Function at 0x140016d20
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xf0
movaps xmmword [rax - 0x38], xmm6
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140125080]
xor rax, rsp
mov qword [rbp + 0x80], rax
xor r12d, r12d
movss xmm0, dword [0x14015b3fc]
movss xmm1, dword [0x14015b400]
mov rax, qword [0x14015c7a8]
movss dword [rax + 0x47d8], xmm0
movss dword [rax + 0x47dc], xmm1
mov dword [rax + 0x47c0], 1
or dword [rax + 0x47b8], 3
mov qword [rax + 0x47c8], r12
mov qword [rax + 0x47d0], r12
mov dword [rax + 0x47bc], 1
mov esi, 4
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [rsi + rdi]
cmp dword [0x140192568], eax
jle 0x140016df9
lea rcx, [0x140192568]
call fcn.1400b8920
cmp dword [0x140192568], 0xffffffff
jne 0x140016df9
lea rcx, [0x140192570]
call fcn.1400028a0
lea rcx, [0x140192568]
call fcn.1400b88b4
movabs rax, 0x5524784509725aa5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs r13, 0x3b84acf7cec9e300
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs r14, 0x55240b36680223c7
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x20], xmm0
xor edx, edx
mov r8d, 0x3f
lea rcx, [rbp + 0x20]
call fcn.14002a620
mov rcx, qword [0x14015c7a8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm2, dword [rax + 0x28]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm6, dword [0x140112a6c]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
subss xmm2, dword [0x140112a84]
addss xmm0, xmm2
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rcx, [0x14010c0c0]
call fcn.14004ce10
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.14002dc00
test al, al
je 0x140016f0e
xor ecx, ecx
call fcn.140024990
test al, al
je 0x140016f0e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x14015c7a8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
lea rdx, [0x14015c770]
lea rcx, [0x1400cc772]
call fcn.140054640
test al, al
je 0x140016fb3
cmp byte [0x14015c770], r12b
je 0x140016f99
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, reloc.WS2_32.dll_recvfrom
jmp 0x140016faa
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
cmp byte [0x140192520], r12b
jne 0x1400172b6
call fcn.14000b1a0
mov eax, dword [rsi + rdi]
cmp dword [0x14019242c], eax
jle 0x140016ffd
lea rcx, [0x14019242c]
call fcn.1400b8920
cmp dword [0x14019242c], 0xffffffff
jne 0x140016ffd
lea rcx, [0x1400bca60]
call fcn.1400b8c90
lea rcx, [0x14019242c]
call fcn.1400b88b4
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r12
mov r8d, Ordinal_27
lea rdx, str.Welcome_Back
lea rcx, [rbp + 0x40]
call fcn.14000b500
nop
lea rsi, [0x140125140]
cmp byte [0x14015c760], 0
jne 0x14001714a
lea rdx, [rbp + 0x40]
mov rbx, qword [rbp + 0x40]
mov rdi, qword [rbp + 0x58]
cmp rdi, 0xf
cmova rdx, rbx
mov rcx, rsi
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x140125140]
mov r8, qword [0x140125150]
mov r14, qword [rbp + 0x50]
cmp r8, r14
jne 0x14001707b
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140017251
mov rax, qword [0x14015c7a8]
movss xmm0, dword [0x14019239c]
addss xmm0, dword [rax + 0x18]
movss dword [0x14019239c], xmm0
mulss xmm0, xmm6
cvttss2si r15d, xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
movsxd r8, r15d
cmp r14, r8
cmovb r8, r14
lea rdx, [rbp + 0x40]
cmp rdi, 0xf
cmova rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.14000b500
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0xf
jbe 0x140017112
inc rdx
mov rcx, qword [0x140125140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001710d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001710d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b8870
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [0x140125140], xmm0
movups xmm1, xmmword [rbp + 0x30]
movups xmmword [0x140125150], xmm1
movdqa xmm0, xmmword [0x140112bc0]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
cmp r15d, dword [rbp + 0x50]
jl 0x14001723c
mov byte [0x14015c760], 1
mov rcx, qword [0x14015c7a8]
movss xmm0, dword [rcx + 0x18]
mulss xmm0, dword [0x140112afc]
movss xmm2, dword [0x1401923d0]
addss xmm2, xmm0
movss dword [0x1401923d0], xmm2
addss xmm2, dword [0x140112ad8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, xmm2
mov rdi, qword [rbp + 0x58]
mov rbx, qword [rbp + 0x40]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, dword [0x140112ac8]
mov byte [rax + 0x141], 1
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
mov rax, qword [rcx + 0x38]
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 8]
call fcn.14002d010
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rsi, qword [0x140125140]
mov rdx, rsi
lea rcx, [0x14010c5c4]
call fcn.14004ce10
call fcn.14002d0b0
nop
cmp rdi, 0xf
jbe 0x14001728f
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140017287
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017287
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp byte [0x14015c760], 0
jne 0x14001714a
mov rdi, qword [rbp + 0x58]
mov rbx, qword [rbp + 0x40]
mov rcx, qword [0x14015c7a8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
addss xmm1, dword [0x140112ad8]
jmp 0x1400171a8
mov rcx, rbx
call fcn.1400b8870
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
cmp byte [0x140192520], 0
je 0x1400174ab
movabs r14, 0x55240b36680223c7
call fcn.14000b1a0
movss xmm1, dword [0x140112a00]
cmp byte [0x140192520], 0
je 0x1400172d1
movaps xmm2, xmm1
jmp 0x1400172d9
movss xmm2, dword [0x140112b40]
mov rbx, qword [0x14015c7a8]
movss xmm0, dword [rbx + 0x18]
mulss xmm0, dword [0x1401129cc]
mulss xmm0, xmm2
addss xmm0, dword [0x1401923c8]
xorps xmm6, xmm6
comiss xmm6, xmm0
ja 0x140017308
movaps xmm6, xmm1
minss xmm6, xmm0
movss dword [0x1401923c8], xmm6
mulss xmm6, dword [rbx + 0x37c8]
mov dword [rbp], r12d
movss xmm0, dword [rbx + 0x37c8]
movss dword [rbp + 4], xmm0
lea rcx, [rbx + 0x4838]
lea rdx, [rbp]
call fcn.140037b70
movss dword [rbx + 0x37c8], xmm6
movss xmm1, dword [0x14015b3fc]
movss xmm3, dword [0x14015b400]
mov rcx, qword [0x14015c7a8]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm2, dword [rax + 0x20]
subss xmm2, dword [rax + 0x84]
mulss xmm1, dword [0x1401129cc]
subss xmm1, dword [0x140112a94]
addss xmm2, xmm1
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
mulss xmm3, dword [0x1401129cc]
subss xmm3, dword [0x140112a94]
addss xmm1, xmm3
movss dword [rax + 0x100], xmm2
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movdqa xmm0, xmmword [0x140113010]
movups xmmword [rbp + 0x40], xmm0
movabs rax, 0x19566e58066b5394
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x4fe5cf84a7a78e65
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0xcb2671f0f40a50ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rcx, 0x7279c3e152ad9d02
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xcb2671f0f40a50c9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovss xmm2, dword [0x140112a48]
vmovss dword [rsp + 0x20], xmm2
lea r9, [rbp + 0x40]
vmovss xmm2, dword [0x140112a1c]
vmovss xmm1, dword [0x140112a8c]
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.14000a1a0
mov ecx, 1
call fcn.1400216f0
lea rcx, [rbp]
call fcn.1400028a0
cmp byte [0x14015c768], 0
jne 0x1400174e2
mov rax, qword [rbp]
sub rax, qword [0x140192570]
mov ecx, 0xb2d05e00
cmp rax, rcx
jl 0x1400174e2
mov word [reloc.WS2_32.dll_accept], 0x100
mov byte [0x14015c768], 1
call fcn.140013940
call fcn.14002c830
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1400b8800
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret