Function at 0x140004f00
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x248]
sub rsp, 0x340
movaps xmmword [rax - 0x18], xmm7
mov rax, qword [0x1400f5080]
xor rax, rsp
mov qword [rbp + 0x220], rax
xor esi, esi
cmp byte [reloc.WS2_32.dll_accept], sil
je 0x140005da7
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
cmp byte [0x1400f6600], sil
jne 0x140005032
lea rbx, [0x1400f6608]
nop word [rax + rax]
lea rcx, [0x1400f63f0]
call fcn.1400b9a20
movsd xmm0, qword [0x1400d6098]
movsd qword [rsp + 0x40], xmm0
movzx ecx, word [0x1400d60a0]
mov word [rsp + 0x48], cx
movzx eax, byte [0x1400d60a2]
mov byte [rsp + 0x40], 0xa
xor byte [rsp + 0x41], 0x34
xor byte [rsp + 0x42], 0x35
xor byte [rsp + 0x43], 0x36
xor byte [rsp + 0x44], 0x37
xor byte [rsp + 0x45], 0x38
xor byte [rsp + 0x46], 0x39
xor byte [rsp + 0x47], 0x3a
xor cl, 0x3b
mov byte [rsp + 0x48], cl
xor byte [rsp + 0x49], 0x3c
xor al, 0x3d
mov byte [rsp + 0x4a], al
lea rdx, [rsp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cbd0
mov rdx, rbx
cmp qword [0x1400f6620], 0x10
cmovae rdx, qword [0x1400f6608]
mov r8, qword [0x1400f6618]
mov rcx, rax
call fcn.14000df20
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1400f6600], sil
je 0x140004f80
mov dword [rsp + 0x60], 0x43c80000
mov dword [rsp + 0x64], 0x41f00000
xorps xmm7, xmm7
movss xmm0, dword [0x1400f50f0]
movss xmm1, dword [0x1400f50f4]
mov rcx, qword [0x1400f62e0]
mov eax, dword [rcx + 0x1dc0]
or eax, 1
mov dword [rcx + 0x1dc0], eax
unpcklps xmm0, xmm1
movsd qword [rcx + 0x1dd4], xmm0
xorps xmm1, xmm1
unpcklps xmm1, xmm7
movsd qword [rcx + 0x1ddc], xmm1
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
movss xmm2, dword [0x1400f5104]
mulss xmm2, dword [0x1400e3534]
movss xmm1, dword [0x1400f5100]
mulss xmm1, dword [0x1400e3534]
movss dword [rcx + 0x1de4], xmm1
movss dword [rcx + 0x1de8], xmm2
mov dword [rcx + 0x1dc8], 1
or eax, 0x42
mov dword [rcx + 0x1dc0], eax
mov dword [rcx + 0x1e20], 0x3f800000
lea rcx, [0x1400f67d0]
cmp qword [0x1400f67e8], 0x10
cmovae rcx, qword [0x1400f67d0]
mov r8d, Ordinal_301
lea rdx, reloc.WS2_32.dll_accept
call fcn.14001b7e0
cmp byte [0x1400f62c7], sil
je 0x14000575c
lea rdx, [rsp + 0x60]
lea rcx, str.Inject
call fcn.14004fc30
test al, al
je 0x1400056a3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], rax
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rsi
lea r8d, [rax + 6]
lea rdx, str.097062
lea rcx, [rbp + 0x20]
call fcn.14000d300
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xf0]
lea rcx, [0x1400f63f0]
call fcn.1400b75f0
nop
cmp byte [0x1400f6600], 0
jne 0x140005244
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
mov word [rbp - 0x70], ax
mov dword [rbp - 0x6c], reloc.WLDAP32.dll_Ordinal_45
mov dword [rbp - 0x68], 0x63
mov dword [rbp - 0x64], reloc.WS2_32.dll_ntohl
movdqa xmm0, xmmword [0x1400e3990]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400e37d0]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400e3a40]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1400e3870]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1400e3850]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1400e3a30]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm0, xmmword [0x1400e3780]
movdqa xmmword [rbp], xmm0
mov dword [rbp + 0x10], esi
mov dword [rbp + 0x14], Ordinal_27
lea rcx, [rsp + 0x70]
call fcn.140008080
mov rdx, rax
xor r9d, r9d
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140005660
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x110]
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov qword [rbp + 0xc0], rax
mov word [rbp + 0xc8], ax
movdqa xmm0, xmmword [0x1400e37f0]
movdqu xmmword [rbp + 0xcc], xmm0
movdqa xmm1, xmmword [0x1400e3930]
movdqu xmmword [rbp + 0xdc], xmm1
mov dword [rbp + 0xec], Ordinal_79
lea rcx, [rbp + 0xc0]
call fcn.140007e10
mov rbx, rax
lea rcx, [rbp + 0x80]
call fcn.140004130
nop
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400052c0
mov rdx, rbx
mov rcx, rax
call fcn.14000c1f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x110]
call fcn.140008960
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140005351
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000534c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000534c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c2964
movdqa xmm0, xmmword [0x1400e3640]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x1400053a6
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400053a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400053a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c2964
movdqa xmm0, xmmword [0x1400e3640]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
mov r8, qword [rbp + 0xf8]
mov rdx, qword [rbp + 0xf0]
sub r8, rdx
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x118]
call fcn.14000c610
test rax, rax
jne 0x14000540e
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x110]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
cmp byte [0x1400f62c7], 0
jne 0x140005434
nop word [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1400f62c7], 0
je 0x140005420
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x58], rax
xor eax, eax
mov qword [rsp + 0x70], rax
mov word [rsp + 0x78], ax
movdqa xmm0, xmmword [0x1400e38e0]
movdqu xmmword [rsp + 0x7c], xmm0
movdqa xmm1, xmmword [0x1400e38a0]
movdqu xmmword [rbp - 0x74], xmm1
mov dword [rbp - 0x64], 0x41
lea rcx, [rsp + 0x70]
call fcn.140009930
mov rbx, rax
lea rcx, [rbp + 0x40]
call fcn.140004130
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.14000c9a0
mov rbx, rax
lea rdx, [0x1400f6728]
lea rcx, [rbp + 0x20]
call fcn.14000c320
nop
mov rdx, rbx
mov rcx, rax
call fcn.140003d80
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1400054f5
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400054f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400054f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c2964
lea rax, [rbp + 0x40]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rsi
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea rdx, str.xR_ld2odcOIeYh2nHym_VUjTKdo5hmD24qd4f42A82ATCwmJ0
lea rcx, [rbp + 0x40]
call fcn.14000d300
nop
xor eax, eax
mov qword [rsp + 0x70], rax
mov word [rsp + 0x78], ax
movdqa xmm0, xmmword [0x1400e3820]
movdqu xmmword [rsp + 0x7c], xmm0
movdqa xmm1, xmmword [0x1400e36c0]
movdqu xmmword [rbp - 0x74], xmm1
mov dword [rbp - 0x64], 3
lea rcx, [rsp + 0x70]
call fcn.140007ba0
mov rbx, rax
lea rcx, [rbp + 0xa0]
call fcn.140004130
nop
nop dword [rax]
inc rdi
cmp byte [rbx + rdi], 0
jne 0x140005570
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.14000c1f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.140003ee0
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x140005607
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005601
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005601
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c2964
nop
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x110], rax
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x10c], edx
lea rcx, [rbp + 0x118]
call fcn.140009680
lea rcx, [rbp + 0x120]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1b8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rcx, qword [rbp + 0xf0]
test rcx, rcx
je 0x1400056a3
mov rdx, qword [rbp + 0x100]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000569e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000569e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c2964
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rax
mov dword [rbp - 0x78], 0x61
mov dword [rbp - 0x74], 0x5a
movdqa xmm0, xmmword [0x1400e3970]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400e3740]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400e3980]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400e3650]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x1400e3890]
movdqa xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x56
lea rcx, [rsp + 0x70]
call fcn.1400075b0
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14004fc30
test al, al
je 0x140005da2
lea r8, [0x1400f6790]
cmp qword [0x1400f67a8], 0x10
cmovae r8, qword [0x1400f6790]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x140005da2
mov rdi, qword [0x1400f62e0]
mov rcx, qword [rdi + 0x1d18]
lea rbx, [rcx + 0x204]
add rcx, 0x210
mov rdx, rbx
call fcn.1400363b0
mov dword [rbx], 0x43c80000
and dword [rdi + 0x1e58], 0xfffffffe
mov dword [rsp + 0x44], reloc.WLDAP32.dll_Ordinal_60
mov dword [rsp + 0x48], Ordinal_27
mov dword [rsp + 0x4c], 0x5e
mov dword [rsp + 0x40], 0x79654b
xor eax, eax
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x78], eax
mov byte [rsp + 0x7c], al
movdqa xmm0, xmmword [0x1400e3800]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x1400e39a0]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x1400e38c0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rsp + 0x70]
call fcn.140007280
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x20], rcx
mov r9d, Ordinal_60
lea rbx, [0x1400f6290]
mov r8, rbx
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.1400549a0
lea rdx, [rsp + 0x60]
lea rcx, str.Login
call fcn.14004fc30
test al, al
je 0x1400058ad
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rsi
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rbx + rdi], sil
jne 0x140005852
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp + 0x40]
call fcn.14000d300
lea rdx, [rbp + 0x40]
lea rcx, [0x1400f63f0]
call fcn.1400bb370
cmp byte [0x1400f6600], sil
je 0x14000588c
mov byte [0x1400f62c7], 1
jmp 0x1400058ad
mov rax, qword [0x1400f62e0]
lea rdx, str.Error
mov rcx, qword [rax + 0x1d18]
call fcn.140013220
mov ecx, eax
call fcn.1400214e0
lea rcx, str.Error
call fcn.140021d80
lea rdi, [0x1400f6770]
test al, al
je 0x140005a3b
lea rcx, str.Invalid_or_expired_key._n_n
call fcn.14004f310
mov rbx, qword [0x1400f62e0]
mov rax, qword [rbx + 0x1d18]
cmp byte [rax + 0xd4], sil
jne 0x140005904
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140051470
mov rbx, qword [0x1400f62e0]
movss xmm1, dword [rbx + 0x1670]
movss xmm0, dword [rbx + 0x1674]
mov dword [rsp + 0x40], 0xa
movss dword [rsp + 0x44], xmm1
movss dword [rsp + 0x48], xmm0
lea rcx, [rbx + 0x1e80]
lea rdx, [rsp + 0x40]
call fcn.140035dc0
mov qword [rbx + 0x1670], rsi
mov ecx, 1
call fcn.140010df0
mov dword [rsp + 0x58], 0x42f00000
mov dword [rsp + 0x5c], 0x41f00000
mov dword [rsp + 0x44], reloc.WLDAP32.dll_Ordinal_30
mov dword [rsp + 0x48], 0x5f
mov word [rsp + 0x40], 0x4b4f
mov byte [rsp + 0x42], sil
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.14004fc30
test al, al
je 0x14000598e
call fcn.140021a90
movss xmm1, dword [0x1400e35d8]
movaps xmm0, xmm7
call fcn.140020760
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
mov byte [rbp - 0x80], al
mov dword [rbp - 0x7c], Ordinal_45
mov dword [rbp - 0x78], reloc.WS2_32.dll_WSACleanup
mov dword [rbp - 0x74], 0x58
movdqa xmm0, xmmword [0x1400e3770]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400e3a20]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400e3a10]
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x52
lea rcx, [rsp + 0x70]
call fcn.140006e50
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14004fc30
test al, al
je 0x140005a36
mov r8, rdi
cmp qword [0x1400f6788], 0x10
cmovae r8, qword [0x1400f6770]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.140021f60
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
mov byte [rbp - 0x80], al
mov dword [rbp - 0x7c], reloc.WLDAP32.dll_Ordinal_35
mov dword [rbp - 0x78], 0x46
mov dword [rbp - 0x74], reloc.WS2_32.dll_recvfrom
movdqa xmm0, xmmword [0x1400e3760]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400e3900]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400e3920]
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], gethostname
lea rcx, [rsp + 0x70]
call fcn.140006a20
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14004fc30
test al, al
je 0x140005ad3
cmp qword [0x1400f6788], 0x10
cmovae rdi, qword [0x1400f6770]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rax
mov dword [rbp - 0x78], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp - 0x74], 7
movdqa xmm0, xmmword [0x1400e36f0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400e39f0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400e3700]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400e3730]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x1400e3a00]
movdqa xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], reloc.WS2_32.dll_listen
lea rcx, [rsp + 0x70]
call fcn.140006420
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14004fc30
lea rbx, [0x1400f6790]
test al, al
je 0x140005b86
mov r8, rbx
cmp qword [0x1400f67a8], 0x10
cmovae r8, qword [0x1400f6790]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movdqa xmm0, xmmword [0x1400e3a50]
movdqu xmmword [rbp + 0xf8], xmm0
mov dword [rbp + 0xf0], 0x706c6548
mov byte [rbp + 0xf4], sil
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xf0]
call fcn.14004fc30
test al, al
je 0x140005be1
movdqa xmm0, xmmword [0x1400e3660]
movdqu xmmword [rsp + 0x48], xmm0
mov dword [rsp + 0x40], 0x706c6548
mov byte [rsp + 0x44], sil
lea rcx, [rsp + 0x40]
call fcn.140021440
movdqa xmm0, xmmword [0x1400e3710]
movdqu xmmword [rbp + 0xf8], xmm0
mov dword [rbp + 0xf0], 0x706c6548
mov byte [rbp + 0xf4], sil
lea rcx, [rbp + 0xf0]
call fcn.140021d80
test al, al
je 0x140005da2
lea rcx, str.If_an_error_has_occured__please_nseek_help_in_our_discord_server._n_n
call fcn.14004f310
mov rdi, qword [0x1400f62e0]
mov rax, qword [rdi + 0x1d18]
cmp byte [rax + 0xd4], sil
jne 0x140005c52
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140051470
mov rdi, qword [0x1400f62e0]
movss xmm1, dword [rdi + 0x1670]
movss xmm0, dword [rdi + 0x1674]
mov dword [rsp + 0x40], 0xa
movss dword [rsp + 0x44], xmm1
movss dword [rsp + 0x48], xmm0
lea rcx, [rdi + 0x1e80]
lea rdx, [rsp + 0x40]
call fcn.140035dc0
mov qword [rdi + 0x1670], rsi
mov ecx, 1
call fcn.140010df0
mov dword [rsp + 0x58], 0x42f00000
mov dword [rsp + 0x5c], 0x41f00000
mov dword [rsp + 0x44], 0x46
mov dword [rsp + 0x48], 0x77
mov word [rsp + 0x40], 0x4b4f
mov byte [rsp + 0x42], sil
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.14004fc30
test al, al
je 0x140005cdc
call fcn.140021a90
movss xmm1, dword [0x1400e35d8]
movaps xmm0, xmm7
call fcn.140020760
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rax
mov dword [rbp - 0x78], Ordinal_60
mov dword [rbp - 0x74], reloc.WS2_32.dll_WSAGetLastError
movdqa xmm0, xmmword [0x1400e39e0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1400e37a0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1400e39d0]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400e38f0]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x1400e3960]
movdqa xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x70]
call fcn.140005de0
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.14004fc30
test al, al
je 0x140005d9d
cmp qword [0x1400f67a8], 0x10
cmovae rbx, qword [0x1400f6790]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.140021a90
call fcn.140021f60
call fcn.14001ea80
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.1400c26b0
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret