Function at 0x1400eb430
Capabilities:
Create process on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov qword [rbp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x1d8], rbx
mov rax, qword [0x14047b0a0]
xor rax, rsp
mov qword [rbp + 0x88], rax
mov rsi, r9
mov ebx, r8d
mov qword [rsp + 0x40], rdx
mov rdi, rcx
mov r14, qword [rbp + 0xf0]
mov r13, qword [rbp + 0xf8]
mov qword [rsp + 0x50], r13
cmp dword [rbp + 0x100], 0
jne 0x1400eb5c9
xor r15d, r15d
cmp ebx, 1
jne 0x1400eb4cf
mov dword [rsp + 0x48], r8d
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
call fcn.1400ec640
mov qword [r13], rax
cmp dword [rsp + 0x48], r15d
je 0x1400eb980
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 2
jne 0x1400eb5f5
mov rcx, qword [rcx + 0x1038]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400eb4fd
mov rcx, qword [rdi + 0x1038]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [rdi + 0x1038], r15
mov r12d, dword [rdi + 0x88]
shl r12d, 0x10
or r12d, 4
mov rcx, qword [rdi + 0xb8]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400eb52d
mov edx, r12d
mov rcx, qword [rdi + 0xb8]
call qword [sym.imp.USER32.dll_KillTimer]
mov rdx, qword [rdi + 0xc60]
test rdx, rdx
je 0x1400eb548
xor ecx, ecx
call qword [sym.imp.USER32.dll_KillTimer]
mov qword [rdi + 0xc60], r15
mov qword [rdi + 0xc20], r15
lea rcx, [rdi + 0xb08]
call fcn.140099660
mov rcx, rdi
call fcn.1400fc5d0
mov rcx, rdi
call fcn.1400edba0
lea rcx, [rdi + 0x900]
call fcn.140094130
lea rcx, [rdi + 0xa08]
call fcn.1400970a0
lea rcx, [rdi + 0xc68]
call fcn.1400e08d0
lea rcx, [rdi + 0xe20]
call fcn.1400e08d0
mov qword [r13], r15
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r14
mov r9, rsi
mov r8d, ebx
mov rdx, qword [rsp + 0x40]
mov rcx, rdi
call fcn.1400c2de0
test eax, eax
jne 0x1400eb4c5
xor eax, eax
mov rcx, qword [rbp + 0x88]
xor rcx, rsp
call fcn.1401aed20
mov rbx, qword [rsp + 0x1d8]
add rsp, 0x190
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp ebx, 5
je 0x1400eb59b
cmp ebx, 0x113
jne 0x1400eb697
mov rax, rsi
sub rax, 1
je 0x1400eb678
sub rax, 1
je 0x1400eb656
sub rax, 1
je 0x1400eb63a
cmp rax, 1
jne 0x1400eb59b
lea edx, [rax + 3]
call fcn.14012c170
mov rcx, rdi
call fcn.1400ff900
jmp 0x1400eb59b
mov edx, 3
call fcn.14012c170
mov edx, 0xa
mov rcx, rdi
call fcn.1400ff760
jmp 0x1400eb59b
mov edx, 2
call fcn.14012c170
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbf6
mov rcx, rdi
call fcn.1400fa100
jmp 0x1400eb59b
mov edx, 1
call fcn.14012c170
mov rcx, rdi
call fcn.1400fc5d0
mov rcx, rdi
call fcn.1400edba0
jmp 0x1400eb59b
cmp ebx, 0x308
jne 0x1400eb6b2
call fcn.1400ec830
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbd3
jne 0x1400eb78a
test r14, r14
je 0x1400eb77c
lea r12, [rcx + 0xc68]
mov r8d, dword [r14 + 0x28]
mov rcx, r12
cmp byte [r14], r15b
je 0x1400eb717
lea rdx, [rsp + 0x40]
call fcn.1400e11c0
mov rdx, qword [rax]
cmp qword [r14 + 0x78], rdx
je 0x1400eb704
mov qword [rax], r15
mov rcx, qword [r14 + 0x78]
mov qword [r14 + 0x78], rdx
test rcx, rcx
je 0x1400eb704
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400eb715
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
jmp 0x1400eb763
lea rdx, [rbp + 0x28]
call fcn.1400e1090
lea rcx, [r14 + 0x58]
mov rdx, rax
call fcn.1400dc350
nop
mov rbx, qword [rbp + 0x30]
test rbx, rbx
je 0x1400eb763
mov esi, 0xffffffff
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400eb763
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x1400eb763
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rdx, [rdi + 0x8f0]
test rdi, rdi
cmove rdx, r15
mov r8, r14
mov rcx, r12
call fcn.1400e05c0
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbd4
jne 0x1400eb7ab
mov r9, r14
mov r8, rsi
call fcn.1400f1f40
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xc0e
jne 0x1400eb89c
mov r14, qword [rcx + 0xfd8]
mov r15, qword [rcx + 0xfe0]
cmp r14, r15
je 0x1400eb88c
mov esi, 0xffffffff
mov rax, qword [r14]
mov ebx, dword [rax + 0x30]
mov edx, dword [rdi + 0x88]
lea rcx, [rsp + 0x58]
call fcn.140125a50
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400eb844
mov r9d, 1
mov r8d, ebx
mov edx, 0xbd4
call fcn.14012b100
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400eb842
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400eb842
mov rbx, qword [rsp + 0x60]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400eb842
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400eb87f
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400eb87f
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400eb87f
mov rbx, qword [rsp + 0x60]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400eb87f
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
add r14, 0x10
cmp r14, r15
jne 0x1400eb7d3
xor r15d, r15d
mov qword [r13], r15
lea eax, [r15 + 1]
jmp 0x1400eb5cb
cmp ebx, 0xbd5
jne 0x1400eb922
mov edx, esi
lea rcx, [rsp + 0x70]
call fcn.140125a50
nop
mov rax, qword [rsp + 0x70]
mov r9d, dword [rax + 0x30]
mov rcx, rdi
call fcn.1400f6ce0
xor r9d, r9d
xor r8d, r8d
lea edx, [rbx + 0x18]
mov rcx, rdi
call fcn.14012b100
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400eb912
mov esi, 0xffffffff
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400eb912
mov rbx, qword [rsp + 0x78]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x1400eb912
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor r15d, r15d
mov qword [r13], r15
lea eax, [r15 + 1]
jmp 0x1400eb5cb
cmp ebx, 0xbd6
jne 0x1400eb943
mov r9, r14
mov r8, rsi
call fcn.1400f2520
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbe6
jne 0x1400eb980
mov edx, esi
lea rcx, [rbp + 0x38]
call fcn.1400d5910
mov rdx, rax
mov rcx, rdi
call fcn.1400fe040
xor r9d, r9d
xor r8d, r8d
lea edx, [rbx + 7]
mov rcx, rdi
call fcn.14012b100
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbe7
jne 0x1400eba81
mov edx, esi
lea rcx, [rbp - 0x10]
call fcn.1400d5910
nop
mov edx, r14d
lea rcx, [rbp - 0x20]
call fcn.1400d5910
nop
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
mov rax, qword [rbp - 0x18]
test rax, rax
je 0x1400eb9ba
lock inc dword [rax + 8]
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x40], xmm0
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
mov rax, qword [rbp - 8]
test rax, rax
je 0x1400eb9d8
lock inc dword [rax + 8]
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x30], xmm0
mov esi, 0xffffffff
mov r9d, esi
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.1400fe6b0
xor r9d, r9d
xor r8d, r8d
mov edx, 0xbed
mov rcx, rdi
call fcn.14012b100
nop
mov rbx, qword [rbp - 0x18]
test rbx, rbx
je 0x1400eba40
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400eba40
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400eba40
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rbx, qword [rbp - 8]
test rbx, rbx
je 0x1400eba71
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400eba71
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x1400eba71
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor r15d, r15d
mov qword [r13], r15
lea eax, [r15 + 1]
jmp 0x1400eb5cb
cmp ebx, 0xbd7
jne 0x1400ebaa7
mov edx, ebx
mov r8, rsi
mov r9, r14
mov rcx, rdi
call fcn.1400f2c10
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xc0b
jne 0x1400ebab3
mov edx, ebx
jmp 0x1400eba8b
cmp ebx, 0xbec
jne 0x1400ebad4
mov r8, rsi
mov rcx, rdi
call fcn.1400eccc0
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbdb
jne 0x1400ebafa
mov rcx, rdi
call fcn.1400fc5d0
mov rcx, rdi
call fcn.1400edba0
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0x111
jne 0x1400ebd26
mov ecx, 0x272c
movzx eax, si
sub ax, cx
cmp ax, 2
ja 0x1400ebb30
mov r9, r14
mov rcx, rdi
call fcn.1400f6ce0
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
mov eax, 0x2721
cmp ax, si
jne 0x1400ebb53
mov r9, r14
mov rcx, rdi
call fcn.1400f4e80
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
mov eax, 0x272b
cmp ax, si
jne 0x1400ebb76
mov r9, r14
mov rcx, rdi
call fcn.1400f5930
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
mov eax, 0x272a
cmp ax, si
jne 0x1400ebbb3
movsx eax, r14w
mov dword [rsp + 0x68], eax
shr r14, 0x10
movsx eax, r14w
mov dword [rsp + 0x6c], eax
lea rdx, [rsp + 0x68]
mov rcx, qword [rdi + 0xb8]
call fcn.1400b9860
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
mov eax, 0x2729
cmp ax, si
jne 0x1400ebc1b
lea r8, str.www.coodesker.cxm
lea rdx, str.https:___s_contact
lea rcx, [rbp + 0x68]
call fcn.1401349c0
lea r8, [rbp + 0x68]
cmp qword [rbp + 0x80], 8
cmovae r8, qword [rbp + 0x68]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea rdx, [0x1403ff888]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x68]
call fcn.14007ec70
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
mov eax, 0x1770
cmp ax, si
jne 0x1400eb59f
mov edx, r14d
lea rcx, [rbp - 0x80]
call fcn.1400d5910
nop
mov esi, 0xffffffff
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x1400ebce5
mov edx, dword [rax + 0x8c]
lea rcx, [rbp + 0x10]
call fcn.1400d5910
nop
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x1400ebc78
mov rax, qword [rcx + 0x7b8]
sub rax, qword [rcx + 0x7b0]
sar rax, 4
cmp eax, 1
je 0x1400ebcb2
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x1400ebc8d
lock inc dword [rax + 8]
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp]
mov rcx, rdi
call fcn.1400ee7c0
mov rax, qword [rbp + 0x10]
mov ecx, dword [rax + 0x25c]
call fcn.140126130
nop
mov rbx, qword [rbp + 0x18]
test rbx, rbx
je 0x1400ebce5
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ebce5
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ebce5
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rbx, qword [rbp - 0x78]
test rbx, rbx
je 0x1400ebd16
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ebd16
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x1400ebd16
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
xor r15d, r15d
mov qword [r13], r15
lea eax, [r15 + 1]
jmp 0x1400eb5cb
cmp ebx, 0x806
jne 0x1400ebd4a
mov r9, r14
mov r8, rsi
mov rcx, rdi
call fcn.1400f70f0
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbe4
jne 0x1400ebd68
mov rcx, rdi
call fcn.1400f72b0
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbe3
jne 0x1400ebdc4
call fcn.1400ba1e0
call fcn.1400879c0
test rsi, rsi
je 0x1400ebdb3
movzx edi, al
test al, al
sete bl
call fcn.1400ba1e0
movzx edx, bl
call fcn.140087a50
test dil, dil
jne 0x1400ebdb6
call fcn.1400ba1e0
mov dl, 1
call fcn.140087b60
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
mov byte [r14], al
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbe9
jne 0x1400ebde5
mov r9, r14
mov rcx, rdi
call fcn.1400f7470
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbea
jne 0x1400ebed8
call fcn.1400a3380
mov rcx, qword [rax]
call fcn.1400af4c0
movzx r12d, al
mov r14, qword [rdi + 0xfd8]
mov rax, qword [rdi + 0xfe0]
cmp r14, rax
je 0x1400ebeca
mov esi, 0xffffffff
mov r13, rax
movzx edx, r12b
mov rcx, qword [r14]
call fcn.14012b8a0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r15
lea rdx, [rbp - 0x70]
mov rcx, qword [r14]
call fcn.1400d67e0
mov rdi, qword [rbp - 0x70]
cmp rdi, qword [rbp - 0x68]
je 0x1400ebeaf
nop
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x1400ebe61
lock inc dword [rbx + 8]
mov rbx, qword [rdi + 8]
mov rcx, qword [rdi]
mov qword [rbp + 0x48], rcx
mov qword [rbp + 0x50], rbx
movzx edx, r12b
call fcn.14012b8a0
nop
test rbx, rbx
je 0x1400ebea5
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ebea5
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ebea5
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
add rdi, 0x10
cmp rdi, qword [rbp - 0x68]
jne 0x1400ebe50
lea rcx, [rbp - 0x70]
call fcn.1400dc9b0
add r14, 0x10
cmp r14, r13
jne 0x1400ebe21
mov r13, qword [rsp + 0x50]
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbee
jne 0x1400ebfea
cmp rsi, 0xbf1
jne 0x1400ebf10
xor r9d, r9d
xor r8d, r8d
mov edx, ebx
mov rcx, qword [rdi + 0x1038]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
call fcn.1400a3380
mov rcx, qword [rax]
call fcn.1400af560
movzx r12d, al
mov r14, qword [rdi + 0xfd8]
mov rax, qword [rdi + 0xfe0]
cmp r14, rax
je 0x1400ebeca
mov esi, 0xffffffff
mov r13, rax
nop dword [rax]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r15
lea rdx, [rbp - 0x58]
mov rcx, qword [r14]
call fcn.1400d67e0
mov rdi, qword [rbp - 0x58]
cmp rdi, qword [rbp - 0x50]
je 0x1400ebfc1
mov rbx, qword [rdi + 8]
test rbx, rbx
je 0x1400ebf73
lock inc dword [rbx + 8]
mov rbx, qword [rdi + 8]
mov rcx, qword [rdi]
mov qword [rbp + 0x58], rcx
mov qword [rbp + 0x60], rbx
movzx edx, r12b
call fcn.140132880
nop
test rbx, rbx
je 0x1400ebfb7
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400ebfb7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400ebfb7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
add rdi, 0x10
cmp rdi, qword [rbp - 0x50]
jne 0x1400ebf62
lea rcx, [rbp - 0x58]
call fcn.1400dc9b0
add r14, 0x10
cmp r14, r13
jne 0x1400ebf40
mov r13, qword [rsp + 0x50]
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbeb
jne 0x1400ec00e
mov r9, r14
mov r8, rsi
mov rcx, rdi
call fcn.1400f8ca0
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbed
jne 0x1400ec063
mov ebx, dword [rdi + 0x88]
shl ebx, 0x10
or ebx, 1
mov rcx, qword [rdi + 0xb8]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400ec042
mov edx, ebx
mov rcx, qword [rdi + 0xb8]
call qword [sym.imp.USER32.dll_KillTimer]
mov edx, 1
mov r8d, 0x1388
mov rcx, rdi
call fcn.14012c0c0
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbef
jne 0x1400ec084
mov r9, r14
mov rcx, rdi
call fcn.1400f8660
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbf0
jne 0x1400ec0a8
mov r9, r14
mov r8, rsi
mov rcx, rdi
call fcn.1400f9bf0
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbf4
jne 0x1400ec0c9
mov r8, rsi
mov rcx, rdi
call fcn.1400f9fc0
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbf6
jne 0x1400ec0ef
mov r9, r14
mov r8, rsi
mov edx, ebx
mov rcx, rdi
call fcn.1400fa100
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbf7
jne 0x1400ec112
mov r9, r14
mov edx, ebx
mov rcx, rdi
call fcn.1400fa610
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xc02
jne 0x1400ec133
mov r9, r14
mov rcx, rdi
call fcn.1400faa50
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xbf1
jne 0x1400ec1d6
mov rcx, qword [rdi + 0x1038]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400ec1ab
mov rcx, qword [rdi + 0x1038]
cmp r14, 0x12
jne 0x1400ec18c
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400eb77c
mov rcx, qword [rdi + 0x1038]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [rdi + 0x1038], r15
mov qword [r13], r15
lea eax, [r14 - 0x11]
jmp 0x1400eb5cb
mov r9, r14
mov r8, rsi
mov edx, 0xbf1
call qword [sym.imp.USER32.dll_PostMessageW]
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
lea rax, [rsi - 1]
test rax, 0xfffffffffffffffb
jne 0x1400eb77c
mov edx, 5
mov rcx, rdi
call fcn.1400ff760
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xc07
jne 0x1400ec1f4
mov rcx, rdi
call fcn.1400fb070
mov qword [r13], rax
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xc08
jne 0x1400ec22a
xor r9d, r9d
mov rcx, rdi
call fcn.1400f4e80
xor r9d, r9d
xor r8d, r8d
mov edx, ebx
mov rcx, qword [rdi + 0x1038]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xc0a
jne 0x1400ec24f
mov rcx, r14
call fcn.140081a00
mov qword [rdi + 0x1040], rax
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xc0f
jne 0x1400ec283
mov dword [rsp + 0x48], 1
mov r9, r14
mov rcx, rdi
call fcn.1400f9480
mov qword [r13], rax
cmp dword [rsp + 0x48], r15d
je 0x1400eb59f
mov eax, 1
jmp 0x1400eb5cb
cmp ebx, 0xc11
jne 0x1400eb59f
call fcn.1400ba1e0
call fcn.1400884e0
mov dword [reloc.WS2_32.dll_accept], eax
xor r8d, r8d
xor edx, edx
mov rcx, qword [rdi + 0xb8]
call qword [sym.imp.USER32.dll_InvalidateRect]
mov qword [r13], r15
mov eax, 1
jmp 0x1400eb5cb