Function at 0x1402c2980
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
movaps xmmword [rsp + 0x90], xmm6
mov rax, qword [0x14082e958]
xor rax, rsp
mov qword [rsp + 0x88], rax
mov byte [0x14083de51], 1
mov rax, qword [0x14083dae8]
mov qword [rsp + 0x50], rax
mov eax, 0xbed44923
xorps xmm6, xmm6
mov r15d, 0xc0a026ed
mov r12, qword [sym.imp.USER32.dll_DestroyWindow]
mov r13d, 0x2e92c3fe
mov esi, 0xef3aaa02
mov edi, 0x9282dd54
mov ebp, 0x38bb0103
mov r14, qword [sym.imp.USER32.dll_GetSystemMetrics]
lea rbx, [rsp + 0x78]
jmp 0x1402c2b00
movups xmmword [0x14083db18], xmm6
movups xmmword [0x14083db08], xmm6
movups xmmword [0x14083daf8], xmm6
mov qword [0x14083db28], 0
mov dword [0x14083db18], 1
mov dword [0x14083db08], 1
mov r9, qword [0x14083db30]
mov qword [0x14083db10], r9
mov dword [0x14083db04], 0
mov dword [0x14083daf8], 0x15
mov eax, dword [0x14083d9a0]
mov dword [0x14083daf0], eax
mov eax, dword [0x14083d9a4]
mov dword [0x14083daf4], eax
movabs rax, 0x5000000001
mov qword [0x14083db1c], rax
mov dword [0x14083db2c], 0x80000000
mov rcx, qword [0x14083dae0]
mov rax, qword [rcx]
lea rdx, [0x14083dae8]
mov qword [rsp + 0x38], rdx
lea rdx, [0x14083daf0]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r8d, 1
call qword [rax + 0xa0]
test eax, eax
sets byte [rsp + 0x4f]
mov eax, dword [0x14083efc8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x633390f5
mov ecx, 0x51e1b376
cmove eax, ecx
cmp dword [0x14083efcc], 0xa
cmovl eax, ecx
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x146998d7
jle 0x1402c2b60
cmp eax, 0x38bb0102
jg 0x1402c2bc0
cmp eax, 0x241ec3df
jg 0x1402c2c59
cmp eax, 0x146998d8
je 0x1402c2ea3
cmp eax, 0x1b468a76
je 0x1402c2eb4
cmp eax, 0x1cce4432
jne 0x1402c2b00
mov eax, dword [0x14083efc8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x32b0a451
cmove eax, esi
cmp dword [0x14083efcc], 0xa
cmovl eax, esi
jmp 0x1402c2b00
cmp eax, 0xc67f5140
jg 0x1402c2c10
cmp eax, 0xb966453f
jg 0x1402c2c84
cmp eax, 0x8337be80
je 0x1402c2ecb
cmp eax, 0x9282dd54
je 0x1402c29fb
cmp eax, 0x9f00f374
jne 0x1402c2b00
mov rax, qword [0x14083db30]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
mov eax, 0xe03ec7ad
mov ecx, 0xc67f5141
cmove eax, ecx
jmp 0x1402c2b00
cmp eax, 0x54687081
jg 0x1402c2cda
cmp eax, 0x51e1b375
jle 0x1402c2e15
cmp eax, 0x51e1b376
je 0x1402c2ed5
cmp eax, 0x540b5726
jne 0x1402c2b00
mov rcx, qword [rsp + 0x68]
call r12
mov qword [0x14083db38], 0
mov eax, 0x54687082
jmp 0x1402c2b00
cmp eax, 0xef3aaa01
jg 0x1402c2dc4
cmp eax, 0xc67f5141
je 0x1402c2eec
cmp eax, 0xcaab3391
je 0x1402c2f14
cmp eax, 0xe03ec7ad
jne 0x1402c2b00
mov rcx, qword [rsp + 0x60]
call r12
mov qword [0x14083db30], 0
mov eax, 0xc67f5141
jmp 0x1402c2b00
cmp eax, 0x241ec3e0
je 0x1402c2f39
cmp eax, 0x2e92c3fe
je 0x1402c2f5f
cmp eax, 0x32b0a451
jne 0x1402c2b00
mov eax, 0xef3aaa02
jmp 0x1402c2b00
cmp eax, 0xb9664540
je 0x1402c2f76
cmp eax, 0xbed44923
je 0x1402c2fab
cmp eax, 0xc0a026ed
jne 0x1402c2b00
mov rax, qword [0x14083db38]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
setne byte [rsp + 0x4e]
mov eax, dword [0x14083efc8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8337be80
mov ecx, 0x1b468a76
jmp 0x1402c2ae5
cmp eax, 0x54687082
je 0x1402c2fc3
cmp eax, 0x633390f5
jne 0x1402c30c1
movups xmmword [0x14083db18], xmm6
movups xmmword [0x14083db08], xmm6
movups xmmword [0x14083daf8], xmm6
mov qword [0x14083db28], 0
mov dword [0x14083db18], 1
mov dword [0x14083db08], 1
mov r9, qword [0x14083db30]
mov qword [0x14083db10], r9
mov dword [0x14083db04], 0
mov dword [0x14083daf8], 0x15
mov eax, dword [0x14083d9a0]
mov dword [0x14083daf0], eax
mov eax, dword [0x14083d9a4]
mov dword [0x14083daf4], eax
movabs rax, 0x5000000001
mov qword [0x14083db1c], rax
mov dword [0x14083db2c], 0x80000000
mov rcx, qword [0x14083dae0]
mov rax, qword [rcx]
lea rdx, [0x14083dae8]
mov qword [rsp + 0x38], rdx
lea rdx, [0x14083daf0]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r8d, 1
call qword [rax + 0xa0]
mov eax, 0x9282dd54
jmp 0x1402c2b00
cmp eax, 0xfd67618f
jg 0x1402c2e46
cmp eax, 0xef3aaa02
jne 0x1402c30ce
mov rax, qword [0x14083dae0]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
setne byte [rsp + 0x4d]
mov eax, dword [0x14083efc8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x32b0a451
cmove eax, r13d
cmp dword [0x14083efcc], 0xa
cmovl eax, r13d
jmp 0x1402c2b00
cmp eax, 0x4fd5bc54
jne 0x1402c30de
mov eax, dword [0x14083efc8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf83357bd
cmove eax, ebp
cmp dword [0x14083efcc], 0xa
cmovl eax, ebp
jmp 0x1402c2b00
cmp eax, 0x48dd77b
jne 0x1402c30ee
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov edx, 0x37d0
mov r8d, 0x418
mov r9d, 8
lea rcx, str.1.88
call fcn.14006fc00
call fcn.14001a850
test rax, rax
mov eax, 0x7f0fff2b
mov ecx, 0x146998d8
cmove eax, ecx
jmp 0x1402c2b00
xor ecx, ecx
call fcn.14001a860
mov eax, 0x7f0fff2b
jmp 0x1402c2b00
cmp byte [rsp + 0x4e], 0
mov eax, 0x54687082
mov ecx, 0x540b5726
cmovne eax, ecx
jmp 0x1402c2b00
mov eax, 0xc0a026ed
jmp 0x1402c2b00
cmp byte [rsp + 0x4f], 0
mov eax, 0x48dd77b
mov ecx, 0x4fd5bc54
cmovne eax, ecx
jmp 0x1402c2b00
mov eax, dword [0x14083efc8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8337be80
cmove eax, r15d
cmp dword [0x14083efcc], 0xa
cmovl eax, r15d
jmp 0x1402c2b00
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x58]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14083dae0], 0
mov eax, 0x9f00f374
jmp 0x1402c2b00
mov eax, dword [0x14083efc8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x633390f5
cmove eax, edi
cmp dword [0x14083efcc], 0xa
cmovl eax, edi
jmp 0x1402c2b00
cmp byte [rsp + 0x4d], 0
mov eax, 0x9f00f374
mov ecx, 0xcaab3391
cmovne eax, ecx
jmp 0x1402c2b00
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x50]
call qword [rax + 0x150]
mov rcx, qword [0x14083dae8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14083dae8], 0
mov eax, 0x1cce4432
jmp 0x1402c2b00
cmp qword [rsp + 0x50], 0
mov eax, 0xb9664540
mov ecx, 0x1cce4432
cmove eax, ecx
jmp 0x1402c2b00
call fcn.1400eb230
call fcn.1400edcb0
xor ecx, ecx
call r14
mov dword [0x14083d9a0], eax
mov ecx, 1
call r14
mov dword [0x14083d9a4], eax
mov ecx, dword [0x14083d9a0]
mov edx, ecx
shr edx, 0x1f
add edx, ecx
sar edx, 1
mov dword [0x14083d998], edx
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
sar ecx, 1
mov dword [0x14083d99c], ecx
mov ecx, dword [0x14083d958]
call fcn.1401fc7f0
mov qword [0x14083db38], rax
call fcn.1401f6e80
mov qword [0x14083db30], rax
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetMenu]
mov rcx, qword [0x14083db38]
lea rdx, [0x14083db74]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rsp + 0x70], rbx
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x78], 0
mov eax, dword [0x14083d9a0]
mov dword [rsp + 0x80], eax
mov eax, dword [0x14083d9a4]
mov dword [rsp + 0x84], eax
mov rcx, qword [0x14083db30]
mov rdx, rbx
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x14083db30]
xor edx, edx
mov r8b, 0xff
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x14083dae0]
call sub.d3d9.dll_Direct3DCreate9Ex
test eax, eax
mov eax, 0x241ec3e0
mov ecx, 0xfd676190
cmovs eax, ecx
jmp 0x1402c2b00
cmp eax, 0x7f0fff2b
jne 0x1402c2b00
jmp 0x1402c3104
cmp eax, 0xf83357bd
jne 0x1402c2b00
jmp 0x1402c31b6
cmp eax, 0x38bb0103
jne 0x1402c2b00
jmp 0x1402c31b6
cmp eax, 0xfd676190
jne 0x1402c2b00
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.1401f8120
mov rcx, qword [0x14083db30]
call fcn.1400ec510
mov rcx, qword [0x14083dae8]
call fcn.1400eb110
mov rcx, qword [0x14083db30]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x14083d9a4]
mov r9d, dword [0x14083d9a0]
mov r8d, dword [0x14083db78]
mov edx, dword [0x14083db74]
mov rcx, qword [0x14083db30]
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x14083db30]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dl, byte [0x14083df8a]
lea rcx, [0x14083d938]
call fcn.1401fd0d0
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.140384540
movaps xmm6, xmmword [rsp + 0x90]
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [0x14083dae0]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3