Function at 0x1403930a0
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
movaps xmmword [rsp + 0x60], xmm6
mov rsi, rcx
mov eax, dword [0x140b7ea18]
mov ecx, dword [0x140b7ea1c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rsp + 0x41]
cmp ecx, 0xa
setl byte [rsp + 0x42]
mov eax, 0xd4b8828c
mov ebp, 0x72d12ab7
mov r13d, 0x629a5927
lea rdi, [0x140b84e28]
mov r14d, 0x942f6e9b
lea rbx, str.1.88
xorps xmm6, xmm6
movabs r15, 0x5000000001
mov r12d, 0x41807a83
jmp 0x140393140
call fcn.140391040
mov rcx, rsi
call fcn.140179740
mov rax, qword [0x140b84e30]
mov qword [rsp + 0x58], rax
mov eax, 0xd15d8dc7
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0x40b9fdce
jle 0x1403931c0
cmp eax, 0x72d12ab6
jle 0x140393200
cmp eax, 0x7704c586
jg 0x14039326b
cmp eax, 0x72d12ab7
je 0x1403932f6
cmp eax, 0x76a6b05d
jne 0x140393140
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov edx, 0x37d0
mov r8d, 0x418
mov r9d, 8
mov rcx, rbx
call fcn.1400b0240
call fcn.1400316c0
test rax, rax
sete byte [rsp + 0x43]
mov eax, 0xf02fa93b
jmp 0x140393140
cmp eax, 0xd15d8dc6
jle 0x140393240
cmp eax, 0xec07a163
jle 0x140393294
cmp eax, 0xec07a164
je 0x140393113
cmp eax, 0xf02fa93b
jne 0x140393140
cmp byte [rsp + 0x43], 0
mov eax, 0xec07a164
cmovne eax, r13d
jmp 0x140393140
cmp eax, 0x4dbf9f5b
jle 0x1403932bb
cmp eax, 0x4dbf9f5c
je 0x14039331e
cmp eax, 0x629a5927
jne 0x140393140
xor ecx, ecx
call fcn.140031780
mov eax, 0xc0e801ec
jmp 0x140393140
cmp eax, 0x9aee2667
jle 0x1403932e1
cmp eax, 0x9aee2668
je 0x140393328
cmp eax, 0xc0e801ec
jne 0x140393140
mov eax, 0xec07a164
jmp 0x140393140
cmp eax, 0x7704c587
je 0x14039337c
cmp eax, 0x7c127c86
jne 0x140393140
cmp dword [rsp + 0x44], 0
mov eax, 0x7704c587
cmovs eax, r12d
jmp 0x140393140
cmp eax, 0xd4b8828c
jne 0x14039341e
movzx ecx, byte [rsp + 0x41]
cmp byte [rsp + 0x42], 0
mov eax, 0x4dbf9f5c
cmovne eax, ebp
test cl, cl
cmovne eax, ebp
jmp 0x140393140
cmp eax, 0x40b9fdcf
jne 0x14039342b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov rdx, rdi
call sub.d3d9.dll_Direct3DCreate9Ex
mov dword [rsp + 0x44], eax
mov eax, 0x7c127c86
jmp 0x140393140
cmp eax, 0x942f6e9b
jne 0x140393438
mov eax, 0x40b9fdcf
jmp 0x140393140
mov eax, dword [0x140b7ea18]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4dbf9f5c
cmove eax, r14d
cmp dword [0x140b7ea1c], 0xa
cmovl eax, r14d
jmp 0x140393140
mov eax, 0x72d12ab7
jmp 0x140393140
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
lea rdx, [0x140b84e30]
mov qword [rsp + 0x38], rdx
lea rdx, [0x140b84e38]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r8d, 1
mov r9, rsi
call rax
test eax, eax
mov eax, 0x76a6b05d
mov ecx, 0x92871ffa
cmovs eax, ecx
jmp 0x140393140
movups xmmword [0x140b84e60], xmm6
movups xmmword [0x140b84e50], xmm6
movups xmmword [0x140b84e40], xmm6
mov qword [0x140b84e70], 0
mov dword [0x140b84e60], 1
mov dword [0x140b84e50], 1
mov qword [0x140b84e58], rsi
mov dword [0x140b84e4c], 0
mov dword [0x140b84e40], 0x15
mov eax, dword [0x140b84c08]
mov dword [0x140b84e38], eax
mov eax, dword [0x140b84c0c]
mov dword [0x140b84e3c], eax
mov qword [0x140b84e64], r15
mov dword [0x140b84e74], 0x80000000
mov rax, qword [0x140b84e28]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov rax, qword [rax]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x50], rax
mov eax, 0x9aee2668
jmp 0x140393140
cmp eax, 0xd15d8dc7
jne 0x140393140
jmp 0x14039345b
cmp eax, 0x41807a83
jne 0x140393140
jmp 0x14039347d
cmp eax, 0x92871ffa
jne 0x140393140
mov rcx, qword [0x140b84e28]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rcx, qword [rsp + 0x58]
call fcn.140177740
mov al, 1
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3