Function at 0x1400660e0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2210
call fcn.140120a60
sub rsp, rax
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], r13
mov qword [rsp + 0x158], r13
mov rdx, qword [rdx]
lea rcx, [rsp + 0x140]
call fcn.14005cbe0
nop
lea rdi, [rsp + 0x140]
mov r15, qword [rsp + 0x140]
mov r12, qword [rsp + 0x158]
cmp r12, 0xf
cmova rdi, r15
mov rbx, qword [rsp + 0x150]
cmp rbx, 1
jb 0x1400661ae
lea rsi, [rdi + rbx]
mov r8, rbx
lea edx, [r13 + 0x7b]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
mov rcx, rax
test rax, rax
je 0x1400661ae
nop word [rax + rax]
cmp byte [rcx], 0x7b
jne 0x14006618a
mov eax, r13d
jmp 0x14006618f
sbb eax, eax
or eax, 1
test eax, eax
je 0x1400661e4
inc rcx
mov r8, rsi
sub r8, rcx
mov edx, 0x7b
call sub.VCRUNTIME140.dll_memchr
mov rcx, rax
test rax, rax
jne 0x140066180
mov r14, 0xffffffffffffffff
mov rcx, r14
cmp rcx, 0xffffffffffffffff
je 0x140067712
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x170], xmm1
cmp rbx, rcx
jb 0x140067782
jmp 0x1400661f0
sub rcx, rdi
mov r14, 0xffffffffffffffff
jmp 0x1400661b8
sub rbx, rcx
mov r8, r14
cmp rbx, 0xffffffffffffffff
cmovb r8, rbx
lea rdx, [rsp + 0x140]
cmp r12, 0xf
cmova rdx, r15
add rdx, rcx
lea rcx, [rsp + 0x160]
call fcn.14005cbe0
nop
mov qword [rsp + 0x128], r13
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0xe0]
call fcn.14009dd30
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 4
mov qword [rsp + 0x58], recvfrom
mov dword [rsp + 0x40], 0x65707954
mov byte [rsp + 0x44], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe0]
call fcn.1400a3e20
lea rdx, [rsp + 0xa0]
mov rcx, rax
call fcn.14009e0d0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401641d0]
movdqu xmmword [rsp + 0x50], xmm1
movabs rax, 0x72656d6165726353
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x48], 0
mov r8, qword [rsp + 0xb0]
cmp r8, 8
je 0x1400662ce
xor bl, bl
jmp 0x140066348
lea r15, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova r15, qword [rsp + 0xa0]
add r15, r8
lea rsi, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova rsi, qword [rsp + 0xa0]
mov rax, r15
sub rax, rsi
cmp rax, 8
je 0x140066315
xor bl, bl
jmp 0x140066348
cmp rsi, r15
je 0x140066346
lea r12, [rsp + 0x40]
sub r12, rsi
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x1400662c7
inc rsi
cmp rsi, r15
jne 0x140066322
mov bl, 1
lea rcx, [rsp + 0x40]
call fcn.1400588f0
test bl, bl
je 0x1400665af
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], recvfrom
mov qword [rsp + 0x58], recvfrom
movsd xmm0, qword [str.ScreamerName]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140160638]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe0]
call fcn.1400a3e20
lea rdx, [rsp + 0xf0]
mov rcx, rax
call fcn.14009e0d0
nop
mov edi, r13d
movabs rsi, 0x4924924924924925
mov rcx, qword [0x14021c908]
mov r8, qword [0x14021c900]
sub rcx, r8
mov rax, rsi
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, edi
cmp rax, rdx
jae 0x1400665a2
imul rbx, rax, 0x70
lea rcx, [r8 + 0x30]
add rcx, rbx
lea rdx, [rsp + 0xf0]
call fcn.140064460
test al, al
je 0x14006659b
mov rdx, qword [0x14021c900]
add rdx, rbx
lea rcx, [rsp + 0x180]
call fcn.140070780
nop
mov qword [rsp + 0x40], 0xffffffffffffffff
mov qword [rsp + 0x48], 0xffffffffffffffff
mov qword [rsp + 0x50], 0xffffffffffffffff
mov qword [rsp + 0x58], 0xffffffffffffffff
mov dword [rsp + 0x60], 0xffffffff
mov qword [rsp + 0x64], 0xfffffffffffffffd
mov dword [rsp + 0x6c], 0xffffffff
mov qword [rsp + 0x70], r13
mov rbx, r13
mov rax, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d0]
sub rax, rcx
sar rax, 3
test rax, rax
je 0x1400664e2
nop dword [rax + rax]
mov rax, qword [rcx + rbx*8]
lea rcx, [rax + 0x18]
mov rdx, qword [rax]
mov r8, qword [rax + 8]
sub r8, rdx
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x40]
mov rcx, qword [0x14021ca50]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
inc rbx
mov rax, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d0]
sub rax, rcx
sar rax, 3
cmp rbx, rax
jb 0x140066490
mov rax, qword [0x14021c5d8]
cmp rax, qword [0x14021c5e0]
je 0x14006650c
lea rdx, [rsp + 0x180]
mov rcx, rax
call fcn.140070780
add qword [0x14021c5d8], 0x70
jmp 0x140066524
lea r8, [rsp + 0x180]
mov rdx, rax
lea rcx, [0x14021c5d0]
call fcn.1400a82a0
nop
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x140066581
mov rdx, qword [rsp + 0x1e0]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066568
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140066568
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401203e8
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], r13
lea rcx, [rsp + 0x1b0]
call fcn.1400588f0
lea rcx, [rsp + 0x190]
call fcn.1400588f0
inc edi
jmp 0x1400663c1
lea rcx, [rsp + 0xf0]
call fcn.1400588f0
movdqa xmm0, xmmword [0x140164240]
movdqu xmmword [rsp + 0x50], xmm0
movsd xmm0, qword [str.NewNotification]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140160648]
mov dword [rsp + 0x48], eax
movzx eax, word [0x14016064c]
mov word [rsp + 0x4c], ax
movzx eax, byte [0x14016064e]
mov byte [rsp + 0x4e], al
mov byte [rsp + 0x4f], 0
cmp qword [rsp + 0xb0], 0xf
je 0x140066603
xor bl, bl
jmp 0x140066686
lea r15, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova r15, qword [rsp + 0xa0]
add r15, qword [rsp + 0xb0]
lea rsi, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova rsi, qword [rsp + 0xa0]
mov rax, r15
sub rax, rsi
cmp rax, 0xf
je 0x14006664f
xor bl, bl
jmp 0x140066686
cmp rsi, r15
je 0x140066684
lea r12, [rsp + 0x40]
sub r12, rsi
nop dword [rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x1400665fc
inc rsi
cmp rsi, r15
jne 0x140066660
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400666c6
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400666c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400666c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401203e8
test bl, bl
je 0x140066d9c
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov ecx, 0x20
call fcn.14012009c
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], reloc.WS2_32.dll_recv
mov qword [rsp + 0x58], 0x1f
movups xmm0, xmmword [str.NotificationType]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe0]
call fcn.1400a3e20
lea rdx, [rsp + 0x80]
mov rcx, rax
call fcn.14009e0d0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 4
mov qword [rsp + 0x58], recvfrom
mov dword [rsp + 0x40], 0x74786554
mov byte [rsp + 0x44], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe0]
call fcn.1400a3e20
lea rdx, [rsp + 0xf0]
mov rcx, rax
call fcn.14009e0d0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x140164210]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Type_Success]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140160670]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], 0
cmp qword [rsp + 0x90], 0xc
je 0x1400667c1
xor bl, bl
jmp 0x14006684a
lea r15, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova r15, qword [rsp + 0x80]
add r15, qword [rsp + 0x90]
lea rsi, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova rsi, qword [rsp + 0x80]
mov rax, r15
sub rax, rsi
cmp rax, 0xc
je 0x14006680d
xor bl, bl
jmp 0x14006684a
cmp rsi, r15
je 0x140066848
lea r12, [rsp + 0x40]
sub r12, rsi
nop word [rax + rax]
movzx edi, byte [rsi + r12]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x1400667ba
inc rsi
cmp rsi, r15
jne 0x140066820
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14006688a
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066885
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140066885
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401203e8
test bl, bl
je 0x140066898
mov eax, 1
jmp 0x140066d0e
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x140164210]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Type_Warning]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140160680]
mov dword [rsp + 0x48], eax
mov byte [rsp + 0x4c], 0
cmp qword [rsp + 0x90], 0xc
je 0x1400668dd
xor bl, bl
jmp 0x14006696a
lea r15, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova r15, qword [rsp + 0x80]
add r15, qword [rsp + 0x90]
lea rsi, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova rsi, qword [rsp + 0x80]
mov rax, r15
sub rax, rsi
cmp rax, 0xc
je 0x140066929
xor bl, bl
jmp 0x14006696a
cmp rsi, r15
je 0x140066968
lea r12, [rsp + 0x40]
sub r12, rsi
nop word [rax + rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x1400668d6
inc rsi
cmp rsi, r15
jne 0x140066940
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400669aa
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400669a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400669a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401203e8
test bl, bl
je 0x1400669b8
mov eax, 2
jmp 0x140066d0e
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401641f0]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Type_Error]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140160690]
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], 0
cmp qword [rsp + 0x90], 0xa
je 0x140066aa4
lea rcx, [rsp + 0x40]
call fcn.1400588f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htons]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Type_Info]
movsd qword [rsp + 0x40], xmm0
movzx eax, byte [reloc.WS2_32.dll_WSAGetLastError]
mov byte [rsp + 0x48], al
mov byte [rsp + 0x49], 0
mov r8, qword [rsp + 0x90]
cmp r8, 9
je 0x140066b42
lea rcx, [rsp + 0x40]
call fcn.1400588f0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401641f0]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.Type_Saved]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x1401606b0]
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], 0
mov r8, qword [rsp + 0x90]
cmp r8, 0xa
je 0x140066be2
xor bl, bl
jmp 0x140066c6a
lea r15, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova r15, qword [rsp + 0x80]
add r15, qword [rsp + 0x90]
lea rsi, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova rsi, qword [rsp + 0x80]
mov rax, r15
sub rax, rsi
cmp rax, 0xa
je 0x140066af0
xor bl, bl
jmp 0x140066b26
cmp rsi, r15
je 0x140066b24
lea r12, [rsp + 0x40]
sub r12, rsi
nop dword [rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140066aec
inc rsi
cmp rsi, r15
jne 0x140066b00
mov bl, 1
lea rcx, [rsp + 0x40]
call fcn.1400588f0
test bl, bl
je 0x140066a06
mov eax, 3
jmp 0x140066d0e
lea r15, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova r15, qword [rsp + 0x80]
add r15, r8
lea rsi, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova rsi, qword [rsp + 0x80]
mov rax, r15
sub rax, rsi
cmp rax, 9
je 0x140066b89
xor bl, bl
jmp 0x140066bc6
cmp rsi, r15
je 0x140066bc4
lea r12, [rsp + 0x40]
sub r12, rsi
nop word [rax + rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140066b85
inc rsi
cmp rsi, r15
jne 0x140066ba0
mov bl, 1
lea rcx, [rsp + 0x40]
call fcn.1400588f0
test bl, bl
je 0x140066a56
mov eax, 4
jmp 0x140066d0e
lea r15, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova r15, qword [rsp + 0x80]
add r15, r8
lea rsi, [rsp + 0x80]
cmp qword [rsp + 0x98], 0xf
cmova rsi, qword [rsp + 0x80]
mov rax, r15
sub rax, rsi
cmp rax, 0xa
je 0x140066c29
xor bl, bl
jmp 0x140066c6a
cmp rsi, r15
je 0x140066c68
lea r12, [rsp + 0x40]
sub r12, rsi
nop word [rax + rax]
movzx edi, byte [rsi + r12]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140066a9d
inc rsi
cmp rsi, r15
jne 0x140066c40
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140066cc0
inc rdx
mov qword [rsp + 0x2250], rdx
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x2268], rcx
cmp rdx, 0x1000
jb 0x140066cbb
lea rdx, [rsp + 0x2250]
lea rcx, [rsp + 0x2268]
call fcn.14000c640
mov rdx, qword [rsp + 0x2250]
mov rcx, qword [rsp + 0x2268]
call fcn.1401203e8
test bl, bl
je 0x140066ccb
mov eax, 5
jmp 0x140066d0e
lea rdx, str.Type_Config
lea rcx, [rsp + 0x40]
call fcn.1400588b0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x80]
call fcn.140064460
movzx ebx, al
lea rcx, [rsp + 0x40]
call fcn.1400588f0
mov ecx, dword [rsp + 0x2258]
mov eax, 6
test bl, bl
cmovne ecx, eax
mov eax, ecx
lea r9, [rsp + 0xf0]
cmp qword [rsp + 0x108], 0xf
cmova r9, qword [rsp + 0xf0]
mov r8d, 0x7d0
mov edx, eax
lea rcx, [rsp + 0x1f0]
call fcn.1400603b0
mov rax, qword [0x14021d9f8]
cmp rax, qword [0x14021da00]
je 0x140066d70
mov r8d, 0x2010
lea rdx, [rsp + 0x1f0]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x14021d9f8], 0x2010
jmp 0x140066d81
lea r8, [rsp + 0x1f0]
mov rdx, rax
call fcn.1400a8db0
nop
lea rcx, [rsp + 0xf0]
call fcn.1400588f0
nop
lea rcx, [rsp + 0x80]
call fcn.1400588f0
movdqa xmm0, xmmword [0x140164150]
movdqu xmmword [rsp + 0x48], xmm0
mov ecx, recvfrom
mov qword [rsp + 0x58], rcx
mov rax, qword [str.FakeBan]
mov dword [rsp + 0x40], eax
movzx eax, word [0x1401606cc]
mov word [rsp + 0x44], ax
movzx eax, byte [0x1401606ce]
mov byte [rsp + 0x46], al
mov byte [rsp + 0x47], 0
mov r9, qword [rsp + 0xb0]
cmp r9, 7
jne 0x140066e69
lea r15, [rsp + 0xa0]
cmp qword [rsp + 0xb8], rcx
cmova r15, qword [rsp + 0xa0]
add r15, r9
lea rsi, [rsp + 0xa0]
cmp qword [rsp + 0xb8], rcx
cmova rsi, qword [rsp + 0xa0]
mov rax, r15
sub rax, rsi
cmp rax, r9
jne 0x140066e69
cmp rsi, r15
je 0x140066e69
lea r12, [rsp + 0x40]
sub r12, rsi
nop word [rax + rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140066e64
inc rsi
cmp rsi, r15
jne 0x140066e40
mov rcx, qword [rsp + 0x58]
cmp rcx, 0xf
jbe 0x140066ea5
lea rdx, [rcx + 1]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066ea0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140066ea0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401203e8
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htons]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.PlaySound]
movsd qword [rsp + 0x40], xmm0
movzx eax, byte [0x1401606d8]
mov byte [rsp + 0x48], al
mov byte [rsp + 0x49], 0
cmp qword [rsp + 0xb0], 9
je 0x140066eeb
xor bl, bl
jmp 0x140066f7a
lea rcx, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova rcx, qword [rsp + 0xa0]
mov r15, qword [rsp + 0xb0]
add r15, rcx
lea rsi, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova rsi, qword [rsp + 0xa0]
mov rax, r15
sub rax, rsi
cmp rax, 9
je 0x140066f3a
xor bl, bl
jmp 0x140066f7a
cmp rsi, r15
je 0x140066f78
lea r12, [rsp + 0x40]
sub r12, rsi
nop word [rax + rax]
movzx edi, byte [r12 + rsi]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x140066ee4
inc rsi
cmp rsi, r15
jne 0x140066f50
mov bl, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140066fba
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140066fb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140066fb5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401203e8
test bl, bl
je 0x1400675e3
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 5
mov qword [rsp + 0x58], recvfrom
mov eax, dword [str.Index]
mov dword [rsp + 0x40], eax
movzx eax, byte [0x1401606e0]
mov byte [rsp + 0x44], al
mov byte [rsp + 0x45], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xe0]
call fcn.1400a3e20
mov rcx, rax
call fcn.14009dfe0
test rax, rax
jne 0x1400672f3
call fcn.14011f824
lea r15, [0x1401606e8]
mov qword [rsp + 0xc0], r15
mov qword [rsp + 0xc8], 0x20
lea r8, [rsp + 0xc0]
mov edx, eax
lea rcx, [rsp + 0xf0]
call fcn.1400612a0
nop
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0xc0]
call fcn.140061ce0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x130], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x40], ecx
lea rax, [0x14021ae70]
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
mov eax, dword [rsp + 0x130]
test eax, eax
je 0x1400671d6
cmp eax, 1
sete bl
lea rcx, [rsp + 0xf0]
call fcn.14009b820
test bl, bl
je 0x1400675ce
movups xmm0, xmmword [0x14015cbe8]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14015cbf8]
movups xmmword [rsp + 0x50], xmm1
mov eax, dword [0x14015cc08]
mov dword [rsp + 0x60], eax
movzx eax, word [0x14015cc0c]
mov word [rsp + 0x64], ax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400677c0
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], r13
lea rax, [rsp + 0x40]
nop dword [rax + rax]
inc r14
cmp byte [rax + r14], 0
jne 0x140067120
mov r8, r14
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xf0]
call fcn.14005cbe0
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0xc0]
call fcn.14006feb0
nop
lea rsi, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0xf
cmova rsi, qword [rsp + 0xc0]
add rsi, qword [rsp + 0xd0]
lea rbx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0xf
cmova rbx, qword [rsp + 0xc0]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov rdi, r13
mov qword [rsp + 0x50], r13
sub rsi, rbx
je 0x1400671e5
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.1400a3c20
mov r8, rsi
mov rdx, rbx
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
add rsi, rbx
mov qword [rsp + 0x48], rsi
mov rdi, qword [rsp + 0x50]
jmp 0x1400671ef
mov bl, 1
test ecx, ecx
jne 0x140067788
jmp 0x1400670a6
mov rsi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov r8d, 0x22
mov rdx, r15
lea rcx, [rsp + 0x1f0]
call fcn.140095fc0
nop
sub rsi, rbx
mov r8, rsi
mov rdx, rbx
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x1f8]
call fcn.14009b120
test rax, rax
jne 0x140067254
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x1f0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ec], edx
lea rcx, [rsp + 0x1f8]
call fcn.1400978a0
lea rcx, [rsp + 0x200]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x298]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
test rbx, rbx
je 0x1400672ee
sub rdi, rbx
mov rax, rbx
cmp rdi, 0x1000
jb 0x1400672e2
add rdi, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400672e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rdi
mov rcx, rbx
call fcn.1401203e8
nop
jmp 0x1400675c1
cmp rax, 1
jne 0x1400675e3
call fcn.14011f824
lea r15, [0x1401606e8]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 0x20
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0xf0]
call fcn.1400612a0
nop
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0xc0]
call fcn.140061ce0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x130], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x40], ecx
lea rax, [0x14021ae70]
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
mov eax, dword [rsp + 0x130]
test eax, eax
je 0x1400674a9
cmp eax, 1
sete bl
lea rcx, [rsp + 0xf0]
call fcn.14009b820
test bl, bl
je 0x1400675ce
movups xmm0, xmmword [0x14015cbe8]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [0x14015cbf8]
movups xmmword [rsp + 0x50], xmm1
mov eax, dword [0x14015cc08]
mov dword [rsp + 0x60], eax
movzx eax, word [0x14015cc0c]
mov word [rsp + 0x64], ax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.1400677c0
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], r13
mov qword [rsp + 0x108], r13
lea rax, [rsp + 0x40]
inc r14
cmp byte [rax + r14], 0
jne 0x1400673f3
mov r8, r14
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xf0]
call fcn.14005cbe0
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0xc0]
call fcn.14006feb0
nop
lea rsi, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0xf
cmova rsi, qword [rsp + 0xc0]
add rsi, qword [rsp + 0xd0]
lea rbx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0xf
cmova rbx, qword [rsp + 0xc0]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov rdi, r13
mov qword [rsp + 0x50], r13
sub rsi, rbx
je 0x1400674b8
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.1400a3c20
mov r8, rsi
mov rdx, rbx
mov rbx, qword [rsp + 0x40]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
add rsi, rbx
mov qword [rsp + 0x48], rsi
mov rdi, qword [rsp + 0x50]
jmp 0x1400674c2
mov bl, 1
test ecx, ecx
jne 0x1400677a2
jmp 0x140067381
mov rsi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
mov r8d, 0x22
mov rdx, r15
lea rcx, [rsp + 0x1f0]
call fcn.140095fc0
nop
sub rsi, rbx
mov r8, rsi
mov rdx, rbx
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x1f8]
call fcn.14009b120
test rax, rax
jne 0x140067527
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x1f0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ec], edx
lea rcx, [rsp + 0x1f8]
call fcn.1400978a0
lea rcx, [rsp + 0x200]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x298]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
test rbx, rbx
je 0x1400675c1
sub rdi, rbx
mov rax, rbx
cmp rdi, 0x1000
jb 0x1400675b5
add rdi, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400675b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rdi
mov rcx, rbx
call fcn.1401203e8
nop
lea rcx, [rsp + 0xc0]
call fcn.1400588f0
xor edx, edx
mov r8d, 0x20001
lea rcx, str.C:_ProgramData_ScreamerDelay.wav
call qword [sym.imp.WINMM.dll_PlaySoundW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1401641f0]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.CloseCheat]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140160760]
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], 0
cmp qword [rsp + 0xb0], 0xa
je 0x140067665
lea rcx, [rsp + 0x40]
call fcn.1400588f0
nop
lea rcx, [rsp + 0xa0]
call fcn.1400588f0
nop
lea rcx, [rsp + 0xe0]
call fcn.14009b710
nop
movzx edx, byte [rsp + 0xe0]
lea rcx, [rsp + 0xe8]
call fcn.14009c630
nop
jmp 0x140067704
lea r14, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova r14, qword [rsp + 0xa0]
add r14, qword [rsp + 0xb0]
lea rsi, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0xf
cmova rsi, qword [rsp + 0xa0]
mov rax, r14
sub rax, rsi
cmp rax, 0xa
je 0x1400676b1
xor bl, bl
jmp 0x1400676e6
cmp rsi, r14
je 0x1400676e4
lea r15, [rsp + 0x40]
sub r15, rsi
nop
movzx edi, byte [rsi + r15]
movzx ecx, byte [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ebx, eax
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp bl, al
jne 0x1400676ad
inc rsi
cmp rsi, r14
jne 0x1400676c0
mov bl, 1
lea rcx, [rsp + 0x40]
call fcn.1400588f0
test bl, bl
je 0x14006762e
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
xor r13d, r13d
lea rcx, [rsp + 0x160]
call fcn.1400588f0
nop
lea rcx, [rsp + 0x140]
call fcn.1400588f0
nop
mov rbx, qword [rsp + 0x2258]
mov rcx, qword [rbx]
test rcx, rcx
je 0x140067768
mov rdx, qword [rbx + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140067758
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006777b
mov rcx, r8
call fcn.1401203e8
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
add rsp, 0x2210
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140058b80
nop
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0x40]
lea rcx, str.exists
call fcn.140061c10
nop
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0x40]
lea rcx, str.exists
call fcn.140061c10
int3