
lea rcx, [rbp - 0x80]
call fcn.140055620
test ebx, ebx
je 0x14006fec6
call fcn.140064120
lea rcx, [0x140084fb4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x202
lea rdx, [rbp + 0x330]
call qword [sym.imp.WS2_32.dll_WSAStartup]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140012130
mov qword [0x1401bcbb0], rax
cmp rax, 0xffffffffffffffff
jne 0x14006ff04
call fcn.140062280
call fcn.140064120
jmp 0x1400700a3
call fcn.140064120
lea rcx, [0x140084fb4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rsp + 0x40], 0xb4abebf4
mov dword [rsp + 0x44], 0xf8e4fe
mov byte [rsp + 0x48], 1
lea rcx, [rsp + 0x40]
call fcn.140066fa0
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140055680
lea rcx, [rbp - 0x80]
call fcn.1400122b0
mov dword [0x1401bcba0], eax
lea rcx, [rbp - 0x80]
call fcn.140055620
call fcn.1400121e0
mov qword [0x1401bcb98], rax
movdqa xmm0, xmmword [0x140085ed0]
movdqu xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140085ce0]
movdqu xmmword [rbp - 0x70], xmm1
mov dword [rbp - 0x60], 0xc0dccaf1
mov dword [rbp - 0x5c], 0xd1f5c5c1
mov dword [rbp - 0x58], 0xa1efabd0
mov dword [rbp - 0x54], 0x100a9ac
lea rcx, [rbp - 0x80]
call fcn.1400706b0
mov rcx, rax
call fcn.1400125d0
movdqa xmm0, xmmword [0x140085cd0]
movdqu xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140085cf0]
movdqu xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x140085ee0]
movdqu xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x140085f00]
movdqu xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x140085e00]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0xc7c4c5ca
mov dword [rbp - 0x2c], 0xc3c0c1c6
mov dword [rbp - 0x28], 0xfbddc2
mov byte [rbp - 0x24], 1
lea rcx, [rbp - 0x80]
call fcn.1400706e0
mov rcx, rax
call fcn.1400125d0
movdqa xmm0, xmmword [0x140085d70]
movdqu xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140085e60]
movdqu xmmword [rbp - 0x70], xmm1
mov dword [rbp - 0x60], 0xd5df98c5
mov dword [rbp - 0x5c], 0x84d9d2ce
mov dword [rbp - 0x58], 0xc8b4e59f
mov word [rbp - 0x54], 0x100
lea rcx, [rbp - 0x80]
call fcn.140064850
mov rdx, qword [0x1401bcb98]
mov rcx, rax
call fcn.1400125d0
movdqa xmm0, xmmword [0x140085ec0]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x70], 0xdac590ca
mov dword [rsp + 0x74], 0xd595c7da
mov dword [rsp + 0x78], 0xb098dcda
mov word [rsp + 0x7c], 0x100
lea rcx, [rsp + 0x60]
call fcn.14005ed30
mov rcx, rax
call fcn.1400125d0
call qword [sym.imp.KERNEL32.dll_FreeConsole]
call fcn.14006d050
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
test rax, rax
je 0x1400700ce
mov rcx, rax
call fcn.14006d950
mov rcx, rbx
call fcn.14006d9f0
mov rbx, qword [rbp + 0x28]
mov rdi, qword [rbp + 0x40]
cmp rdi, 0x10
jb 0x140070111
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140070108
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070108
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400727b0
nop
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x140070156
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070150
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070150
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
nop
cmp rsi, 0x10
jb 0x140070191
lea rdx, [rsi + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140070189
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070189
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1400727b0
xor r12d, r12d
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x14007021b
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070216
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070216
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rdx, str._nWrong_credentials._n_nMake_sure_your_username_and_password_is_correct.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
mov dword [rbp + 0x24], 3
lea rdx, [rbp + 0x24]
lea rcx, [rsp + 0x40]
call fcn.1400618f0
mov rcx, rax
call fcn.140071880
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.1400727b0
mov rsi, qword [rbp + 0xa0]
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x140070266
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070261
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070261
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
mov qword [rbp + 0x1d8], r12
mov qword [rbp + 0x1e0], send
mov byte [rbp + 0x1c8], 0
mov rdx, qword [rbp + 0x160]
cmp rdx, 0x10
jb 0x1400702c4
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400702be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400702be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
nop
cmp rsi, 0x10
jb 0x140070303
lea rdx, [rsi + 1]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400702fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400702fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
nop
mov rdx, qword [rbp + 0x200]
cmp rdx, 0x10
jb 0x140070347
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070342
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070342
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
movdqa xmm0, xmmword [0x140085b30]
movdqu xmmword [rbp + 0x1f8], xmm0
mov byte [rbp + 0x1e8], 0
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_fstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x210], rax
mov rax, qword [rbp + 0x210]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb8]
mov dword [rbp + rcx + 0x20c], edx
lea rcx, [rbp + 0x228]
call fcn.140055090
lea rcx, [rbp + 0x230]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x1400703fb
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400703f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400703f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
movdqa xmm0, xmmword [0x140085b30]
movdqu xmmword [rbp + 0x138], xmm0
mov byte [rbp + 0x128], 0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x140070456
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070451
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070451
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
movdqa xmm0, xmmword [0x140085b30]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x1400704b1
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400704ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400704ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
mov qword [rbp + 0xb8], r12
mov qword [rbp + 0xc0], send
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp + 0x180]
cmp rdx, 0x10
jb 0x14007050f
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070509
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140070509
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
nop
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x140070553
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007054e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007054e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
movdqa xmm0, xmmword [0x140085b30]
movdqu xmmword [rbp + 0x118], xmm0
mov byte [rbp + 0x108], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x1400705ab
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400705a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400705a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
mov qword [rbp + 0x78], r12
mov qword [rbp + 0x80], send
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0x10
jb 0x140070602
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400705fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400705fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400727b0
xor eax, eax
jmp 0x14006e3cf
lea rcx, [0x140084fb4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loader_is_outdated._n_nCurrent_version:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14005cbe0
mov rcx, rax
mov rdx, rbx
call fcn.14005cdb0
mov rcx, rax
lea rdx, str._nNew_version_available:
call fcn.14005cbe0
mov rcx, rax
lea rdx, [0x1401bba00]
call fcn.14005cdb0
lea rdx, [0x14005cdd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x24], 5
lea rdx, [rbp + 0x24]
lea rcx, [rsp + 0x40]
call fcn.1400618f0
mov rcx, rax
call fcn.140071880
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.14004c9c0
nop
call fcn.140055b50
nop
call fcn.14004c9c0
int3
call fcn.14004c9c0
nop
call fcn.14004c9c0
int3