Function at 0x1400a8f70
Capabilities:
Create thread
Download url
Encode data using xor
Encrypt data using speck
Execute command
Log keystrokes via polling
Query environment variable
Receive data
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x610
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
mov rax, qword [0x140185fc0]
xor rax, rsp
mov qword [rsp + 0x570], rax
xor r13d, r13d
mov dword [rsp + 0x60], r13d
lea edx, [r13 + 1]
lea rcx, [0x140082f90]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea rcx, [0x1401516b0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Lucky_Premium_Proxy_V1.60
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
movsd xmm0, qword [str.r__ZPUCQW_]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140151620]
mov dword [rsp + 0x48], eax
movzx eax, byte [0x140151624]
mov byte [rsp + 0x4c], al
mov r8d, r13d
mov ebx, dword [reloc.WS2_32.dll_accept]
cmp ebx, 2
jl 0x1400a9142
movdqa xmm4, xmmword [0x1401526e0]
movdqa xmm2, xmmword [0x14014ec10]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401526c0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14014ec80]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401526d0]
movd xmm0, dword [str.r__ZPUCQW_]
xorps xmm2, xmm0
movd dword [rsp + 0x40], xmm2
movdqa xmm3, xmmword [0x1401526b0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401526c0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14014ec80]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401526d0]
movd xmm0, dword [rsp + 0x44]
xorps xmm2, xmm0
movd dword [rsp + 0x44], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x1400a9150
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011de0
lea rcx, [0x14018ca20]
call fcn.1400c97d0
cmp byte [0x14018cc38], r13b
jne 0x1400a922d
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.14007ed10
movzx ecx, byte [rax + 9]
test cl, cl
je 0x1400a91f4
xor byte [rax], 0x31
xor byte [rax + 1], 0x32
xor byte [rax + 2], 0x33
xor byte [rax + 3], 0x34
xor byte [rax + 4], 0x35
xor byte [rax + 5], 0x36
xor byte [rax + 6], 0x37
xor byte [rax + 7], 0x38
xor byte [rax + 8], 0x39
xor cl, 0x3a
mov byte [rax + 9], cl
mov rdx, rax
mov rcx, r8
call fcn.140011de0
mov rbx, rax
lea rcx, [0x14018cc40]
call fcn.1400268d0
mov rdx, rax
mov rcx, rbx
call fcn.140011de0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x14018ca20]
call fcn.1400c69b0
test al, al
je 0x1400a9244
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
lea rcx, [0x1401516dc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x270], xmm0
mov qword [rsp + 0x280], r13
mov qword [rsp + 0x288], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x270], r13b
xor edx, edx
mov r8d, 0xf8
lea rcx, [rsp + 0x2b0]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x14013d808]
mov qword [rsp + 0x2b0], rax
lea rax, [0x14013d810]
mov qword [rsp + 0x2c0], rax
lea rcx, [rsp + 0x348]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x60], 0x40
xor r8d, r8d
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rsp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x2b0], rax
mov rax, qword [rsp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x2ac], edx
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x2c8], rax
mov qword [rsp + 0x330], r13
mov dword [rsp + 0x338], r13d
lea rcx, str.LOCALAPPDATA
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rdx, rax
lea rcx, [rsp + 0x2c0]
call fcn.140011de0
mov rcx, rax
lea rdx, str.Growtopiakey.txt
call fcn.140011de0
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0xc0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x2c8]
call fcn.14005cde0
nop
lea rdx, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 0xf
cmova rdx, qword [rsp + 0x1d0]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
lea rcx, [rsp + 0xc0]
call fcn.14001b420
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0xc0], rax
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0xbc], edx
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0xf
jbe 0x1400a9447
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a9442
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a9442
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011e4d4
movdqa xmm0, xmmword [0x14013d4a0]
movdqu xmmword [rsp + 0x1e0], xmm0
mov byte [rsp + 0x1d0], 0
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xc0]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::good_void_const___ptr64]
test al, al
je 0x1400a94f8
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xc0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0xc0]
call fcn.140017aa0
lea rcx, [rsp + 0xd0]
call fcn.140027cb0
test rax, rax
jne 0x1400a988b
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xc0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
jmp 0x1400a988b
movups xmm0, xmmword [str._w__PD]
movups xmmword [rsp + 0x70], xmm0
movzx eax, word [0x140151648]
mov word [rsp + 0x80], ax
cmp byte [0x140151649], 0
je 0x1400a96b3
mov r8d, r13d
cmp ebx, 2
jl 0x1400a966d
movdqa xmm5, xmmword [0x14014ec10]
movdqa xmm4, xmmword [0x1401526e0]
movdqa xmm6, xmmword [0x1401526c0]
movdqa xmm0, xmmword [0x1401526d0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14014ec80]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14014ec80]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400a9560
cmp r8d, 0x12
jge 0x1400a96b3
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x1400a9680
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011de0
lea rdx, [rsp + 0x270]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140071400
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x3b0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x218]
lea rcx, [rsp + 0x2c8]
call fcn.14005cde0
nop
lea rdx, [rsp + 0x218]
cmp qword [rsp + 0x230], 0xf
cmova rdx, qword [rsp + 0x218]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rcx, [rsp + 0x3b0]
call fcn.140071040
mov rax, qword [rsp + 0x3b0]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x3b0], rdi
mov rax, qword [rsp + 0x3b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x3ac], edx
mov rdx, qword [rsp + 0x230]
cmp rdx, 0xf
jbe 0x1400a97b6
inc rdx
mov rcx, qword [rsp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a97b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a97b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011e4d4
movdqa xmm0, xmmword [0x14013d4a0]
movdqu xmmword [rsp + 0x228], xmm0
mov byte [rsp + 0x218], 0
lea rdx, [rsp + 0x270]
cmp qword [rsp + 0x288], 0xf
cmova rdx, qword [rsp + 0x270]
mov r8, qword [rsp + 0x280]
lea rcx, [rsp + 0x3b0]
call fcn.140015c80
lea rcx, [rsp + 0x3b8]
call fcn.140027cb0
test rax, rax
jne 0x1400a9835
mov rax, qword [rsp + 0x3b0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x3b0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x3b0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x3b0], rdi
mov rax, qword [rsp + 0x3b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x3ac], edx
lea rcx, [rsp + 0x3b8]
call fcn.14001e2f0
lea rcx, [rsp + 0x3c0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x458]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x218]
call fcn.14001b950
mov rdx, rax
lea rcx, [0x14018ca20]
call fcn.1400cadc0
cmp byte [0x14018cc38], 0
jne 0x1400a992d
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.14007fab0
movzx ecx, byte [rax + 9]
test cl, cl
je 0x1400a98ff
xor byte [rax], 0x31
xor byte [rax + 1], 0x32
xor byte [rax + 2], 0x33
xor byte [rax + 3], 0x34
xor byte [rax + 4], 0x35
xor byte [rax + 5], 0x36
xor byte [rax + 6], 0x37
xor byte [rax + 7], 0x38
xor byte [rax + 8], 0x39
xor cl, 0x3a
mov byte [rax + 9], cl
mov rdx, rax
mov rcx, r8
call fcn.140011de0
mov rcx, rax
lea rdx, [0x14018cc40]
call fcn.140011b80
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x1401516dc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x218], xmm0
mov qword [rsp + 0x228], r13
mov qword [rsp + 0x230], r13
xor r8d, r8d
lea rdx, [0x14013d4b0]
lea rcx, [rsp + 0x218]
call fcn.140012850
nop
mov r15, qword [0x14018cc00]
mov r12, qword [0x14018cc08]
cmp r15, r12
je 0x1400a9a74
nop dword [rax]
nop dword [rax + rax]
mov rdx, r15
lea rcx, [rsp + 0x1d0]
call fcn.14001b950
nop
lea r9, [rsp + 0x1d0]
mov rdi, qword [rsp + 0x1d0]
mov r14, qword [rsp + 0x1e8]
cmp r14, 0xf
cmova r9, rdi
mov rsi, qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x230]
cmp rsi, rax
ja 0x1400a9a07
lea rbx, [rsp + 0x218]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x218]
mov qword [rsp + 0x228], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x1400a9a2a
xor r8d, r8d
mov rdx, rsi
lea rcx, [rsp + 0x218]
call fcn.140016280
mov r14, qword [rsp + 0x1e8]
mov rdi, qword [rsp + 0x1d0]
cmp r14, 0xf
jbe 0x1400a9a61
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400a9a59
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400aadad
mov rcx, rdi
call fcn.14011e4d4
add r15, 0x20
cmp r15, r12
jne 0x1400a9990
mov ebx, dword [reloc.WS2_32.dll_accept]
lea rcx, [rsp + 0x218]
mov rsi, qword [rsp + 0x218]
mov r14, qword [rsp + 0x230]
cmp r14, 0xf
cmova rcx, rsi
mov r8, qword [rsp + 0x228]
cmp r8, 4
jne 0x1400a9b47
lea rdx, [0x140151708]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400a9b47
mov byte [0x140189abe], 1
lea ecx, [rax + 8]
call fcn.14011e498
test rax, rax
je 0x1400a9ada
lea rcx, [0x14008cd60]
mov qword [rax], rcx
jmp 0x1400a9add
mov rax, r13
mov qword [rsp + 0x210], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140016000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400aafa0
cmp dword [rsp + 0x48], 0
je 0x1400aaf95
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x1400aaf95
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [str.bGPWPEDLVWE]
movups xmmword [rsp + 0x1d0], xmm0
movups xmm1, xmmword [0x140151670]
movups xmmword [rsp + 0x1e0], xmm1
movzx eax, byte [0x140151680]
mov byte [rsp + 0x1f0], al
mov ecx, r13d
cmp ebx, 2
jl 0x1400a9cbc
movdqa xmm5, xmmword [0x14014ec10]
movdqa xmm4, xmmword [0x1401526e0]
movdqa xmm6, xmmword [0x1401526c0]
movdqa xmm0, xmmword [0x1401526d0]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x1d4]
mov r8d, dword [rsp + 0x40]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14014ec80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14014ec80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x20
jl 0x1400a9bb2
cmp ecx, 0x21
jge 0x1400a9cfe
movsxd rax, ecx
lea r8, [rsp + 0x1d0]
add r8, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, cl
sub al, dl
add al, 0x31
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x21
jl 0x1400a9cd0
lea rdx, [rsp + 0x1d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011de0
movups xmm0, xmmword [0x140151688]
movups xmmword [rsp + 0x1d0], xmm0
movups xmm1, xmmword [0x140151698]
movups xmmword [rsp + 0x1e0], xmm1
movsd xmm0, qword [0x1401516a8]
movsd qword [rsp + 0x1f0], xmm0
cmp ebx, 2
jl 0x1400a9e87
movdqa xmm5, xmmword [0x14014ec10]
mov edx, r13d
movdqa xmm4, xmmword [0x1401526e0]
movdqa xmm6, xmmword [0x1401526c0]
movdqa xmm0, xmmword [0x1401526d0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x1d4]
mov r8d, dword [rsp + 0x40]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14014ec80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14014ec80]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x28
jl 0x1400a9d80
jmp 0x1400a9ed3
lea r10, [rsp + 0x1d0]
mov r9d, r13d
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r9d
add edx, r9d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, r9b
sub al, dl
add al, 0x31
xor byte [r10], al
inc r9d
lea r10, [r10 + 1]
cmp r9d, 0x28
jl 0x1400a9ea0
lea rdx, [rsp + 0x1d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011de0
nop
lea r8, str.LOCALAPPDATA
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov rdx, qword [rsp + 0xb8]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1400a9f25
lea rcx, [rsp + 0x40]
call fcn.140012850
nop
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1a
jb 0x1400a9f8b
lea rax, [rcx + 0x1a]
mov qword [rsp + 0x50], rax
lea rbx, [rsp + 0x40]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x40]
add rbx, rcx
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Growtopiacacheitems.dat
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1a], 0
lea rax, [rsp + 0x40]
jmp 0x1400a9fac
mov qword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_26
lea r9, str.Growtopiacacheitems.dat
xor r8d, r8d
lea edx, [r8 + 0x1a]
lea rcx, [rsp + 0x40]
call fcn.140007490
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1e0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400aa012
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa00d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aa00d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011e4d4
movdqa xmm0, xmmword [0x14013d4a0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rbx, qword [0x14018c670]
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x70]
call fcn.14001b950
mov rdx, rax
lea rcx, [rbx + 0x61a0]
call fcn.1400837d0
nop
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0xf
jbe 0x1400aa095
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa08f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aa08f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011e4d4
nop
jmp 0x1400aa0aa
lea r12, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
lea r15, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 4
lea rdx, str.path
lea rcx, [rsp + 0x40]
call fcn.140012850
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1e0], xmm1
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.SOFTWAREGrowtopia
lea rcx, [rsp + 0x1d0]
call fcn.140012850
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x70]
call fcn.140090e50
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 0x1b
jb 0x1400aa174
lea rax, [rcx + 0x1b]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 0xf
jbe 0x1400aa155
mov rax, qword [rdi]
lea rbx, [rax + rcx]
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str.interfacelarge_scam.rttex
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1b], 0
jmp 0x1400aa196
mov qword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_27
lea r9, str.interfacelarge_scam.rttex
xor r8d, r8d
lea edx, [r8 + 0x1b]
mov rcx, rdi
call fcn.140007490
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x250], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x260], xmm1
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x250], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x260], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x1400aa216
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa211
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aa211
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011e4d4
movdqa xmm0, xmmword [0x14013d4a0]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0xf
jbe 0x1400aa272
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa26d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aa26d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011e4d4
movdqa xmm0, xmmword [0x14013d4a0]
movdqu xmmword [rsp + 0x1e0], xmm0
mov byte [rsp + 0x1d0], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400aa2cb
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa2c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aa2c6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011e4d4
movdqa xmm0, xmmword [0x14013d4a0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x250]
cmp qword [rsp + 0x268], 0xf
cmova rcx, qword [rsp + 0x250]
call fcn.140094860
test al, al
jne 0x1400aa331
lea r8, [rsp + 0x250]
cmp qword [rsp + 0x268], 0xf
cmova r8, qword [rsp + 0x250]
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1079346672355790939_1248821848498638999_scam.rttex_ex66650f7ais6663bdfahmb2f34e91ad4ff95e3d190f181520c28b6f6ee115b09eb0c838020b4d5f4b6a50
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
call fcn.1400a3df0
mov ecx, 8
call fcn.14011e498
test rax, rax
je 0x1400aa351
lea rcx, [0x1400a5490]
mov qword [rax], rcx
jmp 0x1400aa354
mov rax, r13
mov qword [rsp + 0x210], rax
lea rcx, [rsp + 0x248]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140016000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x240], rax
test rax, rax
je 0x1400aaf82
mov ecx, 8
call fcn.14011e498
test rax, rax
je 0x1400aa3ae
lea rcx, [0x140084990]
mov qword [rax], rcx
jmp 0x1400aa3b1
mov rax, r13
mov qword [rsp + 0x210], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140016000]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400aaffd
cmp dword [rsp + 0x48], 0
je 0x1400aaff2
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x1400aaff2
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
call fcn.1400950a0
call fcn.140083170
mov edx, 0xa
lea rcx, str.HTTPS_server_is_running._n
call fcn.140071350
cmp byte [0x14018bfaa], 0
jne 0x1400aa467
mov edx, 4
lea rcx, str.Failed_to_edit_Hosts_File_n
call fcn.140071350
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov edx, 0xa
lea rcx, str.Successfully_edited_Hosts_file_n
call fcn.140071350
call fcn.140029300
cmp dword [rsp + 0x248], 0
je 0x1400aafe7
movaps xmm0, xmmword [rsp + 0x240]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x1400aafe7
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x240], xmm0
call fcn.140011050
mov rcx, qword [0x14018c670]
call fcn.1400b4f50
mov rcx, qword [0x14018c670]
call fcn.1400b2090
test al, al
je 0x1400aad50
lea rcx, str.Color_09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Server__client_proxy_is_running._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011de0
lea rdx, str.You_can_now_connect_to_Growtopia_n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011de0
mov edx, reloc.WS2_32.dll_ntohl
lea rcx, str.If_Proxy_doesnt_connect_restart_Growtopia_n
call fcn.140071350
lea rcx, str.Server__client_proxy_is_running._n
call fcn.14006d310
movabs rsi, 0x7fffffffffffffff
movsd xmm12, qword [0x140152698]
movss xmm11, dword [0x14014eba4]
movss xmm6, dword [0x14014ed50]
movss xmm9, dword [0x1401526a8]
movss xmm13, dword [0x14014eba8]
movss xmm14, dword [0x14014ebc0]
mov r14d, 4
movabs r15, 0x7ffffffff4143dff
mov rdi, qword gs:[0x58]
mov ebx, dword [0x1401c4004]
call fcn.140082580
mov rcx, qword [0x14018c670]
call fcn.1400b1160
mov rcx, qword [0x14018c670]
cmp byte [rcx + 0x5fe8], 0
je 0x1400aa6b8
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400aa6b8
mov ecx, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x1400aa6b1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1d0], xmm0
movups xmmword [rsp + 0x1e0], xmm0
movups xmmword [rsp + 0x1f0], xmm0
mov qword [rsp + 0x200], rax
mov dword [rsp + 0x208], eax
mov byte [rsp + 0x1d0], reloc.WS2_32.dll_sendto
mov word [rsp + 0x1d2], 0xffff
cmp byte [0x140189a35], al
je 0x1400aa61f
movzx eax, byte [0x140183138]
jmp 0x1400aa62a
mov ecx, dword [0x140189b3c]
call fcn.14004c030
mov byte [rsp + 0x1d1], al
mov rcx, qword [0x14018c670]
mov eax, dword [rcx + 0x5fd0]
mov dword [rsp + 0x1d4], eax
mov dword [rsp + 0x1e8], 0x44960000
mov dword [rsp + 0x1ec], 0x43480000
movss xmm0, dword [0x140183104]
movss dword [rsp + 0x1f0], xmm0
movss xmm1, dword [0x140183108]
movss dword [rsp + 0x1f4], xmm1
mov dword [rsp + 0x1e0], 0x42fa0000
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_60
lea r9, [rsp + 0x1d0]
mov r8d, 4
mov dl, 1
call fcn.1400b1a00
mov byte [0x14018bfab], 1
jmp 0x1400aa7a8
mov rcx, qword [0x14018c670]
cmp byte [0x14018bfab], 0
je 0x1400aa7a8
mov byte [0x14018bfab], 1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1d0], xmm0
movups xmmword [rsp + 0x1e0], xmm0
movups xmmword [rsp + 0x1f0], xmm0
mov qword [rsp + 0x200], rax
mov dword [rsp + 0x208], eax
mov byte [rsp + 0x1d0], reloc.WS2_32.dll_sendto
mov word [rsp + 0x1d2], 0x8080
cmp byte [0x140189a35], al
je 0x1400aa71b
movzx eax, byte [0x140183138]
jmp 0x1400aa72d
mov ecx, dword [0x140189b3c]
call fcn.14004c030
mov rcx, qword [0x14018c670]
mov byte [rsp + 0x1d1], al
mov eax, dword [rcx + 0x5fd0]
mov dword [rsp + 0x1d4], eax
mov dword [rsp + 0x1e8], 0x44960000
mov dword [rsp + 0x1ec], 0x43480000
movss xmm0, dword [0x140183104]
movss dword [rsp + 0x1f0], xmm0
movss xmm1, dword [0x140183108]
movss dword [rsp + 0x1f4], xmm1
mov dword [rsp + 0x1e0], 0x42fa0000
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_60
lea r9, [rsp + 0x1d0]
mov r8d, 4
mov dl, 1
call fcn.1400b1a00
mov byte [0x14018bfab], 0
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140082c70
call fcn.1400a4d10
cmp byte [0x140189b4b], 0
je 0x1400aa96f
cmp byte [0x140189b4a], 0
je 0x1400aa96f
lea rcx, [rsp + 0x98]
call fcn.14004f7e0
mov rax, qword [rsp + 0x98]
cmp rax, r15
jge 0x1400aa801
add rax, 0xbebc200
mov qword [rsp + 0xb8], rax
jmp 0x1400aa809
mov qword [rsp + 0xb8], rsi
lea rcx, [rsp + 0xb8]
call fcn.14001b120
movd xmm7, dword [0x140189b4c]
cvtdq2ps xmm7, xmm7
movss xmm8, dword [0x14018ab50]
movss xmm10, dword [0x14018ab54]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], r13
mov qword [rsp + 0x1e8], r13
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.OnParticleEffect
lea rcx, [rsp + 0x1d0]
call fcn.140012850
nop
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x3b0]
call fcn.14001e090
nop
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0xf
jbe 0x1400aa8c2
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa8bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400aad49
call fcn.14011e4d4
mov dword [rsp + 0x3f0], 9
mov dword [rsp + 0x400], 0xb5
mov dword [rsp + 0x430], 3
movss dword [rsp + 0x440], xmm8
movss dword [rsp + 0x444], xmm10
mov dword [rsp + 0x470], 1
movss dword [rsp + 0x480], xmm7
mov dword [rsp + 0x4b0], 9
mov dword [rsp + 0x4c0], 1
mov dword [rsp + 0x20], r13d
mov r9d, 0xffffffff
lea r8, [rsp + 0x3b0]
mov dl, 1
mov rcx, qword [0x14018c670]
call fcn.1400b1890
nop
lea r9, [fcn.14001fb00]
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rsp + 0x3b0]
call fcn.14011e6ac
nop
mov byte [0x140189b4b], 0
mov dword [0x140189b4c], r13d
mov ecx, r14d
mov rax, qword [rdi + rbx*8]
mov eax, dword [rcx + rax]
cmp dword [0x14018d358], eax
jg 0x1400aafb0
mov rax, qword [0x14018c670]
cmp byte [rax + 0x5fe8], 0
je 0x1400aaaa0
cmp byte [0x140189a6a], 0
je 0x1400aaaa0
movaps xmm1, xmm12
lea rcx, [0x14018d350]
call fcn.140070e20
test al, al
je 0x1400aaaa0
mov rcx, qword [0x14018c670]
movss xmm7, dword [rcx + 0x5fd8]
mulss xmm7, xmm11
movss xmm8, dword [rcx + 0x5fdc]
mulss xmm8, xmm11
mov eax, dword [reloc.WS2_32.dll_ioctlsocket]
lea edi, [rax + rax]
mov edx, edi
neg edx
mov dword [rsp + 0xb8], edx
mov r15d, edx
cmp edx, edi
jg 0x1400aaaa0
mov eax, edx
shl eax, 4
mov dword [rsp + 0x60], eax
mov r12d, eax
nop dword [rax + rax]
mov ebx, edx
mov r14d, r15d
neg r14d
cmovs r14d, r15d
mov esi, eax
nop
cmp r14d, edi
je 0x1400aaa30
mov eax, ebx
neg eax
cmovs eax, ebx
cmp eax, edi
jne 0x1400aaa7c
movaps xmm2, xmm7
mulss xmm2, xmm6
movd xmm0, r12d
cvtdq2ps xmm0, xmm0
addss xmm2, xmm0
addss xmm2, xmm9
movaps xmm1, xmm8
mulss xmm1, xmm6
movd xmm0, esi
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
mov dword [rsp + 0x20], r13d
xorps xmm3, xmm3
unpcklps xmm2, xmm1
movq r8, xmm2
mov edx, 0xdf
call fcn.1400b0ea0
mov rcx, qword [0x14018c670]
inc ebx
add esi, 0x10
cmp ebx, edi
jle 0x1400aaa20
inc r15d
add r12d, 0x10
cmp r15d, edi
mov eax, dword [rsp + 0x60]
mov edx, dword [rsp + 0xb8]
jle 0x1400aaa10
call fcn.1400924a0
call fcn.1400929a0
call fcn.1400929a0
call fcn.140092ea0
call fcn.1400933a0
call fcn.1400938a0
call fcn.140094270
call fcn.140093d60
call fcn.1400a3350
cmp byte [0x140189abf], 1
jne 0x1400aace1
lea rcx, [rsp + 0xa0]
call fcn.14004f7e0
mov rdi, qword [rsp + 0xa0]
sub rdi, qword [0x14018a480]
mov rcx, qword [0x14018c670]
movss xmm1, dword [rcx + 0x5fd8]
mulss xmm1, xmm11
movaps xmm0, xmm1
addss xmm0, xmm13
cvttss2si r15d, xmm0
addss xmm1, xmm14
cvttss2si r12d, xmm1
movss xmm0, dword [rcx + 0x5fdc]
mulss xmm0, xmm11
cvttss2si ebx, xmm0
mov r8d, ebx
mov edx, r15d
call fcn.1400acdc0
mov rsi, rax
mov r8d, ebx
mov edx, r12d
mov rcx, qword [0x14018c670]
call fcn.1400acdc0
mov r14, rax
mov rcx, qword [0x14018c670]
cmp byte [rcx + 0x5fe8], 0
je 0x1400aace1
lea rcx, [rsp + 0x90]
call fcn.14004f7e0
mov rcx, qword [rsp + 0x90]
movabs rax, 0x7ffffffffa0a1eff
cmp rcx, rax
jge 0x1400aab9e
add rcx, 0x5f5e100
mov qword [rsp + 0xb8], rcx
jmp 0x1400aabb0
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0xb8], rax
lea rcx, [rsp + 0xb8]
call fcn.14001b120
cmp byte [0x140189aa5], 0
jne 0x1400aac67
test rsi, rsi
je 0x1400aac0f
cmp word [rsi + 2], 0
jne 0x1400aac0f
cmp rdi, 0x5f5e100
jl 0x1400aac0f
mov r9d, dword [0x140189b54]
mov r8d, ebx
mov edx, r15d
mov rcx, qword [0x14018c670]
call fcn.1400b1010
lea rcx, [rsp + 0xa8]
call fcn.14004f7e0
mov rcx, qword [rax]
mov qword [0x14018a480], rcx
test r14, r14
je 0x1400aac5e
cmp word [r14 + 2], 0
jne 0x1400aac5e
cmp rdi, 0x5f5e100
jl 0x1400aace1
mov r9d, dword [0x140189b54]
mov r8d, ebx
mov edx, r12d
mov rcx, qword [0x14018c670]
call fcn.1400b1010
lea rcx, [rsp + 0xb0]
call fcn.14004f7e0
mov rcx, qword [rax]
mov qword [0x14018a480], rcx
jmp 0x1400aace1
mov byte [0x140189aa5], 1
jmp 0x1400aace1
cmp rdi, 0x5f5e100
jl 0x1400aace1
cmp word [rsi + 2], 0
jbe 0x1400aac9d
mov r8d, ebx
mov edx, r15d
mov rcx, qword [0x14018c670]
call fcn.1400b1220
lea rcx, [rsp + 0x70]
call fcn.14004f7e0
mov rcx, qword [rax]
mov qword [0x14018a480], rcx
cmp word [r14 + 2], 0
jbe 0x1400aaccb
mov r8d, ebx
mov edx, r12d
mov rcx, qword [0x14018c670]
call fcn.1400b1220
lea rcx, [rsp + 0x40]
call fcn.14004f7e0
mov rcx, qword [rax]
mov qword [0x14018a480], rcx
cmp word [rsi + 2], 0
jne 0x1400aace1
cmp word [r14 + 2], 0
jne 0x1400aace1
mov byte [0x140189aa5], 0
lea rcx, [rsp + 0x210]
call fcn.14004f7e0
mov rax, qword [rsp + 0x210]
movabs rcx, 0x7ffffffffff0bdbf
movabs rsi, 0x7fffffffffffffff
cmp rax, rcx
jge 0x1400aad2f
add rax, 0xf4240
mov qword [rsp + 0xb8], rax
lea rcx, [rsp + 0xb8]
call fcn.14001b120
jmp 0x1400aa56b
mov qword [rsp + 0xb8], rsi
lea rcx, [rsp + 0xb8]
call fcn.14001b120
jmp 0x1400aa56b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov edx, 4
lea rcx, str.Failed_to_start_server_or_proxy._n
call fcn.140071350
nop
cmp dword [rsp + 0x248], 0
je 0x1400aad73
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov rdx, qword [rsp + 0x268]
cmp rdx, 0xf
jbe 0x1400aadb9
inc rdx
mov rcx, qword [rsp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aadb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aadb4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011e4d4
movdqa xmm0, xmmword [0x14013d4a0]
movdqu xmmword [rsp + 0x260], xmm0
mov byte [rsp + 0x250], 0
cmp r14, 0xf
jbe 0x1400aae0d
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400aae04
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aae04
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.14011e4d4
nop
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0xc0], r12
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0xbc], edx
lea rcx, [rsp + 0xd0]
call fcn.14001e2f0
lea rcx, [rsp + 0xd8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x170]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rax, qword [rsp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x2b0], rax
mov rax, qword [rsp + 0x2b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x2ac], edx
mov qword [rsp + 0x2c8], r15
lea rcx, [rsp + 0x2c8]
call fcn.1400258e0
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x348]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x288]
cmp rdx, 0xf
jbe 0x1400aaf1e
inc rdx
mov rcx, qword [rsp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aaf19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aaf19
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011e4d4
xor eax, eax
mov rcx, qword [rsp + 0x570]
xor rcx, rsp
call fcn.14011e5f0
lea r11, [rsp + 0x610]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov dword [rsp + 0x248], r13d
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rsp + 0x48], r13d
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
lea rcx, [0x14018d358]
call fcn.14011ea74
cmp dword [0x14018d358], 0xffffffff
jne 0x1400aa985
call sub.MSVCP140.dll__Xtime_get_ticks
mov qword [0x14018d350], rax
lea rcx, [0x14018d358]
call fcn.14011ea08
nop
jmp 0x1400aa985
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rsp + 0x48], r13d
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3