Function at 0x1400ad0b0
Capabilities:
Execute command
Log keystrokes via polling
Self delete
Set console window title
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x378]
sub rsp, 0x450
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14018db80]
xor rax, rsp
mov qword [rbp + 0x2a0], rax
xor esi, esi
mov dword [rsp + 0x60], esi
mov dword [rbp + 0x190], 0x28102e9
mov dword [rbp + 0x194], 0x28d028d
mov dword [rbp + 0x198], 0x2850291
mov dword [rbp + 0x19c], 0x292028b
mov dword [rbp + 0x1a0], 0x2e802e7
mov word [rbp + 0x1a4], si
mov byte [rbp + 0x1a6], 1
mov ecx, esi
mov edx, 0x2bf
nop dword [rax]
nop word [rax + rax]
lea eax, [rdx + rcx]
xor word [rbp + rcx*2 + 0x190], ax
inc rcx
cmp rcx, 0xa
jb 0x1400ad180
mov byte [rbp + 0x1a6], sil
lea rdx, [rbp + 0x190]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x1400ad23e
movdqa xmm0, xmmword [0x14015c5a0]
movdqa xmmword [rbp + 0x1d0], xmm0
movdqa xmm1, xmmword [0x14015c550]
movdqa xmmword [rbp + 0x1e0], xmm1
movdqa xmm0, xmmword [0x14015c6c0]
movdqa xmmword [rbp + 0x1f0], xmm0
movdqa xmm1, xmmword [0x14015c560]
movdqa xmmword [rbp + 0x200], xmm1
mov dword [rbp + 0x210], 0x4e4056df
mov dword [rbp + 0x214], 0x4844564c
mov dword [rbp + 0x218], 0x1002653
lea rcx, [rbp + 0x1d0]
call fcn.1400aa6e0
mov rdx, rax
mov r9d, 0x40
lea r8, str.ERROR
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400aa9a0
mov ecx, 8
call fcn.14012e8dc
test rax, rax
je 0x1400ad25e
lea rcx, [0x1400aa280]
mov qword [rax], rcx
jmp 0x1400ad261
mov rax, rsi
mov qword [rsp + 0x68], rax
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400a6710]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x80], rax
test rax, rax
je 0x1400af3fe
cmp dword [rbp - 0x78], 0
je 0x1400af3f3
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp + 0x190], xmm0
lea rcx, [rbp + 0x190]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x1400af3f3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
movups xmmword [rbp + 0x168], xmm0
mov qword [rbp + 0x178], rsi
mov qword [rbp + 0x180], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x168], al
mov dword [rsp + 0x60], 3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea ecx, [rax + rax*4]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov ebx, reloc.WS2_32.dll_sendto
movabs rdi, 0x842108421084211
lea r14, str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, rdi
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 5
imul rax, rax, 0x3e
sub rcx, rax
movzx r9d, byte [rcx + r14]
mov rcx, qword [rbp + 0x178]
mov rdx, qword [rbp + 0x180]
cmp rcx, rdx
jae 0x1400ad37b
lea rax, [rcx + 1]
mov qword [rbp + 0x178], rax
lea rax, [rbp + 0x168]
cmp rdx, 0xf
cmova rax, qword [rbp + 0x168]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400ad38e
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp + 0x168]
call fcn.1400a67c0
sub rbx, 1
jne 0x1400ad314
lea rcx, [rbp + 0x168]
cmp qword [rbp + 0x180], 0xf
cmova rcx, qword [rbp + 0x168]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea r12d, [rbx + 1]
mov rdx, qword [rbp + 0x180]
cmp rdx, 0xf
jbe 0x1400ad3f9
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ad3f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ad3f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14012e0a0
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, [0x140194fb0]
call fcn.1400c1580
mov dword [rbp + 0x60], 0x50
mov dword [rbp + 0x64], 0x40
lea rax, [0x1400a9920]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x78], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x90], xmm1
lea rbx, [0x14015bf24]
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], rsi
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], rsi
mov rax, qword [rbp + 0x78]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
mov r9d, 0x80000000
mov r8, rbx
mov rdx, qword [rbp + 0xa0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rbx, rax
mov qword [0x140194da0], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call sub.d3d9.dll_Direct3DCreate9
mov rcx, rax
mov qword [0x140194df0], rax
test rax, rax
je 0x1400af367
mov qword [0x140194db0], rsi
mov qword [0x140194dbc], rsi
mov dword [0x140194dc4], esi
mov qword [0x140194dcc], rsi
mov dword [0x140194dd4], esi
mov qword [0x140194de4], rsi
mov dword [0x140194dd8], 1
mov dword [0x140194dc8], 1
mov dword [0x140194db8], esi
mov dword [0x140194ddc], 1
mov dword [0x140194de0], 0x50
mov dword [0x140194dec], 1
mov rax, qword [rax]
lea rdx, [0x140194da8]
mov qword [rsp + 0x30], rdx
lea rdx, [0x140194db0]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, rbx
xor edx, edx
lea r8d, [rdx + 1]
call qword [rax + 0x80]
test eax, eax
js 0x1400af367
xor edx, edx
mov rcx, qword [0x140194da0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140194da0]
call qword [sym.imp.USER32.dll_UpdateWindow]
xor ecx, ecx
call fcn.14000e440
call fcn.1400228d0
mov r13, rax
mov qword [rax + 0x18], rsi
or dword [rax], 0x400
mov qword [rsp + 0x20], rsi
xor r9d, r9d
movss xmm2, dword [0x14015c428]
lea rdx, str.C:WindowsFontsTahoma.ttf
mov rcx, qword [rax + 0xa0]
call fcn.14005c960
call fcn.140023450
mov dword [rax + 0x2d4], 0x3f67ae14
mov dword [rax + 0x2d8], 0x3e0c49ba
mov dword [rax + 0x2dc], 0x3e6872b0
mov dword [rax + 0x2e0], 0x3f800000
mov dword [rax + 0x2f4], 0x3f6ccccd
mov dword [rax + 0x2f8], 0x3e3020c5
mov dword [rax + 0x2fc], 0x3d5d2f1b
mov dword [rax + 0x300], 0x3f800000
movaps xmm0, xmmword [0x1401560d0]
movups xmmword [rax + 0x2e4], xmm0
mov dword [rax + 0xd4], 0x3e75c28f
mov dword [rax + 0xd8], 0x3e6b851f
mov dword [rax + 0xdc], 0x3e947ae1
mov dword [rax + 0xe0], 0x3f800000
movaps xmm0, xmmword [0x14014e200]
movups xmmword [rax + 0xc4], xmm0
mov dword [rax + 0x284], 0x3f67ae14
mov dword [rax + 0x288], 0x3e0c49ba
mov dword [rax + 0x28c], 0x3e6872b0
mov dword [rax + 0x290], 0x3f800000
mov dword [rax + 0x274], 0x3f67ae14
mov dword [rax + 0x278], 0x3e0c49ba
mov dword [rax + 0x27c], 0x3e6872b0
mov dword [rax + 0x280], 0x3f800000
mov dword [rax + 0x294], 0x3f67ae14
mov dword [rax + 0x298], 0x3e0c49ba
mov dword [rax + 0x29c], 0x3e6872b0
mov dword [rax + 0x2a0], 0x3f800000
mov dword [rax + 0xe4], 0x3d9fbe77
mov dword [rax + 0xe8], 0x3d9fbe77
mov dword [rax + 0xec], 0x3d9fbe77
mov dword [rax + 0xf0], 0x3f4ccccd
mov dword [rax + 0x104], 0x3d9fbe77
mov dword [rax + 0x108], 0x3d9fbe77
mov dword [rax + 0x10c], 0x3d9fbe77
mov dword [rax + 0x110], 0x3f4ccccd
mov dword [rax + 0x114], 0x3f67ae14
mov dword [rax + 0x118], 0x3e0c49ba
mov dword [rax + 0x11c], 0x3e6872b0
mov dword [rax + 0x120], 0x3f800000
mov dword [rax + 0x124], 0x3f67ae14
mov dword [rax + 0x128], 0x3e0c49ba
mov dword [rax + 0x12c], 0x3e6872b0
mov dword [rax + 0x130], 0x3f800000
mov dword [rax + 0x134], 0x3f67ae14
mov dword [rax + 0x138], 0x3e0c49ba
mov dword [rax + 0x13c], 0x3e6872b0
mov dword [rax + 0x140], 0x3f800000
mov dword [rax + 0x144], 0x3f67ae14
mov dword [rax + 0x148], 0x3e0c49ba
mov dword [rax + 0x14c], 0x3e6872b0
mov dword [rax + 0x150], 0x3f800000
mov dword [rax + 0x154], 0x3f67ae14
mov dword [rax + 0x158], 0x3e0c49ba
mov dword [rax + 0x15c], 0x3e6872b0
mov dword [rax + 0x160], 0x3f800000
mov dword [rax + 0x164], 0x3d9fbe77
mov dword [rax + 0x168], 0x3d9fbe77
mov dword [rax + 0x16c], 0x3d9fbe77
mov dword [rax + 0x170], 0x3f4ccccd
mov dword [rax + 0x184], 0x3d9fbe77
mov dword [rax + 0x188], 0x3d9fbe77
mov dword [rax + 0x18c], 0x3d9fbe77
mov dword [rax + 0x190], 0x3f4ccccd
mov dword [rax + 0x174], 0x3d9fbe77
mov dword [rax + 0x178], 0x3d9fbe77
mov dword [rax + 0x17c], 0x3d9fbe77
mov dword [rax + 0x180], 0x3f4ccccd
mov dword [rax + 0x194], 0x3d9fbe77
mov dword [rax + 0x198], 0x3d9fbe77
mov dword [rax + 0x19c], 0x3d9fbe77
mov dword [rax + 0x1a0], 0x3f4ccccd
mov dword [rax + 0x1a4], 0x3f67ae14
mov dword [rax + 0x1a8], 0x3e0c49ba
mov dword [rax + 0x1ac], 0x3e6872b0
mov dword [rax + 0x1b0], 0x3f800000
mov dword [rax + 0x1b4], 0x3f6ccccd
mov dword [rax + 0x1b8], 0x3e3020c5
mov dword [rax + 0x1bc], 0x3d5d2f1b
mov dword [rax + 0x1c0], 0x3f800000
movaps xmm0, xmmword [0x14015c4e0]
movups xmmword [rax + 0x1c4], xmm0
mov dword [rax + 0x1d4], 0x3f6ccccd
mov dword [rax + 0x1d8], 0x3e3020c5
mov dword [rax + 0x1dc], 0x3d5d2f1b
mov dword [rax + 0x1e0], 0x3f800000
mov dword [rax + 0x1e4], 0x3f800000
mov dword [rax + 0x1e8], 0x3f800000
mov dword [rax + 0x1ec], 0x3f800000
mov dword [rax + 0x1f0], 0x3f800000
movaps xmm0, xmmword [0x14014e200]
movups xmmword [rax + 0x1f4], xmm0
movaps xmm1, xmmword [0x1401560d0]
movups xmmword [rax + 0x204], xmm1
mov dword [rax + 0x214], 0x3f67ae14
mov dword [rax + 0x218], 0x3e0c49ba
mov dword [rax + 0x21c], 0x3e6872b0
mov dword [rax + 0x220], 0x3f800000
mov dword [rax + 0x224], 0x3f6ccccd
mov dword [rax + 0x228], 0x3e3020c5
mov dword [rax + 0x22c], 0x3d5d2f1b
mov dword [rax + 0x230], 0x3f800000
mov dword [rax + 0x234], 0x3f67ae14
mov dword [rax + 0x238], 0x3e0c49ba
mov dword [rax + 0x23c], 0x3e6872b0
mov dword [rax + 0x240], 0x3f800000
mov dword [rax + 0x244], 0x3d9fbe77
mov dword [rax + 0x248], 0x3d9fbe77
mov dword [rax + 0x24c], 0x3d9fbe77
mov dword [rax + 0x250], 0x3f4ccccd
mov dword [rax + 0x254], 0x3d9fbe77
mov dword [rax + 0x258], 0x3d9fbe77
mov dword [rax + 0x25c], 0x3d9fbe77
mov dword [rax + 0x260], 0x3f4ccccd
mov dword [rax + 0x264], 0x3d9fbe77
mov dword [rax + 0x268], 0x3d9fbe77
mov dword [rax + 0x26c], 0x3d9fbe77
mov dword [rax + 0x270], 0x3f4ccccd
mov dword [rax + 0x2a4], 0x3f67ae14
mov dword [rax + 0x2a8], 0x3e0c49ba
mov dword [rax + 0x2ac], 0x3e6872b0
mov dword [rax + 0x2b0], 0x3f800000
mov dword [rax + 0x2b4], 0x3f6ccccd
mov dword [rax + 0x2b8], 0x3e3020c5
mov dword [rax + 0x2bc], 0x3d5d2f1b
mov dword [rax + 0x2c0], 0x3f800000
mov dword [rax + 0x2c4], 0x3f6ccccd
mov dword [rax + 0x2c8], 0x3e3020c5
mov dword [rax + 0x2cc], 0x3d5d2f1b
mov dword [rax + 0x2d0], 0x3f800000
mov dword [rax + 0x344], 0x3f67ae14
mov dword [rax + 0x348], 0x3e0c49ba
mov dword [rax + 0x34c], 0x3e6872b0
mov dword [rax + 0x350], 0x3f800000
mov dword [rax + 0x354], 0x3f6ccccd
mov dword [rax + 0x358], 0x3e3020c5
mov dword [rax + 0x35c], 0x3d5d2f1b
mov dword [rax + 0x360], 0x3f800000
mov dword [rax + 0x364], 0x3f67ae14
mov dword [rax + 0x368], 0x3e0c49ba
mov dword [rax + 0x36c], 0x3e6872b0
mov dword [rax + 0x370], 0x3f800000
mov dword [rax + 0x374], 0x3f6ccccd
mov dword [rax + 0x378], 0x3e3020c5
mov dword [rax + 0x37c], 0x3d5d2f1b
mov dword [rax + 0x380], 0x3f800000
mov dword [rax + 0x3d4], 0x3f67ae14
mov dword [rax + 0x3d8], 0x3e0c49ba
mov dword [rax + 0x3dc], 0x3e6872b0
mov dword [rax + 0x3e0], 0x3f800000
movaps xmm0, xmmword [0x14015c4d0]
movups xmmword [rax + 0x304], xmm0
movaps xmm1, xmm0
movups xmmword [rax + 0x314], xmm0
mov rcx, qword [0x140194da0]
call fcn.140075be0
mov rcx, qword [0x140194da8]
call fcn.1400742a0
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x1400a83f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x240]
call qword [sym.imp.USER32.dll_GetWindowRect]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
lea r15, [0x140194e28]
lea r14, str.__.2f
xorps xmm7, xmm7
movss xmm8, dword [0x14013ff9c]
movss xmm9, dword [0x140140028]
movss xmm10, dword [0x14015c414]
movss xmm11, dword [0x14013ffd4]
movss xmm14, dword [0x14015c434]
movss xmm13, dword [0x14015c430]
movss xmm12, dword [0x14014e0b0]
movss xmm15, dword [0x140140004]
nop dword [rax]
nop dword [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xb0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x1400adcd0
lea rcx, [rbp + 0xb0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xb0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x1400af186
call fcn.140074480
call fcn.140075f80
call fcn.14002ce40
mov ecx, reloc.WS2_32.dll_WSASetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400adcfc
cmp byte [0x140194d9d], 0
sete byte [0x140194d9d]
mov qword [rbp + 0x10], 0
mov dword [rbp + 0x28], 0x437f0000
mov dword [rbp + 0x2c], 0x437f0000
lea r8, [rbp + 0x10]
mov edx, 2
lea rcx, [rbp + 0x28]
call fcn.140034e00
mov dword [rbp - 0x70], 0x43c80000
mov dword [rbp - 0x6c], 0x437a0000
xor edx, edx
lea rcx, [rbp - 0x70]
call fcn.140034ec0
movaps xmm0, xmm8
call fcn.140034c90
mov r8d, Ordinal_301
lea rdx, [0x14018d9c1]
lea rcx, str.__________________________________________Dots_FREE_SOFTWARE
call fcn.140006bb0
call fcn.140021e80
mov rdi, rax
lea rcx, [rbp - 0x68]
call fcn.140024200
movss xmm1, dword [0x140195250]
subss xmm1, dword [0x14014e060]
movss dword [0x140195250], xmm1
comiss xmm9, xmm1
jbe 0x1400add9b
addss xmm1, xmm8
movss dword [0x140195250], xmm1
mov ebx, esi
nop dword [rax]
movd xmm6, ebx
cvtdq2ps xmm6, xmm6
movaps xmm0, xmm6
mulss xmm0, xmm10
addss xmm0, xmm1
comiss xmm7, xmm0
jbe 0x1400addbd
addss xmm0, xmm8
lea rax, [rsp + 0x74]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
movaps xmm2, xmm8
movaps xmm1, xmm8
call fcn.14000e000
movss xmm0, dword [rsp + 0x60]
movss dword [rbp + 0x190], xmm0
movss xmm1, dword [rsp + 0x70]
movss dword [rbp + 0x194], xmm1
movss xmm0, dword [rsp + 0x74]
movss dword [rbp + 0x198], xmm0
mov dword [rbp + 0x19c], 0x3f800000
addss xmm6, dword [rbp - 0x68]
movss dword [rbp - 0x58], xmm6
movss xmm0, dword [rbp - 0x64]
movss dword [rbp - 0x54], xmm0
addss xmm0, xmm11
addss xmm6, xmm8
movss dword [rbp - 0x60], xmm6
movss dword [rbp - 0x5c], xmm0
lea rcx, [rbp + 0x190]
call fcn.14000df50
mov r9d, eax
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm7
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x58]
mov rcx, rdi
call fcn.14005eda0
inc ebx
cmp ebx, 0x190
jge 0x1400ade7f
movss xmm1, dword [0x140195250]
jmp 0x1400adda0
mov eax, dword [0x140194e24]
test eax, eax
jne 0x1400ae116
lea rcx, [0x140136a9c]
call fcn.1400a2620
call fcn.14009ee90
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
lea rcx, str.Username:
call fcn.1400a2620
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8d, [r9 + 0x14]
mov rdx, r15
lea rcx, [0x140136a9c]
call fcn.140096c70
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
lea rcx, str.Password:
call fcn.1400a2620
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov r9d, 0x8000
mov r8d, reloc.WS2_32.dll_sendto
lea rbx, [0x140194e40]
mov rdx, rbx
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140096c70
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov dword [rbp - 0x50], 0x42b40000
mov dword [rbp - 0x4c], 0x41b00000
lea rdx, [rbp - 0x50]
lea rcx, str.Login
call fcn.14008d860
test al, al
je 0x1400ae0d5
lea rax, [rbp + 0x128]
mov qword [rsp + 0x68], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], rsi
mov qword [rbp + 0x140], rsi
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400adfd0
mov rdx, rbx
lea rcx, [rbp + 0x128]
call fcn.1400a63d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], rsi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x1400ae010
mov rdx, r15
lea rcx, [rbp + 0x148]
call fcn.1400a63d0
nop
lea r8, [rbp + 0x128]
lea rdx, [rbp + 0x148]
lea rcx, [0x140194fb0]
call fcn.1400c4550
cmp byte [0x1401951c8], 0
je 0x1400ae0d5
call fcn.1400a8990
call fcn.1400a8400
call fcn.1400a8610
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], rsi
mov ecx, Ordinal_50
call fcn.14012e8dc
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x40], reloc.WLDAP32.dll_Ordinal_35
mov qword [rbp + 0x48], Ordinal_50
movups xmm0, xmmword [str.Usuario_logou_no_Dots_FREE_SOFTWARE]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14015bfd8]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x14015bfe8]
mov word [rax + 0x20], cx
movzx ecx, byte [0x14015bfea]
mov byte [rax + 0x22], cl
mov byte [rax + 0x23], 0
lea rdx, [rbp + 0x30]
lea rcx, [0x140194fb0]
call fcn.1400c3d20
mov dword [0x140194e24], 2
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov dword [rbp - 0x48], 0x42b40000
mov dword [rbp - 0x44], 0x41b00000
lea rdx, [rbp - 0x48]
lea rcx, str.Register
call fcn.14008d860
test al, al
je 0x1400af07d
mov dword [0x140194e24], 1
jmp 0x1400af07d
cmp eax, 1
jne 0x1400ae492
lea rcx, str._________________________________________________Register
call fcn.1400a2620
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
lea rcx, str.Username:
call fcn.1400a2620
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8d, [r9 + 0x14]
lea rdx, [0x140194e58]
lea rcx, [0x14013d5b8]
call fcn.140096c70
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
lea rcx, str.Password:
call fcn.1400a2620
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov r9d, 0x8000
mov r8d, reloc.WS2_32.dll_sendto
lea rdi, [0x140194e70]
mov rdx, rdi
lea rcx, [0x14015c03c]
call fcn.140096c70
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
lea rcx, str.Key:
call fcn.1400a2620
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8d, [r9 + 0x78]
lea rbx, [0x140194f10]
mov rdx, rbx
lea rcx, [0x14015c04c]
call fcn.140096c70
lea rcx, [0x14015bf88]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov dword [rbp - 0x40], 0x42b40000
mov dword [rbp - 0x3c], 0x41b00000
lea rdx, [rbp - 0x40]
lea rcx, str.Registrar
call fcn.14008d860
test al, al
je 0x1400ae455
lea rax, [rbp + 0x128]
mov qword [rbp + 0x18], rax
lea rax, [rbp + 0x148]
mov qword [rsp + 0x68], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
mov qword [rbp + 0x138], rsi
mov qword [rbp + 0x140], rsi
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400ae2d0
mov rdx, rbx
lea rcx, [rbp + 0x128]
call fcn.1400a63d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], rsi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x1400ae310
mov rdx, rdi
lea rcx, [rbp + 0x148]
call fcn.1400a63d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rsi
mov qword [rbp + 0x1c8], rsi
mov r8, 0xffffffffffffffff
lea rax, [0x140194e58]
inc r8
cmp byte [rax + r8], 0
jne 0x1400ae350
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400a63d0
nop
lea r9, [rbp + 0x128]
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x1b0]
lea rcx, [0x140194fb0]
call fcn.1400c6950
cmp byte [0x1401951c8], 0
je 0x1400ae43c
xorps xmm0, xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], rsi
mov ecx, Ordinal_50
call fcn.14012e8dc
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x158], Ordinal_46
mov qword [rbp + 0x160], Ordinal_50
movups xmm0, xmmword [str.Usuario_se_Registrou_no_Dots_FREE_SOFTWARE]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14015c078]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x14015c088]
movsd qword [rax + 0x20], xmm0
movzx ecx, word [0x14015c090]
mov word [rax + 0x28], cx
mov byte [rax + 0x2a], 0
lea rdx, [rbp + 0x148]
lea rcx, [0x140194fb0]
call fcn.1400c3d20
xor r9d, r9d
lea r8, str.Dots_FREE_SOFTWARE
lea rdx, str.Sucesso_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov dword [0x140194e24], esi
jmp 0x1400ae455
xor r9d, r9d
lea r8, str.Dots_FREE_SOFTWARE
lea rdx, str.Error___Key_ou_user_invalidos
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov dword [rbp - 0x38], 0x42b40000
mov dword [rbp - 0x34], 0x41b00000
lea rdx, [rbp - 0x38]
lea rcx, str.Cancel
call fcn.14008d860
test al, al
je 0x1400af07d
mov dword [0x140194e24], esi
jmp 0x1400af07d
cmp eax, 2
jne 0x1400af07d
mov r8b, 1
xor edx, edx
mov ecx, eax
call fcn.140079230
movaps xmm1, xmm14
mov ecx, 1
call fcn.14007b740
call fcn.14009ee90
mov dword [rbp - 0x30], 0x42c80000
mov dword [rbp - 0x2c], 0x41a00000
lea rdx, [rbp - 0x30]
lea rcx, str.MAIN
call fcn.14008d860
test al, al
je 0x1400ae4e6
mov dword [reloc.WS2_32.dll_accept], 1
call fcn.14009ee90
mov dword [rbp - 0x28], 0x42c80000
mov dword [rbp - 0x24], 0x41a00000
lea rdx, [rbp - 0x28]
lea rcx, str.USER
call fcn.14008d860
test al, al
je 0x1400ae517
mov dword [reloc.WS2_32.dll_accept], 2
call fcn.14009ee90
mov dword [rbp - 0x20], 0x42c80000
mov dword [rbp - 0x1c], 0x41a00000
lea rdx, [rbp - 0x20]
lea rcx, [0x14015c124]
call fcn.14008d860
test al, al
je 0x1400ae548
mov dword [reloc.WS2_32.dll_accept], 3
call fcn.14009ee90
mov dword [rbp - 0x18], 0x42c80000
mov dword [rbp - 0x14], 0x41a00000
lea rdx, [rbp - 0x18]
lea rcx, str.TEST
call fcn.14008d860
test al, al
je 0x1400ae579
mov dword [reloc.WS2_32.dll_accept], 4
call fcn.14007b270
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x1400ae9c3
mov edx, 0x81
lea rcx, [0x14013eaa0]
call fcn.14008cb10
test al, al
je 0x1400af07d
xor r8d, r8d
xor edx, edx
lea rcx, [0x14015c128]
call fcn.14008d010
lea rbx, [0x14015c130]
lea rdi, str.RButton
test al, al
je 0x1400ae7c3
mov qword [rbp + 0x128], rbx
lea rax, str.Purple
mov qword [rbp + 0x130], rax
lea rax, [0x140145b34]
mov qword [rbp + 0x138], rax
lea rax, str.Yellow
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rdi
lea rax, str.LButton
mov qword [rbp + 0x1e0], rax
lea rax, str.XButton1
mov qword [rbp + 0x1e8], rax
lea rax, str.XButton2
mov qword [rbp + 0x1f0], rax
lea rax, str.Shift
mov qword [rbp + 0x1f8], rax
lea rax, [0x14015c174]
mov qword [rbp + 0x200], rax
lea rax, [0x14015c178]
mov qword [rbp + 0x208], rax
lea rdx, [0x140194d9b]
lea rcx, str.Aimbot
call fcn.14008e0e0
lea rdx, [0x140194d9c]
lea rcx, str.Toogle
call fcn.14008e0e0
lea rcx, str.Color
call fcn.1400a2620
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 4
lea r8, [rbp + 0x128]
lea rdx, [0x140194dfc]
lea rcx, str.Cor
call fcn.140092be0
lea rcx, str.Aim_Key
call fcn.1400a2620
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 8
lea r8, [rbp + 0x1d0]
lea rdx, [0x140194e00]
lea rcx, str.Bind
call fcn.140092be0
lea rcx, str.Smooth
call fcn.1400a2620
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x14013ffe4]
movss xmm2, dword [0x14013ff4c]
lea rdx, [0x14018d9c4]
lea rcx, [0x14015c1b8]
call fcn.14009e550
lea rcx, str.Fov_X
call fcn.1400a2620
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movaps xmm3, xmm13
movaps xmm2, xmm8
lea rdx, [0x14018d9c8]
lea rcx, str.fovx
call fcn.14009e550
lea rcx, str.Fov_Y
call fcn.1400a2620
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movaps xmm3, xmm13
movaps xmm2, xmm8
lea rdx, [0x14018d9cc]
lea rcx, str.fovy
call fcn.14009e550
lea rcx, str.Offset
call fcn.1400a2620
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x14015c42c]
movss xmm2, dword [0x14015c438]
lea rdx, [0x140194e20]
lea rcx, str.OffsetY
call fcn.14009e550
call fcn.1400957e0
xor r8d, r8d
xor edx, edx
lea rcx, str.Trigger
call fcn.14008d010
test al, al
je 0x1400ae8f2
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rdi
lea rax, str.LButton
mov qword [rbp + 0x1e0], rax
lea rax, str.XButton1
mov qword [rbp + 0x1e8], rax
lea rax, str.XButton2
mov qword [rbp + 0x1f0], rax
lea rax, str.Shift
mov qword [rbp + 0x1f8], rax
lea rax, [0x14015c174]
mov qword [rbp + 0x200], rax
lea rax, [0x14015c178]
mov qword [rbp + 0x208], rax
lea rdx, [0x140194d9f]
lea rcx, str.Trigger
call fcn.14008e0e0
lea rcx, [0x14015c200]
call fcn.1400a2620
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movaps xmm3, xmm12
movss xmm2, dword [0x14013ffb4]
lea rdx, [0x14018d9d0]
lea rcx, str.Valor_do_fov_do_trigger
call fcn.14009e550
lea rcx, str.Delay_Between_shots
call fcn.1400a2620
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
mov r9d, Ordinal_301
mov r8d, 1
lea rdx, [0x140194e1c]
lea rcx, str.Delay_entre_os_tiros
call fcn.14009e690
lea rcx, str.Trigger_Key
call fcn.1400a2620
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 8
lea r8, [rbp + 0x1d0]
lea rdx, [0x140194e14]
lea rcx, str.Tecla
call fcn.140092be0
call fcn.1400957e0
xor r8d, r8d
xor edx, edx
lea rcx, [0x14015c270]
call fcn.14008d010
test al, al
je 0x1400ae9b9
lea rdx, [0x140194d9d]
lea rcx, str.RCS__F1_
call fcn.14008e0e0
lea rcx, str.RCS_Value
call fcn.1400a2620
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x14013ffd8]
movaps xmm2, xmm7
lea rdx, [0x14018d9d4]
lea rcx, str.Valor_que_o_rcs_vai_descer
call fcn.14009e550
lea rcx, str.RCS_Smooth
call fcn.1400a2620
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movaps xmm3, xmm12
movaps xmm2, xmm7
lea rdx, [0x14018d9dc]
lea rcx, str.Valor_para_suavizar_o_rcs
call fcn.14009e550
lea rcx, str.RCS_Delay
call fcn.1400a2620
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x14013ffdc]
movaps xmm2, xmm8
lea rdx, [0x14018d9d8]
lea rcx, str.Valor_de_atraso_do_RCS
call fcn.14009e550
call fcn.1400957e0
call fcn.1400957e0
jmp 0x1400af07d
cmp eax, 2
jne 0x1400af198
movaps xmm0, xmm15
call fcn.1400342d0
call fcn.14009ee90
lea rdx, [0x1401950f0]
lea rcx, [rbp + 0x220]
call fcn.1400a6f00
nop
lea rdx, [0x140195110]
lea rcx, [rbp + 0x168]
call fcn.1400a6f00
nop
lea rdx, [0x140195130]
lea rcx, [rbp + 0x148]
call fcn.1400a6f00
nop
lea rdx, [0x1401951a8]
lea rcx, [rbp + 0x108]
call fcn.1400a6f00
mov rdi, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400aea39
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
movsxd rbx, eax
mov rcx, rdi
call fcn.1400a76f0
mov qword [rsp + 0x68], rbx
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
movups xmm0, xmmword [rbp + 0xe0]
movaps xmmword [rbp + 0x1d0], xmm0
movups xmm1, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x1e0], xmm1
mov eax, dword [rbp + 0x100]
mov dword [rbp + 0x1f0], eax
lea r9, [rbp + 0x1d0]
lea r8, str._a__m__d__y__H:_M:_S__Z
mov edx, 0x50
lea rcx, [rbp + 0x250]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rsi
mov qword [rbp + 0x1c8], rsi
lea rax, [rbp + 0x250]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400aead5
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x1b0]
call fcn.1400a63d0
or r12d, 0x10
call fcn.14009ee90
lea r8, [rbp + 0x220]
lea rdx, str.LOGIN:
lea rcx, [rbp + 0x128]
call fcn.1400a6240
mov rbx, rax
lea rax, [rbp + 0x220]
cmp rax, rbx
je 0x1400aeba2
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x1400aeb65
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aeb60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400af2e3
call fcn.14012e0a0
mov qword [rbp + 0x230], rsi
mov qword [rbp + 0x238], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x220], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x220], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x230], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov r8, qword [rbp + 0x140]
cmp r8, 0xf
jbe 0x1400aebc2
mov rdx, qword [rbp + 0x128]
lea rcx, [rbp + 0x128]
call fcn.1400a99e0
lea rcx, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rcx, qword [rbp + 0x220]
call fcn.1400a2d20
call fcn.14009ee90
call fcn.14009ee90
mov r14, qword [rbp + 0x178]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 4
jb 0x1400af412
lea r15, [rbp + 0x168]
cmp qword [rbp + 0x180], 0xf
cmova r15, qword [rbp + 0x168]
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
lea rsi, [r14 + 4]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0x128]
cmp rsi, rbx
jbe 0x1400aecbc
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400aec5e
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400aec85
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400aeca4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400af40c
mov rcx, rax
call fcn.14012e8dc
test rax, rax
je 0x1400af2ea
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400aecb5
test rcx, rcx
je 0x1400aecb3
call fcn.14012e8dc
mov rdi, rax
jmp 0x1400aecb5
xor edi, edi
mov qword [rbp + 0x128], rdi
mov qword [rbp + 0x138], rsi
mov qword [rbp + 0x140], rbx
mov dword [rdi], 0x203a5049
lea rcx, [rdi + 4]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
or r12d, 4
mov rdx, qword [rbp + 0x180]
cmp rdx, 0xf
jbe 0x1400aed28
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aed23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400af2ea
call fcn.14012e0a0
movups xmm0, xmmword [rbp + 0x128]
movups xmmword [rbp + 0x168], xmm0
movups xmm1, xmmword [rbp + 0x138]
movups xmmword [rbp + 0x178], xmm1
call fcn.14009ee90
call fcn.14009ee90
lea rcx, [rbp + 0x168]
cmp qword [rbp + 0x180], 0xf
cmova rcx, qword [rbp + 0x168]
call fcn.1400a2d20
mov r14, qword [rbp + 0x158]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 6
jb 0x1400af412
lea r15, [rbp + 0x148]
cmp qword [rbp + 0x160], 0xf
cmova r15, qword [rbp + 0x148]
xorps xmm0, xmm0
movups xmmword [rbp + 0x128], xmm0
lea rsi, [r14 + 6]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp + 0x128]
cmp rsi, rbx
jbe 0x1400aee3e
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400aede0
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400aee07
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400aee26
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400af40c
mov rcx, rax
call fcn.14012e8dc
test rax, rax
je 0x1400af2ea
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400aee37
test rcx, rcx
je 0x1400aee35
call fcn.14012e8dc
mov rdi, rax
jmp 0x1400aee37
xor edi, edi
mov qword [rbp + 0x128], rdi
mov qword [rbp + 0x138], rsi
mov qword [rbp + 0x140], rbx
mov eax, dword [str.HWID:]
mov dword [rdi], eax
movzx eax, word [0x14015c324]
mov word [rdi + 4], ax
lea rcx, [rdi + 6]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
or r12d, 8
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x148]
call fcn.1400a8070
mov rdx, qword [rbp + 0x140]
cmp rdx, 0xf
jbe 0x1400aeeca
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aeec5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400af2ea
call fcn.14012e0a0
call fcn.14009ee90
call fcn.14009ee90
lea rcx, [rbp + 0x148]
cmp qword [rbp + 0x160], 0xf
cmova rcx, qword [rbp + 0x148]
call fcn.1400a2d20
call fcn.14009ee90
call fcn.14009ee90
lea r8, [rbp + 0x1b0]
lea rdx, str.EXPIRY:
lea rcx, [rbp + 0x128]
call fcn.1400a6240
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400a8070
mov rdx, qword [rbp + 0x140]
cmp rdx, 0xf
jbe 0x1400aef64
inc rdx
mov rcx, qword [rbp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aef5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400af2f1
call fcn.14012e0a0
lea rcx, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0xf
cmova rcx, qword [rbp + 0x1b0]
call fcn.1400a2d20
nop
mov r8, qword [rbp + 0x1c8]
cmp r8, 0xf
jbe 0x1400aefa1
mov rdx, qword [rbp + 0x1b0]
lea rcx, [rbp + 0x1b0]
call fcn.1400a99e0
xor esi, esi
mov qword [rbp + 0x1c0], rsi
mov qword [rbp + 0x1c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1b0], sil
mov r8, qword [rbp + 0x160]
cmp r8, 0xf
jbe 0x1400aefdc
mov rdx, qword [rbp + 0x148]
lea rcx, [rbp + 0x148]
call fcn.1400a99e0
mov qword [rbp + 0x158], rsi
mov qword [rbp + 0x160], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x148], 0
mov rdx, qword [rbp + 0x180]
cmp rdx, 0xf
jbe 0x1400af036
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400af031
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400af2f8
call fcn.14012e0a0
mov qword [rbp + 0x178], rsi
mov qword [rbp + 0x180], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x168], 0
mov r8, qword [rbp + 0x238]
cmp r8, 0xf
jbe 0x1400af06f
mov rdx, qword [rbp + 0x220]
lea rcx, [rbp + 0x220]
call fcn.1400a99e0
lea r15, [0x140194e28]
lea r14, str.__.2f
call fcn.14001da90
call fcn.14001e350
mov rcx, qword [0x140194da8]
mov rax, qword [rcx]
mov dword [rsp + 0x30], esi
movss dword [rsp + 0x28], xmm8
mov dword [rsp + 0x20], esi
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x140194da8]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400af0e7
call fcn.14002fb80
call fcn.140021cc0
mov rcx, rax
call fcn.140074580
mov rcx, qword [0x140194da8]
mov rax, qword [rcx]
call qword [rax + 0x150]
test dword [r13], 0x400
je 0x1400af0ff
call fcn.14003add0
xor edx, edx
xor ecx, ecx
call fcn.140030810
mov rcx, qword [0x140194da8]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1400af179
mov rcx, qword [0x140194da8]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x1400af179
call fcn.140074340
mov rcx, qword [0x140194da8]
mov rax, qword [rcx]
lea rdx, [0x140194db0]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x1400af174
mov r8d, reloc.WS2_32.dll_gethostname
lea rdx, str.E:SOURCESCDOTS_C_NEWGustaC__1_GustaC__1_Rox_Valorantmain.h
lea rcx, [0x1401368a8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140073df0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400af2ff
cmp dword [rbp + 0xb8], 0x12
jne 0x1400adc90
jmp 0x1400af309
cmp eax, 3
jne 0x1400af27b
lea rcx, str._______________________________CFG
call fcn.1400a2620
lea rcx, [0x14015c360]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov dword [rbp - 0x10], 0x43480000
mov dword [rbp - 0xc], 0x41a00000
lea rdx, [rbp - 0x10]
lea rcx, str.Save_Cfg
call fcn.14008d860
test al, al
je 0x1400af1ec
call fcn.1400a9440
lea rcx, [0x14015c360]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov dword [rbp - 8], 0x43480000
mov dword [rbp - 4], 0x41a00000
lea rdx, [rbp - 8]
lea rcx, str.Load_CFG
call fcn.14008d860
test al, al
je 0x1400af22b
call fcn.1400a8990
lea rcx, [0x14015c360]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov dword [rbp], 0x43480000
mov dword [rbp + 4], 0x41a00000
lea rdx, [rbp]
lea rcx, str.Open_CFG_file
call fcn.14008d860
test al, al
je 0x1400af07d
lea rcx, str.start_Dots_Public_Aim.ini
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x1400af07d
cmp eax, 4
jne 0x1400af07d
lea rcx, str._______________________________CFG
call fcn.1400a2620
lea rcx, [0x14015c360]
call fcn.1400a2620
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140033310
mov dword [rbp + 8], 0x43480000
mov dword [rbp + 0xc], 0x41a00000
lea rdx, [rbp + 8]
lea rcx, str.Test_Move
call fcn.14008d860
test al, al
je 0x1400af07d
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, reloc.WS2_32.dll_sendto
call qword [0x140194d80]
jmp 0x1400af07d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov dword [rbp + 0xb8], reloc.WS2_32.dll_select
mov rcx, qword [0x140194da8]
test rcx, rcx
je 0x1400af322
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140194da8], rsi
mov rcx, qword [0x140194df0]
test rcx, rcx
je 0x1400af33b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140194df0], rsi
mov rcx, qword [0x140194da0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x78]
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
nop
cmp dword [rbp - 0x78], 0
je 0x1400af389
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
call fcn.1400a8870
mov rdx, qword [rbp + 0x78]
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov ecx, 0xfffffc19
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
mov rcx, qword [rbp + 0x2a0]
xor rcx, rsp
call fcn.14012def0
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rbp - 0x78], esi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.1400a9be0
int3
call fcn.1400a9c40
int3