Function at 0x140039750
Capabilities:
Encode data using xor
Terminate process

Disassembly:
sub rsp, 0x58
lea rdx, [0x1400fd988]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.d3d9.dll_Direct3DCreate9Ex]
test eax, eax
jns 0x140039776
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov eax, dword [0x1400fda84]
mov r9, qword [0x1400fd980]
mov qword [rsp + 0x60], rbx
xor ebx, ebx
cmp byte [0x1400fd99e], bl
mov dword [0x1400fd9f0], eax
mov eax, dword [0x1400fda80]
mov qword [0x1400fd9fc], rbx
mov qword [0x1400fda08], 1
mov qword [0x1400fda24], rbx
mov dword [0x1400fda18], 1
mov qword [0x1400fda10], r9
mov dword [0x1400fda04], ebx
mov dword [0x1400fd9f8], 0x15
mov dword [0x1400fd9f4], eax
mov dword [0x1400fda1c], 1
mov dword [0x1400fda20], 0x50
mov dword [0x1400fda2c], ebx
je 0x140039802
mov dword [0x1400fda2c], 1
mov rcx, qword [0x1400fd988]
lea rdx, [0x1400fd9e8]
mov qword [rsp + 0x38], rdx
mov r8d, 1
lea rdx, [0x1400fd9f0]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdx
xor edx, edx
mov rax, qword [rcx]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0xa0]
test eax, eax
jns 0x14003985c
mov rcx, qword [0x1400fd988]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x50], rdi
call fcn.140005ef0
mov rdi, qword [0x1400fd980]
lea rcx, [0x1400fddf8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14003995f
lea rcx, [0x1400fddf0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14003995f
mov rcx, qword [0x1400fd900]
lea rax, str.imgui_impl_win32
mov qword [0x1400fdde8], rdi
or dword [rcx + 0xc], 6
mov qword [rcx + 0xd8], rax
mov qword [rcx + 0x108], rdi
mov dword [rcx + 0x3c], 9
mov dword [rcx + 0x40], Ordinal_41
mov dword [rcx + 0x44], Ordinal_41
mov dword [rcx + 0x48], Ordinal_41
mov dword [rcx + 0x4c], Ordinal_46
mov dword [rcx + 0x50], reloc.WLDAP32.dll_Ordinal_33
mov dword [rcx + 0x54], Ordinal_35
mov dword [rcx + 0x58], Ordinal_41
mov dword [rcx + 0x5c], reloc.WLDAP32.dll_Ordinal_35
mov dword [rcx + 0x60], reloc.WLDAP32.dll_Ordinal_45
mov dword [rcx + 0x64], reloc.WLDAP32.dll_Ordinal_46
mov dword [rcx + 0x68], 8
mov dword [rcx + 0x6c], reloc.WLDAP32.dll_Ordinal_32
mov dword [rcx + 0x70], reloc.WS2_32.dll_listen
mov dword [rcx + 0x74], reloc.WLDAP32.dll_Ordinal_27
mov dword [rcx + 0x78], 0x41
mov dword [rcx + 0x7c], 0x43
mov dword [rcx + 0x80], 0x56
mov dword [rcx + 0x84], 0x58
mov dword [rcx + 0x88], 0x59
mov dword [rcx + 0x8c], 0x5a
jmp 0x140039966
mov rcx, qword [0x1400fd900]
cmp byte [reloc.WS2_32.dll_accept], bl
lea rax, str.imgui_impl_dx9
mov rdx, qword [0x1400fd9e8]
mov rdi, qword [rsp + 0x50]
mov qword [rcx + 0xe0], rax
je 0x14003998e
mov byte [reloc.WS2_32.dll_accept], bl
call fcn.14001c7d0
cmp dword [reloc.WS2_32.dll_accept], 2
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
movsd xmm0, qword [str.v_GZBR]
mov r8d, dword [0x1400ea038]
mov rcx, qword [rcx + 0xa0]
mov byte [rsp + 0x4c], al
movsd qword [rsp + 0x40], xmm0
mov dword [rsp + 0x48], r8d
mov qword [0x1400fddd8], rdx
jl 0x140039b2a
movdqa xmm2, xmmword [0x1400ea510]
mov ebx, ntohs
movdqa xmm5, xmmword [0x1400eabc0]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x1400ea530]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movdqa xmm4, xmmword [0x1400ea580]
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.::::]
psubd xmm2, xmm0
movd xmm0, dword [str.v_GZBR]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400ea590]
xorps xmm2, xmm0
movd dword [rsp + 0x40], xmm2
movdqa xmm2, xmmword [0x1400ea520]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmmword [str.::::]
psubd xmm2, xmm0
punpckldq xmm1, xmm3
movd xmm0, dword [rsp + 0x44]
andps xmm2, xmm4
packuswb xmm2, xmm2
pmuldq xmm1, xmm5
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400ea590]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [rsp + 0x44], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.::::]
psubd xmm3, xmm0
movd xmm0, r8d
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x1400ea590]
xorps xmm3, xmm0
movd dword [rsp + 0x48], xmm3
mov eax, ebx
lea r8, [rsp + 0x40]
add r8, rax
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x8d3dcb09
lea r8, [r8 + 1]
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3a
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0xd
jl 0x140039b40
movss xmm2, dword [0x1400ea3a4]
lea rdx, [rsp + 0x40]
call fcn.140020d20
mov rcx, qword [0x1400fd988]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rbx, qword [rsp + 0x60]
xor eax, eax
add rsp, 0x58
ret