Function at 0x14004eba0
Capabilities:
Create thread
Enumerate gui resources
Log keystrokes via polling
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x280
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140151f00]
xor rax, rsp
mov qword [rbp + 0xd0], rax
xor r14d, r14d
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rdx, [0x14013a24c]
lea rcx, str.wmic_bios_get_serialnumber
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov rdi, rax
mov rcx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x30]
mov qword [rbp - 8], rax
mov byte [rbp], 1
mov ecx, 0x20
call fcn.1400fba7c
mov rbx, rax
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov rcx, qword [rbp - 0x30]
movups xmmword [rax], xmm0
mov r15d, 1
mov dword [rax + 8], r15d
mov dword [rax + 0xc], r15d
lea rsi, vtable.std::_Ref_count_resource_struct__iobuf____ptr64__int____cdecl___struct__iobuf____ptr64__.0
mov qword [rax], rsi
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne 0x14004ece4
nop dword [rax]
mov r8, rdi
mov edx, 0x80
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
je 0x14004ecd7
lea rdx, [rbp + 0x10]
lea rcx, [0x140152278]
call fcn.140053e50
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
je 0x14004ecb0
lea rdx, [0x140152278]
lea rcx, [rbp - 0x10]
call fcn.140054250
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14004ed24
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14004ed24
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14004ed5f
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ed5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f0f6
call fcn.1400fb764
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rdx, [0x14013a24c]
lea rcx, str.wmic_diskdrive_get_serialnumber
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov rdi, rax
mov rcx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x30]
mov qword [rbp - 8], rax
mov byte [rbp], 1
mov ecx, 0x20
call fcn.1400fba7c
mov rbx, rax
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov rcx, qword [rbp - 0x30]
movups xmmword [rax], xmm0
mov dword [rax + 8], r15d
mov dword [rax + 0xc], r15d
mov qword [rax], rsi
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne 0x14004ee16
mov r8, rdi
mov edx, 0x80
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
je 0x14004ee09
lea rdx, [rbp + 0x10]
lea rcx, [0x1401522d8]
call fcn.140053e50
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
je 0x14004ede2
lea rdx, [0x1401522d8]
lea rcx, [rbp - 0x10]
call fcn.140054250
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14004ee56
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14004ee56
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14004ee91
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ee8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f0f6
call fcn.1400fb764
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov rax, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
mov qword [rbp - 0x30], rax
lea rdx, [0x14013a24c]
lea rcx, str.wmic_csproduct_get_uuid
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov rdi, rax
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x30]
mov qword [rbp - 8], rax
mov byte [rbp], 1
mov ecx, 0x20
call fcn.1400fba7c
mov rbx, rax
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov rcx, qword [rbp - 0x30]
movups xmmword [rax], xmm0
mov dword [rax + 8], r15d
mov dword [rax + 0xc], r15d
mov qword [rax], rsi
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne 0x14004ef48
mov r8, rdi
mov edx, 0x80
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
je 0x14004ef3b
lea rdx, [rbp + 0x10]
lea rcx, [0x1401522b8]
call fcn.140053e50
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
je 0x14004ef14
lea rdx, [0x1401522b8]
lea rcx, [rbp - 0x10]
call fcn.140054250
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14004ef88
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14004ef88
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14004efc3
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004efbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f0f6
call fcn.1400fb764
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rdx, [0x14013a24c]
lea rcx, str.wmic_baseboard_get_serialnumber
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov rdi, rax
mov rdx, qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x30]
mov qword [rbp - 8], rax
mov byte [rbp], 1
mov ecx, 0x20
call fcn.1400fba7c
mov rbx, rax
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov rcx, qword [rbp - 0x30]
movups xmmword [rax], xmm0
mov dword [rax + 8], r15d
mov dword [rax + 0xc], r15d
mov qword [rax], rsi
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rdi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], rax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne 0x14004f084
nop word [rax + rax]
mov r8, rdi
mov edx, 0x80
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
je 0x14004f077
lea rdx, [rbp + 0x10]
lea rcx, [0x140152258]
call fcn.140053e50
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
je 0x14004f050
lea rdx, [0x140152258]
lea rcx, [rbp - 0x10]
call fcn.140054250
nop
mov eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14004f0c4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14004f0c4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14004f102
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f0fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004f0fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400fb764
lea r12, str.Shotgun_Pack
lea r13, [0x14015350f]
movdqa xmm10, xmmword [0x14013bc20]
movss xmm9, dword [0x14013b834]
movss xmm13, dword [0x14013b824]
movss xmm14, dword [0x14013b74c]
xorps xmm8, xmm8
movss xmm11, dword [0x14013b7c4]
movss xmm7, dword [0x14013b7a0]
movss xmm15, dword [0x14013b7b4]
movss xmm12, dword [0x14013b754]
lea rdi, str.Apply_Shotgun_Pack
lea rsi, [0x14011f710]
nop dword [rax]
xor edx, edx
lea rcx, [0x14004a130]
call qword [sym.imp.USER32.dll_EnumWindows]
xor bl, bl
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xa0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004f1ee
nop
lea rcx, [rbp + 0xa0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xa0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx ebx, bl
cmp dword [rbp + 0xa8], 0x12
cmove ebx, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xa0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14004f1a0
test bl, bl
jne 0x140050819
cmp qword [0x1401538c0], 0
jne 0x14004f1fd
call fcn.140035a30
mov rbx, qword [0x140153510]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
lea rdx, [rbp - 0x50]
mov rcx, qword [0x140153900]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp - 0x44]
sub eax, dword [rbp - 0x4c]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [rbp - 0x48]
sub eax, dword [rbp - 0x50]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x10], xmm0
movss dword [rbx + 0x14], xmm1
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14004f2a1
mov rdi, qword [0x140153510]
mov ecx, dword [rdi + 0x161c]
test ecx, ecx
jns 0x14004f278
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r14d
test eax, eax
cmovg edx, eax
lea rcx, [rdi + 0x1618]
call fcn.1400239b0
mov dword [rdi + 0x1618], r14d
xor r9d, r9d
lea r8, [0x140036920]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov byte [reloc.WS2_32.dll_accept], 0
lea rdi, str.Apply_Shotgun_Pack
mov qword [rbp - 0x30], r14
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
sub rax, qword [0x140153908]
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [0x140153910]
divss xmm1, xmm0
movss dword [rbx + 0x18], xmm1
mov qword [0x140153908], rcx
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
mov byte [rbx + 0x13c], al
mov ecx, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
mov byte [rbx + 0x13d], al
mov ecx, reloc.WS2_32.dll_select
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
mov byte [rbx + 0x13e], al
mov byte [rbx + 0x13f], 0
call fcn.140036440
cmp byte [rbx + 0xcf], 0
je 0x14004f33f
mov eax, 0xffffffff
jmp 0x14004f34c
mov rax, qword [0x140153510]
mov eax, dword [rax + 0x20d0]
cmp dword [reloc.WS2_32.dll_htons], eax
je 0x14004f35f
mov dword [reloc.WS2_32.dll_htons], eax
call fcn.1400362c0
call fcn.140036650
call fcn.1400074e0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140050605
mov eax, dword [reloc.WS2_32.dll_accept]
mov rbx, qword [0x140153510]
cmp eax, 1
jne 0x14004fb96
lea rcx, [rbx + 0x1e80]
movss xmm1, dword [rbx + 0x164c]
movss xmm0, dword [rbx + 0x1650]
mov dword [rbp - 0x70], 4
movss dword [rbp - 0x6c], xmm1
movss dword [rbp - 0x68], xmm0
lea rdx, [rbp - 0x70]
call fcn.1400237d0
mov dword [rbx + 0x164c], 0x437a0000
mov dword [rbx + 0x1650], 0x431b0000
xor edx, edx
mov r8d, 3
lea rcx, str.Axtralsz_Loader
call fcn.14000dc90
mov dword [rsp + 0x40], 0x43848000
mov dword [rsp + 0x44], 0x41c80000
mov rbx, qword [0x140153510]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.TopLine
call fcn.140003230
cmp dword [rbx + 0x1d6c], eax
jne 0x14004f440
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14004f44f
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, str.TopLine
call fcn.14000ad40
mov rax, qword [0x140153510]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
lea rcx, str.Axtralszzzzzzzzz
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm13
movss xmm2, dword [rax + 0x1a80]
lea rdx, [rsp + 0x48]
mov rcx, qword [rax + 0x1a78]
call fcn.140032d10
movss xmm0, dword [rsp + 0x48]
addss xmm0, xmm14
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rsp + 0x48], xmm1
mov rax, qword [0x140153510]
mov rdx, qword [rax + 0x1d18]
movsd xmm0, qword [rdx + 0x2a8]
movsd qword [rbp - 0x50], xmm0
cmp qword [rdx + 0x1e8], 0
jne 0x14004f4fa
cmp qword [rax + 0x2178], 0
jne 0x14004f4fa
movss xmm0, dword [rbp - 0x50]
jmp 0x14004f502
movss xmm0, dword [rdx + 0x278]
movss xmm3, dword [rdx + 0x118]
subss xmm0, xmm3
subss xmm3, dword [rdx + 0x50]
addss xmm3, dword [rdx + 0x9c]
subss xmm0, xmm1
mulss xmm0, dword [0x14013b710]
addss xmm3, xmm0
movsd xmm0, qword [rdx + 0x2a8]
movaps xmm1, xmm0
shufps xmm1, xmm1, 0x55
movsd qword [rbp - 0x50], xmm0
subss xmm1, dword [rdx + 0x11c]
movss xmm6, dword [rdx + 0x11c]
subss xmm6, dword [rdx + 0x54]
addss xmm6, dword [rdx + 0xa0]
subss xmm1, dword [rax + 0x1a80]
mulss xmm1, dword [0x14013b710]
addss xmm6, xmm1
mov byte [rdx + 0xd1], 1
mov rax, qword [rax + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, xmm6
addss xmm2, xmm3
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.Axtralsz
call fcn.1400397c0
mov rbx, qword [0x140153510]
mov dword [rbp - 0x50], r14d
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rbp - 0x4c], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x50]
call fcn.1400238c0
movups xmmword [rbx + 0x16fc], xmm10
movaps xmm1, xmm9
movaps xmm0, xmm8
call fcn.140011c50
lea rcx, [0x14013a3e8]
call fcn.1400397c0
mov rcx, qword [0x140153510]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, xmm6
addss xmm2, dword [0x14013b800]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, [0x14011f6a8]
call fcn.1400397c0
call fcn.14000ac00
test al, al
jne 0x1400508be
mov r8, qword [0x140153510]
movsxd rax, dword [r8 + 0x1e70]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1e78]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x16fc], xmm0
dec dword [r8 + 0x1e70]
call fcn.14000b000
mov rcx, qword [0x140153510]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x14013b7cc]
addss xmm2, xmm8
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x14013b7d8]
addss xmm2, dword [0x14013b7d0]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
or dword [rcx + 0x1e58], 1
mov dword [rcx + 0x1e5c], 0x43390000
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0xff
lea r8, [0x140151f90]
xor edx, edx
lea rcx, str.Key
call fcn.14003e9a0
mov rcx, qword [0x140153510]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x11c]
subss xmm0, dword [rax + 0x54]
addss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm0
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x14013b7e0]
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
or dword [rcx + 0x1e58], 1
mov dword [rcx + 0x1e5c], 0x42f00000
mov dword [rsp + 0x58], 0x43020000
mov dword [rsp + 0x5c], 0x41a00000
lea rdx, [rsp + 0x58]
lea rcx, str.LOGIN
call fcn.14003a280
test al, al
jne 0x14004f9ba
mov rcx, qword [0x140153510]
movss xmm0, dword [rcx + 0x4cc]
ucomiss xmm0, xmm8
jp 0x14004f937
je 0x14004f9ba
movss xmm2, dword [rcx + 0x94]
comiss xmm0, xmm2
jbe 0x14004fa30
movss xmm3, dword [rcx + 0x98]
movaps xmm1, xmm0
subss xmm1, dword [rcx + 0x18]
ucomiss xmm0, xmm8
jp 0x14004f965
jne 0x14004f965
mov eax, r15d
jmp 0x14004f9b6
comiss xmm1, xmm0
jb 0x14004f96f
mov eax, r14d
jmp 0x14004f9b6
comiss xmm8, xmm3
jb 0x14004f984
comiss xmm2, xmm1
jbe 0x14004f96a
comiss xmm0, xmm2
jb 0x14004f96a
mov eax, r15d
jmp 0x14004f9b6
comiss xmm2, xmm1
jbe 0x14004f990
mov edx, 0xffffffff
jmp 0x14004f99c
subss xmm1, xmm2
divss xmm1, xmm3
cvttss2si edx, xmm1
comiss xmm2, xmm0
jbe 0x14004f9a8
mov eax, 0xffffffff
jmp 0x14004f9b4
subss xmm0, xmm2
divss xmm0, xmm3
cvttss2si eax, xmm0
sub eax, edx
test eax, eax
jle 0x14004fa30
mov byte [reloc.WS2_32.dll_accept], 0
mov rcx, r15
call fcn.1400fba7c
mov qword [rbp - 0x50], rax
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140057010]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x80], rax
test rax, rax
je 0x14005088d
cmp dword [rbp - 0x78], 0
je 0x140050883
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140050883
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov rcx, qword [0x140153510]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x14013b7f8]
addss xmm2, dword [0x14013b7fc]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, [0x14013a400]
call fcn.1400397c0
mov rbx, qword [0x140153510]
mov dword [rbp - 0x50], r14d
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rbp - 0x4c], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x50]
call fcn.1400238c0
movups xmmword [rbx + 0x16fc], xmm10
movaps xmm1, xmm9
movaps xmm0, xmm8
call fcn.140011c50
mov r8, qword [0x140153510]
movsxd rax, dword [r8 + 0x1e70]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1e78]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x16fc], xmm0
dec dword [r8 + 0x1e70]
call fcn.140010d20
mov rbx, qword [0x140153510]
movsxd rax, dword [rbx + 0x1e80]
lea rcx, [rax + rax*2]
mov rdx, qword [rbx + 0x1e88]
movsxd rax, dword [rdx + rcx*4 - 0xc]
lea rax, [rax + rax*2]
mov r8d, dword [rsi + rax*4 + 8]
cmp dword [rsi + rax*4], 8
jne 0x14004fb8a
mov eax, dword [rsi + rax*4 + 4]
cmp eax, 1
jne 0x14004fb6d
mov eax, dword [rdx + rcx*4 - 8]
mov dword [r8 + rbx + 0x1638], eax
jmp 0x14004fb8a
cmp eax, 2
jne 0x14004fb8a
mov eax, dword [rdx + rcx*4 - 8]
mov dword [r8 + rbx + 0x1638], eax
mov eax, dword [rdx + rcx*4 - 4]
mov dword [r8 + rbx + 0x163c], eax
dec dword [rbx + 0x1e80]
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 2
jne 0x140050605
lea rcx, [rbx + 0x1e80]
movss xmm1, dword [rbx + 0x164c]
movss xmm0, dword [rbx + 0x1650]
mov dword [rbp - 0x64], 4
movss dword [rbp - 0x60], xmm1
movss dword [rbp - 0x5c], xmm0
lea rdx, [rbp - 0x64]
call fcn.1400237d0
mov dword [rbx + 0x164c], 0x433e0000
mov dword [rbx + 0x1650], 0x42e60000
xor edx, edx
mov r8d, 3
lea rcx, str.Axtralsz_Menu
call fcn.14000dc90
mov rcx, qword [0x140153978]
call fcn.1400114b0
mov rbx, qword [0x140153510]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, xmm8
addss xmm2, xmm8
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x60], 0x43450000
mov dword [rsp + 0x64], 0x41f00000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.NavBar
call fcn.140003230
cmp dword [rbx + 0x1d6c], eax
jne 0x14004fcd0
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14004fcdf
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, str.NavBar
call fcn.14000ad40
mov rcx, qword [0x140153510]
mov rax, qword [rcx + 0x1d18]
movss xmm3, dword [rax + 0x11c]
subss xmm3, dword [rax + 0x54]
addss xmm3, dword [rax + 0xa0]
addss xmm3, dword [0x14013b7b0]
movss xmm1, dword [rax + 0x118]
subss xmm1, dword [rax + 0x50]
addss xmm1, dword [rax + 0x9c]
addss xmm1, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, xmm3
addss xmm2, xmm1
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, str.__Axtralsz
call fcn.1400397c0
mov rbx, qword [0x140153510]
mov dword [rbp - 0x50], r14d
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rbp - 0x4c], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x50]
call fcn.1400238c0
movups xmmword [rbx + 0x16fc], xmm10
movaps xmm1, xmm9
movaps xmm0, xmm8
call fcn.140011c50
lea rcx, str._Tweaks
call fcn.1400397c0
mov r8, qword [0x140153510]
movsxd rax, dword [r8 + 0x1e70]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1e78]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x16fc], xmm0
dec dword [r8 + 0x1e70]
movaps xmm1, xmm9
movaps xmm0, xmm8
call fcn.140011c50
mov rbx, qword [0x140153510]
mov dword [rbp - 0x50], r14d
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rbp - 0x4c], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x50]
call fcn.1400238c0
movdqa xmm0, xmmword [0x14013bc70]
movups xmmword [rbx + 0x16fc], xmm0
mov rbx, qword [0x140153510]
mov dword [rbp - 0x50], r14d
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rbp - 0x4c], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rbp - 0x50]
call fcn.1400238c0
movups xmmword [rbx + 0x16fc], xmm10
mov rcx, qword [0x140153510]
mov rax, qword [rcx + 0x1d18]
movss xmm3, dword [rax + 0x11c]
subss xmm3, dword [rax + 0x54]
addss xmm3, dword [rax + 0xa0]
movss xmm1, dword [rax + 0x118]
subss xmm1, dword [rax + 0x50]
addss xmm1, dword [rax + 0x9c]
addss xmm1, dword [0x14013b7e4]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, xmm3
addss xmm2, xmm1
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
lea rcx, [0x14011f6a8]
call fcn.1400397c0
call fcn.14000ac00
test al, al
jne 0x1400508be
mov r8, qword [0x140153510]
movsxd rax, dword [r8 + 0x1e70]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1e78]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x16fc], xmm0
dec dword [r8 + 0x1e70]
call fcn.14000b000
mov rbx, qword [0x140153510]
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x11c]
subss xmm0, dword [rax + 0x54]
addss xmm0, dword [rax + 0xa0]
addss xmm0, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm0
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x118]
subss xmm2, dword [rax + 0x50]
addss xmm2, dword [rax + 0x9c]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm2, xmm7
addss xmm1, xmm2
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rbx + 0x1d18]
movsd xmm0, qword [rax + 0x2a8]
movaps xmm1, xmm0
shufps xmm1, xmm1, 0x55
movsd qword [rbp - 0x50], xmm0
subss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x14013b7ac]
mov dword [rsp + 0x68], 0x433b0000
movss dword [rsp + 0x6c], xmm1
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.left
call fcn.140003230
cmp dword [rbx + 0x1d6c], eax
jne 0x1400500cb
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x1400500da
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x68]
mov edx, eax
lea rcx, str.left
call fcn.14000ad40
xorps xmm0, xmm0
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x20], r13
lea rax, str.Apply_SMG_Pack
mov qword [rbp + 0x28], rax
lea rax, str.SMG_Pack
mov qword [rbp + 0x30], rax
lea rax, [0x14015350a]
mov qword [rbp + 0x38], rax
lea rax, str.Apply_Aim_Assist_Boost
mov qword [rbp + 0x40], rax
lea rax, str.Aim_Assist
mov qword [rbp + 0x48], rax
lea rax, [0x14015350b]
mov qword [rbp + 0x50], rax
lea rax, str.Apply_Gun_Registration
mov qword [rbp + 0x58], rax
lea rax, str.Gun_Registration
mov qword [rbp + 0x60], rax
lea rax, [0x140153509]
mov qword [rbp + 0x68], rax
lea rax, str.Apply_Bloom_Pack
mov qword [rbp + 0x70], rax
lea rax, str.Bloom_Pack
mov qword [rbp + 0x78], rax
lea rax, [0x14015350e]
mov qword [rbp + 0x80], rax
lea rax, str.Apply_Build_Place
mov qword [rbp + 0x88], rax
lea rax, str.Build_Place
mov qword [rbp + 0x90], rax
lea rax, [0x14015350c]
mov qword [rbp + 0x98], rax
lea rdi, [rbp + 0x10]
movdqu xmmword [rbp - 0x10], xmm0
mov qword [rbp], r14
mov ecx, 0x90
call fcn.1400fba7c
mov rbx, rax
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rax
lea rcx, [rax + 0x90]
mov qword [rbp], rcx
mov r8d, 0x90
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea r13, [rbx + 0x90]
mov qword [rbp - 8], r13
mov r12, qword [rbp - 0x10]
cmp r12, r13
je 0x1400503bf
nop dword [rax + rax]
mov rdx, qword [r12 + 8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140050230
lea rcx, [rbp - 0x50]
call fcn.14004e430
mov rbx, qword [0x140153700]
mov r14, qword [0x140153708]
mov rsi, qword [rbp - 0x38]
mov rdi, qword [rbp - 0x50]
cmp rbx, r14
je 0x1400502a8
mov r15, qword [rbp - 0x40]
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp - 0x50]
cmp rsi, 0xf
cmova rdx, rdi
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14005028d
mov rcx, qword [rbx]
cmp r8, r15
jne 0x14005029f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400505cb
add rbx, 0x40
cmp rbx, r14
jne 0x140050270
xor bl, bl
cmp rsi, 0xf
jbe 0x1400502e1
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400502d9
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005089d
mov rcx, rdi
call fcn.1400fb764
test bl, bl
je 0x14005039f
mov rcx, qword [0x140153510]
mov rax, qword [rcx + 0x1d18]
movss xmm3, dword [rax + 0x11c]
subss xmm3, dword [rax + 0x54]
addss xmm3, dword [rax + 0xa0]
addss xmm3, xmm7
movss xmm1, dword [rax + 0x118]
subss xmm1, dword [rax + 0x50]
addss xmm1, dword [rax + 0x9c]
addss xmm1, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, xmm3
addss xmm2, xmm1
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rdx, qword [r12 + 0x10]
mov rcx, qword [r12]
call fcn.14003b830
add r12, 0x18
cmp r12, r13
mov r14d, 0
jne 0x140050210
mov r15d, 1
lea rsi, [0x14011f710]
mov rcx, qword [0x140153510]
mov rax, qword [rcx + 0x1d18]
movss xmm3, dword [rax + 0x11c]
subss xmm3, dword [rax + 0x54]
addss xmm3, dword [rax + 0xa0]
addss xmm3, xmm11
movss xmm1, dword [rax + 0x118]
subss xmm1, dword [rax + 0x50]
addss xmm1, dword [rax + 0x9c]
addss xmm1, xmm15
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm3, xmm0
addss xmm2, xmm1
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm3
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm3
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x70], 0x43270000
mov dword [rsp + 0x74], 0x41a00000
lea rdx, [rsp + 0x70]
lea rcx, str.START_TWEAKING
call fcn.14003a280
test al, al
je 0x1400504fd
mov byte [reloc.WS2_32.dll_accept], 0
mov rcx, r15
call fcn.1400fba7c
mov qword [rbp - 0x50], rax
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140057040]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x1400508ae
cmp dword [rbp - 0x18], 0
je 0x1400508a4
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400508a4
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x10]
call fcn.140052d70
call fcn.14000b000
movaps xmm1, xmm9
movaps xmm0, xmm8
call fcn.140011c50
mov r8, qword [0x140153510]
mov rax, qword [r8 + 0x1d18]
movss xmm4, dword [rax + 0x118]
subss xmm4, dword [rax + 0x50]
addss xmm4, dword [rax + 0x9c]
mov byte [rax + 0xd1], 1
mov rax, qword [r8 + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm4, xmm7
addss xmm1, xmm4
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
call fcn.140011550
call fcn.140010d20
mov rcx, qword [0x140153510]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [rsi + r10*4 + 8]
cmp dword [rsi + r10*4], 8
jne 0x1400505f1
mov eax, dword [rsi + r10*4 + 4]
cmp eax, 1
jne 0x1400505d2
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x1400505f1
mov bl, 1
jmp 0x1400502aa
cmp eax, 2
jne 0x1400505f1
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
lea r12, str.Shotgun_Pack
lea r13, [0x14015350f]
call fcn.140009c40
mov rcx, qword [0x140153920]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 7
call qword [rax + 0x1c8]
mov rcx, qword [0x140153920]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0x1b
call qword [rax + 0x1c8]
mov rcx, qword [0x140153920]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x140153920]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r14d
movss dword [rsp + 0x28], xmm12
mov dword [rsp + 0x20], r14d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x140153920]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400506cd
call fcn.14000a110
mov rax, qword [0x140153510]
mov rcx, qword [rax + 0x1ef8]
mov rax, qword [rcx]
add rax, 0xa8
mov rcx, r14
cmp byte [rax], 0
cmovne rcx, rax
call fcn.140035210
mov rcx, qword [0x140153920]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rax, qword [0x140153510]
test dword [rax + 8], 0x400
je 0x1400507ad
call fcn.140019a60
mov rbx, qword [0x140153510]
mov r14d, r15d
mov eax, dword [rbx + 0x1628]
cmp eax, 1
jle 0x14005074c
mov esi, 8
mov rax, qword [rbx + 0x1630]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x14005073a
mov rax, qword [rbx + 0x15c0]
test rax, rax
je 0x140050727
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x1608]
test rax, rax
je 0x14005073a
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
mov eax, dword [rbx + 0x1628]
cmp r14d, eax
jl 0x140050700
mov r14d, 1
cmp eax, r14d
jle 0x1400507aa
mov esi, 8
nop dword [rax]
mov rax, qword [rbx + 0x1630]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x14005079a
mov rax, qword [rbx + 0x15c8]
test rax, rax
je 0x140050787
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x1610]
test rax, rax
je 0x14005079a
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
cmp r14d, dword [rbx + 0x1628]
jl 0x140050760
xor r14d, r14d
mov rcx, qword [0x140153920]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
mov r15d, 1
lea rsi, [0x14011f710]
lea rdi, str.Apply_Shotgun_Pack
jne 0x14004f170
mov rcx, qword [0x140153920]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
lea rsi, [0x14011f710]
lea rdi, str.Apply_Shotgun_Pack
jne 0x14004f170
call fcn.140052bd0
jmp 0x14004f15b
xor al, al
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.1400fb350
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x78], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x18], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3