Function at 0x14007c740
Capabilities:
Create thread
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x430]
sub rsp, 0x530
mov rax, qword [0x14011c028]
xor rax, rsp
mov qword [rbp + 0x420], rax
mov rsi, rcx
xor r14d, r14d
mov rdx, qword [0x1401266b0]
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
sub rax, rdx
cmp rax, 1
jb 0x14007d112
lea rax, [0x1401266a0]
cmp qword [0x1401266b8], 0x10
cmovae rax, qword [0x1401266a0]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
lea r9, [0x1400eb2a0]
lea rcx, [rbp + 0x40]
call fcn.140029850
lea rdx, [rbp + 0x40]
lea rcx, [0x1401262d8]
call fcn.140026390
lea rcx, [rbp + 0x40]
call fcn.140027180
mov rcx, qword [0x140126730]
mov rax, rdi
sub rax, rcx
cmp rax, 1
jb 0x14007d112
lea rax, [0x140126720]
cmp qword [0x140126738], 0x10
cmovae rax, qword [0x140126720]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
lea r9, [0x1400eb2a0]
lea rcx, [rbp + 0x40]
call fcn.140029850
lea rdx, [rbp + 0x40]
lea rcx, [0x140126378]
call fcn.140026390
lea rcx, [rbp + 0x40]
call fcn.140027180
lea rdx, [0x1401262d8]
lea rcx, [rbp + 0x40]
call fcn.1400265a0
nop
lea rdx, [0x140126378]
lea rcx, [rbp - 0x10]
call fcn.1400265a0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
lea r8d, [r14 + 0xd]
lea rdx, str.OnTextOverlay
lea rcx, [rsp + 0x40]
call fcn.140028b80
nop
lea r15, [0x1400039f0]
mov qword [rsp + 0x20], r15
lea r9, [0x140003980]
lea edx, [r14 + 0x40]
lea r8d, [r14 + 7]
lea rcx, [rbp + 0x260]
call fcn.1400d1910
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x80], r14b
mov dword [rbp + 0x60], 2
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
lea rcx, [rbp + 0x80]
call fcn.140027250
nop
mov eax, dword [rbp + 0x60]
mov dword [rbp + 0x260], eax
mov rax, qword [rbp + 0x68]
mov qword [rbp + 0x268], rax
movaps xmm0, xmmword [rbp + 0x70]
movaps xmmword [rbp + 0x270], xmm0
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0x10
cmovae rdx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x90]
lea rcx, [rbp + 0x280]
call fcn.140027250
nop
lea rcx, [rbp + 0x80]
call fcn.140027180
nop
lea rcx, [rsp + 0x40]
call fcn.140027180
mov rax, rdi
mov rcx, qword [rbp + 0x50]
sub rax, rcx
cmp rax, 0x15
jb 0x14007d118
lea r9, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae r9, qword [rbp + 0x40]
mov qword [rsp + 0x30], reloc.WS2_32.dll_setsockopt
lea rax, str.Press_Any_Key_To_Add_
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x40]
call fcn.140029850
nop
mov dword [rbp + 0x2a0], 2
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
lea rcx, [rbp + 0x2c0]
call fcn.140027250
nop
lea rcx, [rsp + 0x40]
call fcn.140027180
mov dword [rsp + 0x20], r14d
lea r9d, [r14 - 1]
lea r8, [rbp + 0x260]
mov rcx, qword [0x140126af0]
call fcn.1400d05a0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14007ca30
imul rax, rax, 0x64
jmp 0x14007ca4b
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7ffffffff4143dff
cmp rax, rcx
jge 0x14007ca66
add rax, 0xbebc200
mov qword [rbp - 0x18], rax
jmp 0x14007ca6a
mov qword [rbp - 0x18], rdi
lea rcx, [rbp - 0x18]
call fcn.14002a4c0
mov ecx, 8
call fcn.1400d1580
lea rcx, [0x140058730]
mov qword [rax], rcx
mov qword [rbp - 0x18], rax
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14002b8e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14007d0fc
cmp dword [rbp + 0x18], 0
jne 0x14007cacc
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x18], eax
jne 0x14007cae3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x40], xmm0
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x14007cb0a
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [0x140126860]
lea rcx, [rbp + 0x60]
call fcn.1400265a0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], r14
xor r8d, r8d
lea rdx, [0x1400eb23b]
lea rcx, [rbp + 0x20]
call fcn.140028b80
nop
mov rax, rdi
mov rcx, qword [rbp + 0x70]
sub rax, rcx
cmp rax, 0x11
jb 0x14007d11e
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rax, qword [rbp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], setsockopt
lea r9, str.Selected_Key_:__w
lea rcx, [rsp + 0x60]
call fcn.140029850
xor r9d, r9d
lea r8d, [r9 + 0x70]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.14004b900
lea rax, [rsp + 0x60]
mov qword [rbp - 0x18], rax
lea rax, [rsp + 0x40]
mov qword [rbp - 0x40], rax
lea rdx, [0x140126438]
lea rcx, [rsp + 0x60]
call fcn.1400265a0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Write_Command_:__w_
lea rcx, [rsp + 0x40]
call fcn.140028b80
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
mov r8d, setsockopt
lea rdx, [0x1400f0548]
lea rcx, [rbp - 0x60]
call fcn.140028b80
nop
mov dword [rsp + 0x20], reloc.WS2_32.dll_ntohs
mov r9, rbx
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x20]
call fcn.14004cb10
movdqa xmm0, xmmword [0x1400f9420]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x100c6b7
mov rcx, r14
nop dword [rax]
lea eax, [rcx - 0x45]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0x12
jb 0x14007cc50
mov byte [rsp + 0x53], 0
lea rax, [rsp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14007cc71
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.1400273b0
mov rax, rdi
mov rcx, qword [rbp]
sub rax, rcx
cmp rax, 0x2e
jb 0x14007d124
lea r9, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r9, qword [rbp - 0x10]
mov qword [rsp + 0x30], gethostbyname
lea rax, str.Pull_Last_Joined_Player_Command___wlastpull
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.140029850
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.14004c970
mov rax, rdi
mov rcx, qword [rbp]
sub rax, rcx
cmp rax, 0x2f
jb 0x14007d12a
lea r9, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r9, qword [rbp - 0x10]
mov qword [rsp + 0x30], gethostbyname
lea rax, str.Enable_Disable_Auto_Spam_Command___wautospam
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.140029850
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.14004c970
mov rax, rdi
mov rcx, qword [rbp]
sub rax, rcx
cmp rax, 0x38
jb 0x14007d130
lea r9, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r9, qword [rbp - 0x10]
mov qword [rsp + 0x30], 0x38
lea rax, str.Enable_Disable_Colored_Auto_Spam_Command___wautospamc
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x60]
call fcn.140029850
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.14004c970
mov rax, qword [rbp]
sub rdi, rax
cmp rdi, 0x1d
jb 0x14007d10c
lea r9, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r9, qword [rbp - 0x10]
mov qword [rsp + 0x30], 0x1d
lea rcx, str.Spam_One_Time_Command___w_
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x60]
call fcn.140029850
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.14004c970
lea rax, [rbp - 0x60]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x38]
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x18], 0xddd3ddf8
mov dword [rbp - 0x14], 0x100acda
mov rcx, r14
nop dword [rax + rax]
lea eax, [rcx - 0x45]
xor byte [rbp + rcx - 0x18], al
inc rcx
cmp rcx, 6
jb 0x14007ce00
mov byte [rbp - 0x11], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
lea rax, [rbp - 0x18]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14007ce30
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x60]
call fcn.140028b80
nop
mov dword [rbp - 0x18], 0xc7d8d7f4
mov word [rbp - 0x14], pe_nt_image_headers64
mov rcx, r14
nop dword [rax + rax]
lea eax, [rcx - 0x45]
xor byte [rbp + rcx - 0x18], al
inc rcx
cmp rcx, 4
jb 0x14007ce60
mov byte [rbp - 0x13], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], r14
lea rax, [rbp - 0x18]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14007ce90
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x38]
call fcn.140028b80
nop
mov dword [rbp - 0x18], 0xd9d2de
mov byte [rbp - 0x14], 1
mov rcx, r14
nop word [rax + rax]
lea eax, [rcx - 0x45]
xor byte [rbp + rcx - 0x18], al
inc rcx
cmp rcx, 3
jb 0x14007cec0
mov byte [rbp - 0x14], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
lea rax, [rbp - 0x18]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14007cef1
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x60]
call fcn.140028b80
nop
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x38]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.14004cf40
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.OnDialogRequest
lea rcx, [rsp + 0x40]
call fcn.140028b80
nop
mov qword [rsp + 0x20], r15
lea r9, [0x140003980]
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rbp + 0xa0]
call fcn.1400d1910
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
mov dword [rsp + 0x60], 2
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
lea rcx, [rbp - 0x80]
call fcn.140027250
nop
mov eax, dword [rsp + 0x60]
mov dword [rbp + 0xa0], eax
mov rax, qword [rsp + 0x68]
mov qword [rbp + 0xa8], rax
movaps xmm0, xmmword [rsp + 0x70]
movaps xmmword [rbp + 0xb0], xmm0
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
lea rcx, [rbp + 0xc0]
call fcn.140027250
nop
lea rcx, [rbp - 0x80]
call fcn.140027180
nop
lea rcx, [rsp + 0x40]
call fcn.140027180
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.1400265a0
nop
mov dword [rbp + 0xe0], 2
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
lea rcx, [rbp + 0x100]
call fcn.140027250
nop
lea rcx, [rsp + 0x60]
call fcn.140027180
mov dword [rsp + 0x20], r14d
mov r9d, 0xffffffff
lea r8, [rbp + 0xa0]
mov rcx, qword [0x140126af0]
call fcn.1400d05a0
mov rax, qword [rsi]
mov byte [rax], 1
mov r9, r15
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rbp + 0xa0]
call fcn.1400d15bc
nop
lea rcx, [rbp + 0x20]
call fcn.140027180
nop
lea rcx, [rbp + 0x60]
call fcn.140027180
nop
cmp dword [rbp + 0x18], 0
je 0x14007d0a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov r9, r15
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rbp + 0x260]
call fcn.1400d15bc
nop
lea rcx, [rbp - 0x10]
call fcn.140027180
nop
lea rcx, [rbp + 0x40]
call fcn.140027180
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.1400d1560
lea r11, [rsp + 0x530]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov dword [rbp + 0x18], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.140003100
nop
call fcn.140003100
nop
call fcn.140003100
nop
call fcn.140003100
int3
call fcn.140003100
int3
call fcn.140003100
int3
call fcn.140003100
int3