Function at 0x14005a330
Capabilities:
Contain obfuscated stackstrings
Create thread
Encode data using xor
Generate random numbers using a mersenne twister
Hide graphical window
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17d0]
mov eax, 0x18d0
call fcn.1400b8520
sub rsp, rax
movaps xmmword [rsp + 0x18c0], xmm6
movaps xmmword [rsp + 0x18b0], xmm7
movaps xmmword [rsp + 0x18a0], xmm8
movaps xmmword [rsp + 0x1890], xmm9
movaps xmmword [rsp + 0x1880], xmm10
movaps xmmword [rsp + 0x1870], xmm11
movaps xmmword [rsp + 0x1860], xmm12
movaps xmmword [rsp + 0x1850], xmm13
movaps xmmword [rsp + 0x1840], xmm14
movaps xmmword [rsp + 0x1830], xmm15
mov rax, qword [0x1401a2200]
xor rax, rsp
mov qword [rbp + 0x1720], rax
xor r15d, r15d
mov r14d, r15d
mov dword [rbp + 0x100], r15d
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov dword [rbp + 0x1684], 0xffffffff
mov dword [rbp + 0x304], eax
mov edx, 1
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 + 0x304], eax
inc rdx
cmp rdx, 0x270
jb 0x14004fa20
mov dword [rbp + 0x300], 0x270
lea rcx, [rbp + 0x300]
call fcn.14004d060
mov ecx, eax
imul rdx, rcx, 0x55d4a80
cmp edx, 0x3df527f
ja 0x14004fa8d
nop dword [rax]
lea rcx, [rbp + 0x300]
call fcn.14004d060
mov ecx, eax
imul rdx, rcx, 0x55d4a80
cmp edx, 0x3df5280
jb 0x14004fa70
shr rdx, 0x20
add edx, 0x80989680
btc edx, 0x1f
lea rcx, [rbp + 0x2e0]
call fcn.140059c50
nop
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov word [rbp - 0x5f], reloc.WS2_32.dll_WSAStartup
movdqa xmm0, xmmword [0x1400e7210]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x60], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x5d], 0
xor edx, edx
lea rcx, [rbp - 0x70]
call qword [sym.imp.USER32.dll_FindWindowA]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [0x1401d89e0]
call fcn.140064620
mov dword [rbp + 0x1b0], 0x50
mov dword [rbp + 0x1b4], 0x40
lea rax, [0x140051630]
mov qword [rbp + 0x1b8], rax
mov qword [rbp + 0x1c0], r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x1c8], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1e0], xmm1
lea rax, str.Loaders
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1f8], r15
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov qword [rsp + 0x58], r15
mov rax, qword [rbp + 0x1c8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
mov r9d, 0x80000000
lea r8, str.Hihihii
mov rdx, qword [rbp + 0x1f0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rbx, rax
mov qword [0x1401d8510], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call sub.d3d9.dll_Direct3DCreate9
mov rcx, rax
mov qword [0x1401d8560], rax
test rax, rax
je 0x14005152a
mov qword [0x1401d8520], r15
mov qword [0x1401d852c], r15
mov dword [0x1401d8534], r15d
mov qword [0x1401d853c], r15
mov dword [0x1401d8544], r15d
mov qword [0x1401d8554], r15
mov dword [0x1401d8548], 1
mov dword [0x1401d8538], 1
mov dword [0x1401d8528], r15d
mov dword [0x1401d854c], 1
mov dword [0x1401d8550], 0x50
mov dword [0x1401d855c], 1
mov rax, qword [rax]
lea rdx, [0x1401d8518]
mov qword [rsp + 0x30], rdx
lea rdi, [0x1401d8520]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x40
mov r9, rbx
xor edx, edx
mov r8d, 1
call qword [rax + 0x80]
test eax, eax
js 0x140051523
xor edx, edx
mov rcx, qword [0x1401d8510]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401d8510]
call qword [sym.imp.USER32.dll_UpdateWindow]
xor ecx, ecx
call fcn.140009e50
call fcn.140015010
mov rsi, rax
mov qword [rax + 0x18], r15
or dword [rax], 0x400
lea rcx, [rbp + 0x1690]
call fcn.140026a50
mov rcx, qword [0x1401d8510]
call fcn.1400383a0
mov rcx, qword [0x1401d8518]
call fcn.140036e40
mov word [rbp - 0x60], 0
movdqa xmm11, xmmword [0x1400e7220]
movdqu xmmword [rbp - 0x70], xmm11
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x290], xmm1
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14004fd01
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x280]
call fcn.140047400
nop
lea rdx, [rbp + 0x280]
cmp qword [rbp + 0x298], 0xf
cmova rdx, qword [rbp + 0x280]
mov r9d, 0x40
mov r8d, 1
lea rcx, [0x1401d8700]
call fcn.140058ab0
lea rbx, [0x1401d86f0]
xor r8d, r8d
test rax, rax
mov rax, qword [0x1401d86f0]
movsxd rcx, dword [rax + 4]
je 0x14004fd72
add rcx, rbx
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x14004fd80
add rcx, rbx
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea r12, [0x1401d8418]
mov r8, r12
mov edx, reloc.WLDAP32.dll_Ordinal_50
mov rcx, rbx
call fcn.1400483c0
lea rcx, [0x1401d8700]
call fcn.140057190
test rax, rax
jne 0x14004fdc4
mov rax, qword [0x1401d86f0]
movsxd rcx, dword [rax + 4]
add rcx, rbx
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
movdqa xmm0, xmmword [0x1400e75c0]
movdqu xmmword [rbp - 0x70], xmm0
mov dword [rbp - 0x60], 0xded0d3f3
mov dword [rbp - 0x5c], 0xdfc7d6da
mov dword [rbp - 0x58], 0xcecd96d5
mov word [rbp - 0x54], 0xdd
mov byte [rbp - 0x52], 1
lea rcx, [rbp - 0x70]
call fcn.140057640
mov qword [rsp + 0x20], r15
xor r9d, r9d
movss xmm2, dword [0x1400bdcf4]
lea rdx, [rbp - 0x70]
mov rcx, qword [rsi + 0xa0]
call fcn.140027880
mov qword [0x1401d83d0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
movups xmmword [rbp + 0x2c0], xmm0
movups xmmword [rbp + 0x2d0], xmm0
movdqa xmm10, xmmword [0x1400e7620]
cmp byte [0x1401d85bc], 0
jne 0x14005007f
mov dword [rbp - 0x80], 0xcbc5cbf2
mov dword [rbp - 0x7c], 0x9ce684d1
mov dword [rbp - 0x78], 0xc3c6fefb
mov dword [rbp - 0x74], 0x100f0cf
lea rcx, [rbp - 0x80]
call fcn.140057140
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.14004abe0
mov rcx, rax
call fcn.1400599f0
movdqu xmmword [rbp - 0x70], xmm10
mov dword [rbp - 0x60], 0xdb9ff7e6
mov dword [rbp - 0x5c], 0x100dddd
lea rcx, [rbp - 0x70]
call fcn.1400575d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x230], xmm1
lea rax, [rbp - 0x70]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14004fed0
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x220]
call fcn.140047400
nop
lea rdx, [rbp + 0x280]
cmp qword [rbp + 0x298], 0xf
cmova rdx, qword [rbp + 0x280]
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x250], xmm1
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14004ff20
lea rcx, [rbp + 0x240]
call fcn.140047400
lea rcx, [rbp + 0x240]
cmp qword [rbp + 0x258], 0xf
cmova rcx, qword [rbp + 0x240]
lea rdx, [0x1400e6918]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x14004ff6c
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x14004ff6e
xor bl, bl
lea rcx, [rbp + 0x240]
call fcn.14004ba90
test bl, bl
je 0x14005006c
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x300]
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x300]
call fcn.14004a9f0
nop
lea rdx, [rbp + 0x280]
cmp qword [rbp + 0x298], 0xf
cmova rdx, qword [rbp + 0x280]
mov r9d, 0x40
mov r8d, 2
lea rcx, [rbp + 0x308]
call fcn.140058ab0
xor r8d, r8d
test rax, rax
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x300]
je 0x14004fffe
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x14005000c
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rdx, r12
lea rcx, [rbp + 0x300]
call fcn.140046d30
lea rcx, [rbp + 0x308]
call fcn.140057190
test rax, rax
jne 0x14005004f
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x300]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [0x1401d89d8], 1
mov byte [0x1401d85bd], 1
lea rcx, [rbp + 0x300]
call fcn.14004d260
mov byte [0x1401d85bc], 1
lea rcx, [rbp + 0x220]
call fcn.14004ba90
cmp dword [rbp + 0x2b8], 0x12
je 0x140051426
lea rbx, [0x1401d83d8]
lea r13, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
movdqa xmm8, xmmword [0x1400e70c0]
movdqa xmm12, xmmword [0x1400e7520]
movss xmm14, dword [0x1400bdbb0]
movss xmm15, dword [0x1400bdbac]
xorps xmm6, xmm6
movss xmm9, dword [0x1400bdb94]
movss xmm13, dword [0x1400e6edc]
movss xmm7, dword [0x1400bdc0c]
nop dword [rax + rax]
cmp byte [0x1401d8e01], 0
jne 0x140051426
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005012d
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x1400513f1
lea rcx, [0x14004f200]
call fcn.1400b88d8
call fcn.140037010
call fcn.140038760
call fcn.14001b100
cmp qword [0x1401d83d8], 0
jne 0x1400501b4
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0xe1
mov r9d, 0x104
mov r8d, 0xe4db
lea rdx, [0x1401097b0]
mov rcx, qword [0x1401d8518]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx
movdqu xmmword [rbp + 0x200], xmm10
mov dword [rbp + 0x210], 0xdb9ff7e6
mov dword [rbp + 0x214], 0x100dddd
lea rcx, [rbp + 0x200]
call fcn.1400575d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r15
mov qword [rbp + 0x238], r15
lea rax, [rbp + 0x200]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140050203
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x220]
call fcn.140047400
nop
call fcn.140015010
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x2a0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x2a8]
sub eax, dword [0x1401a2064]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
divss xmm1, xmm14
mov eax, dword [rbp + 0x2ac]
sub eax, dword [0x1401a2068]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm15
mov qword [rbp + 0x118], 0
movss dword [rbp + 0x120], xmm1
movss dword [rbp + 0x124], xmm0
lea r8, [rbp + 0x118]
mov edx, 2
lea rcx, [rbp + 0x120]
call fcn.1400211a0
movss xmm0, dword [0x1401d8584]
movss dword [rbp + 0x130], xmm0
movss xmm1, dword [0x1401d8580]
movss dword [rbp + 0x134], xmm1
xor edx, edx
lea rcx, [rbp + 0x130]
call fcn.1400211f0
movaps xmm0, xmm9
call fcn.140021180
mov edx, 0xffffffff
xor ecx, ecx
call fcn.14001d070
call fcn.14004f720
cmp byte [0x1401d888a], 0
jne 0x1400512c1
mov r8d, 0x168
lea rdx, [0x1401097a5]
lea rcx, str.Silent_Bypass
call fcn.1400045c0
mov eax, dword [0x1401d89d8]
test eax, eax
jne 0x1400507ee
mov rcx, qword [0x1401d83d0]
call fcn.14001cc00
mov dword [0x1401d8580], 0x42b00000
mov dword [0x1401d8584], 0x438c0000
movaps xmm0, xmm13
call fcn.140021160
mov dword [rbp - 0x2e], 0x79654b
mov word [rbp - 0x30], 0x2323
mov byte [rbp - 0x2a], 0
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8d, reloc.WLDAP32.dll_Ordinal_50
mov rdx, r12
lea rcx, [rbp - 0x30]
call fcn.14003db00
call fcn.140042240
mov dword [rbp + 0x138], 0x43848000
mov dword [rbp + 0x13c], 0x41a00000
mov dword [rbp - 0x26], 0x6e6967
mov word [rbp - 0x28], 0x6f4c
mov byte [rbp - 0x22], 0
lea rdx, [rbp + 0x138]
lea rcx, [rbp - 0x28]
call fcn.14003c290
test al, al
je 0x14005062c
mov word [rbp + 0x210], 0
movdqu xmmword [rbp + 0x200], xmm11
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x258], r15
lea rax, [rbp + 0x200]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400503f0
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x240]
call fcn.140047400
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x300]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x1400e6910]
mov qword [rbp + 0x300], rax
lea rcx, [rbp + 0x3a8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r14d, 1
mov dword [rbp + 0x100], r14d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x300]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x300], r13
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x2fc], edx
lea rcx, [rbp + 0x308]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x308], rax
mov byte [rbp + 0x384], 0
mov byte [rbp + 0x379], 0
lea rcx, [rbp + 0x308]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x388], r15
mov rax, qword [0x1401d8e08]
mov qword [rbp + 0x37c], rax
mov qword [rbp + 0x370], r15
lea rdx, [rbp + 0x240]
cmp qword [rbp + 0x258], 0xf
cmova rdx, qword [rbp + 0x240]
mov r9d, 0x40
mov r8d, 2
lea rcx, [rbp + 0x308]
call fcn.140058ab0
xor r8d, r8d
test rax, rax
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x300]
je 0x140050537
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x140050545
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rdx, r12
lea rcx, [rbp + 0x300]
call fcn.140046d30
lea rcx, [rbp + 0x308]
call fcn.140057190
test rax, rax
jne 0x140050588
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x300]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [0x1401d89d8], 1
mov byte [0x1401d85bd], 1
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x300], r13
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x2fc], edx
lea rcx, [rbp + 0x308]
call fcn.14004b9e0
lea rcx, [rbp + 0x310]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x3a8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x258]
cmp rdx, 0xf
jbe 0x14005062c
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050627
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140051400
call fcn.1400b847c
mov ecx, reloc.WS2_32.dll_listen
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400507e3
movdqu xmmword [rbp + 0x200], xmm12
mov word [rbp + 0x210], 0x100
lea rcx, [rbp + 0x200]
call fcn.140056920
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], r15
mov qword [rbp + 0x278], r15
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140050680
mov rdx, rax
lea rcx, [rbp + 0x260]
call fcn.140047400
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x300]
call sub.VCRUNTIME140.dll_memset
mov edx, 1
lea rcx, [rbp + 0x300]
call fcn.14004a9f0
nop
lea rdx, [rbp + 0x260]
cmp qword [rbp + 0x278], 0xf
cmova rdx, qword [rbp + 0x260]
mov r9d, 0x40
mov r8d, 2
lea rcx, [rbp + 0x308]
call fcn.140058ab0
xor r8d, r8d
test rax, rax
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x300]
je 0x140050716
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x140050724
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rdx, r12
lea rcx, [rbp + 0x300]
call fcn.140046d30
lea rcx, [rbp + 0x308]
call fcn.140057190
test rax, rax
jne 0x140050767
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x300]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [0x1401d89d8], 1
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x300], r13
mov rax, qword [rbp + 0x300]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x2fc], edx
lea rcx, [rbp + 0x308]
call fcn.14004b9e0
lea rcx, [rbp + 0x310]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x3a8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov r8, qword [rbp + 0x278]
cmp r8, 0xf
jbe 0x1400507e3
mov rdx, qword [rbp + 0x260]
lea rcx, [rbp + 0x260]
call fcn.140053880
call fcn.14001c7d0
mov eax, dword [0x1401d89d8]
cmp eax, 1
jne 0x1400512c1
mov dword [0x1401d8580], 0x43c80000
mov dword [0x1401d8584], 0x43d98000
mov dword [rbp + 0x140], 0x434d0000
mov dword [rbp + 0x144], 0x41f00000
mov word [rbp + 5], reloc.WS2_32.dll_WSAStartup
mov dword [rbp], 0x61707942
mov byte [rbp + 4], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 7], 0
lea rdx, [rbp + 0x140]
lea rcx, [rbp]
call fcn.14003c290
test al, al
je 0x14005084f
mov dword [0x1401d8e04], r15d
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140020580
mov dword [rbp + 0x178], 0x434d0000
mov dword [rbp + 0x17c], 0x41f00000
mov dword [rbp - 0x1e], 0x736c6f
mov word [rbp - 0x20], 0x6f54
mov byte [rbp - 0x1a], 0
lea rdx, [rbp + 0x178]
lea rcx, [rbp - 0x20]
call fcn.14003c290
test al, al
je 0x14005089d
mov dword [0x1401d8e04], 1
call fcn.140042240
call fcn.140041bd0
cmp dword [0x1401d8e04], 0
jne 0x140051042
mov dword [rbp + 0x148], 0x41a00000
mov dword [rbp + 0x14c], 0x42aa0000
lea rcx, [rbp + 0x148]
call fcn.140020d20
xorps xmm0, xmm0
movups xmmword [rbp + 0x260], xmm0
movdqa xmm0, xmmword [0x1400bdd10]
movups xmmword [rbp + 0x200], xmm0
mov dword [rbp + 0x150], 0x3f800000
mov dword [rbp + 0x154], 0x3f800000
mov qword [rbp + 0x158], 0
mov dword [rbp + 0x160], 0x430c0000
mov dword [rbp + 0x164], 0x430c0000
lea rax, [rbp + 0x260]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x200]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x150]
lea r8, [rbp + 0x158]
lea rdx, [rbp + 0x160]
mov rcx, qword [0x1401d83d8]
call fcn.14003d8d0
movss xmm0, dword [0x1400e6ed8]
call fcn.140021160
mov dword [rbp + 0x168], 0x432f0000
mov dword [rbp + 0x16c], 0x42a60000
lea rcx, [rbp + 0x168]
call fcn.140020d20
movdqa xmm0, xmmword [0x1400e76d0]
movdqu xmmword [rbp + 0x200], xmm0
mov dword [rbp + 0x210], 0xd3c6d9ce
mov dword [rbp + 0x214], 0xd9feb4dd
mov dword [rbp + 0x218], 0xd8ddc5
mov byte [rbp + 0x21c], 1
lea rcx, [rbp + 0x200]
call fcn.1400569f0
mov rbx, rax
mov dword [rbp - 0x80], 0xc7f283bc
mov dword [rbp - 0x7c], 0xd2c6c1cf
mov dword [rbp - 0x78], 0xc7c8ef87
mov word [rbp - 0x74], Ordinal_211
mov byte [rbp - 0x72], 1
lea rcx, [rbp - 0x80]
call fcn.1400570f0
mov r9d, 0xffffffff
mov r8, rbx
lea rdx, [0x1401d89dc]
mov rcx, rax
call fcn.14003d500
mov dword [rbp + 0x170], 0x432f0000
mov dword [rbp + 0x174], 0x42e20000
lea rcx, [rbp + 0x170]
call fcn.140020d20
mov dword [rbp + 0x128], 0x43750000
mov dword [rbp + 0x12c], 0x41e00000
mov dword [rbp + 0xf0], 0xd0c0d4cc
mov dword [rbp + 0xf4], 0xdfe784d7
mov dword [rbp + 0xf8], 0xd9dac9d7
mov word [rbp + 0xfc], 0x100
lea rcx, [rbp + 0xf0]
call fcn.1400570b0
mov rcx, rax
lea rdx, [rbp + 0x128]
call fcn.14003c290
test al, al
je 0x140050aab
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x14004df20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140041bd0
mov ecx, 1
call fcn.14001c8e0
call fcn.140042240
call fcn.140042240
mov word [rbp + 0x57], reloc.WLDAP32.dll_Ordinal_32
mov dword [rbp + 0x50], 0x74617453
mov word [rbp + 0x54], 0x7375
mov byte [rbp + 0x56], Ordinal_60
mov byte [rbp + 0x59], 0
lea rcx, [rbp + 0x50]
call fcn.14003c060
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140020580
lea rdx, [0x1401d8868]
cmp qword [0x1401d8880], 0xf
cmova rdx, qword [0x1401d8868]
movups xmmword [rbp + 0x200], xmm8
lea rcx, [rbp + 0x200]
call fcn.140044d10
mov dword [rbp + 0x180], 0x432f0000
mov dword [rbp + 0x184], 0x43160000
lea rcx, [rbp + 0x180]
call fcn.140020d20
mov dword [rbp + 0xb0], 0xc7d2c5cd
mov dword [rbp + 0xb4], 0xd3e284d7
mov dword [rbp + 0xb8], 0xdddbc2
mov byte [rbp + 0xbc], 1
lea rcx, [rbp + 0xb0]
call fcn.140057070
mov rcx, rax
lea rdx, [0x1401d8889]
call fcn.14003caf0
test al, al
je 0x140050cf7
movzx eax, byte [0x1401d8889]
test al, al
je 0x140050c85
lea rdi, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rdi, qword [rbp + 0x220]
mov ebx, eax
mov dword [rbp + 0xc0], 0xc7d2c5cd
mov dword [rbp + 0xc4], 0xd3e284d7
mov dword [rbp + 0xc8], 0xdddbc2
mov byte [rbp + 0xcc], 1
lea rcx, [rbp + 0xc0]
call fcn.140057070
mov word [rbp + 0xd], 0x54
mov dword [rbp + 8], 0x454c4953
mov byte [rbp + 0xc], Ordinal_79
mov byte [rbp + 0xf], 0
mov r9, rdi
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1400516f0
movzx eax, byte [0x1401d8889]
test al, al
jne 0x140050cf7
lea rdi, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rdi, qword [rbp + 0x220]
movzx ebx, al
mov dword [rbp + 0xd0], 0xc7d2c5cd
mov dword [rbp + 0xd4], 0xd3e284d7
mov dword [rbp + 0xd8], 0xdddbc2
mov byte [rbp + 0xdc], 1
lea rcx, [rbp + 0xd0]
call fcn.140057070
mov word [rbp + 0x15], 0x54
mov dword [rbp + 0x10], 0x454c4953
mov byte [rbp + 0x14], Ordinal_79
mov byte [rbp + 0x17], 0
mov r9, rdi
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.1400516f0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140020580
mov dword [rbp + 0x66], 0x444920
mov dword [rbp + 0x60], 0x6f676f4c
mov word [rbp + 0x64], 0x7475
mov byte [rbp + 0x6a], 0
lea rdx, [0x1401d8888]
lea rcx, [rbp + 0x60]
call fcn.14003caf0
test al, al
je 0x140050e1a
movzx eax, byte [0x1401d8888]
test al, al
je 0x140050da9
lea rdi, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rdi, qword [rbp + 0x220]
mov ebx, eax
mov dword [rbp + 0x70], 0xcdc6cfd3
mov dword [rbp + 0x74], 0xef85d0d6
mov word [rbp + 0x78], 0xe3
mov byte [rbp + 0x7a], 1
lea rcx, [rbp + 0x70]
call fcn.1400568e0
mov word [rbp + 0x1d], 0x54
mov dword [rbp + 0x18], 0x454c4953
mov byte [rbp + 0x1c], Ordinal_79
mov byte [rbp + 0x1f], 0
mov r9, rdi
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.1400516f0
movzx eax, byte [0x1401d8888]
test al, al
jne 0x140050e1a
lea rdi, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rdi, qword [rbp + 0x220]
movzx ebx, al
mov dword [rbp + 0x80], 0xcdc6cfd3
mov dword [rbp + 0x84], 0xef85d0d6
mov word [rbp + 0x88], 0xe3
mov byte [rbp + 0x8a], 1
lea rcx, [rbp + 0x80]
call fcn.1400568e0
mov word [rbp - 3], 0x54
mov dword [rbp - 8], 0x454c4953
mov byte [rbp - 4], Ordinal_79
mov byte [rbp - 1], 0
mov r9, rdi
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.1400516f0
mov dword [rbp + 0x188], 0x432f0000
mov dword [rbp + 0x18c], 0x43340000
lea rcx, [rbp + 0x188]
call fcn.140020d20
mov dword [rbp + 0xe0], 0x829192ae
mov dword [rbp + 0xe4], 0x86f6f4e5
mov dword [rbp + 0xe8], 0xede0f2
mov byte [rbp + 0xec], 1
lea rcx, [rbp + 0xe0]
call fcn.140057070
mov rcx, rax
lea rdx, [0x1401d85be]
call fcn.14003caf0
test al, al
je 0x140050f33
movzx eax, byte [0x1401d85be]
test al, al
je 0x140050ee5
lea r9, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova r9, qword [rbp + 0x220]
mov r8d, eax
mov dword [rbp - 0x16], 0x505543
mov word [rbp - 0x18], 0x5253
mov byte [rbp - 0x12], 0
mov word [rbp + 0x25], 0x54
mov dword [rbp + 0x20], 0x454c4953
mov byte [rbp + 0x24], Ordinal_79
mov byte [rbp + 0x27], 0
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x20]
call fcn.1400516f0
movzx eax, byte [0x1401d85be]
test al, al
jne 0x140050f33
lea r9, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova r9, qword [rbp + 0x220]
movzx r8d, al
mov dword [rbp - 0xe], 0x505543
mov word [rbp - 0x10], 0x5253
mov byte [rbp - 0xa], 0
mov word [rbp + 0x35], 0x54
mov dword [rbp + 0x30], 0x454c4953
mov byte [rbp + 0x34], Ordinal_79
mov byte [rbp + 0x37], 0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400516f0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140020580
mov dword [rbp + 0x96], 0x776569
mov dword [rbp + 0x90], 0x64617049
mov word [rbp + 0x94], 0x5620
mov byte [rbp + 0x9a], 0
lea rdx, [0x1401d85bf]
lea rcx, [rbp + 0x90]
call fcn.14003caf0
test al, al
je 0x140051034
movzx eax, byte [0x1401d85bf]
test al, al
je 0x140050fe3
lea r9, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova r9, qword [rbp + 0x220]
mov r8d, eax
mov word [rbp - 0x3d], 0x44
mov word [rbp - 0x40], 0x5049
mov byte [rbp - 0x3e], 0x41
mov byte [rbp - 0x3b], 0
mov word [rbp + 0x3d], 0x54
mov dword [rbp + 0x38], 0x454c4953
mov byte [rbp + 0x3c], Ordinal_79
mov byte [rbp + 0x3f], 0
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x38]
call fcn.1400516f0
movzx eax, byte [0x1401d85bf]
test al, al
jne 0x140051034
lea r9, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova r9, qword [rbp + 0x220]
movzx r8d, al
mov word [rbp - 0x35], 0x44
mov word [rbp - 0x38], 0x5049
mov byte [rbp - 0x36], 0x41
mov byte [rbp - 0x33], 0
mov word [rbp + 0x2d], 0x54
mov dword [rbp + 0x28], 0x454c4953
mov byte [rbp + 0x2c], Ordinal_79
mov byte [rbp + 0x2f], 0
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x28]
call fcn.1400516f0
lea rdi, [0x1401d8520]
lea rbx, [0x1401d83d8]
cmp dword [0x1401d8e04], 1
jne 0x1400512c1
call fcn.140042240
mov dword [rbp + 0x110], 0x43810000
mov dword [rbp + 0x114], 0x42dc0000
mov dword [rbp - 0x50], 0x312323
mov byte [rbp - 0x4c], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 0x50]
call fcn.1400071e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x258], r15
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x1400510b0
mov rdx, r12
lea rcx, [rbp + 0x240]
call fcn.140047400
nop
mov r8b, reloc.WLDAP32.dll_Ordinal_45
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x190]
call fcn.140059080
nop
mov dword [rbp + 0xa6], 0x203a65
mov dword [rbp + 0xa0], 0x6563694c
mov word [rbp + 0xa4], 0x736e
mov byte [rbp + 0xaa], 0
lea r8, [rbp + 0xa0]
xor edx, edx
mov rcx, rax
call fcn.140058650
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
mov qword [rbp + 0x210], r15
mov qword [rbp + 0x218], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x200], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x210], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or r14d, 2
lea rcx, [rbp + 0x190]
call fcn.14004ba90
nop
lea rcx, [rbp + 0x240]
call fcn.14004ba90
lea rcx, [rbp + 0x200]
cmp qword [rbp + 0x218], 0xf
cmova rcx, qword [rbp + 0x200]
call fcn.14003c060
mov dword [rbp + 0x44], 0x3a7972
mov dword [rbp + 0x40], 0x69707845
mov byte [rbp + 0x48], 0
lea rcx, [rbp + 0x40]
call fcn.14003c060
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140020580
lea rdx, [rbp + 0x260]
lea rcx, [0x1401d85ba]
call fcn.14004c710
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1400511cf
mov rax, qword [rax]
movups xmmword [rbp - 0x70], xmm8
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140044d10
nop
mov rdx, qword [rbp + 0x278]
cmp rdx, 0xf
jbe 0x140051222
inc rdx
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005121d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140051407
call fcn.1400b847c
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140042240
call fcn.140012620
mov dword [rbp + 0x108], 0x43810000
mov dword [rbp + 0x10c], 0x43310000
mov dword [rbp - 0x48], 0x322323
mov byte [rbp - 0x44], 0
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 0x108]
lea rcx, [rbp - 0x48]
call fcn.1400071e0
call fcn.140012620
nop
mov rdx, qword [rbp + 0x218]
cmp rdx, 0xf
jbe 0x1400512c1
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400512bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005140e
call fcn.1400b847c
cmp byte [0x1401d888a], 1
jne 0x1400512cf
call fcn.14004ee90
call fcn.140012320
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x140051316
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051311
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140051415
call fcn.1400b847c
call fcn.140012830
mov rcx, qword [0x1401d8518]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r15d
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], r15d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1401d8518]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14005137d
call fcn.14001d250
call fcn.140014bd0
mov rcx, rax
call fcn.1400370a0
mov rcx, qword [0x1401d8518]
mov rax, qword [rcx]
call qword [rax + 0x150]
test dword [rsi], 0x400
je 0x140051393
call fcn.140023150
xor edx, edx
xor ecx, ecx
call fcn.14001dea0
mov rcx, qword [0x1401d8518]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1400513e8
mov rcx, qword [0x1401d8518]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x1400513e8
call fcn.140036ee0
mov rcx, qword [0x1401d8518]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 0x80]
call fcn.140036aa0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14005141c
cmp dword [rbp + 0x2b8], 0x12
jne 0x1400500e0
jmp 0x140051426
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rbp + 0x2b8], reloc.WS2_32.dll_select
call fcn.140037d20
call fcn.140038d70
xor ecx, ecx
call fcn.14000a310
mov rcx, qword [0x1401d8518]
test rcx, rcx
je 0x140051450
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401d8518], r15
mov rcx, qword [0x1401d8560]
test rcx, rcx
je 0x140051469
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401d8560], r15
mov rdx, qword [rbp + 0x1c8]
mov rcx, qword [rbp + 0x1f0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rbp + 0x298]
cmp rdx, 0xf
jbe 0x1400514c2
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400514bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400514bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b847c
movdqa xmm0, xmmword [0x1400e6ee0]
movdqu xmmword [rbp + 0x290], xmm0
mov byte [rbp + 0x280], 0
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 0xf
jbe 0x1400515bd
inc rdx
mov rcx, qword [rbp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051519
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400515ac
call fcn.1400b847c
jmp 0x1400515bd
mov rcx, qword [0x1401d8560]
mov rdx, qword [0x1401d8518]
test rdx, rdx
je 0x14005154d
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401d8518], r15
mov rcx, qword [0x1401d8560]
test rcx, rcx
je 0x14005155f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401d8560], r15
mov rdx, qword [rbp + 0x1c8]
mov rcx, qword [rbp + 0x1f0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 0xf
jbe 0x1400515b8
inc rdx
mov rcx, qword [rbp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400515b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400515b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b847c
mov eax, 1
mov rcx, qword [rbp + 0x1720]
xor rcx, rsp
call fcn.1400b8420
lea r11, [rsp + 0x18d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
sub rsp, 0x38
xor eax, eax
lea r8, [0x140058750]
mov qword [rsp + 0x28], rax
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
add rsp, 0x38
jmp 0x14004f960