Function at 0x14000f6e0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Enumerate processes
Execute command
Get kernel32 base address
Move file
Set console window title
Terminate process
Write and execute a file
Write file on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xa68]
sub rsp, 0xb40
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x1401e1010]
xor rax, rsp
mov qword [rbp + 0xa00], rax
movups xmm0, xmmword [0x1401c9750]
movups xmmword [rbp + 0x558], xmm0
movups xmm1, xmmword [0x1401c9760]
movups xmmword [rbp + 0x568], xmm1
mov eax, dword [0x1401c9770]
mov dword [rbp + 0x578], eax
xor ebx, ebx
mov r8d, ebx
lea r12d, [rbx + 1]
lea r13d, [rbx + 0x1f]
mov r15d, dword [reloc.WS2_32.dll_accept]
cmp r15d, 2
jl 0x14000f8b7
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x558]
mov edx, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000f7b0
cmp r8d, 0x24
jge 0x14000f8ff
movsxd rax, r8d
lea r9, [rbp + 0x558]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x24
jl 0x14000f8d0
lea rcx, [rbp + 0x558]
call fcn.14013ff30
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
mov ecx, 8
call fcn.14002e3e0
lea rcx, [0x1400040c0]
mov qword [rax], rcx
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140027cd0]
xor edx, edx
xor ecx, ecx
call fcn.14013a7d0
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14001284e
cmp dword [rsp + 0x68], 0
je 0x14001285d
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call fcn.140036b80
test eax, eax
jne 0x140012866
lea ecx, [rax + 8]
call fcn.14002e3e0
lea rcx, [0x1400040f0]
mov qword [rax], rcx
mov qword [rsp + 0x40], rax
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140027cd0]
xor edx, edx
xor ecx, ecx
call fcn.14013a7d0
mov qword [rbp - 0x80], rax
test rax, rax
je 0x1400127d2
cmp dword [rbp - 0x78], 0
je 0x14001286e
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.140036b80
test eax, eax
jne 0x140012877
lea rcx, [rbp + 0x5d0]
call fcn.14000e5d0
nop
movups xmm0, xmmword [0x1401c97d8]
movups xmmword [rbp + 0x2a8], xmm0
mov eax, dword [0x1401c97e8]
mov dword [rbp + 0x2b8], eax
movzx eax, byte [0x1401c97ec]
mov byte [rbp + 0x2bc], al
mov r8d, ebx
cmp r15d, 2
jl 0x14000fb87
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x2a8]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14000fa80
cmp r8d, 0x15
jge 0x14000fbcf
movsxd rax, r8d
lea r9, [rbp + 0x2a8]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x14000fba0
lea r8, [rbp + 0x5d0]
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x4e0]
call fcn.14001a730
nop
lea rdi, [rbp + 0x4e8]
cmp qword [rbp + 0x500], 0x10
cmovae rdi, qword [rbp + 0x4e8]
mov r8d, 0x104
lea rdx, [rbp + 0x8f0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov qword [rbp + 0x260], rbx
lea rax, [rsp + 0x50]
mov qword [rbp - 0x28], rax
mov ecx, reloc.WS2_32.dll_recv
call fcn.14001be30
mov qword [rbp - 0x30], rax
lea rcx, [rbp + 0x258]
mov qword [rax], rcx
mov qword [rax + 8], rbx
mov qword [rbp + 0x258], rax
mov qword [rbp + 0x270], rbx
mov qword [rbp + 0x278], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x260], 0
lea rax, [rbp + 0x8f0]
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000fc73
lea rdx, [rbp + 0x8f0]
lea rcx, [rbp + 0x258]
call fcn.140018160
nop
lea rcx, [rbp + 0x260]
cmp qword [rbp + 0x278], 0x10
cmovae rcx, qword [rbp + 0x260]
mov rdx, rdi
call fcn.140140120
lea rcx, [rbp + 0x258]
call fcn.140017db0
mov rcx, qword [rbp + 0x258]
mov qword [rbp + 0x258], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
lea rcx, [rbp + 0x6c0]
call fcn.14000e830
lea rcx, [rax + 8]
cmp qword [rax + 0x20], 0x10
jb 0x14000fcee
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [rbp + 0x6c0]
call fcn.140017db0
mov rcx, qword [rbp + 0x6c0]
mov qword [rbp + 0x6c0], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
mov eax, dword [0x1401c9c64]
mov dword [rbp + 0x190], eax
movzx eax, byte [0x1401c9c68]
mov byte [rbp + 0x190], gethostbyname
xor byte [rbp + 0x191], 0x3a
xor byte [rbp + 0x192], 0x3b
xor byte [rbp + 0x193], 0x3c
xor al, 0x3d
mov byte [rbp + 0x194], al
movups xmm0, xmmword [0x1401cd8e0]
movups xmmword [rbp + 0x4b8], xmm0
movups xmm1, xmmword [0x1401cd8f0]
movups xmmword [rbp + 0x4c8], xmm1
movzx eax, word [0x1401cd900]
mov word [rbp + 0x4d8], ax
mov r8d, ebx
cmp r15d, 2
jl 0x14000fec8
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x4b8]
mov edx, dword [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000fdc1
cmp r8d, 0x22
jge 0x14000ff0f
movsxd rax, r8d
lea r9, [rbp + 0x4b8]
add r9, rax
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x22
jl 0x14000fee0
lea rdx, [rbp + 0x4b8]
lea rcx, [rbp]
call fcn.140015570
mov rdx, rax
lea rcx, [rbp + 0x530]
call fcn.14000efa0
lea rcx, [rbp + 0x190]
mov rdx, r14
nop dword [rax + rax]
inc rdx
cmp byte [rcx + rdx], 0
jne 0x14000ff40
mov r8, qword [rax + 0x18]
lea rcx, [rax + 8]
cmp qword [rax + 0x20], 0x10
jb 0x14000ff5b
mov rcx, qword [rcx]
cmp r8, rdx
jne 0x140012450
lea rdx, [rbp + 0x190]
call fcn.140114e20
test eax, eax
jne 0x140012450
lea rcx, [rbp + 0x530]
call fcn.140017db0
mov rcx, qword [rbp + 0x530]
mov qword [rbp + 0x530], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
call fcn.14000bb10
cmp eax, 0xb44d1
jne 0x14001287f
lea rax, [0x1404e1cb0]
cmp qword [0x1404e1cc8], 0x10
cmovae rax, qword [0x1404e1cb0]
cmp qword [0x1404e1cc0], 1
jne 0x14000ffdf
cmp byte [rax], 0x30
jne 0x14000ffd6
mov eax, ebx
jmp 0x14000ffdb
sbb eax, eax
or eax, 1
test eax, eax
je 0x14001001c
cmp qword [0x1404e2588], 0
je 0x14001001c
lea rax, [0x1404dfc90]
cmp qword [0x1404dfca8], 0x10
cmovae rax, qword [0x1404dfc90]
cmp qword [0x1404dfca0], 1
jne 0x140010025
cmp byte [rax], 0x30
jne 0x140010013
mov eax, ebx
jmp 0x140010018
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140010025
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x50], rbx
lea rax, [rsp + 0x51]
mov qword [rbp - 0x18], rax
mov ecx, reloc.WS2_32.dll_recv
call fcn.14001be30
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x70]
mov qword [rax], rcx
mov qword [rax + 8], rbx
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], 0
lea rdx, [0x1404df440]
mov r8, r14
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140010080
lea rcx, [rbp - 0x70]
call fcn.140018160
nop
lea rdx, [0x1404df468]
lea rcx, [rbp + 0x28]
call fcn.1400156e0
nop
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.14000a3f0
test al, al
je 0x140012964
call fcn.140005800
test al, al
jne 0x140010150
lea rcx, [rbp + 0x4e0]
call fcn.140017db0
mov rcx, qword [rbp + 0x4e0]
mov qword [rbp + 0x4e0], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
nop
lea rcx, [rbp + 0x5d0]
call fcn.140017db0
mov rcx, qword [rbp + 0x5d0]
mov qword [rbp + 0x5d0], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
xor eax, eax
mov rcx, qword [rbp + 0xa00]
xor rcx, rsp
call fcn.14002d760
lea r11, [rsp + 0xb40]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x80]
call fcn.140114bb0
lea rdx, [rbp + 0x80]
call fcn.140005c10
test al, al
je 0x140010235
mov dword [rbp + 0x1d0], 0xc0f0b3a
mov word [rbp + 0x1d4], 0xe0d
xor eax, eax
mov byte [rbp + 0x1d6], al
mov rsi, rbx
nop word [rax + rax]
mov rdx, rsi
lea rcx, [rbp + 0x1d1]
call fcn.1400146f0
movzx edi, byte [rax]
xor dil, byte [rbp + 0x1d0]
mov rdx, rsi
lea rcx, [rbp + 0x1d1]
call fcn.1400146f0
mov byte [rax], dil
inc rsi
cmp rsi, 5
jb 0x1400101a0
mov byte [rbp + 0x1d6], 0
lea r9, [rbp + 0x1d1]
mov ecx, reloc.WS2_32.dll_sendto
call fcn.140005790
mov r8, rax
movzx eax, byte [rbp + 0x1d1]
cmp al, 0x30
jl 0x140010228
nop word [rax + rax]
cmp al, 0x39
jg 0x140010228
mov ecx, 0xc76
call fcn.140005790
imul r8d, eax
movsx eax, byte [r9]
add r8d, 0xffffffd0
add r8d, eax
inc r9
movzx eax, byte [r9]
cmp al, 0x30
jge 0x140010200
cmp dword [rbp + 0x88], r8d
je 0x140011df1
movsd xmm0, qword [str.NYOVM___D]
movsd qword [rbp + 0x1e8], xmm0
mov eax, dword [0x1401c9ca8]
mov dword [rbp + 0x1f0], eax
cmp byte [0x1401c9cab], 0
je 0x1400103bf
mov r8d, ebx
cmp r15d, 2
jl 0x14001037d
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movd xmm5, r13d
movdqa xmm2, xmmword [0x1401cdaf0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401cdb10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
mov eax, dword [0x1401cdbe0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [str.NYOVM___D]
pxor xmm2, xmm1
movd dword [rbp + 0x1e8], xmm2
movdqa xmm3, xmmword [0x1401cdb00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401cdb10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x1ec]
pxor xmm2, xmm1
movd dword [rbp + 0x1ec], xmm2
mov r8d, 8
mov eax, r8d
lea r9, [rbp + 0x1e8]
add r9, rax
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140010390
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x298], rbx
mov qword [rbp + 0x2a0], rbx
lea rax, [rsp + 0x52]
mov qword [rbp - 8], rax
mov ecx, reloc.WS2_32.dll_recv
call fcn.14001be30
mov qword [rbp - 0x10], rax
lea rcx, [rbp + 0x280]
mov qword [rax], rcx
mov qword [rax + 8], rbx
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x298], rbx
mov qword [rbp + 0x2a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x288], 0
lea rax, [rbp + 0x1e8]
mov r8, r14
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140010430
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x280]
call fcn.140018160
nop
mov eax, dword [0x1401c9c30]
mov dword [rbp + 0x1a0], eax
movzx eax, byte [0x1401c9c34]
mov byte [rbp + 0x1a0], reloc.WLDAP32.dll_Ordinal_46
xor byte [rbp + 0x1a1], 0x3a
xor byte [rbp + 0x1a2], 0x3b
xor byte [rbp + 0x1a3], 0x3c
xor al, 0x3d
mov byte [rbp + 0x1a4], al
movups xmm0, xmmword [0x1401c97d8]
movups xmmword [rbp + 0x2c0], xmm0
mov eax, dword [0x1401c97e8]
mov dword [rbp + 0x2d0], eax
movzx eax, byte [0x1401c97ec]
mov byte [rbp + 0x2d4], al
mov r8d, ebx
cmp r15d, 2
jl 0x140010607
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x2c0]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140010500
cmp r8d, 0x15
jge 0x14001064f
movsxd rax, r8d
lea r9, [rbp + 0x2c0]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x140010620
lea r8, [rbp + 0x280]
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x5f8]
call fcn.14001a730
nop
lea rcx, [rbp + 0x1a0]
mov r8, r14
inc r8
cmp byte [rcx + r8], 0
jne 0x140010674
lea rdx, [rbp + 0x1a0]
mov rcx, rax
call fcn.1400151b0
mov rdi, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3e0], xmm0
mov qword [rbp + 0x3f8], rbx
mov qword [rbp + 0x400], rbx
mov ecx, reloc.WS2_32.dll_recv
call fcn.14001be30
mov qword [rax + 8], rbx
mov qword [rbp + 0x3e0], rax
lea rcx, [rbp + 0x3e0]
mov qword [rax], rcx
mov rdx, rdi
lea rcx, [rbp + 0x3e0]
call fcn.140018450
nop
lea rcx, [rbp + 0x5f8]
call fcn.140017db0
mov rcx, qword [rbp + 0x5f8]
mov qword [rbp + 0x5f8], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
lea rcx, [rbp + 0x3e0]
call fcn.14000cea0
mov rcx, rax
call fcn.14013a380
movsd xmm0, qword [str.owso]
movsd qword [rbp + 0x1c0], xmm0
movzx eax, word [0x1401cd8c0]
mov word [rbp + 0x1c8], ax
movzx eax, byte [0x1401cd8c2]
mov byte [rbp + 0x1c0], 0x56
xor byte [rbp + 0x1c1], 0x3a
xor byte [rbp + 0x1c2], 0x3b
xor byte [rbp + 0x1c3], 0x3c
xor byte [rbp + 0x1c4], 0x3d
xor byte [rbp + 0x1c5], 0x3e
xor byte [rbp + 0x1c6], 0x3f
xor byte [rbp + 0x1c7], 0x40
xor byte [rbp + 0x1c8], 0x41
xor byte [rbp + 0x1c9], 0x42
xor al, 0x43
mov byte [rbp + 0x1ca], al
lea rdx, [rbp + 0x1c0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140010951
mov edx, 7
lea rcx, [rbp + 0x5a8]
call fcn.14000cf90
mov rcx, rax
call fcn.140014e80
mov r11, rax
lea rdx, [rbp + 0x410]
call fcn.140012a60
mov r10, rax
cmp byte [rax + 0x31], 0
je 0x1400127e0
cmp r15d, 2
jl 0x140010917
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
mov rcx, rax
mov edx, dword [rsp + 0x40]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add ebx, 8
lea rcx, [rcx + 8]
cmp ebx, 0x30
jl 0x140010811
cmp ebx, 0x32
jge 0x1400127e0
movsxd r8, ebx
add r8, r10
nop dword [rax]
mov eax, 0x94f2095
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, bl
sub al, cl
add al, 0x39
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x32
jge 0x1400127e0
jmp 0x140010920
mov edx, 6
lea rcx, [rbp + 0x620]
call fcn.14000cf90
lea r10, [rax + 8]
cmp qword [rax + 0x20], 0x10
jb 0x140010970
mov r10, qword [r10]
movups xmm0, xmmword [0x1401cd940]
movups xmmword [rbp + 0x6f0], xmm0
movups xmm1, xmmword [0x1401cd950]
movups xmmword [rbp + 0x700], xmm1
movups xmm0, xmmword [0x1401cd960]
movups xmmword [rbp + 0x710], xmm0
movups xmm1, xmmword [0x1401cd970]
movups xmmword [rbp + 0x720], xmm1
movups xmm0, xmmword [str.b:_6n]
movups xmmword [rbp + 0x730], xmm0
movups xmm1, xmmword [0x1401cd990]
movups xmmword [rbp + 0x740], xmm1
mov eax, dword [0x1401cd9a0]
mov dword [rbp + 0x750], eax
mov r8d, ebx
cmp r15d, 2
jl 0x140010b27
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x6f0]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x60
jl 0x140010a20
cmp r8d, 0x64
jge 0x140010b6f
movsxd rax, r8d
lea r9, [rbp + 0x6f0]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x64
jl 0x140010b40
mov r9d, 0x40034
mov r8, r10
lea rdx, [rbp + 0x6f0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edi, eax
lea rcx, [rbp + 0x620]
call fcn.140017db0
mov rcx, qword [rbp + 0x620]
mov qword [rbp + 0x620], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
cmp edi, 6
jne 0x140010bc8
mov byte [0x1404df3b9], 1
call fcn.140004560
test al, al
je 0x140012809
jmp 0x140010bcf
mov byte [0x1404df3b9], 0
mov edx, inet_ntoa
lea rcx, [rbp + 0x580]
call fcn.14000cf90
nop
movsd xmm0, qword [str.MP__XLL_17.G]
movsd qword [rbp + 0x1f8], xmm0
mov eax, dword [0x1401cdad0]
mov dword [rbp + 0x200], eax
movzx eax, word [0x1401cdad4]
mov word [rbp + 0x204], ax
movzx eax, byte [0x1401cdad6]
mov byte [rbp + 0x206], al
mov r8d, ebx
cmp r15d, 2
jl 0x140010d37
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movd xmm5, r13d
movdqa xmm2, xmmword [0x1401cdaf0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401cdb10]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
mov eax, dword [0x1401cdbe0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [str.MP__XLL_17.G]
pxor xmm2, xmm1
movd dword [rbp + 0x1f8], xmm2
movdqa xmm3, xmmword [0x1401cdb00]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401cdb10]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x1fc]
pxor xmm2, xmm1
movd dword [rbp + 0x1fc], xmm2
mov r8d, 8
mov eax, r8d
lea r9, [rbp + 0x1f8]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x140010d50
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x208], xmm0
mov qword [rbp + 0x220], rbx
mov qword [rbp + 0x228], rbx
lea rax, [rsp + 0x53]
mov qword [rbp - 0x38], rax
mov ecx, reloc.WS2_32.dll_recv
call fcn.14001be30
mov qword [rbp - 0x40], rax
lea rcx, [rbp + 0x208]
mov qword [rax], rcx
mov qword [rax + 8], rbx
mov qword [rbp + 0x208], rax
mov qword [rbp + 0x220], rbx
mov qword [rbp + 0x228], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x210], 0
lea rax, [rbp + 0x1f8]
mov r8, r14
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140010df0
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x208]
call fcn.140018160
nop
mov eax, dword [0x1401c9a50]
mov dword [rbp + 0x1a8], eax
movzx eax, byte [0x1401c9a54]
mov byte [rbp + 0x1a8], reloc.WLDAP32.dll_Ordinal_46
xor byte [rbp + 0x1a9], 0x3a
xor byte [rbp + 0x1aa], 0x3b
xor byte [rbp + 0x1ab], 0x3c
xor al, 0x3d
mov byte [rbp + 0x1ac], al
movups xmm0, xmmword [0x1401c97d8]
movups xmmword [rbp + 0x2d8], xmm0
mov eax, dword [0x1401c97e8]
mov dword [rbp + 0x2e8], eax
movzx eax, byte [0x1401c97ec]
mov byte [rbp + 0x2ec], al
mov r8d, ebx
cmp r15d, 2
jl 0x140010fc7
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x2d8]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140010ec0
cmp r8d, 0x15
jge 0x14001100f
movsxd rax, r8d
lea r9, [rbp + 0x2d8]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x140010fe0
lea r8, [rbp + 0x580]
lea rdx, [rbp + 0x2d8]
lea rcx, [rbp + 0x648]
call fcn.14001a730
nop
lea rcx, [rbp + 0x1a8]
mov r8, r14
inc r8
cmp byte [rcx + r8], 0
jne 0x140011034
lea rdx, [rbp + 0x1a8]
mov rcx, rax
call fcn.1400151b0
mov rdi, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x320], xmm0
mov qword [rbp + 0x338], rbx
mov qword [rbp + 0x340], rbx
mov ecx, reloc.WS2_32.dll_recv
call fcn.14001be30
mov qword [rax + 8], rbx
mov qword [rbp + 0x320], rax
lea rcx, [rbp + 0x320]
mov qword [rax], rcx
mov rdx, rdi
lea rcx, [rbp + 0x320]
call fcn.140018450
nop
lea rcx, [rbp + 0x648]
call fcn.140017db0
mov rcx, qword [rbp + 0x648]
mov qword [rbp + 0x648], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
mov eax, dword [0x1401c9c30]
mov dword [rbp + 0x1b0], eax
movzx eax, byte [0x1401c9c34]
mov byte [rbp + 0x1b0], reloc.WLDAP32.dll_Ordinal_46
xor byte [rbp + 0x1b1], 0x3a
xor byte [rbp + 0x1b2], 0x3b
xor byte [rbp + 0x1b3], 0x3c
xor al, 0x3d
mov byte [rbp + 0x1b4], al
movups xmm0, xmmword [0x1401c97d8]
movups xmmword [rbp + 0x2f0], xmm0
mov eax, dword [0x1401c97e8]
mov dword [rbp + 0x300], eax
movzx eax, byte [0x1401c97ec]
mov byte [rbp + 0x304], al
mov r8d, ebx
cmp r15d, 2
jl 0x140011269
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x2f0]
mov edx, dword [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140011162
cmp r8d, 0x15
jge 0x1400112af
movsxd rax, r8d
lea r9, [rbp + 0x2f0]
add r9, rax
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x140011280
lea r8, [rbp + 0x208]
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x670]
call fcn.14001a730
nop
lea rcx, [rbp + 0x1b0]
mov r8, r14
inc r8
cmp byte [rcx + r8], 0
jne 0x1400112d4
lea rdx, [rbp + 0x1b0]
mov rcx, rax
call fcn.1400151b0
mov rdi, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x248], rbx
mov qword [rbp + 0x250], rbx
mov ecx, reloc.WS2_32.dll_recv
call fcn.14001be30
mov qword [rax + 8], rbx
mov qword [rbp + 0x230], rax
lea rcx, [rbp + 0x230]
mov qword [rax], rcx
mov rdx, rdi
lea rcx, [rbp + 0x230]
call fcn.140018450
nop
lea rcx, [rbp + 0x670]
call fcn.140017db0
mov rcx, qword [rbp + 0x670]
mov qword [rbp + 0x670], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
mov eax, dword [0x1401c9c30]
mov dword [rbp + 0x1b8], eax
movzx eax, byte [0x1401c9c34]
mov byte [rbp + 0x1b8], reloc.WLDAP32.dll_Ordinal_46
xor byte [rbp + 0x1b9], 0x3a
xor byte [rbp + 0x1ba], 0x3b
xor byte [rbp + 0x1bb], 0x3c
xor al, 0x3d
mov byte [rbp + 0x1bc], al
movups xmm0, xmmword [0x1401c9c38]
movups xmmword [rbp + 0x348], xmm0
movsd xmm1, qword [0x1401c9c48]
movsd qword [rbp + 0x358], xmm1
movzx eax, word [0x1401c9c50]
mov word [rbp + 0x360], ax
cmp byte [0x1401c9c51], 0
je 0x14001156f
mov r8d, ebx
cmp r15d, 2
jl 0x140011527
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x348]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140011420
cmp r8d, 0x1a
jge 0x14001156f
movsxd rax, r8d
lea r9, [rbp + 0x348]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1a
jl 0x140011540
movups xmm0, xmmword [0x1401c97d8]
movups xmmword [rbp + 0x308], xmm0
mov eax, dword [0x1401c97e8]
mov dword [rbp + 0x318], eax
movzx eax, byte [0x1401c97ec]
mov byte [rbp + 0x31c], al
mov r8d, ebx
cmp r15d, 2
jl 0x1400116e7
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x308]
mov edx, dword [rsp + 0x40]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400115e0
cmp r8d, 0x15
jge 0x14001172f
movsxd rax, r8d
lea r9, [rbp + 0x308]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x140011700
lea r8, [rbp + 0x580]
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x698]
call fcn.14001a730
nop
lea rcx, [rbp + 0x348]
mov r8, r14
inc r8
cmp byte [rcx + r8], 0
jne 0x140011754
lea rdx, [rbp + 0x348]
mov rcx, rax
call fcn.1400151b0
mov rdi, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0x3a8], rbx
mov qword [rbp + 0x3b0], rbx
mov ecx, reloc.WS2_32.dll_recv
call fcn.14001be30
mov qword [rax + 8], rbx
mov qword [rbp + 0x390], rax
lea rcx, [rbp + 0x390]
mov qword [rax], rcx
mov rdx, rdi
lea rcx, [rbp + 0x390]
call fcn.140018450
nop
lea rdx, [rbp + 0x210]
cmp qword [rbp + 0x228], 0x10
cmovae rdx, qword [rbp + 0x210]
mov r8, qword [rbp + 0x220]
lea rcx, [rbp + 0x390]
call fcn.1400151b0
mov rdi, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x368], xmm0
mov qword [rbp + 0x380], rbx
mov qword [rbp + 0x388], rbx
mov ecx, reloc.WS2_32.dll_recv
call fcn.14001be30
mov qword [rax + 8], rbx
mov qword [rbp + 0x368], rax
lea rcx, [rbp + 0x368]
mov qword [rax], rcx
mov rdx, rdi
lea rcx, [rbp + 0x368]
call fcn.140018450
nop
lea rax, [rbp + 0x1b8]
mov r8, r14
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140011840
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp + 0x368]
call fcn.1400151b0
mov rdi, rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x3b8], xmm0
mov qword [rbp + 0x3d0], rbx
mov qword [rbp + 0x3d8], rbx
mov ecx, reloc.WS2_32.dll_recv
call fcn.14001be30
mov qword [rax + 8], rbx
mov qword [rbp + 0x3b8], rax
lea rcx, [rbp + 0x3b8]
mov qword [rax], rcx
mov rdx, rdi
lea rcx, [rbp + 0x3b8]
call fcn.140018450
nop
lea rcx, [rbp + 0x368]
call fcn.140017db0
mov rcx, qword [rbp + 0x368]
mov qword [rbp + 0x368], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
nop
lea rcx, [rbp + 0x390]
call fcn.140017db0
mov rcx, qword [rbp + 0x390]
mov qword [rbp + 0x390], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
nop
lea rcx, [rbp + 0x698]
call fcn.140017db0
mov rcx, qword [rbp + 0x698]
mov qword [rbp + 0x698], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
lea rcx, [rbp + 0x320]
call fcn.14000cea0
mov dword [rbp + 0x190], ebx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdi, rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x190]
mov r8d, 0xa7a00
lea rdx, [0x1401f01a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.14013dec0
mov r8d, eax
mov eax, 0x55555556
imul r8d
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*2]
sub r8d, ecx
mov eax, r8d
neg eax
test r8d, r8d
cmovns eax, r8d
test eax, eax
jne 0x1400119f1
lea rcx, [rbp + 0x230]
call fcn.14000cea0
mov dword [rbp + 0x190], ebx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea rdx, [0x14029d5a0]
jmp 0x140011a7f
cmp eax, 1
jne 0x140011a39
lea rcx, [rbp + 0x230]
call fcn.14000cea0
mov dword [rbp + 0x190], ebx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea rdx, [0x140297ba0]
jmp 0x140011a7f
cmp eax, 2
jne 0x140011aa6
lea rcx, [rbp + 0x230]
call fcn.14000cea0
mov dword [rbp + 0x190], ebx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea rdx, [0x1404d5d00]
mov qword [rsp + 0x20], rbx
mov rdi, rax
lea r9, [rbp + 0x190]
mov r8d, 0x5a00
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x3b8]
call fcn.14000cea0
mov rcx, rax
call fcn.14013ff30
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x320]
call fcn.14000cea0
mov rcx, rax
call fcn.14013a380
lea rcx, [rbp + 0x230]
call fcn.14000cea0
mov rcx, rax
call fcn.14013a380
mov eax, dword [str.ZVH_QNOLN]
mov dword [rbp + 0x190], eax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], 0
je 0x140011be2
mov r8d, ebx
cmp r15d, 2
jl 0x140011ba8
movdqa xmm3, xmmword [0x1401cdaf0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1401cdb80]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1401cdb80]
shufps xmm2, xmm0, 0xdd
movd xmm0, r12d
psrad xmm2, xmm0
movd xmm0, r13d
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1401cdb10]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401cdbe0]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rbp + 0x190], xmm2
jmp 0x140011be2
lea r9, [rbp + 0x190]
nop
mov eax, 0x29e4129f
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140011bb0
lea rcx, [rbp + 0x190]
call fcn.14013ff30
mov eax, dword [str.ZVH_QNOLN]
mov dword [rbp + 0x190], eax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], 0
je 0x140011ce2
mov r8d, ebx
cmp r15d, 2
jl 0x140011c9e
movdqa xmm3, xmmword [0x1401cdaf0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1401cdb80]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1401cdb80]
shufps xmm2, xmm0, 0xdd
movd xmm0, r12d
psrad xmm2, xmm0
movd xmm0, r13d
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1401cdb10]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401cdbe0]
movd xmm0, eax
pxor xmm2, xmm0
movd dword [rbp + 0x190], xmm2
jmp 0x140011ce2
lea r9, [rbp + 0x190]
nop word [rax + rax]
mov eax, 0x29e4129f
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140011cb0
lea rcx, [rbp + 0x190]
call fcn.14013ff30
nop
lea rcx, [rbp + 0x3b8]
call fcn.140017db0
mov rcx, qword [rbp + 0x3b8]
mov qword [rbp + 0x3b8], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
nop
lea rcx, [rbp + 0x230]
call fcn.140017db0
mov rcx, qword [rbp + 0x230]
mov qword [rbp + 0x230], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
nop
lea rcx, [rbp + 0x320]
call fcn.140017db0
mov rcx, qword [rbp + 0x320]
mov qword [rbp + 0x320], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
nop
lea rcx, [rbp + 0x208]
call fcn.140017db0
mov rcx, qword [rbp + 0x208]
mov qword [rbp + 0x208], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
nop
lea rcx, [rbp + 0x580]
call fcn.140017db0
mov rcx, qword [rbp + 0x580]
mov qword [rbp + 0x580], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
nop
lea rcx, [rbp + 0x3e0]
call fcn.140017db0
mov rcx, qword [rbp + 0x3e0]
mov qword [rbp + 0x3e0], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
nop
lea rcx, [rbp + 0x280]
call fcn.140017db0
mov rcx, qword [rbp + 0x280]
mov qword [rbp + 0x280], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
mov edx, 7
lea rcx, [rbp + 0x5a8]
call fcn.14000cf90
lea r10, [rax + 8]
cmp qword [rax + 0x20], 0x10
jb 0x140011e14
mov r10, qword [r10]
movups xmm0, xmmword [0x1401c9c80]
movups xmmword [rbp + 0x470], xmm0
movsd xmm1, qword [0x1401c9c90]
movsd qword [rbp + 0x480], xmm1
mov eax, dword [0x1401c9c98]
mov dword [rbp + 0x488], eax
movzx eax, byte [0x1401c9c9c]
mov byte [rbp + 0x48c], al
mov r8d, ebx
cmp r15d, 2
jl 0x140011fa7
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x470]
mov edx, dword [rsp + 0x40]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140011ea0
cmp r8d, 0x1d
jge 0x140011fef
movsxd rax, r8d
lea r9, [rbp + 0x470]
add r9, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x140011fc0
mov r9d, 0x40030
mov r8, r10
lea rdx, [rbp + 0x470]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x5a8]
call fcn.140017db0
mov rcx, qword [rbp + 0x5a8]
mov qword [rbp + 0x5a8], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
mov eax, dword [0x1401c9744]
mov dword [rbp + 0x198], eax
movzx eax, word [0x1401c9748]
mov word [rbp + 0x19c], ax
mov byte [rbp + 0x198], gethostbyname
xor byte [rbp + 0x199], 0x3a
xor byte [rbp + 0x19a], 0x3b
xor byte [rbp + 0x19b], 0x3c
xor byte [rbp + 0x19c], 0x3d
xor byte [rbp + 0x19d], 0x3e
movups xmm0, xmmword [0x1401c97f0]
movups xmmword [rbp + 0x490], xmm0
movups xmm1, xmmword [0x1401c9800]
movups xmmword [rbp + 0x4a0], xmm1
movzx eax, word [0x1401c9810]
mov word [rbp + 0x4b0], ax
mov r8d, ebx
cmp r15d, 2
jl 0x1400121e8
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rbp + 0x490]
mov edx, dword [rsp + 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x1400120e1
cmp r8d, 0x22
jge 0x14001222f
movsxd rax, r8d
lea r9, [rbp + 0x490]
add r9, rax
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x22
jl 0x140012200
lea rdx, [rbp + 0x490]
lea rcx, [rbp + 0x50]
call fcn.140015570
mov rdx, rax
lea rcx, [rbp + 0x508]
call fcn.14000efa0
lea rcx, [rbp + 0x198]
inc r14
cmp byte [rcx + r14], 0
jne 0x140012255
mov r8, qword [rax + 0x18]
lea rcx, [rax + 8]
cmp qword [rax + 0x20], 0x10
jb 0x140012275
mov rcx, qword [rcx]
cmp r8, r14
jne 0x140012940
lea rdx, [rbp + 0x198]
call fcn.140114e20
test eax, eax
jne 0x140012940
lea rcx, [rbp + 0x508]
call fcn.140017db0
mov rcx, qword [rbp + 0x508]
mov qword [rbp + 0x508], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
mov ecx, 8
call fcn.14002e3e0
lea rcx, [0x14000e4b0]
mov qword [rax], rcx
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140027cd0]
xor edx, edx
xor ecx, ecx
call fcn.14013a7d0
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140012931
cmp dword [rsp + 0x78], 0
je 0x140012920
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call fcn.140036b80
test eax, eax
jne 0x140012929
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov dword [rbp + 0x1d8], 0xd8d5d0c6
mov dword [rbp + 0x1dc], 0xc9dfddca
mov dword [rbp + 0x1e0], 0xdac6d892
mov word [rbp + 0x1e4], 0x100
mov rdx, rbx
nop word [rax + rax]
lea eax, [rdx - 0x4c]
xor byte [rbp + rdx + 0x1d8], al
inc rdx
cmp rdx, 0xc
jb 0x140012360
mov byte [rbp + 0x1e5], 0
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0x410]
call fcn.140015570
mov rdi, rax
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
mov dword [rbp + 0x7c0], 0x130
mov r14, rbx
lea rdx, [rbp + 0x7c0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1400123f7
mov rcx, rdi
call fcn.140014e80
mov rdx, rax
lea rcx, [rbp + 0x7ec]
call fcn.140140b30
test eax, eax
je 0x1400123f0
lea rdx, [rbp + 0x7c0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
jmp 0x1400123bb
mov r14d, dword [rbp + 0x7c8]
mov rcx, rdi
call fcn.140017db0
mov rcx, qword [rdi]
mov qword [rdi], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
test r14d, r14d
jne 0x14001242a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov ecx, 0x245
call fcn.14000eaf0
mov ecx, r14d
call fcn.14000ec10
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140012443
lea rcx, [rbp + 0x530]
call fcn.140017db0
mov rcx, qword [rbp + 0x530]
mov qword [rbp + 0x530], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
lea rdx, [rbp + 0x410]
call fcn.140012970
mov r10, rax
cmp byte [rax + 0x27], 0
je 0x140012622
mov r8d, ebx
cmp r15d, 2
jl 0x1400125e1
movdqa xmm5, xmmword [0x1401cdaf0]
mov edx, ebx
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
mov rcx, rax
mov r8d, dword [rsp + 0x40]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x28
jl 0x1400124e0
jmp 0x140012622
mov r9, r10
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x29e4129f
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x28
jl 0x1400125f0
mov rcx, r10
call fcn.14013ff30
call fcn.14000d140
mov r11, rax
lea rdx, [rbp + 0x6f0]
call fcn.1400129a0
mov r10, rax
cmp byte [rax + 0xc7], 0
je 0x140012831
cmp r15d, 2
jl 0x140012795
movdqa xmm5, xmmword [0x1401cdaf0]
movdqa xmm4, xmmword [0x1401cdb80]
movd xmm6, r12d
movdqa xmm7, xmmword [0x1401cdb10]
movd xmm8, r13d
movdqa xmm0, xmmword [0x1401cdbe0]
movdqa xmmword [rsp + 0x40], xmm0
mov rcx, rax
mov edx, dword [rsp + 0x40]
nop
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401cdb70]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add ebx, 8
lea rcx, [rcx + 8]
cmp ebx, 0xc8
jge 0x140012831
jmp 0x140012690
mov r8, r10
nop dword [rax + rax]
mov eax, 0x29e4129f
mul ebx
mov eax, ebx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
movzx eax, bl
sub al, cl
add al, 0x39
xor byte [r8], al
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0xc8
jge 0x140012831
jmp 0x1400127a0
mov dword [rbp - 0x78], ebx
mov ecx, 6
call fcn.14002fc00
nop
mov r9d, 0x40010
mov r8, r11
mov rdx, r10
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x5a8]
call fcn.140015390
mov ecx, r12d
call fcn.140137930
int3
lea rdx, str.Failed_to_FixDriveBlockList_
call fcn.14001a400
mov rcx, rax
call fcn.140013a60
mov ecx, 0x1f40
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, r12d
call fcn.140137930
nop
mov r9d, 0x40010
mov r8, r11
mov rdx, r10
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, r12d
call fcn.140137930
nop
mov dword [rsp + 0x68], ebx
mov ecx, 6
call fcn.14002fc00
nop
mov ecx, r12d
call fcn.14002fc00
int3
mov ecx, eax
call fcn.14002fba0
nop
mov ecx, r12d
call fcn.14002fc00
int3
mov ecx, eax
call fcn.14002fba0
nop
movdqa xmm0, xmmword [0x1401cdc30]
movdqu xmmword [rbp + 0x410], xmm0
movdqa xmm1, xmmword [0x1401cdc50]
movdqu xmmword [rbp + 0x420], xmm1
movdqa xmm0, xmmword [0x1401cdca0]
movdqu xmmword [rbp + 0x430], xmm0
movdqa xmm1, xmmword [0x1401cdbb0]
movdqu xmmword [rbp + 0x440], xmm1
movdqa xmm0, xmmword [str.97P]
movdqu xmmword [rbp + 0x450], xmm0
mov dword [rbp + 0x460], 0xe7a4c0e4
mov dword [rbp + 0x464], 0xe3ddcaac
mov dword [rbp + 0x468], 0x20aac1
mov byte [rbp + 0x46c], 1
lea rcx, [rbp + 0x410]
call fcn.140012a30
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
lea r8, [0x1401c593c]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.140137930
nop
mov ecx, r12d
call fcn.14002fc00
int3
mov ecx, eax
call fcn.14002fba0
nop
mov dword [rsp + 0x78], ebx
mov ecx, 6
call fcn.14002fc00
nop
lea rcx, [rbp + 0x508]
call fcn.140017db0
mov rcx, qword [rbp + 0x508]
mov qword [rbp + 0x508], rbx
mov edx, reloc.WS2_32.dll_recv
call fcn.14001bf10
xor ecx, ecx
call fcn.140137930
int3