Function at 0x1400e252c
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x188]
sub rsp, 0x248
mov qword [rbp - 0x68], 0xfffffffffffffffe
movaps xmmword [rax - 0x58], xmm6
mov rax, qword [0x1402126b0]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov rdi, r9
mov r14, r8
mov ebx, edx
mov r13, rcx
mov r15, qword [rbp + 0x1b0]
xor esi, esi
cmp qword [rcx + 0xc8], rsi
je 0x1400e4b14
mov r12d, esi
add rcx, 0x550
call fcn.1400e944c
lea r8d, [rsi + 1]
test eax, eax
jle 0x1400e25ee
mov byte [rsp + 0x60], sil
mov edx, r12d
lea rcx, [r13 + 0x550]
call fcn.1400e8eb8
mov r10, qword [rax]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9, rdi
mov r8, r14
mov edx, ebx
mov rcx, rax
call qword [r10]
cmp byte [rsp + 0x60], sil
jne 0x1400e2641
inc r12d
lea rcx, [r13 + 0x550]
call fcn.1400e944c
cmp r12d, eax
jl 0x1400e259e
mov r8d, 1
mov r12d, 2
cmp byte [r13 + 0x1e1], sil
je 0x1400e26c6
mov eax, ebx
sub eax, 0x83
je 0x1400e26bb
sub eax, r12d
je 0x1400e26bb
cmp eax, 1
jne 0x1400e26c6
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x1400e37a8
test r14, r14
sete sil
mov qword [r15], rsi
jmp 0x1400e2691
mov qword [r15], rax
cmp ebx, 0x7b
je 0x1400e2661
cmp ebx, 0x1ff
jbe 0x1400e2691
cmp ebx, 0x203
jbe 0x1400e269b
cmp ebx, 0x20a
jne 0x1400e2691
movsx ecx, di
mov dword [rsp + 0x68], ecx
shr rdi, 0x10
movsx ecx, di
mov dword [rsp + 0x6c], ecx
lea rdx, [rsp + 0x68]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rcx, qword [rsp + 0x68]
mov qword [r13 + 0x190], rcx
mov eax, 1
jmp 0x1400e4b16
movsx eax, di
mov dword [rsp + 0x68], eax
shr rdi, 0x10
movsx eax, di
mov dword [rsp + 0x6c], eax
mov rax, qword [rsp + 0x68]
mov qword [r13 + 0x190], rax
jmp 0x1400e2691
mov qword [r15], rsi
mov al, r8b
jmp 0x1400e4b16
mov eax, 0x133
cmp ebx, eax
ja 0x1400e3ae0
je 0x1400e4398
cmp ebx, 0x24
ja 0x1400e37a8
je 0x1400e36e9
sub ebx, 5
je 0x1400e368c
sub ebx, r12d
je 0x1400e364e
sub ebx, 1
je 0x1400e3631
sub ebx, 7
je 0x1400e28b9
sub ebx, 1
je 0x1400e27ea
sub ebx, 4
je 0x1400e27e2
cmp ebx, 0xc
jne 0x1400e4b14
cmp qword [r13 + 0x160], rsi
je 0x1400e4b14
cmp di, r8w
jne 0x1400e4b14
cmp byte [r13 + 0x509], sil
jne 0x1400e26be
mov qword [rsp + 0x68], rsi
lea rcx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, [rsp + 0x68]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rdx, qword [rsp + 0x68]
mov rcx, r13
call fcn.1400e15f4
mov rbx, rax
test rax, rax
je 0x1400e4b14
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + Ordinal_41]
test r12b, al
je 0x1400e4b14
mov qword [rbp - 0x40], reloc.WLDAP32.dll_Ordinal_26
mov dword [rbp - 0x30], esi
mov dword [rbp - 0x24], esi
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x2c], rax
call fcn.1400e24b4
mov word [rbp - 0x22], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov rax, qword [rbx]
lea rdx, [rbp - 0x40]
mov rcx, rbx
call qword [rax + 0x280]
jmp 0x1400e2691
mov qword [r15], r8
jmp 0x1400e26be
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rbp - 0x40]
call fcn.14013d3b0
mov rax, qword [r13 + 0x190]
mov qword [rbp - 0x2c], rax
call fcn.1400e24b4
mov word [rbp - 0x22], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov rcx, qword [r13 + 0x170]
test rcx, rcx
je 0x1400e283a
mov dword [rbp - 0x40], 0xa
mov qword [rbp - 0x38], rcx
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x280]
mov rcx, qword [r13 + 0x178]
test rcx, rcx
je 0x1400e285f
mov eax, reloc.WS2_32.dll_ntohl
mov dword [rbp - 0x40], eax
mov qword [rbp - 0x38], rcx
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x280]
xor edx, edx
mov rcx, r13
call fcn.1400e69f8
mov rbx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_GetActiveWindow]
cmp rax, rbx
jne 0x1400e2897
mov edx, 4
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindow]
test rax, rax
je 0x1400e2897
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
mov rcx, qword [r13 + 0x108]
test rcx, rcx
je 0x1400e4b14
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [r13 + 0x108], rsi
jmp 0x1400e4b14
cmp qword [r13 + 0x160], rsi
jne 0x1400e290e
xor edx, edx
lea r8d, [rdx + 0x48]
lea rcx, [rbp - 0x40]
call fcn.14013d3b0
lea rdx, [rbp - 0x40]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_BeginPaint]
mov r8d, 0xff000000
lea rdx, [rbp - 0x34]
mov rcx, qword [r13 + 0xd0]
call fcn.1400f5860
lea rdx, [rbp - 0x40]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_EndPaint]
jmp 0x1400e2691
xor eax, eax
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rax
lea rdx, [rbp + 0x60]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_GetClientRect]
xor eax, eax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
xor r8d, r8d
lea rdx, [rbp + 0x20]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x1400e2691
mov r12d, 1
cmp byte [r13 + 0x1de], sil
je 0x1400e2969
mov dl, r12b
mov rcx, r13
call fcn.1400e6e0c
mov dl, r12b
mov rcx, r13
call fcn.1400e6fbc
mov byte [rsp + 0x60], sil
mov rbx, qword [rbp + 0x68]
mov r14d, ebx
mov rdi, qword [rbp + 0x60]
sub r14d, edi
mov dword [rbp - 0x78], r14d
mov r15d, dword [rbp + 0x6c]
sub r15d, dword [rbp + 0x64]
mov dword [rsp + 0x7c], r15d
mov dl, r12b
mov rcx, r13
call fcn.1400e6fbc
cmp byte [r13 + 0x1dd], sil
je 0x1400e2bf9
mov byte [r13 + 0x1dd], sil
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x1400e2c87
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x1400e2c87
mov rcx, qword [r13 + 0x160]
call fcn.1400f319c
test al, al
je 0x1400e2ab4
movaps xmm6, xmmword [rbp + 0x60]
movaps xmmword [rbp - 0x50], xmm6
mov rcx, qword [r13 + 0xd8]
test rcx, rcx
je 0x1400e2a0c
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, qword [r13 + 0xe0]
test rcx, rcx
je 0x1400e2a1e
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, qword [r13 + 0xe8]
test rcx, rcx
je 0x1400e2a30
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [r13 + 0xf8]
test rcx, rcx
je 0x1400e2a42
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [r13 + 0xd8], rsi
mov qword [r13 + 0xe0], rsi
mov qword [r13 + 0xe8], rsi
mov qword [r13 + 0xf8], rsi
cmp byte [r13 + 0x1e1], sil
je 0x1400e2a93
mov eax, dword [r13 + 0x1e4]
add dword [rbp - 0x50], eax
mov eax, dword [r13 + 0x1e8]
add dword [rbp - 0x4c], eax
mov eax, dword [r13 + 0x1ec]
sub dword [rbp - 0x48], eax
mov eax, dword [r13 + 0x1f0]
sub dword [rbp - 0x44], eax
movaps xmm6, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x10], xmm6
mov rcx, qword [r13 + 0x160]
mov rax, qword [rcx]
mov r8b, r12b
lea rdx, [rbp + 0x10]
call qword [rax + 0xb8]
jmp 0x1400e2b74
lea r15, [r13 + 0x5b0]
mov rcx, r15
call fcn.1400e91a8
mov rcx, qword [r13 + 0x160]
mov rax, qword [rcx]
mov r9d, 0x80000009
xor r8d, r8d
lea rdx, [0x1400e7788]
call qword [rax + 0x268]
mov edi, esi
mov rcx, r15
call fcn.1400e944c
test eax, eax
jle 0x1400e2b6f
mov edx, edi
mov rcx, r15
call fcn.1400e8eb8
mov rbx, rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x258]
mov rcx, rbx
test al, al
jne 0x1400e2b38
mov rdx, qword [rbx]
call qword [rdx + 0xb0]
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x10], xmm0
mov r9, qword [rbx]
mov r8b, r12b
lea rdx, [rbp + 0x10]
mov rcx, rbx
call qword [r9 + 0xb8]
jmp 0x1400e2b60
mov rax, qword [rbx]
lea rdx, [rbp + 0x40]
call qword [rax + 0xa0]
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x10], xmm0
mov rax, qword [rbx]
mov r8b, r12b
lea rdx, [rbp + 0x10]
mov rcx, rbx
call qword [rax + 0xb8]
add edi, r12d
mov rcx, r15
call fcn.1400e944c
cmp edi, eax
jl 0x1400e2af1
mov r15d, dword [rsp + 0x7c]
mov byte [rsp + 0x60], r12b
cmp byte [r13 + 0x1dc], sil
je 0x1400e2c87
mov byte [r13 + 0x1dc], sil
mov byte [rsp + 0x28], sil
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.windowinit
mov rdx, qword [r13 + 0x160]
mov rcx, r13
call fcn.1400e6608
cmp byte [r13 + 0x1e1], sil
je 0x1400e2bdc
cmp byte [r13 + 0x1f4], sil
je 0x1400e2bdc
mov rcx, r13
call fcn.1400e22c0
xor edx, edx
mov rcx, r13
call fcn.1400e6fbc
mov al, r12b
jmp 0x1400e4b16
lea rcx, [r13 + 0x758]
mov rdx, qword [r13 + 0xc8]
call fcn.1400eed84
mov byte [rsp + 0x60], r12b
jmp 0x1400e2c87
cmp byte [r13 + 0x1e1], sil
je 0x1400e2d07
cmp byte [r13 + 0x1f4], sil
je 0x1400e2c87
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x50], xmm0
mov rcx, qword [r13 + 0xf0]
test rcx, rcx
je 0x1400e2c3f
shr rdi, 0x20
shr rbx, 0x20
sub ebx, edi
imul ebx, r14d
shl ebx, 2
movsxd r8, ebx
xor edx, edx
call fcn.14013d3b0
mov eax, dword [r13 + 0x1e4]
add dword [rbp - 0x50], eax
mov eax, dword [r13 + 0x1e8]
add dword [rbp - 0x4c], eax
mov eax, dword [r13 + 0x1ec]
sub dword [rbp - 0x48], eax
mov eax, dword [r13 + 0x1f0]
sub dword [rbp - 0x44], eax
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x10], xmm0
mov rcx, qword [r13 + 0x160]
mov rax, qword [rcx]
mov r8b, r12b
lea rdx, [rbp + 0x10]
call qword [rax + 0xb8]
cmp byte [r13 + 0x1e1], sil
je 0x1400e2d07
mov ebx, 0xffffffec
mov edx, ebx
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov r8d, eax
bts r8d, 0x13
cmp eax, r8d
je 0x1400e2cc0
mov edx, ebx
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov byte [r13 + 0x1df], r12b
lea rbx, [r13 + 0x1f8]
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x20]
call qword [sym.imp.USER32.dll_UnionRect]
mov eax, dword [rbp + 0x28]
cmp eax, dword [rbp + 0x68]
cmovg eax, dword [rbp + 0x68]
mov dword [rbp + 0x28], eax
mov eax, dword [rbp + 0x2c]
cmp eax, dword [rbp + 0x6c]
cmovg eax, dword [rbp + 0x6c]
mov dword [rbp + 0x2c], eax
xor edx, edx
lea r8d, [rdx + 0x10]
mov rcx, rbx
call fcn.14013d3b0
cmp byte [r13 + 0x1df], sil
je 0x1400e2d4d
cmp qword [r13 + 0xe8], rsi
jne 0x1400e2d4d
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov qword [r13 + 0xd8], rax
lea r9, [r13 + 0xf0]
mov r8d, r15d
mov edx, r14d
mov rcx, qword [r13 + 0xd0]
call fcn.1400f57c0
mov qword [r13 + 0xe8], rax
xor edx, edx
lea r8d, [rdx + 0x48]
lea rcx, [rbp + 0x90]
call fcn.14013d3b0
lea rdx, [rbp + 0x90]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_BeginPaint]
cmp byte [r13 + 0x1df], sil
je 0x1400e3543
mov rdx, qword [r13 + 0xe8]
mov rcx, qword [r13 + 0xd8]
call qword [sym.imp.GDI32.dll_SelectObject]
mov qword [rbp - 0x70], rax
mov rcx, qword [r13 + 0xd8]
call qword [sym.imp.GDI32.dll_SaveDC]
mov r15d, eax
mov dword [rsp + 0x78], eax
cmp byte [r13 + 0x1e1], sil
je 0x1400e2e1c
mov r9d, dword [rbp + 0x6c]
mov edx, r9d
sub edx, dword [rbp + 0x2c]
mov ecx, r9d
mov r11d, dword [rbp + 0x24]
sub ecx, r11d
cmp edx, ecx
jge 0x1400e2e1c
mov r10d, edx
imul r10d, r14d
mov ecx, dword [rbp + 0x28]
mov r8d, dword [rbp + 0x20]
cmp r8d, ecx
jge 0x1400e2e0c
lea r9d, [r8 + r10]
shl r9d, 2
movsxd rcx, r9d
mov rax, qword [r13 + 0xf0]
mov dword [rcx + rax], esi
add r8d, r12d
add r9d, 4
mov ecx, dword [rbp + 0x28]
cmp r8d, ecx
jl 0x1400e2de8
mov r9d, dword [rbp + 0x6c]
mov r11d, dword [rbp + 0x24]
add edx, r12d
add r10d, r14d
mov eax, r9d
sub eax, r11d
cmp edx, eax
jl 0x1400e2dd7
mov rcx, qword [r13 + 0x160]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rbp + 0x20]
mov rdx, qword [r13 + 0xd8]
call qword [rax + 0x2a0]
cmp byte [r13 + 0x1e1], sil
je 0x1400e3055
mov ebx, esi
lea r12, [r13 + 0x570]
mov rcx, r12
call fcn.1400e944c
test eax, eax
jle 0x1400e304f
mov edx, ebx
mov rcx, r12
call fcn.1400e8eb8
mov rdi, rax
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x1400e2e97
mov edx, ebx
mov rcx, r12
call fcn.1400e9804
lea rcx, [r13 + 0x580]
mov edx, ebx
call fcn.1400e9804
jmp 0x1400e3036
inc ebx
mov rcx, rdi
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1400e3036
mov r8, rdi
lea rdx, [rbp - 0x60]
mov rcx, r13
call fcn.1400e1f68
xor eax, eax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x10]
call qword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x1400e3036
mov qword [rsp + 0x68], rsi
mov rcx, qword [r13 + 0xd8]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r15, rax
mov r8d, dword [rbp - 0x54]
sub r8d, dword [rbp - 0x5c]
mov edx, dword [rbp - 0x58]
sub edx, dword [rbp - 0x60]
lea r9, [rsp + 0x68]
mov rcx, rax
call fcn.1400f57c0
mov r14, rax
mov qword [rsp + 0x70], rax
mov edx, dword [rbp - 0x54]
sub edx, dword [rbp - 0x5c]
mov ecx, dword [rbp - 0x58]
sub ecx, dword [rbp - 0x60]
imul edx, ecx
shl edx, 2
movsxd r8, edx
xor edx, edx
mov rcx, qword [rsp + 0x68]
call fcn.14013d3b0
mov rdx, r14
mov rcx, r15
call qword [sym.imp.GDI32.dll_SelectObject]
mov qword [rbp - 0x80], rax
mov r9d, gethostname
mov r8, r15
mov edx, 0x317
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov r11d, esi
mov r8d, dword [rbp - 0x54]
mov ecx, r8d
mov r10d, dword [rbp - 0x5c]
sub ecx, r10d
mov r9d, dword [rbp - 0x58]
mov edx, dword [rbp - 0x60]
test ecx, ecx
jle 0x1400e2fe7
mov r12d, 1
mov r14d, esi
mov rdi, rsi
mov eax, r9d
sub eax, edx
test eax, eax
jle 0x1400e2fcd
imul eax, r11d
movsxd rcx, eax
add rcx, rdi
mov r8, qword [rsp + 0x68]
mov eax, dword [r8 + rcx*4]
test eax, eax
je 0x1400e2fb5
or eax, 0xff000000
mov dword [r8 + rcx*4], eax
mov r9d, dword [rbp - 0x58]
mov edx, dword [rbp - 0x60]
add r14d, r12d
add rdi, r12
mov eax, r9d
sub eax, edx
cmp r14d, eax
jl 0x1400e2f8e
mov r8d, dword [rbp - 0x54]
mov r10d, dword [rbp - 0x5c]
add r11d, r12d
mov eax, r8d
sub eax, r10d
cmp r11d, eax
jl 0x1400e2f7f
lea r12, [r13 + 0x570]
mov r14, qword [rsp + 0x70]
sub r8d, r10d
sub r9d, edx
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r8d
mov r8d, r10d
mov rcx, qword [r13 + 0xd8]
call qword [sym.imp.GDI32.dll_BitBlt]
mov rdx, qword [rbp - 0x80]
mov rcx, r15
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, r14
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, r15
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, r12
call fcn.1400e944c
cmp ebx, eax
jl 0x1400e2e60
mov r14d, dword [rbp - 0x78]
mov r15d, dword [rsp + 0x78]
mov r12d, 1
mov ebx, esi
lea rdi, [r13 + 0x560]
mov rcx, rdi
call fcn.1400e944c
test eax, eax
jle 0x1400e309b
mov edx, ebx
mov rcx, rdi
call fcn.1400e8eb8
mov r9, qword [rax]
lea r8, [rbp + 0x20]
mov rdx, qword [r13 + 0xd8]
mov rcx, rax
call qword [r9 + 0x2e8]
add ebx, r12d
mov rcx, rdi
call fcn.1400e944c
cmp ebx, eax
jl 0x1400e306a
mov edx, r15d
mov rcx, qword [r13 + 0xd8]
call qword [sym.imp.GDI32.dll_RestoreDC]
cmp byte [r13 + 0x1e1], sil
je 0x1400e3470
xor eax, eax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
lea rdx, [rbp + 0x10]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea r12, [r13 + 0x208]
mov rcx, r12
call fcn.1400e96e0
test al, al
jne 0x1400e3362
mov r15d, dword [rbp + 0x68]
mov rcx, qword [rbp + 0x60]
sub r15d, ecx
mov dword [rsp + 0x68], r15d
mov edi, dword [rbp + 0x6c]
sub edi, dword [rbp + 0x64]
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x50], xmm0
add ecx, dword [r13 + 0x1e4]
mov dword [rbp - 0x50], ecx
mov eax, dword [r13 + 0x1e8]
add dword [rbp - 0x4c], eax
mov eax, dword [r13 + 0x1ec]
sub dword [rbp - 0x48], eax
mov eax, dword [r13 + 0x1f0]
sub dword [rbp - 0x44], eax
mov rcx, r12
call fcn.1400e96e0
test al, al
jne 0x1400e33eb
cmp qword [r13 + 0xf8], rsi
jne 0x1400e31ef
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov qword [r13 + 0xe0], rax
lea rbx, [r13 + 0x100]
mov r9, rbx
mov r8d, edi
mov edx, r15d
mov rcx, qword [r13 + 0xd0]
call fcn.1400f57c0
mov qword [r13 + 0xf8], rax
imul edi, r15d
shl edi, 2
mov r8d, edi
xor edx, edx
mov rcx, qword [rbx]
call fcn.14013d3b0
mov rdx, qword [r13 + 0xf8]
mov rcx, qword [r13 + 0xe0]
call qword [sym.imp.GDI32.dll_SelectObject]
nop
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x40], xmm0
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x40]
mov rcx, qword [r13 + 0xe0]
call fcn.1400faf88
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x50]
lea r8, [rbp - 0x50]
mov rdx, r13
mov rcx, qword [r13 + 0xe0]
call fcn.1400f987c
nop
jmp 0x1400e3250
cmp byte [r13 + 0x1f4], sil
je 0x1400e3259
imul edi, r15d
shl edi, 2
mov r8d, edi
xor edx, edx
mov rcx, qword [r13 + 0x100]
call fcn.14013d3b0
nop
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x40], xmm0
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x40]
mov rcx, qword [r13 + 0xe0]
call fcn.1400faf88
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], r12
lea r9, [rbp - 0x50]
lea r8, [rbp - 0x50]
mov rdx, r13
mov rcx, qword [r13 + 0xe0]
call fcn.1400f987c
nop
lea rcx, [rbp - 0x40]
call fcn.1400f513c
mov ecx, dword [rbp + 0x6c]
mov ebx, ecx
sub ebx, dword [rbp + 0x2c]
mov eax, ecx
mov edx, dword [rbp + 0x24]
sub eax, edx
mov r12d, 1
cmp ebx, eax
jge 0x1400e33f1
mov r8d, dword [rbp + 0x28]
movsxd rdi, dword [rbp + 0x20]
cmp edi, r8d
jge 0x1400e3348
mov r14, rdi
mov eax, ebx
imul eax, r15d
mov esi, eax
lea r12, [rax + rdi]
shl r12, 2
mov r15d, 1
mov r11, qword [r13 + 0xf0]
add r11, rsi
mov rax, qword [r13 + 0x100]
movzx r10d, byte [r12 + rax + 3]
mov r8d, dword [r11 + r14]
mov eax, r8d
shr eax, 8
movzx ecx, al
imul ecx, r10d
mov eax, 0x80808081
mul ecx
shr edx, 7
movzx r9d, dl
shl r9d, 8
shr r8d, 0x10
movzx ecx, r8b
imul ecx, r10d
mov r8d, 0x80808081
mov eax, r8d
mul ecx
shr edx, 7
movzx eax, dl
shl eax, 0x10
or r9d, eax
movzx ecx, byte [r11 + r14]
imul ecx, r10d
mov eax, r8d
mul ecx
shr edx, 7
movzx eax, dl
or r9d, eax
shl r10d, 0x18
add r9d, r10d
mov dword [r11 + r14], r9d
add edi, r15d
add r14, r15
lea r12, [r12 + 4]
mov r8d, dword [rbp + 0x28]
cmp edi, r8d
jl 0x1400e32a0
mov ecx, dword [rbp + 0x6c]
mov edx, dword [rbp + 0x24]
mov r15d, dword [rsp + 0x68]
mov r12d, 1
add ebx, r12d
mov eax, ecx
sub eax, edx
cmp ebx, eax
jl 0x1400e327a
xor esi, esi
mov r14d, dword [rbp - 0x78]
jmp 0x1400e33f1
mov edx, dword [rbp + 0x6c]
mov ecx, edx
sub ecx, dword [rbp + 0x2c]
mov eax, edx
mov r9d, dword [rbp + 0x24]
sub eax, r9d
mov r12d, 1
cmp ecx, eax
jge 0x1400e33f1
mov r10d, ecx
imul r10d, r14d
mov r11d, dword [rbp + 0x28]
mov r8d, dword [rbp + 0x20]
cmp r8d, r11d
jge 0x1400e33da
lea r9d, [r8 + r10]
shl r9d, 2
movsxd rax, r9d
mov rdx, qword [r13 + 0xf0]
cmp byte [rax + rdx + 3], sil
jne 0x1400e33c7
cmp byte [rax + rdx], sil
jne 0x1400e33be
cmp byte [rax + rdx + 1], sil
jne 0x1400e33be
cmp byte [rax + rdx + 2], sil
je 0x1400e33c7
mov byte [rax + rdx + 3], 0xff
mov r11d, dword [rbp + 0x28]
add r8d, r12d
add r9d, 4
cmp r8d, r11d
jl 0x1400e3399
mov edx, dword [rbp + 0x6c]
mov r9d, dword [rbp + 0x24]
add ecx, r12d
add r10d, r14d
mov eax, edx
sub eax, r9d
cmp ecx, eax
jl 0x1400e3388
jmp 0x1400e33f1
mov r12d, 1
and word [rsp + 0x78], 0
mov al, byte [r13 + 0x1e0]
mov byte [rsp + 0x7a], al
mov byte [rsp + 0x7b], r12b
mov eax, dword [rbp + 0x10]
mov dword [rsp + 0x70], eax
mov eax, dword [rbp + 0x14]
mov dword [rsp + 0x74], eax
mov dword [rbp - 0x80], r14d
mov eax, dword [rsp + 0x7c]
mov dword [rbp - 0x7c], eax
and qword [rbp - 0x60], 0
mov eax, 2
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [r13 + 0xd8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
lea r8, [rsp + 0x70]
mov rdx, qword [r13 + 0xd0]
mov rcx, qword [r13 + 0xc8]
call qword [0x140215860]
jmp 0x1400e34b2
mov ecx, dword [rbp + 0x2c]
mov r8d, dword [rbp + 0x24]
sub ecx, r8d
mov r9d, dword [rbp + 0x28]
mov edx, dword [rbp + 0x20]
sub r9d, edx
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], r8d
mov dword [rsp + 0x30], edx
mov rax, qword [r13 + 0xd8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_BitBlt]
mov rdx, qword [rbp - 0x70]
mov rcx, qword [r13 + 0xd8]
call qword [sym.imp.GDI32.dll_SelectObject]
cmp byte [r13 + 0x15d], sil
je 0x1400e35c8
cmp byte [r13 + 0x1e1], sil
jne 0x1400e35c8
mov rdx, qword [0x140215868]
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_SelectObject]
mov rbx, rax
mov ecx, 5
call qword [sym.imp.GDI32.dll_GetStockObject]
mov rdx, rax
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [rbp + 0x2c]
mov dword [rsp + 0x20], ecx
mov r9d, dword [rbp + 0x28]
mov r8d, dword [rbp + 0x24]
mov edx, dword [rbp + 0x20]
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_Rectangle]
mov rdx, rbx
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_SelectObject]
jmp 0x1400e35c8
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_SaveDC]
mov r14d, eax
mov rcx, qword [r13 + 0x160]
mov r10, qword [rcx]
xor r9d, r9d
lea r8, [rbp + 0x20]
mov rdx, qword [r13 + 0xd0]
call qword [r10 + 0x2a0]
mov ebx, esi
lea rdi, [r13 + 0x560]
mov rcx, rdi
call fcn.1400e944c
test eax, eax
jle 0x1400e35b8
mov edx, ebx
mov rcx, rdi
call fcn.1400e8eb8
mov r9, qword [rax]
lea r8, [rbp + 0x20]
mov rdx, qword [r13 + 0xd0]
mov rcx, rax
call qword [r9 + 0x2e8]
add ebx, r12d
mov rcx, rdi
call fcn.1400e944c
cmp ebx, eax
jl 0x1400e3587
mov edx, r14d
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_RestoreDC]
lea rdx, [rbp + 0x90]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_EndPaint]
xor edx, edx
mov rcx, r13
call fcn.1400e6fbc
mov byte [r13 + 0x1f4], sil
cmp byte [r13 + 0x1dd], sil
je 0x1400e35fe
mov rcx, r13
call fcn.1400e22c0
cmp byte [rsp + 0x60], sil
je 0x1400e2bd4
mov byte [rsp + 0x28], r12b
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.windowsize
mov rdx, qword [r13 + 0x160]
mov rcx, r13
call fcn.1400e6608
jmp 0x1400e2bd4
mov rcx, r13
call fcn.1400e2338
test al, al
je 0x1400e4b14
mov rcx, r13
call fcn.1400e5b2c
jmp 0x1400e4b14
mov rax, qword [r13 + 0x168]
test rax, rax
je 0x1400e4b14
mov qword [rbp - 0x40], Ordinal_26
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [r13 + 0x168]
jmp 0x1400e4b04
mov rbx, qword [r13 + 0x168]
test rbx, rbx
je 0x1400e36cf
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rbp - 0x40]
call fcn.14013d3b0
mov dword [rbp - 0x40], Ordinal_26
mov qword [rbp - 0x38], rbx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov rcx, qword [r13 + 0x168]
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x280]
mov rcx, qword [r13 + 0x160]
test rcx, rcx
je 0x1400e2691
call fcn.1400f3228
jmp 0x1400e2691
mov ebx, Ordinal_41
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.14013d3b0
mov dword [rbp + 0x60], ebx
mov ebx, 1
mov edx, ebx
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_MonitorFromWindow]
mov rcx, rax
lea rdx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_GetMonitorInfoW]
movups xmm0, xmmword [rbp + 0x74]
movdqu xmmword [rbp + 0x40], xmm0
cmp dword [rbp + 0x84], ebx
je 0x1400e374b
mov r8, qword [rbp + 0x74]
shr r8, 0x20
neg r8d
mov edx, dword [rbp + 0x74]
neg edx
lea rcx, [rbp + 0x40]
call qword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [r13 + 0x198]
test eax, eax
jle 0x1400e3759
mov dword [rdi + 0x18], eax
mov eax, dword [r13 + 0x19c]
test eax, eax
jle 0x1400e3767
mov dword [rdi + 0x1c], eax
mov eax, dword [r13 + 0x1a0]
test eax, eax
jle 0x1400e3775
mov dword [rdi + 0x20], eax
mov eax, dword [r13 + 0x1a4]
test eax, eax
jle 0x1400e3783
mov dword [rdi + 0x24], eax
mov eax, dword [r13 + 0x1a0]
test eax, eax
jle 0x1400e3791
mov dword [rdi + 8], eax
mov eax, dword [r13 + 0x1a4]
test eax, eax
jle 0x1400e4b14
mov dword [rdi + 0xc], eax
jmp 0x1400e4b14
sub ebx, 0x4e
je 0x1400e3abb
sub ebx, 0x2d
je 0x1400e3a10
sub ebx, 0x85
je 0x1400e398f
sub ebx, 1
je 0x1400e3915
sub ebx, 1
je 0x1400e38bf
sub ebx, 0xf
je 0x1400e3891
cmp ebx, r12d
jne 0x1400e4b14
mov r15d, esi
lea r12, [r13 + 0x520]
mov rcx, r12
call fcn.1400e944c
test eax, eax
jle 0x1400e4b14
mov edx, r15d
mov rcx, r12
call fcn.1400e8eb8
mov rbx, rax
mov rcx, qword [r13 + 0xc8]
cmp qword [rax + 0x10], rcx
jne 0x1400e382e
movzx ecx, r14w
cmp dword [rax + 0x18], ecx
jne 0x1400e382e
cmp byte [rax + 0x1c], sil
je 0x1400e3844
inc r15d
mov rcx, r12
call fcn.1400e944c
cmp r15d, eax
jge 0x1400e4b14
jmp 0x1400e3804
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rbp - 0x40]
call fcn.14013d3b0
mov dword [rbp - 0x40], reloc.WLDAP32.dll_Ordinal_27
mov rax, qword [rbx]
mov qword [rbp - 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov rax, qword [r13 + 0x190]
mov qword [rbp - 0x2c], rax
call fcn.1400e24b4
mov word [rbp - 0x22], ax
mov eax, dword [rbx + 8]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdi
mov rcx, qword [rbx]
jmp 0x1400e4b07
test rdi, rdi
je 0x1400e4b14
mov edx, 0x2111
mov r8, r14
mov r9, rdi
mov rcx, rdi
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [r15], rax
test rax, rax
je 0x1400e4b14
jmp 0x1400e2691
cmp qword [r13 + 0x160], rsi
je 0x1400e4b14
mov rax, qword [r13 + 0x168]
test rax, rax
je 0x1400e4b14
mov qword [rbp - 0x40], 5
mov dword [rbp - 0x30], esi
mov word [rbp - 0x22], si
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
mov word [rbp - 0x24], r14w
mov rax, qword [r13 + 0x190]
mov qword [rbp - 0x2c], rax
call fcn.1400e24b4
mov word [rbp - 0x22], ax
jmp 0x1400e367a
cmp qword [r13 + 0x160], rsi
je 0x1400e4b14
mov rax, qword [r13 + 0x180]
test rax, rax
je 0x1400e4b14
mov qword [rbp - 0x40], 4
mov dword [rbp - 0x30], esi
mov word [rbp - 0x22], si
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
mov word [rbp - 0x24], r14w
mov rax, qword [r13 + 0x190]
mov qword [rbp - 0x2c], rax
call fcn.1400e24b4
mov word [rbp - 0x22], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov rcx, qword [r13 + 0x180]
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x280]
mov qword [r13 + 0x180], rsi
jmp 0x1400e4b14
cmp qword [r13 + 0x160], rsi
je 0x1400e4b14
mov rax, qword [r13 + 0x168]
test rax, rax
je 0x1400e4b14
mov qword [rbp - 0x40], 3
mov dword [rbp - 0x30], esi
mov word [rbp - 0x22], si
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
mov word [rbp - 0x24], r14w
mov rax, qword [r13 + 0x190]
mov qword [rbp - 0x2c], rax
call fcn.1400e24b4
mov word [rbp - 0x22], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov rcx, qword [r13 + 0x168]
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x280]
mov rax, qword [r13 + 0x168]
mov qword [r13 + 0x180], rax
jmp 0x1400e4b14
cmp qword [r13 + 0x160], rsi
je 0x1400e4b14
movsx eax, di
mov dword [rsp + 0x68], eax
shr rdi, 0x10
movsx eax, di
mov dword [rsp + 0x6c], eax
lea rdx, [rsp + 0x68]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rax, qword [rsp + 0x68]
mov qword [r13 + 0x190], rax
cmp qword [r13 + 0x178], rsi
je 0x1400e4b14
mov rcx, r13
call fcn.1400e5b2c
mov qword [rbp - 0x40], reloc.WS2_32.dll_sendto
mov dword [rbp - 0x30], esi
mov word [rbp - 0x24], si
mov rcx, qword [r13 + 0x178]
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x20], r14
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x2c], rax
mov word [rbp - 0x22], r14w
mov qword [rbp - 0x18], rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov rcx, qword [r13 + 0x178]
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x280]
mov qword [r13 + 0x178], rsi
jmp 0x1400e4b14
test rdi, rdi
je 0x1400e4b14
mov r9, rdi
mov r8, r14
mov edx, 0x204e
mov rcx, qword [rdi]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [r15], rax
jmp 0x1400e2691
mov eax, 0x207
cmp ebx, eax
ja 0x1400e442b
je 0x1400e43ac
mov eax, ebx
sub eax, 0x138
je 0x1400e4398
sub eax, 0xc8
je 0x1400e3e4c
sub eax, 1
je 0x1400e3d26
sub eax, 1
je 0x1400e3cae
sub eax, 1
je 0x1400e3bff
sub eax, 1
je 0x1400e3b83
sub eax, 1
jne 0x1400e4b14
movsx eax, di
mov dword [rsp + 0x70], eax
mov rax, rdi
shr rax, 0x10
cwde
mov dword [rsp + 0x74], eax
mov rbx, qword [rsp + 0x70]
mov qword [r13 + 0x190], rbx
mov rdx, rbx
mov rcx, r13
call fcn.1400e15f4
mov qword [r13 + 0x178], rax
test rax, rax
je 0x1400e4b14
mov rcx, r13
call fcn.1400e5b2c
mov qword [rbp - 0x40], reloc.WS2_32.dll_recv
jmp 0x1400e4ad4
cmp byte [r13 + 0x15c], sil
jne 0x1400e3b99
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_SetFocus]
movsx eax, di
mov dword [rsp + 0x70], eax
mov rax, rdi
shr rax, 0x10
cwde
mov dword [rsp + 0x74], eax
mov rbx, qword [rsp + 0x70]
mov qword [r13 + 0x190], rbx
mov rdx, rbx
mov rcx, r13
call fcn.1400e15f4
mov r15, rax
test rax, rax
je 0x1400e4b14
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + gethostname]
cmp rax, r13
jne 0x1400e4b14
mov rdx, qword [r15]
mov rcx, r15
call qword [rdx + 0x250]
mov rcx, r13
call fcn.1400e66d8
mov qword [rbp - 0x40], reloc.WS2_32.dll_ntohs
jmp 0x1400e3c6d
cmp byte [r13 + 0x15c], sil
jne 0x1400e3c15
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_SetFocus]
movsx eax, di
mov dword [rsp + 0x70], eax
mov rax, rdi
shr rax, 0x10
cwde
mov dword [rsp + 0x74], eax
mov rbx, qword [rsp + 0x70]
mov qword [r13 + 0x190], rbx
mov rdx, rbx
mov rcx, r13
call fcn.1400e15f4
mov r15, rax
test rax, rax
je 0x1400e4b14
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + gethostname]
cmp rax, r13
jne 0x1400e4b14
mov rcx, r13
call fcn.1400e66d8
mov qword [rbp - 0x40], reloc.WS2_32.dll_send
mov dword [rbp - 0x30], esi
mov word [rbp - 0x24], si
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x2c], rbx
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
mov word [rbp - 0x22], r14w
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov rax, qword [r15]
lea rdx, [rbp - 0x40]
mov rcx, r15
call qword [rax + 0x280]
mov qword [r13 + 0x178], r15
jmp 0x1400e4b14
movsx eax, di
mov dword [rsp + 0x70], eax
mov rax, rdi
shr rax, 0x10
cwde
mov dword [rsp + 0x74], eax
mov rbx, qword [rsp + 0x70]
mov qword [r13 + 0x190], rbx
cmp qword [r13 + 0x178], rsi
je 0x1400e4b14
mov rcx, r13
call fcn.1400e5b2c
mov qword [rbp - 0x40], reloc.WS2_32.dll_ntohl
mov dword [rbp - 0x30], esi
mov word [rbp - 0x24], si
mov rax, qword [r13 + 0x178]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x2c], rbx
mov word [rbp - 0x22], r14w
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [r13 + 0x178]
mov qword [r13 + 0x178], rsi
jmp 0x1400e4b04
cmp byte [r13 + 0x15c], sil
jne 0x1400e3d3c
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_SetFocus]
cmp qword [r13 + 0x160], rsi
je 0x1400e4b14
movsx eax, di
mov dword [rsp + 0x70], eax
mov rax, rdi
shr rax, 0x10
cwde
mov dword [rsp + 0x74], eax
mov rbx, qword [rsp + 0x70]
mov qword [r13 + 0x190], rbx
mov rdx, rbx
mov rcx, r13
call fcn.1400e15f4
mov r15, rax
test rax, rax
je 0x1400e4b14
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + gethostname]
cmp rax, r13
jne 0x1400e4b14
cmp byte [r13 + 0x850], sil
je 0x1400e3df9
mov rdx, qword [r15]
mov rcx, r15
call qword [rdx + reloc.WS2_32.dll_WSASetLastError]
test al, al
je 0x1400e3df9
mov eax, 1
mov byte [r13 + 0x851], al
mov rcx, qword [r13 + 0x858]
test rcx, rcx
je 0x1400e3dcc
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [r13 + 0x858], rsi
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0xb0]
movups xmm0, xmmword [rax]
movdqu xmmword [rbp + 0x40], xmm0
xor r9d, r9d
lea r8, [rbp + 0x40]
mov rdx, r15
mov rcx, r13
call fcn.1400fab88
mov qword [r13 + 0x858], rax
mov rcx, r13
call fcn.1400e66d8
mov qword [r13 + 0x178], r15
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x250]
mov qword [rbp - 0x40], reloc.WS2_32.dll_listen
mov dword [rbp - 0x30], esi
mov word [rbp - 0x24], si
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x2c], rbx
mov word [rbp - 0x22], r14w
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov rax, qword [r15]
mov rcx, r15
jmp 0x1400e4b0a
cmp byte [r13 + 0x508], sil
jne 0x1400e3eb2
mov dword [rbp + 0x54], esi
mov dword [rbp + 0x40], Ordinal_26
mov dword [rbp + 0x44], 3
mov rax, qword [r13 + 0xc8]
mov qword [rbp + 0x48], rax
mov rcx, qword [r13 + 0x108]
test rcx, rcx
jne 0x1400e3e86
mov eax, dword [r13 + 0x158]
jmp 0x1400e3e98
xor r9d, r9d
mov edx, 0x415
lea r8d, [r9 + 3]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp + 0x50], eax
lea rcx, [rbp + 0x40]
call qword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov r8d, 1
mov byte [r13 + 0x508], r8b
movsx ecx, di
mov dword [rsp + 0x70], ecx
mov rax, rdi
shr rax, 0x10
movsx edx, ax
mov dword [rsp + 0x74], edx
mov r12b, r8b
cmp dword [r13 + 0x190], ecx
jne 0x1400e3ee2
movzx r12d, r8b
cmp dword [r13 + 0x194], edx
cmove r12d, esi
mov rbx, qword [rsp + 0x70]
mov qword [r13 + 0x190], rbx
mov rdx, rbx
mov rcx, r13
call fcn.1400e15f4
mov r15, rax
test rax, rax
je 0x1400e3f13
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + gethostname]
cmp rax, r13
jne 0x1400e4b14
test r12b, r12b
mov r12d, 1
je 0x1400e41d5
cmp byte [r13 + 0x851], sil
je 0x1400e41d5
cmp r14, r12
jne 0x1400e41d5
call qword [sym.imp.USER32.dll_ReleaseCapture]
lea ecx, [r12 + 0xf]
call fcn.140138614
mov rbx, rax
mov qword [rbp - 0x80], rax
test rax, rax
je 0x1400e3f67
lea rax, vtable.DuiLib::CIDropSource.0
mov qword [rbx], rax
mov dword [rbx + 8], esi
mov byte [rbx + 0xc], sil
jmp 0x1400e3f6e
mov rbx, rsi
mov qword [rbp - 0x80], rbx
test rbx, rbx
je 0x1400e4b14
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ecx, 0x48
call fcn.140138614
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400e3fa3
mov rdx, rbx
mov rcx, rax
call fcn.1400efc74
mov rbx, rax
jmp 0x1400e3fa6
mov rbx, rsi
mov qword [rsp + 0x70], rbx
test rbx, rbx
je 0x1400e4b14
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edi, 0x20
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.14013d3b0
xor eax, eax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], rax
mov dword [rbp + 0x70], r12d
or dword [rbp + 0x74], 0xffffffff
lea eax, [rdi - 0x1e]
mov word [rbp + 0x60], ax
mov dword [rbp + 0x78], reloc.WS2_32.dll_recv
mov dword [rbp + 0x40], reloc.WS2_32.dll_recv
mov edx, eax
xor r8d, r8d
mov rcx, qword [r13 + 0x858]
call qword [sym.imp.ole32.dll_OleDuplicateData]
mov r12, rax
mov qword [rbp + 0x48], rax
mov r10, qword [rbx]
xor r9d, r9d
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x60]
mov rcx, rbx
call qword [r10 + gethostname]
lea r8, [rbp + 0x20]
mov edx, edi
mov rcx, r12
call qword [sym.imp.GDI32.dll_GetObjectW]
mov qword [rbp + 0x10], rsi
mov r15d, dword [rbp + 0x24]
mov dword [rbp + 0x18], r15d
mov r14d, dword [rbp + 0x28]
mov dword [rbp + 0x1c], r14d
lea eax, [rdi - 0x12]
mov word [rbp + 0x60], ax
mov dword [rbp + 0x78], 0x40
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
mov rdi, rax
mov rcx, qword [r13 + 0xd0]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov rsi, rax
mov rdx, r12
mov rcx, rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov rbx, rax
mov dword [rsp + 0x40], 0xcc0020
xor eax, eax
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], r14d
mov r9d, r15d
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.GDI32.dll_BitBlt]
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_CloseEnhMetaFile]
mov qword [rbp + 0x48], rax
mov rcx, rsi
call qword [sym.imp.GDI32.dll_DeleteDC]
mov dword [rbp + 0x40], 0x40
mov rsi, qword [rsp + 0x70]
mov rax, qword [rsi]
mov edi, 1
mov r9d, edi
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x60]
mov rcx, rsi
call qword [rax + gethostname]
lea r14, vtable.DuiLib::CDragSourceHelper.0
mov qword [rbp - 0x50], r14
xor ebx, ebx
mov qword [rbp - 0x48], rbx
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
lea r9, [0x14018a840]
mov r8d, edi
xor edx, edx
lea rcx, [0x14018a780]
call qword [sym.imp.ole32.dll_CoCreateInstance]
nop
mov eax, dword [rbp + 0x24]
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x70], eax
mov eax, dword [rbp + 0x28]
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0x74], eax
lea ecx, [rdi + 4]
call qword [sym.imp.USER32.dll_GetSysColor]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x10]
lea r8, [rsp + 0x70]
mov rdx, r12
lea rcx, [rbp - 0x50]
call fcn.1400e21b4
lea r9, [rsp + 0x68]
lea r8d, [rdi + 2]
mov rdi, qword [rbp - 0x80]
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.ole32.dll_DoDragDrop]
mov rcx, rdi
cmp dword [rsp + 0x68], ebx
je 0x1400e41a2
mov rax, qword [rdi]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x1400e41ac
mov edx, reloc.WS2_32.dll_recv
call fcn.140138344
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_recv]
mov byte [r13 + 0x851], bl
mov qword [rbp - 0x50], r14
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x1400e41d0
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
jmp 0x1400e4b14
mov dword [rbp - 0x3c], esi
mov word [rbp - 0x24], si
mov qword [rbp - 0x2c], rbx
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
call fcn.1400e24b4
mov word [rbp - 0x22], ax
mov rcx, r13
call fcn.1400e2338
test al, al
jne 0x1400e4363
mov rdx, rbx
mov rcx, r13
call fcn.1400e15f4
mov r15, rax
test rax, rax
je 0x1400e422f
mov rax, qword [rax]
mov rcx, r15
call qword [rax + gethostname]
cmp rax, r13
jne 0x1400e4b14
mov rax, qword [r13 + 0x170]
cmp r15, rax
je 0x1400e4333
test rax, rax
je 0x1400e4333
mov dword [rbp - 0x40], 0xa
mov qword [rbp - 0x38], rax
lea rbx, [r13 + 0x5d0]
mov rcx, rbx
call fcn.1400e944c
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.1400e8ce4
nop
mov rcx, rbx
call fcn.1400e944c
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.1400e9a5c
mov rcx, rbx
call fcn.1400e944c
movsxd rdi, eax
shl rdi, 3
mov rcx, rbx
call fcn.140096040
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.140096040
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call fcn.14013cf50
mov ebx, esi
lea rcx, [rbp - 0x50]
call fcn.1400e944c
test eax, eax
jle 0x1400e42ed
mov edx, ebx
lea rcx, [rbp - 0x50]
call fcn.1400e8eb8
mov r8, qword [rax]
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [r8 + 0x280]
add ebx, r12d
lea rcx, [rbp - 0x50]
call fcn.1400e944c
cmp ebx, eax
jl 0x1400e42c1
mov rcx, qword [r13 + 0x170]
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x280]
mov qword [r13 + 0x170], rsi
mov rcx, qword [r13 + 0x108]
test rcx, rcx
je 0x1400e432a
lea r9, [r13 + 0x110]
xor r8d, r8d
mov edx, 0x411
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp - 0x50]
call fcn.1400e8d90
cmp r15, qword [r13 + 0x170]
je 0x1400e4363
test r15, r15
je 0x1400e4363
mov dword [rbp - 0x40], reloc.WS2_32.dll_inet_addr
mov qword [rbp - 0x38], r15
mov rax, qword [r15]
lea rdx, [rbp - 0x40]
mov rcx, r15
call qword [rax + 0x280]
mov qword [r13 + 0x170], r15
mov rcx, qword [r13 + 0x178]
test rcx, rcx
je 0x1400e437f
mov dword [rbp - 0x40], 9
mov qword [rbp - 0x38], rcx
jmp 0x1400e4b07
test r15, r15
je 0x1400e4b14
mov dword [rbp - 0x40], 9
mov qword [rbp - 0x38], r15
jmp 0x1400e3e41
test rdi, rdi
je 0x1400e4b14
lea edx, [rbx + 0x2000]
jmp 0x1400e389f
cmp byte [r13 + 0x15c], sil
jne 0x1400e43c2
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_SetFocus]
movsx eax, di
mov dword [rsp + 0x70], eax
mov rax, rdi
shr rax, 0x10
cwde
mov dword [rsp + 0x74], eax
mov rbx, qword [rsp + 0x70]
mov qword [r13 + 0x190], rbx
mov rdx, rbx
mov rcx, r13
call fcn.1400e15f4
mov r15, rax
test rax, rax
je 0x1400e4b14
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + gethostname]
cmp rax, r13
jne 0x1400e4b14
mov rdx, qword [r15]
mov rcx, r15
call qword [rdx + 0x250]
mov rcx, r13
call fcn.1400e66d8
mov qword [rbp - 0x40], reloc.COMCTL32.dll_InitCommonControls
jmp 0x1400e3c6d
sub ebx, 0x208
je 0x1400e4a8e
sub ebx, r12d
je 0x1400e499f
sub ebx, 0x97
je 0x1400e477b
sub ebx, r12d
je 0x1400e4671
sub ebx, 0x75
je 0x1400e4587
cmp ebx, 0x7ce9
jne 0x1400e4b14
mov ebx, esi
lea rdi, [r13 + 0x590]
mov rcx, rdi
call fcn.1400e944c
mov r15d, 1
test eax, eax
jle 0x1400e44af
mov edx, ebx
mov rcx, rdi
call fcn.1400e8eb8
test rax, rax
je 0x1400e44a0
mov r8, qword [rax]
mov edx, r15d
mov rcx, rax
call qword [r8]
add ebx, r15d
mov rcx, rdi
call fcn.1400e944c
cmp ebx, eax
jl 0x1400e4485
mov rcx, rdi
call fcn.1400e91a8
mov byte [r13 + 0x50c], sil
lea r14, [r13 + 0x5a0]
xor edx, edx
mov rcx, r14
call fcn.1400e93bc
mov rbx, rax
test rax, rax
je 0x1400e4b14
add r13, 0x510
xor edx, edx
mov rcx, r14
call fcn.1400e9804
mov rcx, qword [rbx + 0x110]
test rcx, rcx
je 0x1400e4518
add rcx, 0x48
call fcn.1400ef8b8
test al, al
je 0x1400e4518
mov rcx, qword [rbx + 0x110]
add rcx, 0x48
mov rdx, rbx
call fcn.1400ef8d4
mov edi, esi
mov rcx, r13
call fcn.1400e944c
test eax, eax
jle 0x1400e454b
mov edx, edi
mov rcx, r13
call fcn.1400e8eb8
mov r8, qword [rax]
mov rdx, rbx
mov rcx, rax
call qword [r8]
add edi, r15d
mov rcx, r13
call fcn.1400e944c
cmp edi, eax
jl 0x1400e4526
lea rcx, [rbx + 0x88]
call fcn.1400e8d74
mov rcx, rbx
call fcn.1400e8d74
mov edx, pe_nt_image_headers64
mov rcx, rbx
call fcn.140138344
xor edx, edx
mov rcx, r14
call fcn.1400e93bc
mov rbx, rax
test rax, rax
jne 0x1400e44e2
jmp 0x1400e4b14
cmp qword [r13 + 0x160], rsi
je 0x1400e4b14
lea rdx, [rbp + 0x40]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rcx, r14
call qword [sym.imp.GDI32.dll_SaveDC]
mov r15d, eax
mov rcx, qword [r13 + 0x160]
mov r10, qword [rcx]
xor r9d, r9d
lea r8, [rbp + 0x40]
mov rdx, r14
call qword [r10 + 0x2a0]
test dil, 0x10
je 0x1400e4660
mov edx, 5
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_GetWindow]
mov rbx, rax
test rax, rax
je 0x1400e4660
or rdi, r12
xor eax, eax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
lea rdx, [rbp - 0x50]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r9d, r12d
lea r8, [rbp - 0x50]
mov rdx, qword [r13 + 0xc8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MapWindowPoints]
mov r8d, dword [rbp - 0x4c]
neg r8d
mov edx, dword [rbp - 0x50]
neg edx
xor r9d, r9d
mov rcx, r14
call qword [sym.imp.GDI32.dll_SetWindowOrgEx]
mov r9, rdi
mov r8, r14
mov edx, 0x317
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, r12d
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindow]
mov rbx, rax
test rax, rax
jne 0x1400e45f3
mov edx, r15d
mov rcx, r14
call qword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x1400e4b14
mov rcx, qword [r13 + 0x108]
test rcx, rcx
je 0x1400e4692
lea r9, [r13 + 0x110]
xor r8d, r8d
mov edx, 0x411
call qword [sym.imp.USER32.dll_SendMessageW]
cmp byte [r13 + 0x508], sil
je 0x1400e476f
mov qword [rsp + 0x68], rsi
xor eax, eax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
lea rcx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, [rbp + 0x10]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x1400e4756
call qword [sym.imp.USER32.dll_GetActiveWindow]
cmp rax, qword [r13 + 0xc8]
jne 0x1400e4756
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0x10]
call qword [sym.imp.USER32.dll_PtInRect]
test eax, eax
je 0x1400e4756
movzx r9d, word [rsp + 0x6c]
shl r9d, 0x10
movzx eax, word [rsp + 0x68]
or r9, rax
xor r8d, r8d
mov edx, Ordinal_133
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r13 + 0xc8]
cmp rax, 1
jne 0x1400e4750
lea rdx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_ScreenToClient]
movzx r9d, word [rsp + 0x6c]
shl r9d, 0x10
movzx eax, word [rsp + 0x68]
or r9, rax
jmp 0x1400e475a
or r9, 0xffffffffffffffff
jmp 0x1400e4761
or r9, 0xffffffffffffffff
mov rcx, qword [r13 + 0xc8]
xor r8d, r8d
mov edx, 0x200
call qword [sym.imp.USER32.dll_SendMessageW]
mov byte [r13 + 0x508], sil
jmp 0x1400e4b14
mov byte [r13 + 0x508], sil
movsx eax, di
mov dword [rsp + 0x70], eax
mov rax, rdi
shr rax, 0x10
cwde
mov dword [rsp + 0x74], eax
mov rbx, qword [rsp + 0x70]
mov rdx, rbx
mov rcx, r13
call fcn.1400e15f4
mov r15, rax
test rax, rax
je 0x1400e4b14
mov rax, qword [r13 + 0x170]
test rax, rax
je 0x1400e4803
mov qword [rbp - 0x40], recvfrom
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov qword [rbp - 0x2c], rbx
call fcn.1400e24b4
mov word [rbp - 0x22], ax
mov rcx, qword [r13 + 0x170]
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x280]
mov rax, qword [r15]
lea rdx, [rbp + 0x90]
mov rcx, r15
call qword [rax + 0x190]
nop
lea rcx, [rbp + 0x90]
call fcn.1400e96e0
test al, al
je 0x1400e4838
lea rcx, [rbp + 0x90]
call fcn.1400e8d74
jmp 0x1400e2691
lea rbx, [r13 + 0x110]
xor edx, edx
lea r8d, [rdx + 0x48]
mov rcx, rbx
call fcn.14013d3b0
mov dword [rbx], 0x48
mov edi, 1
mov dword [r13 + 0x114], edi
mov rax, qword [r13 + 0xc8]
mov qword [r13 + 0x118], rax
mov qword [r13 + 0x120], rax
mov rax, qword [0x140215870]
mov qword [r13 + 0x138], rax
lea rcx, [rbp + 0x90]
call fcn.140096040
mov qword [r13 + 0x140], rax
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0xb0]
movups xmm0, xmmword [rax]
movdqu xmmword [r13 + 0x128], xmm0
mov rcx, qword [r13 + 0x108]
test rcx, rcx
jne 0x1400e4950
mov qword [rsp + 0x58], rsi
mov rax, qword [0x140215870]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
mov rax, qword [r13 + 0xc8]
mov qword [rsp + 0x40], rax
mov eax, 0x80000000
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, 0x80000003
xor r8d, r8d
lea rdx, str.tooltips_class32
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [r13 + 0x108], rax
mov r9, rbx
xor r8d, r8d
mov edx, 0x432
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x1a8]
movsxd r9, eax
xor r8d, r8d
mov edx, 0x418
mov rcx, qword [r13 + 0x108]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r13 + 0x108]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x1400e498b
mov r9, rbx
xor r8d, r8d
mov edx, 0x436
mov rcx, qword [r13 + 0x108]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rbx
mov r8, rdi
mov edx, 0x411
mov rcx, qword [r13 + 0x108]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, [rbp + 0x90]
call fcn.1400e8d74
mov al, dil
jmp 0x1400e4b16
cmp qword [r13 + 0x160], rsi
je 0x1400e4b14
movsx eax, di
mov dword [rsp + 0x68], eax
mov rax, rdi
shr rax, 0x10
cwde
mov dword [rsp + 0x6c], eax
lea rdx, [rsp + 0x68]
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rdx, qword [rsp + 0x68]
mov qword [r13 + 0x190], rdx
mov rcx, r13
call fcn.1400e15f4
mov rbx, rax
test rax, rax
je 0x1400e4b14
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + gethostname]
cmp rax, r13
jne 0x1400e4b14
shr r14, 0x10
movzx ecx, r14w
mov qword [rbp - 0x40], reloc.WS2_32.dll_setsockopt
mov dword [rbp - 0x30], esi
mov dword [rbp - 0x24], esi
mov qword [rbp - 0x38], rbx
mov eax, ecx
shr rax, 0xf
shl rcx, 0x10
or rax, rcx
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdi
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x2c], rax
call fcn.1400e24b4
mov word [rbp - 0x22], ax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x30], eax
mov rax, qword [rbx]
lea rdx, [rbp - 0x40]
mov rcx, rbx
call qword [rax + 0x280]
movzx r9d, word [r13 + 0x194]
shl r9, 0x10
movzx eax, word [r13 + 0x190]
or r9, rax
xor r8d, r8d
mov edx, 0x200
mov rcx, qword [r13 + 0xc8]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400e4b14
movsx eax, di
mov dword [rsp + 0x70], eax
mov rax, rdi
shr rax, 0x10
cwde
mov dword [rsp + 0x74], eax
mov rbx, qword [rsp + 0x70]
mov qword [r13 + 0x190], rbx
mov rdx, rbx
mov rcx, r13
call fcn.1400e15f4
mov qword [r13 + 0x178], rax
test rax, rax
je 0x1400e4b14
mov rcx, r13
call fcn.1400e5b2c
mov qword [rbp - 0x40], reloc.WS2_32.dll_select
mov rax, qword [r13 + 0x178]
mov dword [rbp - 0x30], esi
mov word [rbp - 0x24], si
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x2c], rbx
mov word [rbp - 0x22], r14w
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [r13 + 0x178]
mov dword [rbp - 0x30], eax
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax + 0x280]
xor al, al
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.140138320
movaps xmm6, xmmword [rsp + 0x230]
add rsp, 0x248
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret