Function at 0x140041de0
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rax - 0x788]
sub rsp, 0x860
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
mov rax, qword [0x1400b9060]
xor rax, rsp
mov qword [rbp + 0x6b0], rax
mov rcx, qword [0x140287808]
xor dil, dil
movss xmm0, dword [0x1400a9b14]
xorps xmm8, xmm8
xorps xmm6, xmm6
movss dword [rbp - 0x30], xmm0
add rcx, 0xffd830
movss dword [rsp + 0x54], xmm8
movss dword [rsp + 0x50], xmm6
xorps xmm10, xmm10
mov qword [rbp - 0x24], 0
mov dword [rbp - 0x28], 0
mov qword [rbp - 0x14], 0
mov dword [rbp - 0x18], 0
mov byte [rbp + 0x550], dil
call fcn.140048560
movss xmm11, dword [0x1400a9a80]
xor r14d, r14d
mov dword [rbp + 0x568], eax
mov ebx, eax
test eax, eax
je 0x140042fe3
mov qword [rsp + 0x890], r12
mov esi, r14d
movaps xmmword [rsp + 0x7e0], xmm13
movss xmm13, dword [0x1400a9b3c]
mov qword [rsp + 0x898], r13
mov qword [rsp + 0x8a0], r15
movaps xmmword [rsp + 0x7f0], xmm12
mov dword [rbp - 0x54], r14d
mov r14d, 5
movaps xmmword [rsp + 0x7d0], xmm14
movaps xmmword [rsp + 0x7c0], xmm15
lea r12d, [r14 + 0x5f]
nop dword [rax]
mov ecx, dword [0x1400a89c8]
add rcx, qword [0x140287808]
call fcn.140048560
mov ecx, dword [0x1400a89d0]
mov edi, eax
add rcx, qword [0x140287808]
call fcn.140048560
mov ecx, dword [0x1400a89cc]
mov ebx, eax
add rcx, qword [0x140287808]
call fcn.140048560
sub eax, ebx
lea ecx, [rax + 0x28540]
add ecx, edi
call fcn.140048560
cmp byte [0x1402879fb], 0
jne 0x140041f5c
xor eax, esi
test al, 1
je 0x140042f7b
mov rcx, qword [0x140287808]
add rcx, 0xff4000
call fcn.140048560
mov rcx, qword [0x140287808]
mov ebx, eax
add rcx, 0xff4014
call fcn.140048560
cmp esi, 0x11
ja 0x140042f7b
add eax, ebx
mov edx, esi
add rax, 0x137c
lea rcx, [rax + rdx*4]
call fcn.140048560
mov edi, eax
test eax, eax
je 0x140042f7b
lea ecx, [rax + 0x14]
call fcn.140048560
lea ecx, [rdi + 0x30]
mov ebx, eax
call fcn.140048560
mov r15d, eax
xor r15d, ebx
je 0x140042f7b
lea ecx, [r15 + 0xddc]
call fcn.140048560
test eax, eax
je 0x140042f7b
lea ecx, [rax + 0x34]
call fcn.140048600
cvttss2si r13d, xmm0
test r13d, r13d
je 0x140042f7b
cmp byte [0x14028781a], 0
jne 0x140042008
cmp byte [0x14028784f], 0
je 0x1400420b4
mov rcx, qword [0x140287808]
add rcx, 0xff3aec
call fcn.140048560
mov rcx, qword [0x140287808]
mov edi, eax
add rcx, 0xff3adc
call fcn.140048560
mov rcx, qword [0x140287808]
mov ebx, eax
add rcx, 0xff3ad8
call fcn.140048560
lea ecx, [rsi*4 + 0x284f8]
sub ecx, ebx
add ecx, eax
add ecx, edi
call fcn.140048560
xor edx, edx
lea rcx, [rbp + 0x110]
mov r8d, 0x108
lea ebx, [rax + 8]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x140287a18]
test eax, eax
je 0x1400420b4
test rbx, rbx
je 0x1400420b4
mov dword [rbp + 0x11c], eax
lea rdx, [rbp + 0x110]
lea rax, [rbp + 0x5f0]
mov qword [rbp + 0x120], rbx
mov ecx, 0xa
mov qword [rbp + 0x128], rax
mov qword [rbp + 0x130], 0x40
call fcn.140038330
mov r8d, r14d
lea rcx, [rbp + 0xf0]
mov edx, r15d
call fcn.14003d6e0
movaps xmm7, xmm10
movss dword [rbp - 0x80], xmm10
lea ecx, [r15 + 0xbb8]
movss dword [rbp - 0x58], xmm7
movss dword [rbp - 0x7c], xmm10
movaps xmm11, xmm10
movsd xmm0, qword [rax]
movaps xmm12, xmm10
mov edi, dword [rax + 8]
movsd qword [rbp + 0x70], xmm0
call fcn.140048560
test eax, eax
je 0x1400421b1
lea ecx, [rax + 0x50]
call fcn.140048560
test eax, eax
je 0x1400421b1
xor edx, edx
movss dword [rbp - 0x58], xmm7
mov r8d, 0x108
movss dword [rbp + 0x10], xmm7
lea rcx, [rbp + 0x220]
movss dword [rbp - 0x80], xmm10
movss dword [rbp + 0xc], xmm10
lea ebx, [rax + 0x40]
movss dword [rbp - 0x7c], xmm10
movss dword [rbp + 8], xmm10
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x140287a18]
test eax, eax
je 0x1400421b1
test rbx, rbx
je 0x1400421b1
mov dword [rbp + 0x22c], eax
lea rdx, [rbp + 0x220]
lea rax, [rbp + 8]
mov qword [rbp + 0x230], rbx
mov ecx, 0xa
mov qword [rbp + 0x238], rax
mov qword [rbp + 0x240], recvfrom
call fcn.140038330
movss xmm7, dword [rbp + 0x10]
movss xmm11, dword [rbp + 0xc]
movss xmm12, dword [rbp + 8]
movss dword [rbp - 0x58], xmm7
movss dword [rbp - 0x80], xmm11
movss dword [rbp - 0x7c], xmm12
mov rcx, qword [0x140287808]
movaps xmm14, xmm10
add rcx, 0xffd830
movaps xmm9, xmm10
movaps xmm15, xmm10
call fcn.140048560
test eax, eax
je 0x14004228c
lea ecx, [rax + 0x948]
call fcn.140048560
test eax, eax
je 0x14004228c
lea ecx, [rax + 0x38]
call fcn.140048560
test eax, eax
je 0x14004228c
lea ecx, [rax + 0x20]
call fcn.140048560
test eax, eax
je 0x14004228c
xor edx, edx
movss dword [rbp + 0x1c], xmm10
mov r8d, 0x108
movss dword [rbp + 0x18], xmm10
lea rcx, [rbp + 0x330]
movss dword [rbp + 0x14], xmm10
lea ebx, [rax + 0xe8]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x140287a18]
test eax, eax
je 0x14004228c
test rbx, rbx
je 0x14004228c
mov dword [rbp + 0x33c], eax
lea rdx, [rbp + 0x330]
lea rax, [rbp + 0x14]
mov qword [rbp + 0x340], rbx
mov ecx, 0xa
mov qword [rbp + 0x348], rax
mov qword [rbp + 0x350], recvfrom
call fcn.140038330
movss xmm14, dword [rbp + 0x1c]
movss xmm9, dword [rbp + 0x18]
movss xmm15, dword [rbp + 0x14]
movsd xmm0, qword [rbp + 0x70]
lea rdx, [rbp - 0x28]
movss xmm1, dword [rbp + 0x74]
lea rcx, [rbp + 0xd0]
addss xmm1, dword [0x1400a99b8]
mov r9d, dword [0x140287a14]
cmp r13d, 0x64
mov r8d, dword [0x140287810]
mov esi, r13d
shufps xmm0, xmm0, 0xe1
cmovge esi, r12d
mov dword [rbp + 0xd8], edi
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movsd qword [rbp + 0x70], xmm0
movsd qword [rbp + 0xd0], xmm0
call fcn.14003d3e0
test al, al
je 0x140042f7b
mov r9d, dword [0x140287a14]
lea rdx, [rbp - 0x18]
mov r8d, dword [0x140287810]
lea rcx, [rbp + 0x80]
movss dword [rbp + 0x80], xmm12
movss dword [rbp + 0x84], xmm11
movss dword [rbp + 0x88], xmm7
call fcn.14003d3e0
test al, al
je 0x140042f7b
movaps xmm2, xmm13
mov ecx, r15d
call fcn.14003db30
test al, al
jne 0x14004245d
cmp byte [0x14028784d], al
je 0x140042368
movups xmm0, xmmword [0x1401a3498]
lea rcx, [rbp - 0x78]
movups xmmword [rbp - 0x78], xmm0
call fcn.1400035e0
mov edx, eax
mov ecx, r15d
call fcn.14003d930
cmp byte [0x140287818], 0
movss xmm8, dword [rbp - 0x24]
movss xmm13, dword [rbp - 0x28]
movss xmm6, dword [rbp - 0x14]
je 0x1400423e7
movups xmm0, xmmword [0x1401a34c8]
lea rcx, [rbp - 0x78]
movups xmmword [rbp - 0x78], xmm0
call fcn.1400035e0
movaps xmm0, xmm8
mov dword [rbp + 0x560], eax
subss xmm0, xmm6
comiss xmm10, xmm0
jbe 0x1400423b2
mulss xmm0, dword [0x1400a9b38]
cvttss2si r9d, xmm0
cvttss2si ecx, xmm13
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
cdq
sub eax, edx
sar eax, 1
cvttss2si r10d, xmm8
sub ecx, eax
lea rax, [rbp + 0x560]
mov qword [rsp + 0x20], rax
mov edx, r10d
call fcn.14003a590
cmp byte [0x140287826], 0
je 0x140042598
cvttss2si eax, dword [rbp - 0x18]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [0x1401a3478]
movups xmmword [rbp - 0x78], xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm6
movss dword [rbp + 0x30], xmm1
movd xmm1, dword [0x140287a14]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [0x140287810]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0x3c], xmm1
movss dword [rbp + 0x34], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x38], xmm0
call fcn.1400035e0
lea rdx, [rbp + 0x38]
lea r8, [rbp + 0x30]
jmp 0x140042574
cmp byte [0x14028784d], 0
je 0x140042484
movups xmm0, xmmword [0x1401a3488]
lea rcx, [rbp - 0x78]
movups xmmword [rbp - 0x78], xmm0
call fcn.1400035e0
mov edx, eax
mov ecx, r15d
call fcn.14003d930
cmp byte [0x140287818], 0
movss xmm8, dword [rbp - 0x24]
movss xmm13, dword [rbp - 0x28]
movss xmm6, dword [rbp - 0x14]
je 0x140042503
movups xmm0, xmmword [0x1401a3488]
lea rcx, [rbp - 0x78]
movups xmmword [rbp - 0x78], xmm0
call fcn.1400035e0
movaps xmm0, xmm8
mov dword [rbp + 0x560], eax
subss xmm0, xmm6
comiss xmm10, xmm0
jbe 0x1400424ce
mulss xmm0, dword [0x1400a9b38]
cvttss2si r9d, xmm0
cvttss2si ecx, xmm13
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
cdq
sub eax, edx
sar eax, 1
cvttss2si r10d, xmm8
sub ecx, eax
lea rax, [rbp + 0x560]
mov qword [rsp + 0x20], rax
mov edx, r10d
call fcn.14003a590
cmp byte [0x140287826], 0
je 0x140042598
cvttss2si eax, dword [rbp - 0x18]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [0x1401a3488]
movups xmmword [rbp - 0x78], xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm6
movss dword [rbp + 0x40], xmm1
movd xmm1, dword [0x140287a14]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [0x140287810]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0x4c], xmm1
movss dword [rbp + 0x44], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x48], xmm0
call fcn.1400035e0
lea rdx, [rbp + 0x48]
lea r8, [rbp + 0x40]
mov rcx, qword [0x140287800]
mov r9d, eax
movss xmm0, dword [0x1400a99f4]
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm0
call fcn.14001e5d0
movss xmm2, dword [0x1400a9b38]
movaps xmm0, xmm8
subss xmm0, xmm6
comiss xmm10, xmm0
movaps xmm1, xmm0
jbe 0x1400425b5
mulss xmm1, xmm2
cvttss2si eax, xmm1
cvttss2si ebx, xmm13
test eax, eax
jns 0x1400425c4
inc eax
sar eax, 1
cmp byte [0x140287834], 0
cvttss2si r14d, xmm8
lea r12d, [rax + rbx]
je 0x1400426ab
xor ecx, ecx
test si, si
cmovne cx, si
comiss xmm10, xmm0
jbe 0x1400425ef
mulss xmm0, xmm2
cvttss2si r9d, xmm0
subss xmm6, xmm8
mov eax, r9d
cdq
and edx, 3
add eax, edx
sar eax, 2
sub ebx, eax
movzx eax, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, dword [0x1400a9ab4]
cvttss2si rdi, xmm0
cmp cx, 0x64
ja 0x140042646
cmp cx, 0x4b
ja 0x140042646
cmp cx, 0x28
jbe 0x14004263d
movaps xmm0, xmmword [0x1401a30f0]
jmp 0x14004264d
movaps xmm0, xmmword [0x1401a3000]
jmp 0x14004264d
movaps xmm0, xmmword [0x1401a3040]
lea rax, [0x1401a31a0]
add r9d, 2
lea edx, [r14 - 1]
mov qword [rsp + 0x20], rax
lea ecx, [rbx - 6]
mov r8d, 5
movups xmmword [rbp - 0x78], xmm0
call fcn.14003ad20
mov eax, edi
lea ecx, [rbx - 5]
xorps xmm0, xmm0
movd xmm1, r14d
cvtdq2ps xmm1, xmm1
mov r9d, edi
mov r8d, 3
cvtsi2ss xmm0, rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
subss xmm6, xmm0
addss xmm6, xmm1
cvttss2si edx, xmm6
call fcn.14003ad20
cmp byte [0x14028781a], 0
je 0x140042b6c
lea rax, [rbp + 0x90]
mov dword [rbp + 0x90], 9
movaps xmm12, xmm13
mov dword [rbp + 0x94], 9
subss xmm12, dword [0x1400a9ab0]
movaps xmm11, xmm8
mov dword [rbp + 0x98], 9
subss xmm11, dword [0x1400a9aac]
mov r9d, reloc.WLDAP32.dll_Ordinal_26
mov dword [rbp + 0x9c], 0xff
mov r8d, 0x9b
mov dword [rbp + 0xb0], Ordinal_33
cvttss2si edi, xmm12
mov dword [rbp + 0xb4], gethostname
mov dword [rbp + 0xb8], Ordinal_60
mov dword [rbp + 0xbc], 0xff
mov qword [rsp + 0x20], rax
cvttss2si ebx, xmm11
mov ecx, edi
mov edx, ebx
call fcn.14003ad20
mov r9d, Ordinal_30
lea rax, [rbp + 0xb0]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov ecx, edi
lea r8d, [r9 + 5]
call fcn.14003ad20
movaps xmm0, xmm14
movaps xmm1, xmm15
subss xmm1, dword [rbp - 0x7c]
subss xmm0, xmm7
movaps xmm2, xmm9
subss xmm2, dword [rbp - 0x80]
mulss xmm1, xmm1
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1400427ab
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1400427b3
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov dword [rsp + 0x58], 0xf4bfa0aa
xor ecx, ecx
mov word [rsp + 0x5c], 0x100
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x71]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 4
jb 0x1400427d0
xorps xmm2, xmm2
mov byte [rsp + 0x5d], 0
cvtss2sd xmm2, xmm0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x5b0]
movq r8, xmm2
call fcn.140014840
movss xmm7, dword [0x1400a9a64]
lea rax, [rbp + 0x5b0]
movss xmm6, dword [0x1400a9a8c]
lea r9, [rbp + 0x50]
movaps xmm0, xmm11
mov qword [rsp + 0x30], rax
addss xmm0, xmm7
mov byte [rsp + 0x28], 0
movaps xmm1, xmm12
mov dword [rbp + 0x50], 0
addss xmm1, dword [0x1400a9a80]
mov dword [rbp + 0x54], 0xcb
mov dword [rbp + 0x58], 0xff
cvttss2si ebx, xmm0
mov dword [rbp + 0x5c], 0xff
mov byte [rsp + 0x20], 0
movaps xmm0, xmm6
cvttss2si edx, xmm1
mov r8d, ebx
movd ecx, xmm0
call fcn.140038630
xor ecx, ecx
mov dword [rsp + 0x60], 0xda9bf9aa
mov word [rsp + 0x64], Ordinal_200
mov byte [rsp + 0x66], 1
nop dword [rax]
lea eax, [rcx - 0x71]
xor byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 5
jb 0x140042890
mov r8d, r13d
mov byte [rsp + 0x66], 0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x5d0]
call fcn.140048c60
movaps xmm0, xmm11
lea rax, [rbp + 0x5d0]
subss xmm0, xmm7
mov qword [rsp + 0x30], rax
movaps xmm1, xmm12
mov byte [rsp + 0x28], 0
addss xmm1, dword [0x1400a9ac8]
lea r9, [rbp + 0x50]
mov byte [rsp + 0x20], 0
cvttss2si r8d, xmm0
movaps xmm0, xmm6
cvttss2si edx, xmm1
movd ecx, xmm0
call fcn.140038630
xor eax, eax
mov dword [rbp - 0x50], 0xb6fcb6aa
mov ecx, eax
mov dword [rbp - 0x4c], 0xb6e2
mov byte [rbp - 0x48], 1
mov edx, 0x4971
nop word [rax + rax]
movzx eax, cx
sub ax, dx
xor word [rbp + rcx*2 - 0x50], ax
inc rcx
cmp rcx, 3
jb 0x140042920
lea r9, [rbp + 0x5f0]
mov byte [rbp - 0x48], 0
lea r8, [rbp - 0x50]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rbp + 0x630]
call fcn.1400352b0
movaps xmm0, xmm12
mov dword [rbp + 0xa0], 0xc9
addss xmm0, dword [0x1400a9aa8]
lea rax, [rbp + 0x630]
mov dword [rbp + 0xa4], reloc.WS2_32.dll_recv
mov qword [rsp + 0x30], rax
lea r9, [rbp + 0xa0]
mov byte [rsp + 0x28], 0
mov r8d, ebx
mov dword [rbp + 0xa8], reloc.WS2_32.dll_recv
cvttss2si edx, xmm0
mov dword [rbp + 0xac], 0xff
mov byte [rsp + 0x20], 0
movaps xmm0, xmm6
movd ecx, xmm0
call fcn.140038e50
movss xmm2, dword [0x1400a99f4]
lea rcx, [rbp + 0xc0]
movss xmm0, dword [0x1400a9994]
movaps xmm7, xmm12
addss xmm11, dword [0x1400a9aa0]
addss xmm7, dword [0x1400a9ad8]
movss dword [rbp + 0xc0], xmm0
movaps xmm1, xmm12
movss dword [rbp + 0xc4], xmm0
addss xmm1, xmm2
movss dword [rbp + 0xc8], xmm0
movaps xmm6, xmm11
movss dword [rbp + 0xcc], xmm2
addss xmm6, dword [0x1400a9a74]
movaps xmm0, xmm7
subss xmm0, xmm2
movss dword [rbp + 0x60], xmm1
movss dword [rbp + 0x68], xmm0
movaps xmm0, xmm6
subss xmm0, xmm2
movss dword [rbp + 0x6c], xmm0
movaps xmm0, xmm11
addss xmm0, xmm2
movss dword [rbp + 0x64], xmm0
call fcn.1400035e0
movss xmm0, dword [0x1400a99f4]
lea r8, [rbp + 0x68]
mov rcx, qword [0x140287800]
lea rdx, [rbp + 0x60]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
mov dword [rsp + 0x28], reloc.WS2_32.dll_ntohs
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm10
call fcn.14001e750
movss xmm0, dword [0x1400a9994]
lea rcx, [rbp - 8]
movss dword [rbp - 8], xmm0
movss dword [rbp - 4], xmm0
movss dword [rbp], xmm0
movss xmm0, dword [0x1400a99f4]
movss dword [rbp + 4], xmm0
movss dword [rsp + 0x48], xmm7
movss dword [rsp + 0x4c], xmm6
movss dword [rsp + 0x40], xmm12
movss dword [rsp + 0x44], xmm11
call fcn.1400035e0
movss xmm0, dword [0x1400a99f4]
lea r8, [rsp + 0x48]
mov rcx, qword [0x140287800]
lea rdx, [rsp + 0x40]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
mov dword [rsp + 0x28], reloc.WS2_32.dll_ntohs
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm10
call fcn.14001e750
lea rdx, [0x1401a3020]
cmp esi, 0x32
lea rax, [0x1401a3040]
mov ecx, edi
cmovge rdx, rax
lea r9, [0x1401a3000]
cmp esi, 0x14
mov eax, esi
cmovge r9, rdx
cdq
sub eax, edx
mov qword [rsp + 0x20], r9
sar eax, 1
mov r9d, 6
cvttss2si edx, xmm11
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x1400a9a30]
cvttss2si r8d, xmm0
call fcn.14003ad20
movss xmm7, dword [rbp - 0x58]
movss xmm11, dword [rbp - 0x80]
movss xmm12, dword [rbp - 0x7c]
xor ebx, ebx
cmp byte [0x14028784f], bl
je 0x140042c32
mov dword [rbp - 0x40], 0xb6fcb6aa
mov ecx, ebx
mov dword [rbp - 0x3c], 0xb6e2
mov edx, 0x4971
mov byte [rbp - 0x38], 1
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, dx
xor word [rbp + rcx*2 - 0x40], ax
inc rcx
cmp rcx, 3
jb 0x140042ba0
lea r9, [rbp + 0x5f0]
mov byte [rbp - 0x38], bl
lea r8, [rbp - 0x40]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rbp + 0x670]
call fcn.1400352b0
movups xmm0, xmmword [0x1401a34a8]
lea rcx, [rbp - 0x78]
movups xmmword [rbp - 0x78], xmm0
call fcn.1400035e0
subss xmm8, dword [0x1400a9a94]
subss xmm13, dword [0x1400a9aa0]
mov r9d, eax
lea rax, [rbp + 0x670]
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], bl
cvttss2si r8d, xmm8
mov byte [rsp + 0x20], bl
movss xmm8, dword [0x1400a9a8c]
movaps xmm0, xmm8
cvttss2si edx, xmm13
movd ecx, xmm0
call fcn.140039e20
jmp 0x140042c3b
movss xmm8, dword [0x1400a9a8c]
cmp byte [0x140287a0b], 0
je 0x140042cc9
mov dword [rsp + 0x68], 0xdab1f9aa
mov rcx, rbx
mov word [rsp + 0x6c], Ordinal_200
mov byte [rsp + 0x6e], 1
nop
lea eax, [rcx - 0x71]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 5
jb 0x140042c60
mov r8d, r13d
mov byte [rsp + 0x6e], 0
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x570]
call fcn.140048c60
movups xmm0, xmmword [str.L7_t_]
lea rcx, [rbp - 0x78]
movups xmmword [rbp - 0x78], xmm0
call fcn.1400035e0
mov r9d, eax
movaps xmm0, xmm8
lea rax, [rbp + 0x570]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
mov r8d, r14d
mov byte [rsp + 0x28], 0
mov edx, r12d
mov byte [rsp + 0x20], 0
call fcn.1400396a0
cmp byte [0x1402879fa], 0
je 0x140042dcd
subss xmm9, xmm11
xorps xmm0, xmm0
subss xmm15, xmm12
subss xmm14, xmm7
mulss xmm9, xmm9
mulss xmm15, xmm15
mulss xmm14, xmm14
addss xmm9, xmm15
addss xmm9, xmm14
ucomiss xmm0, xmm9
ja 0x140042d11
xorps xmm0, xmm0
sqrtss xmm0, xmm9
jmp 0x140042d1a
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov dword [rsp + 0x70], 0xbca1b5d4
mov rcx, rbx
mov dword [rsp + 0x74], 0xc8f2a3
mov byte [rsp + 0x78], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x71]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 7
jb 0x140042d40
xorps xmm2, xmm2
mov byte [rsp + 0x78], 0
cvtss2sd xmm2, xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x590]
movq r8, xmm2
call fcn.140014840
cmp byte [0x140287a0b], 0
movd xmm6, r14d
cvtdq2ps xmm6, xmm6
je 0x140042d8b
addss xmm6, dword [0x1400a9a90]
movups xmm0, xmmword [0x1401a34d8]
lea rcx, [rbp - 0x78]
movups xmmword [rbp - 0x78], xmm0
call fcn.1400035e0
mov r9d, eax
movaps xmm0, xmm8
lea rax, [rbp + 0x590]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
mov edx, r12d
cvttss2si r8d, xmm6
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
call fcn.1400396a0
cmp byte [0x140287819], 0
movss xmm13, dword [0x1400a9b3c]
je 0x140042f62
movaps xmm2, xmm13
mov ecx, r15d
call fcn.14003db80
test al, al
jne 0x140042f62
mov ecx, dword [0x140287a3c]
mov r8d, ebx
mov qword [rbp + 0x24], 0
mov dword [rbp + 0x20], 0
test ecx, ecx
je 0x140042f09
sub ecx, 1
je 0x140042e5a
cmp ecx, 1
jne 0x140042e60
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x80000001
jge 0x140042e46
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
mov r8d, 2
mov r14d, 5
cmove r8d, r14d
jmp 0x140042e66
mov r8d, 2
mov r14d, 5
mov edx, r15d
lea rcx, [rbp + 0xfc]
call fcn.14003d6e0
mov r9d, dword [0x140287a14]
lea rdx, [rbp + 0x20]
mov r8d, dword [0x140287810]
lea rcx, [rbp + 0xe0]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp + 0xe0], xmm0
mov dword [rbp + 0xe8], eax
call fcn.14003d3e0
test al, al
je 0x140042f68
movss xmm6, dword [rbp + 0x20]
movss xmm7, dword [rbp + 0x24]
mov eax, dword [0x140287810]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
mov eax, dword [0x140287a14]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
subss xmm6, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm7, xmm0
movaps xmm0, xmm6
mulss xmm0, xmm6
movaps xmm1, xmm7
mulss xmm1, xmm7
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140042f17
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x140042f1f
mov r14d, 5
mov r8d, r14d
jmp 0x140042e66
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm9, dword [rbp - 0x30]
comiss xmm9, xmm0
jbe 0x140042f68
movss xmm1, dword [0x14028681c]
mov r12d, 0x64
comiss xmm1, xmm0
jbe 0x140042f6e
mov dil, 1
movss dword [rsp + 0x54], xmm6
movaps xmm8, xmm6
mov byte [rbp + 0x550], dil
movss dword [rbp - 0x30], xmm0
movaps xmm6, xmm7
movss dword [rsp + 0x50], xmm7
jmp 0x140042f82
mov r14d, 5
mov r12d, 0x64
movss xmm6, dword [rsp + 0x50]
movss xmm8, dword [rsp + 0x54]
movzx edi, byte [rbp + 0x550]
mov eax, dword [rbp - 0x54]
inc eax
mov dword [rbp - 0x54], eax
mov esi, eax
cmp eax, 0xf
jle 0x140041f00
movss xmm11, dword [0x1400a9a80]
xor r14d, r14d
mov ebx, dword [rbp + 0x568]
movaps xmm15, xmmword [rsp + 0x7c0]
movaps xmm14, xmmword [rsp + 0x7d0]
movaps xmm13, xmmword [rsp + 0x7e0]
movaps xmm12, xmmword [rsp + 0x7f0]
mov r15, qword [rsp + 0x8a0]
mov r13, qword [rsp + 0x898]
mov r12, qword [rsp + 0x890]
cmp byte [0x140287819], 0
je 0x140043088
test dil, dil
je 0x140043088
movzx eax, byte [0x140287a1d]
mov dword [rbp - 0x78], 1
mov dword [rbp - 0x74], 2
mov dword [rbp - 0x70], reloc.WS2_32.dll_recv
mov dword [rbp - 0x6c], reloc.WS2_32.dll_sendto
mov dword [rbp - 0x68], 9
mov dword [rbp - 0x64], reloc.WS2_32.dll_select
mov dword [rbp - 0x60], reloc.WS2_32.dll_recvfrom
cmp al, 1
je 0x140043051
test al, al
jne 0x140043088
movsxd rax, dword [reloc.WS2_32.dll_bind]
mov ecx, dword [rbp + rax*4 - 0x78]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x140043088
divss xmm8, dword [0x1402868e4]
divss xmm6, dword [0x1402868e4]
ucomiss xmm8, xmm10
jp 0x14004306e
je 0x140043789
ucomiss xmm6, xmm10
jp 0x14004307a
je 0x140043789
cvttss2si edx, xmm6
cvttss2si ecx, xmm8
call fcn.14003b2b0
cmp byte [0x14028784e], 0
je 0x1400430f2
test ebx, ebx
jne 0x1400430fa
mov rcx, qword [0x140287808]
add rcx, 0xff3cb0
call fcn.140048560
mov rcx, qword [0x140287808]
mov edi, eax
add rcx, 0xff3c3c
call fcn.140048560
mov rcx, qword [0x140287808]
sub edi, eax
add rcx, 0xff3c38
call fcn.140048560
add edi, eax
mov ebx, r14d
test edi, edi
je 0x1400430e6
lea ecx, [rdi + 0xc]
lea ecx, [rcx + rbx*4]
call fcn.140048cc0
inc ebx
cmp ebx, 0xa
jl 0x1400430d7
jmp 0x14004347c
test ebx, ebx
je 0x14004347c
lea ecx, [rbx + 0xb88]
call fcn.140048560
test eax, eax
je 0x140043152
mov ecx, eax
call fcn.140048560
mov ebx, eax
test eax, eax
je 0x140043152
cmp byte [0x1402879f8], 0
je 0x14004312a
lea ecx, [rax + 0x160]
call fcn.140048cc0
cmp byte [0x140287825], 0
je 0x14004313e
lea ecx, [rbx + 0x188]
call fcn.140048cc0
cmp byte [0x140287837], 0
je 0x140043152
lea ecx, [rbx + 0x120]
call fcn.140048cc0
mov ecx, dword [0x1400a89c8]
add rcx, qword [0x140287808]
call fcn.140048560
mov ecx, dword [0x1400a89d0]
mov esi, eax
add rcx, qword [0x140287808]
call fcn.140048560
mov ecx, dword [0x1400a89cc]
mov ebx, eax
add rcx, qword [0x140287808]
call fcn.140048560
mov rcx, qword [0x140287808]
sub esi, ebx
add rcx, 0xffd830
add esi, eax
call fcn.140048560
lea ecx, [rsi + 0x28540]
call fcn.140048560
cmp byte [0x140287836], 0
mov ebx, eax
je 0x1400431c2
mov byte [0x1402877f9], 1
jmp 0x1400431d7
movzx eax, byte [0x1402877f9]
cmp al, 1
mov ecx, eax
cmove ecx, r14d
mov byte [0x1402877f9], cl
cmp byte [0x1402879f9], 0
je 0x140043266
movss xmm0, dword [0x1400a99c8]
lea eax, [rbx*8 + 0x62]
add eax, ebx
movss dword [rbp + 0x568], xmm0
xor edx, edx
lea rcx, [rbp + 0x330]
mov r8d, 0x108
lea edi, [rsi + rax*4]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x140287a18]
test eax, eax
je 0x14004325a
test rdi, rdi
je 0x14004325a
mov dword [rbp + 0x358], eax
lea rdx, [rbp + 0x330]
lea rax, [rbp + 0x568]
mov qword [rbp + 0x360], rdi
mov ecx, reloc.WS2_32.dll_listen
mov qword [rbp + 0x368], rax
mov qword [rbp + 0x370], 4
call fcn.140038330
mov byte [0x140287a0a], 1
jmp 0x1400432e6
cmp byte [0x140287a0a], 1
jne 0x1400432e6
lea eax, [rbx*8 + 0x62]
mov dword [rbp + 0x560], 0
add eax, ebx
lea rcx, [rbp + 0x220]
xor edx, edx
mov r8d, 0x108
lea edi, [rsi + rax*4]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x140287a18]
test eax, eax
je 0x1400432df
test rdi, rdi
je 0x1400432df
mov dword [rbp + 0x248], eax
lea rdx, [rbp + 0x220]
lea rax, [rbp + 0x560]
mov qword [rbp + 0x250], rdi
mov ecx, reloc.WS2_32.dll_listen
mov qword [rbp + 0x258], rax
mov qword [rbp + 0x260], 4
call fcn.140038330
mov byte [0x140287a0a], 0
cmp byte [0x1402877fb], 0
je 0x1400433ab
imul ecx, ebx, 0x23a0
add ecx, 0x90
add ecx, esi
call fcn.140048560
cmp eax, 1
ja 0x1400433a2
mov rcx, qword [0x140287808]
add rcx, 0xffd830
call fcn.140048560
test eax, eax
je 0x1400433a2
lea ecx, [rax + 0x30]
call fcn.140048560
test eax, eax
je 0x1400433a2
lea ecx, [rax + 0x30]
call fcn.140048560
test eax, eax
je 0x1400433a2
xor edx, edx
mov byte [rbp + 0x550], 0x42
mov r8d, 0x108
lea rcx, [rbp + 0x110]
lea ebx, [rax + 0x77]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x140287a18]
test eax, eax
je 0x1400433a2
test rbx, rbx
je 0x1400433a2
mov dword [rbp + 0x138], eax
lea rdx, [rbp + 0x110]
lea rax, [rbp + 0x550]
mov qword [rbp + 0x140], rbx
mov ecx, reloc.WS2_32.dll_listen
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x150], 1
call fcn.140038330
mov byte [0x14028781b], 1
jmp 0x1400433c0
movzx eax, byte [0x14028781b]
cmp al, 1
mov ecx, eax
cmove ecx, r14d
mov byte [0x14028781b], cl
cmp byte [0x140287824], 0
je 0x1400433d2
mov byte [0x140287a09], 1
jmp 0x1400433e7
movzx eax, byte [0x140287a09]
cmp al, 1
mov ecx, eax
cmove ecx, r14d
mov byte [0x140287a09], cl
cmp byte [0x140287827], 0
je 0x14004347c
mov rcx, qword [0x140287808]
add rcx, 0xff3bdc
call fcn.140048560
mov ecx, 0x79
mov ebx, eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004347c
xor edx, edx
mov byte [rbp + 0x558], 4
mov r8d, 0x108
lea rcx, [rbp + 0x440]
add ebx, 0x3c
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x140287a18]
test eax, eax
je 0x14004347c
test rbx, rbx
je 0x14004347c
mov dword [rbp + 0x468], eax
lea rdx, [rbp + 0x440]
lea rax, [rbp + 0x558]
mov qword [rbp + 0x470], rbx
mov ecx, reloc.WS2_32.dll_listen
mov qword [rbp + 0x478], rax
mov qword [rbp + 0x480], 1
call fcn.140038330
cmp byte [0x1402877fa], 0
je 0x140043663
mov rax, qword [0x140287800]
lea rcx, [rbp - 0x78]
movups xmm0, xmmword [0x1401a34b8]
movss xmm8, dword [rax + 0x10]
lea rdi, [rax + 0x1cc8]
movss xmm9, dword [rax + 0x14]
mulss xmm8, dword [0x1400a99c8]
mulss xmm9, dword [0x1400a99c8]
movups xmmword [rbp - 0x78], xmm0
call fcn.1400035e0
movss xmm1, dword [0x1400a9988]
xorps xmm0, xmm0
movzx ecx, al
mov r8d, eax
shr r8d, 0x18
movss dword [rsp + 0x4c], xmm9
cvtsi2ss xmm0, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
movss dword [rsp + 0x44], xmm9
mulss xmm0, xmm1
movss dword [rbp - 8], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mov ecx, eax
shr ecx, 0x10
movzx eax, cl
lea rcx, [rbp - 8]
mulss xmm0, xmm1
movss dword [rbp - 4], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mov eax, r8d
mulss xmm0, xmm1
movss dword [rbp], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
movaps xmm1, xmm8
subss xmm1, xmm11
movss dword [rbp + 4], xmm0
movaps xmm0, xmm8
addss xmm0, xmm11
movss dword [rsp + 0x48], xmm1
movss dword [rsp + 0x40], xmm0
call fcn.1400035e0
movss xmm7, dword [0x1400a99b4]
lea rdx, [rsp + 0x48]
mov r9d, eax
movss dword [rsp + 0x20], xmm7
lea r8, [rsp + 0x40]
mov rcx, rdi
mov ebx, eax
call fcn.14001e5d0
movaps xmm0, xmm9
movss dword [rsp + 0x48], xmm8
movaps xmm1, xmm9
movss dword [rsp + 0x40], xmm8
subss xmm0, xmm11
movss dword [rsp + 0x20], xmm7
addss xmm1, xmm11
mov r9d, ebx
lea r8, [rsp + 0x40]
mov rcx, rdi
lea rdx, [rsp + 0x48]
movss dword [rsp + 0x4c], xmm0
movss dword [rsp + 0x44], xmm1
call fcn.14001e5d0
movss xmm6, dword [0x1400a9a14]
lea r8, [rsp + 0x40]
movaps xmm0, xmm8
movss dword [rsp + 0x4c], xmm9
subss xmm0, xmm6
movss dword [rsp + 0x44], xmm9
movss dword [rsp + 0x20], xmm7
mov r9d, ebx
movss dword [rsp + 0x48], xmm0
movaps xmm0, xmm8
addss xmm0, xmm6
movss dword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.14001e5d0
movaps xmm0, xmm9
movss dword [rsp + 0x48], xmm8
subss xmm0, xmm6
movss dword [rsp + 0x40], xmm8
addss xmm9, xmm6
movss dword [rsp + 0x20], xmm7
mov r9d, ebx
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x48]
mov rcx, rdi
movss dword [rsp + 0x4c], xmm0
movss dword [rsp + 0x44], xmm9
call fcn.14001e5d0
cmp byte [0x140287835], 0
je 0x140043789
movups xmm0, xmmword [0x1400b90b0]
lea rcx, [rbp - 0x78]
movups xmmword [rbp - 0x78], xmm0
call fcn.1400035e0
movss xmm2, dword [0x14028681c]
mov esi, eax
mov eax, dword [0x140287810]
movaps xmm0, xmm2
movss xmm3, dword [0x1400a99c8]
cdq
mov rdi, qword [0x140287800]
sub eax, edx
sar eax, 1
add rdi, 0x1cc8
mulss xmm0, xmm3
cvttss2si ecx, xmm0
movd xmm0, eax
mov eax, dword [0x140287a14]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rsp + 0x40], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x44], xmm0
test esi, 0xff000000
je 0x140043789
movss xmm6, dword [0x1400a99f4]
lea rdx, [rsp + 0x40]
cvttss2si eax, xmm2
mov dword [rsp + 0x28], ecx
movd xmm0, ecx
mov rcx, rdi
cvtdq2ps xmm0, xmm0
movd xmm2, eax
movaps xmm1, xmm0
subss xmm1, xmm6
cvtdq2ps xmm2, xmm2
mulss xmm1, dword [0x1400a9a78]
subss xmm2, xmm3
movaps xmm3, xmm10
divss xmm1, xmm0
movss dword [rsp + 0x20], xmm1
call fcn.14001e090
mov r8d, dword [rdi + 0x80]
mov r9d, esi
mov rdx, qword [rdi + 0x88]
mov rcx, rdi
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 1
call fcn.14001c980
mov ecx, dword [rdi + 0x84]
test ecx, ecx
jns 0x140043782
mov eax, ecx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x80]
test eax, eax
cmovg edx, eax
call fcn.140013e70
mov dword [rdi + 0x80], r14d
mov rcx, qword [rbp + 0x6b0]
xor rcx, rsp
call fcn.140095530
lea r11, [rsp + 0x860]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret