Function at 0x140007350
Capabilities:
Encode data using xor
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x178]
sub rsp, 0x278
xor eax, eax
mov dword [rsp + 0x20], 0x48f148cd
lea rcx, [rsp + 0x20]
mov word [rsp + 0x34], ax
mov dword [rsp + 0x24], 0x48ea48ed
mov dword [rsp + 0x28], 0x48a748e8
mov dword [rsp + 0x2c], 0x48e048c4
mov dword [rsp + 0x30], 0x48ee48fe
call fcn.1400087d0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
movdqa xmm0, xmmword [0x1400b6b90]
xor eax, eax
movdqa xmm1, xmmword [0x1400b6b30]
xor edi, edi
movdqu xmmword [rsp + 0x40], xmm0
mov edx, edi
mov byte [rsp + 0x70], al
movdqa xmm0, xmmword [0x1400b6b10]
movdqu xmmword [rsp + 0x60], xmm0
movdqu xmmword [rsp + 0x50], xmm1
nop dword [rax]
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rsp + rcx + 0x40], al
cmp edx, 0x30
jb 0x1400073f0
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x70], dil
lea rcx, [rbp + 0x150]
call fcn.140009540
movdqa xmm0, xmmword [0x1400b6b90]
mov edx, edi
movdqa xmm1, xmmword [0x1400b6b30]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x70], Ordinal_200
movdqa xmm0, xmmword [0x1400b6b60]
movdqu xmmword [rsp + 0x60], xmm0
movdqu xmmword [rsp + 0x50], xmm1
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rsp + rcx + 0x40], al
cmp edx, 0x31
jb 0x140007450
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x71], dil
lea rcx, [rbp + 0x130]
call fcn.140009540
movdqa xmm0, xmmword [0x1400b6b90]
xor eax, eax
movdqa xmm1, xmmword [0x1400b6b30]
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x70], 0xc59ad6c1
movdqa xmm0, xmmword [0x1400b6b80]
movdqu xmmword [rsp + 0x60], xmm0
mov word [rsp + 0x74], 0xc7de
movdqu xmmword [rsp + 0x50], xmm1
mov byte [rsp + 0x76], al
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rsp + rcx + 0x40], al
cmp edx, 0x36
jb 0x1400074c0
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x76], dil
lea rcx, [rbp + 0x110]
call fcn.140009540
movdqa xmm0, xmmword [0x1400b6b90]
xor eax, eax
movdqa xmm1, xmmword [0x1400b6b30]
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x70], 0xdbdbdac1
movdqa xmm0, xmmword [0x1400b6b20]
movdqu xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x74], 0xc9d0c798
movdqu xmmword [rsp + 0x50], xmm1
mov byte [rsp + 0x78], al
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rsp + rcx + 0x40], al
cmp edx, 0x38
jb 0x140007530
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x78], dil
lea rcx, [rbp + 0xf0]
call fcn.140009540
xor eax, eax
mov word [rbp + 0x1c0], 0xbab3
mov byte [rbp + 0x1c2], al
mov edx, edi
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rbp + rcx + 0x1c0], al
cmp edx, 2
jb 0x140007570
lea rdx, [rbp + 0x1c0]
mov byte [rbp + 0x1c2], dil
lea rcx, [rbp + 0xb0]
call fcn.140009540
mov edx, edi
mov dword [rbp + 0x1c0], 0xf5f7f6f1
mov dword [rbp + 0x1c4], 0xece9e3
nop dword [rax]
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rbp + rcx + 0x1c0], al
cmp edx, 7
jb 0x1400075c0
lea rdx, [rbp + 0x1c0]
mov byte [rbp + 0x1c7], dil
lea rcx, [rbp + 0xd0]
call fcn.140009540
mov edx, edi
mov dword [rbp + 0x1c0], 0xf7f6d0
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rbp + rcx + 0x1c0], al
cmp edx, 3
jb 0x140007600
lea rdx, [rbp + 0x1c0]
mov byte [rbp + 0x1c3], dil
xor ecx, ecx
call fcn.14006d2d8
lea rcx, [rbp + 0x50]
call fcn.140003b60
mov rbx, qword [rbp + 0x60]
lea rcx, [rbp + 0x50]
call fcn.1400093a0
mov r8, rbx
lea rcx, [0x140605660]
mov rdx, rax
call fcn.14000e0d0
mov rcx, rax
call fcn.14000c9b0
mov edx, edi
mov dword [rbp + 0x1c0], 0xe1edf4ea
mov word [rbp + 0x1c4], 0xbb
nop
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rbp + rcx + 0x1c0], al
cmp edx, 5
jb 0x140007670
lea rdx, [rbp + 0x1c0]
mov byte [rbp + 0x1c5], dil
lea rcx, [rbp - 0x40]
call fcn.140009540
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x40]
call fcn.140009430
lea rdx, [0x1400b66ab]
xor r14b, r14b
lea rcx, [rbp + 0x10]
call fcn.140009540
lea rdx, [0x1400b66ab]
lea rcx, [rbp + 0x90]
call fcn.140009540
lea rdx, [0x1400b66ab]
lea rcx, [rbp + 0x70]
call fcn.140009540
movzx edx, byte [rbp + 0x1c0]
lea r8, [rbp + 0x1c0]
lea rcx, [rsp + 0x20]
call fcn.14000d530
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x20]
call fcn.14000acd0
movzx edx, byte [rbp + 0x1c0]
lea r8, [rbp + 0x1c0]
lea rcx, [rbp - 0x80]
call fcn.14000d530
lea rdx, [rbp + 0x150]
lea rcx, [rbp - 0x80]
call fcn.14000acd0
lea r8, [rsp + 0x20]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x30]
call fcn.1400047c0
mov rcx, rax
call fcn.1400093a0
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140009540
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.140003ff0
lea rcx, [rbp - 0x20]
call fcn.140009450
lea rcx, [rbp + 0x30]
call fcn.140009450
mov esi, edi
cmp qword [rbp - 0x50], rsi
jbe 0x1400077e8
mov rcx, qword [rbp - 0x48]
mov rbx, rdi
mov rdx, qword [rbp - 0x60]
nop dword [rax]
nop word [rax + rax]
cmp rcx, 0x10
lea rax, [rbp - 0x60]
cmovae rax, rdx
cmp byte [rbx + rax], 0x5f
jne 0x1400077a7
mov r14b, 1
jmp 0x1400077da
lea rax, [rbp - 0x60]
test r14b, r14b
jne 0x1400077bd
cmp rcx, 0x10
lea rcx, [rbp + 0x90]
jmp 0x1400077c5
cmp rcx, 0x10
lea rcx, [rbp + 0x70]
cmovae rax, rdx
movzx edx, byte [rbx + rax]
call fcn.14000a9c0
mov rdx, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x48]
inc esi
inc rbx
movsxd rax, esi
cmp rax, qword [rbp - 0x50]
jb 0x140007790
lea rcx, [rbp + 0x90]
call fcn.1400093a0
mov rcx, rax
call fcn.140072810
cmp eax, 0x1be202
je 0x1400083a6
cmp eax, 0x9809eb
je 0x1400080e0
cmp eax, 0x2e133bdd
jne 0x140008670
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14000a9a0
xor eax, eax
mov dword [rbp - 0x80], 0xf6f6e6f4
mov byte [rbp - 0x78], al
mov edx, edi
mov dword [rbp - 0x7c], 0xb4e6e8ef
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rbp + rcx - 0x80], al
cmp edx, 8
jb 0x140007840
mov rbx, 0xffffffffffffffff
mov byte [rbp - 0x78], dil
mov r8, rbx
lea rax, [rbp - 0x80]
inc r8
cmp byte [rax + r8], dil
jne 0x140007863
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x40]
call fcn.14000ab70
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x40]
call fcn.140009430
movzx edx, byte [rbp + 0x1c0]
lea r8, [rbp + 0x1c0]
lea rcx, [rbp - 0x20]
call fcn.14000d530
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.14000acd0
lea rdx, [rbp + 0xf0]
lea rcx, [rsp + 0x40]
call fcn.140009580
lea r8, [rbp - 0x20]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400047c0
mov rcx, rax
call fcn.1400093a0
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.140009540
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x30]
call fcn.140003ff0
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400094b0
lea rcx, [rbp + 0x30]
call fcn.140009450
lea rcx, [rsp + 0x20]
call fcn.140009450
lea rcx, [rbp - 0x80]
call fcn.140009450
lea rcx, [rbp + 0xd0]
call fcn.1400093a0
lea rcx, [rbp - 0x60]
mov rsi, rax
call fcn.1400093a0
sub rsi, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + rsi]
sub edx, ecx
jne 0x140007946
inc rax
test ecx, ecx
jne 0x140007934
test edx, edx
jne 0x140007987
movdqa xmm0, xmmword [0x1400b6aa0]
xor eax, eax
movdqu xmmword [rsp + 0x20], xmm0
mov byte [rsp + 0x32], al
mov word [rsp + 0x30], 0x997f
nop word [rax + rax]
movsxd rcx, edi
lea eax, [rdi - 0x7e]
inc edi
xor byte [rsp + rcx + 0x20], al
cmp edi, 0x12
jae 0x14000871e
jmp 0x140007970
lea rcx, [rbp + 0xb0]
call fcn.1400093a0
lea rcx, [rbp - 0x60]
mov rsi, rax
call fcn.1400093a0
sub rsi, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + rsi]
sub edx, ecx
jne 0x1400079b4
inc rax
test ecx, ecx
jne 0x1400079a2
test edx, edx
je 0x1400079f7
movdqa xmm0, xmmword [str._fttnx]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x75666261
mov dword [rsp + 0x34], 0x79737266
mov word [rsp + 0x38], 0x90
nop dword [rax]
movsxd rcx, edi
lea eax, [rdi - 0x7e]
inc edi
xor byte [rsp + rcx + 0x20], al
cmp edi, 0x19
jae 0x140008740
jmp 0x1400079e0
lea rcx, [rbp + 0x70]
call fcn.1400093a0
mov rcx, rax
call fcn.140072810
mov ecx, eax
cmp eax, 0x15180
jg 0x140007a18
mov ebx, 1
jmp 0x140007a2d
mov eax, 0xc22e4507
imul ecx
add edx, ecx
sar edx, 0x10
mov ebx, edx
shr ebx, 0x1f
inc ebx
add ebx, edx
lea rcx, [rbp - 0x60]
call fcn.1400093a0
movdqa xmm0, xmmword [0x1400b6ae0]
mov r8, rax
xor eax, eax
mov dword [rsp + 0x30], 0x9fe7b6b2
mov byte [rsp + 0x34], al
mov edx, edi
movdqu xmmword [rsp + 0x20], xmm0
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rsp + rcx + 0x20], al
cmp edx, 0x14
jb 0x140007a60
mov rdx, r8
mov byte [rsp + 0x34], dil
lea rcx, [rsp + 0x20]
call fcn.140001280
movdqa xmm0, xmmword [str.Hmomqbyhe]
mov r8d, edi
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x9ffdb6b2
mov dword [rsp + 0x34], 0x93929d9c
mov word [rsp + 0x38], 0x90
nop dword [rax + rax]
movsxd rcx, r8d
lea eax, [r8 - 0x7e]
inc r8d
xor byte [rsp + rcx + 0x20], al
cmp r8d, 0x19
jb 0x140007ab0
mov edx, ebx
mov byte [rsp + 0x39], dil
lea rcx, [rsp + 0x20]
call fcn.140001280
call fcn.140006ef0
lea rcx, [0x140605660]
call fcn.14000c9b0
movdqa xmm0, xmmword [str.Eckvwu_o]
movdqu xmmword [rbp - 0x80], xmm0
nop dword [rax]
nop word [rax + rax]
movsxd rcx, edi
lea eax, [rdi - 0x7e]
inc edi
xor byte [rbp + rcx - 0x80], al
cmp edi, 0xf
jb 0x140007b00
lea rcx, [rbp - 0x80]
mov byte [rbp - 0x71], 0
call fcn.140001280
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x48f148c1
mov dword [rsp + 0x24], 0x48c048fd
mov dword [rsp + 0x28], 0x48c048c8
mov dword [rsp + 0x2c], 0x48c748c1
mov dword [rsp + 0x30], 0x48cf
call fcn.140009170
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140007bad
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x48f148c1
mov dword [rsp + 0x24], 0x48c048fd
mov dword [rsp + 0x28], 0x48c048c8
mov dword [rsp + 0x2c], 0x48c748c1
mov dword [rsp + 0x30], 0x48cf
call fcn.140009170
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140007b60
lea rcx, [0x140605660]
call fcn.14000c9b0
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x48f148c1
mov dword [rsp + 0x24], 0x48c048fd
mov dword [rsp + 0x28], 0x48c048c8
mov dword [rsp + 0x2c], 0x48c748c1
mov dword [rsp + 0x30], 0x48cf
call fcn.140009170
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x48e248c5
mov qword [0x140606f78], rax
xor eax, eax
mov word [rsp + 0x3c], ax
mov dword [rsp + 0x24], 0x48e048e9
mov dword [rsp + 0x28], 0x48e248c5
mov dword [rsp + 0x2c], 0x48fd48e6
mov dword [rsp + 0x30], 0x48f948ef
mov dword [rsp + 0x34], 0x48e848a2
mov dword [rsp + 0x38], 0x48ea48f6
call fcn.1400087a0
mov rcx, rax
call fcn.140002510
lea rcx, [0x140605660]
call fcn.14000c9b0
cmp qword [0x140606f78], 0
je 0x140008670
call fcn.140003400
mov rbx, rax
mov dword [rsp + 0x20], 0x48e248c5
xor eax, eax
mov dword [rsp + 0x24], 0x48e048e9
lea rcx, [rsp + 0x20]
mov word [rsp + 0x30], ax
mov dword [rsp + 0x28], 0x48e248a8
mov dword [rsp + 0x2c], 0x48ec48f0
call fcn.140008770
mov rcx, rax
call fcn.1400025e0
mov dword [rbx], eax
mov edx, 9
mov rbx, qword [0x140606f78]
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
lea rcx, [rsp + 0x40]
call fcn.140005ba0
lea r8, [0x140606f78]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x1c0]
call fcn.14000cf20
mov rdx, rax
lea rcx, [0x1406077d8]
call fcn.14000cf60
lea rcx, [rbp + 0x1c0]
call fcn.140008800
mov ebx, 0x48c1
mov dword [rsp + 0x20], 0x48f148c1
mov r15d, 0x48cf
mov dword [rsp + 0x24], 0x48c048fd
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x28], 0x48c048c8
mov dword [rsp + 0x2c], 0x48c748c1
lea edi, [rbx + 0x3c]
mov dword [rsp + 0x30], r15d
lea esi, [rbx + 7]
lea r14d, [rbx + 6]
call fcn.140009170
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x1400080d1
movabs r12, 0x142677fd8
nop dword [rax + rax]
mov rcx, qword [0x1406077d8]
call fcn.140006440
lea rcx, [0x1406077c0]
call fcn.140008810
call fcn.140003400
mov r9d, 8
lea r8, [rbp + 0x1c0]
mov rdx, r12
mov rcx, rax
call fcn.140003320
cmp qword [rbp + 0x1c0], 0
je 0x140008045
call fcn.140003400
mov r9d, 8
lea r8, [rbp + 0x1c8]
movabs rdx, 0x142678d88
mov rcx, rax
call fcn.140003320
mov rdi, qword [rbp + 0x1c8]
test rdi, rdi
je 0x140008040
call fcn.140003400
mov r9d, 8
lea r8, [rbp + 0x1d0]
movabs rdx, 0x14267f360
mov rcx, rax
call fcn.140003320
cmp qword [rbp + 0x1d0], 0
je 0x140008040
call fcn.140003400
mov r9d, 8
lea r8, [rbp + 0x1d8]
movabs rdx, 0x14242f4a8
mov rcx, rax
call fcn.140003320
mov rbx, qword [rbp + 0x1d8]
call fcn.140003400
lea rdx, [rbx + 0x48]
mov r9d, 8
lea r8, [rbp]
mov rcx, rax
call fcn.140003320
mov r12, qword [rbp]
test r12, r12
je 0x140008031
call fcn.140003400
lea rdx, [rdi + 0x4e0]
mov r9d, 8
lea r8, [rbp + 8]
mov rcx, rax
call fcn.140003320
mov r14, qword [rbp + 8]
test r14, r14
je 0x14000802b
mov rcx, rdi
call fcn.140005b50
test eax, eax
je 0x14000802b
mov edx, eax
mov rcx, r14
call fcn.140005340
mov rdi, rax
test rax, rax
je 0x14000802b
mov rcx, rax
call fcn.1400052f0
test al, al
je 0x14000802b
lea rdx, [0x1406077c0]
mov rcx, r14
call fcn.140005550
mov r15, qword [0x1406077c8]
mov rsi, qword [0x1406077c0]
cmp rsi, r15
je 0x140008016
mov rbx, qword [rsi]
test rbx, rbx
je 0x140008009
cmp rbx, rdi
je 0x140008009
mov rdx, rdi
mov rcx, rbx
call fcn.140006ea0
test eax, eax
je 0x140008009
mov rcx, rbx
call fcn.1400052f0
test al, al
je 0x140008009
call fcn.140003400
lea rdx, [rbx + 0x10]
mov r9d, 8
lea r8, [rbp - 0x80]
mov rcx, rax
call fcn.140003320
mov rbx, qword [rbp - 0x80]
test rbx, rbx
je 0x140008009
xor edx, edx
mov rcx, rbx
call fcn.140005200
test rax, rax
je 0x140008009
movaps xmm0, xmmword [0x1400b6a50]
lea r8, [rsp + 0x20]
xorps xmm3, xmm3
movaps xmmword [rsp + 0x20], xmm0
mov rdx, r12
mov rcx, rbx
call fcn.140006b60
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x140008009
mov rcx, rdi
call fcn.1400052a0
test eax, eax
je 0x140008009
mov edx, eax
mov rcx, r14
call fcn.140005340
mov rbx, rax
test rax, rax
je 0x140008009
mov rdx, rdi
mov rcx, rax
call fcn.140006ea0
test eax, eax
je 0x140008009
mov rcx, rbx
call fcn.1400052f0
test al, al
je 0x140008009
call fcn.140003400
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1400033a0
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140003400
mov r9d, 2
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1400033a0
add rsi, 0x10
cmp rsi, r15
jne 0x140007ef3
lea rcx, [0x1406077c0]
call fcn.140008810
mov esi, 0x48c8
lea r15d, [rsi + 7]
mov r14d, 0x48c7
movabs r12, 0x142677fd8
mov ebx, 0x48c1
mov edi, 0x48fd
mov rcx, qword [0x1406077d8]
call fcn.140006470
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140008080
mov rcx, qword [0x1406077d8]
call fcn.140006810
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x48f148c1
mov dword [rsp + 0x24], 0x48c048fd
mov dword [rsp + 0x28], 0x48c048c8
mov dword [rsp + 0x2c], 0x48c748c1
mov dword [rsp + 0x30], 0x48cf
call fcn.140009170
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140007d70
lea rcx, [rsp + 0x40]
call fcn.140005e40
jmp 0x140008670
movdqa xmm0, xmmword [0x1400b6a90]
xor eax, eax
movdqa xmm1, xmmword [0x1400b6a70]
mov edx, edi
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x64], al
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0x859e474c
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rsp + rcx + 0x40], al
cmp edx, 0x24
jb 0x140008110
lea rcx, [rsp + 0x40]
mov byte [rsp + 0x64], dil
call fcn.140001280
lea rbx, [0x1406058a0]
nop word [rax + rax]
mov rax, qword [0x1406058a0]
mov dl, 0xa
movsxd rcx, dword [rax + 4]
add rcx, rbx
call fcn.14000c430
movzx r8d, al
lea rdx, [rbp + 0x10]
mov rcx, rbx
call fcn.14000e3b0
cmp qword [rbp + 0x20], rdi
je 0x140008140
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14000a9a0
mov edx, edi
mov dword [rbp + 0x1c0], 0xe1edf4ea
mov word [rbp + 0x1c4], 0xbb
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rbp + rcx + 0x1c0], al
cmp edx, 5
jb 0x140008190
mov rbx, 0xffffffffffffffff
mov byte [rbp + 0x1c5], dil
mov r8, rbx
lea rax, [rbp + 0x1c0]
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x1400081c0
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp - 0x40]
call fcn.14000ab70
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x40]
call fcn.140009430
mov edx, edi
mov dword [rbp + 0x1c0], 0xeaf6f3a4
mov dword [rbp + 0x1c4], 0xb5e8eb
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rbp + rcx + 0x1c0], al
cmp edx, 7
jb 0x140008200
mov byte [rbp + 0x1c7], dil
lea rax, [rbp + 0x1c0]
inc rbx
cmp byte [rax + rbx], dil
jne 0x140008222
mov r8, rbx
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp - 0x40]
call fcn.1400093b0
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x40]
call fcn.140009430
movzx edx, byte [rbp + 0x1c0]
lea r8, [rbp + 0x1c0]
lea rcx, [rbp - 0x20]
call fcn.14000d530
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.14000acd0
movzx edx, byte [rbp + 0x1c0]
lea r8, [rbp + 0x1c0]
lea rcx, [rsp + 0x20]
call fcn.14000d530
lea rdx, [rbp + 0x110]
lea rcx, [rsp + 0x20]
call fcn.14000acd0
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.1400047c0
mov rcx, rax
call fcn.1400093a0
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140009540
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x30]
call fcn.140003ff0
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400094b0
lea rcx, [rbp + 0x30]
call fcn.140009450
lea rcx, [rbp - 0x80]
call fcn.140009450
lea rcx, [rsp + 0x40]
call fcn.140009450
lea rcx, [rbp - 0x60]
call fcn.1400093a0
mov rcx, rax
call fcn.140072810
cmp eax, 0x8da7f4
je 0x140008360
cmp eax, 0xadaff8e
jne 0x140008670
movdqa xmm0, xmmword [0x1400b6a80]
movdqa xmm1, xmmword [0x1400b6a60]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x60], 0xa8
movdqu xmmword [rsp + 0x50], xmm1
nop word [rax + rax]
movsxd rcx, edi
lea eax, [rdi - 0x7e]
inc edi
xor byte [rsp + rcx + 0x40], al
cmp edi, 0x21
jb 0x140008340
mov byte [rsp + 0x61], 0
lea rcx, [rsp + 0x40]
jmp 0x14000866b
movdqa xmm0, xmmword [0x1400b6ac0]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x677e73b2
mov dword [rsp + 0x34], 0x6970757e
mov dword [rsp + 0x38], 0x707c7974
mov word [rsp + 0x3c], __WSAFDIsSet
nop dword [rax]
movsxd rcx, edi
lea eax, [rdi - 0x7e]
inc edi
xor byte [rsp + rcx + 0x20], al
cmp edi, 0x1d
jb 0x140008390
jmp 0x140008661
movdqa xmm0, xmmword [0x1400b6ab0]
xor eax, eax
movdqu xmmword [rsp + 0x20], xmm0
mov byte [rsp + 0x32], al
mov edx, edi
mov word [rsp + 0x30], 0xb3a8
nop dword [rax]
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rsp + rcx + 0x20], al
cmp edx, 0x12
jb 0x1400083d0
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x32], dil
call fcn.140001280
lea rbx, [0x1406058a0]
nop word [rax + rax]
mov rax, qword [0x1406058a0]
mov dl, 0xa
movsxd rcx, dword [rax + 4]
add rcx, rbx
call fcn.14000c430
movzx r8d, al
lea rdx, [rbp + 0x10]
mov rcx, rbx
call fcn.14000e3b0
cmp qword [rbp + 0x20], rdi
je 0x140008400
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14000a9a0
mov edx, edi
mov dword [rbp + 0x1c0], 0xe1edf4ea
mov word [rbp + 0x1c4], 0xbb
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rbp + rcx + 0x1c0], al
cmp edx, 5
jb 0x140008450
mov rbx, 0xffffffffffffffff
mov byte [rbp + 0x1c5], dil
mov r8, rbx
lea rax, [rbp + 0x1c0]
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x140008480
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp - 0x40]
call fcn.14000ab70
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x40]
call fcn.140009430
mov edx, edi
mov dword [rbp + 0x1c0], 0xeaf6f3a4
mov dword [rbp + 0x1c4], 0xb5e8eb
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx - 0x7e]
inc edx
xor byte [rbp + rcx + 0x1c0], al
cmp edx, 7
jb 0x1400084c0
mov byte [rbp + 0x1c7], dil
lea rax, [rbp + 0x1c0]
inc rbx
cmp byte [rax + rbx], dil
jne 0x1400084e2
mov r8, rbx
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp - 0x40]
call fcn.1400093b0
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x40]
call fcn.140009430
movzx edx, byte [rbp + 0x1c0]
lea r8, [rbp + 0x1c0]
lea rcx, [rbp - 0x20]
call fcn.14000d530
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.14000acd0
movzx edx, byte [rbp + 0x1c0]
lea r8, [rbp + 0x1c0]
lea rcx, [rsp + 0x20]
call fcn.14000d530
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x20]
call fcn.14000acd0
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x30]
call fcn.1400047c0
mov rcx, rax
call fcn.1400093a0
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140009540
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x40]
call fcn.140003ff0
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400094b0
lea rcx, [rsp + 0x40]
call fcn.140009450
lea rcx, [rbp - 0x80]
call fcn.140009450
lea rcx, [rbp + 0x30]
call fcn.140009450
lea rcx, [rbp - 0x60]
call fcn.1400093a0
mov rcx, rax
call fcn.140072810
cmp eax, 0x8da7f4
je 0x14000861d
cmp eax, 0xadaff8e
jne 0x140008670
movdqa xmm0, xmmword [0x1400b6a80]
movdqa xmm1, xmmword [0x1400b6a60]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x60], 0xa8
movdqu xmmword [rsp + 0x50], xmm1
nop word [rax + rax]
movsxd rcx, edi
lea eax, [rdi - 0x7e]
inc edi
xor byte [rsp + rcx + 0x40], al
cmp edi, 0x21
jb 0x140008600
mov byte [rsp + 0x61], 0
lea rcx, [rsp + 0x40]
jmp 0x14000866b
movdqa xmm0, xmmword [0x1400b6ac0]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x677e73b2
mov dword [rsp + 0x34], 0x6970757e
mov dword [rsp + 0x38], 0x707c7974
mov word [rsp + 0x3c], __WSAFDIsSet
nop word [rax + rax]
movsxd rdx, edi
lea eax, [rdi - 0x7e]
inc edi
xor byte [rsp + rdx + 0x20], al
cmp edi, 0x1d
jb 0x140008650
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x3d], 0
call fcn.140001280
mov rcx, qword [0x1406077d8]
call fcn.140006810
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x60]
call fcn.140009450
lea rcx, [rbp + 0x70]
call fcn.140009450
lea rcx, [rbp + 0x90]
call fcn.140009450
lea rcx, [rbp + 0x10]
call fcn.140009450
lea rcx, [rbp - 0x40]
call fcn.140009450
lea rcx, [rbp + 0x50]
call fcn.140009450
lea rcx, [rbp + 0xd0]
call fcn.140009450
lea rcx, [rbp + 0xb0]
call fcn.140009450
lea rcx, [rbp + 0xf0]
call fcn.140009450
lea rcx, [rbp + 0x110]
call fcn.140009450
lea rcx, [rbp + 0x130]
call fcn.140009450
lea rcx, [rbp + 0x150]
call fcn.140009450
xor eax, eax
add rsp, 0x278
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x32], 0
call fcn.140001280
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, ebx
call fcn.14006cff0
int3
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x39], 0
call fcn.140001280
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, ebx
call fcn.14006cff0
int3