Function at 0x140025e10
Capabilities:
Create thread
Delete file
Encode data using xor
Enumerate processes
Execute command
Schedule task via at
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r13
push rbp
push r14
push r15
lea rbp, [rax - 0x3e8]
sub rsp, 0x4d0
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
movaps xmmword [rax - 0xb8], xmm15
mov rax, qword [0x140114480]
xor rax, rsp
mov qword [rbp + 0x320], rax
xor edi, edi
mov dword [rbp + 0x70], edi
call fcn.140012970
call fcn.14000fad0
call fcn.140014e00
call fcn.14000ff60
call fcn.140014e00
lea rcx, [0x140115390]
call fcn.140086950
cmp byte [0x1401155c0], dil
jne 0x140025f01
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.14000f390
movzx edx, byte [rax + 1]
test dl, dl
je 0x140025edb
xor byte [rax], 0x35
xor dl, 0x36
mov byte [rax + 1], dl
mov rdx, rax
mov rcx, r8
call fcn.140002990
mov rcx, rax
lea rdx, [0x1401155c8]
call fcn.140002730
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [str.VZD8VZD8qYY_]
mov dword [rbp + 0x70], eax
movdqa xmm8, xmmword [0x1400e8300]
movdqa xmm10, xmmword [str.5555555555555555]
movdqa xmm9, xmmword [str.1111]
movdqa xmm7, xmmword [0x1400e8370]
movdqa xmm6, xmmword [0x1400e8240]
mov r15d, dword [reloc.WS2_32.dll_accept]
cmp byte [0x1400e663f], dil
je 0x140025fe9
mov r8d, edi
cmp r15d, 2
jl 0x140025faf
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x70], xmm1
jmp 0x140025fe9
lea r9, [rbp + 0x70]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140025fc0
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rbp + 0x70], dil
lea rcx, [rbp + 0x70]
call fcn.140028e50
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Connecting_To_Servers
lea rcx, [rbp - 0x38]
call fcn.1400030e0
nop
mov qword [rbp + 0x70], 0xa
lea rbx, [rbp - 0x38]
mov rsi, qword [rbp - 0x38]
mov r13, qword [rbp - 0x20]
cmp r13, 0xf
cmova rbx, rsi
lea r14, [rbp - 0x38]
cmova r14, rsi
add r14, qword [rbp - 0x28]
cmp rbx, r14
je 0x140026090
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002750
lea rdx, [0x140007c20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x70]
call fcn.14000be40
inc rbx
cmp rbx, r14
jne 0x140026060
cmp r13, 0xf
jbe 0x1400260c7
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400260bf
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027c83
mov rcx, rsi
call fcn.1400de37c
lea rcx, [0x140115390]
call fcn.14007ed10
lea rcx, [0x140115390]
call fcn.14007ed10
mov eax, dword [0x1400e6640]
mov dword [rbp + 0x70], eax
cmp byte [0x1400e6643], 0
je 0x140026189
mov r8d, edi
cmp r15d, 2
jl 0x14002615b
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x70], xmm1
jmp 0x140026189
lea r9, [rbp + 0x70]
nop
mov eax, 0x5397829d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140026160
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rbp + 0x70], 0
lea rcx, [rbp + 0x70]
call fcn.140028e50
mov eax, dword [0x1400e6644]
mov dword [rbp + 0x70], eax
movzx eax, word [0x1400e6648]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov word [rbp + 0x74], ax
mov byte [rbp + 0x70], 0x44
xor byte [rbp + 0x71], 0x36
xor byte [rbp + 0x72], 0x37
xor byte [rbp + 0x73], 0x38
xor byte [rbp + 0x74], 0x39
xor byte [rbp + 0x75], 0x3a
lea rdx, [rbp + 0x70]
call fcn.140002990
lea rdx, [0x140007c20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [0x1400e6810]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140115390]
call fcn.14007fa70
lea rcx, [0x140115390]
call fcn.14007fa70
lea rcx, [rbp + 0x70]
test al, al
je 0x1400263e1
lea rdx, [rbp + 0x70]
call fcn.14000f2a0
movzx ecx, byte [rax]
test cl, cl
je 0x140026232
xor cl, 0x35
mov byte [rax], cl
mov rcx, rax
call fcn.140028e50
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x70]
call fcn.14000f590
mov r9, rax
cmp byte [rax + 0xe], 0
je 0x1400263bd
cmp r15d, 2
jl 0x140026383
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm6, xmm0
andps xmm6, xmm8
packuswb xmm6, xmm6
packuswb xmm6, xmm6
paddb xmm6, xmm10
movd xmm0, dword [rax]
xorps xmm6, xmm0
movd dword [rax], xmm6
movdqa xmm2, xmmword [0x1400e8250]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm10
movd xmm0, dword [rax + 4]
xorps xmm2, xmm0
movd dword [rax + 4], xmm2
movdqa xmm3, xmmword [0x1400e8260]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm7
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm3, xmm0
andps xmm3, xmm8
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm10
movd xmm0, dword [rax + 8]
xorps xmm3, xmm0
movd dword [rax + 8], xmm3
mov edi, ntohl
mov r8d, edi
add r8, r9
nop dword [rax]
mov eax, 0x5397829d
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, dil
sub al, dl
add al, 0x35
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 0xf
jl 0x140026390
mov rdx, r9
mov rcx, r10
call fcn.140002990
lea rdx, [0x140007c20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [rbp + 0x70], 0
call fcn.140028e50
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Enter_Your_License:
lea rcx, [rbp - 0x18]
call fcn.1400030e0
nop
mov qword [rbp + 0x70], 0xa
lea rbx, [rbp - 0x18]
mov rsi, qword [rbp - 0x18]
mov r13, qword [rbp]
cmp r13, 0xf
cmova rbx, rsi
lea rcx, [rbp - 0x18]
cmova rcx, rsi
mov r14, qword [rbp - 8]
add r14, rcx
cmp rbx, r14
je 0x140026470
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002750
lea rdx, [0x140007c20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x70]
call fcn.14000be40
inc rbx
cmp rbx, r14
jne 0x140026440
cmp r13, 0xf
jbe 0x1400264a7
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14002649f
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002685b
mov rcx, rsi
call fcn.1400de37c
lea rcx, [0x140115390]
call fcn.14007ed10
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xc0], 0
lea rdx, [rbp + 0xc0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400024e0
lea rdx, [rbp + 0xc0]
lea rcx, [rsp + 0x40]
call fcn.14000cac0
mov rdx, rax
lea rcx, [0x140115390]
call fcn.1400888b0
call fcn.14000fad0
call fcn.140014e00
call fcn.14000ff60
call fcn.140014e00
cmp byte [0x1401155c0], 0
jne 0x140026648
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.14000f260
mov r9, rax
cmp byte [rax + 3], 0
je 0x1400265d6
cmp r15d, 2
jl 0x1400265a2
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm6, xmm0
andps xmm6, xmm8
packuswb xmm6, xmm6
packuswb xmm6, xmm6
paddb xmm6, xmm10
movd xmm0, dword [rax]
xorps xmm6, xmm0
movd dword [rax], xmm6
jmp 0x1400265d6
mov r8, r9
nop word [rax + rax]
mov eax, 0x5397829d
mul edi
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, dil
sub al, cl
add al, 0x35
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 4
jl 0x1400265b0
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.14000f2a0
movzx ecx, byte [rax]
test cl, cl
je 0x1400265f8
xor cl, 0x35
mov byte [rax], cl
mov rcx, rax
call fcn.140028e50
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.14000f2f0
movzx edx, byte [rax + 1]
test dl, dl
je 0x140026625
xor byte [rax], 0x35
xor dl, 0x36
mov byte [rax + 1], dl
mov rdx, rax
mov rcx, r8
call fcn.140002990
mov rcx, rax
lea rdx, [0x1401155c8]
call fcn.140002730
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xe0]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x1400e5ef8]
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0x188]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rbp + 0x70], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0xe0]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xe0], rbx
mov rax, qword [rbp + 0xe0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xdc], edx
lea rcx, [rbp + 0xe8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0xe8], rax
mov byte [rbp + 0x164], 0
mov byte [rbp + 0x159], 0
lea rcx, [rbp + 0xe8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x168], rdi
mov rax, qword [0x140115740]
mov qword [rbp + 0x15c], rax
mov qword [rbp + 0x150], rdi
mov r9d, 0x40
mov r8d, 2
lea rdx, str.key.txt
lea rcx, [rbp + 0xe8]
call fcn.14001f020
xor r8d, r8d
test rax, rax
mov rax, qword [rbp + 0xe0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xe0]
je 0x140026764
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x140026772
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rdx, qword [rbp + 0xc0]
mov r8, qword [rbp + 0xd0]
lea rcx, [rbp + 0xe0]
call fcn.140005440
lea rcx, [rbp + 0xe8]
call fcn.140017c20
test rax, rax
jne 0x1400267d1
mov rax, qword [rbp + 0xe0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xe0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0xe0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0xe0], rbx
mov rax, qword [rbp + 0xe0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xdc], edx
lea rcx, [rbp + 0xe8]
call fcn.14000db60
lea rcx, [rbp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x188]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140026867
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140026862
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140026862
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400de37c
cmp byte [0x1401155c0], 0
jne 0x1400268de
call fcn.140014ee0
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.14000f2a0
movzx ecx, byte [rax]
test cl, cl
je 0x14002688e
xor cl, 0x35
mov byte [rax], cl
mov rcx, rax
call fcn.140028e50
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.14000f320
movzx edx, byte [rax + 1]
test dl, dl
je 0x1400268bb
xor byte [rax], 0x35
xor dl, 0x36
mov byte [rax + 1], dl
mov rdx, rax
mov rcx, r8
call fcn.140002990
mov rcx, rax
lea rdx, [0x1401155c8]
call fcn.140002730
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x140115390]
call fcn.14007ed10
mov byte [rbp + 0x70], 0
lea rcx, [rbp + 0x70]
call fcn.140028e50
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Found_Active_License
lea rcx, [rbp + 8]
call fcn.1400030e0
nop
mov qword [rbp + 0x70], 0xa
lea rbx, [rbp + 8]
mov rsi, qword [rbp + 8]
mov r13, qword [rbp + 0x20]
cmp r13, 0xf
cmova rbx, rsi
lea rcx, [rbp + 8]
cmova rcx, rsi
mov r14, qword [rbp + 0x18]
add r14, rcx
cmp rbx, r14
je 0x140026980
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002750
lea rdx, [0x140007c20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x70]
call fcn.14000be40
inc rbx
cmp rbx, r14
jne 0x140026950
cmp r13, 0xf
jbe 0x1400269b7
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400269af
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027c83
mov rcx, rsi
call fcn.1400de37c
mov eax, dword [str.VZD8_]
mov dword [rbp + 0x70], eax
cmp byte [0x1400e666f], 0
je 0x140026a69
mov r8d, edi
cmp r15d, 2
jl 0x140026a33
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x70], xmm1
jmp 0x140026a69
lea r9, [rbp + 0x70]
nop word [rax + rax]
mov eax, 0x5397829d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140026a40
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rbp + 0x90], 0xa
movdqa xmm11, xmmword [0x1400e8270]
movdqa xmm12, xmmword [0x1400e8260]
movdqa xmm13, xmmword [0x1400e8250]
movdqa xmm15, xmmword [0x1400e8290]
movdqa xmm14, xmmword [0x1400e8280]
nop dword [rax + rax]
call fcn.14000fad0
call fcn.140014e00
call fcn.14000ff60
call fcn.140014e00
movups xmm2, xmmword [0x1400e6670]
movups xmmword [rbp + 0x70], xmm2
movsd xmm0, qword [0x1400e6680]
movsd qword [rbp + 0x80], xmm0
movzx eax, byte [0x1400e6688]
mov byte [rbp + 0x88], al
mov r8d, edi
cmp r15d, 2
jl 0x140026d66
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm10
movd xmm0, ecx
paddb xmm1, xmm0
movd eax, xmm2
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x70], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm7
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm13
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x74]
xorps xmm2, xmm1
movd dword [rbp + 0x74], xmm2
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm7
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm12
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x78]
xorps xmm2, xmm1
movd dword [rbp + 0x78], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x7c]
xorps xmm2, xmm1
movd dword [rbp + 0x7c], xmm2
movdqa xmm1, xmm14
punpckldq xmm1, xmm14
pmuldq xmm1, xmm7
movdqa xmm0, xmm14
punpckhdq xmm0, xmm14
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm14
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x80]
xorps xmm2, xmm1
movd dword [rbp + 0x80], xmm2
movdqa xmm1, xmm15
punpckldq xmm1, xmm15
pmuldq xmm1, xmm7
movdqa xmm0, xmm15
punpckhdq xmm0, xmm15
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm15
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x84]
xorps xmm2, xmm1
movd dword [rbp + 0x84], xmm2
mov r8d, Ordinal_26
mov eax, r8d
lea r9, [rbp + 0x70]
add r9, rax
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x140026d70
lea rcx, [rbp + 0x70]
call fcn.140028e50
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rdi
mov r8d, Ordinal_33
lea rdx, str._Load_Driver__Close_Game_First_
lea rcx, [rsp + 0x68]
call fcn.1400030e0
nop
lea rbx, [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
mov r13, qword [rbp - 0x80]
cmp r13, 0xf
cmova rbx, rsi
lea rcx, [rsp + 0x68]
cmova rcx, rsi
mov r14, qword [rsp + 0x78]
add r14, rcx
cmp rbx, r14
je 0x140026e33
nop
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002750
lea rdx, [0x140007c20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x90]
call fcn.14000be40
inc rbx
cmp rbx, r14
jne 0x140026e00
cmp r13, 0xf
jbe 0x140026e6a
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140026e62
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027c83
mov rcx, rsi
call fcn.1400de37c
movups xmm2, xmmword [0x1400e6690]
movups xmmword [rbp + 0x70], xmm2
movsd xmm0, qword [0x1400e66a0]
movsd qword [rbp + 0x80], xmm0
movzx eax, byte [0x1400e66a8]
mov byte [rbp + 0x88], al
mov r8d, edi
cmp r15d, 2
jl 0x14002710c
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm10
movd xmm0, ecx
paddb xmm1, xmm0
movd eax, xmm2
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x70], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm7
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm13
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x74]
xorps xmm2, xmm1
movd dword [rbp + 0x74], xmm2
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm7
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm12
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x78]
xorps xmm2, xmm1
movd dword [rbp + 0x78], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x7c]
xorps xmm2, xmm1
movd dword [rbp + 0x7c], xmm2
movdqa xmm1, xmm14
punpckldq xmm1, xmm14
pmuldq xmm1, xmm7
movdqa xmm0, xmm14
punpckhdq xmm0, xmm14
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm14
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x80]
xorps xmm2, xmm1
movd dword [rbp + 0x80], xmm2
movdqa xmm1, xmm15
punpckldq xmm1, xmm15
pmuldq xmm1, xmm7
movdqa xmm0, xmm15
punpckhdq xmm0, xmm15
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm15
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x84]
xorps xmm2, xmm1
movd dword [rbp + 0x84], xmm2
mov r8d, Ordinal_26
mov eax, r8d
lea r9, [rbp + 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x140027120
lea rcx, [rbp + 0x70]
call fcn.140028e50
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], rdi
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str._Inject_Orqur
lea rcx, [rbp - 0x78]
call fcn.1400030e0
nop
mov qword [rbp + 0x70], 0xa
lea rbx, [rbp - 0x78]
mov rsi, qword [rbp - 0x78]
mov r13, qword [rbp - 0x60]
cmp r13, 0xf
cmova rbx, rsi
lea rcx, [rbp - 0x78]
cmova rcx, rsi
mov r14, qword [rbp - 0x68]
add r14, rcx
cmp rbx, r14
je 0x1400271e0
nop
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002750
lea rdx, [0x140007c20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x70]
call fcn.14000be40
inc rbx
cmp rbx, r14
jne 0x1400271b0
cmp r13, 0xf
jbe 0x140027217
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14002720f
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027c83
mov rcx, rsi
call fcn.1400de37c
movups xmm2, xmmword [0x1400e66b0]
movups xmmword [rbp + 0x70], xmm2
movsd xmm0, qword [0x1400e66c0]
movsd qword [rbp + 0x80], xmm0
movzx eax, byte [0x1400e66c8]
mov byte [rbp + 0x88], al
mov r8d, edi
cmp r15d, 2
jl 0x1400274b9
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm10
movd xmm0, ecx
paddb xmm1, xmm0
movd eax, xmm2
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x70], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm7
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm13
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x74]
xorps xmm2, xmm1
movd dword [rbp + 0x74], xmm2
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm7
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm12
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x78]
xorps xmm2, xmm1
movd dword [rbp + 0x78], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x7c]
xorps xmm2, xmm1
movd dword [rbp + 0x7c], xmm2
movdqa xmm1, xmm14
punpckldq xmm1, xmm14
pmuldq xmm1, xmm7
movdqa xmm0, xmm14
punpckhdq xmm0, xmm14
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm14
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x80]
xorps xmm2, xmm1
movd dword [rbp + 0x80], xmm2
movdqa xmm1, xmm15
punpckldq xmm1, xmm15
pmuldq xmm1, xmm7
movdqa xmm0, xmm15
punpckhdq xmm0, xmm15
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm15
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x84]
xorps xmm2, xmm1
movd dword [rbp + 0x84], xmm2
mov r8d, Ordinal_26
mov eax, r8d
lea r9, [rbp + 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x1400274d0
lea rcx, [rbp + 0x70]
call fcn.140028e50
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x40], rdi
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str._Your_choice:
lea rcx, [rbp - 0x58]
call fcn.1400030e0
nop
mov qword [rbp + 0x70], 0xa
lea rbx, [rbp - 0x58]
mov rsi, qword [rbp - 0x58]
mov r13, qword [rbp - 0x40]
cmp r13, 0xf
cmova rbx, rsi
lea rcx, [rbp - 0x58]
cmova rcx, rsi
mov r14, qword [rbp - 0x48]
add r14, rcx
cmp rbx, r14
je 0x140027590
nop
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002750
lea rdx, [0x140007c20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x70]
call fcn.14000be40
inc rbx
cmp rbx, r14
jne 0x140027560
cmp r13, 0xf
jbe 0x1400275c7
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400275bf
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027c83
mov rcx, rsi
call fcn.1400de37c
lea rdx, [rbp + 0xb0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 0xb0]
cmp eax, 1
jne 0x140027a1e
call fcn.14000fad0
call fcn.140014e00
call fcn.14000ff60
call fcn.140014e00
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:Usersdriver.sys
lea rcx, [rsp + 0x40]
call fcn.1400030e0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], rdi
xor r8d, r8d
lea rdx, [0x1400e56c2]
lea rcx, [rbp + 0x70]
call fcn.1400030e0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x70]
call fcn.1400122e0
movzx ebx, al
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x1400276a0
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002769b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027c8a
call fcn.1400de37c
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400276f3
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400276ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027c91
call fcn.1400de37c
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.C:Usersmapper.exe
lea rcx, [rsp + 0x40]
call fcn.1400030e0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], rdi
xor r8d, r8d
lea rdx, [0x1400e56c2]
lea rcx, [rbp + 0x70]
call fcn.1400030e0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x70]
call fcn.1400122e0
and bl, al
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x140027794
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002778f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027c98
call fcn.1400de37c
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400277e7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400277e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140027c9f
call fcn.1400de37c
test bl, bl
jne 0x140027803
lea rdx, str.Error_downloading_files._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002990
jmp 0x140026ab0
lea rcx, str.C:Usersmapper.exe_C:Usersdriver.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Usersdriver.sys
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, str.C:Usersmapper.exe
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [0x1400e6810]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str..QuantumVortex64
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x140115320], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x140027a18
mov eax, dword [str.VZD8VZD8]
mov dword [rbp + 0x70], eax
cmp byte [0x1400e66cf], 0
je 0x140027929
mov r8d, edi
cmp r15d, 2
jl 0x1400278f5
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x70], xmm1
jmp 0x140027929
lea r9, [rbp + 0x70]
nop dword [rax]
mov eax, 0x5397829d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140027900
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Driver_Error_Contact_Support.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002990
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x1400e66d0]
mov dword [rbp + 0x70], eax
cmp byte [0x1400e66d3], 0
je 0x140027a09
mov r8d, edi
cmp r15d, 2
jl 0x1400279da
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x70], xmm1
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140026ab0
lea r9, [rbp + 0x70]
nop
mov eax, 0x5397829d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400279e0
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140026ab0
mov eax, dword [rbp + 0xb0]
cmp eax, 2
jne 0x140028dae
call fcn.14000fad0
call fcn.140014e00
call fcn.14000ff60
call fcn.140014e00
lea rcx, [0x140115390]
call fcn.14007ed10
movups xmm0, xmmword [str.VCET]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [0x1400e66f0]
movups xmmword [rbp + 0xf0], xmm1
movups xmm0, xmmword [0x1400e6700]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [0x1400e6710]
movups xmmword [rbp + 0x110], xmm1
movups xmm0, xmmword [0x1400e6720]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [0x1400e6730]
movups xmmword [rbp + 0x130], xmm1
movups xmm0, xmmword [0x1400e6740]
movups xmmword [rbp + 0x140], xmm0
movsd xmm0, qword [str._2i__K]
movsd qword [rbp + 0x150], xmm0
movzx eax, byte [0x1400e6758]
mov byte [rbp + 0x158], al
mov r8d, edi
cmp r15d, 2
jl 0x140027bdb
movdqa xmmword [rbp + 0x70], xmm10
lea rcx, [rbp + 0xe4]
mov edx, dword [rbp + 0x70]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x78
jl 0x140027af0
cmp r8d, 0x79
jge 0x140027c20
movsxd rax, r8d
lea r9, [rbp + 0xe0]
add r9, rax
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x79
jl 0x140027bf0
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str..QuantumVortex64
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x140115320], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x140027ca6
lea rdx, str.Driver_Error_Contact_Support.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002990
jmp 0x140026ab0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movups xmm2, xmmword [0x1400e6760]
movups xmmword [rbp + 0x90], xmm2
mov edx, dword [0x1400e6770]
mov dword [rbp + 0xa0], edx
movzx eax, byte [0x1400e6774]
mov byte [rbp + 0xa4], al
mov r8d, edi
cmp r15d, 2
jl 0x140027eee
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm10
movd xmm0, ecx
paddb xmm1, xmm0
movd eax, xmm2
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x90], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm7
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm13
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x94]
xorps xmm2, xmm1
movd dword [rbp + 0x94], xmm2
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm7
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm12
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x98]
xorps xmm2, xmm1
movd dword [rbp + 0x98], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
movdqa xmm1, xmm14
punpckldq xmm1, xmm14
pmuldq xmm1, xmm7
movdqa xmm0, xmm14
punpckhdq xmm0, xmm14
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm14
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, edx
xorps xmm2, xmm1
movd dword [rbp + 0xa0], xmm2
mov r8d, reloc.WS2_32.dll_sendto
mov eax, r8d
lea r9, [rbp + 0x90]
add r9, rax
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x140027f00
lea rcx, [rbp + 0x90]
call fcn.140028e50
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x38], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str._Driver_Found
lea rcx, [rbp + 0x28]
call fcn.1400030e0
nop
mov qword [rbp + 0x90], 5
lea rbx, [rbp + 0x28]
mov rsi, qword [rbp + 0x28]
mov r13, qword [rbp + 0x40]
cmp r13, 0xf
cmova rbx, rsi
lea rcx, [rbp + 0x28]
cmova rcx, rsi
mov r14, qword [rbp + 0x38]
add r14, rcx
cmp rbx, r14
je 0x140027fd3
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002750
lea rdx, [0x140007c20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x90]
call fcn.14000be40
inc rbx
cmp rbx, r14
jne 0x140027fa0
cmp r13, 0xf
jbe 0x14002800a
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140028002
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400284be
mov rcx, rsi
call fcn.1400de37c
mov eax, dword [str.VZD8]
mov dword [rbp + 0x70], eax
cmp byte [0x1400e677b], 0
je 0x1400280b9
mov r8d, edi
cmp r15d, 2
jl 0x140028086
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x70], xmm1
jmp 0x1400280b9
lea r9, [rbp + 0x70]
nop word [rax + rax]
mov eax, 0x5397829d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140028090
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm2, xmmword [0x1400e6780]
movups xmmword [rbp + 0x90], xmm2
movsd xmm0, qword [0x1400e6790]
movsd qword [rbp + 0xa0], xmm0
movzx eax, byte [0x1400e6798]
mov byte [rbp + 0xa8], al
mov r8d, edi
cmp r15d, 2
jl 0x14002837f
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm10
movd xmm0, ecx
paddb xmm1, xmm0
movd eax, xmm2
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x90], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm7
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm13
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x94]
xorps xmm2, xmm1
movd dword [rbp + 0x94], xmm2
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm7
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm12
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x98]
xorps xmm2, xmm1
movd dword [rbp + 0x98], xmm2
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm2, xmm11
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm2, xmm1
movd dword [rbp + 0x9c], xmm2
movdqa xmm1, xmm14
punpckldq xmm1, xmm14
pmuldq xmm1, xmm7
movdqa xmm0, xmm14
punpckhdq xmm0, xmm14
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm14, xmm0
andps xmm14, xmm8
packuswb xmm14, xmm14
packuswb xmm14, xmm14
movd xmm0, ecx
paddb xmm14, xmm0
movd xmm1, dword [rbp + 0xa0]
xorps xmm14, xmm1
movd dword [rbp + 0xa0], xmm14
movdqa xmm1, xmm15
punpckldq xmm1, xmm15
pmuldq xmm1, xmm7
movdqa xmm0, xmm15
punpckhdq xmm0, xmm15
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm15, xmm0
andps xmm15, xmm8
packuswb xmm15, xmm15
packuswb xmm15, xmm15
movd xmm0, ecx
paddb xmm15, xmm0
movd xmm1, dword [rbp + 0xa4]
xorps xmm15, xmm1
movd dword [rbp + 0xa4], xmm15
mov r8d, Ordinal_26
mov eax, r8d
lea r9, [rbp + 0x90]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x140028390
lea rcx, [rbp + 0x90]
call fcn.140028e50
lea rcx, str.Orqur_Private
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
call fcn.14001cab0
test al, al
jne 0x140028407
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x1400e56c2]
lea rdx, str.The_driver_could_not_be_found...
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x58], xmm1
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str._Waiting_For_Fortnite
lea rcx, [rbp + 0x48]
call fcn.1400030e0
nop
mov qword [rbp + 0x90], 5
lea rbx, [rbp + 0x48]
mov rsi, qword [rbp + 0x48]
mov r13, qword [rbp + 0x60]
cmp r13, 0xf
cmova rbx, rsi
lea r14, [rbp + 0x48]
cmova r14, rsi
add r14, qword [rbp + 0x58]
cmp rbx, r14
je 0x140028493
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002750
lea rdx, [0x140007c20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x90]
call fcn.14000be40
inc rbx
cmp rbx, r14
jne 0x140028460
cmp r13, 0xf
jbe 0x1400284cd
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400284c5
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400284c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400de37c
movups xmm2, xmmword [str.q_D_VH_]
movups xmmword [rbp + 0x90], xmm2
movzx eax, byte [0x1400e67d8]
mov byte [rbp + 0xa0], al
mov r8d, edi
cmp r15d, 2
jl 0x1400286a6
movdqa xmm1, xmm6
punpckldq xmm1, xmm6
pmuldq xmm1, xmm7
movdqa xmm0, xmm6
punpckhdq xmm0, xmm6
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm6
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd ecx, xmm10
movd xmm0, ecx
paddb xmm1, xmm0
movd eax, xmm2
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x90], xmm1
movdqa xmm1, xmm13
punpckldq xmm1, xmm13
pmuldq xmm1, xmm7
movdqa xmm0, xmm13
punpckhdq xmm0, xmm13
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm13, xmm0
andps xmm13, xmm8
packuswb xmm13, xmm13
packuswb xmm13, xmm13
movd xmm0, ecx
paddb xmm13, xmm0
movd xmm1, dword [rbp + 0x94]
xorps xmm13, xmm1
movd dword [rbp + 0x94], xmm13
movdqa xmm1, xmm12
punpckldq xmm1, xmm12
pmuldq xmm1, xmm7
movdqa xmm0, xmm12
punpckhdq xmm0, xmm12
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm12, xmm0
andps xmm12, xmm8
packuswb xmm12, xmm12
packuswb xmm12, xmm12
movd xmm0, ecx
paddb xmm12, xmm0
movd xmm1, dword [rbp + 0x98]
xorps xmm12, xmm1
movd dword [rbp + 0x98], xmm12
movdqa xmm1, xmm11
punpckldq xmm1, xmm11
pmuldq xmm1, xmm7
movdqa xmm0, xmm11
punpckhdq xmm0, xmm11
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm11, xmm0
andps xmm11, xmm8
packuswb xmm11, xmm11
packuswb xmm11, xmm11
movd xmm0, ecx
paddb xmm11, xmm0
movd xmm1, dword [rbp + 0x9c]
xorps xmm11, xmm1
movd dword [rbp + 0x9c], xmm11
mov r8d, reloc.WS2_32.dll_recv
mov eax, r8d
lea r9, [rbp + 0x90]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x1400286c0
movups xmm0, xmmword [str.yWBVZRezRLK._6d]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x1400e67b0]
movups xmmword [rsp + 0x50], xmm1
mov eax, dword [0x1400e67c0]
mov dword [rsp + 0x60], eax
mov r8d, edi
cmp r15d, 2
jl 0x14002881b
movdqa xmmword [rbp + 0x70], xmm10
lea rcx, [rsp + 0x44]
mov edx, dword [rbp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm6
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm7
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm7
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140028730
cmp r8d, 0x24
jge 0x140028860
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x24
jl 0x140028830
xor r9d, r9d
lea r8, [rbp + 0x90]
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [0x1400e6810]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
mov dword [rbp + 0xe0], 0x238
lea rdx, [rbp + 0xe0]
mov rcx, rax
call sub.KERNEL32.dll_Process32FirstW
test eax, eax
je 0x1400288db
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0x10c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov rcx, rbx
test eax, eax
je 0x14002890f
lea rdx, [rbp + 0xe0]
call sub.KERNEL32.dll_Process32NextW
test eax, eax
jne 0x1400288b0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x140115288], edi
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x1400e56c2]
lea rdx, str.Could_not_find_fortnite...
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0xe8]
mov dword [0x140115288], eax
test eax, eax
je 0x1400288ea
mov qword [rbp + 0x70], rdi
mov dword [rbp + 0x90], 0xe5d9a1
mov dword [rbp + 0x94], eax
lea rax, [rbp + 0x70]
mov qword [rbp + 0x98], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x90]
mov edx, 0x22d054
mov rcx, qword [0x140115320]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x70]
mov qword [0x140115310], rax
test rax, rax
jne 0x1400289ab
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x1400e56c2]
lea rdx, str.The_driver_could_not_get_the_base_address...
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 1
call fcn.1400de340
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140005690]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x140028e18
lea rcx, [rbp + 0x70]
call fcn.140018460
nop
cmp dword [rbp + 0x78], 0
je 0x140028a01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 1
call fcn.1400de340
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x1400056e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x140028e3f
cmp dword [rbp + 0xc8], 0
je 0x140028e34
movaps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x90], xmm0
lea rcx, [rbp + 0x90]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x140028e34
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xc0], xmm0
call fcn.1400020c0
mov ecx, 1
call fcn.1400de340
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140005730]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x140028e26
lea rcx, [rbp + 0x70]
call fcn.140018460
nop
cmp dword [rbp + 0x78], 0
je 0x140028adc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov rcx, qword [0x140115300]
test rcx, rcx
jne 0x140028b1a
nop dword [rax + rax]
lea rcx, [0x140115270]
call fcn.1400148e0
mov qword [0x140115300], rax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140115300]
test rcx, rcx
je 0x140028af0
movdqa xmm0, xmmword [0x1400e8220]
movdqu xmmword [rbp + 0x90], xmm0
lea rdx, [rbp + 0x90]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xor edx, edx
mov rcx, qword [0x140115300]
call qword [sym.imp.USER32.dll_SetMenu]
mov edx, 0xfffffff0
mov r8d, 0x10000000
mov rcx, qword [0x140115300]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov edx, 0xffffffec
mov r8d, 0x80020
mov rcx, qword [0x140115300]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov edx, 5
mov rcx, qword [0x140115300]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140115300]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov edx, 0xffffffec
mov rcx, qword [0x140115300]
call qword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x80020
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x140115300]
call qword [sym.imp.USER32.dll_SetWindowLongW]
lea rdx, [0x140115278]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call sub.d3d9.dll_Direct3DCreate9Ex
test eax, eax
jns 0x140028be2
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [0x14011529c], rdi
mov qword [0x1401152a8], 1
mov qword [0x1401152c4], rdi
mov dword [0x1401152b8], 1
mov r9, qword [0x140115300]
mov qword [0x1401152b0], r9
mov dword [0x1401152a4], edi
mov dword [0x140115298], 0x15
mov eax, dword [0x1401156c4]
mov dword [0x140115290], eax
mov eax, dword [0x1401156c8]
mov dword [0x140115294], eax
mov dword [0x1401152bc], 1
mov dword [0x1401152c0], 0x50
mov eax, edi
cmp byte [0x1401156c1], dil
setne al
mov dword [0x1401152cc], eax
mov rcx, qword [0x140115278]
mov rax, qword [rcx]
lea rdx, [0x140115280]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdi
lea rdx, [0x140115290]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r8d, 1
call qword [rax + 0xa0]
test eax, eax
jns 0x140028cbb
mov rcx, qword [0x140115278]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call fcn.140032a50
mov rcx, qword [0x140115300]
call fcn.14005ad00
mov rcx, qword [0x140115280]
call fcn.14005a060
call fcn.140035b50
mov rbx, rax
mov qword [rax + 0x18], rdi
lea rcx, [rbp + 0xe0]
call fcn.140048890
mov byte [rbp + 0x100], 0
mov byte [rbp + 0xec], 0
mov dword [rbp + 0xf8], 5
mov dword [rbp + 0xfc], 5
mov dword [rbp + 0x130], 0x3f99999a
lea rdi, [0x1400e62e0]
mov qword [rbp + 0x118], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0xe0]
movss xmm2, dword [0x1400e81bc]
lea rdx, str.C:WindowsFonts_tahoma.ttf
mov rcx, qword [rbx + 0x50]
call fcn.140049710
mov qword [rsp + 0x28], rdi
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x1400e81c0]
mov r8d, 0x8d8
lea rdx, section..data
mov rcx, qword [rbx + 0x50]
call fcn.140049c30
xor ecx, ecx
call fcn.140051e60
call fcn.1400362e0
mov rcx, qword [0x140115278]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call fcn.140021c50
nop
cmp dword [rbp + 0xc8], 0
je 0x140028dae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
xor eax, eax
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.1400de740
lea r11, [rsp + 0x4d0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r13, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov dword [rbp + 0x78], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rbp + 0x78], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rbp + 0xc8], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3