Function at 0x14010baa0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x110
mov rax, qword [0x140d81080]
xor rax, rsp
mov qword [rsp + 0x108], rax
mov byte [rsp + 0xf0], 2
mov byte [rsp + 0xf1], 0
mov byte [rsp + 0xf2], 0
mov byte [rsp + 0xf3], 0
mov byte [rsp + 0xf4], 0x80
mov byte [rsp + 0xf5], 0
mov byte [rsp + 0xf6], 0
mov byte [rsp + 0xf7], 0
mov byte [rsp + 0xf8], 0xff
mov byte [rsp + 0xf9], 0xff
mov byte [rsp + 0xfa], 0xff
mov byte [rsp + 0xfb], 0xff
mov byte [rsp + 0xfc], 0
mov byte [rsp + 0xfd], 0
mov byte [rsp + 0xfe], 0
mov byte [rsp + 0xff], 0
mov byte [rsp + 0x100], 1
lea rax, [rsp + 0xd8]
mov rdi, rax
xor eax, eax
mov ecx, Ordinal_27
rep stosb byte [rdi], al
lea rcx, [rsp + 0xd8]
call fcn.1401091b0
nop
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
cmp dword [0x141255ac8], 1
jne 0x14010bb98
mov qword [rsp + 0x58], 0x26000000
mov qword [rsp + 0x50], 0x30000000
jmp 0x14010bbeb
cmp dword [0x141255ac8], 2
jne 0x14010bbb6
mov qword [rsp + 0x58], 0x70000000
mov eax, 0x90000000
mov qword [rsp + 0x50], rax
jmp 0x14010bbeb
cmp dword [0x141255ac8], 3
jne 0x14010bbd3
mov qword [rsp + 0x58], 0x3d000000
mov qword [rsp + 0x50], 0x60000000
jmp 0x14010bbeb
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movzx eax, byte [0x141254d07]
test eax, eax
je 0x14010bc08
mov qword [rsp + 0x58], 0x3d000000
mov qword [rsp + 0x50], 0x60000000
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x58]
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, [rsp + 0xf0]
mov rcx, qword [rsp + 0x88]
call fcn.14010b630
nop
mov dword [rsp + 0x40], 0
jmp 0x14010bc6c
mov eax, dword [rsp + 0x40]
inc eax
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx]
mov rax, qword [rax + 8]
sub rax, rcx
sar rax, 2
mov qword [rsp + 0x90], rax
movsxd rax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x90]
cmp rax, rcx
jae 0x14010be68
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x98], rax
movsxd rax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x98]
mov rcx, qword [rcx]
lea rax, [rcx + rax*4]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov eax, dword [rax]
sub eax, 0x20
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0xa8], rax
mov edx, dword [rsp + 0x48]
mov rcx, qword [rsp + 0xa8]
call fcn.140109de0
add eax, 0x20
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0xb0], rax
mov edx, dword [rsp + 0x60]
mov rcx, qword [rsp + 0xb0]
call fcn.140109de0
add eax, 0x200
mov dword [rsp + 0x44], eax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0xb8], rax
mov eax, dword [rsp + 0x44]
add eax, 0x38
mov edx, eax
mov rcx, qword [rsp + 0xb8]
call fcn.14010c180
movss dword [rsp + 0x64], xmm0
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0xc0], rax
mov eax, dword [rsp + 0x44]
add eax, 0x28
mov edx, eax
mov rcx, qword [rsp + 0xc0]
call fcn.14010c180
movss dword [rsp + 0x68], xmm0
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0xc8], rax
mov eax, dword [rsp + 0x44]
add eax, 0x18
mov edx, eax
mov rcx, qword [rsp + 0xc8]
call fcn.14010c180
movss dword [rsp + 0x6c], xmm0
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0xd0], rax
mov eax, dword [rsp + 0x44]
add eax, 8
mov edx, eax
mov rcx, qword [rsp + 0xd0]
call fcn.14010c180
movss dword [rsp + 0x70], xmm0
movss xmm0, dword [rsp + 0x64]
comiss xmm0, dword [0x140d6214c]
jb 0x14010be63
movss xmm0, dword [rsp + 0x68]
ucomiss xmm0, dword [0x140d61fc8]
jp 0x14010be63
jne 0x14010be63
movss xmm0, dword [rsp + 0x6c]
ucomiss xmm0, dword [0x140d61fc8]
jp 0x14010be63
jne 0x14010be63
movss xmm0, dword [rsp + 0x70]
ucomiss xmm0, dword [0x140d61fc8]
jp 0x14010be63
jne 0x14010be63
lea rcx, [rsp + 0xd8]
call fcn.14010bf90
nop
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x74], eax
lea rcx, [rsp + 0xd8]
call fcn.14010c050
nop
mov eax, dword [rsp + 0x74]
jmp 0x14010bed0
jmp 0x14010bc62
lea rcx, [rsp + 0xd8]
call fcn.14010bf90
nop
movzx eax, byte [0x141254d07]
test eax, eax
jne 0x14010beb6
cmp dword [0x141255ac8], 1
jne 0x14010beb6
mov byte [0x141254d07], 1
mov rcx, qword [rsp + 0x120]
call fcn.14010baa0
mov dword [rsp + 0x78], eax
lea rcx, [rsp + 0xd8]
call fcn.14010c050
nop
mov eax, dword [rsp + 0x78]
jmp 0x14010bed0
mov dword [rsp + 0x7c], 0
lea rcx, [rsp + 0xd8]
call fcn.14010c050
nop
mov eax, dword [rsp + 0x7c]
mov rcx, qword [rsp + 0x108]
xor rcx, rsp
call fcn.14017e360
add rsp, 0x110
pop rdi
ret