Function at 0x1400097b0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x6f8]
sub rsp, 0x7d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
mov rax, qword [0x140160200]
xor rax, rsp
mov qword [rbp + 0x658], rax
xor edi, edi
lea rcx, [rbp + 0x3a0]
call fcn.1400086c0
nop
call fcn.140008820
mov dword [rbp + 0x300], 0x50
mov dword [rbp + 0x304], 0x40
lea rax, [0x14000ae40]
mov qword [rbp + 0x308], rax
mov qword [rbp + 0x310], rdi
mov qword [rbp + 0x318], rdi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x320], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x330], xmm1
lea rax, [rbp + 0x3a0]
cmp qword [rbp + 0x3b8], 0x10
cmovae rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x340], rax
mov qword [rbp + 0x348], rdi
lea rcx, [rbp + 0x300]
call qword [sym.imp.USER32.dll_RegisterClassExA]
lea r8, [rbp + 0x3a0]
cmp qword [rbp + 0x3b8], 0x10
cmovae r8, qword [rbp + 0x3a0]
mov qword [rsp + 0x58], rdi
mov rax, qword [rbp + 0x318]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], SysAllocStringByteLen
mov dword [rsp + 0x30], 0x15e
mov dword [rsp + 0x28], 0x64
mov dword [rsp + 0x20], 0x64
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x340]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x14017ae88], rax
mov qword [rbp + 0x2c4], rdi
mov qword [rbp + 0x2d8], 2
mov qword [rbp + 0x2f0], 2
mov qword [rbp + 0x2b0], rdi
mov dword [rbp + 0x2c0], Ordinal_32
mov dword [rbp + 0x2b8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x2bc], 1
mov dword [rbp + 0x2d4], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0x2cc], 1
mov qword [rbp + 0x2e8], 1
mov dword [rbp + 0x640], 0xb000
mov dword [rbp + 0x644], 0xa000
lea rax, [0x14017b040]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x50], rax
lea rax, [0x14017b038]
mov qword [rsp + 0x48], rax
lea rax, [0x14017b030]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x640]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140009aa9
call fcn.14000ad50
mov rdx, qword [rbp + 0x318]
mov rcx, qword [rbp + 0x340]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0x10
jb 0x140009a51
inc rdx
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009a4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ad3d
call fcn.1400db19c
mov eax, 1
mov rcx, qword [rbp + 0x658]
xor rcx, rsp
call fcn.1400daef0
lea r11, [rsp + 0x7d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14000add0
nop
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, 0xa
mov rcx, qword [0x14017ae88]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14017ae88]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x14017aea8]
test rbx, rbx
je 0x140009af1
inc dword [rbx + 0xec]
mov ecx, 0x5570
call fcn.1400ef748
mov qword [rbp + 0x378], rax
lea rcx, [rsp + 0x60]
mov qword [rbp + 0x370], rcx
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140009b23
xor edx, edx
mov rcx, rax
call fcn.14000b4b0
jmp 0x140009b26
mov rax, rdi
mov qword [0x14017aea8], rax
call fcn.140011e40
mov r8, qword [0x14017aea8]
test rbx, rbx
cmovne r8, rbx
mov qword [0x14017aea8], r8
mov qword [r8 + 0x20], rdi
mov qword [r8 + 0x28], rdi
mov byte [r8 + 0xd4], 0
movdqa xmm0, xmmword [0x140146b80]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x69618ba2
mov dword [rbp - 0x3c], 0x67656e6d
mov dword [rbp - 0x38], 0x7d7c2962
mov word [rbp - 0x34], WSASetLastError
mov ecx, edi
mov rdx, rdi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x12]
xor byte [rbp + rdx - 0x50], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x1d
jb 0x140009b90
mov byte [rbp - 0x33], 0
movss xmm2, dword [0x140146704]
lea rdx, [rbp - 0x50]
mov rcx, qword [r8 + 0x50]
call fcn.14002bde0
mov qword [rbp + 0x3c0], 0xffffffffffffffff
mov qword [rbp + 0x3c8], 0xffffffffffffffff
mov qword [rbp + 0x3d0], 0xffffffffffffffff
mov qword [rbp + 0x3d8], 0xffffffffffffffff
mov dword [rbp + 0x3e0], 0xffffffff
mov qword [rbp + 0x3e4], 0xfffffffffffffffd
mov dword [rbp + 0x3ec], 0xffffffff
mov qword [rbp + 0x3f0], rdi
mov qword [rsp + 0x30], rdi
lea rax, [0x14017ae98]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x3c0]
mov r8d, 0xbd85
lea rdx, [0x140169170]
mov rcx, qword [0x14017b038]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rbx, qword [0x14017aea8]
mov dword [rbx + 0x3850], edi
mov dword [rbx + 0x37e8], edi
mov dword [rbx + 0x37ec], 0x40000000
movaps xmm0, xmmword [0x140146970]
movups xmmword [rbx + 0x38c0], xmm0
movaps xmm1, xmm0
movups xmmword [rbx + 0x38d0], xmm0
movaps xmm0, xmmword [0x140146b00]
movups xmmword [rbx + 0x38a0], xmm0
movaps xmm1, xmmword [0x140146ab0]
movups xmmword [rbx + 0x3a20], xmm1
movaps xmm0, xmmword [0x140146a20]
movups xmmword [rbx + 0x3a40], xmm0
movaps xmm1, xmm0
movups xmmword [rbx + 0x3a30], xmm0
movaps xmm0, xmmword [0x1401469f0]
movups xmmword [rbx + 0x39f0], xmm0
movaps xmm1, xmmword [0x140146970]
movups xmmword [rbx + 0x3a10], xmm1
movaps xmm0, xmmword [0x140146ab0]
movups xmmword [rbx + 0x3a00], xmm0
movaps xmm1, xmm0
movups xmmword [rbx + 0x38f0], xmm0
movaps xmm0, xmmword [0x1401469f0]
movups xmmword [rbx + 0x3910], xmm0
movaps xmm1, xmm0
movups xmmword [rbx + 0x3920], xmm0
movaps xmm0, xmmword [0x140146ab0]
movups xmmword [rbx + 0x3a50], xmm0
movaps xmm1, xmm0
movups xmmword [rbx + 0x39c0], xmm0
mov r14, qword [0x14017ae88]
lea rcx, [rbp + 0x378]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140009e5a
lea rcx, [rbp + 0x370]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140009e5a
mov rax, qword [0x14017aea8]
test rax, rax
je 0x140009d54
inc dword [rax + 0xec]
mov ecx, 0x48
call fcn.1400ef748
mov rsi, rax
test rax, rax
je 0x140009d80
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsi], xmm0
movups xmmword [rsi + 0x10], xmm0
movups xmmword [rsi + 0x20], xmm0
movups xmmword [rsi + 0x30], xmm0
mov qword [rsi + 0x40], rax
jmp 0x140009d83
mov rsi, rdi
mov qword [rbx + 0x90], rsi
lea rax, [0x1401460e8]
mov qword [rbx + 0x80], rax
or dword [rbx + 0xc], 6
mov qword [rsi], r14
mov byte [rsi + 0x2d], 1
mov rax, qword [rbp + 0x378]
mov qword [rsi + 0x20], rax
mov rax, qword [rbp + 0x370]
mov qword [rsi + 0x18], rax
mov dword [rsi + 0x28], 9
mov rax, qword [0x14017aea8]
mov rcx, qword [rax + 0x4088]
mov rax, qword [rcx]
mov qword [rax + 0x28], r14
lea rax, str.xinput1_4.dll
mov qword [rbp - 0x18], rax
lea rax, str.xinput1_3.dll
mov qword [rbp - 0x10], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp - 8], rax
lea rax, str.xinput1_2.dll
mov qword [rbp], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 8], rax
mov rbx, rdi
nop
mov rcx, qword [rbp + rbx*8 - 0x18]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
jne 0x140009e2e
inc rbx
cmp rbx, 5
jl 0x140009e10
jmp 0x140009e5a
mov qword [rsi + 0x30], r14
lea rdx, str.XInputGetCapabilities
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi + 0x38], rax
lea rdx, str.XInputGetState
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi + 0x40], rax
mov r15, qword [0x14017b040]
mov r14, qword [0x14017b038]
mov rsi, qword [0x14017aea8]
test rsi, rsi
je 0x140009e7a
inc dword [rsi + 0xec]
mov ecx, 0x78
call fcn.1400ef748
mov rbx, rax
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140009ec4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
movups xmmword [rbx + 0x40], xmm0
movups xmmword [rbx + 0x50], xmm0
movups xmmword [rbx + 0x60], xmm0
mov qword [rbx + 0x70], rax
mov dword [rbx + 0x70], 0x1388
mov dword [rbx + 0x74], 0x2710
jmp 0x140009ec7
mov rbx, rdi
mov qword [rsi + 0x98], rbx
lea rax, str.imgui_impl_dx11
mov qword [rsi + 0x88], rax
or dword [rsi + 0xc], 8
mov qword [rbp + 0x640], rdi
mov qword [rbp + 0x2a8], rdi
mov qword [rbp + 0x2a0], rdi
mov rax, qword [r14]
lea r8, [rbp + 0x640]
lea rdx, [0x1401460b8]
mov rcx, r14
call qword [rax]
test eax, eax
jne 0x140009f5f
mov rcx, qword [rbp + 0x640]
mov rax, qword [rcx]
lea r8, [rbp + 0x2a8]
lea rdx, [0x1401460c8]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140009f5f
mov rcx, qword [rbp + 0x2a8]
mov rax, qword [rcx]
lea r8, [rbp + 0x2a0]
lea rdx, [0x1401460d8]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140009f5f
mov qword [rbx], r14
mov qword [rbx + 8], r15
mov rax, qword [rbp + 0x2a0]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x640]
test rcx, rcx
je 0x140009f71
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x2a8]
test rcx, rcx
je 0x140009f83
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
movaps xmm0, xmmword [0x140146a90]
movups xmmword [rbp + 0x648], xmm0
xor edx, edx
mov r8d, 0x218
lea rcx, [rbp + 0x420]
call fcn.1400ddd60
lea rcx, [rbp + 0x420]
call fcn.14003bcb0
nop
lea rcx, [rbp + 0x80]
call fcn.14003bcb0
mov rdx, rax
lea rcx, [rbp + 0x420]
call fcn.14003c470
lea rcx, [rbp + 0x80]
call fcn.14003c350
lea r8, [rbp + 0x498]
cmp qword [rbp + 0x4b0], 8
cmovae r8, qword [rbp + 0x498]
mov rax, qword [rbp + 0x4a8]
lea r9, [r8 + rax*2]
lea rdx, [rbp + 0x380]
call fcn.14003e4b0
nop
lea rcx, [rbp + 0x420]
call fcn.14003c350
lea rbx, [0x14017aed0]
lea r15, [0x14017af10]
mov rdx, qword [0x14017af28]
cmp rdx, 0x10
jb 0x14000a094
mov rcx, qword [0x14017af10]
inc rdx
cmp rdx, 0x1000
jb 0x14000a071
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000ad43
mov rcx, r8
call fcn.1400db19c
movups xmm0, xmmword [rbp + 0x380]
movups xmmword [0x14017af10], xmm0
movups xmm1, xmmword [rbp + 0x390]
movups xmmword [0x14017af20], xmm1
jmp 0x14000a0b5
movups xmm0, xmmword [rbp + 0x380]
movups xmmword [0x14017af10], xmm0
movups xmm1, xmmword [rbp + 0x390]
movups xmmword [0x14017af20], xmm1
cmp rbx, r15
je 0x14000a10d
mov r9, r15
cmp qword [0x14017af28], 0x10
cmovae r9, qword [0x14017af10]
mov rsi, qword [0x14017af20]
mov rax, qword [0x14017aee8]
cmp rsi, rax
ja 0x14000a102
cmp rax, 0x10
cmovae rbx, qword [0x14017aed0]
mov qword [0x14017aee0], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call fcn.1400dd6b0
mov byte [rbx + rsi], 0
jmp 0x14000a10d
mov rdx, rsi
mov rcx, rbx
call fcn.14000b300
lea r14, [0x14017afb0]
lea r13, [0x14017aeb0]
lea r12, [0x140174f00]
movss xmm8, dword [0x140146734]
movss xmm9, dword [0x140146710]
movss xmm6, dword [0x14014671c]
movss xmm10, dword [0x140146720]
movss xmm11, dword [0x140146738]
movss xmm12, dword [0x140146740]
movss xmm7, dword [0x140146728]
nop
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14000a1c5
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x2b8], 0x12
je 0x14000a1c5
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14000a181
mov rax, qword [0x14017aea8]
test rax, rax
je 0x14000a1da
mov rcx, qword [rax + 0x98]
jmp 0x14000a1dd
mov rcx, rdi
cmp qword [rcx + 0x48], 0
jne 0x14000a1e9
call fcn.140030c80
call fcn.140031a90
call fcn.140010c20
mov rax, qword [0x14017aea8]
mov qword [rax + 0x3f98], rdi
mov qword [rax + 0x3fa0], rdi
mov dword [rax + 0x3f8c], 1
or dword [rax + 0x3f88], 3
mov dword [rax + 0x3fa8], 0x43af0000
mov dword [rax + 0x3fac], 0x430e0000
mov dword [rax + 0x3f90], 1
mov dword [rbp + 0x2a8], 0x82839a9e
mov word [rbp + 0x2ac], Ordinal_143
mov ecx, edi
mov rdx, rdi
nop
lea eax, [rcx - 0x12]
xor byte [rbp + rdx + 0x2a8], al
inc ecx
movsxd rdx, ecx
cmp rdx, 5
jb 0x14000a250
mov byte [rbp + 0x2ad], 0
xor edx, edx
lea r8d, [rdx + 0x27]
lea rcx, [rbp + 0x2a8]
call fcn.140015ec0
test al, al
je 0x14000ab71
cmp byte [0x14017ae94], 0
jne 0x14000a634
mov rcx, qword [0x14017aea8]
mov rax, qword [rcx + 0x3e88]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e88]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm8
addss xmm2, xmm9
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movaps xmm1, xmmword [0x140146b00]
movups xmmword [rsp + 0x68], xmm1
mov dword [rbp + 0x10], 0x3f800000
mov dword [rbp + 0x14], 0x3f800000
mov qword [rbp + 0x18], 0
mov dword [rbp + 0x20], 0x429c0000
mov dword [rbp + 0x24], 0x42000000
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x10]
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x20]
call fcn.140035bd0
mov rcx, qword [0x14017aea8]
mov rax, qword [rcx + 0x3e88]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e88]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, xmm10
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
movaps xmm0, xmm11
call fcn.140019770
mov qword [rbp - 0x30], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 0x80
mov r8, r14
xor edx, edx
lea rcx, [0x1401454ec]
call fcn.1400387c0
mov r9, qword [0x14017aea8]
mov rax, qword [r9 + 0x3e88]
mov byte [rax + 0x98], 1
mov r8, qword [r9 + 0x3e88]
movsxd rdx, dword [r8 + 0x1b0]
mov rax, qword [r8 + 0x1b8]
mov ecx, dword [rax + rdx*4 - 4]
mov dword [r8 + 0x1a4], ecx
lea eax, [rdx - 1]
mov dword [r8 + 0x1b0], eax
mov rax, qword [r9 + 0x3e88]
mov byte [rax + 0x98], 1
mov rax, qword [r9 + 0x3e88]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm12
addss xmm2, xmm7
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov dword [rbp + 0x640], 0x989780a2
mov word [rbp + 0x644], 0x9c
mov ecx, edi
mov rdx, rdi
lea eax, [rcx - 0x12]
xor byte [rbp + rdx + 0x640], al
inc ecx
movsxd rdx, ecx
cmp rdx, 5
jb 0x14000a4d1
mov byte [rbp + 0x645], 0
mov qword [rbp + 0x370], 0
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x640]
call fcn.140034da0
test al, al
je 0x14000a578
mov byte [0x14017ae94], 1
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [r14 + rsi], 0
jne 0x14000a520
mov rax, qword [0x14017aec8]
cmp rsi, rax
ja 0x14000a560
mov rbx, r13
cmp rax, 0x10
cmovae rbx, qword [0x14017aeb0]
mov qword [0x14017aec0], rsi
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call fcn.1400dd6b0
mov byte [rbx + rsi], 0
jmp 0x14000a56e
mov r9, r14
mov rdx, rsi
mov rcx, r13
call fcn.14000b300
mov dword [0x14017ae78], 1
mov rcx, qword [0x14017aea8]
mov rax, qword [rcx + 0x3e88]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e88]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, xmm6
addss xmm2, xmm7
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov dword [rbp - 0x80], 0x949d8abc
mov dword [rbp - 0x7c], 0x8791919f
mov dword [rbp - 0x78], 0x9d9ad6
mov ecx, edi
mov rdx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x12]
xor byte [rbp + rdx - 0x80], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xb
jb 0x14000a610
mov byte [rbp - 0x75], 0
lea rcx, [rbp - 0x80]
call fcn.140036070
jmp 0x14000ab71
movaps xmm0, xmmword [0x1401469b0]
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [0x140146c00]
movdqu xmmword [rbp + 0x350], xmm1
mov dword [rbp + 0x360], 0x69749689
mov dword [rbp + 0x364], 0x77617022
mov dword [rbp + 0x368], 0x7a6270
mov ecx, edi
mov rdx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x12]
xor byte [rbp + rdx + 0x350], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x1b
jb 0x14000a680
mov byte [rbp + 0x36b], 0
lea rdx, [rbp + 0x350]
lea rcx, [rbp - 0x28]
call fcn.140034670
call fcn.140036560
cmp dword [0x14017ae78], 1
jne 0x14000a786
lea rax, [rbp + 0x3f8]
mov qword [rbp + 0x28], rax
mov rdx, r15
lea rcx, [rbp + 0x3f8]
call fcn.140001980
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
mov qword [rbp + 0x360], rdi
mov qword [rbp + 0x368], rdi
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [r14 + r8], 0
jne 0x14000a700
mov rdx, r14
lea rcx, [rbp + 0x350]
call fcn.140001b50
nop
mov r8, rbx
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x58]
call fcn.140040d30
mov ecx, dword [rax]
mov dword [0x140174ef8], ecx
lea rdx, [rax + 8]
mov rcx, r12
call fcn.14000b100
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x14000a77c
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a777
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ad49
call fcn.1400db19c
mov dword [0x14017ae78], 2
movdqa xmm0, xmmword [0x140146ba0]
movdqu xmmword [rsp + 0x68], xmm0
mov dword [rsp + 0x78], 0x756e9a97
xor eax, eax
mov byte [rsp + 0x7c], al
mov ecx, edi
mov rdx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x12]
xor byte [rsp + rdx + 0x68], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x14
jb 0x14000a7b0
mov byte [rsp + 0x7c], 0
movaps xmm0, xmmword [0x1401469b0]
movups xmmword [rbp - 0x28], xmm0
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x28]
call fcn.140034670
call fcn.140036560
mov eax, dword [0x14017ae78]
cmp eax, 2
jne 0x14000a9f1
cmp qword [0x140174f10], 0x40
je 0x14000a80d
mov dword [0x14017ae78], 4
jmp 0x14000aa79
lea rax, [rbp + 0x350]
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0x38]
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x58]
mov qword [rsp + 0x68], rax
mov dword [rbp - 0x60], 0x989780a2
mov dword [rbp - 0x5c], 0x8087d39c
mov dword [rbp - 0x58], 0x8a9d9495
mov word [rbp - 0x54], 0xda89
xor eax, eax
mov byte [rbp - 0x52], al
mov ecx, edi
mov rdx, rdi
nop
lea eax, [rcx - 0x12]
xor byte [rbp + rdx - 0x60], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xe
jb 0x14000a850
mov byte [rbp - 0x52], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
mov qword [rbp + 0x360], rdi
mov qword [rbp + 0x368], rdi
lea rax, [rbp - 0x60]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000a890
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x350]
call fcn.140001b50
nop
mov dword [rbp + 0x2a0], 0x989780a2
mov word [rbp + 0x2a4], 0x9c
mov ecx, edi
mov rdx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x12]
xor byte [rbp + rdx + 0x2a0], al
inc ecx
movsxd rdx, ecx
cmp rdx, 5
jb 0x14000a8d0
mov byte [rbp + 0x2a5], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x50], rdi
lea rax, [rbp + 0x2a0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000a910
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x38]
call fcn.140001b50
nop
mov rdx, r15
lea rcx, [rbp + 0x58]
call fcn.140001980
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x380], xmm0
mov qword [rbp + 0x390], rdi
mov qword [rbp + 0x398], rdi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r14 + r8], 0
jne 0x14000a960
mov rdx, r14
lea rcx, [rbp + 0x380]
call fcn.140001b50
nop
lea rax, [rbp + 0x350]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x38]
mov r8, rbx
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x3f8]
call fcn.1400405d0
mov dword [0x14017ae78], 3
mov rdx, qword [rbp + 0x410]
cmp rdx, 0x10
jb 0x14000a9f6
inc rdx
mov rcx, qword [rbp + 0x3f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a9e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000acee
call fcn.1400db19c
mov eax, dword [0x14017ae78]
cmp eax, 3
jne 0x14000aa74
mov qword [rbp + 0x378], 0
movdqa xmm0, xmmword [0x140146b60]
movdqu xmmword [rbp - 0x18], xmm0
movdqa xmm1, xmmword [0x140146b20]
movdqu xmmword [rbp - 8], xmm1
mov dword [rbp + 8], 0x646c6b
mov ecx, edi
mov rdx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x12]
xor byte [rbp + rdx - 0x18], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x23
jb 0x14000aa30
mov byte [rbp + 0xb], 0
lea rdx, [rbp + 0x378]
lea rcx, [rbp - 0x18]
call fcn.140034da0
test al, al
je 0x14000aa6e
call fcn.140008a90
mov dword [0x14017ae78], 5
jmp 0x14000aafa
mov eax, dword [0x14017ae78]
cmp eax, 4
jne 0x14000aaf5
movaps xmm0, xmmword [0x140146980]
movups xmmword [rbp - 0x28], xmm0
mov dword [rbp - 0x70], 0xd1adc2b5
mov dword [rbp - 0x6c], 0x999d92b4
mov dword [rbp - 0x68], 0xd99393
mov ecx, edi
mov rdx, rdi
nop
lea eax, [rcx - 0x12]
xor byte [rbp + rdx - 0x70], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xb
jb 0x14000aaa0
mov byte [rbp - 0x65], 0
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x28]
call fcn.140034670
call fcn.140036560
mov rdx, r12
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdx, qword [0x140174f00]
movaps xmm0, xmmword [0x140146980]
movups xmmword [rbp - 0x28], xmm0
lea rcx, [rbp - 0x28]
call fcn.140034670
mov eax, dword [0x14017ae78]
cmp eax, 5
jne 0x14000ab71
movdqa xmm0, xmmword [0x140146be0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x6f69dfcc
mov dword [rbp - 0x3c], 0x676b6f22
mov word [rbp - 0x38], 0x7e64
xor eax, eax
mov byte [rbp - 0x36], al
mov ecx, edi
mov rdx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x12]
xor byte [rbp + rdx - 0x50], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x1a
jb 0x14000ab30
mov byte [rbp - 0x36], 0
movaps xmm0, xmmword [0x1401469b0]
movups xmmword [rbp - 0x28], xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x28]
call fcn.140034670
mov ecx, WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14000abf2
call fcn.140018220
call fcn.140012fc0
mov rcx, qword [0x14017b040]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x14017afa8]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x14017b040]
mov rax, qword [rcx]
lea r8, [rbp + 0x648]
mov rdx, qword [0x14017afa8]
call qword [rax + 0x190]
mov rax, qword [0x14017aea8]
mov rcx, qword [rax + 0x4088]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, rdi
cmp byte [rax], dil
cmovne rcx, rax
call fcn.140030210
mov rcx, qword [0x14017b030]
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x40]
jmp 0x14000a160
lea rax, [rbp + 0x58]
mov qword [rbp - 0x28], rax
mov dword [rsp + 0x68], 0x85838aba
mov dword [rsp + 0x6c], 0x9990ddc3
mov word [rsp + 0x70], 0x9a
mov ecx, edi
mov r8, rdi
nop word [rax + rax]
lea eax, [rcx - 0x12]
xor byte [rsp + r8 + 0x68], al
inc ecx
movsxd r8, ecx
cmp r8, 9
jb 0x14000ac20
mov byte [rsp + 0x71], 0
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x58]
call fcn.140001940
mov rbx, rax
mov rdx, r12
lea rcx, [rbp + 0x3f8]
call fcn.140001980
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x380]
call fcn.140041320
nop
lea rcx, [rbp + 0x350]
call fcn.140004c70
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x350]
call fcn.140004810
nop
lea rcx, [rbp + 0x350]
call fcn.14000b060
mov rcx, rax
call fcn.1400db47c
mov rbx, rax
lea rcx, [rbp + 0x350]
call fcn.14000b060
test rax, rax
je 0x14000acf4
mov rdx, rdi
mov r8, rbx
nop word [rax + rax]
lea rcx, [rbp + 0x350]
call fcn.14000b050
movzx ecx, byte [rax]
mov byte [r8], cl
inc edi
lea r8, [r8 + 1]
movsxd rdx, edi
lea rcx, [rbp + 0x350]
call fcn.14000b060
cmp rdx, rax
jae 0x14000acf4
jmp 0x14000acc0
call fcn.1400eeeb4
nop
call fcn.1400089e0
mov r9d, eax
lea rcx, [rbp + 0x350]
call fcn.14000b060
mov r8, rax
mov rdx, rbx
mov ecx, r9d
call fcn.140009680
mov rcx, rbx
call fcn.1400db19c
call fcn.1400094d0
mov rcx, qword [0x14017ae80]
test rcx, rcx
je 0x14000ad35
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call fcn.1400ea508
nop
call fcn.1400eeeb4
nop
call fcn.1400eeeb4
int3
call fcn.1400eeeb4
int3