Function at 0x140050d20
Capabilities:
Capture screenshot
Encode data using xor
Execute command
Hide graphical window
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2d8]
sub rsp, 0x3b0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1400e2080]
xor rax, rsp
mov qword [rbp + 0x208], rax
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov r13d, 1
mov ecx, r13d
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x1400d09ec]
lea rcx, str.CONOUT_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x1400d09f8]
lea rcx, str.conin_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, r13d
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x1400d0a04]
lea rcx, str.conout_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
lea ecx, [r13 + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rax
lea rdx, [0x1400d0a04]
lea rcx, str.conout_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
xor r14d, r14d
cmp byte [0x1400ef989], r14b
jne 0x140051359
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
mov qword [rbp + 0x198], r14
movups xmmword [rbp + 0x188], xmm0
lea rcx, str.MODE_CON_COLS55_LINES12
mov byte [rbp + 0x188], r14b
mov qword [rbp + 0x1a0], reloc.WS2_32.dll_ntohs
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
lea r9d, [r13 + 1]
mov r8b, 0xc3
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp byte [0x1400d0bf9], r14b
movsd xmm0, qword [str.zFFG_TYW__]
movzx eax, word [0x1400d0bf8]
movsd qword [rsp + 0x60], xmm0
mov word [rsp + 0x68], ax
je 0x140050ea5
xor byte [rsp + 0x61], 0x33
xor byte [rsp + 0x62], 0x34
xor byte [rsp + 0x63], 0x35
xor byte [rsp + 0x64], 0x36
xor byte [rsp + 0x65], 0x37
xor byte [rsp + 0x66], 0x38
xor byte [rsp + 0x67], 0x39
xor byte [rsp + 0x68], 0x3a
xor byte [rsp + 0x69], 0x3b
mov byte [rsp + 0x60], 0x48
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x160]
call fcn.1400531f0
cmp qword [rbp + 0x178], 0xf
lea rcx, [rbp + 0x160]
cmova rcx, qword [rbp + 0x160]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140050590]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [reloc.WS2_32.dll_accept], 2
mov r8d, r14d
mov ecx, dword [0x1400d0c38]
mov r10, rax
movups xmm0, xmmword [0x1400d0c28]
mov dword [rbp - 0x48], ecx
movzx ecx, word [0x1400d0c3c]
mov word [rbp - 0x44], cx
movzx ecx, byte [0x1400d0c3e]
mov byte [rbp - 0x42], cl
movups xmmword [rbp - 0x58], xmm0
jl 0x140051077
movdqa xmm0, xmmword [str.2222222222222222_]
lea rcx, [rbp - 0x58]
movdqa xmm5, xmmword [0x1400d0ed0]
movdqa xmm4, xmmword [0x1400d10e0]
movdqa xmm6, xmmword [str.5555]
movdqa xmmword [rbp - 0x80], xmm0
mov edx, dword [rbp - 0x80]
nop dword [rax]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400d0f20]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d0f20]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
cmp r8d, 0x10
jl 0x140050f70
cmp r8d, 0x17
jge 0x1400510b2
movsxd rax, r8d
lea r9, [rbp - 0x58]
add r9, rax
mov eax, 0x4d4873ed
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0x17
jl 0x140051081
lea rdx, [rbp - 0x58]
mov rcx, r10
call fcn.140053ad0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp + 0x188]
call fcn.140053cc0
mov r15, qword [rbp + 0x1a0]
movabs rdi, 0x7fffffffffffffff
mov rsi, qword [rbp + 0x188]
cmp r15, 0xf
mov rbx, qword [rbp + 0x198]
mov qword [rbp - 0x78], r14
seta r12b
lea r14, [rbp + 0x188]
cmova r14, rsi
cmp rbx, rdi
ja 0x140052ec4
cmp rbx, 0xf
ja 0x14005112f
movups xmm0, xmmword [r14]
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
movups xmmword [rbp - 0x80], xmm0
jmp 0x1400511bf
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x14005116b
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b7b54
mov rcx, rax
test rax, rax
je 0x14005133d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400511a4
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rax, rcx
mov rdi, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x140051196
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140052eca
jmp 0x140051149
test rcx, rcx
je 0x1400511a2
call fcn.1400b7b54
jmp 0x1400511a4
xor eax, eax
lea r8, [rbx + 1]
mov qword [rbp - 0x80], rax
mov rdx, r14
mov qword [rbp - 0x70], rbx
mov rcx, rax
mov qword [rbp - 0x68], rdi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [0x1400efa30]
call fcn.1400617a0
lea rcx, [0x1400efa30]
call fcn.14005e260
test al, al
je 0x1400511e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x58]
call fcn.140053310
mov rdx, rax
lea rcx, [0x1400efa30]
call fcn.140062fc0
cmp byte [0x1400efc40], 0
jne 0x140051278
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x60]
call fcn.140050560
movzx edx, byte [rax + 0xa]
test dl, dl
je 0x14005124d
xor byte [rax], 0x32
xor byte [rax + 1], 0x33
xor byte [rax + 2], 0x34
xor byte [rax + 3], 0x35
xor byte [rax + 4], 0x36
xor byte [rax + 5], 0x37
xor byte [rax + 6], 0x38
xor byte [rax + 7], 0x39
xor byte [rax + 8], 0x3a
xor byte [rax + 9], 0x3b
xor dl, 0x3c
mov byte [rax + 0xa], dl
mov rdx, rax
call fcn.140053ad0
mov rcx, rax
lea rdx, [0x1400efc48]
call fcn.140053ca0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400512b3
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400512ae
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005133d
call fcn.1400b7adc
mov rdx, qword [rbp + 0x178]
mov byte [0x1400ef989], r13b
cmp rdx, 0xf
jbe 0x1400512f7
mov rcx, qword [rbp + 0x160]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400512f2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005133d
call fcn.1400b7adc
xor r14d, r14d
mov qword [rbp + 0x178], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x170], r14
mov byte [rbp + 0x160], r14b
test r12b, r12b
je 0x14005134c
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140051344
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140051344
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.1400b7adc
cmp byte [0x1400ef989], r14b
je 0x140052e37
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rax, [0x140052ed0]
mov dword [rbp + 0x110], 0x50
xor ecx, ecx
mov qword [rbp + 0x118], rax
mov dword [rbp + 0x114], 0x40
mov qword [rbp + 0x120], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov qword [rbp + 0x158], r14
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm0
lea rbx, str.Hurricane
movdqu xmmword [rbp + 0x140], xmm1
lea rcx, [rbp + 0x110]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0x150], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rax, qword [rbp + 0x128]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x150]
mov r8, rbx
mov qword [rsp + 0x58], r14
xor ecx, ecx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [0x1400efa00], rax
mov rbx, rax
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x1400ef9f8], rax
mov rcx, rax
test rax, rax
je 0x140052e73
lea rdx, [0x1400ef9f0]
mov qword [0x1400ef9b0], r14
mov qword [rsp + 0x30], rdx
mov r9, rbx
lea rdx, [0x1400ef9b0]
mov qword [0x1400ef9bc], r14
mov qword [rsp + 0x28], rdx
mov r8d, r13d
mov dword [0x1400ef9c4], r14d
xor edx, edx
mov qword [0x1400ef9cc], r14
mov dword [0x1400ef9d4], r14d
mov qword [0x1400ef9e4], r14
mov dword [0x1400ef9d8], r13d
mov dword [0x1400ef9c8], r13d
mov dword [0x1400ef9b8], r14d
mov dword [0x1400ef9dc], r13d
mov dword [0x1400ef9e0], 0x50
mov dword [0x1400ef9ec], r13d
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x140052e6c
mov rcx, qword [0x1400efa00]
xor edx, edx
movaps xmmword [rsp + 0x390], xmm7
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400efa00]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rsi, qword [0x1400ef990]
mov qword [rbp - 0x60], rsi
test rsi, rsi
je 0x14005151d
inc dword [rsi + 0xfc]
mov ecx, 0x5ff8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140051539
xor edx, edx
mov rcx, rax
call fcn.1400017f0
jmp 0x14005153c
mov rax, r14
mov qword [0x1400ef990], rax
call fcn.140006080
test rsi, rsi
je 0x140051556
mov qword [0x1400ef990], rsi
jmp 0x140051561
mov rsi, qword [0x1400ef990]
mov qword [rbp - 0x60], rsi
mov rcx, qword [rsi + 0x58]
lea rdx, [rbp + 0x70]
or dword [rsi + 8], 0x400
xorps xmm2, xmm2
movss xmm7, dword [0x1400d0cd4]
xor eax, eax
mov qword [rbp + 0x60], rax
mov eax, 0xffff
movups xmmword [rbp - 0x10], xmm2
mov dword [rbp - 8], 2
movups xmmword [rbp + 0x30], xmm2
mov word [rbp + 0x34], ax
lea rax, [0x1400e2100]
movups xmmword [rbp - 0x20], xmm2
mov byte [rbp - 0x14], r13b
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x20], xmm2
mov qword [rbp + 0x70], rax
lea rax, [0x1400d0578]
movups xmmword [rbp + 0xa0], xmm2
mov dword [rbp - 4], r13d
movups xmm1, xmmword [rbp - 0x10]
movups xmmword [rbp + 0x80], xmm1
mov dword [rbp + 0x24], 0x7f7fffff
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [rbp + 0x60]
mov dword [rbp + 0x30], 0x3f800000
movups xmm1, xmmword [rbp + 0x30]
movsd qword [rbp + 0xf0], xmm0
mov qword [rsi + 0x20], r14
movups xmmword [rbp + 0x90], xmm2
movups xmmword [rbp + 0xc0], xmm1
movups xmmword [rbp + 0xd0], xmm2
movups xmmword [rbp + 0xe0], xmm2
mov dword [rbp + 0x78], 0xc9fc
mov dword [rbp + 0x84], 0x41800000
mov qword [rbp + 0xa8], rax
call fcn.140035d90
test dword [rsi + 8], 0x400
mov rax, qword [0x1400ef990]
je 0x1400518c5
movaps xmm0, xmmword [0x1400d10c0]
movaps xmm1, xmmword [0x1400d0fd0]
mov dword [rax + 0x3944], 0x41200000
mov dword [rax + 0x3948], 0x40c00000
mov dword [rax + 0x395c], 0x41c80000
mov dword [rax + 0x3900], 0x40000000
mov dword [rax + 0x3910], 0x3f000000
mov dword [rax + 0x3914], 0x3f000000
mov dword [rax + 0x3934], 0x40400000
mov dword [rax + 0x393c], 0x40a00000
mov dword [rax + 0x3940], 0x40800000
mov qword [rax + 0x3964], 0x41500000
mov dword [rax + 0x396c], 0x41000000
mov dword [rax + 0x3970], 0x3f800000
mov dword [rax + 0x38f8], 0x40800000
mov dword [rax + 0x38fc], 0x40800000
mov dword [rax + 0x392c], 0x40600000
mov dword [rax + 0x3930], 0x40600000
mov dword [rax + 0x3988], r14d
mov dword [rax + 0x398c], 0x3f000000
movups xmmword [rax + 0x39cc], xmm0
movaps xmm0, xmmword [0x1400d1080]
movups xmmword [rax + 0x39dc], xmm1
movaps xmm1, xmmword [0x1400d1040]
movups xmmword [rax + 0x39ec], xmm0
movaps xmm0, xmmword [0x1400d0f60]
movups xmmword [rax + 0x3a0c], xmm1
xorps xmm1, xmm1
movups xmmword [rax + 0x3a1c], xmm0
movaps xmm0, xmmword [0x1400d1090]
movups xmmword [rax + 0x3a2c], xmm1
movaps xmm1, xmmword [0x1400d0ff0]
movups xmmword [rax + 0x3a3c], xmm0
movaps xmm0, xmmword [0x1400d10a0]
movups xmmword [rax + 0x3a4c], xmm1
movaps xmm1, xmmword [0x1400d0fb0]
movups xmmword [rax + 0x3a5c], xmm0
movaps xmm0, xmmword [0x1400d0f80]
movups xmmword [rax + 0x3a6c], xmm1
movaps xmm1, xmmword [0x1400d1010]
movups xmmword [rax + 0x3a8c], xmm0
movaps xmm0, xmmword [0x1400d0fc0]
movups xmmword [rax + 0x3a7c], xmm1
movaps xmm1, xmmword [0x1400d1090]
movups xmmword [rax + 0x3a9c], xmm0
movaps xmm0, xmmword [0x1400d0f70]
movups xmmword [rax + 0x3aac], xmm1
movaps xmm1, xmmword [0x1400d1010]
movups xmmword [rax + 0x3abc], xmm0
movaps xmm0, xmmword [0x1400d10a0]
movups xmmword [rax + 0x3acc], xmm1
movaps xmm1, xmmword [0x1400d1020]
movups xmmword [rax + 0x3adc], xmm0
movaps xmm0, xmmword [0x1400d0f50]
movups xmmword [rax + 0x3aec], xmm1
movaps xmm1, xmmword [0x1400d10a0]
movups xmmword [rax + 0x3afc], xmm0
movaps xmm0, xmmword [0x1400d0fa0]
movups xmmword [rax + 0x3b0c], xmm1
movaps xmm1, xmmword [0x1400d1030]
movups xmmword [rax + 0x3b1c], xmm0
movaps xmm0, xmmword [0x1400d10a0]
movups xmmword [rax + 0x3b2c], xmm1
movaps xmm1, xmmword [0x1400d1000]
movups xmmword [rax + 0x3b3c], xmm0
movaps xmm0, xmmword [0x1400d1030]
movups xmmword [rax + 0x3b4c], xmm1
movaps xmm1, xmmword [0x1400d10a0]
movups xmmword [rax + 0x3b5c], xmm0
movaps xmm0, xmmword [0x1400d0f40]
movups xmmword [rax + 0x3b6c], xmm1
movaps xmm1, xmmword [0x1400d1010]
movups xmmword [rax + 0x3bac], xmm0
movaps xmm0, xmmword [0x1400d10a0]
movups xmmword [rax + 0x3bbc], xmm1
movaps xmm1, xmmword [0x1400d0fe0]
movups xmmword [rax + 0x3bcc], xmm0
movups xmmword [rax + 0x3c4c], xmm1
movups xmmword [rax + 0x3c5c], xmm0
movups xmmword [rax + 0x3c6c], xmm1
movups xmmword [rax + 0x3c7c], xmm0
movaps xmm1, xmmword [0x1400d0f90]
movups xmmword [rax + 0x3cdc], xmm1
call fcn.14003b9e0
mov rbx, qword [0x1400ef990]
mov rdi, qword [0x1400ef9f0]
test rbx, rbx
je 0x1400518e3
inc dword [rbx + 0xfc]
mov ecx, Ordinal_41
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140051912
mov qword [rax], r14
mov qword [rax + 8], r14
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], r14
mov dword [rax + 0x20], 0x1388
mov dword [rax + 0x24], 0x2710
jmp 0x140051915
mov rax, r14
or dword [rbx + 0xc], 0x1008
lea rcx, str.imgui_impl_dx9
mov qword [rbx + 0x98], rcx
mov rcx, rdi
mov qword [rbx + 0xa8], rax
mov qword [rax], rdi
mov rax, qword [rdi]
call qword [rax + reloc.WS2_32.dll_htonl]
test dword [rbx + 8], 0x400
je 0x140051993
mov rax, qword [0x1400ef990]
lea rcx, [fcn.14003b680]
mov qword [rax + 0x3888], rcx
lea rcx, [fcn.14003b760]
mov qword [rax + 0x3890], rcx
lea rcx, [0x14003b7e0]
mov qword [rax + 0x3898], rcx
lea rcx, [0x14003b850]
mov qword [rax + 0x38a0], rcx
lea rcx, [0x14003b9b0]
mov qword [rax + 0x38a8], rcx
movzx ecx, word [0x1400d0be8]
xorps xmm0, xmm0
mov eax, dword [str.CDQDAR8]
movaps xmmword [rsp + 0x380], xmm8
movaps xmmword [rsp + 0x370], xmm9
mov dword [rsp + 0x70], eax
movzx eax, byte [0x1400d0bea]
xor byte [rsp + 0x71], 0x33
xor al, 0x38
xor byte [rsp + 0x72], 0x34
xor byte [rsp + 0x73], 0x35
movaps xmmword [rsp + 0x360], xmm10
mov word [rsp + 0x74], cx
xor cl, 0x36
xor byte [rsp + 0x75], 0x37
movaps xmmword [rsp + 0x350], xmm11
movaps xmmword [rsp + 0x340], xmm12
movaps xmmword [rsp + 0x330], xmm13
mov byte [rsp + 0x74], cl
lea rcx, [rsp + 0x70]
movaps xmmword [rsp + 0x320], xmm14
movaps xmmword [rsp + 0x310], xmm15
movups xmmword [rbp + 0x1d8], xmm0
mov byte [rsp + 0x70], WSACleanup
movups xmmword [rbp + 0x1e8], xmm0
mov byte [rsp + 0x76], al
movups xmmword [rbp + 0x1f8], xmm0
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
cmp dword [rbp + 0x1e0], 0x12
je 0x140052c8a
movss xmm10, dword [0x1400d0c58]
lea rbx, [0x1400cba34]
movss xmm9, dword [0x1400d0de8]
xorps xmm6, xmm6
movss xmm15, dword [0x1400d0d54]
movss xmm12, dword [0x1400d0d18]
movss xmm8, dword [0x1400d0d38]
movss xmm11, dword [0x1400d0d78]
movss xmm13, dword [0x1400d0c84]
movss xmm14, dword [0x1400d0c74]
mov r15d, dword [rbp + 0x108]
nop word [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, [rbp + 0x1d8]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140051aed
lea rcx, [rbp + 0x1d8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1d8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x140052c6a
mov rax, qword [0x1400ef990]
test rax, rax
je 0x140051b02
mov rcx, qword [rax + 0xa8]
jmp 0x140051b05
mov rcx, r14
cmp qword [rcx + 0x18], 0
jne 0x140051b11
call fcn.14003b4e0
call fcn.14003c980
call fcn.140008ca0
movss xmm2, dword [0x1400e20f4]
ucomiss xmm2, xmm7
movss xmm1, dword [0x1400efd08]
movss xmm0, dword [0x1400efd0c]
jp 0x140051b5c
jne 0x140051b5c
comiss xmm1, xmm6
jb 0x140051b5c
comiss xmm6, xmm0
jb 0x140051b5c
addss xmm1, xmm10
movss dword [0x1400efd0c], xmm6
movaps xmm0, xmm6
movss dword [0x1400efd08], xmm1
comiss xmm7, xmm2
jb 0x140051b85
comiss xmm1, xmm7
jb 0x140051b85
ucomiss xmm0, xmm6
jp 0x140051b85
jne 0x140051b85
addss xmm2, xmm9
movss dword [0x1400efd08], xmm7
movaps xmm1, xmm7
movss dword [0x1400e20f4], xmm2
comiss xmm6, xmm2
jb 0x140051bb0
ucomiss xmm1, xmm7
jp 0x140051bb0
jne 0x140051bb0
comiss xmm0, xmm6
jb 0x140051bb0
addss xmm0, xmm10
movss dword [0x1400e20f4], xmm6
movaps xmm2, xmm6
movss dword [0x1400efd0c], xmm0
jmp 0x140051bb7
ucomiss xmm2, xmm6
jp 0x140051bd9
jne 0x140051bd9
comiss xmm7, xmm1
jb 0x140051bd9
comiss xmm0, xmm7
jb 0x140051bd9
addss xmm1, xmm9
movss dword [0x1400efd0c], xmm7
movaps xmm0, xmm7
movss dword [0x1400efd08], xmm1
comiss xmm2, xmm6
jb 0x140051c02
comiss xmm6, xmm1
jb 0x140051c02
ucomiss xmm0, xmm7
jp 0x140051c02
jne 0x140051c02
addss xmm2, xmm10
movss dword [0x1400efd08], xmm6
movaps xmm1, xmm6
movss dword [0x1400e20f4], xmm2
comiss xmm2, xmm7
jb 0x140051c28
comiss xmm1, xmm6
jb 0x140051c28
comiss xmm7, xmm0
jb 0x140051c28
addss xmm0, xmm9
mov dword [0x1400e20f4], 0x3f800000
movss dword [0x1400efd0c], xmm0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, r13d
mov dword [0x1400ef9a8], eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, eax
mov dword [0x1400ef9a4], eax
mov eax, dword [0x1400ef9a8]
mov r8d, 0xc212a
cdq
sub eax, edx
sar eax, 1
mov dword [0x1400efa08], eax
mov eax, ecx
cdq
lea rcx, str.Hurricane___VALORANT
sub eax, edx
lea rdx, [0x1400eeafc]
sar eax, 1
mov dword [0x1400ef9a0], eax
mov rax, qword [0x1400ef990]
or dword [rax + 0x48c8], 0x43
mov qword [rax + 0x48dc], 0
mov qword [rax + 0x48e4], 0
mov dword [rax + 0x48cc], 2
mov byte [rax + 0x4904], 1
mov dword [rax + 0x48ec], 0x43b90000
mov dword [rax + 0x48f0], 0x43af0000
mov dword [rax + 0x48d0], r13d
mov dword [rax + 0x4928], 0x3f800000
call fcn.14000ec40
xor r8d, r8d
lea rcx, str.Hurricane___VALORANT
xor edx, edx
call fcn.14000ec40
mov rcx, qword [0x1400ef990]
lea rdx, [rbp - 0x38]
xor r8d, r8d
mov dword [rbp - 0x38], 0
mov dword [rbp - 0x34], 0x41a00000
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [0x1400d0a48]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, xmm15
addss xmm0, dword [0x1400d0d34]
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140041230
test al, al
je 0x140051d6f
mov dword [reloc.WS2_32.dll_bind], r14d
movaps xmm1, xmm12
movaps xmm0, xmm6
call fcn.1400153a0
mov rdx, qword [0x1400ef990]
lea rcx, [0x1400d0a58]
xor r8d, r8d
mov dword [rbp - 0x30], 0
mov dword [rbp - 0x2c], 0x41a00000
mov rax, qword [rdx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rdx + 0x3ff0]
lea rdx, [rbp - 0x30]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, xmm15
addss xmm0, dword [0x1400d0d7c]
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140041230
test al, al
je 0x140051e05
mov edx, r13d
mov dword [reloc.WS2_32.dll_bind], edx
jmp 0x140051e0b
mov edx, dword [reloc.WS2_32.dll_bind]
movaps xmm1, xmm12
movaps xmm0, xmm6
call fcn.1400153a0
test edx, edx
jne 0x1400524c0
mov rcx, qword [0x1400ef990]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [0x1400d0a68]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, dword [0x1400d0d64]
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140040900
mov rcx, qword [0x1400ef990]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [0x1400d0a78]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, xmm11
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
cmp dword [0x1400efce8], 0
sete dl
call fcn.140042880
test al, al
je 0x140051efd
mov dword [0x1400efce8], r14d
mov rcx, qword [0x1400ef990]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [0x1400d0a90]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, xmm11
addss xmm0, dword [0x1400d0da0]
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
cmp dword [0x1400efce8], 1
sete dl
call fcn.140042880
test al, al
je 0x140051f78
mov dword [0x1400efce8], r13d
mov rcx, qword [0x1400ef990]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [0x1400d0aa0]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, xmm11
addss xmm0, dword [0x1400d0db0]
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
cmp dword [0x1400efce8], 2
sete dl
call fcn.140042880
test al, al
je 0x140051ff6
mov dword [0x1400efce8], 2
mov rcx, qword [0x1400ef990]
lea r9, [rbp + 0x108]
lea r8, [0x1400efcec]
mov dword [rbp + 0x100], 0x64
mov dword [rbp + 0x108], r14d
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [0x1400d0ab0]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, dword [0x1400d0d8c]
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
call fcn.1400443d0
mov rcx, qword [0x1400ef990]
lea r9, [rbp + 0x100]
lea r8, [0x1400eeb28]
mov dword [rbp + 0x108], 0x64
mov dword [rbp + 0x100], reloc.WLDAP32.dll_Ordinal_50
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [0x1400d0ac8]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, dword [0x1400d0d9c]
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
lea rax, [rbp + 0x108]
mov qword [rsp + 0x20], rax
call fcn.1400443d0
mov rcx, qword [0x1400ef990]
lea r9, [rbp + 0x100]
lea r8, [0x1400eeb00]
mov dword [rbp + 0x108], 0xa
mov dword [rbp + 0x100], r14d
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [0x1400ca910]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, dword [0x1400d0da4]
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
lea rax, [rbp + 0x108]
mov qword [rsp + 0x20], rax
call fcn.1400443d0
mov rcx, qword [0x1400ef990]
lea r9, [rbp + 0x100]
mov dword [rbp + 0x108], 0xa
mov dword [rbp + 0x100], r14d
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, dword [0x1400d0da8]
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
lea rax, [rbp + 0x108]
mov qword [rsp + 0x20], rax
lea r8, reloc.WS2_32.dll_getpeername
lea rcx, [0x1400ca914]
call fcn.1400443d0
mov rcx, qword [0x1400ef990]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, str.
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, dword [0x1400d0db4]
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140040900
mov rcx, qword [0x1400ef990]
lea rdx, [rsp + 0x60]
xor r8d, r8d
mov dword [rsp + 0x60], 0x42700000
mov dword [rsp + 0x64], 0x41980000
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, str.Set_Bind
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, dword [0x1400d0db8]
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140041230
test al, al
je 0x14005232c
mov byte [0x1400efa0c], 1
mov rcx, qword [0x1400ef990]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [rbp + 0x160]
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, dword [0x1400d0dbc]
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140050770
cmp qword [rax + 0x18], 0xf
jbe 0x14005239c
mov rax, qword [rax]
mov rdx, rax
lea rcx, str._:__s
call fcn.140040900
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x1400523ec
mov rcx, qword [rbp + 0x160]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400523e7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052c79
call fcn.1400b7adc
mov rcx, qword [0x1400ef990]
lea rdx, str.by_f3ckaquablue_and_cur1e
mov qword [rbp + 0x170], r14
mov qword [rbp + 0x178], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x160], 0
mov rax, qword [rcx + 0x3ff0]
mov dword [rbp + 0x194], 0x3f800000
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [rbp + 0x188]
movss xmm0, dword [rax + 0x48]
subss xmm0, dword [rax + 0xb0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0xb4]
mov byte [rax + 0x171], 1
addss xmm0, xmm8
addss xmm1, dword [0x1400d0dc0]
movss dword [rax + 0x130], xmm0
movss xmm0, dword [0x1400e20f4]
subss xmm0, xmm14
movss dword [rax + 0x134], xmm1
movss xmm1, dword [0x1400efd08]
subss xmm1, xmm13
movss dword [rbp + 0x188], xmm0
movss xmm0, dword [0x1400efd0c]
movss dword [rbp + 0x190], xmm0
movss dword [rbp + 0x18c], xmm1
call fcn.140040a40
call fcn.140011bf0
jmp 0x140052737
cmp edx, 1
jne 0x140052737
mov rcx, qword [0x1400ef990]
mov dword [rbp - 0x4c], 0x3f800000
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], dl
mov rax, qword [rcx + 0x3ff0]
lea rcx, [rbp - 0x58]
movss xmm0, dword [rax + 0x48]
subss xmm0, dword [rax + 0xb0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0xb4]
mov byte [rax + 0x171], dl
lea rdx, str.Build_date:_19.05.2024
addss xmm0, xmm8
addss xmm1, dword [0x1400d0d60]
movss dword [rax + 0x130], xmm0
movss xmm0, dword [0x1400e20f4]
subss xmm0, xmm14
movss dword [rax + 0x134], xmm1
movss xmm1, dword [0x1400efd08]
subss xmm1, xmm13
movss dword [rbp - 0x58], xmm0
movss xmm0, dword [0x1400efd0c]
movss dword [rbp - 0x50], xmm0
movss dword [rbp - 0x54], xmm1
call fcn.140040a40
mov rcx, qword [0x1400ef990]
lea rdx, str.Expired:_Lifetime
mov dword [rbp - 0x74], 0x3f800000
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, [rbp - 0x80]
movss xmm0, dword [rax + 0x48]
subss xmm0, dword [rax + 0xb0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0xb4]
mov byte [rax + 0x171], 1
addss xmm0, xmm8
addss xmm1, dword [0x1400d0d70]
movss dword [rax + 0x130], xmm0
movss xmm0, dword [0x1400e20f4]
subss xmm0, xmm14
movss dword [rax + 0x134], xmm1
movss xmm1, dword [0x1400efd08]
subss xmm1, xmm13
movss dword [rbp - 0x80], xmm0
movss xmm0, dword [0x1400efd0c]
movss dword [rbp - 0x78], xmm0
movss dword [rbp - 0x7c], xmm1
call fcn.140040a40
mov rcx, qword [0x1400ef990]
lea r9, [rbp + 0x100]
mov qword [rsp + 0x28], rbx
lea r8, [0x1400efa08]
mov dword [rbp + 0x108], 0x64
mov dword [rbp + 0x100], r13d
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
lea rcx, str.Height
movss xmm1, dword [rax + 0x4c]
movss xmm0, dword [rax + 0x48]
subss xmm1, dword [rax + 0xb4]
subss xmm0, dword [rax + 0xb0]
mov byte [rax + 0x171], 1
addss xmm1, dword [0x1400d0d80]
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
lea rax, [rbp + 0x108]
mov qword [rsp + 0x20], rax
call fcn.140044c60
mov rcx, qword [0x1400ef990]
mov rax, qword [rcx + 0x3ff0]
mov byte [rax + 0xe5], 1
mov rax, qword [rcx + 0x3ff0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0xb4]
movss xmm0, dword [rax + 0x48]
subss xmm0, dword [rax + 0xb0]
addss xmm1, dword [0x1400d0d98]
addss xmm0, xmm8
movss dword [rax + 0x134], xmm1
mov byte [rax + 0x171], 1
lea r9, [rbp + 0x100]
mov qword [rsp + 0x28], rbx
lea r8, [0x1400ef9a0]
lea rcx, str.Width
mov dword [rbp + 0x108], 0x64
mov dword [rbp + 0x100], r13d
movss dword [rax + 0x130], xmm0
lea rax, [rbp + 0x108]
mov qword [rsp + 0x20], rax
call fcn.140044c60
cmp byte [0x1400efa0c], 0
je 0x14005276b
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x14005275e
inc ebx
cmp ebx, 0xff
jle 0x140052745
jmp 0x14005276b
mov dword [reloc.WS2_32.dll_getpeername], ebx
mov byte [0x1400efa0c], 0
call fcn.140011bf0
mov ecx, dword [0x1400efce8]
test ecx, ecx
je 0x140052794
sub ecx, 1
je 0x14005278c
cmp ecx, 1
jne 0x14005279a
mov r15d, 0x55ffff
jmp 0x14005279a
mov r15d, 0x6a63eb
jmp 0x14005279a
mov r15d, 0xfe69eb
mov ecx, dword [reloc.WS2_32.dll_getpeername]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140052aaa
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov rcx, rax
mov rbx, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r8d, dword [0x1400ef9a4]
mov rcx, rbx
mov edx, dword [0x1400ef9a8]
mov r12, rax
mov qword [rbp + 0x108], rax
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov rdx, rax
mov rcx, r12
mov r13, rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [0x1400ef9a4]
xor r8d, r8d
mov r9d, dword [0x1400ef9a8]
xor edx, edx
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ecx
mov rcx, r12
call qword [sym.imp.GDI32.dll_BitBlt]
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov edx, dword [0x1400ef9a8]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x1cc], rax
mov eax, dword [0x1400ef9a4]
movups xmmword [rbp + 0x1ac], xmm0
mov dword [rbp + 0x1ac], edx
neg eax
imul edx, dword [0x1400ef9a4]
movups xmmword [rbp + 0x1bc], xmm0
mov dword [rbp + 0x1a8], Ordinal_41
mov dword [rbp + 0x1b0], eax
mov dword [rbp + 0x1b4], 0x200001
shl edx, 2
movsxd rcx, edx
call fcn.1400b7bbc
mov r9d, dword [0x1400ef9a4]
mov rsi, rax
lea rax, [rbp + 0x1a8]
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov rdx, r13
mov qword [rsp + 0x20], rsi
mov rcx, r12
call qword [sym.imp.GDI32.dll_GetDIBits]
test eax, eax
je 0x140052a86
mov ecx, dword [0x1400efa08]
mov edi, ecx
mov edx, dword [reloc.WS2_32.dll_getpeername]
sub edi, edx
lea eax, [rcx + rdx]
cmp edi, eax
jg 0x140052a86
mov r9d, dword [reloc.WLDAP32.dll_Ordinal_60]
mov r12d, 1
mov r10d, dword [reloc.WS2_32.dll_getpeername]
mov r11d, dword [0x1400ef9a0]
nop word [rax + rax]
mov ebx, r11d
lea eax, [r11 + r10]
sub ebx, r10d
cmp ebx, eax
jg 0x140052a6f
movzx r14d, r15b
nop word [rax + rax]
mov edx, ebx
imul edx, dword [0x1400ef9a8]
add edx, edi
shl edx, 2
movsxd rax, edx
movzx r8d, byte [rax + rsi + 1]
shl r8d, 8
movsxd rax, edx
movzx ecx, byte [rax + rsi]
shl ecx, 0x10
or r8d, ecx
movsxd rax, edx
movzx ecx, byte [rax + rsi + 2]
or r8d, ecx
movzx ecx, r8b
sub ecx, r14d
mov eax, ecx
neg eax
cmovs eax, ecx
cmp eax, r9d
jg 0x1400529a6
movzx ecx, r8w
shr ecx, 8
movzx eax, r15w
shr eax, 8
sub ecx, eax
mov eax, ecx
neg eax
cmovs eax, ecx
cmp eax, r9d
jg 0x1400529a6
shr r8d, 0x10
mov eax, r15d
shr eax, 0x10
movzx ecx, al
sub r8d, ecx
mov eax, r8d
neg eax
cmovs eax, r8d
cmp eax, r9d
jg 0x1400529a6
movzx eax, r12b
jmp 0x1400529a8
xor al, al
test al, al
je 0x140052a55
xor eax, eax
mov dword [rbp + 0x168], edi
xorps xmm0, xmm0
mov qword [rbp + 0x160], rax
lea rdx, [rbp + 0x160]
mov dword [rbp + 0x170], eax
mov ecx, r12d
mov dword [rbp + 0x16c], ebx
lea r8d, [rax + 0x28]
mov dword [rbp + 0x174], 2
movdqu xmmword [rbp + 0x178], xmm0
call qword [sym.imp.USER32.dll_SendInput]
xorps xmm0, xmm0
mov dword [rbp + 0x160], 0
xorps xmm1, xmm1
mov dword [rbp + 0x174], 4
mov r8d, Ordinal_41
lea rdx, [rbp + 0x160]
mov ecx, r12d
movdqu xmmword [rbp + 0x164], xmm0
movdqu xmmword [rbp + 0x178], xmm1
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, dword [0x1400efcec]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r9d, dword [reloc.WLDAP32.dll_Ordinal_60]
mov r10d, dword [reloc.WS2_32.dll_getpeername]
mov r11d, dword [0x1400ef9a0]
inc ebx
lea eax, [r11 + r10]
cmp ebx, eax
jle 0x140052920
mov edx, dword [reloc.WS2_32.dll_getpeername]
mov ecx, dword [0x1400efa08]
inc edi
lea eax, [rcx + rdx]
cmp edi, eax
jle 0x140052900
mov r12, qword [rbp + 0x108]
xor r14d, r14d
mov rcx, rsi
call fcn.1400b7adc
mov rcx, r13
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, r12
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rsi, qword [rbp - 0x60]
mov r13d, 1
mov rcx, qword [0x1400ef9f0]
mov r9d, 3
mov dword [rsp + 0x30], r14d
xor r8d, r8d
movss dword [rsp + 0x28], xmm7
xor edx, edx
mov dword [rsp + 0x20], r14d
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x1400ef9f0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140052b24
call fcn.14000b320
mov rax, qword [0x1400ef990]
mov rcx, qword [rax + 0x49e8]
mov rax, qword [rcx]
mov rcx, r14
add rax, 0xa8
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14003acd0
mov rcx, qword [0x1400ef9f0]
mov rax, qword [rcx]
call qword [rax + 0x150]
test dword [rsi + 8], 0x400
je 0x140052bfd
call fcn.14001e390
mov rbx, qword [0x1400ef990]
mov r14d, r13d
mov eax, dword [rbx + 0x38c0]
cmp eax, 1
jle 0x140052b9c
mov esi, 8
mov rax, qword [rbx + 0x38c8]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x140052b8a
mov rax, qword [rbx + 0x3860]
test rax, rax
je 0x140052b77
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x38a0]
test rax, rax
je 0x140052b8a
xor edx, edx
mov rcx, rdi
call rax
mov eax, dword [rbx + 0x38c0]
inc r14d
add rsi, 8
cmp r14d, eax
jl 0x140052b50
mov r14d, r13d
cmp eax, 1
jle 0x140052bfa
mov esi, 8
nop dword [rax]
mov rax, qword [rbx + 0x38c8]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x140052bea
mov rax, qword [rbx + 0x3868]
test rax, rax
je 0x140052bd7
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x38a8]
test rax, rax
je 0x140052bea
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
cmp r14d, dword [rbx + 0x38c0]
jl 0x140052bb0
xor r14d, r14d
mov rcx, qword [0x1400ef9f0]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r14
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140052c56
mov rcx, qword [0x1400ef9f0]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140052c56
call fcn.14003b590
mov rcx, qword [0x1400ef9f0]
lea rdx, [0x1400ef9b0]
mov rax, qword [rcx]
call qword [rax + 0x80]
call fcn.14003b4e0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140052c80
mov rsi, qword [rbp - 0x60]
lea rbx, [0x1400cba34]
cmp dword [rbp + 0x1e0], 0x12
jne 0x140051ab0
jmp 0x140052c8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rbp + 0x1e0], reloc.WS2_32.dll_select
mov rbx, qword [0x1400ef990]
test rbx, rbx
je 0x140052c9f
mov rdi, qword [rbx + 0xa8]
jmp 0x140052ca2
mov rdi, r14
call fcn.14001e990
call fcn.14003b590
mov rcx, qword [rdi]
test rcx, rcx
je 0x140052cba
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x1400ef990]
mov qword [rbx + 0x98], r14
mov qword [rbx + 0xa8], r14
test rax, rax
je 0x140052cda
dec dword [rax + 0xfc]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1400ef990]
test rbx, rbx
je 0x140052cf8
mov rdi, qword [rbx + 0xa0]
jmp 0x140052cfb
mov rdi, r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.14001e990
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x140052d27
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1400ef990]
mov qword [rbx + 0x90], r14
mov qword [rbx + 0xa0], r14
test rax, rax
je 0x140052d47
dec dword [rax + 0xfc]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1400ef990]
mov qword [0x1400ef990], rbx
call fcn.1400064d0
mov qword [0x1400ef990], r14
test rbx, rbx
je 0x140052d92
mov rcx, rbx
call fcn.140029dc0
mov rax, qword [0x1400ef990]
test rax, rax
je 0x140052d89
dec dword [rax + 0xfc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1400ef9f0]
test rcx, rcx
je 0x140052dab
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1400ef9f0], r14
mov rcx, qword [0x1400ef9f8]
test rcx, rcx
je 0x140052dc4
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1400ef9f8], r14
mov rcx, qword [0x1400efa00]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.USER32.dll_UnregisterClassA]
movaps xmm14, xmmword [rsp + 0x320]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x330]
movaps xmm12, xmmword [rsp + 0x340]
movaps xmm11, xmmword [rsp + 0x350]
movaps xmm10, xmmword [rsp + 0x360]
movaps xmm9, xmmword [rsp + 0x370]
movaps xmm8, xmmword [rsp + 0x380]
movaps xmm15, xmmword [rsp + 0x310]
movaps xmm7, xmmword [rsp + 0x390]
mov rcx, qword [rbp + 0x208]
xor rcx, rsp
call fcn.1400b73f0
lea r11, [rsp + 0x3b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, qword [0x1400ef9f8]
mov rdx, qword [0x1400ef9f0]
test rdx, rdx
je 0x140052e96
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x1400ef9f8]
mov qword [0x1400ef9f0], r14
test rcx, rcx
je 0x140052ea8
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
mov qword [0x1400ef9f8], r14
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, r13d
jmp 0x140052e37
call fcn.14004fa30
int3
call fcn.140040050
int3