Function at 0x14003a5c0
Capabilities:
Check for time delay via queryperformancecounter
Check os version
Create thread
Resolve function by parsing pe exports
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
lea rbp, [rsp - 0x560]
sub rsp, 0x660
movaps xmmword [rsp + 0x5f0], xmm12
mov rax, qword [0x1400c7080]
xor rax, rsp
mov qword [rbp + 0x4b0], rax
lea rcx, [0x14011b030]
call fcn.1400492f0
lea rax, [0x14003cb70]
mov dword [rbp + 0x200], 0x50
xor r13d, r13d
mov qword [rbp + 0x208], rax
xor ecx, ecx
mov dword [rbp + 0x204], 0x40
mov qword [rbp + 0x210], r13
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x218], rax
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x220], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp + 0x228], rax
xorps xmm0, xmm0
mov edx, 0x7f00
movdqa xmmword [rbp + 0x230], xmm0
lea rax, str.Class01
xor ecx, ecx
mov qword [rbp + 0x240], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x200]
mov qword [rbp + 0x248], rax
call qword [sym.imp.USER32.dll_RegisterClassExA]
cvttss2si edi, dword [0x14011a0e4]
lea ecx, [r13 + 1]
cvttss2si esi, dword [0x14011a0e0]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x14011a0e4]
xor ecx, ecx
movss xmm12, dword [0x1400b83b4]
cdq
sub eax, edx
mulss xmm0, xmm12
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x14011a0e0]
lea r8, str.Window_Name
mov qword [rsp + 0x58], r13
cdq
mov qword [rsp + 0x50], r13
sub eax, edx
mov rdx, qword [rbp + 0x240]
mov r9d, 0x80000000
mov qword [rsp + 0x48], r13
xor ecx, ecx
mov qword [rsp + 0x40], r13
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm12
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rcx, rax
mov qword [0x14011af70], rax
lea edx, [r13 - 0x14]
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x14011af70]
lea edx, [r13 - 0x14]
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x14011af70]
lea r9d, [r13 + 2]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400b8520]
lea rdx, [rbp + 0x2b0]
mov rcx, qword [0x14011af70]
movdqu xmmword [rbp + 0x2b0], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x14011af70]
lea rdx, [0x14011af78]
xorps xmm0, xmm0
movups xmmword [0x14011af78], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x14011af70]
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x1a0], rax
lea edx, [r13 + 1]
lea rax, [0x14011b638]
mov qword [rbp + 0x184], r13
mov qword [rsp + 0x58], rax
xor r9d, r9d
lea rax, [rbp + 0x148]
mov qword [rbp + 0x198], 2
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [0x14011b630]
mov qword [rbp + 0x1b0], 2
mov qword [rsp + 0x48], rax
lea rax, [0x14011b628]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x170]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rcx
xor ecx, ecx
mov qword [rbp + 0x170], r13
mov dword [rbp + 0x180], Ordinal_33
mov dword [rbp + 0x178], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x17c], 1
mov dword [rbp + 0x194], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x18c], 1
mov qword [rbp + 0x1a8], 1
mov dword [rbp + 0x150], 0xb000
mov dword [rbp + 0x154], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x14003a8de
call fcn.14003ca80
mov rdx, qword [rbp + 0x218]
mov rcx, qword [rbp + 0x240]
call qword [sym.imp.USER32.dll_UnregisterClassA]
lea eax, [r13 + 1]
jmp 0x14003ca48
mov qword [rsp + 0x690], r12
mov qword [rsp + 0x698], r14
movaps xmmword [rsp + 0x5e0], xmm13
call fcn.14003cb00
mov rcx, qword [0x14011af70]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14011af70]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [0x14011af70]
lea rdx, [rbp + 0x158]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rbp + 0x158]
xor edx, edx
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, qword [0x14011af50]
mov r12, rax
test rbx, rbx
je 0x14003a956
inc dword [rbx + 0xf4]
mov ecx, 0x5d78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x14003a972
xor edx, edx
mov rcx, rax
call fcn.1400037a0
jmp 0x14003a975
mov rax, r13
mov qword [0x14011af50], rax
call fcn.14000ad20
test rbx, rbx
je 0x14003a98f
mov qword [0x14011af50], rbx
jmp 0x14003a996
mov rbx, qword [0x14011af50]
xor ecx, ecx
mov qword [rbx + 0x20], r13
call fcn.140023370
mov rbx, qword [0x14011af50]
lea rcx, [rbp + 0x268]
mov rsi, qword [0x14011af70]
mov dword [rbx + 0x37f0], 0x41100000
mov qword [rbx + 0x37e8], r13
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14003ab1d
lea rcx, [rbp + 0x260]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14003ab1d
mov rax, qword [0x14011af50]
test rax, rax
je 0x14003a9fc
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x14003aa29
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x14003aa2c
mov rdi, r13
or dword [rbx + 0xc], 6
lea rax, [0x1400b7e88]
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, r13
mov qword [rdi], rsi
mov rax, qword [rbp + 0x268]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x260]
mov qword [rdi + 0x18], rax
mov rax, qword [0x14011af50]
mov dword [rdi + 0x28], 9
mov rcx, qword [rax + 0x4860]
mov rax, qword [rcx]
mov qword [rax + 0x28], rsi
lea rax, str.xinput1_4.dll
mov qword [rbp + 0xa0], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0xa8], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0xb0], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0xb8], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 0xc0], rax
mov byte [rdi + 0x2d], 1
nop word [rax + rax]
mov rcx, qword [rbp + rbx*8 + 0xa0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x14003aaf1
inc rbx
cmp rbx, 5
jl 0x14003aad0
jmp 0x14003ab1d
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rdi, qword [0x14011af50]
mov r14, qword [0x14011b638]
mov rsi, qword [0x14011b630]
test rdi, rdi
je 0x14003ab3d
inc dword [rdi + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x14003ab7e
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x14003ab81
mov rbx, r13
or dword [rdi + 0xc], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x90], rax
lea r8, [rbp + 0x148]
mov qword [rdi + 0xa0], rbx
lea rdx, [0x1400b7e58]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rbp + 0x148], r13
mov qword [rbp + 0x258], r13
mov qword [rbp + 0x150], r13
call qword [rax]
test eax, eax
jne 0x14003ac19
mov rcx, qword [rbp + 0x148]
lea r8, [rbp + 0x258]
lea rdx, [0x1400b7e68]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14003ac19
mov rcx, qword [rbp + 0x258]
lea r8, [rbp + 0x150]
lea rdx, [0x1400b7e78]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14003ac19
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x150]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x148]
test rcx, rcx
je 0x14003ac2b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x258]
test rcx, rcx
je 0x14003ac3d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov qword [rsp + 0x6a0], r15
movaps xmmword [rsp + 0x650], xmm6
movaps xmmword [rsp + 0x640], xmm7
mov rax, qword [rcx]
movaps xmmword [rsp + 0x630], xmm8
movaps xmmword [rsp + 0x620], xmm9
movaps xmmword [rsp + 0x610], xmm10
movaps xmmword [rsp + 0x600], xmm11
movaps xmmword [rsp + 0x5d0], xmm14
movaps xmmword [rsp + 0x5c0], xmm15
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [0x14011af50]
lea rdx, [rbp + 0x170]
movss xmm13, dword [0x1400b83ec]
xorps xmm2, xmm2
xor ecx, ecx
movaps xmmword [rbp + 0x1a0], xmm2
mov qword [rbp + 0x4a0], rcx
mov ecx, 0xffff
movups xmmword [rbp + 0x470], xmm2
mov word [rbp + 0x474], cx
lea rcx, [0x1400c70c0]
movups xmmword [rbp + 0x430], xmm2
mov dword [rbp + 0x438], 3
movups xmmword [rbp + 0x420], xmm2
mov byte [rbp + 0x42c], 1
movaps xmm0, xmmword [rbp + 0x420]
movaps xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x460], xmm2
mov qword [rbp + 0x170], rcx
lea rcx, [0x1400b7980]
mov qword [rbp + 0x1a8], rcx
mov rcx, qword [rax + 0x58]
mov dword [rbp + 0x43c], 1
movaps xmm1, xmmword [rbp + 0x430]
movaps xmmword [rbp + 0x180], xmm1
mov dword [rbp + 0x464], 0x7f7fffff
movaps xmm0, xmmword [rbp + 0x460]
movaps xmmword [rbp + 0x1b0], xmm0
movsd xmm0, qword [rbp + 0x4a0]
mov dword [rbp + 0x470], 0x3f800000
movaps xmm1, xmmword [rbp + 0x470]
movaps xmmword [rbp + 0x190], xmm2
movaps xmmword [rbp + 0x1c0], xmm1
movaps xmmword [rbp + 0x1d0], xmm2
movaps xmmword [rbp + 0x1e0], xmm2
movsd qword [rbp + 0x1f0], xmm0
mov dword [rbp + 0x178], 0x4ba44
mov dword [rbp + 0x184], 0x41600000
call fcn.140027ad0
mov rcx, qword [0x14011b630]
lea rax, [rbp + 0x160]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x278]
mov qword [rsp + 0x28], rax
lea rdx, [0x140112b10]
mov r8d, 0x75ca
mov qword [rsp + 0x20], r13
mov byte [rbp + 0x250], 1
mov qword [rbp + 0x160], r13
mov qword [rbp + 0x278], 0xffffffffffffffff
mov qword [rbp + 0x280], 0xffffffffffffffff
mov qword [rbp + 0x288], 0xffffffffffffffff
mov qword [rbp + 0x290], 0xffffffffffffffff
mov dword [rbp + 0x298], 0xffffffff
mov qword [rbp + 0x29c], 0xfffffffffffffffd
mov dword [rbp + 0x2a4], 0xffffffff
mov qword [rbp + 0x2a8], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
lea rcx, [rbp + 0x2f0]
mov dword [rbp + 0x2f0], 0x11c
call qword [sym.imp.ntdll.dll_RtlGetVersion]
test eax, eax
jne 0x14003aedf
mov eax, dword [rbp + 0x2f8]
mov ecx, dword [rbp + 0x2f4]
mov dword [0x14011b2ec], eax
mov eax, dword [rbp + 0x2fc]
mov dword [0x14011b2e8], ecx
mov dword [0x14011b2f0], eax
cmp eax, 0x55f0
jb 0x14003ae9d
mov ecx, listen
mov dword [0x14011b2e8], ecx
cmp ecx, 6
ja 0x14003aee5
mov rcx, qword [0x14011af70]
lea r8, str.Error
mov r9d, reloc.WS2_32.dll_recv
lea rdx, str.your_operating_system_is_not_supported
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdi, qword [0x14011af50]
test rdi, rdi
je 0x14003c867
mov rbx, qword [rdi + 0xa0]
jmp 0x14003c86a
mov ecx, dword [0x14011b2e8]
cmp byte [rbp + 0x250], r13b
je 0x14003aec3
movss xmm11, dword [0x1400b8504]
xorps xmm10, xmm10
movss xmm14, dword [0x1400b8450]
movss xmm15, dword [0x1400b8424]
nop dword [rax]
cmp ecx, 6
jbe 0x14003aec3
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x2c0]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14003af98
nop word [rax + rax]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x2c8], 0x12
jne 0x14003af77
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x2c0]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14003af40
cmp byte [rbp + 0x250], r13b
je 0x14003aec3
mov rbx, qword [0x14011af50]
test rbx, rbx
je 0x14003afba
mov rax, qword [rbx + 0xa0]
jmp 0x14003afbd
mov rax, r13
cmp qword [rax + 0x48], r13
jne 0x14003afcf
call fcn.14002cae0
mov rbx, qword [0x14011af50]
test rbx, rbx
je 0x14003afdd
mov rdi, qword [rbx + 0x98]
jmp 0x14003afe0
mov rdi, r13
xorps xmm0, xmm0
lea rdx, [rbp + 0x138]
movdqu xmmword [rbp + 0x138], xmm0
mov rcx, qword [rdi]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp + 0x140]
lea rcx, [rbp + 0x270]
sub eax, dword [rbp + 0x138]
mov qword [rbp + 0x270], r13
movd xmm1, eax
mov eax, dword [rbp + 0x144]
sub eax, dword [rbp + 0x13c]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x10], xmm1
movss dword [rbx + 0x14], xmm0
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp + 0x270]
xorps xmm1, xmm1
mov rsi, qword [0x14011af50]
mov rax, rcx
sub rax, qword [rdi + 0x18]
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [rdi + 0x20]
cvtsi2ss xmm1, rax
divss xmm1, xmm0
movss dword [rbx + 0x18], xmm1
mov qword [rdi + 0x18], rcx
test rsi, rsi
je 0x14003b080
mov r14, qword [rsi + 0x98]
jmp 0x14003b083
mov r14, r13
mov r15, qword [r14]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, r15
jne 0x14003b133
cmp byte [rsi + 0xdb], r13b
je 0x14003b0e9
cvttss2si eax, dword [rsi + 0xdfc]
lea rdx, [rbp + 0x148]
mov rcx, r15
mov dword [rbp + 0x148], eax
cvttss2si eax, dword [rsi + 0xe00]
mov dword [rbp + 0x14c], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x14003b0e0
mov edx, dword [rbp + 0x14c]
mov ecx, dword [rbp + 0x148]
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [rsi + 0xdb], r13b
jne 0x14003b133
cmp byte [r14 + 0x10], r13b
jne 0x14003b133
lea rcx, [rbp + 0x258]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x14003b133
mov rcx, qword [r14]
lea rdx, [rbp + 0x258]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x14003b133
movd xmm2, dword [rbp + 0x25c]
lea rcx, [rsi + 8]
movd xmm1, dword [rbp + 0x258]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
call fcn.140004be0
call fcn.14002d2b0
cmp byte [rbx + 0x78], r13b
je 0x14003b145
mov eax, 0xffffffff
jmp 0x14003b152
mov rax, qword [0x14011af50]
mov eax, dword [rax + 0x4a10]
cmp dword [rdi + 0x28], eax
je 0x14003b15f
mov dword [rdi + 0x28], eax
call fcn.14002d140
call fcn.14002d460
call fcn.140009a90
mov rax, qword [0x14011af50]
lea rdx, [rbp + 0x250]
mov r8d, Ordinal_46
lea rcx, str.Window_Name
or dword [rax + 0x4760], 3
mov qword [rax + 0x4770], r13
mov qword [rax + 0x4778], r13
mov dword [rax + 0x4764], 4
movsd xmm0, qword [0x14011a0e0]
movsd qword [rax + 0x4780], xmm0
mov dword [rax + 0x4768], 1
call fcn.14000fab0
mov rcx, qword [0x14011af70]
lea rdx, [0x14011af78]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rdi, qword [0x14011af50]
mov rax, qword [rdi + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm10
movss xmm1, dword [rax + 0x1c]
jp 0x14003b1fe
jne 0x14003b1fe
ucomiss xmm1, xmm10
jp 0x14003b1fe
je 0x14003b26f
movd xmm0, dword [0x14011af7c]
cvttss2si eax, dword [0x14011a0e4]
mov rcx, qword [0x14011af70]
mov dword [rsp + 0x28], 1
cvttss2si r9d, dword [0x14011a0e0]
mov dword [rsp + 0x20], eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movd xmm1, dword [0x14011af78]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rdi, qword [0x14011af50]
lea rdx, [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x60], r13
mov rcx, qword [rdi + 0x3ea0]
call fcn.1400124b0
cmp dword [0x14011b318], r13d
lea r15, [rdi + 0x37e0]
mov rax, qword [rdi + 0x3ea0]
movss xmm8, dword [rax + 0x20]
movss xmm7, dword [rax + 0x18]
movaps xmm6, xmm8
movss xmm9, dword [rax + 0x24]
mulss xmm6, xmm12
jne 0x14003b35f
movaps xmm0, xmmword [0x1400b86a0]
lea rcx, [rbp + 0x138]
subss xmm6, dword [0x1400b8464]
mov byte [rax + 0x98], 1
mov rax, qword [rdi + 0x3ea0]
mov dword [rbp - 0x44], 0x421c0000
movups xmmword [rbp + 0x138], xmm0
mov rbx, qword [rax + 0x278]
movss dword [rbp - 0x48], xmm6
call fcn.140005600
mov rsi, qword [rbp + 0x160]
mov r14d, eax
mov dword [rbp - 0x60], 0x3f800000
mov dword [rbp - 0x5c], 0x3f800000
mov qword [rbp - 0x58], r13
mov dword [rbp - 0x4c], 0x42ce0000
addss xmm6, dword [0x1400b8474]
movss dword [rbp - 0x50], xmm6
test eax, 0xff000000
je 0x14003b46b
mov rdi, qword [rbx + 0x98]
cmp rsi, rdi
je 0x14003b339
mov rdx, rsi
mov rcx, rbx
call fcn.1400242e0
mov edx, 6
mov rcx, rbx
lea r8d, [rdx - 2]
call fcn.140024360
lea rax, [rbp - 0x60]
lea r9, [rbp - 0x58]
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x48]
jmp 0x14003b422
cmp dword [0x14011a128], r13d
subss xmm6, dword [0x1400b8480]
mov dword [rbp - 0x24], 0x426c0000
movss dword [rbp - 0x28], xmm6
jne 0x14003b46b
movaps xmm0, xmmword [0x1400b86a0]
lea rcx, [rbp + 0x138]
mov byte [rax + 0x98], 1
mov rax, qword [rdi + 0x3ea0]
movups xmmword [rbp + 0x138], xmm0
mov rbx, qword [rax + 0x278]
call fcn.140005600
mov rsi, qword [rbp + 0x160]
mov r14d, eax
mov dword [rbp - 0x40], 0x3f800000
mov dword [rbp - 0x3c], 0x3f800000
mov qword [rbp - 0x38], r13
mov dword [rbp - 0x64], 0x434e0000
addss xmm6, dword [0x1400b84a8]
movss dword [rbp - 0x68], xmm6
test eax, 0xff000000
je 0x14003b46b
mov rdi, qword [rbx + 0x98]
cmp rsi, rdi
je 0x14003b401
mov rdx, rsi
mov rcx, rbx
call fcn.1400242e0
mov edx, 6
mov rcx, rbx
lea r8d, [rdx - 2]
call fcn.140024360
lea rax, [rbp - 0x40]
lea r9, [rbp - 0x38]
lea r8, [rbp - 0x68]
lea rdx, [rbp - 0x28]
mov dword [rsp + 0x28], r14d
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.140024480
cmp rsi, rdi
je 0x14003b464
movsxd rcx, dword [rbx + 0x68]
lea eax, [rcx - 1]
mov dword [rbx + 0x68], eax
test eax, eax
jne 0x14003b44c
mov rax, r13
jmp 0x14003b455
mov rax, qword [rbx + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.140024090
mov rdi, qword [0x14011af50]
mov ecx, dword [0x14011b318]
test ecx, ecx
je 0x14003c326
cmp ecx, 1
jne 0x14003c7b9
movaps xmm1, xmm13
mov ebx, r13d
subss xmm1, dword [0x14011a0f0]
mov rsi, r13
mulss xmm1, dword [0x1400b8380]
addss xmm1, dword [0x14011a0f0]
movss dword [0x14011a0f0], xmm1
mov rax, qword [rdi + 0x3ea0]
mov byte [rax + 0x98], cl
mov rax, qword [rdi + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], cl
addss xmm1, dword [0x1400b8440]
addss xmm0, dword [0x1400b8430]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rdx, qword [0x14011a138]
mov r9, qword [0x14011a130]
mov rax, rdx
sub rax, r9
sar rax, 3
test rax, rax
je 0x14003b5bc
nop dword [rax + rax]
cmp dword [0x14011a128], ebx
sete r8b
sub rdx, r9
sar rdx, 3
cmp rdx, rsi
jbe 0x14003ca74
mov rdx, qword [r9 + rsi*8]
call fcn.140002140
test al, al
je 0x14003b55c
cmp dword [0x14011a128], ebx
je 0x14003b55c
mov dword [0x14011a128], ebx
mov dword [0x14011a0f0], r13d
mov rdx, qword [0x14011a138]
mov r9, qword [0x14011a130]
mov rcx, rdx
sub rcx, r9
movsxd rax, ebx
sar rcx, 3
dec rcx
cmp rax, rcx
je 0x14003b59a
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140013bc0
mov rdx, qword [0x14011a138]
mov r9, qword [0x14011a130]
inc ebx
mov rcx, rdx
sub rcx, r9
movsxd rax, ebx
sar rcx, 3
inc rsi
cmp rax, rcx
jb 0x14003b520
mov rdi, qword [0x14011af50]
mov ecx, dword [0x14011a128]
test ecx, ecx
je 0x14003c0cc
sub ecx, 1
je 0x14003bcec
sub ecx, 1
je 0x14003b8fd
cmp ecx, 1
jne 0x14003c2f5
mov rax, qword [rdi + 0x3ea0]
mov byte [rax + 0x98], cl
mov rax, qword [rdi + 0x3ea0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
mov byte [rax + 0x121], cl
addss xmm0, dword [0x1400b8418]
movss dword [rax + 0xe0], xmm0
call fcn.140013e40
cmp qword [0x14011b1c8], 0x10
lea rdx, [0x14011b1b0]
lea rcx, str.Linked_HWID:__s
cmovae rdx, qword [0x14011b1b0]
call fcn.1400306c0
cmp qword [0x14011b1a8], 0x10
lea rdx, [0x14011b190]
lea rcx, str.Linked_IP:__s
cmovae rdx, qword [0x14011b190]
call fcn.1400306c0
mov rcx, qword [0x14011b218]
mov esi, r13d
mov rdx, qword [0x14011b210]
mov rax, rcx
sub rax, rdx
sar rax, 6
test rax, rax
je 0x14003b8f3
mov rbx, r13
nop dword [rax + rax]
sub rcx, rdx
sar rcx, 6
cmp rcx, rbx
jbe 0x14003ca6e
shl rbx, 6
lea rcx, [rbp + 0x170]
add rbx, rdx
mov rdx, rbx
call fcn.140003180
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x190]
call fcn.140003180
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x118]
call fcn.140003180
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14003b6e9
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbx + 0x18]
movsxd rdi, eax
cmp rdx, 0x10
jb 0x14003b732
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14003b72d
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003c859
mov rcx, r8
call fcn.1400a026c
lea rdx, [rbp + 0x138]
mov qword [rbx + 0x10], r13
lea rcx, [rbp + 0xf0]
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r13b
mov qword [rbp + 0x138], rdi
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 0xf0]
mov eax, dword [rbp + 0x110]
lea r9, [rbp + 0xa0]
movups xmm1, xmmword [rbp + 0x100]
lea r8, str._a__m__d__y__H:_M:_S__Z
mov edx, 0x50
lea rcx, [rbp + 0x420]
movaps xmmword [rbp + 0xa0], xmm0
movaps xmmword [rbp + 0xb0], xmm1
mov dword [rbp + 0xc0], eax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0xd0]
call fcn.1400028c0
cmp qword [rbp + 0xe8], 0x10
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0x170]
cmovae r8, qword [rbp + 0xd0]
lea rcx, str.Subscription:__s__nExpiry:__s
cmp qword [rbp + 0x188], 0x10
cmovae rdx, qword [rbp + 0x170]
call fcn.1400306c0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x14003b832
mov rcx, qword [rbp + 0xd0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b82d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c859
call fcn.1400a026c
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x14003b873
mov rcx, qword [rbp + 0x190]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b86e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c860
call fcn.1400a026c
mov rdx, qword [rbp + 0x188]
mov qword [rbp + 0x1a0], r13
mov qword [rbp + 0x1a8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x190], r13b
cmp rdx, 0x10
jb 0x14003b8cd
mov rcx, qword [rbp + 0x170]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b8c8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c860
call fcn.1400a026c
mov rcx, qword [0x14011b218]
inc esi
mov rdx, qword [0x14011b210]
mov rax, rcx
sub rax, rdx
movsxd rbx, esi
sar rax, 6
cmp rbx, rax
jb 0x14003b690
call fcn.140013f70
jmp 0x14003c2ee
movss xmm1, dword [rdi + 0x382c]
lea rcx, [rdi + 0x47e0]
movss xmm0, dword [rdi + 0x3830]
lea rdx, [rbp + 0x58]
movss xmm6, dword [r15 + 0x4c]
movss dword [rbp + 0x5c], xmm1
movss dword [rbp + 0x60], xmm0
mov dword [rbp + 0x58], reloc.WS2_32.dll_ntohl
call fcn.14001b0f0
mov rbx, qword [0x14011af50]
lea rdx, [rbp + 0x64]
movss dword [rdi + 0x382c], xmm6
mov dword [rdi + 0x3830], 0x40a00000
movss xmm6, dword [r15 + 0x3c]
movss xmm1, dword [rbx + 0x381c]
lea rcx, [rbx + 0x47e0]
movss xmm0, dword [rbx + 0x3820]
movss dword [rbp + 0x68], xmm1
movss dword [rbp + 0x6c], xmm0
mov dword [rbp + 0x64], recv
call fcn.14001b0f0
mov rcx, qword [0x14011af50]
movss dword [rbx + 0x381c], xmm6
mov dword [rbx + 0x3820], 0x40c00000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1400b8490]
addss xmm0, dword [0x1400b8488]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140013e40
lea rdx, [0x14011b650]
lea rcx, str.Motherboard
call fcn.1400325e0
movss xmm1, dword [0x1400b8468]
movaps xmm0, xmm10
call fcn.140013bc0
lea rcx, str.SMBIOS
lea rdx, [0x14011b650]
call fcn.1400325e0
lea rdx, [0x14011b650]
lea rcx, str.Chassis
call fcn.1400325e0
movss xmm1, dword [0x1400b8484]
movaps xmm0, xmm10
call fcn.140013bc0
lea rcx, str.VolumeID
lea rdx, [0x14011b650]
call fcn.1400325e0
lea rdx, [0x14011b650]
lea rcx, [0x1400b81e8]
call fcn.1400325e0
movss xmm1, dword [0x1400b848c]
movaps xmm0, xmm10
call fcn.140013bc0
lea rcx, str.VolumeID
lea rdx, [0x14011b650]
call fcn.1400325e0
call fcn.140013f70
mov ecx, 2
call fcn.1400059d0
mov rcx, qword [0x14011af50]
movss xmm6, dword [0x1400b84ac]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1400b8460]
addss xmm0, xmm6
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x20], 0x42de0000
lea rcx, [0x1400b8230]
mov dword [rbp - 0x1c], 0x42040000
call fcn.140031180
mov rcx, qword [0x14011af50]
lea rdx, [rbp - 0x18]
movaps xmm0, xmm8
mov dword [rbp - 0x18], 0x42de0000
subss xmm0, dword [0x1400b8498]
mov dword [rbp - 0x14], 0x42040000
mov rax, qword [rcx + 0x3ea0]
mulss xmm0, xmm12
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.PC_NAME
movss xmm2, dword [rax + 0x18]
movss xmm1, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x64]
subss xmm1, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm2, xmm0
addss xmm1, xmm6
movss dword [rax + 0xe0], xmm2
movss dword [rax + 0xe4], xmm1
call fcn.140031180
mov rcx, qword [0x14011af50]
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x42de0000
mov dword [rbp - 0xc], 0x42040000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.HELP
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1400b84c4]
addss xmm0, xmm6
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140031180
mov rcx, qword [0x14011af50]
lea rdx, [rbp - 8]
subss xmm8, dword [0x1400b84d0]
mov dword [rbp - 8], 0x43b30000
mov dword [rbp - 4], 0x42040000
mov rax, qword [rcx + 0x3ea0]
mulss xmm8, xmm12
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.SPOOF
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, xmm8
addss xmm0, dword [0x1400b84b8]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140031180
lea rdx, [rbp]
mov qword [rbp], r13
lea rcx, str.SPOOF
call fcn.140031180
test al, al
je 0x14003c2ee
mov rax, qword [0x14011af50]
lea rcx, str.Window_2
xor r8d, r8d
xor edx, edx
or dword [rax + 0x4760], 2
mov dword [rax + 0x4780], 0x43480000
mov dword [rax + 0x4784], 0x43480000
mov dword [rax + 0x4768], 1
call fcn.14000fab0
jmp 0x14003c2ee
movss xmm1, dword [rdi + 0x382c]
lea rcx, [rdi + 0x47e0]
movss xmm0, dword [rdi + 0x3830]
lea rdx, [rbp + 0x70]
movss xmm6, dword [r15 + 0x4c]
movss dword [rbp + 0x74], xmm1
movss dword [rbp + 0x78], xmm0
mov dword [rbp + 0x70], reloc.WS2_32.dll_ntohl
call fcn.14001b0f0
mov rbx, qword [0x14011af50]
lea rdx, [rbp + 0x7c]
movss dword [rdi + 0x382c], xmm6
mov dword [rdi + 0x3830], 0x41700000
movss xmm6, dword [r15 + 0x3c]
movss xmm1, dword [rbx + 0x381c]
lea rcx, [rbx + 0x47e0]
movss xmm0, dword [rbx + 0x3820]
movss dword [rbp + 0x80], xmm1
movss dword [rbp + 0x84], xmm0
mov dword [rbp + 0x7c], recv
call fcn.14001b0f0
mov rcx, qword [0x14011af50]
movss dword [rbx + 0x381c], xmm6
mov dword [rbx + 0x3820], 0x40a00000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1400b847c]
addss xmm0, dword [0x1400b8470]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140013e40
mov qword [rsp + 0x38], r13
lea rax, [rbp + 8]
mov qword [rsp + 0x30], r13
lea rbx, [0x14011b420]
mov dword [rsp + 0x28], r13d
lea rcx, str.Motherboard
mov r8, rbx
mov qword [rsp + 0x20], rax
mov r9d, 0x100
mov qword [rbp + 8], r13
xor edx, edx
call fcn.1400350e0
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x10]
mov qword [rsp + 0x30], r13
lea rcx, str.Chassis
mov dword [rsp + 0x28], r13d
mov r9d, 0x100
mov r8, rbx
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x10], r13
call fcn.1400350e0
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x18]
mov qword [rsp + 0x30], r13
lea rcx, str.BIOS
mov dword [rsp + 0x28], r13d
mov r9d, 0x100
mov r8, rbx
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x18], r13
call fcn.1400350e0
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x20]
mov qword [rsp + 0x30], r13
lea rcx, [0x1400b81e8]
mov dword [rsp + 0x28], r13d
mov r9d, 0x100
mov qword [rsp + 0x20], rax
mov r8, rbx
mov qword [rbp + 0x20], r13
xor edx, edx
call fcn.1400350e0
lea rdx, [0x14011b651]
lea rcx, str.VolumeID
call fcn.1400325e0
call fcn.140013f70
mov ecx, 2
call fcn.1400059d0
movaps xmm0, xmmword [0x1400b8620]
addss xmm7, xmm13
mov r8, qword [0x14011af50]
lea rcx, [rbp + 0x138]
movups xmmword [rbp + 0x138], xmm0
movaps xmm6, xmm9
movaps xmm1, xmm8
subss xmm6, dword [0x1400b8458]
mov rax, qword [r8 + 0x3ea0]
subss xmm1, xmm13
movss dword [rbp + 0x30], xmm7
movaps xmm0, xmm6
movss dword [rbp + 0x34], xmm6
addss xmm0, xmm14
mov byte [rax + 0x98], 1
addss xmm1, xmm7
movss dword [rbp + 0x2c], xmm0
movss dword [rbp + 0x28], xmm1
call fcn.140005600
mov rcx, qword [r8 + 0x3ea0]
lea rdx, [rbp + 0x30]
movss xmm0, dword [0x1400b8430]
lea r8, [rbp + 0x28]
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x278]
call fcn.140026c40
mov rcx, qword [0x14011af50]
movaps xmm0, xmm9
addss xmm6, dword [0x1400b8438]
addss xmm7, dword [0x1400b8440]
subss xmm0, xmm14
mov rax, qword [rcx + 0x3ea0]
addss xmm6, xmm13
movss dword [rbp + 0x150], xmm7
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
movss dword [rbp + 0x154], xmm6
movss xmm2, dword [rax + 0x18]
movss xmm1, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x64]
subss xmm1, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm2, dword [0x1400b845c]
addss xmm1, xmm0
movss dword [rax + 0xe0], xmm2
movss dword [rax + 0xe4], xmm1
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r13b
jne 0x14003c001
test rax, rax
jne 0x14003c024
lea rcx, str.Status:_Waiting_for_serials_to_filled.
call fcn.1400306c0
movaps xmm0, xmmword [0x1400b8670]
jmp 0x14003c037
lea rcx, str.Status:_Ready
call fcn.1400306c0
movaps xmm0, xmmword [0x1400b8680]
mov rcx, qword [0x14011af50]
movups xmmword [rbp + 0x138], xmm0
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x138]
mov rbx, qword [rax + 0x278]
call fcn.140005600
mov edi, eax
test eax, 0xff000000
je 0x14003c0b5
xor r9d, r9d
mov dword [rsp + 0x20], Ordinal_50
movaps xmm2, xmm15
lea rdx, [rbp + 0x150]
mov rcx, rbx
call fcn.140025b00
mov r8d, dword [rbx + 0x78]
mov r9d, edi
dec r8d
mov rcx, rbx
mov dword [rbx + 0x78], r8d
mov rdx, qword [rbx + 0x80]
call fcn.140025540
mov dword [rbx + 0x78], r13d
mov dword [rbp + 0x38], 0x43b30000
lea rdx, [rbp + 0x38]
mov dword [rbp + 0x3c], 0x42040000
jmp 0x14003c280
movaps xmm0, xmmword [0x1400b8620]
addss xmm7, xmm13
mov rax, qword [rdi + 0x3ea0]
lea rcx, [rbp + 0x138]
movups xmmword [rbp + 0x138], xmm0
movaps xmm6, xmm9
movaps xmm1, xmm8
subss xmm6, dword [0x1400b8458]
subss xmm1, xmm13
movss dword [rbp + 0x48], xmm7
mov byte [rax + 0x98], 1
movaps xmm0, xmm6
movss dword [rbp + 0x4c], xmm6
addss xmm0, xmm14
addss xmm1, xmm7
movss dword [rbp + 0x44], xmm0
movss dword [rbp + 0x40], xmm1
call fcn.140005600
mov rcx, qword [rdi + 0x3ea0]
lea r8, [rbp + 0x40]
movss xmm0, dword [0x1400b8430]
lea rdx, [rbp + 0x48]
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x278]
call fcn.140026c40
mov r8, qword [0x14011af50]
lea rcx, [rbp + 0x138]
movaps xmm0, xmmword [0x1400b8680]
addss xmm6, dword [0x1400b8438]
addss xmm7, dword [0x1400b8440]
mov rax, qword [r8 + 0x3ea0]
movups xmmword [rbp + 0x138], xmm0
addss xmm6, xmm13
mov byte [rax + 0x98], 1
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x50], xmm7
movss dword [rbp + 0x54], xmm6
mov rbx, qword [rax + 0x278]
call fcn.140005600
mov edi, eax
test eax, 0xff000000
je 0x14003c20a
xor r9d, r9d
mov dword [rsp + 0x20], Ordinal_50
movaps xmm2, xmm15
lea rdx, [rbp + 0x50]
mov rcx, rbx
call fcn.140025b00
mov r8d, dword [rbx + 0x78]
mov r9d, edi
mov rdx, qword [rbx + 0x80]
dec r8d
mov rcx, rbx
mov dword [rbx + 0x78], r8d
call fcn.140025540
mov r8, qword [0x14011af50]
mov dword [rbx + 0x78], r13d
mov rax, qword [r8 + 0x3ea0]
lea rcx, str.Status:_Ready
movaps xmm0, xmm9
subss xmm0, xmm14
mov byte [rax + 0x98], 1
mov rax, qword [r8 + 0x3ea0]
movss xmm2, dword [rax + 0x18]
movss xmm1, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x64]
subss xmm1, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm2, dword [0x1400b845c]
addss xmm1, xmm0
movss dword [rax + 0xe0], xmm2
movss dword [rax + 0xe4], xmm1
call fcn.1400306c0
lea rdx, [rsp + 0x68]
mov dword [rsp + 0x68], 0x43b30000
mov dword [rsp + 0x6c], 0x42040000
mov rcx, qword [0x14011af50]
subss xmm8, dword [0x1400b84d0]
mov rax, qword [rcx + 0x3ea0]
mulss xmm8, xmm12
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.SPOOF_SYSTEM
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
addss xmm1, xmm8
addss xmm0, dword [0x1400b84b8]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov byte [rax + 0x121], 1
call fcn.140031180
mov rdi, qword [0x14011af50]
mov rax, qword [rdi + 0x3ea0]
subss xmm9, xmm14
mov byte [rax + 0x98], 1
mov rax, qword [rdi + 0x3ea0]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x64]
addss xmm1, dword [0x1400b84cc]
jmp 0x14003c787
movss xmm7, dword [r15 + 0x3c]
lea rcx, [rdi + 0x47e0]
movss xmm6, dword [r15 + 0x40]
lea rdx, [rbp + 0x88]
movss xmm1, dword [rdi + 0x381c]
movss xmm0, dword [rdi + 0x3820]
addss xmm7, dword [0x1400b8418]
addss xmm6, dword [0x1400b83fc]
movss dword [rbp + 0x8c], xmm1
movss dword [rbp + 0x90], xmm0
mov dword [rbp + 0x88], recv
call fcn.14001b0f0
movss dword [rdi + 0x381c], xmm7
movss xmm7, dword [0x1400b84c8]
movaps xmm0, xmm7
movss dword [rdi + 0x3820], xmm6
call fcn.140013c70
mov rcx, qword [0x14011af50]
movaps xmm0, xmm8
subss xmm0, xmm7
mov rax, qword [rcx + 0x3ea0]
mulss xmm0, xmm12
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
movss xmm1, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x64]
subss xmm1, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm2, xmm0
addss xmm1, dword [0x1400b84a4]
movss dword [rax + 0xe0], xmm2
movss dword [rax + 0xe4], xmm1
call fcn.140013e40
mov qword [rsp + 0x38], r13
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], r13
lea r8, [0x14011b420]
mov dword [rsp + 0x28], r13d
lea rdx, [0x1400b8138]
mov r9d, 0x100
mov qword [rsp + 0x20], rax
lea rcx, str.username
mov qword [rsp + 0x70], r13
call fcn.1400350e0
lea rcx, [rsp + 0x78]
mov dword [rsp + 0x78], 0x438c0000
mov dword [rsp + 0x7c], 0x41000000
call fcn.140032c90
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], r13
lea r8, [0x14011b520]
mov dword [rsp + 0x28], 0x8000
lea rdx, [0x1400b7908]
mov r9d, 0x100
mov qword [rsp + 0x20], rax
lea rcx, str.password
mov qword [rbp - 0x80], r13
call fcn.1400350e0
lea rcx, [rbp - 0x78]
mov dword [rbp - 0x78], 0x438c0000
mov dword [rbp - 0x74], 0x41000000
call fcn.140032c90
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], r13
lea r8, [0x14011b320]
mov dword [rsp + 0x28], 0x8000
lea rdx, [0x1400b8168]
mov r9d, 0x100
mov qword [rsp + 0x20], rax
lea rcx, str.license
mov qword [rbp - 0x70], r13
call fcn.1400350e0
call fcn.140013f70
mov rbx, qword [0x14011af50]
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3ea0]
movsxd rdx, dword [r8 + 0x1a8]
mov rax, qword [r8 + 0x1b0]
mov ecx, dword [rax + rdx*4 - 4]
lea eax, [rdx - 1]
mov dword [r8 + 0x19c], ecx
mov ecx, 1
mov dword [r8 + 0x1a8], eax
call fcn.1400059d0
mov rax, qword [rbx + 0x3ea0]
lea rdx, [rbp - 0x30]
movss xmm6, dword [0x1400b84c0]
lea rcx, str.LOGIN
mov dword [rbp - 0x30], 0x42d80000
mov dword [rbp - 0x2c], 0x42040000
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1400b8478]
addss xmm0, xmm6
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140031180
test al, al
je 0x14003c5d3
mov qword [rsp + 0x28], r13
lea r8, [0x140039ef0]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [0x14011af50]
lea rdx, [rbp + 0x260]
mov dword [rbp + 0x260], 0x42d80000
mov dword [rbp + 0x264], 0x42040000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.REGISTER
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1400b84b4]
addss xmm0, xmm6
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140031180
test al, al
je 0x14003c66f
mov qword [rsp + 0x28], r13
lea r8, [0x14003a210]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
cmp qword [0x14011b260], 0x10
lea rdi, [0x14011b248]
mov rbx, qword [0x14011af50]
mov rax, rdi
cmovae rax, qword [0x14011b248]
test rax, rax
jne 0x14003c69b
movaps xmm1, xmm10
jmp 0x14003c6f2
movss xmm3, dword [0x1400b84f4]
lea rdx, [rbp + 0x268]
movss xmm2, dword [rbx + 0x3c00]
mov rcx, qword [rbx + 0x3bf8]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.14002a9c0
movss xmm0, dword [rbp + 0x268]
addss xmm0, dword [0x1400b83e4]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x268], xmm1
cmp byte [0x14011b028], r13b
subss xmm8, xmm1
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3ea0]
mulss xmm8, xmm12
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
mov byte [rax + 0x121], 1
addss xmm0, xmm8
movss dword [rax + 0xe0], xmm0
je 0x14003c757
cmp qword [0x14011b260], 0x10
mov rcx, rdi
cmovae rcx, qword [0x14011b248]
call fcn.1400306c0
mov rbx, qword [0x14011af50]
mov rax, qword [rbx + 0x3ea0]
subss xmm9, dword [0x1400b8454]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x64]
addss xmm1, dword [0x1400b843c]
movss xmm0, dword [rax + 0x1c]
lea rcx, str.qvqs_utility
subss xmm0, dword [rax + 0x68]
movss dword [rax + 0xe0], xmm1
addss xmm0, xmm9
movss dword [rax + 0xe4], xmm0
mov byte [rax + 0x121], 1
call fcn.1400306c0
call fcn.140011e70
call fcn.14000c6c0
mov rcx, qword [0x14011b638]
lea r8, [0x14011b620]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x410], xmm0
mov rax, qword [rcx]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x14011b638]
lea r8, [rbp + 0x410]
mov rdx, qword [0x14011b620]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rax, qword [0x14011af50]
mov rcx, qword [rax + 0x4860]
mov rax, qword [rcx]
mov rcx, r13
add rax, 0x48
cmp byte [rax], r13b
cmovne rcx, rax
call fcn.14002c070
mov rcx, qword [0x14011b628]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 1]
call qword [rax + 0x40]
cmp byte [rbp + 0x250], r13b
je 0x14003aec3
mov ecx, dword [0x14011b2e8]
jmp 0x14003af10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, r13
call fcn.14002d020
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14003c87e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14003c88c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14003c89b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x14011af50]
mov qword [rdi + 0x90], r13
mov qword [rdi + 0xa0], r13
test rax, rax
je 0x14003c8bb
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x14011af50]
test rax, rax
je 0x14003c8d9
mov rbx, qword [rax + 0x98]
jmp 0x14003c8dc
mov rbx, r13
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x14003c8f6
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x14011af50]
mov qword [rdi + 0x80], r13
mov qword [rdi + 0x90], r13
test rax, rax
je 0x14003c90f
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14011af50]
mov qword [0x14011af50], rbx
call fcn.14000b0a0
mov qword [0x14011af50], r13
test rbx, rbx
je 0x14003c95a
mov rcx, rbx
call fcn.14001bc90
mov rax, qword [0x14011af50]
test rax, rax
je 0x14003c951
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x14011b620]
test rcx, rcx
je 0x14003c973
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14011b620], r13
mov rcx, qword [0x14011b628]
test rcx, rcx
je 0x14003c98c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14011b628], r13
mov rcx, qword [0x14011b638]
test rcx, rcx
je 0x14003c9a5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14011b638], r13
mov rcx, qword [0x14011b630]
test rcx, rcx
je 0x14003c9be
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14011b630], r13
mov rcx, qword [0x14011af70]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x218]
mov rcx, qword [rbp + 0x240]
call qword [sym.imp.USER32.dll_UnregisterClassA]
movaps xmm14, xmmword [rsp + 0x5d0]
xor eax, eax
mov r15, qword [rsp + 0x6a0]
movaps xmm11, xmmword [rsp + 0x600]
movaps xmm10, xmmword [rsp + 0x610]
movaps xmm9, xmmword [rsp + 0x620]
movaps xmm8, xmmword [rsp + 0x630]
movaps xmm7, xmmword [rsp + 0x640]
movaps xmm6, xmmword [rsp + 0x650]
movaps xmm15, xmmword [rsp + 0x5c0]
mov r14, qword [rsp + 0x698]
mov r12, qword [rsp + 0x690]
movaps xmm13, xmmword [rsp + 0x5e0]
mov rcx, qword [rbp + 0x4b0]
xor rcx, rsp
call fcn.1400a0210
movaps xmm12, xmmword [rsp + 0x5f0]
add rsp, 0x660
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14003cd80
int3
call fcn.14003cd80
int3