Function at 0x1401280a0
Capabilities:
Create process on windows
Create process suspended
Create thread
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov rax, qword [0x14018c010]
xor rax, rsp
mov qword [rbp + 0x100], rax
xor edi, edi
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea rcx, str.EAC
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov qword [rbp - 0x10], 0x54
mov dword [rbp - 8], 0x100000
lea esi, [rdi + 0x10]
lea r8, str.Assets_Font_draw.ttf
lea edx, [rdi + 0x20]
lea rcx, [rbp + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
lea r8, [rbp - 0x10]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetCurrentConsoleFontEx]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rbx, rax
mov dword [rbp - 0x70], edi
lea rdx, [rbp - 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rbp - 0x70]
or edx, 4
mov dword [rbp - 0x70], edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
mov dword [rbp - 0x70], edi
lea rdx, str.Loading_Resource...
lea rcx, [rbp - 0x70]
call fcn.140031250
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
lea r8d, [rdi + 0xc]
lea rdx, str.Assets_Icons
lea rcx, [rsp + 0x70]
call fcn.140023450
lea rcx, [rsp + 0x70]
call fcn.14012e0c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
lea r8d, [rdi + 0xd]
lea rdx, str.Assets_Images
lea rcx, [rsp + 0x70]
call fcn.140023450
lea rcx, [rsp + 0x70]
call fcn.14012e0c0
mov dword [rbp - 0x70], 1
lea rdx, str.Loading_Resource_initialized_successfully
lea rcx, [rbp - 0x70]
call fcn.140031250
mov dword [rbp - 0x70], edi
lea rdx, str.Connecting_to_server...
lea rcx, [rbp - 0x70]
call fcn.140031250
call fcn.14001c4e0
test al, al
jne 0x140128215
mov dword [rbp - 0x70], 2
lea rdx, str.Connection_failure
lea rcx, [rbp - 0x70]
call fcn.140031250
lea rbx, [0x140196a28]
cmp qword [0x140196a40], rsi
cmovae rbx, qword [0x140196a28]
lea rcx, [rbp - 0x70]
call fcn.140035060
nop
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.mfc140.dll_Ordinal_2899]
mov ebx, eax
lea rcx, [rbp - 0x70]
call qword [sym.imp.mfc140.dll_Ordinal_1032]
test ebx, ebx
je 0x1401283a8
lea rcx, [rbp + 0xc0]
call fcn.1400343a0
nop
mov dword [rbp - 0x70], 2
lea rdx, str....
lea rcx, [rbp - 0x70]
call fcn.140031250
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r8d, recvfrom
lea rdx, str.Caches_EAC.zip
lea rcx, [rsp + 0x50]
call fcn.140023450
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x10]
call fcn.1400200c0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.1400200c0
nop
lea rcx, [rsp + 0x50]
call fcn.140021950
lea rcx, [rbp - 0x10]
call fcn.14006f650
mov dword [rbp + 0x50], 0x68
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
movups xmmword [rbp + 0x68], xmm0
movups xmmword [rbp + 0x78], xmm0
movups xmmword [rbp + 0x88], xmm0
movups xmmword [rbp + 0x98], xmm0
movups xmmword [rbp + 0xa8], xmm0
mov dword [rbp + 0x8c], 1
mov ecx, 5
mov word [rbp + 0x90], cx
movsd xmm0, qword [str.Update.exe]
movsd qword [rbp + 0xf0], xmm0
movzx eax, word [0x140161c50]
mov word [rbp + 0xf8], ax
movzx eax, byte [0x140161c52]
mov byte [rbp + 0xfa], al
lea rax, [rsp + 0x70]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xf0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x14012839f
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.14001caf0
cmp byte [0x140194fb0], 0
je 0x14012844e
lea rax, [0x14014dddb]
mov qword [rbp + 0xc0], rax
lea rax, str._device
mov qword [rbp + 0xc8], rax
lea rax, str.fpga
mov qword [rbp + 0xd0], rax
lea rax, str._norefresh
mov qword [rbp + 0xd8], rax
lea rax, str._printf
mov qword [rbp + 0xe0], rax
lea rax, [0x14015ad34]
mov qword [rbp + 0xe8], rax
lea rdx, [rbp + 0xc0]
mov ecx, 6
call qword [sym.imp.VMM.dll_VMMDLL_Initialize]
mov qword [0x140198a68], rax
lea rcx, [rbp - 0x70]
test rax, rax
jne 0x140128478
mov dword [rbp - 0x70], 2
lea rdx, str.The_device_initialization_failed__please_check_whether_the_device_works_normally__and_close_other_software_programs_connected_to_the_dma_device.
call fcn.140031250
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.140130030
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov dword [rbp - 0x70], 1
lea rdx, str.DMA_Device_initialized_successfully
call fcn.140031250
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x1401982e8], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x1401982ec], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x140197fac], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x140197fb0], eax
call fcn.140121cf0
call fcn.140125280
call fcn.14003a330
mov dword [0x14019534c], eax
mov rcx, qword [0x140198a60]
mov qword [0x140195388], rcx
test eax, eax
je 0x14012851d
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x14012b780]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [rbp - 0x70], 1
lea rdx, str.Gaf_async_key_state_initialized_successfully
jmp 0x14012852b
mov dword [rbp - 0x70], 2
lea rdx, str.Gaf_async_key_state_initialized_errors
lea rcx, [rbp - 0x70]
call fcn.140031250
mov ecx, 8
call fcn.1401302e8
lea rcx, [0x140128000]
mov qword [rax], rcx
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x1400be2d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x14012881e
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
mov r8d, sendto
lea rdx, str.Assets_Font_ui.ttf
lea rcx, [rsp + 0x50]
call fcn.140023450
nop
lea rdx, [rsp + 0x50]
lea rcx, [0x1401969b0]
call qword [sym.imp.sfml_graphics_2.dll_public:_bool___cdecl_sf::Font::loadFromFile_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64____ptr64]
movzx ebx, al
lea rcx, [rsp + 0x50]
call fcn.140021950
test bl, bl
jne 0x1401285de
mov dword [rbp - 0x70], 2
lea rdx, str.Font_load_failed
lea rcx, [rbp - 0x70]
call fcn.140031250
mov ecx, 1
call fcn.1401302e8
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140129100]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14012880f
mov ecx, 1
call fcn.1401302e8
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140129130]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x60], rax
test rax, rax
je 0x140128800
mov ecx, 1
call fcn.1401302e8
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140129160]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x40], rax
test rax, rax
je 0x1401287f1
mov ecx, 1
call fcn.1401302e8
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140129190]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x1401287e2
cmp dword [rbp - 0x58], 0
jne 0x1401286e0
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x58], eax
jne 0x1401286f7
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp + 0xf0], xmm0
xor edx, edx
lea rcx, [rbp + 0xf0]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x140128722
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140128748
imul rax, rax, 0x64
jmp 0x140128763
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffb16b6eb0ffff
cmp rax, rcx
jge 0x140128785
movabs rcx, 0x4e94914f0000
add rcx, rax
mov qword [rbp - 0x70], rcx
jmp 0x140128793
movabs rax, 0x7fffffffffffffff
mov qword [rbp - 0x70], rax
lea rcx, [rbp - 0x70]
call fcn.1400af980
nop
cmp dword [rbp - 0x48], 0
je 0x1401287aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp - 0x38], 0
je 0x1401287b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp - 0x58], 0
je 0x1401287c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp - 0x28], 0
je 0x1401287d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
cmp dword [rbp - 0x18], 0
je 0x14012844e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rbp - 0x48], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x38], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x58], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x28], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x18], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3