Function at 0x14008e0d0
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Create process on windows
Encode data using xor
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1788]
mov eax, 0x1888
call fcn.1400ebf90
sub rsp, rax
xor esi, esi
mov dword [rbp + 0x17d0], esi
mov rcx, qword [0x1402442c8]
add rcx, 0x1a0
call fcn.1400d4a58
lea rcx, [rbp + 0x17c8]
movabs r12, 0xff00ff00ff00ff00
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], rcx
mov rax, qword [rcx]
xor rax, r12
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x160], rax
mov qword [rcx], rsi
cmp qword [0x1402440d8], rsi
je 0x14008f6ab
mov dword [rbp + 0x4d0], esi
lea rdx, [rbp - 8]
call fcn.14008b320
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14008e16d
mov rcx, qword [rax]
lea rdx, [rbp + 0x6b4]
sub rdx, rcx
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14008e180
lea rcx, [rbp - 8]
call fcn.14005ed40
mov rbx, qword [0x1402440d8]
test rbx, rbx
je 0x14008f627
lea rcx, [rbp + 0x11f0]
lea rdx, [rbp + 0x4d0]
mov r8d, 0x588
call fcn.1400f18a0
mov r8d, 0x588
lea rdx, [rbp + 0x11f0]
mov rcx, rbx
call qword [sym.imp.libssl_3_x64.dll_SSL_write]
mov r8d, 0x200
lea rdx, [rbp + 0xa60]
mov rcx, qword [0x1402440d8]
call qword [sym.imp.libssl_3_x64.dll_SSL_read]
movsxd rcx, eax
mov byte [rbp + rcx + 0xa60], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xa0], rsi
lea rax, [rbp + 0xa60]
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14008e224
lea rdx, [rbp + 0xa60]
lea rcx, [rbp + 0x88]
call fcn.140061160
nop
mov dword [rsp + 0x30], 0xe2d1d2d2
mov dword [rsp + 0x34], 0xafaededc
mov dword [rsp + 0x38], 0x100a7a7
mov rcx, rsi
nop dword [rax]
lea eax, [rcx - 0x46]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0xa
jb 0x14008e260
mov byte [rsp + 0x3b], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rsi
lea rax, [rsp + 0x30]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14008e290
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140061160
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x60]
call fcn.14008c9e0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14008e2c5
mov rax, qword [rax]
lea rcx, [rbp + 0x88]
mov r8, qword [rbp + 0x88]
mov qword [rbp + 0xa8], r8
mov r9, qword [rbp + 0xa0]
mov qword [rbp + 0x80], r9
cmp r9, 0xf
cmova rcx, r8
mov r8, qword [rbp + 0x98]
cmp r8, rdx
jne 0x14008e30c
mov rdx, rax
call fcn.1400f1fc0
test eax, eax
je 0x14008f6fa
lea rcx, [rbp + 0x60]
call fcn.14005ed40
lea r13, [rbp + 0x17c8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], r13
mov rbx, qword [r13]
xor rbx, r12
mov qword [rsp + 0x30], rbx
mov qword [r13], rsi
mov ecx, esi
mov edi, 3
lea r8, [0x14009beb0]
lea r14, [0x140000000]
mov rax, qword [0x140244790]
test rax, rax
je 0x14008e389
mov rdx, rsi
nop word [rax + rax]
cmp rax, r8
je 0x14008e378
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0x244790]
test rax, rax
jne 0x14008e360
jmp 0x14008e389
mov r8, qword [r14 + rdx*8 + 0x245a80]
test r8, r8
jne 0x14008e476
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14008e3b0
mov r8, rsi
jmp 0x14008e44e
lea rax, [0x14009beb0]
mov rcx, r8
mov rdx, rdi
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14008e3c0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402450f0]
lea rcx, [0x14009beb0]
mov qword [r14 + rax*8 + 0x244790], rcx
mov qword [r14 + rax*8 + 0x245a80], r8
inc rax
mov qword [0x1402450f0], rax
mov rcx, qword [sym.imp.KERNEL32.dll_AllocConsole]
call r8
nop
xor rbx, r12
mov qword [r13], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rbp + 0x17d0], eax
lea rax, [rbp + 0x17c8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rax
mov rbx, qword [rax]
xor rbx, r12
mov qword [rsp + 0x30], rbx
mov qword [rax], rsi
mov ecx, esi
lea r13, [0x14009bee0]
mov rax, qword [0x140246400]
test rax, rax
je 0x14008e4f9
mov rdx, rsi
nop dword [rax + rax]
cmp rax, r13
je 0x14008e4e8
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0x246400]
test rax, rax
jne 0x14008e4d0
jmp 0x14008e4f9
mov r8, qword [r14 + rdx*8 + 0x246720]
test r8, r8
jne 0x14008e5df
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14008e520
mov r8, rsi
jmp 0x14008e5be
mov rax, r13
mov rcx, r8
mov rdx, rdi
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14008e530
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140245750]
mov qword [r14 + rax*8 + 0x246400], r13
mov qword [r14 + rax*8 + 0x246720], r8
inc rax
mov qword [0x140245750], rax
lea rdx, [rbp + 0x17d0]
mov rcx, qword [sym.imp.KERNEL32.dll_AttachConsole]
call r8
nop
lea rax, [rbp + 0x17c8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], rbx
mov qword [rax], rsi
mov ecx, esi
lea r13, [0x14009bf10]
mov rax, qword [0x140244470]
test rax, rax
je 0x14008e64b
mov rdx, rsi
cmp rax, r13
je 0x14008e63a
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0x244470]
test rax, rax
jne 0x14008e622
jmp 0x14008e64b
mov r8, qword [r14 + rdx*8 + 0x245430]
test r8, r8
jne 0x14008e72f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14008e672
mov r8, rsi
jmp 0x14008e70e
mov rax, r13
mov rcx, r8
mov rdx, rdi
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14008e680
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402460c0]
mov qword [r14 + rax*8 + 0x244470], r13
mov qword [r14 + rax*8 + 0x245430], r8
inc rax
mov qword [0x1402460c0], rax
lea rdx, str.Loading...
mov rcx, qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call r8
nop
xor rbx, r12
lea rax, [rbp + 0x17c8]
mov qword [rax], rbx
mov ecx, 1
call fcn.1400c4b7c
mov qword [rbp + 0x17d0], rax
lea rax, [rbp + 0x17c8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rax
mov rbx, qword [rax]
xor rbx, r12
mov qword [rsp + 0x30], rbx
mov qword [rax], rsi
mov ecx, esi
lea r13, [0x14009bf40]
mov rax, qword [0x140244ab0]
test rax, rax
je 0x14008e7bf
mov rdx, rsi
cmp rax, r13
je 0x14008e7ae
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0x244ab0]
test rax, rax
jne 0x14008e796
jmp 0x14008e7bf
mov r10, qword [r14 + rdx*8 + 0x244dd0]
test r10, r10
jne 0x14008e89f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x14008e7e6
mov r10, rsi
jmp 0x14008e87e
mov rax, r13
mov rcx, r10
mov rdx, rdi
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14008e7f0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140245428]
mov qword [r14 + rax*8 + 0x244ab0], r13
mov qword [r14 + rax*8 + 0x244dd0], r10
inc rax
mov qword [0x140245428], rax
lea r9, [rbp + 0x17d0]
lea r8, [0x14013d708]
lea rdx, [0x14013d70c]
lea rcx, [0x1400d48ac]
call r10
nop
xor rbx, r12
lea rax, [rbp + 0x17c8]
mov qword [rax], rbx
mov dword [rbp + 0x4d0], 1
mov rcx, qword [0x1402442c8]
add rcx, 0x100
lea rdx, [rbp + 0x514]
sub rdx, rcx
nop
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x14008e8f0
mov rbx, qword [0x1402440d8]
test rbx, rbx
je 0x14008f9d9
lea rcx, [rbp + 0xc60]
lea rdx, [rbp + 0x4d0]
mov r8d, 0x588
call fcn.1400f18a0
mov r8d, 0x588
lea rdx, [rbp + 0xc60]
mov rcx, rbx
call qword [sym.imp.libssl_3_x64.dll_SSL_write]
mov r8d, 0x200
lea rdx, [rbp + 0x2d0]
mov rcx, qword [0x1402440d8]
call qword [sym.imp.libssl_3_x64.dll_SSL_read]
movsxd rcx, eax
mov byte [rbp + rcx + 0x2d0], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], rsi
lea rax, [rbp + 0x2d0]
mov r8, r15
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14008e980
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp - 0x28]
call fcn.140061160
nop
mov dword [rbp + 0x17d0], 0xc7d3c9dc
mov dword [rbp + 0x17d4], 0x100d1db
mov rcx, rsi
lea eax, [rcx - 0x46]
xor byte [rbp + rcx + 0x17d0], al
inc rcx
cmp rcx, 6
jb 0x14008e9b2
mov byte [rbp + 0x17d7], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rsi
lea rax, [rbp + 0x17d0]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x14008e9e6
lea rdx, [rbp + 0x17d0]
lea rcx, [rsp + 0x78]
call fcn.140061160
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 8]
call fcn.14008c9e0
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14008ea1d
mov rax, qword [rax]
lea rcx, [rbp - 0x28]
mov r13, qword [rbp - 0x28]
mov r8, qword [rbp - 0x10]
mov qword [rbp + 0x17d8], r8
cmp r8, 0xf
cmova rcx, r13
mov r8, qword [rbp - 0x18]
cmp r8, rdx
jne 0x14008ea51
mov rdx, rax
call fcn.1400f1fc0
test eax, eax
jne 0x14008ea51
mov bl, 1
jmp 0x14008ea53
xor bl, bl
lea rcx, [rbp - 8]
call fcn.14005ed40
test bl, bl
jne 0x14008f70b
movdqa xmm0, xmmword [0x14013e3e0]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x100222b
mov rcx, rsi
nop dword [rax]
lea eax, [rcx + 0x34]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x12
jb 0x14008ea80
mov byte [rsp + 0x43], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], rsi
lea rax, [rsp + 0x30]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14008eab0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.140061160
nop
lea rcx, [rbp + 0x1c0]
call fcn.14005e000
nop
lea rax, [rsp + 0x78]
mov qword [rbp + 0x17e0], rax
mov rdi, qword [rbp - 0x58]
lea rsi, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rsi, qword [rbp - 0x68]
call fcn.1400bacc8
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], ax
mov dword [rbp + 0x17d0], socket
test rdi, rdi
je 0x14008eb98
cmp rdi, 0x7fffffff
ja 0x14008f743
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.1400bacf0
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x14008f749
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rsp + 0x78]
call fcn.14005e3e0
lea r9, [rsp + 0x78]
cmp qword [rbp - 0x70], 7
cmova r9, qword [rsp + 0x78]
mov dword [rsp + 0x20], ebx
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.1400bacf0
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14008f755
lea rcx, [rsp + 0x78]
call fcn.14005bfc0
movzx ebx, al
lea rcx, [rsp + 0x78]
call fcn.14005e470
mov edi, 2
test bl, bl
je 0x14008ec49
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rdx, qword [rbp - 0x68]
lea r8d, [rdi + 8]
lea rcx, [rbp + 0x1c8]
call fcn.14005eeb0
test rax, rax
mov rax, qword [rbp + 0x1c0]
movsxd rcx, dword [rax + 4]
je 0x14008ec18
mov eax, 4
cmp qword [rbp + rcx + 0x208], 0
mov r14d, 0
cmovne eax, r14d
mov dword [rbp + rcx + 0x1d0], eax
test dword [rbp + rcx + 0x1d4], eax
jne 0x14008f676
jmp 0x14008ec4c
mov eax, 6
cmp qword [rbp + rcx + 0x208], 0
cmovne eax, edi
or eax, dword [rbp + rcx + 0x1d0]
and eax, 0x17
mov dword [rbp + rcx + 0x1d0], eax
mov edx, dword [rbp + rcx + 0x1d4]
and edx, eax
jne 0x14008f75f
xor r14d, r14d
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x14008ec87
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008ec82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f7b6
call fcn.1400b9d58
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], 0xf
mov byte [rbp - 0x68], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
mov ecx, 0x20
call fcn.1400ba130
mov qword [rbp + 0x40], rax
movdqa xmm0, xmmword [0x14013dea0]
movdqu xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [str.Jul_20_2024_17:04:52]
movups xmmword [rax], xmm1
mov ecx, dword [0x14013d730]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], 0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0xb8]
call fcn.14008dd30
nop
cmp qword [rbp + 0x248], 0
je 0x14008ed44
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rdx, qword [rbp + 0xb8]
mov r8, qword [rbp + 0xc8]
lea rcx, [rbp + 0x1c0]
call fcn.140062920
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14005f2f0
movzx edx, al
mov rcx, rbx
call fcn.140061a10
mov rcx, rbx
call fcn.1400618e0
mov dword [rbp + 0x4d0], edi
mov byte [rbp + 0x514], 0
mov byte [rbp + 0xa54], 0
movups xmm0, xmmword [str.ff1b749aa9a1ac8125894ae07f3de979]
movups xmmword [rbp + 0x7b4], xmm0
movups xmm1, xmmword [0x14013d748]
movups xmmword [rbp + 0x7c4], xmm1
movzx eax, byte [0x14013d758]
mov byte [rbp + 0x7d4], al
mov rbx, qword [0x1402440d8]
test rbx, rbx
je 0x14008f98f
lea rcx, [rbp + 0xc60]
lea rdx, [rbp + 0x4d0]
mov r8d, 0x588
call fcn.1400f18a0
mov r8d, 0x588
lea rdx, [rbp + 0xc60]
mov rcx, rbx
call qword [sym.imp.libssl_3_x64.dll_SSL_write]
mov r8d, 0x200
lea rdx, [rbp + 0x2d0]
mov rcx, qword [0x1402440d8]
call qword [sym.imp.libssl_3_x64.dll_SSL_read]
movsxd rcx, eax
mov byte [rbp + rcx + 0x2d0], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], r14
lea rax, [rbp + 0x2d0]
mov r8, r15
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14008ee00
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp - 0x48]
call fcn.140061160
nop
mov dword [rsp + 0x30], 0x58444751
mov dword [rsp + 0x34], 0x4b4f664a
mov dword [rsp + 0x38], 0x5a4a5c58
mov word [rsp + 0x3c], 0x100
mov rcx, r14
nop dword [rax]
lea eax, [rcx + 0x34]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0xc
jb 0x14008ee40
mov byte [rsp + 0x3d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], r14
lea rax, [rsp + 0x30]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14008ee70
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140061160
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.14008c9e0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xf0], xmm1
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rbp + 0x100], 1
mov dword [rsp + 0x30], 0x68425a5a
mov dword [rsp + 0x34], 0x49494d
mov byte [rsp + 0x38], 1
mov rcx, r14
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x34]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 7
jb 0x14008ef00
mov byte [rsp + 0x38], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], r14
lea rax, [rsp + 0x30]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14008ef30
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.140061160
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x178]
call fcn.14008c9e0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r14
mov qword [rbp + 0x120], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x108], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x118], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rbp + 0x128], edi
mov dword [rsp + 0x30], 0x58425a53
mov dword [rsp + 0x34], 0x5f4a4c67
mov dword [rsp + 0x38], 0x5b495d
mov byte [rsp + 0x3c], 1
mov rcx, r14
nop dword [rax + rax]
lea eax, [rcx + 0x34]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0xb
jb 0x14008efc0
mov byte [rsp + 0x3c], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], r14
lea rax, [rsp + 0x30]
nop dword [rax]
inc r15
cmp byte [rax + r15], 0
jne 0x14008eff0
mov r8, r15
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.140061160
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x1a0]
call fcn.14008c9e0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x140], xmm1
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp + 0x140], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov esi, 3
mov dword [rbp + 0x150], esi
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x158]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.14009b6d0
nop
lea r9, [fcn.14005e4f0]
mov r8d, esi
lea edx, [rsi + 0x25]
lea rcx, [rbp + 0xe0]
call fcn.1400b9c88
nop
lea rcx, [rbp + 0x1a0]
call fcn.14005ed40
nop
lea rcx, [rbp + 0x178]
call fcn.14005ed40
nop
lea rcx, [rsp + 0x50]
call fcn.14005ed40
lea r8, [rbp - 0x48]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x20]
call fcn.14009c160
mov rax, qword [rax]
mov ecx, dword [rax + 0x40]
sub ecx, 1
je 0x14008f92f
sub ecx, 1
je 0x14008f15d
cmp ecx, 1
je 0x14008f7bc
mov rdi, qword [rbp + 0x17d8]
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rbp + 0x17c8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rax
mov rbx, qword [rax]
xor rbx, r12
mov qword [rsp + 0x30], rbx
mov qword [rax], r14
mov ecx, r14d
mov rax, qword [0x140244790]
lea r15, [0x140000000]
test rax, rax
je 0x14008f1a7
mov rdx, r14
lea r8, [0x14009beb0]
cmp rax, r8
je 0x14008f196
inc ecx
mov edx, ecx
mov rax, qword [r15 + rcx*8 + 0x244790]
test rax, rax
jne 0x14008f145
jmp 0x14008f1a7
mov qword [rbp - 0x18], r14
lea rax, [rbp - 0x28]
cmp qword [rbp + 0x17d8], 0xf
cmova rax, r13
mov byte [rax], 0
mov qword [rbp - 0x38], r14
lea rax, [rbp - 0x48]
cmp qword [rbp - 0x30], 0xf
cmova rax, qword [rbp - 0x48]
mov byte [rax], 0
mov rdi, qword [rbp - 0x10]
mov r13, qword [rbp - 0x28]
jmp 0x14008f0fb
mov r8, qword [r15 + rdx*8 + 0x245a80]
test r8, r8
jne 0x14008f296
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14008f1ce
mov r8, r14
jmp 0x14008f26e
lea rax, [0x14009beb0]
mov rcx, r8
mov rdx, rsi
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14008f1e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402450f0]
lea rcx, [0x14009beb0]
mov qword [r15 + rax*8 + 0x244790], rcx
mov qword [r15 + rax*8 + 0x245a80], r8
inc rax
mov qword [0x1402450f0], rax
mov rcx, qword [sym.imp.KERNEL32.dll_FreeConsole]
call r8
nop
xor rbx, r12
lea rax, [rbp + 0x17c8]
mov qword [rax], rbx
movdqa xmm0, xmmword [0x14013e2c0]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x1003637
mov rcx, r14
nop word [rax + rax]
lea eax, [rcx + 0x34]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x12
jb 0x14008f2d0
mov byte [rsp + 0x43], 0
xor edx, edx
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [rbp + 0x17e8], rax
test rax, rax
je 0x14008f498
mov dword [rbp + 0x17d0], r14d
mov dword [rbp + 0x17d8], r14d
mov dword [rbp + 0x17e0], socket
lea rax, [rbp + 0x17c8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rax
mov rbx, qword [rax]
xor rbx, r12
mov qword [rsp + 0x30], rbx
mov qword [rax], r14
mov ecx, r14d
lea r8, [0x14009c100]
mov rax, qword [0x140245da0]
test rax, rax
je 0x14008f37b
mov rdx, r14
cmp rax, r8
je 0x14008f36a
inc ecx
mov edx, ecx
mov rax, qword [r15 + rcx*8 + 0x245da0]
test rax, rax
jne 0x14008f352
jmp 0x14008f37b
mov r10, qword [r15 + rdx*8 + 0x245100]
test r10, r10
jne 0x14008f45f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
lea rdx, [0x14009c100]
test rax, rax
jne 0x14008f3a9
mov r10, r14
jmp 0x14008f43e
mov rax, rdx
mov rcx, r10
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rsi, 1
jne 0x14008f3b0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402463f0]
mov qword [r15 + rax*8 + 0x245da0], rdx
mov qword [r15 + rax*8 + 0x245100], r10
inc rax
mov qword [0x1402463f0], rax
lea rax, [rbp + 0x17d0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x17d8]
lea r8, [rbp + 0x17e0]
lea rdx, [rbp + 0x17e8]
mov rcx, qword [sym.imp.USER32.dll_SendMessageA]
call r10
nop
xor rbx, r12
lea rax, [rbp + 0x17c8]
mov qword [rax], rbx
call fcn.1400b6c20
nop
mov r8, qword [rbp + 0x20]
mov r8, qword [r8 + 8]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x20]
call fcn.14009ce70
mov edx, 0x48
mov rcx, qword [rbp + 0x20]
call fcn.1400b9d58
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x14008f4fd
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008f4f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f917
call fcn.1400b9d58
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
lea rcx, [rbp + 0xb8]
call fcn.14005ed40
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14008f555
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008f550
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f91d
call fcn.1400b9d58
movdqa xmm0, xmmword [0x14013de50]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
cmp qword [rbp + 0x248], 0
je 0x14008f57c
lea rcx, [rbp + 0x1c0]
call fcn.14005df60
lea rcx, [rbp + 0x1c0]
call fcn.14005c140
nop
cmp rdi, 0xf
jbe 0x14008f5c1
lea rdx, [rdi + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x14008f5b8
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f923
mov rcx, r13
call fcn.1400b9d58
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x14008f603
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008f5fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008f929
call fcn.1400b9d58
nop
xor r12, qword [rbp + 0x30]
lea rax, [rbp + 0x17c8]
mov qword [rax], r12
mov al, 1
add rsp, 0x1888
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movdqa xmm0, xmmword [0x14013e480]
movdqu xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14013e290]
movdqu xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x70], 0x243a26
mov byte [rsp + 0x74], 1
lea rcx, [rsp + 0x50]
call fcn.14008dd00
mov rdx, rax
mov r9d, 0x10
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1400d47a8
nop
mov edx, 1
lea rcx, [rsp + 0x30]
call fcn.1400593b0
mov r8, rax
lea rdx, str.ios_base::badbit_set
lea rcx, [rsp + 0x50]
call fcn.140059f30
lea rdx, [0x140155bc0]
lea rcx, [rsp + 0x50]
call fcn.1400bf6d0
nop
movdqa xmm0, xmmword [0x14013e480]
movdqu xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14013e290]
movdqu xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x70], 0x243a26
mov byte [rsp + 0x74], 1
lea rcx, [rsp + 0x50]
call fcn.14008dd00
mov rdx, rax
mov r9d, 0x10
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1400d47a8
nop
lea rcx, [rbp + 0x60]
call fcn.14005ed40
xor ecx, ecx
call fcn.1400d47a8
nop
movdqa xmm0, xmmword [0x14013e890]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], 0x100
lea rcx, [rsp + 0x30]
call fcn.14005d1a0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1400d47a8
nop
call fcn.140059640
int3
shr rbx, 0x20
mov ecx, ebx
call fcn.140059990
int3
shr rcx, 0x20
call fcn.140059990
nop
test dl, 4
je 0x14008f76d
lea rbx, str.ios_base::badbit_set
jmp 0x14008f782
test dil, dl
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp + 0x30]
call fcn.1400593b0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp + 0x178]
call fcn.140059f30
lea rdx, [0x140155bc0]
lea rcx, [rbp + 0x178]
call fcn.1400bf6d0
nop
call fcn.1400d3378
nop
movdqa xmm0, xmmword [0x14013e2b0]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x21662030
mov dword [rsp + 0x44], 0x652f2521
mov dword [rsp + 0x48], 0x1006362
lea rcx, [rsp + 0x30]
call fcn.14008fac0
mov rdx, rax
lea rcx, [0x140242520]
call fcn.14006cbd0
mov rcx, rax
call fcn.14005e350
mov byte [rbp + 0xa54], 1
lea rcx, [rbp + 0xc60]
lea rdx, [rbp + 0x4d0]
mov r8d, 0x588
call fcn.1400f18a0
lea r8, [rbp + 0xc60]
lea rdx, [rbp - 8]
call fcn.14008dae0
nop
lea rdx, [rsp + 0x50]
call fcn.1400b7000
mov rdx, rax
call fcn.1400b62e0
mov dword [rsp + 0x30], 0x5841505a
mov dword [rsp + 0x34], 0x15545c48
mov dword [rsp + 0x38], 0x5b4559
mov byte [rsp + 0x3c], 1
lea rcx, [rsp + 0x30]
call fcn.14008fa60
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.14005d260
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x30], xmm0
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x30]
call fcn.14009bf80
mov dword [rsp + 0x30], 0x5841505a
mov dword [rsp + 0x34], 0x15545c48
mov dword [rsp + 0x38], 0x5b4559
mov byte [rsp + 0x3c], 1
lea rcx, [rsp + 0x30]
call fcn.14008fa60
mov r8, rax
mov dword [rbp + 0x17d0], 0xd3d9cbd5
mov word [rbp + 0x17d4], 0x100
lea rcx, [rbp + 0x17d0]
call fcn.14005d230
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rcx, [rbp - 8]
call fcn.14009bac0
lea rcx, [rbp - 0x28]
call fcn.14009bac0
lea rcx, [rbp - 0x48]
call fcn.14009bac0
xor ecx, ecx
call fcn.1400d47a8
nop
call fcn.1400d3378
nop
call fcn.1400d3378
nop
call fcn.1400d3378
nop
call fcn.1400d3378
nop
lea rcx, [rbp - 0x28]
call fcn.14009bac0
lea rcx, [rbp - 0x48]
call fcn.14009bac0
movdqa xmm0, xmmword [0x14013e460]
movdqu xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14013e4d0]
movdqu xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x70], 0x25332135
mov word [rsp + 0x74], 0x100
lea rcx, [rsp + 0x50]
call fcn.14008fa90
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1400d47a8
nop
movdqa xmm0, xmmword [0x14013e480]
movdqu xmmword [rbp - 8], xmm0
movdqa xmm1, xmmword [0x14013e290]
movdqu xmmword [rbp + 8], xmm1
mov dword [rbp + 0x18], 0x243a26
mov byte [rbp + 0x1c], 1
lea rcx, [rbp - 8]
call fcn.14008dd00
mov rdx, rax
mov r9d, 0x10
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1400d47a8
nop
movdqa xmm0, xmmword [0x14013e480]
movdqu xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14013e290]
movdqu xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x70], 0x243a26
mov byte [rsp + 0x74], 1
lea rcx, [rsp + 0x50]
call fcn.14008dd00
mov rdx, rax
mov r9d, 0x10
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call fcn.1400d47a8
int3