Function at 0x140022260
Capabilities:
Create thread
Get geographical location
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x410]
sub rsp, 0x510
mov rax, qword [0x1400c5468]
xor rax, rsp
mov qword [rbp + 0x400], rax
mov rsi, rcx
mov qword [rbp + 0x90], rcx
xor r12d, r12d
lea rax, [0x140009910]
mov qword [rsp + 0x20], rax
lea r9, [0x1400088a0]
lea edx, [r12 + 0x40]
lea r8d, [r12 + 7]
lea rcx, [rbp + 0x190]
call fcn.140096908
nop
lea rdx, [rsi + 0x38]
lea rcx, [rbp + 0x190]
call fcn.140009aa0
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x190]
call fcn.140009d40
cmp qword [rax + 0x18], 0x10
jb 0x1400222f9
mov rax, qword [rax]
mov rdx, rax
lea rcx, str._CLIENT_:_varlist:__s_n
call fcn.140007a60
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140022346
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022341
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022341
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x170]
call fcn.140027020
nop
lea rdi, [rbp + 0x170]
cmp qword [rbp + 0x188], 0x10
setae r14b
cmovae rdi, qword [rbp + 0x170]
mov rax, qword [rbp + 0x180]
cmp rax, 0x1b
jb 0x140022401
lea rsi, [rdi + rax]
lea r8, [rsi - 0x1a]
sub r8, rdi
mov edx, reloc.WLDAP32.dll_Ordinal_79
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400223fa
nop dword [rax]
nop word [rax + rax]
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str.OnSuperMainStartAcceptLogon
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400223ea
inc rbx
lea r8, [rsi - 0x1a]
sub r8, rbx
mov edx, reloc.WLDAP32.dll_Ordinal_79
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400223b0
jmp 0x1400223fa
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x1400223fa
mov byte [0x1401044d8], 1
mov rsi, qword [rbp + 0x90]
lea rcx, [rbp + 0x170]
test r14b, r14b
cmovne rcx, qword [rbp + 0x170]
movsx eax, byte [rcx]
test al, al
je 0x140025177
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
inc rcx
call fcn.140007f00
cmp eax, 0x4423f960
ja 0x140024533
je 0x140024520
cmp eax, 0x16605bc1
je 0x1400234c4
cmp eax, 0x22226100
je 0x1400233e1
cmp eax, 0x29844378
je 0x140022d89
cmp eax, 0x2f726c59
jne 0x140025177
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x70]
call fcn.140027020
nop
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0x10
setae dil
mov rbx, qword [rbp + 0x70]
cmovae rcx, rbx
mov qword [rsp + 0x20], reloc.WS2_32.dll_select
lea r9, str._wAre_you_Human___
xor r8d, r8d
mov rsi, qword [rbp + 0x80]
mov rdx, rsi
call fcn.14002b900
xorps xmm0, xmm0
cmp rax, 0xffffffffffffffff
je 0x1400225bc
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r12
lea r14, [rbp + 0x70]
test dil, dil
cmovne r14, rbx
movabs rdi, 0x7fffffffffffffff
cmp rsi, rdi
ja 0x140025231
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
cmp rsi, 0x10
jae 0x14002251a
mov qword [rbp - 0x20], rsi
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x30], xmm0
lea rcx, [rbp - 0x30]
call fcn.140037790
mov bl, 1
jmp 0x140022d41
mov rax, rsi
or rax, 0xf
cmp rax, rdi
ja 0x140022535
mov rdi, rax
mov ecx, reloc.WS2_32.dll_shutdown
cmp rax, rcx
cmovb rdi, rcx
mov rcx, rdi
add rcx, 1
mov rbx, 0xffffffffffffffff
cmovb rcx, rbx
cmp rcx, 0x1000
jb 0x140022582
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140025237
mov rcx, rax
call fcn.140096578
mov rcx, rax
test rax, rax
je 0x14002257b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140022591
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14002258e
call fcn.140096578
jmp 0x140022591
mov rax, r12
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rdi
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp - 0x30]
call fcn.140037790
mov bl, 1
jmp 0x140022d41
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
lea r8d, [rax + 1]
lea rdx, [0x1400ab348]
lea rcx, [rbp - 0x50]
call fcn.14002be10
nop
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x30]
call fcn.14001c370
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140022637
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022632
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022632
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
mov rdx, qword [rbp + 0x30]
add rdx, 0x20
lea rcx, [rbp + 0xb0]
call fcn.140027020
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
xor r8d, r8d
lea rdx, [0x1400ab2ee]
lea rcx, [rbp - 0x50]
call fcn.14002be10
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r12
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.0098_captcha_generated_
lea rcx, [rbp - 0x30]
call fcn.14002be10
nop
lea rsi, [rbp - 0x30]
mov rax, qword [rbp - 0x18]
cmp rax, 0x10
setae byte [rsp + 0x40]
mov r13, qword [rbp - 0x30]
cmovae rsi, r13
lea r14, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0x10
cmovae r14, qword [rbp + 0xb0]
mov rdi, qword [rbp - 0x20]
mov rcx, qword [rbp + 0xc0]
cmp rdi, rcx
ja 0x140022777
test rdi, rdi
jne 0x1400226e3
mov rbx, r12
jmp 0x14002274a
mov r15, r14
sub r15, rdi
add r15, rcx
movsx r12d, byte [rsi]
lea r8, [r15 + 1]
sub r8, r14
mov edx, r12d
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140022773
nop word [rax + rax]
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140022741
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
mov edx, r12d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140022710
jmp 0x140022773
sub rbx, r14
cmp rbx, 0xffffffffffffffff
je 0x140022773
lea r9, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae r9, qword [rbp - 0x50]
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x20], rax
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp + 0xb0]
call fcn.14004c7d0
mov rax, qword [rbp - 0x18]
cmp byte [rsp + 0x40], 0
je 0x1400227b3
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x1400227aa
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400227aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.140096450
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x1400227ee
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400227e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022a1c
call fcn.140096450
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor ebx, ebx
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
xor r8d, r8d
lea rdx, [0x1400ab2ee]
lea rcx, [rbp - 0x50]
call fcn.14002be10
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
lea r8d, [rbx + 0x1c]
lea rdx, str.PuzzleWithMissingPiece.rttex
lea rcx, [rbp - 0x30]
call fcn.14002be10
nop
lea r14, [rbp - 0x30]
mov rax, qword [rbp - 0x18]
cmp rax, 0x10
setae byte [rsp + 0x40]
mov r12, qword [rbp - 0x30]
cmovae r14, r12
lea r15, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0x10
cmovae r15, qword [rbp + 0xb0]
mov rdi, qword [rbp - 0x20]
mov rsi, qword [rbp + 0xc0]
cmp rdi, rsi
ja 0x140022922
test rdi, rdi
je 0x1400228ee
mov r13, r15
sub r13, rdi
movsx edx, byte [r14]
lea r8, [rsi + 1]
add r8, r13
sub r8, r15
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14002291e
nop dword [rax]
nop dword [rax + rax]
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400228e5
inc rbx
lea r8, [rsi + 1]
add r8, r13
sub r8, rbx
movsx edx, byte [r14]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400228b0
jmp 0x14002291e
sub rbx, r15
cmp rbx, 0xffffffffffffffff
je 0x14002291e
lea r9, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae r9, qword [rbp - 0x50]
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x20], rax
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp + 0xb0]
call fcn.14004c7d0
mov rsi, qword [rbp + 0xc0]
mov rax, qword [rbp - 0x18]
cmp byte [rsp + 0x40], 0
je 0x140022965
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140022956
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022956
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140096450
mov rsi, qword [rbp + 0xc0]
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x1400229a7
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002299b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022a1c
call fcn.140096450
mov rsi, qword [rbp + 0xc0]
lea r8, [rsi - 1]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor r12d, r12d
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
cmp rsi, r8
cmovb r8, rsi
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0x10
cmovae rdx, qword [rbp + 0xb0]
lea rcx, [rbp - 0x50]
call fcn.14002be10
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x140022a28
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022a23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022a23
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
movups xmm0, xmmword [rbp - 0x50]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rbp - 0x40]
movups xmmword [rbp + 0xc0], xmm1
movabs rdi, 0x7fffffffffffffff
movq rcx, xmm1
sub rdi, rcx
cmp rdi, 0x35
jb 0x14002523d
lea rax, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0x10
cmovae rax, qword [rbp + 0xb0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], gethostname
lea r9, str.http:__api.surferstealer.com_captcha_index_CaptchaID
lea rcx, [rbp + 0x50]
call fcn.14002cff0
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x350]
call fcn.14000b870
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140022ae4
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022adf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140022adf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r12
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
xor r8d, r8d
lea rdx, [0x1400ab2ee]
lea rcx, [rbp - 0x50]
call fcn.14002be10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], r12
mov r8d, 3
lea rdx, [0x1400ab848]
lea rcx, [rbp + 0x50]
call fcn.14002be10
nop
mov rbx, 0xffffffffffffffff
lea rcx, [rbp - 0x50]
mov rsi, qword [rbp - 0x40]
cmp qword [rbp - 0x38], 0x10
jb 0x140022b5b
mov r14, qword [rbp - 0x50]
add rsi, r14
jmp 0x140022b62
add rsi, rcx
lea r14, [rbp - 0x50]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r12
sub rsi, r14
je 0x140022b99
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.14002c9e0
mov rdi, qword [rbp - 0x30]
mov r8, rsi
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rsi]
mov qword [rbp - 0x28], rax
mov qword [rsp + 0x28], rbx
lea rax, [rbp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x30]
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x350]
call fcn.14000bed0
nop
lea rcx, [rbp - 0x30]
call fcn.140025bc0
nop
lea rcx, [rbp + 0x50]
call fcn.140026de0
nop
lea rcx, [rbp - 0x50]
call fcn.140026de0
nop
lea rcx, [rbp + 0x90]
call fcn.140027880
mov r8, qword [rbp + 0x118]
mov rdx, qword [rbp + 0x110]
lea rcx, [rbp + 0x10]
call fcn.140028790
nop
lea rdx, str.AnswerFailed
lea rcx, [rbp + 0x10]
call fcn.1400269d0
cmp rax, 0xffffffffffffffff
jne 0x140022d04
lea rdx, str.Answer
lea rcx, [rbp + 0x10]
call fcn.1400269d0
cmp rax, 0xffffffffffffffff
je 0x140022d04
lea rdx, [0x1400ab2ee]
lea rcx, [rbp - 0x50]
call fcn.140026fe0
nop
lea rdx, str.Answer
lea rcx, [rbp + 0x50]
call fcn.140026fe0
nop
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.14004c740
nop
lea rcx, [rbp + 0x50]
call fcn.140026de0
nop
lea rcx, [rbp - 0x50]
call fcn.140026de0
lea r8, [rbp + 0x10]
lea rdx, str.Solved_Captcha_As
lea rcx, [rbp + 0x50]
call fcn.1400282a0
mov rcx, rax
call fcn.1400376a0
lea r8, [rbp + 0x10]
lea rdx, str.actiondialog_return_ndialog_namepuzzle_captcha_submit_ncaptcha_answer
lea rcx, [rbp - 0x30]
call fcn.1400282a0
nop
lea r8, str.CaptchaID
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.1400284b0
nop
mov r8, qword [rbp + 0x30]
sub r8, 0xffffffffffffff80
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140028520
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004bfc0
nop
lea rcx, [rbp - 0x50]
call fcn.140026de0
nop
lea rcx, [rbp - 0x30]
call fcn.140026de0
mov bl, 1
jmp 0x140022d06
xor bl, bl
lea rcx, [rbp + 0x10]
call fcn.140026de0
nop
lea rcx, [rbp + 0xd0]
call fcn.14000dc10
nop
lea rcx, [rbp + 0x350]
call fcn.140025390
nop
lea rcx, [rbp + 0xb0]
call fcn.140026de0
nop
lea rcx, [rbp + 0x30]
call fcn.140027880
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x140025179
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023395
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023395
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x150]
call fcn.140027020
nop
mov rdi, qword [rbp + 0x168]
mov r14, qword [rbp + 0x160]
mov rsi, qword [rbp + 0x150]
cmp byte [0x1401044c7], 1
jne 0x140022e3d
lea r15, [rbp + 0x150]
cmp rdi, 0x10
cmovae r15, rsi
cmp r14, 0x11
jb 0x140022e3d
lea r12, [r15 + r14]
lea r8, [r12 - 0x10]
sub r8, r15
mov edx, 0x60
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140022e3d
nop word [rax + rax]
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str._2The_door_opens_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140022f99
inc rbx
lea r8, [r12 - 0x10]
sub r8, rbx
mov edx, 0x60
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140022e00
lea rcx, [rbp + 0x150]
cmp rdi, 0x10
setae r13b
cmovae rcx, rsi
mov qword [rsp + 0x20], reloc.WS2_32.dll_recvfrom
lea r9, str.the_wheel_and_got
xor r8d, r8d
mov rdx, r14
call fcn.14002b900
cmp rax, 0xffffffffffffffff
je 0x14002339f
lea r15, [rbp + 0x150]
test r13b, r13b
cmovne r15, rsi
mov rbx, 0xffffffffffffffff
cmp r14, 0x17
jb 0x140022eed
lea r12, [r15 + r14]
lea r8, [r12 - 0x16]
sub r8, r15
lea edx, [rbx + 0x74]
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x140022eed
nop
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.spun_the_wheel_and_got
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140022fad
inc rdi
lea r8, [r12 - 0x16]
sub r8, rdi
mov edx, reloc.WS2_32.dll_WSAStartup
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140022eb0
mov rdi, rbx
add rdi, 0x19
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
xor r15d, r15d
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x148], r15
cmp r14, rdi
jb 0x140025243
mov rax, r14
sub rax, rdi
cmp rax, r14
cmovb r14, rax
lea rdx, [rbp + 0x150]
test r13b, r13b
cmovne rdx, rsi
add rdx, rdi
mov r8, r14
lea rcx, [rbp + 0x130]
call fcn.14002be10
nop
mov esi, r15d
lea rdi, [rbp + 0x130]
cmp qword [rbp + 0x148], 0x10
setae r13b
mov r12, qword [rbp + 0x130]
cmovae rdi, r12
mov r15, qword [rbp + 0x140]
cmp r15, 1
jb 0x140022fdd
lea r14, [rdi + r15]
mov r8, r14
sub r8, rdi
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140022fdd
cmp byte [rax], 0x20
jne 0x140022fb5
xor ecx, ecx
jmp 0x140022fba
sub rbx, r15
cmp rbx, 0xffffffffffffffff
je 0x140022e3d
mov bl, 1
jmp 0x14002335c
sub rdi, r15
jmp 0x140022ef0
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x140023062
inc rax
mov r8, r14
sub r8, rax
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140022f90
mov rax, rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xor ecx, ecx
mov qword [rbp + 0x40], rcx
mov qword [rbp + 0x48], rcx
cmp r15, rax
cmovb rax, r15
lea rdx, [rbp + 0x130]
test r13b, r13b
cmovne rdx, r12
mov r8, rax
lea rcx, [rbp + 0x30]
call fcn.14002be10
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
cmovae rcx, qword [rbp + 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rdi, eax
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x14002306f
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002306a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002306a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rax, rdi
jmp 0x140022fe0
call fcn.140096450
xor r12d, r12d
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], sil
movzx edx, byte [0x1401044c5]
test dl, dl
je 0x1400230ac
cmp edi, 0x24
ja case.0x1400230cb.0
lea rcx, [0x140000000]
mov eax, dword [rcx + rdi*4 + 0x25268]
add rax, rcx
jmp rax
mov esi, 8
jmp case.0x1400230cb.0
cmp byte [0x1401044cd], sil
je case.0x1400230cb.0
cmp edi, 0x24
ja case.0x1400230cb.0
lea rcx, [0x140000000]
mov eax, dword [rcx + rdi*4 + 0x252fc]
add rax, rcx
jmp rax
mov esi, 7
jmp case.0x1400230cb.0
mov esi, 9
jmp case.0x1400230cb.0
mov esi, 1
jmp case.0x1400230cb.0
mov esi, 2
jmp case.0x1400230cb.0
mov esi, 3
jmp case.0x1400230cb.0
mov esi, 4
jmp case.0x1400230cb.0
mov esi, 5
jmp case.0x1400230cb.0
mov esi, 6
mov rax, qword [rbp + 0x90]
cmp dword [rax + 0x14], 0x708
jne 0x140023298
cmp byte [0x1401044c4], r12b
je 0x140023158
lea r8, [rbp + 0x150]
lea rdx, str._0__REAL_w__w
lea rcx, [rbp + 0x50]
call fcn.1400282a0
nop
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.1400088c0
nop
lea rcx, [rbp + 0x50]
call fcn.140026de0
movzx edx, byte [0x1401044c5]
test dl, dl
je 0x1400231e1
mov edx, esi
lea rcx, [rbp - 0x30]
call fcn.140007e30
mov rdi, rax
lea r8, [rbp + 0x150]
lea rdx, str._0__REAL_w__w
lea rcx, [rbp - 0x50]
call fcn.1400282a0
nop
lea r8, str.__REME:__w
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.1400284b0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.140028590
nop
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.1400088c0
nop
lea rcx, [rbp + 0x10]
call fcn.140026de0
nop
lea rcx, [rbp + 0x70]
call fcn.140026de0
nop
lea rcx, [rbp - 0x50]
call fcn.140026de0
nop
lea rcx, [rbp - 0x30]
call fcn.140026de0
cmp byte [0x1401044cd], 0
je 0x140023279
mov edx, esi
lea rcx, [rsp + 0x48]
call fcn.140007e30
mov rdi, rax
lea r8, [rbp + 0x150]
lea rdx, str._0__REAL_w__w
lea rcx, [rsp + 0x68]
call fcn.1400282a0
nop
lea r8, str.__QQ:__w
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400284b0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140028590
nop
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.1400088c0
nop
lea rcx, [rbp + 0x90]
call fcn.140026de0
nop
lea rcx, [rbp - 0x70]
call fcn.140026de0
nop
lea rcx, [rsp + 0x68]
call fcn.140026de0
nop
lea rcx, [rsp + 0x48]
call fcn.140026de0
mov dword [rsp + 0x20], r12d
mov r9d, ebx
lea r8, [rbp + 0x190]
mov rcx, qword [0x140104580]
call fcn.14004be00
mov bl, 1
jmp 0x1400232f1
cmp byte [0x1401044c4], r12b
je 0x1400232d4
lea r8, str.__0__FAKE_0__w
lea rdx, [rbp + 0x230]
lea rcx, [rsp + 0x48]
call fcn.140028440
nop
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.1400088c0
nop
lea rcx, [rsp + 0x48]
call fcn.140026de0
mov dword [rsp + 0x20], r12d
mov r9d, ebx
lea r8, [rbp + 0x190]
mov rcx, qword [0x140104580]
call fcn.14004be00
xor bl, bl
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x140023335
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023330
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023330
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
mov qword [rbp + 0x140], r12
mov qword [rbp + 0x148], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x130], 0
mov rdi, qword [rbp + 0x168]
mov rsi, qword [rbp + 0x150]
cmp rdi, 0x10
jb 0x140025179
lea rdx, [rdi + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140023392
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023392
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140096450
jmp 0x140025179
test r13b, r13b
je 0x140025177
lea rdx, [rdi + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400233d4
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400233d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140096450
jmp 0x140025177
movabs rdi, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x200]
sub rdi, rcx
cmp rdi, 0xd
jb 0x140025249
lea rax, [rbp + 0x1f0]
cmp qword [rbp + 0x208], 0x10
cmovae rax, qword [rbp + 0x1f0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.__Fideus___
lea rcx, [rbp + 0x10]
call fcn.14002cff0
nop
mov dword [rbp + 0x1d0], 2
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae rdx, qword [rbp + 0x10]
mov r8, qword [rbp + 0x20]
lea rcx, [rbp + 0x1f0]
call fcn.140026b80
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x14002349e
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023499
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002514e
call fcn.140096450
mov dword [rsp + 0x20], r12d
mov r9, 0xffffffffffffffff
lea r8, [rbp + 0x190]
mov rcx, qword [0x140104580]
call fcn.14004be00
mov bl, 1
jmp 0x140025179
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp - 0x10]
call fcn.140027020
nop
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
setae r13b
mov byte [rsp + 0x40], r13b
mov r14, qword [rbp - 0x10]
cmovae rcx, r14
mov qword [rsp + 0x20], reloc.WS2_32.dll_sendto
lea r9, str.set_default_color_o
xor r8d, r8d
mov r15, qword [rbp]
mov rdx, r15
call fcn.14002b900
cmp rax, 0xffffffffffffffff
je 0x14002358c
lea rdi, [rbp - 0x10]
test r13b, r13b
cmovne rdi, r14
cmp r15, 0x22
jb 0x14002358c
lea rsi, [rdi + r15]
lea r8, [rsi - 0x21]
sub r8, rdi
mov edx, 0x65
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14002358c
nop word [rax + rax]
mov r8d, Ordinal_35
lea rdx, str.end_dialogcaptcha_submitSubmit
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400235fb
inc rbx
lea r8, [rsi - 0x21]
sub r8, rbx
mov edx, 0x65
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140023550
lea rsi, str.Drop
cmp byte [0x1401044d5], 1
jne 0x140023644
lea rbx, [rbp - 0x10]
test r13b, r13b
cmovne rbx, r14
cmp r15, 4
jb 0x140023644
lea rdi, [rbx + r15]
lea r8, [rdi - 3]
sub r8, rbx
mov edx, 0x44
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140023644
nop dword [rax]
nop word [rax + rax]
mov rdx, r12
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [rsi + rdx - 1]
jne 0x14002361f
cmp rdx, 4
jne 0x1400235e3
mov ecx, r12d
jmp 0x140023624
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x14002358c
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x48]
call fcn.140027020
mov rcx, rax
call fcn.140037790
jmp 0x1400244ca
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14002369b
inc rax
lea r8, [rdi - 3]
sub r8, rax
mov edx, 0x44
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x1400235e0
cmp byte [0x1401044d4], 0
je 0x1400236d9
lea rbx, [rbp - 0x10]
test r13b, r13b
cmovne rbx, r14
cmp r15, 4
jb 0x1400236d9
lea rdi, [rbx + r15]
lea r8, [rdi - 3]
sub r8, rbx
mov edx, 0x44
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400236d9
nop
mov rdx, r12
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [rsi + rdx - 1]
jne 0x1400236b0
cmp rdx, 4
jne 0x140023683
mov ecx, r12d
jmp 0x1400236b5
sub rax, rbx
cmp rax, 0xffffffffffffffff
je 0x140023644
mov byte [0x1401044d5], 0
jmp 0x1400244ce
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14002373b
inc rax
lea r8, [rdi - 3]
sub r8, rax
mov edx, 0x44
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140023680
cmp byte [0x1401044c8], 0
je 0x140023780
lea rbx, [rbp - 0x10]
test r13b, r13b
cmovne rbx, r14
cmp r15, 4
jb 0x140023780
lea rdi, [rbx + r15]
lea r8, [rdi - 3]
sub r8, rbx
mov edx, 0x44
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140023780
nop dword [rax + rax]
mov rdx, r12
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [rsi + rdx - 1]
jne 0x14002375b
cmp rdx, 4
jne 0x140023723
mov ecx, r12d
jmp 0x140023760
sub rax, rbx
cmp rax, 0xffffffffffffffff
je 0x1400236d9
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1401044d4], 0
jmp 0x1400244ca
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x1400237db
inc rax
lea r8, [rdi - 3]
sub r8, rax
mov edx, 0x44
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140023720
cmp byte [0x1401044ce], 0
je 0x140023824
lea rbx, [rbp - 0x10]
test r13b, r13b
cmovne rbx, r14
cmp r15, 4
jb 0x140023824
lea rdi, [rbx + r15]
lea r8, [rdi - 3]
sub r8, rbx
mov edx, 0x44
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140023824
nop
mov rdx, r12
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [rsi + rdx - 1]
jne 0x1400237fb
cmp rdx, 4
jne 0x1400237c3
mov ecx, r12d
jmp 0x140023800
sub rax, rbx
cmp rax, 0xffffffffffffffff
je 0x140023780
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1401044c8], 0
jmp 0x1400244ca
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x1400238aa
inc rax
lea r8, [rdi - 3]
sub r8, rax
mov edx, 0x44
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x1400237c0
cmp byte [0x1401044d0], 0
je 0x1400238f1
lea rdi, [rbp - 0x10]
test r13b, r13b
cmovne rdi, r14
cmp r15, 0x37
jb 0x1400238f1
lea rsi, [rdi + r15]
lea r8, [rsi - 0x36]
sub r8, rdi
mov edx, 0x61
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400238f1
nop word [rax + rax]
mov r8d, gethostname
lea rdx, str.add_buttonreport_player_wReport_Player__noflags00
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400238ce
inc rbx
lea r8, [rsi - 0x36]
sub r8, rbx
mov edx, 0x61
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140023870
jmp 0x1400238f1
sub rax, rbx
cmp rax, 0xffffffffffffffff
je 0x140023824
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x1401044ce], 0
jmp 0x1400244ca
sub rbx, rdi
cmp rbx, 0xffffffffffffffff
je 0x1400238f1
lea rdx, str.embed_datanetID
lea rcx, [rbp - 0x10]
call fcn.1400269d0
cmp rax, 0xffffffffffffffff
jne 0x1400244ce
mov rbx, 0xffffffffffffffff
cmp byte [0x1401044d6], 0
je 0x140023d7b
lea rsi, [rbp - 0x10]
test r13b, r13b
cmovne rsi, r14
cmp r15, 0x12
jb 0x14002397d
lea r12, [rsi + r15]
lea r8, [r12 - 0x11]
sub r8, rsi
lea edx, [rbx + 0x66]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x14002397d
nop word [rax + rax]
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.embed_dataitemID
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140023c65
inc rdi
lea r8, [r12 - 0x11]
sub r8, rdi
mov edx, 0x65
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140023940
mov rdi, rbx
mov rsi, r15
sub rsi, rdi
dec rsi
lea r12, [rbp - 0x10]
test r13b, r13b
cmovne r12, r14
cmp r15, 0x12
jb 0x140023a02
lea r13, [r12 + r15]
lea r8, [r13 - 0x11]
sub r8, r12
mov edx, 0x65
mov rcx, r12
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x1400239fc
nop word [rax + rax]
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.embed_dataitemID
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140023c6d
inc rdi
lea r8, [r13 - 0x11]
sub r8, rdi
mov edx, 0x65
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x1400239c0
movzx r13d, byte [rsp + 0x40]
mov rdi, rbx
add rdi, 0x12
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rax
cmp r15, rdi
jb 0x14002524f
sub r15, rdi
cmp r15, rsi
cmovb rsi, r15
lea rdx, [rbp - 0x10]
test r13b, r13b
cmovne rdx, r14
add rdx, rdi
mov r8, rsi
lea rcx, [rbp - 0x50]
call fcn.14002be10
nop
lea r14, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
setae r12b
mov byte [rsp + 0x40], r12b
mov r13, qword [rbp - 0x10]
cmovae r14, r13
mov rsi, qword [rbp]
cmp rsi, 7
jb 0x140023acc
lea r15, [r14 + rsi]
lea r8, [r15 - 6]
sub r8, r14
mov edx, 0x63
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x140023acc
nop dword [rax]
mov r8d, 7
lea rdx, str.count
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140023c7b
inc rdi
lea r8, [r15 - 6]
sub r8, rdi
mov edx, 0x63
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140023a90
mov rdi, rbx
mov r14, rsi
sub r14, rdi
dec r14
lea r15, [rbp - 0x10]
test r12b, r12b
cmovne r15, r13
cmp rsi, 7
jb 0x140023b53
lea r12, [r15 + rsi]
lea r8, [r12 - 6]
sub r8, r15
mov edx, 0x63
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x140023b4d
nop word [rax + rax]
mov r8d, 7
lea rdx, str.count
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140023c83
inc rdi
lea r8, [r12 - 6]
sub r8, rdi
mov edx, 0x63
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140023b10
movzx r12d, byte [rsp + 0x40]
mov rdi, rbx
add rdi, 7
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xor eax, eax
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rax
cmp rsi, rdi
jb 0x140025255
sub rsi, rdi
cmp rsi, r14
cmovb r14, rsi
lea rdx, [rbp - 0x10]
test r12b, r12b
cmovne rdx, r13
add rdx, rdi
mov r8, r14
lea rcx, [rbp + 0x70]
call fcn.14002be10
nop
lea rsi, [rbp - 0x10]
mov r14, qword [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rsi, r14
mov r15, qword [rbp]
cmp r15, 0x12
jb 0x140023c1d
lea r12, [rsi + r15]
lea r8, [r12 - 0x11]
sub r8, rsi
mov edx, 0x65
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x140023c1d
nop dword [rax + rax]
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.embed_dataitemID
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140023c91
inc rdi
lea r8, [r12 - 0x11]
sub r8, rdi
mov edx, 0x65
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140023be0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x140023d35
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023d28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023d28
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
sub rdi, rsi
jmp 0x140023980
sub rdi, r12
movzx r13d, byte [rsp + 0x40]
jmp 0x140023a05
sub rdi, r14
jmp 0x140023acf
sub rdi, r15
movzx r12d, byte [rsp + 0x40]
jmp 0x140023b56
sub rdi, rsi
cmp rdi, 0xffffffffffffffff
je 0x140023c1d
lea rdx, str.Drop
lea rcx, [rbp - 0x10]
call fcn.1400269d0
cmp rax, 0xffffffffffffffff
je 0x140023c1d
lea r8, [rbp - 0x50]
lea rdx, str.actiondialog_return_ndialog_namedrop_item_nitemID
lea rcx, [rbp - 0x70]
call fcn.1400282a0
nop
lea r8, str._ncount
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1400284b0
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140028520
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004bfc0
nop
lea rcx, [rsp + 0x68]
call fcn.140026de0
nop
lea rcx, [rbp - 0x70]
call fcn.140026de0
nop
lea rcx, [rbp + 0x70]
call fcn.140026de0
nop
lea rcx, [rbp - 0x50]
jmp 0x1400244c5
call fcn.140096450
mov r15, qword [rbp]
mov r14, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140023d7b
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140023d6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140023d6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
mov r15, qword [rbp]
mov r14, qword [rbp - 0x10]
cmp byte [0x1401044d3], 0
je 0x14002438c
lea rdi, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
setae r13b
mov byte [rsp + 0x40], r13b
cmovae rdi, r14
cmp r15, 0x12
jb 0x140023e0d
lea r12, [rdi + r15]
lea r8, [r12 - 0x11]
sub r8, rdi
mov edx, 0x65
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rsi, rax
test rax, rax
je 0x140023e0d
nop word [rax + rax]
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.embed_dataitemID
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140024191
inc rsi
lea r8, [r12 - 0x11]
sub r8, rsi
mov edx, 0x65
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rsi, rax
test rax, rax
jne 0x140023dd0
mov rsi, rbx
lea r12, [rbp - 0x10]
test r13b, r13b
cmovne r12, r14
cmp r15, 0x12
jb 0x140023e92
lea r13, [r12 + r15]
lea r8, [r13 - 0x11]
sub r8, r12
mov edx, 0x65
mov rcx, r12
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x140023e8c
nop dword [rax]
nop word [rax + rax]
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.embed_dataitemID
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140024199
inc rdi
lea r8, [r13 - 0x11]
sub r8, rdi
mov edx, 0x65
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140023e50
movzx r13d, byte [rsp + 0x40]
mov rdi, rbx
mov r8, r15
sub r8, rsi
dec r8
add rdi, 0x12
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xor eax, eax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rax
cmp r15, rdi
jb 0x14002525b
sub r15, rdi
cmp r15, r8
cmovb r8, r15
lea rdx, [rbp - 0x10]
test r13b, r13b
cmovne rdx, r14
add rdx, rdi
lea rcx, [rbp - 0x30]
call fcn.14002be10
nop
lea rsi, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
setae cl
mov byte [rsp + 0x40], cl
mov r13, qword [rbp - 0x10]
cmovae rsi, r13
mov r15, qword [rbp]
cmp r15, 9
jb 0x140023f61
lea r14, [rsi + r15]
lea r8, [r14 - 8]
sub r8, rsi
mov edx, 0x79
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x140023f5c
mov r8d, 9
lea rdx, str.you_have
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400241a7
inc rdi
lea r8, [r14 - 8]
sub r8, rdi
mov edx, 0x79
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140023f20
movzx ecx, byte [rsp + 0x40]
mov rdi, rbx
mov r12, r15
sub r12, rdi
dec r12
lea rsi, [rbp - 0x10]
test cl, cl
cmovne rsi, r13
cmp r15, 9
jb 0x140023fe1
lea r14, [rsi + r15]
lea r8, [r14 - 8]
sub r8, rsi
mov edx, 0x79
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
je 0x140023fdc
nop dword [rax]
mov r8d, 9
lea rdx, str.you_have
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400241b4
inc rdi
lea r8, [r14 - 8]
sub r8, rdi
mov edx, 0x79
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rdi, rax
test rax, rax
jne 0x140023fa0
movzx ecx, byte [rsp + 0x40]
mov rdi, rbx
add rdi, 9
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xor r14d, r14d
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], r14
cmp r15, rdi
jb 0x140025261
sub r15, rdi
cmp r15, r12
cmovb r12, r15
lea rdx, [rbp - 0x10]
test cl, cl
cmovne rdx, r13
add rdx, rdi
mov r8, r12
lea rcx, [rbp + 0x30]
call fcn.14002be10
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], r14
mov r8d, 1
lea rdx, [0x1400ad444]
lea rcx, [rbp + 0x70]
call fcn.14002be10
nop
lea r9, [rbp + 0x70]
mov r13, qword [rbp + 0x88]
cmp r13, 0x10
setae r12b
mov r15, qword [rbp + 0x70]
cmovae r9, r15
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
setae sil
cmovae rcx, qword [rbp + 0x30]
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rbx, qword [rbp + 0x40]
mov rdx, rbx
call fcn.14002b900
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
cmp rbx, rax
cmovb rax, rbx
lea rdx, [rbp + 0x30]
test sil, sil
cmovne rdx, qword [rbp + 0x30]
mov r8, rax
lea rcx, [rbp - 0x50]
call fcn.14002be10
nop
lea rsi, [rbp - 0x10]
mov r14, qword [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rsi, r14
mov rax, qword [rbp]
cmp rax, 0x12
jb 0x14002414c
lea rdi, [rsi + rax]
lea r8, [rdi - 0x11]
sub r8, rsi
mov edx, 0x65
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14002414c
nop word [rax + rax]
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.embed_dataitemID
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400241c1
inc rbx
lea r8, [rdi - 0x11]
sub r8, rbx
mov edx, 0x65
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140024110
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140024275
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002426c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002426c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
sub rsi, rdi
jmp 0x140023e10
sub rdi, r12
movzx r13d, byte [rsp + 0x40]
jmp 0x140023e95
sub rdi, rsi
movzx ecx, byte [rsp + 0x40]
jmp 0x140023f64
sub rdi, rsi
movzx ecx, byte [rsp + 0x40]
jmp 0x140023fe4
sub rbx, rsi
cmp rbx, 0xffffffffffffffff
je 0x14002414c
lea rdx, str.Trash
lea rcx, [rbp - 0x10]
call fcn.1400269d0
cmp rax, 0xffffffffffffffff
je 0x14002414c
lea r8, [rbp - 0x30]
lea rdx, str.actiondialog_return_ndialog_nametrash_item_nitemID
lea rcx, [rbp - 0x70]
call fcn.1400282a0
nop
lea r8, str._ncount
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.1400284b0
nop
lea r8, [rbp - 0x50]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140028520
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004bfc0
nop
lea rcx, [rsp + 0x68]
call fcn.140026de0
nop
lea rcx, [rbp - 0x70]
call fcn.140026de0
nop
lea rcx, [rbp - 0x50]
call fcn.140026de0
nop
lea rcx, [rbp + 0x70]
call fcn.140026de0
nop
lea rcx, [rbp + 0x30]
call fcn.140026de0
nop
lea rcx, [rbp - 0x30]
jmp 0x1400244c5
call fcn.140096450
mov r14, qword [rbp - 0x10]
test r12b, r12b
je 0x1400242b2
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400242a6
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400242a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140096450
mov r14, qword [rbp - 0x10]
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x1400242f4
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400242eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400242eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
mov r14, qword [rbp - 0x10]
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14002434a
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024341
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024341
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
mov r14, qword [rbp - 0x10]
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x140025177
lea rdx, [rax + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140024513
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024513
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp byte [0x1401044d7], 0
je 0x14002434a
lea rdx, [0x1400ad488]
lea rcx, [rbp - 0x10]
call fcn.1400269d0
cmp rax, 0xffffffffffffffff
je 0x14002434a
mov r8, rbx
lea rdx, str._4Stop_ignoring
lea rcx, [rbp - 0x10]
call fcn.140026910
movsxd r9, eax
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x10]
call fcn.1400268b0
nop
mov r8, rbx
lea rdx, str.add_button
lea rcx, [rbp + 0x10]
call fcn.140026910
lea r8, [rax + 0xb]
mov r9, rbx
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.1400268b0
nop
lea rcx, [rbp + 0x50]
call fcn.140026af0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
lea rcx, [rsp + 0x48]
test eax, eax
jne 0x140024434
mov byte [0x1401044d7], al
lea rdx, str.name_resolving_seems_to_have_failed.
call fcn.140026fe0
mov rcx, rax
call fcn.1400376a0
jmp 0x1400244b7
lea r8, [rbp + 0x50]
lea rdx, str.Target_UID:
call fcn.1400282a0
mov rcx, rax
call fcn.1400376a0
lea r8, [rbp + 0x50]
lea rdx, str.actiondialog_return_ndialog_namefriends_nbuttonClicked
lea rcx, [rsp + 0x48]
call fcn.1400282a0
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004bfc0
lea r8, [rbp + 0x50]
lea rdx, str.actiondialog_return_ndialog_namefriends_remove_nfriendID
lea rcx, [rsp + 0x68]
call fcn.1400282a0
nop
lea r8, str._nbuttonClickedremove
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.1400284b0
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004bfc0
nop
lea rcx, [rsp + 0x68]
call fcn.140026de0
nop
lea rcx, [rbp + 0x50]
call fcn.140026de0
nop
lea rcx, [rbp + 0x10]
call fcn.140026de0
mov r14, qword [rbp - 0x10]
mov rax, qword [rbp + 8]
cmp rax, 0x10
jb 0x14002450c
lea rdx, [rax + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140024504
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024504
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140096450
mov bl, 1
jmp 0x140025179
mov rcx, r14
call fcn.140096450
jmp 0x140025177
lea rdx, [rbp + 0x190]
call fcn.14004b7b0
mov bl, 1
jmp 0x140025179
cmp eax, 0x62d7eb18
je 0x140024fd2
cmp eax, 0x82942058
je 0x140024b3a
cmp eax, 0xa30921bf
je 0x140024609
cmp eax, 0xc9b9d989
jne 0x140025177
mov ecx, gethostbyname
call fcn.140096578
mov rbx, rax
mov qword [rbp + 0x90], rax
lea rdx, [rbp + 0x1f0]
mov rcx, rax
call fcn.140027020
mov ecx, dword [rsi + 4]
mov dword [rbx + 0x20], ecx
lea rax, [0x14001c760]
mov qword [rbx + 0x28], rax
mov qword [rbp + 0x90], rbx
lea rax, [rbp - 0x28]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x140031190]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x1400245f9
cmp dword [rbp - 0x28], 0
je 0x1400245ed
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x90], xmm0
lea rcx, [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400245ed
jmp 0x140025177
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x28], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x50]
call fcn.140027020
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rax
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.140027020
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.14000a880
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r12
mov r8d, 4
lea rdx, str.name
lea rcx, [rbp + 0x10]
call fcn.14002be10
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x30]
call fcn.14000ad30
mov rbx, rax
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x1400246b3
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400246ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024788
call fcn.140096450
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r12
mov r8d, 5
lea rdx, str.netID
lea rcx, [rbp + 0x10]
call fcn.14002be10
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x30]
call fcn.14000ad30
mov rdi, rax
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140024720
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002471b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024788
call fcn.140096450
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], r12
mov r8d, 8
lea rdx, [0x1400ad5a0]
lea rcx, [rbp + 0x10]
call fcn.14002be10
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x30]
call fcn.14000ad30
mov rsi, rax
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140024794
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002478f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002478f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
test rbx, rbx
je 0x140024aeb
test rdi, rdi
je 0x140024aeb
test rsi, rsi
je 0x140024aeb
lea rcx, [rbp + 0xd0]
call fcn.14000b400
nop
mov word [rbp + 0x120], 0
lea rdx, [rbx + 0x38]
lea rcx, [rbp + 0xd0]
call fcn.140026db0
lea rdx, str.country
lea rcx, [rbp + 0x10]
call fcn.140026fe0
nop
lea r8, [rbp + 0x10]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x30]
call fcn.14000af50
mov rdx, rax
lea rcx, [rbp + 0xf0]
call fcn.140026e40
lea rcx, [rsp + 0x48]
call fcn.140026de0
nop
lea rcx, [rbp + 0x10]
call fcn.140026de0
lea r8, [rdi + 0x38]
lea rdx, str.__4_
lea rcx, [rsp + 0x68]
call fcn.1400282a0
nop
lea r8, [0x1400ad5ac]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.1400284b0
nop
mov rdx, rax
mov rcx, qword [rbx + 0x20]
call fcn.140026d70
nop
lea rcx, [rsp + 0x48]
call fcn.140026de0
nop
lea rcx, [rsp + 0x68]
call fcn.140026de0
lea rdx, str.posXY
lea rcx, [rbp + 0x10]
call fcn.140026fe0
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x30]
call fcn.14000ad30
mov rdi, rax
lea rcx, [rbp + 0x10]
call fcn.140026de0
test rdi, rdi
je 0x1400248f0
mov rcx, qword [rdi + 0x20]
mov rdx, qword [rdi + 0x28]
sub rdx, rcx
sar rdx, 5
cmp rdx, 2
jb 0x1400248f0
call fcn.140026af0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov ebx, eax
mov rcx, qword [rdi + 0x20]
add rcx, 0x20
call fcn.140026af0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x118], xmm0
movss dword [rbp + 0x11c], xmm1
lea rdx, str.userID
lea rcx, [rbp + 0x10]
call fcn.140026fe0
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x30]
call fcn.14000b190
mov dword [rbp + 0x114], eax
lea rcx, [rbp + 0x10]
call fcn.140026de0
lea rdx, str.netID
lea rcx, [rbp + 0x10]
call fcn.140026fe0
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x30]
call fcn.14000b190
mov dword [rbp + 0x110], eax
lea rcx, [rbp + 0x10]
call fcn.140026de0
lea rdx, str.typelocal
lea rcx, [rbp + 0x50]
call fcn.1400269d0
cmp rax, 0xffffffffffffffff
je 0x1400249b2
lea rdx, str.mstate
lea rcx, [rbp + 0x10]
call fcn.140026fe0
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x30]
call fcn.14000ad30
lea rdx, [0x1400abf18]
mov rcx, qword [rax + 0x20]
call fcn.140026d90
nop
lea rcx, [rbp + 0x10]
call fcn.140026de0
mov rcx, qword [0x140104580]
add rcx, 0xa8
lea rdx, [rbp + 0xd0]
call fcn.140025550
mov rcx, qword [0x140104580]
add rcx, 0x90
lea rdx, [rbp + 0xd0]
call fcn.140026260
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x30]
call fcn.14000afb0
nop
lea rdx, str.onlineID
lea rcx, [rbp - 0x50]
call fcn.140026fe0
nop
lea rdx, [0x1400ad5a0]
lea rcx, [rbp + 0x10]
call fcn.140026fe0
nop
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x70]
call fcn.14004c740
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140024a4d
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024a47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024a47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
nop
lea rcx, [rbp - 0x50]
call fcn.140026de0
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x1d0]
call fcn.1400088c0
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x190]
call fcn.140009d40
mov rcx, rax
call fcn.140026af0
mov rdx, rax
lea rcx, str._CLIENT_:_new:__s_n
call fcn.140007a60
lea rcx, [rsp + 0x48]
call fcn.140026de0
mov rbx, 0xffffffffffffffff
mov dword [rsp + 0x20], ebx
mov r9d, ebx
lea r8, [rbp + 0x190]
mov rcx, qword [0x140104580]
call fcn.14004be00
nop
lea rcx, [rbp + 0x70]
call fcn.140026de0
nop
lea rcx, [rbp + 0xd0]
call fcn.140012b60
nop
lea rcx, [rbp - 0x30]
call fcn.1400277d0
nop
lea rcx, [rbp + 0x50]
call fcn.140026de0
mov bl, 1
jmp 0x140025179
lea rcx, [rbp - 0x30]
call fcn.1400277d0
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140025177
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400233d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400233d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp - 0x50]
call fcn.140027020
nop
lea rdi, [rbp - 0x50]
mov rbx, qword [rbp - 0x38]
cmp rbx, 0x10
setae r12b
cmovae rdi, qword [rbp - 0x50]
mov r14, qword [rbp - 0x40]
cmp r14, 6
jb 0x140024f90
lea r15, [r14 - 6]
lea rsi, [r15 + rdi]
lea r8, [rsi + 1]
sub r8, rdi
mov edx, WSASetLastError
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
je 0x140024f90
lea r13, [0x1400ad584]
nop dword [rax]
xor ecx, ecx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + rcx]
inc rcx
cmp al, byte [rcx + r13 - 1]
jne 0x140024bc9
cmp rcx, 6
jne 0x140024bb0
xor eax, eax
jmp 0x140024bce
sbb eax, eax
or eax, 1
test eax, eax
je 0x140024bf6
inc r9
lea r8, [rsi + 1]
sub r8, r9
mov edx, WSASetLastError
mov rcx, r9
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
jne 0x140024ba0
jmp 0x140024f90
cmp r9, rdi
jne 0x140024f90
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], 0
cmp r14, 6
jb 0x14002522b
mov rbx, 0xffffffffffffffff
mov r8, rbx
cmp r15, rbx
cmovb r8, r15
lea rdx, [rbp - 0x50]
test r12b, r12b
cmovne rdx, qword [rbp - 0x50]
add rdx, 6
lea rcx, [rbp + 0x30]
call fcn.14002be10
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
cmovae rcx, qword [rbp + 0x30]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov esi, eax
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x140024c9e
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024c99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024c99
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
mov r13, qword [0x140104580]
cmp esi, dword [r13 + 0xe8]
jne 0x140024e0d
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xd0], 0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x108], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf0], 0
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x118], 0
mov word [rbp + 0x120], 0
lea rbx, [r13 + 0xa8]
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.140026e40
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0xf0]
call fcn.140026e40
mov eax, dword [rbp + 0x110]
mov dword [rbx + 0x40], eax
mov eax, dword [rbp + 0x114]
mov dword [rbx + 0x44], eax
movsd xmm0, qword [rbp + 0x118]
movsd qword [rbx + 0x48], xmm0
movzx eax, byte [rbp + 0x120]
mov byte [rbx + 0x50], al
movzx eax, byte [rbp + 0x121]
mov byte [rbx + 0x51], al
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x140024dc2
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024dbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024dfa
call fcn.140096450
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x140024e06
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024e01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140024e01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
mov r13, qword [0x140104580]
xor r8d, r8d
mov rbx, qword [r13 + 0x98]
mov rdi, qword [r13 + 0x90]
mov rcx, rbx
sub rcx, rdi
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140024f8c
mov r14, rdi
mov ecx, dword [r14 + 0x40]
cmp ecx, esi
je 0x140024e61
inc r8
add r14, 0x58
cmp r8, rdx
jb 0x140024e48
jmp 0x140024f8c
cmp rdi, rbx
je 0x140024f8c
nop word [rax + rax]
cmp dword [rdi + 0x40], ecx
jne 0x140024e7e
mov eax, dword [r14 + 0x44]
cmp dword [rdi + 0x44], eax
je 0x140024e87
add rdi, 0x58
cmp rdi, rbx
jne 0x140024e70
cmp rdi, rbx
je 0x140024f8c
lea rsi, [rdi + 0x58]
cmp rsi, rbx
je 0x140024efb
nop dword [rax]
mov eax, dword [r14 + 0x40]
cmp dword [rsi + 0x40], eax
jne 0x140024eb2
mov eax, dword [r14 + 0x44]
cmp dword [rsi + 0x44], eax
je 0x140024ef2
mov rdx, rsi
mov rcx, rdi
call fcn.140026e40
lea rdx, [rsi + 0x20]
lea rcx, [rdi + 0x20]
call fcn.140026e40
mov eax, dword [rsi + 0x40]
mov dword [rdi + 0x40], eax
mov eax, dword [rsi + 0x44]
mov dword [rdi + 0x44], eax
movsd xmm0, qword [rsi + 0x48]
movsd qword [rdi + 0x48], xmm0
movzx eax, byte [rsi + 0x50]
mov byte [rdi + 0x50], al
movzx eax, byte [rsi + 0x51]
mov byte [rdi + 0x51], al
add rdi, 0x58
add rsi, 0x58
cmp rsi, rbx
jne 0x140024ea0
cmp rdi, rbx
je 0x140024f8c
mov rsi, qword [r13 + 0x98]
cmp rbx, rsi
je 0x140024f65
sub rbx, rdi
lea rdx, [rbx + rdi]
mov rcx, rdi
call fcn.140026e40
lea rdx, [rdi + 0x20]
add rdx, rbx
lea rcx, [rdi + 0x20]
call fcn.140026e40
mov eax, dword [rbx + rdi + 0x40]
mov dword [rdi + 0x40], eax
mov eax, dword [rbx + rdi + 0x44]
mov dword [rdi + 0x44], eax
movsd xmm0, qword [rbx + rdi + 0x48]
movsd qword [rdi + 0x48], xmm0
movzx eax, byte [rbx + rdi + 0x50]
mov byte [rdi + 0x50], al
movzx eax, byte [rbx + rdi + 0x51]
mov byte [rdi + 0x51], al
add rdi, 0x58
lea rax, [rbx + rdi]
cmp rax, rsi
jne 0x140024f13
mov rsi, qword [r13 + 0x98]
mov rbx, rdi
cmp rdi, rsi
je 0x140024f85
mov rcx, rbx
call fcn.140012b60
add rbx, 0x58
cmp rbx, rsi
jne 0x140024f74
mov qword [r13 + 0x98], rdi
mov rbx, qword [rbp - 0x38]
cmp rbx, 0x10
jb 0x140025177
lea rdx, [rbx + 1]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400233d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400233d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdi, qword [0x140104580]
mov rbx, qword [rdi + 0x90]
mov rsi, qword [rdi + 0x98]
cmp rbx, rsi
je 0x14002500f
nop dword [rax]
mov rcx, rbx
call fcn.140012b60
add rbx, 0x58
cmp rbx, rsi
jne 0x140024ff0
mov rax, qword [rdi + 0x90]
mov qword [rdi + 0x98], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xd0], 0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r12
mov qword [rbp + 0x108], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf0], 0
mov qword [rbp + 0x110], 0xffffffffffffffff
mov qword [rbp + 0x118], 0
mov word [rbp + 0x120], 0
lea rdx, [rbp + 0xd0]
lea rcx, [rdi + 0xa8]
call fcn.140026e40
lea rcx, [rdi + 0xc8]
lea rdx, [rbp + 0xf0]
call fcn.140026e40
mov eax, dword [rbp + 0x110]
mov dword [rdi + 0xe8], eax
mov eax, dword [rbp + 0x114]
mov dword [rdi + 0xec], eax
movsd xmm0, qword [rbp + 0x118]
movsd qword [rdi + 0xf0], xmm0
movzx eax, byte [rbp + 0x120]
mov byte [rdi + 0xf8], al
movzx eax, byte [rbp + 0x121]
mov byte [rdi + 0xf9], al
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x140025116
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025111
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002514e
call fcn.140096450
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x14002515a
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140025155
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140025155
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
mov byte [rdi + 0x100], 0
mov r8d, 4
lea rdx, str.EXIT
lea rcx, [rdi + 0x70]
call fcn.140026b80
xor bl, bl
mov rax, qword [rbp + 0x188]
cmp rax, 0x10
jb 0x1400251be
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400251b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400251b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140096450
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x170], 0
lea r9, [0x140009910]
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rbp + 0x190]
call fcn.1400965b4
nop
movzx eax, bl
mov rcx, qword [rbp + 0x400]
xor rcx, rsp
call fcn.140096430
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140027c90
nop
call fcn.140007d80
int3
call fcn.140007ce0
nop
call fcn.140007d80
nop
call fcn.140027c90
nop
call fcn.140007d80
nop
call fcn.140027c90
nop
call fcn.140027c90
nop
call fcn.140027c90
nop
call fcn.140027c90
int3