Function at 0x140038480
Capabilities:
Create process on windows
Delete file
Reference sql statements
Self delete
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x510
movaps xmmword [r11 - 0x28], xmm6
mov rax, qword [0x1400d9040]
xor rax, rsp
mov qword [rsp + 0x4f8], rax
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [r11 - 0x70], xmm0
movdqa xmm1, xmmword [0x1400ccc90]
movdqu xmmword [r11 - 0x60], xmm1
mov eax, 0x6264
mov word [r11 - 0x70], ax
mov byte [r11 - 0x6e], r13b
movups xmmword [rsp + 0x498], xmm0
movdqa xmm1, xmmword [0x1400cccb0]
movdqu xmmword [r11 - 0x80], xmm1
mov dword [rsp + 0x498], 0x65657266
mov byte [rsp + 0x49c], r13b
movups xmmword [rsp + 0x478], xmm0
movdqa xmm1, xmmword [0x1400ccca0]
movdqu xmmword [rsp + 0x488], xmm1
mov eax, dword [0x1400cab70]
mov word [rsp + 0x478], ax
movzx eax, byte [0x1400cab72]
mov byte [rsp + 0x47a], al
mov byte [rsp + 0x47b], r13b
lea r9, [r11 - 0x263]
mov r8d, 0x7f
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140038551
lea r8, [rsp + 0x2c5]
mov rdx, r9
lea rcx, [rsp + 0x370]
call fcn.140050be0
nop
lea r9, [rsp + 0x2c5]
mov r8d, 0xb5
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x1400385a2
lea r8, [rsp + 0x2c5]
mov rdx, r9
lea rcx, [rsp + 0x270]
call fcn.140050be0
nop
lea r9, [rsp + 0x2c5]
mov r8d, 0xf3
nop dword [rax]
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140038600
lea r8, [rsp + 0x2c5]
mov rdx, r9
lea rcx, [rsp + 0x410]
call fcn.140050be0
nop
lea r9, [rsp + 0x2c5]
mov r8d, 0xb9
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140038651
lea r8, [rsp + 0x2c5]
mov rdx, r9
lea rcx, [rsp + 0x310]
call fcn.140050be0
nop
mov r8d, 1
lea rdx, [0x1400cab74]
lea rcx, [rsp + 0x310]
call fcn.14004e4b0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x390], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x3a0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rsp + 0x410]
lea r8, [rsp + 0x390]
lea rcx, [rsp + 0x330]
call fcn.140051b60
nop
mov r8d, 1
lea rdx, [0x1400cab74]
lea rcx, [rsp + 0x330]
call fcn.14004e4b0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x3b0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x3c0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rsp + 0x270]
lea r8, [rsp + 0x3b0]
lea rcx, [rsp + 0x350]
call fcn.140051b60
nop
mov r8d, 1
lea rdx, [0x1400cab74]
lea rcx, [rsp + 0x350]
call fcn.14004e4b0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x3d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x3e0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rsp + 0x370]
lea r8, [rsp + 0x3d0]
lea rcx, [rsp + 0x4d8]
call fcn.140051b60
nop
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 0xf
jbe 0x1400387f5
inc rdx
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400387ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400387ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
nop
mov rdx, qword [rsp + 0x368]
cmp rdx, 0xf
jbe 0x14003883b
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038836
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038836
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqa xmm6, xmmword [0x1400ccc80]
movdqu xmmword [rsp + 0x360], xmm6
mov byte [rsp + 0x350], 0
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 0xf
jbe 0x14003889b
inc rdx
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038895
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038895
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
nop
mov rdx, qword [rsp + 0x348]
cmp rdx, 0xf
jbe 0x1400388e1
inc rdx
mov rcx, qword [rsp + 0x330]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400388dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400388dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x340], xmm6
mov byte [rsp + 0x330], 0
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 0xf
jbe 0x140038939
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038933
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038933
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
nop
mov rdx, qword [rsp + 0x328]
cmp rdx, 0xf
jbe 0x14003897f
inc rdx
mov rcx, qword [rsp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003897a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003897a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x320], xmm6
mov byte [rsp + 0x310], 0
mov rdx, qword [rsp + 0x428]
cmp rdx, 0xf
jbe 0x1400389d7
inc rdx
mov rcx, qword [rsp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400389d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400389d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
nop
mov rdx, qword [rsp + 0x288]
cmp rdx, 0xf
jbe 0x140038a1e
inc rdx
mov rcx, qword [rsp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038a18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038a18
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
nop
mov rdx, qword [rsp + 0x388]
cmp rdx, 0xf
jbe 0x140038a64
inc rdx
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038a5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038a5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
xorps xmm0, xmm0
movups xmmword [rsp + 0x410], xmm0
mov ecx, 0x20
call fcn.140053458
mov qword [rsp + 0x410], rax
movdqa xmm0, xmmword [0x1400ccd80]
movdqu xmmword [rsp + 0x420], xmm0
movups xmm0, xmmword [str.hxagorco_authpanel]
movups xmmword [rax], xmm0
movzx ecx, word [0x1400cab88]
mov word [rax + 0x10], cx
mov byte [rax + 0x12], 0
lea r9, [rsp + 0x2c5]
mov r8d, r13d
nop word [rax + rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140038ac0
lea r8, [rsp + 0x2c5]
mov rdx, r9
lea rcx, [rsp + 0x350]
call fcn.140050be0
nop
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rsp + 0x360]
sub rax, rcx
cmp rax, 0xa
jb 0x14003a0c8
lea rax, [rsp + 0x350]
cmp qword [rsp + 0x368], 0xf
cmova rax, qword [rsp + 0x350]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xa
lea r9, str.em4Np_Jd5M
lea rcx, [rsp + 0x330]
call fcn.140051d60
nop
mov r8d, 1
lea rdx, [0x1400cab74]
lea rcx, [rsp + 0x330]
call fcn.14004e4b0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x3f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x400], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x348]
cmp rdx, 0xf
jbe 0x140038bea
inc rdx
mov rcx, qword [rsp + 0x330]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038be5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038be5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x340], xmm6
mov byte [rsp + 0x330], 0
lea rdx, [rsp + 0x3f0]
cmp qword [rsp + 0x408], 0xf
cmova rdx, qword [rsp + 0x3f0]
mov r8, qword [rsp + 0x400]
lea rcx, [0x1400fccc8]
call fcn.14004f360
xorps xmm0, xmm0
movups xmmword [rsp + 0x3d0], xmm0
mov ecx, 0x20
call fcn.140053458
mov qword [rsp + 0x3d0], rax
movdqa xmm0, xmmword [0x1400ccda0]
movdqu xmmword [rsp + 0x3e0], xmm0
movups xmm0, xmmword [str.hxagorco_authpaneldb]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400cabb0]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x330], xmm0
mov qword [rsp + 0x340], 5
mov qword [rsp + 0x348], 0xf
mov eax, dword [str.prime]
mov dword [rsp + 0x330], eax
movzx eax, byte [0x1400cabbc]
mov byte [rsp + 0x334], al
mov byte [rsp + 0x335], 0
movups xmmword [rsp + 0x310], xmm0
movdqu xmmword [rsp + 0x320], xmm6
mov byte [rsp + 0x310], 0
lea rcx, [rsp + 0x310]
call qword [sym.imp.mysqlcppconn_9_vs14.dll_void___cdecl_check_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64_]
nop
mov rdx, qword [rsp + 0x328]
cmp rdx, 0xf
jbe 0x140038d22
inc rdx
mov rcx, qword [rsp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038d1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038d1d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x2b0], xmm0
mov ecx, 0x60
call fcn.140053458
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x2b0], rax
lea rcx, [rsp + 0x2b0]
call qword [sym.imp.mysqlcppconn_9_vs14.dll__check__YAXAEBV__map_V__basic_string_DU__char_traits_D_std__V__allocator_D_2__std__V12_U__less_V__]
nop
mov r8, qword [rsp + 0x2b0]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x2b0]
call fcn.1400519b0
mov edx, 0x60
mov rcx, qword [rsp + 0x2b0]
call fcn.140053264
lea rcx, [0x140057dce]
call qword [sym.imp.mysqlcppconn_9_vs14.dll_class_sql::mysql::MySQL_Driver____ptr64___cdecl_sql::mysql::_get_driver_instance_by_name_char_const__const___ptr64_]
mov rbx, rax
mov rax, qword [rax]
mov rdi, qword [rax + 0x10]
lea rdx, [rsp + 0x3f0]
lea rcx, [rsp + 0x3b0]
call fcn.14004e550
nop
lea rdx, [rsp + 0x410]
lea rcx, [rsp + 0x390]
call fcn.14004e550
nop
lea rdx, [rsp + 0x4d8]
lea rcx, [rsp + 0x458]
call fcn.14004e550
nop
lea r9, [rsp + 0x3b0]
lea r8, [rsp + 0x390]
lea rdx, [rsp + 0x458]
mov rcx, rbx
call rdi
mov rdi, rax
mov rdx, qword [rsp + 0x470]
cmp rdx, 0xf
jbe 0x140038e52
inc rdx
mov rcx, qword [rsp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038e4d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038e4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x468], xmm6
mov byte [rsp + 0x458], 0
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 0xf
jbe 0x140038ea9
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038ea4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038ea4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x3a0], xmm6
mov byte [rsp + 0x390], 0
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 0xf
jbe 0x140038f00
inc rdx
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038efb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038efb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x3c0], xmm6
mov byte [rsp + 0x3b0], 0
mov rax, qword [rdi]
mov rbx, qword [rax + 0xf8]
lea rdx, [rsp + 0x3d0]
lea rcx, [rsp + 0x270]
call fcn.14004e550
nop
lea rdx, [rsp + 0x270]
mov rcx, rdi
call rbx
nop
mov rdx, qword [rsp + 0x288]
cmp rdx, 0xf
jbe 0x140038f85
inc rdx
mov rcx, qword [rsp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038f80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140038f80
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
mov rax, qword [rdi]
mov rbx, qword [rax + 0xc8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x2d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2e0], xmm1
mov ecx, 0x30
call fcn.140053458
mov qword [rsp + 0x2d0], rax
movdqa xmm0, xmmword [0x1400ccdc0]
movdqu xmmword [rsp + 0x2e0], xmm0
movups xmm0, xmmword [str.SELECT_serverstatus5_FROM_server]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400cabd0]
movups xmmword [rax + 0x10], xmm1
mov byte [rax + 0x20], 0
lea rdx, [rsp + 0x2d0]
mov rcx, rdi
call rbx
mov rbx, rax
mov rdx, qword [rsp + 0x2e8]
cmp rdx, 0xf
jbe 0x140039038
inc rdx
mov rcx, qword [rsp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039033
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039033
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x2e0], xmm6
mov byte [rsp + 0x2d0], 0
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x128]
mov rbx, rax
mov rax, qword [rax]
mov rcx, rbx
call qword [rax + 0x170]
test al, al
je 0x14003a06e
mov rax, qword [rbx]
mov r8, qword [rax + 0xa0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x2d0], xmm0
movdqa xmm1, xmmword [0x1400ccd30]
movdqu xmmword [rsp + 0x2e0], xmm1
movsd xmm0, qword [str.serverstatus5]
movsd qword [rsp + 0x2d0], xmm0
mov eax, dword [0x1400cabf0]
mov dword [rsp + 0x2d8], eax
movzx eax, byte [0x1400cabf4]
mov byte [rsp + 0x2dc], al
mov byte [rsp + 0x2dd], 0
lea rdx, [rsp + 0x2d0]
mov rcx, rbx
call r8
mov ebx, eax
mov rdx, qword [rsp + 0x2e8]
cmp rdx, 0xf
jbe 0x14003911c
inc rdx
mov rcx, qword [rsp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039117
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039117
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
cmp ebx, 1
jne 0x14003a049
lea rdx, str.C:Program_FilesWinRARkey.txt
lea rcx, [rsp + 0x50]
call fcn.14004de10
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2b0], xmm0
movdqu xmmword [rsp + 0x2c0], xmm6
mov byte [rsp + 0x2b0], 0
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x50]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
test al, al
je 0x14003919a
lea rdx, str.Please_enter_your_key:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002fff0
lea rdx, [rsp + 0x2b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140050150
jmp 0x1400392bf
xorps xmm0, xmm0
movups xmmword [rsp + 0x290], xmm0
mov qword [rsp + 0x2a0], r13
mov qword [rsp + 0x2a8], 0xf
mov byte [rsp + 0x290], 0
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x50]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x50]
call fcn.140051f80
mov rbx, qword [rsp + 0x2a0]
test rbx, rbx
jne 0x140039220
lea rdx, str.The_file_contains_no_key.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002fff0
lea rdx, [0x1400301f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x290]
cmp qword [rsp + 0x2a8], 0xf
cmova rdx, qword [rsp + 0x290]
mov r8, rbx
lea rcx, [rsp + 0x2b0]
call fcn.14004f360
lea rcx, [rsp + 0x60]
call fcn.14002f900
test rax, rax
jne 0x140039279
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x50]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rdx, qword [rsp + 0x2a8]
cmp rdx, 0xf
jbe 0x1400392bf
inc rdx
mov rcx, qword [rsp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400392ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400392ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
mov rax, qword [rdi]
mov rbx, qword [rax + 0xc8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x430], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x440], xmm1
mov ecx, 0x30
call fcn.140053458
mov rcx, rax
mov qword [rsp + 0x430], rax
movdqa xmm0, xmmword [0x1400ccdd0]
movdqu xmmword [rsp + 0x440], xmm0
movups xmm0, xmmword [str.SELECT__FROM__keys__WHERE__key____]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400cac98]
movups xmmword [rax + 0x10], xmm1
mov eax, dword [0x1400caca8]
mov dword [rcx + 0x20], eax
mov byte [rcx + 0x24], 0
lea rdx, [rsp + 0x430]
mov rcx, rdi
call rbx
mov rbx, rax
mov rdx, qword [rsp + 0x448]
cmp rdx, 0xf
jbe 0x14003937e
inc rdx
mov rcx, qword [rsp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039379
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039379
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x440], xmm6
mov byte [rsp + 0x430], 0
mov rax, qword [rbx]
mov rsi, qword [rax + 0x198]
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x270]
call fcn.14004e550
nop
lea r8, [rsp + 0x270]
mov edx, 1
mov rcx, rbx
call rsi
nop
mov rdx, qword [rsp + 0x288]
cmp rdx, 0xf
jbe 0x140039408
inc rdx
mov rcx, qword [rsp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039403
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039403
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x128]
mov r12, rax
mov rax, qword [rax]
mov rcx, r12
call qword [rax + 0x170]
test al, al
je 0x140039fe4
mov rax, qword [rdi]
mov rsi, qword [rax + 0xc8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x300], xmm1
mov ecx, 0x30
call fcn.140053458
mov qword [rsp + 0x2f0], rax
movdqa xmm0, xmmword [0x1400ccdf0]
movdqu xmmword [rsp + 0x300], xmm0
movups xmm0, xmmword [str.SELECT_cheat_FROM__keys__WHERE__key____]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400cacc0]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x1400cacd0]
movsd qword [rax + 0x20], xmm0
mov byte [rax + 0x28], 0
lea rdx, [rsp + 0x2f0]
mov rcx, rdi
call rsi
mov r15, rax
mov rdx, qword [rsp + 0x308]
cmp rdx, 0xf
jbe 0x1400394eb
inc rdx
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400394e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400394e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x300], xmm6
mov byte [rsp + 0x2f0], 0
mov rax, qword [r15]
mov rsi, qword [rax + 0x198]
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x270]
call fcn.14004e550
nop
lea r8, [rsp + 0x270]
mov edx, 1
mov rcx, r15
call rsi
nop
mov rdx, qword [rsp + 0x288]
cmp rdx, 0xf
jbe 0x140039575
inc rdx
mov rcx, qword [rsp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039570
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039570
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x128]
mov rsi, rax
mov rax, qword [rax]
mov rcx, rsi
call qword [rax + 0x170]
test al, al
je 0x140039f7f
mov rax, qword [rsi]
mov r9, qword [rax + 0x108]
xorps xmm0, xmm0
movups xmmword [rsp + 0x290], xmm0
movdqa xmm1, xmmword [0x1400cccc0]
movdqu xmmword [rsp + 0x2a0], xmm1
mov eax, dword [str.cheat]
mov dword [rsp + 0x290], eax
movzx eax, byte [0x1400cace0]
mov byte [rsp + 0x294], al
mov byte [rsp + 0x295], 0
lea r8, [rsp + 0x290]
lea rdx, [rsp + 0x370]
mov rcx, rsi
call r9
nop
mov rdx, rax
lea rcx, [rsp + 0x270]
call fcn.14004e550
nop
mov rdx, qword [rsp + 0x388]
cmp rdx, 0xf
jbe 0x14003964f
inc rdx
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003964a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003964a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x380], xmm6
mov byte [rsp + 0x370], 0
mov rdx, qword [rsp + 0x2a8]
cmp rdx, 0xf
jbe 0x1400396a6
inc rdx
mov rcx, qword [rsp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400396a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400396a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x2a0], xmm6
mov byte [rsp + 0x290], 0
lea rcx, [rsp + 0x270]
mov rsi, qword [rsp + 0x270]
mov r14, qword [rsp + 0x288]
cmp r14, 0xf
cmova rcx, rsi
mov r8, qword [rsp + 0x280]
cmp r8, 5
jne 0x140039f0d
lea rdx, [rsp + 0x330]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140039f0d
cmp r14, 0xf
jbe 0x140039738
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140039730
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039730
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140053264
mov rax, qword [r15]
mov edx, 1
mov rcx, r15
call qword [rax]
mov rax, qword [r12]
mov r9, qword [rax + 0x108]
xorps xmm0, xmm0
movups xmmword [rsp + 0x290], xmm0
movdqa xmm1, xmmword [0x1400cccd0]
movdqu xmmword [rsp + 0x2a0], xmm1
mov eax, dword [str.status]
mov dword [rsp + 0x290], eax
movzx eax, word [0x1400ca784]
mov word [rsp + 0x294], ax
mov byte [rsp + 0x296], 0
lea r8, [rsp + 0x290]
lea rdx, [rsp + 0x270]
mov rcx, r12
call r9
nop
mov rdx, rax
lea rcx, [rsp + 0x2d0]
call fcn.14004e550
nop
mov rdx, qword [rsp + 0x288]
cmp rdx, 0xf
jbe 0x1400397fe
inc rdx
mov rcx, qword [rsp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400397f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400397f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x280], xmm6
mov byte [rsp + 0x270], 0
mov rdx, qword [rsp + 0x2a8]
cmp rdx, 0xf
jbe 0x140039855
inc rdx
mov rcx, qword [rsp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039850
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039850
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x2a0], xmm6
mov byte [rsp + 0x290], 0
lea rcx, [rsp + 0x2d0]
cmp qword [rsp + 0x2e8], 0xf
cmova rcx, qword [rsp + 0x2d0]
mov r8, qword [rsp + 0x2e0]
cmp r8, 6
jne 0x140039903
lea rdx, str.banned
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140039903
lea rdx, str.You_are_banned._Please_contact_support_for_further_assistance.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002fff0
lea rdx, [0x1400301f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x1400ca948]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rax, qword [r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f0], xmm0
movdqa xmm1, xmmword [0x1400cccb0]
movdqu xmmword [rsp + 0x300], xmm1
mov dword [rsp + 0x2f0], 0x64697768
mov byte [rsp + 0x2f4], 0
lea r8, [rsp + 0x2f0]
lea rdx, [rsp + 0x270]
mov rcx, r12
call qword [rax + 0x108]
nop
mov rdx, rax
lea rcx, [rsp + 0x310]
call fcn.14004e550
nop
mov rdx, qword [rsp + 0x288]
cmp rdx, 0xf
jbe 0x1400399a7
inc rdx
mov rcx, qword [rsp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400399a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400399a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x280], xmm6
mov byte [rsp + 0x270], 0
mov rdx, qword [rsp + 0x308]
cmp rdx, 0xf
jbe 0x1400399fe
inc rdx
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400399f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400399f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
movdqu xmmword [rsp + 0x300], xmm6
mov byte [rsp + 0x2f0], 0
cmp qword [rsp + 0x320], 0
jne 0x140039b55
lea rcx, [rsp + 0x370]
call fcn.1400370b0
nop
lea rcx, [rsp + 0x160]
call fcn.14004df20
nop
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x160]
call fcn.1400301d0
lea rcx, [rsp + 0x160]
call fcn.14002f570
mov rax, qword [rdi]
mov rbx, qword [rax + 0xc8]
lea rdx, str.UPDATE__keys__SET__status___activated___hwid_____WHERE__key____
lea rcx, [rsp + 0x270]
call fcn.14002f6d0
nop
lea rdx, [rsp + 0x270]
mov rcx, rdi
call rbx
mov rbx, rax
lea rcx, [rsp + 0x270]
call fcn.14002f670
mov rax, qword [rbx]
mov rsi, qword [rax + 0x198]
lea rdx, [rsp + 0x370]
lea rcx, [rsp + 0x2f0]
call fcn.14004e550
nop
lea r8, [rsp + 0x2f0]
mov edx, 1
mov rcx, rbx
call rsi
nop
lea rcx, [rsp + 0x2f0]
call fcn.14002f670
mov rax, qword [rbx]
mov rsi, qword [rax + 0x198]
lea rdx, [rsp + 0x2b0]
lea rcx, [rsp + 0x2f0]
call fcn.14004e550
nop
lea r8, [rsp + 0x2f0]
mov edx, 2
mov rcx, rbx
call rsi
nop
lea rcx, [rsp + 0x2f0]
call fcn.14002f670
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x130]
lea rdx, [rsp + 0x2b0]
mov rcx, rdi
call fcn.140037630
nop
lea rcx, [rsp + 0x160]
call fcn.14002e8f0
nop
lea rcx, [rsp + 0x370]
call fcn.14002f670
jmp 0x140039be4
lea rdx, str.C:ProgramDataWinLOG.txt
lea rcx, [rsp + 0x160]
call fcn.14004de10
nop
lea rcx, [rsp + 0x270]
call fcn.14002f710
nop
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x160]
call fcn.140050150
lea rcx, [rsp + 0x160]
call fcn.14004ddd0
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x310]
call fcn.14004fbd0
test al, al
je 0x140039ea8
lea rdx, [rsp + 0x2b0]
mov rcx, rdi
call fcn.140037630
nop
lea rcx, [rsp + 0x270]
call fcn.14002f670
nop
lea rcx, [rsp + 0x160]
call fcn.140033080
nop
mov rdx, qword [rsp + 0x328]
cmp rdx, 0xf
jbe 0x140039c2a
inc rdx
mov rcx, qword [rsp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039c25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039c25
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
mov qword [rsp + 0x320], r13
mov qword [rsp + 0x328], 0xf
mov byte [rsp + 0x310], 0
mov rdx, qword [rsp + 0x2e8]
cmp rdx, 0xf
jbe 0x140039c8c
inc rdx
mov rcx, qword [rsp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039c87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039c87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
mov qword [rsp + 0x2e0], r13
mov qword [rsp + 0x2e8], 0xf
mov byte [rsp + 0x2d0], 0
mov rax, qword [r12]
mov edx, 1
mov rcx, r12
call qword [rax]
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
mov rax, qword [rdi]
mov edx, 1
mov rcx, rdi
call qword [rax]
nop
mov rdx, qword [rsp + 0x2c8]
cmp rdx, 0xf
jbe 0x140039d18
inc rdx
mov rcx, qword [rsp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039d12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039d12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
nop
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x50], rax
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x4c], edx
lea rcx, [rsp + 0x60]
call fcn.14002f500
lea rcx, [rsp + 0x68]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x100]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 0xf
jbe 0x140039dab
inc rdx
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039da5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039da5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
nop
mov rdx, qword [rsp + 0x408]
cmp rdx, 0xf
jbe 0x140039df2
inc rdx
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039dec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039dec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
nop
mov rdx, qword [rsp + 0x368]
cmp rdx, 0xf
jbe 0x140039e39
inc rdx
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039e33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140039e33
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140053264
nop
lea rcx, [rsp + 0x410]
call fcn.14002f670
nop
lea rcx, [rsp + 0x4d8]
call fcn.14002f670
nop
lea rcx, [rsp + 0x478]
call fcn.14002f670
nop
lea rcx, [rsp + 0x498]
call fcn.14002f670
nop
mov rcx, qword [rsp + 0x4f8]
xor rcx, rsp
call fcn.140052e50
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rdx, str.User_could_not_be_verified.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002fff0
lea rdx, [0x1400301f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x1400ca948]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rdx, str.Use_this_key_for_another_product._Exiting...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002fff0
lea rdx, [0x1400301f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:Program_FilesWinRARkey.txt
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x1400ca948]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rdx, str.Error_67.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002fff0
lea rdx, [0x1400301f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x1400ca948]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str.Key_value_is_incorrect.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002fff0
lea rdx, [0x1400301f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x1400ca948]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
lea rdx, str.Server_has_issues._Closing_the_program.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002fff0
lea rdx, [0x1400301f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14003a091
lea rdx, str.Error:_Could_not_retrieve_server_status.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14002fff0
lea rdx, [0x1400301f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [0x1400ca948]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.14002e810
int3