Function at 0x14038a7f0
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
movaps xmmword [rsp + 0x60], xmm6
mov rsi, rcx
lea rdx, [0x140ae7888]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call sub.d3d9.dll_Direct3DCreate9Ex
mov dword [rsp + 0x4c], eax
mov eax, 0x504d6204
mov r13d, 0x2e610618
mov r14d, 0x33a76d0f
xorps xmm6, xmm6
movabs r12, 0x5000000001
mov ebx, 0x51ea9ca4
mov ebp, 0x2da5c0d1
mov edi, 0xac1c2d83
mov r15d, 0x1cf63367
jmp 0x14038a880
mov eax, dword [0x140ae0ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8348d3cf
mov ecx, 0xa916ef77
cmove eax, ecx
cmp dword [0x140ae0ef4], 0xa
cmovl eax, ecx
nop dword [rax + rax]
cmp eax, 0xfdd15791
jg 0x14038a8e0
cmp eax, 0xba1eae6c
jle 0x14038a990
cmp eax, 0xd3572a06
jle 0x14038aa0f
cmp eax, 0xdea5f19e
jg 0x14038aac2
cmp eax, 0xd3572a07
je 0x14038ac50
cmp eax, 0xd3bb71cd
jne 0x14038a880
call fcn.14002f210
test rax, rax
mov eax, 0x229d4213
mov ecx, 0xba1eae6d
cmove eax, ecx
jmp 0x14038a880
cmp eax, 0x47c1be67
jg 0x14038a940
cmp eax, 0x229d4212
jle 0x14038aa3a
cmp eax, 0x2e610617
jg 0x14038aafb
cmp eax, 0x229d4213
je 0x14038ac6e
cmp eax, 0x2da5c0d1
jne 0x14038a880
mov eax, dword [0x140ae0ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc0942b2c
cmove eax, r14d
cmp dword [0x140ae0ef4], 0xa
cmovl eax, r14d
jmp 0x14038a880
cmp eax, 0x6a6541f7
jg 0x14038a9c6
cmp eax, 0x51ea9ca3
jle 0x14038aba4
cmp eax, 0x51ea9ca4
je 0x14038ac91
cmp eax, 0x604fcf63
jne 0x14038a880
mov eax, dword [0x140ae0ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc0942b2c
cmove eax, ebp
cmp dword [0x140ae0ef4], 0xa
cmovl eax, ebp
jmp 0x14038a880
cmp eax, 0xa916ef76
jg 0x14038aa83
cmp eax, 0x8348d3cf
je 0x14038ac9b
cmp eax, 0x95dab659
je 0x14038aca5
cmp eax, 0x9754d937
jne 0x14038a880
mov eax, 0x1cf63367
jmp 0x14038a880
cmp eax, 0x7e1b01e0
jg 0x14038abc3
cmp eax, 0x6a6541f8
je 0x14038ace7
cmp eax, 0x6b30105a
jne 0x14038a880
mov eax, dword [0x140ae0ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9754d937
cmove eax, r15d
cmp dword [0x140ae0ef4], 0xa
cmovl eax, r15d
jmp 0x14038a880
cmp eax, 0xba1eae6d
je 0x14038ad0d
cmp eax, 0xbec9cec3
je 0x14038ad1e
cmp eax, 0xc0942b2c
jne 0x14038a880
mov eax, 0x2da5c0d1
jmp 0x14038a880
cmp eax, 0xfdd15792
je 0x14038a852
cmp eax, 0xdea1e0c
je 0x14038ad28
cmp eax, 0x1cf63367
jne 0x14038a880
mov eax, dword [0x140ae0ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9754d937
cmove eax, r13d
cmp dword [0x140ae0ef4], 0xa
cmovl eax, r13d
jmp 0x14038a880
cmp eax, 0xa916ef77
je 0x14038ad3f
cmp eax, 0xaa8a1752
je 0x14038ad49
cmp eax, 0xac1c2d83
jne 0x14038a880
mov eax, dword [0x140ae0ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbec9cec3
mov ecx, 0xdea1e0c
jmp 0x14038a86b
cmp eax, 0xdea5f19f
je 0x14038ad67
cmp eax, 0xeb65a368
jne 0x14038a880
mov rax, qword [0x140ae7888]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov qword [rsp + 0x58], rax
mov eax, 0x7e1b01e1
jmp 0x14038a880
cmp eax, 0x3d1efd30
jne 0x14038adbf
movups xmmword [0x140ae78c0], xmm6
movups xmmword [0x140ae78b0], xmm6
movups xmmword [0x140ae78a0], xmm6
mov qword [0x140ae78d0], 0
mov dword [0x140ae78c0], 1
mov dword [0x140ae78b0], 1
mov qword [0x140ae78b8], rsi
mov dword [0x140ae78ac], 0
mov dword [0x140ae78a0], 0x15
mov eax, dword [0x140ae7668]
mov dword [0x140ae7898], eax
mov eax, dword [0x140ae766c]
mov dword [0x140ae789c], eax
mov qword [0x140ae78c4], r12
mov dword [0x140ae78d4], 0x80000000
mov eax, dword [0x140ae0ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7ecf93eb
cmove eax, ebx
cmp dword [0x140ae0ef4], 0xa
cmovl eax, ebx
jmp 0x14038a880
cmp eax, 0x504d6204
jne 0x14038adcc
cmp dword [rsp + 0x4c], 0
sets byte [rsp + 0x4b]
mov eax, 0x6a6541f8
jmp 0x14038a880
cmp eax, 0x7ecf93eb
jne 0x14038add9
movups xmmword [0x140ae78c0], xmm6
movups xmmword [0x140ae78b0], xmm6
movups xmmword [0x140ae78a0], xmm6
mov qword [0x140ae78d0], 0
mov dword [0x140ae78c0], 1
mov dword [0x140ae78b0], 1
mov qword [0x140ae78b8], rsi
mov dword [0x140ae78ac], 0
mov dword [0x140ae78a0], 0x15
mov eax, dword [0x140ae7668]
mov dword [0x140ae7898], eax
mov eax, dword [0x140ae766c]
mov dword [0x140ae789c], eax
mov qword [0x140ae78c4], r12
mov dword [0x140ae78d4], 0x80000000
mov eax, 0x3d1efd30
jmp 0x14038a880
mov eax, dword [0x140ae0ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8348d3cf
mov ecx, 0xfdd15792
jmp 0x14038a86b
call fcn.140389310
mov rcx, rsi
call fcn.140176870
mov rcx, qword [0x140ae7890]
call fcn.140174860
mov eax, 0x6b30105a
jmp 0x14038a880
mov eax, 0xdea5f19f
jmp 0x14038a880
mov eax, 0xfdd15792
jmp 0x14038a880
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov edx, 0x37d0
mov r8d, 0x418
mov r9d, 8
lea rcx, str.1.88
call fcn.1400a61f0
mov eax, 0xd3bb71cd
jmp 0x14038a880
mov eax, dword [0x140ae0ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbec9cec3
cmove eax, edi
cmp dword [0x140ae0ef4], 0xa
cmovl eax, edi
jmp 0x14038a880
xor ecx, ecx
call fcn.14002f230
mov eax, 0xd3572a07
jmp 0x14038a880
mov eax, 0xac1c2d83
jmp 0x14038a880
cmp byte [rsp + 0x4b], 0
mov eax, 0xaa8a1752
mov ecx, 0x47c1be68
cmovne eax, ecx
jmp 0x14038a880
mov eax, 0x229d4213
jmp 0x14038a880
mov eax, dword [0x140ae0ef0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7ecf93eb
mov ecx, 0x3d1efd30
jmp 0x14038a86b
mov rcx, qword [0x140ae7888]
mov rax, qword [rcx]
lea rdx, [0x140ae7890]
mov qword [rsp + 0x38], rdx
lea rdx, [0x140ae7898]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r8d, 1
mov r9, rsi
call qword [rax + 0xa0]
test eax, eax
mov eax, 0x95dab659
mov ecx, 0xeb65a368
cmovs eax, ecx
jmp 0x14038a880
cmp eax, 0x2e610618
jne 0x14038a880
jmp 0x14038adfc
cmp eax, 0x47c1be68
jne 0x14038a880
jmp 0x14038ae14
cmp eax, 0x7e1b01e1
jne 0x14038a880
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov al, 1
movaps xmm6, xmmword [rsp + 0x60]
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3