Function at 0x140065800
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2210
call fcn.14011d270
sub rsp, rax
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x148], r13
mov qword [rsp + 0x150], r13
mov rdx, qword [rdx]
lea rcx, [rsp + 0x138]
call fcn.14005c750
nop
lea rdi, [rsp + 0x138]
mov r15, qword [rsp + 0x138]
mov r12, qword [rsp + 0x150]
cmp r12, 0xf
cmova rdi, r15
mov rbx, qword [rsp + 0x148]
cmp rbx, 1
jb 0x1400658ce
lea rsi, [rdi + rbx]
mov r8, rbx
lea edx, [r13 + 0x7b]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rcx, rax
test rax, rax
je 0x1400658ce
nop dword [rax]
cmp byte [rcx], 0x7b
jne 0x1400658aa
mov eax, r13d
jmp 0x1400658af
sbb eax, eax
or eax, 1
test eax, eax
je 0x140065904
inc rcx
mov r8, rsi
sub r8, rcx
mov edx, 0x7b
call sub.VCRUNTIME140.dll_memchr
mov rcx, rax
test rax, rax
jne 0x1400658a0
mov r14, 0xffffffffffffffff
mov rcx, r14
cmp rcx, 0xffffffffffffffff
je 0x140066d82
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x168], xmm1
cmp rbx, rcx
jb 0x140066dfc
jmp 0x140065910
sub rcx, rdi
mov r14, 0xffffffffffffffff
jmp 0x1400658d8
sub rbx, rcx
mov r8, r14
cmp rbx, 0xffffffffffffffff
cmovb r8, rbx
lea rdx, [rsp + 0x138]
cmp r12, 0xf
cmova rdx, r15
add rdx, rcx
lea rcx, [rsp + 0x158]
call fcn.14005c750
nop
mov qword [rsp + 0x130], r13
lea r8, [rsp + 0xf8]
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0xe8]
call fcn.14009a510
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 4
mov qword [rsp + 0x58], recv
mov dword [rsp + 0x40], 0x65707954
mov byte [rsp + 0x44], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe8]
call fcn.1400a0430
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14009a8b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
movdqa xmm1, xmmword [0x1401603a0]
movdqu xmmword [rsp + 0xc0], xmm1
movabs rax, 0x72656d6165726353
mov qword [rsp + 0xb0], rax
mov byte [rsp + 0xb8], 0
mov r8, qword [rsp + 0xa0]
cmp r8, 8
je 0x1400659fa
xor bl, bl
jmp 0x140065a77
lea r15, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova r15, qword [rsp + 0x90]
add r15, r8
lea rsi, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova rsi, qword [rsp + 0x90]
mov rax, r15
sub rax, rsi
cmp rax, 8
je 0x140065a41
xor bl, bl
jmp 0x140065a77
cmp rsi, r15
je 0x140065a75
lea r12, [rsp + 0xb0]
sub r12, rsi
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x1400659f3
inc rsi
cmp rsi, r15
jne 0x140065a51
mov bl, 1
lea rcx, [rsp + 0xb0]
call fcn.140058450
test bl, bl
je 0x140065d12
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], recv
mov qword [rsp + 0x58], recv
movsd xmm0, qword [str.ScreamerName]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x14015c048]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe8]
call fcn.1400a0430
lea rdx, [rsp + 0xf8]
mov rcx, rax
call fcn.14009a8b0
nop
mov edi, r13d
movabs rsi, 0x4924924924924925
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [0x1402187a8]
mov r8, qword [0x1402187a0]
sub rcx, r8
mov rax, rsi
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, edi
cmp rax, rdx
jae 0x140065d05
imul rbx, rax, 0x70
lea rcx, [r8 + 0x30]
add rcx, rbx
lea rdx, [rsp + 0xf8]
call fcn.140063bf0
test al, al
je 0x140065cfe
mov rdx, qword [0x1402187a0]
add rdx, rbx
lea rcx, [rsp + 0x180]
call fcn.14006fdd0
nop
mov qword [rsp + 0xb0], 0xffffffffffffffff
mov qword [rsp + 0xb8], 0xffffffffffffffff
mov qword [rsp + 0xc0], 0xffffffffffffffff
mov qword [rsp + 0xc8], 0xffffffffffffffff
mov dword [rsp + 0xd0], 0xffffffff
mov qword [rsp + 0xd4], 0xfffffffffffffffd
mov dword [rsp + 0xdc], 0xffffffff
mov qword [rsp + 0xe0], r13
mov rbx, r13
mov rax, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d0]
sub rax, rcx
sar rax, 3
test rax, rax
je 0x140065c45
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rcx + rbx*8]
lea rcx, [rax + 0x18]
mov rdx, qword [rax]
mov r8, qword [rax + 8]
sub r8, rdx
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0xb0]
mov rcx, qword [0x1402188b0]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
inc rbx
mov rax, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d0]
sub rax, rcx
sar rax, 3
cmp rbx, rax
jb 0x140065bf0
mov rax, qword [0x140218488]
cmp rax, qword [0x140218490]
je 0x140065c6f
lea rdx, [rsp + 0x180]
mov rcx, rax
call fcn.14006fdd0
add qword [0x140218488], 0x70
jmp 0x140065c87
lea r8, [rsp + 0x180]
mov rdx, rax
lea rcx, [0x140218480]
call fcn.1400a4af0
nop
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x140065ce4
mov rdx, qword [rsp + 0x1e0]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x140065ccb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140065ccb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011cbf8
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], r13
lea rcx, [rsp + 0x1b0]
call fcn.140058450
lea rcx, [rsp + 0x190]
call fcn.140058450
inc edi
jmp 0x140065b00
lea rcx, [rsp + 0xf8]
call fcn.140058450
movdqa xmm0, xmmword [0x140160410]
movdqu xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [str.NewNotification]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x14015c058]
mov dword [rsp + 0x48], eax
movzx eax, word [0x14015c05c]
mov word [rsp + 0x4c], ax
movzx eax, byte [0x14015c05e]
mov byte [rsp + 0x4e], al
mov byte [rsp + 0x4f], 0
cmp qword [rsp + 0xa0], 0xf
je 0x140065d66
xor bl, bl
jmp 0x140065de6
lea r15, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova r15, qword [rsp + 0x90]
add r15, qword [rsp + 0xa0]
lea rsi, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova rsi, qword [rsp + 0x90]
mov rax, r15
sub rax, rsi
cmp rax, 0xf
je 0x140065db2
xor bl, bl
jmp 0x140065de6
cmp rsi, r15
je 0x140065de4
lea r12, [rsp + 0x40]
sub r12, rsi
nop
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140065d5f
inc rsi
cmp rsi, r15
jne 0x140065dc0
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140065e26
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140065e21
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140065e21
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011cbf8
test bl, bl
je 0x1400664c3
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov ecx, 0x20
call fcn.14011c8ac
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], reloc.WS2_32.dll_recv
mov qword [rsp + 0x58], 0x1f
movups xmm0, xmmword [str.NotificationType]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe8]
call fcn.1400a0430
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.14009a8b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 4
mov qword [rsp + 0x58], recv
mov dword [rsp + 0x40], 0x74786554
mov byte [rsp + 0x44], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe8]
call fcn.1400a0430
lea rdx, [rsp + 0xf8]
mov rcx, rax
call fcn.14009a8b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401603e0]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Type_Success]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x14015c080]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], 0
cmp qword [rsp + 0x80], 0xc
je 0x140065f1b
xor bl, bl
jmp 0x140065f96
lea r15, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova r15, qword [rsp + 0x70]
add r15, qword [rsp + 0x80]
lea rsi, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova rsi, qword [rsp + 0x70]
mov rax, r15
sub rax, rsi
cmp rax, 0xc
je 0x140065f5b
xor bl, bl
jmp 0x140065f96
cmp rsi, r15
je 0x140065f94
lea r12, [rsp + 0x40]
sub r12, rsi
nop dword [rax + rax]
movzx edi, byte [rsi + r12]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140065f17
inc rsi
cmp rsi, r15
jne 0x140065f70
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140065fd6
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140065fd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140065fd1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011cbf8
test bl, bl
je 0x140065fe4
mov eax, 1
jmp 0x140066438
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401603e0]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Type_Warning]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x14015c090]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], 0
cmp qword [rsp + 0x80], 0xc
je 0x140066029
xor bl, bl
jmp 0x1400660a6
lea r15, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova r15, qword [rsp + 0x70]
add r15, qword [rsp + 0x80]
lea rsi, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova rsi, qword [rsp + 0x70]
mov rax, r15
sub rax, rsi
cmp rax, 0xc
je 0x140066069
xor bl, bl
jmp 0x1400660a6
cmp rsi, r15
je 0x1400660a4
lea r12, [rsp + 0x40]
sub r12, rsi
nop word [rax + rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140066022
inc rsi
cmp rsi, r15
jne 0x140066080
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400660e6
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400660e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400660e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011cbf8
test bl, bl
je 0x1400660f4
mov eax, 2
jmp 0x140066438
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401603c0]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Type_Error]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x14015c0a0]
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], 0
cmp qword [rsp + 0x80], 0xa
je 0x1400661e0
lea rcx, [rsp + 0x40]
call fcn.140058450
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htons]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Type_Info]
movsd qword [rsp + 0x40], xmm0
movzx eax, byte [reloc.WS2_32.dll_WSAGetLastError]
mov byte [rsp + 0x48], al
mov byte [rsp + 0x49], 0
mov r8, qword [rsp + 0x80]
cmp r8, 9
je 0x140066272
lea rcx, [rsp + 0x40]
call fcn.140058450
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401603c0]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Type_Saved]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x14015c0c0]
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], 0
mov r8, qword [rsp + 0x80]
cmp r8, 0xa
je 0x140066302
xor bl, bl
jmp 0x14006637a
lea r15, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova r15, qword [rsp + 0x70]
add r15, qword [rsp + 0x80]
lea rsi, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova rsi, qword [rsp + 0x70]
mov rax, r15
sub rax, rsi
cmp rax, 0xa
je 0x140066220
xor bl, bl
jmp 0x140066256
cmp rsi, r15
je 0x140066254
lea r12, [rsp + 0x40]
sub r12, rsi
nop dword [rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x14006621c
inc rsi
cmp rsi, r15
jne 0x140066230
mov bl, 1
lea rcx, [rsp + 0x40]
call fcn.140058450
test bl, bl
je 0x140066142
mov eax, 3
jmp 0x140066438
lea r15, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova r15, qword [rsp + 0x70]
add r15, r8
lea rsi, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova rsi, qword [rsp + 0x70]
mov rax, r15
sub rax, rsi
cmp rax, 9
je 0x1400662ad
xor bl, bl
jmp 0x1400662e6
cmp rsi, r15
je 0x1400662e4
lea r12, [rsp + 0x40]
sub r12, rsi
nop word [rax + rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x1400662a9
inc rsi
cmp rsi, r15
jne 0x1400662c0
mov bl, 1
lea rcx, [rsp + 0x40]
call fcn.140058450
test bl, bl
je 0x140066192
mov eax, 4
jmp 0x140066438
lea r15, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova r15, qword [rsp + 0x70]
add r15, r8
lea rsi, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova rsi, qword [rsp + 0x70]
mov rax, r15
sub rax, rsi
cmp rax, 0xa
je 0x14006633d
xor bl, bl
jmp 0x14006637a
cmp rsi, r15
je 0x140066378
lea r12, [rsp + 0x40]
sub r12, rsi
nop word [rax + rax]
movzx edi, byte [rsi + r12]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x1400661d9
inc rsi
cmp rsi, r15
jne 0x140066350
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400663ba
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400663b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400663b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011cbf8
test bl, bl
je 0x1400663c5
mov eax, 5
jmp 0x140066438
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_inet_addr]
movdqu xmmword [rsp + 0xc0], xmm1
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.Type_Config
lea rcx, [rsp + 0xb0]
call fcn.140058540
mov byte [rsp + 0xbb], 0
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x70]
call fcn.140063bf0
movzx ebx, al
lea rcx, [rsp + 0xb0]
call fcn.140058450
mov ecx, dword [rsp + 0x2248]
mov eax, 6
test bl, bl
cmovne ecx, eax
mov eax, ecx
lea r9, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0xf
cmova r9, qword [rsp + 0xf8]
mov r8d, 0x7d0
mov edx, eax
lea rcx, [rsp + 0x1f0]
call fcn.14005fdd0
mov rax, qword [0x140219848]
cmp rax, qword [0x140219850]
je 0x14006649a
mov r8d, 0x2010
lea rdx, [rsp + 0x1f0]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140219848], 0x2010
jmp 0x1400664ab
lea r8, [rsp + 0x1f0]
mov rdx, rax
call fcn.1400a5690
nop
lea rcx, [rsp + 0xf8]
call fcn.140058450
nop
lea rcx, [rsp + 0x70]
call fcn.140058450
movdqa xmm0, xmmword [0x140160320]
movdqu xmmword [rsp + 0x48], xmm0
mov ecx, recv
mov qword [rsp + 0x58], rcx
mov rax, qword [str.FakeBan]
mov dword [rsp + 0x40], eax
movzx eax, word [0x14015c0dc]
mov word [rsp + 0x44], ax
movzx eax, byte [0x14015c0de]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], 0
mov r9, qword [rsp + 0xa0]
cmp r9, 7
jne 0x140066589
lea r15, [rsp + 0x90]
cmp qword [rsp + 0xa8], rcx
cmova r15, qword [rsp + 0x90]
add r15, r9
lea rsi, [rsp + 0x90]
cmp qword [rsp + 0xa8], rcx
cmova rsi, qword [rsp + 0x90]
mov rax, r15
sub rax, rsi
cmp rax, r9
jne 0x140066589
cmp rsi, r15
je 0x140066589
lea r12, [rsp + 0x40]
sub r12, rsi
nop dword [rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140066584
inc rsi
cmp rsi, r15
jne 0x140066560
mov rcx, qword [rsp + 0x58]
cmp rcx, 0xf
jbe 0x1400665c5
lea rdx, [rcx + 1]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400665c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400665c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011cbf8
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htons]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.PlaySound]
movsd qword [rsp + 0x40], xmm0
movzx eax, byte [0x14015c0e8]
mov byte [rsp + 0x48], al
mov byte [rsp + 0x49], 0
cmp qword [rsp + 0xa0], 9
je 0x14006660b
xor bl, bl
jmp 0x14006669a
lea rcx, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova rcx, qword [rsp + 0x90]
mov r15, qword [rsp + 0xa0]
add r15, rcx
lea rsi, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova rsi, qword [rsp + 0x90]
mov rax, r15
sub rax, rsi
cmp rax, 9
je 0x14006665a
xor bl, bl
jmp 0x14006669a
cmp rsi, r15
je 0x140066698
lea r12, [rsp + 0x40]
sub r12, rsi
nop word [rax + rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140066604
inc rsi
cmp rsi, r15
jne 0x140066670
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400666da
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400666d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400666d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14011cbf8
test bl, bl
je 0x140066c51
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 5
mov qword [rsp + 0x58], recv
mov eax, dword [str.Index]
mov dword [rsp + 0x40], eax
movzx eax, byte [0x14015c0f0]
mov byte [rsp + 0x44], al
mov byte [rsp + 0x45], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe8]
call fcn.1400a0430
mov rcx, rax
call fcn.14009a7c0
test rax, rax
jne 0x1400669b4
call fcn.14011c034
lea r15, [0x14015c0f8]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 0x20
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0xf8]
call fcn.140060cc0
nop
lea rcx, [rsp + 0xf8]
call fcn.1400616b0
movzx ebx, al
lea rcx, [rsp + 0xf8]
call fcn.140098020
test bl, bl
jne 0x140066c3c
movups xmm0, xmmword [0x14015b2c0]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14015b2d0]
movups xmmword [rsp + 0x50], xmm1
mov eax, dword [0x14015b2e0]
mov dword [rsp + 0x60], eax
movzx eax, word [0x14015b2e4]
mov word [rsp + 0x64], ax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.140066e10
xorps xmm0, xmm0
movups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x108], r13
mov qword [rsp + 0x110], r13
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc r14
cmp byte [rax + r14], 0
jne 0x1400667f0
mov r8, r14
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xf8]
call fcn.14005c750
lea r8, [rsp + 0xf8]
lea rdx, [rsp + 0xb0]
call fcn.14006f500
nop
lea rsi, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova rsi, qword [rsp + 0xb0]
add rsi, qword [rsp + 0xc0]
lea rbx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova rbx, qword [rsp + 0xb0]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov rdi, r13
mov qword [rsp + 0x50], r13
sub rsi, rbx
je 0x1400668a6
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.1400a0230
mov r8, rsi
mov rdx, rbx
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
add rsi, rbx
mov qword [rsp + 0x48], rsi
mov rdi, qword [rsp + 0x50]
jmp 0x1400668b0
mov rsi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov r8d, 0x22
mov rdx, r15
lea rcx, [rsp + 0x1f0]
call fcn.140092760
nop
sub rsi, rbx
mov r8, rsi
mov rdx, rbx
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x1f8]
call fcn.140097920
test rax, rax
jne 0x140066915
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x1f0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ec], edx
lea rcx, [rsp + 0x1f8]
call fcn.140094020
lea rcx, [rsp + 0x200]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x298]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
test rbx, rbx
je 0x1400669af
sub rdi, rbx
mov rax, rbx
cmp rdi, 0x1000
jb 0x1400669a3
add rdi, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400669a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rdi
mov rcx, rbx
call fcn.14011cbf8
nop
jmp 0x140066c2f
cmp rax, 1
jne 0x140066c51
call fcn.14011c034
lea r15, [0x14015c0f8]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 0x20
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0xf8]
call fcn.140060cc0
nop
lea rcx, [rsp + 0xf8]
call fcn.1400616b0
movzx ebx, al
lea rcx, [rsp + 0xf8]
call fcn.140098020
test bl, bl
jne 0x140066c3c
movups xmm0, xmmword [0x14015b2c0]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14015b2d0]
movups xmmword [rsp + 0x50], xmm1
mov eax, dword [0x14015b2e0]
mov dword [rsp + 0x60], eax
movzx eax, word [0x14015b2e4]
mov word [rsp + 0x64], ax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.140066e10
xorps xmm0, xmm0
movups xmmword [rsp + 0xf8], xmm0
mov qword [rsp + 0x108], r13
mov qword [rsp + 0x110], r13
lea rax, [rsp + 0x40]
nop
inc r14
cmp byte [rax + r14], 0
jne 0x140066a70
mov r8, r14
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xf8]
call fcn.14005c750
lea r8, [rsp + 0xf8]
lea rdx, [rsp + 0xb0]
call fcn.14006f500
nop
lea rsi, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova rsi, qword [rsp + 0xb0]
add rsi, qword [rsp + 0xc0]
lea rbx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova rbx, qword [rsp + 0xb0]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov rdi, r13
mov qword [rsp + 0x50], r13
sub rsi, rbx
je 0x140066b26
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.1400a0230
mov r8, rsi
mov rdx, rbx
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
add rsi, rbx
mov qword [rsp + 0x48], rsi
mov rdi, qword [rsp + 0x50]
jmp 0x140066b30
mov rsi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov r8d, 0x22
mov rdx, r15
lea rcx, [rsp + 0x1f0]
call fcn.140092760
nop
sub rsi, rbx
mov r8, rsi
mov rdx, rbx
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x1f8]
call fcn.140097920
test rax, rax
jne 0x140066b95
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x1f0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ec], edx
lea rcx, [rsp + 0x1f8]
call fcn.140094020
lea rcx, [rsp + 0x200]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x298]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
test rbx, rbx
je 0x140066c2f
sub rdi, rbx
mov rax, rbx
cmp rdi, 0x1000
jb 0x140066c23
add rdi, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140066c23
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rdi
mov rcx, rbx
call fcn.14011cbf8
nop
lea rcx, [rsp + 0xb0]
call fcn.140058450
xor edx, edx
mov r8d, 0x20001
lea rcx, str.C:_ProgramData_ScreamerDelay.wav
call qword [sym.imp.WINMM.dll_PlaySoundW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401603c0]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.CloseCheat]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x14015c170]
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], 0
cmp qword [rsp + 0xa0], 0xa
je 0x140066cd3
lea rcx, [rsp + 0x40]
call fcn.140058450
nop
lea rcx, [rsp + 0x90]
call fcn.140058450
nop
lea rcx, [rsp + 0xe8]
call fcn.140097f10
nop
movzx edx, byte [rsp + 0xe8]
lea rcx, [rsp + 0xf0]
call fcn.140098e30
nop
jmp 0x140066d74
lea r14, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova r14, qword [rsp + 0x90]
add r14, qword [rsp + 0xa0]
lea rsi, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova rsi, qword [rsp + 0x90]
mov rax, r14
sub rax, rsi
cmp rax, 0xa
je 0x140066d1f
xor bl, bl
jmp 0x140066d56
cmp rsi, r14
je 0x140066d54
lea r15, [rsp + 0x40]
sub r15, rsi
nop dword [rax]
movzx edi, byte [rsi + r15]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140066d1b
inc rsi
cmp rsi, r14
jne 0x140066d30
mov bl, 1
lea rcx, [rsp + 0x40]
call fcn.140058450
test bl, bl
je 0x140066c9c
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
xor r13d, r13d
lea rcx, [rsp + 0x158]
call fcn.140058450
nop
lea rcx, [rsp + 0x138]
call fcn.140058450
nop
mov rbx, qword [rsp + 0x2248]
mov rcx, qword [rbx]
test rcx, rcx
je 0x140066dd8
mov rdx, qword [rbx + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140066dc8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140066df5
mov rcx, r8
call fcn.14011cbf8
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
lea r11, [rsp + 0x2210]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140058710
nop
int3