Function at 0x140040c04
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x620
mov rax, qword [0x14008b058]
xor rax, rsp
mov qword [rsp + 0x610], rax
xor ebx, ebx
mov edi, ebx
mov dword [rsp + 0x34], ebx
mov r14b, bl
mov dword [rsp + 0x34], ebx
mov byte [0x1400b332d], bl
call fcn.14003d310
mov eax, dword [0x1400b306c]
ror eax, 5
cmp dword [0x140078f83], eax
jne 0x14004193d
cmp qword [0x1400b3238], rbx
je 0x140040c7f
call fcn.14003e33c
mov r14b, al
cmp al, 1
jne 0x140040c7f
jmp 0x140041844
lea rsi, [0x1400b33c0]
mov r8, rsi
mov edx, 0x451
call fcn.14003fbbc
test al, al
je 0x140040c9f
mov rdx, rsi
call fcn.14003fcfc
cmp qword [0x1400b33d0], 2
jbe 0x140040cd4
cmp qword [0x1400b3338], rbx
jne 0x140040cd4
mov r9, qword [0x1400b3370]
mov r8, qword [0x1400b3378]
mov rdx, rsi
call fcn.14003e630
mov r14b, al
cmp al, 1
jne 0x140040cd4
jmp 0x140041844
mov byte [rsp + 0x30], r14b
call fcn.14003de80
mov edx, dword [0x1400b3330]
call fcn.14003e13c
mov r14b, al
mov dl, al
call fcn.14003f55c
test al, al
je 0x140041999
test r14b, r14b
je 0x140040d3e
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b8], rbx
mov qword [rsp + 0x1c0], rbx
lea rdx, [0x1400b31e0]
lea rcx, [rsp + 0x1a8]
call fcn.140002cfc
mov edi, 5
cmp qword [rsp + 0x1b8], rbx
mov r15b, 1
jne 0x140040d41
mov r15b, bl
mov esi, 8
mov r13d, 0x1000
test dil, 1
je 0x140040d98
and edi, 0xfffffffe
mov rdx, qword [rsp + 0x1c0]
cmp rdx, rsi
jb 0x140040d98
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, r13
jb 0x140040d93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140041a10
call fcn.140011b00
test r15b, r15b
je 0x140040daa
mov dl, r14b
call fcn.14003f1d0
jmp 0x140040e44
test r14b, r14b
jne 0x140040deb
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b8], rbx
mov qword [rsp + 0x1c0], rbx
lea rdx, [0x1400b31c0]
lea rcx, [rsp + 0x1a8]
call fcn.140002cfc
or edi, 0xa
cmp qword [rsp + 0x1b8], rbx
mov r15b, 1
jne 0x140040dee
mov r15b, bl
test dil, 2
je 0x140040e37
mov rdx, qword [rsp + 0x1c0]
cmp rdx, rsi
jb 0x140040e37
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, r13
jb 0x140040e32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140041a10
call fcn.140011b00
test r15b, r15b
je 0x140040e44
mov dl, r14b
call fcn.14003f1d0
mov rdx, qword [0x1400b3308]
lea rcx, [rsp + 0x1e8]
call fcn.140042c34
nop
cmp qword [rsp + 0x1f8], rbx
je 0x140040fd2
lea rcx, [rsp + 0x1e8]
cmp qword [rsp + 0x200], rsi
cmovae rcx, qword [rsp + 0x1e8]
call fcn.140045760
test al, al
je 0x140040fd2
mov r8d, 1
lea rdx, [0x14007da68]
lea rcx, [rsp + 0x1e8]
call fcn.14000254c
mov r8d, 0x3e
lea rdx, [rsp + 0x1c8]
lea rcx, [0x1400b2e90]
call fcn.140044110
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], rsi
jb 0x140040ecf
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x1e8]
call fcn.14000254c
nop
lea rcx, [rsp + 0x1c8]
call fcn.140001a7c
lea rcx, [rsp + 0x1e8]
cmp qword [rsp + 0x200], rsi
cmovae rcx, qword [rsp + 0x1e8]
call fcn.1400456d0
test al, al
je 0x140040fd2
mov word [rsp + 0x38], bx
mov word [rsp + 0x3c], bx
lea rcx, [rsp + 0x1e8]
cmp qword [rsp + 0x200], rsi
cmovae rcx, qword [rsp + 0x1e8]
lea rdx, [rsp + 0x38]
call fcn.1400455e0
mov r15d, recv
test eax, eax
je 0x140040fd8
movzx ecx, word [rsp + 0x38]
movzx eax, cx
sub ax, r15w
cmp ax, 4
ja 0x140040fd8
movzx eax, word [rsp + 0x3c]
test ax, ax
je 0x140040fd8
cmp cx, r15w
jne 0x140040f80
mov ecx, 0x1fed
cmp ax, cx
jb 0x140041a16
jmp 0x140040fd8
mov r14d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
cmp cx, r14w
jne 0x140040f9c
mov ecx, 0x19cf
cmp ax, cx
jb 0x140041a8b
jmp 0x140040fd8
mov edi, reloc.WSOCK32.dll_ntohl
cmp cx, di
jne 0x140040fb6
mov ecx, 0x1b67
cmp ax, cx
jb 0x140041b00
jmp 0x140040fdd
mov r12d, send
cmp cx, r12w
jne 0x140040fe3
mov ecx, 0x11d9
cmp ax, cx
jb 0x140041b75
jmp 0x140040fe3
mov r15d, recv
mov edi, reloc.WSOCK32.dll_ntohl
mov r12d, send
call fcn.14003eda0
mov dword [rsp + 0x34], eax
mov eax, dword [0x1400b3040]
shr eax, 7
test al, 1
je 0x1400411c6
cmp dword [0x1400b3330], 9
jg 0x1400411c6
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b8], rbx
mov r15d, 7
mov qword [rsp + 0x1c0], r15
mov word [rsp + 0x1a8], bx
mov ecx, dword [0x1400b3344]
test ecx, ecx
je 0x14004104b
xor r9d, r9d
xor r8d, r8d
mov edx, 0x502
call qword [sym.imp.USER32.dll_PostThreadMessageW]
mov r9d, esi
mov r8d, r15d
lea rdx, [rsp + 0x1c8]
call fcn.140042888
mov rdi, rax
lea rax, [rsp + 0x1a8]
cmp rax, rdi
je 0x1400410eb
mov rdx, qword [rsp + 0x1c0]
cmp rdx, rsi
jb 0x1400410b1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, r13
jb 0x1400410ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140041beb
call fcn.140011b00
mov qword [rsp + 0x1b8], rbx
mov qword [rsp + 0x1c0], r15
mov word [rsp + 0x1a8], bx
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x1a8], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x1b8], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], r15
mov word [rdi], bx
lea rcx, [rsp + 0x1c8]
call fcn.140001a7c
lea rdi, [rsp + 0x1a8]
cmp qword [rsp + 0x1c0], rsi
cmovae rdi, qword [rsp + 0x1a8]
mov r8d, 0x20
lea rdx, [rsp + 0x1c8]
lea rcx, [0x1400b2e90]
call fcn.140044110
cmp qword [rax + 0x18], rsi
jb 0x140041134
mov rax, qword [rax]
mov r9d, gethostbyname
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [rsp + 0x1c8]
call fcn.140001a7c
mov r14b, 1
mov rdx, qword [rsp + 0x1c0]
cmp rdx, rsi
jb 0x14004119b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a8]
mov rax, rcx
cmp rdx, r13
jb 0x140041196
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140041bf1
call fcn.140011b00
mov qword [rsp + 0x1b8], rbx
mov qword [rsp + 0x1c0], r15
mov word [rsp + 0x1a8], bx
lea rcx, [rsp + 0x1e8]
call fcn.140001a7c
nop
jmp 0x140041844
mov r13d, ebx
mov rcx, qword [0x1400b3308]
test rcx, rcx
je 0x1400411de
call fcn.140042a94
movzx r13d, al
call fcn.14003f950
call fcn.14003cea4
cmp dword [0x1400b3330], edi
jl 0x140041205
lea rcx, [0x1400b3308]
call fcn.14003df6c
mov qword [0x1400b3310], rax
jmp 0x14004127d
mov rdx, qword [0x1400b3308]
lea rcx, [rsp + 0x1a8]
call fcn.140042b94
mov rdi, rax
cmp qword [rax + 0x18], rsi
jb 0x140041225
mov rdi, qword [rax]
mov r8d, 0x1c
lea rdx, [rsp + 0x1c8]
lea rcx, [0x1400b2e90]
call fcn.140044110
cmp qword [rax + 0x18], rsi
jb 0x140041248
mov rax, qword [rax]
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [0x1400b3310], rax
lea rcx, [rsp + 0x1c8]
call fcn.140001a7c
nop
lea rcx, [rsp + 0x1a8]
call fcn.140001a7c
mov rax, qword [0x1400b3310]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14004129c
lea rdx, [rsp + 0x48]
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, 0x1b
lea rdx, [rsp + 0x1c8]
lea rcx, [0x1400b2e90]
call fcn.140044110
mov rdx, rax
mov rcx, qword [0x1400b3308]
call fcn.14004305c
mov r9, qword [0x1400b3370]
test r9, r9
jne 0x1400412dd
mov r9, qword [0x1400b3378]
test r9, r9
je 0x1400412f4
mov r8d, 1
lea edx, [r8 + 0x7f]
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x1400b3040]
shr eax, 0x11
test al, 1
je 0x1400413ed
xor edx, edx
mov r8d, 0x400
lea rcx, [rsp + 0x210]
call fcn.140014220
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
mov r8d, 0x3c
lea rdx, [rsp + 0x1c8]
lea rcx, [0x1400b2e90]
call fcn.140044110
cmp qword [rax + 0x18], rsi
jb 0x140041345
mov rax, qword [rax]
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.140003f10
lea rcx, [rsp + 0x1c8]
call fcn.140001a7c
lea r9, [rsp + 0x210]
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x1400b3358], rax
test rax, rax
je 0x1400413ed
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov ecx, reloc.WSOCK32.dll_recv
call fcn.140011b08
mov rdi, rax
mov qword [rsp + 0x38], rax
mov rcx, rsi
call fcn.140011b08
lea rcx, [0x14003ce58]
mov qword [rax], rcx
mov qword [rsp + 0x50], rax
lea r14, [rdi + 8]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x1400057d4]
xor edx, edx
xor ecx, ecx
call fcn.14001dbd8
mov qword [rdi], rax
test rax, rax
je 0x140041bf7
mov qword [0x1400b3408], rdi
xor edx, edx
mov r8d, 0x400
lea rcx, [rsp + 0x210]
call fcn.140014220
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
mov r8d, 0x3d
lea rdx, [rsp + 0x1c8]
lea rcx, [0x1400b2e90]
call fcn.140044110
cmp qword [rax + 0x18], rsi
jb 0x14004142d
mov rax, qword [rax]
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.140003f10
lea rcx, [rsp + 0x1c8]
call fcn.140001a7c
lea r9, [rsp + 0x210]
xor r8d, r8d
lea edx, [r8 + 1]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x1400b3360], rax
mov ecx, reloc.WSOCK32.dll_recv
call fcn.140011b08
mov r14, rax
mov qword [rsp + 0x50], rax
mov rcx, rsi
call fcn.140011b08
lea rcx, [0x14003ce28]
mov qword [rax], rcx
mov qword [rsp + 0x38], rax
lea rdi, [r14 + 8]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x1400057d4]
xor edx, edx
xor ecx, ecx
call fcn.14001dbd8
mov qword [r14], rax
test rax, rax
je 0x140041cd0
mov qword [0x1400b3418], r14
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor r9d, r9d
mov edx, 0x487
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
movzx r8d, r15w
mov edi, 0x22e
mov edx, edi
mov rcx, qword [0x1400b3308]
call fcn.14000ef40
mov rcx, qword [0x1400b3308]
call fcn.14004302c
mov r9d, r13d
movsxd r8, eax
mov edx, 0x49d
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, qword [0x1400b3338]
test r8, r8
je 0x140041544
xor r9d, r9d
mov edx, 0x49a
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x1400b3350]
test rcx, rcx
je 0x140041556
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [0x1400b2ef0], rbx
je 0x140041577
xor r9d, r9d
xor r8d, r8d
mov edx, 0x488
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x484
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x486
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rbx
cmp byte [0x1400b2f20], bl
setne r9b
xor r8d, r8d
mov edx, 0x48e
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x1400b3390], rbx
je 0x14004160a
xor r9d, r9d
xor r8d, r8d
mov edx, 0x483
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, [0x1400b3380]
cmp qword [0x1400b3398], 0x10
cmovae rax, qword [0x1400b3380]
mov qword [0x1400b3390], rbx
mov byte [rax], bl
cmp qword [0x1400b33b0], rbx
je 0x14004164b
xor r9d, r9d
xor r8d, r8d
mov edx, 0x482
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, [0x1400b33a0]
cmp qword [0x1400b33b8], 0x10
cmovae rax, qword [0x1400b33a0]
mov qword [0x1400b33b0], rbx
mov byte [rax], bl
xor r9d, r9d
xor r8d, r8d
mov edx, 0x485
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x48c
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x490
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x48b
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x49b
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x1400b3338], rbx
jne 0x140041707
mov eax, dword [0x1400b3040]
shr eax, 6
test al, 1
jne 0x1400416f0
cmp byte [0x1400b3421], bl
jne 0x1400416f0
cmp dword [0x1400b3330], r12d
je 0x140041734
or r9d, 0xffffffff
jmp 0x1400416f3
xor r9d, r9d
movzx r8d, r15w
mov edx, edi
mov rcx, qword [0x1400b3308]
call fcn.14000ef40
jmp 0x140041734
xor r9d, r9d
movzx r8d, r15w
mov edx, 0x157
mov rcx, qword [0x1400b3308]
call fcn.14000ef40
xor r9d, r9d
movzx r8d, r15w
mov edx, edi
mov rcx, qword [0x1400b3308]
call fcn.14000ef40
mov r9d, 1
movzx r8d, r15w
mov edx, 0x4ba
mov rcx, qword [0x1400b3308]
call fcn.14000ef40
nop
mov ecx, dword [0x1400b3330]
cmp ecx, 0xe
jl 0x14004176d
mov rcx, qword [0x1400b3308]
call fcn.1400431dc
mov ecx, dword [0x1400b3330]
mov eax, dword [0x1400b3040]
shr eax, 7
test al, 1
je 0x140041793
cmp ecx, 0xc
jge 0x140041793
mov eax, dword [0x1400b307c]
add eax, 0xffffffce
test eax, 0xfffffffd
je 0x140041c05
xor r9d, r9d
xor r8d, r8d
mov edx, 0x493
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_PostMessageW]
mov al, byte [0x1400b3420]
test al, al
jne 0x1400417e9
cmp qword [0x1400b3418], rbx
je 0x1400417e9
mov rcx, qword [0x1400b3348]
test rcx, rcx
je 0x1400417e9
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
dec eax
cmp eax, 0xfffffffd
ja 0x1400417e9
or edx, 0xffffffff
mov rcx, qword [0x1400b3360]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [0x1400b3308]
test rcx, rcx
je 0x140041803
mov qword [0x1400b3308], rbx
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
nop
mov r14b, byte [rsp + 0x30]
test r14b, r14b
jne 0x140041c92
mov ecx, dword [0x1400b3344]
test ecx, ecx
je 0x14004182d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x501
call qword [sym.imp.USER32.dll_PostThreadMessageW]
nop
lea rcx, [rsp + 0x1e8]
call fcn.140001a7c
nop
jmp 0x140041844
mov byte [0x1400b332d], r14b
test r14b, r14b
jne 0x140041880
lea rcx, [0x14007dae0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.SwitchToThisWindow
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140041880
mov edx, 1
mov rcx, qword [0x1400b3310]
call rax
lea rcx, [0x1400b2ec0]
call fcn.14004080c
xor edx, edx
mov rcx, qword [0x1400b3348]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
dec eax
cmp eax, 0xfffffffd
ja 0x140041909
cmp byte [0x1400b3421], bl
jne 0x140041909
call fcn.1400181cc
sub eax, dword [rsp + 0x34]
mov ecx, 0x1388
cmp eax, ecx
jge 0x1400418c4
sub ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x502
mov ecx, dword [0x1400b3344]
call qword [sym.imp.USER32.dll_PostThreadMessageW]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x502
mov ecx, dword [0x1400b3344]
call qword [sym.imp.USER32.dll_PostThreadMessageW]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov al, 1
mov rcx, qword [rsp + 0x610]
xor rcx, rsp
call fcn.1400117c0
lea r11, [rsp + 0x620]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.140002370
nop
lea r8d, [rbx + 0x1a]
lea rdx, [rsp + 0x1a8]
mov rcx, rax
call fcn.140043dc0
mov rdx, rax
lea rcx, [rsp + 0x1c8]
call fcn.140002ad8
nop
lea rcx, [rsp + 0x1a8]
call fcn.140002c44
lea rdx, [rsp + 0x1c8]
lea rcx, [rsp + 0x70]
call fcn.140002b74
lea rdx, [0x140088648]
lea rcx, [rsp + 0x70]
call fcn.1400143b0
nop
lea rcx, [0x1400b3308]
call fcn.1400050a0
mov rcx, rax
call fcn.1400430f4
call fcn.140002370
mov r8d, 0x36
lea rdx, [rsp + 0x1c8]
mov rcx, rax
call fcn.140043dc0
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.140002ad8
nop
lea rcx, [rsp + 0x1c8]
call fcn.140002c44
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x90]
call fcn.140002b74
lea rdx, [0x140088648]
lea rcx, [rsp + 0x90]
call fcn.1400143b0
nop
call fcn.140018100
nop
lea rcx, [0x1400b3308]
call fcn.1400050a0
mov rcx, rax
call fcn.1400430f4
call fcn.140002370
lea r8d, [r15 + 0x34]
lea rdx, [rsp + 0x1c8]
mov rcx, rax
call fcn.140043dc0
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.140002ad8
nop
lea rcx, [rsp + 0x1c8]
call fcn.140002c44
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0xb0]
call fcn.140002b74
lea rdx, [0x140088648]
lea rcx, [rsp + 0xb0]
call fcn.1400143b0
nop
lea rcx, [0x1400b3308]
call fcn.1400050a0
mov rcx, rax
call fcn.1400430f4
call fcn.140002370
lea r8d, [r14 + 0x34]
lea rdx, [rsp + 0x1c8]
mov rcx, rax
call fcn.140043dc0
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.140002ad8
nop
lea rcx, [rsp + 0x1c8]
call fcn.140002c44
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0xd0]
call fcn.140002b74
lea rdx, [0x140088648]
lea rcx, [rsp + 0xd0]
call fcn.1400143b0
nop
lea rcx, [0x1400b3308]
call fcn.1400050a0
mov rcx, rax
call fcn.1400430f4
call fcn.140002370
lea r8d, [rdi + 0x33]
lea rdx, [rsp + 0x1c8]
mov rcx, rax
call fcn.140043dc0
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.140002ad8
nop
lea rcx, [rsp + 0x1c8]
call fcn.140002c44
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0xf0]
call fcn.140002b74
lea rdx, [0x140088648]
lea rcx, [rsp + 0xf0]
call fcn.1400143b0
nop
lea rcx, [0x1400b3308]
call fcn.1400050a0
mov rcx, rax
call fcn.1400430f4
call fcn.140002370
lea r8d, [r12 + 0x33]
lea rdx, [rsp + 0x1c8]
mov rcx, rax
call fcn.140043dc0
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.140002ad8
nop
lea rcx, [rsp + 0x1c8]
call fcn.140002c44
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x110]
call fcn.140002b74
lea rdx, [0x140088648]
lea rcx, [rsp + 0x110]
call fcn.1400143b0
nop
call fcn.140018100
nop
call fcn.140018100
nop
mov dword [r14], ebx
mov ecx, 6
call fcn.14001011c
nop
call fcn.140002370
mov r8d, 0x26
lea rdx, [rsp + 0x1c8]
mov rcx, rax
call fcn.140044110
mov rcx, rax
call fcn.140002290
mov r9d, reloc.WSOCK32.dll_recv
lea r8, str.Error
mov rdx, rax
mov rcx, qword [0x1400b3310]
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [rsp + 0x1c8]
call fcn.140001a48
lea rcx, [0x1400b3308]
call fcn.1400050a0
mov rcx, rax
call fcn.14004321c
lea rcx, [0x1400b3308]
call fcn.1400050a0
mov rcx, rax
call fcn.1400430f4
mov dword [rsp + 0x40], ebx
lea rdx, [0x140088668]
lea rcx, [rsp + 0x40]
call fcn.1400143b0
nop
xor ebx, ebx
lea rcx, [0x1400b3308]
call fcn.1400050a0
mov rcx, rax
call fcn.14004321c
lea rcx, [0x1400b3308]
call fcn.1400050a0
mov rcx, rax
call fcn.1400430f4
mov dword [rsp + 0x44], ebx
lea rdx, [0x140088668]
lea rcx, [rsp + 0x44]
call fcn.1400143b0
nop
mov dword [rdi], ebx
mov ecx, 6
call fcn.14001011c
int3