Function at 0x14004df10
Capabilities:
Create process on windows
Create thread
Download url
Get storage device properties
Log keystrokes via polling
Receive data
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xe10
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
lea rbp, [rax - 0xdb8]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14006c010]
xor rax, rsp
mov qword [rbp + 0xce0], rax
call fcn.140049d10
lea rax, str.C:Artic_
mov qword [rbp + 0x18], 9
mov qword [rbp + 0x10], rax
call fcn.140056aa8
movaps xmm0, xmmword [rbp + 0x10]
lea r8, [rbp + 0x400]
mov edx, eax
movdqa xmmword [rbp + 0x400], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.1400485f0
cmp qword [rbp + 0x1f8], 8
lea rcx, [rbp + 0x1e0]
cmovae rcx, qword [rbp + 0x1e0]
call fcn.140056be4
shr rax, 0x20
test eax, eax
jne 0x140050d9f
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 8
jb 0x14004e039
mov rcx, qword [rbp + 0x1e0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e034
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e034
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140055f98
xor r15d, r15d
mov qword [rbp + 0x1f8], 7
lea rax, str.C:Articimages
mov qword [rbp + 0x1f0], r15
mov word [rbp + 0x1e0], r15w
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], 0xf
call fcn.140056aa8
movaps xmm0, xmmword [rbp + 0x10]
lea r8, [rbp + 0x3f0]
mov edx, eax
movdqa xmmword [rbp + 0x3f0], xmm0
lea rcx, [rbp + 0x250]
call fcn.1400485f0
cmp qword [rbp + 0x268], 8
lea rcx, [rbp + 0x250]
cmovae rcx, qword [rbp + 0x250]
call fcn.140056be4
shr rax, 0x20
test eax, eax
jne 0x140050dae
mov rdx, qword [rbp + 0x268]
cmp rdx, 8
jb 0x14004e100
mov rcx, qword [rbp + 0x250]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e0fb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e0fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140055f98
xor r9d, r9d
mov qword [rbp + 0x260], r15
lea r8, str.C:_Artic_images_logo.png
mov qword [rbp + 0x268], 7
lea rdx, str.http:__artic.over_nine.fun_images_logo.png
mov word [rbp + 0x250], r15w
xor ecx, ecx
mov qword [rsp + 0x20], r15
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, str.C:_Artic_images_csgo.png
xor ecx, ecx
lea rdx, str.http:__artic.over_nine.fun_images_csgo.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, str.C:_Artic_images_logosmall.png
xor ecx, ecx
lea rdx, str.http:__artic.over_nine.fun_images_logosmall.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, str.C:_Artic_images_biglogo.png
xor ecx, ecx
lea rdx, str.http:__artic.over_nine.fun_images_biglogo.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rax, [0x1400517f0]
mov dword [rbp + 0x780], 0x50
xor ecx, ecx
mov qword [rbp + 0x788], rax
mov dword [rbp + 0x784], 0x40
mov qword [rbp + 0x790], r15
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov qword [rbp + 0x7c8], r15
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x7a0], xmm0
lea rbx, [0x14005a248]
movdqu xmmword [rbp + 0x7b0], xmm1
lea rcx, [rbp + 0x780]
mov qword [rbp + 0x798], rax
mov qword [rbp + 0x7c0], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rax, qword [rbp + 0x798]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x7c0]
mov r8, rbx
mov qword [rsp + 0x58], r15
xor ecx, ecx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r9d, 0x1f4
mov dword [rsp + 0x28], 0x15
mov r8d, r9d
mov qword [0x14009d940], rax
xor edx, edx
mov dword [rsp + 0x20], 0x15
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov rcx, qword [0x14009d940]
xor r8d, r8d
mov rdx, rax
call qword [sym.imp.USER32.dll_SetWindowRgn]
mov rbx, qword [0x14009d940]
mov ecx, 0x20
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x14009d838], rax
mov rcx, rax
mov edi, 1
test rax, rax
je 0x140050ce6
lea rdx, [0x14009d830]
mov qword [0x14009d7f0], r15
mov qword [rsp + 0x30], rdx
mov r9, rbx
lea rdx, [0x14009d7f0]
mov qword [0x14009d7fc], r15
mov qword [rsp + 0x28], rdx
mov r8d, edi
mov dword [0x14009d804], r15d
xor edx, edx
mov qword [0x14009d80c], r15
mov dword [0x14009d814], r15d
mov qword [0x14009d824], r15
mov dword [0x14009d818], edi
mov dword [0x14009d808], edi
mov dword [0x14009d7f8], r15d
mov dword [0x14009d81c], edi
mov dword [0x14009d820], 0x50
mov dword [0x14009d82c], edi
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x140050cdf
mov rcx, qword [0x14009d940]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14009d940]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rax, qword [0x14009d5f0]
test rax, rax
je 0x14004e370
inc dword [rax + 0x3b0]
mov rdx, qword [0x14009d5e0]
mov ecx, 0x40b0
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x14004e395
xor edx, edx
mov rcx, rax
call fcn.140001a40
mov rcx, rax
jmp 0x14004e398
mov rcx, r15
mov rax, qword [0x14009d5f0]
test rax, rax
cmove rax, rcx
mov qword [0x14009d5f0], rax
call fcn.1400081f0
mov r13, qword [0x14009d5f0]
xor ecx, ecx
or dword [r13 + 8], 0x400
mov qword [r13 + 0x20], r15
call fcn.14002a080
cmp word [0x14009da90], r15w
lea rbx, [0x14009daa0]
mov r10, qword [r13 + 0xa8]
lea rsi, [0x14005e430]
mov edi, 0x4e00
mov r14d, 0xbb7
jne 0x14004e430
movups xmm0, xmmword [0x14006c048]
mov rdx, rbx
mov ecx, edi
mov r8, rsi
mov r9d, r14d
movups xmmword [0x14009da90], xmm0
nop
movsx eax, word [r8]
lea rdx, [rdx + 4]
add ecx, eax
lea r8, [r8 + 2]
mov word [rdx - 2], cx
mov word [rdx - 4], cx
sub r9, 1
jne 0x14004e410
mov word [rdx], r15w
movss xmm3, dword [0x14006097c]
lea r12, [0x14009da90]
mov qword [rsp + 0x28], r12
lea rdx, [0x14006c070]
mov r8d, 0x3063c
mov qword [rsp + 0x20], r15
mov rcx, r10
call fcn.14002ef00
cmp word [0x14009da90], r15w
mov rcx, qword [r13 + 0xa8]
jne 0x14004e4b3
movups xmm0, xmmword [0x14006c048]
mov rdx, rbx
mov r8d, edi
mov r9, rsi
mov r10, r14
movups xmmword [0x14009da90], xmm0
nop dword [rax]
movsx eax, word [r9]
lea rdx, [rdx + 4]
add r8d, eax
lea r9, [r9 + 2]
mov word [rdx - 2], r8w
mov word [rdx - 4], r8w
sub r10, 1
jne 0x14004e490
mov word [rdx], r15w
movss xmm14, dword [0x140060980]
lea rdx, [0x14006c070]
movaps xmm3, xmm14
mov qword [rsp + 0x28], r12
mov r8d, 0x3063c
mov qword [rsp + 0x20], r15
call fcn.14002ef00
cmp word [0x14009da90], r15w
mov r12, rax
mov r11, qword [r13 + 0xa8]
mov qword [rbp + 0x2c0], rax
jne 0x14004e534
movups xmm0, xmmword [0x14006c048]
mov rdx, rbx
mov r8d, edi
mov r9, rsi
mov r10, r14
movups xmmword [0x14009da90], xmm0
movsx ecx, word [r9]
lea rdx, [rdx + 4]
add r8d, ecx
lea r9, [r9 + 2]
mov word [rdx - 2], r8w
mov word [rdx - 4], r8w
sub r10, 1
jne 0x14004e511
mov word [rdx], r15w
movss xmm3, dword [0x140060984]
lea rax, [0x14009da90]
mov qword [rsp + 0x28], rax
lea rdx, [0x14006c070]
mov r8d, 0x3063c
mov qword [rsp + 0x20], r15
mov rcx, r11
call fcn.14002ef00
cmp word [0x14009da90], r15w
mov rcx, qword [r13 + 0xa8]
jne 0x14004e5b3
movups xmm0, xmmword [0x14006c048]
mov rdx, rbx
mov r8d, edi
mov r9, rsi
mov r10, r14
movups xmmword [0x14009da90], xmm0
nop dword [rax]
movsx eax, word [r9]
lea rdx, [rdx + 4]
add r8d, eax
lea r9, [r9 + 2]
mov word [rdx - 2], r8w
mov word [rdx - 4], r8w
sub r10, 1
jne 0x14004e590
mov word [rdx], r15w
movss xmm3, dword [0x140060970]
lea rax, [0x14009da90]
mov qword [rsp + 0x28], rax
lea rdx, [0x14006c070]
mov r8d, 0x3063c
mov qword [rsp + 0x20], r15
call fcn.14002ef00
cmp word [0x14009da90], r15w
mov rcx, qword [r13 + 0xa8]
jne 0x14004e621
movups xmm0, xmmword [0x14006c048]
movups xmmword [0x14009da90], xmm0
nop dword [rax]
movsx eax, word [rsi]
lea rbx, [rbx + 4]
add edi, eax
lea rsi, [rsi + 2]
mov word [rbx - 2], di
mov word [rbx - 4], di
sub r14, 1
jne 0x14004e600
mov word [rbx], r14w
jmp 0x14004e624
xor r14d, r14d
movss xmm3, dword [0x14006096c]
lea rax, [0x14009da90]
mov qword [rsp + 0x28], rax
lea rdx, [0x14006c070]
mov r8d, 0x3063c
mov qword [rsp + 0x20], r14
call fcn.14002ef00
mov rcx, qword [0x14009d830]
lea r8, [rbp + 0x740]
lea rdx, str.C:_Artic_images_logo.png
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x20], r14
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileA]
test eax, eax
jne 0x14004e6a1
mov rcx, qword [rbp + 0x740]
xor edx, edx
mov r8, qword [rcx]
mov r9, qword [r8 + 0x88]
lea r8, [rbp + 0x948]
call r9
mov rax, qword [rbp + 0x740]
mov qword [rbp + 0x20], rax
mov rcx, qword [0x14009d830]
lea r8, [rbp + 0x768]
lea rdx, str.C:_Artic_images_csgo.png
mov qword [rbp + 0x130], r14
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileA]
test eax, eax
jne 0x14004e6ee
mov rcx, qword [rbp + 0x768]
lea r8, [rbp + 0x968]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
mov rax, qword [rbp + 0x768]
mov qword [rbp + 0x130], rax
mov rcx, qword [0x14009d830]
lea r8, [rbp + 0x770]
lea rdx, str.C:_Artic_images_logosmall.png
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileA]
test eax, eax
jne 0x14004e726
mov rcx, qword [rbp + 0x770]
lea r8, [rbp + 0x988]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
mov rcx, qword [0x14009d830]
lea r8, [rbp + 0x760]
lea rdx, str.C:_Artic_images_biglogo.png
mov qword [rbp + 0xa8], r14
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileA]
test eax, eax
jne 0x14004e773
mov rcx, qword [rbp + 0x760]
lea r8, [rbp + 0x9a8]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
mov rax, qword [rbp + 0x760]
mov qword [rbp + 0xa8], rax
mov r8d, 0x4d
mov qword [rbp + 0x8a8], r14
lea rdx, str.___Auto_Login_n___Avatar_Fixed_n___Avatar_Background_n___Protection_Improved
mov qword [rbp + 0x8b8], r14
lea rcx, [rbp + 0x8a8]
mov qword [rbp + 0x8c0], 0xf
call fcn.140053980
mov rax, qword [0x14009d5f0]
or dword [r13 + 8], 0x400
movaps xmm0, xmmword [0x140060ce0]
mov qword [r13 + 0x20], r14
movaps xmm1, xmm0
movaps xmm1, xmmword [0x140060ca0]
mov dword [rax + 0x163c], 0x40800000
mov dword [rax + 0x1640], 0x40800000
mov qword [rax + 0x1644], 0x40a00000
mov dword [rax + 0x1660], 0x41a00000
mov dword [rax + 0x1678], 0x40400000
mov dword [rax + 0x1670], 0x41000000
mov dword [rax + 0x1674], 0x40c00000
mov dword [rax + 0x167c], 0x40000000
mov dword [rax + 0x1678], 0x40800000
mov dword [rax + 0x16b4], 0x40800000
mov dword [rax + 0x1644], 0x41a00000
movups xmmword [rax + 0x171c], xmm0
movups xmmword [rax + 0x172c], xmm0
movups xmmword [rbp + 0x6f0], xmm0
movups xmmword [rbp + 0x438], xmm0
movaps xmm0, xmmword [0x140060df0]
movups xmmword [rbp + 0x448], xmm0
movups xmmword [rax + 0x174c], xmm0
movaps xmm0, xmm1
movaps xmm0, xmmword [0x140060de0]
movups xmmword [rbp + 0x458], xmm1
movups xmmword [rax + 0x176c], xmm1
movups xmmword [rbp + 0x468], xmm1
movups xmmword [rax + 0x177c], xmm1
movaps xmm1, xmmword [0x140060da0]
movups xmmword [rbp + 0x478], xmm1
movups xmmword [rax + 0x184c], xmm1
movups xmmword [rbp + 0x488], xmm0
movups xmmword [rax + 0x186c], xmm0
movaps xmm1, xmm0
movups xmmword [rbp + 0x498], xmm0
movups xmmword [rax + 0x185c], xmm0
movaps xmm0, xmmword [0x140060d30]
movups xmmword [rax + 0x170c], xmm0
call fcn.140034a60
mov rcx, qword [0x14009d830]
lea rax, str.imgui_impl_dx9
mov rbx, qword [0x14009d5f0]
mov qword [0x14009da40], rcx
or dword [rbx + 0xc], 0x1008
mov qword [rbx + 0xe8], rax
mov rax, qword [rcx]
call qword [rax + 8]
test dword [rbx + 8], 0x400
je 0x14004e95c
mov rax, qword [0x14009d5f0]
lea rcx, [fcn.140034720]
mov qword [rax + 0x15f0], rcx
lea rcx, [0x1400347f0]
mov qword [rax + 0x15f8], rcx
lea rcx, [0x140034880]
mov qword [rax + 0x1600], rcx
lea rcx, [0x1400348e0]
mov qword [rax + 0x1608], rcx
lea rcx, [0x140034a30]
mov qword [rax + 0x1610], rcx
movabs r8, 0x840c5dea2690121d
movabs rdx, 0x4e97ae77162b5ca
movabs rax, 0xbcd37007376296fd
movabs r10, 0xca8c1b64520af5db
mov qword [rbp], rax
movabs r9, 0x8e27ea71e2491348
mov rax, qword [rbp]
movabs rcx, 0xc90573d3d85820ee
mov qword [rbp + 0x280], rax
movabs rax, 0xbf1a841e8b3a612d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0xc80], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0xc88], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0xc90], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xc98], rax
movabs rax, 0xe5a32117227e81b3
vmovdqu ymm0, ymmword [rbp + 0xc80]
vpxor ymm0, ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0x280], ymm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0xf848c4128b3d6129
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movabs rax, 0xaa69338348bd6078
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x618016845e0cc0ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
movabs rax, 0xb4f8477c118bc311
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0x477e324d090960d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0xba990e16f8fab598
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0xca0], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0xca8], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0xcb0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xcb8], rax
movabs rax, 0xda9d2e1072a4b77f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xcc0], rax
movabs rax, 0x22150d3d61794eac
lea r8, [0x14009d970]
mov qword [rbp], rax
lea rdx, [rbp + 0x2e0]
mov rax, qword [rbp]
mov qword [rbp + 0xcc8], rax
movabs rax, 0xba990e16f8fa88e1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xcd0], rax
mov qword [rbp], rcx
lea rcx, [rbp + 0x320]
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0xca0]
vpxor ymm0, ymm0, ymmword [rbp + 0x2e0]
vmovdqa ymmword [rbp + 0x2e0], ymm0
mov qword [rbp + 0xcd8], rax
vmovdqu ymm1, ymmword [rbp + 0xcc0]
vpxor ymm0, ymm1, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x300], ymm0
vzeroupper
call fcn.140054070
mov rdi, rax
mov rbx, 0xffffffffffffffff
lea rax, [rbp + 0x280]
inc rbx
cmp byte [rax + rbx], r15b
jne 0x14004ebe4
mov rcx, qword [rdi + 0x18]
mov rsi, qword [rdi + 0x10]
mov rax, rcx
sub rax, rsi
cmp rbx, rax
ja 0x14004ec34
lea rax, [rbx + rsi]
mov r14, rdi
mov qword [rdi + 0x10], rax
cmp rcx, 0x10
jb 0x14004ec14
mov r14, qword [rdi]
lea rcx, [r14 + rsi]
mov r8, rbx
lea rdx, [rbp + 0x280]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [r14 + rbx]
xor r14d, r14d
mov byte [rax + rsi], r15b
jmp 0x14004ec4e
lea r9, [rbp + 0x280]
mov qword [rsp + 0x20], rbx
mov rdx, rbx
mov rcx, rdi
call fcn.140054a30
mov rdi, rax
movups xmm0, xmmword [rdi]
lea rdx, [rbp + 0x418]
lea rcx, [rbp + 0x888]
movups xmmword [rbp + 0x418], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp + 0x428], xmm1
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r15b
call fcn.140049030
mov rdx, qword [rbp + 0x338]
cmp rdx, 0x10
jb 0x14004ecc9
mov rcx, qword [rbp + 0x320]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ecc4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ecc4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140055f98
mov qword [rbp + 0x330], r14
mov qword [rbp + 0x338], 0xf
mov byte [rbp + 0x320], r15b
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x938]
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp qword [rbp + 0x8a0], 0x10
lea rdx, [rbp + 0x888]
cmovae rdx, qword [rbp + 0x888]
cmp qword [rbp + 0x898], 5
jne 0x14004ed52
mov rcx, r14
lea r8, str.2.5.1
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x14004ed49
cmp rcx, 5
jne 0x14004ed30
mov eax, r14d
jmp 0x14004ed4e
sbb eax, eax
or eax, 1
test eax, eax
je 0x14004ed54
mov al, 1
mov byte [0x14009d5e9], al
call fcn.14004cc20
movss xmm11, dword [0x140060910]
xorps xmm0, xmm0
movss xmm13, dword [0x140060a10]
xorps xmm12, xmm12
movss xmm10, dword [0x140060950]
movss xmm15, dword [0x14006094c]
movups xmmword [rbp + 0x8c8], xmm0
movups xmmword [rbp + 0x8d8], xmm0
movups xmmword [rbp + 0x8e8], xmm0
cmp byte [0x14006c068], 0
lea rsi, [0x14009d600]
je 0x140050cd3
cmp byte [0x14009d5ed], 0
je 0x14004f20c
mov r8d, 7
mov qword [rbp + 0x1c0], r14
lea rdx, str.avatar
mov qword [rbp + 0x1d0], r14
lea rcx, [rbp + 0x1c0]
mov qword [rbp + 0x1d8], 0xf
call fcn.140053980
mov r8d, 0x2e
mov qword [rbp + 0x28], r14
lea rdx, str.https:__artic.over_nine.fun_auth.php_username
mov qword [rbp + 0x38], r14
lea rcx, [rbp + 0x28]
mov qword [rbp + 0x40], 0xf
call fcn.140053980
mov rdx, 0xffffffffffffffff
nop
inc rdx
cmp byte [rsi + rdx], 0
jne 0x14004ee20
mov r8, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x38]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x14004ee69
lea rdi, [rcx + rdx]
cmp r8, 0x10
mov r8, rdx
mov qword [rbp + 0x38], rdi
lea rbx, [rbp + 0x28]
mov rdx, rsi
cmovae rbx, qword [rbp + 0x28]
add rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp + 0x28]
mov byte [rdi + rbx], 0
jmp 0x14004ee7a
mov r9, rsi
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x28]
call fcn.140054a30
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x1c0]
movups xmm1, xmmword [rax + 0x10]
lea r8, [rbp + 0x2a0]
mov qword [rax + 0x10], r14
lea rcx, [rbp + 0x860]
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x2a0], xmm0
mov byte [rax], 0
movups xmmword [rbp + 0x2b0], xmm1
call fcn.1400552f0
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 0x10
jb 0x14004eef9
mov rcx, qword [rbp + 0x2a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004eef4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140050c45
call fcn.140055f98
mov rdx, qword [rbp + 0x40]
mov qword [rbp + 0x2b0], r14
mov qword [rbp + 0x2b8], 0xf
mov byte [rbp + 0x2a0], 0
cmp rdx, 0x10
jb 0x14004ef4d
mov rcx, qword [rbp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ef48
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140050c45
call fcn.140055f98
mov rdx, qword [rbp + 0x1d8]
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x40], 0xf
mov byte [rbp + 0x28], 0
cmp rdx, 0x10
jb 0x14004ef9e
mov rcx, qword [rbp + 0x1c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ef99
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140050c45
call fcn.140055f98
mov r15, qword [rbp + 0x878]
mov rsi, qword [rbp + 0x860]
cmp r15, 0x10
mov rdi, qword [rbp + 0x870]
mov qword [rbp + 0x1d0], r14
setae r12b
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1b0], r14
mov qword [rbp + 0x1b8], r14
lea r14, [rbp + 0x860]
cmovae r14, rsi
mov qword [rbp + 0x1d8], 0xf
mov byte [rbp + 0x1c0], 0
cmp rdi, 0x10
jae 0x14004f015
movups xmm0, xmmword [r14]
mov qword [rbp + 0x1b8], 0xf
movups xmmword [rbp + 0x1a0], xmm0
jmp 0x14004f0a2
movabs rax, 0x7fffffffffffffff
mov rbx, rdi
or rbx, 0xf
mov qword [rbp + 0x390], rax
cmp rbx, rax
mov qword [rbp + 0x398], rbx
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14004f077
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140050d99
mov rcx, rax
call fcn.14005618c
mov rcx, rax
test rax, rax
je 0x140050c4c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14004f085
test rcx, rcx
je 0x14004f083
call fcn.14005618c
jmp 0x14004f085
xor eax, eax
lea r8, [rdi + 1]
mov qword [rbp + 0x1a0], rax
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x1b8], rbx
lea rdx, [rbp + 0x1a0]
mov qword [rbp + 0x1b0], rdi
lea rcx, [rbp + 0x840]
call fcn.140049030
cmp qword [rbp + 0x858], 0x10
lea rdx, [rbp + 0x840]
lea r8, str.C:Articuser.jpg
cmovae rdx, qword [rbp + 0x840]
xor r14d, r14d
xor r9d, r9d
mov qword [rsp + 0x20], r14
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x14004f10f
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, str.C:Articuser.jpg
xor ecx, ecx
lea rdx, str.http:__artic.over_nine.fun_backavatar.jpg
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov rcx, qword [0x14009d830]
lea r8, [rbp + 0x758]
lea rdx, str.C:_Artic_user.jpg
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileA]
test eax, eax
jne 0x14004f155
mov rcx, qword [rbp + 0x758]
lea r8, [rbp + 0x9c8]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
mov rax, qword [rbp + 0x758]
mov qword [0x14009d948], rax
mov rdx, qword [rbp + 0x858]
mov byte [0x14009d5ed], r14b
cmp rdx, 0x10
jb 0x14004f19d
mov rcx, qword [rbp + 0x840]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004f198
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140050c53
call fcn.140055f98
mov qword [rbp + 0x850], r14
mov qword [rbp + 0x858], 0xf
mov byte [rbp + 0x840], r14b
test r12b, r12b
je 0x14004f1ec
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14004f1e4
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140050c53
mov rcx, rsi
call fcn.140055f98
mov r12, qword [rbp + 0x2c0]
mov qword [rbp + 0x870], r14
mov qword [rbp + 0x878], 0xf
mov byte [rbp + 0x860], r14b
mov edi, 1
lea rcx, [rbp + 0x8c8]
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004f24d
lea rcx, [rbp + 0x8c8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x8c8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x140050be4
cmp qword [0x14009da30], 0
jne 0x14004f2a5
cmp qword [0x14009da40], 0
je 0x14004f2a5
call fcn.1400343c0
test al, al
je 0x14004f2a5
mov rsi, qword [0x14009d5f0]
cmp dword [rsi + 0x1628], edi
jle 0x14004f2a5
mov ebx, 8
nop
mov rax, qword [rsi + 0x1630]
mov rcx, qword [rbx + rax]
cmp qword [rcx + 0x38], 0
jne 0x14004f297
call fcn.140034720
inc edi
add rbx, 8
cmp edi, dword [rsi + 0x1628]
jl 0x14004f280
mov rcx, qword [0x14009da70]
lea rdx, [rbp + 0x748]
mov rbx, qword [0x14009d5f0]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x748], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp + 0x754]
sub eax, dword [rbp + 0x74c]
movd xmm1, eax
mov eax, dword [rbp + 0x750]
sub eax, dword [rbp + 0x748]
cmp byte [0x14009c85d], 0
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x14], xmm1
movss dword [rbx + 0x10], xmm0
je 0x14004f354
mov rdi, qword [0x14009d5f0]
mov ecx, dword [rdi + 0x161c]
test ecx, ecx
jns 0x14004f332
mov eax, ecx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x1618]
test eax, eax
cmovg edx, eax
call fcn.140022800
xor r9d, r9d
mov dword [rdi + 0x1618], r14d
lea r8, [0x140035540]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov byte [0x14009c85d], 0
lea rcx, [rbp + 0x7f8]
mov qword [rbp + 0x7f8], r14
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp + 0x7f8]
xorps xmm1, xmm1
mov rax, rcx
xorps xmm0, xmm0
sub rax, qword [0x14009da78]
cvtsi2ss xmm0, qword [0x14009da80]
cvtsi2ss xmm1, rax
divss xmm1, xmm0
movss dword [rbx + 0x18], xmm1
mov qword [0x14009da78], rcx
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov ecx, 0x10
and al, 1
mov byte [rbx + 0x13c], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov ecx, 0x12
and al, 1
mov byte [rbx + 0x13d], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
mov byte [rbx + 0x13f], 0
mov byte [rbx + 0x13e], al
call fcn.140035070
cmp byte [rbx + 0xcf], 0
je 0x14004f3fb
mov eax, 0xffffffff
jmp 0x14004f408
mov rax, qword [0x14009d5f0]
mov eax, dword [rax + 0x20d0]
cmp dword [0x14009c860], eax
je 0x14004f41b
mov dword [0x14009c860], eax
call fcn.140034ef0
call fcn.140035270
call fcn.140006f00
cmp byte [0x14006c068], 0
je 0x140050cd3
call fcn.140049d10
cmp byte [0x14009d5ea], 0
mov rax, qword [0x14009d5f0]
jne 0x14004f546
movaps xmm0, xmmword [0x140060ce0]
movups xmmword [rax + 0x171c], xmm0
mov byte [0x14009d5ea], 1
movups xmmword [rax + 0x172c], xmm0
movaps xmm1, xmm0
movaps xmm1, xmmword [0x140060da0]
movups xmmword [rax + 0x176c], xmm1
movups xmmword [rax + 0x177c], xmm1
movups xmmword [rax + 0x184c], xmm1
movups xmmword [rbp + 0x5a0], xmm0
movups xmmword [rbp + 0x4a8], xmm0
movaps xmm0, xmmword [0x140060df0]
movups xmmword [rax + 0x174c], xmm0
movups xmmword [rbp + 0x4b8], xmm0
movaps xmm0, xmm1
movaps xmm0, xmmword [0x140060de0]
movups xmmword [rax + 0x186c], xmm0
movups xmmword [rax + 0x185c], xmm0
movups xmmword [rbp + 0x4c8], xmm1
movups xmmword [rbp + 0x4d8], xmm1
movups xmmword [rbp + 0x4e8], xmm1
movups xmmword [rbp + 0x4f8], xmm0
movaps xmm1, xmm0
movups xmmword [rbp + 0x508], xmm0
movaps xmm0, xmmword [0x140060d30]
movups xmmword [rax + 0x170c], xmm0
mov dword [rax + 0x163c], 0x40800000
mov dword [rax + 0x1640], 0x40800000
mov qword [rax + 0x1644], 0x40a00000
mov dword [rax + 0x1660], 0x41a00000
mov dword [rax + 0x1678], 0x40400000
mov dword [rax + 0x1670], 0x41000000
mov dword [rax + 0x1674], 0x40c00000
mov dword [rax + 0x167c], 0x40000000
or dword [rax + 0x1dc0], 2
lea rdx, [0x14006c068]
movsd xmm0, qword [0x14009c8b0]
mov edi, 1
movsd qword [rax + 0x1de4], xmm0
mov dword [rax + 0x1dc8], edi
mov r8d, dword [0x14009c8b8]
mov rcx, qword [str.By_SandFoxy_With_Love_:_]
call fcn.14000d910
cmp byte [0x14009d5e9], dil
mov rcx, qword [0x14009d5f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], dil
mov rdx, qword [rcx + 0x1d18]
mov r15, qword [rdx + 0x2f8]
movss xmm9, dword [rdx + 0x118]
movss xmm8, dword [rdx + 0x11c]
je 0x140050c8e
cmp byte [0x14009d5eb], 0
je 0x14004f8f7
mov byte [rdx + 0xd1], dil
lea r9, [rbp + 0x90]
mov rax, qword [rcx + 0x1d18]
lea r8, [rbp + 0x98]
mov rcx, qword [rbp + 0xa8]
lea rdx, [rbp + 0xa0]
mov dword [rbp + 0x90], 0x3f800000
mov dword [rbp + 0x94], 0x3f800000
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
mov qword [rbp + 0x98], 0
mov dword [rbp + 0xa0], 0x431407ae
addss xmm0, dword [0x1400609bc]
mov dword [rbp + 0xa4], 0x429ab333
addss xmm2, dword [0x1400609e8]
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x134], xmm1
xorps xmm1, xmm1
movss dword [rax + 0x130], xmm0
lea rax, [rbp + 0x3e0]
movaps xmm0, xmmword [0x140060df0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x3d0]
mov qword [rsp + 0x20], rax
movups xmmword [rbp + 0x3e0], xmm1
movups xmmword [rbp + 0x3d0], xmm0
call fcn.14003a4b0
mov rcx, qword [0x14009d5f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], dil
mov rax, qword [rcx + 0x1d18]
lea rcx, [rbp + 0x3c0]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x140060988]
addss xmm2, dword [0x1400609ec]
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x140060c70]
movss dword [rax + 0x130], xmm0
movups xmmword [rbp + 0x3c0], xmm1
call fcn.140003590
addss xmm8, dword [0x1400609d8]
movaps xmm0, xmm9
mov dword [rsp + 0x28], r14d
addss xmm0, dword [0x1400609c8]
addss xmm9, dword [0x1400609c4]
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0xb0]
movss dword [rbp + 0xb4], xmm8
lea rdx, [rbp + 0xb8]
movss dword [rbp + 0xbc], xmm8
addss xmm0, xmm13
mov rcx, r15
movss dword [rbp + 0xb8], xmm9
movss dword [rbp + 0xb0], xmm0
call fcn.14002d800
mov rcx, r12
call fcn.140010e70
mov rcx, qword [0x14009d5f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], dil
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x1400609e0]
lea rcx, str.Preparing
addss xmm2, dword [0x1400609f4]
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140038470
call fcn.140010f10
mov ecx, edi
call fcn.14005618c
lea rcx, [rbp + 0x7e8]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140055980]
xor ecx, ecx
mov dword [rsp + 0x20], r14d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x7e0], rax
test rax, rax
je 0x140050c7b
cmp dword [rbp + 0x7e8], 0
je 0x140050c72
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x7e8], eax
je 0x140050c66
movaps xmm0, xmmword [rbp + 0x7e0]
lea rcx, [rbp + 0x380]
xor edx, edx
movdqa xmmword [rbp + 0x380], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140050c5a
xorps xmm0, xmm0
movaps xmmword [rbp + 0x520], xmm0
movdqa xmmword [rbp + 0x7e0], xmm0
jmp 0x140050b27
cmp byte [0x14009d5ee], 0
movaps xmm6, xmm8
movaps xmm7, xmm8
addss xmm6, xmm13
subss xmm7, xmm15
jne 0x140050749
movaps xmm0, xmmword [0x140060df0]
lea rcx, [rbp + 0x368]
movups xmmword [rbp + 0x368], xmm0
call fcn.140003590
movaps xmm0, xmm9
movss dword [rbp + 0xc4], xmm6
addss xmm0, dword [0x140060a0c]
mov r9d, eax
movss dword [rbp + 0xcc], xmm7
lea r8, [rbp + 0xc0]
mov rcx, r15
lea rdx, [rbp + 0xc8]
movss dword [rbp + 0xc0], xmm0
movss dword [rbp + 0xc8], xmm0
movss xmm0, dword [0x14006095c]
movss dword [rsp + 0x20], xmm0
call fcn.14002d5a0
mov rcx, qword [0x14009d5f0]
lea r9, [rbp + 0xd0]
lea r8, [rbp + 0xd8]
mov dword [rbp + 0xd0], 0x3f800000
lea rdx, [rbp + 0xe0]
mov dword [rbp + 0xd4], 0x3f800000
mov qword [rbp + 0xd8], 0
mov rax, qword [rcx + 0x1d18]
mov dword [rbp + 0xe0], 0x42d80000
mov dword [rbp + 0xe4], 0x42c40000
mov byte [rax + 0xd1], dil
mov rax, qword [rcx + 0x1d18]
mov rcx, qword [rbp + 0x20]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x140060978]
addss xmm2, dword [0x1400609c0]
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x134], xmm1
xorps xmm1, xmm1
movss dword [rax + 0x130], xmm0
lea rax, [rbp + 0x358]
movaps xmm0, xmmword [0x140060df0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x348]
mov qword [rsp + 0x20], rax
movups xmmword [rbp + 0x358], xmm1
movups xmmword [rbp + 0x348], xmm0
call fcn.14003a4b0
mov rcx, qword [0x14009d5f0]
movss xmm6, dword [0x140060994]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], dil
mov rax, qword [rcx + 0x1d18]
mov rcx, qword [rbp + 0x2c8]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x1400609cc]
addss xmm2, xmm6
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140010e70
lea rcx, [0x140060568]
call fcn.140038470
call fcn.140010f10
mov rcx, qword [0x14009d5f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], dil
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
movss xmm7, dword [0x1400609f0]
addss xmm0, dword [0x1400609d0]
addss xmm2, xmm6
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
movaps xmm0, xmm7
call fcn.140011890
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x30], r14
lea r8, [0x14009d600]
mov dword [rsp + 0x28], r14d
lea rcx, str.Username
mov r9d, 0xff
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0xe8], 0
call fcn.14003d5c0
mov rcx, qword [0x14009d5f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], dil
mov rax, qword [rcx + 0x1d18]
mov rcx, qword [0x14006c060]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x1400609f8]
addss xmm2, xmm6
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140038470
mov rcx, qword [0x14009d5f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], dil
mov rax, qword [rcx + 0x1d18]
mov rcx, qword [rbp + 0x2c8]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x1400609dc]
addss xmm2, xmm6
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.140010e70
lea rcx, [0x140060588]
call fcn.140038470
call fcn.140010f10
mov rcx, qword [0x14009d5f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], dil
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
movss xmm2, dword [rax + 0x50]
subss xmm0, dword [rax + 0xa0]
subss xmm2, dword [rax + 0x9c]
addss xmm0, dword [0x1400609e4]
addss xmm2, xmm6
movss dword [rax + 0x11c], xmm0
movss dword [rax + 0x118], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
movaps xmm0, xmm7
call fcn.140011890
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0x48]
mov qword [rsp + 0x30], r14
lea r8, [0x14009d840]
mov dword [rsp + 0x28], 0x8000
lea rcx, str.Password
mov r9d, 0xff
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x48], 0
call fcn.14003d5c0
mov rcx, qword [0x14009d5f0]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], dil
mov rbx, qword [rcx + 0x1d18]
lea rcx, [rbp + 0x3a0]
movss xmm1, dword [rbx + 0x54]
lea r8, [rbx + 0x118]
movss xmm0, dword [rbx + 0x50]
lea rdx, [rbx + 0x130]
subss xmm1, dword [rbx + 0xa0]
subss xmm0, dword [rbx + 0x9c]
addss xmm1, dword [0x140060a00]
addss xmm0, xmm6
movss dword [r8 + 4], xmm1
movss dword [r8], xmm0
call fcn.140001810
lea rdx, [rbp + 0xf8]
mov dword [rbp + 0xf8], 0x43700000
lea rcx, str.LOGIN
mov dword [rbp + 0xfc], 0x42200000
movsd xmm0, qword [rax]
movsd qword [rbx + 0x130], xmm0
call fcn.140039250
test al, al
je 0x14005061e
xor r9d, r9d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rcx, str..PhysicalDrive0
xor edx, edx
mov qword [rbp + 0x820], r14
mov qword [rbp + 0x830], r14
lea r8d, [r9 + 3]
mov qword [rbp + 0x838], 0xf
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14004fecd
mov qword [rbp + 0x68], r14
mov qword [rbp + 0x78], r14
mov qword [rbp + 0x80], 0xf
jmp 0x1400500c1
lea rcx, [rbp + 0x800]
call fcn.140049d00
lea rax, [sub.KERNEL32.dll_CloseHandle]
mov rdx, rbx
lea r8, [rbp + 0x2d0]
mov qword [rbp + 0x2d0], rax
lea rcx, [rbp + 0x800]
call fcn.140053d90
mov qword [rsp + 0x38], r14
lea rax, [rbp + 0x7d0]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x810]
mov dword [rbp + 0x7d0], r14d
lea rax, [rbp + 0x880]
mov r14, qword [rbp + 0x808]
mov r9d, 0xc
mov dword [rsp + 0x28], 8
mov edx, 0x2d1400
mov rcx, r14
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x810], 0
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x14004ff75
xor r14d, r14d
mov qword [rbp + 0x80], 0xf
mov qword [rbp + 0x68], r14
mov qword [rbp + 0x78], r14
jmp 0x1400500b5
mov edi, dword [rbp + 0x884]
mov ecx, edi
call fcn.1400561c8
mov r8d, edi
xor edx, edx
mov rcx, rax
mov rsi, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x38], 0
lea rax, [rbp + 0x7d0]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x810]
mov dword [rsp + 0x28], edi
mov r9d, 0xc
mov edx, 0x2d1400
mov qword [rsp + 0x20], rsi
mov rcx, r14
mov qword [rbp + 0x7f0], rsi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x140050093
mov eax, dword [rsi + 0x18]
test eax, eax
je 0x140050093
lea rdx, [rsi + rax]
lea rcx, [rbp + 0x820]
call fcn.140052f30
lea rdx, [rbp + 0x3a8]
lea rcx, [rbp + 0x820]
call fcn.140052dc0
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x820]
mov rdi, qword [rax]
call fcn.140052dc0
lea rdx, [rbp + 0x3b8]
lea rcx, [rbp + 0x820]
mov rbx, qword [rax]
call fcn.140052de0
mov r9, qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
lea rcx, [rbp + 0x410]
mov r8, rbx
mov rdx, qword [rax]
call fcn.140053d00
mov r9, rdi
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x820]
mov r8, qword [rax]
call fcn.140052e00
lea rdx, [rbp + 0x820]
lea rcx, [rbp + 0x68]
call fcn.140053040
lea rcx, [rbp + 0x7f0]
call fcn.140052d80
lea rcx, [rbp + 0x800]
call fcn.140052d90
xor r14d, r14d
jmp 0x1400500c1
xor r14d, r14d
mov qword [rbp + 0x80], 0xf
lea rcx, [rbp + 0x7f0]
mov qword [rbp + 0x68], r14
mov qword [rbp + 0x78], r14
call fcn.140052d80
lea rcx, [rbp + 0x800]
call fcn.140052d90
lea rcx, [rbp + 0x820]
call fcn.140052f50
movabs rbx, 0x8e27ea71e2491348
lea rdx, str.https:__artic.over_nine.fun_auth.php_username
movabs rax, 0xca8c26003b7d9dfd
lea rcx, [rbp + 0x650]
mov qword [rbp], rax
movabs rdi, 0xca8c1b64520af5db
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp], rbx
mov qword [rbp + 0xc60], rax
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x220]
mov qword [rbp + 0xc68], rax
movabs rax, 0xb8e36c17216b85fd
pxor xmm0, xmmword [rbp + 0xc60]
movdqa xmmword [rbp + 0x220], xmm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0x8e27ea71e2492e2c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc10], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x210]
mov qword [rbp + 0xc18], rax
pxor xmm0, xmmword [rbp + 0xc10]
movdqa xmmword [rbp + 0x210], xmm0
call fcn.140053070
mov rdx, rax
lea r8, [0x14009d600]
lea rcx, [rbp + 0x630]
call fcn.1400541d0
lea r8, [rbp + 0x210]
mov rdx, rax
lea rcx, [rbp + 0x610]
call fcn.1400541d0
mov rdx, rax
lea r8, [0x14009d840]
lea rcx, [rbp + 0x5f0]
call fcn.1400541d0
lea r8, [rbp + 0x220]
mov rdx, rax
lea rcx, [rbp + 0x5d0]
call fcn.1400541d0
lea r8, [rbp + 0x68]
mov rdx, rax
lea rcx, [rbp + 0x720]
call fcn.1400542a0
mov rdx, rax
lea rcx, [rbp + 0x5b0]
call fcn.140049030
mov rdx, rax
lea rcx, [0x14009c900]
call fcn.140052fb0
lea rcx, [rbp + 0x5b0]
call fcn.140052f50
lea rcx, [rbp + 0x5d0]
call fcn.140052f50
lea rcx, [rbp + 0x5f0]
call fcn.140052f50
lea rcx, [rbp + 0x610]
call fcn.140052f50
lea rcx, [rbp + 0x630]
call fcn.140052f50
lea rcx, [rbp + 0x650]
call fcn.140052f50
lea rcx, [rbp + 0x68]
call fcn.140052f50
movabs rax, 0xcaff6801316980a8
mov qword [rbp], rax
lea rdx, [rbp + 0x230]
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc50], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x230]
mov qword [rbp + 0xc58], rax
pxor xmm0, xmmword [rbp + 0xc50]
movdqa xmmword [rbp + 0x230], xmm0
call fcn.1400542c0
test al, al
je 0x14005049f
lea rcx, [rbp + 0xb00]
call fcn.1400517e0
lea rcx, [rbp + 0xb00]
call fcn.140051900
lea rdx, str.C:Articusername.data
lea rcx, [rbp + 0xb00]
call fcn.1400518b0
cmp qword [rbp + 0xb88], 0
je 0x14005035e
lea rdx, [0x14009d600]
lea rcx, [rbp + 0xb00]
call fcn.1400545d0
lea rdx, [0x1400547a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x9f0]
call fcn.1400517e0
lea rcx, [rbp + 0x9f0]
call fcn.140051900
lea rdx, str.C:Articpassword.data
lea rcx, [rbp + 0x9f0]
call fcn.1400518b0
cmp qword [rbp + 0xa78], 0
je 0x1400503b6
lea rdx, [0x14009d840]
lea rcx, [rbp + 0x9f0]
call fcn.1400545d0
lea rdx, [0x1400547a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.expire
lea rcx, [rbp + 0x6b0]
call fcn.140053070
lea rdx, str.https:__artic.over_nine.fun_auth.php_username
mov rbx, rax
lea rcx, [rbp + 0x690]
call fcn.140053070
mov rdx, rax
lea r8, [0x14009d600]
lea rcx, [rbp + 0x670]
call fcn.1400541d0
mov r8, rbx
lea rcx, [rbp + 0x8f8]
mov rdx, rax
call fcn.1400542a0
lea rcx, [rbp + 0x670]
call fcn.140052f50
lea rcx, [rbp + 0x690]
call fcn.140052f50
lea rcx, [rbp + 0x6b0]
call fcn.140052f50
lea rdx, [rbp + 0x8f8]
lea rcx, [rbp + 0x700]
call fcn.1400530b0
mov rdx, rax
lea rcx, [rbp + 0x6d0]
call fcn.140049030
mov rdx, rax
lea rcx, [0x14009c888]
call fcn.140052fb0
lea rcx, [rbp + 0x6d0]
call fcn.140052f50
lea rcx, [rbp + 0x8f8]
mov byte [0x14009d5ed], 1
mov byte [0x14009d5ee], 1
call fcn.140052f50
lea rcx, [rbp + 0x9f0]
call fcn.140051710
lea rcx, [rbp + 0xb00]
call fcn.140051710
jmp 0x14005061e
movabs rax, 0xca8c1b0627799ab5
lea rdx, [rbp + 0x200]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc40], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x200]
mov qword [rbp + 0xc48], rax
pxor xmm0, xmmword [rbp + 0xc40]
movdqa xmmword [rbp + 0x200], xmm0
call fcn.1400542c0
test al, al
je 0x140050520
lea rax, str.NO_SUB_
mov qword [0x14006c060], rax
jmp 0x14005061e
movabs rax, 0xa3ed7d5e366382b3
lea rdx, [rbp + 0x240]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x8e27ea71e2491324
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc30], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x240]
mov qword [rbp + 0xc38], rax
pxor xmm0, xmmword [rbp + 0xc30]
movdqa xmmword [rbp + 0x240], xmm0
call fcn.1400542c0
test al, al
je 0x1400505a8
lea rax, str.HWID_ERROR_
mov qword [0x14006c060], rax
jmp 0x14005061e
movabs rax, 0xca8c1b643e6394bd
lea rdx, [rbp + 0x10]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc20], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0xc28], rax
pxor xmm0, xmmword [rbp + 0xc20]
movdqa xmmword [rbp + 0x10], xmm0
call fcn.1400542c0
test al, al
lea rcx, str.INCORRECT_DATA_
lea rax, str.UNKNOWN_ERROR_
cmove rcx, rax
mov qword [0x14006c060], rcx
lea rcx, [rbp + 0x100]
mov dword [rbp + 0x100], 0x43b98000
mov dword [rbp + 0x104], 0x43210000
call fcn.140011810
lea rcx, str.Loader_Working
call fcn.140038470
lea rcx, [rbp + 0x108]
mov dword [rbp + 0x108], 0x43b98000
mov dword [rbp + 0x10c], 0x43360000
call fcn.140011810
lea rcx, [rbp + 0x8a8]
call fcn.140052db0
mov rcx, rax
call fcn.140038470
mov edx, 0xff
lea rcx, [rbp + 0x530]
mov r9d, edx
mov r8d, edx
call fcn.140037db0
mov rcx, rax
call fcn.140003590
mov rdx, qword [rbp + 0x130]
lea r9, [rbp + 0x120]
movaps xmm0, xmm9
movss dword [rsp + 0x38], xmm10
addss xmm0, dword [0x140060a20]
addss xmm9, dword [0x140060a14]
mov dword [rsp + 0x30], eax
lea r8, [rbp + 0x128]
movaps xmm1, xmm8
mov dword [rbp + 0x110], 0x3f800000
addss xmm1, dword [0x1400609d4]
lea rax, [rbp + 0x110]
movss dword [rbp + 0x120], xmm0
mov qword [rsp + 0x28], rax
addss xmm8, xmm14
lea rax, [rbp + 0x118]
movss dword [rbp + 0x128], xmm9
mov rcx, r15
mov dword [rbp + 0x114], 0x3f800000
movss dword [rbp + 0x124], xmm1
mov qword [rbp + 0x118], 0
movss dword [rbp + 0x12c], xmm8
mov qword [rsp + 0x20], rax
call fcn.14002dcd0
jmp 0x140050b27
lea rcx, [rbp + 0x138]
mov dword [rbp + 0x138], 0x40000000
mov dword [rbp + 0x13c], 0x40e00000
call fcn.140011810
movaps xmm3, xmm12
movss dword [rsp + 0x20], xmm12
movaps xmm2, xmm12
lea rcx, [rbp + 0x540]
movaps xmm1, xmm12
call fcn.140001610
movaps xmm3, xmm11
movss dword [rsp + 0x20], xmm11
movaps xmm2, xmm11
lea rcx, [rbp + 0x550]
movaps xmm1, xmm11
mov rbx, rax
call fcn.140001610
mov rcx, qword [rbp + 0x20]
lea r9, [rbp + 0x178]
lea r8, [rbp + 0x140]
mov qword [rsp + 0x28], rbx
lea rdx, [rbp + 0x148]
mov dword [rbp + 0x178], 0x3f800000
mov dword [rbp + 0x17c], 0x3f800000
mov qword [rbp + 0x140], 0
mov dword [rbp + 0x148], 0x42600000
mov dword [rbp + 0x14c], 0x424c0000
mov qword [rsp + 0x20], rax
call fcn.14003a4b0
mov edx, 0xff
lea rcx, [rbp + 0x560]
mov r9d, edx
mov r8d, edx
call fcn.140037db0
mov rcx, rax
call fcn.140003590
movaps xmm0, xmm9
movss dword [rbp + 0x154], xmm6
addss xmm0, dword [0x1400609a0]
mov r9d, eax
movss dword [rbp + 0x15c], xmm7
lea r8, [rbp + 0x150]
mov rcx, r15
lea rdx, [rbp + 0x158]
movss dword [rbp + 0x150], xmm0
movss dword [rbp + 0x158], xmm0
movss xmm0, dword [0x14006095c]
movss dword [rsp + 0x20], xmm0
call fcn.14002d5a0
mov edx, 0x5d
lea rcx, [rbp + 0x570]
lea r9d, [rdx + 0x68]
lea r8d, [rdx + 0x66]
call fcn.140037db0
mov rcx, rax
call fcn.140003590
movaps xmm2, xmm9
mov dword [rsp + 0x28], r14d
addss xmm2, dword [0x1400609ac]
movaps xmm1, xmm8
movss dword [rsp + 0x20], xmm10
addss xmm1, dword [0x140060968]
mov r9d, eax
lea r8, [rbp + 0x160]
lea rdx, [rbp + 0x168]
mov rcx, r15
movaps xmm0, xmm2
movss dword [rbp + 0x168], xmm2
addss xmm0, dword [0x140060a18]
movss dword [rbp + 0x16c], xmm1
movss dword [rbp + 0x160], xmm0
movaps xmm0, xmm1
addss xmm0, dword [0x14006099c]
movss dword [rbp + 0x164], xmm0
call fcn.14002d800
mov edx, 0x5d
lea rcx, [rbp + 0x580]
lea r9d, [rdx + 0x68]
lea r8d, [rdx + 0x66]
call fcn.140037db0
mov rcx, rax
call fcn.140003590
movaps xmm7, xmm9
mov dword [rsp + 0x28], r14d
addss xmm7, dword [0x140060954]
movaps xmm6, xmm8
movss dword [rsp + 0x20], xmm10
addss xmm6, dword [0x140060a08]
addss xmm8, dword [0x140060a04]
addss xmm9, xmm10
mov r9d, eax
movaps xmm0, xmm7
lea r8, [rbp + 0x170]
addss xmm0, dword [0x140060990]
lea rdx, [rbp + 0xf0]
mov rcx, r15
movss dword [rbp + 0xf4], xmm8
movss dword [rbp + 0xf0], xmm9
movss dword [rbp + 0x170], xmm0
movaps xmm0, xmm6
addss xmm0, dword [0x140060990]
movss dword [rbp + 0x174], xmm0
call fcn.14002d800
mov edx, 0xff
lea rcx, [rbp + 0x590]
mov r9d, edx
mov r8d, edx
call fcn.140037db0
mov rcx, rax
call fcn.140003590
mov rdx, qword [0x14009d948]
lea r9, [rbp + 0x188]
movss dword [rsp + 0x38], xmm10
lea r8, [rbp + 0x190]
mov dword [rsp + 0x30], eax
movaps xmm0, xmm7
addss xmm0, dword [0x14006098c]
movaps xmm1, xmm6
movss dword [rbp + 0x190], xmm7
addss xmm1, dword [0x14006098c]
lea rax, [rbp + 0x88]
movss dword [rbp + 0x194], xmm6
mov qword [rsp + 0x28], rax
mov rcx, r15
lea rax, [rbp + 0x180]
movss dword [rbp + 0x188], xmm0
mov dword [rbp + 0x88], 0x3f800000
movss dword [rbp + 0x18c], xmm1
mov dword [rbp + 0x8c], 0x3f800000
mov qword [rbp + 0x180], 0
mov qword [rsp + 0x20], rax
call fcn.14002dcd0
lea rcx, [rbp + 0x198]
mov dword [rbp + 0x198], 0x42a40000
mov dword [rbp + 0x19c], 0x41700000
call fcn.140011810
lea rcx, str.CS:GO
call fcn.140038470
lea rcx, [rbp + 0x50]
mov dword [rbp + 0x50], 0x42a40000
mov dword [rbp + 0x54], 0x42180000
call fcn.140011810
lea r8, [0x14009c888]
lea rdx, str.Expiration_date:
lea rcx, [rbp + 0x918]
call fcn.140054070
lea rcx, [rbp + 0x918]
call fcn.140052db0
mov rcx, rax
call fcn.140038470
lea rcx, [rbp + 0x58]
mov dword [rbp + 0x58], 0x43bb8000
mov dword [rbp + 0x5c], 0x43998000
call fcn.140011810
lea rdx, [rbp + 0x60]
mov dword [rbp + 0x60], 0x43700000
lea rcx, str.START
mov dword [rbp + 0x64], 0x42200000
call fcn.140039250
movzx ecx, byte [0x14009d5eb]
test al, al
cmovne ecx, edi
mov byte [0x14009d5eb], cl
lea rcx, [rbp + 0x918]
call fcn.140052f50
call fcn.140010800
call fcn.1400096f0
mov rcx, qword [0x14009d830]
mov r9d, 3
mov dword [rsp + 0x30], r14d
xor r8d, r8d
movss dword [rsp + 0x28], xmm11
xor edx, edx
mov dword [rsp + 0x20], r14d
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x14009d830]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140050b93
call fcn.140009c60
call fcn.1400057f0
mov rcx, rax
call fcn.140033d90
mov rcx, qword [0x14009d830]
mov rax, qword [rcx]
call qword [rax + 0x150]
test dword [r13 + 8], 0x400
je 0x140050ba7
call fcn.140019860
call fcn.140019c70
mov rcx, qword [0x14009d830]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r14
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140050be4
mov rcx, qword [0x14009d830]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140050be4
call fcn.140045ad0
cmp dword [rbp + 0x8d0], 0x12
jne 0x14004ed9f
call fcn.140034390
call fcn.140034e70
call fcn.140005780
call fcn.140045a80
mov rcx, qword [0x14009d940]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x798]
mov rcx, qword [rbp + 0x7c0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
lea rcx, [rbp + 0x888]
call fcn.140052f50
lea rcx, [rbp + 0x8a8]
call fcn.140052f50
xor eax, eax
jmp 0x140050d31
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, edi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x7e8], r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r9d, edi
lea r8, str.Artic
mov rcx, rax
lea rdx, str.Download_New_Loader__nClick_Ok_To_Download_
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, edi
jne 0x140050cd3
mov dword [rsp + 0x28], 5
lea r8, str.https:__artic.over_nine.fun_index.php_link_forums_download_loader.8_
xor r9d, r9d
mov qword [rsp + 0x20], r14
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x14009d838]
mov rdx, qword [0x14009d830]
test rdx, rdx
je 0x140050d09
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov rcx, qword [0x14009d838]
mov qword [0x14009d830], r15
test rcx, rcx
je 0x140050d1b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14009d838], r15
mov rdx, qword [rbp + 0x798]
mov rcx, qword [rbp + 0x7c0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, edi
mov rcx, qword [rbp + 0xce0]
xor rcx, rsp
call fcn.1400559f0
lea r11, [rsp + 0xe10]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140045280
int3
lea r8, [rbp + 0x1e0]
mov edx, eax
call fcn.140048fc0
int3
lea r8, [rbp + 0x250]
mov edx, eax
call fcn.140048fc0
int3