Function at 0x140007170
Capabilities:
Encode data using xor
Enumerate processes
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3b0]
sub rsp, 0x4b0
lea rcx, [0x1400b67d0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
movdqa xmm0, xmmword [0x1400b6b50]
xor edi, edi
movdqa xmm1, xmmword [0x1400b6bb0]
mov ecx, edi
movdqu xmmword [rsp + 0x50], xmm0
mov edx, edi
mov word [rbp - 0x80], 0x7b
movdqa xmm0, xmmword [0x1400b6ad0]
movdqu xmmword [rsp + 0x70], xmm0
movdqu xmmword [rsp + 0x60], xmm1
nop word [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x50], al
movsxd rdx, ecx
cmp rdx, 0x31
jb 0x1400071e0
mov rsi, 0xffffffffffffffff
mov byte [rbp - 0x7f], dil
mov r8, rsi
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xe0], rdi
lea rax, [rsp + 0x50]
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
nop
inc r8
cmp byte [rax + r8], dil
jne 0x140007220
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xd0]
call fcn.14000af90
movdqa xmm0, xmmword [0x1400b6b50]
xor eax, eax
movdqa xmm1, xmmword [0x1400b6bb0]
mov ecx, edi
movdqu xmmword [rsp + 0x50], xmm0
mov rdx, rdi
mov word [rbp - 0x80], 0x7c63
movdqa xmm0, xmmword [0x1400b6b10]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rbp - 0x7e], al
movdqu xmmword [rsp + 0x60], xmm1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x50], al
movsxd rdx, ecx
cmp rdx, 0x32
jb 0x140007280
mov byte [rbp - 0x7e], dil
lea rax, [rsp + 0x50]
mov qword [rbp + 0x130], rdi
mov r8, rsi
mov qword [rbp + 0x140], rdi
mov qword [rbp + 0x148], reloc.WS2_32.dll_ntohs
inc r8
cmp byte [rax + r8], dil
jne 0x1400072b7
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x130]
call fcn.14000af90
movdqa xmm0, xmmword [0x1400b6b50]
mov ecx, edi
movdqa xmm1, xmmword [0x1400b6bb0]
mov rdx, rdi
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rbp - 0x80], 0x20687f65
movdqa xmm0, xmmword [0x1400b6af0]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x7c], 0x61787f
movdqu xmmword [rsp + 0x60], xmm1
nop
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x50], al
movsxd rdx, ecx
cmp rdx, 0x37
jb 0x140007310
mov byte [rbp - 0x79], dil
lea rax, [rsp + 0x50]
mov qword [rbp + 0x110], rdi
mov r8, rsi
mov qword [rbp + 0x120], rdi
mov qword [rbp + 0x128], reloc.WS2_32.dll_ntohs
inc r8
cmp byte [rax + r8], dil
jne 0x140007347
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x110]
call fcn.14000af90
movdqa xmm0, xmmword [0x1400b6b50]
mov ecx, edi
movdqa xmm1, xmmword [0x1400b6bb0]
mov rdx, rdi
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rbp - 0x80], 0x61647f79
movdqa xmm0, xmmword [0x1400b6b00]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x7c], 0x7a613e61
movdqu xmmword [rsp + 0x60], xmm1
mov word [rbp - 0x78], 0x63
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x50], al
movsxd rdx, ecx
cmp rdx, 0x39
jb 0x1400073b0
mov byte [rbp - 0x77], dil
lea rax, [rsp + 0x50]
mov qword [rbp + 0xf0], rdi
mov r8, rsi
mov qword [rbp + 0x100], rdi
mov qword [rbp + 0x108], reloc.WS2_32.dll_ntohs
inc r8
cmp byte [rax + r8], dil
jne 0x1400073e7
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14000af90
mov ecx, edi
mov word [rbp + 0x3e0], 0xec
mov rdx, rdi
nop
lea eax, [rcx - 0x25]
inc ecx
xor byte [rbp + rdx + 0x3e0], al
movsxd rdx, ecx
cmp rdx, 1
jb 0x140007410
mov byte [rbp + 0x3e1], dil
lea rax, [rbp + 0x3e0]
mov qword [rbp + 0x90], rdi
mov r8, rsi
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xa8], reloc.WS2_32.dll_ntohs
nop
inc r8
cmp byte [rax + r8], dil
jne 0x140007450
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x90]
call fcn.14000af90
mov ecx, edi
mov dword [rbp + 0x3e0], 0xaeaea9a8
mov rdx, rdi
mov dword [rbp + 0x3e4], 0x858eba
nop word [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rbp + rdx + 0x3e0], al
movsxd rdx, ecx
cmp rdx, 7
jb 0x140007490
mov byte [rbp + 0x3e7], dil
lea rax, [rbp + 0x3e0]
mov qword [rbp + 0x70], rdi
mov r8, rsi
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x1400074d0
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x70]
call fcn.14000af90
mov ecx, edi
mov dword [rbp + 0x3e0], 0xaea989
mov rdx, rdi
nop dword [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rbp + rdx + 0x3e0], al
movsxd rdx, ecx
cmp rdx, 3
jb 0x140007500
lea rdx, [rbp + 0x3e0]
mov byte [rbp + 0x3e3], dil
xor ecx, ecx
call fcn.14006d598
lea rcx, [rbp + 0x10]
call fcn.1400039b0
cmp qword [rbp + 0x28], 0x10
lea rdx, [rbp + 0x10]
mov r8, qword [rbp + 0x20]
cmovae rdx, qword [rbp + 0x10]
call fcn.14000e390
mov rcx, rax
call fcn.14000cc70
mov ecx, edi
mov dword [rbp + 0x3e0], 0xbab4abb3
mov rdx, rdi
mov word [rbp + 0x3e4], 0xe2
nop word [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rbp + rdx + 0x3e0], al
movsxd rdx, ecx
cmp rdx, 5
jb 0x140007570
mov byte [rbp + 0x3e5], dil
lea rax, [rbp + 0x3e0]
mov qword [rbp - 0x70], rdi
mov r8, rsi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
inc r8
cmp byte [rax + r8], dil
jne 0x1400075a6
lea rdx, [rbp + 0x3e0]
mov qword [rsp + 0x4e8], rbx
lea rcx, [rbp - 0x70]
call fcn.14000af90
cmp qword [rbp + 0x28], 0x10
lea r9, [rbp + 0x10]
mov rcx, qword [rbp - 0x58]
cmovae r9, qword [rbp + 0x10]
mov rax, rcx
mov r15, qword [rbp - 0x60]
mov r14, qword [rbp + 0x20]
sub rax, r15
cmp r14, rax
ja 0x14000761a
cmp rcx, 0x10
lea rax, [r15 + r14]
lea rbx, [rbp - 0x70]
mov qword [rbp - 0x60], rax
cmovae rbx, qword [rbp - 0x70]
mov r8, r14
mov rdx, r9
lea rcx, [rbx + r15]
call fcn.1400688f0
lea rax, [rbx + r14]
mov byte [rax + r15], dil
jmp 0x14000762b
mov rdx, r14
mov qword [rsp + 0x20], r14
lea rcx, [rbp - 0x70]
call fcn.14000d680
mov r14, qword [rbp - 0x60]
lea r12, [rbp - 0x70]
xor r15b, r15b
mov qword [rbp - 0x10], rdi
cmp qword [rbp - 0x58], 0x10
movabs r13, 0x7fffffffffffffff
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
cmovae r12, qword [rbp - 0x70]
mov qword [rbp], rdi
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x40], rdi
cmp r14, 0x10
jae 0x140007695
movups xmm0, xmmword [r12]
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
movups xmmword [rsp + 0x30], xmm0
jmp 0x140007707
mov rbx, r14
or rbx, 0xf
cmp rbx, r13
cmova rbx, r13
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400076df
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140008d14
mov rcx, rax
call fcn.140066a84
mov rcx, rax
test rax, rax
je 0x140008d1a
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400076ee
test rcx, rcx
je 0x1400076eb
call fcn.140066a84
jmp 0x1400076ee
mov rax, rdi
lea r8, [r14 + 1]
mov qword [rsp + 0x30], rax
mov rdx, r12
mov rcx, rax
call fcn.1400688f0
mov qword [rsp + 0x48], rbx
cmp qword [rbp + 0xe8], 0x10
lea r12, [rbp + 0xd0]
mov qword [rsp + 0x40], r14
mov r14, qword [rbp + 0xe0]
cmovae r12, qword [rbp + 0xd0]
cmp r14, 0x10
jae 0x140007743
movups xmm0, xmmword [r12]
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
movups xmmword [rbp - 0x50], xmm0
jmp 0x1400077b3
mov rbx, r14
or rbx, 0xf
cmp rbx, r13
cmova rbx, r13
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000778d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140008d14
mov rcx, rax
call fcn.140066a84
mov rcx, rax
test rax, rax
je 0x140008d1a
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000779c
test rcx, rcx
je 0x140007799
call fcn.140066a84
jmp 0x14000779c
mov rax, rdi
lea r8, [r14 + 1]
mov qword [rbp - 0x50], rax
mov rdx, r12
mov rcx, rax
call fcn.1400688f0
mov qword [rbp - 0x38], rbx
lea r8, [rsp + 0x30]
mov qword [rbp - 0x40], r14
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xb0]
call fcn.140004610
cmp qword [rax + 0x18], 0x10
jb 0x1400077d6
mov rax, qword [rax]
mov qword [rbp - 0x50], rdi
mov r8, rsi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x1400077f0
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.14000af90
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x30]
call fcn.140003e40
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x14000784d
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007848
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008d1a
call fcn.140066814
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x14000788e
mov rcx, qword [rbp + 0xb0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007889
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008d1a
call fcn.140066814
mov r14d, edi
cmp qword [rbp - 0x20], rdi
jbe 0x14000795f
mov rbx, rdi
nop
cmp qword [rbp - 0x18], 0x10
lea rax, [rbp - 0x30]
cmovae rax, qword [rbp - 0x30]
cmp byte [rax + rbx], 0x5f
jne 0x1400078bc
mov r15b, 1
jmp 0x14000794c
lea rax, [rbp - 0x30]
test r15b, r15b
jne 0x140007907
cmp qword [rbp - 0x18], 0x10
mov rcx, qword [rbp + 0x60]
cmovae rax, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x68]
movzx r9d, byte [rax + rbx]
cmp rcx, rdx
jae 0x140007901
lea rax, [rcx + 1]
cmp rdx, 0x10
mov qword [rbp + 0x60], rax
lea rax, [rbp + 0x50]
cmovae rax, qword [rbp + 0x50]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], dil
jmp 0x14000794c
lea rcx, [rbp + 0x50]
jmp 0x140007947
cmp qword [rbp - 0x18], 0x10
mov rcx, qword [rbp + 0x40]
cmovae rax, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x48]
movzx r9d, byte [rax + rbx]
cmp rcx, rdx
jae 0x140007943
lea rax, [rcx + 1]
cmp rdx, 0x10
mov qword [rbp + 0x40], rax
lea rax, [rbp + 0x30]
cmovae rax, qword [rbp + 0x30]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], dil
jmp 0x14000794c
lea rcx, [rbp + 0x30]
call fcn.14000d920
inc r14d
inc rbx
movsxd rax, r14d
cmp rax, qword [rbp - 0x20]
jb 0x1400078a0
cmp qword [rbp + 0x68], 0x10
lea rcx, [rbp + 0x50]
cmovae rcx, qword [rbp + 0x50]
call fcn.140072ad0
mov r13, qword [rbp + 0x70]
cmp eax, 0x1be202
je 0x140008657
cmp eax, 0x9809eb
je 0x1400082c7
cmp eax, 0x2e133bdd
jne 0x1400089d2
cmp qword [rbp - 0x58], 0x10
lea rax, [rbp - 0x70]
mov qword [rbp - 0x60], rdi
mov ecx, edi
cmovae rax, qword [rbp - 0x70]
mov rdx, rdi
mov dword [rsp + 0x30], 0xadafb9ad
mov dword [rsp + 0x34], 0xdf8f8fb6
mov byte [rax], dil
xor eax, eax
mov byte [rsp + 0x38], al
nop word [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x30], al
movsxd rdx, ecx
cmp rdx, 8
jb 0x1400079d0
mov byte [rsp + 0x38], dil
lea rax, [rsp + 0x30]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], dil
jne 0x1400079f0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.14000af90
cmp qword [rbp + 0xa8], 0x10
lea rdx, [rbp + 0x90]
mov r8, qword [rbp + 0xa0]
lea rcx, [rbp - 0x70]
cmovae rdx, qword [rbp + 0x90]
call fcn.140009890
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x150]
call fcn.140009a00
lea rdx, [rbp + 0xf0]
mov rbx, rax
lea rcx, [rsp + 0x50]
call fcn.140009a00
mov r8, rbx
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.140004610
cmp qword [rax + 0x18], 0x10
jb 0x140007a6c
mov rax, qword [rax]
mov qword [rbp - 0x50], rdi
mov r8, rsi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
nop
inc r8
cmp byte [rax + r8], dil
jne 0x140007a80
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.14000af90
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xb0]
call fcn.140003e40
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140009970
lea rcx, [rbp + 0xb0]
call fcn.140009910
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140007af8
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007af3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008d20
call fcn.140066814
lea rcx, [rsp + 0x30]
call fcn.140009910
cmp qword [rbp + 0x88], 0x10
lea r8, [rbp + 0x70]
mov r10, qword [rbp - 0x18]
lea rax, [rbp - 0x30]
mov r9, qword [rbp - 0x30]
cmovae r8, r13
cmp r10, 0x10
cmovae rax, r9
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140007b43
inc rax
test ecx, ecx
jne 0x140007b30
test edx, edx
jne 0x140007b88
movdqa xmm0, xmmword [0x1400b6a60]
xor eax, eax
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x42], al
mov rcx, rdi
mov word [rsp + 0x40], 0xe606
nop word [rax + rax]
lea eax, [rdi - 0x25]
inc edi
xor byte [rsp + rcx + 0x30], al
movsxd rcx, edi
cmp rcx, 0x12
jae 0x140008cd0
jmp 0x140007b70
cmp qword [rbp + 0xa8], 0x10
lea r8, [rbp + 0x90]
lea rax, [rbp - 0x30]
cmovae r8, qword [rbp + 0x90]
cmp r10, 0x10
cmovae rax, r9
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140007bc3
inc rax
test ecx, ecx
jne 0x140007bb0
test edx, edx
je 0x140007c08
movdqa xmm0, xmmword [0x1400b6b80]
mov rcx, rdi
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0xe1f1d18
mov dword [rsp + 0x44], 0x121a151f
mov word [rsp + 0x48], 0xf9
nop
lea eax, [rdi - 0x25]
inc edi
xor byte [rsp + rcx + 0x30], al
movsxd rcx, edi
cmp rcx, 0x19
jae 0x140008cf2
jmp 0x140007bf0
cmp qword [rbp + 0x48], 0x10
lea rcx, [rbp + 0x30]
cmovae rcx, qword [rbp + 0x30]
call fcn.140072ad0
mov ecx, eax
cmp eax, 0x15180
jg 0x140007c2b
mov ebx, 1
jmp 0x140007c40
mov eax, 0xc22e4507
imul ecx
add edx, ecx
sar edx, 0x10
mov ebx, edx
shr ebx, 0x1f
inc ebx
add ebx, edx
cmp qword [rbp - 0x18], 0x10
lea rdx, [rbp - 0x30]
movdqa xmm0, xmmword [0x1400b6ba0]
mov ecx, edi
cmovae rdx, qword [rbp - 0x30]
mov r8, rdi
xor eax, eax
mov dword [rsp + 0x40], 0xe49ec9cb
mov byte [rsp + 0x44], al
movdqu xmmword [rsp + 0x30], xmm0
nop
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + r8 + 0x30], al
movsxd r8, ecx
cmp r8, 0x14
jb 0x140007c70
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x44], dil
call fcn.140001280
movdqa xmm0, xmmword [0x1400b6b90]
mov ecx, edi
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0xe484c9cb
mov r8, rdi
mov dword [rsp + 0x44], 0xf8fbfae5
mov word [rsp + 0x48], 0xf9
nop dword [rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + r8 + 0x30], al
movsxd r8, ecx
cmp r8, 0x19
jb 0x140007cc0
mov edx, ebx
mov byte [rsp + 0x49], dil
lea rcx, [rsp + 0x30]
call fcn.140001280
call fcn.140006d10
lea rcx, [0x140605260]
call fcn.14000cc70
movdqa xmm0, xmmword [0x1400b6a30]
mov ecx, edi
movdqu xmmword [rsp + 0x30], xmm0
mov rdx, rdi
nop dword [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x30], al
movsxd rdx, ecx
cmp rdx, 0xf
jb 0x140007d10
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x3f], dil
call fcn.140001280
mov r15d, 0x7025
nop word [rax + rax]
mov dword [rsp + 0x30], 0x8fae8f98
mov ecx, edi
mov dword [rsp + 0x34], 0x8f9b8fa4
mov rdx, rdi
mov dword [rsp + 0x38], 0x8fa78f91
mov dword [rsp + 0x3c], 0x8fac8fa8
mov dword [rsp + 0x40], 0x8fa6
nop dword [rax]
movzx eax, cx
inc ecx
sub ax, r15w
xor word [rsp + rdx*2 + 0x30], ax
movsxd rdx, ecx
cmp rdx, 9
jb 0x140007d70
xor edx, edx
mov word [rsp + 0x42], di
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140007dab
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140007d40
lea rcx, [0x140605260]
call fcn.14000cc70
mov r13, qword [rbp + 0x70]
mov ecx, edi
mov r14, qword [rbp + 0x88]
mov rdx, rdi
mov dword [rsp + 0x30], 0x8fae8f98
mov dword [rsp + 0x34], 0x8f9b8fa4
mov dword [rsp + 0x38], 0x8fa78f91
mov dword [rsp + 0x3c], 0x8fac8fa8
mov dword [rsp + 0x40], 0x8fa6
nop
movzx eax, cx
inc ecx
sub ax, r15w
xor word [rsp + rdx*2 + 0x30], ax
movsxd rdx, ecx
cmp rdx, 9
jb 0x140007df0
xor edx, edx
mov word [rsp + 0x42], di
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_FindWindowW]
mov dword [rsp + 0x30], 0x8fbd8f9c
mov ecx, edi
mov qword [0x140606b78], rax
mov rdx, rdi
xor eax, eax
mov dword [rsp + 0x34], 0x8fbb8fb0
mov word [rsp + 0x4c], ax
mov dword [rsp + 0x38], 0x8f858f9c
mov dword [rsp + 0x3c], 0x8f968f8f
mov dword [rsp + 0x40], 0x8f968f86
mov dword [rsp + 0x44], 0x8f838fcb
mov dword [rsp + 0x48], 0x8f8d8f9f
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
inc ecx
sub ax, r15w
xor word [rsp + rdx*2 + 0x30], ax
movsxd rdx, ecx
cmp rdx, 0xe
jb 0x140007e70
xor edx, edx
mov word [rsp + 0x4c], di
mov dword [rbp + 0x170], 0x238
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rcx, rax
lea rdx, [rbp + 0x170]
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x140007f25
lea rdx, [rbp + 0x170]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
jne 0x140007f25
nop
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x19c]
call fcn.140070cd8
test eax, eax
jne 0x140007f10
mov r8d, dword [rbp + 0x178]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rcx, rax
xor edx, edx
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x170]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x140007ed0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x140605260]
call fcn.14000cc70
cmp qword [0x140606b78], rdi
je 0x1400089d9
call fcn.140003260
mov rbx, rax
mov dword [rsp + 0x30], 0x8fbd8f9c
xor eax, eax
mov dword [rsp + 0x34], 0x8fbb8fb0
mov word [rsp + 0x40], ax
mov ecx, edi
mov dword [rsp + 0x38], 0x8f858ff1
mov rdx, rdi
mov dword [rsp + 0x3c], 0x8f878f99
nop dword [rax + rax]
movzx eax, cx
inc ecx
sub ax, r15w
xor word [rsp + rdx*2 + 0x30], ax
movsxd rdx, ecx
cmp rdx, 8
jb 0x140007f80
lea rcx, [rsp + 0x30]
mov word [rsp + 0x40], di
call fcn.140002520
mov dword [rbx], eax
mov edx, 9
mov rbx, qword [0x140606b78]
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
lea rcx, [rsp + 0x50]
call fcn.140005ab0
mov ecx, 0x78
call fcn.140066a84
mov r8, qword [0x140606b78]
mov rcx, rax
mov rdx, qword [rsp + 0x50]
call fcn.140005d50
mov rdx, qword [0x1406073d8]
mov qword [0x1406073d8], rax
test rdx, rdx
je 0x140008006
call fcn.14000abe0
movabs rsi, 0x1425f4f08
movabs r12, 0x1425f4158
movabs r14, 0x1425fb460
movabs r13, 0x142378188
nop
mov dword [rsp + 0x30], 0x8fae8f98
mov ecx, edi
mov dword [rsp + 0x34], 0x8f9b8fa4
mov rdx, rdi
mov dword [rsp + 0x38], 0x8fa78f91
mov dword [rsp + 0x3c], 0x8fac8fa8
mov dword [rsp + 0x40], 0x8fa6
nop dword [rax]
movzx eax, cx
inc ecx
sub ax, r15w
xor word [rsp + rdx*2 + 0x30], ax
movsxd rdx, ecx
cmp rdx, 9
jb 0x140008060
xor edx, edx
mov word [rsp + 0x42], di
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140008287
mov rbx, qword [0x1406073d8]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 0x180]
mov rcx, qword [rbx + 8]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x178]
mov rax, qword [0x1406073c0]
mov rcx, r12
mov qword [0x1406073c8], rax
call fcn.140003650
test rax, rax
je 0x140008221
mov rcx, rsi
call fcn.140003650
mov rbx, rax
test rax, rax
je 0x140008221
mov rcx, r14
call fcn.140003650
test rax, rax
je 0x140008221
mov rcx, r13
call fcn.140003650
mov rcx, rax
call fcn.140005a30
mov r12, rax
test rax, rax
je 0x140008217
mov rcx, rbx
call fcn.140005950
mov rsi, rax
test rax, rax
je 0x14000820d
mov rcx, rbx
call fcn.1400059e0
test eax, eax
je 0x14000820d
mov edx, eax
mov rcx, rsi
call fcn.140005140
mov r14, rax
test rax, rax
je 0x140008203
mov rcx, rax
call fcn.1400050f0
test al, al
je 0x140008203
mov rcx, rsi
call fcn.140005350
mov r15, qword [0x1406073c8]
mov rsi, qword [0x1406073c0]
cmp rsi, r15
je 0x1400081f6
nop word [rax + rax]
mov rbx, qword [rsi]
test rbx, rbx
je 0x1400081e6
cmp rbx, r14
je 0x1400081e6
mov rdx, r14
mov rcx, rbx
call fcn.140006cc0
test eax, eax
je 0x1400081e6
mov rcx, rbx
call fcn.1400050f0
test al, al
je 0x1400081e6
lea rcx, [rbx + 0x10]
call fcn.140003650
mov rbx, rax
test rax, rax
je 0x1400081e6
mov rcx, rax
call fcn.140005050
test rax, rax
je 0x1400081e6
movaps xmm0, xmmword [0x1400b6ac0]
lea r8, [rsp + 0x30]
xorps xmm3, xmm3
movdqa xmmword [rsp + 0x30], xmm0
mov rdx, r12
mov rcx, rbx
call fcn.140006980
add rsi, 0x10
cmp rsi, r15
jne 0x140008180
mov rsi, qword [0x1406073c0]
mov qword [0x1406073c8], rsi
mov r15d, 0x7025
movabs r14, 0x1425fb460
movabs rsi, 0x1425f4f08
movabs r12, 0x1425f4158
mov rbx, qword [0x1406073d8]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 0x188]
mov rcx, qword [rbx]
xor r8d, r8d
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140008277
mov rcx, qword [0x1406073d8]
call fcn.140006630
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140008030
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp qword [rsp + 0x70], 0x10
lea rcx, [rsp + 0x58]
mov rdx, rax
cmovae rcx, qword [rsp + 0x58]
call qword [sym.imp.USER32.dll_UnregisterClassA]
lea rcx, [rsp + 0x58]
call fcn.140009910
mov r13, qword [rbp + 0x70]
jmp 0x1400089d2
movdqa xmm0, xmmword [0x1400b6aa0]
xor eax, eax
movdqa xmm1, xmmword [0x1400b6a70]
mov ecx, edi
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x74], al
mov rdx, rdi
movdqu xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x70], 0xdec71815
nop word [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x50], al
movsxd rdx, ecx
cmp rdx, 0x24
jb 0x140008300
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x74], dil
call fcn.140001280
lea rdx, [rbp - 0x10]
call fcn.14000d1e0
cmp qword [rbp], rdi
je 0x140008321
cmp qword [rbp - 0x58], 0x10
lea rax, [rbp - 0x70]
mov qword [rbp - 0x60], rdi
mov ecx, edi
cmovae rax, qword [rbp - 0x70]
mov rdx, rdi
mov dword [rbp + 0x3e0], 0xbab4abb3
mov word [rbp + 0x3e4], 0xe2
mov byte [rax], dil
nop dword [rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rbp + rdx + 0x3e0], al
movsxd rdx, ecx
cmp rdx, 5
jb 0x140008360
mov byte [rbp + 0x3e5], dil
lea rax, [rbp + 0x3e0]
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x140008386
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp - 0x70]
call fcn.14000af90
cmp qword [rbp + 0x28], 0x10
lea rdx, [rbp + 0x10]
mov r8, qword [rbp + 0x20]
lea rcx, [rbp - 0x70]
cmovae rdx, qword [rbp + 0x10]
call fcn.140009890
mov ecx, edi
mov dword [rbp + 0x3e0], 0xb1afacfd
mov rdx, rdi
mov dword [rbp + 0x3e4], 0xdc8fb2
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rbp + rdx + 0x3e0], al
movsxd rdx, ecx
cmp rdx, 7
jb 0x1400083e0
mov byte [rbp + 0x3e7], dil
lea rax, [rbp + 0x3e0]
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x140008406
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp - 0x70]
call fcn.140009890
cmp qword [rbp + 8], 0x10
lea rdx, [rbp - 0x10]
mov r8, qword [rbp]
lea rcx, [rbp - 0x70]
cmovae rdx, qword [rbp - 0x10]
call fcn.140009890
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x50]
call fcn.140009a00
lea rdx, [rbp + 0x110]
mov rbx, rax
lea rcx, [rbp + 0x150]
call fcn.140009a00
mov r8, rbx
lea rcx, [rbp + 0xb0]
mov rdx, rax
call fcn.140004610
cmp qword [rax + 0x18], 0x10
jb 0x14000847a
mov rax, qword [rax]
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], dil
jne 0x140008490
mov r8, rsi
lea rcx, [rbp - 0x50]
mov rdx, rax
call fcn.14000af90
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.140003e40
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140009970
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1400084ff
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400084fa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008d26
call fcn.140066814
mov rdx, qword [rbp - 0x38]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x30], dil
cmp rdx, 0x10
jb 0x14000854d
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008548
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008d26
call fcn.140066814
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x14000858e
mov rcx, qword [rbp + 0xb0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008589
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008d26
call fcn.140066814
cmp qword [rbp - 0x18], 0x10
lea rcx, [rbp - 0x30]
cmovae rcx, qword [rbp - 0x30]
call fcn.140072ad0
cmp eax, 0x8da7f4
je 0x140008601
cmp eax, 0xadaff8e
jne 0x1400089d2
movdqa xmm0, xmmword [0x1400b6a90]
mov ecx, edi
movdqa xmm1, xmmword [0x1400b6a80]
mov rdx, rdi
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x70], 0xf1
movdqu xmmword [rsp + 0x60], xmm1
nop dword [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x50], al
movsxd rdx, ecx
cmp rdx, 0x21
jb 0x1400085e0
mov byte [rsp + 0x71], dil
lea rcx, [rsp + 0x50]
jmp 0x1400089cd
movdqa xmm0, xmmword [0x1400b6a40]
mov ecx, edi
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x1c070ccb
mov rdx, rdi
mov dword [rsp + 0x44], 0x2191207
mov dword [rsp + 0x48], 0x1b15161d
mov word [rsp + 0x4c], 0xfd
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x30], al
movsxd rdx, ecx
cmp rdx, 0x1d
jb 0x140008640
jmp 0x1400089c3
movdqa xmm0, xmmword [0x1400b6a50]
xor eax, eax
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x42], al
mov ecx, edi
mov word [rsp + 0x40], 0xccd1
mov rdx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x30], al
movsxd rdx, ecx
cmp rdx, 0x12
jb 0x140008680
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x42], dil
call fcn.140001280
lea rdx, [rbp - 0x10]
call fcn.14000d1e0
cmp qword [rbp], rdi
je 0x1400086a1
cmp qword [rbp - 0x58], 0x10
lea rax, [rbp - 0x70]
mov qword [rbp - 0x60], rdi
mov ecx, edi
cmovae rax, qword [rbp - 0x70]
mov rdx, rdi
mov dword [rbp + 0x3e0], 0xbab4abb3
mov word [rbp + 0x3e4], 0xe2
mov byte [rax], dil
nop dword [rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rbp + rdx + 0x3e0], al
movsxd rdx, ecx
cmp rdx, 5
jb 0x1400086e0
mov byte [rbp + 0x3e5], dil
lea rax, [rbp + 0x3e0]
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x140008706
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp - 0x70]
call fcn.14000af90
cmp qword [rbp + 0x28], 0x10
lea rdx, [rbp + 0x10]
mov r8, qword [rbp + 0x20]
lea rcx, [rbp - 0x70]
cmovae rdx, qword [rbp + 0x10]
call fcn.140009890
mov ecx, edi
mov dword [rbp + 0x3e0], 0xb1afacfd
mov rdx, rdi
mov dword [rbp + 0x3e4], 0xdc8fb2
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rbp + rdx + 0x3e0], al
movsxd rdx, ecx
cmp rdx, 7
jb 0x140008760
mov byte [rbp + 0x3e7], dil
lea rax, [rbp + 0x3e0]
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x140008786
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp - 0x70]
call fcn.140009890
cmp qword [rbp + 8], 0x10
lea rdx, [rbp - 0x10]
mov r8, qword [rbp]
lea rcx, [rbp - 0x70]
cmovae rdx, qword [rbp - 0x10]
call fcn.140009890
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x50]
call fcn.140009a00
lea rdx, [rbp + 0x130]
mov rbx, rax
lea rcx, [rbp + 0x150]
call fcn.140009a00
mov r8, rbx
lea rcx, [rbp + 0xb0]
mov rdx, rax
call fcn.140004610
cmp qword [rax + 0x18], 0x10
jb 0x1400087fa
mov rax, qword [rax]
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], dil
jne 0x140008810
mov r8, rsi
lea rcx, [rbp - 0x50]
mov rdx, rax
call fcn.14000af90
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.140003e40
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140009970
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14000887f
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000887a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008d2c
call fcn.140066814
mov rdx, qword [rbp - 0x38]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x30], dil
cmp rdx, 0x10
jb 0x1400088cd
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400088c8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008d2c
call fcn.140066814
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x14000890e
mov rcx, qword [rbp + 0xb0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008909
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008d2c
call fcn.140066814
cmp qword [rbp - 0x18], 0x10
lea rcx, [rbp - 0x30]
cmovae rcx, qword [rbp - 0x30]
call fcn.140072ad0
cmp eax, 0x8da7f4
je 0x14000897e
cmp eax, 0xadaff8e
jne 0x1400089d2
movdqa xmm0, xmmword [0x1400b6a90]
mov ecx, edi
movdqa xmm1, xmmword [0x1400b6a80]
mov rdx, rdi
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x70], 0xf1
movdqu xmmword [rsp + 0x60], xmm1
nop dword [rax + rax]
lea eax, [rcx - 0x25]
inc ecx
xor byte [rsp + rdx + 0x50], al
movsxd rdx, ecx
cmp rdx, 0x21
jb 0x140008960
mov byte [rsp + 0x71], dil
lea rcx, [rsp + 0x50]
jmp 0x1400089cd
movdqa xmm0, xmmword [0x1400b6a40]
mov edx, edi
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x1c070ccb
mov r8, rdi
mov dword [rsp + 0x44], 0x2191207
mov dword [rsp + 0x48], 0x1b15161d
mov word [rsp + 0x4c], 0xfd
lea eax, [rdx - 0x25]
inc edx
xor byte [rsp + r8 + 0x30], al
movsxd r8, edx
cmp r8, 0x1d
jb 0x1400089b0
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x4d], dil
call fcn.140001280
mov r14, qword [rbp + 0x88]
mov rcx, qword [0x1406073d8]
call fcn.140006630
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x30]
call fcn.140009910
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x140008a34
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008a2f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008cca
call fcn.140066814
mov rdx, qword [rbp + 0x68]
mov qword [rbp + 0x40], rdi
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], dil
cmp rdx, 0x10
jb 0x140008a7f
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008a7a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008cca
call fcn.140066814
mov rdx, qword [rbp + 8]
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x50], dil
cmp rdx, 0x10
jb 0x140008aca
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008ac5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008cca
call fcn.140066814
mov rdx, qword [rbp - 0x58]
mov qword [rbp], rdi
mov qword [rbp + 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x10], dil
cmp rdx, 0x10
jb 0x140008b15
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008b10
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008cca
call fcn.140066814
lea rcx, [rbp + 0x10]
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], dil
call fcn.140009910
cmp r14, 0x10
jb 0x140008b65
lea rdx, [r14 + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x140008b5d
mov r13, qword [r13 - 8]
add rdx, 0x27
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008cca
mov rcx, r13
call fcn.140066814
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x140008ba6
mov rcx, qword [rbp + 0x90]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008ba1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008cca
call fcn.140066814
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x140008be7
mov rcx, qword [rbp + 0xf0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008be2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008cca
call fcn.140066814
mov rdx, qword [rbp + 0x128]
cmp rdx, 0x10
jb 0x140008c28
mov rcx, qword [rbp + 0x110]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c23
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008cca
call fcn.140066814
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x140008c65
mov rcx, qword [rbp + 0x130]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c60
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008cca
call fcn.140066814
mov rax, qword [rbp + 0xe8]
cmp rax, 0x10
jb 0x140008ca3
mov rcx, qword [rbp + 0xd0]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c9e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008cca
call fcn.140066814
mov rbx, qword [rsp + 0x4e8]
lea r11, [rsp + 0x4b0]
mov rsi, qword [r11 + 0x40]
xor eax, eax
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14007301c
int3
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x42], 0
call fcn.140001280
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call fcn.14006d2b0
int3
lea rcx, [rsp + 0x30]
mov byte [rsp + 0x49], 0
call fcn.140001280
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call fcn.14006d2b0
int3
call fcn.140001430
int3
call fcn.14007301c
int3
call fcn.14007301c
int3
call fcn.14007301c
int3
call fcn.14007301c
int3