Function at 0x140048410
Capabilities:
Create process on windows
Create thread
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3950]
mov eax, 0x3a50
call fcn.1400b88f0
sub rsp, rax
movaps xmmword [rsp + 0x3a40], xmm6
movaps xmmword [rsp + 0x3a30], xmm7
movaps xmmword [rsp + 0x3a20], xmm8
movaps xmmword [rsp + 0x3a10], xmm9
movaps xmmword [rsp + 0x3a00], xmm10
movaps xmmword [rsp + 0x39f0], xmm11
movaps xmmword [rsp + 0x39e0], xmm12
movaps xmmword [rsp + 0x39d0], xmm15
mov rax, qword [0x1400e90c0]
xor rax, rsp
mov qword [rbp + 0x38c0], rax
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0xa
mov esi, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x68], rsi
nop
nop
nop
nop
nop
nop
nop
nop
movsd qword [rsp + 0x50], xmm0
movzx eax, word [0x1400d3db8]
mov word [rsp + 0x58], ax
mov byte [rsp + 0x5a], r13b
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
lea ecx, [rsi + 0x11]
call fcn.1400b81f4
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
lea rbx, [rax + 0x20]
mov qword [rbp - 0x28], rbx
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x70], rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rax
lea rcx, [rbp - 0x38]
mov qword [rbp - 0x60], rcx
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.14004a590
nop
lea r8, [rbp - 0x38]
mov rdx, rbx
mov rcx, rbx
call fcn.14004b440
mov qword [rbp - 0x30], rbx
lea r9, [fcn.14004a530]
lea edx, [rsi + 0x11]
lea r8d, [r13 + 1]
lea rcx, [rsp + 0x50]
call fcn.1400b8410
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
mov qword [rbp - 0x40], r13
mov rbx, qword [rbp - 0x38]
mov rdi, qword [rbp - 0x30]
cmp rbx, rdi
je 0x140048616
nop dword [rax + rax]
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.140046e70
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, qword [rbp - 0x40]
je 0x1400485bb
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], r13
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
add qword [rbp - 0x48], 0x20
jmp 0x1400485c8
mov r8, rax
lea rcx, [rbp - 0x50]
call fcn.14004c150
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x140048609
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048604
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140048d9a
call fcn.1400b7e8c
add rbx, 0x20
cmp rbx, rdi
jne 0x140048570
mov dword [rbp - 0x70], 0x44098000
mov dword [rbp - 0x6c], 0x43aa0000
mov rax, qword [0x1401473b0]
mov dword [rax + 0x38f8], 0x40e00000
mov dword [rax + 0x38e8], 0x3f800000
xor edx, edx
mov r8d, 0xbb
lea rcx, str.Main_Window
call fcn.14000e0c0
xor r8d, r8d
lea rdx, [rbp - 0x70]
mov r11, qword [0x1401473b0]
mov rcx, qword [r11 + 0x4008]
call fcn.140010e50
mov rax, qword [r11 + 0x4008]
mov byte [rax + 0xc8], 1
mov rax, qword [r11 + 0x4008]
mov r10, qword [rax + 0x2b0]
movss xmm0, dword [0x140147420]
movss dword [rsp + 0x70], xmm0
movss xmm1, dword [0x140147424]
movss dword [rsp + 0x74], xmm1
movss xmm0, dword [0x140147428]
movss dword [rsp + 0x78], xmm0
movss xmm1, dword [0x14014742c]
mulss xmm1, dword [r11 + 0x38e8]
movss dword [rsp + 0x7c], xmm1
lea rcx, [rsp + 0x70]
call fcn.140004500
mov dword [rbp - 0x70], 0x44094000
mov dword [rbp - 0x6c], 0x43a98000
xorps xmm8, xmm8
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x28], r13d
movss xmm0, dword [0x1400d5b78]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x70]
mov rcx, r10
call fcn.140028060
mov ecx, 1
call fcn.1400049f0
mov rax, qword [0x1401473b0]
mov qword [rax + 0x38f8], 0x40e00000
mov dword [rax + 0x3914], 0x40e00000
mov qword [rax + 0x392c], 0x40a00000
mov qword [rax + 0x38f0], r13
movups xmm0, xmmword [0x1400d30c0]
movups xmmword [rax + 0x39fc], xmm0
mov dword [rax + 0x395c], 0x40a00000
mov dword [rax + 0x3960], 0x41200000
mov dword [rax + 0x3934], 0x41200000
mov dword [rax + 0x3938], 0x41b80000
lea rdx, [0x140147d38]
mov rcx, qword [0x140147d30]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x1401473b0]
mov rcx, qword [rax + 0x4008]
movd xmm0, dword [0x140147d3c]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rcx + 0x2c]
cvttss2si r8d, xmm0
movd xmm1, dword [0x140147d38]
cvtdq2ps xmm1, xmm1
addss xmm1, dword [rcx + 0x28]
cvttss2si edx, xmm1
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x154
mov r9d, 0x226
mov rcx, qword [0x140147d30]
call qword [sym.imp.USER32.dll_MoveWindow]
mov qword [rsp + 0x70], 0
mov r10, qword [0x1401473b0]
xor r8d, r8d
lea rdx, [rsp + 0x70]
mov rcx, qword [r10 + 0x4008]
call fcn.140010ce0
mov rax, qword [r10 + 0x4008]
mov byte [rax + 0xc8], 1
mov r15, qword [r10 + 0x4008]
lea rdx, [r10 + 8]
lea rcx, [rbp - 0x20]
call fcn.140049bf0
nop
mov edi, reloc.WS2_32.dll_recv
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140147db8], eax
jle 0x140048876
lea rcx, [0x140147db8]
call fcn.1400b7f3c
cmp dword [0x140147db8], 0xffffffff
jne 0x140048876
lea rcx, [0x140147db8]
call fcn.1400b7ed0
mov eax, dword [rdi + rbx]
cmp dword [0x140147dbc], eax
jle 0x1400488af
lea rcx, [0x140147dbc]
call fcn.1400b7f3c
cmp dword [0x140147dbc], 0xffffffff
jne 0x1400488af
movss xmm0, dword [rbp - 0x10]
movss dword [0x140147dc0], xmm0
lea rcx, [0x140147dbc]
call fcn.1400b7ed0
mov rcx, qword [0x140147d88]
call fcn.140010b90
movups xmm7, xmmword [0x140147970]
mov rbx, qword [0x1401473b0]
mov qword [rsp + 0x30], r13
lea rdi, str.FROZEN
mov qword [rsp + 0x28], rdi
movss xmm9, dword [0x1400d5c0c]
movss dword [rsp + 0x20], xmm9
movss xmm10, dword [0x1400d5c00]
movaps xmm3, xmm10
movss xmm2, dword [rbx + 0x3d40]
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x3d38]
call fcn.14002c390
movss xmm0, dword [rsp + 0x70]
movss xmm11, dword [0x1400d5b28]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss xmm6, dword [r15 + 0x30]
subss xmm6, xmm0
movss xmm12, dword [0x1400d5afc]
mulss xmm6, xmm12
movss xmm0, dword [0x140147d50]
movss dword [rbx + 0x38e8], xmm0
mov rax, qword [rbx + 0x4b18]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140008230
mov r8, rax
mov rcx, qword [0x1401473b0]
movss dword [rsp + 0x70], xmm7
movaps xmm0, xmm7
shufps xmm0, xmm7, 0x55
movss dword [rsp + 0x74], xmm0
movaps xmm1, xmm7
shufps xmm1, xmm7, 0xaa
movss dword [rsp + 0x78], xmm1
shufps xmm7, xmm7, 0xff
mulss xmm7, dword [rcx + 0x38e8]
movss dword [rsp + 0x7c], xmm7
lea rcx, [rsp + 0x70]
call fcn.140004500
movss dword [rsp + 0x70], xmm6
mov dword [rsp + 0x74], 0x41c80000
test eax, 0xff000000
je 0x140048a1d
mov rcx, qword [r8 + 0x38]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp - 0x70], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea rdx, [0x1400d3dd2]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdi
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x70]
movss xmm2, dword [rcx + 0x10]
mov rdx, r8
mov rcx, qword [rcx + 8]
call fcn.14002c5b0
mov rcx, qword [0x140147d48]
call fcn.140010b90
movups xmm7, xmmword [0x1401479a0]
mov rbx, qword [0x1401473b0]
mov qword [rsp + 0x30], r13
lea rdi, str.PERMANANET_HARDWARE
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm10
movss xmm2, dword [rbx + 0x3d40]
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x3d38]
call fcn.14002c390
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm6, dword [r15 + 0x30]
subss xmm6, xmm1
mulss xmm6, xmm12
movss xmm0, dword [0x140147d50]
movss dword [rbx + 0x38e8], xmm0
mov rax, qword [rbx + 0x4b18]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140008230
mov r8, rax
mov rbx, qword [0x1401473b0]
movss dword [rsp + 0x70], xmm7
movaps xmm0, xmm7
shufps xmm0, xmm7, 0x55
movss dword [rsp + 0x74], xmm0
movaps xmm1, xmm7
shufps xmm1, xmm7, 0xaa
movss dword [rsp + 0x78], xmm1
shufps xmm7, xmm7, 0xff
mulss xmm7, dword [rbx + 0x38e8]
movss dword [rsp + 0x7c], xmm7
lea rcx, [rsp + 0x70]
call fcn.140004500
movss dword [rsp + 0x70], xmm6
mov dword [rsp + 0x74], 0x42820000
test eax, 0xff000000
je 0x140048b6e
mov rcx, qword [r8 + 0x38]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp - 0x70], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea rdx, [0x1400d3deb]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdi
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x70]
movss xmm2, dword [rcx + 0x10]
mov rdx, r8
mov rcx, qword [rcx + 8]
call fcn.14002c5b0
mov rbx, qword [0x1401473b0]
movups xmm7, xmmword [0x1401479a0]
mov qword [rsp + 0x30], r13
lea rdi, str.VIRTULIZER
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm10
movss xmm2, dword [rbx + 0x3d40]
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x3d38]
call fcn.14002c390
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm6, dword [r15 + 0x30]
subss xmm6, xmm1
mulss xmm6, xmm12
movss xmm0, dword [0x140147d50]
movss dword [rbx + 0x38e8], xmm0
mov rax, qword [rbx + 0x4b18]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140008230
mov r8, rax
mov rcx, qword [0x1401473b0]
movss dword [rsp + 0x70], xmm7
movaps xmm0, xmm7
shufps xmm0, xmm7, 0x55
movss dword [rsp + 0x74], xmm0
movaps xmm1, xmm7
shufps xmm1, xmm7, 0xaa
movss dword [rsp + 0x78], xmm1
shufps xmm7, xmm7, 0xff
mulss xmm7, dword [rcx + 0x38e8]
movss dword [rsp + 0x7c], xmm7
lea rcx, [rsp + 0x70]
call fcn.140004500
movss dword [rsp + 0x70], xmm6
mov dword [rsp + 0x74], 0x429a0000
test eax, 0xff000000
je 0x140048ca5
mov rcx, qword [r8 + 0x38]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp - 0x70], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea rdx, [0x1400d3dfa]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdi
lea rdx, [rbp - 0x70]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x70]
movss xmm2, dword [rcx + 0x10]
mov rdx, r8
mov rcx, qword [rcx + 8]
call fcn.14002c5b0
movabs r12, 0x7fffffffffffffff
movabs r14, 0x8000000000000000
movss xmm15, dword [0x1400d5bb8]
cmp dword [0x140147d78], 0
jne 0x14004917b
mov dword [0x140147d50], 0x3f800000
movss xmm1, dword [0x1400d5bbc]
movaps xmm0, xmm15
unpcklps xmm0, xmm1
movq r9, xmm0
call fcn.14003a250
movss xmm0, dword [0x1400d5bd4]
movss xmm1, dword [0x1400d5b9c]
unpcklps xmm0, xmm1
movsd qword [rsp + 0x20], xmm0
movaps xmm1, xmm15
movss xmm2, dword [0x1400d5bc8]
unpcklps xmm1, xmm2
movq r9, xmm1
lea r8, str.Sign_in
lea rdx, str.login
call fcn.140039c60
test al, al
je 0x140048eae
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r13
lea rcx, [0x140147dc8]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rcx + rbx], 0
jne 0x140048d60
cmp rbx, r12
ja 0x140049bd6
cmp rbx, 0xf
ja 0x140048da1
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rsi
mov r8, rbx
mov rdx, rcx
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x70], 0
jmp 0x140048e35
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdi, rbx
or rdi, 0xf
cmp rdi, r12
jbe 0x140048dcf
mov rdi, r12
lea rax, [r14 + 0x27]
mov rcx, rax
call fcn.1400b81f4
test rax, rax
je 0x140048df8
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140048e11
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140048dff
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140049bc4
jmp 0x140048db4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140048e0e
call fcn.1400b81f4
mov r14, rax
jmp 0x140048e11
mov r14, r13
mov qword [rsp + 0x70], r14
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rdi
mov r8, rbx
lea rdx, [0x140147dc8]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rbx], 0
lea rdx, [rsp + 0x70]
lea rcx, [0x1401479d0]
call fcn.1400618b0
lea rdx, str.Button_clicked._Performing_file_search..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14004b0c0
lea rcx, [rbp - 0x50]
call fcn.140047350
cmp byte [0x140147c00], 0
je 0x140048ea4
lea rdx, str._n_Status:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004ad20
mov rcx, rax
lea rdx, [0x140147c08]
call fcn.14004b2e0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [0x140147d78], 1
movups xmm7, xmmword [0x1401479a0]
mov rbx, qword [0x1401473b0]
mov qword [rsp + 0x30], r13
lea rdi, str.Any_Trouble_Loging_in__Contact_Support
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm10
movss xmm2, dword [rbx + 0x3d40]
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x3d38]
call fcn.14002c390
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm6, dword [r15 + 0x30]
subss xmm6, xmm1
mulss xmm6, xmm12
subss xmm6, dword [0x1400d5b90]
movss xmm0, dword [0x140147d50]
movss dword [rbx + 0x38e8], xmm0
mov rax, qword [rbx + 0x4b18]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140008230
mov r8, rax
mov rbx, qword [0x1401473b0]
movss dword [rsp + 0x70], xmm7
movaps xmm0, xmm7
shufps xmm0, xmm7, 0x55
movss dword [rsp + 0x74], xmm0
movaps xmm1, xmm7
shufps xmm1, xmm7, 0xaa
movss dword [rsp + 0x78], xmm1
shufps xmm7, xmm7, 0xff
mulss xmm7, dword [rbx + 0x38e8]
movss dword [rsp + 0x7c], xmm7
lea rcx, [rsp + 0x70]
call fcn.140004500
movss dword [rsp + 0x70], xmm6
mov dword [rsp + 0x74], 0x43820000
test eax, 0xff000000
je 0x140048ffb
mov rdx, qword [r8 + 0x38]
mov rcx, qword [rdx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp - 0x70], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea r9, [0x1400d3ebe]
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], rdi
lea r9, [rbp - 0x70]
mov qword [rsp + 0x28], r9
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x70]
movss xmm2, dword [rdx + 0x10]
mov rdx, r8
call fcn.14002c5b0
mov rbx, qword [0x1401473b0]
movups xmm7, xmmword [0x140147970]
mov qword [rsp + 0x30], r13
lea rdi, str.Here
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm10
movss xmm2, dword [rbx + 0x3d40]
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x3d38]
call fcn.14002c390
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm6, dword [r15 + 0x30]
subss xmm6, xmm1
mulss xmm6, xmm12
addss xmm6, dword [0x1400d5bac]
movss xmm0, dword [0x140147d50]
movss dword [rbx + 0x38e8], xmm0
mov rax, qword [rbx + 0x4b18]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140008230
mov r8, rax
mov rcx, qword [0x1401473b0]
movss dword [rsp + 0x70], xmm7
movaps xmm0, xmm7
shufps xmm0, xmm7, 0x55
movss dword [rsp + 0x74], xmm0
movaps xmm1, xmm7
shufps xmm1, xmm7, 0xaa
movss dword [rsp + 0x78], xmm1
shufps xmm7, xmm7, 0xff
mulss xmm7, dword [rcx + 0x38e8]
movss dword [rsp + 0x7c], xmm7
lea rcx, [rsp + 0x70]
call fcn.140004500
movss dword [rsp + 0x70], xmm6
mov dword [rsp + 0x74], 0x43820000
test eax, 0xff000000
je 0x14004913a
mov rdx, qword [r8 + 0x38]
mov rcx, qword [rdx + 8]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rbp - 0x70], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea r9, [0x1400d3ec4]
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], rdi
lea r9, [rbp - 0x70]
mov qword [rsp + 0x28], r9
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x70]
movss xmm2, dword [rdx + 0x10]
mov rdx, r8
call fcn.14002c5b0
mov qword [rsp + 0x70], 0
lea r9, [rsp + 0x70]
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rdi
call fcn.140039120
test al, al
je 0x14004917b
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, str.https:__discord.gg_frozenfn
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
movss xmm7, dword [0x1400d5b80]
movss xmm6, dword [0x1400d5ab8]
cmp dword [0x140147d78], 1
jne 0x1400493f4
mov rcx, qword [0x1401473b0]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc8], 1
mov rbx, qword [rcx + 0x4008]
movss xmm0, dword [0x140147dc0]
comiss xmm0, xmm7
seta r14b
cvtps2pd xmm1, xmm0
addsd xmm1, qword [0x1400d5b38]
cvtpd2ps xmm0, xmm1
movss dword [0x140147dc0], xmm0
mov byte [rbx + 0xc8], 1
mov rax, qword [rcx + 0x4008]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, dword [0x1400d5bb0]
addss xmm0, dword [0x1400d5bd0]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rsp + 0x70], 0x3f800000
mov dword [rsp + 0x74], 0x3f800000
mov dword [rsp + 0x78], 0x3f800000
movss xmm0, dword [rcx + 0x38e8]
movss dword [rsp + 0x7c], xmm0
lea rcx, [rsp + 0x70]
call fcn.140004500
movzx ecx, al
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mulss xmm0, xmm6
movss dword [rsp + 0x70], xmm0
mov ecx, eax
shr ecx, 8
movzx ecx, cl
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mulss xmm0, xmm6
movss dword [rsp + 0x74], xmm0
mov ecx, eax
shr ecx, 0x10
movzx ecx, cl
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mulss xmm0, xmm6
movss dword [rsp + 0x78], xmm0
shr eax, 0x18
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm6
movss dword [rsp + 0x7c], xmm0
movss xmm3, dword [0x1400d5b78]
lea r8, [rsp + 0x70]
movaps xmm1, xmm7
call fcn.14003b1f0
mov rdi, qword [rbx + 0x2b0]
mov r8, qword [0x1401473b0]
mov dword [rsp + 0x70], 0x3f800000
mov dword [rsp + 0x74], 0x3f800000
mov dword [rsp + 0x78], 0x3f800000
movss xmm0, dword [r8 + 0x38e8]
movss dword [rsp + 0x7c], xmm0
lea rcx, [rsp + 0x70]
call fcn.140004500
mov r15d, eax
mov qword [rsp + 0x30], r13
lea rax, str.Loading
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm10
movss xmm2, dword [r8 + 0x3d40]
lea rdx, [rsp + 0x70]
mov rcx, qword [r8 + 0x3d38]
call fcn.14002c390
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm2, dword [rbx + 0x30]
subss xmm2, xmm1
mulss xmm2, xmm12
movss dword [rsp + 0x70], xmm2
mov dword [rsp + 0x74], 0x43480000
test r15d, 0xff000000
je 0x1400493d6
mov rax, qword [rdi + 0x38]
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rbp - 0x70], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea rcx, [0x1400d39a7]
mov qword [rsp + 0x38], rcx
lea rcx, str.Loading
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0x70]
movss xmm2, dword [rax + 0x10]
mov rdx, rdi
mov rcx, qword [rax + 8]
call fcn.14002c5b0
test r14b, r14b
je 0x1400493f4
mov dword [0x140147dc0], 0
mov dword [0x140147d78], 2
jmp 0x140049730
cmp dword [0x140147d78], 5
jne 0x140049720
mov rcx, qword [0x1401473b0]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc8], 1
mov r14, qword [rcx + 0x4008]
cmp byte [0x140147d80], 0
jne 0x14004949a
mov byte [0x140147d80], 1
mov ecx, 1
call fcn.1400b81f4
mov qword [rsp + 0x70], rax
lea rcx, [rbp - 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x14004cae0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400496d2
cmp dword [rbp - 0x68], 0
je 0x1400496c6
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400496c6
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
cmp byte [0x140147d92], 0
jne 0x1400496e2
movss xmm0, dword [0x140147d7c]
addss xmm0, dword [0x1400d5abc]
movss dword [0x140147d7c], xmm0
mov rcx, qword [0x1401473b0]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc8], 1
mov rax, qword [rcx + 0x4008]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, dword [0x1400d5bb0]
addss xmm0, dword [0x1400d5bd0]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm1
mov byte [rax + 0x159], 1
mov dword [rsp + 0x70], 0x3f800000
mov dword [rsp + 0x74], 0x3f800000
mov dword [rsp + 0x78], 0x3f800000
movss xmm0, dword [rcx + 0x38e8]
movss dword [rsp + 0x7c], xmm0
lea rcx, [rsp + 0x70]
call fcn.140004500
movzx ecx, al
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mulss xmm0, xmm6
movss dword [rsp + 0x70], xmm0
mov ecx, eax
shr ecx, 8
movzx ecx, cl
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mulss xmm0, xmm6
movss dword [rsp + 0x74], xmm0
mov ecx, eax
shr ecx, 0x10
movzx ecx, cl
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mulss xmm0, xmm6
movss dword [rsp + 0x78], xmm0
shr eax, 0x18
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm6
movss dword [rsp + 0x7c], xmm0
movss xmm3, dword [0x1400d5b78]
lea r8, [rsp + 0x70]
movaps xmm1, xmm7
call fcn.14003b1f0
mov rbx, qword [r14 + 0x2b0]
mov r8, qword [0x1401473b0]
mov dword [rsp + 0x70], 0x3f800000
mov dword [rsp + 0x74], 0x3f800000
mov dword [rsp + 0x78], 0x3f800000
movss xmm0, dword [r8 + 0x38e8]
movss dword [rsp + 0x7c], xmm0
lea rcx, [rsp + 0x70]
call fcn.140004500
mov edi, eax
mov qword [rsp + 0x30], r13
lea r15, str.Spoofing.
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm9
movaps xmm3, xmm10
movss xmm2, dword [r8 + 0x3d40]
lea rdx, [rsp + 0x70]
mov rcx, qword [r8 + 0x3d38]
call fcn.14002c390
movss xmm0, dword [rsp + 0x70]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm2, dword [r14 + 0x30]
subss xmm2, xmm1
mulss xmm2, xmm12
movss dword [rsp + 0x70], xmm2
mov dword [rsp + 0x74], 0x43480000
test edi, 0xff000000
je 0x140049720
mov rax, qword [rbx + 0x38]
movups xmm0, xmmword [rbx + 0x88]
movups xmmword [rbp - 0x70], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
lea rcx, [0x1400d3f09]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r15
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x70]
movss xmm2, dword [rax + 0x10]
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.14002c5b0
jmp 0x140049720
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x68], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [0x140147d7c], 0
mov dword [0x140147d78], 2
mov byte [0x140147d92], 0
mov byte [0x140147d80], 0
mov r9d, Ordinal_50
lea r8, str.Warning
lea rdx, str.Loader_Succefully_Spoofed_your_Device__Restart_your_PC_to_save_Changes
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [0x140147d78], 2
jne 0x140049af1
nop dword [rax]
movaps xmm7, xmmword [0x1400d5da0]
mov r15, qword [0x140147c98]
mov rax, r12
sub rax, r15
cmp rax, 0xd
jb 0x140049bdc
lea r12, [0x140147c88]
cmp qword [0x140147ca0], 0xf
cmova r12, qword [0x140147c88]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
lea r14, [r15 + 0xd]
mov rdi, rsi
lea rbx, [rbp - 0x70]
cmp r14, rsi
jbe 0x14004980d
mov rdi, r14
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
jbe 0x1400497ce
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b81f4
test rax, rax
je 0x1400498ad
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140049809
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400497f7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140049bca
jmp 0x1400497af
test rcx, rcx
je 0x140049806
call fcn.1400b81f4
mov rbx, rax
jmp 0x140049809
mov rbx, r13
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rdi
movsd xmm0, qword [str.Bios_Serial:]
movsd qword [rbx], xmm0
mov eax, dword [0x1400d3fa8]
mov dword [rbx + 8], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rbx + 0xc], al
lea rcx, [rbx + 0xd]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r14], 0
lea r8, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r8, qword [rbp - 0x70]
movss xmm6, dword [0x1400d5bc0]
movdqa xmmword [rsp + 0x70], xmm7
lea r9, [rsp + 0x70]
movaps xmm0, xmm6
unpcklps xmm0, xmm15
movq rdx, xmm0
call fcn.14003a4d0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400498b9
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400498b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400498b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b7e8c
movaps xmm7, xmmword [0x1400d5da0]
mov r14, qword [0x140147cd8]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0xd
jb 0x140049bbe
lea r15, [0x140147cc8]
cmp qword [0x140147ce0], 0xf
cmova r15, qword [0x140147cc8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
lea rdi, [r14 + 0xd]
lea rbx, [rbp - 0x70]
cmp rdi, 0xf
jbe 0x140049990
mov rsi, rdi
or rsi, 0xf
cmp rsi, rcx
jbe 0x140049951
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400b81f4
test rax, rax
je 0x140049a26
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14004998c
cmp rsi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x14004997a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140049bd0
jmp 0x140049932
test rcx, rcx
je 0x140049989
call fcn.1400b81f4
mov rbx, rax
jmp 0x14004998c
mov rbx, r13
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rsi
movsd xmm0, qword [str.Mobo_Serial:]
movsd qword [rbx], xmm0
mov eax, dword [0x1400d3fb8]
mov dword [rbx + 8], eax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_32]
mov byte [rbx + 0xc], al
lea rcx, [rbx + 0xd]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], 0
lea r8, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r8, qword [rbp - 0x70]
movdqa xmmword [rsp + 0x70], xmm7
lea r9, [rsp + 0x70]
movaps xmm0, xmm6
unpcklps xmm0, xmm6
movq rdx, xmm0
call fcn.14003a4d0
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140049a32
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049a2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140049a2d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b7e8c
lea r9, [0x140147d81]
movaps xmm0, xmm6
movss xmm1, dword [0x1400d5bc4]
unpcklps xmm0, xmm1
movq r8, xmm0
lea rdx, str.SMBios_Spoofing
call fcn.140039fc0
movss xmm1, dword [0x1400d5bcc]
lea r9, [0x140147d91]
movaps xmm0, xmm6
unpcklps xmm0, xmm1
movq r8, xmm0
lea rdx, str.Network_Spoofing
call fcn.140039fc0
lea r9, [0x140147d90]
movaps xmm0, xmm6
movss xmm1, dword [0x1400d5bd4]
unpcklps xmm0, xmm1
movq r8, xmm0
lea rdx, str.Registry_Spoofing
call fcn.140039fc0
movss xmm2, dword [0x1400d5be0]
movss xmm0, dword [0x1400d5bc8]
movss xmm1, dword [0x1400d5b9c]
unpcklps xmm0, xmm1
movsd qword [rsp + 0x20], xmm0
movaps xmm1, xmm6
unpcklps xmm1, xmm2
movq r9, xmm1
lea r8, str.Spoof
lea rdx, str.Spoof
call fcn.140039c60
test al, al
je 0x140049af1
mov dword [0x140147d78], 5
lea rcx, [rbp + 0x38b0]
call fcn.14001b4a0
call fcn.1400104d0
nop
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x140049b5d
mov rdx, qword [rbp - 0x48]
call fcn.14004b5c0
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x50]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049b4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140049b4c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b7e8c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r13
lea rcx, [rbp - 0x38]
call fcn.14004a1a0
mov rcx, qword [rbp + 0x38c0]
xor rcx, rsp
call fcn.1400b7bd0
lea r11, [rsp + 0x3a50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm15, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14003afb0
nop
call fcn.140032380
int3
call fcn.140032380
int3
call fcn.140032380
int3
call fcn.14003afb0
int3
call fcn.14003afb0
int3