Function at 0x1400429d8
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Encrypt data using speck
Execute command
Get kernel32 base address
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x430
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x14031f010]
xor rax, rsp
mov qword [rsp + 0x410], rax
movups xmm0, xmmword [str.v_fkoPT_SJMc252__.d___N]
movups xmmword [rsp + 0x90], xmm0
movsd xmm1, qword [0x14030b550]
movsd qword [rsp + 0xa0], xmm1
movzx eax, word [0x14030b558]
mov word [rsp + 0xa8], ax
xor ebx, ebx
mov esi, 0x8d3dcb09
mov r14b, 0x35
lea edi, [rbx + 1]
cmp byte [0x14030b559], bl
je 0x140042a82
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x1a
jl 0x140042a5d
lea rcx, [rsp + 0x90]
call fcn.140151fb0
movups xmm0, xmmword [str.v_fkoPT_SJMc7_34_h._J]
movups xmmword [rsp + 0x90], xmm0
mov eax, dword [0x14030acd0]
mov dword [rsp + 0xa0], eax
movzx eax, word [0x14030acd4]
mov word [rsp + 0xa4], ax
cmp byte [0x14030acd5], bl
je 0x140042af2
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x16
jl 0x140042acd
lea rcx, [rsp + 0x90]
call fcn.140151fb0
movups xmm0, xmmword [str.v_fkoPT_SJMc70____g__M]
movups xmmword [rsp + 0x90], xmm0
movsd xmm1, qword [0x14030b570]
movsd qword [rsp + 0xa0], xmm1
mov al, byte [0x14030b578]
mov byte [rsp + 0xa8], al
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x19
jl 0x140042b37
lea rcx, [rsp + 0x90]
call fcn.140151fb0
movups xmm0, xmmword [str.v_fkoPT_SJMc_50_5._9e_O]
movups xmmword [rsp + 0x90], xmm0
movsd xmm1, qword [0x14030a768]
movsd qword [rsp + 0xa0], xmm1
movzx eax, word [0x14030a770]
mov word [rsp + 0xa8], ax
mov al, byte [reloc.WLDAP32.dll_Ordinal_79]
mov byte [rsp + 0xaa], al
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x1b
jl 0x140042bb0
lea rcx, [rsp + 0x90]
call fcn.140151fb0
movups xmm0, xmmword [0x14030a880]
movups xmmword [rsp + 0x90], xmm0
movsd xmm1, qword [0x14030a890]
movsd qword [rsp + 0xa0], xmm1
movzx eax, word [0x14030a898]
mov word [rsp + 0xa8], ax
mov al, byte [reloc.WLDAP32.dll_Ordinal_79]
mov byte [rsp + 0xaa], al
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x1b
jl 0x140042c29
lea rcx, [rsp + 0x90]
call fcn.140151fb0
movups xmm0, xmmword [str.v_fkoPT_SJMcw_q_tt.x]
movups xmmword [rsp + 0x90], xmm0
movsd xmm1, qword [0x14030ab00]
movsd qword [rsp + 0xa0], xmm1
movzx eax, word [0x14030ab08]
mov word [rsp + 0xa8], ax
mov al, byte [reloc.WLDAP32.dll_Ordinal_79]
mov byte [rsp + 0xaa], al
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x1b
jl 0x140042ca2
lea rcx, [rsp + 0x90]
call fcn.140151fb0
movups xmm0, xmmword [str.v_fkoPT_SJMc.____]
movups xmmword [rsp + 0x90], xmm0
mov eax, dword [0x14030b2c8]
mov dword [rsp + 0xa0], eax
movzx eax, word [0x14030b2cc]
mov word [rsp + 0xa4], ax
mov al, byte [0x14030b2ce]
mov byte [rsp + 0xa6], al
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x17
jl 0x140042d17
lea rcx, [rsp + 0x90]
call fcn.140151fb0
movups xmm0, xmmword [str.v_fkoPT_SJMc.____]
movups xmmword [rsp + 0x90], xmm0
mov eax, dword [0x14030b2c8]
mov dword [rsp + 0xa0], eax
movzx eax, word [0x14030b2cc]
mov word [rsp + 0xa4], ax
mov al, byte [0x14030b2ce]
mov byte [rsp + 0xa6], al
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x17
jl 0x140042d8c
lea rcx, [rsp + 0x90]
call fcn.140151fb0
movups xmm0, xmmword [str.v_fkoPT_SJMc._____ai_K]
movups xmmword [rsp + 0x90], xmm0
mov eax, dword [0x14030b628]
mov dword [rsp + 0xa0], eax
movzx eax, word [0x14030b62c]
mov word [rsp + 0xa4], ax
mov al, byte [0x14030b62e]
mov byte [rsp + 0xa6], al
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x17
jl 0x140042e01
lea rcx, [rsp + 0x90]
call fcn.140151fb0
movups xmm0, xmmword [str.v_fkoPT_SJMc6_00__i_:__L]
movups xmmword [rsp + 0x90], xmm0
movsd xmm1, qword [0x14030ada0]
movsd qword [rsp + 0xa0], xmm1
cmp byte [0x14030ada7], bl
je 0x140042e8b
mov r8d, ebx
lea r9, [rsp + 0x90]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x18
jl 0x140042e66
lea rcx, [rsp + 0x90]
call fcn.140151fb0
call qword [sym.imp.KERNEL32.dll_AllocConsole]
movzx eax, word [0x14030a778]
mov word [rsp + 0x80], ax
cmp byte [0x14030a779], bl
je 0x140042ee5
mov r8d, ebx
lea r9, [rsp + 0x80]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 2
jl 0x140042ec0
mov eax, dword [str.VYYQW]
mov dword [rsp + 0xb0], eax
movzx eax, word [0x14030b0b8]
mov word [rsp + 0xb4], ax
mov al, byte [0x14030b0ba]
mov byte [rsp + 0xb6], al
mov r8d, ebx
lea r9, [rsp + 0xb0]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 7
jl 0x140042f19
xor ecx, ecx
call fcn.140135f90
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xb0]
call fcn.1401512a0
movzx eax, word [0x14030a774]
mov word [rsp + 0x80], ax
cmp byte [0x14030a775], bl
je 0x140042fa4
mov r8d, ebx
lea r9, [rsp + 0x80]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 2
jl 0x140042f7f
mov rax, qword [str.VYYWLN]
mov qword [rsp + 0xb0], rax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], bl
je 0x140042feb
mov r8d, ebx
lea r9, [rsp + 0xb0]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 8
jl 0x140042fc6
mov ecx, edi
call fcn.140135f90
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xb0]
call fcn.1401512a0
movzx eax, word [0x14030a774]
mov word [rsp + 0x80], ax
cmp byte [0x14030a775], bl
je 0x140043051
mov r8d, ebx
lea r9, [rsp + 0x80]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 2
jl 0x14004302c
mov rax, qword [str.VYYWLN]
mov qword [rsp + 0xb0], rax
cmp byte [reloc.WLDAP32.dll_Ordinal_60], bl
je 0x140043098
mov r8d, ebx
lea r9, [rsp + 0xb0]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 8
jl 0x140043073
mov ecx, 2
call fcn.140135f90
mov r8, rax
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xb0]
call fcn.1401512a0
mov eax, dword [str.VZD8BfMHBuSXP2_7__]
mov dword [rsp + 0xb0], eax
cmp byte [0x14030d107], bl
je 0x1400430ff
mov r8d, ebx
lea r9, [rsp + 0xb0]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 4
jl 0x1400430da
lea rcx, [rsp + 0xb0]
call fcn.140159ee8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov eax, dword [rdx + 0x30]
add eax, 0x100000
mov dword [rdx + 0x40], eax
mov ecx, 8
call fcn.14005ecd0
lea rcx, [0x14004270c]
mov qword [rax], rcx
mov qword [rsp + 0x390], rax
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14005a80c]
xor edx, edx
xor ecx, ecx
call fcn.140152400
mov qword [rsp + 0x90], rax
test rax, rax
je 0x140044a89
cmp dword [rsp + 0x98], ebx
je 0x140044a9b
movaps xmm0, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0x390], xmm0
lea rcx, [rsp + 0x390]
call fcn.1400623d0
test eax, eax
jne 0x140044aa3
mov ecx, 8
call fcn.14005ecd0
lea rcx, [0x140042730]
mov qword [rax], rcx
mov qword [rsp + 0x390], rax
lea rcx, [rsp + 0x168]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x14005a80c]
xor edx, edx
xor ecx, ecx
call fcn.140152400
mov qword [rsp + 0x160], rax
test rax, rax
je 0x140044b62
cmp dword [rsp + 0x168], ebx
je 0x140044aab
movaps xmm0, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x90], xmm0
lea rcx, [rsp + 0x90]
call fcn.1400623d0
test eax, eax
jne 0x140044ab3
movsd xmm0, qword [str.cwwkuh]
movsd qword [rsp + 0x100], xmm0
movzx eax, word [0x14030a710]
mov word [rsp + 0x108], ax
mov al, byte [0x14030a712]
mov byte [rsp + 0x10a], al
mov r8d, ebx
lea r9, [rsp + 0x100]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xb
jl 0x140043268
lea rdx, [rsp + 0x100]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400432fa
mov edx, 7
lea rcx, [rsp + 0x170]
call fcn.14003a508
mov r9, rax
lea rdx, [rsp + 0x190]
call fcn.140044b74
mov r15, rax
cmp byte [rax + 0x31], bl
je 0x140044abb
mov r8, rax
mov eax, esi
mul ebx
shr edx, 5
movsx ecx, dl
imul eax, ecx, 0x3a
mov cl, bl
sub cl, al
add cl, r14b
xor byte [r8], cl
add ebx, edi
add r8, rdi
cmp ebx, 0x32
jge 0x140044abb
jmp 0x1400432d3
lea rcx, [rsp + 0x3c0]
call fcn.14003ad64
nop
lea rdx, [0x140332738]
mov r15d, reloc.WS2_32.dll_recv
cmp qword [reloc.WS2_32.dll_ntohs], r15
cmovae rdx, qword [0x140332738]
lea rcx, [rsp + 0x3c0]
cmp qword [rsp + 0x3d8], r15
cmovae rcx, qword [rsp + 0x3c0]
mov r8, qword [rsp + 0x3d0]
cmp r8, qword [reloc.WS2_32.dll_closesocket]
jne 0x1400449a8
call fcn.14012e1b0
test eax, eax
jne 0x1400449a8
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x140042620]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14003da4c]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
lea r8, [0x14003da64]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14003aac8
nop
movups xmm0, xmmword [0x14030ac58]
movups xmmword [rsp + 0xb8], xmm0
movsd xmm1, qword [0x14030ac68]
movsd qword [rsp + 0xc8], xmm1
mov eax, dword [0x14030ac70]
mov dword [rsp + 0xd0], eax
movzx eax, word [0x14030ac74]
mov word [rsp + 0xd4], ax
cmp byte [0x14030ac75], bl
je 0x140043441
mov r8d, ebx
lea r9, [rsp + 0xb8]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x1e
jl 0x14004341c
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x140], rbx
mov r13d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x148], r13
mov byte [rsp + 0x130], bl
lea rax, [rsp + 0xb8]
or r12, 0xffffffffffffffff
inc r12
cmp byte [rax + r12], bl
jne 0x140043472
lea rcx, [rsp + 0x130]
cmp r12, r13
ja 0x1400434aa
mov qword [rsp + 0x140], r12
mov r8, r12
lea rdx, [rsp + 0xb8]
call fcn.14012d910
mov byte [rsp + r12 + 0x130], bl
jmp 0x1400434bb
lea r9, [rsp + 0xb8]
mov rdx, r12
call fcn.14004c3c4
nop
movups xmm0, xmmword [0x140309f28]
movups xmmword [rsp + 0x190], xmm0
movups xmm1, xmmword [0x140309f38]
movups xmmword [rsp + 0x1a0], xmm1
movsd xmm0, qword [0x140309f48]
movsd qword [rsp + 0x1b0], xmm0
mov al, byte [0x140309f50]
mov byte [rsp + 0x1b8], al
mov r8d, ebx
lea r9, [rsp + 0x190]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0x29
jl 0x140043502
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x120], rbx
mov qword [rsp + 0x128], r13
mov byte [rsp + 0x110], bl
lea rax, [rsp + 0x190]
or r12, 0xffffffffffffffff
inc r12
cmp byte [rax + r12], bl
jne 0x140043552
lea rcx, [rsp + 0x110]
cmp r12, r13
ja 0x14004358a
mov qword [rsp + 0x120], r12
mov r8, r12
lea rdx, [rsp + 0x190]
call fcn.14012d910
mov byte [rsp + r12 + 0x110], bl
jmp 0x14004359b
lea r9, [rsp + 0x190]
mov rdx, r12
call fcn.14004c3c4
nop
lea r8, [rsp + 0x130]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x380]
call fcn.14003d4c4
nop
mov rdx, qword [rsp + 0x128]
mov r12d, 0x1000
cmp rdx, r15
jb 0x1400435fd
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, r12
jb 0x1400435f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044aec
call fcn.14005dff0
mov qword [rsp + 0x120], rbx
mov qword [rsp + 0x128], r13
mov byte [rsp + 0x110], bl
mov rdx, qword [rsp + 0x148]
cmp rdx, r15
jb 0x140043652
inc rdx
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, r12
jb 0x14004364d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044af2
call fcn.14005dff0
mov qword [rsp + 0x140], rbx
mov qword [rsp + 0x148], r13
mov byte [rsp + 0x130], bl
cmp byte [0x1403365ba], bl
je 0x14004375d
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x380]
call fcn.1400462ac
mov r13, rax
movsd xmm0, qword [0x14030b3c0]
movsd qword [rsp + 0x150], xmm0
mov eax, dword [0x14030b3c8]
mov dword [rsp + 0x158], eax
cmp byte [0x14030b3cb], bl
je 0x1400436e3
mov r8d, ebx
lea r9, [rsp + 0x150]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
sub al, cl
add al, r14b
xor byte [r9], al
add r8d, edi
add r9, rdi
cmp r8d, 0xc
jl 0x1400436be
lea rdx, [rsp + 0x150]
lea rcx, [0x140334650]
call fcn.14004b558
mov rdx, r13
cmp qword [r13 + 0x18], r15
jb 0x140043704
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
mov rcx, rax
call fcn.1400552e0
mov rcx, rax
call fcn.14004b73c
nop
mov rdx, qword [rsp + 0xf8]
cmp rdx, r15
jb 0x140043757
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, r12
jb 0x140043752
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044af8
call fcn.14005dff0
mov r13d, reloc.WS2_32.dll_ntohs
movzx r8d, byte [rsp + 0x380]
mov ecx, r8d
cmp r8d, 4
ja 0x1400437a6
test r8b, r8b
je 0x1400437a1
sub ecx, 1
je 0x140043793
sub ecx, 1
jne 0x1400437a6
mov rdx, qword [rsp + 0x388]
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 4
jmp 0x1400437b1
mov rdx, qword [rsp + 0x388]
mov rax, qword [rdx + 8]
jmp 0x1400437b1
mov rax, rbx
jmp 0x1400437a9
mov rax, rdi
mov rdx, qword [rsp + 0x388]
mov dword [0x140336604], eax
mov rsi, rbx
movzx ecx, r8b
cmp ecx, 4
ja 0x1400437ea
test r8b, r8b
je 0x1400437e5
sub ecx, 1
je 0x1400437df
sub ecx, 1
jne 0x1400437ea
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 4
jmp 0x1400437ed
mov rax, qword [rdx + 8]
jmp 0x1400437ed
mov rax, rbx
jmp 0x1400437ed
mov rax, rdi
cmp rsi, rax
jae 0x140043cbd
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.14004617c
mov rcx, rax
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xc8], 8
mov rax, qword [str.Programe]
mov qword [rsp + 0xb8], rax
mov byte [rsp + 0xc0], bl
lea rdx, [rsp + 0xb8]
call fcn.140045f18
lea rdx, [rsp + 0xe0]
mov rcx, rax
call fcn.14004b48c
mov r14, rsi
shl r14, 5
lea rcx, [0x140000000]
lea rcx, [rcx + 0x338cc0]
add rcx, r14
cmp rcx, rax
je 0x140043878
mov r8b, bl
mov rdx, rax
call fcn.140049668
mov rdx, qword [rsp + 0xf8]
cmp rdx, r15
jb 0x1400438b6
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, r12
jb 0x1400438b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044afe
call fcn.14005dff0
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.14004617c
mov rcx, rax
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xc8], 6
mov eax, dword [str.Status]
mov dword [rsp + 0xb8], eax
movzx eax, word [0x14030bba8]
mov word [rsp + 0xbc], ax
mov byte [rsp + 0xbe], bl
lea rdx, [rsp + 0xb8]
call fcn.140045f18
lea rdx, [rsp + 0xe0]
mov rcx, rax
call fcn.14004b48c
lea rcx, [0x140000000]
lea rcx, [rcx + 0x337390]
add rcx, r14
cmp rcx, rax
je 0x140043946
mov r8b, bl
mov rdx, rax
call fcn.140049668
mov rdx, qword [rsp + 0xf8]
cmp rdx, r15
jb 0x140043984
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, r12
jb 0x14004397f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b04
call fcn.14005dff0
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.14004617c
mov rcx, rax
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xc8], select
movsd xmm0, qword [str.updateddate]
movsd qword [rsp + 0xb8], xmm0
movzx eax, word [0x14030bbb8]
mov word [rsp + 0xc0], ax
mov al, byte [0x14030bbba]
mov byte [rsp + 0xc2], al
mov byte [rsp + 0xc3], bl
lea rdx, [rsp + 0xb8]
call fcn.140045f18
lea rdx, [rsp + 0xe0]
mov rcx, rax
call fcn.14004b48c
lea rcx, [0x140000000]
lea rcx, [rcx + 0x3379d0]
add rcx, r14
cmp rcx, rax
je 0x140043a1d
mov r8b, bl
mov rdx, rax
call fcn.140049668
mov rdx, qword [rsp + 0xf8]
cmp rdx, r15
jb 0x140043a5b
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, r12
jb 0x140043a56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b0a
call fcn.14005dff0
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.14004617c
mov rcx, rax
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xc8], 4
mov eax, dword [str.Name]
mov dword [rsp + 0xb8], eax
mov byte [rsp + 0xbc], bl
lea rdx, [rsp + 0xb8]
call fcn.140045f18
lea rdx, [rsp + 0xe0]
mov rcx, rax
call fcn.14004b48c
lea rcx, [0x140000000]
lea rcx, [rcx + 0x338650]
add rcx, r14
cmp rcx, rax
je 0x140043adc
mov r8b, bl
mov rdx, rax
call fcn.140049668
mov rdx, qword [rsp + 0xf8]
cmp rdx, r15
jb 0x140043b1a
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, r12
jb 0x140043b15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b10
call fcn.14005dff0
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.14004617c
mov rcx, rax
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xc8], 5
mov eax, dword [str.image]
mov dword [rsp + 0xb8], eax
mov al, byte [0x14030bbc0]
mov byte [rsp + 0xbc], al
mov byte [rsp + 0xbd], bl
lea rdx, [rsp + 0xb8]
call fcn.140045f18
lea rdx, [rsp + 0xe0]
mov rcx, rax
call fcn.14004b48c
lea rcx, [0x140000000]
lea rcx, [rcx + 0x339330]
add rcx, r14
cmp rcx, rax
je 0x140043ba8
mov r8b, bl
mov rdx, rax
call fcn.140049668
mov rdx, qword [rsp + 0xf8]
cmp rdx, r15
jb 0x140043be6
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, r12
jb 0x140043be1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b16
call fcn.14005dff0
mov rdx, rsi
lea rcx, [rsp + 0x380]
call fcn.14004617c
mov rcx, rax
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xc8], 4
mov eax, dword [str.link]
mov dword [rsp + 0xb8], eax
mov byte [rsp + 0xbc], bl
lea rdx, [rsp + 0xb8]
call fcn.140045f18
lea rdx, [rsp + 0xe0]
mov rcx, rax
call fcn.14004b48c
lea rcx, [0x140000000]
lea rcx, [rcx + 0x336d50]
add rcx, r14
cmp rcx, rax
je 0x140043c67
mov r8b, bl
mov rdx, rax
call fcn.140049668
mov rdx, qword [rsp + 0xf8]
cmp rdx, r15
jb 0x140043ca5
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, r12
jb 0x140043ca0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b1c
call fcn.14005dff0
add rsi, rdi
mov rdx, qword [rsp + 0x388]
mov r8b, byte [rsp + 0x380]
jmp 0x1400437ba
mov dl, r8b
lea rcx, [rsp + 0x388]
call fcn.140048bb8
nop
call fcn.14003aac8
lea rcx, [rsp + 0x170]
call fcn.14003b3f0
lea rcx, [0x140332758]
cmp rcx, rax
je 0x140043cf7
mov r8b, bl
mov rdx, rax
call fcn.140049668
mov rdx, qword [rsp + 0x188]
cmp rdx, r15
jb 0x140043d35
inc rdx
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, r12
jb 0x140043d30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b22
call fcn.14005dff0
call fcn.14003aac8
mov edx, Ordinal_26
lea rcx, [rsp + 0x3a0]
call fcn.14003a508
nop
mov dword [rsp + 0x330], 0x50
mov dword [rsp + 0x334], 0x40
lea rax, [0x140044c44]
mov qword [rsp + 0x338], rax
mov qword [rsp + 0x340], rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x348], rax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x350], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x360], xmm1
lea rcx, [rsp + 0x3a0]
call fcn.140039b68
mov qword [rsp + 0x370], rax
mov qword [rsp + 0x378], rbx
lea rcx, [rsp + 0x330]
call qword [sym.imp.USER32.dll_RegisterClassExA]
lea rcx, [rsp + 0x3a0]
call fcn.140039b68
mov r8, rax
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
mov r9d, 0x80000000
mov rdx, qword [rsp + 0x370]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r14, rax
mov qword [0x1403365d8], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rsi, rax
mov qword [0x1403365e0], rax
test rax, rax
je 0x14004486d
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [0x140336610]
call fcn.14012dfc0
mov dword [0x140336638], edi
mov dword [0x140336628], edi
mov dword [0x140336618], ebx
mov dword [0x14033663c], edi
mov dword [0x140336640], 0x50
mov dword [0x14033664c], edi
mov rax, qword [rsi]
lea rcx, [0x1403365c8]
mov qword [rsp + 0x30], rcx
lea rcx, [0x140336610]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0x40
mov r9, r14
mov r8d, edi
xor edx, edx
mov rcx, rsi
call qword [rax + 0x80]
test eax, eax
js 0x140044866
xor edx, edx
mov rcx, qword [0x1403365d8]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1403365d8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rax, qword [0x1403365c0]
test rax, rax
je 0x140043ef3
add dword [rax + 0x3b0], edi
mov ecx, 0x3e48
call fcn.14014f3a0
mov qword [rsp + 0x390], rax
lea rcx, [rsp + 0x80]
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0x100], rax
test rax, rax
je 0x140043f31
xor edx, edx
mov rcx, rax
call fcn.1400018fc
mov rcx, rax
jmp 0x140043f34
mov rcx, rbx
mov rax, qword [0x1403365c0]
test rax, rax
cmove rax, rcx
mov qword [0x1403365c0], rax
call fcn.1400071f0
mov rsi, qword [0x1403365c0]
mov qword [rsp + 0x390], rsi
bts dword [rsi + 8], 0xa
lea rcx, [rsp + 0x1f0]
call fcn.140025e18
mov qword [rsi + 0x20], rbx
mov qword [rsi + 0x28], rbx
mov byte [rsp + 0x238], dil
mov byte [rsp + 0x210], dil
mov eax, 3
mov dword [rsp + 0x208], eax
mov dword [rsp + 0x20c], eax
lea rcx, [rsp + 0x280]
call fcn.140025e18
mov byte [rsp + 0x28c], bl
mov qword [rsp + 0x28], rbx
lea rax, [rsp + 0x280]
mov qword [rsp + 0x20], rax
movss xmm6, dword [0x14030d274]
movaps xmm3, xmm6
mov r8d, 0x225bc
lea rdx, [0x1402e7750]
mov rcx, qword [rsi + 0xa8]
call fcn.140026598
lea rax, [0x14030ce34]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14030d27c]
lea rdx, [0x1402c90b0]
mov rcx, qword [rsi + 0xa8]
call fcn.1400266b4
mov qword [0x140336608], rax
mov rcx, qword [rsi + 0xa8]
call fcn.140026350
lea rax, [0x140309dd8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x280]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm6
mov r13d, 0xe5510
mov r8d, r13d
lea r14, [0x1401e3ba0]
mov rdx, r14
mov rcx, qword [rsi + 0xa8]
call fcn.140026598
mov qword [0x1403365e8], rax
lea rax, [0x140309dd8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x280]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14030d2a8]
mov r8d, r13d
mov rdx, r14
mov rcx, qword [rsi + 0xa8]
call fcn.140026598
mov qword [0x1403365d0], rax
lea rax, [0x140309dd8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x280]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x14030d2a4]
mov r8d, r13d
mov rdx, r14
mov rcx, qword [rsi + 0xa8]
call fcn.140026598
mov qword [0x1403365f8], rax
lea rax, [0x1403365f0]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x58], ebx
or eax, 0xffffffff
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_50
mov r9d, 0x190
mov r8d, 0x435b
lea rdx, [0x14032e1e0]
mov rcx, qword [0x1403365c8]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
mov rax, qword [0x1403365c0]
test dword [rsi + 8], 0x400
je 0x14004415e
mov dword [rax + 0x164c], ebx
mov dword [rax + 0x1728], 0x3f800000
mov r13, qword [0x1403365d8]
lea rcx, [0x1403399c8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14004427e
lea rcx, [0x1403399c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14004427e
mov r14, qword [0x1403365c0]
lea rsi, [r14 + 8]
or dword [rsi + 4], 0xc06
lea rax, str.imgui_impl_win32
mov qword [rsi + 0xd8], rax
mov qword [0x1403399b8], r13
mov rax, qword [r14 + 0x1d40]
mov rcx, qword [rax]
mov qword [rcx + 0x58], r13
mov qword [rcx + 0x50], r13
test dword [rsi], 0x400
je 0x1400441dc
call fcn.14002d080
mov r14, qword [0x1403365c0]
mov dword [rsi + 0x34], 9
mov dword [rsi + 0x38], Ordinal_41
mov dword [rsi + 0x3c], Ordinal_41
mov dword [rsi + 0x40], Ordinal_41
mov dword [rsi + 0x44], Ordinal_41
mov dword [rsi + 0x48], reloc.WLDAP32.dll_Ordinal_33
mov dword [rsi + 0x4c], Ordinal_35
mov dword [rsi + 0x50], Ordinal_41
mov dword [rsi + 0x54], reloc.WLDAP32.dll_Ordinal_35
mov dword [rsi + 0x58], reloc.WLDAP32.dll_Ordinal_45
mov dword [rsi + 0x5c], reloc.WLDAP32.dll_Ordinal_46
mov dword [rsi + 0x60], 8
mov dword [rsi + 0x64], reloc.WLDAP32.dll_Ordinal_32
mov eax, reloc.WS2_32.dll_listen
mov dword [rsi + 0x68], eax
mov dword [rsi + 0x6c], reloc.WLDAP32.dll_Ordinal_27
mov dword [rsi + 0x70], eax
mov dword [rsi + 0x74], 0x41
mov dword [rsi + 0x78], 0x43
mov dword [rsi + 0x7c], 0x56
mov dword [rsi + 0x80], 0x58
mov dword [rsi + 0x84], 0x59
mov dword [rsi + 0x88], 0x5a
jmp 0x140044285
mov r14, qword [0x1403365c0]
mov rcx, qword [0x1403365c8]
lea rax, str.imgui_impl_dx9
mov qword [r14 + 0xe8], rax
or dword [r14 + 0xc], 0x1008
mov qword [0x1403399a0], rcx
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
test dword [r14 + 8], 0x400
je 0x140044306
mov rax, qword [0x1403365c0]
lea rcx, [fcn.14002b774]
mov qword [rax + 0x15f0], rcx
lea rcx, [fcn.14002b84c]
mov qword [rax + 0x15f8], rcx
lea rcx, [0x14002b8b0]
mov qword [rax + 0x1600], rcx
lea rcx, [0x14002b900]
mov qword [rax + 0x1608], rcx
lea rcx, [0x14002ba40]
mov qword [rax + 0x1610], rcx
mov edx, recv
lea rcx, [rsp + 0x1c8]
call fcn.14003a508
nop
mov rcx, rax
call fcn.140039b68
mov rsi, rax
mov qword [rsp + 0xb0], rax
mov rdx, qword [rsp + 0x1e0]
cmp rdx, r15
jb 0x14004436a
inc rdx
mov rcx, qword [rsp + 0x1c8]
mov rax, rcx
cmp rdx, r12
jb 0x140044365
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b28
call fcn.14005dff0
mov qword [rsp + 0x1d8], rbx
mov qword [rsp + 0x1e0], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x1c8], bl
xorps xmm0, xmm0
movups xmmword [rsp + 0x3e0], xmm0
movups xmmword [rsp + 0x3f0], xmm0
movups xmmword [rsp + 0x400], xmm0
movss xmm6, dword [0x14030d1f0]
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400443e7
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x3e0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x1400446a5
cmp qword [0x140339990], rbx
jne 0x1400443f5
call fcn.14002b634
call fcn.14002c038
call fcn.140006380
call fcn.1400416cc
mov cl, byte [0x1403365b9]
mov rax, qword [0x1403365c0]
test cl, cl
jne 0x140044436
or dword [rax + 0x1c40], 2
mov dword [rax + 0x1c64], 0x440a4000
mov dword [rax + 0x1c68], 0x43bb0000
mov dword [rax + 0x1c48], edi
cmp cl, dil
jne 0x14004445c
or dword [rax + 0x1c40], 2
mov dword [rax + 0x1c64], 0x443c0000
mov dword [rax + 0x1c68], 0x440b4000
mov dword [rax + 0x1c48], edi
mov dword [rsp + 0xd8], 0x3f000000
mov dword [rsp + 0xdc], 0x3f000000
lea rdx, [rsp + 0xd8]
mov ecx, 5
call fcn.140003518
xor edx, edx
mov r8d, Ordinal_301
mov rcx, rsi
call fcn.14000be1c
call fcn.14003da88
call fcn.14000e328
mov ecx, edi
call fcn.1400035a4
cmp byte [0x1403365bc], dil
jne 0x1400444b3
call fcn.140039ee4
cmp byte [0x1403365bb], dil
jne 0x1400444c1
call fcn.14003a29c
call fcn.1400081dc
mov rcx, qword [0x1403365c8]
mov rax, qword [rcx]
mov dword [rsp + 0x30], ebx
movss dword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], ebx
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1403365c8]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14004453f
call fcn.140008614
mov rax, qword [0x1403365c0]
mov rcx, qword [rax + 0x1d40]
mov rdx, qword [rcx]
add rdx, 0xb0
mov al, byte [rdx]
neg al
sbb rcx, rcx
and rcx, rdx
call fcn.14002af08
mov rcx, qword [0x1403365c8]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rax, qword [rsp + 0x390]
test dword [rax + 8], 0x400
je 0x14004464c
call fcn.14001597c
mov rsi, qword [0x1403365c0]
mov ecx, edi
mov dword [rsp + 0x80], ecx
mov eax, dword [rsi + 0x1630]
cmp eax, edi
jle 0x1400445d6
mov r13d, 8
mov rax, qword [rsi + 0x1638]
mov r14, qword [rax + r13]
test byte [r14 + 4], 0x80
jne 0x1400445bf
mov rax, qword [rsi + 0x15c0]
test rax, rax
je 0x1400445a5
xor edx, edx
mov rcx, r14
call rax
mov ecx, dword [rsp + 0x80]
mov rax, qword [rsi + 0x1608]
test rax, rax
je 0x1400445bf
xor edx, edx
mov rcx, r14
call rax
mov ecx, dword [rsp + 0x80]
add ecx, edi
mov dword [rsp + 0x80], ecx
add r13, 8
mov eax, dword [rsi + 0x1630]
cmp ecx, eax
jl 0x140044579
mov ecx, edi
mov dword [rsp + 0x80], ecx
cmp eax, edi
jle 0x140044644
mov r14d, 8
mov rax, qword [rsi + 0x1638]
mov r13, qword [r14 + rax]
test byte [r13 + 4], 0x80
jne 0x14004462f
mov rax, qword [rsi + 0x15c8]
test rax, rax
je 0x140044615
xor edx, edx
mov rcx, r13
call rax
mov ecx, dword [rsp + 0x80]
mov rax, qword [rsi + 0x1610]
test rax, rax
je 0x14004462f
xor edx, edx
mov rcx, r13
call rax
mov ecx, dword [rsp + 0x80]
add ecx, edi
mov dword [rsp + 0x80], ecx
add r14, 8
cmp ecx, dword [rsi + 0x1630]
jl 0x1400445e9
mov rsi, qword [rsp + 0xb0]
mov rcx, qword [0x1403365c8]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1400446a5
mov rcx, qword [0x1403365c8]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x1400446a5
call fcn.14002b6a8
mov rcx, qword [0x1403365c8]
mov rax, qword [rcx]
lea rdx, [0x140336610]
call qword [rax + 0x80]
call fcn.14002b634
cmp dword [rsp + 0x3e8], 0x12
jne 0x1400443a8
call fcn.140015f14
call fcn.14002b6a8
mov rcx, qword [0x1403399a0]
test rcx, rcx
je 0x1400446d6
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1403399a0], rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov qword [0x1403399b8], rbx
mov rdi, qword [0x1403365c0]
mov rcx, rdi
call fcn.1400073e0
mov rax, qword [0x1403365c0]
cmp rax, rdi
cmove rax, rbx
mov qword [0x1403365c0], rax
test rdi, rdi
je 0x140044740
mov rcx, rdi
call fcn.14001d1b0
mov rax, qword [0x1403365c0]
test rax, rax
je 0x140044738
dec dword [rax + 0x3b0]
mov rcx, rdi
call fcn.140145500
mov rcx, qword [0x1403365c8]
test rcx, rcx
je 0x140044759
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1403365c8], rbx
mov rcx, qword [0x1403365e0]
test rcx, rcx
je 0x140044772
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1403365e0], rbx
mov rcx, qword [0x1403365d8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0x348]
mov rcx, qword [rsp + 0x370]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rsp + 0x3b8]
cmp rdx, r15
jb 0x1400447d4
inc rdx
mov rcx, qword [rsp + 0x3a0]
mov rax, rcx
cmp rdx, r12
jb 0x1400447cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b2e
call fcn.14005dff0
mov qword [rsp + 0x3b0], rbx
mov qword [rsp + 0x3b8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x3a0], bl
mov rdx, qword [rsp + 0x3d8]
cmp rdx, r15
jb 0x14004482d
inc rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, r12
jb 0x140044828
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b34
call fcn.14005dff0
xor eax, eax
mov rcx, qword [rsp + 0x410]
xor rcx, rsp
call fcn.14005de20
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov rsi, qword [0x1403365e0]
mov rcx, qword [0x1403365c8]
test rcx, rcx
je 0x14004488d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1403365c8], rbx
mov rsi, qword [0x1403365e0]
test rsi, rsi
je 0x1400448a2
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1403365e0], rbx
mov rdx, qword [rsp + 0x348]
mov rcx, qword [rsp + 0x370]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [rsp + 0x3b8]
cmp rdx, r15
jb 0x1400448f7
inc rdx
mov rcx, qword [rsp + 0x3a0]
mov rax, rcx
cmp rdx, r12
jb 0x1400448f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b2e
call fcn.14005dff0
mov qword [rsp + 0x3b0], rbx
mov qword [rsp + 0x3b8], r13
mov byte [rsp + 0x3a0], bl
mov rdx, qword [rsp + 0x3d8]
cmp rdx, r15
jb 0x1400449a1
inc rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, r12
jb 0x14004494b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044b34
call fcn.14005dff0
jmp 0x1400449a1
mov eax, edi
jmp 0x14004482f
mov edx, 0xa
lea rcx, [rsp + 0x170]
call fcn.14003a508
mov rdx, rax
lea rcx, [0x140332890]
call fcn.140046dd4
lea rcx, [rsp + 0x170]
call fcn.140046d78
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
mov r9d, 0x1194
lea r8, [0x140042998]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rsp + 0x190]
call fcn.140044ba4
mov r10, rax
cmp byte [rax + 0x28], bl
je 0x140044a36
mov r8d, ebx
mov r9, rax
mov eax, esi
mul r8d
shr edx, 5
movsx ecx, dl
imul eax, ecx, 0x3a
mov cl, r8b
sub cl, al
add cl, r14b
xor byte [r9], cl
add r8d, edi
add r9, rdi
cmp r8d, 0x29
jl 0x140044a11
mov rcx, r10
call fcn.140159ee8
lea rdx, [rsp + 0x280]
call fcn.140044bd4
mov r15, rax
cmp byte [rax + 0xaf], bl
je 0x140044b3a
mov r9, rax
mov eax, esi
mul ebx
shr edx, 5
movsx edx, dl
imul r8d, edx, 0x3a
mov al, bl
sub al, r8b
add al, r14b
xor byte [r9], al
add ebx, edi
add r9, rdi
cmp ebx, 0xb0
jge 0x140044b3a
jmp 0x140044a5d
mov dword [rsp + 0x98], ebx
mov ecx, 6
call fcn.140060648
nop
mov ecx, edi
call fcn.140060648
int3
mov ecx, eax
call fcn.14006060c
nop
mov ecx, edi
call fcn.140060648
int3
mov ecx, eax
call fcn.14006060c
nop
mov rcx, r9
call fcn.140046c24
mov r8, rax
mov r9d, 0x40010
mov rdx, r15
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rsp + 0x170]
call fcn.140046d78
mov ecx, edi
call fcn.140150ef0
nop
call fcn.14015e440
nop
call fcn.14015e440
int3
call fcn.14015e440
int3
call fcn.14015e440
int3
call fcn.14015e440
int3
call fcn.14015e440
int3
call fcn.14015e440
int3
call fcn.14015e440
int3
call fcn.14015e440
nop
call fcn.14015e440
nop
call fcn.14015e440
nop
call fcn.14015e440
nop
call fcn.14015e440
nop
lea rcx, [0x140332890]
call fcn.14003a9d0
mov r8, rax
mov r9d, 0x40010
mov rdx, r15
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, edi
call fcn.140150ef0
nop
mov dword [rsp + 0x168], ebx
mov ecx, 6
call fcn.140060648
int3