Function at 0x14004eca0
Capabilities:
Create thread
Enumerate process modules
Execute command
Get graphical window text
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5d8]
sub rsp, 0x6c0
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x140069040]
xor rax, rsp
mov qword [rbp + 0x5a0], rax
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
lea r8d, [r15 + 8]
lea rdx, str.info.txt
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x210]
cmp qword [rbp + 0x228], 0xf
cmova rdx, qword [rbp + 0x210]
lea r8d, [r15 + 2]
lea rcx, [rbp - 0x30]
call fcn.140052010
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rbx
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x34], edx
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x30]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
test al, al
je 0x14004fdb1
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x30], rbx
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x34], edx
lea rcx, [rbp - 0x28]
call fcn.140051fa0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x78]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x14004ee00
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004edfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004fe6d
call fcn.140056600
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rsi, rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r14, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rdi, rax
lea rdx, [rbp + 0x230]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
lea rdx, [rbp + 0x240]
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowRect]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
mov eax, dword [rbp + 0x248]
sub eax, dword [rbp + 0x240]
cdq
sub eax, edx
sar eax, 1
sub ebx, eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov eax, dword [rbp + 0x24c]
sub eax, dword [rbp + 0x244]
cdq
sub eax, edx
sar eax, 1
sub r8d, eax
mov eax, dword [rbp + 0x23c]
sub eax, dword [rbp + 0x234]
mov r9d, dword [rbp + 0x238]
sub r9d, dword [rbp + 0x230]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], eax
mov edx, ebx
mov rcx, rdi
call qword [sym.imp.USER32.dll_MoveWindow]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
lea rdx, [rbp + 0x210]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
movzx ecx, word [rbp + 0x21e]
sub cx, word [rbp + 0x21a]
inc cx
mov word [rbp + 0x230], cx
movzx ecx, word [rbp + 0x220]
sub cx, word [rbp + 0x21c]
inc cx
mov word [rbp + 0x232], cx
mov edx, dword [rbp + 0x230]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
mov edx, 0xfffffff0
mov rcx, qword [0x14006bb38]
call qword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xff30ffff
mov r8d, eax
mov edx, 0xfffffff0
mov rcx, qword [0x14006bb38]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [rsp + 0x30], 0x227
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14006bb38]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov edx, 0xffffffec
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xc8
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea rdx, str._nStart_up_1_2
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e228]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov edx, 3
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0xf
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005e224]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
lea rdx, str._nStart_up_2_2
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e228]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov edx, 3
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xf
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0xf
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005e224]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14005f0b0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov edx, 0xf
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005f038]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov edx, 3
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005df8c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov edx, 0xf
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005f040]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
lea rdx, str.Sesio
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0b8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0bc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0bc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.ValdtG
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0dc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0b8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14005f0b0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0xf
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005f038]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 6
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005df8c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0xf
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f040]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
lea rdx, [0x14005f0e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0e4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0e8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0dc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0e4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
lea rdx, str.Sesio
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0ec]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0dc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0e8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f014]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0e8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0f4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0e8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0fc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f100]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f014]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0b8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0bc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f104]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 4
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.FIzW
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 4
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005dff4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 4
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14005f0b0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x71
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x14004fe74
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14004fd90
lea rdx, [0x14005f08c]
lea rcx, [rbp - 0x30]
call fcn.140053a60
lea rcx, [rbp - 0x28]
call fcn.140052f00
test rax, rax
jne 0x14004fdec
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x30]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x30], rbx
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x34], edx
lea rcx, [rbp - 0x28]
call fcn.140051fa0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x78]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x14004ee00
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004edfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004edfb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edx, 0xf
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005e228]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 3
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, [0x14005df8c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0xf
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f040]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f10c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0e8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0dc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f110]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0e8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f114]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f118]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.FIzW
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f11c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f120]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f124]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0b8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0bc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0bc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0f4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005dfdc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f0c4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14005f128]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140053a60
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
mov r8d, 0x3f
lea rdx, str._n_nF2_has_been_executed..._Starting_to_Initializing_the_Cheat...
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140050315
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050310
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050310
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
call fcn.140040f20
mov ecx, eax
mov dword [0x14006acc0], eax
lea r9, [rbp + 0x225]
nop dword [rax]
dec r9
mov eax, 0xcccccccd
mul ecx
shr edx, 3
movzx eax, dl
shl al, 2
lea r8d, [rax + rdx]
add r8b, r8b
sub cl, r8b
add cl, 0x30
mov byte [r9], cl
mov ecx, edx
test edx, edx
jne 0x140050330
lea r8, [rbp + 0x225]
mov rdx, r9
lea rcx, [rsp + 0x60]
call fcn.140054850
nop
mov r8, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
sub rax, r8
lea rsi, str.pId:
cmp rax, 5
jb 0x140050410
lea rax, [r8 + 5]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rcx, 0xf
cmova rbx, qword [rsp + 0x60]
lea rax, [0x14005f175]
cmp rax, rbx
jbe 0x1400503ce
lea rax, [rbx + r8]
cmp rsi, rax
ja 0x1400503ce
cmp rbx, rsi
ja 0x1400503c6
mov rdi, r15
jmp 0x1400503d3
mov rdi, rbx
sub rdi, rsi
jmp 0x1400503d3
mov edi, 5
inc r8
lea rcx, [rbx + 5]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 5
sub r8, rdi
lea rdx, [rsi + 5]
add rdx, rdi
lea rcx, [rbx + rdi]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x60]
jmp 0x14005042d
mov qword [rsp + 0x28], 5
mov qword [rsp + 0x20], rsi
mov edx, 5
lea rcx, [rsp + 0x60]
call fcn.140055600
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x258], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x250], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp + 0x240]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x258]
cmp rdx, 0xf
jbe 0x1400504ba
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400504b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400504b5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x258], 0xf
mov byte [rbp + 0x240], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140050513
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005050e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005050e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
mov r8d, dword [0x14006acc0]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14006a630], rax
mov edx, dword [0x14006acc0]
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140050589
mov dword [rbp - 0x30], 0x238
lea rdx, [rbp - 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x140050589
lea rdx, str.Overwatch.exe
lea rcx, [rbp]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
mov rcx, rbx
test eax, eax
je 0x140050615
lea rdx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x140050560
mov rax, qword [rbp + 0x230]
mov qword [0x140069f78], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
mov r8d, 0x16
lea rdx, str.Scanning_for_Vx0001...
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140050629
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050624
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050624
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp - 0x18]
jmp 0x140050590
call fcn.140056600
mov rax, qword [0x140069f78]
mov qword [rbp + 0x210], rax
movabs rax, 0x7fffffffffffffff
mov qword [rbp + 0x218], rax
mov rax, qword [0x14006a630]
mov qword [rbp + 0x220], rax
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x260], xmm1
mov qword [rbp + 0x270], r15
lea rcx, [rbp + 0x260]
call fcn.140055110
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r15
mov qword [rbp + 0x258], r15
mov r8d, 0x2d
lea rdx, str.48_8B_0D_________45_33_C0_E8_________48_8B_F0
lea rcx, [rbp + 0x240]
call fcn.140041c30
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x210]
call fcn.140055b20
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
mov r8d, 0x16
lea rdx, str.Reading_Process_Memory
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x14005073e
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050739
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050739
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], 0xf
mov byte [rbp + 0x210], 0
mov qword [rsp + 0x20], r15
mov r9d, 7
mov r8, qword [rbp + 0x260]
mov rdx, rbx
mov rcx, qword [0x14006a630]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
mov r8d, 0x16
lea rdx, str.Reading_Process_Memory
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x1400507fc
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400507f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400507f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
mov rcx, qword [rbp + 0x260]
movzx r8d, byte [rcx + 6]
shl r8, 8
movzx eax, byte [rcx + 5]
or r8, rax
shl r8, 8
movzx eax, byte [rcx + 4]
or r8, rax
shl r8, 8
movzx eax, byte [rcx + 3]
or r8, rax
sub r8, qword [0x140069f78]
add r8, 7
add r8, rbx
lea rdx, str.Decrypted_Vx0001:_0x_llX
lea rcx, [rbp + 0x280]
call fcn.140017d60
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
lea rax, [rbp + 0x280]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140050870
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x1400508df
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400508da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400508da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
mov rcx, qword [rbp + 0x260]
movzx edx, byte [rcx + 6]
shl rdx, 8
movzx eax, byte [rcx + 5]
or rdx, rax
shl rdx, 8
movzx eax, byte [rcx + 4]
or rdx, rax
shl rdx, 8
movzx eax, byte [rcx + 3]
or rax, rdx
sub rax, qword [0x140069f78]
add rbx, 7
add rax, rbx
mov qword [0x1400690f8], rax
xor edx, edx
lea rcx, str.C:Windowswin.txt
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
xor edx, edx
lea rcx, str.C:xj.ini
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov r9d, 0x40
lea r8, str.Information
lea rdx, str.Initialized._MOVE_YOUR_MOUSE_TO_FINISH_FASTER_UP_BEEP_SOUND_WILL_PLAY
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor edx, edx
lea rcx, str.TankWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
je 0x140051136
lea rdx, [0x14006b7c0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [0x14006b7c8], rax
mov qword [0x14006b7d0], rbx
lea rdx, [rbp + 0x210]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r9d, dword [rbp + 0x218]
mov eax, r9d
mov edx, dword [rbp + 0x210]
sub eax, edx
mov dword [0x14006b7e0], eax
mov r8d, dword [rbp + 0x21c]
mov eax, r8d
mov ecx, dword [rbp + 0x214]
sub eax, ecx
mov dword [0x14006b7e4], eax
mov dword [0x14006b7e8], edx
mov dword [0x14006b7ec], r9d
mov dword [0x14006b7f0], ecx
mov dword [0x14006b7f4], r8d
mov r8d, 0x104
lea rdx, [rbp + 0x380]
mov rcx, qword [0x14006b7d0]
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rax, [rbp + 0x380]
mov qword [0x14006b7f8], rax
mov r8d, 0x104
lea rdx, [rbp + 0x490]
mov rcx, qword [0x14006b7d0]
call qword [sym.imp.USER32.dll_GetClassNameA]
lea rax, [rbp + 0x490]
mov qword [0x14006b800], rax
mov r9d, 0x104
lea r8, [rbp - 0x30]
xor edx, edx
mov rcx, qword [0x14006b7c8]
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
lea rax, [rbp - 0x30]
mov qword [0x14006b808], rax
call qword [sym.imp.interception.dll_interception_create_context]
mov qword [0x14006a7f8], rax
mov r8d, 0x1000
mov rdx, qword [sym.imp.interception.dll_interception_is_mouse]
mov rcx, rax
call qword [sym.imp.interception.dll_interception_set_filter]
mov rcx, qword [0x14006a7f8]
call qword [sym.imp.interception.dll_interception_wait]
mov dword [0x14006a800], eax
mov rcx, qword [0x14006a7f8]
call qword [sym.imp.interception.dll_interception_wait]
mov dword [0x14006a800], eax
mov r9d, 1
lea r8, [0x14006a640]
mov edx, eax
mov rcx, qword [0x14006a7f8]
call qword [sym.imp.interception.dll_interception_receive]
test eax, eax
jle 0x140050b3f
mov ecx, dword [0x14006a800]
call qword [sym.imp.interception.dll_interception_is_mouse]
mov rcx, qword [0x14006a7f8]
test eax, eax
jne 0x140050b26
call qword [sym.imp.interception.dll_interception_wait]
mov dword [0x14006a800], eax
mov r9d, 1
lea r8, [0x14006a640]
mov edx, eax
mov rcx, qword [0x14006a7f8]
call qword [sym.imp.interception.dll_interception_receive]
test eax, eax
jg 0x140050ae1
jmp 0x140050b3f
mov r9d, 1
lea r8, [0x14006a640]
mov edx, dword [0x14006a800]
call qword [sym.imp.interception.dll_interception_send]
mov ecx, 8
call fcn.140056a34
lea rcx, [0x140041d50]
mov qword [rax], rcx
mov qword [rbp + 0x230], rax
lea rcx, [rbp + 0x248]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x1400557d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x240], rax
test rax, rax
je 0x140051123
cmp dword [rbp + 0x248], 0
je 0x140051117
movaps xmm0, xmmword [rbp + 0x240]
movdqa xmmword [rbp + 0x230], xmm0
lea rcx, [rbp + 0x230]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140051117
xorps xmm0, xmm0
cmp byte [0x14006a65d], al
jne 0x140050c4d
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
lea r8d, [rax + 0x2f]
lea rdx, str.Hiding_console_window_and_playing_beep_sound...
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140050c4d
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050c48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050c48
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
mov edx, 0x1f4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Beep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
mov r8d, 0x17
lea rdx, str.Initializing_Overlay...
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140050ce0
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050cdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050cdb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
lea rcx, [rbp + 0x210]
call fcn.140042a70
cmp qword [rax + 0x18], 0xf
jbe 0x140050cf6
mov rax, qword [rax]
mov qword [0x14006a2f8], rax
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140050d41
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050d3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050d3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
mov qword [rbp - 0x80], 0x50
lea rax, [0x14004e800]
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp - 0x60], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp - 0x58], rax
xorps xmm6, xmm6
mov rax, qword [0x14006a2f8]
mov qword [rbp - 0x40], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconA]
mov qword [rbp - 0x38], rax
movups xmm0, xmmword [rbp - 0x80]
movaps xmmword [0x14006a2a0], xmm0
movups xmm1, xmmword [rbp - 0x70]
movaps xmmword [0x14006a2b0], xmm1
movups xmm0, xmmword [rbp - 0x60]
movaps xmmword [0x14006a2c0], xmm0
movaps xmmword [0x14006a2d0], xmm6
movups xmm0, xmmword [rbp - 0x40]
movaps xmmword [0x14006a2e0], xmm0
lea rcx, [0x14006a2a0]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rcx, qword [0x14006b7d0]
test rcx, rcx
je 0x140050e3c
lea rdx, [0x14006bc30]
call qword [sym.imp.USER32.dll_GetClientRect]
lea rdx, [0x14006bc60]
mov rcx, qword [0x14006b7d0]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x14006bc60]
mov dword [0x14006bc30], eax
mov eax, dword [0x14006bc64]
mov dword [0x14006bc34], eax
mov eax, dword [0x14006bc38]
mov dword [0x14006b7e0], eax
mov ecx, dword [0x14006bc3c]
mov dword [0x14006b7e4], ecx
jmp 0x140050e48
mov ecx, dword [0x14006b7e4]
mov eax, dword [0x14006b7e0]
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], eax
mov eax, dword [0x14006b7f0]
mov dword [rsp + 0x28], eax
mov eax, dword [0x14006b7e8]
mov dword [rsp + 0x20], eax
mov r9d, 0x90000000
mov rdx, qword [0x14006a2f8]
mov r8, rdx
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x14006a2f0], rax
lea rdx, [0x140069170]
mov rcx, rax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 0xffffffec
mov r8d, 0x800a0
mov rcx, qword [0x14006a2f0]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov edx, 5
mov rcx, qword [0x14006a2f0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14006a2f0]
call qword [sym.imp.USER32.dll_UpdateWindow]
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
mov r8d, 0x14
lea rdx, str.Initializing_DirextX
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140050f61
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050f5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050f5c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
call fcn.14004e420
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
mov r8d, 0x24
lea rdx, str.Creating_Thread_for_Process_Check...
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140050fe9
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050fe4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050fe4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [0x14004e990]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
mov r8d, 0x16
lea rdx, str.Successfully_Loaded...
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x14005108a
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051085
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140051085
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
mov qword [rbp + 0x220], r15
mov qword [rbp + 0x228], r15
mov r8d, 0x15
lea rdx, str.Starting_Main_Loop...
lea rcx, [rbp + 0x210]
call fcn.140041c30
nop
lea rcx, [rbp + 0x210]
call fcn.14004eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0xf
jbe 0x140051110
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051108
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140051108
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
nop dword [rax]
call fcn.14004de80
jmp 0x140051110
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x248], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x140051179
mov rdx, qword [rbp + 0x270]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051174
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140051174
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140056600
xor eax, eax
mov rcx, qword [rbp + 0x5a0]
xor rcx, rsp
call fcn.140056510
lea r11, [rsp + 0x6c0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret