Function at 0x1400440b0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Get kernel32 base address
Read .ini file
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x490
movaps xmmword [rax - 0x28], xmm7
mov rax, qword [0x140327010]
xor rax, rsp
mov qword [rsp + 0x470], rax
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov eax, dword [str.P___Y]
mov dword [rsp + 0x88], eax
movzx eax, word [0x1403138a8]
mov word [rsp + 0x8c], ax
mov al, byte [reloc.WS2_32.dll_gethostname]
mov byte [rsp + 0x8e], al
mov r8d, ebx
lea r9, [rsp + 0x88]
mov r12d, 0x51eb851f
mov r13b, 0x33
lea edi, [rbx + 1]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 7
jl 0x14004412e
movzx eax, word [0x1403128d0]
mov word [rsp + 0x80], ax
mov r8d, ebx
lea r9, [rsp + 0x80]
mov esi, 2
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, esi
jl 0x140044173
xor ecx, ecx
call fcn.1401378b0
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x88]
call fcn.140157a50
mov rax, qword [0x140312c80]
mov qword [rsp + 0x88], rax
mov r8d, ebx
lea r9, [rsp + 0x88]
mov r14d, 8
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, r14d
jl 0x1400441d7
movzx eax, word [0x140313780]
mov word [rsp + 0x80], ax
mov r8d, ebx
lea r9, [rsp + 0x80]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, esi
jl 0x140044216
mov ecx, edi
call fcn.1401378b0
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x88]
call fcn.140157a50
mov rax, qword [0x140312c80]
mov qword [rsp + 0x88], rax
mov r8d, ebx
lea r9, [rsp + 0x88]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, r14d
jl 0x140044274
movzx eax, word [0x140313780]
mov word [rsp + 0x80], ax
mov r8d, ebx
lea r9, [rsp + 0x80]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, esi
jl 0x1400442b3
mov ecx, esi
call fcn.1401378b0
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x88]
call fcn.140157a50
call fcn.14003b040
mov eax, dword [str.PXF6]
mov dword [rsp + 0x88], eax
mov r8d, ebx
lea r9, [rsp + 0x88]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 4
jl 0x140044314
lea rcx, [rsp + 0x88]
call fcn.1401607f0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
mov rcx, r14
call fcn.140060d60
lea rcx, [0x14003a084]
mov qword [rax], rcx
mov qword [rsp + 0x370], rax
lea rcx, [rsp + 0xf8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14005c9dc]
xor edx, edx
xor ecx, ecx
call fcn.140158690
mov qword [rsp + 0xf0], rax
test rax, rax
je 0x14004663e
cmp dword [rsp + 0xf8], ebx
je 0x140046736
movaps xmm0, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0x370], xmm0
lea rcx, [rsp + 0x370]
call fcn.1400642ec
test eax, eax
jne 0x140046736
xorps xmm0, xmm0
movdqa xmmword [rsp + 0xf0], xmm0
lea rdx, [0x14003a350]
lea rcx, [rsp + 0x170]
call fcn.14004d5fc
mov rsi, rax
cmp dword [rax + 8], ebx
je 0x14004672e
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0xf0], xmm0
lea rcx, [rsp + 0xf0]
call fcn.1400642ec
test eax, eax
jne 0x14004672e
xorps xmm0, xmm0
movdqu xmmword [rsi], xmm0
cmp dword [rsp + 0x178], ebx
jne 0x140046650
lea rdx, [0x14003a5b8]
lea rcx, [rsp + 0x90]
call fcn.14004d5fc
mov rsi, rax
cmp dword [rax + 8], ebx
je 0x140046726
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x170], xmm0
lea rcx, [rsp + 0x170]
call fcn.1400642ec
test eax, eax
jne 0x140046726
xorps xmm0, xmm0
movdqu xmmword [rsi], xmm0
cmp dword [rsp + 0x98], ebx
jne 0x140046656
lea rdx, [0x14003a774]
lea rcx, [rsp + 0xb0]
call fcn.14004d5fc
mov rsi, rax
cmp dword [rax + 8], ebx
je 0x14004671e
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0x90], xmm0
lea rcx, [rsp + 0x90]
call fcn.1400642ec
test eax, eax
jne 0x14004671e
xorps xmm0, xmm0
movdqu xmmword [rsi], xmm0
cmp dword [rsp + 0xb8], ebx
jne 0x14004665c
lea rdx, [0x14003a0a8]
lea rcx, [rsp + 0x350]
call fcn.14004d5fc
mov rsi, rax
cmp dword [rax + 8], ebx
je 0x140046716
movups xmm0, xmmword [rax]
movdqu xmmword [rsp + 0xb0], xmm0
lea rcx, [rsp + 0xb0]
call fcn.1400642ec
test eax, eax
jne 0x140046716
xorps xmm0, xmm0
movdqu xmmword [rsi], xmm0
cmp dword [rsp + 0x358], ebx
jne 0x140046662
mov rcx, r14
call fcn.140060d60
lea rcx, [0x14003ada8]
mov qword [rax], rcx
mov qword [rsp + 0x370], rax
lea rcx, [rsp + 0x138]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14005c9dc]
xor edx, edx
xor ecx, ecx
call fcn.140158690
mov qword [rsp + 0x130], rax
test rax, rax
je 0x140046704
cmp dword [rsp + 0x138], ebx
je 0x1400466fc
movaps xmm0, xmmword [rsp + 0x130]
movdqa xmmword [rsp + 0x350], xmm0
lea rcx, [rsp + 0x350]
call fcn.1400642ec
test eax, eax
jne 0x1400466fc
lea rcx, [rsp + 0x3b0]
call fcn.14003d5b4
nop
lea rdx, [0x14037cdd0]
mov r14d, reloc.WS2_32.dll_recv
cmp qword [0x14037cde8], r14
cmovae rdx, qword [0x14037cdd0]
lea rcx, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], r14
cmovae rcx, qword [rsp + 0x3b0]
mov r8, qword [rsp + 0x3c0]
cmp r8, qword [0x14037cde0]
jne 0x140044626
call fcn.14012f400
test eax, eax
mov al, bl
je 0x140044629
mov al, dil
test al, al
je 0x140044712
mov edx, 0xa
lea rcx, [rsp + 0x350]
call fcn.14003cd38
mov rdx, rax
lea rcx, [0x140378a40]
call fcn.140048ca8
lea rcx, [rsp + 0x350]
call fcn.140048c4c
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
mov r9d, 0x1194
lea r8, [0x14003bf40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rsp + 0x180]
call fcn.140046740
mov r10, rax
cmp byte [rax + 0x29], bl
je 0x1400446c0
mov r8d, ebx
mov r9, rax
mov eax, r12d
mul r8d
shr edx, 4
movsx ecx, dl
imul eax, ecx, 0x32
mov cl, r8b
sub cl, al
add cl, r13b
xor byte [r9], cl
add r8d, edi
add r9, rdi
cmp r8d, 0x2a
jl 0x14004469a
mov rcx, r10
call fcn.1401607f0
lea rdx, [rsp + 0x240]
call fcn.140046774
mov rsi, rax
cmp byte [rax + 0xaf], bl
je 0x140046668
mov r8, rax
mov eax, r12d
mul ebx
shr edx, 4
movsx ecx, dl
imul edx, ecx, 0x32
mov al, bl
sub al, dl
add al, r13b
xor byte [r8], al
add ebx, edi
add r8, rdi
cmp ebx, 0xb0
jge 0x140046668
jmp 0x1400446e7
cmp byte [0x14037c5fa], bl
jne 0x14004472b
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14004003c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x140040054]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14003d310
nop
movups xmm0, xmmword [0x1403128d8]
movups xmmword [rsp + 0x350], xmm0
movsd xmm0, qword [0x1403128e8]
movsd qword [rsp + 0x360], xmm0
mov eax, dword [0x1403128f0]
mov dword [rsp + 0x368], eax
movzx eax, word [0x1403128f4]
mov word [rsp + 0x36c], ax
cmp byte [0x1403128f5], bl
je 0x1400447e0
mov r8d, ebx
lea r9, [rsp + 0x350]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x1e
jl 0x1400447ba
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rbx
lea rax, [rsp + 0x350]
or rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], bl
jne 0x14004480a
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x90]
call fcn.14004ddb0
nop
movups xmm0, xmmword [str.__AFD]
movups xmmword [rsp + 0x180], xmm0
movups xmm1, xmmword [0x140313c98]
movups xmmword [rsp + 0x190], xmm1
movsd xmm0, qword [0x140313ca8]
movsd qword [rsp + 0x1a0], xmm0
movzx eax, word [0x140313cb0]
mov word [rsp + 0x1a8], ax
mov r8d, ebx
lea r9, [rsp + 0x180]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x2a
jl 0x140044872
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], rbx
lea rax, [rsp + 0x180]
mov r8, rsi
inc r8
cmp byte [rax + r8], bl
jne 0x1400448be
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0xb0]
call fcn.14004ddb0
nop
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x380]
call fcn.14003fb40
nop
mov rdx, qword [rsp + 0xc8]
mov r15d, 0x1000
cmp rdx, r14
jb 0x14004493f
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, r15
jb 0x14004493a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046690
call fcn.140060290
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xc8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xb0], bl
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140044998
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140044993
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046696
call fcn.140060290
cmp byte [0x14037c5fa], bl
je 0x140044a7e
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x380]
call fcn.140047f58
mov rsi, rax
movsd xmm0, qword [str.ygzx]
movsd qword [rsp + 0x140], xmm0
mov eax, dword [0x1403133d0]
mov dword [rsp + 0x148], eax
mov r8d, ebx
lea r9, [rsp + 0x140]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, r13b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xc
jl 0x1400449e5
lea rdx, [rsp + 0x140]
lea rcx, [0x14037a7c0]
call fcn.14004cc04
mov rdx, rsi
cmp qword [rsi + 0x18], r14
jb 0x140044a2b
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.140054f5c
mov rcx, rax
call fcn.14004ce5c
nop
mov rdx, qword [rsp + 0x368]
cmp rdx, r14
jb 0x140044a7e
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r15
jb 0x140044a79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004669c
call fcn.140060290
movzx r8d, byte [rsp + 0x380]
mov ecx, r8d
cmp r8d, 4
ja 0x140044ac7
test r8b, r8b
je 0x140044ac2
sub ecx, 1
je 0x140044ab4
sub ecx, 1
jne 0x140044ac7
mov rdx, qword [rsp + 0x388]
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 4
jmp 0x140044ad2
mov rdx, qword [rsp + 0x388]
mov rax, qword [rdx + 8]
jmp 0x140044ad2
mov rax, rbx
jmp 0x140044aca
mov rax, rdi
mov rdx, qword [rsp + 0x388]
mov dword [0x14037c608], eax
mov rsi, rbx
lea r13, [0x14037ee00]
movzx ecx, r8b
cmp ecx, 4
ja 0x140044b11
test r8b, r8b
je 0x140044fdb
sub ecx, 1
je 0x140044b0b
sub ecx, 1
jne 0x140044b11
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 4
jmp 0x140044b14
mov rax, qword [rdx + 8]
jmp 0x140044b14
mov rax, rdi
cmp rsi, rax
jae 0x140044fdb
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.140047e28
mov r12, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, 8
lea rdx, str.Programe
lea rcx, [rsp + 0x350]
call fcn.14004ddb0
lea rdx, [rsp + 0x350]
mov rcx, r12
call fcn.140047bc8
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004d52c
mov r12, rsi
shl r12, 5
lea rcx, [0x140000000]
lea rcx, [rcx + 0x37e790]
add rcx, r12
mov rdx, rax
call fcn.140048ca8
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140044be3
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140044bde
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466a2
call fcn.140060290
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.140047e28
mov qword [rsp + 0x370], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, 6
lea rdx, str.Status
lea rcx, [rsp + 0x350]
call fcn.14004ddb0
lea rdx, [rsp + 0x350]
mov rcx, qword [rsp + 0x370]
call fcn.140047bc8
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004d52c
lea rcx, [0x140000000]
lea rcx, [rcx + 0x37d480]
add rcx, r12
mov rdx, rax
call fcn.140048ca8
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140044cac
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140044ca7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466a8
call fcn.140060290
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.140047e28
mov qword [rsp + 0x370], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, recv
lea rdx, str.updateddate
lea rcx, [rsp + 0x350]
call fcn.14004ddb0
lea rdx, [rsp + 0x350]
mov rcx, qword [rsp + 0x370]
call fcn.140047bc8
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004d52c
lea rcx, [0x140000000]
lea rcx, [rcx + 0x37dae0]
add rcx, r12
mov rdx, rax
call fcn.140048ca8
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140044d75
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140044d70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466ae
call fcn.140060290
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.140047e28
mov qword [rsp + 0x370], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, 4
lea rdx, str.Name
lea rcx, [rsp + 0x350]
call fcn.14004ddb0
lea rdx, [rsp + 0x350]
mov rcx, qword [rsp + 0x370]
call fcn.140047bc8
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004d52c
lea rcx, [0x140000000]
lea rcx, [rcx + 0x37e120]
add rcx, r12
mov rdx, rax
call fcn.140048ca8
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140044e3e
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140044e39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466b4
call fcn.140060290
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.140047e28
mov qword [rsp + 0x370], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, 5
lea rdx, str.image
lea rcx, [rsp + 0x350]
call fcn.14004ddb0
lea rdx, [rsp + 0x350]
mov rcx, qword [rsp + 0x370]
call fcn.140047bc8
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004d52c
lea rcx, [r12 + r13]
mov rdx, rax
call fcn.140048ca8
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140044efa
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140044ef5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466ba
call fcn.140060290
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.140047e28
mov qword [rsp + 0x370], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
mov r8d, 4
lea rdx, str.link
lea rcx, [rsp + 0x350]
call fcn.14004ddb0
lea rdx, [rsp + 0x350]
mov rcx, qword [rsp + 0x370]
call fcn.140047bc8
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004d52c
lea rcx, [0x140000000]
lea rcx, [rcx + 0x37ce40]
add rcx, r12
mov rdx, rax
call fcn.140048ca8
mov rdx, qword [rsp + 0xa8]
cmp rdx, r14
jb 0x140044fc3
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, r15
jb 0x140044fbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466c0
call fcn.140060290
add rsi, rdi
mov rdx, qword [rsp + 0x388]
mov r8b, byte [rsp + 0x380]
jmp 0x140044ae2
mov dl, r8b
lea rcx, [rsp + 0x388]
call fcn.14004ac40
nop
call fcn.14003d310
movsd xmm0, qword [0x140312cb0]
movsd qword [rsp + 0x150], xmm0
mov eax, dword [0x140312cb8]
mov dword [rsp + 0x158], eax
mov r12d, 0x51eb851f
mov sil, 0x33
cmp byte [0x140312cbb], bl
je 0x140045051
mov r8d, ebx
lea r9, [rsp + 0x150]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, sil
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xc
jl 0x14004502b
mov al, byte [0x140312e40]
movsd xmm0, qword [0x140312e38]
mov byte [rsp + 0xd8], al
movsd qword [rsp + 0xd0], xmm0
mov r8d, ebx
lea r9, [rsp + 0xd0]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, sil
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 9
jl 0x14004507a
movsd xmm0, qword [0x140312e38]
movsd qword [rsp + 0x100], xmm0
mov al, byte [0x140312e40]
mov byte [rsp + 0x108], al
mov r8d, ebx
lea r9, [rsp + 0x100]
mov eax, r12d
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, sil
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 9
jl 0x1400450c9
lea rax, [rsp + 0x150]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x64
lea r9, [rsp + 0x400]
lea r8, [0x1401e655e]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
lea rax, [rsp + 0x400]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], bl
jne 0x140045150
lea rdx, [rsp + 0x400]
lea rcx, [rsp + 0x350]
call fcn.14004ddb0
lea rdx, [rsp + 0x350]
lea r12, [0x140378a20]
mov rcx, r12
call fcn.140048ca8
mov rdx, qword [rsp + 0x368]
cmp rdx, r14
jb 0x1400451c3
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r15
jb 0x1400451be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466f0
call fcn.140060290
movsd xmm0, qword [0x1403134d8]
movsd qword [rsp + 0x160], xmm0
mov eax, dword [str.RRT_]
mov dword [rsp + 0x168], eax
cmp byte [0x1403134e3], bl
je 0x14004521c
mov r8d, ebx
lea r9, [rsp + 0x160]
mov eax, 0x51eb851f
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, sil
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xc
jl 0x1400451f4
mov al, byte [0x140312788]
movsd xmm0, qword [str.cUFE_WK_]
mov byte [rsp + 0xe8], al
movsd qword [rsp + 0xe0], xmm0
mov r8d, ebx
lea r9, [rsp + 0xe0]
mov eax, 0x51eb851f
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, sil
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 9
jl 0x140045245
movsd xmm0, qword [str.cUFE_WK_]
movsd qword [rsp + 0x110], xmm0
mov al, byte [0x140312788]
mov byte [rsp + 0x118], al
mov r9d, ebx
lea r10, [rsp + 0x110]
mov eax, 0x51eb851f
mul r9d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r9b
sub al, cl
add al, sil
xor byte [r10], al
add r9d, edi
add r10, rdi
cmp r9d, 9
jl 0x140045296
lea rax, [rsp + 0x160]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x64
lea r9, [rsp + 0x400]
lea r8, [0x1401e655e]
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x110]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], rbx
lea rax, [rsp + 0x400]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], bl
jne 0x14004531f
lea rdx, [rsp + 0x400]
lea rcx, [rsp + 0x350]
call fcn.14004ddb0
lea rdx, [rsp + 0x350]
lea rsi, [0x140378968]
mov rcx, rsi
call fcn.140048ca8
mov rdx, qword [rsp + 0x368]
cmp rdx, r14
jb 0x140045392
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r15
jb 0x14004538d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466f0
call fcn.140060290
lea rcx, [rsp + 0x350]
call fcn.14003db48
mov rdx, rax
lea rcx, [0x140378928]
call fcn.140048ca8
mov rdx, qword [rsp + 0x368]
cmp rdx, r14
jb 0x1400453ec
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r15
jb 0x1400453e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466c6
call fcn.140060290
cmp qword [0x140378a30], rbx
je 0x140045449
cmp qword [reloc.WS2_32.dll_ntohs], r14
cmovae r12, qword [0x140378a20]
lea rcx, [0x14037f498]
sub rcx, r12
mov al, byte [r12]
mov byte [r12 + rcx], al
add r12, rdi
test al, al
jne 0x14004540e
cmp qword [reloc.WS2_32.dll_ntohs], r14
cmovae rsi, qword [0x140378968]
lea rcx, [0x14037f4b8]
sub rcx, rsi
mov al, byte [rsi]
mov byte [rsi + rcx], al
add rsi, rdi
test al, al
jne 0x140045436
mov byte [0x14037ce39], dil
call fcn.14003d310
mov edx, Ordinal_27
lea rcx, [rsp + 0x390]
call fcn.14003cd38
nop
mov dword [rsp + 0x300], 0x50
mov dword [rsp + 0x304], 0x40
lea rax, [0x14003bf80]
mov qword [rsp + 0x308], rax
mov qword [rsp + 0x310], rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x318], rax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x320], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x330], xmm1
lea rcx, [rsp + 0x390]
call fcn.14003c050
mov qword [rsp + 0x340], rax
mov qword [rsp + 0x348], rbx
lea rcx, [rsp + 0x300]
call qword [sym.imp.USER32.dll_RegisterClassExA]
lea rcx, [rsp + 0x390]
call fcn.14003c050
mov r8, rax
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
mov r9d, 0x80000000
mov rdx, qword [rsp + 0x340]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r12, rax
mov qword [0x14037c668], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rsi, rax
mov qword [0x14037c670], rax
test rax, rax
je 0x1400464ff
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [0x14037c620]
call fcn.14012f010
mov dword [0x14037c648], edi
mov dword [0x14037c638], edi
mov dword [0x14037c628], ebx
mov dword [0x14037c64c], edi
mov dword [0x14037c650], 0x50
mov dword [0x14037c65c], edi
mov rax, qword [rsi]
lea rcx, [0x14037c618]
mov qword [rsp + 0x30], rcx
lea rcx, [0x14037c620]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x40
mov r9, r12
mov r8d, edi
xor edx, edx
mov rcx, rsi
call qword [rax + 0x80]
test eax, eax
js 0x1400464f8
xor edx, edx
mov rcx, qword [0x14037c668]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14037c668]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rax, qword [0x14037c600]
test rax, rax
je 0x140045607
add dword [rax + 0x3b0], edi
mov ecx, 0x3e48
call fcn.140155f80
mov qword [rsp + 0x370], rax
lea rcx, [rsp + 0x80]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0xd0], rax
test rax, rax
je 0x140045642
xor edx, edx
mov rcx, rax
call fcn.1400018fc
jmp 0x140045645
mov rax, rbx
cmp qword [0x14037c600], rbx
jne 0x140045655
mov qword [0x14037c600], rax
mov rcx, rax
call fcn.140007190
mov rsi, qword [0x14037c600]
mov qword [rsp + 0x370], rsi
bts dword [rsi + 8], 0xa
mov qword [rsp + 0x240], rbx
mov dword [rsp + 0x248], ebx
mov byte [rsp + 0x24c], dil
mov dword [rsp + 0x250], ebx
xorps xmm1, xmm1
and dword [rsp + 0x254], 0
xorps xmm0, xmm0
unpcklps xmm0, xmm1
movsd qword [rsp + 0x264], xmm0
xorps xmm0, xmm0
unpcklps xmm0, xmm1
movsd qword [rsp + 0x26c], xmm0
mov qword [rsp + 0x278], rbx
and dword [rsp + 0x280], 0
mov dword [rsp + 0x284], 0x7f7fffff
mov dword [rsp + 0x28c], ebx
movss xmm7, dword [0x1403142c0]
mov dword [rsp + 0x290], 0x3f800000
mov ecx, 0xffff
mov word [rsp + 0x294], cx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x296], xmm0
movups xmmword [rsp + 0x2a6], xmm0
mov qword [rsp + 0x2b6], rax
mov qword [rsp + 0x2c0], rbx
mov qword [rsi + 0x20], rbx
mov qword [rsi + 0x28], rbx
mov byte [rsp + 0x288], dil
mov byte [rsp + 0x260], dil
mov eax, 3
mov dword [rsp + 0x258], eax
mov dword [rsp + 0x25c], eax
mov qword [rsp + 0x1b0], rbx
mov dword [rsp + 0x1b8], ebx
mov dword [rsp + 0x1c0], ebx
and dword [rsp + 0x1c4], 0
mov dword [rsp + 0x1c8], eax
mov dword [rsp + 0x1cc], edi
mov byte [rsp + 0x1d0], bl
unpcklps xmm0, xmm1
movsd qword [rsp + 0x1d4], xmm0
xorps xmm0, xmm0
unpcklps xmm0, xmm1
movsd qword [rsp + 0x1dc], xmm0
mov qword [rsp + 0x1e8], rbx
and dword [rsp + 0x1f0], 0
mov dword [rsp + 0x1f4], 0x7f7fffff
mov byte [rsp + 0x1f8], bl
mov dword [rsp + 0x1fc], ebx
mov dword [rsp + 0x200], 0x3f800000
mov word [rsp + 0x204], cx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x206], xmm0
movups xmmword [rsp + 0x216], xmm0
mov qword [rsp + 0x226], rax
mov qword [rsp + 0x230], rbx
mov byte [rsp + 0x1bc], bl
mov qword [rsp + 0x28], rbx
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140314328]
mov r8d, 0x225bc
lea rdx, [0x1402ee810]
mov rcx, qword [rsi + 0xa8]
call fcn.140026744
lea rax, [0x1403127b8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x240]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140314330]
lea rdx, [0x1402d0170]
mov rcx, qword [rsi + 0xa8]
call fcn.1400268d8
mov qword [0x14037c610], rax
mov rcx, qword [rsi + 0xa8]
call fcn.140026480
lea rax, [0x140310e98]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140314328]
mov r8d, 0xe5510
lea r12, [0x1401eac50]
mov rdx, r12
mov rcx, qword [rsi + 0xa8]
call fcn.140026744
mov qword [0x14037c678], rax
lea rax, [0x140310e98]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140314344]
mov r8d, 0xe5510
mov rdx, r12
mov rcx, qword [rsi + 0xa8]
call fcn.140026744
mov qword [0x14037c660], rax
lea rax, [0x140310e98]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x140314340]
mov r8d, 0xe5510
mov rdx, r12
mov rcx, qword [rsi + 0xa8]
call fcn.140026744
mov qword [0x14037c688], rax
lea rax, [0x14037c680]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x58], ebx
or eax, 0xffffffff
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_50
mov r9d, 0x190
mov r8d, 0x4253d
lea rdx, [0x1403361f0]
mov rcx, qword [0x14037c618]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
mov r12, rbx
movsxd rax, dword [0x14037c608]
test rax, rax
je 0x140045da5
movabs r8, 0x7fffffffffffffff
movups xmm0, xmmword [0x140312c88]
movups xmmword [rsp + 0x350], xmm0
mov eax, dword [0x140312c98]
mov dword [rsp + 0x360], eax
movzx eax, word [0x140312c9c]
mov word [rsp + 0x364], ax
cmp byte [0x140312c9d], bl
je 0x140045a21
mov r8d, ebx
lea r9, [rsp + 0x350]
mov eax, 0x51eb851f
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x16
jl 0x1400459f0
movabs r8, 0x7fffffffffffffff
lea rax, [rsp + 0x350]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], bl
jne 0x140045a2d
mov rdx, qword [r13 + 0x10]
mov rax, r8
sub rax, rdx
cmp rax, rcx
jb 0x1400466e4
mov rax, r13
cmp qword [r13 + 0x18], r14
jb 0x140045a55
mov rax, qword [r13]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x350]
lea rcx, [rsp + 0xb0]
call fcn.140052338
nop
lea rcx, [rsp + 0xb0]
call fcn.14003c050
mov rsi, qword [0x14037c618]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rcx
mov rdx, rax
lea rcx, [rsp + 0x350]
call fcn.14003c640
nop
mov rdx, qword [rsp + 0x350]
mov r8, qword [rsp + 0x358]
cmp rdx, r8
jne 0x140045afc
cmp byte [0x14037c5fa], bl
je 0x140045afc
lea rdx, str.fucking
lea rcx, [0x14037a7c0]
call fcn.14004cc04
mov rcx, rax
call fcn.14004ce5c
mov r8, qword [rsp + 0x358]
mov rdx, qword [rsp + 0x350]
mov qword [rsp + 0x2f8], rbx
sub r8, rdx
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x58], ebx
or eax, 0xffffffff
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9d, eax
mov rcx, rsi
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
test eax, eax
jns 0x140045b94
mov rcx, qword [rsp + 0x350]
test rcx, rcx
je 0x140045b8f
mov rdx, qword [rsp + 0x360]
sub rdx, rcx
mov rax, rcx
cmp rdx, r15
jb 0x140045b8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466cc
call fcn.140060290
mov rsi, rbx
jmp 0x140045bda
mov rsi, qword [rsp + 0x2f8]
mov rcx, qword [rsp + 0x350]
test rcx, rcx
je 0x140045bda
mov rdx, qword [rsp + 0x360]
sub rdx, rcx
mov rax, rcx
cmp rdx, r15
jb 0x140045bd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466cc
call fcn.140060290
lea rax, [0x140000000]
mov qword [rax + r12*8 + 0x37c690], rsi
mov rdx, qword [rsp + 0xc8]
cmp rdx, r14
jb 0x140045c27
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, r15
jb 0x140045c22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466d2
call fcn.140060290
movups xmm0, xmmword [0x140312c88]
movups xmmword [rsp + 0x350], xmm0
mov eax, dword [0x140312c98]
mov dword [rsp + 0x360], eax
movzx eax, word [0x140312c9c]
mov word [rsp + 0x364], ax
cmp byte [0x140312c9d], bl
je 0x140045c8c
mov r8d, ebx
lea r9, [rsp + 0x350]
mov eax, 0x51eb851f
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x16
jl 0x140045c65
lea rax, [rsp + 0x350]
or rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], bl
jne 0x140045c98
mov rdx, qword [r13 + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, rcx
jb 0x1400466de
mov rax, r13
cmp qword [r13 + 0x18], r14
jb 0x140045cc7
mov rax, qword [r13]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x350]
lea rcx, [rsp + 0xb0]
call fcn.140052338
nop
lea rdx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], r14
cmovae rdx, qword [rsp + 0xb0]
mov r8, qword [rsp + 0xc0]
lea rcx, [0x14037a7c0]
call fcn.140054f5c
lea rdx, [0x140311028]
mov rcx, rax
call fcn.14004cc04
mov rcx, rax
lea rax, [0x140000000]
mov rdx, qword [rax + r12*8 + 0x37c690]
call fcn.1400481ac
mov rcx, rax
call fcn.14004ce5c
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, r14
jb 0x140045d86
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, r15
jb 0x140045d81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466d8
call fcn.140060290
add r12, rdi
add r13, 0x20
movsxd rax, dword [0x14037c608]
cmp r12, rax
jb 0x1400459a8
mov rsi, qword [rsp + 0x370]
mov rax, qword [0x14037c600]
test dword [rsi + 8], 0x400
je 0x140045dc5
mov dword [rax + 0x164c], ebx
mov dword [rax + 0x1728], 0x3f800000
xor ecx, ecx
call fcn.1400228d4
mov r12, qword [0x14037c668]
lea rcx, [0x14037f490]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140045eec
lea rcx, [0x14037f488]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140045eec
mov r13, qword [0x14037c600]
lea rsi, [r13 + 8]
or dword [rsi + 4], 0xc06
lea rax, str.imgui_impl_win32
mov qword [rsi + 0xd8], rax
mov qword [0x14037f480], r12
mov rax, qword [r13 + 0x1d40]
mov rcx, qword [rax]
mov qword [rcx + 0x58], r12
mov qword [rcx + 0x50], r12
test dword [rsi], 0x400
je 0x140045e4a
call fcn.14002d28c
mov r13, qword [0x14037c600]
mov dword [rsi + 0x34], 9
mov dword [rsi + 0x38], Ordinal_41
mov dword [rsi + 0x3c], Ordinal_41
mov dword [rsi + 0x40], Ordinal_41
mov dword [rsi + 0x44], Ordinal_41
mov dword [rsi + 0x48], reloc.WLDAP32.dll_Ordinal_33
mov dword [rsi + 0x4c], Ordinal_35
mov dword [rsi + 0x50], Ordinal_41
mov dword [rsi + 0x54], reloc.WLDAP32.dll_Ordinal_35
mov dword [rsi + 0x58], reloc.WLDAP32.dll_Ordinal_45
mov dword [rsi + 0x5c], reloc.WLDAP32.dll_Ordinal_46
mov dword [rsi + 0x60], 8
mov dword [rsi + 0x64], reloc.WLDAP32.dll_Ordinal_32
mov eax, reloc.WS2_32.dll_listen
mov dword [rsi + 0x68], eax
mov dword [rsi + 0x6c], reloc.WLDAP32.dll_Ordinal_27
mov dword [rsi + 0x70], eax
mov dword [rsi + 0x74], 0x41
mov dword [rsi + 0x78], 0x43
mov dword [rsi + 0x7c], 0x56
mov dword [rsi + 0x80], 0x58
mov dword [rsi + 0x84], 0x59
mov dword [rsi + 0x88], 0x5a
jmp 0x140045ef3
mov r13, qword [0x14037c600]
mov rcx, qword [0x14037c618]
lea rax, str.imgui_impl_dx9
mov qword [r13 + 0xe8], rax
or dword [r13 + 0xc], 0x1008
mov qword [0x14037f470], rcx
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
test dword [r13 + 8], 0x400
je 0x140045f74
mov rax, qword [0x14037c600]
lea rcx, [fcn.14002b974]
mov qword [rax + 0x15f0], rcx
lea rcx, [fcn.14002ba4c]
mov qword [rax + 0x15f8], rcx
lea rcx, [0x14002bab0]
mov qword [rax + 0x1600], rcx
lea rcx, [0x14002bb00]
mov qword [rax + 0x1608], rcx
lea rcx, [0x14002bc40]
mov qword [rax + 0x1610], rcx
mov edx, recv
lea rcx, [rsp + 0x350]
call fcn.14003cd38
nop
mov rcx, rax
call fcn.14003c050
mov rsi, rax
mov qword [rsp + 0x2f8], rax
mov rdx, qword [rsp + 0x368]
cmp rdx, r14
jb 0x140045fd8
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, r15
jb 0x140045fd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466ea
call fcn.140060290
mov qword [rsp + 0x360], rbx
mov qword [rsp + 0x368], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x350], bl
xorps xmm0, xmm0
movups xmmword [rsp + 0x3d0], xmm0
movups xmmword [rsp + 0x3e0], xmm0
movups xmmword [rsp + 0x3f0], xmm0
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004604d
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14004633c
cmp qword [0x14037f460], rbx
jne 0x14004605b
call fcn.14002b834
call fcn.14002c250
call fcn.140006330
call fcn.140043d34
mov cl, byte [0x14037c5f9]
mov rax, qword [0x14037c600]
test cl, cl
jne 0x14004609c
or dword [rax + 0x1c40], 2
mov dword [rax + 0x1c64], 0x440a4000
mov dword [rax + 0x1c68], 0x43bb0000
mov dword [rax + 0x1c48], edi
cmp cl, dil
jne 0x1400460c2
or dword [rax + 0x1c40], 2
mov dword [rax + 0x1c64], 0x443c0000
mov dword [rax + 0x1c68], 0x440b4000
mov dword [rax + 0x1c48], edi
mov dword [rsp + 0x120], 0x3f000000
mov dword [rsp + 0x124], 0x3f000000
lea rdx, [rsp + 0x120]
mov ecx, 5
call fcn.140003544
xor edx, edx
mov r8d, Ordinal_301
mov rcx, rsi
call fcn.14000bcf4
call fcn.140040078
call fcn.14000e180
mov ecx, edi
call fcn.1400035d0
cmp byte [0x14037c5fc], dil
jne 0x140046119
call fcn.14003c75c
cmp byte [0x14037c5fb], dil
jne 0x140046127
call fcn.14003caf0
call fcn.14000819c
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
mov dword [rsp + 0x30], ebx
movss dword [rsp + 0x28], xmm7
mov dword [rsp + 0x20], ebx
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400461a5
call fcn.1400085c4
mov rax, qword [0x14037c600]
mov rcx, qword [rax + 0x1d40]
mov rdx, qword [rcx]
add rdx, 0xb0
mov al, byte [rdx]
neg al
sbb rcx, rcx
and rcx, rdx
call fcn.14002b104
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rax, qword [rsp + 0x370]
test dword [rax + 8], 0x400
je 0x1400462e3
call fcn.140015670
mov rsi, qword [0x14037c600]
mov edx, edi
mov dword [rsp + 0x80], edx
mov eax, dword [rsi + 0x1630]
lea r12, [rsi + 0x1638]
cmp eax, edi
jle 0x14004625f
mov ecx, 8
mov qword [rsp + 0x88], rcx
mov rax, qword [r12]
mov r13, qword [rcx + rax]
test byte [r13 + 4], 0x80
jne 0x140046240
mov rax, qword [rsi + 0x15c0]
test rax, rax
je 0x14004621e
xor edx, edx
mov rcx, r13
call rax
mov rcx, qword [rsp + 0x88]
mov edx, dword [rsp + 0x80]
mov rax, qword [rsi + 0x1608]
test rax, rax
je 0x140046240
xor edx, edx
mov rcx, r13
call rax
mov rcx, qword [rsp + 0x88]
mov edx, dword [rsp + 0x80]
add edx, edi
mov dword [rsp + 0x80], edx
add rcx, 8
mov qword [rsp + 0x88], rcx
mov eax, dword [rsi + 0x1630]
cmp edx, eax
jl 0x1400461ed
mov ecx, edi
mov dword [rsp + 0x80], ecx
cmp eax, edi
jle 0x1400462db
mov r13d, 8
mov rax, qword [r12]
mov rax, qword [rax + r13]
mov qword [rsp + 0x88], rax
test byte [rax + 4], 0x80
jne 0x1400462c6
mov r8, qword [rsi + 0x15c8]
test r8, r8
je 0x1400462ab
xor edx, edx
mov rcx, rax
call r8
mov rax, qword [rsp + 0x88]
mov ecx, dword [rsp + 0x80]
mov r8, qword [rsi + 0x1610]
test r8, r8
je 0x1400462c6
xor edx, edx
mov rcx, rax
call r8
mov ecx, dword [rsp + 0x80]
add ecx, edi
mov dword [rsp + 0x80], ecx
add r13, 8
cmp ecx, dword [rsi + 0x1630]
jl 0x140046272
mov rsi, qword [rsp + 0x2f8]
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14004633c
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14004633c
call fcn.14002b8a8
mov rcx, qword [0x14037c618]
mov rax, qword [rcx]
lea rdx, [0x14037c620]
call qword [rax + 0x80]
call fcn.14002b834
cmp dword [rsp + 0x3d8], 0x12
jne 0x14004600e
call fcn.140015bfc
call fcn.14002b8a8
mov rcx, qword [0x14037f470]
test rcx, rcx
je 0x14004636d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14037f470], rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov qword [0x14037f480], rbx
mov rdi, qword [0x14037c600]
mov rcx, rdi
call fcn.140007380
cmp qword [0x14037c600], rdi
jne 0x1400463ab
mov qword [0x14037c600], rbx
test rdi, rdi
je 0x1400463d2
mov rcx, rdi
call fcn.14001cf98
mov rax, qword [0x14037c600]
test rax, rax
je 0x1400463ca
dec dword [rax + 0x3b0]
mov rcx, rdi
call fcn.14014c2d0
mov rcx, qword [0x14037c618]
test rcx, rcx
je 0x1400463eb
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14037c618], rbx
mov rcx, qword [0x14037c670]
test rcx, rcx
je 0x140046404
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14037c670], rbx
mov rcx, qword [0x14037c668]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0x318]
mov rcx, qword [rsp + 0x340]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, r14
jb 0x140046466
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, r15
jb 0x140046461
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466f0
call fcn.140060290
mov qword [rsp + 0x3a0], rbx
mov qword [rsp + 0x3a8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x390], bl
mov rdx, qword [rsp + 0x3c8]
cmp rdx, r14
jb 0x1400464bf
inc rdx
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, r15
jb 0x1400464ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466f6
call fcn.140060290
xor eax, eax
mov rcx, qword [rsp + 0x470]
xor rcx, rsp
call fcn.1400600c0
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov rsi, qword [0x14037c670]
mov rcx, qword [0x14037c618]
test rcx, rcx
je 0x14004651f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14037c618], rbx
mov rsi, qword [0x14037c670]
test rsi, rsi
je 0x140046534
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14037c670], rbx
mov rdx, qword [rsp + 0x318]
mov rcx, qword [rsp + 0x340]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, r14
jb 0x140046589
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, r15
jb 0x140046584
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466f0
call fcn.140060290
mov qword [rsp + 0x3a0], rbx
mov qword [rsp + 0x3a8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x390], bl
mov rdx, qword [rsp + 0x3c8]
cmp rdx, r14
jb 0x140046637
inc rdx
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, r15
jb 0x1400465e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400466f6
call fcn.140060290
jmp 0x140046637
mov eax, edi
jmp 0x1400464c1
mov dword [rsp + 0xf8], ebx
mov ecx, 6
call fcn.140062890
nop
call fcn.140160810
int3
call fcn.140160810
int3
call fcn.140160810
int3
call fcn.140160810
nop
lea rcx, [0x140378a40]
call fcn.14003d218
mov r8, rax
mov r9d, 0x40010
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, edi
call fcn.1401576a0
nop
call fcn.140165210
nop
call fcn.140165210
int3
call fcn.140165210
int3
call fcn.140165210
int3
call fcn.140165210
int3
call fcn.140165210
int3
call fcn.140165210
int3
call fcn.140165210
int3
call fcn.140165210
nop
call fcn.140165210
nop
call fcn.140165210
nop
call fcn.140165210
int3
call fcn.140165210
int3
call fcn.1400382c0
int3
call fcn.1400382c0
int3
call fcn.140165210
nop
call fcn.140165210
nop
call fcn.140165210
nop
mov ecx, edi
call fcn.140062890
nop
mov dword [rsp + 0x138], ebx
mov ecx, 6
call fcn.140062890
nop
mov ecx, edi
call fcn.140062890
nop
mov ecx, edi
call fcn.140062890
nop
mov ecx, edi
call fcn.140062890
nop
mov ecx, edi
call fcn.140062890
nop
mov ecx, edi
call fcn.140062890
int3