Function at 0x14005c380
Capabilities:
Create thread
Execute command
Self delete
Set console window title
Terminate process

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x248]
sub rsp, 0x308
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
xor esi, esi
mov dword [rbp + 0x250], esi
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], sil
mov dword [rbp + 0x250], 1
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea ecx, [rax + rax*4]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea ebx, [rsi + 0x14]
movabs rdi, 0x842108421084211
lea r14, str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, rdi
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 5
imul rax, rax, 0x3e
sub rcx, rax
movzx r9d, byte [rcx + r14]
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 8]
cmp rcx, rdx
jae 0x14005c488
lea rax, [rcx + 1]
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x20]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x20]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14005c498
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x20]
call fcn.140057f30
sub rbx, 1
jne 0x14005c430
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov r12d, esi
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14005c4f3
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c4ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c4ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005e3f0
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rbp + 0xd0], 0x50
mov dword [rbp + 0xd4], 0x40
lea rax, [0x14005a0d0]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0xe8], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x100], xmm1
lea rbx, [0x14006f9f4]
mov qword [rbp + 0x110], rbx
mov qword [rbp + 0x118], rsi
lea rcx, [rbp + 0xd0]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], rsi
mov rax, qword [rbp + 0xe8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
mov r9d, 0x80000000
mov r8, rbx
mov rdx, qword [rbp + 0x110]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rbx, rax
mov qword [0x14007b9a8], rax
mov ecx, 0x20
call sub.d3d9.dll_Direct3DCreate9
mov rcx, rax
mov qword [0x14007ba00], rax
test rax, rax
je 0x14005e1e4
mov qword [0x14007b9c0], rsi
mov qword [0x14007b9cc], rsi
mov dword [0x14007b9d4], esi
mov qword [0x14007b9dc], rsi
mov dword [0x14007b9e4], esi
mov qword [0x14007b9f4], rsi
mov dword [0x14007b9e8], 1
mov dword [0x14007b9d8], 1
mov dword [0x14007b9c8], esi
mov dword [0x14007b9ec], 1
mov dword [0x14007b9f0], 0x50
mov dword [0x14007b9fc], 1
mov rax, qword [rax]
lea rdx, [0x14007b9b0]
mov qword [rsp + 0x30], rdx
lea rdx, [0x14007b9c0]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, rbx
xor edx, edx
lea r8d, [rdx + 1]
call qword [rax + 0x80]
test eax, eax
js 0x14005e1e4
xor edx, edx
mov rcx, qword [0x14007b9a8]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14007b9a8]
call qword [sym.imp.USER32.dll_UpdateWindow]
xor ecx, ecx
call fcn.14000a4d0
call fcn.140017fe0
mov r13, rax
mov qword [rax + 0x18], rsi
or dword [rax], 0x400
call fcn.140018690
mov dword [rax + 0xc], 0x40a00000
mov dword [rax + 0x40], 0x40a00000
mov dword [rax + 0x74], 0x40a00000
mov dword [rax + 0x7c], 0x40a00000
mov dword [rax + 0x84], 0x40a00000
mov dword [rax + 0xc4], 0x3f666666
mov dword [rax + 0xc8], 0x3f666666
mov dword [rax + 0xcc], 0x3f666666
mov dword [rax + 0xd0], 0x3f800000
mov dword [rax + 0xd4], 0x3f19999a
mov dword [rax + 0xd8], 0x3f19999a
mov dword [rax + 0xdc], 0x3f19999a
mov dword [rax + 0xe0], 0x3f800000
mov dword [rax + 0xe4], 0x3d75c28f
mov dword [rax + 0xe8], 0x3d75c28f
mov dword [rax + 0xec], 0x3d75c28f
mov dword [rax + 0xf0], 0x3f70a3d7
mov dword [rax + 0xf4], 0x3d8f5c29
mov dword [rax + 0xf8], 0x3d8f5c29
mov qword [rax + 0xfc], 0x3d8f5c29
mov dword [rax + 0x104], 0x3d8f5c29
mov dword [rax + 0x108], 0x3d8f5c29
mov dword [rax + 0x10c], 0x3d8f5c29
mov dword [rax + 0x110], 0x3f70a3d7
mov dword [rax + 0x114], 0x3f4ccccd
mov dword [rax + 0x118], 0x3f4ccccd
mov dword [rax + 0x11c], 0x3f547ae1
mov dword [rax + 0x120], 0x3f6147ae
mov dword [rax + 0x124], 0x3f6b851f
mov dword [rax + 0x128], 0x3f68f5c3
mov qword [rax + 0x12c], 0x3f6147ae
mov dword [rax + 0x134], 0x3dcccccd
mov dword [rax + 0x138], 0x3dcccccd
mov dword [rax + 0x13c], 0x3dcccccd
mov dword [rax + 0x140], 0x3f800000
mov dword [rax + 0x144], 0x3e75c28f
mov dword [rax + 0x148], 0x3e6147ae
mov dword [rax + 0x14c], 0x3e4ccccd
mov dword [rax + 0x150], 0x3f800000
mov dword [rax + 0x154], 0x3f0f5c29
mov dword [rax + 0x158], 0x3f0f5c29
mov dword [rax + 0x15c], 0x3f147ae1
mov dword [rax + 0x160], 0x3f800000
mov dword [rax + 0x164], 0x3dcccccd
mov dword [rax + 0x168], 0x3dcccccd
mov dword [rax + 0x16c], 0x3dcccccd
mov dword [rax + 0x170], 0x3f800000
mov dword [rax + 0x174], 0x3d8f5c29
mov dword [rax + 0x178], 0x3d8f5c29
mov dword [rax + 0x17c], 0x3d8f5c29
mov qword [rax + 0x180], 0x3f800000
mov qword [rax + 0x188], rsi
mov dword [rax + 0x190], 0x3f1c28f6
mov dword [rax + 0x194], 0x3dcccccd
mov dword [rax + 0x198], 0x3dcccccd
mov dword [rax + 0x19c], 0x3dcccccd
mov dword [rax + 0x1a0], 0x3f800000
mov dword [rax + 0x1a4], 0x3ca3d70a
mov dword [rax + 0x1a8], 0x3ca3d70a
mov dword [rax + 0x1ac], 0x3ca3d70a
mov dword [rax + 0x1b0], 0x3f07ae14
mov dword [rax + 0x1b4], 0x3e9eb852
mov dword [rax + 0x1b8], 0x3e9eb852
mov dword [rax + 0x1bc], 0x3e9eb852
mov dword [rax + 0x1c0], 0x3f800000
mov dword [rax + 0x1c4], 0x3ed1eb85
mov dword [rax + 0x1c8], 0x3ed1eb85
mov dword [rax + 0x1cc], 0x3ed1eb85
mov dword [rax + 0x1d0], 0x3f800000
mov dword [rax + 0x1d4], 0x3f028f5c
mov dword [rax + 0x1d8], 0x3f028f5c
mov dword [rax + 0x1dc], 0x3f028f5c
mov dword [rax + 0x1e0], 0x3f800000
mov dword [rax + 0x1e4], 0x3f0f5c29
mov dword [rax + 0x1e8], 0x3f0f5c29
mov dword [rax + 0x1ec], 0x3f0f5c29
mov dword [rax + 0x1f0], 0x3f800000
mov dword [rax + 0x1f4], 0x3f0f5c29
mov dword [rax + 0x1f8], 0x3f0f5c29
mov dword [rax + 0x1fc], 0x3f0f5c29
mov dword [rax + 0x200], 0x3f800000
mov dword [rax + 0x204], 0x3f28f5c3
mov dword [rax + 0x208], 0x3f28f5c3
mov dword [rax + 0x20c], 0x3f28f5c3
mov dword [rax + 0x210], 0x3f800000
mov dword [rax + 0x214], 0x3f0f5c29
mov dword [rax + 0x218], 0x3f0f5c29
mov dword [rax + 0x21c], 0x3f0f5c29
mov dword [rax + 0x220], 0x3f800000
mov dword [rax + 0x224], 0x3f28f5c3
mov dword [rax + 0x228], 0x3f28f5c3
mov dword [rax + 0x22c], 0x3f28f5c3
mov dword [rax + 0x230], 0x3f800000
mov dword [rax + 0x234], 0x3f428f5c
mov dword [rax + 0x238], 0x3f428f5c
mov dword [rax + 0x23c], 0x3f428f5c
mov dword [rax + 0x240], 0x3f800000
mov dword [rax + 0x244], 0x3f0f5c29
mov dword [rax + 0x248], 0x3f0f5c29
mov dword [rax + 0x24c], 0x3f0f5c29
mov dword [rax + 0x250], 0x3f800000
mov dword [rax + 0x254], 0x3f28f5c3
mov dword [rax + 0x258], 0x3f28f5c3
mov dword [rax + 0x25c], 0x3f28f5c3
mov dword [rax + 0x260], 0x3f800000
mov dword [rax + 0x264], 0x3f428f5c
mov dword [rax + 0x268], 0x3f428f5c
mov dword [rax + 0x26c], 0x3f428f5c
mov dword [rax + 0x270], 0x3f800000
mov dword [rax + 0x274], 0x3edc28f6
mov dword [rax + 0x278], 0x3edc28f6
mov dword [rax + 0x27c], 0x3f000000
mov dword [rax + 0x280], 0x3f000000
mov dword [rax + 0x284], 0x3f3851ec
mov dword [rax + 0x288], 0x3f3851ec
mov dword [rax + 0x28c], 0x3f3851ec
mov dword [rax + 0x290], 0x3f47ae14
mov dword [rax + 0x294], 0x3f5c28f6
mov dword [rax + 0x298], 0x3f5c28f6
mov dword [rax + 0x29c], 0x3f5c28f6
mov dword [rax + 0x2a0], 0x3f800000
mov dword [rax + 0x2a4], 0x3f0f5c29
mov dword [rax + 0x2a8], 0x3f0f5c29
mov dword [rax + 0x2ac], 0x3f0f5c29
mov dword [rax + 0x2b0], 0x3f800000
mov dword [rax + 0x2b4], 0x3f28f5c3
mov dword [rax + 0x2b8], 0x3f28f5c3
mov dword [rax + 0x2bc], 0x3f28f5c3
mov dword [rax + 0x2c0], 0x3f800000
mov dword [rax + 0x2c4], 0x3f428f5c
mov dword [rax + 0x2c8], 0x3f428f5c
mov dword [rax + 0x2cc], 0x3f428f5c
mov dword [rax + 0x2d0], 0x3f800000
mov dword [rax + 0x2d4], 0x3f0f5c29
mov dword [rax + 0x2d8], 0x3f0f5c29
mov dword [rax + 0x2dc], 0x3f0f5c29
mov dword [rax + 0x2e0], 0x3f5c28f6
mov dword [rax + 0x2e4], 0x3f28f5c3
mov dword [rax + 0x2e8], 0x3f28f5c3
mov dword [rax + 0x2ec], 0x3f28f5c3
mov dword [rax + 0x2f0], 0x3f5c28f6
mov dword [rax + 0x2f4], 0x3f428f5c
mov dword [rax + 0x2f8], 0x3f428f5c
mov dword [rax + 0x2fc], 0x3f428f5c
mov dword [rax + 0x300], 0x3f800000
mov dword [rax + 0x304], 0x3f6b851f
mov dword [rax + 0x308], 0x3f6b851f
mov dword [rax + 0x30c], 0x3f6b851f
mov dword [rax + 0x310], 0x3f7d70a4
mov dword [rax + 0x314], 0x3f3d70a4
mov dword [rax + 0x318], 0x3f3d70a4
mov dword [rax + 0x31c], 0x3f3d70a4
mov dword [rax + 0x320], 0x3f800000
mov dword [rax + 0x324], 0x3f59999a
mov dword [rax + 0x328], 0x3f59999a
mov dword [rax + 0x32c], 0x3f59999a
mov dword [rax + 0x330], 0x3f333333
mov dword [rax + 0x334], 0x3d75c28f
mov dword [rax + 0x338], 0x3d75c28f
mov dword [rax + 0x33c], 0x3d75c28f
mov dword [rax + 0x340], 0x3f800000
mov dword [rax + 0x344], 0x3f1c28f6
mov dword [rax + 0x348], 0x3f1c28f6
mov dword [rax + 0x34c], 0x3f1c28f6
mov dword [rax + 0x350], 0x3f800000
mov dword [rax + 0x354], 0x3f800000
mov dword [rax + 0x358], 0x3edc28f6
mov dword [rax + 0x35c], 0x3eb33333
mov dword [rax + 0x360], 0x3f800000
mov dword [rax + 0x364], 0x3f666666
mov qword [rax + 0x368], 0x3f333333
mov dword [rax + 0x370], 0x3f800000
mov dword [rax + 0x374], 0x3f800000
mov qword [rax + 0x378], 0x3f19999a
mov dword [rax + 0x380], 0x3f800000
mov dword [rax + 0x3d4], 0x3e851eb8
mov dword [rax + 0x3d8], 0x3f170a3d
mov dword [rax + 0x3dc], 0x3f7ae148
mov dword [rax + 0x3e0], 0x3eb33333
mov dword [rax + 0x3e4], 0x3f800000
mov qword [rax + 0x3e8], 0x3f800000
mov dword [rax + 0x3f0], 0x3f666666
mov dword [rax + 0x3f4], 0x3e851eb8
mov dword [rax + 0x3f8], 0x3f170a3d
mov dword [rax + 0x3fc], 0x3f7ae148
mov dword [rax + 0x400], 0x3f800000
mov dword [rax + 0x404], 0x3f800000
mov dword [rax + 0x408], 0x3f800000
mov dword [rax + 0x40c], 0x3f800000
mov dword [rax + 0x410], 0x3f333333
mov dword [rax + 0x414], 0x3f4ccccd
mov dword [rax + 0x418], 0x3f4ccccd
mov dword [rax + 0x41c], 0x3f4ccccd
mov dword [rax + 0x420], 0x3e4ccccd
mov dword [rax + 0x424], 0x3f4ccccd
mov dword [rax + 0x428], 0x3f4ccccd
mov dword [rax + 0x42c], 0x3f4ccccd
mov dword [rax + 0x430], 0x3eb33333
mov rcx, qword [0x14007b9a8]
call fcn.14003f4d0
mov rcx, qword [0x14007b9b0]
call fcn.14003dfd0
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x140059060]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x150]
call qword [sym.imp.USER32.dll_GetWindowRect]
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
mov r15d, 0x16
lea r14, str.__.2f
xorps xmm8, xmm8
movss xmm7, dword [0x1400676c8]
movss xmm14, dword [str._n__n]
movss xmm10, dword [0x140067748]
movss xmm9, dword [0x14006fd10]
movss xmm11, dword [0x14006fd34]
movss xmm12, dword [0x14006fd30]
movss xmm13, dword [0x14006fd2c]
movss xmm15, dword [0x1400677f0]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x120]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14005cf80
lea rcx, [rbp + 0x120]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x120]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x14005e00b
call fcn.14003e1b0
call fcn.14003f870
call fcn.14001eca0
mov qword [rbp + 0x268], 0
mov dword [rbp + 0x40], 0x437f0000
mov dword [rbp + 0x44], 0x437f0000
lea r8, [rbp + 0x268]
mov edx, 2
lea rcx, [rbp + 0x40]
call fcn.140025270
mov dword [rbp + 0x48], 0x43c80000
mov dword [rbp + 0x4c], 0x43af0000
xor edx, edx
lea rcx, [rbp + 0x48]
call fcn.140025310
movaps xmm0, xmm7
call fcn.140025250
mov r8d, 0x12a
lea rdx, [0x14007b1d1]
lea rcx, str.Xet0ri_Undetected_2024
call fcn.140004170
call fcn.140017ac0
mov rdi, rax
lea rcx, [rbp + 0x50]
call fcn.140018b20
movss xmm1, dword [0x14007bb9c]
subss xmm1, xmm14
movss dword [0x14007bb9c], xmm1
comiss xmm10, xmm1
jbe 0x14005d02f
addss xmm1, xmm7
movss dword [0x14007bb9c], xmm1
mov ebx, esi
movd xmm6, ebx
cvtdq2ps xmm6, xmm6
movaps xmm0, xmm6
mulss xmm0, xmm9
addss xmm0, xmm1
comiss xmm8, xmm0
jbe 0x14005d04e
addss xmm0, xmm7
lea rax, [rbp + 0x260]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x258]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x250]
movaps xmm2, xmm7
movaps xmm1, xmm7
call fcn.14000a2e0
movss xmm0, dword [rbp + 0x250]
movss dword [rbp + 0xb8], xmm0
movss xmm1, dword [rbp + 0x258]
movss dword [rbp + 0xbc], xmm1
movss xmm0, dword [rbp + 0x260]
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x3f800000
lea rcx, [rbp + 0xb8]
call fcn.14000a230
movss xmm3, dword [rbp + 0x54]
movaps xmm1, xmm3
addss xmm1, xmm11
movss xmm2, dword [rbp + 0x50]
addss xmm2, xmm6
movaps xmm0, xmm2
addss xmm0, xmm7
movss dword [rbp + 0x58], xmm0
movss dword [rbp + 0x5c], xmm1
addss xmm3, xmm12
movss dword [rbp + 0x60], xmm2
movss dword [rbp + 0x64], xmm3
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm8
mov r9d, eax
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x60]
mov rcx, rdi
call fcn.14002e0a0
inc ebx
cmp ebx, 0x190
jge 0x14005d129
movss xmm1, dword [0x14007bb9c]
jmp 0x14005d031
cmp dword [0x14007b9b8], 0
jne 0x14005deea
mov r8b, 1
xor edx, edx
lea ecx, [rdx + 2]
call fcn.140041560
movss xmm1, dword [0x1400677f8]
mov ecx, 1
call fcn.1400422c0
call fcn.140051580
mov dword [rbp + 0x68], 0x3f000000
mov dword [rbp + 0x6c], 0x3f000000
lea rdx, [rbp + 0x68]
mov ecx, r15d
call fcn.140020da0
movss xmm1, dword [0x14006770c]
mov ecx, 0xb
call fcn.140020e80
movaps xmm0, xmmword [0x14006fd70]
movups xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
mov ecx, 0x15
call fcn.140020d40
movaps xmm0, xmmword [0x140067800]
movups xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
xor ecx, ecx
call fcn.140020d40
mov dword [rbp + 0x70], 0x42f00000
mov dword [rbp + 0x74], 0x41f00000
lea rdx, [rbp + 0x70]
lea rcx, str.MAIN
call fcn.140049f50
test al, al
je 0x14005d1e5
mov dword [0x14007b1f0], 1
call fcn.140051580
mov dword [rbp + 0x78], 0x42f00000
mov dword [rbp + 0x7c], 0x41f00000
lea rdx, [rbp + 0x78]
lea rcx, str.INFO
call fcn.140049f50
test al, al
je 0x14005d216
mov dword [0x14007b1f0], 2
call fcn.140051580
mov dword [rbp + 0x80], 0x42f00000
mov dword [rbp + 0x84], 0x41f00000
lea rdx, [rbp + 0x80]
lea rcx, [0x14006fa20]
call fcn.140049f50
test al, al
je 0x14005d250
mov dword [0x14007b1f0], 3
mov dword [rbp + 0x88], 0x42f00000
mov dword [rbp + 0x8c], 0x41f00000
lea rdx, [rbp + 0x88]
lea rcx, str.TEST_MOVE
call fcn.140049f50
test al, al
je 0x14005d2ce
mov rcx, qword [0x14007bb80]
cmp rcx, 0xffffffffffffffff
je 0x14005d2ce
mov dword [rbp + 0xa8], 0x1a6
mov dword [rbp + 0xac], 0x1a8
mov word [rbp + 0xb0], si
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp + 0xa8]
mov edx, 0x2676d8
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, 2
call fcn.140020460
mov ecx, 2
call fcn.1400203b0
call fcn.140041e60
mov eax, dword [0x14007b1f0]
cmp eax, 1
jne 0x14005d6ef
mov edx, 0x81
lea rcx, str.TabBar
call fcn.140049970
test al, al
je 0x14005ded1
xor r8d, r8d
xor edx, edx
lea rcx, [0x14006fa34]
call fcn.140049e70
lea rbx, [0x14006fa3c]
lea rdi, str.RButton
test al, al
je 0x14005d500
mov qword [rbp - 0x60], rbx
lea rax, str.Purple
mov qword [rbp - 0x58], rax
lea rax, [0x1400677c4]
mov qword [rbp - 0x50], rax
lea rax, str.Yellow
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rdi
lea rax, str.LButton
mov qword [rbp - 0x10], rax
lea rax, str.XButton1
mov qword [rbp - 8], rax
lea rax, str.XButton2
mov qword [rbp], rax
lea rax, str.Shift
mov qword [rbp + 8], rax
lea rax, [0x14006fa7c]
mov qword [rbp + 0x10], rax
lea rax, [0x14006fa80]
mov qword [rbp + 0x18], rax
lea rdx, [0x14007b939]
lea rcx, str.Aimbot
call fcn.14004a7c0
lea rdx, [0x14007b93a]
lea rcx, str.Toogle
call fcn.14004a7c0
lea rcx, str.Color
call fcn.1400549f0
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 4
lea r8, [rbp - 0x60]
lea rdx, [0x14007b940]
lea rcx, str.Cor
call fcn.14004b310
lea rcx, str.Aim_Key
call fcn.1400549f0
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 8
lea r8, [rbp - 0x20]
lea rdx, [0x14007b944]
lea rcx, str.Bind
call fcn.14004b310
lea rcx, str.Smooth
call fcn.1400549f0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x140067710]
movss xmm2, dword [0x140067698]
lea rdx, [0x14007b1d4]
lea rcx, [0x14006fac0]
call fcn.140051040
lea rcx, str.Fov_X
call fcn.1400549f0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movaps xmm3, xmm13
movaps xmm2, xmm7
lea rdx, [0x14007b1d8]
lea rcx, str.fovx
call fcn.140051040
lea rcx, str.Fov_Y
call fcn.1400549f0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movaps xmm3, xmm13
movaps xmm2, xmm7
lea rdx, [0x14007b1dc]
lea rcx, str.fovy
call fcn.140051040
lea rcx, str.Offset
call fcn.1400549f0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x14006fd28]
movss xmm2, dword [0x14006fd40]
lea rdx, [0x14007b964]
lea rcx, str.OffsetY
call fcn.140051040
call fcn.14004bcb0
xor r8d, r8d
xor edx, edx
lea rcx, str.Trigger
call fcn.140049e70
test al, al
je 0x14005d614
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rdi
lea rax, str.LButton
mov qword [rbp - 0x50], rax
lea rax, str.XButton1
mov qword [rbp - 0x48], rax
lea rax, str.XButton2
mov qword [rbp - 0x40], rax
lea rax, str.Shift
mov qword [rbp - 0x38], rax
lea rax, [0x14006fa7c]
mov qword [rbp - 0x30], rax
lea rax, [0x14006fa80]
mov qword [rbp - 0x28], rax
lea rdx, [0x14007b93d]
lea rcx, str.Trigger
call fcn.14004a7c0
lea rcx, [0x14006fb08]
call fcn.1400549f0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movaps xmm3, xmm15
movss xmm2, dword [0x1400676e0]
lea rdx, [0x14007b1e0]
lea rcx, str.Valor_do_fov_do_trigger
call fcn.140051040
lea rcx, str.Delay_Between_shots
call fcn.1400549f0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
mov r9d, 0x12c
mov r8d, 1
lea rdx, [0x14007b960]
lea rcx, str.Delay_entre_os_tiros
call fcn.140051090
lea rcx, str.Trigger_Key
call fcn.1400549f0
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 8
lea r8, [rbp - 0x60]
lea rdx, [0x14007b958]
lea rcx, str.Tecla
call fcn.14004b310
call fcn.14004bcb0
xor r8d, r8d
xor edx, edx
lea rcx, [0x14006fb78]
call fcn.140049e70
test al, al
je 0x14005d6e5
lea rdx, [0x14007b93b]
lea rcx, [0x14006fb78]
call fcn.14004a7c0
lea rcx, str.RCS_Value
call fcn.1400549f0
mov dword [rsp + 0x28], esi
lea rax, str.__.001f
mov qword [rsp + 0x20], rax
movaps xmm3, xmm7
movss xmm2, dword [0x140067668]
lea rdx, [0x14007b1e4]
lea rcx, str.Valor_que_o_rcs_vai_descer
call fcn.140051040
lea rcx, str.RCS_Smooth
call fcn.1400549f0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x14006772c]
movaps xmm2, xmm7
lea rdx, [0x14007b1ec]
lea rcx, str.Valor_para_suavizar_elrcs
call fcn.140051040
lea rcx, str.RCS_Delay__MS_
call fcn.1400549f0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x14006fd38]
movaps xmm2, xmm7
lea rdx, [0x14007b1e8]
lea rcx, str.Valor_de_atraso_de_RCS
call fcn.140051040
call fcn.14004bcb0
call fcn.14004bcb0
jmp 0x14005ded1
cmp eax, 2
jne 0x14005e0c0
movss xmm0, dword [0x140067728]
call fcn.140024e00
call fcn.140051580
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], 0xa
mov qword [rbp - 8], 0xf
movsd xmm0, qword [0x14006fc18]
movsd qword [rbp - 0x20], xmm0
movzx eax, word [0x14006fc20]
mov word [rbp - 0x18], ax
mov byte [rbp - 0x16], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov ecx, 0x30
call fcn.14005e958
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x70], 0x25
mov qword [rbp - 0x68], 0x2f
movups xmm0, xmmword [str.thanks_for_choosing_us]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14006fc38]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x14006fc48]
mov dword [rax + 0x20], ecx
movzx ecx, byte [0x14006fc4c]
mov byte [rax + 0x24], cl
mov byte [rax + 0x25], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0xf
mov qword [rsp + 0x78], 0xf
movsd xmm0, qword [0x14006fc50]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x14006fc58]
mov dword [rsp + 0x68], eax
movzx eax, word [0x14006fc5c]
mov word [rsp + 0x6c], ax
movzx eax, byte [0x14006fc5e]
mov byte [rsp + 0x6e], al
mov byte [rsp + 0x6f], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], 9
mov qword [rbp + 0x38], 0xf
movsd xmm0, qword [0x14006fc60]
movsd qword [rbp + 0x20], xmm0
movzx eax, byte [0x14006fc68]
mov byte [rbp + 0x28], al
mov byte [rbp + 0x29], 0
call fcn.140051580
mov r15, qword [rbp - 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 7
jb 0x14005e209
lea r14, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova r14, qword [rbp - 0x20]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
lea rsi, [r15 + 7]
mov ebx, 0xf
lea rdi, [rbp - 0x60]
cmp rsi, rbx
jbe 0x14005d8de
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x14005d883
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14005d8aa
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14005d8c9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005e20f
mov rcx, rax
call fcn.14005e958
test rax, rax
je 0x14005e1c1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14005d8da
test rcx, rcx
je 0x14005d8d8
call fcn.14005e958
mov rdi, rax
jmp 0x14005d8da
xor edi, edi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rbx
mov rax, qword [0x14006fc70]
mov dword [rdi], eax
movzx eax, word [0x14006fc74]
mov word [rdi + 4], ax
movzx eax, byte [0x14006fc76]
mov byte [rdi + 6], al
lea rcx, [rdi + 7]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
or r12d, 0x10
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14005d956
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d951
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e1c1
call fcn.14005e3f0
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rbp - 0x10], xmm1
lea rcx, [rbp - 0x20]
movq rdx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0xf
cmova rcx, rdx
call fcn.140054f80
call fcn.140051580
call fcn.140051580
mov r15, qword [rbp - 0x70]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 4
jb 0x14005e209
lea r14, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova r14, qword [rbp - 0x80]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
lea rsi, [r15 + 4]
mov ebx, 0xf
lea rdi, [rbp - 0x60]
cmp rsi, rbx
jbe 0x14005da4f
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x14005d9f4
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14005da1b
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14005da3a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005e20f
mov rcx, rax
call fcn.14005e958
test rax, rax
je 0x14005e1c1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14005da4b
test rcx, rcx
je 0x14005da49
call fcn.14005e958
mov rdi, rax
jmp 0x14005da4b
xor edi, edi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rbx
mov dword [rdi], 0x20202020
lea rcx, [rdi + 4]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
or r12d, 8
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005daaf
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005daaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e1c1
call fcn.14005e3f0
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rbp - 0x70], xmm1
call fcn.140051580
call fcn.140051580
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rcx, qword [rbp - 0x80]
call fcn.140054f80
mov r14, qword [rsp + 0x70]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 6
jb 0x14005e209
lea r15, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova r15, qword [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
lea rsi, [r14 + 6]
mov ebx, 0xf
lea rdi, [rbp - 0x60]
cmp rsi, rbx
jbe 0x14005db9f
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x14005db44
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14005db6b
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14005db8a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005e20f
mov rcx, rax
call fcn.14005e958
test rax, rax
je 0x14005e1c1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14005db9b
test rcx, rcx
je 0x14005db99
call fcn.14005e958
mov rdi, rax
jmp 0x14005db9b
xor edi, edi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rbx
mov eax, dword [0x14006fc78]
mov dword [rdi], eax
movzx eax, word [0x14006fc7c]
mov word [rdi + 4], ax
lea rcx, [rdi + 6]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
or r12d, 2
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14005dc0e
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005dc09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e1c1
call fcn.14005e3f0
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rsp + 0x70], xmm1
call fcn.140051580
call fcn.140051580
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rcx, qword [rsp + 0x60]
call fcn.140054f80
call fcn.140051580
call fcn.140051580
mov r14, qword [rbp + 0x30]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 8
jb 0x14005e209
lea r15, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova r15, qword [rbp + 0x20]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
lea rsi, [r14 + 8]
mov ebx, 0xf
lea rdi, [rbp - 0x60]
cmp rsi, rbx
jbe 0x14005dd09
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x14005dcae
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14005dcd5
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14005dcf4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005e20f
mov rcx, rax
call fcn.14005e958
test rax, rax
je 0x14005e1c1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14005dd05
test rcx, rcx
je 0x14005dd03
call fcn.14005e958
mov rdi, rax
jmp 0x14005dd05
xor edi, edi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rbx
movabs rax, 0x2020202020202020
mov qword [rdi], rax
lea rcx, [rdi + 8]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
or r12d, 4
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14005dd70
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005dd6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e1c1
call fcn.14005e3f0
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [rbp + 0x30], xmm1
lea rcx, [rbp + 0x20]
movq rdx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0xf
cmova rcx, rdx
call fcn.140054f80
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14005dddc
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ddd7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e1c8
call fcn.14005e3f0
xor esi, esi
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], sil
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14005de2b
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005de26
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e1cf
call fcn.14005e3f0
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14005de79
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005de74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e1d6
call fcn.14005e3f0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14005dec4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005debf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005e1dd
call fcn.14005e3f0
mov r15d, 0x16
lea r14, str.__.2f
mov rcx, qword [0x14007b998]
test rcx, rcx
je 0x14005deea
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14007b998], rsi
call fcn.140014640
call fcn.140014df0
mov rcx, qword [0x14007b9b0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], esi
movss dword [rsp + 0x28], xmm7
mov dword [rsp + 0x20], esi
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x14007b9b0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14005df53
call fcn.140020ff0
call fcn.140017a70
mov rcx, rax
call fcn.14003e2b0
mov rcx, qword [0x14007b9b0]
mov rax, qword [rcx]
call qword [rax + 0x150]
test dword [r13], 0x400
je 0x14005df6b
call fcn.140027190
xor edx, edx
xor ecx, ecx
call fcn.140021c70
mov rcx, qword [0x14007b9b0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14005dfe5
mov rcx, qword [0x14007b9b0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14005dfe5
call fcn.14003e070
mov rcx, qword [0x14007b9b0]
mov rax, qword [rcx]
lea rdx, [0x14007b9c0]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14005dfe0
mov r8d, 0x3a
lea rdx, str.D:Relacionados_FGColor_c_raspcRox_Valorantmain.h
lea rcx, [0x140061118]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.14003db20
mov eax, dword [rbp + 0x128]
cmp byte [0x14007b1d1], 0
mov ecx, 0x12
cmove eax, ecx
mov dword [rbp + 0x128], eax
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [rbp + 0x128], 0x12
jne 0x14005cf40
mov rcx, qword [0x14007b9b0]
test rcx, rcx
je 0x14005e031
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14007b9b0], rsi
mov rcx, qword [0x14007ba00]
test rcx, rcx
je 0x14005e04a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14007ba00], rsi
mov rcx, qword [0x14007b9a8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0xe8]
mov rcx, qword [rbp + 0x110]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
lea r11, [rsp + 0x308]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp eax, 3
jne 0x14005ded1
lea rcx, str._______________________________CFG
call fcn.1400549f0
lea rcx, str.
call fcn.1400549f0
movaps xmm1, xmm10
movaps xmm0, xmm8
call fcn.1400244c0
mov dword [rbp + 0x90], 0x43480000
mov dword [rbp + 0x94], 0x41a00000
lea rdx, [rbp + 0x90]
lea rcx, str.Save_Cfg
call fcn.140049f50
test al, al
je 0x14005e11e
call fcn.140059b50
lea rcx, str.
call fcn.1400549f0
movaps xmm1, xmm10
movaps xmm0, xmm8
call fcn.1400244c0
mov dword [rbp + 0x98], 0x43480000
mov dword [rbp + 0x9c], 0x41a00000
lea rdx, [rbp + 0x98]
lea rcx, str.Load_CFG
call fcn.140049f50
test al, al
je 0x14005e167
call fcn.1400590c0
lea rcx, str.
call fcn.1400549f0
movaps xmm1, xmm10
movaps xmm0, xmm8
call fcn.1400244c0
mov dword [rbp + 0xa0], 0x43480000
mov dword [rbp + 0xa4], 0x41a00000
lea rdx, [rbp + 0xa0]
lea rcx, str.Open_CFG_file
call fcn.140049f50
test al, al
je 0x14005ded1
lea rcx, str.start_xet0ri.ini
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x14005ded1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059070
mov rdx, qword [rbp + 0xe8]
mov rcx, qword [rbp + 0x110]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov ecx, 0xfffffc19
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.14005a3d0
int3
call fcn.14005a2d0
int3