Function at 0x1400445a4
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Get kernel32 base address
Read .ini file
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x490
movaps xmmword [rax - 0x28], xmm7
mov rax, qword [0x140327010]
xor rax, rsp
mov qword [rsp + 0x470], rax
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov eax, dword [str.VYYQW]
mov dword [rsp + 0x88], eax
movzx eax, word [0x1403128ac]
mov word [rsp + 0x8c], ax
mov al, byte [0x1403128ae]
mov byte [rsp + 0x8e], al
mov r8d, ebx
lea r9, [rsp + 0x88]
mov r12d, 0x24924925
mov r13b, 0x35
lea edi, [rbx + 1]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 7
jl 0x140044622
movzx eax, word [0x140313e90]
mov word [rsp + 0x80], ax
mov r8d, ebx
lea r9, [rsp + 0x80]
mov esi, 2
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, esi
jl 0x140044670
xor ecx, ecx
call fcn.140137e60
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x88]
call fcn.140158000
mov rax, qword [str.VYYWLN]
mov qword [rsp + 0x88], rax
mov r8d, ebx
lea r9, [rsp + 0x88]
mov r14d, 8
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, r14d
jl 0x1400446dd
movzx eax, word [0x140312df0]
mov word [rsp + 0x80], ax
mov r8d, ebx
lea r9, [rsp + 0x80]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, esi
jl 0x140044725
mov ecx, edi
call fcn.140137e60
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x88]
call fcn.140158000
mov rax, qword [str.VYYWLN]
mov qword [rsp + 0x88], rax
mov r8d, ebx
lea r9, [rsp + 0x88]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, r14d
jl 0x14004478c
movzx eax, word [0x140312df0]
mov word [rsp + 0x80], ax
mov r8d, ebx
lea r9, [rsp + 0x80]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, esi
jl 0x1400447d4
mov ecx, esi
call fcn.140137e60
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x88]
call fcn.140158000
call fcn.14003b098
mov eax, dword [str.VZD8]
mov dword [rsp + 0x88], eax
mov r8d, ebx
lea r9, [rsp + 0x88]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 4
jl 0x14004483e
lea rcx, [rsp + 0x88]
call fcn.140160da0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
mov rcx, r14
call fcn.140061310
lea rcx, [0x14003a084]
mov qword [rax], rcx
mov qword [rsp + 0x370], rax
lea rcx, [rsp + 0xf8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14005cf8c]
xor edx, edx
xor ecx, ecx
call fcn.140158c40
mov qword [rsp + 0xf0], rax
test rax, rax
je 0x140046be5
cmp dword [rsp + 0xf8], ebx
je 0x140046cdd
movaps xmm0, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0x370], xmm0
lea rcx, [rsp + 0x370]
call fcn.14006489c
test eax, eax
jne 0x140046cdd
xorps xmm0, xmm0
movdqa xmmword [rsp + 0xf0], xmm0
lea rdx, [0x14003a358]
lea rcx, [rsp + 0x170]
call fcn.14004dbac
mov rsi, rax
cmp dword [rax + 8], ebx
je 0x140046cd5
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0xf0], xmm0
lea rcx, [rsp + 0xf0]
call fcn.14006489c
test eax, eax
jne 0x140046cd5
xorps xmm0, xmm0
movdqu xmmword [rsi], xmm0
cmp dword [rsp + 0x178], ebx
jne 0x140046bf7
lea rdx, [0x14003a5dc]
lea rcx, [rsp + 0x90]
call fcn.14004dbac
mov rsi, rax
cmp dword [rax + 8], ebx
je 0x140046ccd
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x170], xmm0
lea rcx, [rsp + 0x170]
call fcn.14006489c
test eax, eax
jne 0x140046ccd
xorps xmm0, xmm0
movdqu xmmword [rsi], xmm0
cmp dword [rsp + 0x98], ebx
jne 0x140046bfd
lea rdx, [0x14003a798]
lea rcx, [rsp + 0xb0]
call fcn.14004dbac
mov rsi, rax
cmp dword [rax + 8], ebx
je 0x140046cc5
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x90], xmm0
lea rcx, [rsp + 0x90]
call fcn.14006489c
test eax, eax
jne 0x140046cc5
xorps xmm0, xmm0
movdqu xmmword [rsi], xmm0
cmp dword [rsp + 0xb8], ebx
jne 0x140046c03
lea rdx, [0x14003a0a8]
lea rcx, [rsp + 0x350]
call fcn.14004dbac
mov rsi, rax
cmp dword [rax + 8], ebx
je 0x140046cbd
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0xb0], xmm0
lea rcx, [rsp + 0xb0]
call fcn.14006489c
test eax, eax
jne 0x140046cbd
xorps xmm0, xmm0
movdqu xmmword [rsi], xmm0
cmp dword [rsp + 0x358], ebx
jne 0x140046c09
mov rcx, r14
call fcn.140061310
lea rcx, [0x14003adcc]
mov qword [rax], rcx
mov qword [rsp + 0x370], rax
lea rcx, [rsp + 0x138]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14005cf8c]
xor edx, edx
xor ecx, ecx
call fcn.140158c40
mov qword [rsp + 0x130], rax
test rax, rax
je 0x140046cab
cmp dword [rsp + 0x138], ebx
je 0x140046ca3
movaps xmm0, xmmword [rsp + 0x130]
movdqa xmmword [rsp + 0x350], xmm0
lea rcx, [rsp + 0x350]
call fcn.14006489c
test eax, eax
jne 0x140046ca3
lea rcx, [rsp + 0x3b0]
call fcn.14003d79c
nop
lea rdx, [0x14037cdd0]
mov r14d, reloc.WS2_32.dll_recv
cmp qword [0x14037cde8], r14
cmovae rdx, qword [0x14037cdd0]
lea rcx, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], r14
cmovae rcx, qword [rsp + 0x3b0]
mov r8, qword [rsp + 0x3c0]
cmp r8, qword [0x14037cde0]
jne 0x140044b59
call fcn.14012f9b0
test eax, eax
mov al, bl
je 0x140044b5c
mov al, dil
test al, al
je 0x140044c56
mov edx, 0xa
lea rcx, [rsp + 0x350]
call fcn.14003cf04
mov rdx, rax
lea rcx, [0x140378a40]
call fcn.140049250
lea rcx, [rsp + 0x350]
call fcn.1400491f4
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
mov r9d, 0x1194
lea r8, [0x14003c060]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rsp + 0x180]
call fcn.140046ce8
mov r10, rax
cmp byte [rax + 0x29], bl
je 0x140044bfc
mov r8d, ebx
mov r9, rax
mov eax, r12d
mul r8d
mov ecx, r8d
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 5
movsx eax, cl
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x2a
jl 0x140044bcd
mov rcx, r10
call fcn.140160da0
lea rdx, [rsp + 0x240]
call fcn.140046d1c
mov rsi, rax
cmp byte [rax + 0xaf], bl
je 0x140046c0f
mov r8, rax
mov eax, r12d
mul ebx
mov ecx, ebx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 5
movsx eax, cl
imul ecx, eax, 0x38
mov al, bl
sub al, cl
add al, r13b
xor byte [r8], al
add ebx, edi
add r8, rdi
cmp ebx, 0xb0
jge 0x140046c0f
jmp 0x140044c23
cmp byte [0x14037c5fa], bl
jne 0x140044c6f
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14004030c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x140040324]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14003d4f0
nop
movups xmm0, xmmword [0x140313bc0]
movups xmmword [rsp + 0x350], xmm0
movsd xmm0, qword [0x140313bd0]
movsd qword [rsp + 0x360], xmm0
mov eax, dword [0x140313bd8]
mov dword [rsp + 0x368], eax
movzx eax, word [0x140313bdc]
mov word [rsp + 0x36c], ax
cmp byte [0x140313bdd], bl
je 0x140044d2d
mov r8d, ebx
lea r9, [rsp + 0x350]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x1e
jl 0x140044cfe
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rbx
lea rax, [rsp + 0x350]
or rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], bl
jne 0x140044d57
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x90]
call fcn.14004e360
nop
movups xmm0, xmmword [str._BCHJ]
movups xmmword [rsp + 0x180], xmm0
movups xmm1, xmmword [0x140314148]
movups xmmword [rsp + 0x190], xmm1
movsd xmm0, qword [0x140314158]
movsd qword [rsp + 0x1a0], xmm0
movzx eax, word [0x140314160]
mov word [rsp + 0x1a8], ax
mov r8d, ebx
lea r9, [rsp + 0x180]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x2a
jl 0x140044dbf
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], rbx
lea rax, [rsp + 0x180]
mov r8, rsi
inc r8
cmp byte [rax + r8], bl
jne 0x140044e14
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0xb0]
call fcn.14004e360
nop
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x380]
call fcn.14003fe00
nop
mov rdx, qword [rsp + 0xc8]
mov r15d, 0x1000
cmp rdx, r14
jb 0x140044e95
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, r15
jb 0x140044e90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c37
call fcn.140060840
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xb0], bl
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140044eee
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140044ee9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c3d
call fcn.140060840
cmp byte [0x14037c5fa], bl
je 0x140044fdd
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x380]
call fcn.140048500
mov rsi, rax
movsd xmm0, qword [0x1403136a8]
movsd qword [rsp + 0x140], xmm0
mov eax, dword [0x1403136b0]
mov dword [rsp + 0x148], eax
mov r8d, ebx
lea r9, [rsp + 0x140]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xc
jl 0x140044f3b
lea rdx, [rsp + 0x140]
lea rcx, [0x14037a7c0]
call fcn.14004d1b4
mov rdx, rsi
cmp qword [rsi + 0x18], r14
jb 0x140044f8a
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.14005550c
mov rcx, rax
call fcn.14004d40c
nop
mov rdx, qword [rsp + 0x368]
cmp rdx, r14
jb 0x140044fdd
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r15
jb 0x140044fd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c43
call fcn.140060840
movzx r8d, byte [rsp + 0x380]
mov ecx, r8d
cmp r8d, 4
ja 0x140045026
test r8b, r8b
je 0x140045021
sub ecx, 1
je 0x140045013
sub ecx, 1
jne 0x140045026
mov rdx, qword [rsp + 0x388]
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 4
jmp 0x140045031
mov rdx, qword [rsp + 0x388]
mov rax, qword [rdx + 8]
jmp 0x140045031
mov rax, rbx
jmp 0x140045029
mov rax, rdi
mov rdx, qword [rsp + 0x388]
mov dword [0x14037c608], eax
mov rsi, rbx
lea r13, [0x14037ee00]
movzx ecx, r8b
cmp ecx, 4
ja 0x140045070
test r8b, r8b
je 0x14004553a
sub ecx, 1
je 0x14004506a
sub ecx, 1
jne 0x140045070
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 4
jmp 0x140045073
mov rax, qword [rdx + 8]
jmp 0x140045073
mov rax, rdi
cmp rsi, rax
jae 0x14004553a
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.1400483d0
mov r12, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, 8
lea rdx, str.Programe
lea rcx, [rsp + 0x350]
call fcn.14004e360
lea rdx, [rsp + 0x350]
mov rcx, r12
call fcn.140048170
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004dadc
mov r12, rsi
shl r12, 5
lea rcx, [0x140000000]
lea rcx, [rcx + 0x37e790]
add rcx, r12
mov rdx, rax
call fcn.140049250
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140045142
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x14004513d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c49
call fcn.140060840
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.1400483d0
mov qword [rsp + 0x370], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, 6
lea rdx, str.Status
lea rcx, [rsp + 0x350]
call fcn.14004e360
lea rdx, [rsp + 0x350]
mov rcx, qword [rsp + 0x370]
call fcn.140048170
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004dadc
lea rcx, [0x140000000]
lea rcx, [rcx + 0x37d480]
add rcx, r12
mov rdx, rax
call fcn.140049250
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x14004520b
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140045206
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c4f
call fcn.140060840
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.1400483d0
mov qword [rsp + 0x370], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, recv
lea rdx, str.updateddate
lea rcx, [rsp + 0x350]
call fcn.14004e360
lea rdx, [rsp + 0x350]
mov rcx, qword [rsp + 0x370]
call fcn.140048170
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004dadc
lea rcx, [0x140000000]
lea rcx, [rcx + 0x37dae0]
add rcx, r12
mov rdx, rax
call fcn.140049250
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x1400452d4
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x1400452cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c55
call fcn.140060840
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.1400483d0
mov qword [rsp + 0x370], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, 4
lea rdx, str.Name
lea rcx, [rsp + 0x350]
call fcn.14004e360
lea rdx, [rsp + 0x350]
mov rcx, qword [rsp + 0x370]
call fcn.140048170
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004dadc
lea rcx, [0x140000000]
lea rcx, [rcx + 0x37e120]
add rcx, r12
mov rdx, rax
call fcn.140049250
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x14004539d
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140045398
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c5b
call fcn.140060840
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.1400483d0
mov qword [rsp + 0x370], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, 5
lea rdx, str.image
lea rcx, [rsp + 0x350]
call fcn.14004e360
lea rdx, [rsp + 0x350]
mov rcx, qword [rsp + 0x370]
call fcn.140048170
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004dadc
lea rcx, [r12 + r13]
mov rdx, rax
call fcn.140049250
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140045459
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140045454
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c61
call fcn.140060840
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.1400483d0
mov qword [rsp + 0x370], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, 4
lea rdx, str.link
lea rcx, [rsp + 0x350]
call fcn.14004e360
lea rdx, [rsp + 0x350]
mov rcx, qword [rsp + 0x370]
call fcn.140048170
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004dadc
lea rcx, [0x140000000]
lea rcx, [rcx + 0x37ce40]
add rcx, r12
mov rdx, rax
call fcn.140049250
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140045522
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x14004551d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c67
call fcn.140060840
add rsi, rdi
mov rdx, qword [rsp + 0x388]
mov r8b, byte [rsp + 0x380]
jmp 0x140045041
mov dl, r8b
lea rcx, [rsp + 0x388]
call fcn.14004b1f0
nop
call fcn.14003d4f0
movsd xmm0, qword [str.VYYP_j]
movsd qword [rsp + 0x150], xmm0
mov eax, dword [str.TPV_]
mov dword [rsp + 0x158], eax
mov r12d, 0x24924925
mov sil, 0x35
cmp byte [0x140312ecb], bl
je 0x1400455b9
mov r8d, ebx
lea r9, [rsp + 0x150]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, sil
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xc
jl 0x14004558a
mov al, byte [0x140312b70]
movsd xmm0, qword [0x140312b68]
mov byte [rsp + 0xd8], al
movsd qword [rsp + 0xd0], xmm0
mov r8d, ebx
lea r9, [rsp + 0xd0]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, sil
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 9
jl 0x1400455e2
movsd xmm0, qword [0x140312b68]
movsd qword [rsp + 0x100], xmm0
mov al, byte [0x140312b70]
mov byte [rsp + 0x108], al
mov r8d, ebx
lea r9, [rsp + 0x100]
mov eax, r12d
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, sil
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 9
jl 0x14004563a
lea rax, [rsp + 0x150]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x64
lea r9, [rsp + 0x400]
lea r8, [0x1401e655e]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
lea rax, [rsp + 0x400]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], bl
jne 0x1400456ca
lea rdx, [rsp + 0x400]
lea rcx, [rsp + 0x350]
call fcn.14004e360
lea rdx, [rsp + 0x350]
lea r12, [0x140378a20]
mov rcx, r12
call fcn.140049250
mov rdx, qword [rsp + 0x368]
cmp rdx, r14
jb 0x14004573d
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r15
jb 0x140045738
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c97
call fcn.140060840
movsd xmm0, qword [str.VYYP_z]
movsd qword [rsp + 0x160], xmm0
mov eax, dword [0x140312e00]
mov dword [rsp + 0x168], eax
cmp byte [0x140312e03], bl
je 0x14004579f
mov r8d, ebx
lea r9, [rsp + 0x160]
mov eax, 0x24924925
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, sil
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xc
jl 0x14004576e
mov al, byte [0x140312e78]
movsd xmm0, qword [str.eWDKNUIX]
mov byte [rsp + 0xe8], al
movsd qword [rsp + 0xe0], xmm0
mov r8d, ebx
lea r9, [rsp + 0xe0]
mov eax, 0x24924925
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, sil
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 9
jl 0x1400457c8
movsd xmm0, qword [str.eWDKNUIX]
movsd qword [rsp + 0x110], xmm0
mov al, byte [0x140312e78]
mov byte [rsp + 0x118], al
mov r9d, ebx
lea r10, [rsp + 0x110]
mov eax, 0x24924925
mul r9d
mov eax, r9d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r9b
sub al, cl
add al, sil
xor byte [r10], al
add r9d, edi
add r10, rdi
cmp r9d, 9
jl 0x140045822
lea rax, [rsp + 0x160]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x64
lea r9, [rsp + 0x400]
lea r8, [0x1401e655e]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x110]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
lea rax, [rsp + 0x400]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], bl
jne 0x1400458b4
lea rdx, [rsp + 0x400]
lea rcx, [rsp + 0x350]
call fcn.14004e360
lea rdx, [rsp + 0x350]
lea rsi, [0x140378968]
mov rcx, rsi
call fcn.140049250
mov rdx, qword [rsp + 0x368]
cmp rdx, r14
jb 0x140045927
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r15
jb 0x140045922
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c97
call fcn.140060840
lea rcx, [rsp + 0x350]
call fcn.14003dd54
mov rdx, rax
lea rcx, [0x140378928]
call fcn.140049250
mov rdx, qword [rsp + 0x368]
cmp rdx, r14
jb 0x140045981
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r15
jb 0x14004597c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c6d
call fcn.140060840
cmp qword [0x140378a30], rbx
je 0x1400459de
cmp qword [reloc.WS2_32.dll_ntohs], r14
cmovae r12, qword [0x140378a20]
lea rcx, [0x14037f498]
sub rcx, r12
mov al, byte [r12]
mov byte [r12 + rcx], al
add r12, rdi
test al, al
jne 0x1400459a3
cmp qword [reloc.WS2_32.dll_ntohs], r14
cmovae rsi, qword [0x140378968]
lea rcx, [0x14037f4b8]
sub rcx, rsi
mov al, byte [rsi]
mov byte [rsi + rcx], al
add rsi, rdi
test al, al
jne 0x1400459cb
mov byte [0x14037ce39], dil
call fcn.14003d4f0
mov edx, Ordinal_27
lea rcx, [rsp + 0x390]
call fcn.14003cf04
nop
mov dword [rsp + 0x300], 0x50
mov dword [rsp + 0x304], 0x40
lea rax, [0x14003c0a0]
mov qword [rsp + 0x308], rax
mov qword [rsp + 0x310], rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x318], rax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x320], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x330], xmm1
lea rcx, [rsp + 0x390]
call fcn.14003c170
mov qword [rsp + 0x340], rax
mov qword [rsp + 0x348], rbx
lea rcx, [rsp + 0x300]
call qword [sym.imp.USER32.dll_RegisterClassExA]
lea rcx, [rsp + 0x390]
call fcn.14003c170
mov r8, rax
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
mov r9d, 0x80000000
mov rdx, qword [rsp + 0x340]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r12, rax
mov qword [0x14037c668], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rsi, rax
mov qword [0x14037c670], rax
test rax, rax
je 0x140046aa6
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [0x14037c620]
call fcn.14012f5c0
mov dword [0x14037c648], edi
mov dword [0x14037c638], edi
mov dword [0x14037c628], ebx
mov dword [0x14037c64c], edi
mov dword [0x14037c650], 0x50
mov dword [0x14037c65c], edi
mov rax, qword [rsi]
lea rcx, [0x14037c618]
mov qword [rsp + 0x30], rcx
lea rcx, [0x14037c620]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x40
mov r9, r12
mov r8d, edi
xor edx, edx
mov rcx, rsi
call qword [rax + 0x80]
test eax, eax
js 0x140046a9f
xor edx, edx
mov rcx, qword [0x14037c668]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14037c668]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rax, qword [0x14037c600]
test rax, rax
je 0x140045b9c
add dword [rax + 0x3b0], edi
mov ecx, 0x3e48
call fcn.140156530
mov qword [rsp + 0x370], rax
lea rcx, [rsp + 0x80]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0xd0], rax
test rax, rax
je 0x140045bd7
xor edx, edx
mov rcx, rax
call fcn.1400018fc
jmp 0x140045bda
mov rax, rbx
cmp qword [0x14037c600], rbx
jne 0x140045bea
mov qword [0x14037c600], rax
mov rcx, rax
call fcn.140007190
mov rsi, qword [0x14037c600]
mov qword [rsp + 0x370], rsi
bts dword [rsi + 8], 0xa
mov qword [rsp + 0x240], rbx
mov dword [rsp + 0x248], ebx
mov byte [rsp + 0x24c], dil
mov dword [rsp + 0x250], ebx
xorps xmm1, xmm1
and dword [rsp + 0x254], 0
xorps xmm0, xmm0
unpcklps xmm0, xmm1
movsd qword [rsp + 0x264], xmm0
xorps xmm0, xmm0
unpcklps xmm0, xmm1
movsd qword [rsp + 0x26c], xmm0
mov qword [rsp + 0x278], rbx
and dword [rsp + 0x280], 0
mov dword [rsp + 0x284], 0x7f7fffff
mov dword [rsp + 0x28c], ebx
movss xmm7, dword [0x1403142d8]
mov dword [rsp + 0x290], 0x3f800000
mov ecx, 0xffff
mov word [rsp + 0x294], cx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x296], xmm0
movups xmmword [rsp + 0x2a6], xmm0
mov qword [rsp + 0x2b6], rax
mov qword [rsp + 0x2c0], rbx
mov qword [rsi + 0x20], rbx
mov qword [rsi + 0x28], rbx
mov byte [rsp + 0x288], dil
mov byte [rsp + 0x260], dil
mov eax, 3
mov dword [rsp + 0x258], eax
mov dword [rsp + 0x25c], eax
mov qword [rsp + 0x1b0], rbx
mov dword [rsp + 0x1b8], ebx
mov dword [rsp + 0x1c0], ebx
and dword [rsp + 0x1c4], 0
mov dword [rsp + 0x1c8], eax
mov dword [rsp + 0x1cc], edi
mov byte [rsp + 0x1d0], bl
unpcklps xmm0, xmm1
movsd qword [rsp + 0x1d4], xmm0
xorps xmm0, xmm0
unpcklps xmm0, xmm1
movsd qword [rsp + 0x1dc], xmm0
mov qword [rsp + 0x1e8], rbx
and dword [rsp + 0x1f0], 0
mov dword [rsp + 0x1f4], 0x7f7fffff
mov byte [rsp + 0x1f8], bl
mov dword [rsp + 0x1fc], ebx
mov dword [rsp + 0x200], 0x3f800000
mov word [rsp + 0x204], cx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x206], xmm0
movups xmmword [rsp + 0x216], xmm0
mov qword [rsp + 0x226], rax
mov qword [rsp + 0x230], rbx
mov byte [rsp + 0x1bc], bl
mov qword [rsp + 0x28], rbx
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140314340]
mov r8d, 0x225bc
lea rdx, [0x1402ee810]
mov rcx, qword [rsi + 0xa8]
call fcn.140026744
lea rax, [0x140312870]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x240]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140314348]
lea rdx, [0x1402d0170]
mov rcx, qword [rsi + 0xa8]
call fcn.1400268d8
mov qword [0x14037c610], rax
mov rcx, qword [rsi + 0xa8]
call fcn.140026480
lea rax, [0x140310e98]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140314340]
mov r8d, 0xe5510
lea r12, [0x1401eac50]
mov rdx, r12
mov rcx, qword [rsi + 0xa8]
call fcn.140026744
mov qword [0x14037c678], rax
lea rax, [0x140310e98]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14031435c]
mov r8d, 0xe5510
mov rdx, r12
mov rcx, qword [rsi + 0xa8]
call fcn.140026744
mov qword [0x14037c660], rax
lea rax, [0x140310e98]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140314358]
mov r8d, 0xe5510
mov rdx, r12
mov rcx, qword [rsi + 0xa8]
call fcn.140026744
mov qword [0x14037c688], rax
lea rax, [0x14037c680]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x58], ebx
or eax, 0xffffffff
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_50
mov r9d, 0x190
mov r8d, 0x4253d
lea rdx, [0x1403361f0]
mov rcx, qword [0x14037c618]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
mov r12, rbx
movsxd rax, dword [0x14037c608]
test rax, rax
je 0x14004634c
movabs r8, 0x7fffffffffffffff
movups xmm0, xmmword [0x1403129a0]
movups xmmword [rsp + 0x350], xmm0
mov eax, dword [0x1403129b0]
mov dword [rsp + 0x360], eax
movzx eax, word [0x1403129b4]
mov word [rsp + 0x364], ax
cmp byte [0x1403129b5], bl
je 0x140045fbf
mov r8d, ebx
lea r9, [rsp + 0x350]
mov eax, 0x24924925
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x16
jl 0x140045f85
movabs r8, 0x7fffffffffffffff
lea rax, [rsp + 0x350]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], bl
jne 0x140045fcb
mov rdx, qword [r13 + 0x10]
mov rax, r8
sub rax, rdx
cmp rax, rcx
jb 0x140046c8b
mov rax, r13
cmp qword [r13 + 0x18], r14
jb 0x140045ff3
mov rax, qword [r13]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x350]
lea rcx, [rsp + 0xb0]
call fcn.1400528e8
nop
lea rcx, [rsp + 0xb0]
call fcn.14003c170
mov rsi, qword [0x14037c618]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rcx
mov rdx, rax
lea rcx, [rsp + 0x350]
call fcn.14003c7d0
nop
mov rdx, qword [rsp + 0x350]
mov r8, qword [rsp + 0x358]
cmp rdx, r8
jne 0x14004609a
cmp byte [0x14037c5fa], bl
je 0x14004609a
lea rdx, str.fucking
lea rcx, [0x14037a7c0]
call fcn.14004d1b4
mov rcx, rax
call fcn.14004d40c
mov r8, qword [rsp + 0x358]
mov rdx, qword [rsp + 0x350]
mov qword [rsp + 0x2f8], rbx
sub r8, rdx
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x58], ebx
or eax, 0xffffffff
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, eax
mov rcx, rsi
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
test eax, eax
jns 0x140046132
mov rcx, qword [rsp + 0x350]
test rcx, rcx
je 0x14004612d
mov rdx, qword [rsp + 0x360]
sub rdx, rcx
mov rax, rcx
cmp rdx, r15
jb 0x140046128
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c73
call fcn.140060840
mov rsi, rbx
jmp 0x140046178
mov rsi, qword [rsp + 0x2f8]
mov rcx, qword [rsp + 0x350]
test rcx, rcx
je 0x140046178
mov rdx, qword [rsp + 0x360]
sub rdx, rcx
mov rax, rcx
cmp rdx, r15
jb 0x140046173
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c73
call fcn.140060840
lea rax, [0x140000000]
mov qword [rax + r12*8 + 0x37c690], rsi
mov rdx, qword [rsp + 0xc8]
cmp rdx, r14
jb 0x1400461c5
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, r15
jb 0x1400461c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c79
call fcn.140060840
movups xmm0, xmmword [0x1403129a0]
movups xmmword [rsp + 0x350], xmm0
mov eax, dword [0x1403129b0]
mov dword [rsp + 0x360], eax
movzx eax, word [0x1403129b4]
mov word [rsp + 0x364], ax
cmp byte [0x1403129b5], bl
je 0x140046233
mov r8d, ebx
lea r9, [rsp + 0x350]
mov eax, 0x24924925
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x38
mov al, r8b
sub al, cl
add al, 0x35
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x16
jl 0x140046203
lea rax, [rsp + 0x350]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], bl
jne 0x14004623f
mov rdx, qword [r13 + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, rcx
jb 0x140046c85
mov rax, r13
cmp qword [r13 + 0x18], r14
jb 0x14004626e
mov rax, qword [r13]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x350]
lea rcx, [rsp + 0xb0]
call fcn.1400528e8
nop
lea rdx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], r14
cmovae rdx, qword [rsp + 0xb0]
mov r8, qword [rsp + 0xc0]
lea rcx, [0x14037a7c0]
call fcn.14005550c
lea rdx, [0x140311028]
mov rcx, rax
call fcn.14004d1b4
mov rcx, rax
lea rax, [0x140000000]
mov rdx, qword [rax + r12*8 + 0x37c690]
call fcn.140048754
mov rcx, rax
call fcn.14004d40c
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, r14
jb 0x14004632d
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, r15
jb 0x140046328
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c7f
call fcn.140060840
add r12, rdi
add r13, 0x20
movsxd rax, dword [0x14037c608]
cmp r12, rax
jb 0x140045f3d
mov rsi, qword [rsp + 0x370]
mov rax, qword [0x14037c600]
test dword [rsi + 8], 0x400
je 0x14004636c
mov dword [rax + 0x164c], ebx
mov dword [rax + 0x1728], 0x3f800000
xor ecx, ecx
call fcn.1400228d4
mov r12, qword [0x14037c668]
lea rcx, [0x14037f490]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140046493
lea rcx, [0x14037f488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140046493
mov r13, qword [0x14037c600]
lea rsi, [r13 + 8]
or dword [rsi + 4], 0xc06
lea rax, str.imgui_impl_win32
mov qword [rsi + 0xd8], rax
mov qword [0x14037f480], r12
mov rax, qword [r13 + 0x1d40]
mov rcx, qword [rax]
mov qword [rcx + 0x58], r12
mov qword [rcx + 0x50], r12
test dword [rsi], 0x400
je 0x1400463f1
call fcn.14002d28c
mov r13, qword [0x14037c600]
mov dword [rsi + 0x34], 9
mov dword [rsi + 0x38], Ordinal_41
mov dword [rsi + 0x3c], Ordinal_41
mov dword [rsi + 0x40], Ordinal_41
mov dword [rsi + 0x44], Ordinal_41
mov dword [rsi + 0x48], reloc.WLDAP32.dll_Ordinal_33
mov dword [rsi + 0x4c], Ordinal_35
mov dword [rsi + 0x50], Ordinal_41
mov dword [rsi + 0x54], reloc.WLDAP32.dll_Ordinal_35
mov dword [rsi + 0x58], reloc.WLDAP32.dll_Ordinal_45
mov dword [rsi + 0x5c], reloc.WLDAP32.dll_Ordinal_46
mov dword [rsi + 0x60], 8
mov dword [rsi + 0x64], reloc.WLDAP32.dll_Ordinal_32
mov eax, reloc.WS2_32.dll_listen
mov dword [rsi + 0x68], eax
mov dword [rsi + 0x6c], reloc.WLDAP32.dll_Ordinal_27
mov dword [rsi + 0x70], eax
mov dword [rsi + 0x74], 0x41
mov dword [rsi + 0x78], 0x43
mov dword [rsi + 0x7c], 0x56
mov dword [rsi + 0x80], 0x58
mov dword [rsi + 0x84], 0x59
mov dword [rsi + 0x88], 0x5a
jmp 0x14004649a
mov r13, qword [0x14037c600]
mov rcx, qword [0x14037c618]
lea rax, str.imgui_impl_dx9
mov qword [r13 + 0xe8], rax
or dword [r13 + 0xc], 0x1008
mov qword [0x14037f470], rcx
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
test dword [r13 + 8], 0x400
je 0x14004651b
mov rax, qword [0x14037c600]
lea rcx, [fcn.14002b974]
mov qword [rax + 0x15f0], rcx
lea rcx, [fcn.14002ba4c]
mov qword [rax + 0x15f8], rcx
lea rcx, [0x14002bab0]
mov qword [rax + 0x1600], rcx
lea rcx, [0x14002bb00]
mov qword [rax + 0x1608], rcx
lea rcx, [0x14002bc40]
mov qword [rax + 0x1610], rcx
mov edx, recv
lea rcx, [rsp + 0x350]
call fcn.14003cf04
nop
mov rcx, rax
call fcn.14003c170
mov rsi, rax
mov qword [rsp + 0x2f8], rax
mov rdx, qword [rsp + 0x368]
cmp rdx, r14
jb 0x14004657f
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r15
jb 0x14004657a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c91
call fcn.140060840
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x350], bl
xorps xmm0, xmm0
movups xmmword [rsp + 0x3d0], xmm0
movups xmmword [rsp + 0x3e0], xmm0
movups xmmword [rsp + 0x3f0], xmm0
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400465f4
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x1400468e3
cmp qword [0x14037f460], rbx
jne 0x140046602
call fcn.14002b834
call fcn.14002c250
call fcn.140006330
call fcn.140044228
mov cl, byte [0x14037c5f9]
mov rax, qword [0x14037c600]
test cl, cl
jne 0x140046643
or dword [rax + 0x1c40], 2
mov dword [rax + 0x1c64], 0x440a4000
mov dword [rax + 0x1c68], 0x43bb0000
mov dword [rax + 0x1c48], edi
cmp cl, dil
jne 0x140046669
or dword [rax + 0x1c40], 2
mov dword [rax + 0x1c64], 0x443c0000
mov dword [rax + 0x1c68], 0x440b4000
mov dword [rax + 0x1c48], edi
mov dword [rsp + 0x120], 0x3f000000
mov dword [rsp + 0x124], 0x3f000000
lea rdx, [rsp + 0x120]
mov ecx, 5
call fcn.140003544
xor edx, edx
mov r8d, Ordinal_301
mov rcx, rsi
call fcn.14000bcf4
call fcn.140040348
call fcn.14000e180
mov ecx, edi
call fcn.1400035d0
cmp byte [0x14037c5fc], dil
jne 0x1400466c0
call fcn.14003c8ec
cmp byte [0x14037c5fb], dil
jne 0x1400466ce
call fcn.14003ccac
call fcn.14000819c
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
mov dword [rsp + 0x30], ebx
movss dword [rsp + 0x28], xmm7
mov dword [rsp + 0x20], ebx
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14004674c
call fcn.1400085c4
mov rax, qword [0x14037c600]
mov rcx, qword [rax + 0x1d40]
mov rdx, qword [rcx]
add rdx, 0xb0
mov al, byte [rdx]
neg al
sbb rcx, rcx
and rcx, rdx
call fcn.14002b104
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rax, qword [rsp + 0x370]
test dword [rax + 8], 0x400
je 0x14004688a
call fcn.140015670
mov rsi, qword [0x14037c600]
mov edx, edi
mov dword [rsp + 0x80], edx
mov eax, dword [rsi + 0x1630]
lea r12, [rsi + 0x1638]
cmp eax, edi
jle 0x140046806
mov ecx, 8
mov qword [rsp + 0x88], rcx
mov rax, qword [r12]
mov r13, qword [rcx + rax]
test byte [r13 + 4], 0x80
jne 0x1400467e7
mov rax, qword [rsi + 0x15c0]
test rax, rax
je 0x1400467c5
xor edx, edx
mov rcx, r13
call rax
mov rcx, qword [rsp + 0x88]
mov edx, dword [rsp + 0x80]
mov rax, qword [rsi + 0x1608]
test rax, rax
je 0x1400467e7
xor edx, edx
mov rcx, r13
call rax
mov rcx, qword [rsp + 0x88]
mov edx, dword [rsp + 0x80]
add edx, edi
mov dword [rsp + 0x80], edx
add rcx, 8
mov qword [rsp + 0x88], rcx
mov eax, dword [rsi + 0x1630]
cmp edx, eax
jl 0x140046794
mov ecx, edi
mov dword [rsp + 0x80], ecx
cmp eax, edi
jle 0x140046882
mov r13d, 8
mov rax, qword [r12]
mov rax, qword [rax + r13]
mov qword [rsp + 0x88], rax
test byte [rax + 4], 0x80
jne 0x14004686d
mov r8, qword [rsi + 0x15c8]
test r8, r8
je 0x140046852
xor edx, edx
mov rcx, rax
call r8
mov rax, qword [rsp + 0x88]
mov ecx, dword [rsp + 0x80]
mov r8, qword [rsi + 0x1610]
test r8, r8
je 0x14004686d
xor edx, edx
mov rcx, rax
call r8
mov ecx, dword [rsp + 0x80]
add ecx, edi
mov dword [rsp + 0x80], ecx
add r13, 8
cmp ecx, dword [rsi + 0x1630]
jl 0x140046819
mov rsi, qword [rsp + 0x2f8]
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1400468e3
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x1400468e3
call fcn.14002b8a8
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
lea rdx, [0x14037c620]
call qword [rax + 0x80]
call fcn.14002b834
cmp dword [rsp + 0x3d8], 0x12
jne 0x1400465b5
call fcn.140015bfc
call fcn.14002b8a8
mov rcx, qword [0x14037f470]
test rcx, rcx
je 0x140046914
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14037f470], rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov qword [0x14037f480], rbx
mov rdi, qword [0x14037c600]
mov rcx, rdi
call fcn.140007380
cmp qword [0x14037c600], rdi
jne 0x140046952
mov qword [0x14037c600], rbx
test rdi, rdi
je 0x140046979
mov rcx, rdi
call fcn.14001cf98
mov rax, qword [0x14037c600]
test rax, rax
je 0x140046971
dec dword [rax + 0x3b0]
mov rcx, rdi
call fcn.14014c880
mov rcx, qword [0x14037c618]
test rcx, rcx
je 0x140046992
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14037c618], rbx
mov rcx, qword [0x14037c670]
test rcx, rcx
je 0x1400469ab
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14037c670], rbx
mov rcx, qword [0x14037c668]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0x318]
mov rcx, qword [rsp + 0x340]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, r14
jb 0x140046a0d
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, r15
jb 0x140046a08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c97
call fcn.140060840
mov qword [rsp + 0x3a0], rbx
mov qword [rsp + 0x3a8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x390], bl
mov rdx, qword [rsp + 0x3c8]
cmp rdx, r14
jb 0x140046a66
inc rdx
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, r15
jb 0x140046a61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c9d
call fcn.140060840
xor eax, eax
mov rcx, qword [rsp + 0x470]
xor rcx, rsp
call fcn.140060670
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov rsi, qword [0x14037c670]
mov rcx, qword [0x14037c618]
test rcx, rcx
je 0x140046ac6
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14037c618], rbx
mov rsi, qword [0x14037c670]
test rsi, rsi
je 0x140046adb
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14037c670], rbx
mov rdx, qword [rsp + 0x318]
mov rcx, qword [rsp + 0x340]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, r14
jb 0x140046b30
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, r15
jb 0x140046b2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c97
call fcn.140060840
mov qword [rsp + 0x3a0], rbx
mov qword [rsp + 0x3a8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x390], bl
mov rdx, qword [rsp + 0x3c8]
cmp rdx, r14
jb 0x140046bde
inc rdx
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, r15
jb 0x140046b88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046c9d
call fcn.140060840
jmp 0x140046bde
mov eax, edi
jmp 0x140046a68
mov dword [rsp + 0xf8], ebx
mov ecx, 6
call fcn.140062e40
nop
call fcn.140160dc0
int3
call fcn.140160dc0
int3
call fcn.140160dc0
int3
call fcn.140160dc0
nop
lea rcx, [0x140378a40]
call fcn.14003d3f8
mov r8, rax
mov r9d, 0x40010
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, edi
call fcn.140157c50
nop
call fcn.1401657c0
nop
call fcn.1401657c0
int3
call fcn.1401657c0
int3
call fcn.1401657c0
int3
call fcn.1401657c0
int3
call fcn.1401657c0
int3
call fcn.1401657c0
int3
call fcn.1401657c0
int3
call fcn.1401657c0
nop
call fcn.1401657c0
nop
call fcn.1401657c0
nop
call fcn.1401657c0
int3
call fcn.1401657c0
int3
call fcn.1400382c0
int3
call fcn.1400382c0
int3
call fcn.1401657c0
nop
call fcn.1401657c0
nop
call fcn.1401657c0
nop
mov ecx, edi
call fcn.140062e40
nop
mov dword [rsp + 0x138], ebx
mov ecx, 6
call fcn.140062e40
nop
mov ecx, edi
call fcn.140062e40
nop
mov ecx, edi
call fcn.140062e40
nop
mov ecx, edi
call fcn.140062e40
nop
mov ecx, edi
call fcn.140062e40
nop
mov ecx, edi
call fcn.140062e40
int3