Function at 0x1400183f0
Capabilities:
Create thread
Execute command
Get common file path
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x220
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140027040]
xor rax, rsp
mov qword [rbp + 0xf0], rax
xor r12d, r12d
mov dword [rsp + 0x60], r12d
lea rcx, str.taskkill__f__IM_loader.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__IM_updater.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__IM_overlay.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140020580]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x1a
lea rdx, str.main___Loading_Stealth9...
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._INFO_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140018546
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018540
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018540
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r12w
mov dword [rsp + 0x60], 8
mov edx, 0x104
mov r9d, edx
lea rcx, [rbp - 0x70]
call fcn.140007810
nop word [rax + rax]
mov esi, dword [rbp - 0x60]
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova rdx, qword [rbp - 0x70]
mov ecx, esi
call fcn.14001a414
mov rbx, rax
mov qword [rbp - 0x30], rax
mov edx, eax
mov r8, qword [rbp - 0x60]
cmp rdx, r8
ja 0x1400185c3
mov qword [rbp - 0x60], rdx
lea rax, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova rax, qword [rbp - 0x70]
mov word [rax + rdx*2], r12w
jmp 0x140018614
sub rdx, r8
mov rcx, qword [rbp - 0x58]
mov rax, rcx
sub rax, r8
cmp rdx, rax
ja 0x140018608
lea rax, [r8 + rdx]
mov qword [rbp - 0x60], rax
lea r9, [rbp - 0x70]
cmp rcx, 7
cmova r9, qword [rbp - 0x70]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x1400185fd
movzx eax, r12w
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], r12w
jmp 0x140018614
mov r9, rdx
lea rcx, [rbp - 0x70]
call fcn.140007810
cmp ebx, esi
jae 0x140018580
mov eax, dword [rbp - 0x2c]
mov dword [rbp - 0x50], eax
lea rcx, [0x1400270c8]
mov qword [rbp - 0x48], rcx
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rsp + 0x60], 4
test eax, eax
je 0x14001864c
lea rdx, [rbp - 0x50]
call fcn.140018090
int3
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.140019a80
mov rdx, qword [0x140027110]
cmp rdx, 0xf
jbe 0x140018697
mov rcx, qword [0x1400270f8]
inc rdx
cmp rdx, 0x1000
jb 0x140018692
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140018700
mov rcx, rdi
call fcn.14001ad54
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [0x1400270f8], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [0x140027108], xmm1
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x14001870c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018707
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018707
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14001ad54
lea r9, [0x1400270f8]
mov rax, r9
mov rdi, qword [0x1400270f8]
mov r8, qword [0x140027110]
cmp r8, 0xf
cmova rax, rdi
mov rdx, qword [0x140027108]
add rax, rdx
mov rcx, r9
cmp r8, 0xf
cmova rcx, rdi
cmp rcx, rax
je 0x14001876b
cmp byte [rcx], 0x2f
jne 0x14001874e
mov byte [rcx], 0x5c
inc rcx
cmp rcx, rax
jne 0x140018746
mov r8, qword [0x140027110]
mov rdx, qword [0x140027108]
mov rdi, qword [0x1400270f8]
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rdx
cmp rax, 0xd
jae 0x140018787
call fcn.140001260
int3
cmp r8, 0xf
cmova r9, rdi
mov qword [rsp + 0x30], 0xd
lea rax, str.Stealth9.dll
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rsp + 0x40]
call fcn.140007ef0
mov rdx, qword [0x1400270f0]
cmp rdx, 0xf
jbe 0x1400187f4
mov rcx, qword [0x1400270d8]
inc rdx
cmp rdx, 0x1000
jb 0x1400187ef
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140018924
mov rcx, rdi
call fcn.14001ad54
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [0x1400270d8], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [0x1400270e8], xmm1
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1a
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jne 0x140019a5d
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rax, [rbp - 0x20]
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x140018850
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov r8d, 8
lea rdx, str.dx9ware
lea rcx, [rsp + 0x40]
call fcn.140006d60
movups xmm6, xmmword [rax]
movups xmmword [rbp - 0x50], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm7
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x140027130]
cmp rdx, 0xf
jbe 0x1400188db
mov rcx, qword [0x140027118]
inc rdx
cmp rdx, 0x1000
jb 0x1400188d6
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001892b
mov rcx, rdi
call fcn.14001ad54
movups xmmword [0x140027118], xmm6
movups xmmword [0x140027128], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140018937
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018932
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018932
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14001ad54
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140008c20
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 8
call fcn.14001ad10
lea rcx, [0x140018110]
mov qword [rax], rcx
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140019fc0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140019a4d
cmp dword [rbp - 0x48], 0
je 0x140019a41
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140019a41
xorps xmm0, xmm0
movaps xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x50], xmm0
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x21
lea rdx, str.main___Validating_DX9WARE_Path...
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._INFO_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140018aaf
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018aaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018aaa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
lea rdx, [0x140027138]
lea rcx, [rsp + 0x40]
call fcn.1400069c0
mov rcx, rax
call fcn.1400046a0
test al, al
jne 0x140018ae9
lea rdx, str.Invalid_DX9Path_
lea rcx, [rsp + 0x40]
call fcn.140001fa0
nop
lea rcx, [rsp + 0x40]
call fcn.1400178d0
nop
mov rcx, qword [0x140027128]
mov rax, rsi
sub rax, rcx
cmp rax, 0x1d
jae 0x140018b02
call fcn.140001260
int3
lea rbx, [0x140027118]
mov rax, rbx
cmp qword [0x140027130], 0xf
cmova rax, qword [0x140027118]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x1d
lea r9, str.main___DX9WARE_AppData_Path:
lea rcx, [rsp + 0x40]
call fcn.140007ef0
nop
lea rcx, [rsp + 0x40]
call fcn.140017840
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140018b8c
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018b87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018b87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x22
lea rdx, str.main___Valid_DX9WARE_Path__wait...
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 0xa
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._SUCCESS_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140018c66
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018c61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018c61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x19
lea rdx, str.Hiding_DX9WAREs_files...
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._INFO_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140018d40
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018d3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018d3b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
mov rcx, qword [0x140027128]
mov rax, rsi
sub rax, rcx
cmp rax, 0xd
jae 0x140018d59
call fcn.140001260
int3
mov rax, rbx
cmp qword [0x140027130], 0xf
cmova rax, qword [0x140027118]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xd
lea r13, str.attrib_h_s
mov r9, r13
lea rcx, [rsp + 0x40]
call fcn.140007ef0
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140018dea
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018de5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018de5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
cmp qword [0x140027130], 0xf
cmova rbx, qword [0x140027118]
mov qword [rbp - 0x50], rbx
mov rax, qword [0x140027128]
mov qword [rbp - 0x48], rax
call fcn.14001a100
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
lea r8, [rbp - 0x50]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.140002840
mov r14d, 0x1ff0
mov dword [rsp + 0x60], r14d
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.140006f50
test eax, eax
je 0x140018e60
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.140003830
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x140018ea5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018ea0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018ea0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov rsi, qword [rbp - 0x68]
test rsi, rsi
je 0x140018ec2
lock inc dword [rsi + 8]
mov rsi, qword [rbp - 0x68]
mov r14d, dword [rsp + 0x60]
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x50], xmm0
test rsi, rsi
je 0x140018edd
lock inc dword [rsi + 8]
mov rsi, qword [rbp - 0x68]
mov r14d, dword [rsp + 0x60]
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
test rsi, rsi
je 0x140018f28
mov eax, r15d
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x140018f1f
mov rdi, qword [rbp - 0x68]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, r15d
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x140018f1f
mov rsi, qword [rbp - 0x68]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 8]
jmp 0x140018f23
mov rsi, qword [rbp - 0x68]
mov r14d, dword [rsp + 0x60]
lea rbx, [0x14002067d]
nop
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x1400190fe
add rcx, 0x20
lea rdx, [rsp + 0x68]
call fcn.140019a80
or r14d, 1
mov r8, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
sub rax, r8
cmp rax, 0xd
jb 0x140018fe9
lea rax, [r8 + 0xd]
mov qword [rsp + 0x78], rax
lea rdi, [rsp + 0x68]
cmp rcx, 0xf
cmova rdi, qword [rsp + 0x68]
cmp rbx, rdi
jbe 0x140018fa0
lea rax, [rdi + r8]
cmp r13, rax
ja 0x140018fa0
cmp rdi, r13
ja 0x140018f98
mov rbx, r12
jmp 0x140018fa5
mov rbx, rdi
sub rbx, r13
jmp 0x140018fa5
mov ebx, 0xd
inc r8
lea rcx, [rdi + 0xd]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r8, rbx
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 0xd
sub r8, rbx
lea rdx, [r13 + 0xd]
add rdx, rbx
lea rcx, [rdi + rbx]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x68]
lea rbx, [0x14002067d]
jmp 0x140019001
mov qword [rsp + 0x28], 0xd
mov edx, 0xd
lea rcx, [rsp + 0x68]
call fcn.140019cd0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r14d, 2
mov dword [rsp + 0x60], r14d
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14001908c
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019087
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400190f0
call fcn.14001ad54
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x1400190d7
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400190d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400190f7
call fcn.14001ad54
lea rcx, [rbp - 0x50]
call fcn.140003a60
test eax, eax
je 0x140018f30
mov edx, eax
call fcn.140018030
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14001913b
mov eax, r15d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140019137
mov rdi, qword [rbp - 0x48]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, r15d
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x140019137
mov rcx, qword [rbp - 0x48]
mov rax, qword [rcx]
call qword [rax + 8]
mov rsi, qword [rbp - 0x68]
test rsi, rsi
je 0x14001916f
mov eax, r15d
lock xadd dword [rsi + 8], eax
cmp eax, 1
jne 0x14001916f
mov rdi, qword [rbp - 0x68]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
lock xadd dword [rdi + 0xc], r15d
cmp r15d, 1
jne 0x14001916f
mov rcx, qword [rbp - 0x68]
mov rax, qword [rcx]
call qword [rax + 8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x17
lea rdx, str.DX9WAREs_files_hidden_
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 0xa
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._SUCCESS_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140019249
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019244
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019244
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140004370
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x26
lea rdx, str.main___Waiting_for_updater_to_start...
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._INFO_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14001933e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019339
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019339
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
lea rcx, str.updater.exe
call fcn.140016d20
test eax, eax
jne 0x14001936b
nop
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.updater.exe
call fcn.140016d20
test eax, eax
je 0x140019350
lea rax, [rbp - 0x50]
mov qword [rbp - 0x30], rax
lea rdx, [0x1400270d8]
lea rcx, [rbp - 0x50]
call fcn.1400069c0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0xb
lea rdx, str.updater.exe
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.1400174e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x25
lea rdx, str.main___Waiting_for_loader_to_start...
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._INFO_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140019497
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019492
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019492
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
lea rcx, str.loader.exe
call fcn.140016d20
test eax, eax
jne 0x1400194cb
nop word [rax + rax]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.loader.exe
call fcn.140016d20
test eax, eax
je 0x1400194b0
lea rax, [rbp - 0x50]
mov qword [rbp - 0x30], rax
lea rdx, [0x1400270d8]
lea rcx, [rbp - 0x50]
call fcn.1400069c0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0xa
lea rdx, str.loader.exe
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.1400174e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x52
lea rdx, str.main___Loader_started_and_injected._Login_required__waiting_for_auth_token_change_
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 0xa
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._SUCCESS_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400195f7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400195f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400195f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x1b
lea rdx, str.main___Waiting_for_login...
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._INFO_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400196d1
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400196cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400196cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
lea rcx, [rbp - 0x50]
call fcn.140005140
nop
mov rsi, qword [rbp - 0x38]
mov rbx, qword [rbp - 0x40]
mov r14, qword [rbp - 0x50]
nop word [rax + rax]
lea rcx, [rsp + 0x40]
call fcn.140005140
lea rdx, [rbp - 0x50]
cmp rsi, 0xf
cmova rdx, r14
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140019714
mov rax, qword [rax]
cmp r8, rbx
jne 0x14001972a
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14001972a
xor dil, dil
jmp 0x14001972d
mov dil, 1
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140019766
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019761
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001977b
call fcn.14001ad54
test dil, dil
jne 0x140019782
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400196f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x4d
lea rdx, str.main___Auth_token_has_been_refreshed__waiting_for_overlay_start__load_dx9_...
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 0xa
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._SUCCESS_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14001985c
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019857
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019857
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0x26
lea rdx, str.main___Waiting_for_overlay_to_start...
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str._INFO_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017970
mov edx, 7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140017c20
lea rdx, [0x140017b70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140019936
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019931
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019931
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001ad54
lea rcx, str.overlay.exe
call fcn.140016d20
test eax, eax
jne 0x14001996b
nop word [rax + rax]
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.overlay.exe
call fcn.140016d20
test eax, eax
je 0x140019950
lea rax, [rbp - 0x70]
mov qword [rbp - 0x30], rax
lea rdx, [0x1400270d8]
lea rcx, [rbp - 0x70]
call fcn.1400069c0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 0xb
lea rdx, str.overlay.exe
lea rcx, [rsp + 0x40]
call fcn.140001fe0
nop
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.1400174e0
lea rcx, str.overlay.exe
call fcn.140016d20
test eax, eax
je 0x140019a35
movabs rdi, 0x7ffffffffa0a1eff
mov ebx, 0xff
movabs rsi, 0x7fffffffffffffff
lea rcx, [rbp - 0x30]
call fcn.140017de0
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x60], rax
cmp rax, rdi
je 0x140019a16
mov ecx, 1
cmovl ecx, ebx
test cl, cl
jns 0x140019a16
add rax, 0x5f5e100
mov qword [rsp + 0x60], rax
jmp 0x140019a1b
mov qword [rsp + 0x60], rsi
lea rcx, [rsp + 0x60]
call fcn.140019c20
lea rcx, str.overlay.exe
call fcn.140016d20
test eax, eax
jne 0x1400199e6
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x48], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea rdx, str.GetAppDataDirectory___Failed_to_get_AppData_directory_
lea rcx, [rbp - 0x50]
call fcn.140001fa0
nop
lea rcx, [rbp - 0x50]
call fcn.1400178d0
int3