Function at 0x14003b440
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push r12
lea rbp, [rax - 0x458]
sub rsp, 0x548
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400c1060]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov rdx, qword [0x1401a7bf8]
xor cl, cl
movss xmm0, dword [0x1400b1628]
add rdx, 0xffe880
xor r12d, r12d
movss dword [rbp + 0x118], xmm0
mov qword [rbp - 0x34], 0
xorps xmm8, xmm8
movss dword [rbp + 0xf0], xmm8
xorps xmm6, xmm6
movss dword [rbp + 0xec], xmm6
xorps xmm15, xmm15
mov dword [rbp - 0x38], 0
mov qword [rbp - 0x44], 0
mov dword [rbp - 0x48], 0
mov qword [rbp - 0x24], 0
mov dword [rbp - 0x28], 0
mov byte [rsp + 0x40], cl
cmp rdx, 0xffffffffffffffff
je 0x14003b522
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x220]
lea r9d, [r12 + 4]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x11c]
mov qword [rbp + 0x220], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xor cl, cl
movss xmm11, dword [0x1400b15bc]
mov qword [rsp + 0x560], rbx
mov qword [rsp + 0x568], rsi
mov qword [rsp + 0x570], rdi
movaps xmmword [rsp + 0x510], xmm7
movaps xmmword [rsp + 0x4f0], xmm9
movaps xmmword [rsp + 0x4e0], xmm10
cmp dword [rbp + 0x11c], r12d
je 0x14003ca0a
movss xmm11, dword [0x1400b163c]
mov esi, 5
movss xmm9, dword [0x1400b1638]
movss xmm7, dword [0x1400b15c8]
movss xmm10, dword [0x1400b154c]
mov qword [rsp + 0x540], r13
mov r13d, dword [rbp + 0xe8]
mov qword [rsp + 0x538], r14
mov r14d, r12d
mov qword [rsp + 0x530], r15
movaps xmmword [rsp + 0x4c0], xmm12
movaps xmmword [rsp + 0x4b0], xmm13
movaps xmmword [rsp + 0x4a0], xmm14
mov dword [rbp + 0xf4], r12d
nop word [rax + rax]
mov edx, dword [0x1400b0718]
add rdx, qword [0x1401a7bf8]
cmp rdx, 0xffffffffffffffff
je 0x14003b620
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x238]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x160]
mov qword [rbp + 0x238], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [0x1400b0730]
add rdx, qword [0x1401a7bf8]
cmp rdx, 0xffffffffffffffff
je 0x14003b660
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x208]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1a0]
mov qword [rbp + 0x208], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [0x1400b071c]
add rdx, qword [0x1401a7bf8]
cmp rdx, 0xffffffffffffffff
je 0x14003b6a0
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x210]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x194]
mov qword [rbp + 0x210], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0x160]
lea rax, [rbp + 0x218]
sub ecx, dword [rbp + 0x1a0]
lea r8, [rbp + 0x190]
mov edx, dword [rbp + 0x194]
mov r9d, 4
add edx, 0x2a1e8
mov dword [rbp + 0x160], ecx
add edx, ecx
mov qword [rbp + 0x218], r12
mov rcx, qword [0x1401a7c00]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x1401a7dea], 0
jne 0x14003b720
mov eax, dword [rbp + 0x190]
and eax, 0x80000001
jge 0x14003b70a
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
mov ecx, r12d
mov eax, r14d
setne cl
and eax, 1
cmp eax, ecx
je 0x14003c9ad
mov rdx, qword [0x1401a7bf8]
add rdx, 0xff5038
cmp rdx, 0xffffffffffffffff
je 0x14003b761
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x228]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xd8]
mov qword [rbp + 0x228], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1401a7bf8]
add rdx, 0xff4ffc
cmp rdx, 0xffffffffffffffff
je 0x14003b7a2
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x230]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xdc]
mov qword [rbp + 0x230], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r14d, 0x11
jbe 0x14003b7b4
mov dword [rbp + 0x164], r12d
jmp 0x14003c9ad
mov eax, dword [rbp + 0xdc]
lea r8, [rbp + 0x164]
add eax, dword [rbp + 0xd8]
mov r9d, 4
mov rcx, qword [0x1401a7c00]
add rax, 0xb00
mov edx, r14d
mov qword [rbp + 0x1e0], r12
lea rdx, [rax + rdx*4]
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0x164]
test ecx, ecx
je 0x14003c9ad
lea ebx, [rcx + 0x14]
mov qword [rbp + 0x200], r12
lea edx, [rcx + 4]
mov r9d, 4
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x200]
lea r8, [rbp + 0x170]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x1e8]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x180]
mov qword [rbp + 0x1e8], r12
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15d, dword [rbp + 0x180]
xor r15d, dword [rbp + 0x170]
je 0x14003c9ad
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x1f0]
lea edx, [r15 + 0xddc]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x1f0], r12
lea r8, [rbp + 0x1d4]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x1d4]
test eax, eax
je 0x14003c9ad
mov rcx, qword [0x1401a7c00]
lea edx, [rax + 0x64]
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0x1f8], r12
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1d0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cvttss2si edi, dword [rbp + 0x1d0]
mov dword [rbp + 0x128], edi
test edi, edi
je 0x14003c9ad
cmp byte [0x1401a7c15], 0
jne 0x14003b91c
cmp byte [0x1401a7c3e], 0
je 0x14003ba64
mov rax, qword [0x1401a7bf8]
lea rdx, [rax + 0xff4b3c]
cmp rdx, 0xffffffffffffffff
je 0x14003b964
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x1d8]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x120]
mov qword [rbp + 0x1d8], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401a7bf8]
lea rdx, [rax + 0xff4b2c]
cmp rdx, 0xffffffffffffffff
je 0x14003b9a5
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x198]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x138]
mov qword [rbp + 0x198], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401a7bf8]
lea rdx, [rax + 0xff4b28]
cmp rdx, 0xffffffffffffffff
je 0x14003b9df
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x178]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x158]
mov qword [rbp + 0x178], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x120]
lea r8, [rbp + 0x150]
sub eax, dword [rbp + 0x138]
mov r9d, 4
mov rcx, qword [0x1401a7c00]
mov dword [rbp + 0x120], eax
mov qword [rbp + 0x130], r12
lea edx, [rax + 0x2008]
lea edx, [rdx + r14*4]
add edx, dword [rbp + 0x158]
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rbp + 0x150]
lea rax, [rbp + 0x168]
mov rcx, qword [0x1401a7c00]
lea r8, [rbp + 0x2c0]
add edx, 8
mov qword [rbp + 0x168], r12
mov r9d, 0x40
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8d, esi
lea rcx, [rbp + 0xcc]
mov edx, r15d
call fcn.1400378f0
mov rcx, qword [0x1401a7c00]
lea edx, [r15 + 0x864]
mov r9d, 4
mov qword [rbp - 0x14], 0
lea r8, [rbp + 0x15c]
mov dword [rbp - 0x18], 0
movsd xmm0, qword [rax]
mov ebx, dword [rax + 8]
lea rax, [rbp + 0x168]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x38], xmm0
mov qword [rbp + 0x168], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x15c]
test eax, eax
je 0x14003bb36
mov rcx, qword [0x1401a7c00]
lea edx, [rax + 0x50]
lea rax, [rbp + 0x188]
mov qword [rbp + 0x188], r12
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x140]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x140]
test eax, eax
je 0x14003bb36
mov rcx, qword [0x1401a7c00]
lea edx, [rax + 0x40]
lea rax, [rbp + 0x1a8]
mov qword [rbp + 0x1a8], r12
mov r9d, listen
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1401a7bf8]
movss xmm12, dword [rbp - 0x18]
add rdx, 0xffe880
movss xmm13, dword [rbp - 0x14]
movss xmm14, dword [rbp - 0x10]
movss dword [rbp - 0x28], xmm12
movss dword [rbp - 0x24], xmm13
movss dword [rbp - 0x20], xmm14
mov qword [rbp - 0x74], 0
mov dword [rbp - 0x78], 0
cmp rdx, 0xffffffffffffffff
je 0x14003bbb1
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x1b0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xe8]
mov qword [rbp + 0x1b0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0xe8]
test r13d, r13d
je 0x14003bcb0
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x130]
lea edx, [r13 + 0xa20]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x130], r12
lea r8, [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0xe8]
test r13d, r13d
je 0x14003bcb0
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x1b8]
lea edx, [r13 + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x1b8], r12
lea r8, [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0xe8]
test r13d, r13d
je 0x14003bcb0
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x1c0]
lea edx, [r13 + 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x1c0], r12
lea r8, [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0xe8]
test r13d, r13d
je 0x14003bcb0
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x108]
lea edx, [r13 + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, listen
mov qword [rbp + 0x108], r12
lea r8, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0xe8]
movsd xmm0, qword [rbp + 0x38]
lea rdx, [rbp - 0x38]
movss xmm1, dword [rbp + 0x3c]
lea rcx, [rbp + 0x90]
addss xmm1, dword [0x1400b14b4]
mov r9d, dword [0x1401a7e00]
mov eax, 0x64
mov r8d, dword [0x1401a7c08]
cmp edi, 0x64
shufps xmm0, xmm0, 0xe1
mov esi, edi
cmovge esi, eax
mov dword [rbp + 0x98], ebx
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movsd qword [rbp + 0x38], xmm0
movsd qword [rbp + 0x90], xmm0
call fcn.140037640
test al, al
je 0x14003c9a8
movsd xmm0, qword [rbp - 0x28]
lea rdx, [rbp - 0x48]
mov eax, dword [rbp - 0x20]
lea rcx, [rbp + 0xb0]
mov r9d, dword [0x1401a7e00]
mov r8d, dword [0x1401a7c08]
movsd qword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb8], eax
call fcn.140037640
test al, al
je 0x14003c9a8
movaps xmm2, xmm11
mov ecx, r15d
call fcn.140037d60
test al, al
jne 0x14003be8e
cmp byte [0x1401a7c3b], al
je 0x14003bd90
movups xmm0, xmmword [0x1401a6a90]
lea rcx, [rbp + 0x108]
movups xmmword [rbp + 0x108], xmm0
call fcn.140003350
mov edx, eax
mov ecx, r15d
call fcn.140037b60
cmp byte [0x1401a7bea], 0
movss xmm8, dword [rbp - 0x34]
movss xmm11, dword [rbp - 0x38]
movss xmm6, dword [rbp - 0x44]
je 0x14003be12
movups xmm0, xmmword [0x1401a6ac0]
lea rcx, [rbp + 0x108]
movups xmmword [rbp + 0x108], xmm0
call fcn.140003350
movaps xmm0, xmm8
mov dword [rbp + 0x130], eax
subss xmm0, xmm6
comiss xmm15, xmm0
jbe 0x14003bddd
mulss xmm0, xmm9
cvttss2si r9d, xmm0
cvttss2si ecx, xmm11
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
cdq
sub eax, edx
sar eax, 1
cvttss2si r10d, xmm8
sub ecx, eax
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov edx, r10d
call fcn.140031ed0
cmp byte [0x1401a7c17], 0
je 0x14003bfd1
cvttss2si eax, dword [rbp - 0x48]
lea rcx, [rbp + 0x108]
movups xmm0, xmmword [0x1401a6a70]
movups xmmword [rbp + 0x108], xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm6
movss dword [rbp + 0x18], xmm1
movd xmm1, dword [0x1401a7e00]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [0x1401a7c08]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0x24], xmm1
movss dword [rbp + 0x1c], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x20], xmm0
call fcn.140003350
lea rdx, [rbp + 0x20]
lea r8, [rbp + 0x18]
jmp 0x14003bfb4
cmp byte [0x1401a7c3b], 0
je 0x14003bebb
movups xmm0, xmmword [0x1401a6a80]
lea rcx, [rbp + 0x108]
movups xmmword [rbp + 0x108], xmm0
call fcn.140003350
mov edx, eax
mov ecx, r15d
call fcn.140037b60
cmp byte [0x1401a7bea], 0
movss xmm8, dword [rbp - 0x34]
movss xmm11, dword [rbp - 0x38]
movss xmm6, dword [rbp - 0x44]
je 0x14003bf3d
movups xmm0, xmmword [0x1401a6a80]
lea rcx, [rbp + 0x108]
movups xmmword [rbp + 0x108], xmm0
call fcn.140003350
movaps xmm0, xmm8
mov dword [rbp + 0x130], eax
subss xmm0, xmm6
comiss xmm15, xmm0
jbe 0x14003bf08
mulss xmm0, xmm9
cvttss2si r9d, xmm0
cvttss2si ecx, xmm11
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
cdq
sub eax, edx
sar eax, 1
cvttss2si r10d, xmm8
sub ecx, eax
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov edx, r10d
call fcn.140031ed0
cmp byte [0x1401a7c17], 0
je 0x14003bfd1
cvttss2si eax, dword [rbp - 0x48]
lea rcx, [rbp + 0x108]
movups xmm0, xmmword [0x1401a6a80]
movups xmmword [rbp + 0x108], xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm6
movss dword [rbp + 0x28], xmm1
movd xmm1, dword [0x1401a7e00]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [0x1401a7c08]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0x34], xmm1
movss dword [rbp + 0x2c], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x30], xmm0
call fcn.140003350
lea rdx, [rbp + 0x30]
lea r8, [rbp + 0x28]
mov rcx, qword [0x1401a7bf0]
mov r9d, eax
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm10
call fcn.14001d880
movaps xmm0, xmm8
subss xmm0, xmm6
comiss xmm15, xmm0
movaps xmm1, xmm0
jbe 0x14003bfe7
mulss xmm1, xmm9
cvttss2si eax, xmm1
cvttss2si ebx, xmm11
test eax, eax
jns 0x14003bff6
inc eax
sar eax, 1
cmp byte [0x1401a7c21], 0
cvttss2si r14d, xmm8
lea r12d, [rax + rbx]
je 0x14003c0e4
xor ecx, ecx
test si, si
cmovne cx, si
comiss xmm15, xmm0
jbe 0x14003c022
mulss xmm0, xmm9
cvttss2si r9d, xmm0
subss xmm6, xmm8
mov eax, r9d
cdq
and edx, 3
add eax, edx
sar eax, 2
sub ebx, eax
movzx eax, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, dword [0x1400b15ec]
cvttss2si rdi, xmm0
cmp cx, 0x64
ja 0x14003c079
cmp cx, 0x4b
ja 0x14003c079
cmp cx, 0x28
jbe 0x14003c070
movaps xmm0, xmmword [0x1401a6720]
jmp 0x14003c080
movaps xmm0, xmmword [0x1401a6630]
jmp 0x14003c080
movaps xmm0, xmmword [0x1401a6670]
lea rax, [0x1401a67d0]
add r9d, 2
lea edx, [r14 - 1]
mov qword [rsp + 0x20], rax
lea ecx, [rbx - 6]
mov r8d, 5
movups xmmword [rbp + 0x108], xmm0
call fcn.140032660
mov eax, edi
lea ecx, [rbx - 5]
xorps xmm0, xmm0
movd xmm1, r14d
cvtdq2ps xmm1, xmm1
mov r9d, edi
mov r8d, 3
cvtsi2ss xmm0, rax
lea rax, [rbp + 0x108]
mov qword [rsp + 0x20], rax
subss xmm6, xmm0
addss xmm6, xmm1
cvttss2si edx, xmm6
call fcn.140032660
cmp byte [0x1401a7c15], 0
je 0x14003c593
lea rax, [rbp + 0x78]
mov dword [rbp + 0x78], 9
movaps xmm10, xmm11
mov dword [rbp + 0x7c], 9
subss xmm10, dword [0x1400b15e8]
movaps xmm9, xmm8
mov dword [rbp + 0x80], 9
subss xmm9, dword [0x1400b15e4]
mov r9d, reloc.WLDAP32.dll_Ordinal_26
mov dword [rbp + 0x84], 0xff
mov r8d, 0x9b
mov dword [rbp + 0x48], Ordinal_33
cvttss2si edi, xmm10
mov dword [rbp + 0x4c], gethostname
mov dword [rbp + 0x50], Ordinal_60
mov dword [rbp + 0x54], 0xff
mov qword [rsp + 0x20], rax
cvttss2si ebx, xmm9
mov ecx, edi
mov edx, ebx
call fcn.140032660
mov r9d, Ordinal_27
lea rax, [rbp + 0x48]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov ecx, edi
lea r8d, [r9 + 5]
call fcn.140032660
movss xmm0, dword [rbp - 0x70]
movss xmm1, dword [rbp - 0x78]
subss xmm0, xmm14
movss xmm2, dword [rbp - 0x74]
subss xmm1, xmm12
subss xmm2, xmm13
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14003c1d0
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14003c1d8
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov dword [rbp + 0xe0], 0x1c574852
xor ecx, ecx
mov word [rbp + 0xe4], 0x100
nop dword [rax]
lea eax, [rcx + 0x77]
xor byte [rbp + rcx + 0xe0], al
inc rcx
cmp rcx, 4
jb 0x14003c1f0
xorps xmm2, xmm2
mov byte [rbp + 0xe5], 0
cvtss2sd xmm2, xmm0
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x240]
movq r8, xmm2
call fcn.140013af0
movss xmm6, dword [0x1400b15a4]
lea rax, [rbp + 0x240]
movaps xmm0, xmm9
mov qword [rsp + 0x30], rax
addss xmm0, xmm6
mov byte [rsp + 0x28], 0
movaps xmm1, xmm10
mov dword [rbp + 8], 0
addss xmm1, dword [0x1400b15bc]
lea r9, [rbp + 8]
mov dword [rbp + 0xc], 0xcb
mov dword [rbp + 0x10], 0xff
cvttss2si ebx, xmm0
mov dword [rbp + 0x14], 0xff
mov byte [rsp + 0x20], 0
movaps xmm0, xmm7
cvttss2si edx, xmm1
mov r8d, ebx
movd ecx, xmm0
call fcn.14002ff70
xor ecx, ecx
mov dword [rsp + 0x44], 0x32731152
mov word [rsp + 0x48], Ordinal_45
mov byte [rsp + 0x4a], 1
nop dword [rax + rax]
lea eax, [rcx + 0x77]
xor byte [rsp + rcx + 0x44], al
inc rcx
cmp rcx, 5
jb 0x14003c2b0
mov r8d, dword [rbp + 0x128]
lea rdx, [rsp + 0x44]
lea rcx, [rbp + 0x260]
mov byte [rsp + 0x4a], 0
call fcn.1400426b0
movaps xmm0, xmm9
lea rax, [rbp + 0x260]
subss xmm0, xmm6
mov qword [rsp + 0x30], rax
movaps xmm1, xmm10
mov byte [rsp + 0x28], 0
addss xmm1, dword [0x1400b15f8]
lea r9, [rbp + 8]
mov byte [rsp + 0x20], 0
cvttss2si r8d, xmm0
movaps xmm0, xmm7
cvttss2si edx, xmm1
movd ecx, xmm0
call fcn.14002ff70
xor eax, eax
mov dword [rsp + 0x78], 0x50145052
mov ecx, eax
mov dword [rsp + 0x7c], 0x500a
mov byte [rbp - 0x80], 1
mov edx, 0x5077
nop dword [rax]
lea eax, [rdx + rcx]
xor word [rsp + rcx*2 + 0x78], ax
inc rcx
cmp rcx, 3
jb 0x14003c340
lea r9, [rbp + 0x2c0]
mov byte [rbp - 0x80], 0
lea r8, [rsp + 0x78]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rbp + 0x300]
call fcn.14002c5f0
movaps xmm0, xmm10
mov dword [rbp + 0x68], 0xc9
addss xmm0, dword [0x1400b15e0]
lea rax, [rbp + 0x300]
mov dword [rbp + 0x6c], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea r9, [rbp + 0x68]
mov byte [rsp + 0x28], 0
mov r8d, ebx
mov dword [rbp + 0x70], reloc.WS2_32.dll_recv
cvttss2si edx, xmm0
mov dword [rbp + 0x74], 0xff
mov byte [rsp + 0x20], 0
movaps xmm0, xmm7
movd ecx, xmm0
call fcn.140030790
movss xmm2, dword [0x1400b154c]
lea rcx, [rbp + 0x58]
movss xmm0, dword [0x1400b1460]
movaps xmm7, xmm10
addss xmm9, dword [0x1400b15dc]
addss xmm7, dword [0x1400b1608]
movss dword [rbp + 0x58], xmm0
movaps xmm1, xmm10
movss dword [rbp + 0x5c], xmm0
addss xmm1, xmm2
movss dword [rbp + 0x60], xmm0
movaps xmm6, xmm9
movss dword [rbp + 0x64], xmm2
addss xmm6, dword [0x1400b15b0]
movaps xmm0, xmm7
subss xmm0, xmm2
movss dword [rbp + 0x1c8], xmm1
movss dword [rbp + 0x148], xmm0
movaps xmm0, xmm6
subss xmm0, xmm2
movss dword [rbp + 0x14c], xmm0
movaps xmm0, xmm9
addss xmm0, xmm2
movss dword [rbp + 0x1cc], xmm0
call fcn.140003350
movss xmm0, dword [0x1400b154c]
lea r8, [rbp + 0x148]
mov rcx, qword [0x1401a7bf0]
lea rdx, [rbp + 0x1c8]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
mov dword [rsp + 0x28], reloc.WS2_32.dll_ntohs
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm15
call fcn.14001da00
movss xmm0, dword [0x1400b1460]
lea rcx, [rbp - 0x68]
movss dword [rbp - 0x68], xmm0
movss dword [rbp - 0x64], xmm0
movss dword [rbp - 0x60], xmm0
movss xmm0, dword [0x1400b154c]
movss dword [rbp - 0x5c], xmm0
movss dword [rbp + 0x100], xmm7
movss dword [rbp + 0x104], xmm6
movss dword [rbp + 0xf8], xmm10
movss dword [rbp + 0xfc], xmm9
call fcn.140003350
movss xmm0, dword [0x1400b154c]
lea r8, [rbp + 0x100]
mov rcx, qword [0x1401a7bf0]
lea rdx, [rbp + 0xf8]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
mov dword [rsp + 0x28], reloc.WS2_32.dll_ntohs
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm15
call fcn.14001da00
lea rdx, [0x1401a6650]
cmp esi, 0x32
lea rax, [0x1401a6670]
mov ecx, edi
cmovge rdx, rax
lea r9, [0x1401a6630]
cmp esi, 0x14
mov eax, esi
cmovge r9, rdx
cdq
sub eax, edx
mov qword [rsp + 0x20], r9
sar eax, 1
mov r9d, 6
cvttss2si edx, xmm9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x1400b1574]
cvttss2si r8d, xmm0
call fcn.140032660
movss xmm7, dword [0x1400b15c8]
movss xmm9, dword [0x1400b1638]
movss xmm10, dword [0x1400b154c]
xor ebx, ebx
cmp byte [0x1401a7c3e], bl
je 0x14003c64b
mov dword [rsp + 0x68], 0x50145052
mov ecx, ebx
mov dword [rsp + 0x6c], 0x500a
mov edx, 0x5077
mov byte [rsp + 0x70], 1
nop dword [rax]
lea eax, [rdx + rcx]
xor word [rsp + rcx*2 + 0x68], ax
inc rcx
cmp rcx, 3
jb 0x14003c5c0
lea r9, [rbp + 0x2c0]
mov byte [rsp + 0x70], bl
lea r8, [rsp + 0x68]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rbp + 0x340]
call fcn.14002c5f0
movups xmm0, xmmword [0x1401a6aa0]
lea rcx, [rbp + 0x108]
movups xmmword [rbp + 0x108], xmm0
call fcn.140003350
subss xmm8, dword [0x1400b15d0]
subss xmm11, dword [0x1400b15dc]
mov r9d, eax
movaps xmm0, xmm7
lea rax, [rbp + 0x340]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
cvttss2si r8d, xmm8
mov byte [rsp + 0x28], bl
mov byte [rsp + 0x20], bl
cvttss2si edx, xmm11
call fcn.140031760
cmp byte [0x1401a7e04], 0
je 0x14003c6e2
mov dword [rsp + 0x4c], 0x32591152
mov rcx, rbx
mov word [rsp + 0x50], Ordinal_45
mov byte [rsp + 0x52], 1
nop
lea eax, [rcx + 0x77]
xor byte [rsp + rcx + 0x4c], al
inc rcx
cmp rcx, 5
jb 0x14003c670
mov r8d, dword [rbp + 0x128]
lea rdx, [rsp + 0x4c]
lea rcx, [rbp + 0x280]
mov byte [rsp + 0x52], 0
call fcn.1400426b0
movups xmm0, xmmword [str.L7_t_]
lea rcx, [rbp + 0x108]
movups xmmword [rbp + 0x108], xmm0
call fcn.140003350
mov r9d, eax
movaps xmm0, xmm7
lea rax, [rbp + 0x280]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
mov r8d, r14d
mov byte [rsp + 0x28], 0
mov edx, r12d
mov byte [rsp + 0x20], 0
call fcn.140030fe0
cmp byte [0x1401a7de9], 0
je 0x14003c7f2
movss xmm0, dword [rbp - 0x70]
movss xmm1, dword [rbp - 0x78]
subss xmm0, xmm14
movss xmm2, dword [rbp - 0x74]
subss xmm1, xmm12
subss xmm2, xmm13
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14003c732
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14003c73a
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov dword [rsp + 0x58], 0x54495d2c
mov rcx, rbx
mov dword [rsp + 0x5c], 0x201a4b
mov byte [rsp + 0x60], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x77]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 7
jb 0x14003c760
xorps xmm2, xmm2
mov byte [rsp + 0x60], 0
cvtss2sd xmm2, xmm0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x2a0]
movq r8, xmm2
call fcn.140013af0
cmp byte [0x1401a7e04], 0
movd xmm6, r14d
cvtdq2ps xmm6, xmm6
je 0x14003c7ab
addss xmm6, dword [0x1400b15cc]
movups xmm0, xmmword [0x1401a6ad0]
lea rcx, [rbp + 0x108]
movups xmmword [rbp + 0x108], xmm0
call fcn.140003350
mov r9d, eax
movaps xmm0, xmm7
lea rax, [rbp + 0x2a0]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
mov edx, r12d
cvttss2si r8d, xmm6
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
call fcn.140030fe0
cmp byte [0x1401a7c14], 0
movss xmm11, dword [0x1400b163c]
je 0x14003c98d
movaps xmm2, xmm11
mov ecx, r15d
call fcn.140037df0
xor r12d, r12d
test al, al
jne 0x14003d1e3
mov ecx, dword [0x1401a7ec8]
mov r8d, r12d
mov qword [rbp - 4], r8
mov dword [rbp - 8], r12d
test ecx, ecx
je 0x14003c928
sub ecx, 1
je 0x14003c87a
cmp ecx, 1
jne 0x14003c880
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x80000001
jge 0x14003c867
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
mov r8d, 2
mov esi, 5
cmove r8d, esi
jmp 0x14003c885
mov r8d, 2
mov esi, 5
mov edx, r15d
lea rcx, [rbp + 0xc0]
call fcn.1400378f0
mov r9d, dword [0x1401a7e00]
lea rdx, [rbp - 8]
mov r8d, dword [0x1401a7c08]
lea rcx, [rbp + 0xa0]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp + 0xa0], xmm0
mov dword [rbp + 0xa8], eax
call fcn.140037640
test al, al
je 0x14003d1c6
movss xmm6, dword [rbp - 8]
movss xmm7, dword [rbp - 4]
mov eax, dword [0x1401a7c08]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
mov eax, dword [0x1401a7e00]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
subss xmm6, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm7, xmm0
movaps xmm0, xmm6
mulss xmm0, xmm6
movaps xmm1, xmm7
mulss xmm1, xmm7
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14003c935
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14003c93d
mov esi, 5
mov r8d, esi
jmp 0x14003c885
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [rbp + 0x118]
comiss xmm1, xmm0
jbe 0x14003d1c6
movss xmm1, dword [0x1401a6c1c]
comiss xmm1, xmm0
mov r14d, dword [rbp + 0xf4]
jbe 0x14003d200
mov cl, 1
movss dword [rbp + 0xf0], xmm6
movaps xmm8, xmm6
mov byte [rsp + 0x40], cl
movss dword [rbp + 0x118], xmm0
movaps xmm6, xmm7
movss dword [rbp + 0xec], xmm7
jmp 0x14003c9b2
movss xmm6, dword [rbp + 0xec]
xor r12d, r12d
movss xmm8, dword [rbp + 0xf0]
mov r14d, dword [rbp + 0xf4]
mov esi, 5
movzx ecx, byte [rsp + 0x40]
movss xmm7, dword [0x1400b15c8]
inc r14d
mov dword [rbp + 0xf4], r14d
cmp r14d, 0xf
jle 0x14003b5e0
movss xmm11, dword [0x1400b15bc]
movaps xmm14, xmmword [rsp + 0x4a0]
movaps xmm13, xmmword [rsp + 0x4b0]
movaps xmm12, xmmword [rsp + 0x4c0]
mov r15, qword [rsp + 0x530]
mov r14, qword [rsp + 0x538]
mov r13, qword [rsp + 0x540]
cmp byte [0x1401a7c14], 0
je 0x14003caae
test cl, cl
je 0x14003caae
movzx eax, byte [0x1401a7e06]
mov dword [rbp - 0x68], 1
mov dword [rbp - 0x64], 2
mov dword [rbp - 0x60], reloc.WS2_32.dll_recv
mov dword [rbp - 0x5c], reloc.WS2_32.dll_sendto
mov dword [rbp - 0x58], 9
mov dword [rbp - 0x54], reloc.WS2_32.dll_select
mov dword [rbp - 0x50], reloc.WS2_32.dll_recvfrom
cmp al, 1
je 0x14003ca77
test al, al
jne 0x14003caae
movsxd rax, dword [reloc.WS2_32.dll_bind]
mov ecx, dword [rbp + rax*4 - 0x68]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x14003caae
divss xmm8, dword [0x1401a6ce4]
divss xmm6, dword [0x1401a6ce4]
ucomiss xmm8, xmm15
jp 0x14003ca94
je 0x14003d2d0
ucomiss xmm6, xmm15
jp 0x14003caa0
je 0x14003d2d0
cvttss2si edx, xmm6
cvttss2si ecx, xmm8
call fcn.140032b20
cmp byte [0x1401a7be9], 0
movss xmm10, dword [0x1400b14ec]
je 0x14003ccc6
mov rax, qword [0x1401a7bf0]
lea rcx, [rbp - 0x68]
movups xmm0, xmmword [0x1401a6ab0]
movss xmm8, dword [rax + 0x10]
lea rdi, [rax + 0x1cc8]
movss xmm9, dword [rax + 0x14]
mulss xmm8, xmm10
mulss xmm9, xmm10
movups xmmword [rbp - 0x68], xmm0
call fcn.140003350
movss xmm1, dword [0x1400b1454]
xorps xmm0, xmm0
movzx ecx, al
mov r8d, eax
shr r8d, 0x18
movss dword [rbp + 0x104], xmm9
cvtsi2ss xmm0, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
movss dword [rbp + 0xfc], xmm9
mulss xmm0, xmm1
movss dword [rbp - 0x68], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mov ecx, eax
shr ecx, 0x10
movzx eax, cl
lea rcx, [rbp - 0x68]
mulss xmm0, xmm1
movss dword [rbp - 0x64], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mov eax, r8d
mulss xmm0, xmm1
movss dword [rbp - 0x60], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
movaps xmm1, xmm8
subss xmm1, xmm11
movss dword [rbp - 0x5c], xmm0
movaps xmm0, xmm8
addss xmm0, xmm11
movss dword [rbp + 0x100], xmm1
movss dword [rbp + 0xf8], xmm0
call fcn.140003350
movss xmm7, dword [0x1400b14a8]
lea rdx, [rbp + 0x100]
mov r9d, eax
movss dword [rsp + 0x20], xmm7
lea r8, [rbp + 0xf8]
mov rcx, rdi
mov ebx, eax
call fcn.14001d880
movaps xmm0, xmm9
movss dword [rbp + 0x100], xmm8
movaps xmm1, xmm9
movss dword [rbp + 0xf8], xmm8
subss xmm0, xmm11
movss dword [rsp + 0x20], xmm7
addss xmm1, xmm11
mov r9d, ebx
lea r8, [rbp + 0xf8]
mov rcx, rdi
lea rdx, [rbp + 0x100]
movss dword [rbp + 0x104], xmm0
movss dword [rbp + 0xfc], xmm1
call fcn.14001d880
movss xmm6, dword [0x1400b1560]
lea r8, [rbp + 0xf8]
movaps xmm0, xmm8
movss dword [rbp + 0x104], xmm9
subss xmm0, xmm6
movss dword [rbp + 0xfc], xmm9
movss dword [rsp + 0x20], xmm7
mov r9d, ebx
movss dword [rbp + 0x100], xmm0
movaps xmm0, xmm8
addss xmm0, xmm6
movss dword [rbp + 0xf8], xmm0
lea rdx, [rbp + 0x100]
mov rcx, rdi
call fcn.14001d880
movaps xmm0, xmm9
movss dword [rbp + 0x100], xmm8
subss xmm0, xmm6
movss dword [rbp + 0xf8], xmm8
addss xmm9, xmm6
movss dword [rsp + 0x20], xmm7
mov r9d, ebx
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
mov rcx, rdi
movss dword [rbp + 0x104], xmm0
movss dword [rbp + 0xfc], xmm9
call fcn.14001d880
cmp byte [0x1401a7c22], 0
je 0x14003cdec
movups xmm0, xmmword [0x1400c10b0]
lea rcx, [rbp - 0x68]
movups xmmword [rbp - 0x68], xmm0
call fcn.140003350
movss xmm2, dword [0x1401a6c1c]
mov esi, eax
mov eax, dword [0x1401a7c08]
movaps xmm0, xmm2
mov rdi, qword [0x1401a7bf0]
cdq
sub eax, edx
mulss xmm0, xmm10
sar eax, 1
add rdi, 0x1cc8
cvttss2si ecx, xmm0
movd xmm0, eax
mov eax, dword [0x1401a7e00]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0xf8], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0xfc], xmm0
test esi, 0xff000000
je 0x14003cdec
movss xmm6, dword [0x1400b154c]
lea rdx, [rbp + 0xf8]
cvttss2si eax, xmm2
mov dword [rsp + 0x28], ecx
movd xmm0, ecx
movaps xmm3, xmm15
cvtdq2ps xmm0, xmm0
mov rcx, rdi
movd xmm2, eax
movaps xmm1, xmm0
subss xmm1, xmm6
cvtdq2ps xmm2, xmm2
mulss xmm1, dword [0x1400b15b4]
subss xmm2, xmm10
divss xmm1, xmm0
movss dword [rsp + 0x20], xmm1
call fcn.14001d340
mov r8d, dword [rdi + 0x80]
mov r9d, esi
mov rdx, qword [rdi + 0x88]
mov rcx, rdi
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 1
call fcn.14001bc30
mov ecx, dword [rdi + 0x84]
test ecx, ecx
jns 0x14003cde5
mov eax, ecx
cdq
sub eax, edx
mov edx, r12d
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x80]
test eax, eax
cmovg edx, eax
call fcn.140013110
mov dword [rdi + 0x80], r12d
cmp byte [0x1401a7c3d], 0
je 0x14003cf1e
cmp dword [rbp + 0x11c], 0
jne 0x14003cf2b
mov rdx, qword [0x1401a7bf8]
add rdx, 0xff4d00
cmp rdx, 0xffffffffffffffff
je 0x14003ce47
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x108]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x130]
mov qword [rbp + 0x108], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1401a7bf8]
add rdx, 0xff4cb4
cmp rdx, 0xffffffffffffffff
je 0x14003ce88
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x1c0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x140]
mov qword [rbp + 0x1c0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, dword [rbp + 0x130]
mov rdx, qword [0x1401a7bf8]
sub ebx, dword [rbp + 0x140]
add rdx, 0xff4cb0
cmp rdx, 0xffffffffffffffff
je 0x14003ced5
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x1b8]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x15c]
mov qword [rbp + 0x1b8], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [rbp + 0x15c]
add edi, ebx
mov ebx, r12d
test edi, edi
je 0x14003cf17
mov rcx, qword [0x1401a7c00]
lea edx, [rdi + 0xc]
lea rax, [rbp + 0x1d8]
mov dword [rbp + 0x150], r12d
lea edx, [rdx + rbx*4]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x150]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
inc ebx
cmp ebx, 0xa
jl 0x14003cee0
cmp dword [rbp + 0x11c], 0
je 0x14003d2d0
mov edx, dword [rbp + 0x11c]
lea rax, [rbp + 0x1b0]
mov rcx, qword [0x1401a7c00]
lea r8, [rbp + 0x158]
add edx, 0xcec
mov qword [rbp + 0x1b0], r12
mov r9d, 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x158]
test eax, eax
je 0x14003d06f
mov rcx, qword [0x1401a7c00]
lea r8, [rbp + 0xf0]
mov edx, eax
mov qword [rbp + 0x1a8], r12
lea rax, [rbp + 0x1a8]
mov r9d, 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0xf0]
test eax, eax
je 0x14003d06f
cmp byte [0x1401a7c3f], 0
je 0x14003cff1
mov rcx, qword [0x1401a7c00]
lea edx, [rax + 0x18c]
lea rax, [rbp + 0xf8]
mov dword [rbp + 0x138], r12d
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x138]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbp + 0xf0]
cmp byte [0x1401a7c16], 0
je 0x14003d033
mov rcx, qword [0x1401a7c00]
lea edx, [rax + 0x1a0]
lea rax, [rbp + 0x100]
mov dword [rbp + 0x128], r12d
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x128]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbp + 0xf0]
cmp byte [0x1401a7c33], 0
je 0x14003d06f
mov rcx, qword [0x1401a7c00]
lea edx, [rax + 0x28c]
lea rax, [rbp + 0x1c8]
mov dword [rbp + 0x120], r12d
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x120]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edx, dword [0x1400b0718]
mov rax, qword [0x1401a7bf8]
add rdx, rax
cmp rdx, 0xffffffffffffffff
je 0x14003d0b9
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x188]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xec]
mov qword [rbp + 0x188], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401a7bf8]
mov edx, dword [0x1400b0730]
add rdx, rax
cmp rdx, 0xffffffffffffffff
je 0x14003d0fc
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x168]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xf4]
mov qword [rbp + 0x168], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401a7bf8]
mov edx, dword [0x1400b071c]
add rdx, rax
cmp rdx, 0xffffffffffffffff
je 0x14003d138
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x178]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x118]
mov qword [rbp + 0x178], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0xec]
lea rax, [rbp + 0x198]
sub ecx, dword [rbp + 0xf4]
lea r8, [rbp + 0xe8]
mov edx, dword [rbp + 0x118]
mov r9d, 4
add edx, 0x2a1e8
mov dword [rbp + 0xec], ecx
add edx, ecx
mov qword [rbp + 0x198], r12
mov rcx, qword [0x1401a7c00]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rbp + 0x118]
add edx, dword [rbp + 0xec]
mov eax, dword [rbp + 0xe8]
cmp eax, 0x11
jg 0x14003d2d0
cmp byte [0x1401a7de8], 0
je 0x14003d285
mov ecx, dword [reloc.WS2_32.dll_bind]
test ecx, ecx
jne 0x14003d216
mov dword [rbp + 0xe0], 0x3e99999a
jmp 0x14003d24b
movss xmm6, dword [rbp + 0xec]
movss xmm8, dword [rbp + 0xf0]
mov r14d, dword [rbp + 0xf4]
jmp 0x14003c9ad
movss xmm6, dword [rbp + 0xec]
movss xmm8, dword [rbp + 0xf0]
mov r14d, dword [rbp + 0xf4]
jmp 0x14003c9a8
movss xmm6, dword [rbp + 0xec]
movss xmm8, dword [rbp + 0xf0]
jmp 0x14003c9ad
cmp ecx, 1
jne 0x14003d225
movss xmm0, dword [0x1400b14d4]
jmp 0x14003d243
cmp ecx, 2
jne 0x14003d236
mov dword [rbp + 0xe0], 0x3f000000
jmp 0x14003d24b
cmp ecx, 3
jne 0x14003d27c
movss xmm0, dword [0x1400b1508]
movss dword [rbp + 0xe0], xmm0
add eax, 0x1318
lea r8, [rbp + 0xe0]
mov r9d, 4
lea ecx, [rax + rax*8]
lea edx, [rdx + rcx*4]
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x148]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401a7df6], 1
jmp 0x14003d2d0
cmp byte [0x1401a7df6], 1
jne 0x14003d2d0
add eax, 0x1318
mov dword [rbp + 0xe0], 0
mov r9d, 4
lea r8, [rbp + 0xe0]
lea ecx, [rax + rax*8]
lea edx, [rdx + rcx*4]
mov rcx, qword [0x1401a7c00]
lea rax, [rbp + 0x148]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401a7df6], 0
movaps xmm10, xmmword [rsp + 0x4e0]
movaps xmm9, xmmword [rsp + 0x4f0]
movaps xmm7, xmmword [rsp + 0x510]
mov rdi, qword [rsp + 0x570]
mov rsi, qword [rsp + 0x568]
mov rbx, qword [rsp + 0x560]
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.140092b30
lea r11, [rsp + 0x548]
movaps xmm6, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x48]
movaps xmm11, xmmword [r11 - 0x78]
movaps xmm15, xmmword [r11 - 0xb8]
mov rsp, r11
pop r12
pop rbp
ret