Function at 0x14001d7a0
Capabilities:
Get geographical location
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x460
mov rax, qword [0x1400e8468]
xor rax, rsp
mov qword [rsp + 0x450], rax
mov rdi, rcx
mov qword [rsp + 0x110], rcx
xor r13d, r13d
mov dword [rsp + 0x68], r13d
mov rdx, rcx
cmp qword [rcx + 0x18], 0x10
jb 0x14001d7ec
mov rdx, qword [rcx]
lea rcx, str._SERVER_:_Generic_text:__s_n
call fcn.140007f70
mov r15, qword [0x140127768]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x1b8], xmm0
mov qword [rsp + 0x1c8], rax
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.140025bd0
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.14000ad90
nop
mov rcx, qword [rsp + 0x1c0]
mov r8, qword [rsp + 0x1b8]
sub rcx, r8
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 1
jb 0x1400209d0
mov rax, qword [r8 + 0x28]
sub rax, qword [r8 + 0x20]
sar rax, 5
cmp rax, 1
jb 0x1400209d0
movzx r14d, byte [0x1401276d7]
cmp byte [0x1401276d9], 1
jne 0x14001f262
mov rcx, rdi
cmp r14b, 1
jne 0x14001e478
cmp qword [rdi + 0x18], 0x10
jb 0x14001d8ac
mov rcx, qword [rdi]
mov qword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.actionwrench
xor r8d, r8d
mov rdx, qword [rdi + 0x10]
call fcn.14002a3b0
cmp rax, 0xffffffffffffffff
je 0x14001f262
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14001dd9b
mov rdx, rdi
lea rcx, [rsp + 0x138]
call fcn.140025bd0
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
mov rsi, qword [rdi + 0x18]
mov rbx, qword [rdi + 0x10]
mov qword [rsp + 0x20], 6
lea r9, str.netid
xor r8d, r8d
mov rdx, rbx
cmp rsi, 0x10
jb 0x14001d937
mov rcx, qword [rdi]
call fcn.14002a3b0
mov rcx, qword [rdi]
jmp 0x14001d942
mov rcx, rdi
call fcn.14002a3b0
mov rcx, rdi
mov r14, rax
mov qword [rsp + 0x20], 6
lea r9, str.netid
xor r8d, r8d
mov rdx, rbx
call fcn.14002a3b0
mov r8, rbx
sub r8, r14
dec r8
add rax, 6
xorps xmm0, xmm0
movups xmmword [rsp + 0x250], xmm0
mov qword [rsp + 0x260], r13
mov qword [rsp + 0x268], r13
cmp rbx, rax
jb 0x140020a59
sub rbx, rax
cmp rbx, r8
cmovb r8, rbx
mov rcx, rdi
cmp rsi, 0x10
jb 0x14001d9a7
mov rcx, qword [rdi]
lea rdx, [rcx + rax]
lea rcx, [rsp + 0x250]
call fcn.14002a8c0
nop
lea rbx, [rsp + 0x250]
mov r15, qword [rsp + 0x250]
mov r12, qword [rsp + 0x268]
cmp r12, 0x10
cmovae rbx, r15
mov rsi, qword [rsp + 0x260]
cmp rsi, 1
jb 0x14001da32
lea r14, [rbx + rsi]
mov r8, rsi
mov edx, 0x7c
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14001da32
cmp byte [rax], 0x7c
jne 0x14001da0a
mov ecx, r13d
jmp 0x14001da0f
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14001daa0
inc rax
mov r8, r14
sub r8, rax
mov edx, 0x7c
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14001da00
mov rax, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], r13
cmp rsi, rax
cmovb rax, rsi
lea rdx, [rsp + 0x250]
cmp r12, 0x10
cmovae rdx, r15
mov r8, rax
lea rcx, [rsp + 0x118]
call fcn.14002a8c0
nop
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
mov rcx, qword [rsp + 0x128]
sub rax, rcx
cmp rax, 0x2d
jb 0x140020a5f
jmp 0x14001daa5
sub rax, rbx
jmp 0x14001da39
lea rax, [rsp + 0x118]
cmp qword [rsp + 0x130], 0x10
cmovae rax, qword [rsp + 0x118]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_45
lea r9, str.actiondialog_return_ndialog_namepopup_nnetID
lea rcx, [rsp + 0x178]
call fcn.14002b9e0
nop
mov r8d, 8
lea rdx, str._nnetID
lea rcx, [rsp + 0x178]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x198], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1a8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x198], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1a8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x118]
cmp qword [rsp + 0x130], 0x10
cmovae rdx, qword [rsp + 0x118]
mov r8, qword [rsp + 0x128]
lea rcx, [rsp + 0x198]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str._nbuttonClickedpull
lea rcx, [rsp + 0x48]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], r13
mov qword [rsp + 0x1e8], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1e0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9d, 2
lea r8, [rsp + 0x1d0]
xor edx, edx
call fcn.14004b650
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x14001dc4c
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dc47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dc47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 0x10
jb 0x14001dca5
inc rdx
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dca0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dca0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x1a8], xmm0
mov byte [rsp + 0x198], 0
mov rdx, qword [rsp + 0x190]
cmp rdx, 0x10
jb 0x14001dd05
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dcff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dcff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
nop
mov rdx, qword [rsp + 0x130]
cmp rdx, 0x10
jb 0x14001dd4c
inc rdx
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dd46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dd46
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
nop
mov rdx, qword [rsp + 0x268]
cmp rdx, 0x10
jb 0x14001defc
inc rdx
mov rcx, qword [rsp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dd91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dd91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
jmp 0x14001defc
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14001def2
mov rdx, rdi
lea rcx, [rsp + 0x138]
call fcn.140025bd0
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
lea rdx, str.netid
mov rcx, rdi
call fcn.1400255b0
mov rbx, qword [rdi + 0x10]
sub rbx, rax
lea rdx, str.netid
mov rcx, rdi
call fcn.1400255b0
lea r8, [rax + 6]
lea r9, [rbx - 1]
lea rdx, [rsp + 0x118]
mov rcx, rdi
call fcn.140025490
nop
lea rdx, [0x1400cbd08]
lea rcx, [rsp + 0x118]
call fcn.1400255b0
mov r9, rax
xor r8d, r8d
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x118]
call fcn.140025490
nop
lea r8, [rsp + 0x178]
lea rdx, str.actiondialog_return_ndialog_namepopup_nnetID
lea rcx, [rsp + 0x198]
call fcn.140026ed0
nop
lea r8, str._nnetID
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140027070
nop
lea r8, [rsp + 0x178]
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.1400270e0
nop
lea r8, str._nbuttonClickedkick
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140027070
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
nop
lea rcx, [rsp + 0x90]
call fcn.140025990
nop
lea rcx, [rsp + 0x48]
call fcn.140025990
nop
lea rcx, [rsp + 0x198]
call fcn.140025990
nop
lea rcx, [rsp + 0x178]
call fcn.140025990
nop
lea rcx, [rsp + 0x118]
call fcn.140025990
movabs rsi, 0x7fffffffffffffff
mov r14, qword [rdi + 0x18]
mov rbx, qword [rdi + 0x10]
mov qword [rsp + 0x20], 6
lea r9, str.netid
xor r8d, r8d
mov rdx, rbx
cmp r14, 0x10
jb 0x14001df2d
mov rcx, qword [rdi]
call fcn.14002a3b0
mov rcx, qword [rdi]
jmp 0x14001df38
mov rcx, rdi
call fcn.14002a3b0
mov rcx, rdi
mov r15, rax
mov qword [rsp + 0x20], 6
lea r9, str.netid
xor r8d, r8d
mov rdx, rbx
call fcn.14002a3b0
mov r8, rbx
sub r8, r15
dec r8
add rax, 6
xorps xmm0, xmm0
movups xmmword [rsp + 0x1f0], xmm0
mov qword [rsp + 0x200], r13
mov qword [rsp + 0x208], r13
cmp rbx, rax
jb 0x140020a65
sub rbx, rax
cmp rbx, r8
cmovb r8, rbx
mov rcx, rdi
cmp r14, 0x10
jb 0x14001df9d
mov rcx, qword [rdi]
lea rdx, [rcx + rax]
lea rcx, [rsp + 0x1f0]
call fcn.14002a8c0
nop
lea rbx, [rsp + 0x1f0]
mov r12, qword [rsp + 0x1f0]
mov r13, qword [rsp + 0x208]
cmp r13, 0x10
cmovae rbx, r12
mov r14, qword [rsp + 0x200]
cmp r14, 1
jb 0x14001e027
lea r15, [rbx + r14]
mov r8, r14
mov edx, 0x7c
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14001e027
cmp byte [rax], 0x7c
jne 0x14001dfff
xor ecx, ecx
jmp 0x14001e004
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14001e0fb
inc rax
mov r8, r15
sub r8, rax
mov edx, 0x7c
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14001dff6
mov rax, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
xor r15d, r15d
mov qword [rsp + 0x168], r15
mov qword [rsp + 0x170], r15
cmp r14, rax
cmovb rax, r14
lea rdx, [rsp + 0x1f0]
cmp r13, 0x10
cmovae rdx, r12
mov r8, rax
lea rcx, [rsp + 0x158]
call fcn.14002a8c0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x128], xmm1
lea r8d, [r15 + 0xd]
lea rdx, str.OnTextOverlay
lea rcx, [rsp + 0x118]
call fcn.14002a8c0
nop
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x290]
call fcn.140009e90
nop
mov rdx, qword [rsp + 0x130]
cmp rdx, 0x10
jb 0x14001e108
inc rdx
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e103
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e103
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
sub rax, rbx
jmp 0x14001e02e
call fcn.1400b35e0
mov rax, qword [0x1401276f8]
sub rsi, rax
cmp rsi, 0xc
jb 0x140020a6b
lea rbx, [0x1401276e8]
cmp qword [0x140127700], 0x10
cmovae rbx, qword [0x1401276e8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], recvfrom
lea r9, str.Successfuly
lea rcx, [rsp + 0x48]
call fcn.14002b9e0
nop
mov r8d, 0xa
lea rdx, str.___netID:
lea rcx, [rsp + 0x48]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x128], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x118], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x128], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x158]
cmp qword [rsp + 0x170], 0x10
cmovae rdx, qword [rsp + 0x158]
mov r8, qword [rsp + 0x168]
lea rcx, [rsp + 0x118]
call fcn.140025890
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x198], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1a8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x2d0], 2
lea rdx, [rsp + 0x198]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rsp + 0x2f0]
call fcn.140025730
nop
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 0x10
jb 0x14001e289
inc rdx
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e283
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e283
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
nop
mov rdx, qword [rsp + 0x130]
cmp rdx, 0x10
jb 0x14001e2cf
inc rdx
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e2ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e2ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x128], xmm0
mov byte [rsp + 0x118], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x14001e328
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e323
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e323
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov dword [rsp + 0x20], r15d
mov r9d, 0xffffffff
lea r8, [rsp + 0x290]
mov rcx, qword [0x140127768]
call fcn.14004b490
nop
lea r9, [0x140009e20]
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rsp + 0x290]
call fcn.1400b3744
nop
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14001e3c0
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e3ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e3ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
nop
mov rdx, qword [rsp + 0x208]
cmp rdx, 0x10
jb 0x14001e406
inc rdx
mov rcx, qword [rsp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e401
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e401
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
mov qword [rsp + 0x200], r15
mov qword [rsp + 0x208], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x1f0], 0
lea rcx, [rsp + 0x1b8]
call fcn.140026360
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14001e466
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14001e461
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e471
mov rcx, r8
call fcn.1400b35e0
mov qword [rdi + 0x10], r15
mov al, 1
jmp 0x140020a1a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp qword [rdi + 0x18], 0x10
jb 0x14001e482
mov rcx, qword [rdi]
mov qword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.actionwrench
xor r8d, r8d
mov rdx, qword [rdi + 0x10]
call fcn.14002a3b0
cmp rax, 0xffffffffffffffff
je 0x14001f262
mov rdx, rdi
lea rcx, [rsp + 0x138]
call fcn.140025bd0
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
mov rsi, qword [rdi + 0x18]
mov rbx, qword [rdi + 0x10]
mov qword [rsp + 0x20], 6
lea r9, str.netid
xor r8d, r8d
mov rdx, rbx
cmp rsi, 0x10
jb 0x14001e4f9
mov rcx, qword [rdi]
call fcn.14002a3b0
mov rcx, qword [rdi]
jmp 0x14001e504
mov rcx, rdi
call fcn.14002a3b0
mov rcx, rdi
mov r14, rax
mov qword [rsp + 0x20], 6
lea r9, str.netid
xor r8d, r8d
mov rdx, rbx
call fcn.14002a3b0
mov r8, rbx
sub r8, r14
dec r8
add rax, 6
xorps xmm0, xmm0
movups xmmword [rsp + 0x210], xmm0
mov qword [rsp + 0x220], r13
mov qword [rsp + 0x228], r13
cmp rbx, rax
jb 0x140020a71
sub rbx, rax
cmp rbx, r8
cmovb r8, rbx
mov rcx, rdi
cmp rsi, 0x10
jb 0x14001e569
mov rcx, qword [rdi]
lea rdx, [rcx + rax]
lea rcx, [rsp + 0x210]
call fcn.14002a8c0
nop
lea rbx, [rsp + 0x210]
mov r15, qword [rsp + 0x210]
mov r12, qword [rsp + 0x228]
cmp r12, 0x10
cmovae rbx, r15
mov rsi, qword [rsp + 0x220]
cmp rsi, 1
jb 0x14001e5f4
lea r14, [rbx + rsi]
mov r8, rsi
mov edx, 0x7c
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14001e5f4
cmp byte [rax], 0x7c
jne 0x14001e5cc
mov ecx, r13d
jmp 0x14001e5d1
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x14001e6a1
inc rax
mov r8, r14
sub r8, rax
mov edx, 0x7c
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14001e5c2
mov rax, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
mov qword [rsp + 0x128], r13
mov qword [rsp + 0x130], r13
cmp rsi, rax
cmovb rax, rsi
lea rdx, [rsp + 0x210]
cmp r12, 0x10
cmovae rdx, r15
mov r8, rax
lea rcx, [rsp + 0x118]
call fcn.14002a8c0
nop
lea rbx, [0x1401276e8]
mov rcx, rbx
cmp qword [0x140127700], 0x10
cmovae rcx, qword [0x1401276e8]
mov r8, qword [0x1401276f8]
cmp r8, 6
jne 0x14001e90a
lea rdx, str._5Pull
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14001e90a
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
mov rcx, qword [rsp + 0x128]
sub rax, rcx
cmp rax, 0x2d
jb 0x140020a77
jmp 0x14001e6a9
sub rax, rbx
jmp 0x14001e5fb
lea rax, [rsp + 0x118]
cmp qword [rsp + 0x130], 0x10
cmovae rax, qword [rsp + 0x118]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_45
lea r9, str.actiondialog_return_ndialog_namepopup_nnetID
lea rcx, [rsp + 0x178]
call fcn.14002b9e0
nop
mov r8d, 8
lea rdx, str._nnetID
lea rcx, [rsp + 0x178]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x118]
cmp qword [rsp + 0x130], 0x10
cmovae rdx, qword [rsp + 0x118]
mov r8, qword [rsp + 0x128]
lea rcx, [rsp + 0x48]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x168], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x168], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str._nbuttonClickedpull
lea rcx, [rsp + 0x158]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x198], xmm0
mov qword [rsp + 0x1a8], r13
mov qword [rsp + 0x1b0], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x198], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1a8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9d, 2
lea r8, [rsp + 0x198]
xor edx, edx
call fcn.14004b650
nop
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14001e856
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e851
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e851
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x14001e8af
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e8aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e8aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rsp + 0x190]
cmp rdx, 0x10
jb 0x14001e914
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e903
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e903
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
jmp 0x14001e914
movabs rsi, 0x7fffffffffffffff
mov rcx, rbx
cmp qword [0x140127700], 0x10
cmovae rcx, qword [0x1401276e8]
mov r8, qword [0x1401276f8]
cmp r8, 6
jne 0x14001ebc3
lea rdx, str._4Kick
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14001ebc3
mov rax, rsi
mov rcx, qword [rsp + 0x128]
sub rax, rcx
cmp rax, 0x2d
jb 0x140020a7d
lea rax, [rsp + 0x118]
cmp qword [rsp + 0x130], 0x10
cmovae rax, qword [rsp + 0x118]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_45
lea r9, str.actiondialog_return_ndialog_namepopup_nnetID
lea rcx, [rsp + 0x178]
call fcn.14002b9e0
nop
mov r8d, 8
lea rdx, str._nnetID
lea rcx, [rsp + 0x178]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x118]
cmp qword [rsp + 0x130], 0x10
cmovae rdx, qword [rsp + 0x118]
mov r8, qword [rsp + 0x128]
lea rcx, [rsp + 0x48]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x168], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x168], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str._nbuttonClickedkick
lea rcx, [rsp + 0x158]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x198], xmm0
mov qword [rsp + 0x1a8], r13
mov qword [rsp + 0x1b0], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x198], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1a8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9d, 2
lea r8, [rsp + 0x198]
xor edx, edx
call fcn.14004b650
nop
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14001eb11
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001eb0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001eb0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x14001eb6a
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001eb65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001eb65
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rsp + 0x190]
cmp rdx, 0x10
jb 0x14001ebc3
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ebbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ebbe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
mov rcx, rbx
cmp qword [0x140127700], 0x10
cmovae rcx, qword [0x1401276e8]
mov r8, qword [0x1401276f8]
cmp r8, 5
jne 0x14001ee72
lea rdx, str._4Ban
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14001ee72
mov rax, rsi
mov rcx, qword [rsp + 0x128]
sub rax, rcx
cmp rax, 0x2d
jb 0x140020a83
lea rax, [rsp + 0x118]
cmp qword [rsp + 0x130], 0x10
cmovae rax, qword [rsp + 0x118]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_45
lea r9, str.actiondialog_return_ndialog_namepopup_nnetID
lea rcx, [rsp + 0x178]
call fcn.14002b9e0
nop
mov r8d, 8
lea rdx, str._nnetID
lea rcx, [rsp + 0x178]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x118]
cmp qword [rsp + 0x130], 0x10
cmovae rdx, qword [rsp + 0x118]
mov r8, qword [rsp + 0x128]
lea rcx, [rsp + 0x48]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x168], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x168], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, Ordinal_27
lea rdx, str._nbuttonClickedworldban
lea rcx, [rsp + 0x158]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x198], xmm0
mov qword [rsp + 0x1a8], r13
mov qword [rsp + 0x1b0], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x198], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1a8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9d, 2
lea r8, [rsp + 0x198]
xor edx, edx
call fcn.14004b650
nop
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14001edc0
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001edbb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001edbb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x14001ee19
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ee14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ee14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rsp + 0x190]
cmp rdx, 0x10
jb 0x14001ee72
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ee6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ee6d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x168], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.OnTextOverlay
lea rcx, [rsp + 0x158]
call fcn.14002a8c0
nop
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x290]
call fcn.140009e90
nop
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14001ef00
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001eefb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001eefb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
mov rax, qword [0x1401276f8]
sub rsi, rax
cmp rsi, 0xc
jb 0x140020a89
cmp qword [0x140127700], 0x10
cmovae rbx, qword [0x1401276e8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], recvfrom
lea r9, str.Successfuly
lea rcx, [rsp + 0x48]
call fcn.14002b9e0
nop
mov r8d, 0xa
lea rdx, str.___netID:
lea rcx, [rsp + 0x48]
call fcn.140025890
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x168], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x168], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x118]
cmp qword [rsp + 0x130], 0x10
cmovae rdx, qword [rsp + 0x118]
mov r8, qword [rsp + 0x128]
lea rcx, [rsp + 0x158]
call fcn.140025890
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x198], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1a8], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x2d0], 2
lea rdx, [rsp + 0x198]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rsp + 0x2f0]
call fcn.140025730
nop
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 0x10
jb 0x14001f07a
inc rdx
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f074
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001f074
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
nop
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14001f0c0
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f0bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001f0bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x168], xmm0
mov byte [rsp + 0x158], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x14001f119
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f114
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001f114
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
movdqa xmm0, xmmword [0x1400d0cc0]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov dword [rsp + 0x20], r13d
mov r9d, 0xffffffff
lea r8, [rsp + 0x290]
mov rcx, qword [0x140127768]
call fcn.14004b490
nop
lea r9, [0x140009e20]
mov edx, 0x40
lea r8d, [rdx - 0x39]
lea rcx, [rsp + 0x290]
call fcn.1400b3744
nop
mov rdx, qword [rsp + 0x130]
cmp rdx, 0x10
jb 0x14001f1b1
inc rdx
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f1ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001f1ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
nop
mov rdx, qword [rsp + 0x228]
cmp rdx, 0x10
jb 0x14001f1f7
inc rdx
mov rcx, qword [rsp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001f1f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001f1f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b35e0
mov qword [rsp + 0x220], r13
mov qword [rsp + 0x228], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x210], 0
lea rcx, [rsp + 0x1b8]
call fcn.140026360
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14001f2f9
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14001f2f4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
jbe 0x14001f2f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rdi
mov rsi, qword [rdi + 0x18]
cmp rsi, 0x10
jb 0x14001f272
mov rcx, qword [rdi]
mov rbx, qword [rdi + 0x10]
mov qword [rsp + 0x20], reloc.WS2_32.dll_socket
lea r9, str.buttonClickediso11pul1
xor r8d, r8d
mov rdx, rbx
call fcn.14002a3b0
cmp rax, 0xffffffffffffffff
je 0x14001f300
mov r8d, 6
lea rdx, str._5Pull
lea rcx, [0x1401276e8]
call fcn.140025730
nop
lea rcx, [rsp + 0x1b8]
call fcn.140026360
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14001f2f9
inc rdx
cmp rdx, 0x1000
mov rcx, qword [rdi]
jb 0x14001f2f4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140020a52
mov rcx, r8
call fcn.1400b35e0
mov al, 1
jmp 0x140020a16
mov rcx, rdi
cmp rsi, 0x10
jb 0x14001f30c
mov rcx, qword [rdi]
mov qword [rsp + 0x20], reloc.WS2_32.dll_socket
lea r9, str.buttonClickediso11pul2
xor r8d, r8d
mov rdx, rbx
call fcn.14002a3b0
cmp rax, 0xffffffffffffffff
je 0x14001f33c
test r14b, r14b
sete byte [0x1401276d7]
jmp 0x14001f2b1
mov rcx, rdi
cmp rsi, 0x10
jb 0x14001f348
mov rcx, qword [rdi]
mov qword [rsp + 0x20], reloc.WS2_32.dll_send
lea r9, str.buttonClickedbannj
xor r8d, r8d
mov rdx, rbx
call fcn.14002a3b0
cmp rax, 0xffffffffffffffff
je 0x14001f37b
mov r8d, 5
lea rdx, str._4Ban
jmp 0x14001f2a4
mov rcx, rdi
cmp rsi, 0x10
jb 0x14001f387
mov rcx, qword [rdi]
mov qword [rsp + 0x20], reloc.WS2_32.dll_socket
lea r9, str.buttonClickedkicjlabas
xor r8d, r8d
mov rdx, rbx
call fcn.14002a3b0
cmp rax, 0xffffffffffffffff
je 0x14001f3d9
lea rdx, str._4Kick
lea rcx, [0x1401276e8]
call fcn.140025940
nop
lea rcx, [rsp + 0x1b8]
call fcn.140026360
nop
mov rcx, rdi
call fcn.140025990
mov al, 1
jmp 0x140020a25
lea rdx, str.exitsmod
mov rcx, rdi
call fcn.1400255b0
cmp rax, 0xffffffffffffffff
je 0x14001f464
lea rdx, str.mod
mov rcx, rdi
call fcn.1400255b0
lea r8, [rax + 4]
mov r9, rbx
lea rdx, [rsp + 0x118]
mov rcx, rdi
call fcn.140025490
nop
lea rcx, [rsp + 0x118]
call fcn.140025690
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.140025b90
nop
lea rcx, [rsp + 0x178]
call fcn.1400082b0
test eax, eax
setne byte [0x1400e84d1]
lea rcx, [rsp + 0x178]
call fcn.140025990
nop
lea rcx, [rsp + 0x118]
call fcn.140025990
lea rdx, str.unaccmods
mov rcx, rdi
call fcn.1400255b0
cmp rax, 0xffffffffffffffff
je 0x14001f4f0
lea rdx, str.ods
mov rcx, rdi
call fcn.1400255b0
lea r8, [rax + 4]
mov r9, qword [rdi + 0x10]
lea rdx, [rsp + 0x118]
mov rcx, rdi
call fcn.140025490
nop
lea rcx, [rsp + 0x118]
call fcn.140025690
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.140025b90
nop
lea rcx, [rsp + 0x178]
call fcn.1400082b0
test eax, eax
setne byte [0x1400e84d0]
lea rcx, [rsp + 0x178]
call fcn.140025990
nop
lea rcx, [rsp + 0x118]
call fcn.140025990
lea rdx, str.wrenchmode
mov rcx, rdi
call fcn.1400255b0
cmp rax, 0xffffffffffffffff
je 0x14001f57c
lea rdx, str.ode
mov rcx, rdi
call fcn.1400255b0
lea r8, [rax + 4]
mov r9, qword [rdi + 0x10]
lea rdx, [rsp + 0x118]
mov rcx, rdi
call fcn.140025490
nop
lea rcx, [rsp + 0x118]
call fcn.140025690
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.140025b90
nop
lea rcx, [rsp + 0x178]
call fcn.1400082b0
test eax, eax
setne byte [0x1401276d9]
lea rcx, [rsp + 0x178]
call fcn.140025990
nop
lea rcx, [rsp + 0x118]
call fcn.140025990
lea rdx, str.wrenchpull
mov rcx, rdi
call fcn.1400255b0
cmp rax, 0xffffffffffffffff
je 0x14001f6e7
lea rdx, str.ull
mov rcx, rdi
call fcn.1400255b0
lea r8, [rax + 4]
mov r9, qword [rdi + 0x10]
lea rdx, [rsp + 0x178]
mov rcx, rdi
call fcn.140025490
nop
lea rcx, [rsp + 0x178]
call fcn.140025690
mov rdx, rax
lea rcx, [rsp + 0x230]
call fcn.140025b90
nop
mov rbx, qword [rsp + 0x240]
test rbx, rbx
je 0x14001f6a3
nop dword [rax]
lea rax, [rsp + 0x230]
cmp qword [rsp + 0x248], 0x10
cmovae rax, qword [rsp + 0x230]
movsx ecx, byte [rax + rbx - 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
je 0x14001f6a3
lea rcx, [rsp + 0x230]
cmp qword [rsp + 0x248], 0x10
setae dl
mov r8, qword [rsp + 0x230]
cmovae rcx, r8
mov rbx, qword [rsp + 0x240]
lea r9, [rbx - 1]
add r9, rcx
lea rax, [rsp + 0x230]
test dl, dl
mov edx, 1
je 0x14001f662
sub r9, r8
jmp 0x14001f66d
sub r9, rax
lea r8, [rsp + 0x230]
mov rax, rbx
sub rax, r9
cmp rax, rdx
cmovb rdx, rax
lea rcx, [r8 + r9]
sub rbx, rdx
mov r8, rbx
sub r8, r9
inc r8
add rdx, rcx
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x240], rbx
test rbx, rbx
jne 0x14001f5f0
lea rcx, [rsp + 0x230]
call fcn.1400082b0
test eax, eax
setne byte [0x1401276d9]
lea rcx, [rsp + 0x230]
call fcn.140025990
nop
lea rcx, [rsp + 0x178]
call fcn.140025990
nop
jmp 0x14001f3bc
xor edx, edx
lea rcx, [rsp + 0x1b8]
call fcn.14000b200
mov rcx, rax
lea rdx, str.action
call fcn.1400274f0
test al, al
je 0x140020500
xor edx, edx
lea rcx, [rsp + 0x1b8]
call fcn.14000b200
lea rcx, [rax + 0x38]
lea rdx, str.input
call fcn.1400274f0
test al, al
je 0x140020500
lea rcx, [rsp + 0x1b8]
call fcn.14000b790
cmp rax, 2
jb 0x14001fd8e
mov edx, 1
lea rcx, [rsp + 0x1b8]
call fcn.14000b200
mov rcx, qword [rax + 0x28]
sub rcx, qword [rax + 0x20]
sar rcx, 5
cmp rcx, 2
jb 0x14001fd8e
cmp byte [r15 + 0x100], 0
je 0x14001fd8e
mov edx, 1
lea rcx, [rsp + 0x1b8]
call fcn.14000b200
mov rdx, qword [rax + 0x20]
add rdx, 0x20
lea rcx, [rsp + 0x118]
call fcn.140025bd0
nop
lea rax, [rsp + 0x138]
mov qword [rsp + 0x40], rax
lea rdx, [0x1400cc750]
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov rbx, rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001cb80
test al, al
je 0x14001f91c
mov r9, 0xffffffffffffffff
lea r8d, [r9 + 7]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x118]
call fcn.140025490
nop
mov r8, rax
lea rdx, [0x1400cc758]
lea rcx, [rsp + 0x90]
call fcn.140026f40
nop
lea r8, [0x1400cc758]
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.140027070
nop
lea rcx, [rsp + 0x90]
call fcn.140025990
nop
lea rcx, [rsp + 0x48]
call fcn.140025990
lea rdx, str.OnNameChanged
lea rcx, [rsp + 0x158]
call fcn.140025b90
nop
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x290]
call fcn.140009e90
nop
lea rcx, [rsp + 0x158]
call fcn.140025990
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x2d0]
call fcn.140008dd0
mov dword [rsp + 0x20], 0xffffffff
mov r9d, dword [r15 + 0xe8]
lea r8, [rsp + 0x290]
mov rcx, qword [0x140127768]
call fcn.14004b490
lea r8, [rsp + 0x178]
lea rdx, str._name_set_to:
lea rcx, [rsp + 0x138]
call fcn.140026ed0
mov rcx, rax
call fcn.1400364c0
nop
lea rcx, [rsp + 0x290]
call fcn.14001c9b0
nop
lea rcx, [rsp + 0x178]
call fcn.140025990
nop
lea rcx, [rsp + 0x118]
call fcn.140025990
jmp 0x14001f3bc
lea rax, [rsp + 0x138]
mov qword [rsp + 0x40], rax
lea rdx, str.relog
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov rbx, rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001cb80
test al, al
je 0x14001fa23
mov rdx, qword [0x140127768]
add rdx, 0x70
lea rcx, [rsp + 0x178]
call fcn.140025bd0
nop
lea rdx, str.actionquit_to_exit
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov ebx, 3
mov r9d, ebx
mov r8, rax
xor edx, edx
call fcn.14004b650
mov qword [rsp + 0x40], Ordinal_301
lea rcx, [rsp + 0x40]
call fcn.140027540
lea r8, [rsp + 0x178]
lea rdx, str.actionjoin_request_nname
lea rcx, [rsp + 0x70]
call fcn.140026ed0
nop
lea r8, str._ninvitedWorld0
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140027070
mov r9d, ebx
mov r8, rax
xor edx, edx
call fcn.14004b650
nop
lea rcx, [rsp + 0x70]
call fcn.140025990
lea rdx, str._Relog_World_
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov rcx, rax
call fcn.1400364c0
nop
jmp 0x14001f8fc
lea rax, [rsp + 0x138]
mov qword [rsp + 0x40], rax
lea rdx, str.modexit
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov rbx, rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001cb80
lea rcx, [rsp + 0x138]
test al, al
je 0x14001fab7
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
test al, al
je 0x14001fa9e
lea rdx, str._Auto_Exit_World_When___Mod__9Joins_is__2ON
call fcn.140025b90
mov rcx, rax
call fcn.1400364c0
jmp 0x14001f90a
lea rdx, str._Auto_Exit_World_When___Mod__9Joins_is__4OFF
call fcn.140025b90
mov rcx, rax
call fcn.1400364c0
jmp 0x14001f90a
lea rax, [rsp + 0x138]
mov qword [rsp + 0x40], rax
lea rdx, str.modunacc
call fcn.140025b90
mov rbx, rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001cb80
lea rcx, [rsp + 0x138]
test al, al
je 0x14001fb43
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
test al, al
je 0x14001fb2a
lea rdx, str._Auto_Unaccess_When___Mod__9Joins_is__2ON
call fcn.140025b90
mov rcx, rax
call fcn.1400364c0
jmp 0x14001f90a
lea rdx, str._Auto_Unaccess_When___Mod__9Joins_is__4OFF
call fcn.140025b90
mov rcx, rax
call fcn.1400364c0
jmp 0x14001f90a
lea rax, [rsp + 0x138]
mov qword [rsp + 0x40], rax
lea rdx, str.modtest
call fcn.140025b90
mov rbx, rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001cb80
test al, al
je 0x14001fdab
lea rdx, str._2A___Moderator__2Joined_the_World
lea rcx, [rsp + 0x90]
call fcn.140025b90
mov rcx, rax
call fcn.1400364c0
lea rdx, str.OnAddNotification
lea rcx, [rsp + 0x178]
call fcn.140025b90
nop
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x290]
call fcn.140009e90
nop
lea rcx, [rsp + 0x178]
call fcn.140025990
lea rdx, str.interface_atomic_button.rttex
lea rcx, [rsp + 0x178]
call fcn.140025b90
nop
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x2d0]
call fcn.140008dd0
nop
lea rcx, [rsp + 0x178]
call fcn.140025990
lea rdx, str._2A___Moderator__2Detected_in_The_World
lea rcx, [rsp + 0x178]
call fcn.140025b90
nop
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x310]
call fcn.140008dd0
nop
lea rcx, [rsp + 0x178]
call fcn.140025990
lea rdx, str.audio_hub_open.w_
lea rcx, [rsp + 0x178]
call fcn.140025b90
nop
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x350]
call fcn.140008dd0
nop
lea rcx, [rsp + 0x178]
call fcn.140025990
mov dword [rsp + 0x390], 9
mov dword [rsp + 0x3a0], r13d
mov dword [rsp + 0x20], r13d
mov r9d, 0xffffffff
lea r8, [rsp + 0x290]
mov rcx, qword [0x140127768]
call fcn.14004b490
movzx edx, byte [0x1401276d6]
lea rax, str.actioninput_ntext_ban
add rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14001fd32
lea rdx, str.actioninput_ntext_unaccess
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
lea rdx, str.actiondialog_return_ndialog_nameunaccess
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14001fd72
lea rdx, str.actionjoin_request_nnameexit
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov r9d, 3
mov r8, rax
xor edx, edx
call fcn.14004b650
nop
lea rcx, [rsp + 0x290]
call fcn.14001c9b0
jmp 0x14001f90a
lea rcx, [rsp + 0x290]
call fcn.14001c9b0
nop
lea rcx, [rsp + 0x118]
call fcn.140025990
nop
lea rcx, [rsp + 0x1b8]
call fcn.140026360
nop
mov rcx, rdi
call fcn.140025990
xor al, al
jmp 0x140020a25
lea rax, [rsp + 0x138]
mov qword [rsp + 0x40], rax
lea rdx, str.wrench
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov rbx, rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001cb80
test al, al
je 0x14001fedb
lea rcx, [rsp + 0x178]
call fcn.140025ce0
nop
lea r8, [0x1401276e8]
lea rdx, str._nadd_label_with_iconbig_9Choose_Wrench_Modeleft32_nadd_textbox_1Current_Mode:
lea rcx, [rsp + 0x70]
call fcn.140026ed0
nop
lea r8, str.left2480_nadd_buttonkicjlabas_4Kick__noflags00_nadd_buttonbannj_4Ban__noflags00_nadd_buttoniso11pul1_5Pull__noflags00_nadd_buttoniso11pul2_5Right_Click_Kick_Mode__Left_Click_Pull_Mode__noflags00_nend_dialogendCancelOkay
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140027070
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400259f0
lea rcx, [rsp + 0x138]
call fcn.140025990
nop
lea rcx, [rsp + 0x70]
call fcn.140025990
lea rdx, str.OnDialogRequest
lea rcx, [rsp + 0x158]
call fcn.140025b90
nop
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x290]
call fcn.140009e90
nop
lea rcx, [rsp + 0x158]
call fcn.140025990
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x2d0]
call fcn.140008dd0
mov dword [rsp + 0x20], r13d
mov r9d, 0xffffffff
lea r8, [rsp + 0x290]
mov rcx, qword [0x140127768]
call fcn.14004b490
nop
lea rcx, [rsp + 0x290]
call fcn.14001c9b0
nop
jmp 0x14001f8fc
lea rax, [rsp + 0x138]
mov qword [rsp + 0x40], rax
lea rdx, [0x1400cca38]
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov rbx, rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001cb80
lea rcx, [rsp + 0x138]
test al, al
je 0x14001ff5d
cmp byte [0x1401276d9], 0
sete al
mov byte [0x1401276d9], al
test al, al
lea rdx, str._Wrench_mode_is__2on.
jne 0x14001ff4b
lea rdx, str._Wrench_mode_is__4off.
call fcn.140025b90
mov rcx, rax
call fcn.1400364c0
jmp 0x14001f90a
lea rax, [rsp + 0x138]
mov qword [rsp + 0x40], rax
lea rdx, [0x1400cca70]
call fcn.140025b90
mov rbx, rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001cb80
test al, al
je 0x1400202b9
mov r9, 0xffffffffffffffff
lea r8d, [r9 + 5]
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x118]
call fcn.140025490
nop
lea rcx, [rsp + 0x158]
call fcn.1400082b0
mov esi, eax
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x64
sub esi, eax
lea rcx, [rsp + 0x158]
call fcn.1400082b0
mov ecx, eax
mov eax, 0x51eb851f
imul ecx
mov ebx, edx
sar ebx, 5
mov eax, ebx
shr eax, 0x1f
add ebx, eax
lea rcx, [rsp + 0x158]
call fcn.1400082b0
cmp eax, 0x64
jge 0x140020083
mov byte [0x1401276da], 1
call fcn.14001d760
lea rdx, str.actiondrop_nitemID242
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
mov edx, esi
lea rcx, [rsp + 0x70]
call fcn.140008340
nop
mov r8, rax
lea rdx, str.actiondialog_return_ndialog_namedrop_item_nitemID242_ncount
lea rcx, [rsp + 0x138]
call fcn.140026f40
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
nop
jmp 0x1400201e2
lea rcx, [rsp + 0x158]
call fcn.1400082b0
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
cmp r8d, ecx
je 0x140020182
call fcn.14001d760
mov byte [0x1401276da], 1
lea rdx, str.actiondrop_nitemID242
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
mov edx, esi
lea rcx, [rsp + 0x70]
call fcn.140008340
nop
mov r8, rax
lea rdx, str.actiondialog_return_ndialog_namedrop_item_nitemID242_ncount
lea rcx, [rsp + 0x138]
call fcn.140026f40
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
nop
lea rcx, [rsp + 0x70]
call fcn.140025990
mov byte [0x1401276d5], 1
lea rdx, str.actiondrop_nitemID1796
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
mov edx, ebx
lea rcx, [rsp + 0x70]
call fcn.140008340
nop
mov r8, rax
lea rdx, str.actiondialog_return_ndialog_namedrop_item_nitemID1796_ncount
lea rcx, [rsp + 0x138]
call fcn.140026f40
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
nop
jmp 0x1400201e2
mov byte [0x1401276d5], 1
lea rdx, str.actiondrop_nitemID1796
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
mov edx, ebx
lea rcx, [rsp + 0x70]
call fcn.140008340
nop
mov r8, rax
lea rdx, str.actiondialog_return_ndialog_namedrop_item_nitemID1796_ncount
lea rcx, [rsp + 0x138]
call fcn.140026f40
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
nop
lea rcx, [rsp + 0x70]
call fcn.140025990
mov edx, ebx
lea rcx, [rsp + 0x198]
call fcn.140008340
mov rbx, rax
mov edx, esi
lea rcx, [rsp + 0x48]
call fcn.140008340
nop
mov r8, rax
lea rdx, str._9Dropping___
lea rcx, [rsp + 0x178]
call fcn.140026f40
nop
lea r8, str.__9Wls____
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140027070
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140027150
nop
lea r8, str.__9Dls.
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140027070
mov rcx, rax
call fcn.1400364c0
nop
lea rcx, [rsp + 0x70]
call fcn.140025990
nop
lea rcx, [rsp + 0x90]
call fcn.140025990
nop
lea rcx, [rsp + 0x178]
call fcn.140025990
nop
lea rcx, [rsp + 0x48]
call fcn.140025990
nop
lea rcx, [rsp + 0x198]
call fcn.140025990
nop
lea rcx, [rsp + 0x158]
jmp 0x14001f904
lea rax, [rsp + 0x138]
mov qword [rsp + 0x40], rax
lea rdx, [0x1400ccb58]
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov rbx, rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001cb80
test al, al
je 0x140020414
mov byte [0x1401276db], 1
mov r8d, 3
lea rcx, [rsp + 0x118]
call fcn.1400256e0
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.140025bd0
nop
lea rdx, str.actiondrop_nitemID1796
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
lea r8, [rsp + 0x158]
lea rdx, str.__Dropping__c
lea rcx, [rsp + 0x70]
call fcn.140026ed0
nop
lea r8, str._9_dls__
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140027070
mov rcx, rax
call fcn.1400364c0
nop
lea rcx, [rsp + 0x70]
call fcn.140025990
lea r8, [rsp + 0x158]
lea rdx, str.actiondialog_return_ndialog_namedrop_item_nitemID1796_ncount
lea rcx, [rsp + 0x138]
call fcn.140026ed0
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
lea r8, [rsp + 0x158]
lea rdx, str.__Dropped__c
lea rcx, [rsp + 0x70]
call fcn.140026ed0
nop
lea r8, str._9_dl__
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140027070
mov rcx, rax
call fcn.1400364c0
nop
lea rcx, [rsp + 0x70]
call fcn.140025990
nop
lea rcx, [rsp + 0x158]
jmp 0x14001f904
lea rax, [rsp + 0x138]
mov qword [rsp + 0x40], rax
lea rdx, str.proxy
lea rcx, [rsp + 0x138]
call fcn.140025b90
mov rbx, rax
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
nop
mov rdx, rbx
mov rcx, rax
call fcn.14001cb80
test al, al
je 0x14001fd80
lea rcx, [rsp + 0x178]
call fcn.140025ce0
nop
lea rdx, str._nadd_label_with_iconbig_FEAR_Proxy_Commandsleft1790_nadd_spacersmall_nadd_textbox_w_proxyleft2480_nadd_textbox_w_cdleft2480_nadd_textbox_w_ddleft2480_nadd_textbox_w_wrenchleft2480_nadd_textbox_w_wmleft2480_nadd_textbox_w_relogleft2480_nadd_textbox_w_modexitleft2480_nadd_textbox_w_modunaccleft2480_nadd_textbox_w_modtestleft2480_nadd_quick_exit_nend_dialogoptionlslsCancelOkay
lea rcx, [rsp + 0x178]
call fcn.140025940
lea rdx, str.OnDialogRequest
lea rcx, [rsp + 0x158]
call fcn.140025b90
nop
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x290]
call fcn.140009e90
nop
lea rcx, [rsp + 0x158]
call fcn.140025990
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x2d0]
call fcn.140008dd0
mov dword [rsp + 0x20], r13d
mov r9d, 0xffffffff
lea r8, [rsp + 0x290]
mov rcx, qword [0x140127768]
call fcn.14004b490
nop
lea rcx, [rsp + 0x290]
call fcn.14001c9b0
nop
jmp 0x14001f8fc
lea rdx, str.game_version
mov rcx, rdi
call fcn.1400255b0
cmp rax, 0xffffffffffffffff
je 0x14001fd8e
lea rcx, [rsp + 0x118]
call fcn.14000b890
mov rdx, rdi
lea rcx, [rsp + 0x90]
call fcn.140025bd0
mov rdx, rax
lea rcx, [rsp + 0x118]
call fcn.14000ad90
nop
lea rdx, [0x1400ccd60]
lea rcx, [rsp + 0x178]
call fcn.140025b90
nop
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x138]
call fcn.14004ba80
nop
lea rcx, [rsp + 0x178]
call fcn.140025990
lea rdx, [0x1400ccd64]
lea rcx, [rsp + 0x178]
call fcn.140025b90
nop
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x70]
call fcn.140025bd0
mov r8, rax
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x118]
call fcn.14000b4c0
nop
lea rcx, [rsp + 0x178]
call fcn.140025990
mov rcx, qword [0x140127768]
add rcx, 0x28
lea rdx, str.213.179.209.168
call fcn.1400274f0
test al, al
je 0x1400208af
lea rcx, [rsp + 0x158]
call fcn.14000b890
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x158], xmm0
mov qword [rsp + 0x168], r13
lea rcx, [rsp + 0x198]
call fcn.140015390
lea rcx, [rsp + 0x198]
call fcn.1400249d0
nop
lea rcx, [rsp + 0x1d0]
call fcn.140015390
lea rdx, str.https:__api.surferwallet.net
lea rcx, [rsp + 0x90]
call fcn.140025b90
nop
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1d0]
call fcn.14001bd30
nop
lea rcx, [rsp + 0x90]
call fcn.140025990
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x48]
call fcn.140024970
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.14001c860
mov rax, qword [rsp + 0x1d0]
mov byte [rax + 0x3c8], 0
mov rax, qword [rsp + 0x1d0]
mov qword [rax + 0x170], 2
mov qword [rax + 0x178], r13
lea rcx, [rsp + 0x178]
call fcn.140020a90
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x1d0]
call fcn.14001c740
nop
cmp dword [rsp + 0x180], 0
jne 0x140020721
mov rdx, qword [rsp + 0x178]
add rdx, 0x58
lea rcx, [rsp + 0x70]
call fcn.140025bd0
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14000ad90
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.140020aa0
lea rcx, [rsp + 0x48]
call fcn.140026360
lea rdx, str.meta
lea rcx, [rsp + 0x70]
call fcn.140025b90
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x158]
call fcn.14000b240
lea rdx, str.meta
test rax, rax
je 0x140020786
lea rcx, [rsp + 0x48]
call fcn.140025b90
nop
mov dword [rsp + 0x68], 1
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x158]
call fcn.14000b460
nop
mov ebx, 3
jmp 0x1400207ea
lea rcx, [rsp + 0x90]
call fcn.140025b90
nop
mov dword [rsp + 0x68], 4
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x158]
call fcn.14000b460
nop
mov dword [rsp + 0x68], recvfrom
mov rcx, qword [0x140127768]
add rcx, 0x48
mov rdx, rax
call fcn.1400259f0
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.140025bd0
mov ebx, Ordinal_32
mov rcx, qword [0x140127768]
add rcx, 0x48
mov rdx, rax
call fcn.1400259f0
test bl, 0x10
je 0x140020813
and ebx, 0xffffffef
lea rcx, [rsp + 0xd0]
call fcn.140025990
nop
test bl, 8
je 0x140020829
and ebx, 0xfffffff7
lea rcx, [rsp + 0xf0]
call fcn.140025990
nop
test bl, 4
je 0x14002083f
and ebx, 0xfffffffb
lea rcx, [rsp + 0x90]
call fcn.140025990
nop
test bl, 2
je 0x140020855
and ebx, 0xfffffffd
lea rcx, [rsp + 0xb0]
call fcn.140025990
nop
test bl, 1
je 0x140020865
lea rcx, [rsp + 0x48]
call fcn.140025990
nop
lea rcx, [rsp + 0x70]
call fcn.140025990
nop
lea rcx, [rsp + 0x178]
call fcn.140017730
nop
lea rcx, [rsp + 0x1d0]
call fcn.14001c720
nop
lea rdx, [rsp + 0x198]
lea rcx, [rsp + 0x198]
call fcn.140029ed0
nop
lea rcx, [rsp + 0x158]
call fcn.140026360
lea rdx, str.meta
lea rcx, [rsp + 0x70]
call fcn.140025b90
nop
mov rdx, qword [0x140127768]
add rdx, 0x48
lea rcx, [rsp + 0xb0]
call fcn.140025bd0
mov r8, rax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x118]
call fcn.14000b4c0
nop
lea rcx, [rsp + 0x70]
call fcn.140025990
lea rdx, str.country
lea rcx, [rsp + 0x70]
call fcn.140025b90
nop
lea rdx, [0x140127728]
lea rcx, [rsp + 0xb0]
call fcn.140025bd0
mov r8, rax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x118]
call fcn.14000b4c0
nop
lea rcx, [rsp + 0x70]
call fcn.140025990
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x118]
call fcn.14000b580
mov rdx, rax
mov rcx, rdi
call fcn.1400259f0
lea rcx, [rsp + 0xb0]
call fcn.140025990
mov byte [0x1401276dd], 0
lea rdx, str.__LOGIN__wSpoofing_login_info
lea rcx, [rsp + 0xb0]
call fcn.140025b90
mov rcx, rax
call fcn.1400364c0
mov rdx, rdi
lea rcx, [rsp + 0xb0]
call fcn.140025bd0
mov r9d, 2
mov r8, rax
xor edx, edx
call fcn.14004b650
nop
lea rcx, [rsp + 0x138]
call fcn.140025990
nop
lea rcx, [rsp + 0x118]
call fcn.140026360
jmp 0x14001f3bc
lea rcx, [rsp + 0x1b8]
call fcn.140026360
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140020a14
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x140020a0f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140020a52
mov rcx, r8
call fcn.1400b35e0
xor al, al
mov qword [rdi + 0x10], r13
mov byte [rdi], 0
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.1400b35c0
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400268c0
nop
call fcn.140008290
nop
call fcn.1400268c0
nop
call fcn.140008290
nop
call fcn.1400268c0
nop
call fcn.140008290
int3
call fcn.140008290
int3
call fcn.140008290
nop
call fcn.140008290
int3