Function at 0x140063eb0
Capabilities:
Authenticate hmac
Log keystrokes via polling
Parse pe header
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa50]
sub rsp, 0xb50
mov rax, qword [0x14016d080]
xor rax, rsp
mov qword [rbp + 0x9a0], rax
call fcn.140061100
xor eax, eax
lea rcx, [rbp + 0x698]
mov qword [rbp + 0x5b8], rax
mov qword [rbp + 0x670], rax
call fcn.1400032c0
lea rcx, [rbp + 0x698]
call fcn.140063770
mov r8b, 0x24
mov byte [rbp + 0x380], 0x65
movzx r10d, r8b
movzx esi, r8b
movzx r15d, r8b
mov al, reloc.WLDAP32.dll_Ordinal_41
mov r11b, 0x35
xor r8b, 0x65
movzx r9d, al
mov byte [rbp + 0x384], r8b
movzx ebx, r11b
lea r8, [rbp + 0x381]
mov cl, 0x2a
mov dl, 0x26
xor cl, 0x65
xor dl, 0x65
xor al, 0x65
mov byte [rbp + 0x382], cl
mov byte [rbp + 0x383], dl
lea rcx, [rbp + 0x5b8]
xor r9b, 0x65
mov byte [rbp + 0x381], al
xor r10b, 0x65
mov byte [rbp + 0x385], r9b
xor r11b, 0x65
mov byte [rbp + 0x386], r10b
mov dil, reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x387], r11b
mov r14b, Ordinal_50
lea rdx, [rbp + 0x670]
xor r12d, r12d
xor bl, 0x65
xor dil, 0x65
mov byte [rbp + 0x388], bl
xor sil, 0x65
mov byte [rbp + 0x389], dil
xor r14b, 0x65
mov byte [rbp + 0x38a], sil
xor r15b, 0x65
mov byte [rbp + 0x38b], r14b
mov byte [rbp + 0x38c], r15b
mov byte [rbp + 0x38d], r12b
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
test eax, eax
jne 0x14006400b
mov rdx, qword [rbp + 0x5b8]
test rdx, rdx
je 0x14006400b
lea rcx, [rbp + 0x698]
call fcn.1400699f0
mov rcx, qword [rbp + 0x5b8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movdqa xmm1, xmmword [0x14015aab0]
mov r8, 0xffffffffffffffff
movd ecx, xmm1
movdqa xmm0, xmm1
movdqa xmm2, xmmword [0x14015ab00]
movdqa xmm3, xmmword [0x14015a9e0]
movdqu xmmword [rsp + 0x78], xmm2
xor byte [rsp + 0x79], cl
xor byte [rsp + 0x7a], cl
xor byte [rsp + 0x7b], cl
xor byte [rsp + 0x7c], cl
xor byte [rsp + 0x7d], cl
xor byte [rsp + 0x7e], cl
xor byte [rsp + 0x7f], cl
xor byte [rbp - 0x80], cl
xor byte [rbp - 0x7f], cl
xor byte [rbp - 0x7e], cl
xor byte [rbp - 0x7d], cl
xor byte [rbp - 0x7c], cl
xor byte [rbp - 0x7b], cl
xor byte [rbp - 0x7a], cl
xor byte [rbp - 0x79], cl
movdqu xmmword [rbp - 0x78], xmm3
xor byte [rbp - 0x77], cl
xor byte [rbp - 0x76], cl
xor byte [rbp - 0x75], cl
xor byte [rbp - 0x74], cl
xor byte [rbp - 0x73], cl
xor byte [rbp - 0x72], cl
xor byte [rbp - 0x71], cl
xor byte [rbp - 0x70], cl
xor byte [rbp - 0x6f], cl
xor byte [rbp - 0x6e], cl
xor byte [rbp - 0x6d], cl
xor byte [rbp - 0x6c], cl
xor byte [rbp - 0x6b], cl
movdqu xmmword [rsp + 0x68], xmm1
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor byte [rsp + 0x70], cl
xor byte [rsp + 0x71], cl
xor byte [rsp + 0x72], cl
xor byte [rsp + 0x73], cl
xor byte [rsp + 0x74], cl
xor byte [rsp + 0x75], cl
xor byte [rsp + 0x76], cl
xor byte [rsp + 0x77], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp - 0x69], r12b
xor al, cl
mov byte [rsp + 0x69], al
movd eax, xmm2
xor al, cl
mov byte [rsp + 0x78], al
movd eax, xmm3
xor al, cl
xor byte [rbp - 0x6a], cl
mov byte [rbp - 0x78], al
lea rax, [rsp + 0x69]
inc r8
cmp byte [rax + r8], r12b
jne 0x140064104
lea rdx, [rsp + 0x69]
lea rcx, [rbp + 0x698]
call fcn.140069970
movdqa xmm1, xmmword [0x14015ad30]
mov r8b, 0x6b
movd ecx, xmm1
movzx r14d, r8b
movdqa xmm2, xmmword [0x14015ada0]
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0xd8], xmm2
xor byte [rbp + 0xd9], cl
xor r8b, cl
xor byte [rbp + 0xda], cl
mov dl, 0x60
xor byte [rbp + 0xdb], cl
xor dl, cl
xor byte [rbp + 0xdc], cl
mov r9b, WSAGetLastError
xor byte [rbp + 0xdd], cl
xor r9b, cl
xor byte [rbp + 0xde], cl
mov r10b, 0x7c
xor byte [rbp + 0xdf], cl
xor r10b, cl
xor byte [rbp + 0xe0], cl
mov r11b, reloc.WS2_32.dll_WSAGetLastError
xor byte [rbp + 0xe1], cl
xor r11b, cl
xor byte [rbp + 0xe2], cl
mov bl, 0x68
xor byte [rbp + 0xe3], cl
xor bl, cl
xor byte [rbp + 0xe4], cl
mov dil, 0x7a
xor byte [rbp + 0xe5], cl
xor dil, cl
xor byte [rbp + 0xe6], cl
mov sil, 0x7e
xor byte [rbp + 0xe7], cl
xor sil, cl
movdqu xmmword [rbp + 0xc8], xmm1
xor byte [rbp + 0xca], cl
xor byte [rbp + 0xcb], cl
xor byte [rbp + 0xcc], cl
xor byte [rbp + 0xcd], cl
xor byte [rbp + 0xce], cl
xor byte [rbp + 0xcf], cl
xor byte [rbp + 0xd0], cl
xor byte [rbp + 0xd1], cl
xor byte [rbp + 0xd2], cl
xor byte [rbp + 0xd3], cl
xor byte [rbp + 0xd4], cl
xor byte [rbp + 0xd5], cl
xor byte [rbp + 0xd6], cl
xor byte [rbp + 0xd7], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp + 0xe9], r8b
mov r8, 0xffffffffffffffff
mov byte [rbp + 0xe8], dl
xor al, cl
mov byte [rbp + 0xea], r9b
mov byte [rbp + 0xc9], al
movd eax, xmm2
mov byte [rbp + 0xeb], r10b
mov byte [rbp + 0xec], r11b
xor al, cl
mov byte [rbp + 0xed], bl
xor r14b, cl
mov byte [rbp + 0xd8], al
mov byte [rbp + 0xf0], r14b
lea rax, [rbp + 0xc9]
mov byte [rbp + 0xee], dil
mov byte [rbp + 0xef], sil
mov byte [rbp + 0xf1], r12b
inc r8
cmp byte [rax + r8], r12b
jne 0x140064296
lea rdx, [rbp + 0xc9]
lea rcx, [rbp + 0x698]
call fcn.140069970
lea rdx, [0x140159308]
lea rcx, [rbp + 0x738]
call fcn.140003160
lea rcx, [rbp + 0x638]
call fcn.1400032c0
lea rcx, [rbp + 0x638]
call fcn.140063770
xor edx, edx
lea rcx, [rbp + 0x7a0]
mov r8d, 0x110
call sub.VCRUNTIME140.dll_memset
mov r8b, Ordinal_79
mov byte [rbp + 0x370], Ordinal_60
movzx esi, r8b
mov byte [rbp + 0x37d], r12b
movzx r15d, r8b
mov cl, 0x55
movzx r10d, cl
xor r8b, 0x3a
xor cl, 0x3a
mov byte [rbp + 0x374], r8b
mov dl, 0x4a
mov byte [rbp + 0x372], cl
xor dl, 0x3a
lea r8, [rbp + 0x371]
mov al, 0x66
mov byte [rbp + 0x373], dl
mov r9b, 0x53
lea rcx, [rbp + 0x588]
mov r11b, 0x54
lea rdx, [rbp + 0x698]
xor al, 0x3a
xor r9b, 0x3a
xor r10b, 0x3a
mov byte [rbp + 0x371], al
xor r11b, 0x3a
mov byte [rbp + 0x375], r9b
mov bl, 0x49
mov byte [rbp + 0x376], r10b
mov dil, reloc.WS2_32.dll_sendto
mov byte [rbp + 0x377], r11b
mov r14b, 0x42
xor bl, 0x3a
xor dil, 0x3a
mov byte [rbp + 0x378], bl
xor sil, 0x3a
mov byte [rbp + 0x379], dil
xor r14b, 0x3a
mov byte [rbp + 0x37a], sil
xor r15b, 0x3a
mov byte [rbp + 0x37b], r14b
mov byte [rbp + 0x37c], r15b
call fcn.14006adf0
mov r15d, 1
lea rcx, [rbp + 0x7a0]
mov rdx, rax
mov dword [rsp + 0x20], r15d
mov r8d, r15d
lea r9d, [r15 + 0x3f]
call fcn.140069000
lea rcx, [rbp + 0x588]
call fcn.140003100
xor r14d, r14d
mov ebx, r14d
mov dword [rbp + 0x3e4], r14d
mov r13d, r14d
mov dword [rsp + 0x60], ebx
cmp qword [rbp + 0x830], rbx
je 0x140067e74
mov rax, qword [rbp + 0x7a0]
mov dl, 0xa
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x7a0]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x638]
lea rcx, [rbp + 0x7a0]
call fcn.14006ff20
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x1400647fe
movdqa xmm1, xmmword [0x14015ad60]
mov cl, 0xa
movd r9d, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x160], xmm1
mov dl, 0x3e
mov r8b, Ordinal_50
xor cl, r9b
psrldq xmm0, 1
xor byte [rbp + 0x162], r9b
xor dl, r9b
xor byte [rbp + 0x163], r9b
xor r8b, r9b
xor byte [rbp + 0x164], r9b
mov sil, Ordinal_41
xor byte [rbp + 0x165], r9b
mov r10b, Ordinal_46
xor byte [rbp + 0x166], r9b
mov r11b, 0x7b
xor byte [rbp + 0x167], r9b
movzx r12d, sil
xor byte [rbp + 0x168], r9b
xor r10b, r9b
xor byte [rbp + 0x169], r9b
xor r11b, r9b
xor byte [rbp + 0x16a], r9b
xor sil, r9b
xor byte [rbp + 0x16b], r9b
xor r12b, r9b
xor byte [rbp + 0x16c], r9b
mov bl, 0x33
xor byte [rbp + 0x16d], r9b
xor bl, r9b
xor byte [rbp + 0x16e], r9b
mov dil, Ordinal_60
xor byte [rbp + 0x16f], r9b
xor dil, r9b
movd eax, xmm0
mov r14b, Ordinal_35
mov byte [rbp + 0x170], cl
xor r14b, r9b
mov byte [rbp + 0x171], dl
lea rcx, [rbp + 0x638]
xor al, r9b
mov byte [rbp + 0x172], r8b
mov r15b, 0x34
mov byte [rbp + 0x161], al
xor r15b, r9b
mov byte [rbp + 0x173], r10b
mov r13b, Ordinal_50
mov byte [rbp + 0x174], r11b
xor r13b, r9b
mov byte [rbp + 0x175], bl
xor r8d, r8d
mov byte [rbp + 0x176], dil
lea rdx, [rbp + 0x161]
mov byte [rbp + 0x177], sil
mov byte [rbp + 0x178], r14b
mov byte [rbp + 0x179], r15b
mov byte [rbp + 0x17a], r12b
mov byte [rbp + 0x17b], r13b
mov byte [rbp + 0x17c], 0
call fcn.1400698f0
cmp rax, 0xffffffffffffffff
je 0x140064601
xor r8d, r8d
lea rdx, [rbp + 0x738]
lea rcx, [rbp + 0x638]
call fcn.140069930
lea rcx, [rbp + 0x3e0]
mov r9, 0xffffffffffffffff
mov qword [rsp + 0x20], rcx
lea rdx, [rbp + 0x638]
lea rcx, [rbp + 0x518]
lea r8, [rax + 1]
call fcn.14006a530
xor edx, edx
lea rcx, [rbp + 0x518]
lea r8d, [rdx + 0xa]
call fcn.14005e150
lea rcx, [rbp + 0x518]
mov dword [rbp + 0x3e4], eax
mov r13d, eax
call fcn.140003100
jmp 0x140064608
mov r13d, dword [rbp + 0x3e4]
movdqa xmm1, xmmword [str.2YWKP_S_VmFKBWm]
mov cl, 0x6d
movd r8d, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x140], xmm1
mov dl, 0x59
mov r9b, 0x57
xor cl, r8b
psrldq xmm0, 1
xor byte [rbp + 0x142], r8b
xor dl, r8b
xor byte [rbp + 0x143], r8b
xor r9b, r8b
xor byte [rbp + 0x144], r8b
mov r10b, 0x4b
xor byte [rbp + 0x145], r8b
xor r10b, r8b
xor byte [rbp + 0x146], r8b
mov r11b, Ordinal_30
xor byte [rbp + 0x147], r8b
xor r11b, r8b
xor byte [rbp + 0x148], r8b
mov bl, 0x41
xor byte [rbp + 0x149], r8b
xor bl, r8b
xor byte [rbp + 0x14a], r8b
mov dil, 0x42
xor byte [rbp + 0x14b], r8b
xor dil, r8b
xor byte [rbp + 0x14c], r8b
mov sil, 0x40
xor byte [rbp + 0x14d], r8b
xor sil, r8b
xor byte [rbp + 0x14e], r8b
mov r14b, 0x5b
xor byte [rbp + 0x14f], r8b
xor r14b, r8b
movd eax, xmm0
mov r15b, 0x5c
xor r15b, r8b
mov byte [rbp + 0x150], cl
mov byte [rbp + 0x151], dl
lea rcx, [rbp + 0x638]
xor al, r8b
mov byte [rbp + 0x152], r9b
mov r12b, 0x46
mov byte [rbp + 0x141], al
xor r12b, r8b
mov byte [rbp + 0x153], r10b
xor r8d, r8d
mov byte [rbp + 0x154], r11b
lea rdx, [rbp + 0x141]
mov byte [rbp + 0x155], bl
mov byte [rbp + 0x156], dil
mov byte [rbp + 0x157], sil
mov byte [rbp + 0x158], r14b
mov byte [rbp + 0x159], r15b
mov byte [rbp + 0x15a], r12b
mov byte [rbp + 0x15b], 0
call fcn.1400698f0
cmp rax, 0xffffffffffffffff
je 0x1400647a7
xor r8d, r8d
lea rdx, [rbp + 0x738]
lea rcx, [rbp + 0x638]
call fcn.140069930
lea rcx, [rbp + 0x3e8]
mov r9, 0xffffffffffffffff
mov qword [rsp + 0x20], rcx
lea rdx, [rbp + 0x638]
lea rcx, [rbp + 0x538]
lea r8, [rax + 1]
call fcn.14006a530
xor edx, edx
lea rcx, [rbp + 0x538]
lea r8d, [rdx + 0xa]
call fcn.14005e150
lea rcx, [rbp + 0x538]
mov dword [rsp + 0x60], eax
mov ebx, eax
call fcn.140003100
jmp 0x1400647ab
mov ebx, dword [rsp + 0x60]
mov rcx, qword [rbp + 0x7a0]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x7a0]
add rcx, rdx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x638]
lea rcx, [rbp + 0x7a0]
call fcn.14006ff20
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x140064451
xor r14d, r14d
lea r15d, [r14 + 1]
lea rcx, [rbp + 0x7a0]
call fcn.140068f00
xorps xmm0, xmm0
mov dword [rbp + 0x958], r14d
xor eax, eax
mov word [rbp + 0x958], bx
movups xmmword [rbp + 0x97c], xmm0
mov word [rbp + 0x980], bx
mov cl, reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x99c], eax
xor cl, 0x55
mov dl, Ordinal_60
mov byte [rbp + 0x262], cl
xor dl, 0x55
mov dword [rbp + 0x950], r15d
mov al, 0x18
mov byte [rbp + 0x263], dl
mov r8b, Ordinal_50
mov dword [rbp + 0x984], 2
mov r9b, 0x36
mov byte [rbp + 0x260], 0x55
mov r10b, Ordinal_41
lea rdx, [rbp + 0x261]
mov r11b, 0x34
xor al, 0x55
xor r8b, 0x55
mov byte [rbp + 0x261], al
xor r9b, 0x55
mov byte [rbp + 0x264], r8b
xor r10b, 0x55
mov byte [rbp + 0x265], r9b
xor r11b, 0x55
mov byte [rbp + 0x266], r10b
movups xmmword [rbp + 0x96c], xmm0
mov bl, 0x33
mov dword [rbp + 0x978], r15d
mov dil, reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x267], r11b
xor bl, 0x55
xor esi, esi
xor dil, 0x55
mov byte [rbp + 0x268], bl
xor ecx, ecx
mov byte [rbp + 0x269], dil
movups xmmword [rbp + 0x95c], xmm0
mov byte [rbp + 0x26a], sil
movups xmmword [rbp + 0x98c], xmm0
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [0x140062570]
lea rcx, [rbp + 0x758]
call fcn.1400703a0
lea rdx, [0x1400623b0]
lea rcx, [rbp + 0x708]
call fcn.1400703a0
lea rcx, [rbp + 0x708]
call fcn.14005e2f0
call fcn.140040ea0
lea edx, [rsi + 0x14]
lea ecx, [rsi + 5]
call fcn.1400620f0
movsxd rdx, eax
lea rcx, [rbp + 0x678]
call fcn.140063790
lea rax, [0x140068170]
mov dword [rbp + 0x5c0], 0x50
xor ecx, ecx
mov qword [rbp + 0x5c8], rax
mov dword [rbp + 0x5c4], 0x40
mov qword [rbp + 0x5d0], rsi
call qword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
cmp qword [rbp + 0x690], 0xf
lea rcx, [rbp + 0x5c0]
mov qword [rbp + 0x5d8], rax
xorps xmm0, xmm0
lea rax, [rbp + 0x678]
movdqa xmmword [rbp + 0x5e0], xmm0
cmova rax, qword [rbp + 0x678]
xorps xmm1, xmm1
mov qword [rbp + 0x600], rax
movdqa xmmword [rbp + 0x5f0], xmm1
mov qword [rbp + 0x608], r14
call qword [sym.imp.USER32.dll_RegisterClassExA]
lea edx, [rsi + 0x14]
mov ecx, r15d
call fcn.1400620f0
lea edx, [rsi + 0x14]
mov ecx, r15d
mov edi, eax
call fcn.1400620f0
lea rcx, [rbp + 0x678]
mov ebx, eax
call fcn.1400030f0
mov rcx, qword [rbp + 0x5d8]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x600]
mov r8, rax
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], rcx
xor ecx, ecx
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rcx, rax
mov qword [rbp + 0x400], rax
mov r12, rax
call fcn.140067f60
test al, al
jne 0x140064ab5
call fcn.140068080
mov rdx, qword [rbp + 0x5d8]
mov rcx, qword [rbp + 0x600]
call qword [sym.imp.USER32.dll_UnregisterClassA]
lea rcx, [rbp + 0x678]
call fcn.140003100
lea rcx, [rbp + 0x708]
call fcn.14005e2d0
lea rcx, [rbp + 0x758]
call fcn.14005e2d0
lea rcx, [rbp + 0x7a0]
call fcn.140067ef0
lea rcx, [rbp + 0x638]
call fcn.140003100
lea rcx, [rbp + 0x738]
call fcn.140003100
lea rcx, [rbp + 0x698]
call fcn.140003100
mov eax, r15d
jmp 0x140067eb3
movaps xmmword [rsp + 0xb30], xmm7
xor edx, edx
movaps xmmword [rsp + 0xb20], xmm8
mov rcx, r12
movaps xmmword [rsp + 0xb10], xmm9
movaps xmmword [rsp + 0xb00], xmm10
movaps xmmword [rsp + 0xaf0], xmm11
movaps xmmword [rsp + 0xae0], xmm12
movaps xmmword [rsp + 0xad0], xmm13
movaps xmmword [rsp + 0xac0], xmm14
movaps xmmword [rsp + 0xab0], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89_WIP
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov edx, 0x37f0
mov r9d, 8
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r8d, 0x438
call fcn.140017720
xor ecx, ecx
call fcn.14000a2d0
call fcn.14000a3b0
xor ecx, ecx
mov qword [rbp + 0x3f0], rax
mov r15, rax
or dword [rax], 0x401
call fcn.140033740
call fcn.140007290
test dword [r15], 0x400
mov rdi, rax
mov qword [rbp + 0x3f8], rax
je 0x140064b9a
mov dword [rax + 0x10], r14d
mov dword [rax + 0xf4], 0x3f800000
movss xmm14, dword [0x14015a7b0]
lea rcx, [rbp + 0x418]
mov dword [rax + 0x10], 0x41200000
movaps xmm2, xmm14
mov dword [rax + 0x44], 0x41200000
movaps xmm1, xmm14
mov dword [rax + 0x2c], 0x41200000
mov dword [rax + 0x88], 0x41200000
mov dword [rax + 0x34], 0x41200000
mov dword [rax + 0x78], 0x41200000
mov dword [rax + 0x80], 0x41200000
mov dword [rax + 0x84], 0x41200000
mov dword [rax + 0x48], 0x3f800000
movaps xmmword [rsp + 0xb40], xmm6
call fcn.140004650
movss xmm1, dword [0x14015a68c]
lea rcx, [rbp + 0x420]
movaps xmm2, xmm1
movsd xmm0, qword [rax]
movsd qword [rdi + 0x18], xmm0
call fcn.140004650
mov rcx, r12
movsd xmm0, qword [rax]
movsd qword [rdi + 0x20], xmm0
call fcn.14003eab0
mov rdx, qword [0x14016e3b0]
mov rcx, qword [0x14016e360]
call fcn.14003e480
lea rcx, [rbp + 0x8b0]
call fcn.140037da0
movss xmm3, dword [0x14015a764]
lea rdx, [0x1400e72b0]
mov byte [rbp + 0x8f8], 1
mov r8d, 0x3afb6
mov byte [rbp + 0x8d0], 1
mov rcx, qword [r15 + 0x50]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
call fcn.1400385e0
movss xmm8, dword [0x14015a774]
lea rax, [0x14015a588]
mov rcx, qword [r15 + 0x50]
lea rdx, [0x140122270]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm8
lea rax, [rbp + 0x8b0]
mov r8d, 0x34b5f
mov qword [rsp + 0x20], rax
call fcn.1400385e0
movss xmm9, dword [0x14015a6d4]
lea rcx, [rbp + 0x658]
movss xmm3, dword [0x14015a694]
movss xmm2, dword [0x14015a690]
movss xmm1, dword [0x14015a684]
movss dword [rsp + 0x20], xmm9
mov dword [rbp + 0x614], 0x3f000000
mov dword [rbp + 0x630], 0x3f19999a
mov dword [rbp + 0x634], 0x3f4ccccd
mov dword [rbp + 0x5b0], esi
mov dword [rbp + 0x5ac], esi
mov dword [rbp + 0x5a8], esi
mov byte [rbp + 0x610], sil
call fcn.140004660
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm9
xorps xmm2, xmm2
lea rcx, [rbp + 0x618]
xorps xmm1, xmm1
call fcn.140004660
movss xmm13, dword [0x14015a75c]
xor bl, bl
movss xmm11, dword [0x14015a794]
mov esi, 0xffff8001
movss xmm7, dword [0x14015a830]
mov r12d, 1
movss xmm10, dword [0x14015a78c]
movss xmm15, dword [0x14015a7e8]
movss xmm12, dword [0x14015a718]
mov dword [rsp + 0x60], ebx
xor r9d, r9d
mov r14d, 4
xor r8d, r8d
mov dword [rsp + 0x20], r12d
xor edx, edx
lea rcx, [rbp + 0x768]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140064e12
nop dword [rax]
lea rcx, [rbp + 0x768]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x768]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x770], 0x12
lea rcx, [rbp + 0x768]
movzx ebx, bl
cmove ebx, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140064dc0
mov dword [rsp + 0x60], ebx
test bl, bl
jne 0x140067dcb
call fcn.14003e6e0
call fcn.14003fae0
call fcn.14000c2e0
xorps xmm0, xmm0
mov dword [rbp + 0x6d0], Ordinal_27
xor eax, eax
lea rcx, [rbp + 0x6d0]
movups xmmword [rbp + 0x6d4], xmm0
mov dword [rbp + 0x6e4], eax
call qword [sym.imp.USER32.dll_GetCursorInfo]
test eax, eax
je 0x140064e6b
mov eax, dword [rbp + 0x6d4]
test eax, eax
jne 0x140064e60
mov byte [0x14016e316], al
jmp 0x140064e6b
cmp eax, 1
jne 0x140064e6b
mov byte [0x14016e316], al
mov ecx, dword [0x14016e33c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064e89
cmp byte [0x14016e346], 0
sete byte [0x14016e346]
mov ecx, dword [0x14016e3b8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064ea7
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x14016d15d]
cmp byte [0x14016e347], 0
je 0x140064edb
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, si
je 0x140064ece
inc ebx
cmp ebx, 0xbe
jle 0x140064eb5
jmp 0x140064edb
mov dword [0x14016e33c], ebx
mov byte [0x14016e347], 0
cmp byte [0x14016e344], 0
je 0x140064f37
mov ebx, 8
nop dword [rax]
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, si
je 0x140064f09
inc ebx
cmp ebx, 0xbe
jle 0x140064ef0
jmp 0x140064f16
mov dword [0x14016e3b8], ebx
mov byte [0x14016e344], 0
mov ecx, 4
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140064f37
mov dword [0x14016e3b8], 4
mov byte [0x14016e344], 0
cmp byte [0x14016e345], 0
je 0x140064f6b
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, si
je 0x140064f5e
inc ebx
cmp ebx, 0xbe
jle 0x140064f45
jmp 0x140064f6b
mov dword [0x14016e334], ebx
mov byte [0x14016e345], 0
cmp byte [0x14016e314], 0
je 0x140064fa6
mov ebx, 8
nop dword [rax]
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, si
je 0x140064f99
inc ebx
cmp ebx, 0xbe
jle 0x140064f80
jmp 0x140064fa6
mov dword [0x14016e350], ebx
mov byte [0x14016e314], 0
cmp byte [0x14016e354], 0
je 0x140064fda
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, si
je 0x140064fcd
inc ebx
cmp ebx, 0xbe
jle 0x140064fb4
jmp 0x140064fda
mov dword [0x14016e310], ebx
mov byte [0x14016e354], 0
movss xmm2, dword [rbp + 0x634]
lea rax, [rbp + 0x5a8]
movss xmm1, dword [rbp + 0x630]
lea r9, [rbp + 0x5b0]
movss xmm0, dword [rbp + 0x614]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x5ac]
mov qword [rsp + 0x20], rax
call fcn.140006c80
movss xmm3, dword [rbp + 0x5a8]
lea rcx, [rbp + 0x558]
movss xmm2, dword [rbp + 0x5ac]
movss xmm1, dword [rbp + 0x5b0]
movss dword [rsp + 0x20], xmm9
call fcn.140004660
cmp byte [rbp + 0x610], 0
movups xmm1, xmmword [rax]
movups xmmword [rbp + 0x618], xmm1
je 0x14006509d
movss xmm0, dword [rbp + 0x614]
comiss xmm0, xmm9
jb 0x14006506e
mov dword [rbp + 0x614], 0
jmp 0x14006509d
call fcn.14000a3b0
movss xmm0, dword [rbp + 0x614]
movss xmm1, dword [rax + 0x10]
mulss xmm1, xmm13
divss xmm1, xmm11
addss xmm0, xmm1
movups xmm1, xmmword [rbp + 0x618]
movss dword [rbp + 0x614], xmm0
movups xmmword [rdi + 0x2e8], xmm1
lea rcx, [rbp + 0x568]
movups xmm0, xmmword [rbp + 0x618]
movups xmmword [rdi + 0x1f8], xmm0
movups xmm1, xmmword [rbp + 0x618]
movups xmmword [rdi + 0x208], xmm1
movups xmm0, xmmword [rbp + 0x618]
movups xmmword [rdi + 0x1e8], xmm0
movups xmm1, xmmword [rbp + 0x618]
movups xmmword [rdi + 0x348], xmm1
movups xmm0, xmmword [rbp + 0x618]
movups xmmword [rdi + 0x2b8], xmm0
movups xmm1, xmmword [rbp + 0x618]
movups xmmword [rdi + 0x2c8], xmm1
movups xmm0, xmmword [rbp + 0x618]
movups xmmword [rdi + 0x298], xmm0
movss xmm0, dword [0x14015a67c]
movss xmm3, dword [rbp + 0x5a8]
movss xmm2, dword [rbp + 0x5ac]
movss xmm1, dword [rbp + 0x5b0]
movss dword [rsp + 0x20], xmm0
call fcn.140004660
cmp byte [0x14016e346], 0
movups xmm0, xmmword [rax]
movups xmmword [rdi + 0x3d8], xmm0
jne 0x14006687c
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r14 + rcx]
cmp dword [0x14016e44c], eax
jle 0x14006519e
lea rcx, [0x14016e44c]
call fcn.1400d04cc
cmp dword [0x14016e44c], 0xffffffff
jne 0x14006519e
lea rcx, [rbp + 0x578]
call fcn.140063ca0
lea rcx, [0x14016e44c]
movups xmm0, xmmword [rax]
movups xmmword [0x14016e450], xmm0
call fcn.1400d0460
lea rdx, [rbp + 0x618]
xor ecx, ecx
call fcn.140007360
cmp byte [0x14016e3f8], 0
je 0x140065215
cmp byte [0x14016dff9], 0
je 0x140065215
movdqa xmm1, xmmword [str._QJ_MWTQPA__nAA]
lea rbx, [rbp + 0x69]
movdqu xmmword [rbp + 0x68], xmm1
mov byte [rbp + 0x77], 0
movd ecx, xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
xor byte [rbp + 0x6a], cl
xor byte [rbp + 0x6b], cl
xor byte [rbp + 0x6c], cl
xor al, cl
xor byte [rbp + 0x6d], cl
xor byte [rbp + 0x6e], cl
xor byte [rbp + 0x6f], cl
xor byte [rbp + 0x70], cl
xor byte [rbp + 0x71], cl
xor byte [rbp + 0x72], cl
xor byte [rbp + 0x73], cl
xor byte [rbp + 0x74], cl
xor byte [rbp + 0x75], cl
xor byte [rbp + 0x76], cl
mov byte [rbp + 0x69], al
jmp 0x1400652be
xor r12d, r12d
mov byte [rbp + 0x2f0], Ordinal_32
mov bl, 0x71
mov byte [rbp + 0x2fb], r12b
xor bl, 0x1c
mov dil, reloc.WS2_32.dll_WSAStartup
xor dil, 0x1c
mov byte [rbp + 0x2f8], bl
mov sil, 0x78
mov byte [rbp + 0x2f9], dil
mov rdi, qword [rbp + 0x3f8]
lea rbx, [rbp + 0x2f1]
mov al, reloc.WS2_32.dll_WSAGetLastError
mov cl, 0x6c
xor al, 0x1c
xor cl, 0x1c
mov dl, WSAGetLastError
mov byte [rbp + 0x2f1], al
xor dl, 0x1c
mov byte [rbp + 0x2f2], cl
mov r8b, 0x75
mov byte [rbp + 0x2f3], dl
xor r8b, 0x1c
mov r9b, WSAStartup
xor r9b, 0x1c
mov byte [rbp + 0x2f4], r8b
mov r10b, 0x68
mov byte [rbp + 0x2f5], r9b
xor r10b, 0x1c
mov r11b, reloc.WLDAP32.dll_Ordinal_60
xor r11b, 0x1c
mov byte [rbp + 0x2f6], r10b
xor sil, 0x1c
mov byte [rbp + 0x2f7], r11b
mov byte [rbp + 0x2fa], sil
mov r12d, 1
mov esi, 0xffff8001
lea rcx, [rbp + 0x678]
call fcn.1400030f0
mov rcx, rax
lea rdx, [0x14016d151]
mov r9, rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_32
call fcn.140012f60
mov ecx, r12d
call fcn.1400073c0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140067dcb
mov ecx, 0x58
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140065374
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140065374
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140065374
mov ecx, 0x58
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ebx, dword [rsp + 0x60]
test ax, ax
je 0x140064d95
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140064d95
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140064d95
cmp byte [0x14016e3f8], 0
sete byte [0x14016e3f8]
cmp byte [0x14016e315], 0
je 0x140065437
lea rdx, str.Minecraft
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, rbx
jne 0x140065437
xorps xmm0, xmm0
mov dword [rbp + 0x6b8], Ordinal_27
xor eax, eax
lea rcx, [rbp + 0x6b8]
movups xmmword [rbp + 0x6bc], xmm0
mov dword [rbp + 0x6cc], eax
call qword [sym.imp.USER32.dll_GetCursorInfo]
test eax, eax
je 0x140065437
cmp dword [rbp + 0x6bc], 0
jne 0x140065437
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140065437
mov r8d, Ordinal_41
lea rdx, [rbp + 0x950]
mov ecx, r12d
call qword [sym.imp.USER32.dll_SendInput]
lea rdx, [rbp + 0x3ec]
mov dword [rbp + 0x3ec], 0x7d
lea rcx, [rbp + 0x428]
call fcn.14006b400
mov rcx, rax
call fcn.14006b410
mov r8d, Ordinal_41
lea rdx, [rbp + 0x978]
mov ecx, r12d
call qword [sym.imp.USER32.dll_SendInput]
lea rcx, [rbp + 0x430]
call fcn.140017e10
lea rcx, [rbp + 0x410]
movss xmm6, dword [rax + 4]
mulss xmm6, dword [0x14015a674]
subss xmm6, dword [0x14015a730]
call fcn.140017e10
movaps xmm2, xmm6
lea rcx, [rbp + 0x628]
movss xmm1, dword [rax]
divss xmm1, dword [0x14015a734]
call fcn.140004650
cmp byte [0x14016e3f8], 0
je 0x140067bc5
cmp byte [0x14016dff9], 0
je 0x140067bc5
call fcn.14007af20
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400654db
movss xmm2, dword [0x14015a7c8]
lea rcx, [rbp + 0x438]
movss xmm1, dword [0x14015a7dc]
call fcn.140004650
mov rcx, rax
xor edx, edx
call fcn.140016a20
mov byte [reloc.WS2_32.dll_accept], 0
mov byte [0x14016e3e8], 1
lea rdx, [rbp + 0x628]
lea rcx, [0x14015930c]
call fcn.1400446f0
test al, al
je 0x140065502
movdqa xmm0, xmmword [reloc.WS2_32.dll_accept]
movdqu xmmword [reloc.WS2_32.dll_accept], xmm0
lea rdx, [rbp + 0x628]
lea rcx, [0x140159310]
call fcn.1400446f0
test al, al
je 0x140065529
movdqa xmm0, xmmword [0x14015a890]
movdqu xmmword [reloc.WS2_32.dll_accept], xmm0
lea rdx, [rbp + 0x628]
lea rcx, [0x140159314]
call fcn.1400446f0
test al, al
je 0x140065550
movdqa xmm0, xmmword [0x14015a8a0]
movdqu xmmword [reloc.WS2_32.dll_accept], xmm0
lea rdx, [rbp + 0x628]
lea rcx, [0x140159318]
call fcn.1400446f0
test al, al
je 0x140065577
movdqa xmm0, xmmword [0x14015a8e0]
movdqu xmmword [reloc.WS2_32.dll_accept], xmm0
xorps xmm2, xmm2
lea rcx, [rbp + 0x448]
xorps xmm1, xmm1
call fcn.140004650
lea rcx, [rbp + 0x450]
mov rbx, rax
call fcn.140016750
lea rcx, [rbp + 0x458]
movss xmm6, dword [rax + 4]
addss xmm6, dword [0x14015a778]
call fcn.140016750
movss xmm1, dword [rbp + 0x628]
lea rcx, [rbp + 0x460]
movaps xmm2, xmm6
addss xmm1, dword [rax]
addss xmm1, xmm13
call fcn.140004650
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.140016a40
lea rcx, [rbp + 0x468]
call fcn.140016900
lea rcx, [rbp + 0x470]
movss xmm6, dword [rax + 4]
subss xmm6, dword [0x14015a77c]
call fcn.140016900
movaps xmm2, xmm6
lea rcx, [rbp + 0x478]
movss xmm1, dword [rax]
subss xmm1, dword [rbp + 0x628]
subss xmm1, dword [0x14015a76c]
call fcn.140004650
mov cl, 0x7f
mov byte [rbp + 0x270], 0x5c
movzx edx, cl
mov r8b, 0x3f
mov r9b, 0x33
mov r10b, reloc.WLDAP32.dll_Ordinal_50
mov r11b, Ordinal_41
xor dl, 0x5c
movzx edi, r10b
mov byte [rbp + 0x272], dl
movzx esi, r11b
xor cl, 0x5c
xor r8b, 0x5c
mov byte [rbp + 0x271], cl
xor r9b, 0x5c
mov byte [rbp + 0x273], r8b
mov byte [rbp + 0x274], r9b
lea rcx, [rbp + 0x271]
xor r10b, 0x5c
xor r11b, 0x5c
mov bl, reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x275], r10b
xor r12d, r12d
mov byte [rbp + 0x276], r11b
xor bl, 0x5c
mov byte [rbp + 0x27a], r12b
xor dil, 0x5c
mov byte [rbp + 0x277], bl
xor sil, 0x5c
mov byte [rbp + 0x278], dil
mov rdx, rax
mov byte [rbp + 0x279], sil
xor r9d, r9d
xor r8d, r8d
call fcn.14000ff60
call fcn.140046b30
xorps xmm0, xmm0
call fcn.140017b80
cmp dword [reloc.WS2_32.dll_accept], r12d
je 0x140065dc4
movdqa xmm1, xmmword [0x14015aa80]
lea rbx, [0x1401582f4]
mov r8d, dword [0x14016e338]
lea r9d, [r12 + 0x14]
movd ecx, xmm1
lea rdx, [0x14016e330]
movdqu xmmword [rbp + 0x10], xmm1
mov byte [rbp + 0x20], r12b
xor r13d, r13d
xor byte [rbp + 0x12], cl
movdqa xmm0, xmm1
xor byte [rbp + 0x13], cl
xor byte [rbp + 0x14], cl
xor byte [rbp + 0x15], cl
xor byte [rbp + 0x16], cl
xor byte [rbp + 0x17], cl
xor byte [rbp + 0x18], cl
xor byte [rbp + 0x19], cl
xor byte [rbp + 0x1a], cl
xor byte [rbp + 0x1b], cl
xor byte [rbp + 0x1c], cl
xor byte [rbp + 0x1d], cl
xor byte [rbp + 0x1e], cl
xor byte [rbp + 0x1f], cl
psrldq xmm0, 1
movd eax, xmm0
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rbx
xor al, cl
lea rcx, [rbp + 0x11]
mov byte [rbp + 0x11], al
call fcn.140049bd0
mov r9d, dword [0x14016e330]
test al, al
je 0x14006578c
test r9d, r9d
je 0x140065782
cmp dword [0x14016e338], r12d
jne 0x140065782
mov dword [0x14016e338], 1
mov dword [reloc.WLDAP32.dll_Ordinal_30], 0x1e
movdqa xmm1, xmmword [0x14015ab80]
lea rdx, [0x14016e338]
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp - 8], xmm1
xor r8d, r8d
mov dword [rsp + 0x28], r13d
psrldq xmm0, 1
xor byte [rbp - 6], cl
xor byte [rbp - 5], cl
xor byte [rbp - 4], cl
xor byte [rbp - 3], cl
xor byte [rbp - 2], cl
xor byte [rbp - 1], cl
xor byte [rbp], cl
xor byte [rbp + 1], cl
xor byte [rbp + 2], cl
xor byte [rbp + 3], cl
xor byte [rbp + 4], cl
xor byte [rbp + 5], cl
xor byte [rbp + 6], cl
xor byte [rbp + 7], cl
movd eax, xmm0
mov byte [rbp + 8], r12b
mov qword [rsp + 0x20], rbx
xor al, cl
lea rcx, [rbp - 7]
mov byte [rbp - 7], al
call fcn.140049bd0
test al, al
je 0x140065818
cmp dword [0x14016e338], r12d
jne 0x14006580e
mov dword [0x14016e330], r13d
mov dword [reloc.WLDAP32.dll_Ordinal_30], 0x1e
movdqa xmm1, xmmword [0x14015aa60]
lea rdx, [0x14016d158]
movss xmm3, dword [0x14015a744]
movdqa xmm0, xmm1
movss xmm2, dword [0x14015a700]
movd ecx, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov dword [rsp + 0x28], r13d
xor byte [rbp - 0x1e], cl
xor byte [rbp - 0x1d], cl
xor byte [rbp - 0x1c], cl
xor byte [rbp - 0x1b], cl
xor byte [rbp - 0x1a], cl
xor byte [rbp - 0x19], cl
xor byte [rbp - 0x18], cl
xor byte [rbp - 0x17], cl
xor byte [rbp - 0x16], cl
xor byte [rbp - 0x15], cl
xor byte [rbp - 0x14], cl
xor byte [rbp - 0x13], cl
xor byte [rbp - 0x12], cl
xor byte [rbp - 0x11], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp - 0x10], r12b
xor al, cl
lea rcx, [rbp - 0x1f]
mov byte [rbp - 0x1f], al
lea rax, str._.0f
mov qword [rsp + 0x20], rax
call fcn.140049b90
lea rcx, [rbp + 0x668]
call fcn.140017af0
movss xmm0, dword [rbp + 0x66c]
call fcn.140017b40
movdqa xmm1, xmmword [0x14015acc0]
mov dl, 0x55
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
mov r8b, Ordinal_79
mov r9b, reloc.WLDAP32.dll_Ordinal_79
xor dl, cl
psrldq xmm0, 1
xor byte [rbp + 0xb2], cl
xor r8b, cl
xor byte [rbp + 0xb3], cl
xor r9b, cl
xor byte [rbp + 0xb4], cl
xor byte [rbp + 0xb5], cl
xor byte [rbp + 0xb6], cl
xor byte [rbp + 0xb7], cl
xor byte [rbp + 0xb8], cl
xor byte [rbp + 0xb9], cl
xor byte [rbp + 0xba], cl
xor byte [rbp + 0xbb], cl
xor byte [rbp + 0xbc], cl
xor byte [rbp + 0xbd], cl
xor byte [rbp + 0xbe], cl
xor byte [rbp + 0xbf], cl
movd eax, xmm0
mov byte [rbp + 0xc0], dl
lea rdx, [0x14016dffe]
mov byte [rbp + 0xc1], r8b
xor al, cl
mov byte [rbp + 0xc2], r9b
lea rcx, [rbp + 0xb1]
mov byte [rbp + 0xb1], al
mov byte [rbp + 0xc3], r12b
call fcn.140045b00
movdqa xmm1, xmmword [0x14015ad40]
mov dl, listen
movdqa xmm0, xmm1
movd ecx, xmm1
psrldq xmm0, 1
mov r8b, Ordinal_45
movd eax, xmm0
mov r9b, Ordinal_41
movdqu xmmword [rbp + 0xf8], xmm1
mov r10b, reloc.WLDAP32.dll_Ordinal_32
xor al, cl
xor byte [rbp + 0xfa], cl
xor dl, cl
xor byte [rbp + 0xfb], cl
xor r8b, cl
xor byte [rbp + 0xfc], cl
xor r9b, cl
xor byte [rbp + 0xfd], cl
xor r10b, cl
xor byte [rbp + 0xfe], cl
xor byte [rbp + 0xff], cl
xor byte [rbp + 0x100], cl
xor byte [rbp + 0x101], cl
xor byte [rbp + 0x102], cl
xor byte [rbp + 0x103], cl
xor byte [rbp + 0x104], cl
xor byte [rbp + 0x105], cl
xor byte [rbp + 0x106], cl
xor byte [rbp + 0x107], cl
lea rcx, [rbp + 0xf9]
mov byte [rbp + 0x108], dl
lea rdx, [0x14016e02e]
mov byte [rbp + 0xf9], al
mov byte [rbp + 0x109], r8b
mov byte [rbp + 0x10a], r9b
mov byte [rbp + 0x10b], r10b
mov byte [rbp + 0x10c], r12b
call fcn.140045b00
mov r8b, WSAStartup
mov byte [rbp + 0x330], reloc.WS2_32.dll_socket
movzx esi, r8b
mov byte [rbp + 0x33c], r12b
mov cl, 0x76
mov dl, 0x7c
xor cl, 0x17
xor dl, 0x17
mov bl, 0x63
mov byte [rbp + 0x332], cl
mov al, 0x51
mov byte [rbp + 0x333], dl
mov r9b, gethostname
lea rdx, [0x14016dffd]
mov r10b, 0x5d
lea rcx, [rbp + 0x331]
mov r11b, 0x7e
movzx edi, bl
xor al, 0x17
xor r8b, 0x17
xor r9b, 0x17
mov byte [rbp + 0x331], al
xor r10b, 0x17
mov byte [rbp + 0x334], r8b
xor r11b, 0x17
mov byte [rbp + 0x335], r9b
mov r14b, 0x65
mov byte [rbp + 0x336], r10b
xor sil, 0x17
mov byte [rbp + 0x337], r11b
xor bl, 0x17
mov byte [rbp + 0x33a], sil
xor dil, 0x17
mov byte [rbp + 0x338], bl
xor r14b, 0x17
mov byte [rbp + 0x339], dil
mov byte [rbp + 0x33b], r14b
call fcn.140045b00
mov al, Ordinal_30
mov byte [rbp + 0x2b0], 0x5c
xor al, 0x5c
mov cl, 0x2a
xor cl, 0x5c
mov byte [rbp + 0x2b1], al
mov dl, 0x33
mov byte [rbp + 0x2b2], cl
xor dl, 0x5c
mov r8b, 0x35
mov r9b, gethostname
mov r10b, 0x7c
mov r11b, reloc.WS2_32.dll_recvfrom
mov bl, reloc.WS2_32.dll_gethostname
mov dil, reloc.WLDAP32.dll_Ordinal_50
mov sil, reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x2b3], dl
lea rcx, [rbp + 0x2b1]
xor r8b, 0x5c
mov byte [rbp + 0x2bb], r12b
xor r9b, 0x5c
mov byte [rbp + 0x2b4], r8b
xor r10b, 0x5c
mov byte [rbp + 0x2b5], r9b
xor r11b, 0x5c
mov byte [rbp + 0x2b6], r10b
xor bl, 0x5c
mov byte [rbp + 0x2b7], r11b
xor dil, 0x5c
mov byte [rbp + 0x2b8], bl
xor sil, 0x5c
mov byte [rbp + 0x2b9], dil
lea rdx, [0x14016d15c]
mov byte [rbp + 0x2ba], sil
call fcn.140045b00
mov cl, 0x2b
mov byte [rbp + 0x1b0], 0x5b
xor cl, 0x5b
mov dl, reloc.WLDAP32.dll_Ordinal_41
xor dl, 0x5b
mov byte [rbp + 0x1b2], cl
mov al, 8
mov byte [rbp + 0x1b3], dl
mov r8b, reloc.WLDAP32.dll_Ordinal_50
lea rdx, [0x14016e315]
mov r9b, 0x35
lea rcx, [rbp + 0x1b1]
mov r10b, 0x2f
xor r11d, r11d
xor al, 0x5b
mov byte [rbp + 0x1b7], r11b
xor r8b, 0x5b
mov byte [rbp + 0x1b1], al
xor r9b, 0x5b
mov byte [rbp + 0x1b4], r8b
xor r10b, 0x5b
mov byte [rbp + 0x1b5], r9b
mov byte [rbp + 0x1b6], r10b
call fcn.140045b00
movaps xmm2, xmm8
lea rcx, [rbp + 0x480]
movaps xmm1, xmm8
call fcn.140004650
mov dl, 0x77
mov byte [rbp + 0x280], 0x54
movzx r8d, dl
mov byte [rbp + 0x28a], r12b
mov r11b, 0x33
xor dl, 0x54
movzx ebx, r11b
mov byte [rbp + 0x282], dl
mov cl, Ordinal_45
mov r9b, reloc.WLDAP32.dll_Ordinal_32
xor cl, 0x54
mov r10b, Ordinal_60
mov byte [rbp + 0x281], cl
xor r8b, 0x54
xor r9b, 0x54
mov byte [rbp + 0x283], r8b
xor r10b, 0x54
mov byte [rbp + 0x284], r9b
xor r11b, 0x54
mov byte [rbp + 0x285], r10b
mov dil, gethostname
mov byte [rbp + 0x286], r11b
mov sil, Ordinal_50
lea rcx, [rbp + 0x281]
xor bl, 0x54
xor dil, 0x54
xor sil, 0x54
mov byte [rbp + 0x287], bl
mov rdx, rax
mov byte [rbp + 0x288], dil
mov byte [rbp + 0x289], sil
call fcn.1400446f0
test al, al
je 0x140065cb7
cmp byte [0x14016e344], r12b
mov dword [0x14016e3b8], r13d
je 0x140065cb7
mov byte [0x14016e344], r12b
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
movaps xmm2, xmm8
lea rcx, [rbp + 0x488]
movaps xmm1, xmm10
call fcn.140004650
mov r8b, reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x2e0], 0x55
mov r11b, Ordinal_50
mov byte [rbp + 0x2eb], r12b
movzx r9d, r8b
movzx esi, r11b
mov cl, reloc.WLDAP32.dll_Ordinal_33
mov dl, 0x3a
xor cl, 0x55
xor dl, 0x55
mov r10b, reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x2e1], cl
mov byte [rbp + 0x2e2], dl
lea rcx, [rbp + 0x2e1]
xor r9b, 0x55
xor r8b, 0x55
xor r10b, 0x55
mov byte [rbp + 0x2e4], r9b
xor r11b, 0x55
mov byte [rbp + 0x2e3], r8b
mov bl, 0x75
mov byte [rbp + 0x2e5], r10b
mov dil, 0x3e
mov byte [rbp + 0x2e6], r11b
mov r14b, Ordinal_46
xor sil, 0x55
xor bl, 0x55
mov byte [rbp + 0x2e9], sil
xor dil, 0x55
mov byte [rbp + 0x2e7], bl
xor r14b, 0x55
mov byte [rbp + 0x2e8], dil
mov rdx, rax
mov byte [rbp + 0x2ea], r14b
call fcn.1400446f0
test al, al
je 0x140065dad
cmp byte [0x14016e347], r13b
mov ecx, r13d
mov dl, 1
mov dword [0x14016e3b8], ecx
mov byte [0x14016e344], dl
je 0x140065dba
mov dword [0x14016e33c], r13d
mov byte [0x14016e347], cl
call fcn.140063cd0
jmp 0x140066860
mov ecx, dword [0x14016e3b8]
movzx edx, byte [0x14016e344]
call fcn.140063cd0
jmp 0x140066860
cmp dword [0x14016d1f4], r12d
je 0x14006694e
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r14 + rcx]
cmp dword [0x14016e464], eax
jle 0x140065e16
lea rcx, [0x14016e464]
call fcn.1400d04cc
cmp dword [0x14016e464], 0xffffffff
jne 0x140065e16
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_clock]
lea rcx, [0x14016e464]
mov dword [0x14016e460], eax
call fcn.1400d0460
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_clock]
movss xmm3, dword [0x14015a734]
mov ecx, eax
sub ecx, dword [0x14016e460]
mov ebx, eax
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm0, xmm15
comiss xmm0, xmm3
jb 0x140065e8f
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movss xmm2, dword [0x14016d200]
subss xmm2, dword [0x14016d154]
movss xmm1, dword [0x14015a7f8]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm1, xmm2
divss xmm0, xmm1
addss xmm0, dword [0x14016d154]
movss dword [0x14016d204], xmm0
call fcn.140061d80
movss xmm3, dword [0x14015a734]
mov dword [0x14016e460], ebx
mov cl, 0x63
mov byte [rbp + 0x230], 6
xor cl, 6
lea r14, str._.2f
mov dl, 0x67
mov byte [rbp + 0x232], cl
xor dl, 6
lea rcx, [rbp + 0x231]
mov al, 0x54
mov byte [rbp + 0x233], dl
mov r8b, 0x65
lea rdx, [0x14016d154]
mov r9b, WSAGetLastError
mov r10b, 0x26
mov r11b, 0x4b
xor al, 6
xor r8b, 6
mov byte [rbp + 0x231], al
xor r9b, 6
mov byte [rbp + 0x234], r8b
xor r10b, 6
mov byte [rbp + 0x235], r9b
xor r11b, 6
mov byte [rbp + 0x236], r10b
mov bl, reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x237], r11b
mov dil, 0x68
xor r13d, r13d
xor esi, esi
mov dword [rsp + 0x28], r13d
xor bl, 6
mov byte [rbp + 0x23a], sil
xor dil, 6
mov byte [rbp + 0x238], bl
movaps xmm2, xmm12
mov byte [rbp + 0x239], dil
mov qword [rsp + 0x20], r14
call fcn.140049b90
test al, al
je 0x140065f5c
movss xmm1, dword [0x14016d200]
movss xmm0, dword [0x14016d154]
comiss xmm0, xmm1
jbe 0x140065f5c
movss dword [0x14016d154], xmm1
movss xmm3, dword [0x14015a734]
mov dl, 7
movzx ebx, dl
mov dword [rsp + 0x28], r13d
xor dl, 0x66
mov byte [rbp + 0x250], 0x66
mov cl, 3
mov byte [rbp + 0x253], dl
xor cl, 0x66
mov byte [rbp + 0x25a], sil
mov al, 0x34
mov byte [rbp + 0x252], cl
mov r8b, 5
mov qword [rsp + 0x20], r14
mov r9b, ntohs
lea rdx, [0x14016d200]
mov r10b, 0x46
lea rcx, [rbp + 0x251]
mov r11b, Ordinal_45
xor al, 0x66
xor r8b, 0x66
mov byte [rbp + 0x251], al
xor r9b, 0x66
mov byte [rbp + 0x254], r8b
xor r10b, 0x66
mov byte [rbp + 0x255], r9b
xor r11b, 0x66
mov byte [rbp + 0x256], r10b
mov dil, reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x257], r11b
xor bl, 0x66
xor dil, 0x66
movaps xmm2, xmm12
mov byte [rbp + 0x258], bl
mov byte [rbp + 0x259], dil
call fcn.140049b90
test al, al
je 0x140066022
movss xmm0, dword [0x14016d154]
comiss xmm0, dword [0x14016d200]
jbe 0x140066022
movss dword [0x14016d200], xmm0
movdqa xmm1, xmmword [0x14015adc0]
lea rdx, [0x14016d208]
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov dword [rsp + 0x28], r13d
psrldq xmm0, 1
xorps xmm3, xmm3
xor byte [rbp - 0x36], cl
movaps xmm2, xmm9
xor byte [rbp - 0x35], cl
xor byte [rbp - 0x34], cl
xor byte [rbp - 0x33], cl
xor byte [rbp - 0x32], cl
xor byte [rbp - 0x31], cl
xor byte [rbp - 0x30], cl
xor byte [rbp - 0x2f], cl
xor byte [rbp - 0x2e], cl
xor byte [rbp - 0x2d], cl
xor byte [rbp - 0x2c], cl
xor byte [rbp - 0x2b], cl
xor byte [rbp - 0x2a], cl
xor byte [rbp - 0x29], cl
movd eax, xmm0
mov byte [rbp - 0x28], sil
mov qword [rsp + 0x20], r14
xor al, cl
lea rcx, [rbp - 0x37]
mov byte [rbp - 0x37], al
call fcn.140049b90
test al, al
je 0x1400660ad
movss xmm1, dword [0x14016d1ec]
movss xmm0, dword [0x14016d208]
call fcn.140061f80
movdqa xmm1, xmmword [0x14015acb0]
lea rdx, [0x14016d1ec]
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp - 0x50], xmm1
mov dword [rsp + 0x28], r13d
psrldq xmm0, 1
xorps xmm3, xmm3
xor byte [rbp - 0x4e], cl
movaps xmm2, xmm9
xor byte [rbp - 0x4d], cl
xor byte [rbp - 0x4c], cl
xor byte [rbp - 0x4b], cl
xor byte [rbp - 0x4a], cl
xor byte [rbp - 0x49], cl
xor byte [rbp - 0x48], cl
xor byte [rbp - 0x47], cl
xor byte [rbp - 0x46], cl
xor byte [rbp - 0x45], cl
xor byte [rbp - 0x44], cl
xor byte [rbp - 0x43], cl
xor byte [rbp - 0x42], cl
xor byte [rbp - 0x41], cl
movd eax, xmm0
mov byte [rbp - 0x40], sil
mov qword [rsp + 0x20], r14
xor al, cl
lea rcx, [rbp - 0x4f]
mov byte [rbp - 0x4f], al
call fcn.140049b90
test al, al
je 0x140066138
movss xmm1, dword [0x14016d1ec]
movss xmm0, dword [0x14016d208]
call fcn.140061f80
movss xmm3, dword [0x14015a734]
mov cl, reloc.WLDAP32.dll_Ordinal_45
xor cl, 0x44
mov dword [rsp + 0x28], r13d
mov dl, reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x1aa], cl
xor dl, 0x44
mov byte [rbp + 0x1a8], 0x44
mov al, reloc.WS2_32.dll_recv
mov byte [rbp + 0x1ab], dl
mov r8b, reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x1ae], sil
mov r9b, 0x36
mov qword [rsp + 0x20], r14
xor al, 0x44
lea rdx, [0x14016d1e8]
xor r8b, 0x44
mov byte [rbp + 0x1a9], al
xor r9b, 0x44
mov byte [rbp + 0x1ac], r8b
lea rcx, [rbp + 0x1a9]
mov byte [rbp + 0x1ad], r9b
movaps xmm2, xmm9
call fcn.140049b90
test al, al
je 0x1400661bc
movss xmm0, dword [0x14016d1e8]
call fcn.140063130
mov dl, reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x320], Ordinal_35
movzx esi, dl
mov byte [rbp + 0x32c], r12b
xor dl, 0x1d
mov cl, 0x75
xor cl, 0x1d
mov byte [rbp + 0x323], dl
mov al, 0x49
mov byte [rbp + 0x322], cl
mov r8b, WSAStartup
lea rdx, [0x14016e159]
mov r9b, 0x6a
lea rcx, [rbp + 0x321]
mov r10b, 0x3d
mov r11b, Ordinal_79
xor al, 0x1d
xor r8b, 0x1d
xor r9b, 0x1d
mov byte [rbp + 0x321], al
xor r10b, 0x1d
mov byte [rbp + 0x324], r8b
xor r11b, 0x1d
mov byte [rbp + 0x325], r9b
mov bl, 0x78
mov byte [rbp + 0x326], r10b
mov dil, 0x7c
mov byte [rbp + 0x327], r11b
mov r14b, WSAStartup
xor bl, 0x1d
xor dil, 0x1d
mov byte [rbp + 0x328], bl
xor sil, 0x1d
mov byte [rbp + 0x329], dil
xor r14b, 0x1d
mov byte [rbp + 0x32a], sil
mov byte [rbp + 0x32b], r14b
call fcn.140045b00
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
mov r8b, 0x60
mov byte [rbp + 0x360], reloc.WS2_32.dll_ntohs
movzx ebx, r8b
mov byte [rbp + 0x36d], r12b
movzx r14d, r8b
mov cl, 0x67
xor cl, 0xf
mov dl, 0x7d
xor dl, 0xf
mov byte [rbp + 0x362], cl
xor bl, 0xf
mov byte [rbp + 0x363], dl
xor r14b, 0xf
mov byte [rbp + 0x368], bl
xor r8b, 0xf
mov byte [rbp + 0x36b], r14b
mov al, 0x5b
mov byte [rbp + 0x364], r8b
xor al, 0xf
lea rdx, [0x14016dffb]
mov r9b, 0x78
mov byte [rbp + 0x361], al
xor r9b, 0xf
lea rcx, [rbp + 0x361]
mov r10b, 0x2f
mov byte [rbp + 0x365], r9b
xor r10b, 0xf
mov r11b, 0x5f
xor r11b, 0xf
mov byte [rbp + 0x366], r10b
mov dil, 0x7b
mov byte [rbp + 0x367], r11b
xor dil, 0xf
mov sil, 0x66
xor sil, 0xf
mov byte [rbp + 0x369], dil
mov r15b, 0x61
mov byte [rbp + 0x36a], sil
xor r15b, 0xf
mov byte [rbp + 0x36c], r15b
call fcn.140045b00
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
xor cl, cl
mov byte [rbp + 0x210], 0x61
xor cl, 0x61
mov dl, 0xa
xor dl, 0x61
mov byte [rbp + 0x212], cl
mov al, 0x27
mov byte [rbp + 0x213], dl
mov r8b, 4
lea rdx, [0x14016e158]
mov r9b, 0x41
lea rcx, [rbp + 0x211]
mov r10b, reloc.WLDAP32.dll_Ordinal_45
xor r11b, r11b
xor al, 0x61
xor r8b, 0x61
xor r9b, 0x61
mov byte [rbp + 0x211], al
xor r10b, 0x61
mov byte [rbp + 0x214], r8b
xor r11b, 0x61
mov byte [rbp + 0x215], r9b
mov bl, 6
mov byte [rbp + 0x216], r10b
xor edi, edi
mov byte [rbp + 0x217], r11b
xor bl, 0x61
mov byte [rbp + 0x219], dil
mov byte [rbp + 0x218], bl
call fcn.140045b00
call fcn.140046b30
movaps xmm2, xmm8
lea rcx, [rbp + 0x490]
movaps xmm1, xmm8
call fcn.140004650
movdqa xmm1, xmmword [0x14015ac30]
movd edx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov byte [rbp - 0x58], dil
xor byte [rbp - 0x66], dl
xor byte [rbp - 0x65], dl
xor byte [rbp - 0x64], dl
xor byte [rbp - 0x63], dl
xor byte [rbp - 0x62], dl
xor byte [rbp - 0x61], dl
xor byte [rbp - 0x60], dl
xor byte [rbp - 0x5f], dl
xor byte [rbp - 0x5e], dl
xor byte [rbp - 0x5d], dl
xor byte [rbp - 0x5c], dl
xor byte [rbp - 0x5b], dl
xor byte [rbp - 0x5a], dl
xor byte [rbp - 0x59], dl
psrldq xmm0, 1
movd ecx, xmm0
xor cl, dl
mov rdx, rax
mov byte [rbp - 0x67], cl
lea rcx, [rbp - 0x67]
call fcn.1400446f0
test al, al
je 0x140066456
cmp byte [0x14016e345], dil
mov dword [0x14016e334], r13d
je 0x140066456
mov byte [0x14016e345], dil
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
movaps xmm2, xmm8
lea rcx, [rbp + 0x498]
movaps xmm1, xmm10
call fcn.140004650
mov dl, 0x42
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_450], 0x2d
movzx r10d, dl
mov byte [rbp + 0x2db], r12b
xor dl, 0x2d
mov cl, 0x7d
xor cl, 0x2d
mov byte [rbp + 0x2d2], dl
mov r8b, 0x59
mov byte [rbp + 0x2d1], cl
mov r9b, 0x44
lea rcx, [rbp + 0x2d1]
mov r11b, 0x43
xor r8b, 0x2d
xor r9b, 0x2d
mov byte [rbp + 0x2d3], r8b
xor r10b, 0x2d
mov byte [rbp + 0x2d4], r9b
xor r11b, 0x2d
mov byte [rbp + 0x2d5], r10b
mov bl, reloc.WS2_32.dll_listen
mov byte [rbp + 0x2d6], r11b
mov dil, 0x66
mov sil, 0x48
mov r14b, 0x54
xor bl, 0x2d
xor dil, 0x2d
mov byte [rbp + 0x2d7], bl
xor sil, 0x2d
mov byte [rbp + 0x2d8], dil
xor r14b, 0x2d
mov byte [rbp + 0x2d9], sil
mov rdx, rax
mov byte [rbp + 0x2da], r14b
call fcn.1400446f0
test al, al
je 0x14006652d
mov ecx, r13d
mov dl, 1
mov dword [0x14016e334], ecx
mov byte [0x14016e345], dl
jmp 0x14006653a
movzx edx, byte [0x14016e345]
mov ecx, dword [0x14016e334]
call fcn.140063cd0
movaps xmm2, xmm8
lea rcx, [rbp + 0x4a0]
movaps xmm1, xmm8
call fcn.140004650
movdqa xmm1, xmmword [str.S_b_b]
movd edx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x78], xmm1
mov byte [rbp + 0x87], r12b
xor byte [rbp + 0x7a], dl
xor byte [rbp + 0x7b], dl
xor byte [rbp + 0x7c], dl
xor byte [rbp + 0x7d], dl
xor byte [rbp + 0x7e], dl
xor byte [rbp + 0x7f], dl
xor byte [rbp + 0x80], dl
xor byte [rbp + 0x81], dl
xor byte [rbp + 0x82], dl
xor byte [rbp + 0x83], dl
xor byte [rbp + 0x84], dl
xor byte [rbp + 0x85], dl
xor byte [rbp + 0x86], dl
psrldq xmm0, 1
movd ecx, xmm0
xor cl, dl
mov rdx, rax
mov byte [rbp + 0x79], cl
lea rcx, [rbp + 0x79]
call fcn.1400446f0
test al, al
je 0x1400665e0
cmp byte [0x14016e314], r12b
mov dword [0x14016e350], r13d
je 0x1400665e0
mov byte [0x14016e314], r12b
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
movaps xmm2, xmm8
lea rcx, [rbp + 0x4a8]
movaps xmm1, xmm10
call fcn.140004650
mov dl, 0x3e
mov byte [rbp + 0x2a0], 0x5b
movzx edi, dl
mov byte [rbp + 0x2aa], r12b
xor dl, 0x5b
mov cl, 0xb
xor cl, 0x5b
mov byte [rbp + 0x2a2], dl
mov r8b, Ordinal_60
mov byte [rbp + 0x2a1], cl
mov r9b, reloc.WLDAP32.dll_Ordinal_41
lea rcx, [rbp + 0x2a1]
mov r10b, gethostname
mov r11b, 0x7b
xor r8b, 0x5b
xor r9b, 0x5b
xor r10b, 0x5b
mov byte [rbp + 0x2a3], r8b
xor r11b, 0x5b
mov byte [rbp + 0x2a4], r9b
mov bl, reloc.WS2_32.dll_recv
mov byte [rbp + 0x2a5], r10b
mov sil, Ordinal_35
mov byte [rbp + 0x2a6], r11b
xor bl, 0x5b
xor dil, 0x5b
xor sil, 0x5b
mov byte [rbp + 0x2a7], bl
mov rdx, rax
mov byte [rbp + 0x2a8], dil
mov byte [rbp + 0x2a9], sil
call fcn.1400446f0
test al, al
je 0x1400666a8
mov ecx, r13d
mov dl, 1
mov dword [0x14016e350], ecx
mov byte [0x14016e314], dl
jmp 0x1400666b5
movzx edx, byte [0x14016e314]
mov ecx, dword [0x14016e350]
call fcn.140063cd0
movaps xmm2, xmm8
lea rcx, [rbp + 0x4b0]
movaps xmm1, xmm8
call fcn.140004650
mov dl, 0x27
mov byte [rbp + 0x340], 4
movzx r8d, dl
mov byte [rbp + 0x34c], r12b
mov r10b, 0x65
xor dl, 4
movzx r14d, r10b
mov byte [rbp + 0x342], dl
mov cl, 0x7c
mov r9b, 0x42
xor cl, 4
mov r11b, reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x341], cl
xor r8b, 4
xor r9b, 4
mov byte [rbp + 0x343], r8b
xor r10b, 4
mov byte [rbp + 0x344], r9b
xor r11b, 4
mov byte [rbp + 0x345], r10b
mov bl, 0x61
mov byte [rbp + 0x346], r11b
mov dil, 0x24
lea rcx, [rbp + 0x341]
mov sil, 0x48
mov r15b, 0x63
xor bl, 4
xor dil, 4
xor sil, 4
mov byte [rbp + 0x347], bl
xor r14b, 4
mov byte [rbp + 0x348], dil
xor r15b, 4
mov byte [rbp + 0x349], sil
mov rdx, rax
mov byte [rbp + 0x34a], r14b
mov byte [rbp + 0x34b], r15b
call fcn.1400446f0
test al, al
je 0x140066799
cmp byte [0x14016e354], r12b
mov dword [0x14016e310], r13d
je 0x140066799
mov byte [0x14016e354], r12b
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
movaps xmm2, xmm8
lea rcx, [rbp + 0x4b8]
movaps xmm1, xmm10
call fcn.140004650
mov cl, 0x6a
mov byte [rbp + 0x200], Ordinal_41
xor cl, 0x26
mov dl, 0x47
xor dl, 0x26
mov byte [rbp + 0x201], cl
mov r8b, 0x41
mov byte [rbp + 0x202], dl
mov r9b, 6
lea rcx, [rbp + 0x201]
mov r10b, WSAGetLastError
mov r11b, 0x43
xor r8b, 0x26
xor r9b, 0x26
xor r10b, 0x26
mov byte [rbp + 0x203], r8b
xor r11b, 0x26
mov byte [rbp + 0x204], r9b
mov bl, 0x5f
mov byte [rbp + 0x205], r10b
xor edi, edi
mov byte [rbp + 0x206], r11b
xor bl, 0x26
mov byte [rbp + 0x208], dil
mov rdx, rax
mov byte [rbp + 0x207], bl
call fcn.1400446f0
test al, al
je 0x140066847
mov ecx, r13d
mov dl, 1
mov dword [0x14016e310], ecx
mov byte [0x14016e354], dl
jmp 0x140066854
movzx edx, byte [0x14016e354]
mov ecx, dword [0x14016e310]
call fcn.140063cd0
mov r15, qword [rbp + 0x3f0]
mov r12d, 1
call fcn.140010010
call fcn.140015ee0
mov rdi, qword [rbp + 0x3f8]
mov esi, 0xffff8001
call fcn.14000f5b0
movss xmm2, dword [rbp + 0x664]
lea r8, [0x14016e348]
movss xmm1, dword [rbp + 0x65c]
movaps xmm0, xmm2
mulss xmm0, dword [rbp + 0x658]
xor r9d, r9d
mov rcx, qword [0x14016e3b0]
mov edx, r12d
mulss xmm1, xmm2
movss dword [rbp + 0x940], xmm0
movss xmm0, dword [rbp + 0x660]
mulss xmm0, xmm2
movss dword [rbp + 0x944], xmm1
movss dword [rbp + 0x94c], xmm2
movss dword [rbp + 0x948], xmm0
mov rax, qword [rcx]
call qword [rax + pe_nt_image_headers64]
mov rcx, qword [0x14016e3b0]
lea r8, [rbp + 0x940]
mov rdx, qword [0x14016e348]
mov rax, qword [rcx]
call qword [rax + 0x190]
call fcn.14000a3c0
mov rcx, rax
call fcn.14003d3c0
test dword [r15], 0x400
je 0x14006692b
call fcn.140020c50
xor edx, edx
xor ecx, ecx
call fcn.1400210b0
mov rcx, qword [0x14016e358]
xor r8d, r8d
mov edx, r12d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov ebx, dword [rsp + 0x60]
mov r13d, dword [rbp + 0x3e4]
jmp 0x140064d95
cmp dword [0x14016d1f8], r12d
je 0x1400675ae
cmp byte [0x14016dfff], r12b
jne 0x140066e42
movdqa xmm1, xmmword [str.j___JB]
mov dl, reloc.WLDAP32.dll_Ordinal_30
movd ecx, xmm1
movdqa xmm0, xmm1
movdqa xmm2, xmmword [0x14015aa40]
mov r8b, 0x43
movdqu xmmword [rbp + 0x38], xmm2
xor byte [rbp + 0x39], cl
xor dl, cl
xor byte [rbp + 0x3a], cl
xor r8b, cl
xor byte [rbp + 0x3b], cl
xor byte [rbp + 0x3c], cl
xor byte [rbp + 0x3d], cl
xor byte [rbp + 0x3e], cl
xor byte [rbp + 0x3f], cl
xor byte [rbp + 0x40], cl
xor byte [rbp + 0x41], cl
xor byte [rbp + 0x42], cl
xor byte [rbp + 0x43], cl
xor byte [rbp + 0x44], cl
xor byte [rbp + 0x45], cl
xor byte [rbp + 0x46], cl
xor byte [rbp + 0x47], cl
movdqu xmmword [rbp + 0x28], xmm1
xor byte [rbp + 0x2a], cl
xor byte [rbp + 0x2b], cl
xor byte [rbp + 0x2c], cl
xor byte [rbp + 0x2d], cl
xor byte [rbp + 0x2e], cl
xor byte [rbp + 0x2f], cl
xor byte [rbp + 0x30], cl
xor byte [rbp + 0x31], cl
xor byte [rbp + 0x32], cl
xor byte [rbp + 0x33], cl
xor byte [rbp + 0x34], cl
xor byte [rbp + 0x35], cl
xor byte [rbp + 0x36], cl
xor byte [rbp + 0x37], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp + 0x48], dl
mov byte [rbp + 0x49], r8b
xor al, cl
mov byte [rbp + 0x4a], r12b
mov byte [rbp + 0x29], al
movd eax, xmm2
xor al, cl
lea rcx, [rbp + 0x29]
mov byte [rbp + 0x38], al
call fcn.140043950
lea rcx, [0x14016d1a8]
call fcn.1400030f0
mov cl, 0x55
mov byte [rbp + 0x1e0], reloc.WS2_32.dll_recvfrom
movzx r8d, cl
mov dl, 0x58
xor cl, 0x11
xor dl, 0x11
mov r9b, Ordinal_45
mov byte [rbp + 0x1e1], cl
mov r10b, Ordinal_50
mov byte [rbp + 0x1e2], dl
mov r11b, 0x34
lea rcx, [rbp + 0x1e1]
xor edi, edi
xor r8b, 0x11
xor r9b, 0x11
mov byte [rbp + 0x1e3], r8b
xor r10b, 0x11
mov byte [rbp + 0x1e4], r9b
xor r11b, 0x11
mov byte [rbp + 0x1e5], r10b
mov bl, 0x62
mov byte [rbp + 0x1e6], r11b
xor bl, 0x11
mov byte [rbp + 0x1e8], dil
mov rdx, rax
mov byte [rbp + 0x1e7], bl
call fcn.140043950
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rbp + 0x4c0]
call fcn.140004650
mov r8b, 4
mov byte [rbp + 0x290], WSAGetLastError
movzx r9d, r8b
mov byte [rbp + 0x29a], r12b
mov cl, gethostname
mov dl, reloc.WLDAP32.dll_Ordinal_27
xor cl, 0x6b
xor dl, 0x6b
mov bl, 0x2f
mov byte [rbp + 0x291], cl
mov r10b, reloc.WS2_32.dll_listen
mov byte [rbp + 0x292], dl
mov r11b, 0x4b
lea rcx, [rbp + 0x291]
movzx esi, bl
xor r9b, 0x6b
xor r8b, 0x6b
mov byte [rbp + 0x294], r9b
xor r10b, 0x6b
mov byte [rbp + 0x293], r8b
xor r11b, 0x6b
mov byte [rbp + 0x295], r10b
mov dil, Ordinal_35
mov byte [rbp + 0x296], r11b
xor bl, 0x6b
xor dil, 0x6b
xor sil, 0x6b
mov byte [rbp + 0x297], bl
mov rdx, rax
mov byte [rbp + 0x298], dil
mov byte [rbp + 0x299], sil
call fcn.1400446f0
test al, al
je 0x140066b6f
lea rdx, [0x140079900]
lea rcx, [rbp + 0x718]
call fcn.14006b370
lea rcx, [rbp + 0x718]
call fcn.14005e2f0
lea rcx, [rbp + 0x718]
call fcn.14005e2d0
cmp byte [0x14016e15b], r12b
je 0x140066bc2
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
mov al, 0x2b
mov byte [rbp + 0x188], 5
movzx ecx, al
movzx edx, al
xor cl, 5
xor r8d, r8d
mov byte [rbp + 0x18a], cl
xor al, 5
xor dl, 5
mov byte [rbp + 0x189], al
lea rcx, [rbp + 0x189]
mov byte [rbp + 0x18b], dl
mov byte [rbp + 0x18c], r8b
call fcn.140043950
lea rcx, [0x1400e27b8]
call fcn.140043950
lea rcx, [0x14016d1c8]
call fcn.1400030f0
mov cl, 0x64
mov byte [rbp + 0x2c0], reloc.WLDAP32.dll_Ordinal_41
xor cl, 0x29
mov byte [rbp + 0x2cb], r12b
mov dl, 0x6b
mov byte [rbp + 0x2c1], cl
xor dl, 0x29
lea rcx, [rbp + 0x2c1]
mov r8b, 0x66
mov byte [rbp + 0x2c2], dl
mov r9b, 0x68
mov r10b, 0x7b
mov r11b, WSAGetLastError
xor r8b, 0x29
xor r9b, 0x29
mov byte [rbp + 0x2c3], r8b
xor r10b, 0x29
mov byte [rbp + 0x2c4], r9b
xor r11b, 0x29
mov byte [rbp + 0x2c5], r10b
mov bl, reloc.WS2_32.dll_send
mov byte [rbp + 0x2c6], r11b
mov dil, 9
mov sil, listen
mov r14b, 0x5a
xor bl, 0x29
xor dil, 0x29
mov byte [rbp + 0x2c7], bl
xor sil, 0x29
mov byte [rbp + 0x2c8], dil
xor r14b, 0x29
mov byte [rbp + 0x2c9], sil
mov rdx, rax
mov byte [rbp + 0x2ca], r14b
call fcn.140043950
xorps xmm2, xmm2
lea rcx, [rbp + 0x4c8]
xorps xmm1, xmm1
call fcn.140004650
mov r8b, 0x4b
mov byte [rbp + 0x350], Ordinal_41
movzx r9d, r8b
mov cl, 0x77
xor r9b, 0x24
xor cl, 0x24
xor r8b, 0x24
mov byte [rbp + 0x351], cl
mov dl, 0x54
mov byte [rbp + 0x353], r8b
xor dl, 0x24
mov byte [rbp + 0x354], r9b
mov r10b, 0x42
mov byte [rbp + 0x352], dl
xor r10b, 0x24
mov r11b, 4
xor r11b, 0x24
mov byte [rbp + 0x355], r10b
mov bl, 0x69
mov byte [rbp + 0x356], r11b
xor bl, 0x24
mov dil, 0x66
xor dil, 0x24
mov byte [rbp + 0x357], bl
mov sil, 0x6b
mov byte [rbp + 0x358], dil
xor sil, 0x24
mov r14b, 0x65
xor r14b, 0x24
mov byte [rbp + 0x359], sil
mov r15b, 0x76
mov byte [rbp + 0x35a], r14b
xor r15b, 0x24
mov r12b, 0x60
xor r13d, r13d
mov byte [rbp + 0x35b], r15b
xor r12b, 0x24
mov byte [rbp + 0x35c], r12b
mov rdx, rax
mov byte [rbp + 0x35d], r13b
lea rcx, [rbp + 0x351]
call fcn.1400446f0
test al, al
je 0x140066d7b
lea rdx, [0x14007b770]
lea rcx, [rbp + 0x728]
call fcn.14006b370
lea rcx, [rbp + 0x728]
call fcn.14005e2f0
lea rcx, [rbp + 0x728]
call fcn.14005e2d0
cmp byte [0x14016e15d], r13b
je 0x140066dce
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
mov al, 0x25
mov byte [rbp + 0x190], ntohs
movzx ecx, al
movzx edx, al
xor cl, 0xb
xor r8d, r8d
mov byte [rbp + 0x192], cl
xor al, 0xb
xor dl, 0xb
mov byte [rbp + 0x191], al
lea rcx, [rbp + 0x191]
mov byte [rbp + 0x193], dl
mov byte [rbp + 0x194], r8b
call fcn.140043950
mov cl, 0x4b
mov byte [rbp + 0x1c8], Ordinal_46
movzx r9d, cl
mov dl, 0x44
xor cl, 0x2a
xor dl, 0x2a
mov al, 0x67
mov byte [rbp + 0x1ca], cl
mov r8b, 0x5f
mov byte [rbp + 0x1cb], dl
mov r10b, 0x46
lea rcx, [rbp + 0x1c9]
xor r11d, r11d
lea rdx, [0x14016dfff]
xor al, 0x2a
mov byte [rbp + 0x1cf], r11b
xor r8b, 0x2a
mov byte [rbp + 0x1c9], al
xor r9b, 0x2a
mov byte [rbp + 0x1cc], r8b
xor r10b, 0x2a
mov byte [rbp + 0x1cd], r9b
mov byte [rbp + 0x1ce], r10b
call fcn.140045b00
jmp 0x140066859
lea rcx, [0x14016d1a8]
call fcn.1400030f0
mov cl, 1
mov byte [rbp + 0x1f0], 0x45
movzx r8d, cl
mov dl, listen
xor cl, 0x45
xor dl, 0x45
mov r9b, 0x7f
mov byte [rbp + 0x1f1], cl
mov r10b, 0x65
mov byte [rbp + 0x1f2], dl
mov r11b, 0x60
lea rcx, [rbp + 0x1f1]
xor r8b, 0x45
xor r9b, 0x45
xor r10b, 0x45
mov byte [rbp + 0x1f3], r8b
xor r11b, 0x45
mov byte [rbp + 0x1f4], r9b
mov bl, 0x36
mov byte [rbp + 0x1f5], r10b
xor edi, edi
mov byte [rbp + 0x1f6], r11b
xor bl, 0x45
mov byte [rbp + 0x1f8], dil
mov rdx, rax
mov byte [rbp + 0x1f7], bl
call fcn.140043950
mov al, 0x75
mov byte [rbp + 0x390], 0x56
movzx ecx, al
mov byte [rbp + 0x39d], r12b
xor al, 0x56
mov r9b, 0x26
xor cl, 0x56
mov byte [rbp + 0x391], al
xor r9b, 0x56
mov byte [rbp + 0x392], cl
xor eax, eax
mov byte [rbp + 0x395], r9b
mov dl, Ordinal_32
mov qword [rsp + 0x28], rax
xor dl, 0x56
mov qword [rsp + 0x20], rax
mov r8b, gethostname
mov byte [rbp + 0x393], dl
xor r8b, 0x56
lea rdx, [0x14016e040]
mov r10b, reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x394], r8b
mov r11b, Ordinal_35
lea rcx, [rbp + 0x391]
xor r10b, 0x56
xor r11b, 0x56
mov bl, reloc.WS2_32.dll_recv
mov byte [rbp + 0x396], r10b
mov dil, 0x3f
mov byte [rbp + 0x397], r11b
mov sil, 0x33
mov r14b, Ordinal_60
mov r15b, reloc.WLDAP32.dll_Ordinal_50
xor bl, 0x56
xor dil, 0x56
mov byte [rbp + 0x398], bl
xor sil, 0x56
mov byte [rbp + 0x399], dil
xor r14b, 0x56
mov byte [rbp + 0x39a], sil
xor r15b, 0x56
mov byte [rbp + 0x39b], r14b
xor r9d, r9d
mov byte [rbp + 0x39c], r15b
mov r8d, 0x100
call fcn.14004a300
test al, al
je 0x140066fb0
lea rdx, [0x14016e040]
lea rcx, [0x14016d168]
call fcn.1400699f0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
mov cl, reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x3a0], 0x57
movzx edi, cl
mov r8b, 0x77
xor cl, 0x57
movzx esi, r8b
mov r14b, reloc.WS2_32.dll_send
mov byte [rbp + 0x3a2], cl
mov al, Ordinal_26
lea rcx, [rbp + 0x3a1]
mov dl, reloc.WLDAP32.dll_Ordinal_32
mov r9b, 1
mov r10b, 0x36
mov r11b, Ordinal_60
movzx r12d, r14b
xor al, 0x57
xor dl, 0x57
mov byte [rbp + 0x3a1], al
xor r8b, 0x57
mov byte [rbp + 0x3a3], dl
xor r9b, 0x57
mov byte [rbp + 0x3a4], r8b
xor r10b, 0x57
mov byte [rbp + 0x3a5], r9b
xor r11b, 0x57
mov byte [rbp + 0x3a6], r10b
mov bl, Ordinal_35
mov byte [rbp + 0x3a7], r11b
mov r15b, reloc.WLDAP32.dll_Ordinal_30
xor r13d, r13d
xor bl, 0x57
mov byte [rbp + 0x3ae], r13b
xor dil, 0x57
mov byte [rbp + 0x3a8], bl
xor sil, 0x57
mov byte [rbp + 0x3a9], dil
xor r14b, 0x57
mov byte [rbp + 0x3aa], sil
xor r15b, 0x57
mov byte [rbp + 0x3ab], r14b
xor r12b, 0x57
mov byte [rbp + 0x3ac], r15b
mov byte [rbp + 0x3ad], r12b
call fcn.140043950
xorps xmm2, xmm2
lea rcx, [rbp + 0x440]
xorps xmm1, xmm1
call fcn.140004650
mov r9b, 0x60
mov byte [rbp + 0x300], reloc.WS2_32.dll_ntohs
mov dil, 0x4b
movzx r10d, r9b
movzx r14d, dil
xor r10b, 0xf
xor r9b, 0xf
mov byte [rbp + 0x305], r10b
xor dil, 0xf
mov byte [rbp + 0x304], r9b
mov cl, 0x42
mov byte [rbp + 0x308], dil
xor cl, 0xf
mov dl, 0x5c
xor dl, 0xf
mov byte [rbp + 0x301], cl
mov r8b, 0x7f
mov byte [rbp + 0x302], dl
xor r8b, 0xf
mov r11b, 0x69
xor r11b, 0xf
mov byte [rbp + 0x303], r8b
mov bl, 0x2f
mov byte [rbp + 0x306], r11b
xor bl, 0xf
mov sil, 0x46
xor sil, 0xf
mov byte [rbp + 0x307], bl
xor r14b, 0xf
mov byte [rbp + 0x309], sil
mov rdx, rax
mov byte [rbp + 0x30a], r14b
lea rcx, [rbp + 0x301]
mov byte [rbp + 0x30b], r13b
call fcn.1400446f0
test al, al
je 0x140067166
lea rdx, [0x140079060]
lea rcx, [rbp + 0x6f8]
call fcn.14006b370
lea rcx, [rbp + 0x6f8]
call fcn.14005e2f0
lea rcx, [rbp + 0x6f8]
call fcn.14005e2d0
cmp byte [0x14016e15a], r13b
je 0x1400671b9
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
mov al, Ordinal_30
mov byte [rbp + 0x198], gethostname
movzx ecx, al
movzx edx, al
xor cl, 0x33
xor r8d, r8d
mov byte [rbp + 0x19a], cl
xor al, 0x33
xor dl, 0x33
mov byte [rbp + 0x199], al
lea rcx, [rbp + 0x199]
mov byte [rbp + 0x19b], dl
mov byte [rbp + 0x19c], r8b
call fcn.140043950
lea rcx, [0x1400e27b8]
call fcn.140043950
lea rcx, [0x14016d1c8]
call fcn.1400030f0
mov cl, reloc.WS2_32.dll_listen
mov byte [rbp + 0x310], 0x40
xor cl, 0x40
mov byte [rbp + 0x31b], r13b
mov dl, 2
mov byte [rbp + 0x311], cl
xor dl, 0x40
lea rcx, [rbp + 0x311]
mov r8b, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x312], dl
mov r9b, 1
mov r10b, reloc.WS2_32.dll_select
mov r11b, 4
xor r8b, 0x40
xor r9b, 0x40
mov byte [rbp + 0x313], r8b
xor r10b, 0x40
mov byte [rbp + 0x314], r9b
xor r11b, 0x40
mov byte [rbp + 0x315], r10b
mov bl, 0x7a
mov byte [rbp + 0x316], r11b
mov dil, 0x60
mov sil, 0x65
mov r14b, 0x33
xor bl, 0x40
xor dil, 0x40
mov byte [rbp + 0x317], bl
xor sil, 0x40
mov byte [rbp + 0x318], dil
xor r14b, 0x40
mov byte [rbp + 0x319], sil
mov rdx, rax
mov byte [rbp + 0x31a], r14b
call fcn.140043950
mov al, Ordinal_35
mov byte [rbp + 0x3b0], 1
movzx ecx, al
mov byte [rbp + 0x3be], r13b
xor al, 1
xor cl, 1
mov dl, 0x48
mov byte [rbp + 0x3b1], al
xor dl, 1
mov byte [rbp + 0x3b2], cl
mov r8b, reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x3b3], dl
xor r8b, 1
mov r9b, WSAStartup
xor r9b, 1
mov byte [rbp + 0x3b4], r8b
mov r10b, reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x3b5], r9b
xor r10b, 1
mov r11b, 0x75
xor r11b, 1
mov byte [rbp + 0x3b6], r10b
mov bl, 0x47
mov byte [rbp + 0x3b7], r11b
xor bl, 1
mov dil, 0x68
xor dil, 1
mov byte [rbp + 0x3b8], bl
mov sil, 0x64
mov byte [rbp + 0x3b9], dil
xor sil, 1
mov r14b, WSAGetLastError
xor r14b, 1
mov byte [rbp + 0x3ba], sil
mov r15b, 0x65
mov byte [rbp + 0x3bb], r14b
xor r15b, 1
mov r12b, 0x33
xor r12b, 1
mov byte [rbp + 0x3bc], r15b
xor eax, eax
mov byte [rbp + 0x3bd], r12b
mov qword [rsp + 0x28], rax
lea rdx, [0x14016e160]
xor r9d, r9d
mov qword [rsp + 0x20], rax
mov r8d, 0x100
lea rcx, [rbp + 0x3b1]
call fcn.14004a300
test al, al
je 0x140067368
lea rdx, [0x14016e160]
lea rcx, [0x14016d188]
call fcn.1400699f0
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
movdqa xmm1, xmmword [0x14015ab50]
mov dl, reloc.WLDAP32.dll_Ordinal_60
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x50], xmm1
mov byte [rbp + 0x61], r13b
xor byte [rbp + 0x52], cl
xor dl, cl
xor byte [rbp + 0x53], cl
xor byte [rbp + 0x54], cl
xor byte [rbp + 0x55], cl
xor byte [rbp + 0x56], cl
xor byte [rbp + 0x57], cl
xor byte [rbp + 0x58], cl
xor byte [rbp + 0x59], cl
xor byte [rbp + 0x5a], cl
xor byte [rbp + 0x5b], cl
xor byte [rbp + 0x5c], cl
xor byte [rbp + 0x5d], cl
xor byte [rbp + 0x5e], cl
xor byte [rbp + 0x5f], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp + 0x60], dl
xor al, cl
lea rcx, [rbp + 0x51]
mov byte [rbp + 0x51], al
call fcn.140043950
xorps xmm2, xmm2
lea rcx, [rbp + 0x4d0]
xorps xmm1, xmm1
call fcn.140004650
mov qword [rbp + 0x408], rax
mov cl, 0x53
movzx edi, cl
mov byte [rbp + 0x3c0], reloc.WLDAP32.dll_Ordinal_30
mov r9b, WSAStartup
mov byte [rbp + 0x3ce], r13b
xor cl, 0x1e
movzx r10d, r9b
mov dl, 0x4d
mov byte [rbp + 0x3c1], cl
xor dl, 0x1e
lea rcx, [rbp + 0x3c1]
mov r8b, WSAGetLastError
mov byte [rbp + 0x3c2], dl
mov rdx, qword [rbp + 0x408]
mov r11b, 0x78
mov al, 0x5a
xor r8b, 0x1e
xor r9b, 0x1e
mov byte [rbp + 0x3c3], r8b
xor r10b, 0x1e
mov byte [rbp + 0x3c4], r9b
xor r11b, 0x1e
mov byte [rbp + 0x3c5], r10b
xor al, 0x1e
mov byte [rbp + 0x3c6], r11b
mov bl, 0x3e
mov byte [rbp + 0x3cd], al
mov sil, 0x5c
mov r14b, 0x51
mov r15b, 0x5f
mov r12b, 0x4c
xor bl, 0x1e
xor dil, 0x1e
xor sil, 0x1e
mov byte [rbp + 0x3c7], bl
xor r14b, 0x1e
mov byte [rbp + 0x3c8], dil
xor r15b, 0x1e
mov byte [rbp + 0x3c9], sil
xor r12b, 0x1e
mov byte [rbp + 0x3ca], r14b
mov byte [rbp + 0x3cb], r15b
mov byte [rbp + 0x3cc], r12b
call fcn.1400446f0
test al, al
je 0x1400674e7
lea rdx, [0x14007af40]
lea rcx, [rbp + 0x6e8]
call fcn.14006b370
lea rcx, [rbp + 0x6e8]
call fcn.14005e2f0
lea rcx, [rbp + 0x6e8]
call fcn.14005e2d0
cmp byte [0x14016e15c], r13b
je 0x14006753a
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
mov al, 0x65
mov byte [rbp + 0x1a0], Ordinal_79
movzx ecx, al
movzx edx, al
xor cl, 0x4b
xor r8d, r8d
mov byte [rbp + 0x1a2], cl
xor al, 0x4b
xor dl, 0x4b
mov byte [rbp + 0x1a1], al
lea rcx, [rbp + 0x1a1]
mov byte [rbp + 0x1a3], dl
mov byte [rbp + 0x1a4], r8b
call fcn.140043950
mov cl, 0x5c
mov byte [rbp + 0x1c0], 0x3d
movzx r9d, cl
mov dl, 0x53
xor cl, 0x3d
xor dl, 0x3d
mov al, reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x1c2], cl
mov r8b, 0x48
mov byte [rbp + 0x1c3], dl
mov r10b, 0x51
lea rcx, [rbp + 0x1c1]
xor r11d, r11d
lea rdx, [0x14016dfff]
xor al, 0x3d
mov byte [rbp + 0x1c7], r11b
xor r8b, 0x3d
mov byte [rbp + 0x1c1], al
xor r9b, 0x3d
mov byte [rbp + 0x1c4], r8b
xor r10b, 0x3d
mov byte [rbp + 0x1c5], r9b
mov byte [rbp + 0x1c6], r10b
call fcn.140045b00
jmp 0x140066859
cmp dword [0x14016d1fc], r12d
je 0x140066860
movaps xmm0, xmm11
call fcn.140017be0
mov r8b, 0x4b
mov byte [rbp + 0x3d0], Ordinal_41
movzx r10d, r8b
mov al, 7
movzx ecx, al
mov dl, 0x47
movzx esi, dl
mov r11b, 0x56
xor cl, 0x24
movzx r12d, r11b
xor dl, 0x24
mov byte [rbp + 0x3d2], cl
xor r8b, 0x24
mov byte [rbp + 0x3d3], dl
mov r9b, 0x48
mov byte [rbp + 0x3d4], r8b
xor al, 0x24
lea rcx, [rbp + 0x3d1]
xor r9b, 0x24
mov byte [rbp + 0x3d1], al
xor r10b, 0x24
mov byte [rbp + 0x3d5], r9b
xor r11b, 0x24
mov byte [rbp + 0x3d6], r10b
mov bl, 0x54
mov byte [rbp + 0x3d7], r11b
mov dil, Ordinal_79
lea rdx, [rbp + 0x618]
mov r14b, reloc.WLDAP32.dll_Ordinal_79
mov r15b, 0x41
xor r13d, r13d
xor bl, 0x24
xor dil, 0x24
mov byte [rbp + 0x3d8], bl
xor sil, 0x24
mov byte [rbp + 0x3d9], dil
xor r14b, 0x24
mov byte [rbp + 0x3da], sil
xor r15b, 0x24
mov byte [rbp + 0x3db], r14b
xor r12b, 0x24
mov byte [rbp + 0x3dc], r15b
mov r8d, 0x4000120
mov byte [rbp + 0x3dd], r12b
mov byte [rbp + 0x3de], r13b
call fcn.140050b60
test al, al
je 0x1400676f2
movss xmm0, dword [rbp + 0x618]
lea rax, [rbp + 0x634]
movss xmm1, dword [rbp + 0x61c]
lea r9, [rbp + 0x614]
movss xmm2, dword [rbp + 0x620]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x630]
mov qword [rsp + 0x20], rax
movss dword [rbp + 0x5b0], xmm0
movss dword [rbp + 0x5ac], xmm1
movss dword [rbp + 0x5a8], xmm2
call fcn.140006bd0
mov cl, 0x77
mov byte [rbp + 0x180], Ordinal_50
xor cl, 0x30
mov dl, WSAStartup
xor dl, 0x30
mov byte [rbp + 0x182], cl
mov al, 0x62
mov byte [rbp + 0x183], dl
xor r8d, r8d
lea rdx, [rbp + 0x610]
xor al, 0x30
mov byte [rbp + 0x184], r8b
lea rcx, [rbp + 0x181]
mov byte [rbp + 0x181], al
call fcn.140045b00
movaps xmm2, xmm8
lea rcx, [rbp + 0x4d8]
movaps xmm1, xmm8
call fcn.140004650
mov dl, Ordinal_79
mov byte [rbp + 0x1d0], WSAStartup
movzx r8d, dl
mov cl, reloc.WS2_32.dll_setsockopt
xor dl, 0x6d
xor cl, 0x6d
mov r9b, 5
mov byte [rbp + 0x1d2], dl
mov r10b, 4
mov byte [rbp + 0x1d1], cl
mov r11b, 9
lea rcx, [rbp + 0x1d1]
xor r8b, 0x6d
xor r9b, 0x6d
xor r10b, 0x6d
mov byte [rbp + 0x1d3], r8b
xor r11b, 0x6d
mov byte [rbp + 0x1d4], r9b
mov bl, 8
mov byte [rbp + 0x1d5], r10b
xor edi, edi
mov byte [rbp + 0x1d6], r11b
xor bl, 0x6d
mov byte [rbp + 0x1d8], dil
mov rdx, rax
mov byte [rbp + 0x1d7], bl
call fcn.1400446f0
test al, al
je 0x1400677de
cmp byte [0x14016e347], dil
mov dword [0x14016e33c], r13d
je 0x1400677de
mov byte [0x14016e347], dil
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140017a40
movaps xmm2, xmm8
lea rcx, [rbp + 0x4e0]
movaps xmm1, xmm10
call fcn.140004650
mov r9b, 1
mov byte [rbp + 0x220], 0x64
movzx ebx, r9b
mov cl, listen
xor cl, 0x64
mov dl, reloc.WS2_32.dll_listen
xor dl, 0x64
mov byte [rbp + 0x221], cl
xor r8b, r8b
mov byte [rbp + 0x222], dl
mov r10b, 0x44
lea rcx, [rbp + 0x221]
mov r11b, reloc.WS2_32.dll_ntohs
xor r8b, 0x64
xor r9b, 0x64
mov byte [rbp + 0x223], r8b
xor r10b, 0x64
mov byte [rbp + 0x224], r9b
xor r11b, 0x64
mov byte [rbp + 0x225], r10b
mov dil, Ordinal_30
mov byte [rbp + 0x226], r11b
xor bl, 0x64
xor esi, esi
xor dil, 0x64
mov byte [rbp + 0x227], bl
mov rdx, rax
mov byte [rbp + 0x228], dil
mov byte [rbp + 0x229], sil
call fcn.1400446f0
test al, al
je 0x1400678b3
cmp byte [0x14016e344], sil
mov ecx, r13d
mov dl, 1
mov dword [0x14016e33c], ecx
mov byte [0x14016e347], dl
je 0x1400678c0
mov dword [0x14016e3b8], r13d
mov byte [0x14016e344], sil
jmp 0x1400678c0
mov ecx, dword [0x14016e33c]
movzx edx, byte [0x14016e347]
call fcn.140063cd0
call fcn.140046b30
movdqa xmm1, xmmword [str.m:___WM_]
mov dl, 0x4d
movd ecx, xmm1
movzx r10d, dl
movdqa xmm2, xmmword [0x14015ab40]
movdqa xmm0, xmm1
movdqu xmmword [rbp + 0x98], xmm2
xor byte [rbp + 0x99], cl
xor dl, cl
xor byte [rbp + 0x9a], cl
xor r10b, cl
xor byte [rbp + 0x9b], cl
mov r8b, 2
xor byte [rbp + 0x9c], cl
xor r8b, cl
xor byte [rbp + 0x9d], cl
mov r9b, 3
xor byte [rbp + 0x9e], cl
xor r9b, cl
xor byte [rbp + 0x9f], cl
mov r11b, listen
xor byte [rbp + 0xa0], cl
xor r11b, cl
xor byte [rbp + 0xa1], cl
xor byte [rbp + 0xa2], cl
xor byte [rbp + 0xa3], cl
xor byte [rbp + 0xa4], cl
xor byte [rbp + 0xa5], cl
xor byte [rbp + 0xa6], cl
xor byte [rbp + 0xa7], cl
movdqu xmmword [rbp + 0x88], xmm1
xor byte [rbp + 0x8a], cl
xor byte [rbp + 0x8b], cl
xor byte [rbp + 0x8c], cl
xor byte [rbp + 0x8d], cl
xor byte [rbp + 0x8e], cl
xor byte [rbp + 0x8f], cl
xor byte [rbp + 0x90], cl
xor byte [rbp + 0x91], cl
xor byte [rbp + 0x92], cl
xor byte [rbp + 0x93], cl
xor byte [rbp + 0x94], cl
xor byte [rbp + 0x95], cl
xor byte [rbp + 0x96], cl
xor byte [rbp + 0x97], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp + 0xa8], dl
mov byte [rbp + 0xa9], r8b
xor al, cl
mov byte [rbp + 0xaa], r9b
mov byte [rbp + 0x89], al
movd eax, xmm2
mov byte [rbp + 0xab], r10b
mov byte [rbp + 0xac], r11b
xor al, cl
mov byte [rbp + 0xad], sil
lea rcx, [rbp + 0x89]
mov byte [rbp + 0x98], al
call fcn.140043950
movdqa xmm1, xmmword [0x14015acf0]
mov dl, 8
movdqa xmm2, xmmword [0x14015ac60]
movdqa xmm0, xmm1
psrldq xmm0, 1
mov bl, 0x49
movd eax, xmm0
mov cl, 0x4c
movdqu xmmword [rbp + 0x110], xmm1
mov r9b, 0x5c
mov r10b, 0x47
movdqu xmmword [rbp + 0x120], xmm2
movzx r11d, dl
movzx edi, dl
mov sil, 0x4a
movd r8d, xmm1
movzx r14d, bl
mov r15b, 0x46
mov r12b, 6
xor byte [rbp + 0x112], r8b
xor al, r8b
xor byte [rbp + 0x113], r8b
xor cl, r8b
xor byte [rbp + 0x114], r8b
xor dl, r8b
xor byte [rbp + 0x115], r8b
xor r9b, r8b
xor byte [rbp + 0x116], r8b
xor r10b, r8b
xor byte [rbp + 0x117], r8b
xor r11b, r8b
xor byte [rbp + 0x118], r8b
xor bl, r8b
xor byte [rbp + 0x119], r8b
xor dil, r8b
xor byte [rbp + 0x11a], r8b
xor sil, r8b
xor byte [rbp + 0x11b], r8b
xor r14b, r8b
xor byte [rbp + 0x11c], r8b
xor r15b, r8b
xor byte [rbp + 0x11d], r8b
xor r12b, r8b
xor byte [rbp + 0x11e], r8b
xor byte [rbp + 0x11f], r8b
xor byte [rbp + 0x121], r8b
xor byte [rbp + 0x122], r8b
xor byte [rbp + 0x123], r8b
xor byte [rbp + 0x124], r8b
xor byte [rbp + 0x125], r8b
xor byte [rbp + 0x126], r8b
xor byte [rbp + 0x127], r8b
xor byte [rbp + 0x128], r8b
xor byte [rbp + 0x129], r8b
xor byte [rbp + 0x12a], r8b
xor byte [rbp + 0x12b], r8b
xor byte [rbp + 0x12c], r8b
xor byte [rbp + reloc.WLDAP32.dll_Ordinal_301], r8b
xor byte [rbp + 0x12e], r8b
xor byte [rbp + 0x12f], r8b
mov byte [rbp + 0x111], al
movd eax, xmm2
mov byte [rbp + 0x130], cl
lea rcx, [rbp + 0x111]
mov byte [rbp + 0x131], dl
xor al, r8b
mov byte [rbp + 0x132], r9b
mov byte [rbp + 0x120], al
mov byte [rbp + 0x133], r10b
mov byte [rbp + 0x134], r11b
mov byte [rbp + 0x135], bl
mov byte [rbp + 0x136], dil
mov byte [rbp + 0x137], sil
mov byte [rbp + 0x138], r14b
mov byte [rbp + 0x139], r15b
mov byte [rbp + 0x13a], r12b
mov byte [rbp + 0x13b], 0
call fcn.140043950
jmp 0x140066859
movss xmm2, dword [0x14015a7c4]
lea rcx, [rbp + 0x4e8]
movss xmm1, dword [0x14015a7bc]
call fcn.140004650
mov rcx, rax
xor edx, edx
call fcn.140016a20
mov eax, dword [0x14016e45c]
mov ecx, dword [0x14016e454]
cdq
sub eax, edx
sar eax, 1
mov edx, eax
call fcn.1400620f0
mov ecx, dword [0x14016e450]
movd xmm6, eax
mov eax, dword [0x14016e458]
cdq
sub eax, edx
sar eax, 1
mov edx, eax
cvtdq2ps xmm6, xmm6
call fcn.1400620f0
lea rcx, [rbp + 0x4f0]
movd xmm1, eax
movaps xmm2, xmm6
cvtdq2ps xmm1, xmm1
call fcn.140004650
mov rcx, rax
mov edx, 4
call fcn.1400168e0
cmp byte [0x14016e3e8], 0
je 0x140067c9b
lea rcx, [rbp + 0x4f8]
call fcn.140016900
lea rcx, [rbp + 0x500]
movss xmm6, dword [rax + 4]
call fcn.140016900
movaps xmm2, xmm6
lea rcx, [rbp + 0x508]
movss xmm1, dword [rax]
subss xmm1, xmm14
call fcn.140004650
mov rcx, rax
xor edx, edx
call fcn.140016a20
mov byte [0x14016e3e8], 0
mov byte [reloc.WS2_32.dll_accept], 1
xorps xmm2, xmm2
lea rcx, [rbp + 0x510]
xorps xmm1, xmm1
call fcn.140004650
mov cl, 0x5f
mov byte [rbp + 0x240], 0x7c
movzx edx, cl
mov r9b, reloc.WS2_32.dll_send
mov r10b, reloc.WS2_32.dll_select
mov r11b, 8
xor dl, 0x7c
movzx edi, r10b
movzx esi, r11b
mov byte [rbp + 0x242], dl
xor cl, 0x7c
xor r9b, 0x7c
mov r8b, Ordinal_32
mov byte [rbp + 0x241], cl
xor r8b, 0x7c
mov byte [rbp + 0x244], r9b
mov byte [rbp + 0x243], r8b
lea rcx, [rbp + 0x241]
xor r10b, 0x7c
xor r11b, 0x7c
mov bl, Ordinal_26
mov byte [rbp + 0x245], r10b
xor r14d, r14d
mov byte [rbp + 0x246], r11b
xor bl, 0x7c
mov byte [rbp + 0x24a], r14b
xor dil, 0x7c
mov byte [rbp + 0x247], bl
xor sil, 0x7c
mov byte [rbp + 0x248], dil
mov rdx, rax
mov byte [rbp + 0x249], sil
xor r9d, r9d
mov r8b, 1
call fcn.14000ff60
call fcn.140046b30
xorps xmm0, xmm0
call fcn.140017b80
mov cl, reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x1b8], 0x3f
xor cl, 0x3f
mov dl, 0x4d
xor dl, 0x3f
mov byte [rbp + 0x1ba], cl
mov al, 0x4c
mov byte [rbp + 0x1bb], dl
mov r8b, 0x56
lea rdx, [0x14016e315]
mov r9b, 0x51
lea rcx, [rbp + 0x1b9]
mov r10b, 0x4b
xor r11d, r11d
xor al, 0x3f
mov byte [rbp + 0x1bf], r11b
xor r8b, 0x3f
mov byte [rbp + 0x1b9], al
xor r9b, 0x3f
mov byte [rbp + 0x1bc], r8b
xor r10b, 0x3f
mov byte [rbp + 0x1bd], r9b
mov byte [rbp + 0x1be], r10b
call fcn.140045b00
jmp 0x140066866
call fcn.14003e640
call fcn.14003ee60
xor ecx, ecx
call fcn.14000a350
call fcn.140068080
mov rcx, qword [rbp + 0x400]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x5d8]
mov rcx, qword [rbp + 0x600]
call qword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.14005fca0
mov rcx, qword [0x14016e030]
call qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_ExitProcess]
lea rcx, [rbp + 0x850]
call fcn.140068f40
lea rcx, [rbp + 0x850]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x638]
call fcn.140003100
lea rcx, [rbp + 0x738]
call fcn.140003100
lea rcx, [rbp + 0x698]
call fcn.140003100
xor eax, eax
mov rcx, qword [rbp + 0x9a0]
xor rcx, rsp
call fcn.1400d00f0
lea r11, [rsp + 0xb50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret