Function at 0x14006e120
Capabilities:
Create process on windows
Encode data using xor
Enumerate gui resources
Enumerate processes
Terminate process
Terminate process by name

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x398]
sub rsp, 0x470
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x1403825a0]
xor rax, rsp
mov qword [rbp + 0x320], rax
mov r14, rcx
xor esi, esi
mov r13d, 4
mov rax, qword gs:[0x58]
mov r15, qword [rax]
mov eax, dword [r15 + r13]
cmp dword [0x1403b7370], eax
jle 0x14006e300
lea rcx, [0x1403b7370]
call fcn.140262f50
cmp dword [0x1403b7370], 0xffffffff
jne 0x14006e300
mov eax, dword [r15 + r13]
cmp dword [0x1403b7358], eax
jle 0x14006e2e6
lea rcx, [0x1403b7358]
call fcn.140262f50
cmp dword [0x1403b7358], 0xffffffff
jne 0x14006e2e6
mov ecx, 0xb0
call fcn.140262e38
mov rdi, rax
mov qword [rsp + 0x50], rax
xor edx, edx
mov r8d, 0xb0
mov rcx, rax
call fcn.140267df0
mov dword [rdi], esi
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rsi
lea r8d, [rsi + 0x11]
lea rdx, str.MW_Bot_Lobby_Tool
lea rcx, [rbp - 0x30]
call fcn.14005d510
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rsi
mov qword [rbp + 8], rsi
lea r8d, [rsi + 0x15]
lea rdx, str.Cold_War_Zombies_Tool
lea rcx, [rbp - 0x10]
call fcn.14005d510
nop
lea rax, [rbp - 0x30]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rdi + 8]
call fcn.140072160
nop
lea r9, [fcn.14005c870]
lea edx, [rsi + 0x20]
lea r8d, [rsi + 2]
lea rcx, [rbp - 0x30]
call fcn.140262fd8
mov dword [rdi + 0x20], esi
mov byte [rdi + 0x24], sil
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi + 0x25], xmm0
movups xmmword [rdi + 0x35], xmm0
movups xmmword [rdi + 0x45], xmm0
movups xmmword [rdi + 0x55], xmm0
movups xmmword [rdi + 0x65], xmm0
movups xmmword [rdi + 0x75], xmm0
movups xmmword [rdi + 0x85], xmm0
mov qword [rdi + 0x95], rax
mov dword [rdi + 0x9d], eax
mov qword [rdi + 0xa1], 0x1000000
mov dword [rdi + 0xa9], eax
mov word [rdi + 0xad], 0x100
mov qword [0x1403b7430], rdi
lea rcx, [0x1403b7358]
call fcn.140262ee4
mov rax, qword [0x1403b7430]
mov qword [0x1403b7850], rax
lea rcx, [0x1403b7370]
call fcn.140262ee4
mov eax, dword [r15 + r13]
cmp dword [0x1403b73b8], eax
jle 0x14006e33b
lea rcx, [0x1403b73b8]
call fcn.140262f50
cmp dword [0x1403b73b8], 0xffffffff
jne 0x14006e33b
movaps xmm0, xmmword [0x1403521b0]
movups xmmword [0x1403b7360], xmm0
lea rcx, [0x1403b73b8]
call fcn.140262ee4
mov eax, dword [r15 + r13]
cmp dword [0x1403b7478], eax
jle 0x14006e376
lea rcx, [0x1403b7478]
call fcn.140262f50
cmp dword [0x1403b7478], 0xffffffff
jne 0x14006e376
movaps xmm0, xmmword [0x140352190]
movups xmmword [0x1403b7420], xmm0
lea rcx, [0x1403b7478]
call fcn.140262ee4
mov rax, qword [0x1403b71f0]
or dword [rax + 0x1dc0], 2
mov dword [rax + 0x1de4], 0x44480000
mov dword [rax + 0x1de8], 0x43960000
mov dword [rax + 0x1dc8], 1
movdqa xmm0, xmmword [0x140352260]
movdqu xmmword [rbp - 0x58], xmm0
mov dword [rbp - 0x48], 0xa1aaa7ab
mov dword [rbp - 0x44], 0xa2a1adcb
mov dword [rbp - 0x40], 0x100d0cf
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx - 0x29]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 0x1a
jb 0x14006e3d0
mov byte [rbp - 0x3d], 0
xor edx, edx
lea r8d, [rdx + 3]
lea rcx, [rbp - 0x58]
call fcn.140091010
mov rbx, qword [0x1403b71f0]
mov rcx, qword [rbx + 0x1d18]
movss xmm0, dword [rcx + 0x2a8]
cmp qword [rcx + 0x1e8], 0
jne 0x14006e41d
cmp qword [rbx + 0x2178], 0
je 0x14006e425
movss xmm0, dword [rcx + 0x278]
subss xmm0, dword [rcx + 0x118]
movss dword [rsp + 0x60], xmm0
mov dword [rsp + 0x64], 0x42200000
mov byte [rcx + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.TopBar
call fcn.140086350
cmp dword [rbx + 0x1d6c], eax
jne 0x14006e478
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14006e487
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], esi
mov r9b, 1
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, str.TopBar
call fcn.14008e0c0
mov rax, qword [0x1403b71f0]
mov rdx, qword [rax + 0x1d18]
movss xmm0, dword [rdx + 0x2a8]
cmp qword [rdx + 0x1e8], 0
jne 0x14006e4cb
cmp qword [rax + 0x2178], 0
je 0x14006e4d3
movss xmm0, dword [rdx + 0x278]
subss xmm0, dword [rdx + 0x118]
mulss xmm0, dword [0x140351e9c]
subss xmm0, dword [0x140351f84]
mov byte [rdx + 0xd1], 1
mov rcx, qword [rax + 0x1d18]
xorps xmm8, xmm8
ucomiss xmm0, xmm8
jp 0x14006e50d
jne 0x14006e50d
movss xmm0, dword [rax + 0x16a0]
addss xmm0, dword [rcx + 0x158]
movss dword [rcx + 0x158], xmm0
addss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x15c]
movss dword [rcx + 0x118], xmm0
movaps xmm0, xmmword [0x1403521a0]
movups xmmword [rsp + 0x70], xmm0
lea rdx, str.________MW2___WZ2___UNLOCK_ALL
lea rcx, [rsp + 0x70]
call fcn.1400bcdd0
call fcn.14008e390
mov ecx, 1
call fcn.14006dc90
mov rbx, qword [0x1403b71f0]
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x2ac]
subss xmm1, dword [rax + 0x11c]
mov dword [rsp + 0x60], 0x42c80000
movss dword [rsp + 0x64], xmm1
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.LeftSide
call fcn.140086350
cmp dword [rbx + 0x1d6c], eax
jne 0x14006e5c7
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14006e5d6
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], esi
mov r9b, 1
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, str.LeftSide
call fcn.14008e0c0
mov rax, qword [0x1403b7850]
lea rcx, [0x1403b7360]
lea r12, [0x1403b7420]
mov rdi, r12
cmp dword [rax], 1
cmove rdi, rcx
mov rbx, qword [0x1403b71f0]
mov dword [rbp - 0x78], esi
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rbp - 0x74], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x78]
call fcn.1400a6970
movups xmm0, xmmword [rdi]
movups xmmword [rbx + 0x16fc], xmm0
movss xmm6, dword [0x140351f9c]
movaps xmm1, xmm6
lea rcx, str.Software
call fcn.14006dff0
call fcn.14008df80
test al, al
je 0x14006e66b
mov rax, qword [0x1403b7850]
mov dword [rax], 1
call fcn.1400beda0
mov r11, qword [0x1403b7850]
mov rdi, r12
cmp dword [r11], 3
lea rax, [0x1403b7360]
cmove rdi, rax
mov rbx, qword [0x1403b71f0]
mov dword [rbp - 0x78], esi
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rbp - 0x74], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x78]
call fcn.1400a6970
movups xmm0, xmmword [rdi]
movups xmmword [rbx + 0x16fc], xmm0
movaps xmm1, xmm6
lea rcx, str.Spoofer
call fcn.14006dff0
cmp dword [r14 + 0x20c], 6
jne 0x14006e6e7
call fcn.14008df80
test al, al
je 0x14006e6e7
mov rax, qword [0x1403b7850]
mov dword [rax], 3
call fcn.1400beda0
mov r11, qword [0x1403b7850]
cmp dword [r11], 2
lea rax, [0x1403b7360]
cmove r12, rax
mov rbx, qword [0x1403b71f0]
mov dword [rbp - 0x78], esi
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rbp - 0x74], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x78]
call fcn.1400a6970
movups xmm0, xmmword [r12]
movups xmmword [rbx + 0x16fc], xmm0
movaps xmm1, xmm6
lea rcx, str.Info
call fcn.14006dff0
cmp dword [r14 + 0x20c], 6
jne 0x14006e762
call fcn.14008df80
test al, al
je 0x14006e762
mov rax, qword [0x1403b7850]
mov dword [rax], 2
mov edx, 0xff1d1ddb
xor ecx, ecx
call fcn.140086d20
call fcn.1400beda0
movaps xmm1, xmm6
lea rcx, str.Exit
call fcn.14006dff0
call fcn.14008df80
test al, al
je 0x14006e794
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov r8, qword [0x1403b71f0]
movsxd rax, dword [r8 + 0x1e70]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1e78]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x16fc], xmm0
movsxd rcx, dword [r8 + 0x1e70]
lea eax, [rcx - 1]
mov dword [r8 + 0x1e70], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1e78]
movsxd rax, dword [rcx + rdx*4]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8 + 0x16fc], xmm0
movsxd rcx, dword [r8 + 0x1e70]
lea eax, [rcx - 1]
mov dword [r8 + 0x1e70], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1e78]
movsxd rax, dword [rcx + rdx*4]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8 + 0x16fc], xmm0
movsxd rcx, dword [r8 + 0x1e70]
lea eax, [rcx - 1]
mov dword [r8 + 0x1e70], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1e78]
movsxd rax, dword [rcx + rdx*4]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8 + 0x16fc], xmm0
dec dword [r8 + 0x1e70]
call fcn.14008e390
movss xmm7, dword [0x140351ffc]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140095130
mov ecx, 2
call fcn.1400bee30
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140095130
xor edx, edx
lea ecx, [rdx + 3]
call fcn.140086d20
mov rbx, qword [0x1403b71f0]
mov rcx, qword [rbx + 0x1d18]
movss xmm1, dword [rcx + 0x2ac]
subss xmm1, dword [rcx + 0x11c]
movss xmm0, dword [rcx + 0x2a8]
cmp qword [rcx + 0x1e8], 0
jne 0x14006e8da
cmp qword [rbx + 0x2178], 0
je 0x14006e8e2
movss xmm0, dword [rcx + 0x278]
subss xmm0, dword [rcx + 0x118]
movss dword [rsp + 0x60], xmm0
movss dword [rsp + 0x64], xmm1
mov byte [rcx + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.RightSide
call fcn.140086350
cmp dword [rbx + 0x1d6c], eax
jne 0x14006e933
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14006e942
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], esi
mov r9b, 1
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, str.RightSide
call fcn.14008e0c0
mov rbx, qword [0x1403b71f0]
movsxd rax, dword [rbx + 0x1e70]
lea rdx, [rax + rax*4]
mov rcx, qword [rbx + 0x1e78]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [rbx + rax*8 + 0x16fc], xmm0
dec dword [rbx + 0x1e70]
mov rcx, qword [0x1403b7850]
mov edx, dword [rcx]
sub edx, 1
je 0x14006ea64
sub edx, 1
je 0x14006ea5a
cmp edx, 1
jne 0x1400711a1
movaps xmm6, xmmword [0x140352160]
mov dword [rbp - 0x78], reloc.WS2_32.dll_socket
movups xmm0, xmmword [rbx + 0x186c]
movups xmmword [rbp - 0x74], xmm0
lea rdx, [rbp - 0x78]
lea rcx, [rbx + 0x1e70]
call fcn.1400a6970
movups xmmword [rbx + 0x186c], xmm6
mov rbx, qword [0x1403b71f0]
mov dword [rbp - 0x78], reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rbx + 0x184c]
movups xmmword [rbp - 0x74], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x78]
call fcn.1400a6970
movups xmmword [rbx + 0x184c], xmm6
mov rbx, qword [0x1403b71f0]
mov dword [rbp - 0x78], reloc.WS2_32.dll_shutdown
movups xmm0, xmmword [rbx + 0x185c]
movups xmmword [rbp - 0x74], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x78]
call fcn.1400a6970
movups xmmword [rbx + 0x185c], xmm6
mov edx, 3
lea rcx, str._UPGRADE_TO_BUNDLE_LOADER
call fcn.14006de80
jmp 0x1400711a1
call fcn.1400beda0
jmp 0x1400711a1
cmp byte [0x1403b7338], 0
je 0x14006ea78
mov dword [r14 + 0x20c], 1
cmp dword [r14 + 0x20c], 8
jne 0x14006eafb
mov byte [r14 + 0x213], 1
mov rcx, r14
call fcn.140071250
cmp byte [r14 + 0x213], 0
jne 0x14006eafb
movzx eax, byte [r14 + 0x214]
test al, al
jne 0x14006eac5
cmp byte [r14 + 0x215], al
jne 0x14006eacf
mov byte [r14 + 0x211], al
mov dword [r14 + 0x20c], 5
jmp 0x14006eafb
cmp byte [r14 + 0x215], 0
je 0x14006eae4
mov byte [r14 + 0x215], 0
mov dword [r14 + 0x20c], 7
jmp 0x14006eafb
test al, al
je 0x14006eafb
mov byte [r14 + 0x214], 0
mov dword [r14 + 0x20c], 6
cmp dword [r14 + 0x20c], 5
jne 0x14006eb57
mov rcx, r14
call fcn.140071680
test al, al
jne 0x14006eb4c
mov rcx, qword [r14 + 0x238]
call fcn.140094620
lea rdx, [r14 + 0x40]
cmp qword [rdx + 0x18], 0x10
jb 0x14006eb2b
mov rdx, qword [rdx]
movups xmm0, xmmword [0x1403ae3d8]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x70]
mov r8b, 1
call fcn.140071490
call fcn.1400946c0
jmp 0x14006eb57
mov dword [r14 + 0x20c], 3
mov rbx, 0xffffffffffffffff
lea r12d, [rbx + 0x10]
movss xmm9, dword [0x140351fa8]
cmp dword [r14 + 0x20c], 7
jne 0x14006f3ea
call fcn.140071b00
mov rdi, qword [0x1403b71f0]
mov rax, qword [rdi + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rdi + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x14006ebc0
mov qword [rsp + 0x60], 0
movaps xmm1, xmm7
lea rcx, [rsp + 0x60]
call fcn.140094d50
mov rdi, qword [0x1403b71f0]
mov rax, qword [rdi + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rdi + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x14006ebfb
mov qword [rsp + 0x60], 0
movaps xmm1, xmm7
lea rcx, [rsp + 0x60]
call fcn.140094d50
mov rdi, qword [0x1403b71f0]
mov rdx, qword [rdi + 0x1d18]
movzx ecx, byte [rdx + 0xf5]
and ecx, 0xf1
shl ecx, 8
mov eax, dword [rdx + 0xf4]
and eax, 0xffff00ff
or ecx, eax
mov dword [rdx + 0xf4], ecx
mov word [rdx + 0xe8], 0
mov dword [rdx + 0x60], 0x43d20000
mov dword [rdx + 0x64], 0x43920000
mov rax, qword [rdi + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rdi + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x140351f80]
addss xmm2, dword [0x140351fa4]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movdqa xmm0, xmmword [0x140352250]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140352290]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [0x1403521e0]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x140352140]
movdqa xmmword [rbp], xmm1
mov word [rbp + 0x10], 0x100
mov rcx, rsi
lea eax, [rcx - 0x2b]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x40
jb 0x14006ecf0
mov byte [rbp + 0x11], 0
movups xmm6, xmmword [0x1403ae3d8]
mov dword [rbp - 0x78], esi
movups xmm0, xmmword [rdi + 0x16fc]
movups xmmword [rbp - 0x74], xmm0
lea rcx, [rdi + 0x1e70]
lea rdx, [rbp - 0x78]
call fcn.1400a6970
movups xmmword [rdi + 0x16fc], xmm6
lea rcx, [rbp - 0x30]
call fcn.1400bccd0
mov r8, qword [0x1403b71f0]
movsxd rax, dword [r8 + 0x1e70]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1e78]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x16fc], xmm0
dec dword [r8 + 0x1e70]
mov rax, qword [r8 + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [r8 + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x14006edaa
mov qword [rsp + 0x60], 0
movaps xmm1, xmm7
lea rcx, [rsp + 0x60]
call fcn.140094d50
mov r8, qword [0x1403b71f0]
mov rax, qword [r8 + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [r8 + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x14006ede5
mov qword [rsp + 0x60], 0
movaps xmm1, xmm7
lea rcx, [rsp + 0x60]
call fcn.140094d50
mov r8, qword [0x1403b71f0]
movaps xmm1, xmm7
movss xmm6, dword [0x140351fb0]
movaps xmm0, xmm6
call fcn.140095130
mov rax, qword [r8 + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [r8 + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, xmm9
addss xmm2, dword [0x140351f8c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov edx, esi
lea rcx, str.Vanguard
nop word [rax + rax]
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x14006ee83
inc rcx
add rcx, rax
inc edx
cmp byte [rcx], 0
jne 0x14006ee80
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], edx
lea r9, str.Vanguard
lea r8, [0x1400c04a0]
lea rdx, [0x1403b7310]
lea rcx, str.freecombo
call fcn.1400c04f0
mov rcx, qword [0x1403b71f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x140351fb8]
addss xmm2, xmm6
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rbp - 0x80], 0xbf800000
mov dword [rbp - 0x7c], 0x41d00000
mov dword [rsp + 0x60], 0xbdbdb89c
mov dword [rsp + 0x64], 0x100aeba
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 6
jb 0x14006ef70
mov byte [rsp + 0x67], 0
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.1400bd790
test al, al
je 0x14006f3ea
cmp dword [0x1403b7310], 0
jne 0x14006f3ea
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc0], xmm1
mov r13, rsi
mov qword [rbp + 0xd0], rsi
lea rdx, [0x1403b7438]
lea rcx, [rbp - 0x30]
call fcn.14005c910
mov r8, rax
lea rdx, [rbp - 0x58]
lea rcx, [0x1403b7670]
call fcn.140068c10
lea rcx, [rbp + 0xc0]
cmp rcx, rax
je 0x14006f019
mov rdi, qword [rax]
mov qword [rbp + 0xc0], rdi
mov r12, qword [rax + 8]
mov qword [rbp + 0xc8], r12
mov r13, qword [rax + 0x10]
mov qword [rbp + 0xd0], r13
mov qword [rax], rsi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
jmp 0x14006f027
mov r12, qword [rbp + 0xc8]
mov rdi, qword [rbp + 0xc0]
mov qword [rsp + 0x50], r12
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x14006f072
mov rdx, qword [rbp - 0x48]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f061
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071228
call fcn.140262e30
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rsi
cmp rdi, r12
jne 0x14006f0d4
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Failed_to_download
mov rcx, r14
call fcn.14005cfc0
mov dword [r14 + 0x20c], ebx
test rdi, rdi
je 0x1400711a6
sub r13, rdi
mov rax, rdi
cmp r13, 0x1000
jb 0x14006f0c4
add r13, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071248
mov rdx, r13
mov rcx, rdi
call fcn.140262e30
jmp 0x1400711a6
cmp byte [0x1403b7338], 0
jne 0x14006f3a6
mov dword [rbp - 0x80], esi
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14006f163
mov dword [rbp + 0xe0], 0x238
lea rdx, [rbp + 0xe0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14006f163
lea r8, [0x14034a6b8]
lea rdx, [rbp + 0x10c]
mov rcx, rsi
nop word [rax + rax]
movzx eax, word [r8 + rcx*2]
cmp ax, word [rdx + rcx*2]
jne 0x14006f264
movzx eax, word [r8 + rcx*2 + 2]
cmp ax, word [rdx + rcx*2 + 2]
jne 0x14006f264
add rcx, 2
cmp rcx, 0xc
jne 0x14006f130
mov eax, dword [rbp + 0xe8]
mov dword [rbp - 0x80], eax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12d, dword [rbp - 0x80]
mov r8d, r12d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test r12d, r12d
je 0x14006f3a6
mov r8, qword [rsp + 0x50]
sub r8, rdi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 1
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
mov rdx, rdi
mov rcx, rax
call fcn.140082040
mov rcx, rsi
test al, al
jne 0x14006f2c0
movdqa xmm0, xmmword [0x140352230]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rbp - 0x68], 0x100
nop dword [rax]
lea eax, [rcx - 0x29]
xor byte [rbp + rcx - 0x78], al
inc rcx
cmp rcx, 0x10
jb 0x14006f1e0
mov byte [rbp - 0x67], 0
lea r8, [rbp - 0x68]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x40]
call fcn.14005d3e0
lea rax, [rbp + 0x40]
cmp r14, rax
je 0x14006f279
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14006f248
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x14006f243
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007122e
mov rcx, r8
call fcn.140262e30
movups xmm0, xmmword [rbp + 0x40]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rbp + 0x50]
movups xmmword [r14 + 0x10], xmm1
mov edx, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
jmp 0x14006f27d
lea rdx, [rbp + 0xe0]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_Process32NextW]
jmp 0x14006f112
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x14006f2b4
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f2af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007122e
call fcn.140262e30
mov dword [r14 + 0x20c], ebx
jmp 0x14006f3a6
movdqa xmm0, xmmword [0x140352220]
movdqu xmmword [rbp + 0x20], xmm0
mov dword [rbp + 0x30], 0x8f9d8b82
mov dword [rbp + 0x34], 0x100cd8f
nop dword [rax + rax]
lea eax, [rcx - 0x29]
xor byte [rbp + rcx + 0x20], al
inc rcx
cmp rcx, 0x16
jb 0x14006f2e0
mov byte [rbp + 0x37], 0
lea r8, [rbp + 0x36]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x60]
call fcn.14005d3e0
lea rax, [rbp + 0x60]
cmp r14, rax
je 0x14006f364
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14006f348
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x14006f343
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140071234
mov rcx, r8
call fcn.140262e30
movups xmm0, xmmword [rbp + 0x60]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rbp + 0x70]
movups xmmword [r14 + 0x10], xmm1
mov edx, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x60], 0
jmp 0x14006f368
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x14006f39f
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f39a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071234
call fcn.140262e30
mov dword [r14 + 0x20c], esi
test rdi, rdi
je 0x14006f3de
sub r13, rdi
mov rax, rdi
cmp r13, 0x1000
jb 0x14006f3d3
add r13, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071248
mov rdx, r13
mov rcx, rdi
call fcn.140262e30
mov r13d, 4
mov r12d, reloc.WS2_32.dll_ntohs
cmp dword [r14 + 0x20c], 6
jne 0x14006fef8
call fcn.140071b00
call fcn.1400beda0
mov edx, 4
lea rcx, str.___MW2___WZ2___UNLOCK_ALL
call fcn.14006de80
call fcn.1400beda0
movaps xmm1, xmm7
movaps xmm0, xmm9
call fcn.140095130
mov edx, 4
lea rcx, [0x14034a6f0]
call fcn.14006de80
call fcn.1400beda0
movaps xmm1, xmm7
movaps xmm0, xmm9
call fcn.140095130
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 2
lea r9, str._________________________________________BATTLE_NET___________________________________
lea r8, [0x1400c0480]
lea rdx, [0x1403b722c]
lea rcx, str.test
call fcn.1400c04f0
call fcn.1400beda0
mov dword [rsp + 0x50], 0x44228000
mov dword [rsp + 0x54], 0x42480000
mov dword [rsp + 0x70], 0x9e98979b
mov dword [rsp + 0x74], 0x9b959ffb
mov dword [rsp + 0x78], 0x100b49e
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x29]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 0xa
jb 0x14006f4b0
mov byte [rsp + 0x7b], 0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.1400bd790
test al, al
je 0x14006fef8
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Taskmgr
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Taskmgr.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_processhacker.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_cheatengine.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_httpdebugger.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida64
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_ida64.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerUI
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerUI.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerSvc
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerSvc.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_KsDumper
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_KsDumper.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerPro
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_HTTPDebuggerPro.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_dnSpy
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_dnSpy.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Dumper
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_Dumper.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_scylla
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.taskkill__FI__IMAGENAME_eq_scylla.exe
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, [0x14034ab58]
call qword [sym.imp.USER32.dll_FindWindowA]
xor edx, edx
lea rcx, [0x14006dc10]
call qword [sym.imp.USER32.dll_EnumWindows]
cmp qword [0x1403b7180], 0
je 0x140071240
nop
mov eax, dword [r15 + r13]
cmp dword [0x1403b7878], eax
jle 0x14006f6d7
lea rcx, [0x1403b7878]
call fcn.140262f50
cmp dword [0x1403b7878], 0xffffffff
jne 0x14006f6d7
mov qword [0x1403b7880], rsi
mov qword [0x1403b7888], rbx
lea rcx, [0x1402aafb0]
call fcn.1402632e0
lea rcx, [0x1403b7878]
call fcn.140262ee4
lea rcx, [0x1403b7880]
call fcn.1400814c0
mov eax, dword [r15 + r13]
cmp dword [0x1403b7878], eax
jle 0x14006f72a
lea rcx, [0x1403b7878]
call fcn.140262f50
cmp dword [0x1403b7878], 0xffffffff
jne 0x14006f72a
mov qword [0x1403b7880], rsi
mov qword [0x1403b7888], rbx
lea rcx, [0x1402aafb0]
call fcn.1402632e0
lea rcx, [0x1403b7878]
call fcn.140262ee4
cmp qword [0x1403b7888], 0xffffffffffffffff
jne 0x14006f739
call fcn.14006c7b0
mov eax, dword [r15 + r13]
cmp dword [0x1403b7878], eax
jle 0x14006f780
lea rcx, [0x1403b7878]
call fcn.140262f50
cmp dword [0x1403b7878], 0xffffffff
jne 0x14006f780
mov qword [0x1403b7880], rsi
mov qword [0x1403b7888], rbx
lea rcx, [0x1402aafb0]
call fcn.1402632e0
lea rcx, [0x1403b7878]
call fcn.140262ee4
lea rcx, [0x1403b7880]
call fcn.1400814c0
mov eax, dword [r15 + r13]
cmp dword [0x1403b7878], eax
jle 0x14006f7d3
lea rcx, [0x1403b7878]
call fcn.140262f50
cmp dword [0x1403b7878], 0xffffffff
jne 0x14006f7d3
mov qword [0x1403b7880], rsi
mov qword [0x1403b7888], rbx
lea rcx, [0x1402aafb0]
call fcn.1402632e0
lea rcx, [0x1403b7878]
call fcn.140262ee4
cmp qword [0x1403b7888], 0xffffffffffffffff
jne 0x14006f808
mov r9d, reloc.WS2_32.dll_setsockopt
lea r8, str.DRIVER_ERROR
lea rdx, str.Driver_Loading_error__Error_can_happen_when_your_Anti_Virus_is_Active._Please_Disable_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp ax, 4
jne 0x1400711f0
jmp 0x14006f690
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], r12
mov byte [rbp + 0xa0], 0
lea rcx, [rbp - 0x30]
cmp dword [0x1403b722c], 0
jne 0x14006f910
call fcn.140081cc0
mov rbx, rax
lea rax, [rbp + 0xa0]
cmp rax, rbx
je 0x14006f8cd
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x14006f898
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f893
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400711f8
call fcn.140262e30
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], r12
mov byte [rbp + 0xa0], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], r12
mov byte [rbx], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14006f9d5
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f9d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400711f8
jmp 0x14006f9d0
call fcn.140081cc0
mov rbx, rax
lea rax, [rbp + 0xa0]
cmp rax, rbx
je 0x14006f99a
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x14006f965
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f960
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007123a
call fcn.140262e30
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], r12
mov byte [rbp + 0xa0], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], r12
mov byte [rbx], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14006f9d5
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006f9d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007123a
call fcn.140262e30
lea rdi, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0x10
cmovae rdi, qword [rbp + 0xa0]
xor edx, edx
test rdi, rdi
jne 0x14006fb38
mov cl, 0x5b
call fcn.14006b1f0
mov byte [rbp - 0x78], al
lea edx, [rdi + 1]
mov cl, reloc.WLDAP32.dll_Ordinal_45
call fcn.14006b1f0
mov byte [rbp - 0x77], al
lea edx, [rdi + 2]
mov cl, 0x5d
call fcn.14006b1f0
mov byte [rbp - 0x76], al
lea edx, [rdi + 3]
mov cl, reloc.WLDAP32.dll_Ordinal_32
call fcn.14006b1f0
mov byte [rbp - 0x75], al
lea edx, [rdi + 4]
mov cl, 0x69
call fcn.14006b1f0
mov byte [rbp - 0x74], al
lea edx, [rdi + 5]
mov cl, WSAGetLastError
call fcn.14006b1f0
mov byte [rbp - 0x73], al
lea edx, [rdi + 6]
mov cl, 0x76
call fcn.14006b1f0
mov byte [rbp - 0x72], al
lea edx, [rdi + 7]
mov cl, 0x61
call fcn.14006b1f0
mov byte [rbp - 0x71], al
lea edx, [rdi + 8]
mov cl, 0x6c
call fcn.14006b1f0
mov byte [rbp - 0x70], al
lea edx, [rdi + 9]
mov cl, 0x69
call fcn.14006b1f0
mov byte [rbp - 0x6f], al
lea edx, [rdi + 0xa]
mov cl, 0x64
call fcn.14006b1f0
mov byte [rbp - 0x6e], al
lea edx, [rdi + 0xb]
mov cl, reloc.WLDAP32.dll_Ordinal_32
call fcn.14006b1f0
mov byte [rbp - 0x6d], al
lea edx, [rdi + 0xc]
mov cl, 0x64
call fcn.14006b1f0
mov byte [rbp - 0x6c], al
lea edx, [rdi + 0xd]
mov cl, 0x6c
call fcn.14006b1f0
mov byte [rbp - 0x6b], al
lea edx, [rdi + 0xe]
call fcn.14006b1f0
mov byte [rbp - 0x6a], al
mov edx, r12d
mov cl, reloc.WLDAP32.dll_Ordinal_32
call fcn.14006b1f0
mov byte [rbp - 0x69], al
lea edx, [rdi + 0x10]
mov cl, 0x66
call fcn.14006b1f0
mov byte [rbp - 0x68], al
lea edx, [rdi + 0x11]
mov cl, 0x69
call fcn.14006b1f0
mov byte [rbp - 0x67], al
lea edx, [rdi + 0x12]
mov cl, 0x6c
call fcn.14006b1f0
mov byte [rbp - 0x66], al
lea edx, [rdi + 0x13]
mov cl, 0x65
call fcn.14006b1f0
mov byte [rbp - 0x65], al
lea edx, [rdi + 0x14]
mov cl, 0xa
call fcn.14006b1f0
mov byte [rbp - 0x64], al
xor eax, eax
mov byte [rbp - 0x63], al
mov rcx, rsi
nop dword [rax + rax]
lea eax, [rsi + 0x13]
xor byte [rbp + rcx - 0x78], al
inc esi
movsxd rcx, esi
cmp rcx, 0x15
jb 0x14006fb10
mov byte [rbp - 0x63], 0
lea rcx, [rbp - 0x78]
call fcn.14005eb80
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov cl, 0x6b
call fcn.14006b1f0
mov byte [rbp - 0x30], al
mov edx, 1
mov cl, 0x4b
call fcn.14006b1f0
mov byte [rbp - 0x2f], al
mov edx, 2
mov cl, 0x78
call fcn.14006b1f0
mov byte [rbp - 0x2e], al
mov edx, 3
mov cl, WSAStartup
call fcn.14006b1f0
mov byte [rbp - 0x2d], al
mov edx, 4
call fcn.14006b1f0
mov byte [rbp - 0x2c], al
mov edx, 5
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.14006b1f0
mov byte [rbp - 0x2b], al
mov edx, 6
mov cl, 0x53
call fcn.14006b1f0
mov byte [rbp - 0x2a], al
mov edx, 7
mov cl, 0x6b
call fcn.14006b1f0
mov byte [rbp - 0x29], al
mov edx, 8
mov cl, 0x30
call fcn.14006b1f0
mov byte [rbp - 0x28], al
mov edx, 9
mov cl, 0x35
call fcn.14006b1f0
mov byte [rbp - 0x27], al
mov edx, 0xa
mov cl, 0x75
call fcn.14006b1f0
mov byte [rbp - 0x26], al
mov edx, ntohs
mov cl, 0x71
call fcn.14006b1f0
mov byte [rbp - 0x25], al
mov edx, ntohs
mov cl, 0x52
call fcn.14006b1f0
mov byte [rbp - 0x24], al
mov edx, reloc.WS2_32.dll_listen
mov cl, 0x67
call fcn.14006b1f0
mov byte [rbp - 0x23], al
mov edx, reloc.WS2_32.dll_ntohl
mov cl, WSAStartup
call fcn.14006b1f0
mov byte [rbp - 0x22], al
mov edx, r12d
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.14006b1f0
mov byte [rbp - 0x21], al
mov edx, reloc.WS2_32.dll_recv
mov cl, 0x33
call fcn.14006b1f0
mov byte [rbp - 0x20], al
mov edx, reloc.WS2_32.dll_recvfrom
mov cl, 0x46
call fcn.14006b1f0
mov byte [rbp - 0x1f], al
mov edx, reloc.WS2_32.dll_select
mov cl, 0x4a
call fcn.14006b1f0
mov byte [rbp - 0x1e], al
mov edx, reloc.WS2_32.dll_send
mov cl, 0x63
call fcn.14006b1f0
mov byte [rbp - 0x1d], al
mov edx, reloc.WS2_32.dll_sendto
mov cl, 0x45
call fcn.14006b1f0
mov byte [rbp - 0x1c], al
mov edx, reloc.WS2_32.dll_setsockopt
mov cl, 0x62
call fcn.14006b1f0
mov byte [rbp - 0x1b], al
mov edx, reloc.WS2_32.dll_shutdown
mov cl, 0x50
call fcn.14006b1f0
mov byte [rbp - 0x1a], al
mov edx, reloc.WS2_32.dll_socket
mov cl, 0x6d
call fcn.14006b1f0
mov byte [rbp - 0x19], al
mov edx, Ordinal_27
mov cl, reloc.WS2_32.dll_WSASetLastError
call fcn.14006b1f0
mov byte [rbp - 0x18], al
mov edx, Ordinal_27
mov cl, 0x46
call fcn.14006b1f0
mov byte [rbp - 0x17], al
mov edx, reloc.WLDAP32.dll_Ordinal_26
mov cl, Ordinal_50
call fcn.14006b1f0
mov byte [rbp - 0x16], al
mov edx, reloc.WLDAP32.dll_Ordinal_27
mov cl, 0x34
call fcn.14006b1f0
mov byte [rbp - 0x15], al
mov edx, Ordinal_32
mov cl, 0x59
call fcn.14006b1f0
mov byte [rbp - 0x14], al
mov edx, Ordinal_32
mov cl, Ordinal_79
call fcn.14006b1f0
mov byte [rbp - 0x13], al
mov edx, reloc.WLDAP32.dll_Ordinal_30
mov cl, 0x61
call fcn.14006b1f0
mov byte [rbp - 0x12], al
mov edx, Ordinal_32
mov cl, 0x45
call fcn.14006b1f0
mov byte [rbp - 0x11], al
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov cl, 0x56
call fcn.14006b1f0
mov byte [rbp - 0x10], al
mov edx, reloc.WLDAP32.dll_Ordinal_33
mov cl, 0x46
call fcn.14006b1f0
mov byte [rbp - 0xf], al
mov edx, Ordinal_35
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.14006b1f0
mov byte [rbp - 0xe], al
mov edx, reloc.WLDAP32.dll_Ordinal_35
mov cl, 0x4b
call fcn.14006b1f0
mov byte [rbp - 0xd], al
mov edx, 0x24
mov cl, 0x51
call fcn.14006b1f0
mov byte [rbp - 0xc], al
mov edx, Ordinal_41
mov cl, 0x49
call fcn.14006b1f0
mov byte [rbp - 0xb], al
mov edx, Ordinal_41
mov cl, 0x63
call fcn.14006b1f0
mov byte [rbp - 0xa], al
mov edx, Ordinal_41
mov cl, 0x30
call fcn.14006b1f0
mov byte [rbp - 9], al
mov edx, Ordinal_41
mov cl, 0x57
call fcn.14006b1f0
mov byte [rbp - 8], al
mov edx, reloc.WLDAP32.dll_Ordinal_41
mov cl, 0x68
call fcn.14006b1f0
mov byte [rbp - 7], al
mov edx, Ordinal_46
mov cl, 0x57
call fcn.14006b1f0
mov byte [rbp - 6], al
mov edx, Ordinal_46
mov cl, 0x55
call fcn.14006b1f0
mov byte [rbp - 5], al
mov edx, Ordinal_46
mov cl, 0x41
call fcn.14006b1f0
mov byte [rbp - 4], al
mov edx, reloc.WLDAP32.dll_Ordinal_45
mov cl, 0x35
call fcn.14006b1f0
mov byte [rbp - 3], al
mov edx, reloc.WLDAP32.dll_Ordinal_46
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.14006b1f0
mov byte [rbp - 2], al
mov edx, Ordinal_50
mov cl, 0x36
call fcn.14006b1f0
mov byte [rbp - 1], al
mov edx, Ordinal_50
movzx ecx, dl
call fcn.14006b1f0
mov byte [rbp], al
mov edx, Ordinal_50
mov cl, reloc.WLDAP32.dll_Ordinal_79
call fcn.14006b1f0
mov byte [rbp + 1], al
mov edx, reloc.WLDAP32.dll_Ordinal_50
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.14006b1f0
mov byte [rbp + 2], al
mov edx, 0x33
mov cl, 0x78
call fcn.14006b1f0
mov byte [rbp + 3], al
mov edx, 0x34
mov cl, 0x49
call fcn.14006b1f0
mov byte [rbp + 4], al
mov edx, gethostname
mov cl, WSAGetLastError
call fcn.14006b1f0
mov byte [rbp + 5], al
mov edx, gethostname
mov cl, 0x57
call fcn.14006b1f0
mov byte [rbp + 6], al
mov edx, gethostname
mov cl, 0x6c
call fcn.14006b1f0
mov byte [rbp + 7], al
mov edx, gethostname
mov cl, 0x46
call fcn.14006b1f0
mov byte [rbp + 8], al
mov edx, reloc.WS2_32.dll_gethostname
mov cl, WSAStartup
call fcn.14006b1f0
mov byte [rbp + 9], al
mov edx, Ordinal_60
mov cl, 0x54
call fcn.14006b1f0
mov byte [rbp + 0xa], al
mov edx, Ordinal_60
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.14006b1f0
mov byte [rbp + 0xb], al
mov edx, reloc.WLDAP32.dll_Ordinal_60
mov cl, WSAStartup
call fcn.14006b1f0
mov byte [rbp + 0xc], al
mov edx, 0x3d
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.14006b1f0
mov byte [rbp + 0xd], al
xor eax, eax
mov byte [rbp + 0xe], al
mov rcx, rsi
nop word [rax + rax]
lea eax, [rsi + 0x13]
xor byte [rbp + rcx - 0x30], al
inc esi
movsxd rcx, esi
cmp rcx, 0x3e
jae 0x1400711fe
jmp 0x14006fee0
cmp dword [r14 + 0x20c], 4
jne 0x14007001a
mov rcx, qword [0x1403b71f0]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x11c]
subss xmm0, dword [rax + 0x54]
addss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x140351f78]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm0
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
lea rcx, str.Username:
call fcn.1400bccd0
movaps xmm1, xmm7
movss xmm6, dword [0x140351f90]
movaps xmm0, xmm6
call fcn.140095130
mov qword [rsp + 0x50], 0
lea r8, [r14 + 0x1da]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
xor edx, edx
lea r9d, [rdx + 0x32]
lea rcx, str.Usernameupgrade
call fcn.1400c2540
lea rcx, str.New_License:
call fcn.1400bccd0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140095130
mov qword [rsp + 0x50], 0
lea r8, [r14 + 0x1a8]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x8000
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
xor edx, edx
lea r9d, [rdx + 0x32]
lea rcx, str.Licenseupgrade
call fcn.1400c2540
movss xmm6, dword [0x140351f88]
movss xmm9, dword [0x140351fcc]
cmp dword [r14 + 0x20c], 2
jne 0x1400709c7
call fcn.1400beda0
call fcn.1400beda0
call fcn.1400beda0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140095130
lea rcx, str.Username:
call fcn.1400bccd0
movaps xmm1, xmm7
movaps xmm0, xmm8
call fcn.140095130
mov qword [rsp + 0x50], 0
lea r15, [r14 + 0x168]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WS2_32.dll_ntohl
mov r8, r15
xor edx, edx
lea rcx, str.Usernamereg
call fcn.1400c2540
call fcn.1400beda0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140095130
lea rcx, str.Password:
call fcn.1400bccd0
movaps xmm1, xmm7
movaps xmm0, xmm8
call fcn.140095130
mov qword [rsp + 0x50], 0
lea rdi, [r14 + 0x176]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x8000
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_50
mov r8, rdi
xor edx, edx
lea rcx, str.Passwordreg
call fcn.1400c2540
call fcn.1400beda0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140095130
mov dword [rsp + 0x70], 0xbbbe9af5
mov dword [rsp + 0x74], 0xb9a8b4bc
mov word [rsp + 0x78], 0xe7
mov byte [rsp + 0x7a], 1
mov rcx, rsi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x2b]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 9
jb 0x140070150
mov byte [rsp + 0x7a], 0
lea rcx, [rsp + 0x70]
call fcn.1400bccd0
movaps xmm1, xmm7
movaps xmm0, xmm8
call fcn.140095130
mov dword [rbp - 0x80], 0xbfb2fbf4
mov word [rbp - 0x7c], 0xa2
mov byte [rbp - 0x7a], 1
mov rcx, rsi
nop
lea eax, [rcx - 0x29]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 5
jb 0x140070190
mov byte [rbp - 0x7a], 0
mov qword [rsp + 0x50], 0
lea r13, [r14 + 0x136]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_50
mov r8, r13
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.1400c2540
mov rcx, qword [0x1403b71f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x140351fb4]
addss xmm2, dword [0x140351fbc]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x42a00000
mov dword [rsp + 0x54], 0x420c0000
mov dword [rsp + 0x70], 0xb3bebd85
mov dword [rsp + 0x74], 0xacb8a8a8
mov word [rsp + 0x78], 0x100
mov rcx, rsi
nop dword [rax + rax]
lea eax, [rcx - 0x29]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 8
jb 0x140070290
mov byte [rsp + 0x79], 0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.1400bd790
test al, al
je 0x140070920
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], rsi
mov r8, rbx
nop
inc r8
cmp byte [rdi + r8], 0
jne 0x1400702d0
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.14005d510
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140070321
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007031c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071248
call fcn.140262e30
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rsi
mov r8, rbx
inc r8
cmp byte [r15 + r8], 0
jne 0x140070333
mov rdx, r15
lea rcx, [rbp + 0x20]
call fcn.14005d510
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140070384
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007037f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071248
call fcn.140262e30
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rsi
mov r8, rbx
inc r8
cmp byte [r15 + r8], 0
jne 0x140070396
mov rdx, r15
lea rcx, [rbp - 0x58]
call fcn.14005d510
cmp qword [rbp - 0x48], 0
sete al
mov byte [rsp + 0x58], al
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400703f8
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400703ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071248
call fcn.140262e30
movzx eax, byte [rsp + 0x58]
test al, al
je 0x14007046a
lea rcx, [r14 + 0x60]
mov r8d, ntohs
lea rdx, str.No_Username_
call fcn.14005cfc0
mov rdi, qword [0x1403b71f0]
mov rax, qword [rdi + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.warn
call fcn.140086350
cmp dword [rdi + 0x1d6c], eax
jne 0x14007044f
mov dword [rdi + 0x1d70], eax
cmp dword [rdi + 0x1da8], eax
jne 0x14007045e
mov byte [rdi + 0x1dac], 1
mov ecx, eax
call fcn.140095e30
jmp 0x140070920
cmp dword [rbp + 0x30], 4
jg 0x1400704de
lea rcx, [r14 + 0x60]
mov r8d, Ordinal_46
lea rdx, str.Username_must_be_greater_than_4_Characters_
call fcn.14005cfc0
mov rdi, qword [0x1403b71f0]
mov rax, qword [rdi + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.warn
call fcn.140086350
cmp dword [rdi + 0x1d6c], eax
jne 0x1400704c3
mov dword [rdi + 0x1d70], eax
cmp dword [rdi + 0x1da8], eax
jne 0x1400704d2
mov byte [rdi + 0x1dac], 1
mov ecx, eax
call fcn.140095e30
jmp 0x140070920
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rsi
mov r8, rbx
inc r8
cmp byte [rdi + r8], 0
jne 0x1400704f0
mov rdx, rdi
lea rcx, [rbp - 0x58]
call fcn.14005d510
cmp qword [rbp - 0x48], 0
sete al
mov byte [rsp + 0x58], al
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x140070552
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140070548
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071248
call fcn.140262e30
movzx eax, byte [rsp + 0x58]
test al, al
je 0x1400705c4
lea rcx, [r14 + 0x60]
mov r8d, ntohs
lea rdx, str.No_Password_
call fcn.14005cfc0
mov rdi, qword [0x1403b71f0]
mov rax, qword [rdi + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.warn
call fcn.140086350
cmp dword [rdi + 0x1d6c], eax
jne 0x1400705a9
mov dword [rdi + 0x1d70], eax
cmp dword [rdi + 0x1da8], eax
jne 0x1400705b8
mov byte [rdi + 0x1dac], 1
mov ecx, eax
call fcn.140095e30
jmp 0x140070920
cmp dword [rbp - 0x68], 4
jg 0x140070638
lea rcx, [r14 + 0x60]
mov r8d, Ordinal_46
lea rdx, str.Password_must_be_greater_than_4_Characters_
call fcn.14005cfc0
mov rdi, qword [0x1403b71f0]
mov rax, qword [rdi + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.warn
call fcn.140086350
cmp dword [rdi + 0x1d6c], eax
jne 0x14007061d
mov dword [rdi + 0x1d70], eax
cmp dword [rdi + 0x1da8], eax
jne 0x14007062c
mov byte [rdi + 0x1dac], 1
mov ecx, eax
call fcn.140095e30
jmp 0x140070920
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rsi
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [r8 + r13], 0
jne 0x140070650
mov rdx, r13
lea rcx, [rbp - 0x58]
call fcn.14005d510
cmp qword [rbp - 0x48], 0
sete al
mov byte [rsp + 0x58], al
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400706b2
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400706a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140071248
call fcn.140262e30
movzx eax, byte [rsp + 0x58]
test al, al
je 0x140070724
lea rcx, [r14 + 0x60]
mov r8d, ntohs
lea rdx, str.No_License_
call fcn.14005cfc0
mov rdi, qword [0x1403b71f0]
mov rax, qword [rdi + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.warn
call fcn.140086350
cmp dword [rdi + 0x1d6c], eax
jne 0x140070709
mov dword [rdi + 0x1d70], eax
cmp dword [rdi + 0x1da8], eax
jne 0x140070718
mov byte [rdi + 0x1dac], 1
mov ecx, eax
call fcn.140095e30
jmp 0x140070920
lea rax, [rbp + 0x20]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rsi
mov r8, rbx
nop
inc r8
cmp byte [r8 + r13], 0
jne 0x140070740
mov rdx, r13
lea rcx, [rbp + 0x20]
call fcn.14005d510
nop
lea rax, [rbp - 0x78]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], rsi
mov r8, rbx
inc r8
cmp byte [rdi + r8], 0
jne 0x140070772
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.14005d510
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rsi
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x1400707a0
mov rdx, r15
lea rcx, [rbp - 0x30]
call fcn.14005d510
nop
lea r9, [rbp + 0x20]
lea r8, [rbp - 0x78]
lea rdx, [rbp - 0x30]
lea rcx, [0x1403b74b0]
call fcn.140067520
cmp byte [0x1403b7338], 0
jne 0x140070920
xor eax, eax
mov qword [r15], rax
mov dword [r15 + 8], eax
mov word [r15 + 0xc], ax
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
mov word [rdi + 0x30], ax
xorps xmm1, xmm1
movups xmmword [r13], xmm1
movups xmmword [r13 + 0x10], xmm1
movups xmmword [r13 + 0x20], xmm1
mov word [r13 + 0x30], ax
movdqa xmm0, xmmword [0x140352210]
movdqu xmmword [rbp - 0x58], xmm0
mov dword [rbp - 0x48], 0x8f9d9b8e
mov dword [rbp - 0x44], 0xcf898999
mov word [rbp - 0x40], 0x100
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx - 0x29]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 0x18
jb 0x140070840
mov byte [rbp - 0x3f], 0
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x80]
call fcn.14005d3e0
lea rax, [rbp + 0x80]
cmp r14, rax
je 0x1400708ce
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x1400708ae
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x1400708a9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400711ea
mov rcx, r8
call fcn.140262e30
movups xmm0, xmmword [rbp + 0x80]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rbp + 0x90]
movups xmmword [r14 + 0x10], xmm1
mov byte [rbp + 0x80], 0
jmp 0x1400708d5
mov r12, qword [rbp + 0x98]
cmp r12, 0x10
jb 0x140070911
lea rdx, [r12 + 1]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007090c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400711ea
call fcn.140262e30
mov byte [r14 + 0x210], 1
mov dword [r14 + 0x20c], esi
mov r8, qword [0x1403b71f0]
mov rax, qword [r8 + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm9
movaps xmm1, xmm7
call fcn.140095130
mov r9, qword [r8 + 0x1d18]
movss xmm1, dword [r9 + 0x11c]
subss xmm1, dword [r9 + 0x54]
movss xmm0, dword [r9 + 0x118]
subss xmm0, dword [r9 + 0x50]
addss xmm1, dword [r9 + 0xa0]
addss xmm0, dword [r9 + 0x9c]
movss dword [0x1403b7280], xmm0
movss dword [0x1403b7284], xmm1
mov dword [rsp + 0x50], 0x42a00000
mov dword [rsp + 0x54], 0x420c0000
lea rdx, [rsp + 0x50]
lea rcx, str.Backlog1
call fcn.1400bd790
test al, al
je 0x1400709c7
mov dword [r14 + 0x20c], 3
cmp dword [r14 + 0x20c], 3
jne 0x140070c61
call fcn.1400beda0
call fcn.1400beda0
call fcn.1400beda0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140095130
lea rcx, str.Username:
call fcn.1400bccd0
movaps xmm1, xmm7
movaps xmm0, xmm8
call fcn.140095130
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_50
lea r8, [r14 + 0xd2]
xor edx, edx
lea rcx, str.Username
call fcn.1400c2540
call fcn.1400beda0
call fcn.1400beda0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140095130
lea rcx, str.Password:
call fcn.1400bccd0
movaps xmm1, xmm7
movaps xmm0, xmm8
call fcn.140095130
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x8000
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, reloc.WLDAP32.dll_Ordinal_50
lea r8, [r14 + 0x104]
xor edx, edx
lea rcx, str.Password
call fcn.1400c2540
mov rcx, qword [0x1403b71f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x140351fb4]
addss xmm2, dword [0x140351fbc]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x42a00000
mov dword [rsp + 0x54], 0x420c0000
lea rdx, [rsp + 0x50]
lea rcx, str.Loginlog2
call fcn.1400bd790
test al, al
je 0x140070c01
lea rax, [rbp - 0x30]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rsi
mov r8, rbx
inc r8
cmp byte [r14 + r8 + 0x104], 0
jne 0x140070b72
lea rdx, [r14 + 0x104]
lea rcx, [rbp - 0x30]
call fcn.14005d510
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], rsi
inc rbx
cmp byte [r14 + rbx + 0xd2], 0
jne 0x140070ba0
mov r8, rbx
lea rdx, [r14 + 0xd2]
lea rcx, [rbp - 0x58]
call fcn.14005d510
nop
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x58]
lea rcx, [0x1403b74b0]
call fcn.140066090
cmp byte [0x1403b7338], 0
jne 0x140070bf6
mov word [r14 + 0x213], 0x101
mov dword [r14 + 0x20c], 8
jmp 0x140070c01
mov dword [r14 + 0x20c], 1
mov rax, qword [0x1403b71f0]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
addss xmm0, xmm9
movaps xmm1, xmm7
call fcn.140095130
mov dword [rsp + 0x50], 0x42a00000
mov dword [rsp + 0x54], 0x420c0000
lea rdx, [rsp + 0x50]
lea rcx, str.Registerlog1
call fcn.1400bd790
test al, al
je 0x140070c61
mov dword [r14 + 0x20c], 2
movss xmm6, dword [0x140351fac]
cmp dword [r14 + 0x20c], 0xffffffff
jne 0x140070d78
mov rdx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x140070c84
mov rdx, qword [r14]
movups xmm0, xmmword [0x1403ae3d8]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x70]
mov r8b, 1
call fcn.140071490
mov rcx, qword [0x1403b71f0]
mov rax, qword [rcx + 0x1d18]
movss xmm3, dword [rax + 0x118]
subss xmm3, dword [rax + 0x50]
addss xmm3, dword [rax + 0x9c]
addss xmm3, xmm6
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [rax + 0x54]
addss xmm1, dword [rax + 0xa0]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm0, xmm3
addss xmm2, xmm1
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov dword [rsp + 0x50], 0x42700000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
lea rcx, str.Exit
call fcn.1400bd790
test al, al
je 0x140070d78
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [r14 + 0x20c], 0
jne 0x140070f98
mov rax, qword [r14 + 0x18]
mov rdx, r14
cmp byte [r14 + 0x210], 0
jne 0x140070ea1
cmp rax, 0x10
jb 0x140070da4
mov rdx, qword [r14]
movups xmm0, xmmword [0x1403ae3e8]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x70]
mov r8b, 1
call fcn.140071490
mov rcx, qword [0x1403b71f0]
mov rax, qword [rcx + 0x1d18]
movss xmm3, dword [rax + 0x118]
subss xmm3, dword [rax + 0x50]
addss xmm3, dword [rax + 0x9c]
addss xmm3, xmm6
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [rax + 0x54]
addss xmm1, dword [rax + 0xa0]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm0, xmm3
addss xmm2, xmm1
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov dword [rsp + 0x50], 0x42700000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
lea rcx, str.Exit
call fcn.1400bd790
test al, al
je 0x140070f98
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x140070f98
cmp rax, 0x10
jb 0x140070eaa
mov rdx, qword [r14]
movups xmm0, xmmword [0x1403ae3e8]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x70]
mov r8b, 1
call fcn.140071490
mov rcx, qword [0x1403b71f0]
mov rax, qword [rcx + 0x1d18]
movss xmm3, dword [rax + 0x118]
subss xmm3, dword [rax + 0x50]
addss xmm3, dword [rax + 0x9c]
addss xmm3, xmm6
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm3, xmm0
addss xmm2, xmm1
movss dword [rax + 0x118], xmm3
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm3
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov dword [rsp + 0x50], 0x42700000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
lea rcx, [0x14034acc8]
call fcn.1400bd790
test al, al
je 0x140070f98
mov dword [r14 + 0x20c], 3
cmp dword [r14 + 0x20c], 1
jne 0x1400710b1
lea rdx, [0x1403ae3f8]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdx, qword [0x1403ae3f8]
movups xmm0, xmmword [0x1403ae3d8]
movdqa xmmword [rsp + 0x70], xmm0
lea r9, [rsp + 0x70]
mov r8b, 1
call fcn.140071490
mov rcx, qword [0x1403b71f0]
mov rax, qword [rcx + 0x1d18]
movss xmm3, dword [rax + 0x118]
subss xmm3, dword [rax + 0x50]
addss xmm3, dword [rax + 0x9c]
addss xmm3, xmm6
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm3, xmm0
addss xmm2, xmm1
movss dword [rax + 0x118], xmm3
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm3
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov dword [rsp + 0x50], 0x42700000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
lea rcx, str.Exit
call fcn.1400bd790
test al, al
je 0x1400710b1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
add r14, 0x60
cmp qword [r14 + 0x18], 0x10
jb 0x1400710bf
mov r14, qword [r14]
mov dword [rbp - 0x80], 0xb4abb9a0
mov word [rbp - 0x7c], 0x100
mov rcx, rsi
nop
lea eax, [rcx - 0x29]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 4
jb 0x1400710d0
mov byte [rbp - 0x7b], 0
lea rcx, [rbp - 0x80]
call fcn.1400963f0
test al, al
je 0x1400711a1
movups xmm6, xmmword [0x1403ae3d8]
mov rbx, qword [0x1403b71f0]
mov dword [rbp - 0x78], esi
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rbp - 0x74], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x78]
call fcn.1400a6970
movups xmmword [rbx + 0x16fc], xmm6
mov rcx, r14
call fcn.1400bccd0
mov rbx, qword [0x1403b71f0]
movsxd rax, dword [rbx + 0x1e70]
lea rdx, [rax + rax*4]
mov rcx, qword [rbx + 0x1e78]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [rbx + rax*8 + 0x16fc], xmm0
dec dword [rbx + 0x1e70]
mov rax, qword [rbx + 0x1d18]
cmp qword [rbx + 0x1f50], rax
jne 0x140071185
mov qword [rbx + 0x2070], rax
mov dword [rbx + 0x2078], 2
test dword [rax + 0xc], 0x1000000
je 0x140071195
mov byte [rbx + 0x1ca2], 1
call fcn.140094080
mov byte [rbx + 0x1ca2], 0
call fcn.14008e390
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.140262e10
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14027b778
int3
xor ecx, ecx
call fcn.1402746f0
nop
call fcn.14027b778
nop
mov byte [rbp + 0xe], 0
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
movzx ebx, ax
mov rdx, rdi
call fcn.14006d810
movzx ecx, bx
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
xor ecx, ecx
call fcn.1402746f0
nop
call fcn.14027b778
int3
call fcn.14027b778
int3
call fcn.14027b778
nop
call fcn.14027b778
nop
xor ecx, ecx
call fcn.1402746f0
int3
call fcn.14027b778
int3