Function at 0x18002c220
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Create http request
Create thread
Encode data using xor
Hash data using fnv
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x270
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
call qword [sym.imp.kittylib.dll_get_current_pid]
test eax, eax
jne 0x18002c3d7
mov rdi, qword [0x180233038]
test rdi, rdi
jne 0x18002c346
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r14, r15
nop word [rax + rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x18002c327
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x18002c327
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [rdi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
mov r9d, 0x22ee9554
movzx eax, byte [r8]
inc r8
test al, al
je 0x18002c322
nop
movsx ecx, al
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
movzx eax, byte [r8]
lea r8, [r8 + 1]
test al, al
jne 0x18002c2f0
cmp r9d, 0x46e9ab8f
je 0x18002c3bb
test r10d, r10d
jne 0x18002c2d0
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x18002c33d
cmp qword [rax + 0x30], 0
jne 0x18002c2a0
xor edi, edi
mov qword [0x180233038], rdi
lea rdx, [rbp + 0x1b0]
call fcn.18002d680
lea r8, [rax + 1]
movzx ecx, byte [rax]
xor byte [r8], cl
xor byte [rax + 2], cl
xor byte [rax + 3], cl
xor byte [rax + 4], cl
xor byte [rax + 5], cl
xor byte [rax + 6], cl
mov byte [rax + 7], 0
lea rdx, [rbp - 0x60]
call fcn.18002d510
mov r9, rax
lea rdx, [rax + 2]
mov r10d, 0x2c
nop word [rax + rax]
movzx ecx, byte [r9]
xor byte [rdx - 1], cl
movzx ecx, byte [r9]
xor byte [rdx], cl
movzx ecx, byte [r9]
xor byte [rdx + 1], cl
movzx eax, byte [r9]
xor byte [rdx + 2], al
lea rdx, [rdx + 4]
sub r10, 1
je 0x18002d31c
jmp 0x18002c390
mov ecx, dword [rsi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov edi, dword [rcx + rdx*4]
add rdi, r11
jmp 0x18002c33f
mov rax, qword gs:[0x60]
mov qword [0x180232fe8], rax
xor ecx, ecx
call fcn.1800dafd0
mov ecx, eax
call fcn.1800cd288
mov dword [rbp + 0x1b8], 0x6f726d37
mov word [rbp + 0x1bc], 0x77
xor edi, edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov r15d, 1
mov edx, r15d
lea rcx, [rbp + 0x1b9]
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rbx, rax
test rax, rax
je 0x18002c462
mov dword [rsp + 0x40], r15d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov r9d, 0x18
lea r8, [rsp + 0x40]
mov edx, 0x26
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetSetOptionA]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ebx, edi
mov rax, qword [0x180233230]
test rax, rax
jne 0x18002c494
inc ebx
cmp ebx, 0x3e8
je 0x18002c4b0
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
mov rax, qword [0x180233230]
test rax, rax
je 0x18002c470
cmp ebx, 0x3e8
jge 0x18002c4b0
mov edx, 0x1388
mov rcx, qword [0x180233230]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x18002c4b0
mov eax, dword [0x180233224]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [fcn.180006e20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ebx, edi
mov rax, qword [0x180233228]
test rax, rax
jne 0x18002c504
nop dword [rax + rax]
inc ebx
cmp ebx, 0x3e8
je 0x18002c520
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
mov rax, qword [0x180233228]
test rax, rax
je 0x18002c4e0
cmp ebx, 0x3e8
jge 0x18002c520
mov edx, 0x1388
mov rcx, qword [0x180233228]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x18002c520
mov eax, dword [0x180233220]
call fcn.180014db0
call fcn.180012fd0
lea rcx, [rbp + 0x58]
call fcn.180014480
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x18002c56e
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002c569
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002d47c
call fcn.1800c17e8
call fcn.180010450
movzx ecx, r15b
call fcn.180018a20
call fcn.180018820
lea rcx, [rbp - 0x60]
call fcn.18000a840
mov rdx, rax
call fcn.18002d770
lea rcx, [rbp - 0x60]
call fcn.18000afc0
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x68], xmm1
lea r12, [0x1802331c0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [r12 + r8], dil
jne 0x18002c5c0
mov rdx, r12
lea rcx, [rbp + 0x58]
call fcn.18003a510
nop
lea rdx, [0x18022c240]
lea rcx, [rbp + 0x58]
call fcn.180015380
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x18002c622
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002c61d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002d482
call fcn.1800c17e8
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x180018310]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x1802331f0], rax
cmp rax, 0xffffffffffffffff
je 0x18002d488
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
movdqa xmm1, xmmword [0x1801fde90]
movdqu xmmword [rbp + 0xa0], xmm1
mov byte [rbp + 0x90], 0
xor r14b, r14b
movups xmmword [rbp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x68], xmm1
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r12 + r8], r14b
jne 0x18002c687
mov rdx, r12
lea rcx, [rbp + 0x58]
call fcn.18003a510
nop
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0xc8]
call fcn.180017b40
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x18002c6e9
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002c6e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002d490
call fcn.1800c17e8
movdqa xmm0, xmmword [0x1801fde90]
movdqu xmmword [rbp + 0x68], xmm0
mov byte [rbp + 0x58], 0
mov rbx, qword [rbp + 0xc8]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x18002d237
nop
lea rsi, [rbx + 0x20]
cmp byte [rsi + 0x20], 0
je 0x18002c7a5
lea rdx, [rsi + 0x48]
lea rax, [rbp + 0x90]
cmp rax, rdx
je 0x18002c748
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x18002c73c
mov rdx, qword [rdx]
lea rcx, [rbp + 0x90]
call fcn.1800346f0
cmp qword [rsi + 0x38], 0
je 0x18002c7a5
mov dword [rbp + 0x1b0], 0x6c617645
mov byte [rbp + 0x1b4], 0
lea rcx, [rbp + 0x1b1]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x18002c770
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0xf
jbe 0x18002c787
mov rsi, qword [rsi]
cmp r8, rax
jne 0x18002c7a5
lea rdx, [rbp + 0x1b1]
mov rcx, rsi
call fcn.18018a980
movzx r14d, r14b
test eax, eax
cmove r14d, r15d
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x18002c7d8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x18002c7d3
nop dword [rax]
cmp rbx, qword [rax + 0x10]
jne 0x18002c7d3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x18002c7c0
mov rbx, rax
jmp 0x18002c7ff
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x18002c7ff
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x18002c7f0
cmp byte [rbx + 0x19], 0
je 0x18002c710
test r14b, r14b
je 0x18002d237
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rdx, qword [rbp + 0x90]
movdqa xmm0, xmmword [0x1801fe300]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rbp - 0x70], 0xa
lea rcx, [rbp - 0x7f]
call fcn.180006a20
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.18001d7b0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x180018ef0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
movdqa xmm0, xmmword [0x1801fee50]
movdqu xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1801fed60]
movdqu xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1801fee10]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x57564d3e
mov dword [rbp - 0x2c], 0x58354a58
mov dword [rbp - 0x28], 0x14302c
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5e], al
add rcx, 2
cmp rcx, 0x3a
jb 0x18002c8c0
mov byte [rbp - 0x25], 0
lea rcx, [rbp - 0x5f]
call fcn.180006a20
lea rcx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.180019680
movdqa xmm11, xmmword [0x1801feb00]
movdqa xmm12, xmmword [0x1801fe870]
test al, al
jne 0x18002c987
movdqa xmm0, xmmword [0x1801fe7f0]
movdqu xmmword [rbp - 0x60], xmm0
movdqu xmmword [rbp - 0x50], xmm12
mov dword [rbp - 0x40], 0x7475706e
mov dword [rbp - 0x3c], 0x76656420
mov dword [rbp - 0x38], 0x2e656369
mov byte [rbp - 0x34], al
lea rdx, [rbp - 0x5f]
lea rcx, [0x180230a70]
call fcn.180036f70
mov rcx, rax
call fcn.180037650
movdqa xmm0, xmmword [0x1801fe1e0]
movdqu xmmword [rbp - 0x60], xmm0
movdqu xmmword [rbp - 0x50], xmm11
mov dword [rbp - 0x40], 0x75202c6b
mov dword [rbp - 0x3c], 0x30206573
mov dword [rbp - 0x38], 0x20726f20
mov word [rbp - 0x34], 0x32
lea rdx, [rbp - 0x5f]
lea rcx, [0x180230a70]
jmp 0x18002c9bc
movdqa xmm0, xmmword [0x1801fe9b0]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1801fed40]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0x2e656369
mov byte [rsp + 0x64], 0
lea rdx, [rsp + 0x41]
lea rcx, [0x1802308f0]
call fcn.180036f70
mov rcx, rax
call fcn.180037650
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x1801feaf0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x32736320
mov dword [rsp + 0x54], 0x6e697720
mov dword [rsp + 0x58], 0xa776f64
mov byte [rsp + 0x5c], 0
lea rcx, [rsp + 0x41]
call fcn.180006a20
movdqa xmm6, xmmword [0x1801fe200]
movdqu xmmword [rbp + 0x78], xmm6
mov word [rbp + 0x88], gethostname
lea rdx, [rbp + 0x79]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov r12, rax
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
test r12, r12
je 0x18002ca11
movdqa xmm0, xmmword [0x1801feae0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x32736320
mov dword [rsp + 0x54], 0x6f727020
mov dword [rsp + 0x58], 0x73736563
mov word [rsp + 0x5c], 0xa
lea rcx, [rsp + 0x41]
call fcn.180006a20
cmp qword [0x180233000], 0
jne 0x18002cabe
nop
mov dword [rsp + 0x68], 0x3273630e
mov dword [rsp + 0x6c], 0x6578652e
mov byte [rsp + 0x70], 0
xor edx, edx
lea rcx, [rsp + 0x69]
call qword [sym.imp.kittylib.dll_attach_process]
mov qword [0x180233000], rax
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x180233000], 0
je 0x18002ca80
movdqa xmm0, xmmword [0x1801fead0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x646f6d20
mov dword [rsp + 0x54], 0x73656c75
mov word [rsp + 0x58], 0xa
lea rcx, [rsp + 0x41]
call fcn.180006a20
mov dword [rsp + 0x68], 0x32736363
mov dword [rsp + 0x6c], 0x6578652e
mov byte [rsp + 0x70], 0
mov rcx, qword [0x180233000]
test rcx, rcx
je 0x18002cb4c
mov qword [rbp + 0x1b0], rdi
lea r9, [rbp + 0x1b0]
lea r8, [rbp + 0x1b8]
lea rdx, [rsp + 0x69]
call qword [sym.imp.kittylib.dll_get_module_base_size]
mov rax, qword [rbp + 0x1b8]
test rax, rax
je 0x18002cb4c
mov rcx, qword [rbp + 0x1b0]
test rcx, rcx
je 0x18002cb4c
mov qword [rbp - 0x78], rcx
jmp 0x18002cb53
mov rax, rdi
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x80], rax
movaps xmm1, xmmword [rbp - 0x80]
test rax, rax
jne 0x18002cd20
movdqa xmm0, xmmword [0x1801fe4e0]
movdqu xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x1801fe150]
movdqu xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x1801fe440]
movdqu xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1801fe460]
movdqu xmmword [rbp - 0x30], xmm1
mov dword [rbp - 0x20], 0x4b5e5e53
mov word [rbp - 0x1c], gethostname
mov rcx, rdi
nop dword [rax + rax]
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5e], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5d], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5c], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5b], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5a], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x59], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x58], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x57], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x56], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x55], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x54], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x53], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x52], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x51], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x50], al
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x4f], al
add rcx, 0x11
cmp rcx, 0x44
jb 0x18002cbb0
mov byte [rbp - 0x1b], 0
lea rcx, [rbp - 0x5f]
call fcn.180006a20
movdqa xmm0, xmmword [0x1801fec20]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x20656b61
mov dword [rsp + 0x54], 0x68772061
mov dword [rsp + 0x58], 0xa656c69
mov byte [rsp + 0x5c], 0
lea rcx, [rsp + 0x41]
call fcn.180006a20
mov dword [rsp + 0x68], 0x32736376
mov dword [rsp + 0x6c], 0x6578652e
mov byte [rsp + 0x70], 0
mov dl, 1
lea rcx, [rsp + 0x69]
call qword [sym.imp.kittylib.dll_attach_process]
mov qword [0x180233000], rax
mov dword [rbp - 0x80], 0x32736316
mov dword [rbp - 0x7c], 0x6578652e
mov byte [rbp - 0x78], 0
test rax, rax
je 0x18002cd08
mov qword [rbp + 0x1b0], rdi
lea r9, [rbp + 0x1b0]
lea r8, [rbp + 0x1b8]
lea rdx, [rbp - 0x7f]
mov rcx, rax
call qword [sym.imp.kittylib.dll_get_module_base_size]
mov rax, qword [rbp + 0x1b8]
test rax, rax
je 0x18002cd08
mov rcx, qword [rbp + 0x1b0]
test rcx, rcx
je 0x18002cd08
mov qword [rbp - 0x78], rcx
jmp 0x18002cd0f
mov rax, rdi
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x80], rax
movaps xmm1, xmmword [rbp - 0x80]
test rax, rax
je 0x18002d496
movdqa xmm0, xmmword [0x1801fe180]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x6c257830
mov dword [rsp + 0x54], 0xa586c
movq rdx, xmm1
lea rcx, [rsp + 0x41]
call fcn.180006a20
lea rax, str.tier0.dll
mov qword [rbp + 0xd8], rax
lea rax, str.client.dll
mov qword [rbp + 0xe0], rax
lea rax, str.engine2.dll
mov qword [rbp + 0xe8], rax
lea rax, str.sdl3.dll
mov qword [rbp + 0xf0], rax
lea rax, str.inputsystem.dll
mov qword [rbp + 0xf8], rax
lea rax, [0x1802330a8]
mov qword [rbp - 0x60], rax
lea rax, [0x180233068]
mov qword [rbp - 0x58], rax
lea rax, [0x180233088]
mov qword [rbp - 0x50], rax
lea rax, [0x180233078]
mov qword [rbp - 0x48], rax
lea rax, [0x180233098]
mov qword [rbp - 0x40], rax
mov r14, rdi
mov r15d, 5
movdqa xmm6, xmmword [0x1801fe950]
nop dword [rax + rax]
mov rsi, qword [rbp + r14 + 0xd8]
mov rcx, qword [0x180233000]
test rcx, rcx
je 0x18002ce46
mov qword [rbp + 0x1b0], rdi
lea r9, [rbp + 0x1b0]
lea r8, [rbp + 0x1c0]
mov rdx, rsi
call qword [sym.imp.kittylib.dll_get_module_base_size]
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
je 0x18002ce3f
mov rax, qword [rbp + 0x1b0]
test rax, rax
je 0x18002ce3f
mov qword [rbp - 0x80], rcx
mov qword [rbp - 0x78], rax
mov rcx, qword [0x180233000]
movups xmm0, xmmword [rbp - 0x80]
jmp 0x18002ce4d
mov rcx, qword [0x180233000]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov rbx, qword [rbp + r14 - 0x60]
movups xmmword [rbx], xmm0
mov r8, qword [rbx]
test r8, r8
jne 0x18002ced3
nop dword [rax]
test rcx, rcx
je 0x18002ceac
mov qword [rbp + 0x1b8], rdi
lea r9, [rbp + 0x1b8]
lea r8, [rbp + 0x1c8]
mov rdx, rsi
call qword [sym.imp.kittylib.dll_get_module_base_size]
mov rcx, qword [rbp + 0x1c8]
test rcx, rcx
je 0x18002ceac
mov rax, qword [rbp + 0x1b8]
test rax, rax
je 0x18002ceac
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rax
movups xmm0, xmmword [rsp + 0x68]
jmp 0x18002ceb4
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rbx], xmm0
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8, qword [rbx]
test r8, r8
jne 0x18002ced3
mov rcx, qword [0x180233000]
jmp 0x18002ce60
movdqu xmmword [rbp + 0xb0], xmm6
mov word [rbp + 0xc0], 0xa58
mov byte [rbp + 0xc2], 0
mov rdx, rsi
lea rcx, [rbp + 0xb1]
call fcn.180006a20
add r14, 8
sub r15, 1
jne 0x18002cde0
lea rcx, str.____Preparing__this_might_take_a_little._n
call fcn.180006a20
call fcn.18001f7a0
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x180029fb0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x18002a1d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x18002a0c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x180029e90]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x18002a660]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x18002b440]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, 0xc8
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, 5
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov dword [rsp + 0x30], 0x43
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_SetWindowPos]
movdqa xmm6, xmmword [0x1801fe1f0]
movdqa xmm7, xmmword [0x1801fe600]
movdqa xmm8, xmmword [0x1801fe1c0]
movdqa xmm9, xmmword [0x1801fe1d0]
movdqa xmm10, xmmword [0x1801fe800]
nop dword [rax + rax]
mov rax, qword [0x18022c230]
inc rax
test rax, 0xfffffffffffffffe
jne 0x18002d120
lea rcx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.180019680
test al, al
jne 0x18002d0e6
movdqu xmmword [rbp - 0x60], xmm10
movdqu xmmword [rbp - 0x50], xmm12
mov dword [rbp - 0x40], 0x7475706e
mov dword [rbp - 0x3c], 0x76656420
mov dword [rbp - 0x38], 0x2e656369
mov byte [rbp - 0x34], al
lea rdx, [rbp - 0x5f]
lea rcx, [0x180230a70]
call fcn.180036f70
mov rcx, rax
call fcn.180037650
movdqu xmmword [rbp - 0x60], xmm9
movdqu xmmword [rbp - 0x50], xmm11
mov dword [rbp - 0x40], 0x75202c6b
mov dword [rbp - 0x3c], 0x30206573
mov dword [rbp - 0x38], 0x20726f20
mov word [rbp - 0x34], 0x32
lea rdx, [rbp - 0x5f]
lea rcx, [0x180230a70]
jmp 0x18002d113
movdqu xmmword [rsp + 0x40], xmm8
movdqu xmmword [rsp + 0x50], xmm7
mov dword [rsp + 0x60], 0x63697665
mov word [rsp + 0x64], 0x2e65
mov byte [rsp + 0x66], 0
lea rdx, [rsp + 0x41]
lea rcx, [0x1802308f0]
call fcn.180036f70
mov rcx, rax
call fcn.180037650
movdqu xmmword [rbp + 0x78], xmm6
mov word [rbp + 0x88], gethostname
lea rdx, [rbp + 0x79]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x18002d174
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x18002d174
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x18002d174
call fcn.18001d7b0
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x18002d050
mov edx, 0xc8
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Beep]
mov rcx, qword [0x18022c230]
cmp rcx, 0xffffffffffffffff
je 0x18002d1a2
call qword [sym.imp.ntdll.dll_NtClose]
mov qword [0x18022c230], 0xffffffffffffffff
mov rcx, qword [0x180233000]
call qword [sym.imp.kittylib.dll_free_process]
nop
lea rcx, [rbp + 0xc8]
call fcn.18002df00
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x18002d1fe
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002d1f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002d316
call fcn.1800c17e8
lea r11, [rsp + 0x270]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r10, qword [0x1802331a8]
test r10, r10
jne 0x18002d344
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r14, r15
nop
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x18002d2e5
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x18002d2e5
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rcx, [rbx + r10*4]
mov r8d, dword [rcx + r11]
add r8, r11
mov r9d, 0x576d4393
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x18002d2e0
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x18002d2b0
cmp r9d, 0x18b61352
je 0x18002d2fc
test r10d, r10d
jne 0x18002d290
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x18002d33a
cmp qword [rax + 0x30], 0
je 0x18002d33a
jmp 0x18002d260
mov edx, dword [rsi + 0x1c]
add rdx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx ecx, word [rax + r10*2]
mov r10d, dword [rdx + rcx*4]
add r10, r11
jmp 0x18002d33d
call fcn.1800e1ef4
int3
mov byte [r9 + 0xb1], 0
lea rdx, [r9 + 1]
xor ecx, ecx
mov r9d, reloc.WS2_32.dll_recv
call rdi
xor ecx, ecx
call fcn.1800c7cf4
nop
mov r10, rdi
mov qword [0x1802331a8], r10
lea rdx, [rbp + 0x1b0]
call fcn.18002d6e0
lea r8, [rax + 1]
movzx edx, byte [rax]
xor byte [r8], dl
xor byte [rax + 2], dl
xor byte [rax + 3], dl
xor byte [rax + 4], dl
xor byte [rax + 5], dl
xor byte [rax + 6], dl
mov byte [r8 + 6], 0
lea rdx, [rsp + 0x40]
call fcn.18002d6a0
lea rdx, [rax + 1]
movzx r9d, byte [rax]
xor byte [rdx], r9b
xor byte [rax + 2], r9b
xor byte [rax + 3], r9b
xor byte [rax + 4], r9b
xor byte [rax + 5], r9b
xor byte [rax + 6], r9b
xor byte [rax + 7], r9b
xor byte [rax + 8], r9b
xor byte [rax + 9], r9b
xor byte [rax + 0xa], r9b
xor byte [rax + 0xb], r9b
xor byte [rax + 0xc], r9b
xor byte [rax + 0xd], r9b
xor byte [rax + 0xe], r9b
xor byte [rax + 0xf], r9b
xor byte [rax + 0x10], r9b
xor byte [rax + 0x11], r9b
xor byte [rax + 0x12], r9b
xor byte [rax + 0x13], r9b
xor byte [rax + 0x14], r9b
xor byte [rax + 0x15], r9b
xor byte [rax + 0x16], r9b
xor byte [rax + 0x17], r9b
mov byte [rdx + 0x17], 0
xor ecx, ecx
mov r9d, reloc.WS2_32.dll_recv
call r10
lea rdx, [rbp + 0x78]
call fcn.18002d700
lea rdx, [rax + 1]
movzx r8d, byte [rax]
xor byte [rdx], r8b
xor byte [rax + 2], r8b
xor byte [rax + 3], r8b
xor byte [rax + 4], r8b
xor byte [rax + 5], r8b
xor byte [rax + 6], r8b
xor byte [rax + 7], r8b
xor byte [rax + 8], r8b
xor byte [rax + 9], r8b
xor byte [rax + 0xa], r8b
xor byte [rax + 0xb], r8b
xor byte [rax + 0xc], r8b
xor byte [rax + 0xd], r8b
xor byte [rax + 0xe], r8b
xor byte [rax + 0xf], r8b
xor byte [rax + 0x10], r8b
mov byte [rdx + 0x10], 0
lea rcx, [0x1802332d8]
call fcn.1800319d0
mov rdx, r12
lea rcx, [rsp + 0x40]
call fcn.180031c10
nop
lea rdx, [0x18022c240]
lea rcx, [rsp + 0x40]
call fcn.18000f360
nop
lea rcx, [rsp + 0x40]
call fcn.1800319f0
xor ecx, ecx
call fcn.1800c7cf4
nop
call fcn.1800e1ef4
int3
call fcn.1800e1ef4
int3
xor ecx, ecx
call fcn.1800c7cf4
nop
call fcn.1800e1ef4
int3
lea rdx, [rsp + 0x40]
call fcn.18002d730
lea rcx, [rax + 1]
movzx edx, byte [rax]
xor byte [rcx], dl
xor byte [rax + 2], dl
xor byte [rax + 3], dl
xor byte [rax + 4], dl
xor byte [rax + 5], dl
xor byte [rax + 6], dl
xor byte [rax + 7], dl
xor byte [rax + 8], dl
xor byte [rax + 9], dl
xor byte [rax + 0xa], dl
xor byte [rax + 0xb], dl
xor byte [rax + 0xc], dl
xor byte [rax + 0xd], dl
xor byte [rax + 0xe], dl
xor byte [rax + 0xf], dl
xor byte [rax + 0x10], dl
xor byte [rax + 0x11], dl
xor byte [rax + 0x12], dl
xor byte [rax + 0x13], dl
xor byte [rax + 0x14], dl
xor byte [rax + 0x15], dl
xor byte [rax + 0x16], dl
xor byte [rax + 0x17], dl
xor byte [rax + 0x18], dl
mov byte [rax + 0x19], 0
call fcn.180006a20
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call fcn.1800c7cf4
int3