Function at 0x14005d410
Capabilities:
Check for time delay via gettickcount
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x14c0]
mov eax, 0x15c0
call fcn.1400d6350
sub rsp, rax
movaps xmmword [rsp + 0x15b0], xmm6
movaps xmmword [rsp + 0x15a0], xmm7
mov rdi, rcx
xor ebx, ebx
lea rcx, [rbp - 0x80]
call fcn.14006d500
nop
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1494], 0xffffffff
mov dword [rbp + 0x114], eax
lea edx, [rbx + 1]
nop dword [rax]
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x114], eax
inc rdx
cmp rdx, 0x270
jb 0x14005d480
mov dword [rbp + 0x110], 0x270
lea rcx, [rbp + 0x110]
call fcn.140070ba0
mov ecx, eax
imul rax, rcx, 0x899
cmp eax, 0x785
ja 0x14005d4ec
nop dword [rax + rax]
lea rcx, [rbp + 0x110]
call fcn.140070ba0
mov ecx, eax
imul rax, rcx, 0x899
cmp eax, 0x786
jb 0x14005d4d0
shr rax, 0x20
add eax, 0x320
mov dword [rbp + 0x1510], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x78], eax
movss xmm7, dword [0x14011c4e4]
movaps xmm6, xmm7
mov dword [rbp + 0x1518], ebx
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x28], xmm0
mov rax, rbx
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x18], rbx
cmp byte [0x140131a5e], 0
je 0x14005e990
mov r8d, dword [rbp + 0x1504]
lea r9d, [r8 - 5]
mov dword [rbp - 0x38], r9d
movzx esi, byte [rbp + 0x1510]
movzx r14d, byte [rbp + 0x1510]
movzx r15d, byte [rbp + 0x1510]
movzx r12d, byte [rbp + 0x1510]
movzx r13d, byte [rbp + 0x1510]
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x40], rax
nop word [rax + rax]
mov eax, edi
mov rbx, qword [0x140131df8]
sub eax, ebx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov eax, r8d
mov ecx, dword [0x140131dfc]
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14005d5c1
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14005d5da
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov ecx, dword [0x140131dfc]
mov r8d, dword [rbp + 0x1504]
mov r9d, dword [rbp - 0x38]
movss dword [0x140131b48], xmm0
cmp ecx, r9d
jge 0x14005d723
lea eax, [rdi - 5]
cmp ebx, eax
jge 0x14005d687
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rbp - 0x70]
sub rax, rcx
cmp rax, 0x38
jb 0x14005ea39
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], gethostname
lea r9, [0x140112660]
movzx edx, sil
jmp 0x14005dacc
lea eax, [rdi + 5]
cmp ebx, eax
jle 0x14005d723
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rbp - 0x70]
sub rax, rcx
cmp rax, 0x36
jb 0x14005ea39
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], gethostname
lea r9, [0x1401126a0]
movzx edx, r14b
jmp 0x14005dacc
lea edx, [r8 + 5]
cmp ecx, edx
jle 0x14005d867
lea eax, [rdi - 5]
cmp ebx, eax
jge 0x14005d7cb
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rbp - 0x70]
sub rax, rcx
cmp rax, 0x3a
jb 0x14005ea39
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], Ordinal_60
lea r9, [0x1401126d8]
movzx edx, r12b
jmp 0x14005dacc
lea eax, [rdi + 5]
cmp ebx, eax
jle 0x14005d867
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rbp - 0x70]
sub rax, rcx
cmp rax, 0x38
jb 0x14005ea39
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], gethostname
lea r9, [0x140112718]
movzx edx, r13b
jmp 0x14005dacc
cmp ecx, r9d
jge 0x14005d902
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rbp - 0x70]
sub rax, rcx
cmp rax, 0x20
jb 0x14005ea39
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + reloc.WLDAP32.dll_Ordinal_32], 0x20
lea r9, [0x140112758]
movzx edx, r15b
jmp 0x14005dacc
cmp ecx, edx
jle 0x14005d998
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rbp - 0x70]
sub rax, rcx
cmp rax, 0x22
jb 0x14005ea39
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], Ordinal_41
lea r9, [0x140112780]
jmp 0x14005dac5
lea eax, [rdi + 5]
cmp ebx, eax
jle 0x14005da31
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rbp - 0x70]
sub rax, rcx
cmp rax, 0x22
jb 0x14005ea39
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], Ordinal_41
lea r9, [0x1401127a8]
jmp 0x14005dac5
lea eax, [rdi - 5]
cmp ebx, eax
jge 0x14005db32
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rbp - 0x70]
sub rax, rcx
cmp rax, 0x24
jb 0x14005ea39
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], Ordinal_41
lea r9, [0x1401127d0]
movzx edx, byte [rbp + 0x1510]
lea r8, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.14006f590
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x14005db1a
inc rdx
cmp rdx, 0x1000
mov rcx, qword [0x140130860]
jb 0x14005db15
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005e923
mov rcx, r8
call fcn.1400d5b38
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [0x140130860], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [0x140130870], xmm1
jmp 0x14005db5e
lea eax, [rdi - 6]
cmp ebx, eax
jle 0x14005db54
lea eax, [rdi + 6]
cmp ebx, eax
jge 0x14005db54
lea eax, [r8 - 6]
cmp ecx, eax
jle 0x14005db54
lea eax, [r8 + 6]
cmp ecx, eax
jl 0x14005e829
movabs rbx, 0x7fffffffffffffff
call fcn.140056f90
test al, al
jne 0x14005dbd1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, Ordinal_79
call qword [sym.imp.USER32.dll_keybd_event]
lea rcx, [rbp + 0x28]
call fcn.1400415e0
mov rax, qword [rbp + 0x28]
movabs rdx, 0x7ffffffffa0a1eff
cmp rax, rdx
je 0x14005dbb1
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005dbb1
add rax, 0x5f5e100
mov qword [rsp + 0x70], rax
jmp 0x14005dbb6
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_79
call qword [sym.imp.USER32.dll_keybd_event]
movss xmm0, dword [0x140131b48]
comiss xmm6, xmm0
jbe 0x14005dc06
movaps xmm6, xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x78], eax
mov rax, qword [rbp - 0x28]
cmp rax, qword [rbp - 0x40]
je 0x14005e00f
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x20], rax
jmp 0x14005e00f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rsp + 0x78]
cmp eax, 0x7d0
jbe 0x14005e00f
inc dword [0x140131b10]
mov ebx, dword [rbp + 0x1518]
mov r8d, ebx
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x28]
call fcn.1400d5a40
mov rcx, qword [rbp - 0x40]
cmp rax, rcx
je 0x14005dc4d
cmp qword [rbp - 0x28], rcx
cmovne rcx, qword [rbp - 0x28]
mov qword [rbp - 0x20], rcx
inc ebx
and ebx, 0x80000003
jge 0x14005dc5e
dec ebx
or ebx, 0xfffffffc
inc ebx
lea eax, [rbx + 6]
mov dword [rbp + 0x1518], eax
mov dword [rsp + 0x78], eax
cmp rcx, qword [rbp - 0x30]
je 0x14005dc81
mov dword [rcx], eax
add rcx, 4
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x20], rcx
jmp 0x14005dca8
lea r8, [rsp + 0x78]
mov rdx, rcx
lea rcx, [rbp - 0x28]
call fcn.140070410
mov rax, qword [rbp - 0x18]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x40], rax
mov eax, dword [rbp + 0x1518]
cmp eax, 6
jne 0x14005dd82
xor r9d, r9d
xor edx, edx
lea r8d, [rax - 4]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
mov r8d, Ordinal_50
lea rdx, [0x140112818]
lea rcx, [0x140130860]
call fcn.14006c8d0
mov ebx, dword [rbp + 0x1510]
lea rcx, [rbp + 0x30]
call fcn.1400415e0
mov rax, qword [rbp + 0x30]
mov qword [rsp + 0x78], rax
imul r8, rbx, 0xf4240
movabs rbx, 0x7fffffffffffffff
mov rcx, rbx
sub rcx, r8
cmp rax, rcx
je 0x14005dd6c
mov edx, 1
mov ecx, 0xff
cmovl edx, ecx
test dl, dl
jns 0x14005dd6c
lea rcx, [rax + r8]
mov qword [rsp + 0x78], rcx
lea rcx, [rsp + 0x78]
call fcn.14006fdc0
mov cl, 0x27
jmp 0x14005dff3
mov qword [rsp + 0x78], rbx
lea rcx, [rsp + 0x78]
call fcn.14006fdc0
mov cl, 0x27
jmp 0x14005dff3
cmp ebx, 2
jne 0x14005de57
xor r9d, r9d
xor edx, edx
mov r8d, ebx
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
mov r8d, ebx
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
mov r8d, ebx
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
lea r8d, [rbx + 0x2d]
lea rdx, [0x140112850]
lea rcx, [0x140130860]
call fcn.14006c8d0
mov ebx, dword [rbp + 0x1510]
lea rcx, [rbp + 0x38]
call fcn.1400415e0
mov rax, qword [rbp + 0x38]
mov qword [rsp + 0x78], rax
imul r8, rbx, 0xf4240
movabs rbx, 0x7fffffffffffffff
mov rcx, rbx
sub rcx, r8
cmp rax, rcx
je 0x14005de41
mov edx, 1
mov ecx, 0xff
cmovl edx, ecx
test dl, dl
jns 0x14005de41
lea rcx, [rax + r8]
mov qword [rsp + 0x78], rcx
lea rcx, [rsp + 0x78]
call fcn.14006fdc0
mov cl, 0x26
jmp 0x14005dff3
mov qword [rsp + 0x78], rbx
lea rcx, [rsp + 0x78]
call fcn.14006fdc0
mov cl, 0x26
jmp 0x14005dff3
cmp ebx, 1
jne 0x14005df2f
xor r9d, r9d
xor edx, edx
lea r8d, [rbx + 1]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [rbx + 1]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [rbx + 1]
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
lea r8d, [rbx + 0x2e]
lea rdx, [0x140112880]
lea rcx, [0x140130860]
call fcn.14006c8d0
mov ebx, dword [rbp + 0x1510]
lea rcx, [rbp + 0x40]
call fcn.1400415e0
mov rax, qword [rbp + 0x40]
mov qword [rsp + 0x78], rax
imul r8, rbx, 0xf4240
movabs rbx, 0x7fffffffffffffff
mov rcx, rbx
sub rcx, r8
cmp rax, rcx
je 0x14005df19
mov edx, 1
mov ecx, 0xff
cmovl edx, ecx
test dl, dl
jns 0x14005df19
lea rcx, [rax + r8]
mov qword [rsp + 0x78], rcx
lea rcx, [rsp + 0x78]
call fcn.14006fdc0
mov cl, 0x25
jmp 0x14005dff3
mov qword [rsp + 0x78], rbx
lea rcx, [rsp + 0x78]
call fcn.14006fdc0
mov cl, 0x25
jmp 0x14005dff3
cmp ebx, 3
jne 0x14005e002
xor r9d, r9d
xor edx, edx
lea r8d, [rbx - 1]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [rbx - 1]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [rbx - 1]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
lea r8d, [rbx + 0x2a]
lea rdx, [0x1401128b0]
lea rcx, [0x140130860]
call fcn.14006c8d0
lea rcx, [rbp + 0x48]
call fcn.1400415e0
mov rax, qword [rbp + 0x48]
mov qword [rsp + 0x78], rax
mov ecx, dword [rbp + 0x1510]
imul r8, rcx, 0xf4240
movabs rbx, 0x7fffffffffffffff
mov rcx, rbx
sub rcx, r8
cmp rax, rcx
je 0x14005dfe2
mov edx, 1
mov ecx, 0xff
cmovl edx, ecx
test dl, dl
jns 0x14005dfe2
lea rcx, [r8 + rax]
mov qword [rsp + 0x78], rcx
jmp 0x14005dfe7
mov qword [rsp + 0x78], rbx
lea rcx, [rsp + 0x78]
call fcn.14006fdc0
mov cl, Ordinal_41
xor r9d, r9d
lea r8d, [r9 + 2]
xor edx, edx
call qword [sym.imp.USER32.dll_keybd_event]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x78], eax
movaps xmm6, xmm7
cmp dword [0x140131b10], 0x28
jl 0x14005e7a1
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
call fcn.140058fd0
test al, al
jne 0x14005e208
call fcn.140056f90
test al, al
jne 0x14005e217
call fcn.140057250
test al, al
jne 0x14005e208
lea rcx, [rbp + 0x50]
call fcn.1400415e0
mov rax, qword [rbp + 0x50]
movabs rdx, 0x7ffffffffa0a1eff
cmp rax, rdx
je 0x14005e0cb
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005e0cb
add rax, 0x5f5e100
mov qword [rsp + 0x70], rax
movabs rbx, 0x7fffffffffffffff
jmp 0x14005e0da
movabs rbx, 0x7fffffffffffffff
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x41
call qword [sym.imp.USER32.dll_keybd_event]
lea rcx, [rbp + 0x58]
call fcn.1400415e0
mov rax, qword [rbp + 0x58]
movabs rdx, 0x7ffffffffa0a1eff
cmp rax, rdx
je 0x14005e12e
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005e12e
add rax, 0x5f5e100
mov qword [rsp + 0x70], rax
jmp 0x14005e133
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x41
call qword [sym.imp.USER32.dll_keybd_event]
lea rcx, [rbp + 0x60]
call fcn.1400415e0
mov rax, qword [rbp + 0x60]
movabs rdx, 0x7ffffffef3c772ff
cmp rax, rdx
je 0x14005e18f
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005e18f
movabs rcx, 0x10c388d00
add rcx, rax
mov qword [rsp + 0x70], rcx
jmp 0x14005e194
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, Ordinal_79
call qword [sym.imp.USER32.dll_keybd_event]
lea rcx, [rbp + 0x68]
call fcn.1400415e0
mov rax, qword [rbp + 0x68]
movabs rdx, 0x7ffffffffa0a1eff
cmp rax, rdx
je 0x14005e1e8
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005e1e8
add rax, 0x5f5e100
mov qword [rsp + 0x70], rax
jmp 0x14005e1ed
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_79
call qword [sym.imp.USER32.dll_keybd_event]
mov dword [0x140131b10], 0
jmp 0x14005e80c
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, Ordinal_79
call qword [sym.imp.USER32.dll_keybd_event]
lea rcx, [rbp + 0x70]
call fcn.1400415e0
mov rax, qword [rbp + 0x70]
movabs rdx, 0x7ffffffffa0a1eff
cmp rax, rdx
je 0x14005e26b
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005e26b
add rax, 0x5f5e100
mov qword [rsp + 0x70], rax
movabs rbx, 0x7fffffffffffffff
jmp 0x14005e27a
movabs rbx, 0x7fffffffffffffff
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_79
call qword [sym.imp.USER32.dll_keybd_event]
call fcn.140057250
test al, al
jne 0x14005e426
lea rcx, [rbp + 0x78]
call fcn.1400415e0
mov rax, qword [rbp + 0x78]
movabs rdx, 0x7ffffffffa0a1eff
cmp rax, rdx
je 0x14005e2dc
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005e2dc
add rax, 0x5f5e100
mov qword [rsp + 0x70], rax
jmp 0x14005e2e1
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, 0x41
call qword [sym.imp.USER32.dll_keybd_event]
lea rcx, [rbp + 0x80]
call fcn.1400415e0
mov rax, qword [rbp + 0x80]
movabs rdx, 0x7ffffffffa0a1eff
cmp rax, rdx
je 0x14005e33b
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005e33b
add rax, 0x5f5e100
mov qword [rsp + 0x70], rax
jmp 0x14005e340
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x41
call qword [sym.imp.USER32.dll_keybd_event]
lea rcx, [rbp + 0x88]
call fcn.1400415e0
mov rax, qword [rbp + 0x88]
movabs rdx, 0x7ffffffef3c772ff
cmp rax, rdx
je 0x14005e3a2
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005e3a2
movabs rcx, 0x10c388d00
add rcx, rax
mov qword [rsp + 0x70], rcx
jmp 0x14005e3a7
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov cl, Ordinal_79
call qword [sym.imp.USER32.dll_keybd_event]
lea rcx, [rbp + 0x90]
call fcn.1400415e0
mov rax, qword [rbp + 0x90]
movabs rdx, 0x7ffffffffa0a1eff
cmp rax, rdx
je 0x14005e401
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005e401
add rax, 0x5f5e100
mov qword [rsp + 0x70], rax
jmp 0x14005e406
mov qword [rsp + 0x70], rbx
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_79
call qword [sym.imp.USER32.dll_keybd_event]
jmp 0x14005e80c
xorps xmm0, xmm0
xor ebx, ebx
lea ecx, [rbx + 0x40]
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rbx
mov qword [rbp - 0x48], rbx
cmp byte [0x140131b47], bl
je 0x14005e62b
call fcn.1400d5ea0
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], Ordinal_50
mov qword [rbp - 0x48], 0x3f
movups xmm0, xmmword [0x140112350]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140112360]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140112370]
movups xmmword [rax + 0x20], xmm0
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rax + 0x30], cl
mov byte [rax + 0x31], bl
cmp byte [0x140131a3c], bl
je 0x14005e5e6
cmp qword [0x140131a68], rbx
je 0x14005e5e6
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], bl
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x70], rax
movdqu xmmword [rbp + 0xc8], xmm0
lea rdx, [0x140131b68]
cmp qword [0x140131b80], 0xf
cmova rdx, qword [0x140131b68]
mov r8, qword [0x140131b78]
lea rcx, [rbp - 0x60]
call fcn.14006ca40
mov rcx, qword [0x140131a68]
mov qword [rbp + 0xa8], rcx
mov dword [rbp + 0xa0], ebx
mov dword [rsp + 0x60], ebx
mov byte [rsp + 0x58], bl
mov byte [rsp + 0x50], bl
lea rcx, [rbp - 0x10]
mov qword [rsp + 0x48], rcx
mov byte [rsp + 0x40], bl
lea rcx, [rbp + 8]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ebx
mov byte [rsp + 0x20], bl
mov r9, rax
lea r8, [rbp + 0xa0]
lea rdx, [rbp + 0xe8]
lea rcx, [0x140131cb0]
call qword [sym.imp.TgBot.dll__sendMessage_Api_TgBot__QEBA_AV__shared_ptr_VMessage_TgBot___std__V__variant__JV__basic_string_DU__char_traits_D]
lea rcx, [rbp + 0xe8]
call fcn.140043140
nop
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x14005e5af
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e5aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e92a
call fcn.1400d5b38
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], 0
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x14005e5e6
mov rdx, qword [rbp - 8]
call fcn.14006e8c0
mov r8, qword [rbp]
mov rdx, qword [rbp - 0x10]
sub r8, rdx
sar r8, 4
call fcn.14006d3a0
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14005e799
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e794
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005e794
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d5ea0
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], reloc.WLDAP32.dll_Ordinal_50
mov qword [rbp - 0x48], 0x3f
movups xmm0, xmmword [str.______:]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140112398]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1401123a8]
movups xmmword [rax + 0x20], xmm0
movzx ecx, word [0x1401123b8]
mov word [rax + 0x30], cx
mov byte [rax + 0x32], bl
cmp byte [0x140131a3c], 0
je 0x14005e75e
cmp qword [0x140131a68], 0
je 0x14005e75e
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
lea rdx, [0x1400ebbb6]
lea rcx, [rbp + 8]
call fcn.140043bc0
nop
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd8], xmm0
lea rdx, [0x140131b68]
lea rcx, [rbp - 0x60]
call fcn.14006bde0
mov rcx, qword [0x140131a68]
mov qword [rbp + 0xa8], rcx
mov dword [rbp + 0xa0], ebx
mov dword [rsp + 0x60], ebx
mov byte [rsp + 0x58], 0
mov byte [rsp + 0x50], 0
lea rcx, [rbp - 0x10]
mov qword [rsp + 0x48], rcx
mov byte [rsp + 0x40], 0
lea rcx, [rbp + 8]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0xd8]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ebx
mov byte [rsp + 0x20], 0
mov r9, rax
lea r8, [rbp + 0xa0]
lea rdx, [rbp + 0xf8]
lea rcx, [0x140131cb0]
call qword [sym.imp.TgBot.dll__sendMessage_Api_TgBot__QEBA_AV__shared_ptr_VMessage_TgBot___std__V__variant__JV__basic_string_DU__char_traits_D]
lea rcx, [rbp + 0xf8]
call fcn.140043140
nop
lea rcx, [rbp + 8]
call fcn.14006be50
nop
lea rcx, [rbp - 0x10]
call fcn.14006bb60
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14005e799
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e794
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e931
call fcn.1400d5b38
mov dword [0x140131b10], ebx
jmp 0x14005e7a3
xor ebx, ebx
mov ecx, dword [0x140130140]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14005e938
lea rcx, [rbp + 0x98]
call fcn.1400415e0
mov rax, qword [rbp + 0x98]
movabs rdx, 0x7ffffffffff0bdbf
cmp rax, rdx
je 0x14005e7f3
mov ecx, 1
mov edx, 0xff
cmovl ecx, edx
test cl, cl
jns 0x14005e7f3
add rax, 0xf4240
jmp 0x14005e7fd
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x70]
call fcn.14006fdc0
cmp byte [0x140131a5e], 0
je 0x14005e98c
mov r8d, dword [rbp + 0x1504]
mov r9d, dword [rbp - 0x38]
jmp 0x14005d580
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
mov rcx, qword [rbp - 0x70]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x1b
jb 0x14005ea39
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_27
lea r9, [0x1401127f8]
lea r8, [rbp - 0x80]
movzx edx, byte [rbp + 0x1510]
lea rcx, [rbp - 0x60]
call fcn.14006f590
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x14005e901
mov rcx, qword [0x140130860]
inc rdx
cmp rdx, 0x1000
jb 0x14005e8fc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005e923
mov rcx, r8
call fcn.1400d5b38
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [0x140130860], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [0x140130870], xmm1
mov dword [0x140131b10], 0
jmp 0x14005e982
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, Ordinal_41
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x26
call qword [sym.imp.USER32.dll_keybd_event]
mov dword [0x140131b10], ebx
mov dword [0x140131b48], 0
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x14005e9d6
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e9d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005e9d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d5b38
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005ea14
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ea0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ea0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d5b38
lea r11, [rsp + 0x15c0]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140040c90
nop
int3