Function at 0x1401e7120
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x2d70]
mov eax, 0x2e70
call fcn.140410240
sub rsp, rax
movaps xmmword [rsp + 0x2e60], xmm6
mov rax, qword [0x140542918]
xor rax, rsp
mov qword [rbp + 0x2d50], rax
mov rdi, rcx
xor r15d, r15d
xor r8d, r8d
lea rdx, [rbp + 0xa0]
mov rcx, qword [rcx]
call fcn.140137cd0
test eax, eax
jle 0x1401e747b
lea rsi, [0x140000000]
nop word [rax + rax]
mov rax, qword [rbp + 0xa8]
mov qword [rdi + 0x18], rax
mov ecx, dword [rbp + 0xa0]
sub ecx, 1
je 0x1401e7451
sub ecx, 1
je 0x1401e7425
cmp ecx, 1
je 0x1401e71c9
lea rcx, str._SERVER_:_UNHANDLED_n
call fcn.140131700
jmp 0x1401e7461
mov rdx, qword [rbp + 0xb8]
cmp qword [rdx + 0x18], 3
jbe 0x1401e73e3
mov rax, qword [rdx + 0x10]
movzx r8d, byte [rax]
mov ecx, r8d
sub ecx, 2
je 0x1401e738e
sub ecx, 1
je 0x1401e7339
sub ecx, 1
je 0x1401e7214
sub ecx, 2
je 0x1401e8c15
cmp ecx, 2
je 0x1401e8c15
jmp 0x1401e73e6
mov rcx, rdx
call fcn.1401eba60
mov rbx, rax
mov rcx, qword [rbp + 0xb8]
call fcn.1401ebab0
movzx ecx, byte [rbx]
cmp ecx, 0x1a
ja case.0x1401e7249.7
movzx ecx, byte [rsi + rcx + 0x1e8c9c]
mov edx, dword [rsi + rcx*4 + 0x1e8c7c]
add rdx, rsi
jmp rdx
mov rcx, rbx
call fcn.1401e2640
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1401e726c
cmp byte [0x1405464a3], r15b
jne 0x1401e7292
mov ecx, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1401e7285
cmp byte [0x1405464a1], r15b
jne 0x1401e7292
cmp byte [0x1405465b3], r15b
je case.0x1401e7249.7
mov rcx, qword [rbp + 0xb8]
call fcn.140136780
jmp 0x1401e8c15
mov rdx, rbx
mov rcx, rax
call fcn.1401cade0
test al, al
jne 0x1401e7292
jmp case.0x1401e7249.7
mov al, 1
mov edx, dword [rbx + 0x14]
cmp edx, 0x704
je 0x1401e72d9
cmp edx, 0xf2
je 0x1401e72d9
movzx eax, al
cmp edx, 0x1c14
cmovne eax, r15d
cmp byte [0x140546371], r15b
je 0x1401e72ea
test al, al
je 0x1401e74dd
mov rcx, qword [0x140546c20]
add rcx, 0x5de8
call fcn.1401a97a0
test eax, eax
je 0x1401e7292
mov rcx, rbx
call fcn.1401d9000
test al, al
jne 0x1401e7292
jmp case.0x1401e7249.7
mov rcx, rbx
call fcn.1401b7700
test al, al
jne 0x1401e7292
jmp case.0x1401e7249.7
cmp byte [0x140548b42], r15b
jne 0x1401e8c15
jmp case.0x1401e7249.7
mov rcx, rdx
call fcn.1401ebb00
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], r15
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r15b
jne 0x1401e7360
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.14013c770
lea rcx, [rbp + 0x100]
call fcn.1401714c0
test al, al
jne 0x1401e7292
jmp case.0x1401e7249.7
mov rcx, rdx
call fcn.1401ebb00
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], r15
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r15b
jne 0x1401e73b5
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.14013c770
lea rcx, [rbp + 0x100]
call fcn.140172120
test al, al
jne 0x1401e7292
jmp case.0x1401e7249.7
mov r8d, r15d
mov edx, r8d
lea rcx, str._SERVER_:_Got_unknown_packet_of_type__d._n
call fcn.140131700
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x1401e7292
cmp qword [rdi + 8], r15
je 0x1401e7292
mov r8, qword [rbp + 0xb8]
xor edx, edx
call fcn.140137800
mov rcx, qword [rdi + 8]
call fcn.140137ca0
jmp 0x1401e7461
cmp byte [0x140548b42], r15b
jne 0x1401e8c15
cmp byte [0x140548b3a], r15b
je 0x1401e7461
xor edx, edx
mov rcx, rdi
call fcn.1401e46d0
mov byte [0x140548b3a], r15b
jmp 0x1401e8c15
mov rcx, rdi
call fcn.1401e45e0
test al, al
je 0x1401e8c15
xor r8d, r8d
lea rdx, [rbp + 0xa0]
mov rcx, qword [rdi]
call fcn.140137cd0
test eax, eax
jg 0x1401e7190
movabs rbx, 0x7fffffffffffffff
cmp byte [0x1405464a5], r15b
je 0x1401e7d51
mov rax, qword [0x140546c20]
cmp byte [rax + 0x60b9], r15b
je 0x1401e7d51
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
cmp rax, qword [0x1405464f0]
jb 0x1401e7d51
add rax, 0xc8
mov qword [0x1405464f0], rax
mov eax, dword [0x1405464ec]
cmp eax, 8
jle 0x1401e7cd4
mov eax, r15d
jmp 0x1401e7cd6
mov rax, qword [0x140546c20]
add rax, 0x5ef0
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], edx
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x120]
mov rcx, rax
call fcn.140143000
mov rdx, qword [rax]
add rdx, 0x18
lea rcx, [rbp + 0x410]
call fcn.14014deb0
nop
lea rsi, [rbp + 0x418]
mov r12, qword [rbp + 0x418]
cmp qword [rbp + 0x430], 0x10
cmovae rsi, r12
mov r14, qword [rbp + 0x428]
cmp r14, 9
jb 0x1401e75b7
lea r15, [rsi + r14]
lea r8, [r15 - 8]
sub r8, rsi
mov edx, 0x41
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1401e75b7
nop dword [rax]
nop word [rax + rax]
mov r8d, 9
lea rdx, str.Ancestral
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401e75aa
inc rbx
lea r8, [r15 - 8]
sub r8, rbx
mov edx, 0x41
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1401e7570
jmp 0x1401e75b7
sub rbx, rsi
cmp rbx, 0xffffffffffffffff
jne 0x1401e76d4
lea rsi, [rbp + 0x418]
cmp qword [rbp + 0x430], 0x10
cmovae rsi, r12
cmp r14, 7
jb 0x1401e7637
lea r15, [rsi + r14]
lea r8, [r15 - 6]
sub r8, rsi
mov edx, 0x53
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1401e7637
mov r8d, 7
lea rdx, str.Samille
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401e762a
inc rbx
lea r8, [r15 - 6]
sub r8, rbx
mov edx, 0x53
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1401e75f0
jmp 0x1401e7637
sub rbx, rsi
cmp rbx, 0xffffffffffffffff
jne 0x1401e76d4
lea rsi, [rbp + 0x418]
cmp qword [rbp + 0x430], 0x10
cmovae rsi, r12
cmp r14, 7
jb 0x1401e76ab
lea r8, [r14 - 6]
add r8, rsi
sub r8, rsi
mov edx, 0x43
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1401e76ab
nop
mov r8d, 7
lea rdx, str.Chakram
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401e76cb
inc rbx
lea r8, [r14 - 6]
add r8, rsi
sub r8, rbx
mov edx, 0x43
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1401e7670
movsx rax, byte [rbp + 0x4a4]
cmp eax, 8
ja case.0x1401e76c9.0
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x1e8cb8]
add rcx, rdx
jmp rcx
sub rbx, rsi
cmp rbx, 0xffffffffffffffff
je 0x1401e76ab
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x14054644c]
jp 0x1401e7700
jne 0x1401e7700
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x14054644c], xmm0
jmp 0x1401e792c
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x14054644c], xmm0
jmp 0x1401e792c
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x140546398]
jp 0x1401e7918
jne 0x1401e7918
xorps xmm0, xmm0
jmp 0x1401e7920
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x14054639c]
jp 0x1401e776d
jne 0x1401e776d
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x14054639c], xmm0
jmp 0x1401e792c
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x14054639c], xmm0
jmp 0x1401e792c
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x1405463a0]
jp 0x1401e77b2
jne 0x1401e77b2
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463a0], xmm0
jmp 0x1401e792c
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463a0], xmm0
jmp 0x1401e792c
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x1405463a4]
jp 0x1401e77f7
jne 0x1401e77f7
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463a4], xmm0
jmp 0x1401e792c
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463a4], xmm0
jmp 0x1401e792c
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x1405463a8]
jp 0x1401e783c
jne 0x1401e783c
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463a8], xmm0
jmp 0x1401e792c
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463a8], xmm0
jmp 0x1401e792c
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x1405463ac]
jp 0x1401e7881
jne 0x1401e7881
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463ac], xmm0
jmp 0x1401e792c
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463ac], xmm0
jmp 0x1401e792c
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x1405463b0]
jp 0x1401e78c3
jne 0x1401e78c3
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463b0], xmm0
jmp 0x1401e792c
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463b0], xmm0
jmp 0x1401e792c
mov eax, dword [rbp + 0x410]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
ucomiss xmm0, dword [0x1405463b8]
jp 0x1401e7902
jne 0x1401e7902
xorps xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463b8], xmm0
jmp 0x1401e792c
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x1405463b8], xmm0
jmp 0x1401e792c
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvtpd2ps xmm0, xmm0
movss dword [0x140546398], xmm0
cvttss2si ecx, dword [0x1405463ac]
call fcn.14012f0b0
test eax, eax
je 0x1401e794f
cvttss2si ecx, dword [0x1405463ac]
call fcn.14012f0b0
jmp 0x1401e79ec
cvttss2si ecx, dword [0x1405463a8]
call fcn.14012f0b0
test eax, eax
je 0x1401e796f
cvttss2si ecx, dword [0x1405463a8]
call fcn.14012f0b0
jmp 0x1401e79ec
cvttss2si ecx, dword [0x14054639c]
call fcn.14012f0b0
test eax, eax
je 0x1401e798f
cvttss2si ecx, dword [0x14054639c]
call fcn.14012f0b0
jmp 0x1401e79ec
cvttss2si ecx, dword [0x1405463b4]
call fcn.14012f0b0
test eax, eax
je 0x1401e79af
cvttss2si ecx, dword [0x1405463b4]
call fcn.14012f0b0
jmp 0x1401e79ec
cvttss2si ecx, dword [0x1405463b8]
call fcn.14012f0b0
cvttss2si ecx, dword [0x1405463b8]
test eax, eax
je 0x1401e79cf
call fcn.14012f0b0
jmp 0x1401e79ec
call fcn.14012f0b0
test eax, eax
je 0x1401e79e7
cvttss2si ecx, dword [0x1405463b8]
call fcn.14012f0b0
jmp 0x1401e79ec
mov eax, 0x808000
mov dword [0x14053713c], eax
xorps xmm6, xmm6
movss xmm0, dword [0x1405463b0]
ucomiss xmm0, xmm6
jp 0x1401e7a04
je 0x1401e7a0b
mov byte [0x14054645e], 1
xor r8d, r8d
mov rbx, qword [rsp + 0x50]
mov edx, dword [rbx + 0x114]
mov rcx, rdi
call fcn.1401eafa0
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], reloc.WS2_32.dll_listen
mov qword [rbp + 0x150], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.OnSetClothing]
movsd qword [rbp + 0x138], xmm0
mov eax, dword [0x140436d38]
mov dword [rbp + 0x140], eax
movzx eax, byte [0x140436d3c]
mov byte [rbp + 0x144], al
mov byte [rbp + 0x145], 0
lea rdx, [rbp + 0x138]
lea rcx, [rbp + 0x160]
call fcn.140151000
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0x10
jb 0x1401e7ac9
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e7ac4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401e7ac4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14040fbd0
movss xmm1, dword [0x14054639c]
movss xmm2, dword [0x1405463a0]
mov dword [rbp + 0x1a0], 4
movss xmm0, dword [0x140546398]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x1b0], xmm0
movss dword [rbp + 0x1b8], xmm2
movss xmm1, dword [0x1405463a8]
movss xmm2, dword [0x1405463ac]
mov dword [rbp + 0x1e0], 4
movss xmm0, dword [0x1405463a4]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x1f0], xmm0
movss dword [rbp + 0x1f8], xmm2
movss xmm1, dword [0x1405463b4]
movss xmm2, dword [0x1405463b8]
mov dword [rbp + 0x220], 4
movss xmm0, dword [0x1405463b0]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x230], xmm0
movss dword [rbp + 0x238], xmm2
mov dword [rbp + 0x260], 9
mov eax, dword [0x14053712c]
mov dword [rbp + 0x270], eax
movss xmm1, dword [0x140436d9c]
mov dword [rbp + 0x2a0], 4
movss xmm0, dword [0x14054644c]
unpcklps xmm0, xmm1
movsd qword [rbp + 0x2b0], xmm0
movss dword [rbp + 0x2b8], xmm6
mov dword [rsp + 0x20], 0xffffffff
mov r9d, dword [rbx + 0x114]
lea r8, [rbp + 0x160]
mov dl, 1
mov rcx, qword [0x140546c20]
call fcn.1401eac90
movss xmm0, dword [0x140546398]
movss dword [rbp + 0xc0], xmm0
movss xmm1, dword [0x14054639c]
movss dword [rbp + 0xc4], xmm1
movss xmm0, dword [0x1405463a0]
movss dword [rbp + 0xc8], xmm0
movss xmm1, dword [0x1405463a4]
movss dword [rbp + 0xcc], xmm1
movss xmm0, dword [0x1405463a8]
movss dword [rbp + 0xd0], xmm0
movss xmm1, dword [0x1405463ac]
movss dword [rbp + 0xd4], xmm1
movss xmm0, dword [0x1405463b0]
movss dword [rbp + 0xd8], xmm0
movss xmm1, dword [0x1405463b4]
movss dword [rbp + 0xdc], xmm1
movss xmm0, dword [0x1405463b8]
movss dword [rbp + 0xe0], xmm0
mov eax, dword [0x14053712c]
mov dword [rbp + 0xe4], eax
movss xmm0, dword [0x14054644c]
movss dword [rbp + 0xe8], xmm0
mov qword [rbp + 0xec], 0x3f800000
lea rdx, [rbp + 0xc0]
lea rcx, [0x140538960]
call fcn.14012eb10
mov rcx, qword [rbp + 0xb8]
call fcn.140136780
nop
lea r9, [fcn.14012e210]
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rbp + 0x160]
call fcn.14040fac4
nop
lea rcx, [rbp + 0x410]
call fcn.140153170
jmp 0x1401e8c15
inc eax
mov dword [0x1405464ec], eax
movsxd r8, eax
shl r8, 5
add r8, qword [0x140546d40]
mov rcx, qword [r8 + 0x10]
mov rax, rbx
sub rax, rcx
cmp rax, 0x15
jb 0x1401e8c6f
mov rax, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1401e7d0b
mov rax, qword [r8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_setsockopt
lea r9, str.actionsetSkin_ncolor
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xc0]
call fcn.14012de40
mov r9d, 2
lea r8, [rbp + 0xc0]
xor edx, edx
mov rcx, qword [0x140546c20]
call fcn.1401eaed0
cmp byte [0x14054650c], r15b
je 0x1401e7f2b
mov rax, qword [0x140546c20]
cmp byte [rax + 0x60b9], r15b
je 0x1401e7f2b
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdi, rax
cmp rax, qword [0x1405464f8]
jb 0x1401e7f2b
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x88888889
imul r8d
add edx, r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xf
sub r8d, ecx
movsxd rcx, r8d
add rcx, 0x12c
add rcx, rdi
mov qword [0x1405464f8], rcx
mov eax, dword [0x1405385c8]
cmp eax, 0x20
jne 0x1401e7e8d
mov rdx, qword [0x140546c20]
movss xmm0, dword [rdx + 0x6010]
mulss xmm0, dword [0x1404440a0]
addss xmm0, dword [0x140436d9c]
cvttss2si edi, xmm0
movss xmm0, dword [rdx + 0x6014]
mulss xmm0, dword [0x1404440a0]
cvttss2si esi, xmm0
imul eax, esi, 0x64
add eax, edi
movsxd rcx, eax
mov rax, qword [rdx + 0x5f6c]
mov r9, qword [rax + rcx*8]
movzx r8d, word [r9]
mov ecx, dword [reloc.WS2_32.dll_bind]
cmp r8d, ecx
je 0x1401e7f19
movzx eax, word [r9 + 2]
cmp eax, ecx
je 0x1401e7f19
test r8w, r8w
jne 0x1401e7f2b
lea rax, [rdx + 0x5df0]
cmp byte [0x140546510], r15b
je 0x1401e7e5d
mov edx, 0x1608
jmp 0x1401e7f1e
mov dword [rsp + 0x48], ecx
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x120]
mov rcx, rax
call fcn.140142dc0
mov rcx, qword [rax]
cmp byte [rcx + 0x16], r15b
jbe 0x1401e7f2b
mov edx, dword [reloc.WS2_32.dll_bind]
jmp 0x1401e7f1e
cmp eax, 0x30
jne 0x1401e7f2b
mov rdx, qword [0x140546c20]
movss xmm0, dword [rdx + 0x6010]
mulss xmm0, dword [0x1404440a0]
subss xmm0, dword [0x140436d9c]
cvttss2si edi, xmm0
movss xmm0, dword [rdx + 0x6014]
mulss xmm0, dword [0x1404440a0]
cvttss2si esi, xmm0
imul eax, esi, 0x64
add eax, edi
movsxd rcx, eax
mov rax, qword [rdx + 0x5f6c]
mov r9, qword [rax + rcx*8]
movzx r8d, word [r9]
mov ecx, dword [reloc.WS2_32.dll_bind]
cmp r8d, ecx
je 0x1401e7f19
movzx eax, word [r9 + 2]
cmp eax, ecx
je 0x1401e7f19
test r8w, r8w
jne 0x1401e7f2b
lea rax, [rdx + 0x5df0]
cmp byte [0x140546510], r15b
je 0x1401e7e5d
mov edx, 0x1608
jmp 0x1401e7f1e
mov edx, reloc.WS2_32.dll_select
mov r9d, esi
mov r8d, edi
xor ecx, ecx
call fcn.1401ea580
mov esi, 0x6260
cmp byte [0x140548b47], r15b
je 0x1401e8341
cmp byte [0x140548b40], r15b
je 0x1401e8341
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdi, rax
cmp rax, qword [0x1405464d0]
jb 0x1401e8341
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], rax
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x170], xmm1
lea r8d, [rax + 2]
lea rdx, [0x140437044]
lea rcx, [rbp + 0x160]
call fcn.14013c770
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x190], xmm1
mov r8d, 2
lea rdx, [0x14043b044]
lea rcx, [rbp + 0x180]
call fcn.14013c770
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1b0], xmm1
mov r8d, 2
lea rdx, [0x14043b048]
lea rcx, [rbp + 0x1a0]
call fcn.14013c770
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1d0], xmm1
mov r8d, 2
lea rdx, [0x14043b04c]
lea rcx, [rbp + 0x1c0]
call fcn.14013c770
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1f0], xmm1
mov r8d, 2
lea rdx, [0x14043707c]
lea rcx, [rbp + 0x1e0]
call fcn.14013c770
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x210], xmm1
mov r8d, 2
lea rdx, [0x14043b050]
lea rcx, [rbp + 0x200]
call fcn.14013c770
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x230], xmm1
mov r8d, 2
lea rdx, [0x14043b054]
lea rcx, [rbp + 0x220]
call fcn.14013c770
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x250], xmm1
mov r8d, 2
lea rdx, [0x14043ac7c]
lea rcx, [rbp + 0x240]
call fcn.14013c770
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x270], xmm1
mov r8d, 2
lea rdx, [0x1404375f0]
lea rcx, [rbp + 0x260]
call fcn.14013c770
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x290], 2
mov qword [rbp + 0x298], reloc.WS2_32.dll_ntohs
mov word [rbp + 0x280], si
mov byte [rbp + 0x282], 0
lea rax, [rbp + 0x160]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x58], rax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x138]
call fcn.1401e0a10
nop
lea r9, [fcn.14012e0b0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x16]
lea rcx, [rbp + 0x160]
call fcn.14040fac4
call fcn.14040f9e1
mov edx, eax
lea rcx, [rbp + 0x19c0]
call fcn.14014c920
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x4c], 8
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x320]
call fcn.1401e07a0
nop
lea rdx, [rbp + 0x19c0]
lea rcx, [rsp + 0x48]
call fcn.14013bc10
movsxd rdx, eax
shl rdx, 5
add rdx, qword [rbp + 0x138]
lea rcx, [rbp + 0x100]
call fcn.14012dd60
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.OnTextOverlay
lea rcx, [rbp + 0xc0]
call fcn.14013c770
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x630]
call fcn.140151000
nop
lea rcx, [rbp + 0xc0]
call fcn.14012e0b0
mov rax, rbx
mov rcx, qword [rbp + 0x110]
sub rax, rcx
cmp rax, 0x12
jb 0x1401e8c75
lea r9, [rbp + 0x100]
cmp qword [rbp + 0x118], 0x10
cmovae r9, qword [rbp + 0x100]
mov qword [rsp + 0x30], reloc.WS2_32.dll_select
lea rax, str.Auto_Collecting...
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rbp + 0x100]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xc0]
call fcn.14012de40
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x670]
call fcn.140155fd0
nop
lea rcx, [rbp + 0xc0]
call fcn.14012e0b0
mov dword [rsp + 0x20], r15d
mov r9d, 0xffffffff
lea r8, [rbp + 0x630]
mov dl, 1
mov rcx, qword [0x140546c20]
call fcn.1401eac90
lea rax, [rdi + 0x3e8]
mov qword [0x1405464d0], rax
lea r9, [fcn.14012e210]
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rbp + 0x630]
call fcn.14040fac4
nop
lea rcx, [rbp + 0x100]
call fcn.14012e0b0
nop
lea rcx, [rbp + 0x320]
call fcn.1401596a0
nop
lea rcx, [rbp + 0x138]
call fcn.140166220
cmp byte [0x140549d97], 0
je 0x1401e884b
mov rax, qword [0x140546c20]
cmp byte [rax + 0x60b9], 0
je 0x1401e884b
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov r14, rax
cmp rax, qword [0x140549dc0]
jb 0x1401e884b
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 2
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov eax, 0x3260
mov word [rsp + 0x60], ax
mov byte [rsp + 0x62], 0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], 2
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov eax, 0x3360
mov word [rbp - 0x80], ax
mov byte [rbp - 0x7e], 0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], 2
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov eax, 0x3460
mov word [rbp - 0x60], ax
mov byte [rbp - 0x5e], 0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], 2
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov eax, 0x2360
mov word [rbp - 0x40], ax
mov byte [rbp - 0x3e], 0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], 2
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov eax, 0x3960
mov word [rbp - 0x20], ax
mov byte [rbp - 0x1e], 0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], 2
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov eax, 0x3860
mov word [rbp], ax
mov byte [rbp + 2], 0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], 2
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov eax, 0x6360
mov word [rbp + 0x20], ax
mov byte [rbp + 0x22], 0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], 2
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov eax, 0x3660
mov word [rbp + 0x40], ax
mov byte [rbp + 0x42], 0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], 2
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov eax, 0x5e60
mov word [rbp + 0x60], ax
mov byte [rbp + 0x62], 0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], 2
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
mov word [rbp + 0x80], si
mov byte [rbp + 0x82], 0
movdqu xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r15
mov ecx, 0x140
call fcn.14040fb94
mov rdi, rax
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x128], rax
lea rcx, [rax + 0x140]
mov qword [rbp + 0x130], rcx
lea rax, [rbp + 0x120]
mov qword [rsp + 0x50], rax
lea rsi, [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x138], rdi
mov qword [rbp + 0x140], rdi
lea rax, [rbp + 0x120]
mov qword [rbp + 0x148], rax
mov rdx, rsi
mov rcx, rdi
call fcn.14012dd60
add rdi, 0x20
mov qword [rbp + 0x140], rdi
add rsi, 0x20
lea rax, [rbp + 0xa0]
cmp rsi, rax
jne 0x1401e8543
lea r8, [rbp + 0x120]
mov rdx, rdi
mov rcx, rdi
call fcn.14013ccf0
mov qword [rbp + 0x128], rdi
lea r9, [fcn.14012e0b0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx - 0x16]
lea rcx, [rsp + 0x60]
call fcn.14040fac4
call fcn.14040f9e1
mov dword [rbp + 0x19b4], 0xffffffff
mov dword [rbp + 0x634], eax
mov r9d, 1
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, r9d
mov dword [rbp + r9*4 + 0x634], eax
inc r9
cmp r9, 0x270
jb 0x1401e85c0
mov dword [rbp + 0x630], 0x270
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x320]
call fcn.1401e07a0
nop
lea rax, [rbp + 0x630]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x48]
call fcn.140163870
mov ecx, eax
lea rdx, [rcx + rcx*8]
cmp edx, 3
ja 0x1401e864a
lea rcx, [rsp + 0x48]
call fcn.140163870
mov ecx, eax
lea rdx, [rcx + rcx*8]
cmp edx, 4
jb 0x1401e8635
shr rdx, 0x20
shl rdx, 5
add rdx, qword [rbp + 0x120]
lea rcx, [rbp + 0x100]
call fcn.14012dd60
nop
lea rdx, str.actioninput_ntext
lea rcx, [rbp + 0x320]
call fcn.14012d790
cmp byte [0x140546491], 0
je 0x1401e86ac
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0x10
cmovae rdx, qword [rbp + 0x100]
mov r8, qword [rbp + 0x110]
lea rcx, [rbp + 0x320]
call fcn.140140640
lea rdx, [0x140546d20]
cmp qword [0x140546d38], 0x10
cmovae rdx, qword [0x140546d20]
mov r8, qword [0x140546d30]
lea rcx, [rbp + 0x320]
call fcn.140140640
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x328]
call fcn.1401cc7d0
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x138]
call fcn.14012dd60
mov r9d, 2
mov r8, rax
xor edx, edx
mov rcx, qword [0x140546c20]
call fcn.1401eaed0
mov rcx, qword [0x1405388d0]
add rcx, r14
mov qword [0x140549dc0], rcx
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x1401e8769
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e8764
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401e8764
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14040fbd0
movdqa xmm0, xmmword [0x140436f80]
movdqu xmmword [rbp + 0xd0], xmm0
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0x10
jb 0x1401e87c4
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e87bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401e87bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14040fbd0
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x118], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x100], 0
lea rcx, [rbp + 0x320]
call fcn.1401596a0
nop
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x1401e884b
lea r8, [rbp + 0x120]
mov rdx, qword [rbp + 0x128]
call fcn.14013ccf0
mov rdx, qword [rbp + 0x130]
mov rcx, qword [rbp + 0x120]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401e8846
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401e8846
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14040fbd0
mov rax, qword [0x140546c20]
cmp byte [rax + 0x60b9], 0
je 0x1401e8c09
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rdi, rax
mov ecx, dword [0x1405465c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1401e88e2
lea r12, [0x140546ad0]
mov rcx, r12
mov r14, qword [0x140546ad0]
mov r15, qword [0x140546ae8]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140546ae0]
test rsi, rsi
jne 0x1401e88ba
mov r8, rsi
lea rdx, [0x140436faa]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401e88e2
cmp dword [0x1405465c8], 8
jle 0x1401e88e2
cmp rdi, qword [0x1405465e8]
jb 0x1401e8c09
sub rbx, rsi
cmp rbx, 0x14
jb 0x1401e8c4b
jmp 0x1401e8bb6
mov ecx, dword [0x1405465d0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1401e895c
lea r12, [0x140546db8]
mov rcx, r12
mov r14, qword [0x140546db8]
mov r15, qword [0x140546dd0]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140546dc8]
test rsi, rsi
jne 0x1401e8934
mov r8, rsi
lea rdx, [0x140436faa]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401e895c
cmp dword [0x1405465d0], 8
jle 0x1401e895c
cmp rdi, qword [0x1405465e8]
jb 0x1401e8c09
sub rbx, rsi
cmp rbx, 0x14
jb 0x1401e8c51
jmp 0x1401e8bb6
mov ecx, dword [0x1405465d4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1401e89d6
lea r12, [0x140547458]
mov rcx, r12
mov r14, qword [0x140547458]
mov r15, qword [0x140547470]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140547468]
test rsi, rsi
jne 0x1401e89ae
mov r8, rsi
lea rdx, [0x140436faa]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401e89d6
cmp dword [0x1405465d4], 8
jle 0x1401e89d6
cmp rdi, qword [0x1405465e8]
jb 0x1401e8c09
sub rbx, rsi
cmp rbx, 0x14
jb 0x1401e8c57
jmp 0x1401e8bb6
mov ecx, dword [0x1405465d8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1401e8a50
lea r12, [0x1405472e0]
mov rcx, r12
mov r14, qword [0x1405472e0]
mov r15, qword [0x1405472f8]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x1405472f0]
test rsi, rsi
jne 0x1401e8a28
mov r8, rsi
lea rdx, [0x140436faa]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401e8a50
cmp dword [0x1405465d8], 8
jle 0x1401e8a50
cmp rdi, qword [0x1405465e8]
jb 0x1401e8c09
sub rbx, rsi
cmp rbx, 0x14
jb 0x1401e8c5d
jmp 0x1401e8bb6
mov ecx, dword [0x1405465dc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1401e8aca
lea r12, [0x140546960]
mov rcx, r12
mov r14, qword [0x140546960]
mov r15, qword [0x140546978]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140546970]
test rsi, rsi
jne 0x1401e8aa2
mov r8, rsi
lea rdx, [0x140436faa]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401e8aca
cmp dword [0x1405465dc], 8
jle 0x1401e8aca
cmp rdi, qword [0x1405465e8]
jb 0x1401e8c09
sub rbx, rsi
cmp rbx, 0x14
jb 0x1401e8c63
jmp 0x1401e8bb6
mov ecx, dword [0x1405465e0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1401e8b41
lea r12, [0x1405466a8]
mov rcx, r12
mov r14, qword [0x1405466a8]
mov r15, qword [0x1405466c0]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x1405466b8]
test rsi, rsi
jne 0x1401e8b1c
mov r8, rsi
lea rdx, [0x140436faa]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401e8b41
cmp dword [0x1405465e0], 8
jle 0x1401e8b41
cmp rdi, qword [0x1405465e8]
jb 0x1401e8c09
sub rbx, rsi
cmp rbx, 0x14
jb 0x1401e8c69
jmp 0x1401e8bb6
mov ecx, dword [0x1405465e4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1401e8c09
lea r12, [0x140546c28]
mov rcx, r12
mov r14, qword [0x140546c28]
mov r15, qword [0x140546c40]
cmp r15, 0x10
cmovae rcx, r14
mov rsi, qword [0x140546c38]
test rsi, rsi
jne 0x1401e8b97
mov r8, rsi
lea rdx, [0x140436faa]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401e8c09
cmp dword [0x1405465e4], 8
jle 0x1401e8c09
cmp rdi, qword [0x1405465e8]
jb 0x1401e8c09
sub rbx, rsi
cmp rbx, 0x14
jb 0x1401e8c45
mov rax, r12
cmp r15, 0x10
mov qword [rsp + 0x30], rsi
cmovae rax, r14
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_sendto
lea r9, str.actioninput_ntext_
mov r8, r12
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0xc0]
call fcn.14012de40
lea rcx, [rbp + 0xc0]
call fcn.140172120
lea rax, [rdi + 0xc8]
mov qword [0x1405465e8], rax
lea rcx, [0x140538960]
call fcn.140131250
mov rcx, qword [rbp + 0x2d50]
xor rcx, rsp
call fcn.14040ff40
lea r11, [rsp + 0x2e70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.14012eed0
int3
call fcn.14012eed0
int3
call fcn.14012eed0
int3
call fcn.14012eed0
int3
call fcn.14012eed0
int3
call fcn.14012eed0
int3
call fcn.14012eed0
int3
call fcn.14012eed0
nop
call fcn.14012eed0
nop
nop
movabs dword [0x53001e7301001e72], eax
jb 5370711205
add byte [rbx + 0x72], cl
invalid
invalid