Function at 0x1400089c0
Capabilities:
Create process on windows
Enumerate processes
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b0]
sub rsp, 0x3b0
mov rax, qword [0x14001f010]
xor rax, rsp
mov qword [rbp + 0x2a0], rax
xor esi, esi
mov dword [rsp + 0x30], esi
lea rcx, str.core.gg
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x244], xmm0
movups xmmword [rbp + 0x254], xmm0
movups xmmword [rbp + 0x264], xmm0
movups xmmword [rbp + 0x274], xmm0
movups xmmword [rbp + 0x284], xmm0
mov qword [rbp + 0x294], rax
mov dword [rbp + 0x29c], eax
mov dword [rbp + 0x240], 0x60
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rdi, rax
lea rdx, [rbp + 0x240]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfoEx]
mov dword [rbp + 0x264], 0xe16d9e
mov dword [rbp + 0x268], 0x4e7ee0
mov dword [rbp + 0x26c], 0xacc
mov qword [rbp + 0x270], 0x9cdd4d
lea rdx, [rbp + 0x240]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferInfoEx]
lea edx, [rsi + 4]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea r9d, [rsi + 2]
mov r8b, 0xf5
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rsi
lea r8d, [rsi + 0x38]
lea rdx, str.C:UsersAri_source_reposcore_cs2core_cs2x64Release_
lea rcx, [rbp - 0x60]
call fcn.14000cf90
nop
mov rdi, qword [rbp - 0x50]
lea rbx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae rbx, qword [rbp - 0x60]
call fcn.140010c6c
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140003220
lea r12d, [rsi + 0x30]
lea rcx, [rbp - 0x80]
call fcn.1400041a0
test al, al
sete bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140008b72
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008b6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008b6d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
lea r14, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
test bl, bl
je 0x140008e1f
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp]
call fcn.14000a8e0
nop
lea rdx, str.folder_not_found...creating_folder
lea rcx, [rbp + 0x10]
call fcn.140001eb0
lea rdx, [0x140014ed8]
lea rcx, [rbp + 0x10]
call fcn.140001eb0
mov rcx, rax
lea rdx, str.C:UsersAri_source_reposcore_cs2core_cs2injectormain.cpp
call fcn.140001eb0
mov rcx, rax
lea rdx, [0x140014ed4]
call fcn.140001eb0
mov rcx, rax
lea rdx, str.main
call fcn.140001eb0
mov rcx, rax
lea rdx, [0x140014ed4]
call fcn.140001eb0
mov edx, 0x65
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140014ed0]
call fcn.140001eb0
call fcn.140005fe0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140018db0]
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x80], 0
mov dword [rsp + 0x30], 0x80030
xor eax, eax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp + 0x88]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140008c7f
mov rax, qword [rbp + 0x58]
mov r8, qword [rax]
test r8, r8
je 0x140008c7f
mov rax, qword [rbp + 0x38]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x80]
cmovb r8, qword [rbp + 0x80]
sub r8, rdx
jmp 0x140008cb0
test cl, 4
jne 0x140008ca6
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax]
test rcx, rcx
je 0x140008ca6
mov rax, qword [rbp + 0x30]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x68]
movsxd r8, dword [rax]
add r8, rcx
sub r8, rdx
jmp 0x140008cb0
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x140008cbf
lea rcx, [rbp - 0x80]
call fcn.14000c030
nop
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r8, qword [rbp - 0x80]
mov edx, 1
mov rcx, rbx
call fcn.140005a50
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140008d1a
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008d14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008d14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx], r14
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 0x18]
call fcn.14000a820
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdi, qword [rbp - 0x50]
lea rbx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae rbx, qword [rbp - 0x60]
call fcn.140010c6c
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140003220
mov r12d, 0xc040030
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call fcn.140010ecc
shr rax, 0x20
test eax, eax
jne 0x14000a2a3
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140008df2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008ded
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008ded
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
lea r8, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r8, qword [rbp - 0x60]
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp]
call fcn.14000a8e0
nop
lea rdx, str.waiting_for_driver_to_be_installed
lea rcx, [rbp + 0x10]
call fcn.140001eb0
call fcn.140005fe0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140018db0]
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x80], 0
bts r12d, 7
mov dword [rsp + 0x30], r12d
xor eax, eax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp + 0x88]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140008eb6
mov rax, qword [rbp + 0x58]
mov r8, qword [rax]
test r8, r8
je 0x140008eb6
mov rax, qword [rbp + 0x38]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x80]
cmovb r8, qword [rbp + 0x80]
sub r8, rdx
jmp 0x140008ee7
test cl, 4
jne 0x140008edd
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax]
test rcx, rcx
je 0x140008edd
mov rax, qword [rbp + 0x30]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x68]
movsxd r8, dword [rax]
add r8, rcx
sub r8, rdx
jmp 0x140008ee7
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x140008ef5
lea rcx, [rbp - 0x80]
call fcn.14000c030
btr r12d, 7
or r12d, 0x40
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r8, qword [rbp - 0x80]
xor edx, edx
mov rcx, rbx
call fcn.140005a50
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140008f56
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008f50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008f50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx], r14
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 0x18]
call fcn.14000a820
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov r14, qword [rbp - 0x50]
movabs r13, 0x7fffffffffffffff
mov rax, r13
sub rax, r14
cmp rax, 0xe
jb 0x14000a2b6
lea r15, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r15, qword [rbp - 0x60]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rsi
lea rsi, [r14 + 0xe]
mov ebx, 0xf
lea rdi, [rbp - 0x20]
lea eax, [rbx + 7]
lea rdx, [rbx - 0x10]
cmp rsi, rbx
jbe 0x140009059
mov rbx, rsi
or rbx, 0xf
cmp rbx, r13
jbe 0x140008ffa
mov rbx, r13
jmp 0x140009001
cmp rbx, rax
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x140009044
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a2bc
mov rcx, rax
call fcn.140011830
test rax, rax
je 0x14000903d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140009055
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140009053
call fcn.140011830
mov rdi, rax
jmp 0x140009055
xor edi, edi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.uwu_driver.sys]
movsd qword [rdi + r14], xmm0
mov eax, dword [0x1400151f0]
mov dword [rdi + r14 + 8], eax
movzx eax, word [0x1400151f4]
mov word [rdi + r14 + 0xc], ax
mov byte [rdi + rsi], 0
bts r12d, 8
mov r14, qword [rbp - 0x50]
mov rax, r13
sub rax, r14
cmp rax, 8
jb 0x14000a2c2
lea r15, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r15, qword [rbp - 0x60]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x28], 0
lea rsi, [r14 + 8]
mov edi, 0xf
lea rbx, [rbp - 0x40]
cmp rsi, rdi
jbe 0x140009166
mov rdi, rsi
or rdi, 0xf
cmp rdi, r13
jbe 0x1400090fa
mov rdi, r13
jmp 0x140009107
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x140009151
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a29d
mov rcx, rax
call fcn.140011830
test rax, rax
je 0x14000914a
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140009162
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140009160
call fcn.140011830
mov rbx, rax
jmp 0x140009162
xor ebx, ebx
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], rdi
mov r8, r14
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movabs rax, 0x6c6c642e65726f63
mov qword [rbx + r14], rax
mov byte [rbx + rsi], 0
bts r12d, 9
movabs rsi, 0x7fffffffff67697f
nop dword [rax]
mov rdi, qword [rbp - 0x10]
lea rbx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rbx, qword [rbp - 0x20]
call fcn.140010c6c
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140003220
or r12d, 0xc
lea rcx, [rbp - 0x80]
call fcn.1400041a0
test al, al
sete bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000921f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000921a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009292
call fcn.14001186c
test bl, bl
je 0x140009299
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140009241
imul rax, rax, 0x64
jmp 0x14000925f
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rax, rsi
jge 0x14000927e
add rax, 0x989680
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x30]
call fcn.1400021d0
jmp 0x1400091a0
mov qword [rsp + 0x30], r13
lea rcx, [rsp + 0x30]
call fcn.1400021d0
jmp 0x1400091a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp]
call fcn.14000a8e0
nop
lea rdx, str.found_driver
lea rcx, [rbp + 0x10]
call fcn.140001eb0
call fcn.140005fe0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140018db0]
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x80], 0
bts r12d, 0xb
mov dword [rsp + 0x30], r12d
xor eax, eax
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp + 0x88]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140009330
mov rax, qword [rbp + 0x58]
mov r8, qword [rax]
test r8, r8
je 0x140009330
mov rax, qword [rbp + 0x38]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x80]
cmovb r8, qword [rbp + 0x80]
sub r8, rdx
jmp 0x140009361
test cl, 4
jne 0x140009357
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax]
test rcx, rcx
je 0x140009357
mov rax, qword [rbp + 0x30]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x68]
movsxd r8, dword [rax]
add r8, rcx
sub r8, rdx
jmp 0x140009361
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x14000936f
lea rcx, [rbp - 0x80]
call fcn.14000c030
btr r12d, 0xb
bts r12d, 0xa
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r8, qword [rbp - 0x80]
xor edx, edx
mov rcx, rbx
call fcn.140005a50
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1400093d1
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400093cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400093cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx], r14
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 0x18]
call fcn.14000a820
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop word [rax + rax]
mov rdi, qword [rbp - 0x30]
lea rbx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rbx, qword [rbp - 0x40]
call fcn.140010c6c
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp - 0x80]
call fcn.140003220
or r12d, 3
lea rcx, [rbp - 0x80]
call fcn.1400041a0
test al, al
sete bl
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000949f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000949a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400094bb
call fcn.14001186c
test bl, bl
je 0x1400094c2
mov qword [rsp + 0x30], 0xa
lea rcx, [rsp + 0x30]
call fcn.1400020c0
jmp 0x140009420
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp]
call fcn.14000a8e0
nop
lea rdx, str.found_module
lea rcx, [rbp + 0x10]
call fcn.140001eb0
call fcn.140005fe0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140018db0]
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x80], 0
bts r12d, 0xf
mov dword [rsp + 0x30], r12d
movups xmmword [rsp + 0x40], xmm0
mov rcx, qword [rbp + 0x88]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140009552
mov rax, qword [rbp + 0x58]
mov r8, qword [rax]
test r8, r8
je 0x140009552
mov rax, qword [rbp + 0x38]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x80]
cmovb r8, qword [rbp + 0x80]
sub r8, rdx
jmp 0x140009583
test cl, 4
jne 0x140009579
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax]
test rcx, rcx
je 0x140009579
mov rax, qword [rbp + 0x30]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x68]
movsxd r8, dword [rax]
add r8, rcx
sub r8, rdx
jmp 0x140009583
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x140009591
lea rcx, [rbp - 0x80]
call fcn.14000c030
btr r12d, 0xf
bts r12d, 0xe
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r8, qword [rbp - 0x80]
xor edx, edx
mov rcx, rbx
call fcn.140005a50
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1400095f3
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400095ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400095ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx], r14
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 0x18]
call fcn.14000a820
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp]
call fcn.14000a8e0
nop
lea rdx, str.searching_for_cs2
lea rcx, [rbp + 0x10]
call fcn.140001eb0
call fcn.140005fe0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140018db0]
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x80], 0
bts r12d, 0xd
mov dword [rsp + 0x30], r12d
movups xmmword [rsp + 0x40], xmm0
mov rcx, qword [rbp + 0x88]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x1400096c2
mov rax, qword [rbp + 0x58]
mov r8, qword [rax]
test r8, r8
je 0x1400096c2
mov rax, qword [rbp + 0x38]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x80]
cmovb r8, qword [rbp + 0x80]
sub r8, rdx
jmp 0x1400096f3
test cl, 4
jne 0x1400096e9
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax]
test rcx, rcx
je 0x1400096e9
mov rax, qword [rbp + 0x30]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x68]
movsxd r8, dword [rax]
add r8, rcx
sub r8, rdx
jmp 0x1400096f3
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x140009701
lea rcx, [rbp - 0x80]
call fcn.14000c030
btr r12d, 0xd
bts r12d, 0xc
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r8, qword [rbp - 0x80]
xor edx, edx
mov rcx, rbx
call fcn.140005a50
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140009763
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000975d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000975d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx], r14
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 0x18]
call fcn.14000a820
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
xor r13d, r13d
cmp dword [0x14001fde0], r13d
jne 0x14000997a
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rsp + 0x60]
call fcn.14000cd00
nop
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov r14, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x60]
cmp rax, 0xffffffffffffffff
je 0x140009921
mov dword [rbp], 0x238
lea rdx, [rbp]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140009921
lea rdx, [rbp]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x140009921
mov r15, qword [rsp + 0x70]
nop dword [rax]
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
lea rax, [rbp + 0x2c]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140009860
lea rdx, [rbp + 0x2c]
lea rcx, [rbp - 0x80]
call fcn.14000cd00
lea rax, [rsp + 0x60]
cmp r14, 8
cmovae rax, rsi
lea r8, [rbp - 0x80]
mov r10, qword [rbp - 0x68]
cmp r10, 8
setae r11b
mov r9, qword [rbp - 0x80]
cmovae r8, r9
mov rdx, qword [rbp - 0x70]
cmp rdx, r15
jne 0x1400098c8
test rdx, rdx
je 0x1400098c4
sub r8, rax
nop
movzx ecx, word [r8 + rax]
cmp cx, word [rax]
jne 0x1400098c8
add rax, 2
sub rdx, 1
jne 0x1400098b0
mov bl, 1
jmp 0x1400098ca
xor bl, bl
test r11b, r11b
je 0x140009904
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x1400098fc
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a12
mov rcx, r9
call fcn.14001186c
test bl, bl
jne 0x140009a0a
lea rdx, [rbp]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140009840
mov eax, r13d
mov dword [0x14001fde0], eax
cmp r14, 8
jb 0x14000996b
lea rdx, [r14*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000995d
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009a19
mov rcx, rsi
call fcn.14001186c
mov eax, dword [0x14001fde0]
test eax, eax
je 0x1400097b2
lea r14, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp]
call fcn.14000a8e0
nop
lea rdx, str.found_cs2
lea rcx, [rbp + 0x10]
call fcn.140001eb0
call fcn.140005fe0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140018db0]
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x80], 0
bts r12d, 0x11
mov dword [rsp + 0x30], r12d
movups xmmword [rsp + 0x40], xmm0
mov rcx, qword [rbp + 0x88]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140009a20
mov rax, qword [rbp + 0x58]
mov r8, qword [rax]
test r8, r8
je 0x140009a20
mov rax, qword [rbp + 0x38]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x80]
cmovb r8, qword [rbp + 0x80]
sub r8, rdx
jmp 0x140009a51
mov eax, dword [rbp + 8]
jmp 0x140009924
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test cl, 4
jne 0x140009a47
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax]
test rcx, rcx
je 0x140009a47
mov rax, qword [rbp + 0x30]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x68]
movsxd r8, dword [rax]
add r8, rcx
sub r8, rdx
jmp 0x140009a51
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
je 0x140009a5f
lea rcx, [rbp - 0x80]
call fcn.14000c030
btr r12d, 0x11
bts r12d, 0x10
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r8, qword [rbp - 0x80]
xor edx, edx
mov rcx, rbx
call fcn.140005a50
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140009ac1
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009abb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009abb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx], r14
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 0x18]
call fcn.14000a820
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov qword [rsp + 0x30], 1
lea rcx, [rsp + 0x30]
call fcn.14000cb30
call fcn.140001b60
mov qword [0x14001fde8], rax
test rax, rax
je 0x140009cd1
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp]
call fcn.14000a8e0
nop
lea rdx, str.hijacked_handle
lea rcx, [rbp + 0x10]
call fcn.140001eb0
call fcn.140005fe0
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140018db0]
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x80], 0
bts r12d, 0x17
mov dword [rsp + 0x30], r12d
movups xmmword [rsp + 0x40], xmm0
mov rcx, qword [rbp + 0x88]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140009bdf
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x140009bd8
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
mov rdi, rax
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov rbx, rax
cmp rax, qword [rbp + 0x80]
cmovb rbx, qword [rbp + 0x80]
sub rbx, rdi
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
jmp 0x140009c1c
mov rcx, qword [rbp + 0x88]
test cl, 4
jne 0x140009c12
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x140009c12
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
mov rdi, rax
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rbx, rax
sub rbx, rdi
jmp 0x140009c1c
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
test rdi, rdi
je 0x140009c30
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14000c030
btr r12d, 0x17
bts r12d, 0x16
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r8, qword [rbp - 0x80]
xor edx, edx
mov rcx, rsi
call fcn.140005a50
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140009c92
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009c8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009c8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx], r14
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 0x18]
call fcn.14000a820
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp - 0x40]
call fcn.1400063d0
xor edx, edx
mov r8d, 0x20001
lea rcx, str.C:WindowsMediaWindows_Unlock.wav
call qword [sym.imp.WINMM.dll_PlaySoundA]
lea rcx, [rbp - 0x20]
call fcn.140007400
test al, al
je 0x140009ea9
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp]
call fcn.14000a8e0
nop
lea rdx, str.mapped_driver
lea rcx, [rbp + 0x10]
call fcn.140001eb0
call fcn.140005fe0
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140018db0]
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x80], 0
bts r12d, 0x15
mov dword [rsp + 0x30], r12d
movups xmmword [rsp + 0x40], xmm0
mov rcx, qword [rbp + 0x88]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140009db7
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x140009db0
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
mov rdi, rax
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov rbx, rax
cmp rax, qword [rbp + 0x80]
cmovb rbx, qword [rbp + 0x80]
sub rbx, rdi
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
jmp 0x140009df4
mov rcx, qword [rbp + 0x88]
test cl, 4
jne 0x140009dea
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x140009dea
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
mov rdi, rax
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rbx, rax
sub rbx, rdi
jmp 0x140009df4
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
test rdi, rdi
je 0x140009e08
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14000c030
btr r12d, 0x15
bts r12d, 0x14
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r8, qword [rbp - 0x80]
xor edx, edx
mov rcx, rsi
call fcn.140005a50
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140009e6a
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009e64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009e64
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx], r14
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 0x18]
call fcn.14000a820
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov edi, dword [0x14001fde0]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtQueryCompositionSurfaceStatistics
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x140009eed
xor r9d, r9d
lea r8, str.NtQueryCompositionSurfaceStatistics
lea rdx, str.invalid
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov dword [rbp - 0x80], r13d
mov rcx, qword [0x14001fdf0]
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x78], rdi
mov dword [rbp - 0x68], 0xc0000001
lea rcx, [rbp - 0x80]
call rbx
cmp dword [rbp - 0x68], 0
jge 0x14000a123
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp]
call fcn.14000a8e0
nop
lea rdx, str.failed_to_call_driver
lea rcx, [rbp + 0x10]
call fcn.140001eb0
lea rdx, [0x140014ed8]
lea rcx, [rbp + 0x10]
call fcn.140001eb0
mov rcx, rax
lea rdx, str.C:UsersAri_source_reposcore_cs2core_cs2injectormain.cpp
call fcn.140001eb0
mov rcx, rax
lea rdx, [0x140014ed4]
call fcn.140001eb0
mov rcx, rax
lea rdx, str.main
call fcn.140001eb0
mov rcx, rax
lea rdx, [0x140014ed4]
call fcn.140001eb0
mov edx, 0x8f
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140014ed0]
call fcn.140001eb0
call fcn.140005fe0
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140018db0]
movdqu xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x80], 0
bts r12d, 0x19
mov dword [rsp + 0x30], r12d
movups xmmword [rsp + 0x40], xmm0
mov rcx, qword [rbp + 0x88]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x14000a037
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x14000a030
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
mov rdi, rax
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov rbx, rax
cmp rax, qword [rbp + 0x80]
cmovb rbx, qword [rbp + 0x80]
sub rbx, rdi
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
jmp 0x14000a074
mov rcx, qword [rbp + 0x88]
test cl, 4
jne 0x14000a06a
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x14000a06a
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
mov rdi, rax
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rbx, rax
sub rbx, rdi
jmp 0x14000a074
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
test rdi, rdi
je 0x14000a089
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14000c030
nop
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r8, qword [rbp - 0x80]
mov edx, 2
mov rcx, rsi
call fcn.140005a50
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14000a0e4
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a0de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a0de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx], r14
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 0x18]
call fcn.14000a820
lea rcx, [rbp + 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov ebx, 3
mov qword [rsp + 0x30], 1
lea rdx, [0x1400152b0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001eb0
lea rdx, str.closing_in
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001eb0
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, str._seconds
call fcn.140001eb0
lea rdx, [0x14000cbd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x30]
call fcn.14000cb30
dec ebx
test ebx, ebx
jg 0x14000a131
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14000a1cf
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a1ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a1ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14000a21d
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a218
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a218
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14000a26b
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a266
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a266
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001186c
xor eax, eax
mov rcx, qword [rbp + 0x2a0]
xor rcx, rsp
call fcn.140011810
lea r11, [rsp + 0x3b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001650
nop
lea r8, [rbp - 0x80]
mov edx, eax
lea rcx, str.create_directory
call fcn.140003f40
nop
call fcn.140002310
int3
call fcn.140001650
nop
call fcn.140002310
int3