Function at 0x14000779c
Capabilities:
Create thread
Encode data using xor
Execute command
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2c0
lea rcx, [0x140071154]
movaps xmmword [rax - 0x48], xmm6
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
movdqa xmm0, xmmword [0x1400713c0]
xor eax, eax
movdqa xmm1, xmmword [0x140071580]
xor r13d, r13d
movdqu xmmword [rbp - 0x80], xmm0
mov edx, r13d
mov dword [rbp - 0x50], 0xd0f7eeb3
movdqa xmm0, xmmword [0x140071530]
mov r14b, WSAGetLastError
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x4c], al
movdqu xmmword [rbp - 0x70], xmm1
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx - 0x80], al
cmp edx, 0x34
jb 0x140007809
lea rdx, [rbp - 0x80]
mov byte [rbp - 0x4c], r13b
lea rcx, [rbp + 0x190]
call fcn.140009568
movdqa xmm0, xmmword [0x1400713c0]
mov edx, r13d
movdqa xmm1, xmmword [0x140071580]
movdqu xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x50], 0xc8efb0ee
movdqa xmm0, xmmword [0x140071550]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x4c], Ordinal_211
movdqu xmmword [rbp - 0x70], xmm1
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx - 0x80], al
cmp edx, 0x35
jb 0x140007866
lea rdx, [rbp - 0x80]
mov byte [rbp - 0x4b], r13b
lea rcx, [rbp + 0x170]
call fcn.140009568
movdqa xmm0, xmmword [0x1400713c0]
xor eax, eax
movdqa xmm1, xmmword [0x140071580]
mov edx, r13d
movdqu xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x50], 0xcefafdf4
movdqa xmm0, xmmword [0x140071540]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x4c], 0xd48dc7d2
movdqu xmmword [rbp - 0x70], xmm1
mov word [rbp - 0x48], 0xd6cd
mov byte [rbp - 0x46], al
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx - 0x80], al
cmp edx, 0x3a
jb 0x1400078cf
lea rdx, [rbp - 0x80]
mov byte [rbp - 0x46], r13b
lea rcx, [rbp + 0x150]
call fcn.140009568
movdqa xmm0, xmmword [0x1400713c0]
xor eax, eax
movdqa xmm1, xmmword [0x140071580]
mov edx, r13d
movdqu xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x50], 0xd2fae8c2
movdqa xmm0, xmmword [0x140071570]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x4c], 0xcacccbd2
movdqu xmmword [rbp - 0x70], xmm1
mov dword [rbp - 0x48], 0xd8cfd68b
mov byte [rbp - 0x44], al
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx - 0x80], al
cmp edx, 0x3c
jb 0x140007939
lea rdx, [rbp - 0x80]
mov byte [rbp - 0x44], r13b
lea rcx, [rbp + 0x130]
call fcn.140009568
xor eax, eax
mov word [rbp + 0x200], 0x5f5e
mov byte [rbp + 0x202], al
mov edx, r13d
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx + 0x200], al
cmp edx, 2
jb 0x140007973
lea rdx, [rbp + 0x200]
mov byte [rbp + 0x202], r13b
lea rcx, [rbp + 0xd0]
call fcn.140009568
mov edx, r13d
mov dword [rbp + 0x200], 0x1c1b1e
mov dword [rbp + 0x204], 0x171c14
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx + 0x200], al
cmp edx, 7
jb 0x1400079b9
lea rdx, [rbp + 0x200]
mov byte [rbp + 0x207], r13b
lea rcx, [rbp + 0x110]
call fcn.140009568
mov edx, r13d
mov dword [rbp + 0x200], 0x1c1b3f
mov r12d, 3
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx + 0x200], al
cmp edx, r12d
jb 0x1400079fb
lea rdx, [rbp + 0x200]
mov byte [rbp + 0x203], r13b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140007778]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, r13d
mov dword [rbp + 0x200], 0x1c020e
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx + 0x200], al
cmp edx, r12d
jb 0x140007a51
lea rcx, [rbp + 0x200]
mov byte [rbp + 0x203], r13b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x70]
call fcn.140003908
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x70]
call fcn.140009e84
lea r15, [0x140009e4c]
mov rcx, rax
mov rdx, r15
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, r13d
mov dword [rbp + 0x200], 0x14061905
mov word [rbp + 0x204], Ordinal_79
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx + 0x200], al
cmp edx, 5
jb 0x140007abc
lea rdx, [rbp + 0x200]
mov byte [rbp + 0x205], r13b
lea rcx, [rbp - 0x40]
call fcn.140009568
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x40]
call fcn.140009470
lea rbx, [0x1400710c8]
mov sil, r13b
mov rdx, rbx
lea rcx, [rbp + 0x50]
call fcn.140009568
mov rdx, rbx
lea rcx, [rbp + 0xb0]
call fcn.140009568
mov rdx, rbx
lea rcx, [rbp + 0x90]
call fcn.140009568
lea rdx, [rbp - 0x40]
lea rcx, [rbp]
call fcn.1400095b8
lea rdx, [rbp + 0x190]
mov rbx, rax
lea rcx, [rbp + 0xf0]
call fcn.1400095b8
mov r8, rbx
lea rcx, [rsp + 0x50]
mov rdx, rax
call fcn.140004194
mov rcx, rax
call fcn.140009c74
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140009568
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.140003ca8
lea rcx, [rsp + 0x30]
call fcn.140009484
lea rcx, [rsp + 0x50]
call fcn.140009484
mov edi, r13d
cmp qword [rbp - 0x10], r13
jbe 0x140007be5
mov rbx, r13
lea rcx, [rbp - 0x20]
call fcn.140009c74
cmp byte [rax + rbx], 0x5f
jne 0x140007bb3
mov sil, 1
jmp 0x140007bd7
lea rcx, [rbp - 0x20]
call fcn.140009c74
lea rcx, [rbp + 0xb0]
mov dl, byte [rax + rbx]
test sil, sil
je 0x140007bd2
lea rcx, [rbp + 0x90]
call fcn.140009988
inc edi
inc rbx
movsxd rax, edi
cmp rax, qword [rbp - 0x10]
jb 0x140007b9f
lea rcx, [rbp + 0xb0]
call fcn.140009c74
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
cmp eax, 0x1be202
je 0x1400087a3
cmp eax, 0x9809eb
je 0x140008545
cmp eax, 0x2e133bdd
jne 0x1400089fc
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.140009970
xor eax, eax
mov dword [rsp + 0x70], 0x31d0b1b
mov dword [rsp + 0x74], 0x491d1d18
mov edx, r13d
mov byte [rsp + 0x78], al
lea r8d, [rax + 8]
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rsp + rcx + 0x70], al
cmp edx, r8d
jb 0x140007c43
or rdi, 0xffffffffffffffff
mov byte [rsp + 0x78], r13b
mov r8, rdi
lea rax, [rsp + 0x70]
inc r8
cmp byte [rax + r8], r13b
jne 0x140007c66
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x40]
call fcn.140009b14
lea rdx, [rbp + 0xd0]
lea rcx, [rbp - 0x40]
call fcn.140009470
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0xf0]
call fcn.1400095b8
lea rdx, [rbp + 0x130]
mov rbx, rax
lea rcx, [rbp - 0x80]
call fcn.1400095b8
mov r8, rbx
lea rcx, [rbp]
mov rdx, rax
call fcn.140004194
mov rcx, rax
call fcn.140009c74
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140009568
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.140003ca8
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400094e0
lea rcx, [rsp + 0x50]
call fcn.140009484
lea rcx, [rsp + 0x30]
call fcn.140009484
lea rcx, [rbp]
call fcn.140009484
lea rcx, [rbp + 0x110]
call fcn.140009c74
lea rcx, [rbp - 0x20]
mov rbx, rax
call fcn.140009c74
sub rbx, rax
movzx ecx, byte [rax]
movzx edx, byte [rax + rbx]
sub ecx, edx
jne 0x140007d39
inc rax
test edx, edx
jne 0x140007d27
test ecx, ecx
jne 0x140007d90
movdqa xmm0, xmmword [0x140071510]
xor eax, eax
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x62], al
mov edx, r13d
mov word [rsp + 0x60], 0x7490
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rsp + rcx + 0x50], al
cmp edx, 0x12
jb 0x140007d5b
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x62], r13b
call fcn.140002928
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp + 0xd0]
call fcn.140009c74
lea rcx, [rbp - 0x20]
mov rbx, rax
call fcn.140009c74
sub rbx, rax
movzx ecx, byte [rax]
movzx edx, byte [rax + rbx]
sub ecx, edx
jne 0x140007dbd
inc rax
test edx, edx
jne 0x140007dab
test ecx, ecx
je 0x140007e1e
movdqa xmm0, xmmword [0x1400714a0]
mov edx, r13d
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x608d8f8e
mov dword [rsp + 0x44], 0x64686771
mov word [rsp + 0x48], reloc.WLDAP32.dll_Ordinal_143
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rsp + rcx + 0x30], al
cmp edx, 0x19
jb 0x140007de9
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x49], r13b
call fcn.140002928
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [rbp + 0x90]
call fcn.140009c74
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov ecx, eax
cmp eax, 0x15180
jg 0x140007e43
mov ebx, 1
jmp 0x140007e58
mov eax, 0xc22e4507
imul ecx
add edx, ecx
sar edx, 0x10
mov ebx, edx
shr ebx, 0x1f
inc ebx
add ebx, edx
lea rcx, [rbp - 0x20]
call fcn.140009c74
movdqa xmm0, xmmword [0x140071460]
mov r8, rax
xor eax, eax
mov dword [rsp + 0x40], 0x8a0c5b5d
mov byte [rsp + 0x44], al
mov edx, r13d
movdqu xmmword [rsp + 0x30], xmm0
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rsp + rcx + 0x30], al
cmp edx, 0x14
jb 0x140007e83
mov rdx, r8
mov byte [rsp + 0x44], r13b
lea rcx, [rsp + 0x30]
call fcn.140002928
movdqa xmm0, xmmword [0x140071450]
mov edx, r13d
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x8a165b5d
mov dword [rsp + 0x44], 0x8e89888b
mov word [rsp + 0x48], reloc.WLDAP32.dll_Ordinal_143
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rsp + rcx + 0x30], al
cmp edx, 0x19
jb 0x140007ecf
mov edx, ebx
mov byte [rsp + 0x49], r13b
lea rcx, [rsp + 0x30]
call fcn.140002928
call fcn.1400070f4
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rdx, r15
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x140071390]
mov edx, r13d
movdqu xmmword [rbp], xmm0
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx], al
cmp edx, 0xf
jb 0x140007f17
lea rcx, [rbp]
mov byte [rbp + 0xf], r13b
call fcn.140002928
mov edi, 0x2c35
lea esi, [rdi + 5]
jmp 0x140007f4b
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x50], 0x2c1c2c2e
mov dword [rsp + 0x54], 0x2c352c16
mov dword [rsp + 0x58], 0x2c352c3f
mov dword [rsp + 0x5c], 0x2c3a2c3a
mov dword [rsp + 0x60], 0x2c30
call fcn.14000922c
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140007f40
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rdx, r15
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x50], 0x2c1c2c2e
mov dword [rsp + 0x54], 0x2c352c16
mov dword [rsp + 0x58], 0x2c352c3f
mov dword [rsp + 0x5c], 0x2c3a2c3a
mov dword [rsp + 0x60], 0x2c30
call fcn.14000922c
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowW]
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x2c0f2c2a
mov qword [0x14007c960], rax
xor eax, eax
mov word [rsp + 0x4c], ax
mov dword [rsp + 0x34], 0x2c152c02
mov dword [rsp + 0x38], 0x2c172c32
mov dword [rsp + 0x3c], 0x2c002c1d
mov dword [rsp + 0x40], 0x2c042c10
mov dword [rsp + 0x44], 0x2c1d2c59
mov dword [rsp + 0x48], 0x2c1f2c01
call fcn.140008ac0
mov rcx, rax
call fcn.140002db8
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140009e4c]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp qword [0x14007c960], r13
je 0x1400089fc
call fcn.1400031b8
mov rbx, rax
mov dword [rsp + 0x50], 0x2c0f2c2a
xor eax, eax
mov dword [rsp + 0x54], 0x2c152c02
lea rcx, [rsp + 0x50]
mov word [rsp + 0x60], ax
mov dword [rsp + 0x58], 0x2c172c5f
mov dword [rsp + 0x5c], 0x2c112c0b
call fcn.140009204
mov rcx, rax
call fcn.140002e64
mov dword [rbx], eax
mov edx, 9
mov rbx, qword [0x14007c960]
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
lea rcx, [rbp - 0x80]
call fcn.140004f10
lea r8, [0x14007c960]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x200]
call fcn.14000a1c0
lea rcx, [0x14007c9e0]
cmp rcx, rax
je 0x1400080eb
mov rdx, qword [rax]
mov qword [rax], r13
call fcn.14000a51c
lea rcx, [rbp + 0x200]
call fcn.140008ae8
mov ebx, 0x2c2e
lea r14d, [rbx - 0x12]
lea r15d, [rbx - 0x18]
lea r12d, [rbx + 0x11]
jmp 0x1400084f1
mov rcx, qword [0x14007c9e0]
call fcn.14000598c
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14000813b
cmp dword [0x14007c970], r13d
mov eax, r13d
sete al
mov dword [0x14007c970], eax
call fcn.140006274
movss xmm6, dword [0x140071360]
lea rcx, [0x14007c978]
and dword [rbp + 0x200], 0
xorps xmm0, xmm0
and dword [rsp + 0x70], 0
and dword [rsp + 0x74], 0
and dword [rsp + 0x78], 0
movups xmmword [rsp + 0x30], xmm0
call fcn.140008b14
call fcn.140004ef4
mov qword [rbp + 0x208], rax
test rax, rax
je 0x1400084a6
call fcn.140004e6c
mov rbx, rax
test rax, rax
je 0x1400084a1
call fcn.140004da0
mov rdi, rax
test rax, rax
je 0x14000849c
call fcn.14000482c
mov r15, rax
test rax, rax
je 0x140008496
mov rcx, rbx
call fcn.140004e7c
mov r12, rax
test rax, rax
je 0x140008490
mov rcx, rbx
call fcn.140004eb0
test eax, eax
je 0x140008490
mov edx, eax
mov rcx, r12
call fcn.140004bb8
mov r14, rax
test rax, rax
je 0x14000848a
mov rcx, rax
call fcn.140004b68
test al, al
je 0x14000848a
mov rcx, r14
call fcn.140004b48
test eax, eax
je 0x14000848a
mov edx, eax
mov rcx, rdi
call fcn.140004db0
test rax, rax
je 0x14000848a
lea r13, [rax + 0x28]
xor ebx, ebx
test r13, r13
je 0x140008487
cmp dword [0x14007c970], ebx
je 0x140008246
mov rcx, r13
call fcn.1400064f8
lea rdx, [0x14007c978]
mov rcx, r12
call fcn.140004c70
mov rax, qword [0x14007c980]
mov rsi, qword [0x14007c978]
mov qword [rbp + 0x210], rax
cmp rsi, rax
je 0x140008476
mov edx, dword [rsi + 8]
mov rcx, r12
call fcn.140004bb8
mov rdi, rax
test rax, rax
je 0x140008465
cmp rax, r14
je 0x140008465
mov rcx, r14
call fcn.140004b3c
mov rcx, rdi
mov ebx, eax
call fcn.140004b3c
cmp ebx, eax
jne 0x1400082b5
xor ebx, ebx
test eax, eax
jne 0x140008465
jmp 0x1400082b7
xor ebx, ebx
mov rcx, rdi
call fcn.140004b68
test al, al
je 0x140008465
mov rcx, rdi
call fcn.140004b0c
xor edi, edi
mov rbx, rax
test rax, rax
je 0x140008463
lea ecx, [rdi + 0x73]
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x14000830a
movaps xmm0, xmmword [0x140071410]
lea r8, [rsp + 0x50]
xorps xmm3, xmm3
movaps xmmword [rsp + 0x50], xmm0
mov rdx, r15
mov rcx, rbx
call fcn.14000685c
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x14000833e
lea rdx, [rbp]
mov rcx, rbx
call fcn.140004aac
lea rcx, [rbp + 0x20]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp + 0x20], xmm0
mov dword [rbp + 0x28], eax
call fcn.140006da4
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x14000836a
movaps xmm0, xmmword [0x140071420]
lea r8, [rsp + 0x50]
mov rdx, r15
movaps xmmword [rsp + 0x50], xmm0
mov rcx, rbx
call fcn.140006b50
cmp dword [0x14007c970], edi
je 0x140008463
mov rdi, qword [rbp + 0x208]
mov rcx, rdi
call fcn.140004f04
mov ecx, 0x24
cmp eax, 3
lea eax, [rcx - 0x19]
cmove ecx, eax
mov dword [rsp + 0x30], ecx
mov rcx, rdi
call fcn.140004f04
mov ecx, Ordinal_32
cmp eax, 3
lea eax, [rcx - 0x15]
cmove ecx, eax
mov dword [rsp + 0x34], ecx
mov rcx, rdi
call fcn.140004f04
mov ecx, Ordinal_27
lea edx, [rcx - 0x16]
cmp eax, edx
cmove ecx, edx
mov dword [rsp + 0x38], ecx
mov rcx, rdi
call fcn.140004f04
lea rax, [rbp + 0x200]
mov dword [rsp + 0x3c], 1
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x30]
lea rax, [rsp + 0x70]
mov dword [rsp + 0x40], reloc.WS2_32.dll_recvfrom
mov r9d, listen
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, r15
call fcn.140006f14
test al, al
je 0x140008463
movsd xmm0, qword [rsp + 0x70]
lea rdx, [rbp + 0x30]
mov eax, dword [rsp + 0x78]
mov rcx, r15
movsd qword [rbp + 0x30], xmm0
mov dword [rbp + 0x38], eax
call fcn.1400065b8
test al, al
je 0x140008463
comiss xmm6, dword [rbp + 0x200]
jbe 0x140008463
movsd xmm0, qword [rsp + 0x70]
lea rdx, [rbp + 0x40]
mov eax, dword [rsp + 0x78]
mov rcx, r13
movsd qword [rbp + 0x40], xmm0
mov dword [rbp + 0x48], eax
call fcn.140006550
movss xmm6, dword [rbp + 0x200]
xor ebx, ebx
add rsi, 0x10
cmp rsi, qword [rbp + 0x210]
jne 0x140008273
lea rcx, [0x14007c978]
call fcn.140008b14
mov esi, 0x2c3a
xor r13d, r13d
mov r14d, 0x2c1c
mov r12d, 0x2c3f
mov r15d, 0x2c16
mov edi, 0x2c35
mov ebx, 0x2c2e
mov rcx, qword [0x14007c9e0]
call fcn.1400059b8
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1400084e6
mov rcx, qword [0x14007c9e0]
call fcn.140006074
call fcn.1400075b8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x50], 0x2c1c2c2e
mov dword [rsp + 0x54], 0x2c352c16
mov dword [rsp + 0x58], 0x2c352c3f
mov dword [rsp + 0x5c], 0x2c3a2c3a
mov dword [rsp + 0x60], 0x2c30
call fcn.14000922c
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x14000810d
lea rcx, [rbp - 0x80]
call fcn.140005164
jmp 0x1400089fc
movdqa xmm0, xmmword [0x1400714e0]
xor eax, eax
movdqa xmm1, xmmword [0x1400714b0]
mov edx, r13d
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rbp - 0x5c], al
movdqu xmmword [rbp - 0x70], xmm1
mov dword [rbp - 0x60], 0xb0b56a63
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx - 0x80], al
cmp edx, 0x24
jb 0x14000856e
lea rcx, [rbp - 0x80]
mov byte [rbp - 0x5c], r13b
call fcn.140002928
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp + 0x50]
call fcn.14000a184
cmp qword [rbp + 0x60], r13
je 0x14000858d
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.140009970
mov edx, r13d
mov dword [rbp + 0x200], 0x14061905
mov word [rbp + 0x204], Ordinal_79
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx + 0x200], al
cmp edx, 5
jb 0x1400085c4
or rdi, 0xffffffffffffffff
mov byte [rbp + 0x205], r13b
mov r8, rdi
lea rax, [rbp + 0x200]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400085ee
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x40]
call fcn.140009b14
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x40]
call fcn.140009470
mov edx, r13d
mov dword [rbp + 0x200], 0x1f1d1e4b
mov dword [rbp + 0x204], 0x4e1d1c
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx + 0x200], al
cmp edx, 7
jb 0x14000862b
mov byte [rbp + 0x207], r13b
lea rax, [rbp + 0x200]
inc rdi
cmp byte [rax + rdi], r13b
jne 0x14000864e
mov r8, rdi
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x40]
call fcn.1400092b8
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x40]
call fcn.140009470
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x80]
call fcn.1400095b8
lea rdx, [rbp + 0x150]
mov rbx, rax
lea rcx, [rbp + 0xf0]
call fcn.1400095b8
mov r8, rbx
lea rcx, [rbp]
mov rdx, rax
call fcn.140004194
mov rcx, rax
call fcn.140009c74
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140009568
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.140003ca8
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400094e0
lea rcx, [rsp + 0x50]
call fcn.140009484
lea rcx, [rsp + 0x30]
call fcn.140009484
lea rcx, [rbp]
call fcn.140009484
lea rcx, [rbp - 0x20]
call fcn.140009c74
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
cmp eax, 0x8da7f4
je 0x14000875c
cmp eax, 0xadaff8e
jne 0x1400089fc
movdqa xmm0, xmmword [0x1400714d0]
mov edx, r13d
movdqa xmm1, xmmword [0x1400714c0]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rbp - 0x60], 0x87
movdqu xmmword [rbp - 0x70], xmm1
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx - 0x80], al
cmp edx, 0x21
jb 0x14000873d
mov byte [rbp - 0x5f], r13b
lea rcx, [rbp - 0x80]
jmp 0x1400089f7
movdqa xmm0, xmmword [0x1400714f0]
mov edx, r13d
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x72959e5d
mov dword [rsp + 0x44], 0x746b6069
mov dword [rsp + 0x48], 0x6567646b
mov word [rsp + 0x4c], 0x83
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rsp + rcx + 0x30], al
cmp edx, 0x1d
jb 0x14000878c
jmp 0x1400089ed
movdqa xmm0, xmmword [0x140071500]
xor eax, eax
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x62], al
mov edx, r13d
mov word [rsp + 0x60], 0x5e47
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rsp + rcx + 0x50], al
cmp edx, 0x12
jb 0x1400087c1
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x62], r13b
call fcn.140002928
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp + 0x50]
call fcn.14000a184
cmp qword [rbp + 0x60], r13
je 0x1400087e2
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.140009970
mov edx, r13d
mov dword [rbp + 0x200], 0x14061905
mov word [rbp + 0x204], Ordinal_79
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx + 0x200], al
cmp edx, 5
jb 0x140008819
or rdi, 0xffffffffffffffff
mov byte [rbp + 0x205], r13b
mov r8, rdi
lea rax, [rbp + 0x200]
inc r8
cmp byte [rax + r8], r13b
jne 0x140008843
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x40]
call fcn.140009b14
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x40]
call fcn.140009470
mov edx, r13d
mov dword [rbp + 0x200], 0x1f1d1e4b
mov dword [rbp + 0x204], 0x4e1d1c
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx + 0x200], al
cmp edx, 7
jb 0x140008880
mov byte [rbp + 0x207], r13b
lea rax, [rbp + 0x200]
inc rdi
cmp byte [rax + rdi], r13b
jne 0x1400088a3
mov r8, rdi
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x40]
call fcn.1400092b8
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x40]
call fcn.140009470
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x80]
call fcn.1400095b8
lea rdx, [rbp + 0x170]
mov rbx, rax
lea rcx, [rbp + 0xf0]
call fcn.1400095b8
mov r8, rbx
lea rcx, [rbp]
mov rdx, rax
call fcn.140004194
mov rcx, rax
call fcn.140009c74
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140009568
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.140003ca8
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400094e0
lea rcx, [rsp + 0x50]
call fcn.140009484
lea rcx, [rsp + 0x30]
call fcn.140009484
lea rcx, [rbp]
call fcn.140009484
lea rcx, [rbp - 0x20]
call fcn.140009c74
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
cmp eax, 0x8da7f4
je 0x1400089a9
cmp eax, 0xadaff8e
jne 0x1400089fc
movdqa xmm0, xmmword [0x1400714d0]
mov edx, r13d
movdqa xmm1, xmmword [0x1400714c0]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rbp - 0x60], 0x87
movdqu xmmword [rbp - 0x70], xmm1
movsxd rcx, edx
lea eax, [r14 + rdx]
inc edx
xor byte [rbp + rcx - 0x80], al
cmp edx, 0x21
jb 0x140008992
jmp 0x14000874f
movdqa xmm0, xmmword [0x1400714f0]
mov r8d, r13d
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x72959e5d
mov dword [rsp + 0x44], 0x746b6069
mov dword [rsp + 0x48], 0x6567646b
mov word [rsp + 0x4c], 0x83
movsxd rdx, r8d
lea eax, [r14 + r8]
inc r8d
xor byte [rsp + rdx + 0x30], al
cmp r8d, 0x1d
jb 0x1400089d9
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x4d], r13b
call fcn.140002928
mov rcx, qword [0x14007c9e0]
call fcn.140006074
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400075b8
lea rcx, [rbp - 0x20]
call fcn.140009484
lea rcx, [rbp + 0x90]
call fcn.140009484
lea rcx, [rbp + 0xb0]
call fcn.140009484
lea rcx, [rbp + 0x50]
call fcn.140009484
lea rcx, [rbp - 0x40]
call fcn.140009484
lea rcx, [rbp + 0x70]
call fcn.140009484
lea rcx, [rbp + 0x110]
call fcn.140009484
lea rcx, [rbp + 0xd0]
call fcn.140009484
lea rcx, [rbp + 0x130]
call fcn.140009484
lea rcx, [rbp + 0x150]
call fcn.140009484
lea rcx, [rbp + 0x170]
call fcn.140009484
lea rcx, [rbp + 0x190]
call fcn.140009484
lea r11, [rsp + 0x2c0]
xor eax, eax
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret