Function at 0x14004d1c0
Capabilities:
Execute command
Query or enumerate registry value
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1c8]
sub rsp, 0x2a0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140064008]
xor rax, rsp
mov qword [rbp + 0x188], rax
call qword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
je 0x14004d296
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x14005a434]
lea rdx, str.CONIN_
lea rcx, [rbp + 0x18]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x14005a440]
lea rdx, str.CONOUT_
lea rcx, [rbp + 0x18]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x14005a440]
lea rdx, str.CONOUT_
lea rcx, [rbp + 0x18]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004f360
lea rdx, [0x14004f510]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14004d2b2
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Failed_to_create_the_console_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x28]
call fcn.140050190
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x50]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x50]
call fcn.14004eca0
cmp qword [rbp + 0xd8], 0
je 0x14004d326
lea rdx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0x10
cmovae rdx, qword [rbp + 0x28]
mov r8, qword [rbp + 0x38]
lea rcx, [rbp + 0x50]
call fcn.14004f9c0
lea rcx, [rbp + 0x58]
call fcn.14004f150
test rax, rax
jne 0x14004d342
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x50]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
jmp 0x14004d342
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Failed_to_open_or_create_key.txt_file_for_writing.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp + 0x28]
call fcn.1400503c0
xor esi, esi
test al, al
jne 0x14004d454
mov dword [rbp + 0x10], esi
mov dword [rbp + 0x180], 4
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareVotreNomDeSocieteVotreProduits
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x14004d3c5
lea rax, [rbp + 0x180]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.TrialStartTime
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
test edi, edi
jne 0x14004d637
mov dword [rbp + 0x18], eax
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x160]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x20006
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareVotreNomDeSocieteVotreProduits
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x14004d454
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x18]
mov qword [rsp + 0x20], rax
lea r9d, [rdi + 4]
xor r8d, r8d
lea rdx, str.TrialStartTime
mov rcx, qword [rbp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x160]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rbp - 0x40], 0x50
mov dword [rbp - 0x3c], 3
lea rax, [0x1400024e0]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x10], xmm1
lea rdi, str.Bluelock_V0.1__BETA_
mov qword [rbp], rdi
mov qword [rbp + 8], rsi
lea rcx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], rsi
mov rax, qword [rbp - 0x28]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x12c
mov dword [rsp + 0x30], 0x1f4
mov dword [rsp + 0x28], 0x64
mov dword [rsp + 0x20], 0x64
mov r9d, 0x80000000
mov r8, rdi
mov rdx, qword [rbp]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r12, rax
mov qword [rsp + 0x60], rax
mov qword [rbp - 0x7c], rsi
mov qword [rbp - 0x68], 2
mov qword [rbp - 0x50], 2
mov qword [rsp + 0x70], rsi
mov dword [rbp - 0x80], 0x1c
mov dword [rsp + 0x78], 0x3c
mov dword [rsp + 0x7c], 1
mov dword [rbp - 0x6c], 0x20
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x74], 1
mov qword [rbp - 0x58], 1
mov dword [rbp + 0x180], 0xb000
mov dword [rbp + 0x184], 0xa000
lea rdi, [0x140064ad8]
mov qword [rsp + 0x58], rdi
lea rax, [rbp + 0x18]
mov qword [rsp + 0x50], rax
lea rbx, [0x140064ae0]
mov qword [rsp + 0x48], rbx
lea r14, [0x140064ae8]
mov qword [rsp + 0x40], r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x180]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x14004d616
mov qword [rsp + 0x58], rdi
lea rax, [rbp + 0x18]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x180]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 5]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x14004d661
call fcn.140002460
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov esi, 1
jmp 0x14004dfde
sub rax, rdi
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
comisd xmm0, xmmword [0x14005a8f8]
seta al
test al, al
je 0x14004d454
lea rdx, str.Your_trial_period_has_expired._Please_purchase_a_license.
jmp 0x14004dfc9
mov rcx, qword [0x140064ae8]
mov rax, qword [rcx]
lea r9, [rbp + 0x160]
lea r8, [0x140053dd0]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x140064ae0]
mov rax, qword [rcx]
lea r9, [0x140064af0]
xor r8d, r8d
mov rdx, qword [rbp + 0x160]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x160]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, 0xa
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140064b08]
mov ecx, 0x6180
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r10, rax
mov rdi, qword [0x140064b08]
test rdi, rdi
je 0x14004d753
mov r8d, dword [rdi + 0x3f60]
movsx r9, word [rdi + 0x6030]
lea rdx, [rdi + 0x6034]
lea rdx, [rdx + r9*8]
cmp dword [rdx], r8d
je 0x14004d749
lea ecx, [r9 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [rdi + 0x6030], cx
movsx rax, cx
lea rdx, [rdi + 0x6034]
lea rdx, [rdx + rax*8]
mov dword [rdx], r8d
mov dword [rdx + 4], esi
inc word [rdx + 4]
inc dword [rdi + 0x6028]
test r10, r10
je 0x14004d764
xor edx, edx
mov rcx, r10
call fcn.140006ff0
jmp 0x14004d767
mov rax, rsi
mov qword [0x140064b08], rax
call fcn.14000bed0
mov rdi, qword [0x140064b08]
test rbx, rbx
cmovne rdi, rbx
mov qword [0x140064b08], rdi
or dword [rdi + 8], 1
xor ecx, ecx
call fcn.14002b670
mov qword [rdi + 0x20], rsi
mov rcx, r12
call fcn.140004ba0
call fcn.1400049d0
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x14004dfc2
lea rdx, str.NtUserSetGestureConfig
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140064ac0], rax
test rax, rax
je 0x14004dfc2
lea rcx, str.kdu.exe__prv_39__map_.BlueLock_Driver.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dil, 1
cmp dword [0x140064acc], esi
jne 0x14004d8a3
test dil, dil
je 0x14004dfde
mov qword [rbp + 0x160], rsi
mov qword [rbp + 0x170], rsi
mov qword [rbp + 0x178], 7
lea r9, str.FC24.exe
mov edx, 8
lea rcx, [rbp + 0x160]
call fcn.14004f660
lea rcx, [rbp + 0x160]
call fcn.14004fef0
mov dword [0x140064acc], eax
mov r9d, 1
lea r8, str.Error
lea rdx, str.Waiting_for_FIFA_to_start__
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
movzx edi, dil
cmp eax, 2
cmove edi, esi
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x140064acc], 0
je 0x14004d810
test dil, dil
je 0x14004dfde
call fcn.1400017d0
test rax, rax
jne 0x14004d8ba
lea rcx, str.kdu.exe__prv_39__map_.BlueLock_Driver.sys
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400017d0
mov ebx, dword [0x140064ac8]
mov r15, qword [0x140064ad0]
mov r14, qword [0x140064b30]
mov rdx, qword [0x140064b28]
mov rcx, r14
sub rcx, rdx
cmp rbx, rcx
jae 0x14004d8eb
lea rax, [rbx + rdx]
jmp 0x14004d91d
jbe 0x14004d924
mov rax, qword [0x140064b38]
sub rax, rdx
cmp rbx, rax
jbe 0x14004d906
mov rdx, rbx
call fcn.14004fcf0
jmp 0x14004d924
mov rdi, rbx
sub rdi, rcx
mov r8, rdi
xor edx, edx
mov rcx, r14
call sub.VCRUNTIME140.dll_memset
lea rax, [rdi + r14]
mov qword [0x140064b30], rax
mov byte [rsp + 0x70], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rbp - 0x78], xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rax
mov dword [rsp + 0x74], 0xdeadbeef
mov eax, dword [0x140064acc]
mov dword [rbp - 0x6c], eax
mov dword [rsp + 0x78], esi
mov rax, qword [0x140064b28]
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], r15
mov dword [rbp - 0x70], ebx
lea rdi, [rsp + 0x70]
xor eax, eax
xor ecx, ecx
rep stosb byte [rdi], al
lea rcx, [rsp + 0x70]
call qword [0x140064ac0]
cmp byte [rsp + 0x70], 0
je 0x14004dfde
mov qword [rbp + 0x160], rsi
mov qword [rbp + 0x170], rsi
mov qword [rbp + 0x178], 0xf
mov r8d, 0x3e
lea rdx, str.41_0F_____48_8D_____________48_89_____________E8_________F3_0F
lea rcx, [rbp + 0x160]
call fcn.14004f200
lea r9, [rbp + 0x160]
call fcn.14004cf30
mov rdi, rax
mov rdx, qword [rbp + 0x178]
cmp rdx, 0x10
jb 0x14004da0c
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004da07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004da07
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051358
sub rdi, qword [0x140064ad0]
add rdi, 3
mov qword [0x140064b20], rdi
mov qword [rbp + 0x160], rsi
mov qword [rbp + 0x170], rsi
mov qword [rbp + 0x178], 0xf
mov r8d, 0x4a
lea rdx, str.E8_____________48_85_C0_74_4F_48_8D_0D_____________E8_____________C7_44_24
lea rcx, [rbp + 0x160]
call fcn.14004f200
lea r9, [rbp + 0x160]
call fcn.14004cf30
mov rdi, rax
mov rdx, qword [rbp + 0x178]
cmp rdx, 0x10
jb 0x14004daa3
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004da9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004da9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051358
sub rdi, qword [0x140064ad0]
add rdi, 7
mov qword [0x140064b18], rdi
mov rdx, qword [0x140064b20]
lea rcx, str._llx_n
call fcn.140006cf0
cmp byte [0x140064058], 0
je 0x14004dd91
movabs r14, 0x7fffffffff67697e
movabs r12, 0x7fffffffffffffff
movabs r15, 0x311cdad160000
movabs r13, 0x112e0be826d694b3
movsd xmm6, qword [0x14005a948]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004db7a
nop
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx eax, byte [0x140064058]
cmp dword [rsp + 0x78], 0x12
cmove eax, esi
mov byte [0x140064058], al
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14004db30
mov rax, qword [0x140064b08]
test rax, rax
je 0x14004db8f
mov rcx, qword [rax + 0x98]
jmp 0x14004db92
mov rcx, rsi
cmp qword [rcx + 0x48], 0
jne 0x14004db9e
call fcn.1400044b0
call fcn.1400055a0
call fcn.14000e720
call fcn.140002630
call fcn.1400106f0
movss xmm2, dword [0x140064054]
movaps xmm0, xmm2
mulss xmm0, dword [0x140064048]
movss dword [rbp + 0x160], xmm0
movss xmm1, dword [0x14006404c]
mulss xmm1, xmm2
movss dword [rbp + 0x164], xmm1
movss xmm0, dword [0x140064050]
mulss xmm0, xmm2
movss dword [rbp + 0x168], xmm0
movss dword [rbp + 0x16c], xmm2
mov rcx, qword [0x140064ad8]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140064af0]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x140064ad8]
mov rax, qword [rcx]
lea r8, [rbp + 0x160]
mov rdx, qword [0x140064af0]
call qword [rax + 0x190]
mov rax, qword [0x140064b08]
mov rcx, qword [rax + 0x4ad0]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, rsi
cmp byte [rax], sil
cmovne rcx, rax
call fcn.1400036e0
mov rcx, qword [0x140064ae8]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 1]
call qword [rax + 0x40]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rdi, rax
cmp rbx, 0x989680
jne 0x14004dc92
imul rcx, rdi, 0x64
jmp 0x14004dcb8
cqo
idiv rbx
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
mov rcx, rax
mov rax, rdi
cqo
idiv rbx
imul rdx, rax, 0x3b9aca00
add rcx, rdx
cmp rcx, r14
lea r14, [rcx + 0x989680]
jle 0x14004dcc7
mov r14, r12
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov rcx, rax
cmp rbx, 0x989680
jne 0x14004dce8
imul rdi, rcx, 0x64
jmp 0x14004dd0e
cqo
idiv rbx
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
mov rdi, rax
mov rax, rcx
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
add rdi, rcx
cmp r14, rdi
je 0x14004dd75
jl 0x14004dd75
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rcx, rax, 0x64
mov rax, r14
sub rax, rdi
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
comisd xmm0, xmm6
jbe 0x14004dd3c
mov rax, r15
lea rdi, [rcx + r15]
jmp 0x14004dd40
lea rdi, [rcx + rax]
add rcx, rax
mov rax, r13
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x18], rdx
imul eax, edx, 0x3b9aca00
sub edi, eax
mov dword [rbp + 0x20], edi
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
jmp 0x14004dcc7
cmp byte [0x140064058], 0
movabs r14, 0x7fffffffff67697e
jne 0x14004db10
mov r12, qword [rsp + 0x60]
mov rdi, qword [0x140064b08]
test rdi, rdi
je 0x14004dda6
mov rbx, qword [rdi + 0x98]
jmp 0x14004dda9
mov rbx, rsi
call fcn.1400048b0
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14004ddbd
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14004ddcb
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14004ddda
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 0x88], rsi
mov qword [rdi + 0x98], rsi
and dword [rdi + 0xc], 0xfffffff7
mov rdi, qword [0x140064b08]
test rdi, rdi
je 0x14004de55
mov r8d, dword [rdi + 0x3f60]
movsx rdx, word [rdi + 0x6030]
lea rcx, [rdi + 0x6034]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r8d
je 0x14004de4b
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [rdi + 0x6030], cx
movsx rax, cx
lea rcx, [rdi + 0x6034]
lea rcx, [rcx + rax*8]
mov dword [rcx], r8d
mov dword [rcx + 4], esi
inc word [rcx + 6]
inc dword [rdi + 0x602c]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140064b08]
test rdi, rdi
je 0x14004de73
mov r14, qword [rdi + 0x90]
jmp 0x14004de76
mov r14, rsi
lea rbx, [rdi + 8]
mov rcx, qword [r14 + 0x38]
test rcx, rcx
je 0x14004de90
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rdi, qword [0x140064b08]
mov qword [rbx + 0x78], rsi
mov qword [rbx + 0x88], rsi
and dword [rbx + 4], 0xfffffff8
test rdi, rdi
je 0x14004df01
mov r8d, dword [rdi + 0x3f60]
movsx rdx, word [rdi + 0x6030]
lea rcx, [rdx*8 + 0x6034]
add rcx, rdi
cmp dword [rcx], r8d
je 0x14004def7
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [rdi + 0x6030], cx
movsx rax, cx
lea rcx, [rax*8 + 0x6034]
add rcx, rdi
mov dword [rcx], r8d
mov dword [rcx + 4], esi
inc word [rcx + 6]
inc dword [rdi + 0x602c]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140064b08]
mov qword [0x140064b08], rbx
call fcn.14000c350
mov qword [0x140064b08], rsi
test rbx, rbx
je 0x14004dfa4
mov rcx, rbx
call fcn.1400238b0
mov rdi, qword [0x140064b08]
test rdi, rdi
je 0x14004df9b
mov r8d, dword [rdi + 0x3f60]
movsx r9, word [rdi + 0x6030]
lea rdx, [rdi + 0x6034]
lea rdx, [rdx + r9*8]
cmp dword [rdx], r8d
je 0x14004df91
lea ecx, [r9 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [rdi + 0x6030], cx
movsx rax, cx
lea rdx, [rdi + 0x6034]
lea rdx, [rdx + rax*8]
mov dword [rdx], r8d
mov dword [rdx + 4], esi
inc word [rdx + 6]
inc dword [rdi + 0x602c]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140002460
mov rcx, r12
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp]
call qword [sym.imp.USER32.dll_UnregisterClassW]
jmp 0x14004dfde
lea rdx, str.Driver_setup_failed_
mov r9d, 0x10
lea r8, str.Error
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x50], rax
mov rax, qword [rbp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x4c], edx
lea rcx, [rbp + 0x58]
call fcn.14004ec30
lea rcx, [rbp + 0x60]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xf8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x14004e062
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e05d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e05d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051358
mov eax, esi
mov rcx, qword [rbp + 0x188]
xor rcx, rsp
call fcn.1400510e0
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret