Function at 0x1400020b0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Hash data using fnv
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x440
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
lea rbp, [rsp + 0x70]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1403d3080]
xor rax, rsp
mov qword [rbp + 0x340], rax
xor esi, esi
call qword [sym.imp.KERNEL32.dll_FreeConsole]
movabs r14, 0x7fffffffffffffff
cmp byte [0x1404244d0], sil
jne 0x1400021ad
movabs rbx, 0x7ffffffed5fa0dff
movabs rdi, 0x12a05f200
nop word [rax + rax]
lea rcx, [0x140424450]
call fcn.140021a50
cmp byte [0x1404244d0], sil
jne 0x1400021ad
lea rcx, [rbp + 0x100]
call fcn.140001c50
mov rax, qword [rbp + 0x100]
cmp rax, rbx
je 0x140002191
setl cl
test cl, cl
je 0x140002191
lea rcx, [rax + rdi]
mov qword [rbp + 0x80], rcx
jmp 0x140002198
mov qword [rbp + 0x80], r14
lea rcx, [rbp + 0x80]
call fcn.140004c30
cmp byte [0x1404244d0], sil
je 0x140002150
mov ecx, dword [0x140424520]
call fcn.140086f50
call fcn.140087120
mov ecx, 1
call fcn.140161880
mov qword [rbp + 0x260], rax
lea rcx, [rbp + 0xd8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400050a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x1400030dc
mov qword [rbp + 0x260], rsi
cmp dword [rbp + 0xd8], 0
je 0x1400030d0
movaps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x170], xmm0
lea rcx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400030d0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1d0], xmm0
movdqa xmmword [rbp + 0xd0], xmm0
lea ecx, [rax + 1]
call fcn.140161880
mov qword [rbp + 0x268], rax
lea rcx, [rbp + 0xe8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400050d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x1400030be
mov qword [rbp + 0x268], rsi
cmp dword [rbp + 0xe8], 0
je 0x1400030b2
movaps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp + 0x180], xmm0
lea rcx, [rbp + 0x180]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400030b2
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1e0], xmm0
movdqa xmmword [rbp + 0xe0], xmm0
lea ecx, [rax + 1]
call fcn.140161880
mov qword [rbp + 0x270], rax
lea rcx, [rbp + 0x98]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140005100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x90], rax
test rax, rax
je 0x1400030a0
mov qword [rbp + 0x270], rsi
cmp dword [rbp + 0x98], 0
je 0x140003094
movaps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x190], xmm0
lea rcx, [rbp + 0x190]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003094
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movdqa xmmword [rbp + 0x90], xmm0
lea ecx, [rax + 1]
call fcn.140161880
mov qword [rbp + 0x278], rax
lea rcx, [rbp + 0xf8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140005130]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x140003082
mov qword [rbp + 0x278], rsi
cmp dword [rbp + 0xf8], 0
je 0x140003076
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003076
xorps xmm0, xmm0
movaps xmmword [rbp + 0x150], xmm0
movdqa xmmword [rbp + 0xf0], xmm0
cmp byte [0x140423e03], al
je 0x140003016
xor eax, eax
movups xmmword [rbp + 0x208], xmm0
movups xmmword [rbp + 0x218], xmm0
mov qword [rbp + 0x228], rax
mov dword [rbp + 0x220], 1
mov byte [rbp + 0x224], 1
mov rax, qword [0x140423f00]
mov qword [rsp + 0x20], rax
mov r9, qword [0x140423ef0]
mov rdx, qword [0x140423ef8]
lea rcx, [rbp + 0x208]
call fcn.14007f350
nop
mov rax, qword [0x140423e88]
mov qword [rax + 0x38f4], rsi
mov dword [rax + 0x38f0], esi
mov dword [rax + 0x38fc], esi
mov dword [rax + 0x392c], 0x40400000
mov dword [rax + 0x3924], 0x41600000
mov dword [rax + 0x3928], 0x41400000
mov dword [rax + 0x3930], 0x3f800000
mov qword [rax + 0x391c], 0x40400000
mov dword [rax + 0x3914], 0x40800000
mov dword [rax + 0x3918], 0x3f800000
mov dword [rax + 0x3934], 0x41a00000
mov dword [rax + 0x3938], 0x41a00000
mov dword [rax + 0x393c], 0x41200000
mov dword [rax + 0x3940], 0x41200000
mov dword [rax + 0x3960], 0x40800000
mov dword [rax + 0x395c], 0x40800000
mov rcx, qword [rbp + 0x218]
call fcn.140069d30
lea rcx, [0x1404247e8]
call fcn.140006450
lea rax, [0x1401b97a8]
mov qword [rbp + 0x108], rax
lea rax, [0x140086750]
mov qword [rbp + 0x110], rax
movzx eax, byte [rbp + 0x158]
mov byte [rbp + 0x118], al
movzx eax, byte [rbp + 0x159]
mov byte [rbp + 0x119], al
movzx eax, byte [rbp + 0x15a]
mov byte [rbp + 0x11a], al
movzx eax, byte [rbp + 0x15b]
mov byte [rbp + 0x11b], al
lea rax, [rbp + 0x208]
mov qword [rbp + 0x120], rax
lea rax, [rbp + 0x108]
mov qword [rbp + 0x140], rax
lea rax, [rbp + 0x108]
mov qword [rbp + 0x20], rax
lea rdx, [rbp + 0x108]
call fcn.140087710
nop
mov rcx, qword [rbp + 0x140]
test rcx, rcx
je 0x1400025ad
mov rax, qword [rcx]
lea rdx, [rbp + 0x108]
cmp rcx, rdx
setne dl
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
mov qword [rbp + 0x140], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
movups xmmword [rbp + 0x290], xmm0
movups xmmword [rbp + 0x2a0], xmm0
movabs r12, 0x697458978d170506
movabs r13, 0x62b73182817e0334
movabs r15, 0x2b2a401a7b6edd0a
movss xmm6, dword [0x1403b2994]
movss xmm8, dword [0x1403b2a7c]
xorps xmm7, xmm7
movss xmm9, dword [0x1403b29e4]
movss xmm10, dword [0x1403b2b78]
movss xmm11, dword [0x1403b2b68]
movss xmm12, dword [0x1403b29dc]
movss xmm13, dword [0x1403b2ab4]
nop dword [rax]
nop dword [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x140423ef8]
lea rcx, [rbp + 0x280]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140002670
lea rcx, [rbp + 0x280]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x280]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov rcx, qword [0x140423e88]
movzx eax, byte [rbp + 0x224]
mov byte [rcx + 0x58], al
lea rcx, [0x140424450]
call fcn.140026f20
call fcn.140028fa0
mov r8d, dword [rbp + 0x228]
mov r9d, dword [rbp + 0x22c]
test r9d, r9d
jne 0x1400026ae
test r8d, r8d
je 0x14000273b
mov rcx, qword [0x140423f28]
test rcx, rcx
je 0x1400026d5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140423f28], rsi
mov r9d, dword [rbp + 0x22c]
mov r8d, dword [rbp + 0x228]
mov rcx, qword [0x140423f10]
mov rax, qword [rcx]
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor edx, edx
call qword [rax + 0x68]
mov qword [rbp + 0x228], rsi
mov rcx, qword [0x140423f10]
mov rax, qword [rcx]
lea r9, [rbp + 0x200]
lea r8, [0x1403af280]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x140423ef0]
mov rax, qword [rcx]
lea r9, [0x140423f28]
xor r8d, r8d
mov rdx, qword [rbp + 0x200]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x200]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, dword [reloc.WLDAP32.dll_Ordinal_45]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400027b2
cmp byte [0x140424428], 0
jne 0x1400027b9
mov byte [0x140424428], 1
cmp byte [rbp + 0x224], 0
sete al
mov byte [rbp + 0x224], al
mov edx, 0xffffffec
mov rcx, qword [rbp + 0x208]
test al, al
je 0x140002797
mov r8d, 0xa8
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rcx, qword [rbp + 0x208]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x1400027b9
mov r8d, 0x800a8
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov rcx, qword [rbp + 0x210]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x1400027b9
mov byte [0x140424428], 0
lea rdx, [rbp + 0x230]
mov rcx, qword [0x140423f08]
call qword [sym.imp.USER32.dll_GetClientRect]
mov r9d, 2
lea r8, [rbp + 0x230]
xor edx, edx
mov rcx, qword [0x140423f08]
call qword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [rbp + 0x23c]
mov r8d, dword [rbp + 0x234]
sub eax, r8d
mov r9d, dword [rbp + 0x238]
mov edx, dword [rbp + 0x230]
sub r9d, edx
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], eax
mov rcx, qword [0x140423ef8]
call qword [sym.imp.USER32.dll_MoveWindow]
movzx eax, byte [reloc.WS2_32.dll_accept]
cmp al, byte [0x140423dd8]
je 0x1400028ed
mov byte [0x140423dd8], al
neg al
sbb edi, edi
and edi, 0x11
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400028c4
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400028c4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x883e44eb
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1400028bf
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x1400028a0
cmp edx, 0x6f9597f5
je 0x1400028c9
test r9d, r9d
jne 0x140002880
mov rax, qword [rax]
jmp 0x140002850
mov r8d, dword [rbx + 0x1c]
add r8, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [r8 + rcx*4]
add rax, r10
mov edx, edi
mov rcx, qword [0x140423ef8]
call rax
mov rax, qword [0x140423e88]
test rax, rax
je 0x140002902
mov rcx, qword [rax + 0x98]
jmp 0x140002905
mov rcx, rsi
cmp qword [rcx + 0x48], 0
jne 0x140002911
call fcn.14005ecb0
call fcn.14005fcc0
call fcn.14003e8c0
movups xmm0, xmmword [0x1403ec874]
movups xmmword [rbp + 0x240], xmm0
movups xmm0, xmmword [0x1403ec884]
movups xmmword [rbp + 0x250], xmm0
cmp byte [0x1403ec870], 0
je 0x140002a01
mov rax, qword [0x140423e88]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003dd80
mov rbx, rax
lea rcx, [rbp + 0x240]
call fcn.140039ef0
mov edi, eax
movd xmm2, dword [reloc.WS2_32.dll_ioctlsocket]
cvtdq2ps xmm2, xmm2
mov rcx, qword [0x140423e88]
movss xmm1, dword [rcx + 0x14]
mulss xmm1, xmm6
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm6
movss dword [rbp + 0xa0], xmm0
movss dword [rbp + 0xa4], xmm1
test eax, 0xff000000
je 0x140002a01
comiss xmm6, xmm2
ja 0x140002a01
subss xmm2, xmm6
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm7
lea rdx, [rbp + 0xa0]
mov rcx, rbx
call fcn.1400565a0
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140054be0
mov dword [rbx + 0x78], esi
cmp byte [0x1403ec871], 0
je 0x140002acb
mov rax, qword [0x140423e88]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003dd80
mov rbx, rax
lea rcx, [rbp + 0x250]
call fcn.140039ef0
mov edi, eax
movd xmm2, dword [0x1403ec7c8]
cvtdq2ps xmm2, xmm2
mov rcx, qword [0x140423e88]
movss xmm1, dword [rcx + 0x14]
mulss xmm1, xmm6
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm6
movss dword [rbp + 0xa8], xmm0
movss dword [rbp + 0xac], xmm1
test eax, 0xff000000
je 0x140002acb
comiss xmm6, xmm2
ja 0x140002acb
subss xmm2, xmm6
mov dword [rsp + 0x28], 0x167
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm7
lea rdx, [rbp + 0xa8]
mov rcx, rbx
call fcn.1400565a0
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140054be0
mov dword [rbx + 0x78], esi
cmp byte [0x1403ec858], 0
je 0x140002ad9
call fcn.140020010
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140002ae7
call fcn.14001d570
cmp byte [0x1403ec8e2], 0
je 0x140002f0b
mov rax, qword [0x140423e88]
mov rax, qword [rax + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003dd80
mov rbx, rax
movaps xmm0, xmmword [0x1403b2cd0]
movups xmmword [rbp], xmm0
lea rcx, [rbp]
call fcn.140039ef0
mov rcx, qword [0x140423e88]
movss xmm0, dword [rcx + 0x10]
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x41f00000
mov qword [rbp + 0xb8], 0
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm7
mov r9d, eax
lea r8, [rbp + 0xb0]
lea rdx, [rbp + 0xb8]
mov rcx, rbx
call fcn.140057160
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rdi, 0x44b43b3a4535d3f7
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x9a601b54df42de63
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xe07d81274380901f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x60039e3ee727555
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x4a9754e6ee332346
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x17f11b493650a1a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xfb055774b016fe20
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xe07d812743a9f569
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmm0, xmmword [rbp + 0x60]
vxorps xmm0, xmm0, xmmword [rbp + 0x2e0]
vmovdqa xmmword [rbp + 0x60], xmm0
mov rbx, qword [0x140423e88]
mov qword [rsp + 0x30], rsi
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
vmovss dword [rsp + 0x20], xmm10
vmovaps xmm3, xmm11
vmovss xmm2, dword [rbx + 0x3d38]
lea rdx, [rbp + 0x18]
mov rcx, qword [rbx + 0x3d30]
vzeroupper
call fcn.140059b60
movss xmm0, dword [rbp + 0x18]
addss xmm0, xmm12
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x18], xmm0
mov rax, qword [rbx + 0x4b10]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14003dd80
mov rbx, rax
mov qword [rbp], r12
mov rcx, qword [rbp]
mov qword [rbp + 0x40], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x48], rcx
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x50], rcx
movabs rax, 0x9a601b54df42de63
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0xe07d81274380901f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x60039e3ee727555
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0x4a9754e6ee332346
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0x17f11b493650a1a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rax, 0xfb055774b016fe20
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
movabs rax, 0xe07d812743a9f569
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm0, ymm0, ymmword [rbp + 0x300]
vmovdqu ymmword [rbp + 0x40], ymm0
vmovdqa xmm0, xmmword [rbp + 0x60]
vxorps xmm0, xmm0, xmmword [rbp + 0x320]
vmovdqa xmmword [rbp + 0x60], xmm0
vmovaps xmm0, xmmword [0x1403b2de0]
vmovups xmmword [rbp + 0x1b0], xmm0
lea rcx, [rbp + 0x1b0]
vzeroupper
call fcn.140039ef0
mov edx, eax
movss xmm0, dword [rbp + 0x1c]
mulss xmm0, xmm6
movaps xmm2, xmm13
subss xmm2, xmm0
mov rcx, qword [0x140423e88]
movss xmm1, dword [rcx + 0x10]
mulss xmm1, xmm6
movss xmm0, dword [rbp + 0x18]
mulss xmm0, xmm6
subss xmm1, xmm0
movss dword [rbp + 0xc0], xmm1
movss dword [rbp + 0xc4], xmm2
test eax, 0xff000000
je 0x140002ee3
cmp byte [rbp + 0x40], 0
je 0x140002ee3
lea rcx, [rbp + 0x40]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140002e80
lea rcx, [rbp + 0x40]
add rcx, rax
mov rax, qword [rbx + 0x38]
movups xmm0, xmmword [rbx + 0x88]
movups xmmword [rbp + 0x1c0], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm7
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x40]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x1c0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edx
lea r9, [rbp + 0xc0]
movss xmm2, dword [rax + 0x10]
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.140059d80
mov ecx, reloc.WLDAP32.dll_Ordinal_27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140002f0b
xor r8d, r8d
xor edx, edx
lea rcx, [0x140424450]
call fcn.14002a5a0
mov byte [0x1403ec8e2], 0
lea rcx, [rbp + 0x208]
call fcn.14007f510
call fcn.140040370
call fcn.140040770
mov rcx, qword [0x140423f00]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140423f28]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x140423f00]
mov rax, qword [rcx]
lea r8, [0x140424430]
mov rdx, qword [0x140423f28]
call qword [rax + 0x190]
mov rax, qword [0x140423e88]
mov rax, qword [rax + 0x4b10]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, rsi
cmp byte [rcx], sil
cmovne rax, rcx
mov rcx, rax
call fcn.14005e250
mov rcx, qword [0x140423f10]
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x40]
cmp byte [0x1403ec8e0], 0
jne 0x14000306e
movsxd rbx, dword [reloc.WS2_32.dll_accept]
lea rcx, [rbp + 0x20]
call fcn.140001c50
mov rax, qword [rbp + 0x20]
mov qword [rbp], rax
test rbx, rbx
je 0x140002ffa
mov rcx, rbx
shr rcx, 0x3f
xor cl, 1
je 0x140002ffa
imul rdx, rbx, 0xf4240
imul r8, rbx, 0xf4240
mov rcx, r14
sub rcx, r8
cmp rax, rcx
je 0x140002ff6
setl cl
test cl, cl
je 0x140002ff6
lea rcx, [rdx + rax]
mov qword [rbp], rcx
jmp 0x140002ffa
mov qword [rbp], r14
lea rcx, [rbp]
call fcn.140004c30
cmp dword [rbp + 0x288], 0x12
jne 0x140002630
call fcn.1400867a0
nop
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.140161860
lea r11, [rsp + 0x440]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400867a0
nop
jmp 0x140003016
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf8], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x98], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xe8], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xd8], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3