Function at 0x140054b70
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Delete file
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x108]
sub rsp, 0x1f0
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x140153040]
xor rax, rsp
mov qword [rbp + 0xc8], rax
xor r15d, r15d
mov dword [rbp - 0x70], r15d
cmp dword [0x14016c3b0], 1
jne 0x14005638d
mov qword [rbp + 0x10], r15
lea r14, [0x1401530b8]
mov qword [rbp + 0x18], r14
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x70]
call fcn.140003110
mov dword [rbp - 0x70], 1
cmp dword [rbp + 0x10], r15d
jne 0x140057117
lea rax, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova rax, qword [rsp + 0x70]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp - 0x80]
mov qword [rbp + 0x18], rax
call fcn.140058a8c
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x10], xmm0
lea r8, [rbp + 0x10]
mov edx, eax
lea rcx, [rbp + 0x58]
call fcn.140007dd0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x140054c6f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140054c6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140054c6a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
movdqa xmm0, xmmword [0x140147560]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r15w
mov dword [rbp + 0x20], 0x2e734d1b
mov dword [rbp + 0x24], 0x6e6962
lea rax, [rbp + 0x21]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140054ca0
lea rdx, [rbp + 0x21]
lea rcx, [rbp + 0x58]
call fcn.140007470
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0xa8]
call fcn.140005d40
nop
lea rcx, [rbp + 0x88]
call fcn.14000af20
nop
lea rdx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0xf
cmova rdx, qword [rbp + 0x88]
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0xf
cmova rcx, qword [rbp + 0xa8]
mov rbx, qword [rbp + 0xb8]
cmp rbx, qword [rbp + 0x98]
jne 0x140054d1f
mov r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140054d8a
lea rdx, str.wa___war:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400082a0
lea rdx, [0x140008470]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0xf
cmova rdx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x98]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400096f0
lea rdx, [0x140008470]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [0x14016c3b0], r15d
mov rbx, qword [rbp + 0xb8]
test rbx, rbx
jne 0x140054db9
lea rdx, str.wa_empty
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400082a0
lea rdx, [0x140008470]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [0x14016c3b0], r15d
movsd xmm1, qword [0x140147458]
lea rcx, [rbp + 0x30]
call fcn.140054a10
mov esi, 0x1e
mov dword [rbp - 0x70], esi
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rcx, qword [rbp + 0x30]
xor edx, edx
lea r8d, [rsi + 4]
call fcn.1400186a0
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140054e2a
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140054e25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140054e25
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
movdqa xmm0, xmmword [0x140147570]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rcx, qword [0x14016c3e0]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
movss xmm6, dword [0x14014748c]
addss xmm0, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0xa8]
mov rcx, qword [rax + 0x50]
mov rcx, qword [rcx + 8]
call fcn.14001be30
mov rbx, qword [0x14016c3e0]
mov dword [rsp + 0x50], r15d
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rsp + 0x54], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rsp + 0x50]
call fcn.14002ddd0
mov dword [rbx + 0x16fc], 0x3f40c0c1
mov dword [rbx + 0x1700], 0x3f40c0c1
mov dword [rbx + 0x1704], 0x3f40c0c1
mov dword [rbx + 0x1708], 0x3f800000
movdqa xmm0, xmmword [0x140147770]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x61656843
mov dword [rbp - 0x7c], 0x6f4c2074
mov dword [rbp - 0x78], 0x72656461
mov byte [rbp - 0x74], 0
lea rcx, [rsp + 0x71]
call fcn.140044270
call fcn.14001bed0
mov rcx, qword [0x14016c3e0]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
subss xmm2, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rcx + 0xa8]
mov rcx, qword [rax + 0x50]
mov rcx, qword [rcx + 0x10]
call fcn.14001be30
movdqa xmm0, xmmword [str.HSelect_a_Cheat]
movdqu xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x51]
call fcn.140044270
mov rbx, qword [0x14016c3e0]
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x2ac]
subss xmm1, dword [rax + 0x11c]
mov dword [rbp + 0x10], 0x43480000
movss dword [rbp + 0x14], xmm1
mov dword [rbp + 0x20], 0x64697356
mov word [rbp + 0x24], 0x65
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, [rbp + 0x21]
call fcn.14000dc50
cmp dword [rbx + 0x1d6c], eax
jne 0x14005509a
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x1400550a9
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], r15d
lea r8, [rbp + 0x10]
mov edx, eax
lea rcx, [rbp + 0x21]
call fcn.1400157e0
mov qword [rbp + 0x10], 0
mov dword [rbp + 0x20], 0x6d6f4349
mov dword [rbp + 0x24], 0x20746162
mov dword [rbp + 0x28], 0x7473614d
mov word [rbp + 0x2c], 0x7265
mov byte [rbp + 0x2e], 0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x21]
call fcn.140044c30
test al, al
je 0x1400550fc
mov dword [0x14016c3f8], r15d
mov rdx, qword [0x14016c3e0]
mov rcx, qword [rdx + 0x1d18]
cmp byte [rdx + 0x1fa7], 0
je 0x140055151
cmp byte [rdx + 0x1fa6], 0
jne 0x140055151
mov eax, dword [rdx + 0x1f58]
mov edx, dword [rcx + 0x164]
cmp eax, edx
jne 0x140055142
test eax, eax
je 0x140055142
cmp edx, dword [rcx + 8]
jne 0x14005513e
cmp byte [rcx + 0xd1], 0
jne 0x140055142
mov al, 1
jmp 0x140055144
xor al, al
test al, al
je 0x140055249
jmp 0x140055221
mov eax, dword [rcx + 0x168]
test al, 1
je 0x140055249
cmp qword [rdx + 0x1d20], rcx
je 0x140055170
test al, al
jns 0x140055249
mov eax, dword [rdx + 0x1d6c]
test eax, eax
je 0x140055197
cmp eax, dword [rcx + 0x164]
je 0x140055197
cmp byte [rdx + 0x1d79], 0
jne 0x140055197
cmp eax, dword [rcx + 0x94]
jne 0x140055249
mov rax, qword [rdx + 0x1f50]
test rax, rax
je 0x1400551d3
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x1400551d3
cmp byte [rax + 0xd0], 0
je 0x1400551d3
cmp rax, qword [rcx + 0x3d8]
je 0x1400551d3
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x140055249
bt r8d, 0x1a
jb 0x140055249
mov rax, qword [rdx + 0x1f10]
cmp qword [rcx + 0x38], rax
je 0x1400551fc
mov rax, qword [rdx + 0x1d38]
test rax, rax
je 0x140055249
mov rax, qword [rax + 0x3d8]
cmp qword [rcx + 0x3d8], rax
jne 0x140055249
test byte [rdx + 0x1d54], 4
jne 0x140055249
mov eax, dword [rcx + 0x164]
cmp eax, dword [rcx + 8]
je 0x140055218
cmp eax, dword [rcx + 0x94]
jne 0x140055221
cmp byte [rcx + 0xd1], 0
jne 0x140055249
mov dword [rbp + 0x10], 0x6d6f4353
mov dword [rbp + 0x14], 0x20746162
mov dword [rbp + 0x18], 0x7473614d
mov word [rbp + 0x1c], 0x7265
mov byte [rbp + 0x1e], 0
lea rcx, [rbp + 0x11]
call fcn.14001cfd0
mov qword [rbp + 0x10], 0
mov dword [rbp + 0x20], 0x6465525c
mov dword [rbp + 0x24], 0x6374616d
mov dword [rbp + 0x28], 0x322068
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x21]
call fcn.140044c30
test al, al
je 0x140055281
mov dword [0x14016c3f8], 1
mov rdx, qword [0x14016c3e0]
mov rcx, qword [rdx + 0x1d18]
cmp byte [rdx + 0x1fa7], 0
je 0x1400552d6
cmp byte [rdx + 0x1fa6], 0
jne 0x1400552d6
mov eax, dword [rdx + 0x1f58]
mov edx, dword [rcx + 0x164]
cmp eax, edx
jne 0x1400552c7
test eax, eax
je 0x1400552c7
cmp edx, dword [rcx + 8]
jne 0x1400552c3
cmp byte [rcx + 0xd1], 0
jne 0x1400552c7
mov al, 1
jmp 0x1400552c9
xor al, al
test al, al
je 0x1400553c4
jmp 0x1400553a6
mov eax, dword [rcx + 0x168]
test al, 1
je 0x1400553c4
cmp qword [rdx + 0x1d20], rcx
je 0x1400552f5
test al, al
jns 0x1400553c4
mov eax, dword [rdx + 0x1d6c]
test eax, eax
je 0x14005531c
cmp eax, dword [rcx + 0x164]
je 0x14005531c
cmp byte [rdx + 0x1d79], 0
jne 0x14005531c
cmp eax, dword [rcx + 0x94]
jne 0x1400553c4
mov rax, qword [rdx + 0x1f50]
test rax, rax
je 0x140055358
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x140055358
cmp byte [rax + 0xd0], 0
je 0x140055358
cmp rax, qword [rcx + 0x3d8]
je 0x140055358
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x1400553c4
bt r8d, 0x1a
jb 0x1400553c4
mov rax, qword [rdx + 0x1f10]
cmp qword [rcx + 0x38], rax
je 0x140055381
mov rax, qword [rdx + 0x1d38]
test rax, rax
je 0x1400553c4
mov rax, qword [rax + 0x3d8]
cmp qword [rcx + 0x3d8], rax
jne 0x1400553c4
test byte [rdx + 0x1d54], 4
jne 0x1400553c4
mov eax, dword [rcx + 0x164]
cmp eax, dword [rcx + 8]
je 0x14005539d
cmp eax, dword [rcx + 0x94]
jne 0x1400553a6
cmp byte [rcx + 0xd1], 0
jne 0x1400553c4
mov dword [rbp + 0x10], 0x64655249
mov dword [rbp + 0x14], 0x6374616d
mov dword [rbp + 0x18], 0x322068
lea rcx, [rbp + 0x11]
call fcn.14001cfd0
mov qword [rbp + 0x10], 0
mov dword [rbp + 0x20], 0x31763154
mov dword [rbp + 0x24], 0x6c6f6c2e
mov byte [rbp + 0x28], 0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x21]
call fcn.140044c30
test al, al
je 0x1400553f9
mov dword [0x14016c3f8], 2
mov rdx, qword [0x14016c3e0]
mov rcx, qword [rdx + 0x1d18]
cmp byte [rdx + 0x1fa7], 0
je 0x14005544e
cmp byte [rdx + 0x1fa6], 0
jne 0x14005544e
mov eax, dword [rdx + 0x1f58]
mov edx, dword [rcx + 0x164]
cmp eax, edx
jne 0x14005543f
test eax, eax
je 0x14005543f
cmp edx, dword [rcx + 8]
jne 0x14005543b
cmp byte [rcx + 0xd1], 0
jne 0x14005543f
mov al, 1
jmp 0x140055441
xor al, al
test al, al
je 0x140055539
jmp 0x14005551e
mov eax, dword [rcx + 0x168]
test al, 1
je 0x140055539
cmp qword [rdx + 0x1d20], rcx
je 0x14005546d
test al, al
jns 0x140055539
mov eax, dword [rdx + 0x1d6c]
test eax, eax
je 0x140055494
cmp eax, dword [rcx + 0x164]
je 0x140055494
cmp byte [rdx + 0x1d79], 0
jne 0x140055494
cmp eax, dword [rcx + 0x94]
jne 0x140055539
mov rax, qword [rdx + 0x1f50]
test rax, rax
je 0x1400554d0
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x1400554d0
cmp byte [rax + 0xd0], 0
je 0x1400554d0
cmp rax, qword [rcx + 0x3d8]
je 0x1400554d0
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x140055539
bt r8d, 0x1a
jb 0x140055539
mov rax, qword [rdx + 0x1f10]
cmp qword [rcx + 0x38], rax
je 0x1400554f9
mov rax, qword [rdx + 0x1d38]
test rax, rax
je 0x140055539
mov rax, qword [rax + 0x3d8]
cmp qword [rcx + 0x3d8], rax
jne 0x140055539
test byte [rdx + 0x1d54], 4
jne 0x140055539
mov eax, dword [rcx + 0x164]
cmp eax, dword [rcx + 8]
je 0x140055515
cmp eax, dword [rcx + 0x94]
jne 0x14005551e
cmp byte [rcx + 0xd1], 0
jne 0x140055539
mov dword [rbp + 0x10], 0x31763173
mov dword [rbp + 0x14], 0x6c6f6c2e
mov byte [rbp + 0x18], 0
lea rcx, [rbp + 0x11]
call fcn.14001cfd0
mov word [rsp + 0x40], 2
lea rcx, [rsp + 0x41]
call fcn.140044270
mov word [rsp + 0x40], 0x7d
lea rcx, [rsp + 0x41]
call fcn.140044270
mov qword [rbp + 0x10], 0
mov dword [rbp + 0x20], 0x6f6c4327
mov word [rbp + 0x24], 0x6573
mov byte [rbp + 0x26], 0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x21]
call fcn.140044c30
test al, al
je 0x14005558e
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, qword [0x14016c3e0]
mov rcx, qword [rdx + 0x1d18]
cmp byte [rdx + 0x1fa7], 0
je 0x1400555e3
cmp byte [rdx + 0x1fa6], 0
jne 0x1400555e3
mov eax, dword [rdx + 0x1f58]
mov edx, dword [rcx + 0x164]
cmp eax, edx
jne 0x1400555d4
test eax, eax
je 0x1400555d4
cmp edx, dword [rcx + 8]
jne 0x1400555d0
cmp byte [rcx + 0xd1], 0
jne 0x1400555d4
mov al, 1
jmp 0x1400555d6
xor al, al
test al, al
je 0x1400556db
jmp 0x1400556b3
mov eax, dword [rcx + 0x168]
test al, 1
je 0x1400556db
cmp qword [rdx + 0x1d20], rcx
je 0x140055602
test al, al
jns 0x1400556db
mov eax, dword [rdx + 0x1d6c]
test eax, eax
je 0x140055629
cmp eax, dword [rcx + 0x164]
je 0x140055629
cmp byte [rdx + 0x1d79], 0
jne 0x140055629
cmp eax, dword [rcx + 0x94]
jne 0x1400556db
mov rax, qword [rdx + 0x1f50]
test rax, rax
je 0x140055665
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x140055665
cmp byte [rax + 0xd0], 0
je 0x140055665
cmp rax, qword [rcx + 0x3d8]
je 0x140055665
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x1400556db
bt r8d, 0x1a
jb 0x1400556db
mov rax, qword [rdx + 0x1f10]
cmp qword [rcx + 0x38], rax
je 0x14005568e
mov rax, qword [rdx + 0x1d38]
test rax, rax
je 0x1400556db
mov rax, qword [rax + 0x3d8]
cmp qword [rcx + 0x3d8], rax
jne 0x1400556db
test byte [rdx + 0x1d54], 4
jne 0x1400556db
mov eax, dword [rcx + 0x164]
cmp eax, dword [rcx + 8]
je 0x1400556aa
cmp eax, dword [rcx + 0x94]
jne 0x1400556b3
cmp byte [rcx + 0xd1], 0
jne 0x1400556db
movdqa xmm0, xmmword [0x140147bb0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x6f642073
mov dword [rsp + 0x64], 0x3f7365
lea rcx, [rsp + 0x51]
call fcn.14001cfd0
mov qword [rbp + 0x20], 0
mov dword [rbp + 0x10], 0x676f4c10
mov dword [rbp + 0x14], 0x74756f
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x11]
call fcn.140044c30
test al, al
je 0x140055854
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], r14
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x70]
call fcn.140003110
or esi, 0x40
mov dword [rbp - 0x70], esi
cmp dword [rbp + 0x20], 0
jne 0x140057108
lea rax, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
cmova rax, qword [rsp + 0x70]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp - 0x80]
mov qword [rbp + 0x28], rax
call fcn.140058a8c
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rbp + 0x30]
call fcn.140007dd0
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x1400557ac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400557a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400557a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
movdqa xmm0, xmmword [0x140147560]
movdqu xmmword [rbp - 0x80], xmm0
mov word [rsp + 0x70], r15w
mov dword [rbp + 0x20], 0x2e734d36
mov dword [rbp + 0x24], 0x6e6962
lea rax, [rbp + 0x21]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400557d1
mov r8, rdi
lea rdx, [rbp + 0x21]
lea rcx, [rbp + 0x30]
call fcn.140007470
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rcx, qword [rbp + 0x30]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov dword [0x14016c3b0], r15d
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140055843
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005583e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005583e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
movdqa xmm0, xmmword [0x140147570]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rdx, qword [0x14016c3e0]
mov rcx, qword [rdx + 0x1d18]
cmp byte [rdx + 0x1fa7], 0
je 0x1400558a9
cmp byte [rdx + 0x1fa6], 0
jne 0x1400558a9
mov eax, dword [rdx + 0x1f58]
mov edx, dword [rcx + 0x164]
cmp eax, edx
jne 0x14005589a
test eax, eax
je 0x14005589a
cmp edx, dword [rcx + 8]
jne 0x140055896
cmp byte [rcx + 0xd1], 0
jne 0x14005589a
mov al, 1
jmp 0x14005589c
xor al, al
test al, al
je 0x1400559aa
jmp 0x14005597d
mov eax, dword [rcx + 0x168]
test al, 1
je 0x1400559aa
cmp qword [rdx + 0x1d20], rcx
je 0x1400558c8
test al, al
jns 0x1400559aa
mov eax, dword [rdx + 0x1d6c]
test eax, eax
je 0x1400558ef
cmp eax, dword [rcx + 0x164]
je 0x1400558ef
cmp byte [rdx + 0x1d79], 0
jne 0x1400558ef
cmp eax, dword [rcx + 0x94]
jne 0x1400559aa
mov rax, qword [rdx + 0x1f50]
test rax, rax
je 0x14005592f
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x14005592f
cmp byte [rax + 0xd0], 0
je 0x14005592f
cmp rax, qword [rcx + 0x3d8]
je 0x14005592f
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x1400559aa
bt r8d, 0x1a
jb 0x1400559aa
mov rax, qword [rdx + 0x1f10]
cmp qword [rcx + 0x38], rax
je 0x140055958
mov rax, qword [rdx + 0x1d38]
test rax, rax
je 0x1400559aa
mov rax, qword [rax + 0x3d8]
cmp qword [rcx + 0x3d8], rax
jne 0x1400559aa
test byte [rdx + 0x1d54], 4
jne 0x1400559aa
mov eax, dword [rcx + 0x164]
cmp eax, dword [rcx + 8]
je 0x140055974
cmp eax, dword [rcx + 0x94]
jne 0x14005597d
cmp byte [rcx + 0xd1], 0
jne 0x1400559aa
movdqa xmm1, xmmword [0x140147f90]
movdqu xmmword [rbp + 0x30], xmm1
movdqa xmm2, xmmword [0x140147ad0]
movdqu xmmword [rbp + 0x40], xmm2
mov word [rbp + 0x50], 0x2179
mov byte [rbp + 0x52], 0
lea rcx, [rbp + 0x31]
call fcn.14001cfd0
call fcn.1400159f0
movss xmm1, dword [0x1401474fc]
xorps xmm0, xmm0
call fcn.14001c670
mov qword [rbp + 0x10], 0
mov dword [rbp + 0x20], 0x6d6f6378
mov dword [rbp + 0x24], 0x20746162
mov dword [rbp + 0x28], 0x7473616d
mov word [rbp + 0x2c], 0x7265
mov byte [rbp + 0x2e], 0
mov rbx, qword [0x14016c3e0]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, [rbp + 0x21]
call fcn.14000dc50
cmp dword [rbx + 0x1d6c], eax
jne 0x140055a2e
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x140055a3d
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], r15d
lea r8, [rbp + 0x10]
mov edx, eax
lea rcx, [rbp + 0x21]
call fcn.1400157e0
mov eax, dword [0x14016c3f8]
test eax, eax
jne 0x140055d20
call fcn.14001bed0
mov rax, qword [0x14016c3e0]
mov rcx, qword [rax + 0xa8]
mov rcx, qword [rcx + 0x50]
mov rcx, qword [rcx + 8]
call fcn.14001be30
movdqa xmm0, xmmword [0x140147910]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x74616568
mov byte [rsp + 0x64], 0
lea rcx, [rsp + 0x51]
call fcn.140057240
call fcn.14001bed0
mov rax, qword [0x14016c3e0]
mov rcx, qword [rax + 0xa8]
mov rcx, qword [rcx + 0x50]
mov rcx, qword [rcx + 0x10]
call fcn.14001be30
movdqa xmm0, xmmword [0x1401477c0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x7473614d
mov word [rsp + 0x64], 0x7265
mov byte [rsp + 0x66], 0
lea rcx, [rsp + 0x51]
call fcn.140057240
movdqa xmm0, xmmword [0x140147db0]
movdqu xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x140147cd0]
movdqu xmmword [rbp + 0x40], xmm1
mov dword [rbp + 0x50], 0x756e65
lea rcx, [rbp + 0x31]
call fcn.140057240
movdqa xmm0, xmmword [0x140147ef0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x51]
call fcn.140057240
movdqa xmm0, xmmword [0x140147be0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x21676e
lea rcx, [rsp + 0x51]
call fcn.140057240
mov rax, qword [0x14016c3e0]
mov rax, qword [rax + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140055b80
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400461d0
mov dword [rbp + 0x10], 0x6a6e495b
mov dword [rbp + 0x14], 0x746365
lea rcx, [rbp + 0x11]
call fcn.140057130
mov qword [rbp + 0x20], 0
mov dword [rbp + 0x10], 0x6a6e496d
mov dword [rbp + 0x14], 0x746365
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x11]
call fcn.140044c30
test al, al
je 0x140055bc3
call fcn.140009b20
mov rdx, qword [0x14016c3e0]
mov rcx, qword [rdx + 0x1d18]
cmp byte [rdx + 0x1fa7], 0
je 0x140055c27
cmp byte [rdx + 0x1fa6], 0
jne 0x140055c27
mov r8d, dword [rdx + 0x1f58]
mov eax, dword [rcx + 0x164]
cmp r8d, eax
jne 0x140055c0c
test r8d, r8d
je 0x140055c0c
cmp eax, dword [rcx + 8]
jne 0x140055c08
cmp byte [rcx + 0xd1], 0
jne 0x140055c0c
mov al, 1
jmp 0x140055c0e
xor al, al
test al, al
je 0x14005627c
movdqa xmm0, xmmword [0x140147b30]
lea rcx, [rbp + 0x31]
jmp 0x140056265
mov eax, dword [rcx + 0x168]
test al, 1
je 0x14005627c
cmp qword [rdx + 0x1d20], rcx
je 0x140055c46
test al, al
jns 0x14005627c
mov eax, dword [rdx + 0x1d6c]
test eax, eax
je 0x140055c6d
cmp eax, dword [rcx + 0x164]
je 0x140055c6d
cmp byte [rdx + 0x1d79], 0
jne 0x140055c6d
cmp eax, dword [rcx + 0x94]
jne 0x14005627c
mov rax, qword [rdx + 0x1f50]
test rax, rax
je 0x140055cb1
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x140055cb1
cmp byte [rax + 0xd0], 0
je 0x140055cb1
cmp rax, qword [rcx + 0x3d8]
je 0x140055cb1
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x14005627c
bt r8d, 0x1a
jb 0x14005627c
mov rax, qword [rdx + 0x1f10]
cmp qword [rcx + 0x38], rax
je 0x140055ce2
mov rax, qword [rdx + 0x1d38]
test rax, rax
je 0x14005627c
mov rax, qword [rax + 0x3d8]
cmp qword [rcx + 0x3d8], rax
jne 0x14005627c
test byte [rdx + 0x1d54], 4
jne 0x14005627c
mov eax, dword [rcx + 0x164]
cmp eax, dword [rcx + 8]
je 0x140055d02
cmp eax, dword [rcx + 0x94]
jne 0x140055d0f
cmp byte [rcx + 0xd1], 0
jne 0x14005627c
movdqa xmm0, xmmword [0x140147b30]
lea rcx, [rbp + 0x31]
jmp 0x140056265
cmp eax, 1
jne 0x140055fd0
call fcn.14001bed0
mov rax, qword [0x14016c3e0]
mov rcx, qword [rax + 0xa8]
mov rcx, qword [rcx + 0x50]
mov rcx, qword [rcx + 8]
call fcn.14001be30
movdqa xmm0, xmmword [0x140147a10]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x60], 0x74
lea rcx, [rsp + 0x51]
call fcn.140057240
call fcn.14001bed0
mov rax, qword [0x14016c3e0]
mov rcx, qword [rax + 0xa8]
mov rcx, qword [rcx + 0x50]
mov rcx, qword [rcx + 0x10]
call fcn.14001be30
movdqa xmm0, xmmword [0x140147ab0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x322068
lea rcx, [rsp + 0x51]
call fcn.140057240
movdqa xmm0, xmmword [0x140147dc0]
movdqu xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x140147cd0]
movdqu xmmword [rbp + 0x40], xmm1
mov dword [rbp + 0x50], 0x756e65
lea rcx, [rbp + 0x31]
call fcn.140057240
movdqa xmm0, xmmword [0x140147f00]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x51]
call fcn.140057240
movdqa xmm0, xmmword [0x140147bd0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x21676e
lea rcx, [rsp + 0x51]
call fcn.140057240
mov rax, qword [0x14016c3e0]
mov rax, qword [rax + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x140055e38
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400461d0
mov dword [rbp + 0x10], 0x6a6e493b
mov dword [rbp + 0x14], 0x746365
lea rcx, [rbp + 0x11]
call fcn.140057130
mov qword [rbp + 0x20], 0
mov dword [rbp + 0x10], 0x6a6e4968
mov dword [rbp + 0x14], 0x746365
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x11]
call fcn.140044c30
test al, al
je 0x140055e7b
call fcn.140009b20
mov rdx, qword [0x14016c3e0]
mov rcx, qword [rdx + 0x1d18]
cmp byte [rdx + 0x1fa7], 0
je 0x140055edb
cmp byte [rdx + 0x1fa6], 0
jne 0x140055edb
mov eax, dword [rcx + 0x164]
mov r8d, dword [rdx + 0x1f58]
cmp r8d, eax
jne 0x140055ec4
test r8d, r8d
je 0x140055ec4
cmp eax, dword [rcx + 8]
jne 0x140055ec0
cmp byte [rcx + 0xd1], 0
jne 0x140055ec4
mov al, 1
jmp 0x140055ec6
xor al, al
test al, al
je 0x14005627c
movdqa xmm0, xmmword [0x140147b10]
jmp 0x140056261
mov eax, dword [rcx + 0x168]
test al, 1
je 0x14005627c
cmp qword [rdx + 0x1d20], rcx
je 0x140055efa
test al, al
jns 0x14005627c
mov eax, dword [rdx + 0x1d6c]
test eax, eax
je 0x140055f21
cmp eax, dword [rcx + 0x164]
je 0x140055f21
cmp byte [rdx + 0x1d79], 0
jne 0x140055f21
cmp eax, dword [rcx + 0x94]
jne 0x14005627c
mov rax, qword [rdx + 0x1f50]
test rax, rax
je 0x140055f65
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x140055f65
cmp byte [rax + 0xd0], 0
je 0x140055f65
cmp rax, qword [rcx + 0x3d8]
je 0x140055f65
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x14005627c
bt r8d, 0x1a
jb 0x14005627c
mov rax, qword [rdx + 0x1f10]
cmp qword [rcx + 0x38], rax
je 0x140055f96
mov rax, qword [rdx + 0x1d38]
test rax, rax
je 0x14005627c
mov rax, qword [rax + 0x3d8]
cmp qword [rcx + 0x3d8], rax
jne 0x14005627c
test byte [rdx + 0x1d54], 4
jne 0x14005627c
mov eax, dword [rcx + 0x164]
cmp eax, dword [rcx + 8]
je 0x140055fb6
cmp eax, dword [rcx + 0x94]
jne 0x140055fc3
cmp byte [rcx + 0xd1], 0
jne 0x14005627c
movdqa xmm0, xmmword [0x140147b10]
jmp 0x140056261
cmp eax, 2
jne 0x14005627c
call fcn.14001bed0
mov rax, qword [0x14016c3e0]
mov rcx, qword [rax + 0xa8]
mov rcx, qword [rcx + 0x50]
mov rcx, qword [rcx + 8]
call fcn.14001be30
mov dword [rbp + 0x10], 0x31763124
mov dword [rbp + 0x14], 0x6c6f6c2e
mov dword [rbp + 0x18], 0x65684320
mov word [rbp + 0x1c], 0x7461
mov byte [rbp + 0x1e], 0
lea rcx, [rbp + 0x11]
call fcn.140057240
call fcn.14001bed0
mov rax, qword [0x14016c3e0]
mov rcx, qword [rax + 0xa8]
mov rcx, qword [rcx + 0x50]
mov rcx, qword [rcx + 0x10]
call fcn.14001be30
movdqa xmm0, xmmword [0x140147ca0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x51]
call fcn.140057240
movdqa xmm0, xmmword [0x140147da0]
movdqu xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x140147cd0]
movdqu xmmword [rbp + 0x40], xmm1
mov dword [rbp + 0x50], 0x756e65
lea rcx, [rbp + 0x31]
call fcn.140057240
movdqa xmm0, xmmword [0x140147f10]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x60], 0
lea rcx, [rsp + 0x51]
call fcn.140057240
movdqa xmm0, xmmword [0x140147bf0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x21676e
lea rcx, [rsp + 0x51]
call fcn.140057240
mov rax, qword [0x14016c3e0]
mov rax, qword [rax + 0x1d18]
cmp byte [rax + 0xd4], 0
jne 0x1400560ee
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.1400461d0
mov dword [rbp + 0x10], 0x6a6e4932
mov dword [rbp + 0x14], 0x746365
lea rcx, [rbp + 0x11]
call fcn.140057130
mov qword [rbp + 0x20], 0
mov dword [rbp + 0x10], 0x6a6e4974
mov dword [rbp + 0x14], 0x746365
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x11]
call fcn.140044c30
test al, al
je 0x140056131
call fcn.140009b20
mov rdx, qword [0x14016c3e0]
mov rcx, qword [rdx + 0x1d18]
cmp byte [rdx + 0x1fa7], 0
je 0x140056189
cmp byte [rdx + 0x1fa6], 0
jne 0x140056189
mov r8d, dword [rdx + 0x1f58]
mov eax, dword [rcx + 0x164]
cmp r8d, eax
jne 0x14005617a
test r8d, r8d
je 0x14005617a
cmp eax, dword [rcx + 8]
jne 0x140056176
cmp byte [rcx + 0xd1], 0
jne 0x14005617a
mov al, 1
jmp 0x14005617c
xor al, al
test al, al
je 0x14005627c
jmp 0x140056259
mov eax, dword [rcx + 0x168]
test al, 1
je 0x14005627c
cmp qword [rdx + 0x1d20], rcx
je 0x1400561a8
test al, al
jns 0x14005627c
mov eax, dword [rdx + 0x1d6c]
test eax, eax
je 0x1400561cf
cmp eax, dword [rcx + 0x164]
je 0x1400561cf
cmp byte [rdx + 0x1d79], 0
jne 0x1400561cf
cmp eax, dword [rcx + 0x94]
jne 0x14005627c
mov rax, qword [rdx + 0x1f50]
test rax, rax
je 0x14005620b
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x14005620b
cmp byte [rax + 0xd0], 0
je 0x14005620b
cmp rax, qword [rcx + 0x3d8]
je 0x14005620b
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x14005627c
bt r8d, 0x1a
jb 0x14005627c
mov rax, qword [rdx + 0x1f10]
cmp qword [rcx + 0x38], rax
je 0x140056234
mov rax, qword [rdx + 0x1d38]
test rax, rax
je 0x14005627c
mov rax, qword [rax + 0x3d8]
cmp qword [rcx + 0x3d8], rax
jne 0x14005627c
test byte [rdx + 0x1d54], 4
jne 0x14005627c
mov eax, dword [rcx + 0x164]
cmp eax, dword [rcx + 8]
je 0x140056250
cmp eax, dword [rcx + 0x94]
jne 0x140056259
cmp byte [rcx + 0xd1], 0
jne 0x14005627c
movdqa xmm0, xmmword [0x140147b20]
lea rcx, [rbp + 0x31]
movdqa xmm1, xmmword [str.ame_is_running_]
movdqu xmmword [rbp + 0x30], xmm0
movdqu xmmword [rbp + 0x40], xmm1
call fcn.14001cfd0
call fcn.1400159f0
call fcn.14001bed0
call fcn.14001b710
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0xf
jbe 0x1400562d0
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400562cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400562cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
mov qword [rbp + 0x98], r15
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x14005632d
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056328
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140056328
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
mov qword [rbp + 0xb8], r15
mov qword [rbp + 0xc0], 0xf
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x1400570ce
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056383
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140056383
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
jmp 0x1400570ce
movsd xmm1, qword [0x140147458]
lea rcx, [rbp + 0x30]
call fcn.140054a10
nop
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rcx, qword [rbp + 0x30]
xor edx, edx
lea r8d, [rdx + 0x22]
call fcn.1400186a0
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x1400563f7
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400563f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400563f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059518
movdqa xmm0, xmmword [0x140147570]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rcx, qword [0x14016c3e0]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
movss xmm7, dword [0x14014748c]
addss xmm0, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0xa8]
mov rcx, qword [rax + 0x50]
mov rcx, qword [rcx + 8]
call fcn.14001be30
movaps xmm6, xmmword [0x1401478d0]
mov rbx, qword [0x14016c3e0]
mov dword [rsp + 0x50], r15d
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rsp + 0x54], xmm0
lea rcx, [rbx + 0x1e70]
lea rdx, [rsp + 0x50]
call fcn.14002ddd0
movups xmmword [rbx + 0x16fc], xmm6
movdqa xmm0, xmmword [0x140147760]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x80], 0x61656843
mov dword [rbp - 0x7c], 0x6f4c2074
mov dword [rbp - 0x78], 0x72656461
mov byte [rbp - 0x74], 0
lea rcx, [rsp + 0x71]
call fcn.140044270
call fcn.14001bed0
mov rcx, qword [0x14016c3e0]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
subss xmm2, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rcx + 0xa8]
mov rcx, qword [rax + 0x50]
mov rcx, qword [rcx + 0x10]
call fcn.14001be30
movdqa xmm0, xmmword [0x1401477e0]
movdqu xmmword [rbp + 0x58], xmm0
movdqa xmm1, xmmword [0x140147e00]
movdqu xmmword [rbp + 0x68], xmm1
movdqa xmm0, xmmword [str.est_every_week_]
movdqu xmmword [rbp + 0x78], xmm0
lea rcx, [rbp + 0x59]
call fcn.140044270
mov word [rsp + 0x40], 0x13
lea rcx, [rsp + 0x41]
call fcn.140044270
mov dword [rbp + 0x20], 0x79654b67
mov word [rbp + 0x24], 0x3a
lea rcx, [rbp + 0x21]
call fcn.140044270
mov rcx, qword [0x14016c3e0]
mov rdx, qword [rcx + 0x1d18]
movss xmm0, dword [rdx + 0x2a8]
cmp qword [rdx + 0x1e8], 0
jne 0x140056645
cmp qword [rcx + 0x2178], 0
je 0x14005664d
movss xmm0, dword [rdx + 0x278]
subss xmm0, dword [rdx + 0x118]
call fcn.14001c720
mov qword [rbp + 0x10], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r12, [0x14016c540]
mov r8, r12
xor edx, edx
lea rcx, [0x14005cd29]
call fcn.1400493e0
mov rcx, qword [0x14016c3e0]
mov rdx, qword [rcx + 0x1d18]
cmp byte [rcx + 0x1fa7], 0
je 0x1400566f0
cmp byte [rcx + 0x1fa6], 0
jne 0x1400566f0
mov r8d, dword [rdx + 0x164]
mov eax, dword [rcx + 0x1f58]
cmp eax, r8d
jne 0x1400566e1
test eax, eax
je 0x1400566e1
cmp r8d, dword [rdx + 8]
jne 0x1400566dd
cmp byte [rdx + 0xd1], 0
jne 0x1400566e1
mov al, 1
jmp 0x1400566e3
xor al, al
test al, al
je 0x1400567f0
jmp 0x1400567c4
mov eax, dword [rdx + 0x168]
test al, 1
je 0x1400567f0
cmp qword [rcx + 0x1d20], rdx
je 0x14005670f
test al, al
jns 0x1400567f0
mov eax, dword [rcx + 0x1d6c]
test eax, eax
je 0x140056736
cmp eax, dword [rdx + 0x164]
je 0x140056736
cmp byte [rcx + 0x1d79], 0
jne 0x140056736
cmp eax, dword [rdx + 0x94]
jne 0x1400567f0
mov rax, qword [rcx + 0x1f50]
test rax, rax
je 0x140056776
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x140056776
cmp byte [rax + 0xd0], 0
je 0x140056776
cmp rax, qword [rdx + 0x3d8]
je 0x140056776
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x1400567f0
bt r8d, 0x1a
jb 0x1400567f0
mov rax, qword [rcx + 0x1f10]
cmp qword [rdx + 0x38], rax
je 0x14005679f
mov rax, qword [rcx + 0x1d38]
test rax, rax
je 0x1400567f0
mov rax, qword [rax + 0x3d8]
cmp qword [rdx + 0x3d8], rax
jne 0x1400567f0
test byte [rcx + 0x1d54], 4
jne 0x1400567f0
mov eax, dword [rdx + 0x164]
cmp eax, dword [rdx + 8]
je 0x1400567bb
cmp eax, dword [rdx + 0x94]
jne 0x1400567c4
cmp byte [rdx + 0xd1], 0
jne 0x1400567f0
movdqa xmm0, xmmword [0x1401477d0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x65726568
mov byte [rsp + 0x64], 0
lea rcx, [rsp + 0x51]
call fcn.14001cfd0
mov rcx, qword [0x14016c3e0]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x58]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
subss xmm0, dword [0x1401474c8]
movss xmm7, dword [0x1401473ec]
mulss xmm0, xmm7
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov dword [rbp + 0x10], 0x43160000
mov dword [rbp + 0x14], 0x42480000
mov dword [rbp + 0x20], 0x7465476e
mov dword [rbp + 0x24], 0x65724620
mov dword [rbp + 0x28], 0x654b2065
mov word [rbp + 0x2c], 0x79
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x21]
call fcn.140044c30
test al, al
je 0x140056a7b
mov cl, 0x53
mov word [rbp - 0x60], 0x53
movsx esi, cl
movzx r14d, si
xor r14w, 0x3b
mov word [rbp - 0x5e], r14w
movzx edi, si
xor di, 0x27
mov word [rbp - 0x5c], di
mov word [rbp - 0x5a], di
movzx eax, si
xor ax, 0x23
mov word [rbp - 0x58], ax
movzx eax, si
xor ax, 0x20
mov word [rbp - 0x56], ax
movzx eax, si
xor ax, 0x69
mov word [rbp - 0x54], ax
movzx r10d, si
xor r10w, 0x7c
mov word [rbp - 0x52], r10w
mov word [rbp - 0x50], r10w
movzx eax, si
xor ax, 0x3f
mov word [rbp - 0x4e], ax
movzx eax, si
xor ax, 0x3a
mov word [rbp - 0x4c], ax
movzx ecx, si
xor cx, 0x3d
mov word [rbp - 0x4a], cx
movzx ebx, si
xor bx, 0x38
mov word [rbp - 0x48], bx
movzx r11d, si
xor r11w, 0x7e
mov word [rbp - 0x46], r11w
mov word [rbp - 0x44], di
movzx eax, si
xor ax, 0x32
mov word [rbp - 0x42], ax
movzx r9d, si
xor r9w, 0x21
mov word [rbp - 0x40], r9w
movzx edx, si
xor dx, 0x34
mov word [rbp - 0x3e], dx
movzx r8d, si
xor r8w, 0x36
mov word [rbp - 0x3c], r8w
mov word [rbp - 0x3a], di
movzx eax, si
xor ax, 0x7d
mov word [rbp - 0x38], ax
mov word [rbp - 0x36], cx
mov word [rbp - 0x34], r8w
mov word [rbp - 0x32], di
mov word [rbp - 0x30], r10w
movzx eax, si
xor ax, 0x66
mov word [rbp - 0x2e], ax
movzx eax, si
xor ax, 0x64
mov word [rbp - 0x2c], ax
movzx eax, si
xor ax, 0x60
mov word [rbp - 0x2a], ax
movzx eax, si
xor ax, 0x67
mov word [rbp - 0x28], ax
movzx eax, si
xor ax, 0x62
mov word [rbp - 0x26], ax
movzx eax, si
xor ax, 0x65
mov word [rbp - 0x24], ax
mov word [rbp - 0x22], r10w
mov word [rbp - 0x20], dx
mov word [rbp - 0x1e], r8w
mov word [rbp - 0x1c], di
mov word [rbp - 0x1a], r11w
movzx ecx, si
xor cx, 0x2a
mov word [rbp - 0x18], cx
movzx eax, si
xor ax, 0x3c
mov word [rbp - 0x16], ax
xor si, 0x26
mov word [rbp - 0x14], si
mov word [rbp - 0x12], r9w
mov word [rbp - 0x10], r11w
mov word [rbp - 0xe], bx
mov word [rbp - 0xc], r8w
mov word [rbp - 0xa], cx
mov word [rbp - 8], r11w
mov word [rbp - 6], r14w
mov word [rbp - 4], r8w
mov word [rbp - 2], r9w
mov word [rbp], r8w
mov word [rbp + 2], r15w
mov cl, 0x7b
mov word [rbp + 0x10], 0x7b
movsx ecx, cl
movzx eax, cx
xor ax, 0x14
mov word [rbp + 0x12], ax
movzx eax, cx
xor ax, 0xb
mov word [rbp + 0x14], ax
movzx eax, cx
xor ax, 0x1e
mov word [rbp + 0x16], ax
xor cx, 0x15
mov word [rbp + 0x18], cx
mov word [rbp + 0x1a], r15w
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [rbp - 0x5e]
lea rdx, [rbp + 0x12]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [0x14016c3e0]
mov rcx, qword [rdx + 0x1d18]
cmp byte [rdx + 0x1fa7], 0
je 0x140056ad3
cmp byte [rdx + 0x1fa6], 0
jne 0x140056ad3
mov r8d, dword [rcx + 0x164]
mov eax, dword [rdx + 0x1f58]
cmp eax, r8d
jne 0x140056ac4
test eax, eax
je 0x140056ac4
cmp r8d, dword [rcx + 8]
jne 0x140056ac0
cmp byte [rcx + 0xd1], 0
jne 0x140056ac4
mov al, 1
jmp 0x140056ac6
xor al, al
test al, al
je 0x140056bfa
jmp 0x140056baf
mov eax, dword [rcx + 0x168]
test al, 1
je 0x140056bfa
cmp qword [rdx + 0x1d20], rcx
je 0x140056af2
test al, al
jns 0x140056bfa
mov eax, dword [rdx + 0x1d6c]
test eax, eax
je 0x140056b19
cmp eax, dword [rcx + 0x164]
je 0x140056b19
cmp byte [rdx + 0x1d79], 0
jne 0x140056b19
cmp eax, dword [rcx + 0x94]
jne 0x140056bfa
mov rax, qword [rdx + 0x1f50]
test rax, rax
je 0x140056b5d
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x140056b5d
cmp byte [rax + 0xd0], 0
je 0x140056b5d
cmp rax, qword [rcx + 0x3d8]
je 0x140056b5d
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x140056bfa
bt r8d, 0x1a
jb 0x140056bfa
mov rax, qword [rdx + 0x1f10]
cmp qword [rcx + 0x38], rax
je 0x140056b8a
mov rax, qword [rdx + 0x1d38]
test rax, rax
je 0x140056bfa
mov rax, qword [rax + 0x3d8]
cmp qword [rcx + 0x3d8], rax
jne 0x140056bfa
test byte [rdx + 0x1d54], 4
jne 0x140056bfa
mov eax, dword [rcx + 0x164]
cmp eax, dword [rcx + 8]
je 0x140056ba6
cmp eax, dword [rcx + 0x94]
jne 0x140056baf
cmp byte [rcx + 0xd1], 0
jne 0x140056bfa
movdqa xmm0, xmmword [0x1401477a0]
movdqu xmmword [rbp + 0x58], xmm0
movdqa xmm1, xmmword [0x140147d90]
movdqu xmmword [rbp + 0x68], xmm1
mov dword [rbp + 0x78], 0x74656720
mov dword [rbp + 0x7c], 0x756f7920
mov dword [rbp + 0x80], 0x656b2072
mov word [rbp + 0x84], 0x2e79
mov byte [rbp + 0x86], 0
lea rcx, [rbp + 0x59]
call fcn.14001cfd0
movss xmm6, dword [0x1401474fc]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14001c670
mov word [rsp + 0x40], 0x14
lea rcx, [rsp + 0x41]
call fcn.140044270
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14001c670
mov dword [rbp + 0x10], 0x43160000
mov dword [rbp + 0x14], 0x42480000
mov dword [rbp + 0x20], 0x746e4579
mov word [rbp + 0x24], 0x7265
mov byte [rbp + 0x26], 0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x21]
call fcn.140044c30
test al, al
je 0x140056d8b
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], r15
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [r12 + rdi], 0
jne 0x140056c73
mov r8, rdi
mov rdx, r12
lea rcx, [rbp + 0x30]
call fcn.140008ed0
lea rcx, [rbp + 0x30]
call fcn.14000a100
test al, al
je 0x140056ca8
mov dword [0x14016c3b0], 1
jmp 0x140056d8b
mov cl, 0x22
mov word [rbp + 0x10], 0x22
movsx ecx, cl
movzx eax, cx
xor ax, 0x67
mov word [rbp + 0x12], ax
movzx eax, cx
xor ax, 0x50
mov word [rbp + 0x14], ax
mov word [rbp + 0x16], ax
xor cx, 0x4d
mov word [rbp + 0x18], cx
mov word [rbp + 0x1a], ax
mov word [rbp + 0x1c], r15w
mov cl, 0x28
mov word [rsp + 0x70], 0x28
movsx ecx, cl
movzx eax, cx
xor ax, 0x61
mov word [rsp + 0x72], ax
movzx eax, cx
xor ax, 0x46
mov word [rsp + 0x74], ax
movzx eax, cx
xor ax, 0x5e
mov word [rsp + 0x76], ax
movzx eax, cx
xor ax, 0x49
mov word [rsp + 0x78], ax
movzx eax, cx
xor ax, 0x44
mov word [rsp + 0x7a], ax
movzx eax, cx
xor ax, 0x41
mov word [rsp + 0x7c], ax
movzx eax, cx
xor ax, 0x4c
mov word [rsp + 0x7e], ax
movzx eax, cx
xor ax, 8
mov word [rbp - 0x80], ax
movzx eax, cx
xor ax, 0x63
mov word [rbp - 0x7e], ax
movzx eax, cx
xor ax, 0x4d
mov word [rbp - 0x7c], ax
movzx eax, cx
xor ax, 0x51
mov word [rbp - 0x7a], ax
xor cx, 9
mov word [rbp - 0x78], cx
mov word [rbp - 0x76], r15w
xor r9d, r9d
lea r8, [rbp + 0x12]
lea rdx, [rsp + 0x72]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [0x14016c3e0]
mov rdx, qword [rcx + 0x1d18]
cmp byte [rcx + 0x1fa7], 0
je 0x140056de3
cmp byte [rcx + 0x1fa6], 0
jne 0x140056de3
mov eax, dword [rcx + 0x1f58]
mov r8d, dword [rdx + 0x164]
cmp eax, r8d
jne 0x140056dd4
test eax, eax
je 0x140056dd4
cmp r8d, dword [rdx + 8]
jne 0x140056dd0
cmp byte [rdx + 0xd1], 0
jne 0x140056dd4
mov al, 1
jmp 0x140056dd6
xor al, al
test al, al
je 0x140056ed2
jmp 0x140056eb3
mov eax, dword [rdx + 0x168]
test al, 1
je 0x140056ed2
cmp qword [rcx + 0x1d20], rdx
je 0x140056e02
test al, al
jns 0x140056ed2
mov eax, dword [rcx + 0x1d6c]
test eax, eax
je 0x140056e29
cmp eax, dword [rdx + 0x164]
je 0x140056e29
cmp byte [rcx + 0x1d79], 0
jne 0x140056e29
cmp eax, dword [rdx + 0x94]
jne 0x140056ed2
mov rax, qword [rcx + 0x1f50]
test rax, rax
je 0x140056e65
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x140056e65
cmp byte [rax + 0xd0], 0
je 0x140056e65
cmp rax, qword [rdx + 0x3d8]
je 0x140056e65
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x140056ed2
bt r8d, 0x1a
jb 0x140056ed2
mov rax, qword [rcx + 0x1f10]
cmp qword [rdx + 0x38], rax
je 0x140056e8e
mov rax, qword [rcx + 0x1d38]
test rax, rax
je 0x140056ed2
mov rax, qword [rax + 0x3d8]
cmp qword [rdx + 0x3d8], rax
jne 0x140056ed2
test byte [rcx + 0x1d54], 4
jne 0x140056ed2
mov eax, dword [rdx + 0x164]
cmp eax, dword [rdx + 8]
je 0x140056eaa
cmp eax, dword [rdx + 0x94]
jne 0x140056eb3
cmp byte [rdx + 0xd1], 0
jne 0x140056ed2
movdqa xmm0, xmmword [str.2Check_your_key]
movdqu xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x51]
call fcn.14001cfd0
mov rcx, qword [0x14016c3e0]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x58]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
subss xmm0, dword [0x1401474bc]
mulss xmm0, xmm7
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov dword [rbp + 0x10], 0x43160000
mov dword [rbp + 0x14], 0x42480000
mov dword [rbp + 0x20], 0x6f6c434a
mov word [rbp + 0x24], 0x6573
mov byte [rbp + 0x26], 0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x21]
call fcn.140044c30
test al, al
je 0x140056f78
lea rcx, [0x14016b7b8]
call fcn.140007460
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
call fcn.14000b050
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, qword [0x14016c3e0]
mov rcx, qword [rdx + 0x1d18]
cmp byte [rdx + 0x1fa7], 0
je 0x140056fd0
cmp byte [rdx + 0x1fa6], 0
jne 0x140056fd0
mov r8d, dword [rdx + 0x1f58]
mov eax, dword [rcx + 0x164]
cmp r8d, eax
jne 0x140056fc1
test r8d, r8d
je 0x140056fc1
cmp eax, dword [rcx + 8]
jne 0x140056fbd
cmp byte [rcx + 0xd1], 0
jne 0x140056fc1
mov al, 1
jmp 0x140056fc3
xor al, al
test al, al
je 0x1400570c4
jmp 0x1400570a0
mov eax, dword [rcx + 0x168]
test al, 1
je 0x1400570c4
cmp qword [rdx + 0x1d20], rcx
je 0x140056fef
test al, al
jns 0x1400570c4
mov eax, dword [rdx + 0x1d6c]
test eax, eax
je 0x140057016
cmp eax, dword [rcx + 0x164]
je 0x140057016
cmp byte [rdx + 0x1d79], 0
jne 0x140057016
cmp eax, dword [rcx + 0x94]
jne 0x1400570c4
mov rax, qword [rdx + 0x1f50]
test rax, rax
je 0x140057052
mov rax, qword [rax + 0x3d8]
test rax, rax
je 0x140057052
cmp byte [rax + 0xd0], 0
je 0x140057052
cmp rax, qword [rcx + 0x3d8]
je 0x140057052
mov r8d, dword [rax + 0xc]
bt r8d, 0x1b
jb 0x1400570c4
bt r8d, 0x1a
jb 0x1400570c4
mov rax, qword [rdx + 0x1f10]
cmp qword [rcx + 0x38], rax
je 0x14005707b
mov rax, qword [rdx + 0x1d38]
test rax, rax
je 0x1400570c4
mov rax, qword [rax + 0x3d8]
cmp qword [rcx + 0x3d8], rax
jne 0x1400570c4
test byte [rdx + 0x1d54], 4
jne 0x1400570c4
mov eax, dword [rcx + 0x164]
cmp eax, dword [rcx + 8]
je 0x140057097
cmp eax, dword [rcx + 0x94]
jne 0x1400570a0
cmp byte [rcx + 0xd1], 0
jne 0x1400570c4
movdqa xmm0, xmmword [0x140147e50]
movdqu xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x60], 0x6d61
mov byte [rsp + 0x62], 0
lea rcx, [rsp + 0x51]
call fcn.14001cfd0
call fcn.14001bed0
call fcn.14001b710
mov rcx, qword [rbp + 0xc8]
xor rcx, rsp
call fcn.140059220
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x20]
call fcn.140002ce0
nop
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x10]
call fcn.140002ce0
int3