Function at 0x14004b490
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor
Send data
Send data on socket

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x438]
sub rsp, 0x4f8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
xor esi, esi
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14011d0b4], eax
jle 0x14004b507
lea rcx, [0x14011d0b4]
call fcn.1400a5f58
cmp dword [0x14011d0b4], 0xffffffff
jne 0x14004b507
movaps xmm0, xmmword [0x140100200]
movups xmmword [0x14011d228], xmm0
lea rcx, [0x14011d0b4]
call fcn.1400a5eec
mov eax, dword [0x14011cc78]
inc eax
mov dword [0x14011cc78], eax
mov edi, 2
lea r14, [rdi - 3]
lea r13d, [rdi + 0xd]
cmp eax, 0x1f4
jne 0x14004c4d5
call fcn.14003bf00
mov dword [rbp + 0x450], eax
mov word [rbp + 0x440], 0x7c7e
xor eax, eax
mov byte [rbp + 0x442], al
mov edx, esi
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx + 0x440], al
inc edx
cmp edx, edi
jb 0x14004b550
mov byte [rbp + 0x442], sil
lea rax, [rbp + 0x440]
mov qword [rsp + 0x40], rax
mov byte [rbp + 0x90], sil
xor eax, eax
mov qword [rbp + 0x98], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x90]
call fcn.140081250
movzx eax, byte [rbp + 0x90]
cmp al, 1
jne 0x14004b5cb
cmp qword [rbp + 0x98], rsi
jne 0x14004b5cb
mov r8d, 0x494c
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::object__m_value.object___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x90]
cmp al, dil
jne 0x14004b5f9
cmp qword [rbp + 0x98], rsi
jne 0x14004b5f9
mov r8d, 0x494d
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::array__m_value.array___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x90]
cmp al, 3
jne 0x14004b626
cmp qword [rbp + 0x98], rsi
jne 0x14004b626
mov r8d, 0x494e
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x90]
cmp al, 8
jne 0x14004b64c
cmp qword [rbp + 0x98], rsi
jne 0x14004b64c
mov r8d, 0x494f
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::binary__m_value.binary___nullptr
call fcn.1400bb0d8
mov qword [rbp + 0xa0], rsi
mov byte [rbp + 0xa8], sil
xor eax, eax
mov qword [rbp + 0xb0], rax
movsxd rbx, dword [rbp + 0x450]
xor edx, edx
lea rcx, [rbp + 0xb0]
call fcn.140067d80
mov byte [rbp + 0xa8], 5
mov qword [rbp + 0xb0], rbx
mov qword [rbp + 0xb8], rsi
lea rax, [rbp + 0x90]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x180]
call fcn.140063a90
mov qword [rbp + 0x190], rsi
mov dword [rsp + 0x60], 0x494b5d41
mov dword [rsp + 0x64], 0x535352
mov edx, esi
nop
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rsp + rcx + 0x60], al
inc edx
cmp edx, 7
jb 0x14004b6d0
mov byte [rsp + 0x67], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov byte [rbp + 0x38], 0
xor eax, eax
mov qword [rbp + 0x40], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x38]
call fcn.140081250
movzx eax, byte [rbp + 0x38]
cmp al, 1
jne 0x14004b734
cmp qword [rbp + 0x40], 0
jne 0x14004b734
mov r8d, 0x494c
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::object__m_value.object___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x38]
cmp al, 2
jne 0x14004b75c
cmp qword [rbp + 0x40], 0
jne 0x14004b75c
mov r8d, 0x494d
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::array__m_value.array___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x38]
cmp al, 3
jne 0x14004b784
cmp qword [rbp + 0x40], 0
jne 0x14004b784
mov r8d, 0x494e
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x38]
cmp al, 8
jne 0x14004b7a8
cmp qword [rbp + 0x40], 0
jne 0x14004b7a8
mov r8d, 0x494f
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::binary__m_value.binary___nullptr
call fcn.1400bb0d8
mov qword [rbp + 0x48], rsi
lea rdx, [0x14011cb28]
lea rcx, [rbp + 0x50]
call fcn.14006d400
mov qword [rbp + 0x60], rsi
lea rax, [rbp + 0x38]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x68]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x198]
call fcn.140063a90
mov qword [rbp + 0x1a8], rsi
mov dword [rbp + 0x458], 0x534d5b56
mov word [rbp + 0x45c], 0x5254
xor eax, eax
mov byte [rbp + 0x45e], al
mov edx, esi
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx + 0x458], al
inc edx
cmp edx, 6
jb 0x14004b810
mov byte [rbp + 0x45e], 0
lea rax, [rbp + 0x458]
mov qword [rsp + 0x40], rax
mov byte [rbp - 0x18], 0
xor eax, eax
mov qword [rbp - 0x10], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x18]
call fcn.140081250
movzx eax, byte [rbp - 0x18]
cmp al, 1
jne 0x14004b87b
cmp qword [rbp - 0x10], 0
jne 0x14004b87b
mov r8d, 0x494c
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::object__m_value.object___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp - 0x18]
cmp al, 2
jne 0x14004b8a3
cmp qword [rbp - 0x10], 0
jne 0x14004b8a3
mov r8d, 0x494d
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::array__m_value.array___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp - 0x18]
cmp al, 3
jne 0x14004b8cb
cmp qword [rbp - 0x10], 0
jne 0x14004b8cb
mov r8d, 0x494e
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp - 0x18]
cmp al, 8
jne 0x14004b8ef
cmp qword [rbp - 0x10], 0
jne 0x14004b8ef
mov r8d, 0x494f
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::binary__m_value.binary___nullptr
call fcn.1400bb0d8
mov qword [rbp - 8], rsi
mov dword [rsp + 0x68], 0x595c5054
mov dword [rsp + 0x6c], 0x5b4e1150
mov dword [rsp + 0x70], 0x2d28334c
mov word [rsp + 0x74], 0x2d
mov edx, esi
nop dword [rax]
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rsp + rcx + 0x68], al
inc edx
cmp edx, 0xd
jb 0x14004b920
mov byte [rsp + 0x75], 0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x40], rax
mov byte [rbp], 0
xor eax, eax
mov qword [rbp + 8], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.140081250
movzx eax, byte [rbp]
cmp al, 1
jne 0x14004b984
cmp qword [rbp + 8], 0
jne 0x14004b984
mov r8d, 0x494c
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::object__m_value.object___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp]
cmp al, 2
jne 0x14004b9ac
cmp qword [rbp + 8], 0
jne 0x14004b9ac
mov r8d, 0x494d
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::array__m_value.array___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp]
cmp al, 3
jne 0x14004b9d4
cmp qword [rbp + 8], 0
jne 0x14004b9d4
mov r8d, 0x494e
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp]
cmp al, 8
jne 0x14004b9f8
cmp qword [rbp + 8], 0
jne 0x14004b9f8
mov r8d, 0x494f
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::binary__m_value.binary___nullptr
call fcn.1400bb0d8
mov qword [rbp + 0x10], rsi
lea rax, [rbp - 0x18]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x1b0]
call fcn.140063a90
mov qword [rbp + 0x1c0], rsi
mov dword [rbp + 0x448], 0x4c4854
mov edx, esi
nop dword [rax]
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx + 0x448], al
inc edx
cmp edx, 3
jb 0x14004ba40
mov byte [rbp + 0x44b], 0
lea rax, [rbp + 0x448]
mov qword [rsp + 0x40], rax
mov byte [rbp + 0x150], 0
xor eax, eax
mov qword [rbp + 0x158], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x150]
call fcn.140081250
movzx eax, byte [rbp + 0x150]
cmp al, 1
jne 0x14004babd
cmp qword [rbp + 0x158], 0
jne 0x14004babd
mov r8d, 0x494c
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::object__m_value.object___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x150]
cmp al, 2
jne 0x14004baeb
cmp qword [rbp + 0x158], 0
jne 0x14004baeb
mov r8d, 0x494d
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::array__m_value.array___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x150]
cmp al, 3
jne 0x14004bb19
cmp qword [rbp + 0x158], 0
jne 0x14004bb19
mov r8d, 0x494e
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x150]
cmp al, 8
jne 0x14004bb40
cmp qword [rbp + 0x158], 0
jne 0x14004bb40
mov r8d, 0x494f
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::binary__m_value.binary___nullptr
call fcn.1400bb0d8
mov qword [rbp + 0x160], rsi
lea rax, [0x140118fb0]
cmp qword [0x140118fc8], 0x10
cmovae rax, qword [0x140118fb0]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x168]
call fcn.140074ed0
mov qword [rbp + 0x178], rsi
lea rax, [rbp + 0x150]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x180]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x1c8]
call fcn.140063a90
mov qword [rbp + 0x1d8], rsi
mov dword [rbp - 0x48], 0x524d575a
mov dword [rbp - 0x44], 0x515f4e5e
mov dword [rbp - 0x40], 0x25325e
mov edx, esi
nop dword [rax]
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx - 0x48], al
inc edx
cmp edx, 0xb
jb 0x14004bbd0
mov byte [rbp - 0x3d], 0
lea rax, [rbp - 0x48]
mov qword [rsp + 0x40], rax
mov byte [rbp + 0x120], 0
xor eax, eax
mov qword [rbp + 0x128], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x120]
call fcn.140081250
movzx eax, byte [rbp + 0x120]
cmp al, 1
jne 0x14004bc44
cmp qword [rbp + 0x128], 0
jne 0x14004bc44
mov r8d, 0x494c
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::object__m_value.object___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x120]
cmp al, 2
jne 0x14004bc72
cmp qword [rbp + 0x128], 0
jne 0x14004bc72
mov r8d, 0x494d
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::array__m_value.array___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x120]
cmp al, 3
jne 0x14004bca0
cmp qword [rbp + 0x128], 0
jne 0x14004bca0
mov r8d, 0x494e
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0x120]
cmp al, 8
jne 0x14004bcc7
cmp qword [rbp + 0x128], 0
jne 0x14004bcc7
mov r8d, 0x494f
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::binary__m_value.binary___nullptr
call fcn.1400bb0d8
mov qword [rbp + 0x130], rsi
lea rax, [0x140119030]
cmp qword [0x140119048], 0x10
cmovae rax, qword [0x140119030]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x138]
call fcn.140074ed0
mov qword [rbp + 0x148], rsi
lea rax, [rbp + 0x120]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x150]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x1e0]
call fcn.140063a90
mov qword [rbp + 0x1f0], rsi
mov dword [rbp - 0x78], 0x5e4b595f
mov dword [rbp - 0x74], 0x48544e5f
mov word [rbp - 0x70], 0x5a
mov edx, esi
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx - 0x78], al
inc edx
cmp edx, 9
jb 0x14004bd50
mov byte [rbp - 0x6f], 0
lea rax, [rbp - 0x78]
mov qword [rsp + 0x40], rax
mov byte [rbp + 0xf0], 0
xor eax, eax
mov qword [rbp + 0xf8], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xf0]
call fcn.140081250
movzx eax, byte [rbp + 0xf0]
cmp al, 1
jne 0x14004bdc4
cmp qword [rbp + 0xf8], 0
jne 0x14004bdc4
mov r8d, 0x494c
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::object__m_value.object___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0xf0]
cmp al, 2
jne 0x14004bdf2
cmp qword [rbp + 0xf8], 0
jne 0x14004bdf2
mov r8d, 0x494d
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::array__m_value.array___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0xf0]
cmp al, 3
jne 0x14004be20
cmp qword [rbp + 0xf8], 0
jne 0x14004be20
mov r8d, 0x494e
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0xf0]
cmp al, 8
jne 0x14004be47
cmp qword [rbp + 0xf8], 0
jne 0x14004be47
mov r8d, 0x494f
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::binary__m_value.binary___nullptr
call fcn.1400bb0d8
mov qword [rbp + 0x100], rsi
lea rax, [0x140118eb0]
cmp qword [0x140118ec8], 0x10
cmovae rax, qword [0x140118eb0]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x108]
call fcn.140074ed0
mov qword [rbp + 0x118], rsi
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x120]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x1f8]
call fcn.140063a90
mov qword [rbp + 0x208], rsi
mov dword [rbp - 0x68], 0x55545d5a
mov dword [rbp - 0x64], 0x565e4549
mov dword [rbp - 0x60], 0x323056
mov edx, esi
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx - 0x68], al
inc edx
cmp edx, 0xb
jb 0x14004bed0
mov byte [rbp - 0x5d], 0
lea rax, [rbp - 0x68]
mov qword [rsp + 0x40], rax
mov byte [rbp + 0xc0], 0
xor eax, eax
mov qword [rbp + 0xc8], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xc0]
call fcn.140081250
movzx eax, byte [rbp + 0xc0]
cmp al, 1
jne 0x14004bf44
cmp qword [rbp + 0xc8], 0
jne 0x14004bf44
mov r8d, 0x494c
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::object__m_value.object___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0xc0]
cmp al, 2
jne 0x14004bf72
cmp qword [rbp + 0xc8], 0
jne 0x14004bf72
mov r8d, 0x494d
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::array__m_value.array___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0xc0]
cmp al, 3
jne 0x14004bfa0
cmp qword [rbp + 0xc8], 0
jne 0x14004bfa0
mov r8d, 0x494e
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::string__m_value.string___nullptr
call fcn.1400bb0d8
movzx eax, byte [rbp + 0xc0]
cmp al, 8
jne 0x14004bfc7
cmp qword [rbp + 0xc8], 0
jne 0x14004bfc7
mov r8d, 0x494f
lea rdx, str.C:UsersAdministratorDesktopLauncherV2LauncherV2json.hpp
lea rcx, str.m_type___value_t::binary__m_value.binary___nullptr
call fcn.1400bb0d8
mov qword [rbp + 0xd0], rsi
lea rax, [0x140118f30]
cmp qword [0x140118f48], 0x10
cmovae rax, qword [0x140118f30]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xd8]
call fcn.140074ed0
mov qword [rbp + 0xe8], rsi
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x210]
call fcn.140063a90
mov qword [rbp + 0x220], rsi
lea rax, [rbp + 0x180]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x228]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x18]
call fcn.140063a90
nop
lea r9, [0x140041c90]
mov edx, SafeArrayPutElement
lea r8d, [rdx - 0x11]
lea rcx, [rbp + 0x180]
call fcn.1400a600c
nop
lea r9, [0x140041c90]
mov r8, rdi
mov edx, SafeArrayPutElement
lea rcx, [rbp + 0xc0]
call fcn.1400a600c
nop
lea r9, [0x140041c90]
mov r8, rdi
mov edx, SafeArrayPutElement
lea rcx, [rbp + 0xf0]
call fcn.1400a600c
nop
lea r9, [0x140041c90]
mov r8, rdi
mov edx, SafeArrayPutElement
lea rcx, [rbp + 0x120]
call fcn.1400a600c
nop
lea r9, [0x140041c90]
mov r8, rdi
mov edx, SafeArrayPutElement
lea rcx, [rbp + 0x150]
call fcn.1400a600c
nop
lea r9, [0x140041c90]
mov r8, rdi
mov edx, SafeArrayPutElement
lea rcx, [rbp - 0x18]
call fcn.1400a600c
nop
lea r9, [0x140041c90]
mov r8, rdi
mov edx, SafeArrayPutElement
lea rcx, [rbp + 0x38]
call fcn.1400a600c
nop
lea r9, [0x140041c90]
mov r8, rdi
mov edx, SafeArrayPutElement
lea rcx, [rbp + 0x90]
call fcn.1400a600c
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x18]
call fcn.140063380
nop
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0x10
cmovae rdx, qword [rbp - 0x38]
xor r9d, r9d
mov r8d, dword [rbp - 0x28]
mov rcx, qword [0x14011c950]
call qword [sym.imp.WS2_32.dll_send]
lea rcx, [rsp + 0x68]
call fcn.140063dc0
nop
mov ebx, esi
xor dil, dil
cmp byte [0x14011cc7c], 0
je 0x14004c1cb
test dil, dil
jne 0x14004c1cb
cmp byte [0x14011cc7f], dil
jne 0x14004c1a4
nop word [rax + rax]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14011cc7f], 0
je 0x14004c190
mov dil, 1
mov ebx, esi
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0x10
cmovae rdx, qword [rbp - 0x38]
xor r9d, r9d
mov r8d, dword [rbp - 0x28]
mov rcx, qword [0x14011c950]
call qword [sym.imp.WS2_32.dll_send]
mov r8, qword [0x14011c9c8]
mov rax, qword [r8 + 8]
mov rcx, r8
mov edx, dword [rbp + 0x450]
cmp byte [rax + 0x19], 0
jne 0x14004c1fc
cmp dword [rax + 0x20], edx
jge 0x14004c1f0
mov rax, qword [rax + 0x10]
jmp 0x14004c1f6
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x14004c1e5
cmp byte [rcx + 0x19], 0
jne 0x14004c20c
cmp edx, dword [rcx + 0x20]
jl 0x14004c20c
cmp rcx, r8
jne 0x14004c227
inc ebx
cmp ebx, 0x32
je 0x14004d15a
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14004c173
lea rdx, [rbp + 0x450]
call fcn.14005e580
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400636e0
mov rdi, rax
mov rcx, rax
call fcn.140068490
movzx ecx, byte [rsp + 0x68]
movzx r15d, byte [rdi]
mov byte [rbp + 0x448], r15b
mov byte [rsp + 0x68], r15b
mov byte [rdi], cl
mov rdx, qword [rsp + 0x70]
mov rsi, qword [rdi + 8]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x70], rsi
mov qword [rdi + 8], rdx
lea rcx, [rsp + 0x68]
call fcn.140068490
nop
mov rcx, rdi
call fcn.140068490
movzx edx, byte [rdi]
lea rcx, [rdi + 8]
call fcn.140067d80
nop
mov dword [rbp + 0x458], 0x4e504d46
xor eax, eax
mov byte [rbp + 0x45c], al
xor edx, edx
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx + 0x458], al
inc edx
cmp edx, 4
jb 0x14004c2b0
mov byte [rbp + 0x45c], 0
cmp r15b, 1
sete bl
mov byte [rbp + 0x440], bl
jne 0x14004c377
mov r12, qword [rsi]
mov rdi, qword [r12 + 8]
mov r15, r12
cmp byte [rdi + 0x19], 0
jne 0x14004c353
nop
lea rcx, [rdi + 0x20]
lea rax, [rbp + 0x458]
mov rbx, r14
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x14004c300
mov rsi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x14004c317
mov rcx, qword [rcx]
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
lea rdx, [rbp + 0x458]
call fcn.1400a9040
test eax, eax
je 0x14004c6a4
js 0x14004c6ad
mov r15, rdi
mov rdi, qword [rdi]
cmp byte [rdi + 0x19], 0
je 0x14004c2f0
mov rsi, qword [rsp + 0x40]
movzx ebx, byte [rbp + 0x440]
cmp byte [r15 + 0x19], 0
jne 0x14004c377
lea rdx, [r15 + 0x20]
lea rcx, [rbp + 0x458]
call fcn.140081e90
test al, al
jne 0x14004c377
cmp r15, r12
jne 0x14004d15a
mov dword [rbp + 0x440], 0x595a4d44
mov dword [rbp + 0x444], 0x4e4f5e
xor edx, edx
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx + 0x440], al
inc edx
cmp edx, 7
jb 0x14004c390
mov byte [rbp + 0x447], 0
test bl, bl
je 0x14004d15a
mov r12, qword [rsi]
mov rdi, qword [r12 + 8]
mov r15, r12
cmp byte [rdi + 0x19], 0
jne 0x14004c427
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rdi + 0x20]
lea rax, [rbp + 0x440]
mov rbx, r14
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x14004c3e0
mov rsi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x14004c3f7
mov rcx, qword [rcx]
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
lea rdx, [rbp + 0x440]
call fcn.1400a9040
test eax, eax
je 0x14004c6b6
js 0x14004c6bf
mov r15, rdi
mov rdi, qword [rdi]
cmp byte [rdi + 0x19], 0
je 0x14004c3d0
cmp byte [r15 + 0x19], 0
jne 0x14004d15a
lea rdx, [r15 + 0x20]
lea rcx, [rbp + 0x440]
call fcn.140081e90
test al, al
jne 0x14004d15a
cmp r15, r12
je 0x14004d15a
xor esi, esi
mov dword [0x14011cc78], esi
lea rcx, [rsp + 0x68]
call fcn.140068490
movzx edx, byte [rbp + 0x448]
lea rcx, [rsp + 0x70]
call fcn.140067d80
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x14004c4b2
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c4ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d154
call fcn.1400a632c
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], r13
mov byte [rbp - 0x38], 0
lea rcx, [rbp + 0x18]
call fcn.140068490
movzx edx, byte [rbp + 0x18]
lea rcx, [rbp + 0x20]
call fcn.140067d80
nop
mov rbx, qword [0x14011cc80]
lea rdx, [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x14004c536
mov eax, dword [rsp + 0x70]
sub eax, dword [rsp + 0x68]
mov edx, dword [rsp + 0x74]
sub edx, dword [rsp + 0x6c]
cmp eax, 0x212
jne 0x14004c50d
cmp edx, 0x1c2
je 0x14004c536
mov dword [rsp + 0x30], 0xa
mov dword [rsp + 0x28], 0x1c2
mov dword [rsp + 0x20], 0x212
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowPos]
xorps xmm6, xmm6
mov r8, qword [0x14011c940]
xorps xmm0, xmm0
unpcklps xmm0, xmm6
movsd qword [r8 + 0x1af4], xmm0
xorps xmm1, xmm1
unpcklps xmm1, xmm6
movsd qword [r8 + 0x1afc], xmm1
mov r12d, 4
mov dword [r8 + 0x1ad8], r12d
movss xmm1, dword [0x1400ffc08]
mov dword [rbp - 0x68], 0x5f4f5171
mov dword [rbp - 0x64], 0x4b791c76
mov dword [rbp - 0x60], 0x30243052
xor eax, eax
mov byte [rbp - 0x5c], al
mov edx, esi
nop
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx - 0x68], al
inc edx
cmp edx, 0xc
jb 0x14004c590
mov byte [rbp - 0x5c], 0
movss xmm0, dword [0x1400ffc18]
unpcklps xmm0, xmm1
movsd qword [r8 + 0x1b04], xmm0
mov dword [r8 + 0x1adc], r12d
mov dword [r8 + 0x1b38], 0x3f800000
mov dword [r8 + 0x1af0], 1
mov r8d, 0x211a
lea rdx, [0x140118d55]
lea rcx, [rbp - 0x68]
call fcn.14000cb00
movabs r15, 0x7fffffffffffffff
lea rbx, [0x14011ccf0]
cmp byte [0x14011cc6d], 0
jne 0x14004c9be
mov byte [0x14011cc6d], 1
lea rcx, str.username
call fcn.1400bed34
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x80], xmm1
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14004c632
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.140018dd0
nop
mov r8, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
sub rax, r8
lea rsi, str.C:Users_
cmp rax, 9
jb 0x14004c711
lea rax, [r8 + 9]
mov qword [rbp + 0x80], rax
lea rbx, [rbp + 0x70]
cmp rcx, 0x10
cmovae rbx, qword [rbp + 0x70]
lea rax, [0x1400fcb91]
cmp rax, rbx
jbe 0x14004c6d0
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x14004c6d0
cmp rbx, rsi
ja 0x14004c6c8
xor edi, edi
jmp 0x14004c6d5
cmp rsi, rbx
jae 0x14004c33b
mov rdi, qword [rdi + 0x10]
jmp 0x14004c341
cmp rsi, rbx
jae 0x14004c41b
mov rdi, qword [rdi + 0x10]
jmp 0x14004c421
mov rdi, rbx
sub rdi, rsi
jmp 0x14004c6d5
mov edi, 9
lea rcx, [rbx + 9]
inc r8
mov rdx, rbx
call fcn.1400a8540
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call fcn.1400a8540
lea rcx, [rbx + rdi]
mov r8d, 9
sub r8, rdi
lea rdx, [rsi + 9]
add rdx, rdi
call fcn.1400a8540
lea rax, [rbp + 0x70]
jmp 0x14004c72d
mov qword [rsp + 0x28], 9
mov qword [rsp + 0x20], rsi
mov edx, 9
lea rcx, [rbp + 0x70]
call fcn.140079980
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x28], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r13
mov byte [rax], bl
lea r8d, [rbx + 9]
lea rdx, str.Desktop_
lea rcx, [rbp + 0x18]
call fcn.140068930
movups xmm8, xmmword [rax]
movups xmmword [rsp + 0x68], xmm8
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm7
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r13
mov byte [rax], bl
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x14004c7c3
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c7be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d165
call fcn.1400a632c
movdqa xmm0, xmmword [0x1400ffd90]
movdqu xmmword [rbp + 0x28], xmm0
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x14004c812
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004c80d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d16b
call fcn.1400a632c
movdqa xmm0, xmmword [0x1400ffd90]
movdqu xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x20], rbx
lea rcx, [rsp + 0x68]
movq rsi, xmm8
movdqa xmm0, xmm7
psrldq xmm0, 8
movq rax, xmm0
mov qword [rbp + 0x448], rax
cmp rax, 0x10
cmovae rcx, rsi
mov qword [rbp + 0x440], rcx
movq rdi, xmm7
cmp rdi, r15
ja 0x14004d171
mov qword [rbp - 0x20], r13
cmp rdi, 0x10
jae 0x14004c88c
mov qword [rbp - 0x28], rdi
movups xmm0, xmmword [rcx]
movups xmmword [rbp - 0x38], xmm0
movq rbx, xmm0
jmp 0x14004c91c
mov r13, rdi
or r13, 0xf
cmp r13, r15
jbe 0x14004c8c8
mov r13, r15
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400a5fd0
test rax, rax
je 0x14004d177
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14004c8fd
mov eax, SafeArrayPutElement
cmp r13, rax
cmovb r13, rax
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x14004c8f0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004d11c
jmp 0x14004c8a9
test rcx, rcx
je 0x14004c8fd
call fcn.1400a5fd0
mov rbx, rax
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x20], r13
lea r8, [rdi + 1]
mov rdx, qword [rbp + 0x440]
mov rcx, rbx
call fcn.1400a8540
lea rcx, [rbp - 0x38]
cmp r13, 0x10
cmovae rcx, rbx
lea rdx, [0x14011ccf0]
sub rdx, rcx
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14004c932
cmp r13, 0x10
jb 0x14004c978
lea rdx, [r13 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14004c96f
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d177
mov rcx, rbx
call fcn.1400a632c
nop
mov rdx, qword [rbp + 0x448]
cmp rdx, 0x10
jb 0x14004c9b5
inc rdx
mov rax, rsi
cmp rdx, 0x1000
jb 0x14004c9ad
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d17d
mov rcx, rsi
call fcn.1400a632c
lea rbx, [0x14011ccf0]
xor esi, esi
lea rcx, [0x1400fcb94]
call fcn.14002aa90
lea rcx, [0x1400fcb94]
call fcn.14002aa90
mov rcx, qword [0x14011c940]
mov rax, qword [rcx + 0x1a00]
mov byte [rax + 0x80], 1
mov rax, qword [rcx + 0x1a00]
cmp byte [rax + 0x83], 0
jne 0x14004ca15
mov qword [rbp + 0x440], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x440]
call fcn.1400065b0
movss xmm7, dword [0x1400ffc58]
movaps xmm1, xmm7
movss xmm0, dword [0x1400ffbd0]
call fcn.1400111a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
movaps xmm1, xmmword [0x140100230]
movups xmmword [rsp + 0x68], xmm1
mov dword [rbp + 0x440], 0x3f800000
mov dword [rbp + 0x444], 0x3f800000
mov qword [rbp + 0x448], 0
mov dword [rbp + 0x450], 0x430c0000
mov dword [rbp + 0x454], 0x430c0000
lea rax, [rbp + 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x440]
lea r8, [rbp + 0x448]
lea rdx, [rbp + 0x450]
mov rcx, qword [0x14011c9b8]
call fcn.14002c360
lea rcx, [0x1400fcb94]
call fcn.14002aa90
movdqa xmm0, xmmword [0x140100080]
movdqu xmmword [rbp + 0x38], xmm0
movdqa xmm1, xmmword [0x1401001a0]
movdqu xmmword [rbp + 0x48], xmm1
movdqa xmm0, xmmword [str.w97__8__]
movdqu xmmword [rbp + 0x58], xmm0
mov dword [rbp + 0x68], 0xf1b0c03
mov word [rbp + 0x6c], 0x1f18
xor eax, eax
mov byte [rbp + 0x6e], al
mov edx, esi
nop
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx + 0x38], al
inc edx
cmp edx, 0x36
jb 0x14004caf0
mov byte [rbp + 0x6e], 0
lea rcx, [rbp + 0x38]
call fcn.14002aa90
lea rcx, [0x1400fcb98]
call fcn.14002aa90
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.1400111a0
mov qword [rbp + 0x440], 0
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rbp + 0x440]
mov qword [rsp + 0x20], rax
mov r9d, 0x80
mov r8, rbx
xor edx, edx
lea rcx, [0x1400f229a]
call fcn.140030b90
lea rcx, [0x1400fcb98]
call fcn.14002aa90
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.1400111a0
mov qword [rbp + 0x440], 0
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rbp + 0x440]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r13, str.127.0.0.1:30120
mov r8, r13
lea rdx, [0x1400f229a]
lea rcx, [0x1400fcb94]
call fcn.140030b90
lea r8, [0x140118ff0]
cmp qword [0x140119008], 0x10
cmovae r8, qword [0x140118ff0]
movups xmm2, xmmword [0x14011d228]
movups xmmword [rbp + 0x18], xmm2
lea rdx, str._____________________________________s
lea rcx, [rbp + 0x18]
call fcn.14002ab90
lea rcx, [0x1400fcbd0]
call fcn.14002aa90
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.1400111a0
mov dword [rbp + 0x448], 0x430c0000
mov dword [rbp + 0x44c], 0x42480000
mov dword [rbp + 0x440], 0x4a544d73
xor eax, eax
mov byte [rbp + 0x444], al
mov edx, esi
movsxd rcx, edx
lea eax, [rdx + 0x37]
xor byte [rbp + rcx + 0x440], al
inc edx
cmp edx, 4
jb 0x14004cc31
mov byte [rbp + 0x444], 0
lea rdx, [rbp + 0x448]
lea rcx, [rbp + 0x440]
call fcn.14002b220
test al, al
je 0x14004d0b3
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14004cc80
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.140018dd0
nop
mov rcx, qword [0x140118f80]
mov rax, r15
sub rax, rcx
cmp rax, 0xd
jb 0x14004d183
lea rdi, [0x140118f70]
mov r9, rdi
cmp qword [0x140118f88], 0x10
cmovae r9, qword [0x140118f70]
mov qword [rsp + 0x30], SafeArrayGetLBound
lea rax, str.dumplocation
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.140071e10
nop
lea rcx, [rbp + 0x2a0]
call fcn.14005df30
nop
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov r8d, SafeArrayGetLBound
lea rcx, [rbp + 0x2b8]
call fcn.14006ac20
mov ebx, 6
test rax, rax
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
je 0x14004cd58
mov eax, r12d
cmp qword [rbp + rcx + 0x2e8], 0
cmovne eax, esi
mov dword [rbp + rcx + 0x2b0], eax
test dword [rbp + rcx + 0x2b4], eax
jne 0x14004d122
jmp 0x14004cd8b
mov eax, ebx
cmp qword [rbp + rcx + 0x2e8], 0
mov edx, 2
cmovne eax, edx
or eax, dword [rbp + rcx + 0x2b0]
and eax, 0x17
mov dword [rbp + rcx + 0x2b0], eax
mov edx, dword [rbp + rcx + 0x2b4]
and edx, eax
jne 0x14004d189
cmp qword [rbp + 0x338], 0
je 0x14004cdb6
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 0x10
cmovae rdx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x78]
lea rcx, [rbp + 0x2b0]
call fcn.140062630
lea rcx, [rbp + 0x2b8]
call fcn.1400677b0
test rax, rax
jne 0x14004ce05
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
mov eax, ebx
cmp qword [rbp + rcx + 0x2e8], 0
mov edx, 2
cmovne eax, edx
or eax, dword [rbp + rcx + 0x2b0]
and eax, 0x17
mov dword [rbp + rcx + 0x2b0], eax
mov edx, dword [rbp + rcx + 0x2b4]
and edx, eax
jne 0x14004d1da
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
inc r14
cmp byte [r14 + r13], 0
jne 0x14004ce14
mov r8, r14
mov rdx, r13
lea rcx, [rbp - 0x38]
call fcn.140018dd0
nop
mov rax, qword [0x140118f80]
sub r15, rax
cmp r15, 0x14
jb 0x14004d22b
cmp qword [0x140118f88], 0x10
cmovae rdi, qword [0x140118f70]
mov qword [rsp + 0x30], reloc.OLEAUT32.dll_SafeArrayLock
lea rcx, str.dumpserveripaddress
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9, rdi
lea rcx, [rbp - 0x68]
call fcn.140071e10
nop
lea rcx, [rbp + 0x180]
call fcn.14005df30
nop
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rdx, qword [rbp - 0x68]
mov r8d, SafeArrayGetLBound
lea rcx, [rbp + 0x198]
call fcn.14006ac20
test rax, rax
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
je 0x14004d0de
cmp qword [rbp + rcx + 0x1c8], 0
cmovne r12d, esi
mov dword [rbp + rcx + 0x190], r12d
test dword [rbp + rcx + 0x194], r12d
jne 0x14004d231
mov edi, 2
cmp qword [rbp + 0x218], 0
je 0x14004cf0a
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0x10
cmovae rdx, qword [rbp - 0x38]
mov r8, qword [rbp - 0x28]
lea rcx, [rbp + 0x190]
call fcn.140062630
lea rcx, [rbp + 0x198]
call fcn.1400677b0
test rax, rax
jne 0x14004cf52
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
cmp qword [rbp + rcx + 0x1c8], 0
cmovne ebx, edi
or ebx, dword [rbp + rcx + 0x190]
and ebx, 0x17
mov dword [rbp + rcx + 0x190], ebx
mov eax, dword [rbp + rcx + 0x194]
and eax, ebx
jne 0x14004d2b4
cmp byte [0x14011cc6e], 0
jne 0x14004cf79
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x140049f10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
lea rcx, [rbp + 0x180]
call fcn.14004d320
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x14004cfc1
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cfbc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d303
call fcn.1400a632c
movdqa xmm0, xmmword [0x1400ffd90]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x14004d00d
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d008
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d309
call fcn.1400a632c
movdqa xmm0, xmmword [0x1400ffd90]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], 0
lea rcx, [rbp + 0x2a0]
call fcn.14004d320
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14004d068
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d063
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d30f
call fcn.1400a632c
movdqa xmm0, xmmword [0x1400ffd90]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x14004d0b3
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d0ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d116
call fcn.1400a632c
lea r11, [rsp + 0x4f8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
jmp fcn.14000fbc0
mov eax, ebx
cmp qword [rbp + rcx + 0x1c8], 0
mov edi, 2
cmovne eax, edi
or eax, dword [rbp + rcx + 0x190]
and eax, 0x17
mov dword [rbp + rcx + 0x190], eax
mov edx, dword [rbp + rcx + 0x194]
and edx, eax
jne 0x14004d263
jmp 0x14004cee2
call fcn.1400bb588
nop
call fcn.140006e80
nop
mov edx, 1
lea rcx, [rbp + 0x18]
call fcn.1400398f0
mov r8, rax
lea rdx, str.ios_base::badbit_set
lea rcx, [rbp - 0x18]
call fcn.14003ab40
lea rdx, [0x1401168a8]
lea rcx, [rbp - 0x18]
call fcn.1400a8464
nop
call fcn.1400bb588
nop
mov ecx, 1
call fcn.1400ad520
nop
call fcn.1400bb588
nop
call fcn.1400bb588
int3
call fcn.140006f20
int3
call fcn.1400bb588
nop
call fcn.1400bb588
nop
call fcn.140006f20
nop
test dl, 4
je 0x14004d197
lea rbx, str.ios_base::badbit_set
jmp 0x14004d1ac
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp + 0x18]
call fcn.1400398f0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x18]
call fcn.14003ab40
lea rdx, [0x1401168a8]
lea rcx, [rbp - 0x18]
call fcn.1400a8464
int3
test dl, 4
je 0x14004d1e8
lea rbx, str.ios_base::badbit_set
jmp 0x14004d1fd
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp + 0x18]
call fcn.1400398f0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x18]
call fcn.14003ab40
lea rdx, [0x1401168a8]
lea rcx, [rbp - 0x18]
call fcn.1400a8464
nop
call fcn.140006f20
nop
mov edx, 1
lea rcx, [rbp + 0x18]
call fcn.1400398f0
mov r8, rax
lea rdx, str.ios_base::badbit_set
lea rcx, [rbp - 0x18]
call fcn.14003ab40
lea rdx, [0x1401168a8]
lea rcx, [rbp - 0x18]
call fcn.1400a8464
int3
test dl, 4
je 0x14004d271
lea rbx, str.ios_base::badbit_set
jmp 0x14004d286
test dil, dl
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp + 0x18]
call fcn.1400398f0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x18]
call fcn.14003ab40
lea rdx, [0x1401168a8]
lea rcx, [rbp - 0x18]
call fcn.1400a8464
int3
test al, 4
je 0x14004d2c1
lea rbx, str.ios_base::badbit_set
jmp 0x14004d2d5
test al, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp + 0x18]
call fcn.1400398f0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x18]
call fcn.14003ab40
lea rdx, [0x1401168a8]
lea rcx, [rbp - 0x18]
call fcn.1400a8464
nop
call fcn.1400bb588
nop
call fcn.1400bb588
nop
call fcn.1400bb588
int3