Function at 0x14007d470
Capabilities:
Encode data using xor
Enumerate gui resources
Enumerate processes
Log keystrokes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x140140880]
xor rax, rsp
mov qword [rbp + 0x160], rax
call fcn.1400ce570
mov qword [rsp + 0x48], rax
call fcn.1400b9fb0
mov qword [rbp - 0x70], rax
call fcn.1400d05e0
xor edx, edx
mov cl, 0x5b
call fcn.14007b670
mov edx, 1
mov byte [rsp + 0x26], al
mov cl, 0x7e
mov byte [rbp - 0x68], al
call fcn.14007b670
mov edx, 2
mov byte [rsp + 0x3a], al
mov cl, 0x5d
mov byte [rbp - 0x67], al
call fcn.14007b670
mov edx, 3
mov byte [rsp + 0x27], al
mov cl, 0x20
mov byte [rbp - 0x66], al
call fcn.14007b670
mov edx, 4
mov byte [rsp + 0x28], al
mov cl, 0x49
mov byte [rbp - 0x65], al
call fcn.14007b670
mov edx, 5
mov byte [rbp - 0x64], al
mov cl, WSAGetLastError
call fcn.14007b670
mov edx, 6
mov byte [rbp - 0x63], al
mov cl, 0x69
call fcn.14007b670
mov edx, 7
mov byte [rsp + 0x2a], al
mov cl, reloc.WSOCK32.dll_WSACleanup
mov byte [rbp - 0x62], al
movzx r13d, al
call fcn.14007b670
mov edx, 8
mov byte [rbp - 0x61], al
mov cl, 0x69
call fcn.14007b670
mov edx, 9
mov byte [rsp + 0x39], al
mov cl, 0x61
mov byte [rbp - 0x60], al
call fcn.14007b670
mov edx, 0xa
mov byte [rbp - 0x5f], al
mov cl, 0x6c
call fcn.14007b670
mov edx, ntohl
mov byte [rbp - 0x5e], al
mov cl, 0x69
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x5d], al
mov cl, 0x7a
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_listen
mov byte [rbp - 0x5c], al
mov cl, 0x69
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohl
mov byte [rbp - 0x5b], al
mov cl, WSAGetLastError
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohs
mov byte [rbp - 0x5a], al
mov cl, 0x67
call fcn.14007b670
mov edx, select
mov byte [rbp - 0x59], al
mov cl, 0x2e
call fcn.14007b670
movzx r15d, al
mov byte [rsp + 0x21], al
mov edx, select
mov byte [rbp - 0x58], al
mov cl, 0x2e
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_select
mov byte [rbp - 0x57], al
mov cl, 0x2e
call fcn.14007b670
mov byte [rbp - 0x56], al
xor eax, eax
xor esi, esi
mov byte [rbp - 0x55], al
mov r8d, esi
nop dword [rax + rax]
movsxd rax, r8d
lea rdx, [rbp - 0x68]
add rdx, rax
lea eax, [r8 + 0x13]
inc r8d
xor byte [rdx], al
cmp r8d, 0x13
jb 0x14007d610
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x68]
mov byte [rbp - 0x55], sil
call fcn.14007acd0
lea rdx, [0x14007b200]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400d0660
mov r12, rax
mov qword [rsp + 0x40], rax
call fcn.1400d1750
xor edx, edx
mov dword [rbp - 0x28], esi
mov r14d, esi
lea ecx, [rdx + 2]
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14007d8e8
lea rdx, [rbp + 0x30]
mov dword [rbp + 0x30], 0x130
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x14007d8df
xor edx, edx
mov cl, 0x52
call fcn.14007b670
mov edx, 1
mov cl, reloc.WSOCK32.dll_WSAGetLastError
movzx edi, al
call fcn.14007b670
mov edx, 2
mov cl, 0x62
movzx r14d, al
call fcn.14007b670
mov edx, 3
mov cl, 0x6c
movzx r15d, al
call fcn.14007b670
mov edx, 4
mov cl, reloc.WSOCK32.dll_WSAGetLastError
movzx r12d, al
call fcn.14007b670
mov edx, 5
mov cl, 0x78
movzx r13d, al
call fcn.14007b670
mov edx, 6
mov byte [rsp + 0x2b], al
mov cl, 0x50
call fcn.14007b670
mov edx, 7
mov byte [rsp + 0x22], al
mov cl, 0x6c
call fcn.14007b670
mov edx, 8
mov byte [rsp + 0x25], al
mov cl, 0x61
call fcn.14007b670
mov edx, 9
mov byte [rsp + 0x24], al
mov cl, 0x79
call fcn.14007b670
mov edx, 0xa
mov byte [rsp + 0x23], al
mov cl, 0x65
call fcn.14007b670
mov edx, ntohl
mov byte [rsp + 0x2e], al
mov cl, WSAStartup
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rsp + 0x2f], al
mov cl, 0x42
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_listen
mov byte [rsp + 0x30], al
mov cl, 0x65
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohl
mov byte [rsp + 0x31], al
mov cl, reloc.WSOCK32.dll_WSACleanup
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohs
mov byte [rsp + 0x32], al
mov cl, 0x61
call fcn.14007b670
mov edx, select
mov byte [rsp + 0x33], al
mov cl, 0x65
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_select
mov byte [rsp + 0x34], al
mov cl, 0x78
call fcn.14007b670
mov edx, setsockopt
mov byte [rsp + 0x29], al
mov cl, 0x65
call fcn.14007b670
movzx ecx, al
mov byte [rsp + 0x20], al
nop word [rax + rax]
movzx eax, byte [rsp + 0x2b]
mov byte [rbp + 0xd], al
movzx eax, byte [rsp + 0x22]
mov byte [rbp + 0xe], al
movzx eax, byte [rsp + 0x25]
mov byte [rbp + 0xf], al
movzx eax, byte [rsp + 0x24]
mov byte [rbp + 0x10], al
movzx eax, byte [rsp + 0x23]
mov byte [rbp + 0x11], al
movzx eax, byte [rsp + 0x2e]
mov byte [rbp + 0x12], al
movzx eax, byte [rsp + 0x2f]
mov byte [rbp + 0x13], al
movzx eax, byte [rsp + 0x30]
mov byte [rbp + 0x14], al
movzx eax, byte [rsp + 0x31]
mov byte [rbp + 0x15], al
movzx eax, byte [rsp + 0x32]
mov byte [rbp + 0x16], al
movzx eax, byte [rsp + 0x33]
mov byte [rbp + 0x17], al
movzx eax, byte [rsp + 0x21]
mov byte [rbp + 0x18], al
movzx eax, byte [rsp + 0x34]
mov byte [rbp + 0x19], al
movzx eax, byte [rsp + 0x29]
mov byte [rbp + 0x1a], al
xor eax, eax
mov byte [rbp + 0x1c], al
mov byte [rbp + 8], dil
mov byte [rbp + 9], r14b
mov byte [rbp + 0xa], r15b
mov byte [rbp + 0xb], r12b
mov byte [rbp + 0xc], r13b
mov byte [rbp + 0x1b], cl
nop dword [rax]
movsxd rcx, eax
lea rdx, [rbp + 8]
add rdx, rcx
lea ecx, [rax + 0x13]
inc eax
xor byte [rdx], cl
cmp eax, 0x14
jb 0x14007d860
lea rax, [rbp + 0x5c]
mov byte [rbp + 0x1c], sil
lea r8, [rbp + 8]
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14007d8a3
inc rax
test ecx, ecx
jne 0x14007d890
test edx, edx
je 0x14007d8c1
lea rdx, [rbp + 0x30]
mov rcx, rbx
call sub.KERNEL32.dll_Process32Next
test eax, eax
je 0x14007d8cb
movzx ecx, byte [rsp + 0x20]
jmp 0x14007d7d0
mov r14d, dword [rbp + 0x38]
mov dword [rbp - 0x28], r14d
jmp 0x14007d8ce
mov r14d, esi
movzx r13d, byte [rsp + 0x2a]
mov r12, qword [rsp + 0x40]
movzx r15d, byte [rsp + 0x21]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 5
mov cl, reloc.WSOCK32.dll_WSAGetLastError
call fcn.14007b670
mov edx, 6
mov byte [rsp + 0x21], al
mov cl, 0x75
call fcn.14007b670
mov edx, 8
mov cl, 0x64
movzx ebx, al
call fcn.14007b670
movzx edi, al
movzx eax, byte [rsp + 0x26]
mov byte [rbp - 0x68], al
mov edx, 1
test r14d, r14d
jne 0x14007daa1
mov cl, 0x2d
call fcn.14007b670
mov byte [rbp - 0x67], al
lea edx, [r14 + 4]
movzx eax, byte [rsp + 0x27]
mov cl, 0x43
mov byte [rbp - 0x66], al
movzx eax, byte [rsp + 0x28]
mov byte [rbp - 0x65], al
call fcn.14007b670
mov byte [rbp - 0x64], al
lea edx, [r14 + 7]
movzx eax, byte [rsp + 0x21]
mov cl, 0x6c
mov byte [rbp - 0x63], al
mov byte [rbp - 0x62], bl
call fcn.14007b670
lea edx, [r14 + 9]
mov byte [rbp - 0x61], al
mov cl, WSAGetLastError
mov byte [rbp - 0x60], dil
call fcn.14007b670
lea edx, [r14 + 0xa]
mov byte [rbp - 0x5f], al
mov cl, 0x27
call fcn.14007b670
lea edx, [r14 + 0xb]
mov byte [rbp - 0x5e], al
mov cl, reloc.WSOCK32.dll_WSACleanup
call fcn.14007b670
lea edx, [r14 + 0xc]
mov byte [rbp - 0x5d], al
mov cl, 0x20
call fcn.14007b670
lea edx, [r14 + 0xd]
mov byte [rbp - 0x5c], al
mov cl, 0x66
call fcn.14007b670
lea edx, [r14 + 0xe]
mov byte [rbp - 0x5b], al
mov cl, 0x69
call fcn.14007b670
lea edx, [r14 + 0xf]
mov byte [rbp - 0x5a], al
mov cl, WSAGetLastError
call fcn.14007b670
lea edx, [r14 + 0x10]
mov byte [rbp - 0x59], al
mov cl, 0x64
call fcn.14007b670
lea edx, [r14 + 0x11]
mov byte [rbp - 0x58], al
mov cl, 0x20
call fcn.14007b670
lea edx, [r14 + 0x12]
mov byte [rbp - 0x57], al
mov cl, 0x52
call fcn.14007b670
lea edx, [r14 + 0x13]
mov byte [rbp - 0x56], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
call fcn.14007b670
lea edx, [r14 + 0x14]
mov byte [rbp - 0x55], al
mov cl, 0x62
call fcn.14007b670
lea edx, [r14 + 0x15]
mov byte [rbp - 0x54], al
mov cl, 0x6c
call fcn.14007b670
lea edx, [r14 + 0x16]
mov byte [rbp - 0x53], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
call fcn.14007b670
lea edx, [r14 + 0x17]
mov byte [rbp - 0x52], al
mov cl, 0x78
call fcn.14007b670
mov byte [rbp - 0x51], al
xor eax, eax
mov byte [rbp - 0x50], al
nop dword [rax + rax]
movsxd rax, esi
lea rdx, [rbp - 0x68]
add rdx, rax
lea eax, [rsi + 0x13]
inc esi
xor byte [rdx], al
cmp esi, 0x18
jb 0x14007da50
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x68]
mov byte [rbp - 0x50], 0
call fcn.14007acd0
lea rdx, [0x14007b200]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
mov eax, 1
jmp 0x14007f2de
mov cl, 0x2b
call fcn.14007b670
mov byte [rsp + 0x3b], al
mov edx, 4
mov byte [rbp - 0x67], al
mov cl, 0x46
movzx eax, byte [rsp + 0x27]
mov byte [rbp - 0x66], al
movzx eax, byte [rsp + 0x28]
mov byte [rbp - 0x65], al
call fcn.14007b670
movzx r14d, al
mov byte [rbp - 0x64], al
movzx eax, byte [rsp + 0x21]
mov edx, 7
mov cl, WSAGetLastError
mov byte [rbp - 0x63], al
mov byte [rbp - 0x62], bl
call fcn.14007b670
mov edx, 9
mov byte [rsp + 0x3c], al
mov cl, 0x20
mov byte [rbp - 0x61], al
mov byte [rbp - 0x60], dil
call fcn.14007b670
mov edx, 0xa
mov byte [rbp - 0x5f], al
mov cl, 0x52
call fcn.14007b670
mov edx, ntohl
mov byte [rbp - 0x5e], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x5d], al
mov cl, 0x62
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_listen
mov byte [rbp - 0x5c], al
mov cl, 0x6c
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohl
mov byte [rbp - 0x5b], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohs
mov byte [rbp - 0x5a], al
mov cl, 0x78
call fcn.14007b670
mov byte [rsp + 0x30], al
mov r9d, esi
mov byte [rbp - 0x59], al
xor eax, eax
mov byte [rbp - 0x58], al
nop dword [rax]
movsxd rdx, r9d
lea r8, [rbp - 0x68]
add r8, rdx
lea edx, [r9 + 0x13]
inc r9d
xor byte [r8], dl
cmp r9d, 0x10
jb 0x14007db70
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x68]
mov byte [rbp - 0x58], al
call fcn.14007acd0
lea rdx, [0x14007b200]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor edx, edx
mov cl, 0x52
call fcn.14007b670
mov edx, 1
mov byte [rsp + 0x2e], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
mov byte [rbp - 0x68], al
call fcn.14007b670
mov edx, 2
mov byte [rsp + 0x24], al
mov cl, 0x62
mov byte [rbp - 0x67], al
call fcn.14007b670
mov edx, 3
mov byte [rsp + 0x35], al
mov cl, 0x6c
mov byte [rbp - 0x66], al
call fcn.14007b670
mov edx, 4
mov byte [rsp + 0x36], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
mov byte [rbp - 0x65], al
call fcn.14007b670
mov edx, 5
mov byte [rsp + 0x37], al
mov cl, 0x78
mov byte [rbp - 0x64], al
call fcn.14007b670
mov edx, 6
mov byte [rsp + 0x38], al
mov cl, 0x50
mov byte [rbp - 0x63], al
call fcn.14007b670
mov edx, 7
mov byte [rbp - 0x62], al
mov cl, 0x6c
call fcn.14007b670
mov edx, 8
mov byte [rsp + 0x2c], al
mov cl, 0x61
mov byte [rbp - 0x61], al
movzx ebx, al
call fcn.14007b670
mov edx, 9
mov byte [rbp - 0x60], al
mov cl, 0x79
call fcn.14007b670
mov edx, 0xa
mov byte [rbp - 0x5f], al
mov cl, 0x65
call fcn.14007b670
mov edx, ntohl
mov byte [rsp + 0x25], al
mov cl, WSAStartup
mov byte [rbp - 0x5e], al
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x5d], al
mov cl, 0x42
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_listen
mov byte [rbp - 0x5c], al
mov cl, 0x65
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohl
mov byte [rsp + 0x2f], al
mov cl, reloc.WSOCK32.dll_WSACleanup
mov byte [rbp - 0x5b], al
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohs
mov byte [rsp + 0x2d], al
mov cl, 0x61
mov byte [rbp - 0x5a], al
call fcn.14007b670
mov edx, select
mov byte [rbp - 0x59], al
mov cl, 0x65
mov byte [rbp - 0x58], r15b
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_select
mov byte [rbp - 0x57], al
mov cl, 0x78
call fcn.14007b670
mov edx, setsockopt
mov byte [rbp - 0x56], al
mov cl, 0x65
call fcn.14007b670
mov byte [rbp - 0x55], al
mov edx, esi
xor eax, eax
mov byte [rbp - 0x54], al
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x68]
add rcx, rax
lea eax, [rdx + 0x13]
inc edx
xor byte [rcx], al
cmp edx, 0x14
jb 0x14007dd00
lea rdx, [rbp - 0x68]
mov byte [rbp - 0x54], sil
mov rcx, r12
call fcn.1400d0750
test al, al
jne 0x14007dead
movzx eax, byte [rsp + 0x26]
mov edx, 1
mov cl, 0x2d
mov byte [rbp - 0x68], al
call fcn.14007b670
mov byte [rbp - 0x67], al
mov edx, 5
movzx eax, byte [rsp + 0x27]
mov cl, 0x61
mov byte [rbp - 0x66], al
movzx eax, byte [rsp + 0x28]
mov byte [rbp - 0x65], al
mov byte [rbp - 0x64], r14b
call fcn.14007b670
mov edx, 8
mov byte [rbp - 0x63], al
mov cl, 0x65
mov byte [rbp - 0x62], r13b
mov byte [rbp - 0x61], bl
call fcn.14007b670
mov edx, 9
mov byte [rbp - 0x60], al
mov cl, 0x64
call fcn.14007b670
mov edx, 0xa
mov byte [rbp - 0x5f], al
mov cl, 0x20
call fcn.14007b670
mov edx, ntohl
mov byte [rbp - 0x5e], al
mov cl, reloc.WSOCK32.dll_WSACleanup
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x5d], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_listen
mov byte [rbp - 0x5c], al
mov cl, 0x20
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohl
mov byte [rbp - 0x5b], al
mov cl, 0x69
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohs
mov byte [rbp - 0x5a], al
mov cl, WSAGetLastError
call fcn.14007b670
mov edx, select
mov byte [rbp - 0x59], al
mov cl, 0x69
call fcn.14007b670
mov edx, select
mov byte [rbp - 0x58], al
mov cl, reloc.WSOCK32.dll_WSACleanup
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_select
mov byte [rbp - 0x57], al
mov cl, 0x69
call fcn.14007b670
mov edx, setsockopt
mov byte [rbp - 0x56], al
mov cl, 0x61
call fcn.14007b670
mov edx, setsockopt
mov byte [rbp - 0x55], al
mov cl, 0x6c
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_setsockopt
mov byte [rbp - 0x54], al
mov cl, 0x69
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_shutdown
mov byte [rbp - 0x53], al
mov cl, 0x7a
call fcn.14007b670
mov edx, 0x17
mov byte [rbp - 0x52], al
mov cl, 0x65
call fcn.14007b670
mov byte [rbp - 0x51], al
xor eax, eax
mov r8d, esi
mov byte [rbp - 0x50], al
nop word [rax + rax]
movsxd rax, r8d
lea rdx, [rbp - 0x68]
add rdx, rax
lea eax, [r8 + 0x13]
inc r8d
xor byte [rdx], al
cmp r8d, 0x18
jb 0x14007de70
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x68]
mov byte [rbp - 0x50], sil
call fcn.14007acd0
lea rdx, [0x14007b200]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor edx, edx
mov cl, 0x56
call fcn.14007b670
mov edx, 1
mov byte [rbp - 0x68], al
mov cl, 0x69
movzx ebx, al
call fcn.14007b670
mov edx, 2
mov byte [rbp - 0x67], al
mov cl, WSAStartup
movzx edi, al
call fcn.14007b670
mov edx, 3
mov byte [rsp + 0x23], al
mov cl, reloc.WSOCK32.dll_WSACleanup
mov byte [rbp - 0x66], al
call fcn.14007b670
mov edx, 4
mov byte [rsp + 0x22], al
mov cl, 0x75
mov byte [rbp - 0x65], al
call fcn.14007b670
mov edx, 5
mov byte [rbp - 0x64], al
mov cl, 0x61
movzx r14d, al
call fcn.14007b670
mov edx, 6
mov byte [rbp - 0x63], al
mov cl, 0x6c
movzx r15d, al
call fcn.14007b670
mov edx, 7
mov byte [rbp - 0x62], al
mov cl, 0x46
movzx r12d, al
call fcn.14007b670
mov edx, 8
mov byte [rsp + 0x20], al
mov cl, WSAStartup
mov byte [rbp - 0x61], al
call fcn.14007b670
mov edx, 9
mov byte [rbp - 0x60], al
mov cl, 0x65
movzx r13d, al
call fcn.14007b670
mov byte [rsp + 0x2b], al
mov r8d, esi
mov byte [rbp - 0x5f], al
movzx eax, byte [rsp + 0x25]
mov byte [rbp - 0x5e], al
xor eax, eax
mov byte [rbp - 0x5d], al
nop word [rax + rax]
movsxd rcx, r8d
lea rdx, [rbp - 0x68]
add rdx, rcx
lea ecx, [r8 + 0x13]
inc r8d
xor byte [rdx], cl
cmp r8d, 0xb
jb 0x14007df80
lea rcx, [rbp - 0x68]
mov byte [rbp - 0x5d], al
call fcn.14007bfb0
movzx eax, byte [rsp + 0x23]
mov edx, ntohl
mov byte [rbp - 0x66], al
mov cl, 0x45
movzx eax, byte [rsp + 0x22]
mov byte [rbp - 0x65], al
movzx eax, byte [rsp + 0x20]
mov byte [rbp - 0x61], al
movzx eax, byte [rsp + 0x2b]
mov byte [rbp - 0x5f], al
movzx eax, byte [rsp + 0x25]
mov byte [rbp - 0x5e], al
mov byte [rbp - 0x68], bl
mov byte [rbp - 0x67], dil
mov byte [rbp - 0x64], r14b
mov byte [rbp - 0x63], r15b
mov byte [rbp - 0x62], r12b
mov byte [rbp - 0x60], r13b
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x5d], al
mov cl, 0x78
call fcn.14007b670
mov byte [rbp - 0x5c], al
mov edx, esi
xor eax, eax
mov byte [rbp - 0x5b], al
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x68]
add rcx, rax
lea eax, [rdx + 0x13]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x14007e010
lea rcx, [rbp - 0x68]
mov byte [rbp - 0x5b], sil
call fcn.14007bfb0
movzx eax, byte [rsp + 0x23]
mov edx, 7
mov byte [rbp - 0x66], al
mov cl, 0x50
movzx eax, byte [rsp + 0x22]
mov byte [rbp - 0x65], al
mov byte [rbp - 0x68], bl
mov byte [rbp - 0x67], dil
mov byte [rbp - 0x64], r14b
mov byte [rbp - 0x63], r15b
mov byte [rbp - 0x62], r12b
call fcn.14007b670
mov edx, 9
mov byte [rsp + 0x20], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
mov byte [rbp - 0x61], al
mov byte [rbp - 0x60], r13b
call fcn.14007b670
mov edx, 0xa
mov byte [rsp + 0x29], al
mov cl, reloc.WSOCK32.dll_WSACleanup
mov byte [rbp - 0x5f], al
call fcn.14007b670
mov edx, ntohl
mov byte [rsp + 0x34], al
mov cl, 0x65
mov byte [rbp - 0x5e], al
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rsp + 0x33], al
mov cl, 0x63
mov byte [rbp - 0x5d], al
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_listen
mov byte [rsp + 0x32], al
mov cl, reloc.WSOCK32.dll_WSACleanup
mov byte [rbp - 0x5c], al
call fcn.14007b670
mov byte [rsp + 0x31], al
mov r8d, esi
mov byte [rbp - 0x5b], al
xor eax, eax
mov byte [rbp - 0x5a], al
nop dword [rax]
nop dword [rax + rax]
movsxd rcx, r8d
lea rdx, [rbp - 0x68]
add rdx, rcx
lea ecx, [r8 + 0x13]
inc r8d
xor byte [rdx], cl
cmp r8d, 0xe
jb 0x14007e0e0
lea rcx, [rbp - 0x68]
mov byte [rbp - 0x5a], al
call fcn.14007bfb0
movzx eax, byte [rsp + 0x23]
mov edx, reloc.WSOCK32.dll_ntohl
mov byte [rbp - 0x66], al
mov cl, 0x45
movzx eax, byte [rsp + 0x20]
mov byte [rbp - 0x61], al
movzx eax, byte [rsp + 0x29]
mov byte [rbp - 0x5f], al
movzx eax, byte [rsp + 0x34]
mov byte [rbp - 0x5e], al
movzx eax, byte [rsp + 0x33]
mov byte [rbp - 0x5d], al
movzx eax, byte [rsp + 0x32]
mov byte [rbp - 0x5c], al
movzx eax, byte [rsp + 0x31]
mov byte [rbp - 0x68], bl
movzx ebx, byte [rsp + 0x22]
mov byte [rbp - 0x5b], al
mov byte [rbp - 0x67], dil
mov byte [rbp - 0x65], bl
mov byte [rbp - 0x64], r14b
mov byte [rbp - 0x63], r15b
mov byte [rbp - 0x62], r12b
mov byte [rbp - 0x60], r13b
call fcn.14007b670
mov byte [rbp - 0x5a], al
mov edx, esi
movzx eax, byte [rsp + 0x30]
mov byte [rbp - 0x59], al
xor eax, eax
mov byte [rbp - 0x58], al
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x68]
add rcx, rax
lea eax, [rdx + 0x13]
inc edx
xor byte [rcx], al
cmp edx, 0x10
jb 0x14007e180
lea rcx, [rbp - 0x68]
mov byte [rbp - 0x58], sil
call fcn.14007bfb0
xor edx, edx
mov cl, 0x57
call fcn.14007b670
mov edx, 1
mov byte [rbp - 0x68], al
mov cl, WSAStartup
call fcn.14007b670
mov edx, 2
mov byte [rbp - 0x67], al
mov cl, 0x69
call fcn.14007b670
mov edx, 4
mov byte [rbp - 0x66], al
mov cl, 0x65
mov byte [rbp - 0x65], bl
call fcn.14007b670
mov edx, 5
mov byte [rbp - 0x64], al
mov cl, 0x50
call fcn.14007b670
mov edx, 6
mov byte [rbp - 0x63], al
mov cl, WSAStartup
call fcn.14007b670
mov edx, 7
mov byte [rsp + 0x20], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
mov byte [rbp - 0x62], al
call fcn.14007b670
mov edx, 8
mov byte [rbp - 0x61], al
mov cl, 0x63
movzx r13d, al
call fcn.14007b670
mov byte [rsp + 0x22], al
mov edx, 0xa
mov byte [rbp - 0x60], al
mov cl, reloc.WSOCK32.dll_WSAStartup
movzx eax, byte [rsp + 0x2b]
mov byte [rbp - 0x5f], al
call fcn.14007b670
mov edx, ntohl
mov byte [rbp - 0x5e], al
mov cl, reloc.WSOCK32.dll_WSAStartup
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x5d], al
mov cl, 0x4d
call fcn.14007b670
mov byte [rbp - 0x5c], al
mov edx, reloc.WSOCK32.dll_ntohl
movzx eax, byte [rsp + 0x2f]
mov cl, 0x6d
mov byte [rbp - 0x5b], al
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohs
mov byte [rbp - 0x5a], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
call fcn.14007b670
mov edx, select
mov byte [rbp - 0x59], al
mov cl, WSAStartup
call fcn.14007b670
mov edx, select
mov byte [rbp - 0x58], al
mov cl, 0x79
call fcn.14007b670
mov byte [rbp - 0x57], al
mov edx, esi
xor eax, eax
mov byte [rbp - 0x56], al
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x68]
add rcx, rax
lea eax, [rdx + 0x13]
inc edx
xor byte [rcx], al
cmp edx, 0x12
jb 0x14007e2b0
lea rcx, [rbp - 0x68]
mov byte [rbp - 0x56], sil
call fcn.14007bfb0
xor edx, edx
mov cl, 0x4e
call fcn.14007b670
mov edx, 1
mov byte [rbp - 0x68], al
mov cl, reloc.WSOCK32.dll_WSACleanup
call fcn.14007b670
mov edx, 2
mov byte [rbp - 0x67], al
mov cl, 0x55
call fcn.14007b670
mov edx, 3
mov byte [rbp - 0x66], al
mov cl, WSAGetLastError
call fcn.14007b670
mov edx, 4
mov byte [rbp - 0x65], al
mov cl, 0x6c
call fcn.14007b670
movzx r15d, al
mov byte [rbp - 0x64], al
movzx eax, byte [rsp + 0x21]
mov edx, 6
mov cl, 0x63
mov byte [rbp - 0x63], al
call fcn.14007b670
mov edx, 7
mov byte [rbp - 0x62], al
mov cl, 0x6b
call fcn.14007b670
mov edx, 8
mov byte [rbp - 0x61], al
mov cl, 0x56
call fcn.14007b670
mov edx, 9
mov byte [rbp - 0x60], al
mov cl, 0x69
call fcn.14007b670
mov edx, 0xa
mov byte [rbp - 0x5f], al
mov cl, WSAStartup
call fcn.14007b670
mov edx, ntohl
mov byte [rbp - 0x5e], al
mov cl, reloc.WSOCK32.dll_WSACleanup
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x5d], al
mov cl, 0x75
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_listen
mov byte [rbp - 0x5c], al
mov cl, 0x61
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohl
mov byte [rbp - 0x5b], al
mov cl, 0x6c
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohs
mov byte [rbp - 0x5a], al
mov cl, 0x4d
call fcn.14007b670
mov edx, select
mov byte [rbp - 0x59], al
mov cl, 0x65
call fcn.14007b670
mov edx, select
mov byte [rbp - 0x58], al
mov cl, 0x6d
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_select
mov byte [rbp - 0x57], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
call fcn.14007b670
mov edx, setsockopt
mov byte [rbp - 0x56], al
mov cl, WSAStartup
call fcn.14007b670
mov edx, setsockopt
mov byte [rbp - 0x55], al
mov cl, 0x79
call fcn.14007b670
mov byte [rbp - 0x54], al
mov edx, esi
xor eax, eax
mov byte [rbp - 0x53], al
nop
movsxd rax, edx
lea rcx, [rbp - 0x68]
add rcx, rax
lea eax, [rdx + 0x13]
inc edx
xor byte [rcx], al
cmp edx, 0x15
jb 0x14007e410
lea rcx, [rbp - 0x68]
mov byte [rbp - 0x53], sil
call fcn.14007ca80
movsxd rdi, dword [rbp - 0x28]
lea rcx, [0x14007b690]
mov rdx, rdi
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [0x140144f48]
xor edx, edx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov rcx, qword [rsp + 0x48]
mov dword [rcx + 0xc], eax
call fcn.1400ce230
xor edx, edx
mov qword [rsp + 0x50], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateJobObjectA]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
mov qword [rbp - 0x78], rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r9d, select
lea r8, [rbp + 0x20]
xorps xmm0, xmm0
mov qword [rbp - 0x68], rax
movups xmmword [rbp + 0x20], xmm0
mov rcx, rbx
mov dword [rbp + 0x20], 1
lea edx, [r9 + 2]
mov byte [rbp + 0x24], 1
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor edx, edx
mov cl, 0x43
call fcn.14007b670
movzx r12d, byte [rsp + 0x23]
movzx edi, al
mov byte [rbp - 0x28], al
mov edx, 3
movzx eax, byte [rsp + 0x24]
mov cl, 0x65
mov byte [rbp - 0x27], al
mov byte [rbp - 0x26], r12b
call fcn.14007b670
mov edx, 4
mov byte [rbp - 0x25], al
mov cl, 0x47
movzx r14d, al
call fcn.14007b670
mov edx, 5
mov byte [rbp - 0x24], al
mov cl, 0x75
call fcn.14007b670
mov byte [rbp - 0x23], al
mov edx, esi
movzx eax, byte [rsp + 0x2a]
mov byte [rbp - 0x22], al
xor eax, eax
mov byte [rbp - 0x21], al
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x28]
add rcx, rax
lea eax, [rdx + 0x13]
inc edx
xor byte [rcx], al
cmp edx, 7
jb 0x14007e530
xorps xmm0, xmm0
mov byte [rbp - 0x21], sil
mov rbx, 0xffffffffffffffff
mov qword [rbp - 0x38], rsi
movups xmmword [rbp - 0x48], xmm0
mov r8, rbx
mov qword [rbp - 0x30], rsi
lea rax, [rbp - 0x28]
inc r8
cmp byte [rax + r8], sil
jne 0x14007e567
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x48]
call fcn.14007af30
lea r8, [rbp - 0x48]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.1400cf920
movzx eax, byte [rsp + 0x2e]
mov edx, 6
mov byte [rbp - 0x48], al
mov cl, 0x47
movzx eax, byte [rsp + 0x24]
mov byte [rbp - 0x47], al
movzx eax, byte [rsp + 0x35]
mov byte [rbp - 0x46], al
movzx eax, byte [rsp + 0x36]
mov byte [rbp - 0x45], al
movzx eax, byte [rsp + 0x37]
mov byte [rbp - 0x44], al
movzx eax, byte [rsp + 0x38]
mov byte [rbp - 0x43], al
call fcn.14007b670
mov edx, 7
mov byte [rbp - 0x42], al
mov cl, 0x75
call fcn.14007b670
mov byte [rbp - 0x41], al
mov edx, esi
movzx eax, byte [rsp + 0x39]
mov byte [rbp - 0x40], al
xor eax, eax
mov byte [rbp - 0x3f], al
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x48]
add rcx, rax
lea eax, [rdx + 0x13]
inc edx
xor byte [rcx], al
cmp edx, 9
jb 0x14007e5f0
xorps xmm0, xmm0
mov byte [rbp - 0x3f], sil
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rsi
lea rax, [rbp - 0x48]
mov qword [rbp - 8], rsi
mov r8, rbx
inc r8
cmp byte [rax + r8], sil
jne 0x14007e620
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x20]
call fcn.14007af30
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.1400cffe0
xor edx, edx
mov cl, 0x4d
call fcn.14007b670
mov byte [rbp - 0x28], al
mov edx, 2
movzx eax, byte [rsp + 0x24]
mov cl, 0x64
mov byte [rbp - 0x27], al
call fcn.14007b670
mov edx, 3
mov byte [rbp - 0x26], al
mov cl, 0x75
call fcn.14007b670
mov edx, 5
mov byte [rbp - 0x25], al
mov cl, 0x65
mov byte [rbp - 0x24], r15b
call fcn.14007b670
mov edx, 6
mov byte [rbp - 0x23], al
mov cl, reloc.WSOCK32.dll_WSAStartup
call fcn.14007b670
mov byte [rbp - 0x22], al
mov edx, esi
xor eax, eax
mov byte [rbp - 0x21], al
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x28]
add rcx, rax
lea eax, [rdx + 0x13]
inc edx
xor byte [rcx], al
cmp edx, 7
jb 0x14007e6b0
xorps xmm0, xmm0
mov byte [rbp - 0x21], sil
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rsi
lea rax, [rbp - 0x28]
mov qword [rbp - 8], rsi
mov r8, rbx
inc r8
cmp byte [rax + r8], sil
jne 0x14007e6e0
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.14007af30
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x68]
call fcn.1400cffe0
movzx eax, byte [rsp + 0x24]
mov edx, 4
mov cl, 0x55
mov byte [rbp - 0x47], al
mov byte [rbp - 0x48], dil
mov byte [rbp - 0x46], r12b
mov byte [rbp - 0x45], r14b
call fcn.14007b670
mov edx, 5
mov byte [rbp - 0x44], al
mov cl, reloc.WSOCK32.dll_WSACleanup
call fcn.14007b670
movzx edi, al
mov byte [rsp + 0x38], al
mov byte [rbp - 0x43], al
mov edx, 9
movzx eax, byte [rsp + 0x2a]
mov cl, reloc.WSOCK32.dll_WSACleanup
mov byte [rbp - 0x42], al
movzx eax, byte [rsp + 0x2c]
mov byte [rbp - 0x41], al
movzx eax, byte [rsp + 0x39]
mov byte [rbp - 0x40], al
call fcn.14007b670
mov edx, 0xa
mov byte [rsp + 0x36], al
mov cl, 0x79
mov byte [rbp - 0x3f], al
movzx r14d, al
call fcn.14007b670
mov byte [rbp - 0x3e], al
mov r8d, esi
xor eax, eax
mov byte [rbp - 0x3d], al
nop dword [rax + rax]
movsxd rcx, r8d
lea rdx, [rbp - 0x48]
add rdx, rcx
lea ecx, [r8 + 0x13]
inc r8d
xor byte [rdx], cl
cmp r8d, 0xb
jb 0x14007e790
xorps xmm0, xmm0
mov byte [rbp - 0x3d], al
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rsi
lea rax, [rbp - 0x48]
mov qword [rbp - 8], rsi
mov r8, rbx
inc r8
cmp byte [rax + r8], sil
jne 0x14007e7c2
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x20]
call fcn.14007af30
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x58]
call fcn.1400cffe0
xor edx, edx
mov cl, 0x53
call fcn.14007b670
mov edx, 1
mov byte [rbp - 0x48], al
mov cl, 0x63
call fcn.14007b670
mov edx, 3
mov byte [rbp - 0x47], al
mov cl, 0x69
mov byte [rbp - 0x46], r12b
call fcn.14007b670
mov edx, 4
mov byte [rbp - 0x45], al
mov cl, reloc.WSOCK32.dll_WSASetLastError
call fcn.14007b670
mov edx, 6
mov byte [rbp - 0x44], al
mov cl, 0x43
mov byte [rbp - 0x43], dil
call fcn.14007b670
mov edx, 8
mov byte [rbp - 0x42], al
mov cl, WSAGetLastError
mov byte [rbp - 0x41], r13b
call fcn.14007b670
mov byte [rbp - 0x40], al
mov edx, ntohl
movzx eax, byte [rsp + 0x25]
mov cl, 0x78
mov byte [rbp - 0x3e], al
mov byte [rbp - 0x3f], r14b
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x3d], al
mov cl, reloc.WSOCK32.dll_WSACleanup
call fcn.14007b670
mov byte [rbp - 0x3c], al
mov edx, esi
xor eax, eax
mov byte [rbp - 0x3b], al
nop
movsxd rax, edx
lea rcx, [rbp - 0x48]
add rcx, rax
lea eax, [rdx + 0x13]
inc edx
xor byte [rcx], al
cmp edx, 0xd
jb 0x14007e880
xorps xmm0, xmm0
mov byte [rbp - 0x3b], sil
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rsi
lea rax, [rbp - 0x48]
mov qword [rbp - 8], rsi
nop dword [rax]
inc rbx
cmp byte [rax + rbx], sil
jne 0x14007e8b0
mov r8, rbx
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x20]
call fcn.14007af30
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
call fcn.1400cf920
movzx ebx, byte [rsp + 0x26]
mov edx, 4
movzx r13d, byte [rsp + 0x3a]
mov cl, 0x53
movzx r15d, byte [rsp + 0x27]
movzx r12d, byte [rsp + 0x28]
mov byte [rbp - 0x48], bl
mov byte [rbp - 0x47], r13b
mov byte [rbp - 0x46], r15b
mov byte [rbp - 0x45], r12b
call fcn.14007b670
mov edx, 5
mov byte [rbp - 0x44], al
mov cl, 0x63
call fcn.14007b670
mov byte [rbp - 0x43], al
mov edx, 7
movzx eax, byte [rsp + 0x20]
mov cl, 0x69
mov byte [rbp - 0x42], al
call fcn.14007b670
mov edx, 8
mov byte [rbp - 0x41], al
mov cl, reloc.WSOCK32.dll_WSASetLastError
call fcn.14007b670
mov edx, 0xa
mov byte [rbp - 0x40], al
mov cl, 0x20
mov byte [rbp - 0x3f], r14b
call fcn.14007b670
mov edx, ntohl
mov byte [rsp + 0x35], al
mov cl, 0x43
mov byte [rbp - 0x3e], al
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x3d], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_listen
mov byte [rbp - 0x3c], al
mov cl, WSAGetLastError
call fcn.14007b670
mov byte [rbp - 0x3b], al
mov edx, reloc.WSOCK32.dll_ntohs
movzx eax, byte [rsp + 0x2d]
mov cl, 0x65
mov byte [rbp - 0x3a], al
call fcn.14007b670
mov edx, select
mov byte [rsp + 0x20], al
mov cl, 0x78
mov byte [rbp - 0x39], al
call fcn.14007b670
mov edx, select
mov byte [rbp - 0x38], al
mov cl, reloc.WSOCK32.dll_WSACleanup
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_select
mov byte [rsp + 0x29], al
mov cl, 0x3a
mov byte [rbp - 0x37], al
call fcn.14007b670
mov edx, setsockopt
mov byte [rbp - 0x36], al
mov cl, 0x20
call fcn.14007b670
mov edx, setsockopt
mov byte [rbp - 0x35], al
mov cl, 0x30
call fcn.14007b670
mov byte [rbp - 0x34], al
mov edx, reloc.WSOCK32.dll_setsockopt
mov cl, 0x78
call fcn.14007b670
mov byte [rbp - 0x33], al
mov r8d, esi
xor eax, eax
mov byte [rbp - 0x32], al
nop dword [rax + rax]
movsxd rax, r8d
lea rdx, [rbp - 0x48]
add rdx, rax
lea eax, [r8 + 0x13]
inc r8d
xor byte [rdx], al
cmp r8d, 0x16
jb 0x14007ea10
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x48]
mov byte [rbp - 0x32], sil
call fcn.14007acd0
lea rdx, [0x14007b980]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, qword [rsp + 0x70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
mov rcx, rax
lea rdx, [0x14007b200]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 4
mov byte [rbp - 0x48], bl
mov cl, 0x41
mov byte [rbp - 0x47], r13b
mov byte [rbp - 0x46], r15b
mov byte [rbp - 0x45], r12b
call fcn.14007b670
mov edx, 6
mov byte [rsp + 0x2d], al
mov cl, reloc.WSOCK32.dll_WSACleanup
mov byte [rbp - 0x44], al
movzx r15d, al
mov byte [rbp - 0x43], dil
call fcn.14007b670
mov edx, 7
mov byte [rsp + 0x2c], al
mov cl, 0x61
mov byte [rbp - 0x42], al
movzx r12d, al
call fcn.14007b670
movzx r13d, al
mov byte [rbp - 0x41], al
movzx eax, byte [rsp + 0x22]
mov edx, 9
mov cl, 0x68
mov byte [rbp - 0x40], al
call fcn.14007b670
mov edx, 0xa
mov byte [rsp + 0x37], al
mov cl, 0x69
mov byte [rbp - 0x3f], al
call fcn.14007b670
mov edx, ntohl
mov byte [rbp - 0x3e], al
mov cl, WSAGetLastError
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x3d], al
mov cl, 0x67
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_listen
mov byte [rbp - 0x3c], al
mov cl, 0x2e
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohl
mov byte [rbp - 0x3b], al
mov cl, 0x2e
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohs
mov byte [rbp - 0x3a], al
mov cl, 0x2e
call fcn.14007b670
mov byte [rbp - 0x39], al
mov r8d, esi
xor eax, eax
mov byte [rbp - 0x38], al
nop dword [rax]
movsxd rax, r8d
lea rdx, [rbp - 0x48]
add rdx, rax
lea eax, [r8 + 0x13]
inc r8d
xor byte [rdx], al
cmp r8d, 0x10
jb 0x14007eb40
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x48]
mov byte [rbp - 0x38], sil
call fcn.14007acd0
lea rdx, [0x14007b200]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rsp + 0x48]
xorps xmm0, xmm0
cmp byte [rax + 8], sil
jne 0x14007ebe6
mov rdx, qword [0x140144f80]
sub rdx, qword [0x140144f78]
mov r14d, dword [section..data]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rsi
je 0x14007ebdc
lea rcx, [rbp - 0x48]
call fcn.14007b760
mov rdx, qword [0x140144f78]
mov rbx, qword [0x140144f80]
mov rdi, qword [rbp - 0x48]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x40], rax
lea rcx, [rsp + 0x78]
jmp 0x14007ef87
movzx eax, word [0x140114228]
lea r8, [rbp - 0x48]
movups xmmword [rbp - 0x48], xmm0
lea rdx, [rsp + 0x48]
mov qword [rbp - 0x38], 0xa
movsd xmm0, qword [str.PlayerList]
lea rcx, [rsp + 0x58]
movsd qword [rbp - 0x48], xmm0
mov qword [rbp - 0x30], reloc.WSOCK32.dll_ntohs
mov word [rbp - 0x40], ax
mov byte [rbp - 0x3e], sil
call fcn.1400cffe0
xorps xmm0, xmm0
mov qword [rbp - 0x38], rsi
mov ecx, 0x20
mov qword [rbp - 0x30], rsi
movups xmmword [rbp - 0x48], xmm0
call fcn.14010a6fc
movups xmm0, xmmword [str.PlayerListManager]
mov qword [rbp - 0x48], rax
lea r8, [rbp - 0x48]
mov qword [rbp - 0x38], select
lea rdx, [rsp + 0x40]
mov qword [rbp - 0x30], 0x1f
movups xmmword [rax], xmm0
movzx ecx, byte [0x140114240]
mov byte [rax + 0x10], cl
lea rcx, [rsp + 0x48]
mov byte [rax + 0x11], sil
call fcn.1400cffe0
mov eax, dword [0x140114250]
lea r8, [rbp - 0x48]
xorps xmm0, xmm0
mov qword [rbp - 0x38], reloc.WSOCK32.dll_ioctlsocket
movups xmmword [rbp - 0x48], xmm0
lea rdx, [rbp - 0x80]
mov qword [rbp - 0x30], reloc.WSOCK32.dll_ntohs
movsd xmm0, qword [str.CorePackages]
lea rcx, [rsp + 0x50]
movsd qword [rbp - 0x48], xmm0
mov dword [rbp - 0x40], eax
mov byte [rbp - 0x3c], sil
call fcn.1400cf920
movzx eax, word [0x140114260]
lea r8, [rbp - 0x48]
movsd xmm0, qword [str.JestGlobals]
lea rdx, [rbp - 0x28]
mov word [rbp - 0x40], ax
lea rcx, [rbp - 0x80]
movzx eax, byte [reloc.WSOCK32.dll_WSAStartup]
mov byte [rbp - 0x3e], al
mov dword [rbp - 0x3c], esi
mov qword [rbp - 0x38], ntohl
mov qword [rbp - 0x30], reloc.WSOCK32.dll_ntohs
movsd qword [rbp - 0x48], xmm0
mov byte [rbp - 0x3d], sil
call fcn.1400cffe0
lea rcx, [rbp - 0x28]
call fcn.1400cfc90
mov rdx, qword [rbp - 0x28]
lea rcx, [rsp + 0x40]
call fcn.1400d05a0
mov rdx, qword [0x140144f80]
xorps xmm0, xmm0
sub rdx, qword [0x140144f78]
mov r14d, dword [section..data]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rsi
je 0x14007ed79
lea rcx, [rbp - 0x48]
call fcn.14007b760
mov rdx, qword [0x140144f78]
mov rbx, qword [0x140144f80]
mov rdi, qword [rbp - 0x48]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x40], rax
mov r8d, r14d
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x28]
call fcn.1400cfac0
lea rdx, str.Roblox
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
mov rbx, rax
call qword [sym.imp.USER32.dll_SetForegroundWindow]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, rbx
jne 0x14007ede7
xor edx, edx
lea ecx, [rdx + 0x1b]
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
xor r9d, r9d
xor ecx, ecx
mov edx, eax
lea r8d, [r9 + 8]
call qword [sym.imp.USER32.dll_keybd_event]
xor edx, edx
lea ecx, [rdx + 0x1b]
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
xor r9d, r9d
xor ecx, ecx
mov edx, eax
lea r8d, [r9 + 0xa]
call qword [sym.imp.USER32.dll_keybd_event]
lea rcx, [rbp - 0x48]
call fcn.14007b9b0
mov rbx, qword [rbp - 0x48]
movabs rax, 0x7fffffffc46535fe
cmp rbx, rax
jg 0x14007ee0c
add rbx, 0x3b9aca00
jmp 0x14007ee16
movabs rbx, 0x7fffffffffffffff
movabs r14, 0xb2f4fc0794908cf3
movabs r15, 0x4e94914effff
movabs r12, 0x431bde82d7b634db
call sub.MSVCP140.dll__Query_perf_frequency
mov rdi, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rdi, 0x989680
jne 0x14007ee53
imul rax, rcx, 0x64
jmp 0x14007eec4
cmp rdi, 0x16e3600
jne 0x14007eea6
mov rax, r14
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
mov rax, r14
imul rcx, rcx, 0x3b9aca00
imul rcx
lea rax, [rcx + rdx]
sar rax, 0x18
mov rcx, rax
shr rcx, 0x3f
add rax, rcx
imul rcx, r8, 0x3b9aca00
jmp 0x14007eec1
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rbx, rax
je 0x14007ef14
jl 0x14007ef14
mov rcx, rbx
sub rcx, rax
cmp rcx, r15
jg 0x14007ef05
mov rax, r12
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14007eef9
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14007ee34
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14007ee34
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400d05a0
mov rdx, qword [0x140144f58]
xorps xmm0, xmm0
sub rdx, qword [0x140144f50]
mov r14d, dword [0x140140004]
movzx r15d, byte [rsp + 0x2d]
movzx r12d, byte [rsp + 0x2c]
movdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rsi
je 0x14007ef83
lea rcx, [rbp - 0x48]
call fcn.14007b760
mov rdx, qword [0x140144f50]
mov rbx, qword [0x140144f58]
mov rdi, qword [rbp - 0x48]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rdi]
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x28]
mov r8d, r14d
lea rdx, [rbp - 0x48]
call fcn.1400cfac0
mov rbx, qword [rbp - 0x78]
lea r8, [rbp + 0x20]
or dword [rbp + 0x20], 1
mov r9d, select
mov rcx, rbx
mov byte [rbp + 0x24], sil
lea edx, [r9 + 2]
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
mov rdx, qword [rbp - 0x68]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movzx eax, byte [rsp + 0x3b]
mov edx, ntohl
movzx ebx, byte [rsp + 0x26]
mov cl, 0x64
movzx edi, byte [rsp + 0x27]
movzx r14d, byte [rsp + 0x28]
mov byte [rbp - 0x67], al
movzx eax, byte [rsp + 0x38]
mov byte [rbp - 0x63], al
movzx eax, byte [rsp + 0x22]
mov byte [rbp - 0x60], al
movzx eax, byte [rsp + 0x37]
mov byte [rbp - 0x5f], al
movzx eax, byte [rsp + 0x25]
mov byte [rbp - 0x5e], al
mov byte [rbp - 0x68], bl
mov byte [rbp - 0x66], dil
mov byte [rbp - 0x65], r14b
mov byte [rbp - 0x64], r15b
mov byte [rbp - 0x62], r12b
mov byte [rbp - 0x61], r13b
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x5d], al
mov cl, 0x21
call fcn.14007b670
mov byte [rbp - 0x5c], al
mov r8d, esi
xor eax, eax
mov byte [rbp - 0x5b], al
nop dword [rax + rax]
movsxd rax, r8d
lea rdx, [rbp - 0x68]
add rdx, rax
lea eax, [r8 + 0x13]
inc r8d
xor byte [rdx], al
cmp r8d, 0xd
jb 0x14007f050
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x68]
mov byte [rbp - 0x5b], sil
call fcn.14007acd0
lea rdx, [0x14007b200]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movzx eax, byte [rsp + 0x3a]
mov edx, 4
mov cl, 0x44
mov byte [rbp - 0x1f], al
mov byte [rbp - 0x20], bl
mov byte [rbp - 0x1e], dil
mov byte [rbp - 0x1d], r14b
call fcn.14007b670
mov byte [rbp - 0x1c], al
mov edx, 6
movzx eax, byte [rsp + 0x21]
mov cl, 0x20
mov byte [rbp - 0x1b], al
call fcn.14007b670
mov byte [rbp - 0x1a], al
mov edx, 8
movzx eax, byte [rsp + 0x3c]
mov cl, reloc.WSOCK32.dll_WSAGetLastError
mov byte [rbp - 0x19], al
call fcn.14007b670
mov byte [rbp - 0x18], al
mov edx, ntohl
movzx eax, byte [rsp + 0x36]
mov cl, 0x63
mov byte [rbp - 0x17], al
movzx eax, byte [rsp + 0x35]
mov byte [rbp - 0x16], al
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ioctlsocket
mov byte [rbp - 0x15], al
mov cl, 0x6c
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_listen
mov byte [rbp - 0x14], al
mov cl, reloc.WSOCK32.dll_WSAGetLastError
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_ntohl
mov byte [rbp - 0x13], al
mov cl, reloc.WSOCK32.dll_WSAStartup
call fcn.14007b670
mov byte [rbp - 0x12], al
mov edx, select
movzx eax, byte [rsp + 0x20]
mov cl, 0x20
mov byte [rbp - 0x11], al
call fcn.14007b670
mov byte [rbp - 0x10], al
mov edx, reloc.WSOCK32.dll_select
movzx eax, byte [rsp + 0x29]
mov cl, 0x68
mov byte [rbp - 0xf], al
call fcn.14007b670
mov edx, setsockopt
mov byte [rbp - 0xe], al
mov cl, 0x69
call fcn.14007b670
mov edx, setsockopt
mov byte [rbp - 0xd], al
mov cl, reloc.WSOCK32.dll_WSAStartup
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_setsockopt
mov byte [rbp - 0xc], al
mov cl, 0x20
call fcn.14007b670
mov edx, reloc.WSOCK32.dll_shutdown
mov byte [rbp - 0xb], al
mov cl, 0x77
call fcn.14007b670
mov edx, 0x17
mov byte [rbp - 0xa], al
mov cl, 0x68
call fcn.14007b670
mov byte [rbp - 9], al
mov edx, 0x18
mov cl, 0x69
call fcn.14007b670
mov edx, 0x19
mov byte [rbp - 8], al
mov cl, 0x6c
call fcn.14007b670
mov edx, 0x1a
mov byte [rbp - 7], al
mov cl, 0x65
call fcn.14007b670
mov edx, 0x1b
mov byte [rbp - 6], al
mov cl, 0x20
call fcn.14007b670
mov edx, 0x1c
mov byte [rbp - 5], al
mov cl, 0x75
call fcn.14007b670
mov edx, 0x1d
mov byte [rbp - 4], al
mov cl, reloc.WSOCK32.dll_WSAStartup
call fcn.14007b670
mov edx, 0x1e
mov byte [rbp - 3], al
mov cl, 0x69
call fcn.14007b670
mov edx, 0x1f
mov byte [rbp - 2], al
mov cl, WSAGetLastError
call fcn.14007b670
mov edx, 0x20
mov byte [rbp - 1], al
mov cl, 0x67
call fcn.14007b670
mov edx, 0x21
mov byte [rbp], al
mov cl, 0x20
call fcn.14007b670
mov edx, 0x22
mov byte [rbp + 1], al
mov cl, 0x57
call fcn.14007b670
mov edx, 0x23
mov byte [rbp + 2], al
mov cl, 0x69
call fcn.14007b670
mov edx, 0x24
mov byte [rbp + 3], al
mov cl, WSAGetLastError
call fcn.14007b670
mov edx, 0x25
mov byte [rbp + 4], al
mov cl, 0x64
call fcn.14007b670
mov edx, 0x26
mov byte [rbp + 5], al
mov cl, 0x2e
call fcn.14007b670
mov byte [rbp + 6], al
xor eax, eax
mov byte [rbp + 7], al
nop dword [rax + rax]
movsxd rax, esi
lea rdx, [rbp - 0x20]
add rdx, rax
lea eax, [rsi + 0x13]
inc esi
xor byte [rdx], al
cmp esi, 0x27
jb 0x14007f290
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x20]
mov byte [rbp + 7], 0
call fcn.14007acd0
lea rdx, [0x14007b200]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rbp - 0x70]
call fcn.1400be9d0
mov rcx, qword [rbp - 0x70]
call fcn.1400ca7e0
xor eax, eax
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.14010aaf0
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret