Function at 0x1400c1130
Capabilities:
Create thread
Encode data using xor
Enumerate gui resources
Enumerate processes
Log keystrokes via polling
Resolve function by parsing pe exports
Set console window title
Terminate process
Terminate process by name

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x848]
sub rsp, 0x930
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
mov rax, qword [0x140cec080]
xor rax, rsp
mov qword [rbp + 0x7b0], rax
xor r14d, r14d
mov dword [rsp + 0x48], r14d
mov qword [rbp + 0x1d0], r14
mov qword [rbp + 0x1e0], r14
mov qword [rbp + 0x1e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1d0], r14b
lea r8d, [r14 + 7]
lea rdx, [0x140ccae80]
lea rcx, [rbp + 0x1d0]
call fcn.14002caf0
nop
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rbp + 0x1e0]
sub rax, rcx
cmp rax, 9
jae 0x1400c11ea
call fcn.14000edc0
int3
lea rax, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0x10
cmovae rax, qword [rbp + 0x1d0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, [0x140ccaea8]
lea r8, [rbp + 0x1d0]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x2c0]
call fcn.1400722c0
nop
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x140]
call fcn.1400c33f0
nop
mov dword [rbp + 0x580], r14d
lea rdi, [0x1412d2080]
mov qword [rbp + 0x588], rdi
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0x140]
call fcn.1400be1d0
cmp dword [rbp + 0x580], 0
je 0x1400c128d
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x580]
call fcn.1400be170
nop
lea rcx, [rbp + 0x140]
call fcn.1400348d0
mov qword [rbp + 0x1f0], r14
mov qword [rbp + 0x200], r14
mov qword [rbp + 0x208], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1f0], 0
mov r8d, 9
lea rdx, [0x140ccae98]
lea rcx, [rbp + 0x1f0]
call fcn.14002caf0
nop
mov rax, rbx
mov rcx, qword [rbp + 0x200]
sub rax, rcx
cmp rax, 9
jae 0x1400c12ec
call fcn.14000edc0
int3
lea rax, [rbp + 0x1f0]
cmp qword [rbp + 0x208], 0x10
cmovae rax, qword [rbp + 0x1f0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, [0x140ccaea8]
lea r8, [rbp + 0x1f0]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x2e0]
call fcn.1400722c0
nop
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x140]
call fcn.1400c33f0
nop
mov dword [rbp + 0x580], r14d
mov qword [rbp + 0x588], rdi
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0x140]
call fcn.1400be1d0
cmp dword [rbp + 0x580], 0
je 0x1400c1388
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x580]
call fcn.1400be170
nop
lea rcx, [rbp + 0x140]
call fcn.1400348d0
mov qword [rbp + 0x210], r14
mov qword [rbp + 0x220], r14
mov qword [rbp + 0x228], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x210], 0
mov r8d, 8
lea rdx, [0x140ccaeb8]
lea rcx, [rbp + 0x210]
call fcn.14002caf0
nop
mov rax, rbx
mov rcx, qword [rbp + 0x220]
sub rax, rcx
cmp rax, 9
jae 0x1400c13e7
call fcn.14000edc0
int3
lea rax, [rbp + 0x210]
cmp qword [rbp + 0x228], 0x10
cmovae rax, qword [rbp + 0x210]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, [0x140ccaea8]
lea r8, [rbp + 0x210]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x300]
call fcn.1400722c0
nop
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x140]
call fcn.1400c33f0
nop
mov dword [rbp + 0x580], r14d
mov qword [rbp + 0x588], rdi
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0x140]
call fcn.1400be1d0
cmp dword [rbp + 0x580], 0
je 0x1400c1483
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x580]
call fcn.1400be170
nop
lea rcx, [rbp + 0x140]
call fcn.1400348d0
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x240], r14
mov qword [rbp + 0x248], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x230], 0
mov r8d, 3
lea rdx, [0x140ccaeb4]
lea rcx, [rbp + 0x230]
call fcn.14002caf0
nop
mov rcx, qword [rbp + 0x240]
sub rbx, rcx
cmp rbx, 9
jae 0x1400c14df
call fcn.14000edc0
int3
lea rax, [rbp + 0x230]
cmp qword [rbp + 0x248], 0x10
cmovae rax, qword [rbp + 0x230]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, [0x140ccaea8]
lea r8, [rbp + 0x230]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x320]
call fcn.1400722c0
nop
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x140]
call fcn.1400c33f0
nop
mov dword [rbp + 0x580], r14d
mov qword [rbp + 0x588], rdi
lea rdx, [rbp + 0x580]
lea rcx, [rbp + 0x140]
call fcn.1400be1d0
cmp dword [rbp + 0x580], 0
je 0x1400c157b
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x580]
call fcn.1400be170
nop
lea rcx, [rbp + 0x140]
call fcn.1400348d0
lea rcx, [0x140ccaed0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea rdx, [0x14000c670]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
lea rdx, [rbp + 0x270]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x10e
mov r9d, 0x2ee
mov r8d, dword [rbp + 0x270]
mov edx, dword [rbp + 0x274]
mov rcx, rbx
call qword [sym.imp.USER32.dll_MoveWindow]
lea rdx, [0x1400be400]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r10, rax
movups xmm0, xmmword [0x140ccb2c0]
movups xmmword [rbp + 0x160], xmm0
movsd xmm1, qword [0x140ccb2d0]
movsd qword [rbp + 0x170], xmm1
mov ecx, dword [0x140ccb2d8]
mov dword [rbp + 0x178], ecx
cmp byte [reloc.WLDAP32.dll_Ordinal_79], 0
je 0x1400c17f3
mov r8d, r14d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1400c17af
movdqa xmm5, xmmword [0x140ccd0c0]
movdqa xmm4, xmmword [0x140ccf680]
mov eax, 5
movd xmm6, eax
movdqa xmm7, xmmword [0x140ccd130]
mov eax, Ordinal_35
movd xmm8, eax
movdqa xmm0, xmmword [0x140ccd800]
movdqa xmmword [rbp + 0x580], xmm0
lea rcx, [rbp + 0x160]
mov edx, dword [rbp + 0x580]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140ccd5e0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140ccd5e0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
pxor xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400c16a0
cmp r8d, 0x1c
jge 0x1400c17f3
movsxd rax, r8d
lea r9, [rbp + 0x160]
add r9, rax
nop dword [rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1c
jl 0x1400c17c0
lea rdx, [rbp + 0x160]
mov rcx, r10
call fcn.14000c4a0
lea rcx, [0x141305be0]
call fcn.1400e3510
mov qword [rbp + 0x580], r14
mov qword [rbp + 0x590], r14
mov qword [rbp + 0x598], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x580], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [0x140ccad78]
lea rcx, [rbp + 0x580]
call fcn.14002caf0
nop
lea rcx, [rbp + 0x580]
call fcn.1400c08f0
nop
lea rcx, [rbp + 0x580]
call fcn.14002ca90
mov byte [0x1412d40c9], 0
mov dword [reloc.WS2_32.dll_accept], 4
mov ecx, 0x88
call fcn.140138cc8
mov rbx, rax
mov qword [rbp + 0x160], rax
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x140], 0
mov r8d, 6
lea rdx, [0x140ccaec4]
lea rcx, [rbp + 0x140]
call fcn.14002caf0
nop
mov dword [rsp + 0x48], 0x79
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x180], 0
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, [0x140ccaee8]
lea rcx, [rbp + 0x180]
call fcn.14002caf0
nop
mov dword [rsp + 0x48], 0x7b
mov qword [rbp + 0x580], r14
mov qword [rbp + 0x590], r14
mov qword [rbp + 0x598], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x580], 0
mov r8d, 0xa
lea rdx, [0x140ccaed8]
lea rcx, [rbp + 0x580]
call fcn.14002caf0
nop
mov dword [rsp + 0x48], 0x7f
lea r9, [rbp + 0x140]
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x580]
mov rcx, rbx
call fcn.1400bd430
nop
mov qword [0x1412d40d8], rax
lea rcx, [rbp + 0x580]
call fcn.14002ca90
nop
lea rcx, [rbp + 0x180]
call fcn.14002ca90
nop
lea rcx, [rbp + 0x140]
call fcn.14002ca90
mov rcx, qword [0x1412d40d8]
call fcn.1400bd8f0
movups xmm0, xmmword [0x140ccaef8]
movups xmmword [rbp + 0x5b0], xmm0
movsd xmm1, qword [0x140ccaf08]
movsd qword [rbp + 0x5c0], xmm1
xor edx, edx
mov r8d, 0x1e8
lea rcx, [rbp + 0x5c8]
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x280], r14
mov qword [rbp + 0x290], r14
mov qword [rbp + 0x298], 7
mov word [rbp + 0x280], r14w
mov qword [rbp + 0x2a0], r14
mov qword [rbp + 0x2b0], r14
mov qword [rbp + 0x2b8], 7
mov word [rbp + 0x2a0], r14w
mov ecx, 8
call fcn.140138cc8
lea rcx, [0x1400c0f20]
mov qword [rax], rcx
mov qword [rbp + 0x160], rax
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400c3aa0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x1400c2c82
mov edi, r14d
mov ebx, r14d
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400c1a87
mov dword [0x1412d40a4], r14d
jmp 0x1400c1b4b
mov dword [rbp + 0x340], 0x238
lea rdx, [rbp + 0x340]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1400c1aee
nop word [rax + rax]
lea rdx, [rbp + 0x5b0]
lea rcx, [rbp + 0x36c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400c1ada
mov eax, dword [rbp + 0x35c]
cmp eax, ebx
jbe 0x1400c1ada
mov ebx, eax
mov edi, dword [rbp + 0x348]
lea rdx, [rbp + 0x340]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400c1ab0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x1412d40a4], edi
test edi, edi
jle 0x1400c1b49
mov byte [0x1412d3a97], 1
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1412d40b0], rax
test rax, rax
jne 0x1400c1b6b
call fcn.1400bd720
lea rcx, [0x140ccaf10]
call fcn.1400c10d0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
jne 0x1400c1b08
lea rcx, [0x140ccaf40]
call fcn.1400c10d0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
cmp byte [0x1412d3a97], 1
jne 0x1400c1bcc
xor edx, edx
lea rcx, [0x1400c2ca0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [0x1412d40a8]
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x1400c1ba6
mov edx, 9
mov rcx, qword [0x1412d40a8]
call qword [sym.imp.USER32.dll_ShowWindow]
lea r9, [0x140ccb0d0]
lea r8, [0x140ccaf68]
xor edx, edx
mov rcx, qword [0x1412d40a8]
call qword [sym.imp.USER32.dll_FindWindowExW]
mov qword [0x1412d40a8], rax
jmp 0x1400c1bd3
mov rax, qword [0x1412d40a8]
test rax, rax
jne 0x1400c1bfd
call fcn.1400bd720
lea rcx, [0x140ccb120]
call fcn.1400c10d0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea rdx, [rbp + 0x1c0]
mov rcx, qword [0x1412d40a8]
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp byte [0x1412d3a97], 1
jne 0x1400c1e49
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_41
lea rdx, [0x140ccb0f8]
lea rcx, [rbp + 0x140]
call fcn.14002caf0
lea rcx, [rbp + 0x140]
call fcn.1400c0de0
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_41
lea rdx, [0x140ccb178]
lea rcx, [rbp + 0x140]
call fcn.14002caf0
lea rcx, [rbp + 0x140]
call fcn.1400c0de0
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x140ccb150]
lea rcx, [rbp + 0x140]
call fcn.14002caf0
lea rcx, [rbp + 0x140]
call fcn.1400c0de0
lea rdx, [0x1400be430]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x140ccb1b8]
call fcn.14000c4a0
lea rdx, [0x14000c670]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x580], xmm0
mov qword [rbp + 0x590], r14
lea rax, [rbp + 0x580]
mov qword [rsp + 0x30], rax
mov edx, Ordinal_50
mov r9d, 0x60000000
mov r8d, 0x25000000
lea rcx, [0x140cec0c0]
call fcn.1400d5840
mov rax, qword [rbp + 0x588]
mov rcx, qword [rbp + 0x580]
sub rax, rcx
sar rax, 3
test rax, rax
je 0x1400c1db3
mov ebx, dword [rcx]
mov rax, qword [rbp + 0x590]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c1dac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1def
call fcn.140138cc0
jmp 0x1400c1dfe
test rcx, rcx
je 0x1400c1dfb
mov rax, qword [rbp + 0x590]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c1df6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c1df6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140138cc0
mov ebx, r14d
mov dword [0x1412d3574], ebx
lea rdx, [0x1400be430]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rax
lea rdx, [0x140ccb1a0]
call fcn.14000c4a0
lea rdx, [0x14000c670]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.14002def0
mov dword [0x1412d356c], eax
mov byte [0x1412d3a96], 1
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov r8, rax
lea r9, [rbp + 0x595]
movabs r10, 0xcccccccccccccccd
test rax, rax
jns 0x1400c1eb0
neg r8
nop dword [rax]
dec r9
mov rax, r10
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x1400c1e70
dec r9
mov byte [r9], reloc.WLDAP32.dll_Ordinal_45
jmp 0x1400c1eda
dec r9
mov rax, r10
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x1400c1eb0
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x140], 0
lea rax, [rbp + 0x595]
cmp r9, rax
je 0x1400c1f20
lea r8, [rbp + 0x595]
sub r8, r9
mov rdx, r9
lea rcx, [rbp + 0x140]
call fcn.14002caf0
nop
mov qword [rbp + 0x250], r14
mov qword [rbp + 0x260], r14
mov qword [rbp + 0x268], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x250], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [0x140ccb1e8]
lea rcx, [rbp + 0x250]
call fcn.14002caf0
nop
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1b0], r14
mov qword [rbp + 0x1b8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1a0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [0x140ccb1e8]
lea rcx, [rbp + 0x1a0]
call fcn.14002caf0
nop
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x180], 0
mov r8d, Ordinal_32
lea rdx, [0x140ccb1c8]
lea rcx, [rbp + 0x180]
call fcn.14002caf0
nop
mov r9d, dword [rbp + 0x1cc]
mov edx, dword [rbp + 0x1c4]
sub r9d, edx
mov r8d, dword [rbp + 0x1c8]
mov ecx, dword [rbp + 0x1c0]
sub r8d, ecx
call fcn.1400444a0
call fcn.140041030
mov rax, qword [0x1412d40b8]
test rax, rax
je 0x1400c200a
inc dword [rax + 0x3b4]
mov rdx, qword [0x1412d40c0]
mov ecx, 0x3f28
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov qword [rbp + 0x160], rax
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x48], rcx
mov qword [rbp + 0x580], rax
test rax, rax
je 0x1400c2047
xor edx, edx
mov rcx, rax
call fcn.140074f70
mov rcx, rax
jmp 0x1400c204a
mov rcx, r14
mov rax, qword [0x1412d40b8]
test rax, rax
cmove rax, rcx
mov qword [0x1412d40b8], rax
call fcn.14007b850
mov rsi, qword [0x1412d40b8]
mov byte [rsi + 0x39c], 1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], rax
mov byte [rbp + 0x8c], 1
mov dword [rbp + 0xc4], 0x7f7fffff
mov dword [rbp + 0xd0], 0x3f800000
mov ebx, 0xffff
mov word [rbp + 0xd4], bx
mov dword [rbp + 0x98], 1
mov dword [rbp + 0x9c], 1
xorps xmm7, xmm7
movups xmmword [rbp - 0x20], xmm7
movups xmmword [rbp - 0x10], xmm7
movups xmmword [rbp], xmm7
movups xmmword [rbp + 0x10], xmm7
movups xmmword [rbp + 0x20], xmm7
movups xmmword [rbp + 0x30], xmm7
movups xmmword [rbp + 0x40], xmm7
movups xmmword [rbp + 0x50], xmm7
mov qword [rbp + 0x60], rax
mov dword [rbp - 8], 3
mov dword [rbp - 4], 1
mov dword [rbp + 0x30], 0x3f800000
mov word [rbp + 0x34], bx
mov qword [rbp + 0x20], rax
mov byte [rbp - 0x14], al
movss xmm8, dword [0x140cccdb0]
mov dword [rbp - 0xc], 0x41500000
lea rdx, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 0x10
cmovae rdx, qword [rbp + 0x1a0]
mov qword [rsp + 0x20], r14
xor r9d, r9d
movaps xmm2, xmm8
mov rcx, qword [rsi + 0xa8]
call fcn.140096840
movups xmm9, xmmword [rbp - 0x20]
movups xmmword [rsp + 0x50], xmm9
movups xmm10, xmmword [rbp - 0x10]
movups xmmword [rsp + 0x60], xmm10
movups xmmword [rsp + 0x70], xmm7
movups xmmword [rbp - 0x80], xmm7
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbp - 0x70], xmm0
movups xmm11, xmmword [rbp + 0x30]
movups xmmword [rbp - 0x60], xmm11
movups xmmword [rbp - 0x50], xmm7
movups xmmword [rbp - 0x40], xmm7
movsd xmm12, qword [rbp + 0x60]
movsd qword [rbp - 0x30], xmm12
lea rax, [0x140b8c4b0]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x58], 0x19938
mov dword [rsp + 0x64], 0x41500000
lea r15, [0x140ccad5c]
mov qword [rbp - 0x78], r15
lea rdx, [rsp + 0x50]
mov rcx, qword [rsi + 0xa8]
call fcn.1400965d0
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rsp + 0x50], xmm2
movups xmmword [rsp + 0x60], xmm2
movups xmmword [rsp + 0x70], xmm2
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
mov qword [rbp - 0x30], rax
mov dword [rsp + 0x68], 3
mov dword [rsp + 0x6c], 1
mov dword [rbp - 0x6c], 0x7f7fffff
mov dword [rbp - 0x60], 0x3f800000
mov word [rbp - 0x5c], bx
mov byte [rbp - 0x68], 1
mov byte [rsp + 0x70], 1
mov byte [rsp + 0x5c], al
mov rax, qword [0x1412d40b8]
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x340], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x350], xmm1
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x360], xmm0
movups xmmword [rbp + 0x370], xmm2
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rbp + 0x380], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rbp + 0x390], xmm1
movups xmmword [rbp + 0x3a0], xmm2
movups xmmword [rbp + 0x3b0], xmm2
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp + 0x3c0], xmm0
lea rcx, [0x140bc7400]
mov qword [rbp + 0x340], rcx
mov dword [rbp + 0x348], 0x317f8
mov dword [rbp + 0x354], 0x41800000
lea rcx, [0x140ccb318]
mov qword [rbp + 0x378], rcx
lea rdx, [rbp + 0x340]
mov rcx, qword [rax + 0xa8]
call fcn.1400965d0
call fcn.1400bef20
mov rbx, qword [0x1412d3a40]
lea rcx, [0x14130a960]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x1400c248f
lea rcx, [0x14130a958]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1400c248f
mov qword [0x14130a950], rbx
mov rax, qword [0x1412d40b8]
or dword [rax + 0xc], 6
lea rcx, [0x140cca060]
mov qword [rax + 0xd8], rcx
mov qword [rax + 0x120], rbx
mov dword [rax + 0x3c], 9
mov dword [rax + 0x40], Ordinal_41
mov dword [rax + 0x44], Ordinal_45
mov dword [rax + 0x48], Ordinal_41
mov dword [rax + 0x4c], Ordinal_46
mov dword [rax + 0x50], reloc.WLDAP32.dll_Ordinal_33
mov dword [rax + 0x54], Ordinal_35
mov dword [rax + 0x58], Ordinal_41
mov dword [rax + 0x5c], reloc.WLDAP32.dll_Ordinal_35
mov dword [rax + 0x60], reloc.WLDAP32.dll_Ordinal_45
mov dword [rax + 0x64], reloc.WLDAP32.dll_Ordinal_46
mov dword [rax + 0x68], 8
mov dword [rax + 0x6c], reloc.WLDAP32.dll_Ordinal_32
mov dword [rax + 0x70], reloc.WS2_32.dll_listen
mov dword [rax + 0x74], reloc.WLDAP32.dll_Ordinal_27
mov dword [rax + 0x78], reloc.WS2_32.dll_listen
mov dword [rax + 0x7c], 0x41
mov dword [rax + 0x80], 0x43
mov dword [rax + 0x84], 0x56
mov dword [rax + 0x88], 0x58
mov dword [rax + 0x8c], 0x59
mov dword [rax + 0x90], 0x5a
lea rax, [0x140cca050]
mov qword [rbp + 0x580], rax
lea rax, [0x140cca088]
mov qword [rbp + 0x588], rax
lea rax, [0x140cca078]
mov qword [rbp + 0x590], rax
lea rax, [0x140cca0a8]
mov qword [rbp + 0x598], rax
lea rax, [0x140cca098]
mov qword [rbp + 0x5a0], rax
mov rbx, r14
nop dword [rax + rax]
mov rcx, qword [rbp + rbx*8 + 0x580]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
jne 0x1400c2461
inc rbx
cmp rbx, 5
jl 0x1400c2440
jmp 0x1400c248f
lea rdx, [0x140cca0c8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14130a940], rax
lea rdx, [0x140cca0b8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14130a948], rax
mov rdi, qword [0x1412d3a20]
mov rbx, qword [0x1412d40b8]
test rbx, rbx
je 0x1400c24a8
inc dword [rbx + 0x3b4]
mov rdx, qword [0x1412d40c0]
mov ecx, Ordinal_41
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov qword [rbp + 0x580], rax
test rax, rax
je 0x1400c24e5
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax + 0x20], rcx
mov dword [rax + 0x20], 0x1388
mov dword [rax + 0x24], 0x2710
jmp 0x1400c24e8
mov rax, r14
mov qword [rbx + 0xf0], rax
lea rcx, [0x140cca040]
mov qword [rbx + 0xe0], rcx
or dword [rbx + 0xc], 8
mov qword [rax], rdi
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
movss xmm6, dword [0x140cccdc4]
movaps xmm3, xmm6
mov r8d, 0x91f8
lea rdx, [0x14021e380]
mov rcx, qword [rsi + 0xa8]
call fcn.140096b20
mov qword [0x1412d3840], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x140cccdd0]
mov r8d, 0x6f7dc
lea rdx, [0x141098f20]
mov rcx, qword [rsi + 0xa8]
call fcn.140096b20
mov qword [0x1412d3838], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
movaps xmm3, xmm6
mov r8d, 0x6f7dc
lea rdx, [0x141098f20]
mov rcx, qword [rsi + 0xa8]
call fcn.140096b20
mov qword [0x1412d3848], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x140cccdbc]
mov r8d, 0x6f7dc
lea rdx, [0x141098f20]
mov rcx, qword [rsi + 0xa8]
call fcn.140096b20
mov qword [0x1412d3828], rax
mov byte [rbp + 0x28], 1
movups xmmword [rbp + 0x340], xmm9
movups xmmword [rbp + 0x350], xmm10
movups xmmword [rbp + 0x360], xmm7
movups xmmword [rbp + 0x370], xmm7
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbp + 0x380], xmm0
movups xmmword [rbp + 0x390], xmm11
movups xmmword [rbp + 0x3a0], xmm7
movups xmmword [rbp + 0x3b0], xmm7
movsd qword [rbp + 0x3c0], xmm12
lea rax, [0x1411deb40]
mov qword [rbp + 0x340], rax
mov dword [rbp + 0x348], 0xed148
movss xmm0, dword [0x140cccdc8]
movss dword [rbp + 0x354], xmm0
mov qword [rbp + 0x378], r15
lea rdx, [rbp + 0x340]
mov rcx, qword [rsi + 0xa8]
call fcn.1400965d0
mov qword [0x1412d3818], rax
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm8
lea rdx, [0x140ba8d60]
mov rcx, qword [rsi + 0xa8]
call fcn.140096ca0
mov qword [0x1412d3850], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x140cccdec]
mov r8d, 0x29e1c
lea rdx, [0x140d2fc90]
mov rcx, qword [rsi + 0xa8]
call fcn.140096b20
mov qword [0x1412d3860], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
movss xmm6, dword [0x140cccdb8]
movaps xmm3, xmm6
mov r8d, 0x91f8
lea rdx, [0x14021e380]
mov rcx, qword [rsi + 0xa8]
call fcn.140096b20
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
movaps xmm3, xmm8
mov r8d, 0x10ef8
lea rdx, [0x140b7b5b0]
mov rcx, qword [rsi + 0xa8]
call fcn.140096b20
lea rdx, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 0x10
cmovae rdx, qword [rbp + 0x1a0]
lea rax, [0x140ccafa0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x80]
movaps xmm2, xmm6
mov rcx, qword [rsi + 0xa8]
call fcn.140096840
mov qword [0x1412d3858], rax
lea rdx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0x10
cmovae rdx, qword [rbp + 0x250]
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x20]
movaps xmm2, xmm8
mov rcx, qword [rsi + 0xa8]
call fcn.140096840
mov qword [0x1412d3870], rax
mov qword [rsp + 0x28], r15
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm8
lea rdx, [0x140227580]
mov rcx, qword [rsi + 0xa8]
call fcn.140096ca0
call qword [sym.imp.KERNEL32.dll_FreeConsole]
cmp byte [0x1412d40c9], 0
jne 0x1400c2990
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x14002e7b0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x1400306e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x14005c980]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x1400c6100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x14000cb50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x1400be670]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x1400d7a40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x1400c4140]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x14005c130]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8, [0x1400c7010]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 8
call fcn.140138cc8
lea rcx, [0x1400322c0]
mov qword [rax], rcx
mov qword [rbp + 0x580], rax
lea rcx, [rbp + 0x168]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400c3aa0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x160], rax
test rax, rax
je 0x1400c2a56
cmp dword [rbp + 0x168], 0
jne 0x1400c2966
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x580], xmm0
lea rcx, [rbp + 0x580]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x1400c298f
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
nop
nop
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x1412d3a40]
lea rcx, [rbp + 0x110]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x1400c29db
lea rcx, [rbp + 0x110]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x110]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400c29f1
mov rcx, qword [0x1412d3a40]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, 0x78
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2a0e
cmp byte [0x1412d47c8], 0
sete byte [0x1412d47c8]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2aa9
mov rbx, qword [0x1412d3a40]
mov edx, 0xffffffec
mov rcx, rbx
cmp byte [reloc.WS2_32.dll_accept], 1
jne 0x1400c2a69
call qword [sym.imp.USER32.dll_GetWindowLongW]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x1400c2a8d
mov dword [rbp + 0x168], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.USER32.dll_GetWindowLongW]
btr eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x140cec101]
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x140eea5ce]
mov ecx, 0xa2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2ac6
cmp byte [0x1412d47c7], 0
sete byte [0x1412d47c7]
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 3
jne 0x1400c2ae4
lea ecx, [rax + 0x6e]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x1400c2af6
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 4
jne 0x1400c2b19
lea ecx, [rax + 0x6d]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2b19
cmp byte [0x1412d47a2], 0
sete byte [0x1412d47a2]
movzx eax, byte [0x1412d47c4]
mov ecx, eax
cmp al, 1
cmove ecx, r14d
mov byte [0x1412d47c4], cl
mov ecx, reloc.WLDAP32.dll_Ordinal_79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2b36
cmp byte [0x1412d47c6], 0
sete byte [0x1412d47c6]
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2b53
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x140d8dac4]
cmp byte [0x1412d47a2], 0
je 0x1400c2bb9
mov ecx, reloc.WS2_32.dll_WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2b9c
cmp byte [0x1412d478a], 0
sete al
mov byte [0x1412d478a], al
cmp al, 1
jne 0x1400c2b88
mov byte [0x1412d477f], 0
jmp 0x1400c2b9c
movzx eax, al
cmp byte [0x1412d477f], 1
cmove eax, r14d
mov byte [0x1412d478a], al
mov ecx, 0x76
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2bb9
cmp byte [0x1412d4774], 0
sete byte [0x1412d4774]
mov ecx, reloc.WS2_32.dll_WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2bd6
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x140eeb023]
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2bf3
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x140e2f3b4]
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2c10
cmp byte [0x1412d47d0], 0
sete byte [0x1412d47d0]
mov ecx, dword [0x140d0742c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2c3c
mov eax, dword [0x1412d4770]
cmp eax, 1
jne 0x1400c2c34
mov dword [0x1412d4770], r14d
jmp 0x1400c2c3c
inc eax
mov dword [0x1412d4770], eax
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400c2990
cmp byte [0x1412d47a2], 0
je 0x1400c2c66
cmp byte [0x1412d40cb], 0
jne 0x1400c2c66
call fcn.1400c4070
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400bd720
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [rbp + 0x78], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3