Function at 0x1400c0ac0
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x2d70]
mov eax, 0x2e70
call fcn.14012c770
sub rsp, rax
movaps xmmword [rsp + 0x2e60], xmm6
mov rax, qword [0x14018f228]
xor rax, rsp
mov qword [rbp + 0x2d50], rax
mov rdi, rcx
xor r15d, r15d
xor r8d, r8d
lea rdx, [rbp + 0xa0]
mov rcx, qword [rcx]
call fcn.140010790
test eax, eax
jle 0x1400c0e1b
lea rsi, [0x140000000]
nop word [rax + rax]
mov rax, qword [rbp + 0xa8]
mov qword [rdi + 0x18], rax
mov ecx, dword [rbp + 0xa0]
sub ecx, 1
je 0x1400c0df1
sub ecx, 1
je 0x1400c0dc5
cmp ecx, 1
je 0x1400c0b69
lea rcx, str._SERVER_:_UNHANDLED_n
call fcn.14000a1c0
jmp 0x1400c0e01
mov rdx, qword [rbp + 0xb8]
cmp qword [rdx + 0x18], 3
jbe 0x1400c0d83
mov rax, qword [rdx + 0x10]
movzx r8d, byte [rax]
mov ecx, r8d
sub ecx, 2
je 0x1400c0d2e
sub ecx, 1
je 0x1400c0cd9
sub ecx, 1
je 0x1400c0bb4
sub ecx, 2
je 0x1400c25b5
cmp ecx, 2
je 0x1400c25b5
jmp 0x1400c0d86
mov rcx, rdx
call fcn.1400c50b0
mov rbx, rax
mov rcx, qword [rbp + 0xb8]
call fcn.1400c5100
movzx ecx, byte [rbx]
cmp ecx, 0x1a
ja case.0x1400c0be9.7
movzx ecx, byte [rsi + rcx + 0xc263c]
mov edx, dword [rsi + rcx*4 + 0xc261c]
add rdx, rsi
jmp rdx
mov rcx, rbx
call fcn.1400bc5c0
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400c0c0c
cmp byte [0x140192bc3], r15b
jne 0x1400c0c32
mov ecx, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400c0c25
cmp byte [0x140192bc1], r15b
jne 0x1400c0c32
cmp byte [0x140192c98], r15b
je case.0x1400c0be9.7
mov rcx, qword [rbp + 0xb8]
call fcn.14000f240
jmp 0x1400c25b5
mov rdx, rbx
mov rcx, rax
call fcn.1400a3630
test al, al
jne 0x1400c0c32
jmp case.0x1400c0be9.7
mov al, 1
mov edx, dword [rbx + 0x14]
cmp edx, 0x704
je 0x1400c0c79
cmp edx, 0xf2
je 0x1400c0c79
movzx eax, al
cmp edx, 0x1c14
cmovne eax, r15d
cmp byte [0x140192a91], r15b
je 0x1400c0c8a
test al, al
je 0x1400c0e7d
mov rcx, qword [0x140193340]
add rcx, 0x5de8
call fcn.1400820e0
test eax, eax
je 0x1400c0c32
mov rcx, rbx
call fcn.1400b1850
test al, al
jne 0x1400c0c32
jmp case.0x1400c0be9.7
mov rcx, rbx
call fcn.14008ffa0
test al, al
jne 0x1400c0c32
jmp case.0x1400c0be9.7
cmp byte [0x140195262], r15b
jne 0x1400c25b5
jmp case.0x1400c0be9.7
mov rcx, rdx
call fcn.1400c5150
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], r15
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r15b
jne 0x1400c0d00
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.140015350
lea rcx, [rbp + 0x100]
call fcn.140049e00
test al, al
jne 0x1400c0c32
jmp case.0x1400c0be9.7
mov rcx, rdx
call fcn.1400c5150
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], r15
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r15b
jne 0x1400c0d55
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.140015350
lea rcx, [rbp + 0x100]
call fcn.14004aa60
test al, al
jne 0x1400c0c32
jmp case.0x1400c0be9.7
mov r8d, r15d
mov edx, r8d
lea rcx, str._SERVER_:_Got_unknown_packet_of_type__d._n
call fcn.14000a1c0
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x1400c0c32
cmp qword [rdi + 8], r15
je 0x1400c0c32
mov r8, qword [rbp + 0xb8]
xor edx, edx
call fcn.1400102c0
mov rcx, qword [rdi + 8]
call fcn.140010760
jmp 0x1400c0e01
cmp byte [0x140195262], r15b
jne 0x1400c25b5
cmp byte [0x14019525a], r15b
je 0x1400c0e01
xor edx, edx
mov rcx, rdi
call fcn.1400be070
mov byte [0x14019525a], r15b
jmp 0x1400c25b5
mov rcx, rdi
call fcn.1400bdf80
test al, al
je 0x1400c25b5
xor r8d, r8d
lea rdx, [rbp + 0xa0]
mov rcx, qword [rdi]
call fcn.140010790
test eax, eax
jg 0x1400c0b30
movabs rbx, 0x7fffffffffffffff
cmp byte [0x140192bc5], r15b
je 0x1400c16f1
mov rax, qword [0x140193340]
cmp byte [rax + 0x60b9], r15b
je 0x1400c16f1
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
cmp rax, qword [0x140192c10]
jb 0x1400c16f1
add rax, 0xc8
mov qword [0x140192c10], rax
mov eax, dword [0x140192c0c]
cmp eax, 8
jle 0x1400c1674
mov eax, r15d
jmp 0x1400c1676
mov rax, qword [0x140193340]
add rax, 0x5ef0
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], edx
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x120]
mov rcx, rax
call fcn.14001bbe0
mov rdx, qword [rax]
add rdx, 0x18
lea rcx, [rbp + 0x410]
call fcn.140026e40
nop
lea rsi, [rbp + 0x418]
mov r12, qword [rbp + 0x418]
cmp qword [rbp + 0x430], 0x10
cmovae rsi, r12
mov r14, qword [rbp + 0x428]
cmp r14, 9
jb 0x1400c0f57
lea r15, [rsi + r14]
lea r8, [r15 - 8]
sub r8, rsi
mov edx, 0x41
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400c0f57
nop dword [rax]
nop word [rax + rax]
mov r8d, 9
lea rdx, str.Ancestral
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c0f4a
inc rbx
lea r8, [r15 - 8]
sub r8, rbx
mov edx, 0x41
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400c0f10
jmp 0x1400c0f57
sub rbx, rsi
cmp rbx, 0xffffffffffffffff
jne 0x1400c1074
lea rsi, [rbp + 0x418]
cmp qword [rbp + 0x430], 0x10
cmovae rsi, r12
cmp r14, 7
jb 0x1400c0fd7
lea r15, [rsi + r14]
lea r8, [r15 - 6]
sub r8, rsi
mov edx, 0x53
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400c0fd7
mov r8d, 7
lea rdx, str.Samille
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c0fca
inc rbx
lea r8, [r15 - 6]
sub r8, rbx
mov edx, 0x53
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400c0f90
jmp 0x1400c0fd7
sub rbx, rsi
cmp rbx, 0xffffffffffffffff
jne 0x1400c1074
lea rsi, [rbp + 0x418]
cmp qword [rbp + 0x430], 0x10
cmovae rsi, r12
cmp r14, 7
jb 0x1400c104b
lea r8, [r14 - 6]
add r8, rsi
sub r8, rsi
mov edx, 0x43
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400c104b
nop
mov r8d, 7
lea rdx, str.Chakram
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c106b
inc rbx
lea r8, [r14 - 6]
add r8, rsi
sub r8, rbx
mov edx, 0x43
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400c1010
movsx rax, byte [rbp + 0x4a4]
cmp eax, 8
ja case.0x1400c1069.0
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0xc2658]
add rcx, rdx
jmp rcx
sub rbx, rsi
cmp rbx, 0xffffffffffffffff
je 0x1400c104b
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x140192b6c]
jp 0x1400c10a0
jne 0x1400c10a0
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192b6c], xmm0
jmp 0x1400c12cc
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192b6c], xmm0
jmp 0x1400c12cc
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x140192ab8]
jp 0x1400c12b8
jne 0x1400c12b8
xorps xmm0, xmm0
jmp 0x1400c12c0
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x140192abc]
jp 0x1400c110d
jne 0x1400c110d
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192abc], xmm0
jmp 0x1400c12cc
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192abc], xmm0
jmp 0x1400c12cc
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x140192ac0]
jp 0x1400c1152
jne 0x1400c1152
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ac0], xmm0
jmp 0x1400c12cc
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ac0], xmm0
jmp 0x1400c12cc
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x140192ac4]
jp 0x1400c1197
jne 0x1400c1197
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ac4], xmm0
jmp 0x1400c12cc
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ac4], xmm0
jmp 0x1400c12cc
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x140192ac8]
jp 0x1400c11dc
jne 0x1400c11dc
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ac8], xmm0
jmp 0x1400c12cc
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ac8], xmm0
jmp 0x1400c12cc
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x140192acc]
jp 0x1400c1221
jne 0x1400c1221
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192acc], xmm0
jmp 0x1400c12cc
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192acc], xmm0
jmp 0x1400c12cc
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x140192ad0]
jp 0x1400c1263
jne 0x1400c1263
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ad0], xmm0
jmp 0x1400c12cc
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ad0], xmm0
jmp 0x1400c12cc
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x140192ad8]
jp 0x1400c12a2
jne 0x1400c12a2
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ad8], xmm0
jmp 0x1400c12cc
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ad8], xmm0
jmp 0x1400c12cc
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140192ab8], xmm0
cvttss2si ecx, dword [0x140192acc]
call fcn.140007b70
test eax, eax
je 0x1400c12ef
cvttss2si ecx, dword [0x140192acc]
call fcn.140007b70
jmp 0x1400c138c
cvttss2si ecx, dword [0x140192ac8]
call fcn.140007b70
test eax, eax
je 0x1400c130f
cvttss2si ecx, dword [0x140192ac8]
call fcn.140007b70
jmp 0x1400c138c
cvttss2si ecx, dword [0x140192abc]
call fcn.140007b70
test eax, eax
je 0x1400c132f
cvttss2si ecx, dword [0x140192abc]
call fcn.140007b70
jmp 0x1400c138c
cvttss2si ecx, dword [0x140192ad4]
call fcn.140007b70
test eax, eax
je 0x1400c134f
cvttss2si ecx, dword [0x140192ad4]
call fcn.140007b70
jmp 0x1400c138c
cvttss2si ecx, dword [0x140192ad8]
call fcn.140007b70
cvttss2si ecx, dword [0x140192ad8]
test eax, eax
je 0x1400c136f
call fcn.140007b70
jmp 0x1400c138c
call fcn.140007b70
test eax, eax
je 0x1400c1387
cvttss2si ecx, dword [0x140192ad8]
call fcn.140007b70
jmp 0x1400c138c
mov eax, 0x808000
mov dword [0x14018b13c], eax
xorps xmm6, xmm6
movss xmm0, dword [0x140192ad0]
ucomiss xmm0, xmm6
jp 0x1400c13a4
je 0x1400c13ab
mov byte [0x140192b7e], 1
xor r8d, r8d
mov rbx, qword [rsp + 0x50]
mov edx, dword [rbx + 0x114]
mov rcx, rdi
call fcn.1400c45f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], reloc.WS2_32.dll_listen
mov qword [rbp + 0x150], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.OnSetClothing]
movsd qword [rbp + 0x138], xmm0
mov eax, dword [0x14014ccf8]
mov dword [rbp + 0x140], eax
movzx eax, byte [0x14014ccfc]
mov byte [rbp + 0x144], al
mov byte [rbp + 0x145], 0
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x160]
call fcn.140029f90
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0x10
jb 0x1400c1469
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c1464
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c1464
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c100
movss xmm1, dword [0x140192abc]
movss xmm2, dword [0x140192ac0]
mov dword [rbp + 0x1a0], 4
movss xmm0, dword [0x140192ab8]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x1b0], xmm0
movss dword [rbp + 0x1b8], xmm2
movss xmm1, dword [0x140192ac8]
movss xmm2, dword [0x140192acc]
mov dword [rbp + 0x1e0], 4
movss xmm0, dword [0x140192ac4]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x1f0], xmm0
movss dword [rbp + 0x1f8], xmm2
movss xmm1, dword [0x140192ad4]
movss xmm2, dword [0x140192ad8]
mov dword [rbp + 0x220], 4
movss xmm0, dword [0x140192ad0]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x230], xmm0
movss dword [rbp + 0x238], xmm2
mov dword [rbp + 0x260], 9
mov eax, dword [0x14018b12c]
mov dword [rbp + 0x270], eax
movss xmm1, dword [0x14014cd5c]
mov dword [rbp + 0x2a0], 4
movss xmm0, dword [0x140192b6c]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x2b0], xmm0
movss dword [rbp + 0x2b8], xmm6
mov dword [rsp + 0x20], 0xffffffff
mov r9d, dword [rbx + 0x114]
lea r8, [rbp + 0x160]
mov dl, 1
mov rcx, qword [0x140193340]
call fcn.1400c42e0
movss xmm0, dword [0x140192ab8]
movss dword [rbp + 0xc0], xmm0
movss xmm1, dword [0x140192abc]
movss dword [rbp + 0xc4], xmm1
movss xmm0, dword [0x140192ac0]
movss dword [rbp + 0xc8], xmm0
movss xmm1, dword [0x140192ac4]
movss dword [rbp + 0xcc], xmm1
movss xmm0, dword [0x140192ac8]
movss dword [rbp + 0xd0], xmm0
movss xmm1, dword [0x140192acc]
movss dword [rbp + 0xd4], xmm1
movss xmm0, dword [0x140192ad0]
movss dword [rbp + 0xd8], xmm0
movss xmm1, dword [0x140192ad4]
movss dword [rbp + 0xdc], xmm1
movss xmm0, dword [0x140192ad8]
movss dword [rbp + 0xe0], xmm0
mov eax, dword [0x14018b12c]
mov dword [rbp + 0xe4], eax
movss xmm0, dword [0x140192b6c]
movss dword [rbp + 0xe8], xmm0
mov qword [rbp + 0xec], 0x3f800000
lea rdx, [rbp + 0xc0]
lea rcx, [0x14018c960]
call fcn.1400075d0
mov rcx, qword [rbp + 0xb8]
call fcn.14000f240
nop
lea r9, [fcn.140006cd0]
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rbp + 0x160]
call fcn.14012bff4
nop
lea rcx, [rbp + 0x410]
call fcn.14002c100
jmp 0x1400c25b5
inc eax
mov dword [0x140192c0c], eax
movsxd r8, eax
shl r8, 5
add r8, qword [0x140193460]
mov rcx, qword [r8 + 0x10]
mov rax, rbx
sub rax, rcx
cmp rax, 0x15
jb 0x1400c260f
mov rax, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1400c16ab
mov rax, qword [r8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_setsockopt
lea r9, str.actionsetSkin_ncolor
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xc0]
call fcn.140006900
mov r9d, 2
lea r8, [rbp + 0xc0]
xor edx, edx
mov rcx, qword [0x140193340]
call fcn.1400c4520
cmp byte [0x140192c2c], r15b
je 0x1400c18cb
mov rax, qword [0x140193340]
cmp byte [rax + 0x60b9], r15b
je 0x1400c18cb
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdi, rax
cmp rax, qword [0x140192c18]
jb 0x1400c18cb
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x88888889
imul r8d
add edx, r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xf
sub r8d, ecx
movsxd rcx, r8d
add rcx, 0x12c
add rcx, rdi
mov qword [0x140192c18], rcx
mov eax, dword [0x14018c5c8]
cmp eax, 0x20
jne 0x1400c182d
mov rdx, qword [0x140193340]
movss xmm0, dword [rdx + 0x6010]
mulss xmm0, dword [0x14015a120]
addss xmm0, dword [0x14014cd5c]
cvttss2si edi, xmm0
movss xmm0, dword [rdx + 0x6014]
mulss xmm0, dword [0x14015a120]
cvttss2si esi, xmm0
imul eax, esi, 0x64
add eax, edi
movsxd rcx, eax
mov rax, qword [rdx + 0x5f6c]
mov r9, qword [rax + rcx*8]
movzx r8d, word [r9]
mov ecx, dword [reloc.WS2_32.dll_bind]
cmp r8d, ecx
je 0x1400c18b9
movzx eax, word [r9 + 2]
cmp eax, ecx
je 0x1400c18b9
test r8w, r8w
jne 0x1400c18cb
lea rax, [rdx + 0x5df0]
cmp byte [0x140192c30], r15b
je 0x1400c17fd
mov edx, 0x1608
jmp 0x1400c18be
mov dword [rsp + 0x48], ecx
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x120]
mov rcx, rax
call fcn.14001b9a0
mov rcx, qword [rax]
cmp byte [rcx + 0x16], r15b
jbe 0x1400c18cb
mov edx, dword [reloc.WS2_32.dll_bind]
jmp 0x1400c18be
cmp eax, 0x30
jne 0x1400c18cb
mov rdx, qword [0x140193340]
movss xmm0, dword [rdx + 0x6010]
mulss xmm0, dword [0x14015a120]
subss xmm0, dword [0x14014cd5c]
cvttss2si edi, xmm0
movss xmm0, dword [rdx + 0x6014]
mulss xmm0, dword [0x14015a120]
cvttss2si esi, xmm0
imul eax, esi, 0x64
add eax, edi
movsxd rcx, eax
mov rax, qword [rdx + 0x5f6c]
mov r9, qword [rax + rcx*8]
movzx r8d, word [r9]
mov ecx, dword [reloc.WS2_32.dll_bind]
cmp r8d, ecx
je 0x1400c18b9
movzx eax, word [r9 + 2]
cmp eax, ecx
je 0x1400c18b9
test r8w, r8w
jne 0x1400c18cb
lea rax, [rdx + 0x5df0]
cmp byte [0x140192c30], r15b
je 0x1400c17fd
mov edx, 0x1608
jmp 0x1400c18be
mov edx, reloc.WS2_32.dll_select
mov r9d, esi
mov r8d, edi
xor ecx, ecx
call fcn.1400c3bd0
mov esi, 0x6260
cmp byte [0x140195267], r15b
je 0x1400c1ce1
cmp byte [0x140195260], r15b
je 0x1400c1ce1
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdi, rax
cmp rax, qword [0x140192bf0]
jb 0x1400c1ce1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], rax
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x170], xmm1
lea r8d, [rax + 2]
lea rdx, [0x14014d03c]
lea rcx, [rbp + 0x160]
call fcn.140015350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x190], xmm1
mov r8d, 2
lea rdx, [0x140151034]
lea rcx, [rbp + 0x180]
call fcn.140015350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1b0], xmm1
mov r8d, 2
lea rdx, [0x140151038]
lea rcx, [rbp + 0x1a0]
call fcn.140015350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1d0], xmm1
mov r8d, 2
lea rdx, [0x14015103c]
lea rcx, [rbp + 0x1c0]
call fcn.140015350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1f0], xmm1
mov r8d, 2
lea rdx, [0x14014d040]
lea rcx, [rbp + 0x1e0]
call fcn.140015350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x210], xmm1
mov r8d, 2
lea rdx, [0x140151040]
lea rcx, [rbp + 0x200]
call fcn.140015350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x230], xmm1
mov r8d, 2
lea rdx, [0x140151044]
lea rcx, [rbp + 0x220]
call fcn.140015350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x250], xmm1
mov r8d, 2
lea rdx, [0x140150c6c]
lea rcx, [rbp + 0x240]
call fcn.140015350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x270], xmm1
mov r8d, 2
lea rdx, [0x140151048]
lea rcx, [rbp + 0x260]
call fcn.140015350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], 2
mov qword [rbp + 0x298], reloc.WS2_32.dll_ntohs
mov word [rbp + 0x280], si
mov byte [rbp + 0x282], 0
lea rax, [rbp + 0x160]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x138]
call fcn.1400ba990
nop
lea r9, [fcn.140006b70]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x16]
lea rcx, [rbp + 0x160]
call fcn.14012bff4
call fcn.14012bf11
mov edx, eax
lea rcx, [rbp + 0x19c0]
call fcn.1400258b0
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x4c], 8
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x320]
call fcn.1400ba720
nop
lea rdx, [rbp + 0x19c0]
lea rcx, [rsp + 0x48]
call fcn.1400147f0
movsxd rdx, eax
shl rdx, 5
add rdx, qword [rbp + 0x138]
lea rcx, [rbp + 0x100]
call fcn.140006820
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.OnTextOverlay
lea rcx, [rbp + 0xc0]
call fcn.140015350
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x630]
call fcn.140029f90
nop
lea rcx, [rbp + 0xc0]
call fcn.140006b70
mov rax, rbx
mov rcx, qword [rbp + 0x110]
sub rax, rcx
cmp rax, 0x12
jb 0x1400c2615
lea r9, [rbp + 0x100]
cmp qword [rbp + 0x118], 0x10
cmovae r9, qword [rbp + 0x100]
mov qword [rsp + 0x30], reloc.WS2_32.dll_select
lea rax, str.Auto_Collecting...
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x100]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xc0]
call fcn.140006900
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x670]
call fcn.14002ef60
nop
lea rcx, [rbp + 0xc0]
call fcn.140006b70
mov dword [rsp + 0x20], r15d
mov r9d, 0xffffffff
lea r8, [rbp + 0x630]
mov dl, 1
mov rcx, qword [0x140193340]
call fcn.1400c42e0
lea rax, [rdi + 0x3e8]
mov qword [0x140192bf0], rax
lea r9, [fcn.140006cd0]
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rbp + 0x630]
call fcn.14012bff4
nop
lea rcx, [rbp + 0x100]
call fcn.140006b70
nop
lea rcx, [rbp + 0x320]
call fcn.1400326c0
nop
lea rcx, [rbp + 0x138]
call fcn.14003eb60
cmp byte [0x1401964b7], 0
je 0x1400c21eb
mov rax, qword [0x140193340]
cmp byte [rax + 0x60b9], 0
je 0x1400c21eb
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov r14, rax
cmp rax, qword [0x1401964e0]
jb 0x1400c21eb
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 2
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov eax, 0x3260
mov word [rsp + 0x60], ax
mov byte [rsp + 0x62], 0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], 2
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov eax, 0x3360
mov word [rbp - 0x80], ax
mov byte [rbp - 0x7e], 0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], 2
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov eax, 0x3460
mov word [rbp - 0x60], ax
mov byte [rbp - 0x5e], 0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], 2
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov eax, 0x2360
mov word [rbp - 0x40], ax
mov byte [rbp - 0x3e], 0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], 2
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov eax, 0x3960
mov word [rbp - 0x20], ax
mov byte [rbp - 0x1e], 0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], 2
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov eax, 0x3860
mov word [rbp], ax
mov byte [rbp + 2], 0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], 2
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov eax, 0x6360
mov word [rbp + 0x20], ax
mov byte [rbp + 0x22], 0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], 2
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov eax, 0x3660
mov word [rbp + 0x40], ax
mov byte [rbp + 0x42], 0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], 2
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov eax, 0x5e60
mov word [rbp + 0x60], ax
mov byte [rbp + 0x62], 0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], 2
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
mov word [rbp + 0x80], si
mov byte [rbp + 0x82], 0
movdqu xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r15
mov ecx, pe_nt_image_headers64
call fcn.14012c0c4
mov rdi, rax
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x128], rax
lea rcx, [rax + 0x140]
mov qword [rbp + 0x130], rcx
lea rax, [rbp + 0x120]
mov qword [rsp + 0x50], rax
lea rsi, [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x138], rdi
mov qword [rbp + 0x140], rdi
lea rax, [rbp + 0x120]
mov qword [rbp + 0x148], rax
mov rdx, rsi
mov rcx, rdi
call fcn.140006820
add rdi, 0x20
mov qword [rbp + 0x140], rdi
add rsi, 0x20
lea rax, [rbp + 0xa0]
cmp rsi, rax
jne 0x1400c1ee3
lea r8, [rbp + 0x120]
mov rdx, rdi
mov rcx, rdi
call fcn.1400158d0
mov qword [rbp + 0x128], rdi
lea r9, [fcn.140006b70]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x60]
call fcn.14012bff4
call fcn.14012bf11
mov dword [rbp + 0x19b4], 0xffffffff
mov dword [rbp + 0x634], eax
mov r9d, 1
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, r9d
mov dword [rbp + r9*4 + 0x634], eax
inc r9
cmp r9, 0x270
jb 0x1400c1f60
mov dword [rbp + 0x630], 0x270
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x320]
call fcn.1400ba720
nop
lea rax, [rbp + 0x630]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x48]
call fcn.14003c1b0
mov ecx, eax
lea rdx, [rcx + rcx*8]
cmp edx, 3
ja 0x1400c1fea
lea rcx, [rsp + 0x48]
call fcn.14003c1b0
mov ecx, eax
lea rdx, [rcx + rcx*8]
cmp edx, 4
jb 0x1400c1fd5
shr rdx, 0x20
shl rdx, 5
add rdx, qword [rbp + 0x120]
lea rcx, [rbp + 0x100]
call fcn.140006820
nop
lea rdx, str.actioninput_ntext
lea rcx, [rbp + 0x320]
call fcn.140006250
cmp byte [0x140192bb1], 0
je 0x1400c204c
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0x10
cmovae rdx, qword [rbp + 0x100]
mov r8, qword [rbp + 0x110]
lea rcx, [rbp + 0x320]
call fcn.140019220
lea rdx, [0x140193440]
cmp qword [0x140193458], 0x10
cmovae rdx, qword [0x140193440]
mov r8, qword [0x140193450]
lea rcx, [rbp + 0x320]
call fcn.140019220
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x328]
call fcn.1400a5020
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x138]
call fcn.140006820
mov r9d, 2
mov r8, rax
xor edx, edx
mov rcx, qword [0x140193340]
call fcn.1400c4520
mov rcx, qword [0x14018c8d0]
add rcx, r14
mov qword [0x1401964e0], rcx
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x1400c2109
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c2104
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c2104
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c100
movdqa xmm0, xmmword [0x14014cf40]
movdqu xmmword [rbp + 0xd0], xmm0
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0x10
jb 0x1400c2164
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c215f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c215f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c100
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x100], 0
lea rcx, [rbp + 0x320]
call fcn.1400326c0
nop
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x1400c21eb
lea r8, [rbp + 0x120]
mov rdx, qword [rbp + 0x128]
call fcn.1400158d0
mov rdx, qword [rbp + 0x130]
mov rcx, qword [rbp + 0x120]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c21e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c21e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012c100
mov rax, qword [0x140193340]
cmp byte [rax + 0x60b9], 0
je 0x1400c25a9
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdi, rax
mov ecx, dword [0x140192ca8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1400c2282
lea r12, [0x1401931f0]
mov rcx, r12
mov r14, qword [0x1401931f0]
mov r15, qword [0x140193208]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140193200]
test rsi, rsi
jne 0x1400c225a
mov r8, rsi
lea rdx, [0x14014cf81]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c2282
cmp dword [0x140192ca8], 8
jle 0x1400c2282
cmp rdi, qword [0x140192cc8]
jb 0x1400c25a9
sub rbx, rsi
cmp rbx, 0x14
jb 0x1400c25eb
jmp 0x1400c2556
mov ecx, dword [0x140192cac]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1400c22fc
lea r12, [0x1401934d8]
mov rcx, r12
mov r14, qword [0x1401934d8]
mov r15, qword [0x1401934f0]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x1401934e8]
test rsi, rsi
jne 0x1400c22d4
mov r8, rsi
lea rdx, [0x14014cf81]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c22fc
cmp dword [0x140192cac], 8
jle 0x1400c22fc
cmp rdi, qword [0x140192cc8]
jb 0x1400c25a9
sub rbx, rsi
cmp rbx, 0x14
jb 0x1400c25f1
jmp 0x1400c2556
mov ecx, dword [0x140192cb0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1400c2376
lea r12, [0x140193b78]
mov rcx, r12
mov r14, qword [0x140193b78]
mov r15, qword [0x140193b90]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140193b88]
test rsi, rsi
jne 0x1400c234e
mov r8, rsi
lea rdx, [0x14014cf81]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c2376
cmp dword [0x140192cb0], 8
jle 0x1400c2376
cmp rdi, qword [0x140192cc8]
jb 0x1400c25a9
sub rbx, rsi
cmp rbx, 0x14
jb 0x1400c25f7
jmp 0x1400c2556
mov ecx, dword [0x140192cb4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1400c23f0
lea r12, [0x140193a00]
mov rcx, r12
mov r14, qword [0x140193a00]
mov r15, qword [0x140193a18]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140193a10]
test rsi, rsi
jne 0x1400c23c8
mov r8, rsi
lea rdx, [0x14014cf81]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c23f0
cmp dword [0x140192cb4], 8
jle 0x1400c23f0
cmp rdi, qword [0x140192cc8]
jb 0x1400c25a9
sub rbx, rsi
cmp rbx, 0x14
jb 0x1400c25fd
jmp 0x1400c2556
mov ecx, dword [0x140192cb8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1400c246a
lea r12, [0x140193080]
mov rcx, r12
mov r14, qword [0x140193080]
mov r15, qword [0x140193098]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140193090]
test rsi, rsi
jne 0x1400c2442
mov r8, rsi
lea rdx, [0x14014cf81]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c246a
cmp dword [0x140192cb8], 8
jle 0x1400c246a
cmp rdi, qword [0x140192cc8]
jb 0x1400c25a9
sub rbx, rsi
cmp rbx, 0x14
jb 0x1400c2603
jmp 0x1400c2556
mov ecx, dword [0x140192cbc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1400c24e1
lea r12, [0x140192dc8]
mov rcx, r12
mov r14, qword [0x140192dc8]
mov r15, qword [0x140192de0]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140192dd8]
test rsi, rsi
jne 0x1400c24bc
mov r8, rsi
lea rdx, [0x14014cf81]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c24e1
cmp dword [0x140192cbc], 8
jle 0x1400c24e1
cmp rdi, qword [0x140192cc8]
jb 0x1400c25a9
sub rbx, rsi
cmp rbx, 0x14
jb 0x1400c2609
jmp 0x1400c2556
mov ecx, dword [0x140192cc0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1400c25a9
lea r12, [0x140193348]
mov rcx, r12
mov r14, qword [0x140193348]
mov r15, qword [0x140193360]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140193358]
test rsi, rsi
jne 0x1400c2537
mov r8, rsi
lea rdx, [0x14014cf81]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400c25a9
cmp dword [0x140192cc0], 8
jle 0x1400c25a9
cmp rdi, qword [0x140192cc8]
jb 0x1400c25a9
sub rbx, rsi
cmp rbx, 0x14
jb 0x1400c25e5
mov rax, r12
cmp r15, 0x10
mov qword [rsp + 0x30], rsi
cmovae rax, r14
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_sendto
lea r9, str.actioninput_ntext_
mov r8, r12
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xc0]
call fcn.140006900
lea rcx, [rbp + 0xc0]
call fcn.14004aa60
lea rax, [rdi + 0xc8]
mov qword [0x140192cc8], rax
lea rcx, [0x14018c960]
call fcn.140009d10
mov rcx, qword [rbp + 0x2d50]
xor rcx, rsp
call fcn.14012c470
lea r11, [rsp + 0x2e70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140007990
int3
call fcn.140007990
int3
call fcn.140007990
int3
call fcn.140007990
int3
call fcn.140007990
int3
call fcn.140007990
int3
call fcn.140007990
int3
call fcn.140007990
nop
call fcn.140007990
nop
nop
or al, 0xc
add byte [rcx - 218100724], ah
or ecx, dword [rax + rax]
jmp 0x1400c2635
or al, 0xc
add byte [rbp + 0xc0d], dl
add dword [rdi], eax
add al, byte [rdi]
invalid