Function at 0x140057e90
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1530]
mov eax, 0x1630
call fcn.1400d9b70
sub rsp, rax
movaps xmmword [rsp + 0x1620], xmm6
movaps xmmword [rsp + 0x1610], xmm7
mov rax, qword [0x140118080]
xor rax, rsp
mov qword [rbp + 0x1508], rax
xor ecx, ecx
mov rax, qword [0x1401be850]
cmp qword [0x1401be848], rax
jne 0x140057fbc
movups xmm6, xmmword [0x140187598]
lea rax, [rbp + 0x28]
mov qword [rbp - 0x20], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], rcx
mov qword [rbp + 0x40], rcx
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400d9350
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x38], Ordinal_30
mov qword [rbp + 0x40], Ordinal_35
movups xmm0, xmmword [str.No_scan_results_available]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400feff8]
movsd qword [rax + 0x10], xmm0
movzx ecx, byte [0x1400ff000]
mov byte [rax + 0x18], cl
mov byte [rax + 0x19], 0
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], send
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.Notification]
movsd qword [rbp + 8], xmm0
mov eax, dword [0x1400fea30]
mov dword [rbp + 0x10], eax
mov byte [rbp + 0x14], 0
movdqa xmmword [rbp - 0x20], xmm6
lea r9, [rbp - 0x20]
lea r8, [rbp + 0x28]
lea rdx, [rbp + 8]
call fcn.14004def0
mov r8d, Ordinal_30
lea rdx, str.No_scan_results_available
lea rcx, [0x140187488]
call fcn.14006a540
xor al, al
jmp 0x14005937a
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x14a4], 0xffffffff
mov dword [rbp + 0x124], eax
mov edx, 1
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x124], eax
inc rdx
cmp rdx, 0x270
jb 0x140057fe0
mov dword [rbp + 0x120], 0x270
mov rax, qword [0x1401be848]
mov qword [rsp + 0x38], rax
mov rcx, qword [0x1401be850]
mov qword [rbp - 0x20], rcx
cmp rax, rcx
je 0x140059378
nop dword [rax]
mov ecx, 4
call fcn.1400d9350
mov r12, rax
mov qword [rbp - 0x60], rax
add rax, 4
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x50], rax
xor ecx, ecx
mov dword [r12], ecx
mov qword [rbp - 0x58], rax
mov ecx, 4
call fcn.1400d9350
mov r13, rax
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x48], rax
add rax, 4
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x38], rax
xor ecx, ecx
mov dword [r13], ecx
mov qword [rbp - 0x40], rax
mov ecx, 4
call fcn.1400d9350
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x10], rax
lea rcx, [rax + 4]
mov qword [rbp + 0x14d0], rcx
mov qword [rbp], rcx
xor edx, edx
mov dword [rax], edx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 8], rcx
mov ecx, 4
call fcn.1400d9350
mov rdi, rax
mov qword [rbp + 0x28], rax
lea r15, [rax + 4]
mov qword [rsp + 0x40], r15
mov qword [rbp + 0x38], r15
xor eax, eax
mov dword [rdi], eax
mov qword [rbp + 0x30], r15
mov ecx, 4
call fcn.1400d9350
mov r14, rax
mov qword [rbp + 8], rax
lea r15, [rax + 4]
mov qword [rbp + 0x18], r15
xor eax, eax
mov dword [r14], eax
mov qword [rbp + 0x10], r15
mov ecx, 4
call fcn.1400d9350
mov rsi, rax
mov qword [rbp + 0x48], rax
lea rbx, [rax + 4]
mov qword [rbp + 0x58], rbx
xor eax, eax
mov dword [rsi], eax
mov qword [rbp + 0x50], rbx
mov dword [rbp - 0x78], eax
mov dword [rsp + 0x68], eax
mov rdx, qword [rsp + 0x38]
mov rdx, qword [rdx]
add rdx, 0x5c
mov qword [rsp + 0x78], rdx
mov rax, qword [rbp - 0x30]
sub rax, r12
cmp rax, 4
jae 0x140058156
lea rcx, [rbp - 0x60]
call fcn.14006dd40
mov rax, qword [rbp - 0x58]
mov r12, qword [rbp - 0x60]
mov rdx, qword [rsp + 0x78]
jmp 0x14005815a
mov rax, qword [rbp - 0x30]
sub rax, r12
mov qword [rsp + 0x20], 0
mov r9, rax
mov r8, r12
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140058f21
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0x60]
lea rcx, [0x1401be860]
call fcn.14006c190
mov rcx, qword [rax]
add rcx, 0x18
lea rdx, [rbp - 0x60]
call fcn.140068b60
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
add rdx, 0x28
mov qword [rsp + 0x78], rdx
mov rax, qword [rbp - 0x80]
sub rax, r13
cmp rax, 4
jae 0x1400581e1
lea rcx, [rbp - 0x48]
call fcn.14006dd40
mov rax, qword [rbp - 0x40]
mov r13, qword [rbp - 0x48]
mov qword [rsp + 0x70], r13
mov rdx, qword [rsp + 0x78]
jmp 0x1400581e5
mov rax, qword [rbp - 0x80]
sub rax, r13
xor r12d, r12d
mov qword [rsp + 0x20], r12
mov r9, rax
mov r8, r13
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140058f1d
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0x70]
lea rcx, [0x1401be860]
call fcn.14006c190
mov rcx, qword [rax]
add rcx, 0x18
lea rdx, [rbp - 0x48]
call fcn.140068b60
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
add rdx, 0x5c
mov qword [rbp - 0x80], rdx
mov rax, qword [rbp - 0x68]
mov r8, qword [rbp - 0x70]
sub rax, r8
cmp rax, 4
jae 0x140058277
lea rcx, [rbp - 0x10]
call fcn.14006dd40
mov rcx, qword [rbp]
mov qword [rbp + 0x14d0], rcx
mov rax, qword [rbp - 8]
mov r8, qword [rbp - 0x10]
mov qword [rbp - 0x70], r8
mov rdx, qword [rbp - 0x80]
jmp 0x14005827b
mov rax, qword [rbp - 0x68]
sub rax, r8
mov qword [rsp + 0x20], r12
mov r9, rax
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140058f14
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x14f0]
lea rcx, [0x1401be860]
call fcn.14006c190
mov rcx, qword [rax]
add rcx, 0x18
lea rdx, [rbp - 0x10]
call fcn.140068b60
mov r13, qword [rsp + 0x40]
sub r13, rdi
mov qword [rsp + 0x40], r13
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
add rdx, 0x58
mov qword [rsp + 0x20], r12
mov r9, r13
mov r8, rdi
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140058b8e
mov r12, r15
sub r12, r14
mov qword [rbp + 0x14b0], r12
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
add rdx, 0x2c
mov qword [rsp + 0x20], 0
mov r9, r12
mov r8, r14
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140058b8b
mov r13, rbx
sub r13, rsi
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
add rdx, 0x60
mov qword [rsp + 0x20], 0
mov r9, r13
mov r8, rsi
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140058b86
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
add rdx, 0x58
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp - 0x78]
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140058b86
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
add rdx, 0x60
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rsp + 0x68]
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140058b86
mov eax, dword [rbp - 0x78]
test eax, eax
je 0x14005875f
cmp eax, 0x22222222
je 0x14005875f
mov eax, dword [rsp + 0x68]
test eax, eax
je 0x14005875f
cmp eax, 0x22222222
je 0x14005875f
mov r15, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x48]
mov qword [rbp + 0x14b0], rcx
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x70], rax
mov rbx, qword [rbp - 0x60]
mov qword [rsp + 0x70], rbx
sub r15, rbx
je 0x140058504
mov rbx, rdi
mov rdx, qword [rsp + 0x70]
sub rdx, rdi
mov qword [rbp + 0x14d0], rdx
sub rcx, rdi
mov qword [rbp - 0x80], rcx
mov rcx, r14
sub rcx, rdi
mov qword [rbp - 0x68], rcx
sub rax, rdi
mov qword [rbp - 0x30], rax
mov rax, rsi
sub rax, rdi
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 0x120]
call fcn.14006fa80
mov ecx, eax
imul rax, rcx, 0xff
test eax, eax
jne 0x14005849a
nop dword [rax + rax]
lea rcx, [rbp + 0x120]
call fcn.14006fa80
mov ecx, eax
imul rax, rcx, 0xff
cmp eax, 1
jb 0x140058480
shr rax, 0x20
inc al
mov rcx, qword [rbp + 0x14d0]
movzx ecx, byte [rcx + rbx]
xor cl, byte [rbx]
mov rdx, qword [rbp - 0x68]
movzx edx, byte [rdx + rbx]
mov r8, qword [rbp - 0x80]
xor dl, byte [r8 + rbx]
mov r8, qword [rsp + 0x78]
movzx r8d, byte [r8 + rbx]
mov r9, qword [rbp - 0x30]
xor r8b, byte [r9 + rbx]
and dl, al
and r8b, al
test al, cl
jne 0x140058661
test dl, dl
jne 0x140058661
test r8b, r8b
jne 0x140058661
inc rbx
mov rax, rbx
sub rax, rdi
cmp rax, r15
jb 0x140058462
mov rbx, qword [rsp + 0x70]
mov r15, qword [rsp + 0x40]
test rsi, rsi
je 0x14005853f
cmp r13, 0x1000
jb 0x140058533
add r13, 0x27
mov rcx, qword [rsi - 8]
sub rsi, rcx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x140059658
mov rsi, rcx
mov rdx, r13
mov rcx, rsi
call fcn.1400d969c
nop
test r14, r14
je 0x140058575
cmp r12, 0x1000
jb 0x140058569
add r12, 0x27
mov rcx, qword [r14 - 8]
sub r14, rcx
lea rax, [r14 - 8]
cmp rax, 0x1f
ja 0x14005965f
mov r14, rcx
mov rdx, r12
mov rcx, r14
call fcn.1400d969c
nop
test rdi, rdi
je 0x1400585ab
cmp r15, 0x1000
jb 0x14005859f
add r15, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x140059666
mov rdi, rcx
mov rdx, r15
mov rcx, rdi
call fcn.1400d969c
nop
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x1400585e6
mov rdx, qword [rbp]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400585e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005966d
call fcn.1400d969c
nop
mov rcx, qword [rbp + 0x14b0]
test rcx, rcx
je 0x140058624
mov rdx, qword [rbp - 0x38]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005861e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059674
call fcn.1400d969c
nop
test rbx, rbx
je 0x140059360
mov rdx, qword [rbp - 0x50]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x140058659
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140058b7f
mov rcx, rbx
jmp 0x14005935b
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
add rdx, 0x5c
xor ebx, ebx
mov qword [rsp + 0x20], rbx
mov r15, qword [rsp + 0x40]
mov r9, r15
mov r8, rdi
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x1400593b4
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
add rdx, 0x28
mov qword [rsp + 0x20], rbx
mov r9, r12
mov r8, r14
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x1400593b4
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax]
add rdx, 0x5c
mov qword [rsp + 0x20], rbx
mov r9, r13
mov r8, rsi
mov rcx, qword [0x1401be828]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x1400593b4
movups xmm6, xmmword [0x140187598]
lea rax, [rbp + 0x80]
mov qword [rbp + 0x14d0], rax
lea rdx, [0x1400ff078]
lea rcx, [rbp + 0x80]
call fcn.140042250
mov rbx, rax
lea rdx, str.Notification
lea rcx, [rsp + 0x48]
call fcn.140042250
movdqa xmmword [rbp + 0x14d0], xmm6
lea r9, [rbp + 0x14d0]
mov r8, rbx
mov rdx, rax
call fcn.14004def0
lea rdx, str.Aimbot_Head:_Injected_at_addresses
lea rcx, [0x140187488]
call fcn.140069310
mov rbx, qword [rsp + 0x70]
jmp 0x140058509
movups xmm6, xmmword [0x140187598]
lea rax, [rsp + 0x48]
mov qword [rbp + 0x14d0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xor r15d, r15d
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r15
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400d9350
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], Ordinal_30
mov qword [rsp + 0x60], Ordinal_35
movups xmm0, xmmword [str.Unexpected_value_at_address]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400ff068]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1400ff070]
mov dword [rax + 0x18], ecx
mov byte [rax + 0x1c], r15b
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], send
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.Notification]
movsd qword [rbp + 0x80], xmm0
mov eax, dword [0x1400fea30]
mov dword [rbp + 0x88], eax
mov byte [rbp + 0x8c], r15b
movdqa xmmword [rbp + 0x14d0], xmm6
lea r9, [rbp + 0x14d0]
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x80]
call fcn.14004def0
mov rax, qword [rsp + 0x38]
mov r8, qword [rax]
lea r10, [rbp + 0x14e5]
movabs r12, 0xcccccccccccccccd
nop dword [rax + rax]
dec r10
mov rax, r12
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8, rdx
test rdx, rdx
jne 0x140058850
mov r12, qword [rbp + 0x14b0]
lea r9, [rsp + 0x30]
lea r8, [rbp + 0x14e5]
mov rdx, r10
lea rcx, [rbp + 0xa0]
call fcn.140043100
nop
mov r8, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
sub rax, r8
cmp rax, 0x1c
jb 0x140058955
lea rax, [r8 + 0x1c]
mov qword [rbp + 0xb0], rax
lea rbx, [rbp + 0xa0]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0xa0]
lea rax, [0x1400ff074]
cmp rax, rbx
jbe 0x140058902
lea rax, [rbx + r8]
lea rcx, str.Unexpected_value_at_address
cmp rcx, rax
ja 0x140058902
cmp rbx, rcx
jbe 0x140058908
mov r15, rbx
sub r15, rcx
jmp 0x140058908
mov r15d, Ordinal_30
lea rcx, [rbx + 0x1c]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
lea rdx, str.Unexpected_value_at_address
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + r15]
mov r8d, Ordinal_30
sub r8, r15
lea rdx, str.Unexpected_value_at_address
add rdx, 0x1c
add rdx, r15
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0xa0]
xor r15d, r15d
jmp 0x14005897e
mov qword [rsp + 0x28], Ordinal_30
lea rax, str.Unexpected_value_at_address
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov edx, Ordinal_30
lea rcx, [rbp + 0xa0]
call fcn.14006e360
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x1400589d5
inc rdx
mov rcx, qword [0x140187488]
cmp rdx, 0x1000
jb 0x1400589d0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005962e
mov rcx, r8
call fcn.1400d969c
movups xmmword [0x140187488], xmm6
movups xmmword [reloc.WS2_32.dll_getsockopt], xmm7
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x140058a25
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058a1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059635
call fcn.1400d969c
nop
test rsi, rsi
je 0x140058a5b
cmp r13, 0x1000
jb 0x140058a4f
add r13, 0x27
mov rcx, qword [rsi - 8]
sub rsi, rcx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x140059658
mov rsi, rcx
mov rdx, r13
mov rcx, rsi
call fcn.1400d969c
nop
test r14, r14
je 0x140058a91
cmp r12, 0x1000
jb 0x140058a85
add r12, 0x27
mov rcx, qword [r14 - 8]
sub r14, rcx
lea rax, [r14 - 8]
cmp rax, 0x1f
ja 0x14005965f
mov r14, rcx
mov rdx, r12
mov rcx, r14
call fcn.1400d969c
nop
test rdi, rdi
je 0x140058acc
mov r15, qword [rsp + 0x40]
cmp r15, 0x1000
jb 0x140058ac0
add r15, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x140059666
mov rdi, rcx
mov rdx, r15
mov rcx, rdi
call fcn.1400d969c
nop
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x140058b07
mov rdx, qword [rbp]
sub rdx, rcx
cmp rdx, 0x1000
mov rax, rcx
jb 0x140058b01
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005966d
call fcn.1400d969c
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x140058b42
mov rdx, qword [rbp - 0x38]
sub rdx, rcx
cmp rdx, 0x1000
mov rax, rcx
jb 0x140058b3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059674
call fcn.1400d969c
nop
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140059360
mov rdx, qword [rbp - 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005935b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005935b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r13, qword [rsp + 0x40]
xor r12d, r12d
movups xmm6, xmmword [0x140187598]
lea rax, [rbp + 0x80]
mov qword [rbp + 0x14b0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x98], r12
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400d9350
mov rdx, rax
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x90], Ordinal_35
mov qword [rbp + 0x98], Ordinal_35
movups xmm0, xmmword [str.Failed_to_read_data_at_address]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400ff048]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x1400ff050]
mov dword [rax + 0x18], ecx
movzx ecx, word [0x1400ff054]
mov word [rax + 0x1c], cx
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rdx + 0x1e], al
mov byte [rdx + 0x1f], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], send
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.Notification]
movsd qword [rsp + 0x48], xmm0
mov eax, dword [0x1400fea30]
mov dword [rsp + 0x50], eax
mov byte [rsp + 0x54], 0
movdqa xmmword [rbp + 0x14b0], xmm6
lea r9, [rbp + 0x14b0]
lea r8, [rbp + 0x80]
lea rdx, [rsp + 0x48]
call fcn.14004def0
mov rax, qword [rsp + 0x38]
mov r8, qword [rax]
lea r10, [rbp + 0x14c5]
movabs rbx, 0xcccccccccccccccd
nop
dec r10
mov rax, rbx
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8, rdx
test rdx, rdx
jne 0x140058c90
mov rbx, qword [rbp + 0x58]
lea r9, [rsp + 0x30]
lea r8, [rbp + 0x14c5]
mov rdx, r10
lea rcx, [rbp + 0xc0]
call fcn.140043100
nop
mov r8, qword [rbp + 0xd0]
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
sub rax, r8
cmp rax, 0x1f
jb 0x140058d9c
lea rax, [r8 + 0x1f]
mov qword [rbp + 0xd0], rax
lea rbx, [rbp + 0xc0]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0xc0]
lea rax, [0x1400ff057]
cmp rax, rbx
jbe 0x140058d44
lea rax, [rbx + r8]
lea rcx, str.Failed_to_read_data_at_address
cmp rcx, rax
ja 0x140058d44
cmp rbx, rcx
ja 0x140058d3c
mov r15, r12
jmp 0x140058d4a
mov r15, rbx
sub r15, rcx
jmp 0x140058d4a
mov r15d, Ordinal_35
lea rcx, [rbx + 0x1f]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
lea rdx, str.Failed_to_read_data_at_address
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + r15]
mov r8d, Ordinal_35
sub r8, r15
lea rdx, str.Failed_to_read_data_at_address
add rdx, 0x1f
add rdx, r15
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0xc0]
mov rbx, qword [rbp + 0x58]
mov r15, qword [rbp + 0x18]
jmp 0x140058dc5
mov qword [rsp + 0x28], Ordinal_35
lea rax, str.Failed_to_read_data_at_address
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov edx, Ordinal_35
lea rcx, [rbp + 0xc0]
call fcn.14006e360
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x140058e1c
inc rdx
mov rcx, qword [0x140187488]
cmp rdx, 0x1000
jb 0x140058e17
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005963c
mov rcx, r8
call fcn.1400d969c
movups xmmword [0x140187488], xmm6
movups xmmword [reloc.WS2_32.dll_getsockopt], xmm7
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140058e6c
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058e66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059643
call fcn.1400d969c
nop
test rsi, rsi
je 0x140058ea5
sub rbx, rsi
cmp rbx, 0x1000
jb 0x140058e99
add rbx, 0x27
mov rcx, qword [rsi - 8]
sub rsi, rcx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x140059658
mov rsi, rcx
mov rdx, rbx
mov rcx, rsi
call fcn.1400d969c
nop
test r14, r14
je 0x140058ede
sub r15, r14
cmp r15, 0x1000
jb 0x140058ed2
add r15, 0x27
mov rcx, qword [r14 - 8]
sub r14, rcx
lea rax, [r14 - 8]
cmp rax, 0x1f
ja 0x14005965f
mov r14, rcx
mov rdx, r15
mov rcx, r14
call fcn.1400d969c
nop
test rdi, rdi
je 0x140058acc
cmp r13, 0x1000
jb 0x140058f0c
add r13, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x140059666
mov rdi, rcx
mov rdx, r13
jmp 0x140058ac3
mov r13, qword [rbp - 0x48]
mov qword [rsp + 0x70], r13
mov r12, qword [rbp - 0x60]
movups xmm6, xmmword [0x140187598]
lea rax, [rbp + 0x80]
mov qword [rbp + 0x14b0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xor eax, eax
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], rax
mov ecx, Ordinal_50
call fcn.1400d9350
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x90], reloc.WLDAP32.dll_Ordinal_41
mov qword [rbp + 0x98], Ordinal_50
movups xmm0, xmmword [str.Failed_to_save_original_bytes_at_address]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400ff018]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x1400ff028]
movsd qword [rax + 0x20], xmm0
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rax + 0x28], cl
mov byte [rax + 0x29], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], send
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.Notification]
movsd qword [rsp + 0x48], xmm0
mov eax, dword [0x1400fea30]
mov dword [rsp + 0x50], eax
mov byte [rsp + 0x54], 0
movdqa xmmword [rbp + 0x14b0], xmm6
lea r9, [rbp + 0x14b0]
lea r8, [rbp + 0x80]
lea rdx, [rsp + 0x48]
call fcn.14004def0
mov rax, qword [rsp + 0x38]
mov r8, qword [rax]
lea r10, [rbp + 0x14c5]
movabs r13, 0xcccccccccccccccd
nop word [rax + rax]
dec r10
mov rax, r13
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8, rdx
test rdx, rdx
jne 0x140059020
mov r13, qword [rsp + 0x70]
lea r9, [rsp + 0x30]
lea r8, [rbp + 0x14c5]
mov rdx, r10
lea rcx, [rbp + 0xe0]
call fcn.140043100
nop
mov r8, qword [rbp + 0xf0]
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
sub rax, r8
cmp rax, 0x29
jb 0x14005912d
lea rax, [r8 + 0x29]
mov qword [rbp + 0xf0], rax
lea rbx, [rbp + 0xe0]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0xe0]
lea rax, [0x1400ff031]
cmp rax, rbx
jbe 0x1400590d5
lea rax, [rbx + r8]
lea rcx, str.Failed_to_save_original_bytes_at_address
cmp rcx, rax
ja 0x1400590d5
cmp rbx, rcx
ja 0x1400590cd
xor r15d, r15d
jmp 0x1400590db
mov r15, rbx
sub r15, rcx
jmp 0x1400590db
mov r15d, reloc.WLDAP32.dll_Ordinal_41
lea rcx, [rbx + 0x29]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
lea rdx, str.Failed_to_save_original_bytes_at_address
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + r15]
mov r8d, reloc.WLDAP32.dll_Ordinal_41
sub r8, r15
lea rdx, str.Failed_to_save_original_bytes_at_address
add rdx, 0x29
add rdx, r15
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp + 0xe0]
mov rbx, qword [rbp + 0x58]
mov r15, qword [rbp + 0x18]
jmp 0x140059156
mov qword [rsp + 0x28], reloc.WLDAP32.dll_Ordinal_41
lea rax, str.Failed_to_save_original_bytes_at_address
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov edx, reloc.WLDAP32.dll_Ordinal_41
lea rcx, [rbp + 0xe0]
call fcn.14006e360
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x1400591b1
inc rdx
mov rcx, qword [0x140187488]
cmp rdx, 0x1000
jb 0x1400591ac
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005964a
mov rcx, r8
call fcn.1400d969c
movups xmmword [0x140187488], xmm6
movups xmmword [reloc.WS2_32.dll_getsockopt], xmm7
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x140059201
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400591fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059651
call fcn.1400d969c
nop
test rsi, rsi
je 0x14005923a
sub rbx, rsi
cmp rbx, 0x1000
jb 0x14005922e
add rbx, 0x27
mov rcx, qword [rsi - 8]
sub rsi, rcx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x140059658
mov rsi, rcx
mov rdx, rbx
mov rcx, rsi
call fcn.1400d969c
nop
test r14, r14
je 0x140059273
sub r15, r14
cmp r15, 0x1000
jb 0x140059267
add r15, 0x27
mov rcx, qword [r14 - 8]
sub r14, rcx
lea rax, [r14 - 8]
cmp rax, 0x1f
ja 0x14005965f
mov r14, rcx
mov rdx, r15
mov rcx, r14
call fcn.1400d969c
nop
test rdi, rdi
je 0x1400592ae
mov rdx, qword [rsp + 0x40]
sub rdx, rdi
cmp rdx, 0x1000
jb 0x1400592a5
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x140059666
mov rdi, rcx
mov rcx, rdi
call fcn.1400d969c
nop
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x1400592ec
mov rdx, qword [rbp + 0x14d0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400592e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005966d
call fcn.1400d969c
nop
test r13, r13
je 0x140059326
mov rdx, qword [rbp - 0x38]
sub rdx, r13
mov rax, r13
cmp rdx, 0x1000
jb 0x14005931d
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059674
mov rcx, r13
call fcn.1400d969c
nop
test r12, r12
je 0x140059360
mov rdx, qword [rbp - 0x50]
sub rdx, r12
mov rax, r12
cmp rdx, 0x1000
jb 0x140059358
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140058b7f
mov rcx, r12
call fcn.1400d969c
mov rax, qword [rsp + 0x38]
add rax, 8
mov qword [rsp + 0x38], rax
cmp rax, qword [rbp - 0x20]
jne 0x140058030
mov al, 1
mov rcx, qword [rbp + 0x1508]
xor rcx, rsp
call fcn.1400d8f70
lea r11, [rsp + 0x1630]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movups xmm6, xmmword [0x140187598]
lea rax, [rbp + 0x80]
mov qword [rbp - 0x20], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rbx
mov qword [rbp + 0x98], rbx
mov ecx, Ordinal_50
call fcn.1400d9350
mov qword [rbp + 0x80], rax
mov esi, Ordinal_35
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x98], Ordinal_50
movups xmm0, xmmword [str.Failed_to_write_memory_at_address]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400ff0d8]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x1400ff0e8]
mov word [rax + 0x20], cx
mov byte [rax + 0x22], bl
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], send
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.Notification]
movsd qword [rsp + 0x48], xmm0
mov eax, dword [0x1400fea30]
mov dword [rsp + 0x50], eax
mov byte [rsp + 0x54], 0
movdqa xmmword [rbp - 0x20], xmm6
lea r9, [rbp - 0x20]
lea r8, [rbp + 0x80]
lea rdx, [rsp + 0x48]
call fcn.14004def0
mov rax, qword [rsp + 0x38]
mov r8, qword [rax]
lea r10, [rbp + 0x1505]
movabs rsi, 0xcccccccccccccccd
nop dword [rax]
nop word [rax + rax]
dec r10
mov rax, rsi
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8, rdx
test rdx, rdx
jne 0x1400594a0
lea r9, [rsp + 0x30]
lea r8, [rbp + 0x1505]
mov rdx, r10
lea rcx, [rbp + 0x100]
call fcn.140043100
nop
mov r8, qword [rbp + 0x110]
mov rcx, qword [rbp + 0x118]
mov rax, rcx
sub rax, r8
cmp rax, 0x22
mov esi, Ordinal_35
lea rdi, str.Failed_to_write_memory_at_address
jb 0x140059594
lea rax, [r8 + 0x22]
mov qword [rbp + 0x110], rax
lea rbx, [rbp + 0x100]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x100]
lea rax, [0x1400ff0ea]
cmp rax, rbx
jbe 0x140059555
lea rax, [rbx + r8]
cmp rdi, rax
ja 0x140059555
cmp rbx, rdi
ja 0x14005954d
xor r14d, r14d
jmp 0x140059558
mov r14, rbx
sub r14, rdi
jmp 0x140059558
mov r14, rsi
lea rcx, [rbx + 0x22]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, rdi
mov rcx, rbx
call fcn.140042350
sub rsi, r14
lea rdx, [rdi + 0x22]
add rdx, r14
lea rcx, [rbx + r14]
mov r8, rsi
call fcn.140042350
lea rax, [rbp + 0x100]
jmp 0x1400595b0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov rdx, rsi
lea rcx, [rbp + 0x100]
call fcn.14006e360
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140042220
lea rdx, [rbp + 0x80]
lea rcx, [0x140187488]
call fcn.140042190
lea rcx, [rbp + 0x80]
call fcn.140042130
nop
lea rcx, [rbp + 0x100]
call fcn.140042130
nop
lea rcx, [rbp + 0x48]
call fcn.140068ca0
nop
lea rcx, [rbp + 8]
call fcn.140068ca0
nop
lea rcx, [rbp + 0x28]
call fcn.140068ca0
nop
lea rcx, [rbp - 0x10]
call fcn.140068ca0
nop
lea rcx, [rbp - 0x48]
call fcn.140068ca0
nop
lea rcx, [rbp - 0x60]
call fcn.140068ca0
xor al, al
jmp 0x14005937a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3