Function at 0x140004990
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x4a8]
sub rsp, 0x568
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [0x140199080]
xor rax, rsp
mov qword [rbp + 0x3b0], rax
mov r13, r9
mov qword [rsp + 0x40], r9
mov r12, r8
mov rsi, rdx
mov r14, rcx
mov rdx, qword [rcx + 0xe8]
add rdx, 0x11d8
mov rcx, rsi
call fcn.140005de0
movzx ecx, al
cmp cl, 2
je 0x140004afd
cmp cl, 0xb
je 0x140004afd
cmp cl, 0xc
jne 0x140004a6d
movzx r15d, byte [0x140217104]
mov byte [rsp + 0x30], r15b
movss xmm6, dword [0x140217108]
movss dword [rsp + 0x34], xmm6
movss xmm11, dword [0x140217100]
jmp 0x140004b1f
cmp cl, 0x18
ja 0x140004aa2
mov edx, 0x1300410
bt edx, ecx
jae 0x140004aa2
movzx r15d, byte [0x1402170ec]
mov byte [rsp + 0x30], r15b
movss xmm6, dword [0x1402170f0]
movss dword [rsp + 0x34], xmm6
movss xmm11, dword [0x1402170e8]
jmp 0x140004b1f
cmp cl, 0x17
ja 0x140004ad7
mov eax, 0x800042
bt eax, ecx
jae 0x140004ad7
movzx r15d, byte [0x1402170f8]
mov byte [rsp + 0x30], r15b
movss xmm6, dword [0x1402170fc]
movss dword [rsp + 0x34], xmm6
movss xmm11, dword [0x1402170f4]
jmp 0x140004b1f
movzx r15d, byte [0x140217110]
mov byte [rsp + 0x30], r15b
movss xmm6, dword [0x140217114]
movss dword [rsp + 0x34], xmm6
movss xmm11, dword [0x14021710c]
jmp 0x140004b1f
movzx eax, byte [0x1402170e0]
mov byte [rsp + 0x30], al
movss xmm0, dword [0x1402170e4]
movss dword [rsp + 0x34], xmm0
movss xmm11, dword [0x1402170dc]
mov ecx, dword [0x1402170d4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx edi, ax
shr edi, 0xf
and dil, 1
mov dword [rsp + 0x38], edi
mov ecx, dword [0x1402170d8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ebx, ax
shr ebx, 0xf
and bl, 1
mov dword [rsp + 0x3c], ebx
lea rdx, [r14 + 0xf0]
cmp qword [r14 + 0x108], 0x10
jb 0x140004b6a
mov rdx, qword [r14 + 0xf0]
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140004b86
lea rcx, [rsp + 0x50]
call fcn.140002440
mov r15, qword [rsp + 0x50]
cmp byte [0x1402170d2], 0
je 0x140004c1a
mov rdi, qword [r14 + 0x2a8]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x140004c12
cmp qword [rsp + 0x68], 0x10
setae al
mov byte [rsp + 0x31], al
mov r13, qword [rsp + 0x60]
nop dword [rax]
lea rcx, [rbx + 0x10]
lea rdx, [rsp + 0x50]
test al, al
cmovne rdx, r15
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x140004bed
mov rcx, qword [rcx]
cmp r8, r13
jne 0x140004c00
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140004c08
movzx eax, byte [rsp + 0x31]
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x140004bd0
mov r13, qword [rsp + 0x40]
cmp rbx, rdi
jne 0x140004c31
mov edi, dword [rsp + 0x38]
mov ebx, dword [rsp + 0x3c]
cmp qword [r14 + 0x1a8], 0
je 0x140004c31
test dil, dil
jne 0x140004c2d
test bl, bl
je 0x140004c31
mov bl, 1
jmp 0x140004c37
xor bl, bl
mov edi, dword [rsp + 0x38]
mov rax, qword [rsp + 0x68]
cmp rax, 0x10
jb 0x140004c76
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140004c6e
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004c6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14013aca4
test bl, bl
je 0x140005679
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
movups xmmword [rbp + 0x280], xmm0
movaps xmmword [rbp + 0x290], xmm0
xorps xmm10, xmm10
movsd qword [rbp + 0x2a0], xmm10
xor eax, eax
mov dword [rbp + 0x2a8], eax
movaps xmmword [rbp + 0x2b0], xmm0
movsd qword [rbp + 0x2c0], xmm10
mov dword [rbp + 0x2c8], eax
xor edx, edx
mov r8d, reloc.WLDAP32.dll_Ordinal_200
lea rcx, [rbp + 0x2d0]
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov qword [rbp + 0x398], rax
mov qword [rbp + 0x3a0], rax
mov rax, qword [r14 + 0x1a8]
add rax, 0x230
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1f8], 0x138
lea rax, [rbp + 0x270]
mov qword [rbp + 0x200], rax
mov rax, qword [rsi + 8]
lea rcx, [rbp + 0x1f0]
mov qword [rax + 0x10], rcx
mov rax, qword [rsi + 8]
mov qword [rax + 8], Ordinal_27
mov rax, qword [rsi + 8]
mov dword [rax], 3
mov rcx, qword [rsi + 8]
mov eax, dword [rcx]
cmp eax, 5
je 0x140004d5a
cmp eax, 6
je 0x140004d5a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsi + 8]
mov eax, dword [rcx]
cmp eax, 5
jne 0x140004d42
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
movsd qword [rbp + 0x1e0], xmm10
mov rax, qword [r14 + 0x1b8]
add rax, 0x168
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1b8], Ordinal_27
lea rax, [rbp + 0x1d0]
mov qword [rbp + 0x1c0], rax
lea rax, [rbp + 0x1b0]
mov qword [rcx + 0x10], rax
mov rax, qword [rsi + 8]
mov qword [rax + 8], Ordinal_27
mov rax, qword [rsi + 8]
mov dword [rax], 3
mov rcx, qword [rsi + 8]
mov eax, dword [rcx]
cmp eax, 5
je 0x140004dde
cmp eax, 6
je 0x140004dde
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsi + 8]
mov eax, dword [rcx]
cmp eax, 5
jne 0x140004dc6
mov edx, dword [0x1402170cc]
test edx, edx
jne 0x140004ded
lea eax, [rdx + 0x6d]
jmp 0x140004dff
mov eax, 3
mov r8d, Ordinal_41
cmp edx, 1
cmove eax, r8d
movaps xmm0, xmmword [rbp + 0x270]
movaps xmmword [rbp - 0x70], xmm0
movaps xmm1, xmmword [rbp + 0x280]
movaps xmmword [rbp - 0x60], xmm1
movaps xmm0, xmmword [rbp + 0x290]
movaps xmmword [rbp - 0x50], xmm0
movaps xmm1, xmmword [rbp + 0x2a0]
movaps xmmword [rbp - 0x40], xmm1
movaps xmm0, xmmword [rbp + 0x2b0]
movaps xmmword [rbp - 0x30], xmm0
movaps xmm1, xmmword [rbp + 0x2c0]
movaps xmmword [rbp - 0x20], xmm1
xorps xmm0, xmm0
movaps xmmword [rbp + 0x230], xmm0
movsd qword [rbp + 0x240], xmm10
xorps xmm1, xmm1
movaps xmmword [rbp + 0x250], xmm1
movsd qword [rbp + 0x260], xmm10
lea rax, [rax + rax*2]
shl rax, 5
add rax, qword [r14 + 0x1b0]
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1b8], 0x60
lea rax, [rbp + 0x210]
mov qword [rbp + 0x1c0], rax
lea rax, [rbp + 0x1b0]
mov qword [rcx + 0x10], rax
mov rax, qword [rsi + 8]
mov qword [rax + 8], Ordinal_27
mov rax, qword [rsi + 8]
mov dword [rax], 3
mov rax, qword [rsi + 8]
mov ecx, dword [rax]
cmp ecx, 5
je 0x140004eda
cmp ecx, 6
je 0x140004f1e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rsi + 8]
mov ecx, dword [rax]
cmp ecx, 5
jne 0x140004ec2
movaps xmm0, xmmword [rbp + 0x210]
movaps xmmword [rbp], xmm0
movaps xmm1, xmmword [rbp + 0x220]
movaps xmmword [rbp + 0x10], xmm1
movaps xmm0, xmmword [rbp + 0x230]
movaps xmmword [rbp + 0x20], xmm0
movaps xmm1, xmmword [rbp + 0x240]
movaps xmmword [rbp + 0x30], xmm1
movaps xmm0, xmmword [rbp + 0x250]
movaps xmmword [rbp + 0x40], xmm0
movaps xmm1, xmmword [rbp + 0x260]
movaps xmmword [rbp + 0x50], xmm1
jmp 0x140004f45
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movaps xmmword [rbp + 0x20], xmm0
movsd qword [rbp + 0x30], xmm10
xor eax, eax
mov dword [rbp + 0x38], eax
movaps xmmword [rbp + 0x40], xmm0
movsd qword [rbp + 0x50], xmm10
mov dword [rbp + 0x58], eax
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.140007500
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
movups xmm8, xmmword [rax + 0x20]
movups xmm9, xmmword [rax + 0x30]
lea rdx, [rbp + 0x210]
lea rcx, [rbp]
call fcn.140007500
movaps xmmword [rbp - 0x70], xmm6
movaps xmmword [rbp - 0x60], xmm7
movaps xmmword [rbp - 0x50], xmm8
movaps xmmword [rbp - 0x40], xmm9
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x30]
movaps xmmword [rbp - 0x80], xmm1
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x50]
lea rcx, [rbp]
call fcn.14000f880
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x30]
xorps xmm14, xmm14
cvtss2sd xmm14, xmm1
movaps xmm0, xmm1
shufps xmm0, xmm1, 0x55
xorps xmm15, xmm15
cvtss2sd xmm15, xmm0
shufps xmm1, xmm1, 0xaa
xorps xmm8, xmm8
cvtss2sd xmm8, xmm1
movsd qword [rbp - 0x10], xmm8
movsd qword [rsp + 0x60], xmm8
lea rdx, [r14 + 0xf0]
lea rcx, [rbp + 0x60]
call fcn.140002370
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.140004340
test al, al
je 0x1400051c0
cmp byte [0x1402170d1], 0
je 0x1400051c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
movsd qword [rbp + 0x1c0], xmm10
mov rax, qword [r14 + 0x1b8]
add rax, 0x168
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1d8], Ordinal_27
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x1e0], rax
mov rax, qword [rsi + 8]
lea rcx, [rbp + 0x1d0]
mov qword [rax + 0x10], rcx
mov rax, qword [rsi + 8]
mov qword [rax + 8], Ordinal_27
mov rax, qword [rsi + 8]
mov dword [rax], 3
mov rax, qword [rsi + 8]
mov ecx, dword [rax]
cmp ecx, 5
je 0x1400050c8
nop
cmp ecx, 6
je 0x1400050e9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rsi + 8]
mov ecx, dword [rax]
cmp ecx, 5
jne 0x1400050b0
movsd xmm0, qword [rbp + 0x1c0]
movsd qword [rbp + 0x1c0], xmm0
movupd xmm2, xmmword [rbp + 0x1b0]
movups xmmword [rbp + 0x1b0], xmm2
jmp 0x1400050f5
xorps xmm2, xmm2
movsd qword [rbp + 0x1c0], xmm10
movups xmm7, xmmword [r12]
movups xmm8, xmmword [r12 + 0x10]
movups xmm9, xmmword [r12 + 0x20]
movsd xmm6, qword [r12 + 0x30]
movaps xmmword [rbp + 0x1d0], xmm7
movsd qword [rbp + 0x1e0], xmm8
movaps xmmword [rbp + 0x60], xmm2
movsd xmm0, qword [rbp + 0x1c0]
movsd qword [rbp + 0x70], xmm0
movaps xmm1, xmm14
unpcklpd xmm1, xmm15
movaps xmmword [rbp + 0x1b0], xmm1
movsd xmm0, qword [rsp + 0x60]
movsd qword [rbp + 0x1c0], xmm0
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x28], rax
movss xmm0, dword [rsp + 0x38]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [rsp + 0x40]
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x1b0]
lea rcx, [rsp + 0x50]
call fcn.140003fb0
movaps xmmword [rbp - 0x70], xmm7
movaps xmmword [rbp - 0x60], xmm8
movaps xmmword [rbp - 0x50], xmm9
movsd qword [rbp - 0x40], xmm6
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x60], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x70], xmm1
lea r9, [rbp - 0x70]
lea r8, [rbp + 0x60]
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.14000fc90
movsd xmm8, qword [rbp - 0x10]
jmp 0x14000521b
movups xmm0, xmmword [r12]
movaps xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [r12 + 0x10]
movaps xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [r12 + 0x20]
movaps xmmword [rbp - 0x50], xmm0
movsd xmm1, qword [r12 + 0x30]
movsd qword [rbp - 0x40], xmm1
movsd qword [rbp + 0x1d0], xmm14
movsd qword [rbp + 0x1d8], xmm15
movsd qword [rbp + 0x1e0], xmm8
lea r9, [rbp - 0x70]
lea r8, [rbp + 0x1d0]
lea rdx, [rbp - 0x10]
mov rcx, r14
call fcn.14000fc90
movsd xmm12, qword [rax + 8]
movsd xmm13, qword [rax]
subsd xmm15, qword [r12 + 8]
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm15
movss xmm6, dword [0x14017cc30]
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm7, xmm0
subsd xmm14, qword [r12]
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm14
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
subsd xmm8, qword [r12 + 0x10]
cvtpd2ps xmm0, xmm8
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm7
ja 0x14000528b
xorps xmm0, xmm0
sqrtss xmm0, xmm7
jmp 0x140005293
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
xorps xmm14, xmm14
cvtss2sd xmm14, xmm0
divsd xmm14, qword [0x14017cc90]
mov byte [r14 + 0x190], 1
ucomisd xmm13, xmm10
jp 0x140005398
jne 0x140005398
ucomisd xmm12, xmm10
jp 0x140005398
jne 0x140005398
mov byte [r14 + 0x190], 0
lea rcx, [rbp + 0xa0]
call fcn.140007720
lea rcx, [r14 + 0x198]
lea rdx, [rbp + 0xa0]
call fcn.1400057a0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x140005333
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000532e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005391
call fcn.14013aca4
xor eax, eax
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x100], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xe8], al
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x14000573b
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005736
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005736
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movss xmm7, dword [r14 + 0xc]
movss xmm8, dword [r14 + 8]
cvtps2pd xmm0, xmm8
subsd xmm0, xmm13
movsd xmm1, qword [0x14017cc38]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm9, xmm0
cvtps2pd xmm0, xmm7
subsd xmm0, xmm12
movsd xmm1, qword [0x14017cc38]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm9, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm9
ja 0x1400053e9
sqrtsd xmm9, xmm9
jmp 0x1400053f6
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm9, xmm0
movss xmm1, dword [0x140217050]
cvtps2pd xmm1, xmm1
comisd xmm1, xmm9
jb 0x14000573b
movss xmm1, dword [rbp + 0x3a0]
addss xmm1, dword [0x14017cb64]
comiss xmm1, dword [rbp + 0x398]
jb 0x1400055b0
mov esi, 1
cmp byte [0x1402170d0], 0
je 0x140005536
test dil, dil
je 0x140005536
cvtpd2ps xmm6, xmm12
cvtpd2ps xmm5, xmm13
xorps xmm4, xmm4
xorps xmm3, xmm3
xorps xmm2, xmm2
movss xmm10, dword [0x14017d3e0]
ucomiss xmm5, xmm4
jp 0x140005467
je 0x1400054ba
comiss xmm5, xmm8
jbe 0x140005497
movaps xmm3, xmm8
subss xmm3, xmm5
xorps xmm3, xmm10
divss xmm3, xmm11
movaps xmm1, xmm3
addss xmm1, xmm8
movaps xmm0, xmm8
addss xmm0, xmm8
comiss xmm1, xmm0
jbe 0x140005497
xorps xmm3, xmm3
comiss xmm8, xmm5
jbe 0x1400054ba
movaps xmm3, xmm5
subss xmm3, xmm8
divss xmm3, xmm11
movaps xmm0, xmm3
addss xmm0, xmm8
comiss xmm4, xmm0
jbe 0x1400054ba
xorps xmm3, xmm3
ucomiss xmm6, xmm4
jp 0x1400054c1
je 0x14000550c
comiss xmm6, xmm7
jbe 0x1400054ec
movaps xmm2, xmm7
subss xmm2, xmm6
xorps xmm2, xmm10
divss xmm2, xmm11
movaps xmm1, xmm2
addss xmm1, xmm7
movaps xmm0, xmm7
addss xmm0, xmm7
comiss xmm1, xmm0
jbe 0x1400054ec
xorps xmm2, xmm2
comiss xmm7, xmm6
jbe 0x14000550c
movaps xmm2, xmm6
subss xmm2, xmm7
divss xmm2, xmm11
movaps xmm0, xmm2
addss xmm0, xmm7
comiss xmm4, xmm0
jbe 0x14000550c
xorps xmm2, xmm2
lea r8, [r13 + 0xc]
cvttss2si eax, xmm3
mov dword [r8 + 8], eax
cvttss2si eax, xmm2
mov dword [r8 + 0xc], eax
xor edi, edi
mov dword [r8], edi
mov r9d, esi
mov edx, dword [r13 + 8]
mov rcx, qword [r13]
call qword [sym.imp.interception.dll_interception_send]
cmp byte [rsp + 0x30], 0
je 0x14000573b
movss xmm0, dword [rsp + 0x34]
cvtps2pd xmm0, xmm0
divsd xmm0, xmm14
comisd xmm0, xmm9
jb 0x14000573b
cmp byte [rsp + 0x3c], 0
je 0x14000573b
mov dword [r13 + 0xc], esi
mov qword [r13 + 0x14], 0
mov r9d, esi
lea r8, [r13 + 0xc]
mov edx, dword [r13 + 8]
mov rcx, qword [r13]
call qword [sym.imp.interception.dll_interception_send]
mov dword [r13 + 0xc], 2
mov qword [r13 + 0x14], 0
mov r9d, esi
lea r8, [r13 + 0xc]
mov edx, dword [r13 + 8]
mov rcx, qword [r13]
call qword [sym.imp.interception.dll_interception_send]
jmp 0x14000573b
mov byte [r14 + 0x190], 0
lea rcx, [rbp + 0xa0]
call fcn.140007720
lea rcx, [r14 + 0x198]
lea rdx, [rbp + 0xa0]
call fcn.1400057a0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x140005614
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000560f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005672
call fcn.14013aca4
xor eax, eax
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x100], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xe8], al
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x14000573b
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005736
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005736
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov byte [r14 + 0x190], 0
lea rcx, [rbp + 0xa0]
call fcn.140007720
lea rcx, [r14 + 0x198]
lea rdx, [rbp + 0xa0]
call fcn.1400057a0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x1400056dd
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000572f
call fcn.14013aca4
xor eax, eax
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x100], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xe8], al
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x14000573b
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005736
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005736
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14013aca4
mov rcx, qword [rbp + 0x3b0]
xor rcx, rsp
call fcn.14013a920
lea r11, [rsp + 0x568]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret