Function at 0x1400afc50
Capabilities:
Check for foreground window switch
Check if file exists
Create thread
Delete file
Download url
Execute command
Get common file path
Get graphical window text
Get program files directory
Hide graphical window
Log keystrokes via polling
Receive data
Terminate process

Disassembly:
push rdi
mov eax, 0x12d0
call fcn.140117b50
sub rsp, rax
mov rax, qword [0x14030ca08]
xor rax, rsp
mov qword [rsp + 0x12c0], rax
xor ecx, ecx
call fcn.1400b2c5c
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call fcn.1400a8560
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x4d0], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0x4d8], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0xd0], rax
lea rdx, [rsp + 0x10a0]
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
movsx eax, word [rsp + 0x10ae]
movsx ecx, word [rsp + 0x10aa]
sub eax, ecx
inc eax
mov word [rsp + 0xdc], ax
movsx eax, word [rsp + 0x10b0]
movsx ecx, word [rsp + 0x10ac]
sub eax, ecx
inc eax
mov word [rsp + 0xde], ax
mov dword [rsp + 0x110], 0
mov dword [rsp + 0x114], 0
mov dword [rsp + 0x118], 0
mov dword [rsp + 0xc4], 0x212
mov dword [rsp + 0xc0], Ordinal_301
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x28], 1
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0xc4]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_MoveWindow]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
lea rdx, [rsp + 0x10f8]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rsp + 0x1104]
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0xe0], eax
mov eax, dword [rsp + 0xc0]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [rsp + 0xe0]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0xe4], eax
mov eax, dword [rsp + 0x1100]
cdq
sub eax, edx
sar eax, 1
mov dword [rsp + 0xf4], eax
mov eax, dword [rsp + 0xc4]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [rsp + 0xf4]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov ecx, dword [rsp + 0xe4]
mov r9d, ecx
mov r8d, eax
mov rdx, 0xfffffffffffffffe
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov edx, 0xfffffff0
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [rsp + 0xb0], eax
mov eax, dword [rsp + 0xb0]
and eax, 0xfff0ffff
mov dword [rsp + 0xb0], eax
mov r8d, dword [rsp + 0xb0]
mov edx, 0xfffffff0
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_SetWindowLongA]
lea rdx, [rsp + 0x10a0]
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
movsx eax, word [rsp + 0x10ae]
movsx ecx, word [rsp + 0x10aa]
sub eax, ecx
inc eax
mov word [rsp + 0xc8], ax
movsx eax, word [rsp + 0x10b0]
movsx ecx, word [rsp + 0x10ac]
sub eax, ecx
inc eax
mov word [rsp + 0xca], ax
cmp qword [rsp + 0xd0], 0
jne 0x1400afed5
mov dword [rsp + 0xe8], 0
lea rdx, [0x1401442d8]
lea rcx, [rsp + 0xe8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
jmp 0x1400afeea
mov edx, dword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
mov edx, 0xffffffec
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xf6
xor edx, edx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov dword [rsp + 0x10c0], 0x64
mov dword [rsp + 0x10c4], 1
lea rdx, [rsp + 0x10c0]
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
lea rdx, [rsp + 0xa68]
lea rcx, [rsp + 0xa6]
call fcn.14008df98
mov rcx, rax
call fcn.1400a2e04
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x11c]
lea rcx, [rsp + 0xa7]
call fcn.14008f4f0
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0xb40]
mov qword [rsp + 0x180], rax
lea rdx, [rsp + 0x530]
lea rcx, [rsp + 0xb4]
call fcn.14008fd10
mov rcx, rax
call fcn.1400a2cb4
mov rdx, rax
mov rcx, qword [rsp + 0x180]
call fcn.1400639d4
mov qword [rsp + 0x188], rax
mov rcx, qword [rsp + 0x188]
call fcn.14009338c
movzx eax, al
test eax, eax
je 0x1400b009b
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0xb5]
call fcn.140090380
mov rcx, rax
call fcn.1400a2c44
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x198], rax
lea rdx, [rsp + 0xae0]
lea rcx, [rsp + 0xb6]
call fcn.1400908c4
mov rcx, rax
call fcn.1400a3034
mov qword [rsp + 0x190], rax
mov rdx, qword [rsp + 0x190]
mov rcx, qword [rsp + 0x198]
call fcn.14007f698
mov qword [rsp + 0x1a0], rax
lea rdx, [0x140087734]
mov rcx, qword [rsp + 0x1a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x68]
call fcn.140090db8
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x69]
call fcn.14009112c
mov rcx, rax
call fcn.1400a353c
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x124]
lea rcx, [rsp + 0x6a]
call fcn.1400914f8
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call fcn.1400b2c5c
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rdx, [rsp + 0x6b]
lea rcx, [rsp + 0x10c8]
call fcn.14007efa8
nop
lea rcx, [rsp + 0x10c8]
call fcn.1400a386c
lea rdx, [rsp + 0x4e8]
lea rcx, [rsp + 0x6c]
call fcn.14008cc48
mov rcx, rax
call fcn.1400a2c44
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x1b0], rax
lea rdx, [rsp + 0xb00]
lea rcx, [rsp + 0x6d]
call fcn.14008cdf0
mov rcx, rax
call fcn.1400a306c
mov qword [rsp + 0x1a8], rax
mov rdx, qword [rsp + 0x1a8]
mov rcx, qword [rsp + 0x1b0]
call fcn.14007f698
lea rcx, [0x14030dc80]
call fcn.1400c0850
movzx eax, byte [0x14030de90]
test eax, eax
je 0x1400b01c6
lea rcx, [0x14030dde0]
call fcn.1400a3d44
movzx eax, al
test eax, eax
jne 0x1400b0231
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x1c0], rax
lea rdx, [rsp + 0x520]
lea rcx, [rsp + 0x6e]
call fcn.14008d07c
mov rcx, rax
call fcn.1400a2cb4
mov qword [rsp + 0x1b8], rax
mov rdx, qword [rsp + 0x1b8]
mov rcx, qword [rsp + 0x1c0]
call fcn.14007f698
lea rdx, [0x14030de98]
mov rcx, rax
call fcn.14007f650
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea rcx, [rsp + 0x10d8]
call fcn.140088da8
nop
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x1d0], rax
lea rdx, [rsp + 0xa98]
lea rcx, [rsp + 0x6f]
call fcn.14008d168
mov rcx, rax
call fcn.1400a2fc4
mov qword [rsp + 0x1c8], rax
mov rdx, qword [rsp + 0x1c8]
mov rcx, qword [rsp + 0x1d0]
call fcn.14007f698
lea rdx, [rsp + 0x10d8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.14007f624
lea rax, [rsp + 0xb60]
mov qword [rsp + 0x1d8], rax
lea rdx, [rsp + 0x10d8]
mov rcx, qword [rsp + 0x1d8]
call fcn.1400886a0
mov qword [rsp + 0x1e0], rax
mov rdx, qword [rsp + 0x1e0]
lea rcx, [0x14030dc80]
call fcn.1400c1f10
movzx eax, byte [0x14030de90]
test eax, eax
je 0x1400b02f8
lea rcx, [0x14030dde0]
call fcn.1400a3d44
movzx eax, al
test eax, eax
je 0x1400b0363
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x1f0], rax
lea rdx, [rsp + 0x540]
lea rcx, [rsp + 0x70]
call fcn.14008d3e0
mov rcx, rax
call fcn.1400a2cb4
mov qword [rsp + 0x1e8], rax
mov rdx, qword [rsp + 0x1e8]
mov rcx, qword [rsp + 0x1f0]
call fcn.14007f698
lea rdx, [0x14030de98]
mov rcx, rax
call fcn.14007f650
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov dword [rsp + 0x48], 0
jmp 0x1400b0377
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
movsxd rax, dword [rsp + 0x48]
mov qword [rsp + 0x1f8], rax
lea rcx, [0x14030de60]
call fcn.1400af304
mov rcx, qword [rsp + 0x1f8]
cmp rcx, rax
jae 0x1400b092c
movsxd rax, dword [rsp + 0x48]
mov rdx, rax
lea rcx, [0x14030de60]
call fcn.1400a0b40
mov rdx, rax
lea rcx, [rsp + 0x1170]
call fcn.14008af10
nop
lea rax, [rsp + 0xb80]
mov qword [rsp + 0x200], rax
lea rdx, [rsp + 0x1190]
mov rcx, qword [rsp + 0x200]
call fcn.1400886a0
mov qword [rsp + 0x208], rax
mov rcx, qword [rsp + 0x208]
call fcn.1400af52c
mov qword [rsp + 0x218], rax
xor ecx, ecx
call fcn.1400b2c5c
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x210]
mov rcx, qword [rsp + 0x218]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
cqo
mov ecx, 0x15180
idiv rcx
mov dword [rsp + 0xa8], eax
mov rax, qword [rsp + 0x60]
cqo
mov ecx, 0x15180
idiv rcx
mov rax, rdx
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
cqo
mov ecx, 0xe10
idiv rcx
mov dword [rsp + 0xbc], eax
mov rax, qword [rsp + 0x60]
cqo
mov ecx, 0xe10
idiv rcx
mov rax, rdx
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
cqo
mov ecx, reloc.WLDAP32.dll_Ordinal_60
idiv rcx
mov dword [rsp + 0xb8], eax
mov rax, qword [rsp + 0x60]
cqo
mov ecx, reloc.WLDAP32.dll_Ordinal_60
idiv rcx
mov rax, rdx
mov dword [rsp + 0xd8], eax
cmp dword [rsp + 0xa8], 0
jne 0x1400b04eb
cmp dword [rsp + 0xbc], 0
jne 0x1400b04eb
cmp dword [rsp + 0xb8], 0
jne 0x1400b04eb
cmp dword [rsp + 0xd8], 0
jne 0x1400b04eb
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
cmp dword [rsp + 0xa8], 0x384
jl 0x1400b0526
lea rdx, [rsp + 0x580]
lea rcx, [rsp + 0x71]
call fcn.14008d4d8
mov rcx, rax
call fcn.1400a2d24
mov rdx, rax
lea rcx, [0x14030d9a8]
call fcn.140064560
jmp 0x1400b090e
lea rdx, [rsp + 0x4f0]
lea rcx, [rsp + 0x72]
call fcn.14008db8c
mov rcx, rax
call fcn.1400a2c44
mov qword [rsp + 0x320], rax
mov edx, dword [rsp + 0xd8]
lea rcx, [rsp + 0xa00]
call fcn.1400af648
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x228], rax
mov rax, qword [rsp + 0x228]
mov qword [rsp + 0x300], rax
lea rdx, [rsp + 0x550]
lea rcx, [rsp + 0x73]
call fcn.14008d9f0
mov rcx, rax
call fcn.1400a2cb4
mov qword [rsp + 0x2e0], rax
mov edx, dword [rsp + 0xb8]
lea rcx, [rsp + 0x9e0]
call fcn.1400af648
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0x230]
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x2c0], rax
lea rdx, [rsp + 0x490]
lea rcx, [rsp + 0x74]
call fcn.14008d828
mov rcx, rax
call fcn.1400a2c0c
mov qword [rsp + 0x2a0], rax
mov edx, dword [rsp + 0xbc]
lea rcx, [rsp + 0x9c0]
call fcn.1400af648
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x280], rax
lea rdx, [rsp + 0x480]
lea rcx, [rsp + 0x75]
call fcn.14008d6ac
mov rcx, rax
call fcn.1400a2b9c
mov qword [rsp + 0x260], rax
mov edx, dword [rsp + 0xa8]
lea rcx, [rsp + 0x9a0]
call fcn.1400af648
mov qword [rsp + 0x250], rax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x258], rax
mov rax, qword [rsp + 0x258]
mov qword [rsp + 0x268], rax
mov r8, qword [rsp + 0x260]
mov rdx, qword [rsp + 0x268]
lea rcx, [rsp + 0x980]
call fcn.14007fcfc
mov qword [rsp + 0x270], rax
mov rax, qword [rsp + 0x270]
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0x288], rax
mov r8, qword [rsp + 0x280]
mov rdx, qword [rsp + 0x288]
lea rcx, [rsp + 0x8c0]
call fcn.14007fcb4
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0x290]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x298]
mov qword [rsp + 0x2a8], rax
mov r8, qword [rsp + 0x2a0]
mov rdx, qword [rsp + 0x2a8]
lea rcx, [rsp + 0x960]
call fcn.14007fcfc
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0x2b0]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0x2b8]
mov qword [rsp + 0x2c8], rax
mov r8, qword [rsp + 0x2c0]
mov rdx, qword [rsp + 0x2c8]
lea rcx, [rsp + 0x940]
call fcn.14007fcb4
mov qword [rsp + 0x2d0], rax
mov rax, qword [rsp + 0x2d0]
mov qword [rsp + 0x2d8], rax
mov rax, qword [rsp + 0x2d8]
mov qword [rsp + 0x2e8], rax
mov r8, qword [rsp + 0x2e0]
mov rdx, qword [rsp + 0x2e8]
lea rcx, [rsp + 0x920]
call fcn.14007fcfc
mov qword [rsp + 0x2f0], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rsp + 0x2f8]
mov qword [rsp + 0x308], rax
mov r8, qword [rsp + 0x300]
mov rdx, qword [rsp + 0x308]
lea rcx, [rsp + 0x900]
call fcn.14007fcb4
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0x318], rax
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x328], rax
mov r8, qword [rsp + 0x320]
mov rdx, qword [rsp + 0x328]
lea rcx, [rsp + 0x8e0]
call fcn.14007fcfc
mov qword [rsp + 0x330], rax
mov rdx, qword [rsp + 0x330]
lea rcx, [0x14030d9a8]
call fcn.14008bee0
lea rcx, [rsp + 0x8e0]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x900]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x920]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x940]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x960]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x8c0]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x980]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x9a0]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x9c0]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x9e0]
call fcn.1400644c0
nop
lea rcx, [rsp + 0xa00]
call fcn.1400644c0
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x1170]
call fcn.14008be24
jmp 0x1400b036d
lea rax, [rsp + 0xba0]
mov qword [rsp + 0x338], rax
lea rdx, [rsp + 0xd10]
lea rcx, [rsp + 0x76]
call fcn.14008e32c
mov rcx, rax
call fcn.1400a31bc
lea r8, [0x14030d9a8]
mov rdx, rax
mov rcx, qword [rsp + 0x338]
call fcn.140052e04
mov qword [rsp + 0x340], rax
mov rdx, qword [rsp + 0x340]
lea rcx, [0x14030dc80]
call fcn.1400c3690
xor eax, eax
cmp eax, 1
je 0x1400b10a9
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x350], rax
lea rdx, [rsp + 0xf50]
lea rcx, [rsp + 0x77]
call fcn.14008e4cc
mov rcx, rax
call fcn.1400a3424
mov qword [rsp + 0x348], rax
mov rdx, qword [rsp + 0x348]
mov rcx, qword [rsp + 0x350]
call fcn.14007f698
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x360], rax
lea rdx, [rsp + 0x5c0]
lea rcx, [rsp + 0x78]
call fcn.14008e6dc
mov rcx, rax
call fcn.1400a35ac
mov qword [rsp + 0x358], rax
mov rdx, qword [rsp + 0x358]
mov rcx, qword [rsp + 0x360]
call fcn.14007f698
lea rdx, [rsp + 0x1098]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rsp + 0x1098]
mov dword [rsp + 0xac], eax
cmp dword [rsp + 0xac], 1
je 0x1400b0a6a
cmp dword [rsp + 0xac], 2
je 0x1400b0a74
cmp dword [rsp + 0xac], 3
je 0x1400b0f6f
jmp 0x1400b103e
jmp 0x1400b10a9
lea rax, [rsp + 0xbc0]
mov qword [rsp + 0x368], rax
lea rdx, [rsp + 0x10d8]
mov rcx, qword [rsp + 0x368]
call fcn.1400886a0
mov qword [rsp + 0x370], rax
mov rdx, qword [rsp + 0x370]
lea rcx, [0x14030dc80]
call fcn.1400c1f10
movzx eax, byte [0x14030de90]
test eax, eax
je 0x1400b0ad3
lea rcx, [0x14030dde0]
call fcn.1400a3d44
movzx eax, al
test eax, eax
je 0x1400b0b3e
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x380], rax
lea rdx, [rsp + 0x560]
lea rcx, [rsp + 0x79]
call fcn.14008e8a8
mov rcx, rax
call fcn.1400a2cb4
mov qword [rsp + 0x378], rax
mov rdx, qword [rsp + 0x378]
mov rcx, qword [rsp + 0x380]
call fcn.14007f698
lea rdx, [0x14030de98]
mov rcx, rax
call fcn.14007f650
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea rdx, [rsp + 0xe30]
lea rcx, [rsp + 0x7a]
call fcn.14008ea74
mov rcx, rax
call fcn.1400a32d4
mov rdx, rax
lea rcx, [rsp + 0x1148]
call fcn.1400639d4
nop
lea rdx, [rsp + 0xeb0]
lea rcx, [rsp + 0x7b]
call fcn.14008ec2c
mov rcx, rax
call fcn.1400a3344
mov rdx, rax
lea rcx, [rsp + 0x1128]
call fcn.1400639d4
nop
lea rdx, [rsp + 0xe70]
lea rcx, [rsp + 0x7c]
call fcn.14008edc0
mov rcx, rax
call fcn.1400a32d4
mov rdx, rax
lea rcx, [rsp + 0x1108]
call fcn.1400639d4
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x7d]
call fcn.14008ef98
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rsp + 0x12c]
lea rcx, [rsp + 0x7e]
call fcn.14008f1dc
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0xc48]
lea rcx, [rsp + 0x7f]
call fcn.14008f3d4
mov rcx, rax
call fcn.1400a3184
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rsp + 0xd68]
lea rcx, [rsp + 0x80]
call fcn.14008f724
mov rcx, rax
call fcn.1400a322c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rsp + 0xc70]
lea rcx, [rsp + 0x81]
call fcn.14008f77c
mov rcx, rax
call fcn.1400a3184
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x82]
call fcn.14008f820
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rsp + 0xc98]
lea rcx, [rsp + 0x83]
call fcn.14008f88c
mov rcx, rax
call fcn.1400a3184
mov qword [rsp + 0x388], rax
lea rcx, [rsp + 0x1148]
call fcn.14007af18
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0x388]
mov rdx, qword [rsp + 0x390]
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rdx, [rsp + 0xd98]
lea rcx, [rsp + 0x84]
call fcn.14008f924
mov rcx, rax
call fcn.1400a322c
mov qword [rsp + 0x398], rax
lea rcx, [rsp + 0x1128]
call fcn.14007af18
mov qword [rsp + 0x3a0], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0x398]
mov rdx, qword [rsp + 0x3a0]
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
lea rdx, [rsp + 0xcc0]
lea rcx, [rsp + 0x85]
call fcn.14008f9a8
mov rcx, rax
call fcn.1400a3184
mov qword [rsp + 0x3a8], rax
lea rcx, [rsp + 0x1108]
call fcn.14007af18
mov qword [rsp + 0x3b0], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0x3a8]
mov rdx, qword [rsp + 0x3b0]
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov ecx, Ordinal_301
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rsp + 0x134]
lea rcx, [rsp + 0x86]
call fcn.14008fa4c
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x1000]
lea rcx, [rsp + 0x87]
call fcn.14008fac4
mov rcx, rax
call fcn.1400a3494
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x88]
call fcn.14008fb5c
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rsp + 0x13c]
lea rcx, [rsp + 0x89]
call fcn.14008fbd4
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0xc20]
lea rcx, [rsp + 0x8a]
call fcn.14008fe60
mov rcx, rax
call fcn.1400a3184
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rsp + 0xdc8]
lea rcx, [rsp + 0x8b]
call fcn.14008fee4
mov rcx, rax
call fcn.1400a322c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rsp + 0xce8]
lea rcx, [rsp + 0x8c]
call fcn.14008ff88
mov rcx, rax
call fcn.1400a3184
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x8d]
call fcn.14008ffe0
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rcx, [rsp + 0x1108]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x1128]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x1148]
call fcn.1400644c0
jmp 0x1400b10a4
lea rax, [rsp + 0xbe0]
mov qword [rsp + 0x3b8], rax
lea rdx, [rsp + 0x10d8]
mov rcx, qword [rsp + 0x3b8]
call fcn.1400886a0
mov qword [rsp + 0x3c0], rax
mov rdx, qword [rsp + 0x3c0]
lea rcx, [0x14030dc80]
call fcn.1400c1f10
movzx eax, byte [0x14030de90]
test eax, eax
je 0x1400b0fce
lea rcx, [0x14030dde0]
call fcn.1400a3d44
movzx eax, al
test eax, eax
je 0x1400b103c
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x3d0], rax
lea rdx, [rsp + 0x570]
lea rcx, [rsp + 0x8e]
call fcn.14009004c
mov rcx, rax
call fcn.1400a2cb4
mov qword [rsp + 0x3c8], rax
mov rdx, qword [rsp + 0x3c8]
mov rcx, qword [rsp + 0x3d0]
call fcn.14007f698
lea rdx, [0x14030de98]
mov rcx, rax
call fcn.14007f650
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
jmp 0x1400b10a4
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x3e0], rax
lea rdx, [rsp + 0xa20]
lea rcx, [rsp + 0x8f]
call fcn.1400900a4
mov rcx, rax
call fcn.1400a2e04
mov qword [rsp + 0x3d8], rax
mov rdx, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x3e0]
call fcn.14007f698
mov qword [rsp + 0x3e8], rax
lea rdx, [0x140087734]
mov rcx, qword [rsp + 0x3e8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400b0989
call fcn.140093298
movzx eax, al
test eax, eax
jne 0x1400b1330
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x3f8], rax
lea rdx, [rsp + 0x488]
lea rcx, [rsp + 0x90]
call fcn.14009011c
mov rcx, rax
call fcn.14008c5b8
mov qword [rsp + 0x3f0], rax
mov rdx, qword [rsp + 0x3f0]
mov rcx, qword [rsp + 0x3f8]
call fcn.14007f698
mov qword [rsp + 0x400], rax
lea rdx, [0x140087734]
mov rcx, qword [rsp + 0x400]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x410], rax
lea rdx, [rsp + 0xa80]
lea rcx, [rsp + 0x91]
call fcn.140090174
mov rcx, rax
call fcn.1400a2f8c
mov qword [rsp + 0x408], rax
mov rdx, qword [rsp + 0x408]
mov rcx, qword [rsp + 0x410]
call fcn.14007f698
mov qword [rsp + 0x418], rax
lea rdx, [0x140087734]
mov rcx, qword [rsp + 0x418]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, [rsp + 0x690]
mov qword [rsp + 0x420], rax
lea rdx, [rsp + 0x5d0]
lea rcx, [rsp + 0x92]
call fcn.1400901f8
mov rcx, rax
call fcn.1400a368c
mov rdx, rax
mov rcx, qword [rsp + 0x420]
call fcn.1400890b0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x510], xmm0
lea rcx, [rsp + 0x510]
call fcn.1400a7fa0
test eax, eax
je 0x1400b126c
lea rax, [rsp + 0x6a0]
mov qword [rsp + 0x428], rax
lea rdx, [rsp + 0x5e0]
lea rcx, [rsp + 0x93]
call fcn.140090244
mov rcx, rax
call fcn.1400a368c
mov rdx, rax
mov rcx, qword [rsp + 0x428]
call fcn.1400890b0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x4a0], xmm0
lea rcx, [rsp + 0x4a0]
call fcn.1400a7fa0
mov eax, eax
mov qword [0x14030d6d0], rax
lea rdx, [rsp + 0xa38]
lea rcx, [rsp + 0x94]
call fcn.140090478
mov rcx, rax
call fcn.1400a2e04
mov rcx, rax
call fcn.1400a4630
mov qword [0x14030d6d8], rax
jmp 0x1400b132b
lea rdx, [rsp + 0x144]
lea rcx, [rsp + 0x95]
call fcn.1400904d0
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x498]
lea rcx, [rsp + 0x96]
call fcn.14009053c
mov rcx, rax
call fcn.1400a2c44
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x438], rax
lea rdx, [rsp + 0xab0]
lea rcx, [rsp + 0x97]
call fcn.140090588
mov rcx, rax
call fcn.1400a2ffc
mov qword [rsp + 0x430], rax
mov rdx, qword [rsp + 0x430]
mov rcx, qword [rsp + 0x438]
call fcn.14007f698
mov qword [rsp + 0x440], rax
lea rdx, [0x140087734]
mov rcx, qword [rsp + 0x440]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400b1330
jmp 0x1400b1634
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x448], rax
lea rdx, [rsp + 0x5f0]
lea rcx, [rsp + 0x98]
call fcn.140090600
mov rcx, rax
call fcn.1400a368c
mov rdx, rax
mov rcx, qword [rsp + 0x448]
call fcn.1400890b0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x4b0], xmm0
lea rcx, [rsp + 0x4b0]
call fcn.1400a7fa0
test eax, eax
je 0x1400b1572
lea rax, [rsp + 0x6c0]
mov qword [rsp + 0x450], rax
lea rdx, [rsp + 0x600]
lea rcx, [rsp + 0x99]
call fcn.14009064c
mov rcx, rax
call fcn.1400a368c
mov rdx, rax
mov rcx, qword [rsp + 0x450]
call fcn.1400890b0
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x4c0], xmm0
lea rcx, [rsp + 0x4c0]
call fcn.1400a7fa0
mov eax, eax
mov qword [0x14030d6d0], rax
call fcn.1400af2ac
lea rdx, [rsp + 0xa50]
lea rcx, [rsp + 0x9a]
call fcn.1400906d0
mov rcx, rax
call fcn.1400a2e04
mov rcx, rax
call fcn.1400a4630
mov qword [0x14030d6d8], rax
cmp qword [0x14030d6d8], 0
jne 0x1400b14be
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x468], rax
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0x9b]
call fcn.1400907a0
mov rcx, rax
call fcn.1400a34cc
mov qword [rsp + 0x458], rax
lea rdx, [rsp + 0xf00]
lea rcx, [rsp + 0x9c]
call fcn.140090728
mov rcx, rax
call fcn.1400a33b4
mov qword [rsp + 0x460], rax
mov r9d, 0x40040
mov r8, qword [rsp + 0x458]
mov rdx, qword [rsp + 0x460]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, qword [rsp + 0x468]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0xf8], rax
lea rdx, [rsp + 0x610]
lea rcx, [rsp + 0x9d]
call fcn.1400909c0
mov rcx, rax
call fcn.1400a368c
mov qword [rsp + 0x470], rax
lea rdx, [rsp + 0xfa0]
lea rcx, [rsp + 0x9e]
call fcn.1400907f8
mov rcx, rax
call fcn.1400a345c
mov qword [rsp + 0x478], rax
mov r9d, 0x40040
mov r8, qword [rsp + 0x470]
mov rdx, qword [rsp + 0x478]
mov rcx, qword [rsp + 0xf8]
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, qword [rsp + 0xf8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1400a847c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x1400b1634
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x9f]
call fcn.140090a18
mov rcx, rax
call fcn.1400a2abc
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rsp + 0x4f8]
lea rcx, [rsp + 0xa0]
call fcn.140090a90
mov rcx, rax
call fcn.1400a2c44
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rsp + 0x150], rax
lea rdx, [rsp + 0xac8]
lea rcx, [rsp + 0xa1]
call fcn.140090adc
mov rcx, rax
call fcn.1400a2ffc
mov qword [rsp + 0x108], rax
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0x150]
call fcn.14007f698
mov qword [rsp + 0x158], rax
lea rdx, [0x140087734]
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400b1330
mov rax, qword [0x14030d6d0]
mov qword [0x14030d4d0], rax
mov ecx, dword [0x14030d4d0]
call fcn.1400a46b4
mov qword [0x14030d538], rax
lea rdx, [0x14030d570]
mov rcx, qword [0x14030d538]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rcx, [0x14030d530]
call fcn.14009cc5c
mov rcx, qword [0x14030d530]
call fcn.1400a4a10
lea rax, [0x14030d540]
mov rdi, rax
xor eax, eax
mov ecx, Ordinal_50
rep stosb byte [rdi], al
lea rdx, [0x14030d5c0]
mov rcx, qword [0x14030da48]
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp qword [0x14030d5d8], 0
jne 0x1400b16d1
lea r9, [0x14030d5d8]
mov r8d, 0xd422
lea rdx, [0x1402fe300]
mov rcx, qword [0x14030d4e8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
cmp qword [0x14030d5e0], 0
jne 0x1400b16fb
lea r9, [0x14030d5e0]
mov r8d, 0x99d
lea rdx, [0x14030b730]
mov rcx, qword [0x14030d4e8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
cmp qword [0x14030d5e8], 0
jne 0x1400b1725
lea r9, [0x14030d5e8]
mov r8d, 0x124
lea rdx, [0x14030c0d0]
mov rcx, qword [0x14030d4e8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
cmp qword [0x14030d5f0], 0
jne 0x1400b174f
lea r9, [0x14030d5f0]
mov r8d, 0x1ba
lea rdx, [0x14030c200]
mov rcx, qword [0x14030d4e8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
cmp qword [0x14030d5f8], 0
jne 0x1400b1779
lea r9, [0x14030d5f8]
mov r8d, 0x132
lea rdx, [0x14030c3c0]
mov rcx, qword [0x14030d4e8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
cmp qword [0x14030d600], 0
jne 0x1400b17a3
lea r9, [0x14030d600]
mov r8d, 0xf1
lea rdx, [0x14030c500]
mov rcx, qword [0x14030d4e8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
cmp qword [0x14030d608], 0
jne 0x1400b17cd
lea r9, [0x14030d608]
mov r8d, 0xec
lea rdx, [0x14030c600]
mov rcx, qword [0x14030d4e8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
cmp qword [0x14030d610], 0
jne 0x1400b17f7
lea r9, [0x14030d610]
mov r8d, 0x11b
lea rdx, [0x14030c6f0]
mov rcx, qword [0x14030d4e8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
cmp qword [0x14030d618], 0
jne 0x1400b1821
lea r9, [0x14030d618]
mov r8d, 0x114
lea rdx, [0x14030c810]
mov rcx, qword [0x14030d4e8]
call sub.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory
lea rax, [rsp + 0x11b0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, Ordinal_46
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jl 0x1400b18cb
lea rdx, [rsp + 0xd38]
lea rcx, [rsp + 0xa2]
call fcn.140090b60
mov rcx, rax
call fcn.1400a31f4
mov rdx, rax
lea rcx, [rsp + 0x11b0]
call qword [sym.imp.SHLWAPI.dll_PathAppendA]
lea rcx, [rsp + 0x11b0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x1400b189f
lea rdx, [rsp + 0x11b0]
lea rcx, [0x14030da28]
call fcn.140064560
jmp 0x1400b18cb
lea rdx, [rsp + 0xdf8]
lea rcx, [rsp + 0xa3]
call fcn.140090bb8
mov rcx, rax
call fcn.1400a329c
mov rdx, rax
lea rcx, [0x14030da28]
call fcn.140064560
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400949c4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400934dc]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
xor r8d, r8d
xor edx, edx
lea rcx, [0x14009876c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthread]
call fcn.14001868c
add rax, 0xdc
mov qword [rsp + 0x40], rax
movss xmm0, dword [0x140126288]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012a160]
movss xmm2, dword [0x14012a164]
movss xmm1, dword [0x140126290]
lea rcx, [rsp + 0x6d0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126240]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012a160]
movss xmm2, dword [0x14012a164]
movss xmm1, dword [0x140126290]
lea rcx, [rsp + 0x6e0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126228]
movss xmm2, dword [0x140126220]
movss xmm1, dword [0x14012a148]
lea rcx, [rsp + 0x6f0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140122354]
movss xmm2, dword [0x140126248]
movss xmm1, dword [0x140126248]
lea rcx, [rsp + 0x700]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 5
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
xorps xmm0, xmm0
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x710]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 6
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012623c]
movss xmm2, dword [0x14012a150]
movss xmm1, dword [0x140122318]
lea rcx, [rsp + 0x720]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 7
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126250]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x730]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 8
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122328]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x740]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 9
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012623c]
movss xmm2, dword [0x140126234]
movss xmm1, dword [0x140126230]
lea rcx, [rsp + 0x750]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xa
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012623c]
movss xmm2, dword [0x140126234]
movss xmm1, dword [0x140126230]
lea rcx, [rsp + 0x760]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xc
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012623c]
movss xmm2, dword [0x140126234]
movss xmm1, dword [0x140126230]
lea rcx, [rsp + 0x770]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xb
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x14012625c]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012623c]
movss xmm2, dword [0x14012a150]
movss xmm1, dword [0x140122318]
lea rcx, [rsp + 0x780]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xd
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012623c]
movss xmm2, dword [0x14012a150]
movss xmm1, dword [0x140122318]
lea rcx, [rsp + 0x790]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xe
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126224]
movss xmm2, dword [0x140122310]
movss xmm1, dword [0x14012621c]
lea rcx, [rsp + 0x7a0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0xf
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x14012230c]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012623c]
movss xmm2, dword [0x140126234]
movss xmm1, dword [0x140126230]
lea rcx, [rsp + 0x7b0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126288]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x7c0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x10
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x7d0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x11
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012623c]
movss xmm2, dword [0x14012a150]
movss xmm1, dword [0x140126284]
lea rcx, [rsp + 0x7e0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x12
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126220]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012628c]
movss xmm2, dword [0x14012a15c]
movss xmm1, dword [0x14012625c]
lea rcx, [rsp + 0x7f0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x13
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x800]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x14
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126220]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012628c]
movss xmm2, dword [0x14012a15c]
movss xmm1, dword [0x14012625c]
lea rcx, [rsp + 0x810]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x15
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x14012a154]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012628c]
movss xmm2, dword [0x14012a15c]
movss xmm1, dword [0x14012625c]
lea rcx, [rsp + 0x820]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x16
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012628c]
movss xmm2, dword [0x14012a15c]
movss xmm1, dword [0x14012625c]
lea rcx, [rsp + 0x830]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x17
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x14012a158]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x840]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x18
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126290]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x850]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x19
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x650]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x1a
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x680]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x1b
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126288]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x670]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x1c
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x660]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x1d
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122304]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012628c]
movss xmm2, dword [0x14012a15c]
movss xmm1, dword [0x14012625c]
lea rcx, [rsp + 0x640]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x1e
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126288]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x630]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x1f
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x620]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x20
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126280]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012a160]
movss xmm2, dword [0x14012a164]
movss xmm1, dword [0x140126290]
lea rcx, [rsp + 0x860]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x26
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x870]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x27
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126280]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012a160]
movss xmm2, dword [0x14012a164]
movss xmm1, dword [0x140126290]
lea rcx, [rsp + 0x880]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x28
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140122354]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x890]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x29
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x140126258]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140126244]
movss xmm2, dword [0x14012a14c]
movss xmm1, dword [0x1401262a0]
lea rcx, [rsp + 0x8a0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 0x2f
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
movss xmm0, dword [0x14012629c]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x14012623c]
movss xmm2, dword [0x14012a150]
movss xmm1, dword [0x140122318]
lea rcx, [rsp + 0x8b0]
call fcn.14000947c
mov ecx, reloc.WS2_32.dll_recv
imul rcx, rcx, 4
mov rdx, qword [rsp + 0x40]
movups xmm0, xmmword [rax]
movdqu xmmword [rdx + rcx], xmm0
lea rdx, [rsp + 0xb20]
lea rcx, [rsp + 0xa4]
call fcn.140090c30
mov rcx, rax
call fcn.1400a36c4
mov qword [rsp + 0x500], rax
mov edx, 0x100
mov rcx, qword [0x14030d530]
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov edx, 0x100
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov r9d, 0x20000000
mov r8d, reloc.WS2_32.dll_listen
mov edx, 0x104
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x14030d548], 0x12
je 0x1400b2966
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
cmp dword [0x14030d548], 0x12
je 0x1400b290d
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x1400b247d
mov rax, qword [0x14030d728]
add rax, 0x30c
mov r8d, 0x40
lea rdx, [0x14030d730]
mov rcx, rax
call fcn.1400a81d8
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400b2497
jmp 0x1400b290d
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x100], rax
mov ecx, dword [0x14030d4d0]
call fcn.1400a46b4
mov qword [0x14030d538], rax
cmp qword [0x14030d538], 0
je 0x1400b2536
mov rax, qword [0x14030d538]
cmp qword [rsp + 0x100], rax
jne 0x1400b2536
mov edx, 3
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_GetWindow]
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x160]
mov rcx, qword [0x14030d530]
call qword [sym.imp.USER32.dll_SetWindowPos]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov edx, 5
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x1400b2547
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x1400b28a0
cmp qword [0x14030d538], 0
je 0x1400b28a0
lea rax, [0x14030d570]
mov rdi, rax
xor eax, eax
mov ecx, reloc.WS2_32.dll_recv
rep stosb byte [rdi], al
lea rdx, [0x14030d570]
mov rcx, qword [0x14030d538]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edx, 0xfffffff0
mov rcx, qword [0x14030d538]
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [rsp + 0xec], eax
mov eax, dword [rsp + 0xec]
and eax, 0x800000
test eax, eax
je 0x1400b25d2
mov eax, dword [0x14030d574]
add eax, 0x20
mov dword [0x14030d574], eax
mov eax, dword [0x14030d5c0]
sub eax, 0x27
mov dword [0x14030d5c0], eax
mov dword [rsp + 0x28], 1
mov eax, dword [0x14030d5cc]
mov dword [rsp + 0x20], eax
mov r9d, dword [0x14030d5c8]
mov r8d, dword [0x14030d574]
mov edx, dword [0x14030d570]
mov rcx, qword [0x14030d530]
call qword [sym.imp.USER32.dll_MoveWindow]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x14030d530]
lea rcx, [0x14030d540]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400b2645
lea rcx, [0x14030d540]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [0x14030d540]
call qword [sym.imp.USER32.dll_DispatchMessageA]
lea rax, [rsp + 0x1088]
mov rdi, rax
xor eax, eax
mov ecx, reloc.WS2_32.dll_recv
rep stosb byte [rdi], al
lea rax, [rsp + 0x1080]
mov rdi, rax
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
lea rdx, [rsp + 0x1088]
mov rcx, qword [0x14030d538]
call qword [sym.imp.USER32.dll_GetClientRect]
lea rdx, [rsp + 0x1080]
mov rcx, qword [0x14030d538]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rsp + 0x1080]
mov dword [rsp + 0x1088], eax
mov eax, dword [rsp + 0x1084]
mov dword [rsp + 0x108c], eax
call fcn.140017b64
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov rcx, qword [0x14030d538]
mov qword [rax + 0xc8], rcx
mov rax, qword [rsp + 0x58]
movss xmm0, dword [0x140122300]
movss dword [rax + 0x10], xmm0
lea rcx, [rsp + 0x10b8]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [rsp + 0x1080]
mov ecx, dword [rsp + 0x10b8]
sub ecx, eax
mov eax, ecx
cvtsi2ss xmm0, eax
mov rax, qword [rsp + 0x58]
movss dword [rax + 0xe00], xmm0
mov eax, dword [rsp + 0x1084]
mov ecx, dword [rsp + 0x10bc]
sub ecx, eax
mov eax, ecx
cvtsi2ss xmm0, eax
mov rax, qword [rsp + 0x58]
movss dword [rax + 0xe04], xmm0
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400b279b
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x58]
mov byte [rcx + rax + 0xe08], 1
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x58]
mov byte [rcx + rax + 0x3740], 1
mov rax, qword [rsp + 0x58]
mov rax, qword [rax + 0xe00]
mov ecx, 8
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x58]
mov qword [rdx + rcx + 0x36ec], rax
jmp 0x1400b27b1
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x58]
mov byte [rcx + rax + 0xe08], 0
mov eax, dword [0x14030e4b0]
cmp dword [rsp + 0x1088], eax
jne 0x1400b27f1
mov eax, dword [0x14030e4b8]
cmp dword [rsp + 0x1090], eax
jne 0x1400b27f1
mov eax, dword [0x14030e4b4]
cmp dword [rsp + 0x108c], eax
jne 0x1400b27f1
mov eax, dword [0x14030e4bc]
cmp dword [rsp + 0x1094], eax
je 0x1400b28a0
movups xmm0, xmmword [rsp + 0x1088]
movdqu xmmword [0x14030e4b0], xmm0
mov eax, dword [rsp + 0x1090]
mov dword [0x14030d5c8], eax
mov eax, dword [rsp + 0x1094]
mov dword [0x14030d5cc], eax
mov eax, dword [rsp + 0x1090]
mov dword [0x14030d4f0], eax
mov eax, dword [rsp + 0x1094]
mov dword [0x14030d4f4], eax
mov dword [rsp + 0x30], 8
mov eax, dword [rsp + 0x1094]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x1090]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x1084]
mov r8d, dword [rsp + 0x1080]
xor edx, edx
mov rcx, qword [0x14030d530]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rax, qword [0x14030d4e8]
mov rax, qword [rax]
mov rax, qword [rax + 0x80]
mov qword [rsp + 0x168], rax
lea rdx, [0x14030d4f0]
mov rcx, qword [0x14030d4e8]
call qword [rsp + 0x168]
lea rax, [rsp + 0xc00]
mov qword [rsp + 0x170], rax
lea rdx, [rsp + 0x5a0]
lea rcx, [rsp + 0xa5]
call fcn.140090c7c
mov rcx, rax
call fcn.1400a34cc
mov rdx, rax
mov rcx, qword [rsp + 0x170]
call fcn.1400639d4
mov qword [rsp + 0x178], rax
mov rcx, qword [rsp + 0x178]
call fcn.1400a875c
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x1400b2908
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400b2443
call fcn.14004f4f0
call fcn.14004fac4
xor ecx, ecx
call fcn.1400140b0
call fcn.1400a0d10
mov rcx, qword [0x14030d530]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [0x14030d550]
mov dword [rsp + 0xf0], eax
lea rcx, [rsp + 0x10d8]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x10c8]
call fcn.14008be68
mov eax, dword [rsp + 0xf0]
jmp 0x1400b2987
lea rcx, [rsp + 0x10d8]
call fcn.1400644c0
nop
lea rcx, [rsp + 0x10c8]
call fcn.14008be68
jmp 0x1400b2985
xor eax, eax
mov rcx, qword [rsp + 0x12c0]
xor rcx, rsp
call fcn.1401179f0
add rsp, 0x12d0
pop rdi
ret