Function at 0x1400a3340
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xd8]
sub rsp, 0x1b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x14021d5c0]
xor rax, rsp
mov qword [rbp + 0x68], rax
xor r13d, r13d
mov rax, qword [0x14023bb10]
cmp byte [rax], r13b
je 0x1400a3a0f
cmp byte [0x14023b578], r13b
je 0x1400a37fc
cmp qword [0x14023b5a0], r13
jne 0x1400a380a
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x140235469], r13b
mov byte [0x140232d65], 1
mov rdx, qword [0x14023b4b8]
add rdx, 0x341a878
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
mov rdi, rax
mov qword [rsp + 0x30], reloc.SHLWAPI.dll_IStream_Read
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
lea edx, [r13 + 2]
call fcn.1400ec9f0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rbx, [rax + 0x10]
mov qword [rsp + 0x70], rbx
lea r8d, [r13 + 0x10]
lea rdx, [rsp + 0x30]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x68], rbx
lea r8, [rsp + 0x60]
mov rdx, rdi
call fcn.1400e4940
mov rdi, rax
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], reloc.SHLWAPI.dll_IStream_Read
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
lea edx, [r13 + 2]
call fcn.1400ec9f0
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
lea rbx, [rax + 0x10]
mov qword [rbp + 0x28], rbx
lea r8d, [r13 + 0x10]
lea rdx, [rbp + 0x38]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x20], rbx
lea r8, [rbp + 0x18]
mov rdx, rdi
call fcn.1400e4940
mov rdx, rax
call fcn.1400e4c20
movzx ebx, al
lea rdx, [rdi + 0x18]
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
cmp bl, 1
jne 0x1400a37fc
test rax, rax
je 0x1400a37fc
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x60]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea r8d, [r13 + 0xe]
lea rdx, str.Check_MESSAGE_
lea rcx, [rsp + 0x60]
call fcn.1400582d0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea r8d, [r13 + 0x14]
lea rdx, str.WE_GOT_DISCONNECTED_
lea rcx, [rsp + 0x40]
call fcn.1400582d0
nop
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
lea edx, [r13 + 1]
call fcn.140066e30
mov rdx, qword [0x14023b4b8]
add rdx, 0x33c65d8
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
lea rdx, [rax + 0xb8]
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
lea rdx, [rax + 0x30]
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
mov rbx, rax
mov rdi, qword [0x140240dc0]
mov ecx, 0x1000
call fcn.1401a3d18
mov rsi, rax
mov qword [rbp + 0x38], rax
lea rdx, [rbx + 0x14]
mov r9d, 0x800
mov r8, rax
mov rcx, rdi
call fcn.140062780
mov rdx, rsi
lea rcx, [rbp + 0x18]
call fcn.1400ddf40
nop
mov rcx, rsi
call fcn.1401a3b4c
nop
lea rcx, [rbp + 0x18]
mov rax, qword [rbp + 0x28]
cmp qword [rbp + 0x30], 8
jb 0x1400a35d8
mov rdx, qword [rbp + 0x18]
lea r8, [rdx + rax*2]
jmp 0x1400a35e0
lea r8, [rcx + rax*2]
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x48]
call fcn.1400e4670
nop
lea r15, [rbp + 0x48]
mov r14, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x60]
mov rsi, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1400a360c
mov r15, r14
lea rbx, [rsi + r14]
mov rdi, r14
jmp 0x1400a3617
lea rbx, [rbp + 0x48]
add rbx, rsi
lea rdi, [rbp + 0x48]
cmp rdi, rbx
je 0x1400a3641
sub r15, rdi
nop
movzx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [r15 + rdi], al
inc rdi
cmp rdi, rbx
jne 0x1400a3620
mov rdx, qword [rbp + 0x60]
mov rsi, qword [rbp + 0x58]
mov r14, qword [rbp + 0x48]
mov rax, qword [0x140240bc8]
lea r9, [0x140240bb8]
cmp qword [0x140240bd0], 0x10
cmovae r9, qword [0x140240bb8]
lea rcx, [rbp + 0x48]
cmp rdx, 0x10
setae bl
cmovae rcx, r14
mov qword [rsp + 0x20], rax
mov rdx, rsi
call fcn.1400e47b0
cmp rax, 0xffffffffffffffff
jne 0x1400a3799
mov rax, qword [0x140240c28]
lea r9, [0x140240c18]
cmp qword [0x140240c30], 0x10
cmovae r9, qword [0x140240c18]
lea rcx, [rbp + 0x48]
test bl, bl
cmovne rcx, r14
mov qword [rsp + 0x20], rax
mov rdx, rsi
call fcn.1400e47b0
cmp rax, 0xffffffffffffffff
jne 0x1400a3799
mov rax, qword [0x140240c48]
lea r9, [0x140240c38]
cmp qword [0x140240c50], 0x10
cmovae r9, qword [0x140240c38]
lea rcx, [rbp + 0x48]
test bl, bl
cmovne rcx, r14
mov qword [rsp + 0x20], rax
mov rdx, rsi
call fcn.1400e47b0
cmp rax, 0xffffffffffffffff
jne 0x1400a3799
mov rax, qword [0x140240be8]
lea r9, [0x140240bd8]
cmp qword [0x140240bf0], 0x10
cmovae r9, qword [0x140240bd8]
lea rcx, [rbp + 0x48]
test bl, bl
cmovne rcx, r14
mov qword [rsp + 0x20], rax
mov rdx, rsi
call fcn.1400e47b0
cmp rax, 0xffffffffffffffff
jne 0x1400a3799
mov rax, qword [0x140240c08]
lea r9, [0x140240bf8]
cmp qword [0x140240c10], 0x10
cmovae r9, qword [0x140240bf8]
lea rcx, [rbp + 0x48]
test bl, bl
cmovne rcx, r14
mov qword [rsp + 0x20], rax
mov rdx, rsi
call fcn.1400e47b0
cmp rax, 0xffffffffffffffff
jne 0x1400a3799
call fcn.140078460
test al, al
jne 0x1400a37a3
mov dword [0x14023bb00], 0x3a
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400a37a3
mov rax, qword [0x14023bb10]
mov byte [rax], 0
mov ecx, 0x4e20
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rbp + 0x48]
call fcn.1400e0620
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 8
jb 0x1400a37fc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a37f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a37f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401a3b4c
cmp qword [0x14023b5a0], 0
je 0x1400a3a0f
cmp byte [0x14023b578], 0
jne 0x1400a3a0f
cmp byte [0x140232d65], 0
je 0x1400a3a0f
lea rax, [rsp + 0x40]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8d, ntohs
lea rdx, str.Reconnected_
lea rcx, [rsp + 0x40]
call fcn.1400582d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
mov r8d, Ordinal_41
lea rdx, str.Back_in_the_game_after_disconnecting_
lea rcx, [rbp + 0x18]
call fcn.1400582d0
nop
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x18]
mov edx, 1
call fcn.140066e30
mov byte [0x140232d65], 0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r9d, 8
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [0x140232d80]
call fcn.1400797e0
movss xmm2, dword [rsp + 0x34]
cvtps2pd xmm2, xmm2
movss xmm1, dword [rsp + 0x30]
cvtps2pd xmm1, xmm1
call fcn.140062ae0
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400789a0
call fcn.1400789a0
mov rdx, qword [0x140235180]
add rdx, 0xac
call fcn.1400e4c20
test al, al
jne 0x1400a3a01
xor edx, edx
lea r8d, [rdx + 0x70]
call fcn.1400628f0
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
lea r8d, [rdx + 0x6f]
call fcn.1400628f0
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x140235469], 1
mov dword [0x140232d68], r13d
mov rax, qword [0x14023bae0]
cmp byte [rax], 0
je 0x1400a3e05
cmp byte [0x14023b578], 0
je 0x1400a3bf2
cmp qword [0x14023b5a0], 0
jne 0x1400a3c00
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1402354bc], 0
mov byte [0x140232d65], 1
mov rdx, qword [0x14023b4b8]
add rdx, 0x341a878
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
mov rdi, rax
mov qword [rsp + 0x30], reloc.SHLWAPI.dll_IStream_Read
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov edx, 2
call fcn.1400ec9f0
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
lea rbx, [rax + 0x10]
mov qword [rbp + 0x28], rbx
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x30]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x20], rbx
lea r8, [rbp + 0x18]
mov rdx, rdi
call fcn.1400e4940
mov rdi, rax
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], reloc.SHLWAPI.dll_IStream_Read
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov edx, 2
call fcn.1400ec9f0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rbx, [rax + 0x10]
mov qword [rsp + 0x70], rbx
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rbp + 0x38]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x68], rbx
lea r8, [rsp + 0x60]
mov rdx, rdi
call fcn.1400e4940
mov rdx, rax
call fcn.1400e4c20
movzx ebx, al
lea rdx, [rdi + 0x18]
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
cmp bl, 1
jne 0x1400a3bf2
test rax, rax
je 0x1400a3bf2
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x40]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8d, select
lea rdx, str.Check_MESSAGE_
lea rcx, [rsp + 0x40]
call fcn.1400582d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.WE_GOT_DISCONNECTED_
lea rcx, [rbp + 0x18]
call fcn.1400582d0
nop
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x18]
mov edx, 3
call fcn.140066e30
call fcn.140078460
test al, al
jne 0x1400a3be7
mov dword [0x14023bad0], 0x3a
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x4e20
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x14023b5a0], 0
je 0x1400a3e05
cmp byte [0x14023b578], 0
jne 0x1400a3e05
cmp byte [0x140232d65], 0
je 0x1400a3e05
lea rax, [rsp + 0x40]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8d, ntohs
lea rdx, str.Reconnected_
lea rcx, [rsp + 0x40]
call fcn.1400582d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
mov r8d, Ordinal_41
lea rdx, str.Back_in_the_game_after_disconnecting_
lea rcx, [rbp + 0x18]
call fcn.1400582d0
nop
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x18]
mov edx, 3
call fcn.140066e30
mov byte [0x140232d65], 0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r9d, 8
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [0x140232d80]
call fcn.1400797e0
movss xmm2, dword [rsp + 0x34]
cvtps2pd xmm2, xmm2
movss xmm1, dword [rsp + 0x30]
cvtps2pd xmm1, xmm1
call fcn.140062ae0
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400789a0
call fcn.1400789a0
mov rdx, qword [0x140235180]
add rdx, 0xac
call fcn.1400e4c20
test al, al
jne 0x1400a3df7
xor edx, edx
lea r8d, [rdx + 0x70]
call fcn.1400628f0
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
lea r8d, [rdx + 0x6f]
call fcn.1400628f0
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1402354bc], 1
mov dword [0x140232d68], r13d
mov rax, qword [0x14023baf8]
cmp byte [rax], 0
je 0x1400a41fb
cmp byte [0x14023b578], 0
je 0x1400a3fe8
cmp qword [0x14023b5a0], 0
jne 0x1400a3ff6
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1402355b4], 0
mov byte [0x140232d65], 1
mov rdx, qword [0x14023b4b8]
add rdx, 0x341a878
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
mov rdi, rax
mov qword [rsp + 0x30], reloc.SHLWAPI.dll_IStream_Read
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov edx, 2
call fcn.1400ec9f0
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
lea rbx, [rax + 0x10]
mov qword [rbp + 0x28], rbx
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x30]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x20], rbx
lea r8, [rbp + 0x18]
mov rdx, rdi
call fcn.1400e4940
mov rdi, rax
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], reloc.SHLWAPI.dll_IStream_Read
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov edx, 2
call fcn.1400ec9f0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rbx, [rax + 0x10]
mov qword [rsp + 0x70], rbx
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rbp + 0x38]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x68], rbx
lea r8, [rsp + 0x60]
mov rdx, rdi
call fcn.1400e4940
mov rdx, rax
call fcn.1400e4c20
movzx ebx, al
lea rdx, [rdi + 0x18]
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
cmp bl, 1
jne 0x1400a3fe8
test rax, rax
je 0x1400a3fe8
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rsp + 0x40]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8d, select
lea rdx, str.Check_MESSAGE_
lea rcx, [rsp + 0x40]
call fcn.1400582d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.WE_GOT_DISCONNECTED_
lea rcx, [rbp + 0x18]
call fcn.1400582d0
nop
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x18]
mov edx, 2
call fcn.140066e30
call fcn.140078460
test al, al
jne 0x1400a3fdd
mov dword [0x14023bae8], 0x3a
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x4e20
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x14023b5a0], 0
je 0x1400a41fb
cmp byte [0x14023b578], 0
jne 0x1400a41fb
cmp byte [0x140232d65], 0
je 0x1400a41fb
lea rax, [rsp + 0x40]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8d, ntohs
lea rdx, str.Reconnected_
lea rcx, [rsp + 0x40]
call fcn.1400582d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
mov r8d, Ordinal_41
lea rdx, str.Back_in_the_game_after_disconnecting_
lea rcx, [rbp + 0x18]
call fcn.1400582d0
nop
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x18]
mov edx, 2
call fcn.140066e30
mov byte [0x140232d65], 0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r9d, 8
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [0x140232d80]
call fcn.1400797e0
movss xmm2, dword [rsp + 0x34]
cvtps2pd xmm2, xmm2
movss xmm1, dword [rsp + 0x30]
cvtps2pd xmm1, xmm1
call fcn.140062ae0
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400789a0
call fcn.1400789a0
mov rdx, qword [0x140235180]
add rdx, 0xac
call fcn.1400e4c20
test al, al
jne 0x1400a41ed
xor edx, edx
lea r8d, [rdx + 0x70]
call fcn.1400628f0
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
lea r8d, [rdx + 0x6f]
call fcn.1400628f0
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1402355b4], 1
mov dword [0x140232d68], r13d
mov rax, qword [0x14023bb40]
cmp byte [rax], 0
je 0x1400a4618
cmp byte [0x14023b578], 0
je 0x1400a43f0
cmp qword [0x14023b5a0], 0
jne 0x1400a43fe
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x14023bb71], 0
mov byte [0x140232d65], 1
mov dword [0x14023520c], r13d
mov byte [0x140235210], 0
mov byte [0x140235296], 0
mov rdx, qword [0x14023b4b8]
add rdx, 0x341a878
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
mov rdi, rax
mov qword [rsp + 0x30], reloc.SHLWAPI.dll_IStream_Read
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov edx, 2
call fcn.1400ec9f0
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
lea rbx, [rax + 0x10]
mov qword [rbp + 0x28], rbx
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x30]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x20], rbx
lea r8, [rbp + 0x18]
mov rdx, rdi
call fcn.1400e4940
mov rdi, rax
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], reloc.SHLWAPI.dll_IStream_Read
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov edx, 2
call fcn.1400ec9f0
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rbx, [rax + 0x10]
mov qword [rsp + 0x70], rbx
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rbp + 0x38]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x68], rbx
lea r8, [rsp + 0x60]
mov rdx, rdi
call fcn.1400e4940
mov rdx, rax
call fcn.1400e4c20
movzx ebx, al
lea rdx, [rdi + 0x18]
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
cmp bl, 1
jne 0x1400a43f0
test rax, rax
je 0x1400a43f0
lea rax, [rsp + 0x40]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8d, select
lea rdx, str.Check_MESSAGE_
lea rcx, [rsp + 0x40]
call fcn.1400582d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.WE_GOT_DISCONNECTED_
lea rcx, [rbp + 0x18]
call fcn.1400582d0
nop
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x18]
xor edx, edx
call fcn.140066e30
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140078460
test al, al
jne 0x1400a43e5
mov dword [0x14023bb38], 0x3a
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x4e20
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x14023b5a0], 0
je 0x1400a4622
cmp byte [0x14023b578], 0
jne 0x1400a4618
cmp byte [0x140232d65], 0
je 0x1400a4618
lea rax, [rsp + 0x40]
mov qword [rbp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov r8d, ntohs
lea rdx, str.Reconnected_
lea rcx, [rsp + 0x40]
call fcn.1400582d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], r13
mov r8d, Ordinal_41
lea rdx, str.Back_in_the_game_after_disconnecting_
lea rcx, [rbp + 0x18]
call fcn.1400582d0
nop
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x18]
xor edx, edx
call fcn.140066e30
mov byte [0x140232d65], 0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r9d, 8
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [0x140232d80]
call fcn.1400797e0
movss xmm2, dword [rsp + 0x34]
cvtps2pd xmm2, xmm2
movss xmm1, dword [rsp + 0x30]
cvtps2pd xmm1, xmm1
call fcn.140062ae0
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
call fcn.140062830
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 2
call fcn.140062830
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400789a0
call fcn.1400789a0
mov rdx, qword [0x140235180]
add rdx, 0xac
call fcn.1400e4c20
test al, al
jne 0x1400a45f2
xor edx, edx
lea r8d, [rdx + 0x70]
call fcn.1400628f0
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 1
lea r8d, [rdx + 0x6f]
call fcn.1400628f0
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x14023bb71], 1
mov byte [0x140235296], 0
mov dword [0x14023520c], r13d
mov dword [0x140235210], 0x100
mov dword [0x140232d68], r13d
cmp qword [0x14023b5a0], 0
jne 0x1400a462f
cmp byte [0x14023b4a8], 0
jne 0x1400a52f4
lea rcx, reloc.WS2_32.dll_accept
call fcn.1400a2ea0
call fcn.1400a04f0
lea rcx, reloc.WS2_32.dll_accept
call fcn.14009fd40
mov rax, qword [0x14023bb40]
cmp byte [rax], 0
jne 0x1400a52f4
lea rcx, reloc.WS2_32.dll_accept
call fcn.14009f580
mov rax, qword [0x14023ba78]
cmp byte [rax], 0
jne 0x1400a52f4
xorps xmm7, xmm7
mov rax, qword [0x14023bb10]
cmp byte [rax], 0
je 0x1400a4698
call fcn.140091110
mov byte [0x140232d03], 0
jmp 0x1400a47cc
cmp byte [0x140232d03], 0
jne 0x1400a47cc
mov byte [rbp - 0x80], 0
xor eax, eax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x70], r13
mov byte [rbp - 0x68], al
movss dword [rbp - 0x5c], xmm7
movss dword [rbp - 0x50], xmm7
mov qword [rbp - 0x48], r13
movss dword [rbp - 0x38], xmm7
movss dword [rbp - 0x2c], xmm7
mov qword [rbp - 0x28], rax
mov byte [rbp - 0x20], al
mov dword [rbp - 0x1c], r13d
mov word [rbp - 0x18], ax
mov byte [0x140235410], al
mov rax, qword [rbp - 0x78]
mov qword [0x140235418], rax
mov qword [0x140235420], r13
mov byte [0x140235428], 0
unpcklps xmm0, xmm7
movsd qword [rbp - 0x64], xmm0
movsd qword [0x14023542c], xmm0
movss dword [0x140235434], xmm7
xorps xmm0, xmm0
unpcklps xmm0, xmm7
movsd qword [rbp - 0x58], xmm0
movsd qword [0x140235438], xmm0
movss dword [0x140235440], xmm7
mov qword [0x140235448], r13
xorps xmm0, xmm0
unpcklps xmm0, xmm7
movsd qword [rbp - 0x40], xmm0
movsd qword [0x140235450], xmm0
movss dword [0x140235458], xmm7
xorps xmm0, xmm0
unpcklps xmm0, xmm7
movsd qword [rbp - 0x34], xmm0
movsd qword [0x14023545c], xmm0
movss dword [0x140235464], xmm7
mov qword [0x140235468], 0
mov byte [0x140235470], 0
mov dword [0x140235474], r13d
mov word [0x140235478], 0
lea rcx, [0x140235480]
call fcn.1400e00e0
xorps xmm0, xmm0
movdqa xmmword [0x140235480], xmm0
mov qword [0x140235490], r13
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov qword [rbp], r13
lea rcx, [rbp - 0x10]
call fcn.1400e00e0
mov byte [0x140232d03], 1
mov rax, qword [0x14023bb10]
cmp byte [rax], 0
jne 0x1400a52f4
lea rcx, reloc.WS2_32.dll_accept
call fcn.1400a0130
mov rax, qword [0x14023bae0]
cmp byte [rax], 0
jne 0x1400a52f4
mov rax, qword [0x14023baf8]
cmp byte [rax], 0
je 0x1400a48a1
cmp byte [0x140235590], 0
jne 0x1400a484b
cmp qword [0x14023b5a0], 0
je 0x1400a4895
mov byte [0x140235590], 1
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov qword [0x140235598], rax
movsd xmm0, qword [0x1402350b0]
movsd qword [0x1402355a8], xmm0
mov eax, dword [0x1402350b8]
mov dword [0x1402355b0], eax
call fcn.140097ba0
test al, al
je 0x1400a4895
call fcn.140097620
test al, al
je 0x1400a4895
call fcn.140097b00
cmp byte [0x1402355b4], 0
je 0x1400a487f
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140097e80
test al, al
je 0x1400a4895
cmp qword [0x14023b5a0], 0
je 0x1400a4895
lea rcx, [0x140233f98]
call fcn.140096290
mov byte [0x140232d05], 0
jmp 0x1400a4931
cmp byte [0x140232d05], 0
jne 0x1400a4931
mov byte [0x1402355b4], 0
mov byte [rbp - 0x80], 0
xor eax, eax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x64], rax
mov dword [rbp - 0x68], eax
mov byte [rbp - 0x5c], al
mov qword [rbp - 0x54], rax
mov dword [rbp - 0x58], eax
mov qword [rbp - 0x48], rax
mov dword [rbp - 0x4c], eax
mov qword [rbp - 0x3c], rax
mov dword [rbp - 0x40], eax
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x34], eax
mov byte [rbp - 0x28], al
mov dword [rbp - 0x24], r13d
mov word [rbp - 0x20], ax
movdqu xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r13
mov word [rbp], ax
movdqu xmmword [rbp + 4], xmm0
lea rdx, [rbp - 0x80]
lea rcx, [0x140235590]
call fcn.1400a5340
lea rcx, [rbp - 0x18]
call fcn.1400e00e0
mov dword [0x140233f98], r13d
mov byte [0x140232d05], 1
mov rax, qword [0x14023baf8]
cmp byte [rax], 0
jne 0x1400a52f4
lea rcx, reloc.WS2_32.dll_accept
call fcn.1400a0310
mov rax, qword [0x14023bac8]
cmp byte [rax], 0
jne 0x1400a52f4
cmp qword [0x14023b5a0], 0
je 0x1400a52f4
mov rax, qword [0x14023b998]
cmp byte [rax], 0
je 0x1400a4985
lea rcx, reloc.WS2_32.dll_accept
call fcn.1400a1b40
jmp 0x1400a49b0
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x1400a49b0
mov rdx, qword [0x140235178]
add rdx, 0x878
movss xmm2, dword [0x1401f5c34]
call fcn.1400e4ef0
mov byte [reloc.WS2_32.dll_accept], 1
mov rdx, qword [0x14023b4e8]
add rdx, 0xb8
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
mov rdi, rax
lea rdx, [rax + 0x30]
call fcn.1400e4e40
movss xmm6, dword [0x1401f5cd4]
comiss xmm6, xmm0
jbe 0x1400a49ef
movaps xmm2, xmm6
lea rdx, [rdi + 0x30]
call fcn.1400e4ef0
lea rdx, [rdi + 0x3c]
call fcn.1400e4e40
comiss xmm6, xmm0
jbe 0x1400a4a09
movaps xmm2, xmm6
lea rdx, [rdi + 0x3c]
call fcn.1400e4ef0
lea r12, [0x140235130]
lea r14, [0x14023c178]
mov rax, qword [0x14023b950]
cmp byte [rax], 0
je 0x1400a4b43
mov rdi, qword [0x14023c188]
test rdi, rdi
je 0x1400a4b4a
mov rdx, r12
cmp qword [0x140235148], 0x10
cmovae rdx, qword [0x140235130]
mov rcx, r14
cmp qword [0x14023c190], 0x10
cmovae rcx, qword [0x14023c178]
cmp rdi, qword [0x140235140]
jne 0x1400a4b4a
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400a4b4a
mov rbx, qword [0x140240cb8]
mov rsi, qword [0x140240cc0]
cmp rbx, rsi
je 0x1400a4b4a
mov rdx, r14
cmp qword [0x14023c190], 0x10
cmovae rdx, qword [0x14023c178]
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x1400a4ab5
mov rcx, qword [rbx]
cmp r8, rdi
jne 0x1400a4ac3
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400a4ac9
add rbx, 0x20
jmp 0x1400a4a88
lea rdx, [0x14023e450]
cmp qword [0x14023e468], 0x10
cmovae rdx, qword [0x14023e450]
mov rcx, r14
cmp qword [0x14023c190], 0x10
cmovae rcx, qword [0x14023c178]
cmp rdi, qword [0x14023e460]
jne 0x1400a4b4a
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400a4b4a
mov rcx, qword [0x140235198]
test rcx, rcx
je 0x1400a4b4a
call fcn.140067f80
test rax, rax
je 0x1400a4b43
lea rbx, [rax + 0x3a0]
mov rdx, rbx
call fcn.1400e4e40
ucomiss xmm0, dword [0x1401f5c7c]
jp 0x1400a4b43
jne 0x1400a4b43
movaps xmm2, xmm6
mov rdx, rbx
call fcn.1400e4ef0
mov rdi, qword [0x14023c188]
mov rax, qword [0x14023b9a0]
cmp byte [rax], 0
mov rax, qword [0x14023bc90]
je 0x1400a4b67
cmp byte [rax], 0
jne 0x1400a4b76
mov byte [rax], 1
jmp 0x1400a4b6f
cmp byte [rax], 0
je 0x1400a4b76
mov byte [rax], 0
mov rdi, qword [0x14023c188]
movss xmm6, dword [0x1401f5d30]
mov rax, qword [0x14023b958]
cmp byte [rax], 0
je 0x1400a4c46
test rdi, rdi
je 0x1400a4c46
mov rdx, r12
cmp qword [0x140235148], 0x10
cmovae rdx, qword [0x140235130]
mov rcx, r14
mov rbx, qword [0x14023c178]
mov rsi, qword [0x14023c190]
cmp rsi, 0x10
cmovae rcx, rbx
cmp rdi, qword [0x140235140]
jne 0x1400a4c46
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400a4c46
lea rdx, [0x14023e470]
cmp qword [0x14023e488], 0x10
cmovae rdx, qword [0x14023e470]
mov rcx, r14
cmp rsi, 0x10
cmovae rcx, rbx
cmp rdi, qword [0x14023e480]
jne 0x1400a4c46
mov r8, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400a4c46
mov rcx, qword [0x140235198]
call fcn.140067f80
test rax, rax
je 0x1400a4c46
lea rbx, [rax + 0x290]
mov rdx, rbx
call fcn.1400e4e40
ucomiss xmm0, xmm6
jp 0x1400a4c46
jne 0x1400a4c46
movss xmm2, dword [0x1401f5d50]
mov rdx, rbx
call fcn.1400e4ef0
movss xmm8, dword [0x1401f5c48]
mov rax, qword [0x14023b968]
cmp byte [rax], 0
jne 0x1400a4c6b
mov rax, qword [0x14023b970]
cmp byte [rax], 0
je 0x1400a4d9c
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx edi, ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ebx, ax
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0x88]
call fcn.1400e4e40
movaps xmm9, xmm0
test di, di
jne 0x1400a4cd1
test bx, bx
jne 0x1400a4cd1
ucomiss xmm9, xmm8
jp 0x1400a4cb5
je 0x1400a4cd1
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0x88]
movaps xmm2, xmm8
call fcn.1400e4ef0
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0x143]
call fcn.1400e4c20
test al, al
jne 0x1400a4d1a
ucomiss xmm9, xmm8
jp 0x1400a4cf9
je 0x1400a4d9c
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0x88]
movaps xmm2, xmm8
call fcn.1400e4ef0
jmp 0x1400a4d9c
test di, di
je 0x1400a4d4e
mov rax, qword [0x14023b970]
cmp byte [rax], 0
je 0x1400a4d33
movss xmm6, dword [0x1401f5e08]
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0x88]
movaps xmm2, xmm6
call fcn.1400e4ef0
test bx, bx
je 0x1400a4d89
mov rax, qword [0x14023b970]
cmp byte [rax], 0
je 0x1400a4d67
movss xmm6, dword [0x1401f5d8c]
mov rcx, qword [0x140235178]
call fcn.140068610
xorps xmm6, xmmword [0x1401f61b0]
lea rdx, [rax + 0x88]
movaps xmm2, xmm6
call fcn.1400e4ef0
mov qword [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_50
lea rcx, [rsp + 0x30]
call fcn.1400e5120
mov rax, qword [0x14023b948]
cmp byte [rax], 0
je 0x1400a4dad
call fcn.14009f340
mov rax, qword [0x14023bbc8]
cmp byte [rax], 0
je 0x1400a4dc0
call fcn.14009e3d0
jmp 0x1400a4dc5
call fcn.14009de00
mov rax, qword [0x14023b9b0]
cmp byte [rax], 0
je 0x1400a4e26
cmp qword [0x14023b5a0], 0
je 0x1400a4e70
cmp byte [0x140232d07], 0
jne 0x1400a4e70
mov byte [0x140232d07], 1
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0x70]
movss xmm2, dword [0x14023b9b8]
call fcn.1400e4ef0
mov rcx, qword [0x140235178]
call fcn.140068610
movss xmm2, dword [0x1401f5c98]
jmp 0x1400a4e67
cmp byte [0x140232d07], 0
je 0x1400a4e70
mov byte [0x140232d07], 0
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0x70]
movss xmm2, dword [0x1401f5cdc]
call fcn.1400e4ef0
mov rcx, qword [0x140235178]
call fcn.140068610
movss xmm2, dword [0x1401f5c90]
lea rdx, [rax + 0x74]
call fcn.1400e4ef0
movss xmm6, dword [0x1401f5ee8]
mov rax, qword [0x14023b980]
cmp byte [rax], 0
je 0x1400a4f45
cmp qword [0x14023b5a0], 0
je 0x1400a4f69
cmp byte [0x140232d18], 0
jne 0x1400a4f69
mov byte [0x140232d18], 1
cmp qword [0x14023b530], 0
jne 0x1400a4ed5
mov rdx, qword [0x14023b4b8]
add rdx, 0x33aa420
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
mov qword [0x14023b530], rax
mov qword [rsp + 0x30], reloc.SHLWAPI.dll_IStream_Read
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r13
mov edx, 1
call fcn.1400ec9f0
mov qword [rbp + 0x18], rax
lea rdx, [rax + 8]
mov qword [rbp + 0x28], rdx
mov rcx, qword [rsp + 0x30]
mov qword [rax], rcx
mov qword [rbp + 0x20], rdx
lea r8, [rbp + 0x18]
mov rdx, qword [0x14023b530]
call fcn.1400e4940
mov qword [0x140232d20], rax
test rax, rax
je 0x1400a4f69
movss xmm2, dword [0x1401f5d9c]
mov rdx, rax
call fcn.1400e4ef0
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400a4f69
cmp byte [0x140232d18], 0
je 0x1400a4f69
mov byte [0x140232d18], 0
mov rdx, qword [0x140232d20]
test rdx, rdx
je 0x1400a4f69
movaps xmm2, xmm6
call fcn.1400e4ef0
mov rax, qword [0x14023b9a8]
cmp byte [rax], 0
je 0x1400a4f7d
mov byte [rax], 0
call fcn.1400a26b0
mov rax, qword [0x14023b988]
cmp byte [rax], 0
je 0x1400a5043
cmp qword [0x14023b5a0], 0
je 0x1400a507e
cmp byte [0x140232d0e], 0
jne 0x1400a507e
mov byte [0x140232d0e], 1
cmp qword [0x14023b530], 0
jne 0x1400a4fda
mov rdx, qword [0x14023b4b8]
add rdx, 0x33aa420
mov rcx, qword [0x140240dc0]
call fcn.1400e45b0
mov qword [0x14023b530], rax
mov qword [rbp + 0x38], reloc.SHLWAPI.dll_IStream_Read
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov edx, 1
call fcn.1400ec9f0
mov qword [rsp + 0x60], rax
lea rdx, [rax + 8]
mov qword [rsp + 0x70], rdx
mov rcx, qword [rbp + 0x38]
mov qword [rax], rcx
mov qword [rsp + 0x68], rdx
lea r8, [rsp + 0x60]
mov rdx, qword [0x14023b530]
call fcn.1400e4940
mov qword [0x140232d10], rax
test rax, rax
je 0x1400a507e
lea rdx, [rax + 0x11]
xor r8d, r8d
call fcn.1400e4b00
movaps xmm2, xmm8
jmp 0x1400a506e
cmp byte [0x140232d0e], 0
je 0x1400a507e
mov byte [0x140232d0e], 0
mov rdx, qword [0x140232d10]
test rdx, rdx
je 0x1400a507e
add rdx, 0x11
mov r8b, 1
call fcn.1400e4b00
movaps xmm2, xmm6
mov rdx, qword [0x140232d10]
add rdx, 0x14
call fcn.1400e4ef0
mov rax, qword [0x14023bbd0]
cmp byte [rax], 0
je 0x1400a5094
call fcn.14009efe0
jmp 0x1400a5227
mov rdi, qword [0x14023c188]
test rdi, rdi
je 0x1400a5227
cmp qword [0x140235148], 0x10
cmovae r12, qword [0x140235130]
mov rcx, r14
mov r14, qword [0x14023c178]
mov r15, qword [0x14023c190]
cmp r15, 0x10
cmovae rcx, r14
cmp rdi, qword [0x140235140]
jne 0x1400a5227
mov r8, rdi
mov rdx, r12
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400a5227
mov rbx, qword [0x140240cb8]
mov rsi, qword [0x140240cc0]
cmp rbx, rsi
je 0x1400a5227
lea r12, [0x14023c178]
nop dword [rax + rax]
mov rdx, r12
cmp r15, 0x10
cmovae rdx, r14
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x1400a512c
mov rcx, qword [rbx]
cmp r8, rdi
jne 0x1400a513a
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400a5149
add rbx, 0x20
cmp rbx, rsi
je 0x1400a5227
jmp 0x1400a5110
mov r8, r12
lea rdx, [rbp + 0x38]
lea rcx, [0x14023c198]
call fcn.1400e6e90
mov rcx, qword [rax]
cmp byte [rcx + 0xa6], 0
jne 0x1400a5227
mov r8, r12
lea rdx, [rbp + 0x38]
lea rcx, [0x14023c198]
call fcn.1400e6e90
mov rcx, qword [rax]
cmp byte [rcx + 0xa3], 0
je 0x1400a5227
mov rcx, qword [0x140235198]
test rcx, rcx
je 0x1400a5227
call fcn.140067f80
mov rbx, rax
test rax, rax
je 0x1400a5227
mov r8, r12
lea rdx, [rbp + 0x38]
lea rcx, [0x14023c198]
call fcn.1400e6e90
mov r9, qword [rax]
movss xmm0, dword [r9 + 0x98]
lea rdx, [rbx + 0x2d8]
movss xmm1, dword [r9 + 0x94]
unpcklps xmm1, xmm0
movq r8, xmm1
call fcn.1400e5070
mov r8, r12
lea rdx, [rsp + 0x30]
lea rcx, [0x14023c198]
call fcn.1400e6e90
mov rdx, qword [rax]
mov byte [rdx + 0xa6], 1
mov r8, r12
lea rdx, [rsp + 0x60]
lea rcx, [0x14023c198]
call fcn.1400e6e90
mov rcx, qword [rax]
mov dword [rcx + 0xac], 0xbf800000
mov rax, qword [0x14023bbd8]
cmp byte [rax], 0
je 0x1400a523a
call fcn.14009eb00
jmp 0x1400a523f
call fcn.14009e130
mov rax, qword [0x14023b938]
cmp byte [rax], 0
je 0x1400a52c4
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400a527b
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0x84]
movss xmm2, dword [0x1401f5cec]
call fcn.1400e4ef0
mov byte [reloc.WS2_32.dll_accept], 0
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0xc4]
movaps xmm2, xmm7
call fcn.1400e4ef0
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0xc8]
movaps xmm2, xmm7
call fcn.1400e4ef0
mov qword [rbp + 0x38], reloc.WLDAP32.dll_Ordinal_50
lea rcx, [rbp + 0x38]
call fcn.1400e5120
jmp 0x1400a52f4
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x1400a52f4
mov rcx, qword [0x140235178]
call fcn.140068610
lea rdx, [rax + 0x84]
movss xmm2, dword [0x1401f5d48]
call fcn.1400e4ef0
mov byte [reloc.WS2_32.dll_accept], 1
mov rcx, qword [rbp + 0x68]
xor rcx, rsp
call fcn.1401a37c0
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret