Function at 0x140031ce0
Capabilities:
Create process on windows
Execute command

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x14010c040]
xor rax, rsp
mov qword [rbp - 0x11], rax
mov dword [rbp - 0x21], 0x43c80000
mov dword [rbp - 0x1d], 0x43d48000
mov rax, qword [0x140191f00]
mov dword [rax + 0x3800], 0x40c00000
mov dword [rax + 0x37f0], 0x3f800000
xor edx, edx
mov r8d, 0xbb
lea rcx, str.Main_Window
call fcn.14000c590
xor r8d, r8d
lea rdx, [rbp - 0x21]
mov r10, qword [0x140191f00]
mov rcx, qword [r10 + 0x3ef0]
call fcn.14000f5c0
mov rax, qword [r10 + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [r10 + 0x3ef0]
mov r11, qword [rax + 0x2a0]
mov dword [rbp - 0x21], 0x3d71a9fc
mov dword [rbp - 0x1d], 0x3d71a9fc
mov dword [rbp - 0x19], 0x3d71a9fc
movss xmm0, dword [r10 + 0x37f0]
mulss xmm0, dword [0x1400fd35c]
movss dword [rbp - 0x15], xmm0
lea rcx, [rbp - 0x21]
call fcn.140003310
mov dword [rbp - 0x21], 0x43c78000
mov dword [rbp - 0x1d], 0x43d40000
xorps xmm8, xmm8
mov qword [rbp - 0x39], 0
xor r12d, r12d
mov dword [rsp + 0x28], r12d
movss xmm0, dword [0x1400fd39c]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x21]
lea rdx, [rbp - 0x39]
mov rcx, r11
call fcn.14001dcf0
call fcn.140003670
mov rax, qword [0x140191f00]
mov qword [rax + 0x3800], 0x40c00000
mov dword [rax + 0x381c], 0x40c00000
mov qword [rax + 0x3834], 0x40000000
mov qword [rax + 0x37f8], r12
movups xmm0, xmmword [0x1400c3020]
movups xmmword [rax + 0x3908], xmm0
mov dword [rax + 0x3864], 0x40a00000
mov dword [rax + 0x3868], 0x41200000
mov dword [rax + 0x383c], 0x41200000
mov dword [rax + 0x3840], 0x41700000
lea rdx, [0x1401924f0]
mov rcx, qword [0x1401924e8]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x140191f00]
mov rcx, qword [rax + 0x3ef0]
movd xmm0, dword [0x1401924f4]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rcx + 0x24]
cvttss2si r8d, xmm0
movd xmm1, dword [0x1401924f0]
cvtdq2ps xmm1, xmm1
addss xmm1, dword [rcx + 0x20]
cvttss2si edx, xmm1
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x1a9
mov r9d, 0x190
mov rcx, qword [0x1401924e8]
call qword [sym.imp.USER32.dll_MoveWindow]
mov qword [rbp - 0x21], r12
mov rsi, qword [0x140191f00]
xor r8d, r8d
lea rdx, [rbp - 0x21]
mov rcx, qword [rsi + 0x3ef0]
call fcn.14000f450
mov edi, r12d
mov r9, qword [0x1401924c8]
mov rcx, r9
mov r8, qword [0x1401924c0]
sub rcx, r8
movabs r13, 0x4924924924924925
mov rax, r13
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140031ffe
mov ebx, r12d
movss xmm6, dword [0x1400fd30c]
movss xmm7, dword [0x1400fd3d4]
movss xmm0, dword [r8 + rbx + 0xc]
mulss xmm0, xmm6
mulss xmm0, xmm7
addss xmm0, dword [r8 + rbx + 4]
movss dword [r8 + rbx + 4], xmm0
mov r8, qword [0x1401924c0]
comiss xmm8, dword [r8 + rbx + 4]
jbe 0x140031fc4
mov dword [r8 + rbx + 4], 0x43ed8000
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x5d9f7391
imul r8d
sar edx, 8
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x2bc
sub r8d, ecx
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
mov rax, qword [0x1401924c0]
movss dword [rax + rbx], xmm0
mov r8, qword [0x1401924c0]
inc edi
add rbx, 0x1c
mov r9, qword [0x1401924c8]
mov rcx, r9
sub rcx, r8
mov rax, r13
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, edi
cmp rax, rdx
jb 0x140031f50
mov rsi, qword [0x140191f00]
mov r14d, r12d
sub r9, r8
mov rax, r13
imul r9
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1400320e6
mov r8, r12
mov rdi, r12
movss xmm6, dword [0x1400fd33c]
nop dword [rax]
mov rax, qword [rsi + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rsi + 0x3ef0]
mov rbx, qword [rax + 0x2a0]
mov rax, qword [0x1401924c0]
mov r15d, dword [rax + rdi + 0x18]
movss xmm2, dword [rax + rdi + 0x14]
imul rdx, r8, 0x1c
add rdx, rax
test r15d, 0xff000000
je 0x1400320b5
comiss xmm6, xmm2
ja 0x1400320b5
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
mov rcx, rbx
call fcn.14001cd10
mov r8d, dword [rbx + 0x78]
dec r8d
mov dword [rbx + 0x78], r8d
mov r9d, r15d
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.14001c740
mov dword [rbx + 0x78], r12d
mov rsi, qword [0x140191f00]
mov rax, qword [0x1401924c0]
inc r14d
add rdi, 0x1c
movsxd r8, r14d
mov rcx, qword [0x1401924c8]
sub rcx, rax
mov rax, r13
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r8, rdx
jb 0x140032030
mov rax, qword [rsi + 0x3ef0]
mov byte [rax + 0xb8], 1
movss xmm6, dword [rsi + 0x18]
mulss xmm6, dword [0x1400fd390]
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14019259c], eax
jle 0x14003213e
lea rcx, [0x14019259c]
call fcn.14009e318
cmp dword [0x14019259c], 0xffffffff
jne 0x14003213e
lea rcx, [0x14019259c]
call fcn.14009e2ac
movss xmm0, dword [0x1400fd3a8]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x1400fd400]
call fcn.14002db80
movss xmm0, dword [0x1401924e0]
movss dword [rsi + 0x37f0], xmm0
mov eax, dword [0x140192530]
test eax, eax
jne 0x140032477
mov dword [rbp - 0x21], 0x3f800000
mov dword [rbp - 0x29], r12d
mov rax, qword [0x140191f00]
addss xmm0, dword [rax + 0x18]
movss dword [rbp - 0x39], xmm0
lea rcx, [rbp - 0x29]
lea rax, [rbp - 0x39]
comiss xmm8, xmm0
cmovbe rcx, rax
lea rax, [rbp - 0x21]
comiss xmm0, dword [0x1400fd370]
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x1401924e0], xmm0
movss xmm1, dword [0x1400fd3b4]
subss xmm1, dword [0x1401916d8]
mulss xmm1, xmm6
addss xmm1, dword [0x1401916d8]
movss dword [0x1401916d8], xmm1
movss xmm2, dword [0x1400fd3f0]
subss xmm2, dword [0x1401916f0]
mulss xmm2, xmm6
addss xmm2, dword [0x1401916f0]
movss dword [0x1401916f0], xmm2
movss xmm1, dword [0x1400fd404]
subss xmm1, dword [0x1401916f4]
mulss xmm1, xmm6
addss xmm1, dword [0x1401916f4]
movss dword [0x1401916f4], xmm1
movss xmm6, dword [0x1400fc440]
movss xmm7, dword [0x1400fc444]
movss xmm8, dword [0x1400fc448]
movss xmm9, dword [0x1400fc44c]
mov rcx, qword [0x140192538]
call fcn.14000f310
mov dword [rbp - 0x21], 0x43160000
mov dword [rbp - 0x1d], 0x42b40000
movss dword [rbp - 0x39], xmm6
movss dword [rbp - 0x35], xmm7
movss dword [rbp - 0x31], xmm8
mov rax, qword [0x140191f00]
movss xmm1, dword [rax + 0x37f0]
movaps xmm0, xmm1
mulss xmm0, xmm9
movss dword [rbp - 0x2d], xmm0
mov dword [rbp - 0x59], 0x3f800000
mov dword [rbp - 0x55], 0x3f800000
mov dword [rbp - 0x51], 0x3f800000
movss dword [rbp - 0x4d], xmm1
lea rcx, [rbp - 0x39]
call fcn.140003310
mov r8d, eax
lea rcx, [rbp - 0x59]
call fcn.140003310
mov edx, eax
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x1400fd3d8]
lea rcx, str.Reaper
call fcn.14002b9c0
mov rcx, qword [0x140192538]
call fcn.14000f310
mov dword [rbp - 0x21], 0x43520000
mov dword [rbp - 0x1d], 0x42b40000
mov dword [rbp - 0x59], 0x3f2eb1c4
mov dword [rbp - 0x55], 0x3e24a8c1
mov dword [rbp - 0x51], 0x3e24a8c1
mov rax, qword [0x140191f00]
movss xmm0, dword [rax + 0x37f0]
movss dword [rbp - 0x4d], xmm0
mov dword [rbp - 0x39], 0x3f2eb1c4
mov dword [rbp - 0x35], 0x3e24a8c1
mov dword [rbp - 0x31], 0x3e24a8c1
movss dword [rbp - 0x2d], xmm0
lea rcx, [rbp - 0x59]
call fcn.140003310
mov r8d, eax
lea rcx, [rbp - 0x39]
call fcn.140003310
mov edx, eax
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x1400fd408]
lea rcx, str.Services
call fcn.14002b9c0
movss xmm6, dword [0x1400fc440]
movss xmm7, dword [0x1400fc444]
movss xmm8, dword [0x1400fc448]
movss xmm9, dword [0x1400fc44c]
mov rcx, qword [0x140192538]
call fcn.14000f310
mov dword [rbp - 0x21], 0x43160000
mov dword [rbp - 0x1d], 0x42f00000
movss dword [rbp - 0x59], xmm6
movss dword [rbp - 0x55], xmm7
movss dword [rbp - 0x51], xmm8
mov rax, qword [0x140191f00]
movss xmm1, dword [rax + 0x37f0]
movaps xmm0, xmm1
mulss xmm0, xmm9
movss dword [rbp - 0x4d], xmm0
mov dword [rbp - 0x39], 0x3f800000
mov dword [rbp - 0x35], 0x3f800000
mov dword [rbp - 0x31], 0x3f800000
movss dword [rbp - 0x2d], xmm1
lea rcx, [rbp - 0x59]
call fcn.140003310
mov r8d, eax
lea rcx, [rbp - 0x39]
call fcn.140003310
mov edx, eax
lea rax, [rbp - 0x21]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x1400fd3d8]
lea rcx, str.Multi_Loader
call fcn.14002b9c0
movss xmm0, dword [0x1400fd3c4]
movss dword [rsp + 0x30], xmm0
movss xmm1, dword [0x1400fd3f8]
movss dword [rsp + 0x28], xmm1
movss xmm0, dword [0x1400fd3e4]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x1400fd3c8]
lea r8, str.start
call fcn.14002d080
test al, al
je 0x1400330e7
call fcn.140030e80
jmp 0x1400330e7
cmp eax, 1
jne 0x1400330e7
mov dword [rbp - 0x29], 0x3f800000
mov dword [rbp - 0x21], r12d
mov rbx, qword [0x140191f00]
addss xmm0, dword [rbx + 0x18]
movss dword [rbp - 0x39], xmm0
lea rcx, [rbp - 0x21]
lea rax, [rbp - 0x39]
comiss xmm8, xmm0
cmovbe rcx, rax
lea rax, [rbp - 0x29]
comiss xmm0, dword [0x1400fd370]
cmovbe rax, rcx
movss xmm0, dword [rax]
movss dword [0x1401924e0], xmm0
movss xmm1, dword [0x1400fd3b4]
subss xmm1, dword [0x1401916d8]
mulss xmm1, xmm6
addss xmm1, dword [0x1401916d8]
movss dword [0x1401916d8], xmm1
movss xmm2, dword [0x1400fd3f0]
subss xmm2, dword [0x1401916f0]
mulss xmm2, xmm6
addss xmm2, dword [0x1401916f0]
movss dword [0x1401916f0], xmm2
movss xmm1, dword [0x1400fd404]
subss xmm1, dword [0x1401916f4]
mulss xmm1, xmm6
addss xmm1, dword [0x1401916f4]
movss dword [0x1401916f4], xmm1
xorps xmm6, xmm6
mov dword [rbp - 0x59], 3
movups xmm0, xmmword [rbx + 0x3908]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3908], xmm6
movdqa xmm6, xmmword [0x1400fd5d0]
mov rbx, qword [0x140191f00]
mov dword [rbp - 0x59], 0x18
movups xmm0, xmmword [rbx + 0x3a58]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a58], xmm6
movdqa xmm6, xmmword [0x1400fd650]
mov rbx, qword [0x140191f00]
mov dword [rbp - 0x59], 0x19
movups xmm0, xmmword [rbx + 0x3a68]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a68], xmm6
xorps xmm6, xmm6
mov rbx, qword [0x140191f00]
mov dword [rbp - 0x59], 0x1a
movups xmm0, xmmword [rbx + 0x3a78]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a78], xmm6
mov rbx, qword [0x140191f00]
or dword [rbx + 0x47c8], 1
mov dword [rbx + 0x47d8], 0x42200000
mov qword [rbx + 0x47dc], 0x41f00000
mov dword [rbx + 0x47e4], r12d
mov dword [rbx + 0x47cc], 1
mov dword [rbp - 0x21], 0x439d8000
mov dword [rbp - 0x1d], 0x43960000
mov rax, qword [rbx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rbx, qword [rbx + 0x3ef0]
movsxd r8, dword [rbx + 0xf0]
mov rax, qword [rbx + 0xf8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Selectable_items
call fcn.140002e40
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x3f38], eax
jne 0x14003269a
lea r8, str.Selectable_items
mov edx, 0xb
mov ecx, eax
call fcn.140018760
lea r8, [rbp - 0x21]
mov edx, edi
call fcn.1400099b0
mov rcx, qword [0x140192508]
call fcn.14000f310
mov rcx, qword [0x140191f00]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
movss xmm7, dword [0x1400fd434]
cmp byte [rax + 0xbb], r12b
jne 0x1400326ee
mov qword [rbp - 0x21], r12
movaps xmm1, xmm7
lea rcx, [rbp - 0x21]
call fcn.140011980
mov qword [rbp - 0x21], r12
lea r9, [rbp - 0x21]
xor edx, edx
lea rcx, str.__MW3_Chair______Being_Fixed
call fcn.14002c940
test al, al
je 0x14003271d
mov byte [0x1401924bd], 1
mov byte [0x1401924b9], r12b
mov byte [0x1401924b8], r12b
mov rcx, qword [0x140191f00]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
cmp byte [rax + 0xbb], r12b
jne 0x140032752
mov qword [rbp - 0x21], r12
movaps xmm1, xmm7
lea rcx, [rbp - 0x21]
call fcn.140011980
mov qword [rbp - 0x21], r12
lea r9, [rbp - 0x21]
xor edx, edx
lea rcx, str.__MW3_AIO
call fcn.14002c940
test al, al
je 0x140032781
mov byte [0x1401924b9], 1
mov byte [0x1401924bd], r12b
mov byte [0x1401924b8], r12b
mov rcx, qword [0x140191f00]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
cmp byte [rax + 0xbb], r12b
jne 0x1400327b6
mov qword [rbp - 0x21], r12
movaps xmm1, xmm7
lea rcx, [rbp - 0x21]
call fcn.140011980
mov qword [rbp - 0x21], r12
lea r9, [rbp - 0x21]
xor edx, edx
lea rcx, str.__MW3_UA______Being_Fixed
call fcn.14002c940
test al, al
je 0x1400327e5
mov byte [0x1401924b8], 1
mov byte [0x1401924b9], r12b
mov byte [0x1401924bd], r12b
mov rcx, qword [0x140191f00]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
cmp byte [rax + 0xbb], r12b
jne 0x14003281a
mov qword [rbp - 0x21], r12
movaps xmm1, xmm7
lea rcx, [rbp - 0x21]
call fcn.140011980
mov qword [rbp - 0x21], r12
lea r9, [rbp - 0x21]
xor edx, edx
lea rcx, str.__MW19_Chair
call fcn.14002c940
test al, al
je 0x140032849
mov byte [0x1401924bb], 1
mov byte [0x1401924bc], r12b
mov byte [0x1401924ba], r12b
mov rcx, qword [0x140191f00]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
cmp byte [rax + 0xbb], r12b
jne 0x14003287e
mov qword [rbp - 0x21], r12
movaps xmm1, xmm7
lea rcx, [rbp - 0x21]
call fcn.140011980
mov qword [rbp - 0x21], r12
lea r9, [rbp - 0x21]
xor edx, edx
lea rcx, str.__FIVE_M_Chair
call fcn.14002c940
test al, al
je 0x1400328ad
mov byte [0x1401924bb], 1
mov byte [0x1401924bc], r12b
mov byte [0x1401924ba], r12b
mov rcx, qword [0x140191f00]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
cmp byte [rax + 0xbb], r12b
jne 0x1400328e2
mov qword [rbp - 0x21], r12
movaps xmm1, xmm7
lea rcx, [rbp - 0x21]
call fcn.140011980
mov qword [rbp - 0x21], r12
lea r9, [rbp - 0x21]
xor edx, edx
lea rcx, str.__Hwid_Spoofer______Coming_Soon
call fcn.14002c940
test al, al
je 0x140032911
mov byte [0x1401924bc], 1
mov byte [0x1401924bb], r12b
mov byte [0x1401924ba], r12b
mov rcx, qword [0x140191f00]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef0]
cmp byte [rax + 0xbb], r12b
jne 0x140032946
mov qword [rbp - 0x21], r12
movaps xmm1, xmm7
lea rcx, [rbp - 0x21]
call fcn.140011980
mov qword [rbp - 0x21], r12
lea r9, [rbp - 0x21]
xor edx, edx
lea rcx, str.__Check_Compatibility_Tool
call fcn.14002c940
test al, al
je 0x140032975
mov byte [0x1401924ba], 1
mov byte [0x1401924bc], r12b
mov byte [0x1401924bb], r12b
mov rbx, qword [0x140191f00]
mov rax, qword [rbx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ef0]
cmp byte [rax + 0xbb], r12b
jne 0x1400329b1
mov qword [rbp - 0x21], r12
movaps xmm1, xmm7
lea rcx, [rbp - 0x21]
call fcn.140011980
mov rbx, qword [0x140191f00]
movdqa xmm8, xmmword [0x1400fd450]
mov dword [rbp - 0x59], 0x15
movups xmm0, xmmword [rbx + 0x3a28]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a28], xmm8
movdqa xmm6, xmmword [0x1400fd6b0]
mov rbx, qword [0x140191f00]
mov dword [rbp - 0x59], 0x16
movups xmm0, xmmword [rbx + 0x3a38]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a38], xmm6
movdqa xmm6, xmmword [0x1400fd6c0]
mov rbx, qword [0x140191f00]
mov dword [rbp - 0x59], 0x17
movups xmm0, xmmword [rbx + 0x3a48]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a48], xmm6
mov dword [rbp - 0x21], 0x43960000
mov dword [rbp - 0x1d], 0x42340000
lea rdx, [rbp - 0x21]
lea rcx, str.___Click_For_Tool_Guide
call fcn.14002b650
test al, al
je 0x140032ab1
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__tool_guide.gitbook.io_reaper_guide
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [0x1401924ba], 1
mov byte [0x1401924bc], r12b
mov byte [0x1401924bb], r12b
mov rbx, qword [0x140191f00]
mov rax, qword [rbx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ef0]
cmp byte [rax + 0xbb], r12b
jne 0x140032af6
mov qword [rbp - 0x21], r12
movaps xmm1, xmm7
lea rcx, [rbp - 0x21]
call fcn.140011980
mov rbx, qword [0x140191f00]
movdqa xmm8, xmmword [0x1400fd450]
mov dword [rbp - 0x59], 0x15
movups xmm0, xmmword [rbx + 0x3a28]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a28], xmm8
movdqa xmm6, xmmword [0x1400fd6b0]
mov rbx, qword [0x140191f00]
mov dword [rbp - 0x59], 0x16
movups xmm0, xmmword [rbx + 0x3a38]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a38], xmm6
movdqa xmm6, xmmword [0x1400fd6c0]
mov rbx, qword [0x140191f00]
mov dword [rbp - 0x59], 0x17
movups xmm0, xmmword [rbx + 0x3a48]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a48], xmm6
mov dword [rbp - 0x21], 0x43960000
mov dword [rbp - 0x1d], 0x42340000
lea rdx, [rbp - 0x21]
lea rcx, str.___Click_For_Discord
call fcn.14002b650
test al, al
je 0x140032bed
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__discord.com_invite_reaperservice
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [0x1401924ba], 1
mov byte [0x1401924bc], r12b
mov byte [0x1401924bb], r12b
mov rbx, qword [0x140191f00]
mov rax, qword [rbx + 0x3ef0]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ef0]
cmp byte [rax + 0xbb], r12b
jne 0x140032c29
mov qword [rbp - 0x21], r12
movaps xmm1, xmm7
lea rcx, [rbp - 0x21]
call fcn.140011980
mov rbx, qword [0x140191f00]
movdqa xmm6, xmmword [0x1400fd450]
mov dword [rbp - 0x59], 0x15
movups xmm0, xmmword [rbx + 0x3a28]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a28], xmm6
movdqa xmm6, xmmword [0x1400fd6b0]
mov rbx, qword [0x140191f00]
mov dword [rbp - 0x59], 0x16
movups xmm0, xmmword [rbx + 0x3a38]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a38], xmm6
movdqa xmm6, xmmword [0x1400fd6c0]
mov rbx, qword [0x140191f00]
mov dword [rbp - 0x59], 0x17
movups xmm0, xmmword [rbx + 0x3a48]
movups xmmword [rbp - 0x55], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x59]
call fcn.140018eb0
movups xmmword [rbx + 0x3a48], xmm6
mov dword [rbp - 0x21], 0x43960000
mov dword [rbp - 0x1d], 0x42340000
lea rdx, [rbp - 0x21]
lea rcx, str.___Click_For_WebSite
call fcn.14002b650
test al, al
je 0x140032d27
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.https:__reapersservices.sellpass.io_
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov byte [0x1401924ba], 1
mov byte [0x1401924bc], r12b
mov byte [0x1401924bb], r12b
call fcn.14000f3b0
call fcn.140009ba0
movss xmm0, dword [0x1400fd3c4]
movss dword [rsp + 0x30], xmm0
movss xmm1, dword [0x1400fd3f8]
movss dword [rsp + 0x28], xmm1
movss xmm0, dword [0x1400fd3fc]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x1400fd3c8]
lea r8, str.Load
call fcn.14002d080
test al, al
je 0x1400330e7
cmp byte [0x1401924b9], r12b
je 0x140032e1e
mov rcx, qword [0x1401924e8]
call qword [sym.imp.USER32.dll_DestroyWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0x19
lea rdx, str.C:WindowsIMELoader.exe
lea rcx, [rbp - 0x59]
call fcn.1400338c0
nop
lea rcx, [rbp - 0x59]
call fcn.14002fdd0
test al, al
je 0x140032dd9
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rcx, qword [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x1400330e7
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400330e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400330e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp byte [0x1401924bb], r12b
je 0x140032ec5
mov rcx, qword [0x1401924e8]
call qword [sym.imp.USER32.dll_DestroyWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0x27
lea rdx, str.C:WindowsIMEFiveMExternalChair.exe
lea rcx, [rbp - 0x59]
call fcn.1400338c0
nop
lea rcx, [rbp - 0x59]
call fcn.14002fdd0
test al, al
je 0x140032e80
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rcx, qword [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x1400330e7
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400330e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400330e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp byte [0x1401924b8], r12b
je 0x140032f6c
mov rcx, qword [0x1401924e8]
call qword [sym.imp.USER32.dll_DestroyWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0x1d
lea rdx, str.C:WindowsIMEldr_1USoVD.exe
lea rcx, [rbp - 0x59]
call fcn.1400338c0
nop
lea rcx, [rbp - 0x59]
call fcn.14002fdd0
test al, al
je 0x140032f27
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rcx, qword [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x1400330e7
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400330e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400330e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp byte [0x1401924bd], r12b
je 0x140033013
mov rcx, qword [0x1401924e8]
call qword [sym.imp.USER32.dll_DestroyWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0x1d
lea rdx, str.C:WindowsIMEldr_1USoVD.exe
lea rcx, [rbp - 0x59]
call fcn.1400338c0
nop
lea rcx, [rbp - 0x59]
call fcn.14002fdd0
test al, al
je 0x140032fce
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rcx, qword [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x1400330e7
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400330e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400330e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp byte [0x1401924bc], r12b
je 0x140033047
mov rcx, qword [0x1401924e8]
call qword [sym.imp.USER32.dll_DestroyWindow]
xor r9d, r9d
lea r8, [0x1400fd1f0]
lea rdx, [0x1400bdc3c]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1400330e7
cmp byte [0x1401924ba], r12b
je 0x1400330e7
mov rcx, qword [0x1401924e8]
call qword [sym.imp.USER32.dll_DestroyWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0x1c
lea rdx, str.C:WindowsIME_toolfixer.exe
lea rcx, [rbp - 0x59]
call fcn.1400338c0
nop
lea rcx, [rbp - 0x59]
call fcn.14002fdd0
test al, al
je 0x1400330a9
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rcx, qword [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x1400330e7
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400330e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400330e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009e984
call fcn.14000ec50
mov rcx, qword [rbp - 0x11]
xor rcx, rsp
call fcn.14009e250
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret