Function at 0x140074290
Capabilities:
Access peb ldr_data
Authenticate hmac
Check os version
Contain obfuscated stackstrings
Encode data using base64
Encode data using xor
Execute command
Get number of processors
Hash data using fnv
Log keystrokes via polling
Parse pe header
Resolve function by fnv-1a hash
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x858]
sub rsp, 0x930
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400ea080]
xor rax, rsp
mov qword [rbp + 0x780], rax
mov byte [rbp + 0x280], 0xaa
mov byte [rbp + 0x281], 0x86
mov byte [rbp + 0x282], 0xf9
mov byte [rbp + 0x283], 0xe0
mov byte [rbp + 0x284], 0xfd
mov byte [rbp + 0x285], 0x98
mov byte [rbp + 0x286], 0xf2
mov byte [rbp + 0x287], Ordinal_217
mov byte [rbp + 0x288], Ordinal_211
mov byte [rbp + 0x289], 0xdf
mov byte [rbp + 0x28a], Ordinal_217
mov byte [rbp + 0x28b], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x28c], Ordinal_217
mov byte [rbp + 0x28d], __WSAFDIsSet
mov byte [rbp + 0x28e], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x28f], 0x9f
mov byte [rbp + 0x290], 0x9e
mov byte [rbp + 0x291], __WSAFDIsSet
mov byte [rbp + 0x292], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x293], 0xdf
mov byte [rbp + 0x294], Ordinal_200
mov byte [rbp + 0x295], 0xad
mov byte [rbp + 0x296], 0xbc
mov byte [rbp + 0x297], 0xe9
mov byte [rbp + 0x298], 0xf2
mov byte [rbp + 0x299], 0xfb
mov byte [rbp + 0x29a], 0xe1
mov byte [rbp + 0x29b], 0xb4
mov byte [rbp + 0x29c], 0xaa
mov byte [rbp + 0x29d], 0xab
mov byte [rbp + 0x29e], 0xba
mov byte [rbp + 0x29f], 0xe1
mov byte [rbp + 0x2a0], 0xb2
mov byte [rbp + 0x2a1], 0xa3
mov byte [rbp + 0x2a2], 0xad
mov byte [rbp + 0x2a3], 0xb9
mov byte [rbp + 0x2a4], 0xa5
mov byte [rbp + 0x2a5], 0xb6
mov byte [rbp + 0x2a6], 0xfe
mov byte [rbp + 0x2a7], 0xb5
mov byte [rbp + 0x2a8], 0xbf
mov byte [rbp + 0x2a9], 0xba
mov byte [rbp + 0x2aa], 0xb5
mov byte [rbp + 0x2ab], 0xb2
mov byte [rbp + 0x2ac], 0xad
mov byte [rbp + 0x2ad], 0xf9
mov byte [rbp + 0x2ae], 0xf9
mov byte [rbp + 0x2af], 0xf9
mov byte [rbp + 0x2b0], 0x99
mov byte [rbp + 0x2b1], 0xb0
mov byte [rbp + 0x2b2], 0xf2
mov byte [rbp + 0x2b3], 0xac
mov byte [rbp + 0x2b4], 0xf0
mov byte [rbp + 0x2b5], Ordinal_143
mov byte [rbp + 0x2b6], 0x87
mov byte [rbp + 0x2b7], Ordinal_143
mov byte [rbp + 0x2b8], 0xc0
mov byte [rbp + 0x2b9], Ordinal_143
mov byte [rbp + 0x2ba], Ordinal_143
mov byte [rbp + 0x2bb], __WSAFDIsSet
mov byte [rbp + 0x2bc], Ordinal_143
mov byte [rbp + 0x2bd], Ordinal_143
mov byte [rbp + 0x2be], Ordinal_143
mov byte [rbp + 0x2bf], 0x98
mov byte [rbp + 0x2c0], 0xc0
mov byte [rbp + 0x2c1], __WSAFDIsSet
mov byte [rbp + 0x2c2], Ordinal_143
mov byte [rbp + 0x2c3], Ordinal_143
mov byte [rbp + 0x2c4], Ordinal_143
mov byte [rbp + 0x2c5], Ordinal_217
mov byte [rbp + 0x2c6], Ordinal_143
mov byte [rbp + 0x2c7], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x2c8], __WSAFDIsSet
mov byte [rbp + 0x2c9], __WSAFDIsSet
mov byte [rbp + 0x2ca], 0x9f
mov byte [rbp + 0x2cb], Ordinal_211
mov byte [rbp + 0x2cc], Ordinal_143
mov byte [rbp + 0x2cd], Ordinal_217
mov byte [rbp + 0x2ce], __WSAFDIsSet
mov byte [rbp + 0x2cf], 0x90
mov byte [rbp + 0x2d0], 0x86
mov byte [rbp + 0x2d1], __WSAFDIsSet
mov byte [rbp + 0x2d2], Ordinal_211
mov byte [rbp + 0x2d3], Ordinal_143
mov byte [rbp + 0x2d4], 0x9f
mov byte [rbp + 0x2d5], Ordinal_41
mov byte [rbp + 0x2d6], Ordinal_45
mov byte [rbp + 0x2d7], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x2d8], 0
movzx eax, byte [rbp + 0x280]
xor edi, edi
mov r9d, edi
movabs r11, 0xb00814f3bf8f7fab
mov r10, r11
lea rax, [rbp + 0x280]
sub r10, rax
lea r15d, [rdi + 0xf]
nop dword [rax]
lea rdx, [rbp + 0x280]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, r15b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x280], al
inc r9
cmp r9, 0x59
jb 0x1400745a0
lea rcx, [rbp + 0x280]
call fcn.140017e10
call fcn.140074130
mov byte [rbp + 0x258], 0xaa
mov byte [rbp + 0x259], 0x84
mov byte [rbp + 0x25a], 0xf5
mov byte [rbp + 0x25b], 0xf0
mov byte [rbp + 0x25c], 0xe1
mov byte [rbp + 0x25d], __WSAFDIsSet
mov byte [rbp + 0x25e], 0xe8
mov byte [rbp + 0x25f], 0xca
mov byte [rbp + 0x260], Ordinal_211
mov byte [rbp + 0x261], 0xde
mov byte [rbp + 0x262], Ordinal_217
mov byte [rbp + 0x263], Ordinal_200
mov byte [rbp + 0x264], 0xcb
mov byte [rbp + 0x265], 0x90
mov byte [rbp + 0x266], 0xfe
mov byte [rbp + 0x267], Ordinal_217
mov byte [rbp + 0x268], Ordinal_211
mov byte [rbp + 0x269], Ordinal_211
mov byte [rbp + 0x26a], Ordinal_217
mov byte [rbp + 0x26b], 0xa7
mov byte [rbp + 0x26c], 0xab
mov byte [rbp + 0x26d], 0xe4
mov byte [rbp + 0x26e], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x26f], 0xbd
mov byte [rbp + 0x270], 0xab
mov byte [rbp + 0x271], 0xbb
mov byte [rbp + 0x272], 0xa5
mov byte [rbp + 0x273], 0xb4
mov byte [rbp + 0x274], 0xbb
mov byte [rbp + 0x275], 0xe1
mov byte [rbp + 0x276], 0xe2
mov byte [rbp + 0x277], Ordinal_200
movzx eax, byte [rbp + 0x258]
mov r9, rdi
movabs r11, 0xb9a1e7b7b86d91ad
mov r10, r11
lea rax, [rbp + 0x258]
sub r10, rax
lea rdx, [rbp + 0x258]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, r15b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x258], al
inc r9
cmp r9, 0x20
jb 0x1400746f2
lea rcx, [rbp + 0x258]
call fcn.140017e10
movups xmm0, xmmword [0x1400dbe00]
movups xmmword [rbp + 0x4b0], xmm0
movups xmm1, xmmword [0x1400dbe10]
movups xmmword [rbp + 0x4c0], xmm1
movups xmm0, xmmword [0x1400dbe20]
movups xmmword [rbp + 0x4d0], xmm0
movups xmm1, xmmword [0x1400dbe30]
movups xmmword [rbp + 0x4e0], xmm1
movups xmm0, xmmword [0x1400dbe40]
movups xmmword [rbp + 0x4f0], xmm0
movups xmm1, xmmword [0x1400dbe50]
movups xmmword [rbp + 0x500], xmm1
movups xmm0, xmmword [0x1400dbe60]
movups xmmword [rbp + 0x510], xmm0
movups xmm1, xmmword [0x1400dbe70]
movups xmmword [rbp + 0x520], xmm1
movzx eax, byte [0x1400dbe80]
mov byte [rbp + 0x530], al
mov r8d, edi
mov r14d, dword [reloc.WS2_32.dll_accept]
cmp r14d, 2
jl 0x140074923
movdqa xmm5, xmmword [0x1400dc300]
movdqa xmm4, xmmword [0x1400dc500]
movdqa xmm6, xmmword [0x1400dc330]
movdqa xmm0, xmmword [0x1400dc3a0]
movdqa xmmword [rbp + 0x370], xmm0
lea rcx, [rbp + 0x4b4]
mov edx, dword [rbp + 0x370]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400dc380]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400dc380]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x80
jl 0x140074810
cmp r8d, 0x81
jge 0x140074966
movsxd rax, r8d
lea r9, [rbp + 0x4b0]
add r9, rax
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x81
jl 0x140074930
lea rcx, [rbp + 0x4b0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm1, xmmword [0x1400dbf30]
movups xmm0, xmmword [str.ZOIP]
movups xmmword [rbp + 0x410], xmm1
movups xmmword [rbp + 0x400], xmm0
movups xmm1, xmmword [0x1400dbf50]
movups xmm0, xmmword [0x1400dbf40]
movups xmmword [rbp + 0x430], xmm1
movups xmmword [rbp + 0x420], xmm0
mov eax, dword [0x1400dbfa0]
movups xmm1, xmmword [0x1400dbf70]
movups xmm0, xmmword [0x1400dbf60]
mov dword [rbp + 0x480], eax
movups xmmword [rbp + 0x450], xmm1
movups xmmword [rbp + 0x440], xmm0
movzx eax, byte [0x1400dbfa4]
movups xmm1, xmmword [0x1400dbf90]
movups xmm0, xmmword [0x1400dbf80]
mov byte [rbp + 0x484], al
movups xmmword [rbp + 0x470], xmm1
movups xmmword [rbp + 0x460], xmm0
mov r8d, edi
cmp r14d, 2
jl 0x140074b53
movdqa xmm5, xmmword [0x1400dc300]
movdqa xmm4, xmmword [0x1400dc500]
movdqa xmm6, xmmword [0x1400dc330]
movdqa xmm0, xmmword [0x1400dc3a0]
movdqa xmmword [rbp + 0x370], xmm0
lea rcx, [rbp + 0x404]
mov edx, dword [rbp + 0x370]
nop
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400dc380]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400dc380]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x80
jl 0x140074a40
cmp r8d, 0x85
jge 0x140074b96
movsxd rax, r8d
lea r9, [rbp + 0x400]
add r9, rax
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x85
jl 0x140074b60
lea rcx, [rbp + 0x400]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x1400dbf10]
movups xmm0, xmmword [0x1400dbee8]
mov dword [rbp + 0x3a8], eax
movups xmmword [rbp + 0x380], xmm0
movzx eax, word [0x1400dbf14]
movsd xmm0, qword [0x1400dbf08]
movups xmm1, xmmword [0x1400dbef8]
mov word [rbp + 0x3ac], ax
movsd qword [rbp + 0x3a0], xmm0
movups xmmword [rbp + 0x390], xmm1
mov r8d, edi
cmp r14d, 2
jl 0x140074d3d
movdqa xmm5, xmmword [0x1400dc300]
movdqa xmm4, xmmword [0x1400dc500]
movdqa xmm6, xmmword [0x1400dc330]
movdqa xmm0, xmmword [0x1400dc3a0]
movdqa xmmword [rbp + 0x370], xmm0
lea rcx, [rbp + 0x384]
mov edx, dword [rbp + 0x370]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400dc380]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400dc380]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140074c30
cmp r8d, 0x2e
jge 0x140074d83
movsxd rax, r8d
lea r9, [rbp + 0x380]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2e
jl 0x140074d50
lea rcx, [rbp + 0x380]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r11, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rbp + 0x190], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x191], 0x3f
mov byte [rbp + 0x192], Ordinal_79
mov byte [rbp + 0x193], Ordinal_79
mov byte [rbp + 0x194], 0x78
mov byte [rbp + 0x195], 4
mov byte [rbp + 0x196], 0x68
mov byte [rbp + 0x197], 0x48
mov byte [rbp + 0x198], 0x47
mov byte [rbp + 0x199], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x19a], 0x46
mov byte [rbp + 0x19b], 0x48
mov byte [rbp + 0x19c], Ordinal_79
mov byte [rbp + 0x19d], recv
mov byte [rbp + 0x19e], recv
mov byte [rbp + 0x19f], recv
mov byte [rbp + 0x1a0], Ordinal_45
mov byte [rbp + 0x1a1], Ordinal_50
movzx eax, byte [rbp + 0x190]
mov r9, rdi
movabs rbx, 0xe9f3e8d337647d1d
mov r10, rbx
lea rax, [rbp + 0x190]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp + 0x190]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, r15b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x190], al
inc r9
cmp r9, 0x12
jb 0x140074e40
lea rdx, [rbp + 0x190]
mov rcx, r11
call fcn.1400645e0
movzx edx, byte [rbp + 0x2e0]
lea rcx, [rbp + 0x490]
call fcn.140060f50
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.C:Windows_spoofer.exe
lea rcx, [rbp + 0x490]
call fcn.140060f70
nop
mov r8d, 0x39410
lea rdx, [0x1400ea300]
lea rcx, [rbp + 0x490]
call fcn.140073ff0
nop
lea rcx, [rbp + 0x490]
call fcn.14005d040
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov esi, dword [rcx + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x140074f76
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x140074f76
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140074f71
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140074f50
cmp r8d, 0x2fa62ca8
je 0x140074f7b
test r9d, r9d
jne 0x140074f30
mov rax, qword [rax]
jmp 0x140074f00
mov edx, dword [rsi + 0x1c]
add rdx, r10
mov eax, dword [rsi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov ecx, 0x3e8
call rdx
lea rcx, str.C:Windows_spoofer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140ac8d80]
call fcn.1400624e0
test al, al
jne 0x140074fcd
lea rcx, str.load_the_driver_n
call fcn.140017e10
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r11, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rbp + 0x238], Ordinal_60
mov byte [rbp + 0x239], 0x63
mov byte [rbp + 0x23a], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x23b], Ordinal_50
mov byte [rbp + 0x23c], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x23d], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x23e], Ordinal_33
mov byte [rbp + 0x23f], Ordinal_45
mov byte [rbp + 0x240], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x241], 0x3d
mov byte [rbp + 0x242], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x243], Ordinal_50
mov byte [rbp + 0x244], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x245], 0x67
mov byte [rbp + 0x246], reloc.WS2_32.dll_listen
mov byte [rbp + 0x247], Ordinal_50
mov byte [rbp + 0x248], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x249], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x24a], Ordinal_26
mov byte [rbp + 0x24b], Ordinal_60
mov byte [rbp + 0x24c], Ordinal_45
mov byte [rbp + 0x24d], Ordinal_45
mov byte [rbp + 0x24e], gethostname
mov byte [rbp + 0x24f], gethostname
mov byte [rbp + 0x250], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x251], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x252], 0x7e
mov byte [rbp + 0x253], 0x7c
mov byte [rbp + 0x254], 0x77
mov byte [rbp + 0x255], 0x5d
mov byte [rbp + 0x256], 0x5b
movzx eax, byte [rbp + 0x238]
mov r9, rdi
movabs rbx, 0xe6b2891dcfbb7f3f
mov r10, rbx
lea rax, [rbp + 0x238]
sub r10, rax
nop
lea rdx, [rbp + 0x238]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x238], al
inc r9
cmp r9, 0x1f
jb 0x1400750d0
lea rdx, [rbp + 0x238]
mov rcx, r11
call fcn.1400645e0
cmp qword [0x140ac8548], 0
jne 0x14007521e
movabs rsi, 0x96351a343d5958cf
mov rbx, rsi
lea rax, [rbp + 0x90]
sub rbx, rax
nop dword [rax]
nop dword [rax + rax]
mov byte [rbp + 0x90], 0x86
mov byte [rbp + 0x91], 0xb3
mov byte [rbp + 0x92], 0xab
mov byte [rbp + 0x93], 0xa3
mov byte [rbp + 0x94], 0xb4
mov byte [rbp + 0x95], 0xb8
mov byte [rbp + 0x96], 0xac
mov byte [rbp + 0x97], 0xb0
mov byte [rbp + 0x98], 0xf3
mov byte [rbp + 0x99], 0xfb
mov byte [rbp + 0x9a], reloc.WLDAP32.dll_Ordinal_211
movzx eax, byte [rbp + 0x90]
mov r9, rdi
nop word [rax + rax]
lea rdx, [rbp + 0x90]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, bl
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x90], al
inc r9
cmp r9, 0xb
jb 0x1400751b0
lea rdx, [rbp + 0x90]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140ac8548], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140ac8548], 0
je 0x140075150
movups xmm1, xmmword [0x1400dbeb0]
movups xmm0, xmmword [0x1400dbea0]
movups xmmword [rbp + 0x3c0], xmm1
movups xmmword [rbp + 0x3b0], xmm0
mov eax, dword [0x1400dbee0]
movups xmm1, xmmword [0x1400dbed0]
movups xmm0, xmmword [0x1400dbec0]
mov dword [rbp + 0x3f0], eax
movups xmmword [rbp + 0x3e0], xmm1
movups xmmword [rbp + 0x3d0], xmm0
mov r8d, edi
cmp r14d, 2
jl 0x140075397
movdqa xmm5, xmmword [0x1400dc300]
movdqa xmm4, xmmword [0x1400dc500]
movdqa xmm6, xmmword [0x1400dc330]
movdqa xmm7, xmmword [0x1400dc370]
lea rcx, [rbp + 0x3b0]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x1400752a0
cmp r8d, 0x22
jge 0x1400753e7
movsxd rax, r8d
lea r9, [rbp + 0x3b0]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x3a
movzx eax, r8w
sub ax, cx
add ax, 0x39
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x22
jl 0x1400753b0
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [0x140ac8d8c], eax
mov dword [0x140ac8d80], eax
mov edx, eax
lea rcx, [0x140ac8d80]
call fcn.140062740
call fcn.140065ae0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x140ac8708]
mov dword [rcx + 0xc], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x140ac8708]
mov dword [rcx + 0x10], eax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x6a0], xmm0
mov qword [rbp + 0x6b0], rax
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x6a0]
call fcn.140064af0
nop
mov rcx, qword [0x140ac8540]
test rcx, rcx
jne 0x140075493
nop dword [rax]
call fcn.140072560
mov qword [0x140ac8540], rax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140ac8540]
test rcx, rcx
je 0x140075470
movdqa xmm0, xmmword [0x1400dc290]
movdqu xmmword [rbp + 0x758], xmm0
lea rdx, [rbp + 0x758]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xor edx, edx
mov rcx, qword [0x140ac8540]
call qword [sym.imp.USER32.dll_SetMenu]
mov edx, 0xfffffff0
mov r8d, 0x10000000
mov rcx, qword [0x140ac8540]
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov edx, 0xffffffec
mov r8d, 0x80020
mov rcx, qword [0x140ac8540]
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov edx, 5
mov rcx, qword [0x140ac8540]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140ac8540]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov edx, 0xffffffec
mov rcx, qword [0x140ac8540]
call qword [sym.imp.USER32.dll_GetWindowLongA]
or eax, 0x80020
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x140ac8540]
call qword [sym.imp.USER32.dll_SetWindowLongA]
nop
mov rcx, qword [rbp + 0x6a0]
xor rcx, qword [rbp + 0x6a8]
mov qword [rbp + 0x6a0], rcx
mov rax, qword [rbp + 0x6b0]
mov qword [rax], rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x630], xmm0
mov qword [rbp + 0x640], rax
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x630]
call fcn.140064af0
nop
mov qword [rbp + 0x5b8], 1
mov qword [rbp + 0x5d0], rdi
mov qword [rbp + 0x5c8], 1
mov qword [rbp + 0x5a0], Ordinal_33
mov dword [rbp + 0x5a8], edi
mov dword [rbp + 0x598], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x59c], 1
mov qword [rbp + 0x590], rdi
mov dword [rbp + 0x5b4], reloc.WLDAP32.dll_Ordinal_32
mov rax, qword [0x140ac8540]
mov qword [rbp + 0x5c0], rax
mov qword [rbp + 0x5ac], 8
mov dword [rbp + 0x778], 0xb000
mov dword [rbp + 0x77c], 0xa000
lea rax, [0x140ac8510]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x6e8]
mov qword [rsp + 0x50], rax
lea rax, [0x140ac8520]
mov qword [rsp + 0x48], rax
lea rax, [0x140ac8528]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x590]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x778]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
movabs rsi, 0x529b3458d3b9320d
test eax, eax
jne 0x14007587e
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov edx, 0x37c8
lea r9d, [rax + 8]
mov r8d, 0x448
lea rcx, str.1.89.6_WIP
call fcn.14002a390
xor ecx, ecx
call fcn.14001c130
mov r10, qword [0x140ac8460]
or dword [r10 + 0x47d0], 2
movsd xmm0, qword [r10 + 0x10]
movsd qword [r10 + 0x47f0], xmm0
mov dword [r10 + 0x47d8], 1
mov qword [r10 + 0x20], rdi
mov byte [rbp + 0x100], 0x43
mov byte [rbp + 0x101], gethostname
mov byte [rbp + 0x102], 0x51
mov byte [rbp + 0x103], 0x75
mov byte [rbp + 0x104], 0x77
mov byte [rbp + 0x105], WSASetLastError
mov byte [rbp + 0x106], 0x64
mov byte [rbp + 0x107], 0x77
mov byte [rbp + 0x108], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x109], 0x67
mov byte [rbp + 0x10a], 0x76
mov byte [rbp + 0x10b], gethostname
mov byte [rbp + 0x10c], 0x7d
mov byte [rbp + 0x10d], 0x67
mov byte [rbp + 0x10e], 0x7f
mov byte [rbp + 0x10f], Ordinal_26
movzx eax, byte [rbp + 0x100]
mov r9, rdi
mov r11, rsi
lea rax, [rbp + 0x100]
sub r11, rax
nop
lea rdx, [rbp + 0x100]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r11b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x100], al
inc r9
cmp r9, 0x10
jb 0x140075770
lea rax, [rbp + 0x100]
mov qword [0x140ac8518], rax
lea rax, [0x1400dade4]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1400dc140]
lea rdx, [rbp + 0x100]
mov rcx, qword [r10 + 0x58]
call fcn.140042790
mov rcx, qword [0x140ac8528]
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
lea r9, [rbp + 0x580]
lea r8, [0x1400dbe90]
xor edx, edx
call r10
mov rcx, qword [0x140ac8520]
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
lea r9, [0x140ac8530]
xor r8d, r8d
mov rdx, qword [rbp + 0x580]
call r10
xor edx, edx
mov rcx, qword [0x140ac8540]
call fcn.140064dd0
mov rdx, qword [0x140ac8510]
mov rcx, qword [0x140ac8520]
call fcn.1400490d0
mov rcx, qword [rbp + 0x580]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 1]
mov rcx, qword [0x140ac8540]
call qword [sym.imp.USER32.dll_SetWindowPos]
nop
mov rcx, qword [rbp + 0x630]
xor rcx, qword [rbp + 0x638]
mov qword [rbp + 0x630], rcx
mov rax, qword [rbp + 0x640]
mov qword [rax], rcx
mov r14, qword [0x140ac8a00]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x6d0], xmm0
mov qword [rbp + 0x6e0], rax
lea rdx, [rbp + 0x858]
lea rcx, [rbp + 0x6d0]
call fcn.140064af0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x728], xmm0
movups xmmword [rbp + 0x738], xmm0
movups xmmword [rbp + 0x748], xmm0
lea rsi, [rbp + 0x858]
movabs r12, 0x790b1703fbddb10b
movss xmm12, dword [0x1400dc1c8]
movss xmm15, dword [0x1400dc13c]
xorps xmm10, xmm10
movss xmm7, dword [0x1400dc0a8]
movss xmm8, dword [0x1400dc1f4]
movss xmm6, dword [0x1400dc018]
movss xmm9, dword [0x1400dc17c]
movss xmm13, dword [0x1400dc1cc]
movss xmm11, dword [0x1400dc250]
movss xmm14, dword [0x1400dc1c0]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x140ac8540]
lea rcx, [rbp + 0x728]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140075990
lea rcx, [rbp + 0x728]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x728]
call qword [sym.imp.USER32.dll_DispatchMessageA]
mov rbx, qword [0x140ac8460]
lea rcx, [rbp + 0x648]
call qword [sym.imp.USER32.dll_GetCursorPos]
movd xmm0, dword [rbp + 0x648]
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe08], xmm0
movd xmm0, dword [rbp + 0x64c]
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe0c], xmm0
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400759f6
mov byte [rbx + 0xe10], 1
mov byte [rbx + 0x3748], 1
mov eax, dword [rbx + 0xe0c]
mov dword [rbx + 0x36f8], eax
jmp 0x1400759fd
mov byte [rbx + 0xe10], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x688], xmm0
mov qword [rbp + 0x698], rax
mov rdx, rsi
lea rcx, [rbp + 0x688]
call fcn.140064af0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x540], xmm0
movups xmmword [rbp + 0x550], xmm0
movups xmmword [rbp + 0x560], xmm0
movups xmmword [rbp + 0x570], xmm0
mov rax, qword [0x140ac8460]
mov byte [rax + 0x78], 0
call fcn.1400492e0
call fcn.140065660
call fcn.14001e660
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rcx, qword [0x140ac8708]
test al, 1
je 0x140075a79
cmp byte [rcx + 0x14], 0
sete al
mov byte [rcx + 0x14], al
cmp byte [rcx + 0x14], 0
je 0x140078469
cmp byte [0x140ac8459], 1
je 0x140075a93
mov cl, 1
call fcn.1400733e0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x670], xmm0
mov qword [rbp + 0x680], rax
mov rdx, rsi
lea rcx, [rbp + 0x670]
call fcn.140064af0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x6b8], xmm0
mov qword [rbp + 0x6c8], rax
mov rdx, rsi
lea rcx, [rbp + 0x6b8]
call fcn.140064af0
nop
lea rcx, [rbp + 0x6f0]
call fcn.140072510
mov dword [0x140ac8538], 0x30120
cmp qword [0x140ac8500], 0
jne 0x140075b30
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac8500]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f0]
mov r8d, 0x2385a0
lea rdx, [0x140124b00]
mov rcx, qword [0x140ac8520]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac84e8], 0
jne 0x140075b71
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac84e8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f0]
mov r8d, 0x249
lea rdx, [0x14035d0a0]
mov rcx, qword [0x140ac8520]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac84f0], 0
jne 0x140075bb2
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac84f0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f0]
mov r8d, 0x1e8
lea rdx, [0x14035d530]
mov rcx, qword [0x140ac8520]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac8508], 0
jne 0x140075bf3
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac8508]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f0]
mov r8d, 0x1f7
lea rdx, [0x1400ea100]
mov rcx, qword [0x140ac8520]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac8560], 0
jne 0x140075c34
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac8560]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f0]
mov r8d, 0x100
lea rdx, [0x140ac72e0]
mov rcx, qword [0x140ac8520]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac8558], 0
jne 0x140075c75
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac8558]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f0]
mov r8d, 0x243
lea rdx, [0x140123710]
mov rcx, qword [0x140ac8520]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac84d8], 0
jne 0x140075cb6
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac84d8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f0]
mov r8d, 0x23f
lea rdx, [0x14035d2f0]
mov rcx, qword [0x140ac8520]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac84f8], 0
jne 0x140075cf7
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac84f8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f0]
mov r8d, 0xfbe
lea rdx, [0x14035d720]
mov rcx, qword [0x140ac8520]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac84e0], 0
jne 0x140075d39
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac84e0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x6f0]
mov r8d, 0x1192
lea rdx, [0x140123960]
mov rcx, qword [0x140ac8520]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
nop
mov rcx, qword [rbp + 0x6b8]
xor rcx, qword [rbp + 0x6c0]
mov qword [rbp + 0x6b8], rcx
mov rax, qword [rbp + 0x6c8]
mov qword [rax], rcx
mov rax, qword [0x140ac8708]
cmp byte [rax + 0x14], 0
je 0x14007843d
mov rsi, qword [0x140ac8460]
mov qword [rsi + 0x37d8], rdi
mov dword [rsi + 0x37e4], edi
mov dword [rsi + 0x381c], 0x41a00000
mov dword [rsi + 0x3820], 0x41a00000
mov dword [rsi + 0x3844], 0x41000000
or dword [rsi + 0x47d0], 2
mov dword [rsi + 0x47f0], 0x44548000
mov dword [rsi + 0x47f4], 0x43fa0000
mov dword [rsi + 0x47d8], 1
xor edx, edx
mov r8d, 0x30ab
lea rcx, [0x1400ccdce]
call fcn.140024750
mov rax, qword [0x140ac8460]
mov rcx, qword [rax + 0x3ef8]
movsd xmm0, qword [rcx + 0x20]
movsd qword [rbp + 0x5e8], xmm0
lea rcx, [rbp + 0x5e0]
call fcn.14002aa60
call fcn.14001ded0
mov rbx, rax
mov rcx, qword [0x140ac8460]
movss xmm0, dword [0x140ac8c58]
movss dword [rbp + 0x650], xmm0
movss xmm1, dword [0x140ac8c5c]
movss dword [rbp + 0x654], xmm1
movss xmm0, dword [0x140ac8c60]
movss dword [rbp + 0x658], xmm0
movss xmm1, dword [0x140ac8c64]
mulss xmm1, dword [rcx + 0x37d0]
movss dword [rbp + 0x65c], xmm1
lea rcx, [rbp + 0x650]
call fcn.14001a080
movss xmm1, dword [rbp + 0x5ec]
addss xmm1, dword [rbp + 0x5e4]
movss xmm0, dword [rbp + 0x5e8]
addss xmm0, dword [rbp + 0x5e0]
movss dword [rbp + 0x364], xmm0
movss dword [rbp + 0x368], xmm1
mov dword [rsp + 0x28], edi
movss xmm0, dword [0x1400dc120]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x364]
lea rdx, [rbp + 0x5e8]
mov rcx, rbx
call fcn.14003e9a0
call fcn.14001ded0
mov rbx, rax
mov rcx, qword [0x140ac8460]
movss xmm0, dword [0x140ac8c68]
movss dword [rbp + 0x660], xmm0
movss xmm1, dword [0x140ac8c6c]
movss dword [rbp + 0x664], xmm1
movss xmm0, dword [0x140ac8c70]
movss dword [rbp + 0x668], xmm0
movss xmm1, dword [0x140ac8c74]
mulss xmm1, dword [rcx + 0x37d0]
movss dword [rbp + 0x66c], xmm1
lea rcx, [rbp + 0x660]
call fcn.14001a080
movss xmm1, dword [rbp + 0x5e4]
subss xmm1, dword [rsi + 0x3820]
addss xmm1, dword [rbp + 0x5ec]
movss xmm3, dword [rbp + 0x5e8]
movaps xmm0, xmm3
addss xmm0, xmm12
movss dword [rbp + 0x35c], xmm0
movss dword [rbp + 0x360], xmm1
movss xmm1, dword [rsi + 0x3820]
movaps xmm0, xmm1
subss xmm0, xmm15
addss xmm0, dword [rbp + 0x5ec]
addss xmm0, xmm1
addss xmm3, xmm10
addss xmm3, dword [rsi + 0x381c]
movss dword [rbp + 0x354], xmm3
movss dword [rbp + 0x358], xmm0
mov dword [rsp + 0x28], edi
movss xmm0, dword [0x1400dc11c]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x35c]
lea rdx, [rbp + 0x354]
mov rcx, rbx
call fcn.14003e9a0
movss xmm1, dword [rsi + 0x3820]
addss xmm1, xmm1
addss xmm1, dword [0x1400dc188]
movss xmm0, dword [rsi + 0x381c]
addss xmm0, xmm0
movss dword [rbp + 0x34c], xmm0
movss dword [rbp + 0x350], xmm1
lea rcx, [rbp + 0x34c]
call fcn.14002a770
call fcn.14002aac0
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
movaps xmm0, xmm12
subss xmm0, xmm1
movss dword [rbp + 0x344], xmm0
mov dword [rbp + 0x348], 0x420c0000
mov byte [rbp - 0x78], 0xb1
mov byte [rbp - 0x77], 0x66
mov byte [rbp - 0x76], 0x6a
mov byte [rbp - 0x75], 0x6a
mov byte [rbp - 0x74], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp - 0x73], WSAStartup
mov byte [rbp - 0x72], 7
movzx eax, byte [rbp - 0x78]
mov r9, rdi
movabs rbx, 0x78dc08d14213a6ff
mov r10, rbx
lea rax, [rbp - 0x78]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp - 0x78]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x78], al
inc r9
cmp r9, 7
jb 0x140076060
mov rax, qword [0x140ac8670]
cmp dword [rax], 0
sete cl
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x344]
lea r8, [rbp - 0x78]
mov rdx, qword [0x140ac84e8]
call fcn.14004bac0
test al, al
je 0x1400760cf
mov rax, qword [0x140ac8670]
mov dword [rax], edi
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
movaps xmm0, xmm12
subss xmm0, xmm1
movss dword [rbp + 0x33c], xmm0
mov dword [rbp + 0x340], 0x420c0000
mov byte [rbp - 0x60], 0xb6
mov byte [rbp - 0x5f], 0x89
mov byte [rbp - 0x5e], 0x92
mov byte [rbp - 0x5d], 0x87
mov byte [rbp - 0x5c], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp - 0x5b], 0x90
mov byte [rbp - 0x5a], Ordinal_143
mov byte [rbp - 0x59], 0xf9
movzx eax, byte [rbp - 0x60]
mov r10, rdi
movabs r13, 0x12f68d2adde72eed
mov r11, r13
lea rax, [rbp - 0x60]
sub r11, rax
lea r8, [rbp - 0x60]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, r13
shr rdx, cl
and dl, 0xf
lea eax, [r8 + r11]
xor dl, al
xor dl, r9b
mov byte [rbp + r10 - 0x60], dl
inc r10
cmp r10, 8
jb 0x140076130
movabs r13, 0xd00b7cc3f2ee5525
mov rax, qword [0x140ac8670]
cmp dword [rax], 1
sete cl
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x33c]
lea r8, [rbp - 0x60]
mov rdx, qword [0x140ac84f0]
call fcn.14004bac0
test al, al
je 0x1400761af
mov rax, qword [0x140ac8670]
mov dword [rax], 1
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
movaps xmm0, xmm12
subss xmm0, xmm1
movss dword [rbp + 0x334], xmm0
mov dword [rbp + 0x338], 0x420c0000
mov byte [rbp - 0x20], 0x53
mov byte [rbp - 0x1f], 0x69
mov byte [rbp - 0x1e], 0x78
mov byte [rbp - 0x1d], WSAStartup
mov byte [rbp - 0x1c], 0x6b
mov byte [rbp - 0x1b], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x1a], 0x7d
mov byte [rbp - 0x19], WSASetLastError
mov byte [rbp - 0x18], reloc.WS2_32.dll_recv
movzx eax, byte [rbp - 0x20]
mov r9, rdi
mov r10, r12
lea rax, [rbp - 0x20]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp - 0x20]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x20], al
inc r9
cmp r9, 9
jb 0x140076210
mov rax, qword [0x140ac8670]
cmp dword [rax], 2
sete cl
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x334]
lea r8, [rbp - 0x20]
mov rdx, qword [0x140ac8508]
call fcn.14004bac0
test al, al
je 0x140076283
mov rax, qword [0x140ac8670]
mov dword [rax], 2
call fcn.14002abf0
movss xmm0, dword [rsi + 0x3820]
movaps xmm1, xmm0
subss xmm1, xmm15
addss xmm1, xmm0
movss xmm0, dword [rsi + 0x381c]
addss xmm0, xmm12
movss dword [rbp + 0x32c], xmm0
movss dword [rbp + 0x330], xmm1
lea rcx, [rbp + 0x32c]
call fcn.14002a770
mov rcx, qword [0x140ac8670]
mov edx, dword [rcx]
test edx, edx
je 0x1400779d2
sub edx, 1
je 0x140076a58
cmp edx, 1
jne 0x140078436
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x5e4]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm13
movss xmm0, dword [rbp + 0x5e0]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x324], xmm0
movss dword [rbp + 0x328], xmm2
mov byte [rbp + 0x40], 0x53
mov byte [rbp + 0x41], 0x49
mov byte [rbp + 0x42], 0x58
mov byte [rbp + 0x43], 0x51
mov byte [rbp + 0x44], 0x4b
mov byte [rbp + 0x45], 0x53
mov byte [rbp + 0x46], 0x5d
mov byte [rbp + 0x47], Ordinal_79
mov byte [rbp + 0x48], reloc.WS2_32.dll_recv
movzx eax, byte [rbp + 0x40]
mov r9, rdi
mov r10, r12
lea rax, [rbp + 0x40]
sub r10, rax
nop dword [rax]
lea rdx, [rbp + 0x40]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x40], al
inc r9
cmp r9, 9
jb 0x140076380
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x324]
lea rcx, [rbp + 0x40]
call fcn.140021500
mov rdx, qword [0x140ac8670]
add rdx, 8
mov byte [rbp + 0x1a8], 0x53
mov byte [rbp + 0x1a9], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x1aa], 0x7c
mov byte [rbp + 0x1ab], 0x53
mov byte [rbp + 0x1ac], Ordinal_79
mov byte [rbp + 0x1ad], 0x48
mov byte [rbp + 0x1ae], 0x48
mov byte [rbp + 0x1af], 0x42
mov byte [rbp + 0x1b0], 0x54
mov byte [rbp + 0x1b1], recv
mov byte [rbp + 0x1b2], 0x7c
mov byte [rbp + 0x1b3], 0x53
mov byte [rbp + 0x1b4], 0x5a
mov byte [rbp + 0x1b5], 0x55
mov byte [rbp + 0x1b6], Ordinal_79
mov byte [rbp + 0x1b7], 0x50
mov byte [rbp + 0x1b8], 0x54
mov byte [rbp + 0x1b9], Ordinal_50
movzx eax, byte [rbp + 0x1a8]
mov r10, rdi
movabs rbx, 0xe9f3e8d337647d1d
mov r11, rbx
lea rax, [rbp + 0x1a8]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x1a8]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x1a8], al
inc r10
cmp r10, 0x12
jb 0x140076480
lea rcx, [rbp + 0x1a8]
call fcn.14004dbd0
mov rdx, qword [0x140ac8670]
add rdx, 7
mov byte [rbp + 0xa0], 0xa3
mov byte [rbp + 0xa1], Ordinal_143
mov byte [rbp + 0xa2], 0x85
mov byte [rbp + 0xa3], 0x99
mov byte [rbp + 0xa4], 0x90
mov byte [rbp + 0xa5], 0x9f
mov byte [rbp + 0xa6], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0xa7], Ordinal_143
mov byte [rbp + 0xa8], 0x9a
mov byte [rbp + 0xa9], 0x9e
mov byte [rbp + 0xaa], 0x90
mov byte [rbp + 0xab], 9
movzx eax, byte [rbp + 0xa0]
mov r10, rdi
movabs rbx, 0x25e399f8248840f5
mov r11, rbx
lea rax, [rbp + 0xa0]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0xa0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xa0], al
inc r10
cmp r10, 0xc
jb 0x140076550
lea rcx, [rbp + 0xa0]
call fcn.14004dbd0
mov rdx, qword [0x140ac8670]
add rdx, 4
mov byte [rbp + 0x80], 0xa3
mov byte [rbp + 0x81], __WSAFDIsSet
mov byte [rbp + 0x82], 0x81
mov byte [rbp + 0x83], 0x84
mov byte [rbp + 0x84], 0x80
mov byte [rbp + 0x85], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x86], 0x98
mov byte [rbp + 0x87], 0x9b
mov byte [rbp + 0x88], 0x82
mov byte [rbp + 0x89], 0xf5
movzx eax, byte [rbp + 0x80]
mov r10, rdi
movabs rbx, 0x679fb9356ad271ed
mov r11, rbx
lea rax, [rbp + 0x80]
sub r11, rax
nop
lea r8, [rbp + 0x80]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x80], al
inc r10
cmp r10, 0xa
jb 0x140076610
lea rcx, [rbp + 0x80]
call fcn.14004dbd0
mov rdx, qword [0x140ac8670]
add rdx, 6
mov byte [rbp + 0xe0], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0xe1], 0xe4
mov byte [rbp + 0xe2], 0xe5
mov byte [rbp + 0xe3], 0xfb
mov byte [rbp + 0xe4], 0xaf
mov byte [rbp + 0xe5], Ordinal_200
mov byte [rbp + 0xe6], 0xee
mov byte [rbp + 0xe7], 0xee
mov byte [rbp + 0xe8], 0xfe
mov byte [rbp + 0xe9], 0xe6
mov byte [rbp + 0xea], 0xea
mov byte [rbp + 0xeb], 0xed
mov byte [rbp + 0xec], 0x85
movzx eax, byte [rbp + 0xe0]
mov r10, rdi
movabs rbx, 0x644a6b56a898af83
mov r11, rbx
lea rax, [rbp + 0xe0]
sub r11, rax
nop dword [rax]
nop dword [rax + rax]
lea r8, [rbp + 0xe0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xe0], al
inc r10
cmp r10, 0xd
jb 0x1400766f0
lea rcx, [rbp + 0xe0]
call fcn.14004dbd0
mov rdx, qword [0x140ac8670]
add rdx, 9
mov byte [rbp - 0x30], 0x53
mov byte [rbp - 0x2f], 0x64
mov byte [rbp - 0x2e], 0x63
mov byte [rbp - 0x2d], WSAStartup
mov byte [rbp - 0x2c], Ordinal_35
mov byte [rbp - 0x2b], 0x5b
mov byte [rbp - 0x2a], 0x4a
mov byte [rbp - 0x29], Ordinal_79
mov byte [rbp - 0x28], reloc.WS2_32.dll_recv
movzx eax, byte [rbp - 0x30]
mov r10, rdi
mov r11, r12
lea rax, [rbp - 0x30]
sub r11, rax
nop dword [rax]
lea r8, [rbp - 0x30]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 - 0x30], al
inc r10
cmp r10, 9
jb 0x140076780
lea rcx, [rbp - 0x30]
call fcn.14004dbd0
mov dword [rbp + 0x31c], 0x42f00000
mov dword [rbp + 0x320], 0x41a00000
mov byte [rbp - 0x70], 0xa5
mov byte [rbp - 0x6f], 0x61
mov byte [rbp - 0x6e], 0x6b
mov byte [rbp - 0x6d], 0x67
mov byte [rbp - 0x6c], 0x61
mov byte [rbp - 0x6b], 0x61
mov byte [rbp - 0x6a], 7
movzx eax, byte [rbp - 0x70]
mov r9, rdi
movabs rbx, 0x78dc08d14213a6ff
mov r10, rbx
lea rax, [rbp - 0x70]
sub r10, rax
nop
lea rdx, [rbp - 0x70]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x70], al
inc r9
cmp r9, 7
jb 0x140076810
xor r8d, r8d
lea rdx, [rbp + 0x31c]
lea rcx, [rbp - 0x70]
call fcn.14004c550
test al, al
jne 0x1400785fa
call fcn.1400215e0
call fcn.14002abf0
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a6c0
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x5e4]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm14
movss xmm0, dword [rbp + 0x5e0]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x2e4], xmm0
movss dword [rbp + 0x2e8], xmm2
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2e4]
lea rcx, str.CONFIG
call fcn.140021500
mov dword [rbp + 0x30c], 0x42a00000
mov dword [rbp + 0x310], 0x42a00000
xor r8d, r8d
lea rdx, [rbp + 0x30c]
lea rcx, str.Save_Config
call fcn.14004c550
test al, al
je 0x1400769a3
mov byte [rbp - 0x40], 0x43
mov byte [rbp - 0x3f], gethostname
mov byte [rbp - 0x3e], 0x50
mov byte [rbp - 0x3d], 0x66
mov byte [rbp - 0x3c], 0x64
mov byte [rbp - 0x3b], 0x7a
mov byte [rbp - 0x3a], 0x7c
mov byte [rbp - 0x39], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x38], reloc.WS2_32.dll_recv
movzx eax, byte [rbp - 0x40]
mov r9, rdi
mov r10, r12
lea rax, [rbp - 0x40]
sub r10, rax
nop dword [rax + rax]
lea rdx, [rbp - 0x40]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x40], al
inc r9
cmp r9, 9
jb 0x140076960
lea rcx, [rbp - 0x40]
call fcn.14006a360
mov dword [rbp + 0x304], 0x42a00000
mov dword [rbp + 0x308], 0x42a00000
xor r8d, r8d
lea rdx, [rbp + 0x304]
lea rcx, str.Load_Config
call fcn.14004c550
test al, al
je 0x14007842c
mov byte [rbp + 0x50], 0x43
mov byte [rbp + 0x51], gethostname
mov byte [rbp + 0x52], 0x50
mov byte [rbp + 0x53], 0x66
mov byte [rbp + 0x54], 0x64
mov byte [rbp + 0x55], 0x7a
mov byte [rbp + 0x56], 0x7c
mov byte [rbp + 0x57], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x58], reloc.WS2_32.dll_recv
movzx eax, byte [rbp + 0x50]
mov r9, rdi
mov r10, r12
lea rax, [rbp + 0x50]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp + 0x50]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x50], al
inc r9
cmp r9, 9
jb 0x140076a10
lea rcx, [rbp + 0x50]
call fcn.14006aac0
jmp 0x14007842c
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x5e4]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm13
movss xmm0, dword [rbp + 0x5e0]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x2fc], xmm0
movss dword [rbp + 0x300], xmm2
mov byte [rbp - 0x58], 0xb6
mov byte [rbp - 0x57], 0xa9
mov byte [rbp - 0x56], 0xb2
mov byte [rbp - 0x55], 0xa7
mov byte [rbp - 0x54], 0xb7
mov byte [rbp - 0x53], 0xb0
mov byte [rbp - 0x52], 0xad
mov byte [rbp - 0x51], 0xf9
movzx eax, byte [rbp - 0x58]
mov r10, rdi
movabs r13, 0x12f68d2adde72eed
mov r11, r13
lea rax, [rbp - 0x58]
sub r11, rax
nop
lea r8, [rbp - 0x58]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, r13
shr rdx, cl
and dl, 0xf
lea eax, [r8 + r11]
xor dl, al
xor dl, r9b
mov byte [rbp + r10 - 0x58], dl
inc r10
cmp r10, 8
jb 0x140076af0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2fc]
lea rcx, [rbp - 0x58]
call fcn.140021500
mov rdx, qword [0x140ac8750]
add rdx, 0xc
mov byte [rbp + 0x160], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x161], recv
mov byte [rbp + 0x162], 7
mov byte [rbp + 0x163], 9
mov byte [rbp + 0x164], 0
mov byte [rbp + 0x165], 0
mov byte [rbp + 0x166], Ordinal_79
mov byte [rbp + 0x167], Ordinal_50
mov byte [rbp + 0x168], 4
mov byte [rbp + 0x169], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x16a], Ordinal_33
mov byte [rbp + 0x16b], 8
mov byte [rbp + 0x16c], 0xa
mov byte [rbp + 0x16d], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x16e], 0x64
movzx eax, byte [rbp + 0x160]
mov r10, rdi
movabs rbx, 0x79ed30ea191f975f
mov r11, rbx
lea rax, [rbp + 0x160]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x160]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x160], al
inc r10
cmp r10, 0xf
jb 0x140076be0
lea rcx, [rbp + 0x160]
call fcn.14004dbd0
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140ac8d88], eax
jle 0x140076e6c
lea rcx, [0x140ac8d88]
call fcn.1400bcac8
movabs rbx, 0xc2a190851c75a013
cmp dword [0x140ac8d88], 0xffffffff
jne 0x140076e76
mov byte [rsp + 0x68], 0x56
mov byte [rsp + 0x69], 0x60
mov byte [rsp + 0x6a], 0x79
mov byte [rsp + 0x6b], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x6c], reloc.WS2_32.dll_select
movzx eax, byte [rsp + 0x68]
mov r10, rdi
mov r11, rbx
lea rax, [rsp + 0x68]
sub r11, rax
nop dword [rax]
lea r8, [rsp + 0x68]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, rbx
shr rdx, cl
and dl, 0xf
lea eax, [r8 + r11]
xor dl, al
xor dl, r9b
mov byte [rsp + r10 + 0x68], dl
inc r10
cmp r10, 5
jb 0x140076ca0
lea rax, [rsp + 0x68]
mov qword [0x140ac8ac8], rax
mov byte [rbp + 0x60], 0x43
mov byte [rbp + 0x61], 0x63
mov byte [rbp + 0x62], 0x7e
mov byte [rbp + 0x63], 0x6b
mov byte [rbp + 0x64], 0x67
mov byte [rbp + 0x65], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x66], 0x7f
mov byte [rbp + 0x67], 0x79
mov byte [rbp + 0x68], reloc.WS2_32.dll_recv
movzx eax, byte [rbp + 0x60]
mov r9, rdi
mov r10, r12
lea rax, [rbp + 0x60]
sub r10, rax
nop
lea rdx, [rbp + 0x60]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x60], al
inc r9
cmp r9, 9
jb 0x140076d20
lea rax, [rbp + 0x60]
mov qword [0x140ac8ad0], rax
mov byte [rbp + 0x1c0], 0x44
mov byte [rbp + 0x1c1], 0x77
mov byte [rbp + 0x1c2], 0x60
mov byte [rbp + 0x1c3], 0x42
mov byte [rbp + 0x1c4], 0x40
mov byte [rbp + 0x1c5], 9
mov byte [rbp + 0x1c6], 0x60
mov byte [rbp + 0x1c7], Ordinal_79
mov byte [rbp + 0x1c8], Ordinal_79
mov byte [rbp + 0x1c9], Ordinal_79
mov byte [rbp + 0x1ca], 0x41
mov byte [rbp + 0x1cb], 0x55
mov byte [rbp + 0x1cc], 0x43
mov byte [rbp + 0x1cd], Ordinal_79
mov byte [rbp + 0x1ce], Ordinal_79
mov byte [rbp + 0x1cf], 0x43
mov byte [rbp + 0x1d0], Ordinal_79
mov byte [rbp + 0x1d1], Ordinal_50
movzx eax, byte [rbp + 0x1c0]
mov r9, rdi
movabs r11, 0xe9f3e8d337647d1d
mov r10, r11
lea rax, [rbp + 0x1c0]
sub r10, rax
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbp + 0x1c0]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1c0], al
inc r9
cmp r9, 0x12
jb 0x140076e10
lea rax, [rbp + 0x1c0]
mov qword [0x140ac8ad8], rax
lea rcx, [0x140ac8d88]
call fcn.1400bca5c
jmp 0x140076e76
movabs rbx, 0xc2a190851c75a013
mov rdx, qword [0x140ac8750]
add rdx, 0x10
mov byte [rbp + 0xf0], Ordinal_200
mov byte [rbp + 0xf1], 0xe2
mov byte [rbp + 0xf2], 0xeb
mov byte [rbp + 0xf3], 0xee
mov byte [rbp + 0xf4], 0xe3
mov byte [rbp + 0xf5], 0xe4
mov byte [rbp + 0xf6], 0xa1
mov byte [rbp + 0xf7], Ordinal_200
mov byte [rbp + 0xf8], 0xe2
mov byte [rbp + 0xf9], 0xf1
mov byte [rbp + 0xfa], 0xe3
mov byte [rbp + 0xfb], 0xfb
mov byte [rbp + 0xfc], 0x85
movzx eax, byte [rbp + 0xf0]
mov r10, rdi
movabs r13, 0x644a6b56a898af83
mov r11, r13
lea rax, [rbp + 0xf0]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0xf0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xf0], al
inc r10
cmp r10, 0xd
jb 0x140076f00
lea rcx, [rbp + 0xf0]
call fcn.14004dbd0
mov rax, qword [0x140ac8750]
cmp byte [rax + 0x10], 0
je 0x140077009
lea rdx, [rax + 8]
mov byte [rbp + 0x70], 0x42
mov byte [rbp + 0x71], 0x63
mov byte [rbp + 0x72], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x73], 0x25
mov byte [rbp + 0x74], 0x56
mov byte [rbp + 0x75], 0x64
mov byte [rbp + 0x76], 0x6a
mov byte [rbp + 0x77], 0x78
mov byte [rbp + 0x78], reloc.WS2_32.dll_recv
movzx eax, byte [rbp + 0x70]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x70]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x70]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x70], al
inc r10
cmp r10, 9
jb 0x140076fa0
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 3
lea r9, [0x140ac8ac8]
lea r8, [fcn.140050090]
lea rcx, [rbp + 0x70]
call fcn.1400500b0
mov rax, qword [0x140ac8750]
lea rdx, [rax + 0xf]
mov byte [rbp], 0x53
mov byte [rbp + 1], 0x67
mov byte [rbp + 2], 0x69
mov byte [rbp + 3], 0x69
mov byte [rbp + 4], 0x67
mov byte [rbp + 5], 0x69
mov byte [rbp + 6], 0x75
mov byte [rbp + 7], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 8], reloc.WS2_32.dll_recv
movzx eax, byte [rbp]
mov r10, rdi
mov r11, r12
lea rax, [rbp]
sub r11, rax
lea r8, [rbp]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10], al
inc r10
cmp r10, 9
jb 0x140077042
lea rcx, [rbp]
call fcn.14004dbd0
mov rdx, qword [0x140ac8750]
add rdx, 0x11
mov byte [rsp + 0x70], 0x5c
mov byte [rsp + 0x71], 0x7c
mov byte [rsp + 0x72], 0x7b
mov byte [rsp + 0x73], 0x79
mov byte [rsp + 0x74], reloc.WS2_32.dll_select
movzx eax, byte [rsp + 0x70]
mov r11, rdi
lea rax, [rsp + 0x70]
sub rbx, rax
movabs r13, 0xc2a190851c75a013
nop dword [rax]
nop dword [rax + rax]
lea r9, [rsp + 0x70]
add r9, r11
movsx r10, byte [r9]
mov rcx, r11
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov r8, r13
shr r8, cl
and r8b, 0xf
lea eax, [r9 + rbx]
xor r8b, al
xor r8b, r10b
mov byte [rsp + r11 + 0x70], r8b
inc r11
cmp r11, 5
jb 0x1400770d0
movabs r13, 0xd00b7cc3f2ee5525
lea rcx, [rsp + 0x70]
call fcn.14004dbd0
mov rdx, qword [0x140ac8750]
add rdx, 0x14
mov byte [rbp - 0x50], 0x44
mov byte [rbp - 0x4f], 0x65
mov byte [rbp - 0x4e], 0x7f
mov byte [rbp - 0x4d], WSAStartup
mov byte [rbp - 0x4c], 0x63
mov byte [rbp - 0x4b], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x4a], 0x79
mov byte [rbp - 0x49], 0x78
mov byte [rbp - 0x48], reloc.WS2_32.dll_recv
movzx eax, byte [rbp - 0x50]
mov r10, rdi
mov r11, r12
lea rax, [rbp - 0x50]
sub r11, rax
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp - 0x50]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 - 0x50], al
inc r10
cmp r10, 9
jb 0x140077170
lea rcx, [rbp - 0x50]
call fcn.14004dbd0
mov rdx, qword [0x140ac8750]
add rdx, 0x12
mov byte [rbp + 0xb0], 0xb4
mov byte [rbp + 0xb1], Ordinal_143
mov byte [rbp + 0xb2], __WSAFDIsSet
mov byte [rbp + 0xb3], Ordinal_143
mov byte [rbp + 0xb4], Ordinal_211
mov byte [rbp + 0xb5], 0xa5
mov byte [rbp + 0xb6], 0x9a
mov byte [rbp + 0xb7], 0x9f
mov byte [rbp + 0xb8], 0x85
mov byte [rbp + 0xb9], 0x9e
mov byte [rbp + 0xba], 0x98
mov byte [rbp + 0xbb], 9
movzx eax, byte [rbp + 0xb0]
mov r10, rdi
movabs rbx, 0x25e399f8248840f5
mov r11, rbx
lea rax, [rbp + 0xb0]
sub r11, rax
nop dword [rax]
nop dword [rax + rax]
lea r8, [rbp + 0xb0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xb0], al
inc r10
cmp r10, 0xc
jb 0x140077240
lea rcx, [rbp + 0xb0]
call fcn.14004dbd0
mov rdx, qword [0x140ac8750]
add rdx, 0x16
mov byte [rbp + 0x110], 0x64
mov byte [rbp + 0x111], 0x56
mov byte [rbp + 0x112], 0x43
mov byte [rbp + 0x113], 0x5a
mov byte [rbp + 0x114], 7
mov byte [rbp + 0x115], WSAStartup
mov byte [rbp + 0x116], 0x5a
mov byte [rbp + 0x117], 0x46
mov byte [rbp + 0x118], 0x5c
mov byte [rbp + 0x119], Ordinal_79
mov byte [rbp + 0x11a], 0x42
mov byte [rbp + 0x11b], 0x5a
mov byte [rbp + 0x11c], 0x5f
mov byte [rbp + 0x11d], reloc.WLDAP32.dll_Ordinal_50
movzx eax, byte [rbp + 0x110]
mov r10, rdi
mov r11, r13
lea rax, [rbp + 0x110]
sub r11, rax
lea r8, [rbp + 0x110]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x110], al
inc r10
cmp r10, 0xe
jb 0x140077311
lea rcx, [rbp + 0x110]
call fcn.14004dbd0
mov rdx, qword [0x140ac8750]
add rdx, 0x15
mov byte [rbp + 0x140], 0x64
mov byte [rbp + 0x141], 0x56
mov byte [rbp + 0x142], 0x43
mov byte [rbp + 0x143], 0x5a
mov byte [rbp + 0x144], 7
mov byte [rbp + 0x145], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x146], 0x45
mov byte [rbp + 0x147], 0x42
mov byte [rbp + 0x148], 0x5a
mov byte [rbp + 0x149], 0x44
mov byte [rbp + 0x14a], Ordinal_79
mov byte [rbp + 0x14b], 0x45
mov byte [rbp + 0x14c], 0x57
mov byte [rbp + 0x14d], reloc.WLDAP32.dll_Ordinal_50
movzx eax, byte [rbp + 0x140]
mov r10, rdi
mov r11, r13
lea rax, [rbp + 0x140]
sub r11, rax
lea r8, [rbp + 0x140]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x140], al
inc r10
cmp r10, 0xe
jb 0x1400773e2
lea rcx, [rbp + 0x140]
call fcn.14004dbd0
call fcn.1400215e0
call fcn.14002abf0
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a6c0
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x5e4]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm14
movss xmm0, dword [rbp + 0x5e0]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x314], xmm0
movss dword [rbp + 0x318], xmm2
mov byte [rbp + 0x130], 0x63
mov byte [rbp + 0x131], WSAStartup
mov byte [rbp + 0x132], WSAStartup
mov byte [rbp + 0x133], 0x79
mov byte [rbp + 0x134], 0x68
mov byte [rbp + 0x135], WSAGetLastError
mov byte [rbp + 0x136], 0x60
mov byte [rbp + 0x137], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x138], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x139], 0x76
mov byte [rbp + 0x13a], WSASetLastError
mov byte [rbp + 0x13b], 0x78
mov byte [rbp + 0x13c], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x13d], reloc.WLDAP32.dll_Ordinal_50
movzx eax, byte [rbp + 0x130]
mov r10, rdi
mov r11, r13
lea rax, [rbp + 0x130]
sub r11, rax
nop dword [rax + rax]
lea r8, [rbp + 0x130]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, r13
shr rdx, cl
and dl, 0xf
lea eax, [r8 + r11]
xor dl, al
xor dl, r9b
mov byte [rbp + r10 + 0x130], dl
inc r10
cmp r10, 0xe
jb 0x140077520
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x314]
lea rcx, [rbp + 0x130]
call fcn.140021500
mov r11, qword [0x140ac8750]
mov byte [rbp + 0x170], 0x42
mov byte [rbp + 0x171], 0x61
mov byte [rbp + 0x172], 0x75
mov byte [rbp + 0x173], gethostname
mov byte [rbp + 0x174], Ordinal_79
mov byte [rbp + 0x175], WSAStartup
mov byte [rbp + 0x176], 0x79
mov byte [rbp + 0x177], 0x7a
mov byte [rbp + 0x178], 0x76
mov byte [rbp + 0x179], 0x7d
mov byte [rbp + 0x17a], 0x76
mov byte [rbp + 0x17b], 0x68
mov byte [rbp + 0x17c], 0x61
mov byte [rbp + 0x17d], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x17e], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x17f], Ordinal_26
movzx eax, byte [rbp + 0x170]
mov r9, rdi
movabs rsi, 0x529b3458d3b9320d
mov r10, rsi
lea rax, [rbp + 0x170]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x170]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x170], al
inc r9
cmp r9, 0x10
jb 0x140077620
mov dword [rbp + 0x608], 0x40a00000
mov dword [rbp + 0x620], 0x3f800000
mov dword [rsp + 0x30], edi
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x608]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x620]
mov r8, r11
mov edx, 8
lea rcx, [rbp + 0x170]
call fcn.140051610
mov r11, qword [0x140ac8750]
mov byte [rbp + 0x208], Ordinal_200
mov byte [rbp + 0x209], 0xf6
mov byte [rbp + 0x20a], 0xfb
mov byte [rbp + 0x20b], 0xf1
mov byte [rbp + 0x20c], 0xf9
mov byte [rbp + 0x20d], 0xec
mov byte [rbp + 0x20e], 0xfc
mov byte [rbp + 0x20f], 0xf3
mov byte [rbp + 0x210], 0xb9
mov byte [rbp + 0x211], Ordinal_211
mov byte [rbp + 0x212], 0xf9
mov byte [rbp + 0x213], 0xf3
mov byte [rbp + 0x214], 0xf1
mov byte [rbp + 0x215], 0xcb
mov byte [rbp + 0x216], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x217], Ordinal_200
mov byte [rbp + 0x218], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x219], 0xde
mov byte [rbp + 0x21a], __WSAFDIsSet
mov byte [rbp + 0x21b], Ordinal_143
mov byte [rbp + 0x21c], 0xac
movzx eax, byte [rbp + 0x208]
mov r9, rdi
movabs rbx, 0x370d4c627a0bbb93
mov r10, rbx
lea rax, [rbp + 0x208]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp + 0x208]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x208], al
inc r9
cmp r9, 0x15
jb 0x140077770
mov dword [rbp + 0x600], 0x40a00000
mov dword [rbp + 0x5f8], 0x3f800000
mov dword [rsp + 0x30], edi
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x600]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x5f8]
lea r8, [r11 + 4]
mov edx, 8
lea rcx, [rbp + 0x208]
call fcn.140051610
mov r8d, dword [0x140ac8538]
mov rdx, qword [0x140ac86c0]
mov byte [rbp + 0x120], 0x76
mov byte [rbp + 0x121], Ordinal_79
mov byte [rbp + 0x122], 0x51
mov byte [rbp + 0x123], 0x44
mov byte [rbp + 0x124], 0x45
mov byte [rbp + 0x125], 0x48
mov byte [rbp + 0x126], Ordinal_79
mov byte [rbp + 0x127], 3
mov byte [rbp + 0x128], WSASetLastError
mov byte [rbp + 0x129], Ordinal_79
mov byte [rbp + 0x12a], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x12b], 0x58
mov byte [rbp + 0x12c], 0x48
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_301], reloc.WLDAP32.dll_Ordinal_50
movzx eax, byte [rbp + 0x120]
mov r11, rdi
mov rbx, r13
lea rax, [rbp + 0x120]
sub rbx, rax
nop dword [rax]
nop word [rax + rax]
lea r9, [rbp + 0x120]
add r9, r11
movsx r10, byte [r9]
mov rcx, r11
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r9b, bl
xor al, r9b
xor al, r10b
mov byte [rbp + r11 + 0x120], al
inc r11
cmp r11, 0xe
jb 0x140077890
lea rcx, [rbp + 0x120]
call fcn.140058dc0
mov r8d, dword [0x140ac8538]
mov rdx, qword [0x140ac86c0]
add rdx, 0x10
mov byte [rbp + 0x180], Ordinal_79
mov byte [rbp + 0x181], 0x60
mov byte [rbp + 0x182], 0x7b
mov byte [rbp + 0x183], 0x7a
mov byte [rbp + 0x184], WSASetLastError
mov byte [rbp + 0x185], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x186], WSAStartup
mov byte [rbp + 0x187], 0x75
mov byte [rbp + 0x188], 0x78
mov byte [rbp + 0x189], gethostname
mov byte [rbp + 0x18a], 0x50
mov byte [rbp + 0x18b], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x18c], 0x7e
mov byte [rbp + 0x18d], 0x7c
mov byte [rbp + 0x18e], WSASetLastError
mov byte [rbp + 0x18f], Ordinal_26
movzx eax, byte [rbp + 0x180]
mov r11, rdi
mov rbx, rsi
lea rax, [rbp + 0x180]
sub rbx, rax
nop word [rax + rax]
lea r9, [rbp + 0x180]
add r9, r11
movsx r10, byte [r9]
mov rcx, r11
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add r9b, bl
xor al, r9b
xor al, r10b
mov byte [rbp + r11 + 0x180], al
inc r11
cmp r11, 0x10
jb 0x140077980
lea rcx, [rbp + 0x180]
call fcn.140058dc0
jmp 0x14007842c
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x5e4]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm13
movss xmm0, dword [rbp + 0x5e0]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x2f4], xmm0
movss dword [rbp + 0x2f8], xmm2
mov byte [rbp - 0x68], 0xb1
mov byte [rbp - 0x67], 0x46
mov byte [rbp - 0x66], 0x4a
mov byte [rbp - 0x65], 0x4a
mov byte [rbp - 0x64], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp - 0x63], 0x51
mov byte [rbp - 0x62], 7
movzx eax, byte [rbp - 0x68]
mov r9, rdi
mov r10, rbx
lea rax, [rbp - 0x68]
sub r10, rax
nop dword [rax + rax]
lea rdx, [rbp - 0x68]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x68], al
inc r9
cmp r9, 7
jb 0x140077a60
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2f4]
lea rcx, [rbp - 0x68]
call fcn.140021500
mov rdx, qword [0x140ac8688]
mov byte [rbp + 0x150], 0x65
mov byte [rbp + 0x151], Ordinal_79
mov byte [rbp + 0x152], 0x43
mov byte [rbp + 0x153], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x154], Ordinal_79
mov byte [rbp + 0x155], 0x41
mov byte [rbp + 0x156], 9
mov byte [rbp + 0x157], 0x62
mov byte [rbp + 0x158], 0x47
mov byte [rbp + 0x159], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x15a], 0x41
mov byte [rbp + 0x15b], 0x58
mov byte [rbp + 0x15c], Ordinal_79
mov byte [rbp + 0x15d], reloc.WLDAP32.dll_Ordinal_50
movzx eax, byte [rbp + 0x150]
mov r10, rdi
mov r11, r13
lea rax, [rbp + 0x150]
sub r11, rax
lea r8, [rbp + 0x150]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x150], al
inc r10
cmp r10, 0xe
jb 0x140077b30
lea rcx, [rbp + 0x150]
call fcn.14004dbd0
mov rdx, qword [0x140ac8688]
add rdx, 0x18
mov byte [rbp + 0x1d8], 0x55
mov byte [rbp + 0x1d9], WSAStartup
mov byte [rbp + 0x1da], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x1db], 0x45
mov byte [rbp + 0x1dc], Ordinal_79
mov byte [rbp + 0x1dd], 0x41
mov byte [rbp + 0x1de], 4
mov byte [rbp + 0x1df], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x1e0], 0x54
mov byte [rbp + 0x1e1], 0x42
mov byte [rbp + 0x1e2], 0x48
mov byte [rbp + 0x1e3], 0x41
mov byte [rbp + 0x1e4], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x1e5], 0x57
mov byte [rbp + 0x1e6], 0x40
mov byte [rbp + 0x1e7], Ordinal_79
mov byte [rbp + 0x1e8], 0x54
mov byte [rbp + 0x1e9], Ordinal_50
movzx eax, byte [rbp + 0x1d8]
mov r10, rdi
movabs rbx, 0xe9f3e8d337647d1d
mov r11, rbx
lea rax, [rbp + 0x1d8]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x1d8]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x1d8], al
inc r10
cmp r10, 0x12
jb 0x140077c30
lea rcx, [rbp + 0x1d8]
call fcn.14004dbd0
mov rdx, qword [0x140ac8688]
add rdx, 0xc
mov byte [rbp + 0x20], 0x53
mov byte [rbp + 0x21], 0x64
mov byte [rbp + 0x22], 0x63
mov byte [rbp + 0x23], WSAStartup
mov byte [rbp + 0x24], Ordinal_35
mov byte [rbp + 0x25], 0x5b
mov byte [rbp + 0x26], 0x75
mov byte [rbp + 0x27], 0x6b
mov byte [rbp + 0x28], reloc.WS2_32.dll_recv
movzx eax, byte [rbp + 0x20]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x20]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0x20]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x20], al
inc r10
cmp r10, 9
jb 0x140077cc0
lea rcx, [rbp + 0x20]
call fcn.14004dbd0
call fcn.1400215e0
call fcn.14002abf0
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a6c0
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x5e4]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm14
movss xmm0, dword [rbp + 0x5e0]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x2ec], xmm0
movss dword [rbp + 0x2f0], xmm2
mov byte [rbp - 0x10], 0x53
mov byte [rbp - 0xf], 0x49
mov byte [rbp - 0xe], 0x58
mov byte [rbp - 0xd], 0x51
mov byte [rbp - 0xc], 0x4b
mov byte [rbp - 0xb], 0x53
mov byte [rbp - 0xa], 0x5d
mov byte [rbp - 9], Ordinal_79
mov byte [rbp - 8], reloc.WS2_32.dll_recv
movzx eax, byte [rbp - 0x10]
mov r9, rdi
mov r10, r12
lea rax, [rbp - 0x10]
sub r10, rax
nop dword [rax]
lea rdx, [rbp - 0x10]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x10], al
inc r9
cmp r9, 9
jb 0x140077db0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2ec]
lea rcx, [rbp - 0x10]
call fcn.140021500
mov rdx, qword [0x140ac8688]
add rdx, 0xc
mov byte [rbp + 0x10], 0x53
mov byte [rbp + 0x11], 0x64
mov byte [rbp + 0x12], 0x63
mov byte [rbp + 0x13], WSAStartup
mov byte [rbp + 0x14], Ordinal_35
mov byte [rbp + 0x15], 0x5b
mov byte [rbp + 0x16], 0x75
mov byte [rbp + 0x17], 0x6b
mov byte [rbp + 0x18], reloc.WS2_32.dll_recv
movzx eax, byte [rbp + 0x10]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x10]
sub r11, rax
lea r8, [rbp + 0x10]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x10], al
inc r10
cmp r10, 9
jb 0x140077e40
lea rcx, [rbp + 0x10]
call fcn.14004dbd0
movss xmm0, dword [0x1400dc1ec]
call fcn.14002a7d0
mov rbx, qword [0x140ac8688]
mov byte [rbp + 0xc0], 0xb6
mov byte [rbp + 0xc1], __WSAFDIsSet
mov byte [rbp + 0xc2], 0x81
mov byte [rbp + 0xc3], 0xdc
mov byte [rbp + 0xc4], 0xa2
mov byte [rbp + 0xc5], 0x9b
mov byte [rbp + 0xc6], 0x85
mov byte [rbp + 0xc7], 0x9b
mov byte [rbp + 0xc8], Ordinal_211
mov byte [rbp + 0xc9], Ordinal_211
mov byte [rbp + 0xca], Ordinal_217
mov byte [rbp + 0xcb], 9
movzx eax, byte [rbp + 0xc0]
mov r10, rdi
movabs rsi, 0x25e399f8248840f5
mov r11, rsi
lea rax, [rbp + 0xc0]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0xc0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, rsi
shr rdx, cl
and dl, 0xf
lea eax, [r8 + r11]
xor dl, al
xor dl, r9b
mov byte [rbp + r10 + 0xc0], dl
inc r10
cmp r10, 0xc
jb 0x140077f10
mov dword [rbp + 0x5f0], Ordinal_301
mov dword [rbp + 0x610], reloc.WLDAP32.dll_Ordinal_50
mov dword [rsp + 0x30], edi
lea rax, [0x1400cdc14]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x5f0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x610]
lea r8, [rbx + 0x10]
mov edx, 4
lea rcx, [rbp + 0xc0]
call fcn.140051610
call fcn.14002a880
mov r11, qword [0x140ac8688]
mov byte [rbp + 0x1f0], 0x43
mov byte [rbp + 0x1f1], WSAStartup
mov byte [rbp + 0x1f2], 0x7d
mov byte [rbp + 0x1f3], 0x48
mov byte [rbp + 0x1f4], 0x51
mov byte [rbp + 0x1f5], Ordinal_79
mov byte [rbp + 0x1f6], Ordinal_79
mov byte [rbp + 0x1f7], 0x42
mov byte [rbp + 0x1f8], 0x55
mov byte [rbp + 0x1f9], 0x58
mov byte [rbp + 0x1fa], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1fb], 0x75
mov byte [rbp + 0x1fc], 0x43
mov byte [rbp + 0x1fd], 0x5f
mov byte [rbp + 0x1fe], 0x47
mov byte [rbp + 0x1ff], Ordinal_26
mov byte [rbp + 0x200], 0
mov byte [rbp + 0x201], Ordinal_50
movzx eax, byte [rbp + 0x1f0]
mov r9, rdi
movabs rbx, 0xe9f3e8d337647d1d
mov r10, rbx
lea rax, [rbp + 0x1f0]
sub r10, rax
nop dword [rax]
lea rdx, [rbp + 0x1f0]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1f0], al
inc r9
cmp r9, 0x12
jb 0x140078050
mov dword [rbp + 0x628], 0x42c80000
mov dword [rbp + 0x618], 0x3f800000
mov dword [rsp + 0x30], edi
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x628]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x618]
lea r8, [r11 + 0x14]
mov edx, 8
lea rcx, [rbp + 0x1f0]
call fcn.140051610
mov byte [rbp + 0x30], 0x41
mov byte [rbp + 0x31], 0x65
mov byte [rbp + 0x32], 0x61
mov byte [rbp + 0x33], 0x25
mov byte [rbp + 0x34], 0x49
mov byte [rbp + 0x35], 0x78
mov byte [rbp + 0x36], 0x63
mov byte [rbp + 0x37], Ordinal_41
mov byte [rbp + 0x38], reloc.WS2_32.dll_recv
movzx eax, byte [rbp + 0x30]
mov r9, rdi
mov r10, r12
lea rax, [rbp + 0x30]
sub r10, rax
lea rdx, [rbp + 0x30]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x30], al
inc r9
cmp r9, 9
jb 0x140078111
lea rcx, [rbp + 0x30]
call fcn.14004af60
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a6c0
mov r8d, dword [0x140ac8568]
lea rdx, [0x140069ed0]
mov ecx, dword [reloc.WS2_32.dll_bind]
call fcn.140069f20
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140ac8d84], eax
jle 0x14007834b
lea rcx, [0x140ac8d84]
call fcn.1400bcac8
cmp dword [0x140ac8d84], 0xffffffff
jne 0x14007834b
mov byte [rsp + 0x60], 0x58
mov byte [rsp + 0x61], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x62], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x63], 0x78
mov byte [rsp + 0x64], reloc.WS2_32.dll_select
movzx eax, byte [rsp + 0x60]
mov r9, rdi
movabs rsi, 0xc2a190851c75a013
mov r10, rsi
lea rax, [rsp + 0x60]
sub r10, rax
nop dword [rax]
lea rdx, [rsp + 0x60]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x60], al
inc r9
cmp r9, 5
jb 0x1400781f0
lea rax, [rsp + 0x60]
mov qword [0x140ac8ab0], rax
mov byte [rsp + 0x78], 0x5e
mov byte [rsp + 0x79], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x7a], 0x76
mov byte [rsp + 0x7b], 0x77
mov byte [rsp + 0x7c], reloc.WS2_32.dll_select
movzx eax, byte [rsp + 0x78]
mov r9, rdi
mov r10, rsi
lea rax, [rsp + 0x78]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0x78]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x78], al
inc r9
cmp r9, 5
jb 0x140078270
lea rax, [rsp + 0x78]
mov qword [0x140ac8ab8], rax
mov byte [rbp - 0x80], 0x43
mov byte [rbp - 0x7f], WSASetLastError
mov byte [rbp - 0x7e], WSASetLastError
mov byte [rbp - 0x7d], WSAStartup
mov byte [rbp - 0x7c], WSAStartup
mov byte [rbp - 0x7b], 4
movzx eax, byte [rbp - 0x80]
mov r9, rdi
movabs r11, 0x15c73bca4fecaf05
mov r10, r11
lea rax, [rbp - 0x80]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp - 0x80]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x80], al
inc r9
cmp r9, 6
jb 0x1400782f0
lea rax, [rbp - 0x80]
mov qword [0x140ac8ac0], rax
lea rcx, [0x140ac8d84]
call fcn.1400bca5c
movabs rsi, 0x25e399f8248840f5
mov rdx, qword [0x140ac8688]
add rdx, 8
mov byte [rbp + 0xd0], 0xa4
mov byte [rbp + 0xd1], 0x98
mov byte [rbp + 0xd2], 0x85
mov byte [rbp + 0xd3], 0x9b
mov byte [rbp + 0xd4], __WSAFDIsSet
mov byte [rbp + 0xd5], 0x86
mov byte [rbp + 0xd6], 0xdf
mov byte [rbp + 0xd7], 0xbc
mov byte [rbp + 0xd8], 0x9a
mov byte [rbp + 0xd9], 0x9f
mov byte [rbp + 0xda], __WSAFDIsSet
mov byte [rbp + 0xdb], 9
movzx eax, byte [rbp + 0xd0]
mov r10, rdi
mov r11, rsi
lea rax, [rbp + 0xd0]
sub r11, rax
lea r8, [rbp + 0xd0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xd0], al
inc r10
cmp r10, 0xc
jb 0x1400783c1
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 3
lea r9, [0x140ac8ab0]
lea r8, [fcn.140050090]
lea rcx, [rbp + 0xd0]
call fcn.1400500b0
call fcn.1400215e0
call fcn.14002abf0
lea rsi, [rbp + 0x858]
mov ecx, 1
call fcn.14001a7b0
nop
mov rcx, qword [rbp + 0x670]
xor rcx, qword [rbp + 0x678]
mov qword [rbp + 0x670], rcx
mov rax, qword [rbp + 0x680]
mov qword [rax], rcx
jmp 0x140078479
cmp byte [0x140ac8459], 0
je 0x140078479
xor ecx, ecx
call fcn.1400733e0
mov rcx, qword [0x140ac86b8]
call fcn.14006b7d0
call fcn.140020720
call fcn.140020360
xorps xmm0, xmm0
movups xmmword [rbp + 0x768], xmm0
mov rcx, qword [0x140ac8510]
mov rax, qword [rcx]
mov r10, qword [rax + 0x108]
xor r9d, r9d
lea r8, [0x140ac8530]
lea edx, [r9 + 1]
call r10
mov rcx, qword [0x140ac8510]
mov rax, qword [rcx]
mov r9, qword [rax + 0x190]
lea r8, [rbp + 0x768]
mov rdx, qword [0x140ac8530]
call r9
mov dword [rbp + 0x578], 1
mov rax, qword [0x140ac8460]
mov rax, qword [rax + 0x48d0]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, rdi
cmp byte [rcx], dil
cmovne rax, rcx
mov rcx, rax
call fcn.140048010
mov rcx, qword [0x140ac8528]
mov rax, qword [rcx]
mov r9, qword [rax + 0x40]
xor r8d, r8d
xor edx, edx
call r9
nop
mov rcx, qword [rbp + 0x688]
xor rcx, qword [rbp + 0x690]
mov qword [rbp + 0x688], rcx
mov rax, qword [rbp + 0x698]
mov qword [rax], rcx
cmp dword [rbp + 0x730], 0x12
jne 0x140075950
call fcn.140049240
call fcn.140064f80
xor ecx, ecx
call fcn.14001c1b0
mov rcx, r14
call fcn.140073490
mov rcx, qword [0x140ac8540]
call qword [sym.imp.USER32.dll_DestroyWindow]
nop
mov rcx, qword [rbp + 0x6d0]
xor rcx, qword [rbp + 0x6d8]
mov rax, qword [rbp + 0x6e0]
mov qword [rax], rcx
xor eax, eax
mov rcx, qword [rbp + 0x780]
xor rcx, rsp
call fcn.1400bca00
lea r11, [rsp + 0x930]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov byte [rbp + 0x220], 0xf4
mov byte [rbp + 0x221], 0xe7
mov byte [rbp + 0x222], 0xfe
mov byte [rbp + 0x223], 0xf2
mov byte [rbp + 0x224], 0xf3
mov byte [rbp + 0x225], 0xf3
mov byte [rbp + 0x226], 0xfe
mov byte [rbp + 0x227], 0xf1
mov byte [rbp + 0x228], 0xbe
mov byte [rbp + 0x229], 0xb5
mov byte [rbp + 0x22a], Ordinal_217
mov byte [rbp + 0x22b], 0xbc
mov byte [rbp + 0x22c], 0xb4
mov byte [rbp + 0x22d], Ordinal_217
mov byte [rbp + 0x22e], 0xde
mov byte [rbp + 0x22f], 0xb7
mov byte [rbp + 0x230], 0xfd
mov byte [rbp + 0x231], 0xfb
mov byte [rbp + 0x232], 0xfe
mov byte [rbp + 0x233], 0x87
mov byte [rbp + 0x234], Ordinal_211
mov byte [rbp + 0x235], Ordinal_211
mov byte [rbp + 0x236], Ordinal_200
mov byte [rbp + 0x237], 0xad
movzx eax, byte [rbp + 0x220]
movabs r10, 0xb8b245cb9189928d
mov r9, r10
lea rax, [rbp + 0x220]
sub r9, rax
lea rdx, [rbp + 0x220]
add rdx, rdi
movzx r8d, byte [rdx]
mov rcx, rdi
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r10
shr rax, cl
and al, 0xf
add dl, r9b
xor al, dl
xor al, r8b
mov byte [rbp + rdi + 0x220], al
inc rdi
cmp rdi, 0x18
jb 0x1400786c0
lea rcx, [rbp + 0x220]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3