Function at 0x140518bc0
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xe8
movaps xmmword [rsp + 0xd0], xmm6
mov rax, qword [0x140b74de8]
xor rax, rsp
mov qword [rsp + 0xc8], rax
mov eax, 0xc3bf42b6
lea rsi, [rsp + 0xb8]
xorps xmm6, xmm6
mov ebp, 0xfa3cbd4f
mov edi, 0xe157dfb2
mov r15, qword [sym.imp.USER32.dll_DestroyWindow]
mov ebx, 0x9fa03050
mov r12d, 0xe436a7
mov r14, qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r13d, 0x9e21757
jmp 0x140518c5d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67803240
mov ecx, 0xa12ae89a
nop word cs:[rax + rax]
nop dword [rax + rax]
cmove eax, ecx
cmp dword [0x140b86e5c], 0xa
cmovl eax, ecx
cmp eax, 0x10ffbb35
jle 0x140518cd0
cmp eax, 0x5999c2a8
jg 0x140518d20
cmp eax, 0x2a283900
jle 0x140518e16
cmp eax, 0x44d4b77b
jg 0x140518f0b
cmp eax, 0x31b6ffe3
jle 0x1405190f5
cmp eax, 0x31b6ffe4
je 0x1405195d9
cmp eax, 0x439b8099
jne 0x14051995d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xeb56709b
cmove eax, edi
cmp dword [0x140b86e5c], 0xa
cmovl eax, edi
jmp 0x140518c5d
cmp eax, 0xb94ec2b0
jle 0x140518d80
cmp eax, 0xdd4914ea
jle 0x140518dd5
cmp eax, 0xeb56709a
jg 0x140518ed3
cmp eax, 0xe4236bdc
jg 0x140519125
cmp eax, 0xdd4914eb
je 0x1405195ff
cmp eax, 0xe2bc649f
jne 0x140519969
mov eax, 0x5e9f7264
jmp 0x140518c5d
cmp eax, 0x6a0ce2cb
jg 0x140518e4c
cmp eax, 0x5fdef2ad
jg 0x140518f36
cmp eax, 0x5e080a24
jg 0x140519182
cmp eax, 0x5b475e4a
je 0x140519621
cmp eax, 0x5c269046
jne 0x140519976
mov rax, qword [rsp + 0xa0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x58]
call qword [rax + 0x150]
mov eax, 0xdd4914eb
jmp 0x140518c5d
cmp eax, 0xa935ed89
jg 0x140518e89
cmp eax, 0x9fa0304f
jg 0x140518f6c
cmp eax, 0x93cafdf3
jg 0x1405191ca
cmp eax, 0x8a8effae
je 0x14051962b
cmp eax, 0x93b2285c
jne 0x140518c5d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x56ba2fea
mov ecx, 0x15e9a43f
jmp 0x140518c50
cmp eax, 0xc3bf42b5
jg 0x140518fb2
cmp eax, 0xbed091d5
jle 0x1405191f7
cmp eax, 0xbed091d6
je 0x140519642
cmp eax, 0xc04293fa
jne 0x140519986
mov qword [0x140b84e28], 0
mov eax, 0x44d4b77c
jmp 0x140518c5d
cmp eax, 0x147480b1
jg 0x140518ff1
cmp eax, 0x12459ac0
jg 0x140519217
cmp eax, 0x10ffbb36
je 0x140519666
cmp eax, 0x11794652
jne 0x140518c5d
mov eax, 0x147480b2
jmp 0x140518c5d
cmp eax, 0x7009efac
jg 0x14051903b
cmp eax, 0x6e5954c1
jg 0x140519247
cmp eax, 0x6a0ce2cc
je 0x14051968b
cmp eax, 0x6ab77fb0
jne 0x140518c5d
xor ecx, ecx
call fcn.140031780
mov eax, 0x10ffbb36
jmp 0x140518c5d
cmp eax, 0xb18697b8
jg 0x140519071
cmp eax, 0xaae61339
jg 0x140519312
cmp eax, 0xa935ed8a
je 0x140519695
cmp eax, 0xaad38995
jne 0x140518c5d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x543177d1
mov ecx, 0x2a283901
jmp 0x140518c50
cmp eax, 0x21ec534
jg 0x140519332
cmp eax, 0xfa3cbd4f
je 0x14051969f
cmp eax, 0xe436a7
jne 0x140519996
cmp byte [rsp + 0x4e], 0
mov eax, 0x6924f36e
mov ecx, 0x439b8099
cmovne eax, ecx
jmp 0x140518c5d
cmp eax, 0x55bb773a
jg 0x140519386
cmp eax, 0x44d4b77c
je 0x140519723
cmp eax, 0x543177d1
jne 0x140518c5d
mov eax, 0xaad38995
jmp 0x140518c5d
cmp eax, 0x6780323f
jg 0x1405193ab
cmp eax, 0x5fdef2ae
je 0x140519739
cmp eax, 0x67735ec8
jne 0x140518c5d
mov rcx, qword [rsp + 0x80]
call r15
mov eax, 0x7a3f4e5b
jmp 0x140518c5d
cmp eax, 0xa7523f43
jg 0x1405193fb
cmp eax, 0x9fa03050
je 0x1405197be
cmp eax, 0xa12ae89a
jne 0x140518c5d
mov byte [0x140b851a1], 1
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67803240
mov ecx, 0xa935ed8a
jmp 0x140518c50
cmp eax, 0xceaed504
jg 0x140519471
cmp eax, 0xc3bf42b6
je 0x140518c28
cmp eax, 0xcafb722f
jne 0x140518c5d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe2bc649f
mov ecx, 0x5e9f7264
jmp 0x140518c50
cmp eax, 0x179a39de
jg 0x140519531
cmp eax, 0x147480b2
je 0x1405197c8
cmp eax, 0x15e9a43f
jne 0x140518c5d
cmp qword [rsp + 0x50], 0
setne byte [rsp + 0x4b]
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x56ba2fea
mov ecx, 0x6a0ce2cc
jmp 0x140518c50
cmp eax, 0x7de5a3f2
jg 0x14051955f
cmp eax, 0x7009efad
je 0x1405197d2
cmp eax, 0x7a3f4e5b
jne 0x140518c5d
mov qword [0x140b84e80], 0
mov eax, 0x5e080a25
jmp 0x140518c5d
cmp eax, 0xb71c4ee0
jg 0x14051958a
cmp eax, 0xb18697b9
je 0x1405197e9
cmp eax, 0xb69c23fd
jne 0x140518c5d
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov edx, 0x37d0
mov r8d, 0x418
mov r9d, 8
lea rcx, str.1.88
call fcn.1400b0240
call fcn.1400316c0
test rax, rax
sete byte [rsp + 0x4f]
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe740492f
mov ecx, 0xace84602
jmp 0x140518c50
cmp eax, 0x2a283901
je 0x140519800
cmp eax, 0x2a51e061
jne 0x140518c5d
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x50]
call qword [rax + reloc.WS2_32.dll_recv]
mov eax, 0xc04293fa
jmp 0x140518c5d
cmp eax, 0xe4236bdd
je 0x14051980a
cmp eax, 0xe740492f
jne 0x140518c5d
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov edx, 0x37d0
mov r8d, 0x418
mov r9d, 8
lea rcx, str.1.88
call fcn.1400b0240
call fcn.1400316c0
mov eax, 0xb69c23fd
jmp 0x140518c5d
cmp eax, 0x5e080a25
je 0x140519814
cmp eax, 0x5e9f7264
jne 0x140518c5d
mov rax, qword [0x140b84e28]
mov qword [rsp + 0x50], rax
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe2bc649f
cmove eax, ebx
cmp dword [0x140b86e5c], 0xa
cmovl eax, ebx
jmp 0x140518c5d
cmp eax, 0x93cafdf4
je 0x14051981e
cmp eax, 0x93e657e6
jne 0x140518c5d
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xa0], rax
mov eax, 0x5c269046
jmp 0x140518c5d
cmp eax, 0xb94ec2b1
je 0x140519837
cmp eax, 0xbe5f9ec4
jne 0x140518c5d
mov eax, 0x725bf05d
jmp 0x140518c5d
cmp eax, 0x12459ac1
je 0x140519846
cmp eax, 0x12b32b02
jne 0x140518c5d
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0xa8], rax
mov eax, 0x2a51e061
jmp 0x140518c5d
cmp eax, 0x6e5954c2
je 0x140519864
cmp eax, 0x6fe29a1a
jne 0x140518c5d
call fcn.14017cd70
xor ecx, ecx
call r14
mov dword [0x140b84c08], eax
mov ecx, 1
call r14
mov dword [0x140b84c0c], eax
mov ecx, dword [0x140b84c08]
mov edx, ecx
shr edx, 0x1f
add edx, ecx
sar edx, 1
mov dword [0x140b84c00], edx
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
sar ecx, 1
mov dword [0x140b84c04], ecx
mov ecx, dword [0x140b84bc0]
call fcn.140393490
mov qword [0x140b84e80], rax
call fcn.140390790
mov qword [0x140b84e78], rax
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetMenu]
mov rcx, qword [0x140b84e80]
lea rdx, [0x140b84ebc]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rsp + 0x88], rsi
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xb8], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x90], rax
mov eax, 0x21ec535
jmp 0x140518c5d
cmp eax, 0xaae6133a
je 0x140519879
cmp eax, 0xace84602
jne 0x140518c5d
mov eax, 0x8a8effae
jmp 0x140518c5d
cmp eax, 0x21ec535
je 0x140519897
cmp eax, 0x9e21757
jne 0x140518c5d
mov rax, qword [0x140b84e28]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x98], rax
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa7523f44
mov ecx, 0xe4236bdd
jmp 0x140518c50
cmp eax, 0x55bb773b
je 0x1405198b5
cmp eax, 0x56ba2fea
jne 0x140518c5d
mov rax, qword [rsp + 0x50]
mov eax, 0x15e9a43f
jmp 0x140518c5d
cmp eax, 0x67803240
je 0x1405198c7
cmp eax, 0x6924f36e
jne 0x140518c5d
movups xmmword [0x140b84e58], xmm6
movups xmmword [0x140b84e48], xmm6
movups xmmword [0x140b84e68], xmm6
movups xmmword [0x140b84e38], xmm6
mov dword [0x140b84e60], 1
mov dword [0x140b84e50], 1
mov eax, 0xd67a34a5
jmp 0x140518c5d
cmp eax, 0xa7523f44
je 0x1405198d8
cmp eax, 0xa80ffe55
jne 0x140518c5d
mov eax, dword [0x140b84c08]
mov rcx, qword [rsp + 0x90]
mov dword [rcx], eax
mov eax, dword [0x140b84c0c]
mov dword [rsp + 0xc4], eax
mov rcx, qword [0x140b84e78]
mov rdx, rsi
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140b84e78]
xor edx, edx
mov r8b, 0xff
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x140b84e28]
call sub.d3d9.dll_Direct3DCreate9Ex
mov eax, 0x5fdef2ae
jmp 0x140518c5d
cmp eax, 0xceaed505
je 0x1405198e2
cmp eax, 0xd67a34a5
jne 0x140518c5d
mov r9, qword [0x140b84e78]
mov qword [0x140b84e58], r9
mov dword [0x140b84e4c], 0
mov dword [0x140b84e40], 0x15
mov eax, dword [0x140b84c08]
mov dword [0x140b84e38], eax
mov eax, dword [0x140b84c0c]
mov dword [0x140b84e3c], eax
movabs rax, 0x5000000001
mov qword [0x140b84e64], rax
mov dword [0x140b84e74], 0
mov rcx, qword [0x140b84e28]
mov rax, qword [rcx]
lea rdx, [0x140b84e30]
mov qword [rsp + 0x38], rdx
lea rdx, [0x140b84e38]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r8d, 1
call qword [rax + 0xa0]
test eax, eax
mov eax, 0xceaed505
mov ecx, 0x7de5a3f3
cmovs eax, ecx
jmp 0x140518c5d
cmp eax, 0x179a39df
je 0x140519900
cmp eax, 0x1fbac7a8
jne 0x140518c5d
cmp qword [rsp + 0x80], 0
setne byte [rsp + 0x4d]
mov eax, 0x179a39df
jmp 0x140518c5d
cmp eax, 0x7de5a3f3
je 0x140519917
cmp eax, 0x7f933f69
jne 0x140518c5d
mov qword [0x140b84e78], 0
mov eax, 0xb71c4ee1
jmp 0x140518c5d
cmp eax, 0xb71c4ee1
je 0x14051993f
cmp eax, 0xb7b9ee18
jne 0x140518c5d
call fcn.140391040
mov rcx, qword [0x140b84e78]
call fcn.140179740
mov rcx, qword [0x140b84e30]
call fcn.140177740
mov rcx, qword [0x140b84e78]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov eax, 0xfa3cbd4f
jmp 0x140518c5d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb7b9ee18
cmove eax, ebp
cmp dword [0x140b86e5c], 0xa
cmovl eax, ebp
jmp 0x140518c5d
mov rcx, qword [0x140b84e30]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140b84e30], 0
mov eax, 0xcafb722f
jmp 0x140518c5d
mov eax, 0x4052d9d1
jmp 0x140518c5d
cmp byte [rsp + 0x4f], 0
mov eax, 0x31b6ffe4
mov ecx, 0x12459ac1
cmovne eax, ecx
jmp 0x140518c5d
mov rax, qword [0x140b84e30]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
mov eax, 0x93e657e6
mov ecx, 0xcafb722f
cmove eax, ecx
jmp 0x140518c5d
xor ecx, ecx
call fcn.140031780
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6ab77fb0
mov ecx, 0x11794652
jmp 0x140518c50
mov eax, 0xb18697b9
jmp 0x140518c5d
mov eax, 0xbed091d6
jmp 0x140518c5d
call fcn.140391040
mov rcx, qword [0x140b84e78]
call fcn.140179740
mov rcx, qword [0x140b84e30]
call fcn.140177740
mov rcx, qword [0x140b84e78]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x140b84c0c]
mov dword [rsp + 0x68], eax
mov eax, dword [0x140b84c08]
mov dword [rsp + 0x6c], eax
mov eax, dword [0x140b84ec0]
mov dword [rsp + 0x70], eax
mov eax, dword [0x140b84ebc]
mov dword [rsp + 0x74], eax
mov rax, qword [0x140b84e78]
mov qword [rsp + 0xb0], rax
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb7b9ee18
mov ecx, 0x5b475e4a
jmp 0x140518c50
mov rax, qword [0x140b84e78]
mov qword [rsp + 0x78], rax
mov eax, 0x6e5954c2
jmp 0x140518c5d
mov eax, dword [0x140b84c08]
mov rcx, qword [rsp + 0x90]
mov dword [rcx], eax
mov eax, dword [0x140b84c0c]
mov dword [rsp + 0xc4], eax
mov rcx, qword [0x140b84e78]
mov rdx, rsi
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140b84e78]
xor edx, edx
mov r8b, 0xff
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x140b84e28]
call sub.d3d9.dll_Direct3DCreate9Ex
test eax, eax
sets byte [rsp + 0x4e]
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa80ffe55
cmove eax, r12d
cmp dword [0x140b86e5c], 0xa
cmovl eax, r12d
jmp 0x140518c5d
mov eax, 0x93b2285c
jmp 0x140518c5d
mov eax, 0x31b6ffe4
jmp 0x140518c5d
cmp byte [rsp + 0x4c], 0
mov eax, 0x93cafdf4
mov ecx, 0x55bb773b
cmovne eax, ecx
jmp 0x140518c5d
cmp byte [rsp + 0x4b], 0
mov eax, 0x44d4b77c
mov ecx, 0x12b32b02
cmovne eax, ecx
jmp 0x140518c5d
mov eax, 0x93cafdf4
jmp 0x140518c5d
mov eax, 0xaae6133a
jmp 0x140518c5d
mov eax, 0xb94ec2b1
jmp 0x140518c5d
mov rax, qword [0x140b84e80]
mov qword [rsp + 0x80], rax
mov eax, 0x1fbac7a8
jmp 0x140518c5d
call fcn.1401778d0
mov eax, 0x6fe29a1a
jmp 0x140518c5d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6ab77fb0
mov ecx, 0x10ffbb36
jmp 0x140518c50
cmp qword [rsp + 0x78], 0
setne byte [rsp + 0x4c]
mov eax, 0x7009efad
jmp 0x140518c5d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5999c2a9
mov ecx, 0xbf53be65
jmp 0x140518c50
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa80ffe55
mov ecx, 0x5fdef2ae
jmp 0x140518c50
mov rcx, qword [rsp + 0x78]
call r15
mov eax, 0x7f933f69
jmp 0x140518c5d
mov byte [0x140b851a1], 1
mov eax, 0xa12ae89a
jmp 0x140518c5d
mov eax, 0x9e21757
jmp 0x140518c5d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe740492f
mov ecx, 0xb69c23fd
jmp 0x140518c50
cmp byte [rsp + 0x4d], 0
mov eax, 0xb94ec2b1
mov ecx, 0x67735ec8
cmovne eax, ecx
jmp 0x140518c5d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa7523f44
cmove eax, r13d
cmp dword [0x140b86e5c], 0xa
cmovl eax, r13d
jmp 0x140518c5d
mov eax, dword [0x140b86e58]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x543177d1
mov ecx, 0xaad38995
jmp 0x140518c50
cmp eax, 0x4052d9d1
je 0x1405199ac
jmp 0x140518c5d
cmp eax, 0xe157dfb2
jne 0x140518c5d
jmp 0x1405199a1
cmp eax, 0x5999c2a9
jne 0x140518c5d
jmp 0x140519a2b
cmp eax, 0xbf53be65
jne 0x140518c5d
jmp 0x140519a2b
cmp eax, 0xeb56709b
jne 0x140518c5d
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [rsp + 0x68]
mov r9d, dword [rsp + 0x6c]
mov r8d, dword [rsp + 0x70]
mov edx, dword [rsp + 0x74]
mov rcx, qword [rsp + 0xb0]
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x140b84e78]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dl, byte [0x140b852d2]
lea rcx, [0x140b84b98]
call fcn.1403948f0
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0xc8]
xor rcx, rsp
call fcn.1406ad9c0
movaps xmm6, xmmword [rsp + 0xd0]
add rsp, 0xe8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x98]
call rax
mov ecx, 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3