Function at 0x14008de20
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Create process on windows
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4a8]
sub rsp, 0x580
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140147140]
xor rax, rsp
mov qword [rbp + 0x460], rax
mov rsi, rcx
mov qword [rbp - 0x58], rcx
xor ebx, ebx
mov dword [rsp + 0x50], ebx
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x1400925b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [reloc.WS2_32.dll_accept]
cmp qword [rsi + 0x30], 0xa
jne 0x14008de9d
cmp qword [rsi + 0x50], 0x40
je 0x14008e058
movups xmm0, xmmword [str.tFGTPYZHTQQ_]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140120c28]
movups xmmword [rbp + 0x20], xmm1
movzx eax, byte [0x140120c38]
mov byte [rbp + 0x30], al
mov r8d, ebx
cmp ecx, 2
jl 0x14008e005
movdqa xmm5, xmmword [0x1401311e0]
movdqa xmm4, xmmword [0x140131250]
movdqa xmm6, xmmword [0x140131220]
movdqa xmm0, xmmword [0x140131290]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rbp - 0x80]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14008df00
cmp r8d, 0x21
jge 0x14008e03f
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x21
jl 0x14008e010
mov r9d, reloc.WS2_32.dll_recv
xor r8d, r8d
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
int 0x29
xorps xmm0, xmm0
movups xmmword [rbp + 0x328], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x2e8], xmm1
mov qword [rbp + 0x2f8], rbx
mov qword [rbp + 0x300], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2e8], bl
lea rcx, [rbp + 0x328]
call qword [sym.imp.RPCRT4.dll_UuidCreate]
mov qword [rbp + 0x230], rbx
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x328]
call qword [sym.imp.RPCRT4.dll_UuidToStringA]
test eax, eax
jne 0x14008e0d0
mov rdx, qword [rbp + 0x230]
lea rcx, [rbp + 0x2e8]
call fcn.14001cb40
lea rcx, [rbp + 0x230]
call qword [sym.imp.RPCRT4.dll_RpcStringFreeA]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a8], xmm0
mov qword [rbp + 0x2b8], rbx
mov qword [rbp + 0x2c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2a8], 0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, reloc.WS2_32.dll_recv
cmp qword [rbp + 0x2f8], r8
cmovb r8, qword [rbp + 0x2f8]
lea rdx, [rbp + 0x2e8]
cmp qword [rbp + 0x300], 0xf
cmova rdx, qword [rbp + 0x2e8]
lea rcx, [rbp - 0x80]
call fcn.140020530
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x2a8]
call fcn.14001cbc0
mov r8, qword [rbp - 0x68]
cmp r8, 0xf
jbe 0x14008e15b
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x80]
call fcn.14007fda0
movzx eax, word [0x140120c3c]
mov word [rsp + 0x50], ax
cmp byte [0x140120c3d], 0
je 0x14008e17a
mov byte [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_45
xor byte [rsp + 0x51], 0x36
lea rax, [rsp + 0x50]
mov r14, 0xffffffffffffffff
mov rbx, r14
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14008e190
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r12, qword [rbp + 0x2b8]
sub rax, r12
cmp rax, rbx
jb 0x14008fd37
lea r13, [rbp + 0x2a8]
cmp qword [rbp + 0x2c0], 0xf
cmova r13, qword [rbp + 0x2a8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea r15, [r12 + rbx]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rbp - 0x80]
cmp r15, rdi
jbe 0x14008e26d
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x14008e229
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400edd4c
test rax, rax
je 0x14008e251
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14008e269
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14008e258
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14008fd31
jmp 0x14008e20e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14008e267
call fcn.1400edd4c
mov rsi, rax
jmp 0x14008e269
xor esi, esi
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], rdi
mov r8, r12
mov rdx, r13
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r12 + rsi]
mov r8, rbx
lea rdx, [rsp + 0x50]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
mov rsi, qword [rbp - 0x58]
lea rdi, [rsi + 0x40]
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14008e2ae
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp - 0x80]
call fcn.14001e8d0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x238], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x248], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
lea rcx, [rsi + 0x258]
lea rdx, [rbp + 0x238]
call fcn.14001cbc0
mov r8, qword [rbp + 0x250]
cmp r8, 0xf
jbe 0x14008e316
mov rdx, qword [rbp + 0x238]
lea rcx, [rbp + 0x238]
call fcn.14007fda0
nop
mov r8, qword [rbp - 0x68]
cmp r8, 0xf
jbe 0x14008e32d
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x80]
call fcn.14007fda0
lea rcx, [rbp + 0x308]
call fcn.140089870
nop
call fcn.140097d10
mov rbx, rax
mov dword [rbp - 0x80], 0x233b246c
mov dword [rbp - 0x7c], 0x35393d2b
mov word [rbp - 0x78], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp - 0x76], 1
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14008e367
mov rdx, qword [rsi]
xor r8d, r8d
mov rcx, rbx
call fcn.140096840
mov r15, rax
mov dword [rsp + 0x58], 0x202d256c
mov dword [rsp + 0x5c], 0x100722b
mov dword [rsp + 0x40], 0x2e222e6c
mov dword [rsp + 0x44], 0x6c292a25
mov word [rsp + 0x48], 0x100
mov dword [rbp - 0x60], 0x3e2d236c
mov dword [rbp - 0x5c], 0x1007226
mov dword [rsp + 0x70], 0x3f293d6c
mov word [rsp + 0x74], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x76], 1
mov dword [rbp + 0x238], 0x283c323e
mov dword [rbp + 0x23c], 0x383e2673
mov word [rbp + 0x240], Ordinal_46
mov byte [rbp + 0x242], 1
mov rcx, r13
nop word [rax + rax]
lea eax, [rcx + 0x4a]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 5
jb 0x14008e3f0
mov byte [rsp + 0x76], 0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x75]
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x30]
call fcn.140022330
nop
cmp byte [rbp + 0x242], 0
je 0x14008e44a
mov rcx, r13
nop word [rax + rax]
lea eax, [rcx + 0x4a]
xor byte [rbp + rcx + 0x238], al
inc rcx
cmp rcx, 9
jb 0x14008e430
mov byte [rbp + 0x242], 0
lea r9, [rsp + 0x50]
lea r8, [rbp + 0x241]
lea rdx, [rbp + 0x238]
lea rcx, [rbp - 0x50]
call fcn.140022330
nop
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x50]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp - 0x10]
call fcn.140087340
nop
mov r8, qword [rbp - 0x38]
cmp r8, 0xf
jbe 0x14008e496
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp - 0x50]
call fcn.14007fda0
nop
mov r8, qword [rbp - 0x18]
cmp r8, 0xf
jbe 0x14008e4ae
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.14007fda0
nop
lea r8, [rsi + 0x60]
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x10]
call fcn.140080d70
nop
lea r8, [rbp - 0x60]
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.140080e50
nop
lea rdx, [rbp + 0x308]
cmp qword [rbp + 0x320], 0xf
cmova rdx, qword [rbp + 0x308]
mov r8, qword [rbp + 0x318]
mov rcx, rax
call fcn.14001e8d0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xb0]
call fcn.140080f30
nop
lea rdx, [rbp + 0x2a8]
cmp qword [rbp + 0x2c0], 0xf
cmova rdx, qword [rbp + 0x2a8]
mov r8, r12
mov rcx, rax
call fcn.14001e8d0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x90]
call fcn.140080e50
nop
mov r8, r15
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.140080de0
nop
lea r8, [rbp - 0x80]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140081010
nop
lea r8, [rsi + 0x20]
mov rdx, rax
lea rcx, [rbp + 0x338]
call fcn.140080d70
nop
lea rcx, [rbp + 0x50]
call fcn.14001cb60
nop
lea rcx, [rbp + 0x70]
call fcn.14001cb60
nop
lea rcx, [rbp + 0x90]
call fcn.14001cb60
nop
lea rcx, [rbp - 0x30]
call fcn.14001cb60
nop
lea rcx, [rbp + 0xb0]
call fcn.14001cb60
nop
lea rcx, [rbp - 0x50]
call fcn.14001cb60
nop
lea rcx, [rbp + 0xd0]
call fcn.14001cb60
nop
lea rcx, [rbp + 0x10]
call fcn.14001cb60
nop
lea rcx, [rbp - 0x10]
call fcn.14001cb60
mov rcx, rbx
call fcn.140097cf0
lea rax, [rbp - 0x30]
mov qword [rsp + 0x50], rax
lea rdx, [rsi + 0x80]
lea rcx, [rbp - 0x30]
call fcn.14001cc90
mov rbx, rax
lea rdx, [rbp + 0x338]
lea rcx, [rbp - 0x50]
call fcn.14001cc90
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x288]
call fcn.140094240
nop
movups xmm0, xmmword [str.SNyLNSctPI__DtFGTPYZHTQQ___7d_2_dAF]
movups xmmword [rbp + 0x238], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
mov ebx, dword [reloc.WS2_32.dll_accept]
test al, al
je 0x14008e80f
cmp ebx, 2
jl 0x14008e7cf
movdqa xmm5, xmmword [0x1401311e0]
mov edx, r13d
movdqa xmm4, xmmword [0x140131250]
movdqa xmm6, xmmword [0x140131220]
movdqa xmm0, xmmword [0x140131290]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp + 0x23c]
mov r8d, dword [rbp - 0x80]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x14008e6d0
jmp 0x14008e80f
lea r9, [rbp + 0x238]
mov r8d, r13d
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x14008e7e0
lea rcx, [rbp + 0x238]
mov rax, r14
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14008e820
lea rcx, [rbp + 0x288]
cmp qword [rbp + 0x2a0], 0xf
cmova rcx, qword [rbp + 0x288]
mov r8, qword [rbp + 0x298]
cmp r8, rax
jne 0x14008ea28
lea rdx, [rbp + 0x238]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14008ea28
movups xmm0, xmmword [0x140120c50]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x140120c60]
movups xmmword [rbp + 0x20], xmm1
mov eax, dword [0x140120c70]
mov dword [rbp + 0x30], eax
movzx eax, word [0x140120c74]
mov word [rbp + 0x34], ax
mov r8d, r13d
cmp ebx, 2
jl 0x14008e9d5
movdqa xmm5, xmmword [0x1401311e0]
movdqa xmm4, xmmword [0x140131250]
movdqa xmm6, xmmword [0x140131220]
movdqa xmm0, xmmword [0x140131290]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp + 0x14]
mov edx, dword [rbp - 0x80]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14008e8d0
cmp r8d, 0x26
jge 0x14008ea0f
movsxd rax, r8d
lea r9, [rbp + 0x10]
add r9, rax
nop
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x14008e9e0
mov r9d, reloc.WS2_32.dll_recv
xor r8d, r8d
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
int 0x29
mov qword [rbp + 0x48], r13
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x288]
lea rcx, [rbp + 0x258]
call fcn.140084a00
nop
mov rax, qword [str.XSDKX__pDEWK:]
mov qword [rsp + 0x58], rax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], 0
je 0x14008ebaf
cmp ebx, 2
jl 0x14008eb6a
movdqa xmm4, xmmword [0x140131250]
movdqa xmm2, xmmword [0x1401311e0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140131220]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
mov eax, dword [0x140131290]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x58]
xorps xmm2, xmm1
movd dword [rsp + 0x58], xmm2
movdqa xmm3, xmmword [0x1401311f0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140131220]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x5c]
xorps xmm2, xmm1
movd dword [rsp + 0x5c], xmm2
jmp 0x14008ebaf
lea r9, [rsp + 0x58]
mov r8d, r13d
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14008eb80
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x258]
call fcn.140080b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x268], xmm0
mov qword [rbp + 0x278], r13
mov qword [rbp + 0x280], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x268], 0
mov dword [rsp + 0x50], 0xffa0
cmp byte [rax], 3
jne 0x14008ec03
mov rdx, qword [rax + 8]
lea rax, [rbp + 0x268]
cmp rax, rdx
je 0x14008ec21
jmp 0x14008ec06
mov rdx, r13
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x14008ec14
mov rdx, qword [rdx]
lea rcx, [rbp + 0x268]
call fcn.14001f4f0
nop
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x360]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x140120440]
mov qword [rbp + 0x360], rax
lea rax, [0x140120448]
mov qword [rbp + 0x370], rax
lea rcx, [rbp + 0x3f8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x50], 0xffd0
xor r8d, r8d
lea rdx, [rbp + 0x378]
lea rcx, [rbp + 0x360]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x360]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x360], rax
mov rax, qword [rbp + 0x360]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x35c], edx
lea rcx, [rbp + 0x378]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x378], rax
mov qword [rbp + 0x3e0], r13
mov dword [rbp + 0x3e8], r13d
xorps xmm0, xmm0
movups xmmword [rbp + 0x238], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400edd4c
mov r13, rax
mov qword [rbp + 0x238], rax
lea r15, [rax + 0x20]
mov qword [rbp + 0x248], r15
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rbp + 0x240], r15
lea r8, [rbp + 0x288]
cmp qword [rbp + 0x2a0], 0xf
cmova r8, qword [rbp + 0x288]
cmp qword [rdi + 0x18], 0xf
jbe 0x14008ed35
mov rdi, qword [rdi]
mov qword [rsp + 0x28], reloc.WLDAP32.dll_Ordinal_32
mov qword [rsp + 0x20], r13
mov r9, qword [rbp + 0x298]
mov rdx, qword [rsi + 0x50]
mov rcx, rdi
call fcn.1400a2a00
mov rsi, r13
mov r12d, 2
cmp r13, r15
je 0x14008edc3
movzx edi, byte [rsi]
lea rdx, [0x14008dc60]
lea rcx, [rbp + 0x370]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0x30
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::fill_char____ptr64]
mov rdx, r12
lea rcx, [rbp - 0x80]
call sub.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__
mov r8, qword [rax]
mov rcx, qword [rbx]
movsxd rcx, dword [rcx + 4]
add rcx, rbx
mov rdx, qword [rax + 8]
call r8
mov edx, edi
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
inc rsi
cmp rsi, r15
jne 0x14008ed64
lea rbx, [0x140147078]
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rbx, qword [0x140147078]
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x360]
call fcn.140096390
cmp qword [rax + 0x18], 0xf
jbe 0x14008edf4
mov rax, qword [rax]
movd xmm2, dword [rax]
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
psrad xmm2, 0x18
movd xmm0, dword [rbx]
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm2, xmm0
movd xmm1, dword [rbx + 4]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
psrad xmm1, 0x18
movd xmm0, dword [rax + 4]
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
orps xmm2, xmm1
movdqa xmm0, xmm2
psrldq xmm0, 8
orps xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 4
orps xmm2, xmm0
movd ebx, xmm2
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14008ee9d
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ee98
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008ee98
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ed6a0
test ebx, ebx
je 0x14008ef58
mov eax, dword [0x140120c80]
mov dword [rsp + 0x50], eax
movzx eax, word [0x140120c84]
mov word [rsp + 0x54], ax
mov byte [rsp + 0x50], 0x45
xor byte [rsp + 0x51], 0x36
xor byte [rsp + 0x52], 0x37
xor byte [rsp + 0x53], 0x38
xor al, 0x39
mov byte [rsp + 0x54], al
xor byte [rsp + 0x55], 0x3a
lea rax, [rsp + 0x50]
mov rcx, r14
inc rcx
cmp byte [rax + rcx], 0
jne 0x14008eee2
mov rdx, qword [rbp + 0x278]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, rcx
jb 0x14008fd2b
lea rax, [rbp + 0x268]
cmp qword [rbp + 0x280], 0xf
cmova rax, qword [rbp + 0x268]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x50]
lea r8, [rbp + 0x268]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp - 0x10]
call fcn.1400221e0
mov edi, 0xffd1
lea rcx, [rbp - 0x10]
call fcn.14008bad0
jmp 0x14008ef5d
mov edi, 0xffd0
lea rdx, [rbp + 0x258]
lea rcx, [rbp - 0x80]
call fcn.1400870d0
mov rdx, rax
mov rsi, qword [rbp - 0x58]
mov rcx, rsi
call fcn.1400917a0
mov rax, qword [str.FCT_IH__S_kIHURP_]
mov qword [rsp + 0x58], rax
mov ebx, dword [reloc.WS2_32.dll_accept]
cmp byte [reloc.WLDAP32.dll_Ordinal_60], 0
je 0x14008f0df
cmp ebx, r12d
jl 0x14008f0a0
movdqa xmm4, xmmword [0x140131250]
movdqa xmm2, xmmword [0x1401311e0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140131220]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
mov eax, dword [0x140131290]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x58]
xorps xmm2, xmm1
movd dword [rsp + 0x58], xmm2
movdqa xmm3, xmmword [0x1401311f0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140131220]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x5c]
xorps xmm2, xmm1
movd dword [rsp + 0x5c], xmm2
jmp 0x14008f0df
lea r9, [rsp + 0x58]
xor r8d, r8d
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14008f0b0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x258]
call fcn.140080b10
lea rcx, [rax + 8]
cmp byte [rax], 4
mov edx, 0
cmovne rcx, rdx
cmp byte [rcx], dl
je 0x14008f44c
movsd xmm0, qword [0x140120c90]
movsd qword [rsp + 0x40], xmm0
movzx ecx, word [0x140120c98]
mov word [rsp + 0x48], cx
movzx eax, byte [0x140120c9a]
mov byte [rsp + 0x40], WSASetLastError
xor byte [rsp + 0x41], 0x36
xor byte [rsp + 0x42], 0x37
xor byte [rsp + 0x43], 0x38
xor byte [rsp + 0x44], 0x39
xor byte [rsp + 0x45], 0x3a
xor byte [rsp + 0x46], 0x3b
xor byte [rsp + 0x47], 0x3c
xor cl, 0x3d
mov byte [rsp + 0x48], cl
xor byte [rsp + 0x49], 0x3e
xor al, 0x3f
mov byte [rsp + 0x4a], al
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x258]
call fcn.140080b10
lea rcx, [rax + 8]
cmp byte [rax], 4
mov r14d, 0
cmovne rcx, r14
cmp byte [rcx], r14b
je 0x14008f240
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14008f216
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14008f216
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0xa98cc5a6
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14008f211
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14008f1f0
cmp r8d, 0x3a8081e9
je 0x14008f21b
test r9d, r9d
jne 0x14008f1d0
mov rax, qword [rax]
jmp 0x14008f1a0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x64
call rdx
mov r15, qword [rbp + 0x248]
movsd xmm0, qword [str.FSDKPUUUY_]
movsd qword [rsp + 0x60], xmm0
movzx eax, word [0x140120ca8]
mov word [rsp + 0x68], ax
cmp byte [0x140120ca9], r14b
je 0x14008f295
mov byte [rsp + 0x60], reloc.WS2_32.dll_WSAStartup
xor byte [rsp + 0x61], 0x36
xor byte [rsp + 0x62], 0x37
xor byte [rsp + 0x63], 0x38
xor byte [rsp + 0x64], 0x39
xor byte [rsp + 0x65], 0x3a
xor byte [rsp + 0x66], 0x3b
xor byte [rsp + 0x67], 0x3c
xor byte [rsp + 0x68], 0x3d
xor byte [rsp + 0x69], 0x3e
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x258]
call fcn.140080b10
mov rdx, rax
lea rcx, [rsi + 0x238]
call fcn.140080a80
mov byte [0x140148230], 1
mov rax, qword [str.TFGQWT_XSDKX__XAYUS_JXL_]
mov qword [rsp + 0x58], rax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], r14b
je 0x14008f41f
cmp dword [reloc.WS2_32.dll_accept], r12d
jl 0x14008f3de
movdqa xmm4, xmmword [0x140131250]
movdqa xmm2, xmmword [0x1401311e0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140131220]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
mov eax, dword [0x140131290]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x58]
xorps xmm2, xmm1
movd dword [rsp + 0x58], xmm2
movdqa xmm3, xmmword [0x1401311f0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140131220]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x5c]
xorps xmm2, xmm1
movd dword [rsp + 0x5c], xmm2
jmp 0x14008f41f
lea r9, [rsp + 0x58]
mov r8d, r14d
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14008f3f0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x258]
call fcn.140080b10
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400870d0
mov rdx, rax
mov rcx, rsi
call fcn.140091380
jmp 0x14008fa64
movsd xmm0, qword [0x140120cc0]
movsd qword [rsp + 0x40], xmm0
movzx ecx, word [0x140120cc8]
mov word [rsp + 0x48], cx
movzx eax, byte [0x140120cca]
mov byte [rsp + 0x40], 0x69
xor byte [rsp + 0x41], 0x36
xor byte [rsp + 0x42], 0x37
xor byte [rsp + 0x43], 0x38
xor byte [rsp + 0x44], 0x39
xor byte [rsp + 0x45], 0x3a
xor byte [rsp + 0x46], 0x3b
xor byte [rsp + 0x47], 0x3c
xor cl, 0x3d
mov byte [rsp + 0x48], cl
xor byte [rsp + 0x49], 0x3e
xor al, 0x3f
mov byte [rsp + 0x4a], al
mov rax, qword [0x140120cb8]
mov qword [rsp + 0x58], rax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], dl
je 0x14008f5ff
cmp ebx, r12d
jl 0x14008f5c4
movdqa xmm4, xmmword [0x140131250]
movdqa xmm2, xmmword [0x1401311e0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140131220]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
mov eax, dword [0x140131290]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x58]
xorps xmm2, xmm1
movd dword [rsp + 0x58], xmm2
movdqa xmm3, xmmword [0x1401311f0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140131220]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x5c]
xorps xmm2, xmm1
movd dword [rsp + 0x5c], xmm2
jmp 0x14008f5ff
lea r9, [rsp + 0x58]
mov r8d, edx
nop dword [rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x14008f5d0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x258]
call fcn.140080b10
mov rsi, rax
xor eax, eax
mov qword [rbp - 0x78], rax
mov byte [rbp - 0x80], 3
lea ecx, [rax + 0x20]
call fcn.1400edd4c
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rax
lea rax, [rsp + 0x40]
nop dword [rax]
inc r14
cmp byte [rax + r14], 0
jne 0x14008f640
mov r8, r14
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140020530
mov qword [rbp - 0x78], rbx
lea rdx, [rbp - 0x80]
mov rcx, rsi
call fcn.140087d90
movzx ebx, al
movzx edx, byte [rbp - 0x80]
lea rcx, [rbp - 0x78]
call fcn.14008a2d0
nop
test bl, bl
je 0x14008fa61
movsd xmm0, qword [str.QY_VUUZX]
movsd qword [rsp + 0x60], xmm0
movzx eax, byte [0x140120cd8]
mov byte [rsp + 0x60], 0x64
xor byte [rsp + 0x61], 0x36
xor byte [rsp + 0x62], 0x37
xor byte [rsp + 0x63], 0x38
xor byte [rsp + 0x64], 0x39
xor byte [rsp + 0x65], 0x3a
xor byte [rsp + 0x66], 0x3b
xor byte [rsp + 0x67], 0x3c
xor al, 0x3d
mov byte [rsp + 0x68], al
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x258]
call fcn.140080b10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c8], xmm0
xor r14d, r14d
mov r8d, r14d
mov qword [rbp + 0x2d8], r14
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x2e0], rbx
mov byte [rbp + 0x2c8], r8b
or edi, 4
mov dword [rsp + 0x50], edi
cmp byte [rax], 3
jne 0x14008f720
mov rdx, qword [rax + 8]
lea rax, [rbp + 0x2c8]
cmp rax, rdx
je 0x14008f74a
jmp 0x14008f723
mov rdx, r14
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], rbx
jbe 0x14008f730
mov rdx, qword [rdx]
lea rcx, [rbp + 0x2c8]
call fcn.14001f4f0
mov rbx, qword [rbp + 0x2e0]
mov r8, qword [rbp + 0x2d8]
lea rcx, [rbp + 0x2c8]
mov rdi, qword [rbp + 0x2c8]
cmp rbx, 0xf
cmova rcx, rdi
test r8, r8
jne 0x14008f9bc
lea rdx, [0x14012f5b8]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14008f9bc
lea rcx, [rbp + 0xf0]
lea rdx, str.cSEKPUU
nop dword [rax + rax]
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub r12, 1
jne 0x14008f790
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov eax, dword [rdx + 0x30]
mov dword [rcx + 0x30], eax
movzx eax, word [rdx + 0x34]
mov word [rcx + 0x34], ax
mov r8d, r14d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14008f95b
movdqa xmm5, xmmword [0x1401311e0]
movdqa xmm4, xmmword [0x140131250]
movdqa xmm6, xmmword [0x140131220]
movdqa xmm0, xmmword [0x140131290]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp + 0xf4]
mov edx, dword [rbp - 0x80]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140131240]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x130
jl 0x14008f850
cmp r8d, 0x136
jge 0x14008f9a2
movsxd rax, r8d
lea r10, [rbp + 0xf0]
add r10, rax
nop dword [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x35
xor byte [r10], al
inc r8d
lea r10, [r10 + 1]
cmp r8d, 0x136
jl 0x14008f970
mov r9d, reloc.WS2_32.dll_recv
xor r8d, r8d
lea rdx, [rbp + 0xf0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14008fa17
lea rcx, [rbp + 0x2c8]
mov eax, dword [str.ZFRV9]
mov dword [rsp + 0x50], eax
movzx eax, byte [reloc.WS2_32.dll_gethostname]
cmp rbx, 0xf
ja 0x14008f9dd
mov rdi, rcx
mov byte [rsp + 0x50], reloc.WS2_32.dll_WSAGetLastError
xor byte [rsp + 0x51], 0x36
xor byte [rsp + 0x52], 0x37
xor byte [rsp + 0x53], 0x38
xor al, 0x39
mov byte [rsp + 0x54], al
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8, rdi
lea rdx, [rsp + 0x50]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
int 0x29
mov rdx, qword [rbp + 0x2e0]
cmp rdx, 0xf
jbe 0x14008fa64
inc rdx
mov rcx, qword [rbp + 0x2c8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008fa5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008fa5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ed6a0
jmp 0x14008fa64
xor r14d, r14d
test r13, r13
je 0x14008fa9d
sub r15, r13
cmp r15, 0x1000
jb 0x14008fa91
add r15, 0x27
mov rcx, qword [r13 - 8]
sub r13, rcx
lea rax, [r13 - 8]
cmp rax, 0x1f
ja 0x14008fb35
mov r13, rcx
mov rdx, r15
mov rcx, r13
call fcn.1400ed6a0
nop
mov rax, qword [rbp + 0x360]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x360], rax
mov rax, qword [rbp + 0x360]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x35c], edx
lea rcx, [rbp + 0x378]
call fcn.140077ad0
lea rcx, [rbp + 0x380]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x3f8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x280]
cmp rdx, 0xf
jbe 0x14008fb41
inc rdx
mov rcx, qword [rbp + 0x268]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008fb3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008fb3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400ed6a0
mov qword [rbp + 0x278], r14
mov qword [rbp + 0x280], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x268], 0
movzx edx, byte [rbp + 0x258]
lea rcx, [rbp + 0x260]
call fcn.14008a2d0
nop
mov rdx, qword [rbp + 0x2a0]
cmp rdx, 0xf
jbe 0x14008fbb2
inc rdx
mov rcx, qword [rbp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008fbad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008fbad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ed6a0
mov qword [rbp + 0x298], r14
mov qword [rbp + 0x2a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x288], 0
mov rdx, qword [rbp + 0x350]
cmp rdx, 0xf
jbe 0x14008fc10
inc rdx
mov rcx, qword [rbp + 0x338]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008fc0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008fc0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ed6a0
nop
mov rdx, qword [rbp + 0x320]
cmp rdx, 0xf
jbe 0x14008fc54
inc rdx
mov rcx, qword [rbp + 0x308]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008fc4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008fc4f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ed6a0
mov qword [rbp + 0x318], r14
mov qword [rbp + 0x320], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x308], 0
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0xf
jbe 0x14008fcb2
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008fcac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008fcac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ed6a0
nop
mov rdx, qword [rbp + 0x300]
cmp rdx, 0xf
jbe 0x14008fcf6
inc rdx
mov rcx, qword [rbp + 0x2e8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008fcf1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008fcf1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ed6a0
mov rcx, qword [rbp + 0x460]
xor rcx, rsp
call fcn.1400edb20
lea r11, [rsp + 0x580]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001420
nop
call fcn.140001380
int3
call fcn.140001420
int3