Function at 0x14000bd80
Capabilities:
Encode data using base64
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x240
mov rax, qword [0x1400f5080]
xor rax, rsp
mov qword [rsp + 0x238], rax
xor r14d, r14d
vpxor xmm0, xmm0, xmm0
vmovups ymmword [rsp + 0x1c0], ymm0
mov ebx, r14d
lea rdi, str.abcdefghi9182345jklmnopqrstuv211935960473wxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
vzeroupper
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
movsxd rax, r8d
movzx ecx, word [rdi + rax*2]
add word [rsp + rbx*2 + 0x1c0], cx
inc rbx
cmp rbx, 0xf
jne 0x14000bdc4
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rcx, [0x1400f6cb0]
call fcn.140069cc0
lea rdx, [0x1400da198]
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, str.______________________________________________n
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, str._____________________________________________n
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, str.________________________________________n
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, str.________________________________n
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, str.___________________________________n
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, str._________________________________________beta_____n
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, str._________________________________________________n
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, str.___________________________________________________n
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x1a0], xmm0
vmovdqu xmm1, xmmword [0x1400e1f30]
vmovdqu xmmword [rsp + 0x1b0], xmm1
mov byte [rsp + 0x1a0], r14b
lea rdx, str._n__1__Login__2__Register__Choose_option:
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x120], xmm0
vmovdqu xmm1, xmmword [0x1400e1f30]
vmovdqu xmmword [rsp + 0x130], xmm1
mov byte [rsp + 0x120], 0
vmovups xmmword [rsp + 0x180], xmm0
vmovdqu xmmword [rsp + 0x190], xmm1
mov byte [rsp + 0x180], 0
vmovups xmmword [rsp + 0x100], xmm0
vmovdqu xmmword [rsp + 0x110], xmm1
mov byte [rsp + 0x100], 0
lea rdx, [rsp + 0xf0]
mov rcx, qword [0x1400cb4f8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rsp + 0xf0]
sub ecx, 1
je 0x14000c1c6
sub ecx, 1
je 0x14000c097
sub ecx, 1
je 0x14000bffd
cmp ecx, 1
mov rcx, qword [0x1400cb4e8]
je 0x14000bfb7
lea rdx, str._n_n____Error
call fcn.14000d250
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str._n_Enter_license:
call fcn.14000d250
lea rdx, [rsp + 0x100]
mov rcx, qword [0x1400cb4f8]
call fcn.14000d420
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x60]
call fcn.140009cc0
mov rdx, rax
lea rcx, [0x1400f6cb0]
call fcn.14006b610
jmp 0x14000c261
lea rdx, str._n_____Enter_username:
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [rsp + 0x120]
mov rcx, qword [0x1400cb4f8]
call fcn.14000d420
lea rdx, str._n_____Enter_password:
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [rsp + 0x100]
mov rcx, qword [0x1400cb4f8]
call fcn.14000d420
lea rax, [rsp + 0x60]
mov qword [rsp + 0xf8], rax
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x60]
call fcn.140009cc0
mov rbx, rax
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x30]
call fcn.140009cc0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x1400f6cb0]
call fcn.1400723c0
jmp 0x14000c261
lea rdx, str._n_____Enter_username:
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [rsp + 0x120]
mov rcx, qword [0x1400cb4f8]
call fcn.14000d420
lea rdx, str._n_____Enter_password:
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [rsp + 0x180]
mov rcx, qword [0x1400cb4f8]
call fcn.14000d420
lea rdx, str._n_____Enter_license:
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [rsp + 0x100]
mov rcx, qword [0x1400cb4f8]
call fcn.14000d420
lea rax, [rsp + 0x30]
mov qword [rsp + 0x90], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
xor r8d, r8d
lea rdx, [0x1400da073]
lea rcx, [rsp + 0x30]
call fcn.140002d70
nop
lea rax, [rsp + 0x60]
mov qword [rsp + 0xf8], rax
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x60]
call fcn.140009cc0
mov rdi, rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0xa0]
call fcn.140009cc0
mov rbx, rax
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xc8]
call fcn.140009cc0
nop
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x20], rcx
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [0x1400f6cb0]
call fcn.14006ed00
jmp 0x14000c261
lea rdx, str._n_____Enter_username:
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [rsp + 0x120]
mov rcx, qword [0x1400cb4f8]
call fcn.14000d420
lea rdx, str._n_____Enter_password:
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [rsp + 0x180]
mov rcx, qword [0x1400cb4f8]
call fcn.14000d420
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0xc8]
call fcn.140009cc0
mov rbx, rax
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xa0]
call fcn.140009cc0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x1400f6cb0]
call fcn.14006cb60
cmp byte [0x1400f6ec0], 0
jne 0x14000c2ae
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n____Podales_zle_dane_lub_licencja_juz_sie_konczyla
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, [0x1400f6cb0]
call fcn.140066880
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rsp + 0x30]
call fcn.140002d70
lea rdx, [rsp + 0x30]
call fcn.14000af60
test eax, eax
je 0x14000c337
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.____Nie_wykryto_procesu
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14000ef00
test al, al
jne 0x14000c384
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.____Nie_jest_to_najnowsza_wersja
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov r8d, 0xa
lea rdx, str.client.dll
lea rcx, [rsp + 0x30]
call fcn.140002d70
lea rdx, [rsp + 0x30]
call fcn.14000aa70
mov rdx, rax
mov qword [0x1400f7430], rax
mov ecx, dword [0x1400f65f8]
add rcx, rax
mov qword [0x1400f7438], rcx
mov ecx, dword [0x1400f65fc]
add rcx, rax
mov qword [0x1400f7440], rcx
mov ecx, dword [0x1400f65f4]
add rcx, rax
mov qword [0x1400f7448], rcx
mov ecx, dword [0x1400f6608]
add rcx, rax
mov qword [0x1400f7458], rcx
mov ecx, dword [0x1400f6604]
add rcx, rax
mov qword [0x1400f7460], rcx
mov eax, dword [0x1400f6600]
add rax, rdx
mov qword [0x1400f7468], rax
lea rcx, [0x1400da42c]
test rdx, rdx
jne 0x14000c46c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.____Error
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_._____
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_.._____
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_..._____
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_.________
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_..________
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_...________
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_.___________
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_..___________
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_...___________
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_.______________
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_..______________
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_...______________
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Loading_._________________
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x140
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400da42c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
vmovups xmm0, xmmword [0x1400da058]
vmovups xmmword [rsp + 0x30], xmm0
mov eax, dword [0x1400da068]
mov dword [rsp + 0x40], eax
movzx edx, word [0x1400da06c]
mov word [rsp + 0x44], dx
movzx r8d, byte [0x1400da06e]
mov byte [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_32
xor byte [rsp + 0x31], 0x39
xor byte [rsp + 0x32], 0x3a
xor byte [rsp + 0x33], 0x3b
xor byte [rsp + 0x34], 0x3c
xor byte [rsp + 0x35], 0x3d
xor byte [rsp + 0x36], 0x3e
xor byte [rsp + 0x37], 0x3f
xor byte [rsp + 0x38], 0x40
xor byte [rsp + 0x39], 0x41
xor byte [rsp + 0x3a], 0x42
xor byte [rsp + 0x3b], 0x43
xor byte [rsp + 0x3c], 0x44
xor byte [rsp + 0x3d], 0x45
xor byte [rsp + 0x3e], 0x46
xor byte [rsp + 0x3f], 0x47
xor al, 0x48
mov byte [rsp + 0x40], al
xor byte [rsp + 0x41], 0x49
xor byte [rsp + 0x42], 0x4a
xor byte [rsp + 0x43], 0x4b
xor dl, 0x4c
mov byte [rsp + 0x44], dl
xor byte [rsp + 0x45], 0x4d
xor r8b, 0x4e
mov byte [rsp + 0x46], r8b
lea rdx, [rsp + 0x30]
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
mov edi, r14d
mov rcx, qword [0x1400f6e98]
mov rax, rcx
mov rdx, qword [0x1400f6e90]
sub rax, rdx
sar rax, 6
test rax, rax
je 0x14000cacc
mov rbx, r14
nop
sub rcx, rdx
sar rcx, 6
cmp rcx, rbx
jbe 0x14000ccd0
shl rbx, 6
add rbx, rdx
mov rdx, rbx
lea rcx, [rsp + 0x140]
call fcn.140009cc0
nop
lea rdx, [rbx + 0x20]
lea rcx, [rsp + 0x160]
call fcn.140009cc0
nop
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0xc8]
call fcn.140009cc0
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14000c8af
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
movsxd rsi, eax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000c8f8
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000c8f3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000cc02
mov rcx, r8
call fcn.1400c2974
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov qword [rsp + 0xf8], rsi
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
vmovups ymm0, ymmword [rsp + 0xa0]
vmovups ymmword [rsp + 0x60], ymm0
mov eax, dword [rsp + 0xc0]
mov dword [rsp + 0x80], eax
lea r9, [rsp + 0x60]
lea r8, str._a__m__d__y__H:_M:_S__Z
mov edx, 0x50
lea rcx, [rsp + 0x1e0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
lea rax, [rsp + 0x1e0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000c990
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x30]
call fcn.140002d70
nop
mov byte [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0x10
cmovae rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov rcx, rax
call fcn.14000e270
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14000ca20
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ca1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cc02
call fcn.1400c2974
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, 0x10
jb 0x14000ca63
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ca5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cc09
call fcn.1400c2974
mov rdx, qword [rsp + 0x158]
cmp rdx, 0x10
jb 0x14000caa6
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000caa1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000cc09
call fcn.1400c2974
inc edi
mov rcx, qword [0x1400f6e98]
mov rax, rcx
mov rdx, qword [0x1400f6e90]
sub rax, rdx
sar rax, 6
movsxd rbx, edi
cmp rbx, rax
jb 0x14000c850
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str._n____Injected_
mov rcx, qword [0x1400cb4e8]
call fcn.14000d250
lea rdx, [0x14000d630]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rax, [rsp + 0x140]
mov qword [rsp + 0x58], rax
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x140], rax
lea rax, [0x1400067d0]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x140]
mov qword [rsp + 0x178], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x98], rax
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov r8d, 7
lea rdx, str.SDL_app
lea rcx, [rsp + 0x30]
call fcn.140002d70
nop
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Counter_Strike_2
lea rcx, [rsp + 0x60]
call fcn.140002d70
nop
lea r9, [rsp + 0x140]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x60]
call fcn.14005bea0
nop
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000cc16
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cc10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cc10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400c2974
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 0x10
jb 0x14000cc5d
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cc57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cc57
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c2974
nop
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x14000cca4
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cc9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000cc9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c2974
nop
xor eax, eax
mov rcx, qword [rsp + 0x238]
xor rcx, rsp
call fcn.1400c2360
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop r14
ret
call fcn.140009de0
nop
int3