Function at 0x140066340
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor
Generate random numbers using a mersenne twister
Hide graphical window
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17e0]
mov eax, 0x18e0
call fcn.1400c5e10
sub rsp, rax
movaps xmmword [rsp + 0x18d0], xmm6
movaps xmmword [rsp + 0x18c0], xmm7
movaps xmmword [rsp + 0x18b0], xmm8
movaps xmmword [rsp + 0x18a0], xmm9
movaps xmmword [rsp + 0x1890], xmm10
movaps xmmword [rsp + 0x1880], xmm11
movaps xmmword [rsp + 0x1870], xmm12
movaps xmmword [rsp + 0x1860], xmm13
movaps xmmword [rsp + 0x1850], xmm14
movaps xmmword [rsp + 0x1840], xmm15
mov rax, qword [0x1401acdc0]
xor rax, rsp
mov qword [rbp + 0x1730], rax
xor r15d, r15d
mov r14d, r15d
mov dword [rbp + 0x108], r15d
call fcn.1400c5b34
mov dword [rbp + 0x1694], 0xffffffff
mov dword [rbp + 0x314], eax
mov edx, 1
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x314], eax
inc rdx
cmp rdx, 0x270
jb 0x14005ad30
mov dword [rbp + 0x310], 0x270
lea rcx, [rbp + 0x310]
call fcn.140055060
mov ecx, eax
imul rdx, rcx, 0x55d4a80
cmp edx, 0x3df527f
ja 0x14005ad9d
nop dword [rax]
lea rcx, [rbp + 0x310]
call fcn.140055060
mov ecx, eax
imul rdx, rcx, 0x55d4a80
cmp edx, 0x3df5280
jb 0x14005ad80
shr rdx, 0x20
add edx, 0x80989680
btc edx, 0x1f
lea rcx, [rbp + 0x2f0]
call fcn.140065c60
nop
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov word [rbp - 0x5f], reloc.WS2_32.dll_WSAStartup
movdqa xmm0, xmmword [0x1400f6bc0]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x60], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x5d], 0
xor edx, edx
lea rcx, [rbp - 0x70]
call qword [sym.imp.USER32.dll_FindWindowA]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [0x1401e37b0]
call fcn.140071230
mov dword [rbp + 0x1c0], 0x50
mov dword [rbp + 0x1c4], 0x40
lea rax, [0x14005c990]
mov qword [rbp + 0x1c8], rax
mov qword [rbp + 0x1d0], r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x1d8], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1f0], xmm1
lea rax, str.Loaders
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x208], r15
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov qword [rsp + 0x58], r15
mov rax, qword [rbp + 0x1d8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
mov r9d, 0x80000000
lea r8, str.Hihihii
mov rdx, qword [rbp + 0x200]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rbx, rax
mov qword [0x1401e32d0], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call sub.d3d9.dll_Direct3DCreate9
mov rcx, rax
mov qword [0x1401e3320], rax
test rax, rax
je 0x14005c894
mov qword [0x1401e32e0], r15
mov qword [0x1401e32ec], r15
mov dword [0x1401e32f4], r15d
mov qword [0x1401e32fc], r15
mov dword [0x1401e3304], r15d
mov qword [0x1401e3314], r15
mov dword [0x1401e3308], 1
mov dword [0x1401e32f8], 1
mov dword [0x1401e32e8], r15d
mov dword [0x1401e330c], 1
mov dword [0x1401e3310], 0x50
mov dword [0x1401e331c], 1
mov rax, qword [rax]
lea rdx, [0x1401e32d8]
mov qword [rsp + 0x30], rdx
lea rdi, [0x1401e32e0]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x40
mov r9, rbx
xor edx, edx
mov r8d, 1
call qword [rax + 0x80]
test eax, eax
js 0x14005c88d
xor edx, edx
mov rcx, qword [0x1401e32d0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401e32d0]
call qword [sym.imp.USER32.dll_UpdateWindow]
xor ecx, ecx
call fcn.1400115d0
call fcn.14001c790
mov rsi, rax
mov qword [rax + 0x18], r15
or dword [rax], 0x400
lea rcx, [rbp + 0x16a0]
call fcn.14002e1d0
mov rcx, qword [0x1401e32d0]
call fcn.14003fb20
mov rcx, qword [0x1401e32d8]
call fcn.14003e5c0
mov word [rbp - 0x60], 0
movdqa xmm11, xmmword [0x1400f6c00]
movdqu xmmword [rbp - 0x70], xmm11
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2a0], xmm1
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14005b011
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x290]
call fcn.14004eee0
nop
lea rdx, [rbp + 0x290]
cmp qword [rbp + 0x2a8], 0xf
cmova rdx, qword [rbp + 0x290]
mov r9d, 0x40
mov r8d, 1
lea rcx, [0x1401e34d0]
call fcn.140064ac0
lea rbx, [0x1401e34c0]
xor r8d, r8d
test rax, rax
mov rax, qword [0x1401e34c0]
movsxd rcx, dword [rax + 4]
je 0x14005b082
add rcx, rbx
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x14005b090
add rcx, rbx
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea r12, [0x1401e31d8]
mov r8, r12
mov edx, reloc.WLDAP32.dll_Ordinal_50
mov rcx, rbx
call fcn.14004fed0
lea rcx, [0x1401e34d0]
call fcn.140062900
test rax, rax
jne 0x14005b0d4
mov rax, qword [0x1401e34c0]
movsxd rcx, dword [rax + 4]
add rcx, rbx
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
movdqa xmm0, xmmword [0x1400f6bb0]
movdqu xmmword [rbp - 0x70], xmm0
mov dword [rbp - 0x60], 0x7a74774f
mov dword [rbp - 0x5c], 0x736b7a7e
mov dword [rbp - 0x58], 0x6a693279
mov word [rbp - 0x54], 0x79
mov byte [rbp - 0x52], 1
lea rcx, [rbp - 0x70]
call fcn.140062040
mov qword [rsp + 0x20], r15
xor r9d, r9d
movss xmm2, dword [0x1400cd124]
mov rdx, rax
mov rcx, qword [rsi + 0xa0]
call fcn.14002f000
mov qword [0x1401e3190], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
movups xmmword [rbp + 0x2d0], xmm0
movups xmmword [rbp + 0x2e0], xmm0
movdqa xmm10, xmmword [0x1400f6af0]
cmp byte [0x1401e3384], 0
jne 0x14005b383
mov dword [rbp - 0x80], 0x6f616f6e
mov dword [rbp - 0x7c], 0x304a2875
mov dword [rbp - 0x78], 0x67625a57
mov dword [rbp - 0x74], 0x1004c6b
lea rcx, [rbp - 0x80]
call fcn.1400628a0
mov rdx, rax
lea rcx, [rbp + 0x250]
call fcn.1400529e0
mov rcx, rax
call fcn.140065a00
movdqu xmmword [rbp - 0x70], xmm10
mov dword [rbp - 0x60], 0x7f3b535a
mov dword [rbp - 0x5c], 0x1007179
lea rcx, [rbp - 0x70]
call fcn.140062d80
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x240], xmm1
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14005b1d6
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x230]
call fcn.14004eee0
nop
lea rdx, [rbp + 0x290]
cmp qword [rbp + 0x2a8], 0xf
cmova rdx, qword [rbp + 0x290]
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x260], xmm1
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x14005b224
lea rcx, [rbp + 0x250]
call fcn.14004eee0
lea rcx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova rcx, qword [rbp + 0x250]
lea rdx, [0x1400f5db8]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x14005b270
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x14005b272
xor bl, bl
lea rcx, [rbp + 0x250]
call fcn.140053990
test bl, bl
je 0x14005b370
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x310]
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x310]
call fcn.1400527f0
nop
lea rdx, [rbp + 0x290]
cmp qword [rbp + 0x2a8], 0xf
cmova rdx, qword [rbp + 0x290]
mov r9d, 0x40
mov r8d, 2
lea rcx, [rbp + 0x318]
call fcn.140064ac0
xor r8d, r8d
test rax, rax
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x310]
je 0x14005b302
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x14005b310
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rdx, r12
lea rcx, [rbp + 0x310]
call fcn.14004e700
lea rcx, [rbp + 0x318]
call fcn.140062900
test rax, rax
jne 0x14005b353
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x310]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [0x1401e3658], 1
mov byte [0x1401e3385], 1
lea rcx, [rbp + 0x310]
call fcn.1400552e0
mov byte [0x1401e3384], 1
lea rcx, [rbp + 0x230]
call fcn.140053990
cmp dword [rbp + 0x2c8], 0x12
je 0x14005c790
lea rbx, [0x1401e3198]
lea r13, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
movdqa xmm8, xmmword [0x1400f6900]
movdqa xmm12, xmmword [0x1400f6d00]
movss xmm14, dword [0x1400ccfe0]
movss xmm15, dword [0x1400ccfdc]
xorps xmm6, xmm6
movss xmm9, dword [0x1400ccfc4]
movss xmm13, dword [0x1400f664c]
movss xmm7, dword [0x1400cd03c]
nop
cmp byte [0x1401e3c2c], 0
jne 0x14005c790
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005b42d
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14005c75b
lea rcx, [0x140059280]
call fcn.1400c61c8
call fcn.14003e790
call fcn.14003fee0
call fcn.140022880
cmp qword [0x1401e3198], 0
jne 0x14005b4b4
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0xe1
mov r9d, 0x104
mov r8d, 0x80c8
lea rdx, [0x14011a7d0]
mov rcx, qword [0x1401e32d8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx
movdqu xmmword [rbp + 0x210], xmm10
mov dword [rbp + 0x220], 0x7f3b535a
mov dword [rbp + 0x224], 0x1007179
lea rcx, [rbp + 0x210]
call fcn.140062d80
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x240], r15
mov qword [rbp + 0x248], r15
lea rax, [rbp + 0x210]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14005b503
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x230]
call fcn.14004eee0
nop
call fcn.14001c790
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x2b0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x2b8]
sub eax, dword [0x1401acc34]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
divss xmm1, xmm14
mov eax, dword [rbp + 0x2bc]
sub eax, dword [0x1401acc38]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm15
mov qword [rbp + 0x130], 0
movss dword [rbp + 0x138], xmm1
movss dword [rbp + 0x13c], xmm0
lea r8, [rbp + 0x130]
mov edx, 2
lea rcx, [rbp + 0x138]
call fcn.140028920
movss xmm0, dword [0x1401e3344]
movss dword [rbp + 0x140], xmm0
movss xmm1, dword [0x1401e3340]
movss dword [rbp + 0x144], xmm1
xor edx, edx
lea rcx, [rbp + 0x140]
call fcn.140028970
movaps xmm0, xmm9
call fcn.140028900
mov edx, 0xffffffff
xor ecx, ecx
call fcn.1400247f0
call fcn.140059ae0
movzx eax, byte [0x1401e338c]
test al, al
jne 0x14005c630
mov r8d, 0x168
lea rdx, [0x14011a7c6]
lea rcx, str.Winner_Bypass
call fcn.14000bd40
mov eax, dword [0x1401e3658]
test eax, eax
jne 0x14005baee
mov rcx, qword [0x1401e3190]
call fcn.140024380
mov dword [0x1401e3340], 0x42b00000
mov dword [0x1401e3344], 0x438c0000
movaps xmm0, xmm13
call fcn.1400288e0
mov dword [rbp - 0x2e], 0x79654b
mov word [rbp - 0x30], 0x2323
mov byte [rbp - 0x2a], 0
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, reloc.WLDAP32.dll_Ordinal_50
mov rdx, r12
lea rcx, [rbp - 0x30]
call fcn.140045280
call fcn.1400499c0
mov dword [rbp + 0x148], 0x43848000
mov dword [rbp + 0x14c], 0x41a00000
mov dword [rbp - 0x26], 0x6e6967
mov word [rbp - 0x28], 0x6f4c
mov byte [rbp - 0x22], 0
lea rdx, [rbp + 0x148]
lea rcx, [rbp - 0x28]
call fcn.140043a10
test al, al
je 0x14005b92c
mov word [rbp + 0x220], 0
movdqu xmmword [rbp + 0x210], xmm11
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r15
mov qword [rbp + 0x268], r15
lea rax, [rbp + 0x210]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14005b6f0
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x250]
call fcn.14004eee0
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x310]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x1400f5db0]
mov qword [rbp + 0x310], rax
lea rcx, [rbp + 0x3b8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r14d, 1
mov dword [rbp + 0x108], r14d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x318]
lea rcx, [rbp + 0x310]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x310], r13
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x30c], edx
lea rcx, [rbp + 0x318]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x318], rax
mov byte [rbp + 0x394], 0
mov byte [rbp + 0x389], 0
lea rcx, [rbp + 0x318]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x398], r15
mov rax, qword [0x1401e3c70]
mov qword [rbp + 0x38c], rax
mov qword [rbp + 0x380], r15
lea rdx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova rdx, qword [rbp + 0x250]
mov r9d, 0x40
mov r8d, 2
lea rcx, [rbp + 0x318]
call fcn.140064ac0
xor r8d, r8d
test rax, rax
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x310]
je 0x14005b837
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x14005b845
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rdx, r12
lea rcx, [rbp + 0x310]
call fcn.14004e700
lea rcx, [rbp + 0x318]
call fcn.140062900
test rax, rax
jne 0x14005b888
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x310]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [0x1401e3658], 1
mov byte [0x1401e3385], 1
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x310], r13
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x30c], edx
lea rcx, [rbp + 0x318]
call fcn.1400538e0
lea rcx, [rbp + 0x320]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x3b8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x268]
cmp rdx, 0xf
jbe 0x14005b92c
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b927
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c76a
call fcn.1400c5d5c
mov ecx, reloc.WS2_32.dll_listen
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14005bae3
movdqu xmmword [rbp + 0x210], xmm12
mov word [rbp + 0x220], 0x100
lea rcx, [rbp + 0x210]
call fcn.140061da0
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
mov qword [rbp + 0x280], r15
mov qword [rbp + 0x288], r15
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14005b980
mov rdx, rax
lea rcx, [rbp + 0x270]
call fcn.14004eee0
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x310]
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x310]
call fcn.1400527f0
nop
lea rdx, [rbp + 0x270]
cmp qword [rbp + 0x288], 0xf
cmova rdx, qword [rbp + 0x270]
mov r9d, 0x40
mov r8d, 2
lea rcx, [rbp + 0x318]
call fcn.140064ac0
xor r8d, r8d
test rax, rax
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x310]
je 0x14005ba16
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x14005ba24
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rdx, r12
lea rcx, [rbp + 0x310]
call fcn.14004e700
lea rcx, [rbp + 0x318]
call fcn.140062900
test rax, rax
jne 0x14005ba67
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x310]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [0x1401e3658], 1
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x310], r13
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x30c], edx
lea rcx, [rbp + 0x318]
call fcn.1400538e0
lea rcx, [rbp + 0x320]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x3b8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov r8, qword [rbp + 0x288]
cmp r8, 0xf
jbe 0x14005bae3
mov rdx, qword [rbp + 0x270]
lea rcx, [rbp + 0x270]
call fcn.14005ec70
call fcn.140023f50
mov eax, dword [0x1401e3658]
cmp eax, 1
jne 0x14005c611
mov dword [0x1401e3340], 0x43c80000
mov dword [0x1401e3344], 0x43d98000
mov dword [rbp + 0x150], 0x434d0000
mov dword [rbp + 0x154], 0x41f00000
mov word [rbp + 5], reloc.WS2_32.dll_WSAStartup
mov dword [rbp], 0x61707942
mov byte [rbp + 4], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 7], 0
lea rdx, [rbp + 0x150]
lea rcx, [rbp]
call fcn.140043a10
test al, al
je 0x14005bb4f
mov dword [0x1401e3c6c], r15d
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140027d00
mov dword [rbp + 0x158], 0x434d0000
mov dword [rbp + 0x15c], 0x41f00000
mov dword [rbp - 0x1e], 0x736c6f
mov word [rbp - 0x20], 0x6f54
mov byte [rbp - 0x1a], 0
lea rdx, [rbp + 0x158]
lea rcx, [rbp - 0x20]
call fcn.140043a10
test al, al
je 0x14005bb9d
mov dword [0x1401e3c6c], 1
call fcn.1400499c0
call fcn.140049350
cmp dword [0x1401e3c6c], 0
jne 0x14005c391
mov dword [rbp + 0x160], 0x41a00000
mov dword [rbp + 0x164], 0x42aa0000
lea rcx, [rbp + 0x160]
call fcn.1400284a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
movdqa xmm0, xmmword [0x1400cd140]
movups xmmword [rbp + 0x210], xmm0
mov dword [rbp + 0x168], 0x3f800000
mov dword [rbp + 0x16c], 0x3f800000
mov qword [rbp + 0x170], 0
mov dword [rbp + 0x178], 0x430c0000
mov dword [rbp + 0x17c], 0x430c0000
lea rax, [rbp + 0x270]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x210]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x168]
lea r8, [rbp + 0x170]
lea rdx, [rbp + 0x178]
mov rcx, qword [0x1401e3198]
call fcn.140045050
movss xmm0, dword [0x1400f6648]
call fcn.1400288e0
mov dword [rbp + 0x180], 0x432f0000
mov dword [rbp + 0x184], 0x42a60000
lea rcx, [rbp + 0x180]
call fcn.1400284a0
movdqa xmm0, xmmword [0x1400f69b0]
movdqu xmmword [rbp + 0x210], xmm0
mov dword [rbp + 0x220], 0x77627d72
mov dword [rbp + 0x224], 0x75521879
mov dword [rbp + 0x228], 0x7c7969
mov byte [rbp + 0x22c], 1
lea rcx, [rbp + 0x210]
call fcn.140061fc0
mov rbx, rax
mov dword [rbp - 0x80], 0x63562720
mov dword [rbp - 0x7c], 0x7e6a6d6b
mov dword [rbp - 0x78], 0x636c4b2b
mov word [rbp - 0x74], WSAGetLastError
mov byte [rbp - 0x72], 1
lea rcx, [rbp - 0x80]
call fcn.140062850
mov r9d, 0xffffffff
mov r8, rbx
lea rdx, [0x1401e365c]
mov rcx, rax
call fcn.140044c80
mov dword [rbp + 0x188], 0x432f0000
mov dword [rbp + 0x18c], 0x42e20000
lea rcx, [rbp + 0x188]
call fcn.1400284a0
mov dword [rbp + 0x190], 0x43750000
mov dword [rbp + 0x194], 0x41e00000
mov dword [rbp + 0xe8], 0x74647050
mov dword [rbp + 0xec], 0x734b2873
mov dword [rbp + 0xf0], 0x7d7e6d7b
mov word [rbp + 0xf4], 0x100
lea rcx, [rbp + 0xe8]
call fcn.140062810
mov rcx, rax
lea rdx, [rbp + 0x190]
call fcn.140043a10
test al, al
je 0x14005bdab
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x1400577e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.140049350
mov ecx, 1
call fcn.140024060
call fcn.1400499c0
call fcn.1400499c0
mov word [rbp + 0x7f], reloc.WLDAP32.dll_Ordinal_32
mov dword [rbp + 0x78], 0x74617453
mov word [rbp + 0x7c], 0x7375
mov byte [rbp + 0x7e], Ordinal_60
mov byte [rbp + 0x81], 0
lea rcx, [rbp + 0x78]
call fcn.1400437e0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140027d00
lea rdx, [0x1401e3638]
cmp qword [0x1401e3650], 0xf
cmova rdx, qword [0x1401e3638]
movups xmmword [rbp + 0x210], xmm8
lea rcx, [rbp + 0x210]
call fcn.14004c490
mov dword [rbp + 0x198], 0x432f0000
mov dword [rbp + 0x19c], 0x43160000
lea rcx, [rbp + 0x198]
call fcn.1400284a0
mov dword [rbp + 0xd8], 0x63766151
mov dword [rbp + 0xdc], 0x7f4e2873
mov dword [rbp + 0xe0], 0x797f6e
mov byte [rbp + 0xe4], 1
lea rcx, [rbp + 0xd8]
call fcn.1400627d0
mov rcx, rax
lea rdx, [0x1401e338b]
call fcn.140044270
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140027d00
mov word [rbp + 0xd1], reloc.WS2_32.dll_WSACleanup
mov dword [rbp + 0xc8], 0x4c204449
mov dword [rbp + 0xcc], 0x4f20676f
mov byte [rbp + 0xd0], 0x75
mov byte [rbp + 0xd3], 0
lea rdx, [0x1401e338a]
lea rcx, [rbp + 0xc8]
call fcn.140044270
mov dword [rbp + 0x118], 0x432f0000
mov dword [rbp + 0x11c], 0x43340000
lea rcx, [rbp + 0x118]
call fcn.1400284a0
mov word [rbp + 0xd], 0x50
mov dword [rbp + 8], 0x20435253
mov byte [rbp + 0xc], 0x55
mov byte [rbp + 0xf], 0
lea rdx, [0x1401e3386]
lea rcx, [rbp + 8]
call fcn.140044270
test al, al
je 0x14005c040
movzx eax, byte [0x1401e3386]
test al, al
je 0x14005bff2
lea r9, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova r9, qword [rbp + 0x230]
mov r8d, eax
mov dword [rbp - 0x16], 0x505543
mov word [rbp - 0x18], 0x5253
mov byte [rbp - 0x12], 0
mov word [rbp + 0x15], 0x54
mov dword [rbp + 0x10], 0x454c4953
mov byte [rbp + 0x14], Ordinal_79
mov byte [rbp + 0x17], 0
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x10]
call fcn.14005ca50
movzx eax, byte [0x1401e3386]
test al, al
jne 0x14005c040
lea r9, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova r9, qword [rbp + 0x230]
movzx r8d, al
mov dword [rbp - 0xe], 0x505543
mov word [rbp - 0x10], 0x5253
mov byte [rbp - 0xa], 0
mov word [rbp + 0x1d], 0x54
mov dword [rbp + 0x18], 0x454c4953
mov byte [rbp + 0x1c], Ordinal_79
mov byte [rbp + 0x1f], 0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x18]
call fcn.14005ca50
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140027d00
mov dword [rbp + 0xae], 0x776569
mov dword [rbp + 0xa8], 0x64617049
mov word [rbp + 0xac], 0x5620
mov byte [rbp + 0xb2], 0
lea rdx, [0x1401e3387]
lea rcx, [rbp + 0xa8]
call fcn.140044270
test al, al
je 0x14005c141
movzx eax, byte [0x1401e3387]
test al, al
je 0x14005c0f0
lea r9, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova r9, qword [rbp + 0x230]
mov r8d, eax
mov word [rbp - 0x3d], 0x44
mov word [rbp - 0x40], 0x5049
mov byte [rbp - 0x3e], 0x41
mov byte [rbp - 0x3b], 0
mov word [rbp + 0x25], 0x54
mov dword [rbp + 0x20], 0x454c4953
mov byte [rbp + 0x24], Ordinal_79
mov byte [rbp + 0x27], 0
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x20]
call fcn.14005ca50
movzx eax, byte [0x1401e3387]
test al, al
jne 0x14005c141
lea r9, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova r9, qword [rbp + 0x230]
movzx r8d, al
mov word [rbp - 0x35], 0x44
mov word [rbp - 0x38], 0x5049
mov byte [rbp - 0x36], 0x41
mov byte [rbp - 0x33], 0
mov word [rbp + 0x2d], 0x54
mov dword [rbp + 0x28], 0x454c4953
mov byte [rbp + 0x2c], Ordinal_79
mov byte [rbp + 0x2f], 0
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x28]
call fcn.14005ca50
mov dword [rbp + 0x120], 0x432f0000
mov dword [rbp + 0x124], 0x43520000
lea rcx, [rbp + 0x120]
call fcn.1400284a0
mov dword [rbp + 0xf8], 0x54256b4d
mov dword [rbp + 0xfc], 0x63666b62
mov dword [rbp + 0x100], 0x6f5e2c67
mov dword [rbp + 0x104], 0x1007569
lea rcx, [rbp + 0xf8]
call fcn.1400628a0
mov rcx, rax
lea rdx, [0x1401e3389]
call fcn.140044270
test al, al
je 0x14005c29c
movzx eax, byte [0x1401e3389]
test al, al
je 0x14005c22b
lea rdi, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova rdi, qword [rbp + 0x230]
mov ebx, eax
mov dword [rbp + 0x88], 0x43574b4d
mov dword [rbp + 0x8c], 0x46404744
mov word [rbp + 0x90], 0x100
lea rcx, [rbp + 0x88]
call fcn.140061d20
mov word [rbp - 3], 0x54
mov dword [rbp - 8], 0x454c4953
mov byte [rbp - 4], Ordinal_79
mov byte [rbp - 1], 0
mov r9, rdi
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.14005ca50
movzx eax, byte [0x1401e3389]
test al, al
jne 0x14005c295
lea rdi, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova rdi, qword [rbp + 0x230]
movzx ebx, al
mov dword [rbp + 0x98], 0x43574b4d
mov dword [rbp + 0x9c], 0x46404744
mov word [rbp + 0xa0], 0x100
lea rcx, [rbp + 0x98]
call fcn.140061d20
mov word [rbp + 0x4d], 0x54
mov dword [rbp + 0x48], 0x454c4953
mov byte [rbp + 0x4c], Ordinal_79
mov byte [rbp + 0x4f], 0
mov r9, rdi
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.14005ca50
lea rdi, [0x1401e32e0]
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140027d00
mov dword [rbp + 0x5c], 0x646165
mov dword [rbp + 0x58], 0x48206f4e
mov byte [rbp + 0x60], 0
lea rdx, [0x1401e3388]
lea rcx, [rbp + 0x58]
call fcn.140044270
test al, al
je 0x14005c38a
movzx eax, byte [0x1401e3388]
test al, al
je 0x14005c338
lea r9, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova r9, qword [rbp + 0x230]
mov r8d, eax
mov word [rbp + 0x55], 0x44
mov dword [rbp + 0x50], 0x45484f4e
mov byte [rbp + 0x54], 0x41
mov byte [rbp + 0x57], 0
mov word [rbp + 0x35], 0x54
mov dword [rbp + 0x30], 0x454c4953
mov byte [rbp + 0x34], Ordinal_79
mov byte [rbp + 0x37], 0
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x30]
call fcn.14005ca50
movzx eax, byte [0x1401e3388]
test al, al
jne 0x14005c38a
lea r9, [rbp + 0x230]
cmp qword [rbp + 0x248], 0xf
cmova r9, qword [rbp + 0x230]
movzx r8d, al
mov word [rbp + 0x3d], 0x44
mov dword [rbp + 0x38], 0x45484f4e
mov byte [rbp + 0x3c], 0x41
mov byte [rbp + 0x3f], 0
mov word [rbp + 0x45], 0x54
mov dword [rbp + 0x40], 0x454c4953
mov byte [rbp + 0x44], Ordinal_79
mov byte [rbp + 0x47], 0
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x40]
call fcn.14005ca50
lea rbx, [0x1401e3198]
cmp dword [0x1401e3c6c], 1
jne 0x14005c611
call fcn.1400499c0
mov dword [rbp + 0x128], 0x43810000
mov dword [rbp + 0x12c], 0x42dc0000
mov dword [rbp - 0x50], 0x312323
mov byte [rbp - 0x4c], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x128]
lea rcx, [rbp - 0x50]
call fcn.14000e960
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r15
mov qword [rbp + 0x268], r15
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x14005c400
mov rdx, r12
lea rcx, [rbp + 0x250]
call fcn.14004eee0
nop
mov r8b, reloc.WLDAP32.dll_Ordinal_45
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x1a0]
call fcn.140065090
nop
mov dword [rbp + 0xbe], 0x203a65
mov dword [rbp + 0xb8], 0x6563694c
mov word [rbp + 0xbc], 0x736e
mov byte [rbp + 0xc2], 0
lea r8, [rbp + 0xb8]
xor edx, edx
mov rcx, rax
call fcn.140064510
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x210], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x220], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or r14d, 2
lea rcx, [rbp + 0x1a0]
call fcn.140053990
nop
lea rcx, [rbp + 0x250]
call fcn.140053990
lea rcx, [rbp + 0x210]
cmp qword [rbp + 0x228], 0xf
cmova rcx, qword [rbp + 0x210]
call fcn.1400437e0
mov dword [rbp + 0x6c], 0x3a7972
mov dword [rbp + 0x68], 0x69707845
mov byte [rbp + 0x70], 0
lea rcx, [rbp + 0x68]
call fcn.1400437e0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140027d00
lea rdx, [rbp + 0x270]
lea rcx, [0x1401e3382]
call fcn.140054710
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14005c51f
mov rax, qword [rax]
movups xmmword [rbp - 0x70], xmm8
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.14004c490
nop
mov rdx, qword [rbp + 0x288]
cmp rdx, 0xf
jbe 0x14005c572
inc rdx
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c56d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c771
call fcn.1400c5d5c
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.1400499c0
call fcn.140019da0
mov dword [rbp + 0x110], 0x43810000
mov dword [rbp + 0x114], 0x43310000
mov dword [rbp - 0x48], 0x322323
mov byte [rbp - 0x44], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 0x48]
call fcn.14000e960
call fcn.140019da0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x14005c611
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c60c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c778
call fcn.1400c5d5c
mov rcx, qword [0x1401e3188]
call fcn.1400016d0
mov rcx, qword [0x1401e3188]
call fcn.140001730
movzx eax, byte [0x1401e338c]
cmp al, 1
jne 0x14005c639
call fcn.140058f10
call fcn.140019aa0
nop
mov rdx, qword [rbp + 0x248]
cmp rdx, 0xf
jbe 0x14005c680
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c67b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c77f
call fcn.1400c5d5c
call fcn.140019fb0
mov rcx, qword [0x1401e32d8]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r15d
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], r15d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1401e32d8]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14005c6e7
call fcn.1400249d0
call fcn.14001c350
mov rcx, rax
call fcn.14003e820
mov rcx, qword [0x1401e32d8]
mov rax, qword [rcx]
call qword [rax + pe_nt_image_headers64]
test dword [rsi], 0x400
je 0x14005c6fd
call fcn.14002a8d0
xor edx, edx
xor ecx, ecx
call fcn.140025620
mov rcx, qword [0x1401e32d8]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14005c752
mov rcx, qword [0x1401e32d8]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14005c752
call fcn.14003e660
mov rcx, qword [0x1401e32d8]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 0x80]
call fcn.14003e220
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14005c786
cmp dword [rbp + 0x2c8], 0x12
jne 0x14005b3e0
jmp 0x14005c790
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rbp + 0x2c8], reloc.WS2_32.dll_select
call fcn.14003f4a0
call fcn.1400404f0
xor ecx, ecx
call fcn.140011a90
mov rcx, qword [0x1401e32d8]
test rcx, rcx
je 0x14005c7ba
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401e32d8], r15
mov rcx, qword [0x1401e3320]
test rcx, rcx
je 0x14005c7d3
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401e3320], r15
mov rdx, qword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x200]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 0xf
jbe 0x14005c82c
inc rdx
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c827
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c827
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c5d5c
movdqa xmm0, xmmword [0x1400f6650]
movdqu xmmword [rbp + 0x2a0], xmm0
mov byte [rbp + 0x290], 0
mov rdx, qword [rbp + 0x308]
cmp rdx, 0xf
jbe 0x14005c927
inc rdx
mov rcx, qword [rbp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c883
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005c916
call fcn.1400c5d5c
jmp 0x14005c927
mov rcx, qword [0x1401e3320]
mov rdx, qword [0x1401e32d8]
test rdx, rdx
je 0x14005c8b7
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401e32d8], r15
mov rcx, qword [0x1401e3320]
test rcx, rcx
je 0x14005c8c9
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401e3320], r15
mov rdx, qword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x200]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rbp + 0x308]
cmp rdx, 0xf
jbe 0x14005c922
inc rdx
mov rcx, qword [rbp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c91d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c91d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c5d5c
mov eax, 1
mov rcx, qword [rbp + 0x1730]
xor rcx, rsp
call fcn.1400c5d00
lea r11, [rsp + 0x18e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
sub rsp, 0x38
xor eax, eax
lea r8, [0x140064730]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
add rsp, 0x38
jmp 0x14005ac70