Function at 0x14023a130
Capabilities:
Enumerate gui resources
Hide graphical window
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rsi
push rdi
mov eax, 0x1458
call fcn.1403f1980
sub rsp, rax
mov rax, qword [0x1405eb5a0]
xor rax, rsp
mov qword [rsp + 0x1440], rax
lea rdx, [0x14056c9b0]
lea rcx, [rsp + 0x8a8]
call fcn.1401aac90
mov rcx, rax
call fcn.1401aacc0
mov rcx, rax
call fcn.140437aa8
lea rdx, [0x14056c9a0]
lea rcx, [rsp + 0x690]
call fcn.1400ac400
mov rcx, rax
call fcn.1401aac70
mov rcx, rax
call fcn.140437aa8
lea rdx, [0x14056c988]
lea rcx, [rsp + 0x820]
call fcn.1400ab0f0
mov rcx, rax
call fcn.1400ab150
mov rcx, rax
call fcn.140437aa8
lea rdx, [0x14056c978]
lea rcx, [rsp + 0x700]
call fcn.14011f5e0
mov rcx, rax
call fcn.14011f610
mov rcx, rax
call fcn.140437aa8
lea rdx, [0x14056ca18]
lea rcx, [rsp + 0x670]
call fcn.1400ac430
mov rcx, rax
call fcn.14023c890
mov rcx, rax
call fcn.140437aa8
call fcn.140233ab0
lea rcx, str.ntdll.dll
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_1.dll_LoadLibraryW]
lea rdx, str.NtReadVirtualMemory
mov rcx, rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov qword [0x1408f2450], rax
lea rcx, [0x14056ca50]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_1.dll_LoadLibraryW]
lea rdx, str.NtWriteVirtualMemory
mov rcx, rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov qword [0x1408f2448], rax
lea rcx, [0x14056ca4c]
call fcn.140233e30
lea rcx, str.FACEIT
call fcn.140233e30
movzx eax, byte [0x1408f15ff]
test eax, eax
je 0x14023a28f
lea rax, str._ROBOT_Cheats
mov qword [rsp + 0xe0], rax
jmp 0x14023a2f6
movzx eax, byte [0x1408f15fe]
test eax, eax
je 0x14023a2ab
lea rax, str._4_You_Cheats
mov qword [rsp + 0x108], rax
jmp 0x14023a2e6
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x14023a2c7
lea rax, str._JOKER_Cheats
mov qword [rsp + 0x100], rax
jmp 0x14023a2d6
lea rax, [0x14056ca70]
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x130], rax
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.api_ms_win_core_console_l2_2_0.dll_SetConsoleTitleW]
call fcn.140239d40
mov ecx, 1
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
lea rcx, str.Color_F
call fcn.140432758
lea rcx, str.MODE_Con_Cols56_lines16
call fcn.140432758
call fcn.14023a0d0
lea rax, [rsp + 0xa88]
mov qword [rsp + 0x138], rax
lea rdx, str._Welcome_Back__Cheats...
lea rcx, [rsp + 0x868]
call fcn.1401aab30
mov qword [rsp + 0x140], rax
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x140]
call fcn.14023d330
mov qword [rsp + 0x148], rax
mov edx, 4
mov rcx, qword [rsp + 0x148]
call fcn.140239fb0
mov rcx, qword [0x1408f0000]
call fcn.140081890
mov rcx, qword [0x1408f0000]
call fcn.140081960
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x14023a3d0
lea rax, str._n________________________________________________________n_____________________________________________________n______________________________________________n___________________________________________n_____________________________________n_________________________________________________n______________________________________________________n___________________________________________________
mov qword [rsp + 0xf8], rax
jmp 0x14023a437
movzx eax, byte [0x1408f15ff]
test eax, eax
je 0x14023a3ec
lea rax, str._n_______________________________________________________n____________________________________________________n_________________________________________________n_____________________________________________________n________________________________________________n
mov qword [rsp + 0xf0], rax
jmp 0x14023a427
movzx eax, byte [0x1408f15fe]
test eax, eax
je 0x14023a408
lea rax, str._n___________________________________________________n_________________________________________________n________________________________________________n___________________________________________________n______________________________________________n
mov qword [rsp + 0xe8], rax
jmp 0x14023a417
lea rax, [0x14051890d]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0xf8], rax
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0x1090]
call fcn.1400701c0
nop
lea rdx, [0x140233f60]
lea rcx, [0x1408eea50]
call fcn.1400a0e50
lea rdx, [rsp + 0x1090]
mov rcx, rax
call fcn.1401785e0
mov edx, Ordinal_27
lea rcx, [rsp + 0xfe0]
call fcn.1400667b0
lea rcx, [rsp + 0x50]
call fcn.140066760
mov qword [rsp + 0x150], rax
lea rdx, str.e_34m
lea rcx, [rsp + 0x750]
call fcn.1400701c0
nop
lea rdx, str.e_32m
lea rcx, [rsp + 0x770]
call fcn.1400701c0
nop
lea rdx, str.e_33m
lea rcx, [rsp + 0x790]
call fcn.1400701c0
nop
lea rdx, str.e_31m
lea rcx, [rsp + 0x7b0]
call fcn.1400701c0
nop
lea rdx, str.e_36m
lea rcx, [rsp + 0x7d0]
call fcn.1400701c0
nop
lea rdx, str.e_35m
lea rcx, [rsp + 0x7f0]
call fcn.1400701c0
nop
lea rax, [rsp + 0x810]
mov r8, rax
lea rdx, [rsp + 0x750]
lea rcx, [rsp + 0x6d0]
call fcn.14006ee70
lea rcx, [rsp + 0x610]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x620]
lea rcx, [rsp + 0x610]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rsp + 0x150]
lea rdx, [rsp + 0x620]
lea rcx, [rsp + 0xfe0]
call fcn.1401a0d00
nop
lea r9, [fcn.140070090]
mov r8d, 6
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rsp + 0x750]
call fcn.1403f0e90
mov dword [rsp + 0xac], gethostname
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x54], 0
jmp 0x14023a5c8
mov eax, dword [rsp + 0x54]
inc eax
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0xac]
cmp dword [rsp + 0x54], eax
jge 0x14023a6a8
movsxd rax, dword [rsp + 0x58]
mov rdx, rax
lea rcx, [rsp + 0xfe0]
call fcn.14019d790
mov rdx, rax
lea rcx, [0x1408eea50]
call fcn.1401785e0
lea rdx, [0x14056cf48]
mov rcx, rax
call fcn.1400a2310
lea rdx, str.e_0m
mov rcx, rax
call fcn.1400a2310
mov qword [rsp + 0x158], rax
lea rdx, [0x1402438b0]
mov rcx, qword [rsp + 0x158]
call fcn.1400a0e50
mov dword [rsp + 0xb0], 1
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x598]
call fcn.140073bf0
mov rcx, rax
call fcn.140073c10
mov eax, dword [rsp + 0x58]
inc eax
cdqe
mov qword [rsp + 0x160], rax
lea rcx, [rsp + 0xfe0]
call fcn.14019d7c0
mov qword [rsp + 0x168], rax
xor edx, edx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
mov rcx, qword [rsp + 0x168]
div rcx
mov rax, rdx
mov dword [rsp + 0x58], eax
jmp 0x14023a5be
lea rdx, [0x1402340a0]
lea rcx, [0x1408eea50]
call fcn.1400a0e50
lea rdx, [0x14056cf44]
mov rcx, rax
call fcn.1400a2310
mov qword [rsp + 0x170], rax
lea rdx, [0x1402438b0]
mov rcx, qword [rsp + 0x170]
call fcn.1400a0e50
call fcn.140234390
cmp dword [0x1408f1dc4], 1
jne 0x14023a939
lea rdx, [0x14056cf28]
lea rcx, [rsp + 0x8c8]
call fcn.1401aac90
mov rcx, rax
call fcn.1401aacc0
mov rdx, rax
mov ecx, 0x79
call fcn.1402339a0
test eax, eax
jne 0x14023a747
lea rdx, [0x140233f60]
lea rcx, [0x1408eea50]
call fcn.1400a0e50
lea rdx, str.Failed_0x1__please_run_as_administrator
mov rcx, rax
call fcn.1400a2310
lea rdx, str._nth_lib_load_done.sss
lea rcx, [rsp + 0x850]
call fcn.1401aaa90
mov rcx, rax
call fcn.1401aaac0
mov qword [rsp + 0x188], rax
lea rcx, [rsp + 0x6e0]
call fcn.140239b70
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x190], rax
mov r8, qword [rsp + 0x188]
mov rdx, qword [rsp + 0x190]
lea rcx, [rsp + 0x6b0]
call fcn.1400824c0
mov qword [rsp + 0x198], rax
mov rcx, qword [rsp + 0x198]
call fcn.140082380
mov rcx, rax
call fcn.140437aa8
lea rcx, [rsp + 0x6b0]
call fcn.140070090
nop
lea rcx, [rsp + 0x6e0]
call fcn.140070090
lea rax, [rsp + 0xaa8]
mov qword [rsp + 0x1a0], rax
lea rdx, str.adb_kill_server
lea rcx, [rsp + 0x718]
call fcn.14011f5e0
mov rcx, rax
call fcn.14011f610
mov rdx, rax
mov rcx, qword [rsp + 0x1a0]
call fcn.1400701c0
mov qword [rsp + 0x1a8], rax
mov rcx, qword [rsp + 0x1a8]
call fcn.1402563d0
lea rax, [rsp + 0xac8]
mov qword [rsp + 0x1b0], rax
lea rdx, str.adb_devices
lea rcx, [rsp + 0x660]
call fcn.1400ab0a0
mov rcx, rax
call fcn.1400ab0d0
mov rdx, rax
mov rcx, qword [rsp + 0x1b0]
call fcn.1400701c0
mov qword [rsp + 0x1b8], rax
mov rcx, qword [rsp + 0x1b8]
call fcn.1402563d0
lea rax, [rsp + 0xae8]
mov qword [rsp + 0x1c0], rax
lea rdx, str.adb__s_emulator_5554_shell_rm__rf__data_local_tmp_libpubgm.so
lea rcx, [rsp + 0xed8]
call fcn.14023c8b0
mov rcx, rax
call fcn.14023c8e0
mov rdx, rax
mov rcx, qword [rsp + 0x1c0]
call fcn.1400701c0
mov qword [rsp + 0x1c8], rax
mov rcx, qword [rsp + 0x1c8]
call fcn.1402563d0
lea rax, [rsp + 0xb08]
mov qword [rsp + 0x1d0], rax
lea rdx, str.adb__s_emulator_5554_push_C:WindowsFontsconfig.pak__data_local_tmp_libpubgm.so
lea rcx, [rsp + 0xf70]
call fcn.14023c900
mov rcx, rax
call fcn.14023c930
mov rdx, rax
mov rcx, qword [rsp + 0x1d0]
call fcn.1400701c0
mov qword [rsp + 0x1d8], rax
mov rcx, qword [rsp + 0x1d8]
call fcn.1402563d0
lea rdx, [0x140234020]
lea rcx, [0x1408eea50]
call fcn.1400a0e50
mov qword [rsp + 0x1e8], rax
lea rdx, str._____Wating_Emulator_Opene
lea rcx, [rsp + 0x888]
call fcn.14023c950
mov qword [rsp + 0x1e0], rax
mov rdx, qword [rsp + 0x1e0]
mov rcx, qword [rsp + 0x1e8]
call fcn.14023c980
call fcn.1402557c0
test eax, eax
jne 0x14023a99b
mov ecx, 0x1f4
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
jmp 0x14023a985
mov dword [rsp + 0x5c], 0
jmp 0x14023a9af
mov eax, dword [rsp + 0x5c]
inc eax
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 3
jge 0x14023aa4f
mov dword [rsp + 0xb4], 1
lea rdx, [rsp + 0xb4]
lea rcx, [rsp + 0x5a0]
call fcn.140073bf0
mov rcx, rax
call fcn.140073c10
lea rdx, [0x140234020]
lea rcx, [0x1408eea50]
call fcn.1400a0e50
mov qword [rsp + 0x1f8], rax
lea rdx, [0x14056cfbc]
lea rcx, [rsp + 0x110]
call fcn.140234640
mov qword [rsp + 0x1f0], rax
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1f8]
call fcn.140234670
mov qword [rsp + 0x200], rax
lea rdx, [0x1402438b0]
mov rcx, qword [rsp + 0x200]
call fcn.1400a0e50
jmp 0x14023a9a5
lea rdx, [0x140233fa0]
lea rcx, [0x1408eea50]
call fcn.1400a0e50
mov qword [rsp + 0x210], rax
lea rdx, [0x14056d0c8]
lea rcx, [rsp + 0x588]
call fcn.1400aae80
mov qword [rsp + 0x208], rax
mov rdx, qword [rsp + 0x208]
mov rcx, qword [rsp + 0x210]
call fcn.14023c9d0
lea rax, [rsp + 0x1240]
lea rcx, [0x14056d0b0]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_27
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1258]
mov rdi, rax
xor eax, eax
mov ecx, 0x1e8
rep stosb byte [rdi], al
lea rcx, [rsp + 0x1240]
call fcn.140255a20
mov dword [0x1408f16b8], eax
cmp dword [0x1408f16b8], 0
jle 0x14023aaee
mov byte [0x1408f1668], 1
call fcn.1402557c0
mov dword [rsp + 0xb8], eax
cmp dword [rsp + 0xb8], 0
jle 0x14023c852
mov r8d, dword [0x1408f16b8]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_1.dll_OpenProcess]
mov qword [0x1408f16c8], rax
lea rax, [rsp + 0xb28]
mov qword [rsp + 0x218], rax
lea rdx, str.____Getting_Game_Winow....
lea rcx, [rsp + 0x8e8]
call fcn.1401aac90
mov qword [rsp + 0x220], rax
mov rdx, qword [rsp + 0x218]
mov rcx, qword [rsp + 0x220]
call fcn.14023d3d0
mov qword [rsp + 0x228], rax
mov edx, 6
mov rcx, qword [rsp + 0x228]
call fcn.140239fb0
movzx eax, byte [0x1408f1668]
cmp eax, 1
jne 0x14023abf8
xor edx, edx
lea rcx, [0x14023cb40]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [0x1408f16c0]
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x14023abbc
mov edx, 9
mov rcx, qword [0x1408f16c0]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [0x14056d078]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [rsp + 0x230], rax
lea r9, str.AEngineRenderWindow
lea r8, str.AEngineRenderWindowClass
xor edx, edx
mov rcx, qword [rsp + 0x230]
call qword [sym.imp.USER32.dll_FindWindowExW]
mov qword [0x1408f16c0], rax
mov rcx, qword [0x1408f16c0]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x14023ac0e
jmp 0x14023ab7e
mov dword [rsp + 0x60], 0
jmp 0x14023ac22
mov eax, dword [rsp + 0x60]
inc eax
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 3
jge 0x14023acc2
mov dword [rsp + 0xbc], 1
lea rdx, [rsp + 0xbc]
lea rcx, [rsp + 0x5a8]
call fcn.140073bf0
mov rcx, rax
call fcn.140073c10
lea rdx, [0x140234020]
lea rcx, [0x1408eea50]
call fcn.1400a0e50
mov qword [rsp + 0x240], rax
lea rdx, reloc.WLDAP32.dll_Ordinal_46
lea rcx, [rsp + 0x114]
call fcn.140234640
mov qword [rsp + 0x238], rax
mov rdx, qword [rsp + 0x238]
mov rcx, qword [rsp + 0x240]
call fcn.140234670
mov qword [rsp + 0x248], rax
lea rdx, [0x1402438b0]
mov rcx, qword [rsp + 0x248]
call fcn.1400a0e50
jmp 0x14023ac18
mov ecx, 1
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
lea rdx, [0x140233fa0]
lea rcx, [0x1408eea50]
call fcn.1400a0e50
mov qword [rsp + 0x258], rax
lea rdx, str._Ok._n
lea rcx, [rsp + 0x590]
call fcn.1400aae80
mov qword [rsp + 0x250], rax
mov rdx, qword [rsp + 0x250]
mov rcx, qword [rsp + 0x258]
call fcn.14023c9d0
movzx eax, byte [0x1408f15fe]
mov ecx, dword [0x1408f16b8]
call fcn.14023a000
mov qword [0x1408f16b0], rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_ntuser_sysparams_l1_1_0.dll_GetSystemMetrics]
mov dword [rsp + 0x118], eax
mov ecx, 1
call qword [sym.imp.api_ms_win_ntuser_sysparams_l1_1_0.dll_GetSystemMetrics]
mov dword [rsp + 0x11c], eax
lea rdx, [rsp + 0xfd0]
mov rcx, qword [0x1408f16c0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edx, Ordinal_27
lea rcx, [rsp + 0x1038]
call fcn.1400667b0
lea rcx, [rsp + 0x1038]
call fcn.14006ef60
nop
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x4c], 0
mov dword [rsp + 0xcc], 0
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x44], 0
movzx eax, byte [0x1408f1668]
cmp eax, 1
jne 0x14023b577
mov edx, 0x90000000
mov ecx, 0x20000000
call fcn.140069b50
mov dword [rsp + 0x3c], eax
cmp dword [rsp + 0x3c], 1
jbe 0x14023afef
cmp dword [rsp + 0x3c], 0x5fc7dfe0
jne 0x14023ae6e
mov dword [reloc.WS2_32.dll_accept], 2
mov ecx, 0xe0c36e8
call fcn.1400735f0
mov dword [rsp + 0x68], eax
lea rax, [rsp + 0xb48]
mov qword [rsp + 0x260], rax
lea rdx, str.____Getting_ViewMatrixBase_VM_For_Loop_7_n
lea rcx, [rsp + 0xdd8]
call fcn.14023ca00
mov qword [rsp + 0x268], rax
mov rdx, qword [rsp + 0x260]
mov rcx, qword [rsp + 0x268]
call fcn.14023d050
mov qword [rsp + 0x270], rax
mov edx, 9
mov rcx, qword [rsp + 0x270]
call fcn.140239fb0
cmp dword [rsp + 0x3c], 0x6050e84c
jne 0x14023aeeb
mov dword [reloc.WS2_32.dll_accept], 1
mov ecx, 0xe0c36e8
call fcn.1400735f0
mov dword [rsp + 0x38], eax
lea rax, [rsp + 0xb68]
mov qword [rsp + 0x278], rax
lea rdx, str.____Getting_ViewMatrixBase_GL_TW_For_Loop_7_n
lea rcx, [rsp + 0xe38]
call fcn.1402346c0
mov qword [rsp + 0x280], rax
mov rdx, qword [rsp + 0x278]
mov rcx, qword [rsp + 0x280]
call fcn.14023ee30
mov qword [rsp + 0x288], rax
mov edx, 9
mov rcx, qword [rsp + 0x288]
call fcn.140239fb0
cmp dword [rsp + 0x3c], 0x6050e84c
jne 0x14023af68
mov dword [reloc.WS2_32.dll_accept], 1
mov ecx, 0xe0c36e8
call fcn.1400735f0
mov dword [rsp + 0x38], eax
lea rax, [rsp + 0xb88]
mov qword [rsp + 0x290], rax
lea rdx, str.____Getting_ViewMatrixBase_TW_For_Loop_7_n
lea rcx, [rsp + 0xe08]
call fcn.14023ca00
mov qword [rsp + 0x298], rax
mov rdx, qword [rsp + 0x290]
mov rcx, qword [rsp + 0x298]
call fcn.14023d050
mov qword [rsp + 0x2a0], rax
mov edx, 9
mov rcx, qword [rsp + 0x2a0]
call fcn.140239fb0
cmp dword [rsp + 0x3c], 0x575661a0
jne 0x14023afe5
mov dword [reloc.WS2_32.dll_accept], 1
mov ecx, 0x3d796f7c
call fcn.1400735f0
mov dword [rsp + 0x44], eax
lea rax, [rsp + 0xba8]
mov qword [rsp + 0x2a8], rax
lea rdx, str.____Getting_ViewMatrixBase_China_For_Loop_7_n
lea rcx, [rsp + 0xe68]
call fcn.1402346c0
mov qword [rsp + 0x2b0], rax
mov rdx, qword [rsp + 0x2a8]
mov rcx, qword [rsp + 0x2b0]
call fcn.14023ee30
mov qword [rsp + 0x2b8], rax
mov edx, 9
mov rcx, qword [rsp + 0x2b8]
call fcn.140239fb0
mov eax, dword [rsp + 0x3c]
mov dword [0x1408effec], eax
cmp dword [reloc.WS2_32.dll_accept], 1
je 0x14023b00c
cmp dword [reloc.WS2_32.dll_accept], 3
je 0x14023b00c
cmp dword [rsp + 0x3c], 1
jae 0x14023b094
mov ecx, 0xe0c36e8
call fcn.1400735f0
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0x56e30000
jne 0x14023b02e
mov dword [reloc.WS2_32.dll_accept], 1
mov ecx, 0xe0c3868
call fcn.1400735f0
mov dword [rsp + 0x4c], eax
cmp dword [rsp + 0x4c], 0x56e30000
jne 0x14023b050
mov dword [reloc.WS2_32.dll_accept], 1
mov ecx, 0xe0c2de8
call fcn.1400735f0
mov dword [rsp + 0x48], eax
cmp dword [rsp + 0x48], 0x56e30000
jne 0x14023b072
mov dword [reloc.WS2_32.dll_accept], 3
mov ecx, 0x3d796f7c
call fcn.1400735f0
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0x3d893800
jne 0x14023b094
mov dword [reloc.WS2_32.dll_accept], 4
cmp dword [rsp + 0x38], 0x56e30000
jne 0x14023b18b
mov dword [reloc.WS2_32.dll_accept], 1
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x40], eax
cmp dword [reloc.WS2_32.dll_accept], 2
jne 0x14023b125
lea rax, [rsp + 0xa68]
mov qword [rsp + 0x2c0], rax
lea rdx, [0x14056d278]
lea rcx, [rsp + 0xc48]
call fcn.14023ca30
mov qword [rsp + 0x2c8], rax
mov rdx, qword [rsp + 0x2c0]
mov rcx, qword [rsp + 0x2c8]
call fcn.14023cf80
mov qword [rsp + 0x2d0], rax
mov edx, 9
mov rcx, qword [rsp + 0x2d0]
call fcn.140239fb0
mov dword [rsp + 0xc0], 0
jmp 0x14023b18b
lea rax, [rsp + 0xbc8]
mov qword [rsp + 0x2d8], rax
lea rdx, [0x14056d250]
lea rcx, [rsp + 0xd60]
call fcn.14023ca60
mov qword [rsp + 0x2e0], rax
mov rdx, qword [rsp + 0x2d8]
mov rcx, qword [rsp + 0x2e0]
call fcn.14023ceb0
mov qword [rsp + 0x2e8], rax
mov edx, 9
mov rcx, qword [rsp + 0x2e8]
call fcn.140239fb0
mov dword [rsp + 0xc0], 0
cmp dword [rsp + 0x68], 0x56e30000
jne 0x14023b282
mov dword [reloc.WS2_32.dll_accept], 2
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x40], eax
cmp dword [reloc.WS2_32.dll_accept], 2
jne 0x14023b21c
lea rax, [rsp + 0xbe8]
mov qword [rsp + 0x2f0], rax
lea rdx, [0x14056d228]
lea rcx, [rsp + 0xc70]
call fcn.14023ca30
mov qword [rsp + 0x2f8], rax
mov rdx, qword [rsp + 0x2f0]
mov rcx, qword [rsp + 0x2f8]
call fcn.14023cf80
mov qword [rsp + 0x300], rax
mov edx, 9
mov rcx, qword [rsp + 0x300]
call fcn.140239fb0
mov dword [rsp + 0xc4], 0
jmp 0x14023b282
lea rax, [rsp + 0xc08]
mov qword [rsp + 0x308], rax
lea rdx, [0x14056d200]
lea rcx, [rsp + 0xd88]
call fcn.14023ca60
mov qword [rsp + 0x310], rax
mov rdx, qword [rsp + 0x308]
mov rcx, qword [rsp + 0x310]
call fcn.14023ceb0
mov qword [rsp + 0x318], rax
mov edx, 9
mov rcx, qword [rsp + 0x318]
call fcn.140239fb0
mov dword [rsp + 0xc4], 0
cmp dword [rsp + 0x4c], 0x56e30000
jne 0x14023b379
mov dword [reloc.WS2_32.dll_accept], 1
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x40], eax
cmp dword [reloc.WS2_32.dll_accept], 2
jne 0x14023b313
lea rax, [rsp + 0xc28]
mov qword [rsp + 0x320], rax
lea rdx, str.____Getting_UE4_VM_For_Loop_7__n
lea rcx, [rsp + 0xc98]
call fcn.14023ca30
mov qword [rsp + 0x328], rax
mov rdx, qword [rsp + 0x320]
mov rcx, qword [rsp + 0x328]
call fcn.14023cf80
mov qword [rsp + 0x330], rax
mov edx, 9
mov rcx, qword [rsp + 0x330]
call fcn.140239fb0
mov dword [rsp + 0xc8], 0
jmp 0x14023b379
lea rax, [rsp + 0x968]
mov qword [rsp + 0x338], rax
lea rdx, str.____Getting_GL_TW_KR_GL_For_Loop_7__n
lea rcx, [rsp + 0xd38]
call fcn.1402346f0
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x338]
mov rcx, qword [rsp + 0x340]
call fcn.14023ed60
mov qword [rsp + 0x348], rax
mov edx, 9
mov rcx, qword [rsp + 0x348]
call fcn.140239fb0
mov dword [rsp + 0xc8], 0
cmp dword [rsp + 0xcc], 0x56e30000
jne 0x14023b473
mov dword [reloc.WS2_32.dll_accept], 2
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x40], eax
cmp dword [reloc.WS2_32.dll_accept], 2
jne 0x14023b40d
lea rax, [rsp + 0x988]
mov qword [rsp + 0x350], rax
lea rdx, [0x14056d2c8]
lea rcx, [rsp + 0xcc0]
call fcn.14023ca30
mov qword [rsp + 0x358], rax
mov rdx, qword [rsp + 0x350]
mov rcx, qword [rsp + 0x358]
call fcn.14023cf80
mov qword [rsp + 0x360], rax
mov edx, 9
mov rcx, qword [rsp + 0x360]
call fcn.140239fb0
mov dword [rsp + 0xd0], 0
jmp 0x14023b473
lea rax, [rsp + 0x9a8]
mov qword [rsp + 0x368], rax
lea rdx, str.____Getting_UE4_GL_TW_KR_For_Loop_7__n
lea rcx, [rsp + 0xdb0]
call fcn.14023ca60
mov qword [rsp + 0x370], rax
mov rdx, qword [rsp + 0x368]
mov rcx, qword [rsp + 0x370]
call fcn.14023ceb0
mov qword [rsp + 0x378], rax
mov edx, 9
mov rcx, qword [rsp + 0x378]
call fcn.140239fb0
mov dword [rsp + 0xd0], 0
cmp dword [rsp + 0x48], 0x56e30000
jne 0x14023b4ea
mov dword [reloc.WS2_32.dll_accept], 3
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x9c8]
mov qword [rsp + 0x380], rax
lea rdx, str.____Getting_UE4_BGMI_For_Loop_7__n
lea rcx, [rsp + 0xce8]
call fcn.14023ca90
mov qword [rsp + 0x388], rax
mov rdx, qword [rsp + 0x380]
mov rcx, qword [rsp + 0x388]
call fcn.14023cde0
mov qword [rsp + 0x390], rax
mov edx, 9
mov rcx, qword [rsp + 0x390]
call fcn.140239fb0
cmp dword [rsp + 0x44], 0x3d893800
jne 0x14023b561
mov dword [reloc.WS2_32.dll_accept], 4
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x9e8]
mov qword [rsp + 0x398], rax
lea rdx, str.____Getting_UE4_China_For_Loop_7__n
lea rcx, [rsp + 0xd10]
call fcn.14023cac0
mov qword [rsp + 0x3a0], rax
mov rdx, qword [rsp + 0x398]
mov rcx, qword [rsp + 0x3a0]
call fcn.14023cd10
mov qword [rsp + 0x3a8], rax
mov edx, 9
mov rcx, qword [rsp + 0x3a8]
call fcn.140239fb0
mov eax, dword [rsp + 0x40]
mov dword [0x1408eff40], eax
mov byte [0x1408f1668], 1
call fcn.140239eb0
cmp dword [0x1408f1dc4], 1
jne 0x14023b65f
mov eax, dword [0x1408eff40]
add eax, 0x7c
mov edx, 1
mov ecx, eax
call fcn.140243c20
lea rdx, str._data_local_tmp_libpubgm.so
lea rcx, [rsp + 0x908]
call fcn.1401aac90
mov rcx, rax
call fcn.1401aacc0
mov rcx, rax
call fcn.1402397f0
lea rax, [rsp + 0xa08]
mov qword [rsp + 0x3b0], rax
lea rdx, str.adb__s_emulator_5554_rm__rf__data_local_tmp_libpubgm.so
lea rcx, [rsp + 0xe98]
call fcn.14023caf0
mov rcx, rax
call fcn.14023cb20
mov rdx, rax
mov rcx, qword [rsp + 0x3b0]
call fcn.1400701c0
mov qword [rsp + 0x3b8], rax
mov rcx, qword [rsp + 0x3b8]
call fcn.1402563d0
lea rax, [rsp + 0xa28]
mov qword [rsp + 0x3c0], rax
lea rdx, str.adb_push_C:WindowsFonts_readconfigNBC.txt__data_data_readconfigNBC.txt
lea rcx, [rsp + 0xf20]
call fcn.1402388c0
mov rcx, rax
call fcn.1402388f0
mov rdx, rax
mov rcx, qword [rsp + 0x3c0]
call fcn.1400701c0
mov qword [rsp + 0x3c8], rax
mov rcx, qword [rsp + 0x3c8]
call fcn.1402563d0
call fcn.140233cd0
lea rdx, [0x14056d3f8]
lea rcx, [rsp + 0x928]
call fcn.1401aac90
mov rcx, rax
call fcn.1401aacc0
mov rcx, rax
call fcn.140437aa8
xor ecx, ecx
call fcn.140083ee0
mov qword [rsp + 0x3d0], rax
mov rdx, qword [rsp + 0x3d0]
lea rcx, [rsp + 0x10d0]
call fcn.140231420
nop
lea rdx, str.____PID:
lea rcx, [0x1408eea50]
call fcn.1400a2310
mov qword [rsp + 0x3d8], rax
lea rdx, [0x1402312a0]
mov rcx, qword [rsp + 0x3d8]
call fcn.14023f950
mov qword [rsp + 0x3e0], rax
lea rdx, [0x140231300]
mov rcx, qword [rsp + 0x3e0]
call fcn.14023f950
mov qword [rsp + 0x3e8], rax
mov eax, dword [0x1408f16b8]
mov dword [rsp + 0xd4], eax
mov edx, dword [rsp + 0xd4]
mov rcx, qword [rsp + 0x3e8]
call fcn.14023f450
lea rdx, [0x14056d3f4]
mov rcx, rax
call fcn.1400a2310
mov qword [rsp + 0x3f0], rax
lea rdx, [0x1402312d0]
mov rcx, qword [rsp + 0x3f0]
call fcn.14023f950
mov qword [rsp + 0x3f8], rax
mov eax, dword [0x1408f16b8]
mov dword [rsp + 0xd8], eax
mov edx, dword [rsp + 0xd8]
mov rcx, qword [rsp + 0x3f8]
call fcn.14023f450
mov qword [rsp + 0x400], rax
lea rdx, [0x1400a26e0]
mov rcx, qword [rsp + 0x400]
call fcn.1400a0e50
call qword [sym.imp.api_ms_win_core_console_l3_2_0.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.api_ms_win_core_console_l1_2_0.dll_FreeConsole]
mov eax, dword [rsp + 0xfd4]
mov ecx, dword [rsp + 0xfdc]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0xfd0]
mov edx, dword [rsp + 0xfd8]
sub edx, ecx
mov ecx, edx
mov r9d, eax
mov r8d, ecx
mov edx, dword [rsp + 0xfd4]
mov ecx, dword [rsp + 0xfd0]
call fcn.1400a39b0
mov r8d, dword [0x1408f160c]
mov edx, dword [0x1408f1610]
mov rcx, qword [0x1408f1600]
call fcn.1400994f0
xor ecx, ecx
call fcn.1401be3f0
call fcn.1401be570
mov qword [rsp + 0x30], rax
xor ecx, ecx
call fcn.1401e54f0
mov rax, qword [rsp + 0x30]
mov byte [rax + 0x394], 1
lea rdx, str.C:WindowsFontsCandarab.ttf
lea rcx, [rsp + 0x1070]
call fcn.1400701c0
nop
lea rdx, str.C:WindowsFontsTahoma.ttf
lea rcx, [rsp + 0x10b0]
call fcn.1400701c0
nop
lea rdx, str.C:WindowsFonts_taahomabd.ttf
lea rcx, [rsp + 0x1050]
call fcn.1400701c0
nop
lea rdx, str.C:WindowsFontsRUDA.TTF
lea rcx, [rsp + 0x1018]
call fcn.1400701c0
nop
lea rdx, str.C:WindowsFontsARIALUNI.TTF
lea rcx, [rsp + 0xff8]
call fcn.1400701c0
nop
lea rcx, [rsp + 0x1120]
call fcn.1401ec410
mov byte [rsp + 0x1168], 1
mov byte [rsp + 0x1140], 1
mov dword [rsp + 0x1138], 2
mov dword [rsp + 0x113c], 2
lea rcx, [rsp + 0x11b0]
call fcn.1401ec410
mov byte [rsp + 0x11bc], 0
mov rax, qword [rsp + 0x30]
mov qword [rax + 0x18], 0
lea rax, [rsp + 0xa48]
mov qword [rsp + 0x408], rax
lea rdx, str.Key.ini
mov rcx, qword [rsp + 0x408]
call fcn.1400701c0
mov qword [rsp + 0x410], rax
mov rcx, qword [rsp + 0x410]
call fcn.14013a870
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x420], rax
lea rcx, [rsp + 0x1070]
call fcn.140082380
mov qword [rsp + 0x418], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1405afcd8]
mov rdx, qword [rsp + 0x418]
mov rcx, qword [rsp + 0x420]
call fcn.1401ecd90
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x428], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1120]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x1405afce0]
mov r8d, 0x1e695
lea rdx, [0x14056e050]
mov rcx, qword [rsp + 0x428]
call fcn.1401ed0a0
call fcn.14011f8e0
mov rcx, qword [0x1408f1600]
call fcn.1401f6980
mov rcx, qword [0x1408f10a8]
call fcn.1401f63c0
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x430], rax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
movss xmm3, dword [0x1405afcf0]
mov r8d, 0x162bc
lea rdx, [0x14058c6f0]
mov rcx, qword [rsp + 0x430]
call fcn.1401ecf90
mov qword [0x1408f0930], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x438], rax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
movss xmm3, dword [0x1405afcdc]
mov r8d, 0x162bc
lea rdx, [0x14058c6f0]
mov rcx, qword [rsp + 0x438]
call fcn.1401ecf90
mov qword [0x1408f0960], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x440], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1120]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x1405afce0]
mov r8d, 0x1e695
lea rdx, [0x14056e050]
mov rcx, qword [rsp + 0x440]
call fcn.1401ed0a0
mov qword [0x1408f0960], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x448], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1120]
movss xmm2, dword [0x1405afce0]
lea rdx, str.C:windowsFonts_arial.ttf
mov rcx, qword [rsp + 0x448]
call fcn.1401ecd90
mov qword [0x1408f0960], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x458], rax
lea rcx, [rsp + 0x1018]
call fcn.140082380
mov qword [rsp + 0x450], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x1405afcb8]
mov rdx, qword [rsp + 0x450]
mov rcx, qword [rsp + 0x458]
call fcn.1401ecd90
mov qword [0x1408f0950], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x468], rax
lea rcx, [rsp + 0xff8]
call fcn.140082380
mov qword [rsp + 0x460], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1405afcb8]
mov rdx, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x468]
call fcn.1401ecd90
mov qword [0x1408f0968], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x478], rax
lea rcx, [rsp + 0x1018]
call fcn.140082380
mov qword [rsp + 0x470], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x1405afce0]
mov rdx, qword [rsp + 0x470]
mov rcx, qword [rsp + 0x478]
call fcn.1401ecd90
mov qword [0x1408f0938], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x488], rax
lea rcx, [rsp + 0x1050]
call fcn.140082380
mov qword [rsp + 0x480], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
movss xmm2, dword [0x1405afcb8]
mov rdx, qword [rsp + 0x480]
mov rcx, qword [rsp + 0x488]
call fcn.1401ecd90
mov qword [0x1408f0958], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x498], rax
lea rcx, [rsp + 0xff8]
call fcn.140082380
mov qword [rsp + 0x490], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1405afcb8]
mov rdx, qword [rsp + 0x490]
mov rcx, qword [rsp + 0x498]
call fcn.1401ecd90
mov qword [0x1408f0980], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x4a0], rax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
movss xmm3, dword [0x1405afdc0]
mov r8d, 0x42ac
lea rdx, [0x1408e13f0]
mov rcx, qword [rsp + 0x4a0]
call fcn.1401ecf90
mov qword [0x1408f0970], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x4a8], rax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
movss xmm3, dword [0x1405afd24]
mov r8d, 0xa01
lea rdx, [0x14056d640]
mov rcx, qword [rsp + 0x4a8]
call fcn.1401ed0a0
mov qword [0x1408f0940], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x4b8], rax
lea rcx, [rsp + 0x1070]
call fcn.140082380
mov qword [rsp + 0x4b0], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1405afcb8]
mov rdx, qword [rsp + 0x4b0]
mov rcx, qword [rsp + 0x4b8]
call fcn.1401ecd90
mov qword [0x1408f1700], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x4c8], rax
lea rcx, [rsp + 0x10b0]
call fcn.140082380
mov qword [rsp + 0x4c0], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1405afcb8]
mov rdx, qword [rsp + 0x4c0]
mov rcx, qword [rsp + 0x4c8]
call fcn.1401ecd90
mov qword [0x1408f16f0], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x4d8], rax
lea rcx, [rsp + 0x1018]
call fcn.140082380
mov qword [rsp + 0x4d0], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1405afcd8]
mov rdx, qword [rsp + 0x4d0]
mov rcx, qword [rsp + 0x4d8]
call fcn.1401ecd90
mov qword [0x1408f16e8], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x4e8], rax
lea rcx, [rsp + 0xff8]
call fcn.140082380
mov qword [rsp + 0x4e0], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1405afcd8]
mov rdx, qword [rsp + 0x4e0]
mov rcx, qword [rsp + 0x4e8]
call fcn.1401ecd90
mov qword [0x1408f1708], rax
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x4f8], rax
lea rcx, [rsp + 0x1050]
call fcn.140082380
mov qword [rsp + 0x4f0], rax
lea rax, [0x1405af810]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1405afcd8]
mov rdx, qword [rsp + 0x4f0]
mov rcx, qword [rsp + 0x4f8]
call fcn.1401ecd90
mov qword [0x1408f16e0], rax
lea rdx, [0x14006b230]
lea rcx, [rsp + 0x630]
call fcn.140243c60
mov qword [rsp + 0x500], rax
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0x508], rax
mov rcx, qword [rsp + 0x508]
call fcn.140230600
nop
lea rcx, [rsp + 0x630]
call fcn.1400844a0
lea rdx, [0x14006a8c0]
lea rcx, [rsp + 0x640]
call fcn.140243c60
mov qword [rsp + 0x510], rax
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x518], rax
mov rcx, qword [rsp + 0x518]
call fcn.140230600
nop
lea rcx, [rsp + 0x640]
call fcn.1400844a0
lea rdx, [0x14013af70]
lea rcx, [rsp + 0x650]
call fcn.140243c60
mov qword [rsp + 0x520], rax
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x528], rax
mov rcx, qword [rsp + 0x528]
call fcn.140230600
nop
lea rcx, [rsp + 0x650]
call fcn.1400844a0
lea rdx, [0x14013aba0]
lea rcx, [rsp + 0x5b0]
call fcn.140243c60
mov qword [rsp + 0x530], rax
mov rax, qword [rsp + 0x530]
mov qword [rsp + 0x538], rax
mov rcx, qword [rsp + 0x538]
call fcn.140230600
nop
lea rcx, [rsp + 0x5b0]
call fcn.1400844a0
lea rdx, [0x140250240]
lea rcx, [rsp + 0x5c0]
call fcn.140243c60
mov qword [rsp + 0x540], rax
mov rax, qword [rsp + 0x540]
mov qword [rsp + 0x548], rax
mov rcx, qword [rsp + 0x548]
call fcn.140230600
nop
lea rcx, [rsp + 0x5c0]
call fcn.1400844a0
lea rdx, [0x14024dad0]
lea rcx, [rsp + 0x5d0]
call fcn.140243c60
mov qword [rsp + 0x550], rax
mov rax, qword [rsp + 0x550]
mov qword [rsp + 0x558], rax
mov rcx, qword [rsp + 0x558]
call fcn.140230600
nop
lea rcx, [rsp + 0x5d0]
call fcn.1400844a0
lea rdx, [0x14024d240]
lea rcx, [rsp + 0x5e0]
call fcn.140243c60
mov qword [rsp + 0x560], rax
mov rax, qword [rsp + 0x560]
mov qword [rsp + 0x568], rax
mov rcx, qword [rsp + 0x568]
call fcn.140230600
nop
lea rcx, [rsp + 0x5e0]
call fcn.1400844a0
lea rdx, [0x140239540]
lea rcx, [rsp + 0x5f0]
call fcn.140243c60
mov qword [rsp + 0x570], rax
mov rax, qword [rsp + 0x570]
mov qword [rsp + 0x578], rax
mov rcx, qword [rsp + 0x578]
call fcn.140230600
nop
lea rcx, [rsp + 0x5f0]
call fcn.1400844a0
lea rdx, [0x140234720]
lea rcx, [rsp + 0x600]
call fcn.140243c60
mov qword [rsp + 0x580], rax
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x120], rax
mov rcx, qword [rsp + 0x120]
call fcn.140230600
nop
lea rcx, [rsp + 0x600]
call fcn.1400844a0
xor eax, eax
cmp eax, 1
je 0x14023c7c1
mov ecx, 0xa
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x1408f1600]
lea rcx, [rsp + 0x10f0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14023c21e
lea rcx, [rsp + 0x10f0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x10f0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x14023c236
mov rcx, qword [0x1408f1600]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, 0x78
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c271
movzx eax, byte [0x1408f241d]
test eax, eax
jne 0x14023c25e
mov dword [rsp + 0x6c], 1
jmp 0x14023c266
mov dword [rsp + 0x6c], 0
movzx eax, byte [rsp + 0x6c]
mov byte [0x1408f241d], al
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c2ac
movzx eax, byte [0x1408f2393]
test eax, eax
jne 0x14023c299
mov dword [rsp + 0x70], 1
jmp 0x14023c2a1
mov dword [rsp + 0x70], 0
movzx eax, byte [rsp + 0x70]
mov byte [0x1408f2393], al
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c399
movzx eax, byte [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x14023c32f
mov rdx, qword [0x1408f1600]
xor ecx, ecx
call fcn.140256350
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x14023c2f2
mov dword [rsp + 0x74], 1
jmp 0x14023c2fa
mov dword [rsp + 0x74], 0
movzx eax, byte [rsp + 0x74]
mov byte [reloc.WS2_32.dll_accept], al
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x14023c31a
mov dword [rsp + 0x78], 1
jmp 0x14023c322
mov dword [rsp + 0x78], 0
movzx eax, byte [rsp + 0x78]
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x14023c399
mov rdx, qword [0x1408f1600]
mov ecx, 1
call fcn.140256350
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x14023c355
mov dword [rsp + 0x7c], 1
jmp 0x14023c35d
mov dword [rsp + 0x7c], 0
movzx eax, byte [rsp + 0x7c]
mov byte [reloc.WS2_32.dll_accept], al
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x14023c380
mov dword [rsp + 0x80], 1
jmp 0x14023c38b
mov dword [rsp + 0x80], 0
movzx eax, byte [rsp + 0x80]
mov byte [reloc.WS2_32.dll_accept], al
mov ecx, 0xa2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c3dd
movzx eax, byte [0x1408f166c]
test eax, eax
jne 0x14023c3c4
mov dword [rsp + 0x84], 1
jmp 0x14023c3cf
mov dword [rsp + 0x84], 0
movzx eax, byte [rsp + 0x84]
mov byte [0x1408f166c], al
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c421
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x14023c408
mov dword [rsp + 0x88], 1
jmp 0x14023c413
mov dword [rsp + 0x88], 0
movzx eax, byte [rsp + 0x88]
mov byte [reloc.WS2_32.dll_accept], al
mov ecx, dword [0x1408e0904]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c490
movzx eax, byte [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x14023c490
mov eax, dword [reloc.WS2_32.dll_closesocket]
inc eax
mov dword [reloc.WS2_32.dll_closesocket], eax
cmp dword [reloc.WS2_32.dll_closesocket], 5
jne 0x14023c462
mov dword [reloc.WS2_32.dll_closesocket], 0
mov edx, dword [reloc.WS2_32.dll_closesocket]
lea rcx, [0x1408eea50]
call fcn.14023f450
mov qword [rsp + 0x128], rax
lea rdx, [0x1400a26e0]
mov rcx, qword [rsp + 0x128]
call fcn.1400a0e50
mov ecx, dword [reloc.WS2_32.dll_WSACleanup]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c512
movzx eax, byte [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x14023c512
movzx eax, byte [0x1408f241f]
test eax, eax
jne 0x14023c4c8
mov dword [rsp + 0x8c], 1
jmp 0x14023c4d3
mov dword [rsp + 0x8c], 0
movzx eax, byte [rsp + 0x8c]
mov byte [0x1408f241f], al
movzx eax, byte [0x1408f1a5e]
test eax, eax
jne 0x14023c4f9
mov dword [rsp + 0x90], 1
jmp 0x14023c504
mov dword [rsp + 0x90], 0
movzx eax, byte [rsp + 0x90]
mov byte [0x1408f1a5e], al
mov ecx, 0x75
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c562
movzx eax, byte [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x14023c562
movzx eax, byte [0x1408f1d1f]
test eax, eax
jne 0x14023c549
mov dword [rsp + 0x94], 1
jmp 0x14023c554
mov dword [rsp + 0x94], 0
movzx eax, byte [rsp + 0x94]
mov byte [0x1408f1d1f], al
mov ecx, 0x77
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c5a6
movzx eax, byte [0x1408f2189]
test eax, eax
jne 0x14023c58d
mov dword [rsp + 0x98], 1
jmp 0x14023c598
mov dword [rsp + 0x98], 0
movzx eax, byte [rsp + 0x98]
mov byte [0x1408f2189], al
mov ecx, dword [reloc.WS2_32.dll_WSAStartup]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c5eb
movzx eax, byte [0x1408f1b45]
test eax, eax
jne 0x14023c5d2
mov dword [rsp + 0x9c], 1
jmp 0x14023c5dd
mov dword [rsp + 0x9c], 0
movzx eax, byte [rsp + 0x9c]
mov byte [0x1408f1b45], al
mov ecx, dword [0x1408e0764]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c630
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x14023c617
mov dword [rsp + 0xa0], 1
jmp 0x14023c622
mov dword [rsp + 0xa0], 0
movzx eax, byte [rsp + 0xa0]
mov byte [reloc.WS2_32.dll_accept], al
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x14023c7bc
movzx eax, byte [0x1408f241f]
test eax, eax
jne 0x14023c65d
movzx eax, byte [0x1408f1a5e]
test eax, eax
je 0x14023c6bf
movzx eax, byte [0x1408f241f]
test eax, eax
jne 0x14023c675
mov dword [rsp + 0xa4], 1
jmp 0x14023c680
mov dword [rsp + 0xa4], 0
movzx eax, byte [rsp + 0xa4]
mov byte [0x1408f241f], al
movzx eax, byte [0x1408f1a5e]
test eax, eax
jne 0x14023c6a6
mov dword [rsp + 0xa8], 1
jmp 0x14023c6b1
mov dword [rsp + 0xa8], 0
movzx eax, byte [rsp + 0xa8]
mov byte [0x1408f1a5e], al
movzx eax, byte [0x1408f1c06]
test eax, eax
je 0x14023c6f2
movzx eax, byte [0x1408f1c06]
test eax, eax
jne 0x14023c6df
mov dword [rsp + 0x64], 1
jmp 0x14023c6e7
mov dword [rsp + 0x64], 0
movzx eax, byte [rsp + 0x64]
mov byte [0x1408f1c06], al
lea rdx, str.C:config.pak
lea rcx, [rsp + 0x6a0]
call fcn.1400ac400
mov rcx, rax
call fcn.1401aac70
mov rcx, rax
call fcn.140437aa8
lea rdx, str.C:WindowsFontsconfig.pak
lea rcx, [rsp + 0x948]
call fcn.1401aac90
mov rcx, rax
call fcn.1401aacc0
mov rcx, rax
call fcn.140437aa8
lea rdx, str.C:_readconfigNBC.txt
lea rcx, [rsp + 0x838]
call fcn.1400ab0f0
mov rcx, rax
call fcn.1400ab150
mov rcx, rax
call fcn.140437aa8
lea rdx, str.C:AOW_BP_1.sys
lea rcx, [rsp + 0x730]
call fcn.14011f5e0
mov rcx, rax
call fcn.14011f610
mov rcx, rax
call fcn.140437aa8
lea rdx, [0x14056d548]
lea rcx, [rsp + 0x680]
call fcn.1400ac430
mov rcx, rax
call fcn.14023c890
mov rcx, rax
call fcn.140437aa8
mov ecx, 0x64
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_ExitProcess]
jmp 0x14023c1c5
mov dword [rsp + 0xdc], 0
lea rcx, [rsp + 0xff8]
call fcn.140070090
nop
lea rcx, [rsp + 0x1018]
call fcn.140070090
nop
lea rcx, [rsp + 0x1050]
call fcn.140070090
nop
lea rcx, [rsp + 0x10b0]
call fcn.140070090
nop
lea rcx, [rsp + 0x1070]
call fcn.140070090
nop
lea rcx, [rsp + 0x10d0]
call fcn.140070090
nop
lea rcx, [rsp + 0x1038]
call fcn.14006fc10
nop
lea rcx, [rsp + 0xfe0]
call fcn.14006f770
nop
lea rcx, [rsp + 0x1090]
call fcn.140070090
mov eax, dword [rsp + 0xdc]
jmp 0x14023c873
lea rcx, [rsp + 0xfe0]
call fcn.14006f770
nop
lea rcx, [rsp + 0x1090]
call fcn.140070090
jmp 0x14023c871
xor eax, eax
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.1403f0a90
add rsp, 0x1458
pop rdi
pop rsi
ret