Function at 0x140045140
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Execute command
Get kernel32 base address
Read .ini file
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x5e0
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x140322010]
xor rax, rsp
mov qword [rsp + 0x5c0], rax
call qword [sym.imp.KERNEL32.dll_AllocConsole]
movzx eax, word [0x14030cf8c]
mov word [rsp + 0x80], ax
xor ebx, ebx
mov esi, 0x8d3dcb09
mov r15b, 0x35
lea edi, [rbx + 1]
cmp byte [0x14030cf8d], bl
je 0x1400451d0
mov r8d, ebx
lea r9, [rsp + 0x80]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 2
jl 0x1400451ab
mov eax, dword [str.VYYQW]
mov dword [rsp + 0x88], eax
movzx eax, word [0x14030d2e8]
mov word [rsp + 0x8c], ax
mov al, byte [0x14030d2ea]
mov byte [rsp + 0x8e], al
mov r8d, ebx
lea r9, [rsp + 0x88]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 7
jl 0x140045204
xor ecx, ecx
call fcn.140138950
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x88]
call fcn.140153c60
movzx eax, word [0x14030c7d0]
mov word [rsp + 0x80], ax
cmp byte [0x14030c7d1], bl
je 0x14004528f
mov r8d, ebx
lea r9, [rsp + 0x80]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 2
jl 0x14004526a
mov rax, qword [str.VYYWLN]
mov qword [rsp + 0x88], rax
cmp byte [str._sWTeHR], bl
je 0x1400452d6
mov r8d, ebx
lea r9, [rsp + 0x88]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 8
jl 0x1400452b1
mov ecx, edi
call fcn.140138950
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x88]
call fcn.140153c60
movzx eax, word [0x14030c7d0]
mov word [rsp + 0x80], ax
cmp byte [0x14030c7d1], bl
je 0x14004533c
mov r8d, ebx
lea r9, [rsp + 0x80]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 2
jl 0x140045317
mov rax, qword [str.VYYWLN]
mov qword [rsp + 0x88], rax
cmp byte [str._sWTeHR], bl
je 0x140045383
mov r8d, ebx
lea r9, [rsp + 0x88]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 8
jl 0x14004535e
mov ecx, 2
call fcn.140138950
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x88]
call fcn.140153c60
call fcn.140043fa4
mov eax, dword [str.VZD8]
mov dword [rsp + 0x88], eax
cmp byte [0x14030cd17], bl
je 0x1400453ef
mov r8d, ebx
lea r9, [rsp + 0x88]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 4
jl 0x1400453ca
lea rcx, [rsp + 0x88]
call fcn.14015c2b8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
mov ecx, 8
call fcn.140061690
lea rcx, [0x140042fe8]
mov qword [rax], rcx
mov qword [rsp + 0x460], rax
lea rcx, [rsp + 0x178]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14005d1c0]
xor edx, edx
xor ecx, ecx
call fcn.1401547d0
mov qword [rsp + 0x170], rax
test rax, rax
je 0x14004734e
cmp dword [rsp + 0x178], ebx
je 0x140047360
movaps xmm0, xmmword [rsp + 0x170]
movdqa xmmword [rsp + 0x460], xmm0
lea rcx, [rsp + 0x460]
call fcn.140064d90
test eax, eax
jne 0x140047368
lea rdx, [0x1400432b4]
lea rcx, [rsp + 0x210]
call fcn.14004e0f4
mov r14, rax
cmp dword [rax + 8], ebx
je 0x140047370
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x170], xmm0
lea rcx, [rsp + 0x170]
call fcn.140064d90
test eax, eax
jne 0x140047378
xorps xmm0, xmm0
movdqu xmmword [r14], xmm0
cmp dword [rsp + 0x218], ebx
jne 0x140047380
lea rdx, [0x14004351c]
lea rcx, [rsp + 0x220]
call fcn.14004e0f4
mov r14, rax
cmp dword [rax + 8], ebx
je 0x140047386
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x210], xmm0
lea rcx, [rsp + 0x210]
call fcn.140064d90
test eax, eax
jne 0x14004738e
xorps xmm0, xmm0
movdqu xmmword [r14], xmm0
cmp dword [rsp + 0x228], ebx
jne 0x140047396
lea rdx, [0x1400436d8]
lea rcx, [rsp + 0x230]
call fcn.14004e0f4
mov r14, rax
cmp dword [rax + 8], ebx
je 0x14004739c
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x220], xmm0
lea rcx, [rsp + 0x220]
call fcn.140064d90
test eax, eax
jne 0x1400473a4
xorps xmm0, xmm0
movdqu xmmword [r14], xmm0
cmp dword [rsp + 0x238], ebx
jne 0x1400473ac
lea rdx, [0x14004300c]
lea rcx, [rsp + 0x200]
call fcn.14004e0f4
mov r14, rax
cmp dword [rax + 8], ebx
je 0x1400473b2
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x230], xmm0
lea rcx, [rsp + 0x230]
call fcn.140064d90
test eax, eax
jne 0x1400473ba
xorps xmm0, xmm0
movdqu xmmword [r14], xmm0
cmp dword [rsp + 0x208], ebx
jne 0x1400473c2
mov ecx, 8
call fcn.140061690
lea rcx, [0x140043d0c]
mov qword [rax], rcx
mov qword [rsp + 0x460], rax
lea rcx, [rsp + 0x1b8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14005d1c0]
xor edx, edx
xor ecx, ecx
call fcn.1401547d0
mov qword [rsp + 0x1b0], rax
test rax, rax
je 0x14004748b
cmp dword [rsp + 0x1b8], ebx
je 0x1400473c8
movaps xmm0, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x200], xmm0
lea rcx, [rsp + 0x200]
call fcn.140064d90
test eax, eax
jne 0x1400473d0
movsd xmm0, qword [str.cwwkuh]
movsd qword [rsp + 0xe8], xmm0
movzx eax, word [0x14030d1e0]
mov word [rsp + 0xf0], ax
mov al, byte [0x14030d1e2]
mov byte [rsp + 0xf2], al
mov r8d, ebx
lea r9, [rsp + 0xe8]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xb
jl 0x1400456b0
lea rdx, [rsp + 0xe8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x140045742
mov edx, 7
lea rcx, [rsp + 0x240]
call fcn.14003abfc
mov r9, rax
lea rdx, [rsp + 0x260]
call fcn.1400474a0
mov r14, rax
cmp byte [rax + 0x31], bl
je 0x1400473d8
mov r8, rax
mov eax, esi
mul ebx
shr edx, 5
movsx ecx, dl
imul eax, ecx, 0x3a
mov cl, bl
sub cl, al
add cl, r15b
xor byte [r8], cl
add ebx, edi
add r8, rdi
cmp ebx, 0x32
jge 0x1400473d8
jmp 0x14004571b
lea rcx, [rsp + 0x490]
call fcn.14003b458
nop
lea rdx, [0x140335738]
mov r14d, reloc.WS2_32.dll_recv
cmp qword [reloc.WS2_32.dll_ntohs], r14
cmovae rdx, qword [0x140335738]
lea rcx, [rsp + 0x490]
cmp qword [rsp + 0x4a8], r14
cmovae rcx, qword [rsp + 0x490]
mov r8, qword [rsp + 0x4a0]
cmp r8, qword [reloc.WS2_32.dll_closesocket]
jne 0x14004726d
call fcn.140130b70
test eax, eax
jne 0x14004726d
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x140042efc]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14003e11c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14003e134]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14003b1bc
nop
movups xmm0, xmmword [0x14030d218]
movups xmmword [rsp + 0x90], xmm0
movsd xmm1, qword [0x14030d228]
movsd qword [rsp + 0xa0], xmm1
mov eax, dword [0x14030d230]
mov dword [rsp + 0xa8], eax
movzx eax, word [0x14030d234]
mov word [rsp + 0xac], ax
cmp byte [0x14030d235], bl
je 0x140045889
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x1e
jl 0x140045864
mov qword [rsp + 0x128], rbx
mov qword [rsp + 0x138], rbx
mov r13d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x140], r13
mov byte [rsp + 0x128], bl
lea rax, [rsp + 0x90]
or r12, 0xffffffffffffffff
inc r12
cmp byte [rax + r12], bl
jne 0x1400458ba
lea rcx, [rsp + 0x128]
cmp r12, r13
ja 0x1400458f2
mov qword [rsp + 0x138], r12
mov r8, r12
lea rdx, [rsp + 0x90]
call fcn.1401302d0
mov byte [rsp + r12 + 0x128], bl
jmp 0x140045903
lea r9, [rsp + 0x90]
mov rdx, r12
call fcn.14004ed78
nop
movups xmm0, xmmword [str._BCHJ]
movups xmmword [rsp + 0x260], xmm0
movups xmm1, xmmword [0x14030d2c8]
movups xmmword [rsp + 0x270], xmm1
movsd xmm0, qword [0x14030d2d8]
movsd qword [rsp + 0x280], xmm0
mov al, byte [0x14030d2e0]
mov byte [rsp + 0x288], al
mov r8d, ebx
lea r9, [rsp + 0x260]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x29
jl 0x14004594a
mov qword [rsp + 0x148], rbx
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r13
mov byte [rsp + 0x148], bl
lea rax, [rsp + 0x260]
or r12, 0xffffffffffffffff
inc r12
cmp byte [rax + r12], bl
jne 0x14004599a
lea rcx, [rsp + 0x148]
cmp r12, r13
ja 0x1400459d2
mov qword [rsp + 0x158], r12
mov r8, r12
lea rdx, [rsp + 0x260]
call fcn.1401302d0
mov byte [rsp + r12 + 0x148], bl
jmp 0x1400459e3
lea r9, [rsp + 0x260]
mov rdx, r12
call fcn.14004ed78
nop
lea r8, [rsp + 0x128]
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x450]
call fcn.14003db94
nop
mov rdx, qword [rsp + 0x160]
mov r12d, 0x1000
cmp rdx, r14
jb 0x140045a45
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r12
jb 0x140045a40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047409
call fcn.1400609b0
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x160], r13
mov byte [rsp + 0x148], bl
mov rdx, qword [rsp + 0x140]
cmp rdx, r14
jb 0x140045a9a
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, r12
jb 0x140045a95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004740f
call fcn.1400609b0
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x140], r13
mov byte [rsp + 0x128], bl
cmp byte [0x1403395ba], bl
je 0x140045b9f
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x450]
call fcn.140048bd8
mov r13, rax
movsd xmm0, qword [0x14030d5a8]
movsd qword [rsp + 0x180], xmm0
mov eax, dword [0x14030d5b0]
mov dword [rsp + 0x188], eax
cmp byte [0x14030d5b3], bl
je 0x140045b2b
mov r8d, ebx
lea r9, [rsp + 0x180]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xc
jl 0x140045b06
lea rdx, [rsp + 0x180]
lea rcx, [0x140337650]
call fcn.14004de88
mov rdx, r13
cmp qword [r13 + 0x18], r14
jb 0x140045b4c
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
mov rcx, rax
call fcn.140057c94
mov rcx, rax
call fcn.14004e06c
nop
mov rdx, qword [rsp + 0xd0]
cmp rdx, r14
jb 0x140045b9f
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x140045b9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047415
call fcn.1400609b0
movzx r8d, byte [rsp + 0x450]
mov ecx, r8d
cmp r8d, 4
ja 0x140045be8
test r8b, r8b
je 0x140045be3
sub ecx, 1
je 0x140045bd5
sub ecx, 1
jne 0x140045be8
mov rdx, qword [rsp + 0x458]
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 4
jmp 0x140045bf3
mov rdx, qword [rsp + 0x458]
mov rax, qword [rdx + 8]
jmp 0x140045bf3
mov rax, rbx
jmp 0x140045beb
mov rax, rdi
mov rdx, qword [rsp + 0x458]
mov dword [0x14033964c], eax
mov r13, rbx
movzx ecx, r8b
cmp ecx, 4
ja 0x140045c2c
test r8b, r8b
je 0x140045c27
sub ecx, 1
je 0x140045c21
sub ecx, 1
jne 0x140045c2c
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 4
jmp 0x140045c2f
mov rax, qword [rdx + 8]
jmp 0x140045c2f
mov rax, rbx
jmp 0x140045c2f
mov rax, rdi
cmp r13, rax
jae 0x14004613b
mov rdx, r13
lea rcx, [rsp + 0x450]
call fcn.140048aa8
mov rcx, rax
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], 8
mov rax, qword [str.Programe]
mov qword [rsp + 0x90], rax
mov byte [rsp + 0x98], bl
lea rdx, [rsp + 0x90]
call fcn.140048844
lea rdx, [rsp + 0xb8]
mov rcx, rax
call fcn.14004ddbc
mov rdx, rax
mov rax, r13
shl rax, 5
mov qword [rsp + 0x88], rax
lea rcx, [0x140000000]
lea rcx, [rcx + 0x33bcc0]
add rcx, rax
cmp rcx, rdx
je 0x140045cc6
mov r8b, bl
call fcn.14004bf98
mov rdx, qword [rsp + 0xd0]
cmp rdx, r14
jb 0x140045d04
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x140045cff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004741b
call fcn.1400609b0
mov rdx, r13
lea rcx, [rsp + 0x450]
call fcn.140048aa8
mov rcx, rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], 6
mov eax, dword [str.Status]
mov dword [rsp + 0x90], eax
movzx eax, word [0x14030de38]
mov word [rsp + 0x94], ax
mov byte [rsp + 0x96], bl
lea rdx, [rsp + 0x90]
call fcn.140048844
lea rdx, [rsp + 0xb8]
mov rcx, rax
call fcn.14004ddbc
mov rcx, qword [rsp + 0x88]
lea rdx, [0x140000000]
lea rcx, [rcx + 0x33a390]
add rcx, rdx
cmp rcx, rax
je 0x140045da0
mov r8b, bl
mov rdx, rax
call fcn.14004bf98
mov rdx, qword [rsp + 0xd0]
cmp rdx, r14
jb 0x140045dde
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x140045dd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047421
call fcn.1400609b0
mov rdx, r13
lea rcx, [rsp + 0x450]
call fcn.140048aa8
mov rcx, rax
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], select
movsd xmm0, qword [str.updateddate]
movsd qword [rsp + 0x90], xmm0
movzx eax, word [0x14030de48]
mov word [rsp + 0x98], ax
mov al, byte [0x14030de4a]
mov byte [rsp + 0x9a], al
mov byte [rsp + 0x9b], bl
lea rdx, [rsp + 0x90]
call fcn.140048844
lea rdx, [rsp + 0xb8]
mov rcx, rax
call fcn.14004ddbc
mov rdx, rax
lea rcx, [0x140000000]
lea rcx, [rcx + 0x33a9d0]
add rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x140045e80
mov r8b, bl
call fcn.14004bf98
mov rdx, qword [rsp + 0xd0]
cmp rdx, r14
jb 0x140045ebe
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x140045eb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047427
call fcn.1400609b0
mov rdx, r13
lea rcx, [rsp + 0x450]
call fcn.140048aa8
mov rcx, rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], 4
mov eax, dword [str.Name]
mov dword [rsp + 0x90], eax
mov byte [rsp + 0x94], bl
lea rdx, [rsp + 0x90]
call fcn.140048844
lea rdx, [rsp + 0xb8]
mov rcx, rax
call fcn.14004ddbc
mov rdx, rax
lea rcx, [0x140000000]
lea rcx, [rcx + 0x33b650]
add rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x140045f48
mov r8b, bl
call fcn.14004bf98
mov rdx, qword [rsp + 0xd0]
cmp rdx, r14
jb 0x140045f86
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x140045f81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004742d
call fcn.1400609b0
mov rdx, r13
lea rcx, [rsp + 0x450]
call fcn.140048aa8
mov rcx, rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], 5
mov eax, dword [str.image]
mov dword [rsp + 0x90], eax
mov al, byte [0x14030de50]
mov byte [rsp + 0x94], al
mov byte [rsp + 0x95], bl
lea rdx, [rsp + 0x90]
call fcn.140048844
lea rdx, [rsp + 0xb8]
mov rcx, rax
call fcn.14004ddbc
mov rdx, rax
lea rcx, [0x140000000]
lea rcx, [rcx + 0x33c330]
add rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x14004601d
mov r8b, bl
call fcn.14004bf98
mov rdx, qword [rsp + 0xd0]
cmp rdx, r14
jb 0x14004605b
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x140046056
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047433
call fcn.1400609b0
mov rdx, r13
lea rcx, [rsp + 0x450]
call fcn.140048aa8
mov rcx, rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], 4
mov eax, dword [str.link]
mov dword [rsp + 0x90], eax
mov byte [rsp + 0x94], bl
lea rdx, [rsp + 0x90]
call fcn.140048844
lea rdx, [rsp + 0xb8]
mov rcx, rax
call fcn.14004ddbc
mov rdx, rax
lea rcx, [0x140000000]
lea rcx, [rcx + 0x339d50]
add rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x1400460e5
mov r8b, bl
call fcn.14004bf98
mov rdx, qword [rsp + 0xd0]
cmp rdx, r14
jb 0x140046123
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, r12
jb 0x14004611e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047439
call fcn.1400609b0
add r13, rdi
mov rdx, qword [rsp + 0x458]
mov r8b, byte [rsp + 0x450]
jmp 0x140045bfc
mov dl, r8b
lea rcx, [rsp + 0x458]
call fcn.14004b4e8
nop
call fcn.14003b1bc
movsd xmm0, qword [str.VYYP_j]
movsd qword [rsp + 0x190], xmm0
mov eax, dword [str.TPV_]
mov dword [rsp + 0x198], eax
cmp byte [0x14030cb33], bl
je 0x1400461a7
mov r8d, ebx
lea r9, [rsp + 0x190]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xc
jl 0x140046182
movsd xmm0, qword [str._ERJW_VY]
movsd qword [rsp + 0xd8], xmm0
mov al, byte [0x14030c788]
mov byte [rsp + 0xe0], al
mov r8d, ebx
lea r9, [rsp + 0xd8]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 9
jl 0x1400461d0
movsd xmm0, qword [str._ERJW_VY]
movsd qword [rsp + 0xf8], xmm0
mov al, byte [0x14030c788]
mov byte [rsp + 0x100], al
mov r8d, ebx
lea r9, [rsp + 0xf8]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 9
jl 0x14004621e
lea rax, [rsp + 0x190]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x64
lea r9, [rsp + 0x4e0]
lea r8, [0x1401e14de]
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov qword [rsp + 0x1c0], rbx
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x4e0]
or r13, 0xffffffffffffffff
inc r13
cmp byte [rax + r13], bl
jne 0x1400462a5
lea rcx, [rsp + 0x1c0]
cmp r13, 0xf
ja 0x1400462de
mov qword [rsp + 0x1d0], r13
mov r8, r13
lea rdx, [rsp + 0x4e0]
call fcn.1401302d0
mov byte [rsp + r13 + 0x1c0], bl
jmp 0x1400462ee
lea r9, [rsp + 0x4e0]
mov rdx, r13
call fcn.14004ed78
mov r8b, bl
lea rdx, [rsp + 0x1c0]
lea r13, [0x140335870]
mov rcx, r13
call fcn.14004bf98
mov rdx, qword [rsp + 0x1d8]
cmp rdx, r14
jb 0x140046346
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, r12
jb 0x140046341
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004743f
call fcn.1400609b0
movsd xmm0, qword [str.VYYP_z]
movsd qword [rsp + 0x1a0], xmm0
mov eax, dword [0x14030bf80]
mov dword [rsp + 0x1a8], eax
cmp byte [0x14030bf83], bl
je 0x14004639c
mov r8d, ebx
lea r9, [rsp + 0x1a0]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xc
jl 0x140046377
movsd xmm0, qword [str.eWDKNUIX]
movsd qword [rsp + 0x108], xmm0
mov al, byte [0x14030c070]
mov byte [rsp + 0x110], al
mov r8d, ebx
lea r9, [rsp + 0x108]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r15b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 9
jl 0x1400463c5
movsd xmm0, qword [str.eWDKNUIX]
movsd qword [rsp + 0x118], xmm0
mov al, byte [0x14030c070]
mov byte [rsp + 0x120], al
mov r9d, ebx
lea r10, [rsp + 0x118]
mov eax, esi
mul r9d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r9b
sub al, cl
add al, r15b
xor byte [r10], al
add r9d, edi
add r10, rdi
cmp r9d, 9
jl 0x140046413
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x64
lea r9, [rsp + 0x550]
lea r8, [0x1401e14de]
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0x118]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov qword [rsp + 0x1e0], rbx
mov qword [rsp + 0x1f0], rbx
mov qword [rsp + 0x1f8], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x550]
or rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], bl
jne 0x14004649a
lea rcx, [rsp + 0x1e0]
cmp rsi, 0xf
ja 0x1400464d1
mov qword [rsp + 0x1f0], rsi
mov r8, rsi
lea rdx, [rsp + 0x550]
call fcn.1401302d0
mov byte [rsp + rsi + 0x1e0], bl
jmp 0x1400464e1
lea r9, [rsp + 0x550]
mov rdx, rsi
call fcn.14004ed78
mov r8b, bl
lea rdx, [rsp + 0x1e0]
lea rsi, [0x140335798]
mov rcx, rsi
call fcn.14004bf98
mov rdx, qword [rsp + 0x1f8]
cmp rdx, r14
jb 0x140046539
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, r12
jb 0x140046534
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047445
call fcn.1400609b0
lea rcx, [rsp + 0x240]
call fcn.14003bac0
lea rcx, [0x140335758]
cmp rcx, rax
je 0x14004655d
mov r8b, bl
mov rdx, rax
call fcn.14004bf98
mov rdx, qword [rsp + 0x258]
cmp rdx, r14
jb 0x14004659b
inc rdx
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, r12
jb 0x140046596
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004744b
call fcn.1400609b0
cmp qword [0x140335880], rbx
je 0x1400465f8
cmp qword [reloc.WS2_32.dll_ntohs], r14
cmovae r13, qword [0x140335870]
lea rcx, [0x14033c9d8]
sub rcx, r13
mov al, byte [r13]
mov byte [rcx + r13], al
add r13, rdi
test al, al
jne 0x1400465bd
cmp qword [reloc.WS2_32.dll_ntohs], r14
cmovae rsi, qword [0x140335798]
lea rcx, [0x14033c9f8]
sub rcx, rsi
mov al, byte [rsi]
mov byte [rcx + rsi], al
add rsi, rdi
test al, al
jne 0x1400465e5
mov byte [0x14033c9b1], dil
call fcn.14003b1bc
mov edx, Ordinal_26
lea rcx, [rsp + 0x470]
call fcn.14003abfc
nop
mov dword [rsp + 0x400], 0x50
mov r13d, 0x40
mov dword [rsp + 0x404], r13d
lea rax, [0x140047570]
mov qword [rsp + 0x408], rax
mov qword [rsp + 0x410], rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x418], rax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x420], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x430], xmm1
lea rcx, [rsp + 0x470]
call fcn.140039f78
mov qword [rsp + 0x440], rax
mov qword [rsp + 0x448], rbx
lea rcx, [rsp + 0x400]
call qword [sym.imp.USER32.dll_RegisterClassExA]
lea rcx, [rsp + 0x470]
call fcn.140039f78
mov r8, rax
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
mov r9d, 0x80000000
mov rdx, qword [rsp + 0x440]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r15, rax
mov qword [0x140339620], rax
lea ecx, [r13 - 0x20]
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rsi, rax
mov qword [0x140339628], rax
test rax, rax
je 0x14004712e
mov r8d, r13d
xor edx, edx
lea rcx, [0x1403395d0]
call fcn.140130980
mov dword [0x1403395f8], edi
mov dword [0x1403395e8], edi
mov dword [0x1403395d8], ebx
mov dword [0x1403395fc], edi
mov dword [0x140339600], 0x50
mov dword [0x14033960c], edi
mov rax, qword [rsi]
lea rcx, [0x140339610]
mov qword [rsp + 0x30], rcx
lea rcx, [0x1403395d0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, r15
mov r8d, edi
xor edx, edx
mov rcx, rsi
call qword [rax + 0x80]
test eax, eax
js 0x140047127
xor edx, edx
mov rcx, qword [0x140339620]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140339620]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rax, qword [0x1403395c0]
test rax, rax
je 0x1400467b4
add dword [rax + 0x3b0], edi
mov ecx, 0x3e48
call fcn.140151d60
mov qword [rsp + 0x460], rax
lea rcx, [rsp + 0x80]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0xd8], rax
test rax, rax
je 0x1400467f2
xor edx, edx
mov rcx, rax
call fcn.1400018fc
mov rcx, rax
jmp 0x1400467f5
mov rcx, rbx
mov rax, qword [0x1403395c0]
test rax, rax
cmove rax, rcx
mov qword [0x1403395c0], rax
call fcn.1400071f0
mov rsi, qword [0x1403395c0]
mov qword [rsp + 0x460], rsi
bts dword [rsi + 8], 0xa
lea rcx, [rsp + 0x2c0]
call fcn.140025e18
mov qword [rsi + 0x20], rbx
mov qword [rsi + 0x28], rbx
mov byte [rsp + 0x308], dil
mov byte [rsp + 0x2e0], dil
mov eax, 3
mov dword [rsp + 0x2d8], eax
mov dword [rsp + 0x2dc], eax
lea rcx, [rsp + 0x350]
call fcn.140025e18
mov byte [rsp + 0x35c], bl
mov qword [rsp + 0x28], rbx
lea rax, [rsp + 0x350]
mov qword [rsp + 0x20], rax
movss xmm6, dword [0x14030f4d0]
movaps xmm3, xmm6
mov r8d, 0x225bc
lea rdx, [0x1402e9760]
mov rcx, qword [rsi + 0xa8]
call fcn.140026598
lea rax, [0x14030f0d4]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14030f4d8]
lea rdx, [0x1402cb0c0]
mov rcx, qword [rsi + 0xa8]
call fcn.1400266b4
mov qword [0x1403395c8], rax
mov rcx, qword [rsi + 0xa8]
call fcn.140026350
lea rax, [0x14030bde8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x350]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm6
mov r13d, 0xe5510
mov r8d, r13d
lea r15, [0x1401e5bb0]
mov rdx, r15
mov rcx, qword [rsi + 0xa8]
call fcn.140026598
mov qword [0x140339630], rax
lea rax, [0x14030bde8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x350]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14030f500]
mov r8d, r13d
mov rdx, r15
mov rcx, qword [rsi + 0xa8]
call fcn.140026598
mov qword [0x140339618], rax
lea rax, [0x14030bde8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x350]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14030f4fc]
mov r8d, r13d
mov rdx, r15
mov rcx, qword [rsi + 0xa8]
call fcn.140026598
mov qword [0x140339640], rax
lea rax, [0x140339638]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x58], ebx
or eax, 0xffffffff
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_50
mov r9d, 0x190
mov r8d, 0x435b
lea rdx, [0x1403311e0]
mov rcx, qword [0x140339610]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
mov rax, qword [0x1403395c0]
test dword [rsi + 8], 0x400
je 0x140046a1f
mov dword [rax + 0x164c], ebx
mov dword [rax + 0x1728], 0x3f800000
mov r13, qword [0x140339620]
lea rcx, [0x14033c9c8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140046b3f
lea rcx, [0x14033c9c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140046b3f
mov r15, qword [0x1403395c0]
lea rsi, [r15 + 8]
or dword [rsi + 4], 0xc06
lea rax, str.imgui_impl_win32
mov qword [rsi + 0xd8], rax
mov qword [0x14033c9b8], r13
mov rax, qword [r15 + 0x1d40]
mov rcx, qword [rax]
mov qword [rcx + 0x58], r13
mov qword [rcx + 0x50], r13
test dword [rsi], 0x400
je 0x140046a9d
call fcn.14002d080
mov r15, qword [0x1403395c0]
mov dword [rsi + 0x34], 9
mov dword [rsi + 0x38], Ordinal_41
mov dword [rsi + 0x3c], Ordinal_41
mov dword [rsi + 0x40], Ordinal_41
mov dword [rsi + 0x44], Ordinal_46
mov dword [rsi + 0x48], reloc.WLDAP32.dll_Ordinal_33
mov dword [rsi + 0x4c], Ordinal_35
mov dword [rsi + 0x50], Ordinal_41
mov dword [rsi + 0x54], reloc.WLDAP32.dll_Ordinal_35
mov dword [rsi + 0x58], reloc.WLDAP32.dll_Ordinal_45
mov dword [rsi + 0x5c], reloc.WLDAP32.dll_Ordinal_46
mov dword [rsi + 0x60], 8
mov dword [rsi + 0x64], reloc.WLDAP32.dll_Ordinal_32
mov eax, reloc.WS2_32.dll_listen
mov dword [rsi + 0x68], eax
mov dword [rsi + 0x6c], reloc.WLDAP32.dll_Ordinal_27
mov dword [rsi + 0x70], eax
mov dword [rsi + 0x74], 0x41
mov dword [rsi + 0x78], 0x43
mov dword [rsi + 0x7c], 0x56
mov dword [rsi + 0x80], 0x58
mov dword [rsi + 0x84], 0x59
mov dword [rsi + 0x88], 0x5a
jmp 0x140046b46
mov r15, qword [0x1403395c0]
mov rcx, qword [0x140339610]
lea rax, str.imgui_impl_dx9
mov qword [r15 + 0xe8], rax
or dword [r15 + 0xc], 0x1008
mov qword [0x14033c9a0], rcx
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
test dword [r15 + 8], 0x400
je 0x140046bc7
mov rax, qword [0x1403395c0]
lea rcx, [fcn.14002b774]
mov qword [rax + 0x15f0], rcx
lea rcx, [fcn.14002b84c]
mov qword [rax + 0x15f8], rcx
lea rcx, [0x14002b8b0]
mov qword [rax + 0x1600], rcx
lea rcx, [0x14002b900]
mov qword [rax + 0x1608], rcx
lea rcx, [0x14002ba40]
mov qword [rax + 0x1610], rcx
mov edx, recv
lea rcx, [rsp + 0x298]
call fcn.14003abfc
nop
mov rcx, rax
call fcn.140039f78
mov rsi, rax
mov qword [rsp + 0x88], rax
mov rdx, qword [rsp + 0x2b0]
cmp rdx, r14
jb 0x140046c2b
inc rdx
mov rcx, qword [rsp + 0x298]
mov rax, rcx
cmp rdx, r12
jb 0x140046c26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047451
call fcn.1400609b0
mov qword [rsp + 0x2a8], rbx
mov qword [rsp + 0x2b0], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x298], bl
xorps xmm0, xmm0
movups xmmword [rsp + 0x4b0], xmm0
movups xmmword [rsp + 0x4c0], xmm0
movups xmmword [rsp + 0x4d0], xmm0
movss xmm6, dword [0x14030f448]
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140046ca8
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x4b0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x140046f66
cmp qword [0x14033c990], rbx
jne 0x140046cb6
call fcn.14002b634
call fcn.14002c038
call fcn.140006380
call fcn.140041fa8
mov cl, byte [0x1403395b9]
mov rax, qword [0x1403395c0]
test cl, cl
jne 0x140046cf7
or dword [rax + 0x1c40], 2
mov dword [rax + 0x1c64], 0x440a4000
mov dword [rax + 0x1c68], 0x43bb0000
mov dword [rax + 0x1c48], edi
cmp cl, dil
jne 0x140046d1d
or dword [rax + 0x1c40], 2
mov dword [rax + 0x1c64], 0x443c0000
mov dword [rax + 0x1c68], 0x440b4000
mov dword [rax + 0x1c48], edi
mov dword [rsp + 0xb0], 0x3f000000
mov dword [rsp + 0xb4], 0x3f000000
lea rdx, [rsp + 0xb0]
mov ecx, 5
call fcn.140003518
xor edx, edx
mov r8d, Ordinal_301
mov rcx, rsi
call fcn.14000be1c
call fcn.14003e158
call fcn.14000e328
mov ecx, edi
call fcn.1400035a4
cmp byte [0x1403395bc], dil
jne 0x140046d74
call fcn.14003a5d8
cmp byte [0x1403395bb], dil
jne 0x140046d82
call fcn.14003a990
call fcn.1400081dc
mov rcx, qword [0x140339610]
mov rax, qword [rcx]
mov dword [rsp + 0x30], ebx
movss dword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], ebx
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x140339610]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140046e00
call fcn.140008614
mov rax, qword [0x1403395c0]
mov rcx, qword [rax + 0x1d40]
mov rdx, qword [rcx]
add rdx, 0xb0
mov al, byte [rdx]
neg al
sbb rcx, rcx
and rcx, rdx
call fcn.14002af08
mov rcx, qword [0x140339610]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rax, qword [rsp + 0x460]
test dword [rax + 8], 0x400
je 0x140046f0d
call fcn.14001597c
mov rsi, qword [0x1403395c0]
mov ecx, edi
mov dword [rsp + 0x80], ecx
mov eax, dword [rsi + 0x1630]
cmp eax, edi
jle 0x140046e97
mov r13d, 8
mov rax, qword [rsi + 0x1638]
mov r15, qword [rax + r13]
test byte [r15 + 4], 0x80
jne 0x140046e80
mov rax, qword [rsi + 0x15c0]
test rax, rax
je 0x140046e66
xor edx, edx
mov rcx, r15
call rax
mov ecx, dword [rsp + 0x80]
mov rax, qword [rsi + 0x1608]
test rax, rax
je 0x140046e80
xor edx, edx
mov rcx, r15
call rax
mov ecx, dword [rsp + 0x80]
add ecx, edi
mov dword [rsp + 0x80], ecx
add r13, 8
mov eax, dword [rsi + 0x1630]
cmp ecx, eax
jl 0x140046e3a
mov ecx, edi
mov dword [rsp + 0x80], ecx
cmp eax, edi
jle 0x140046f05
mov r15d, 8
mov rax, qword [rsi + 0x1638]
mov r13, qword [r15 + rax]
test byte [r13 + 4], 0x80
jne 0x140046ef0
mov rax, qword [rsi + 0x15c8]
test rax, rax
je 0x140046ed6
xor edx, edx
mov rcx, r13
call rax
mov ecx, dword [rsp + 0x80]
mov rax, qword [rsi + 0x1610]
test rax, rax
je 0x140046ef0
xor edx, edx
mov rcx, r13
call rax
mov ecx, dword [rsp + 0x80]
add ecx, edi
mov dword [rsp + 0x80], ecx
add r15, 8
cmp ecx, dword [rsi + 0x1630]
jl 0x140046eaa
mov rsi, qword [rsp + 0x88]
mov rcx, qword [0x140339610]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140046f66
mov rcx, qword [0x140339610]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140046f66
call fcn.14002b6a8
mov rcx, qword [0x140339610]
mov rax, qword [rcx]
lea rdx, [0x1403395d0]
call qword [rax + 0x80]
call fcn.14002b634
cmp dword [rsp + 0x4b8], 0x12
jne 0x140046c69
call fcn.140015f14
call fcn.14002b6a8
mov rcx, qword [0x14033c9a0]
test rcx, rcx
je 0x140046f97
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14033c9a0], rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov qword [0x14033c9b8], rbx
mov rdi, qword [0x1403395c0]
mov rcx, rdi
call fcn.1400073e0
mov rax, qword [0x1403395c0]
cmp rax, rdi
cmove rax, rbx
mov qword [0x1403395c0], rax
test rdi, rdi
je 0x140047001
mov rcx, rdi
call fcn.14001d1b0
mov rax, qword [0x1403395c0]
test rax, rax
je 0x140046ff9
dec dword [rax + 0x3b0]
mov rcx, rdi
call fcn.140147ec0
mov rcx, qword [0x140339610]
test rcx, rcx
je 0x14004701a
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140339610], rbx
mov rcx, qword [0x140339628]
test rcx, rcx
je 0x140047033
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140339628], rbx
mov rcx, qword [0x140339620]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0x418]
mov rcx, qword [rsp + 0x440]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rsp + 0x488]
cmp rdx, r14
jb 0x140047095
inc rdx
mov rcx, qword [rsp + 0x470]
mov rax, rcx
cmp rdx, r12
jb 0x140047090
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047457
call fcn.1400609b0
mov qword [rsp + 0x480], rbx
mov qword [rsp + 0x488], 0xf
mov byte [rsp + 0x470], bl
mov rdx, qword [rsp + 0x4a8]
cmp rdx, r14
jb 0x1400470ee
inc rdx
mov rcx, qword [rsp + 0x490]
mov rax, rcx
cmp rdx, r12
jb 0x1400470e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004745d
call fcn.1400609b0
xor eax, eax
mov rcx, qword [rsp + 0x5c0]
xor rcx, rsp
call fcn.1400607e0
lea r11, [rsp + 0x5e0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov rsi, qword [0x140339628]
mov rcx, qword [0x140339610]
test rcx, rcx
je 0x14004714e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140339610], rbx
mov rsi, qword [0x140339628]
test rsi, rsi
je 0x140047163
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140339628], rbx
mov rdx, qword [rsp + 0x418]
mov rcx, qword [rsp + 0x440]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rsp + 0x488]
cmp rdx, r14
jb 0x1400471b8
inc rdx
mov rcx, qword [rsp + 0x470]
mov rax, rcx
cmp rdx, r12
jb 0x1400471b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047457
call fcn.1400609b0
mov qword [rsp + 0x480], rbx
mov qword [rsp + 0x488], 0xf
mov byte [rsp + 0x470], bl
mov rdx, qword [rsp + 0x4a8]
cmp rdx, r14
jb 0x140047266
inc rdx
mov rcx, qword [rsp + 0x490]
mov rax, rcx
cmp rdx, r12
jb 0x140047210
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004745d
call fcn.1400609b0
jmp 0x140047266
mov eax, edi
jmp 0x1400470f0
mov edx, 0xa
lea rcx, [rsp + 0x240]
call fcn.14003abfc
mov rdx, rax
lea rcx, [0x140335890]
call fcn.140049700
lea rcx, [rsp + 0x240]
call fcn.1400496a4
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
mov r9d, 0x1194
lea r8, [0x140045100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rsp + 0x260]
call fcn.1400474d0
mov r10, rax
cmp byte [rax + 0x28], bl
je 0x1400472fb
mov r8d, ebx
mov r9, rax
mov eax, esi
mul r8d
shr edx, 5
movsx ecx, dl
imul eax, ecx, 0x3a
mov cl, r8b
sub cl, al
add cl, r15b
xor byte [r9], cl
add r8d, edi
add r9, rdi
cmp r8d, 0x29
jl 0x1400472d6
mov rcx, r10
call fcn.14015c2b8
lea rdx, [rsp + 0x350]
call fcn.140047500
mov r14, rax
cmp byte [rax + 0xaf], bl
je 0x140047463
mov r9, rax
mov eax, esi
mul ebx
shr edx, 5
movsx edx, dl
imul r8d, edx, 0x3a
mov al, bl
sub al, r8b
add al, r15b
xor byte [r9], al
add ebx, edi
add r9, rdi
cmp ebx, 0xb0
jge 0x140047463
jmp 0x140047322
mov dword [rsp + 0x178], ebx
mov ecx, 6
call fcn.140063008
nop
mov ecx, edi
call fcn.140063008
int3
mov ecx, eax
call fcn.140062fcc
nop
mov ecx, edi
call fcn.140063008
int3
mov ecx, eax
call fcn.140062fcc
nop
call fcn.14015c460
nop
mov ecx, edi
call fcn.140063008
int3
mov ecx, eax
call fcn.140062fcc
nop
call fcn.14015c460
nop
mov ecx, edi
call fcn.140063008
int3
mov ecx, eax
call fcn.140062fcc
nop
call fcn.14015c460
nop
mov ecx, edi
call fcn.140063008
int3
mov ecx, eax
call fcn.140062fcc
nop
call fcn.14015c460
nop
mov ecx, edi
call fcn.140063008
int3
mov ecx, eax
call fcn.140062fcc
nop
mov rcx, r9
call fcn.140049550
mov r8, rax
mov r9d, 0x40010
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rsp + 0x240]
call fcn.1400496a4
mov ecx, edi
call fcn.1401538b0
nop
call fcn.140160d50
nop
call fcn.140160d50
int3
call fcn.140160d50
int3
call fcn.140160d50
int3
call fcn.140160d50
int3
call fcn.140160d50
int3
call fcn.140160d50
int3
call fcn.140160d50
int3
call fcn.140160d50
nop
call fcn.140160d50
int3
call fcn.140160d50
int3
call fcn.140160d50
nop
call fcn.140160d50
nop
call fcn.140160d50
nop
call fcn.140160d50
nop
lea rcx, [0x140335890]
call fcn.14003b0c4
mov r8, rax
mov r9d, 0x40010
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, edi
call fcn.1401538b0
nop
mov dword [rsp + 0x1b8], ebx
mov ecx, 6
call fcn.140063008
int3