Function at 0x140036ab0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x140106080]
xor rax, rsp
mov qword [rbp + 0xa8], rax
lea rdx, [0x14016eb48]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.d3d9.dll_Direct3DCreate9Ex]
test eax, eax
jns 0x140036b06
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r15d, r15d
mov qword [0x14016eafc], r15
mov qword [0x14016eb08], 1
mov qword [0x14016eb24], r15
mov dword [0x14016eb18], 1
mov r9, qword [0x14016eae0]
mov qword [0x14016eb10], r9
mov dword [0x14016eb04], r15d
mov dword [0x14016eaf8], 0x15
mov eax, dword [0x14016f2dc]
mov dword [0x14016eaf0], eax
mov eax, dword [0x14016f2d8]
mov dword [0x14016eaf4], eax
mov dword [0x14016eb1c], 1
mov dword [0x14016eb20], 0x50
mov dword [0x14016eb2c], 0x80000000
mov rcx, qword [0x14016eb48]
mov rax, qword [rcx]
lea rdx, [0x14016eb30]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], r15
lea rdx, [0x14016eaf0]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
xor edx, edx
lea r8d, [r15 + 1]
call qword [rax + 0xa0]
test eax, eax
jns 0x140036bd8
mov rcx, qword [0x14016eb48]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
lea ecx, [r15 + 4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rsi, qword [0x14016eb78]
test rsi, rsi
je 0x140036bea
inc dword [rsi + 0xf4]
mov ecx, 0x5e00
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0xa0], rax
lea rcx, [rsp + 0x40]
mov qword [rbp + 0x98], rcx
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140036c1e
xor edx, edx
mov rcx, rax
call fcn.140037e20
jmp 0x140036c21
mov rax, r15
mov qword [0x14016eb78], rax
call fcn.14003ba60
test rsi, rsi
je 0x140036c3b
mov qword [0x14016eb78], rsi
jmp 0x140036c42
mov rsi, qword [0x14016eb78]
mov dword [rsi + 0x37f0], 0x40a00000
mov dword [rsi + 0x380c], 0x40a00000
mov qword [rsi + 0x382c], r15
mov qword [rsi + 0x37e8], r15
xor ecx, ecx
call fcn.140057aa0
mov r14, qword [0x14016eae0]
mov rdi, qword [0x14016eb78]
lea rcx, [rbp + 0x98]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140036dca
lea rcx, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140036dca
mov rax, qword [0x14016eb78]
test rax, rax
je 0x140036cb5
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x140036ce2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
mov qword [rbx + 0x40], rax
jmp 0x140036ce5
mov rbx, r15
mov qword [rdi + 0x98], rbx
lea rax, str.imgui_impl_win32
mov qword [rdi + 0x88], rax
or dword [rdi + 0xc], 6
mov qword [rbx], r14
mov rax, qword [rbp + 0x98]
mov qword [rbx + 0x20], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbx + 0x18], rax
mov dword [rbx + 0x28], 9
mov rax, qword [0x14016eb78]
mov rcx, qword [rax + 0x48a8]
mov rax, qword [rcx]
mov qword [rax + 0x28], r14
mov byte [rbx + 0x2d], 1
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x70], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x78], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x80], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x88], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 0x90], rax
mov rdi, r15
nop word [rax + rax]
mov rcx, qword [rbp + rdi*8 + 0x70]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
jne 0x140036d9e
inc rdi
cmp rdi, 5
jl 0x140036d80
jmp 0x140036dca
mov qword [rbx + 0x30], r14
lea rdx, str.XInputGetCapabilities
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x38], rax
lea rdx, str.XInputGetState
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbx + 0x40], rax
mov rdi, qword [0x14016eb30]
mov rbx, qword [0x14016eb78]
test rbx, rbx
je 0x140036de3
inc dword [rbx + 0xf4]
mov ecx, Ordinal_41
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140036e12
mov qword [rax], r15
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
mov dword [rax + 0x20], 0x1388
mov dword [rax + 0x24], 0x2710
jmp 0x140036e15
mov rax, r15
mov qword [rbx + 0xa0], rax
lea rcx, str.imgui_impl_dx9
mov qword [rbx + 0x90], rcx
or dword [rbx + 0xc], 8
mov qword [rax], rdi
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rsp + 0x50], xmm2
movups xmmword [rsp + 0x60], xmm2
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
mov qword [rbp - 0x30], rax
mov byte [rsp + 0x5c], 1
mov dword [rsp + 0x68], 3
mov dword [rsp + 0x6c], 1
mov dword [rbp - 0x6c], 0x7f7fffff
mov dword [rbp - 0x60], 0x3f800000
mov edi, 0xffff
mov word [rbp - 0x5c], di
movaps xmm0, xmmword [rsp + 0x50]
movaps xmmword [rbp - 0x20], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm1
movaps xmmword [rbp], xmm2
movaps xmmword [rbp + 0x10], xmm2
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x20], xmm0
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x30], xmm1
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x50], xmm2
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp + 0x60], xmm0
lea rax, [0x140127a90]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x18], 0x3c854
mov dword [rbp - 0xc], 0x41b00000
lea rbx, [0x1400f1be0]
mov qword [rbp + 0x18], rbx
lea rdx, [rbp - 0x20]
mov rcx, qword [rsi + 0x58]
call fcn.14005f100
mov qword [0x14016eb68], rax
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rsp + 0x50], xmm2
movups xmmword [rsp + 0x60], xmm2
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
mov qword [rbp - 0x30], rax
mov byte [rsp + 0x5c], 1
mov dword [rsp + 0x68], 3
mov dword [rsp + 0x6c], 1
mov dword [rbp - 0x6c], 0x7f7fffff
mov dword [rbp - 0x60], 0x3f800000
mov word [rbp - 0x5c], di
movaps xmm0, xmmword [rsp + 0x50]
movaps xmmword [rbp - 0x20], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm1
movaps xmmword [rbp], xmm2
movaps xmmword [rbp + 0x10], xmm2
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x20], xmm0
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x30], xmm1
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x50], xmm2
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp + 0x60], xmm0
lea rax, [0x140106170]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x18], 0x1fb04
mov dword [rbp - 0xc], 0x41a80000
mov qword [rbp + 0x18], rbx
lea rdx, [rbp - 0x20]
mov rcx, qword [rsi + 0x58]
call fcn.14005f100
mov qword [0x14016eb40], rax
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rsp + 0x50], xmm2
movups xmmword [rsp + 0x60], xmm2
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
mov qword [rbp - 0x30], rax
mov byte [rsp + 0x5c], 1
mov dword [rsp + 0x68], 3
mov dword [rsp + 0x6c], 1
mov dword [rbp - 0x6c], 0x7f7fffff
mov dword [rbp - 0x60], 0x3f800000
mov word [rbp - 0x5c], di
movaps xmm0, xmmword [rsp + 0x50]
movaps xmmword [rbp - 0x20], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm1
movaps xmmword [rbp], xmm2
movaps xmmword [rbp + 0x10], xmm2
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x20], xmm0
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x30], xmm1
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x50], xmm2
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp + 0x60], xmm0
lea rax, [0x140127100]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x18], 0x984
mov dword [rbp - 0xc], 0x41e00000
mov qword [rbp + 0x18], rbx
lea rdx, [rbp - 0x20]
mov rcx, qword [rsi + 0x58]
call fcn.14005f100
mov qword [0x14016eb58], rax
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rsp + 0x50], xmm2
movups xmmword [rsp + 0x60], xmm2
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
mov qword [rbp - 0x30], rax
mov byte [rsp + 0x5c], 1
mov dword [rsp + 0x68], 3
mov dword [rsp + 0x6c], 1
mov dword [rbp - 0x6c], 0x7f7fffff
mov dword [rbp - 0x60], 0x3f800000
mov word [rbp - 0x5c], di
movaps xmm0, xmmword [rsp + 0x50]
movaps xmmword [rbp - 0x20], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm1
movaps xmmword [rbp], xmm2
movaps xmmword [rbp + 0x10], xmm2
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x20], xmm0
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x30], xmm1
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x50], xmm2
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp + 0x60], xmm0
lea rax, [0x140125c80]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x18], 0xf2c
mov dword [rbp - 0xc], 0x41a80000
mov qword [rbp + 0x18], rbx
lea rdx, [rbp - 0x20]
mov rcx, qword [rsi + 0x58]
call fcn.14005f100
mov qword [0x14016eb60], rax
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rsp + 0x50], xmm2
movups xmmword [rsp + 0x60], xmm2
movups xmmword [rbp - 0x70], xmm2
movups xmmword [rbp - 0x60], xmm2
mov qword [rbp - 0x30], rax
mov byte [rsp + 0x5c], 1
mov dword [rsp + 0x68], 3
mov dword [rsp + 0x6c], 1
mov dword [rbp - 0x6c], 0x7f7fffff
mov dword [rbp - 0x60], 0x3f800000
mov word [rbp - 0x5c], di
movaps xmm0, xmmword [rsp + 0x50]
movaps xmmword [rbp - 0x20], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm1
movaps xmmword [rbp], xmm2
movaps xmmword [rbp + 0x10], xmm2
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x20], xmm0
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x30], xmm1
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x50], xmm2
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp + 0x60], xmm0
lea rax, [0x140126bb0]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x18], 0x54c
mov dword [rbp - 0xc], 0x41d00000
mov qword [rbp + 0x18], rbx
lea rdx, [rbp - 0x20]
mov rcx, qword [rsi + 0x58]
call fcn.14005f100
mov qword [0x14016eb50], rax
mov rcx, qword [0x14016eb48]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
xor eax, eax
mov rcx, qword [rbp + 0xa8]
xor rcx, rsp
call fcn.1400d5e20
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret