Function at 0x14003f650
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x278]
sub rsp, 0x340
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
mov rdi, rcx
xor ebx, ebx
mov byte [rbp + 0x288], 1
mov r13b, 1
mov byte [rbp + 0x290], r13b
mov byte [rbp - 0x80], bl
mov dword [rsp + 0x50], 7
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov r14d, ebx
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x30], rbx
movss xmm6, dword [0x1400d4f5c]
movss xmm7, dword [0x1400d4ee0]
movss xmm10, dword [0x1400da2e8]
movss xmm9, dword [0x1400da2e4]
movss xmm8, dword [0x1400d5008]
mov r12, qword [rbp - 0x38]
mov r15, qword [rbp - 0x40]
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x198]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14003f76c
lea rcx, [rbp + 0x198]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x198]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x1a0], 0x12
jne 0x14003f74b
mov byte [rbp + 0x288], 0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x198]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14003f721
cmp byte [rbp + 0x288], 0
je 0x140040b51
call fcn.140033970
call fcn.140034880
call fcn.140019590
test r13b, r13b
je 0x14003f7bf
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xe0], 0
lea r8, [rbp + 0xd8]
xor edx, edx
lea rcx, [rbp + 0xe0]
call fcn.14001ede0
mov byte [rbp + 0x290], 0
mov rsi, qword [rdi + 0x168]
mov rbx, qword [rdi + 0x160]
mov rcx, rsi
sub rcx, rbx
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, r12
sub rax, r15
sar rax, 3
cmp rax, rdx
je 0x14003f856
cmp rbx, rsi
je 0x14003f856
lea rax, [rbx + 8]
cmp qword [rbx + 0x20], 0xf
jbe 0x14003f810
mov rax, qword [rax]
mov qword [rbp + 0x298], rax
cmp r12, r14
je 0x14003f82a
mov qword [r12], rax
add r12, 8
mov qword [rbp - 0x38], r12
jmp 0x14003f845
lea r8, [rbp + 0x298]
mov rdx, r12
lea rcx, [rbp - 0x40]
call fcn.14003ea50
mov r14, qword [rbp - 0x30]
mov r12, qword [rbp - 0x38]
add rbx, 0x30
cmp rbx, rsi
jne 0x14003f802
mov qword [rbp - 0x58], r14
mov r15, qword [rbp - 0x40]
call fcn.1400137a0
mov r13, rax
movaps xmm0, xmmword [0x1400da430]
movups xmmword [rax + 0xe8], xmm0
movaps xmm1, xmmword [0x1400d95f0]
movups xmmword [rax + 0x218], xmm1
movaps xmm0, xmmword [0x1400da420]
movups xmmword [rax + 0x238], xmm0
movaps xmm1, xmmword [0x1400da450]
movups xmmword [rax + 0x228], xmm1
mov dword [rbp + 0x100], 0x43fa0000
mov dword [rbp + 0x104], 0x43d48000
xor edx, edx
lea rcx, [rbp + 0x100]
call fcn.14001ee20
mov r8d, 0x3f
lea rdx, [rbp + 0x288]
lea rcx, str.Loader
call fcn.14000cad0
test al, al
je 0x14003ff37
mov dword [r13 + 0x44], 0x42c80000
mov dword [rbp + 0x108], 0x43eb0000
mov dword [rbp + 0x10c], 0x40a00000
lea rcx, [rbp + 0x108]
call fcn.14001ea00
movaps xmm0, xmmword [0x1400d8cc0]
movups xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
xor ecx, ecx
call fcn.14001b270
mov dword [rbp - 0x28], 0x41c80000
mov dword [rbp - 0x24], 0x41f00000
lea rdx, [rbp - 0x28]
lea rcx, [0x1400d4e34]
call fcn.140037410
test al, al
je 0x14003f947
mov byte [rbp + 0x288], 0
call fcn.140005610
mov ecx, 1
call fcn.14001ac60
mov eax, dword [rdi + 0x118]
test eax, eax
jne 0x14003ffc5
mov rcx, qword [0x14014dbe0]
call fcn.14001af80
movaps xmm0, xmmword [0x1400da410]
movups xmmword [r13 + 0xc8], xmm0
cmp byte [rdi + 9], 0
je 0x14003f98f
movaps xmm0, xmmword [0x1400da400]
movups xmmword [r13 + 0xc8], xmm0
lea rax, [rdi + 0x10]
lea r14, [rdi + 0x10]
cmp qword [rdi + 0x28], 0xf
jbe 0x14003f9a2
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x14003fa09
mov dword [rbp - 0x20], 0
mov dword [rbp - 0x1c], 0x42700000
lea rcx, [rbp - 0x20]
call fcn.14001ea00
lea r15, [rdi + 0x10]
cmp qword [rdi + 0x28], 0xf
jbe 0x14003f9d1
mov r15, qword [rdi + 0x10]
lea r14, [rdi + 0x10]
movss dword [rsp + 0x20], xmm6
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
lea rcx, [rbp + 0x140]
call fcn.14000fa30
mov rbx, rax
call fcn.140013980
subss xmm0, dword [rbx]
mulss xmm0, xmm7
call fcn.14001ea80
mov rcx, r15
call fcn.14003c8c0
call fcn.14001ab80
mov rcx, qword [0x14014dbe0]
call fcn.14001af80
mov dword [r13 + 0x3c], 0x40a00000
mov dword [r13 + 0x40], 0x41700000
mov dword [r13 + 0x44], 0x41200000
mov dword [r13 + 0x48], 0x3f800000
movaps xmm0, xmmword [0x1400d4f90]
movups xmmword [r13 + 0xc8], xmm0
movaps xmm1, xmmword [0x1400d5010]
movups xmmword [r13 + 0x118], xmm1
movaps xmm0, xmmword [0x1400da440]
movups xmmword [r13 + 0x138], xmm0
mov dword [rbp - 0x18], 0x41a00000
mov dword [rbp - 0x14], 0x430d620c
lea rcx, [rbp - 0x18]
call fcn.14001ea00
lea rcx, str.Password:
call fcn.14003c8c0
movaps xmm0, xmm10
call fcn.14001edc0
mov dword [rbp - 0x10], 0x41b00000
mov dword [rbp - 0xc], 0x4320620c
lea rcx, [rbp - 0x10]
call fcn.14001ea00
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rdi + 0x140]
lea rcx, str.password
call fcn.140038780
mov dword [r13 + 0x3c], ebx
mov dword [r13 + 0x40], 0x40a00000
mov dword [r13 + 0x44], 0x40000000
mov dword [rbp - 8], 0x431b0000
mov dword [rbp - 4], 0x41f00000
lea rcx, [rbp - 8]
call fcn.14001ea00
movaps xmm0, xmmword [0x1400d95f0]
movups xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
xor ecx, ecx
call fcn.14001b270
mov rcx, qword [0x14014dbd8]
call fcn.14001af80
lea rcx, str.TrumpWare
call fcn.14003c8c0
lea ecx, [rbx + 1]
call fcn.14001ac60
call fcn.14001ab80
mov dword [rbp], 0x41a00000
mov dword [rbp + 4], 0x43828000
lea rcx, [rbp]
call fcn.14001ea00
cmp byte [rdi + 8], bl
je 0x14003fb55
mov cl, 1
call fcn.14000f170
mov dword [rbp + 8], 0x43e10000
mov dword [rbp + 0xc], 0x42480000
lea rcx, str.OPEN
cmp byte [rdi + 8], bl
lea rax, str.Opening...
cmovne rcx, rax
lea rdx, [rbp + 8]
call fcn.140037410
test al, al
je 0x14003fd0d
xor r8d, r8d
lea rdx, [0x1400d423a]
lea rcx, [rdi + 0x10]
call fcn.1400058d0
cmp qword [rdi + 0x130], 5
jb 0x14003fc7c
cmp qword [rdi + 0x150], 8
jb 0x14003fc7c
mov ecx, 0x48
call fcn.14008fe9c
mov rbx, rax
mov qword [rbp + 0x148], rax
test rax, rax
je 0x14003fc01
lea rdx, [rdi + 0x140]
mov rcx, rax
call fcn.1400035e0
nop
lea rcx, [rbx + 0x20]
lea rdx, [rdi + 0x120]
call fcn.1400035e0
nop
lea rax, [0x14003f550]
mov qword [rbx + 0x40], rax
xor esi, esi
jmp 0x14003fc05
xor esi, esi
mov ebx, esi
mov qword [rbp + 0x298], rbx
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
mov r9, rbx
lea r8, [0x14003ebf0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x140040cad
cmp dword [rbp + 0xf8], 0
je 0x140040ca2
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x140040ca2
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
jmp 0x14003fd0d
mov word [rdi + 8], 0x100
mov qword [rbp - 0x70], rbx
mov ecx, 0x20
call fcn.14008fe9c
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], 0x13
mov qword [rbp - 0x60], 0x1f
movups xmm0, xmmword [str.Invalid_credentials]
movups xmmword [rax], xmm0
movzx edx, word [0x1400da1b8]
mov word [rax + 0x10], dx
movzx edx, byte [0x1400da1ba]
mov byte [rax + 0x12], dl
mov byte [rax + 0x13], bl
lea rdx, [rbp - 0x78]
mov rcx, r14
call fcn.140003f40
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x14003fd0d
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fd08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040b4a
call fcn.14008fed8
cmp byte [rdi + 8], 0
je 0x14003fd18
call fcn.1400117f0
call fcn.14001ab80
mov rcx, qword [0x14014dbd8]
call fcn.14001af80
mov dword [rbp + 0x10], 0
mov dword [rbp + 0x14], 0x43a58000
lea rcx, [rbp + 0x10]
call fcn.14001ea00
call fcn.14001ab80
xor esi, esi
call fcn.140011250
mov ebx, dword [rbp - 0x80]
test bl, bl
je 0x14003ff37
mov qword [rbp + 0xb0], 0
mov dword [rbp + 0xb8], 0x42fa0000
mov dword [rbp + 0xbc], 0x42960000
lea r8, [rbp + 0xb0]
xor edx, edx
lea rcx, [rbp + 0xb8]
call fcn.14001ede0
mov dword [rbp + 0xc0], 0x437a0000
mov dword [rbp + 0xc4], 0x43610000
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.14001ee20
mov r8d, 0x3f
lea rdx, [rbp + 0x288]
lea rcx, str.Spoofer
call fcn.14000cad0
test al, al
je 0x14003ff32
mov dword [r13 + 0x44], 0x40000000
mov dword [rbp + 0xc8], 0x43520000
mov dword [rbp + 0xcc], 0x41200000
lea rcx, [rbp + 0xc8]
call fcn.14001ea00
mov dword [rbp + 0xd0], 0x41c80000
mov dword [rbp + 0xd4], 0x41f00000
lea rdx, [rbp + 0xd0]
lea rcx, [0x1400d4e34]
call fcn.140037410
movzx ebx, bl
test al, al
cmovne ebx, esi
mov dword [rbp - 0x80], ebx
call fcn.14003f110
lea rdx, [rax + 1]
lea rcx, str.Spoof_Disks
call fcn.140037bc0
test al, al
je 0x14003fe4e
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.14003f110
lea rdx, [rax + 2]
lea rcx, str.Alternative_Disk_Spoof
call fcn.140037bc0
test al, al
je 0x14003fe74
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.14003f110
lea rdx, [rax + 3]
lea rcx, str.Spoof_MOBO
call fcn.140037bc0
test al, al
je 0x14003fe9a
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.14003f110
lea rdx, [rax + 4]
lea rcx, str.Spoof_Boot
call fcn.140037bc0
test al, al
je 0x14003fec0
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.14003f110
lea rdx, [rax + 5]
lea rcx, str.Spoof_MAC
call fcn.140037bc0
test al, al
je 0x14003fee6
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.14003f110
lea rdx, [rax + 6]
lea rcx, str.Spoof_Monitor
call fcn.140037bc0
test al, al
je 0x14003ff0c
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.14003f110
lea rdx, [rax + 7]
lea rcx, str.Spoof_GPU
call fcn.140037bc0
test al, al
je 0x14003ff32
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.140011250
call fcn.14001b3e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x178], xmm0
mov rcx, qword [0x14014dbb8]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x14014dbc8]
lea edx, [r9 + 1]
call qword [rax + pe_nt_image_headers64]
mov rcx, qword [0x14014dbb8]
mov rax, qword [rcx]
lea r8, [rbp + 0x178]
mov rdx, qword [0x14014dbc8]
call qword [rax + 0x190]
call fcn.140012f10
mov rcx, rax
call fcn.1400339b0
mov rcx, qword [0x14014dbc0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 1]
call qword [rax + 0x40]
mov r14, qword [rbp - 0x58]
mov r15, qword [rbp - 0x40]
cmp byte [rbp + 0x288], 0
je 0x140040b51
movzx r13d, byte [rbp + 0x290]
jmp 0x14003f700
cmp eax, 1
jne 0x14003fd45
mov rcx, qword [0x14014dbe0]
call fcn.14001af80
mov dword [rbp + 0x18], 0x43390000
mov dword [rbp + 0x1c], 0x41f00000
lea rcx, [rbp + 0x18]
call fcn.14001ea00
movaps xmm0, xmmword [0x1400d95f0]
movups xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
xor ecx, ecx
call fcn.14001b270
lea rcx, str.__Trump_Multi
call fcn.14003c8c0
mov ecx, 1
call fcn.14001ac60
movaps xmm0, xmm9
call fcn.14001edc0
mov dword [rbp + 0x20], 0x435c0000
mov dword [rbp + 0x24], 0x433e0000
lea rcx, [rbp + 0x20]
call fcn.14001ea00
mov r9, r12
sub r9, r15
sar r9, 3
mov dword [rsp + 0x20], 0xffffffff
mov r8, r15
lea rdx, [rsp + 0x50]
lea rcx, str.cheat
call fcn.140038750
test al, al
je 0x14004019b
movsxd rax, dword [rsp + 0x50]
lea rbx, [rax + rax*2]
shl rbx, 4
add rbx, qword [rdi + 0x160]
mov eax, dword [rbx]
mov dword [rbp + 0x110], eax
lea rdx, [rbx + 8]
lea rcx, [rbp + 0x118]
call fcn.1400035e0
movzx eax, byte [rbx + 0x28]
mov byte [rbp + 0x138], al
movzx edx, byte [rbx + 0x29]
mov byte [rbp + 0x139], dl
mov byte [rdi + 0xa], al
test dl, dl
je 0x1400400d0
mov byte [rdi + 9], 0
xor r8d, r8d
lea rdx, [0x1400d423a]
lea rcx, [rdi + 0x10]
call fcn.1400058d0
jmp 0x14004015a
mov byte [rdi + 9], 1
xor esi, esi
mov qword [rbp - 0x70], rsi
lea ecx, [rsi + 0x20]
call fcn.14008fe9c
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], 0x18
mov qword [rbp - 0x60], 0x1f
movups xmm0, xmmword [str.Cheat_is_under_maintence]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400da1e8]
movsd qword [rax + 0x10], xmm0
mov byte [rax + 0x18], sil
lea rdx, [rbp - 0x78]
lea rcx, [rdi + 0x10]
call fcn.140003f40
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x14004015a
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040154
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040b3c
call fcn.14008fed8
nop
mov rdx, qword [rbp + 0x130]
cmp rdx, 0xf
jbe 0x14004019b
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040196
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040b4a
call fcn.14008fed8
movaps xmm0, xmmword [0x1400da410]
movups xmmword [r13 + 0xc8], xmm0
cmp byte [rdi + 9], 0
je 0x1400401bf
movaps xmm0, xmmword [0x1400da400]
movups xmmword [r13 + 0xc8], xmm0
lea rsi, [rdi + 0x10]
mov rax, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1400401d0
mov rax, qword [rsi]
test rax, rax
je 0x14004022e
mov dword [rbp + 0x28], 0
mov dword [rbp + 0x2c], 0x43823106
lea rcx, [rbp + 0x28]
call fcn.14001ea00
cmp qword [rsi + 0x18], 0xf
jbe 0x1400401f6
mov rsi, qword [rsi]
movss dword [rsp + 0x20], xmm6
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x150]
call fcn.14000fa30
mov rbx, rax
call fcn.140013980
subss xmm0, dword [rbx]
mulss xmm0, xmm7
call fcn.14001ea80
mov rcx, rsi
call fcn.14003c8c0
call fcn.14001ab80
cmp qword [rdi + 0xc0], 0
je 0x1400402c1
mov rcx, qword [0x14014dbd8]
call fcn.14001af80
movaps xmm0, xmmword [0x1400da460]
movups xmmword [r13 + 0xc8], xmm0
mov dword [rbp + 0x30], 0
mov dword [rbp + 0x34], 0x42218831
lea rcx, [rbp + 0x30]
call fcn.14001ea00
lea rsi, [rdi + 0xb0]
cmp qword [rsi + 0x18], 0xf
jbe 0x140040284
mov rsi, qword [rsi]
movss dword [rsp + 0x20], xmm6
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp + 0x188]
call fcn.14000fa30
mov rbx, rax
call fcn.140013980
subss xmm0, dword [rbx]
mulss xmm0, xmm7
call fcn.14001ea80
mov rcx, rsi
call fcn.14003c8c0
call fcn.14001ab80
cmp qword [rdi + 0xe0], 0
je 0x140040525
cmp qword [0x14014dc00], 0
jne 0x140040425
cmp byte [0x14014dc08], 0
jne 0x140040525
lea rdx, [rdi + 0xd0]
lea rcx, [rbp + 0x1c8]
call fcn.1400035e0
mov rbx, rax
mov qword [rbp + 0x298], rax
mov byte [0x14014dc08], 1
mov edx, 0x38
mov eax, dword [0x14014df90]
mov rcx, qword gs:[0x58]
mov rcx, qword [rcx + rax*8]
mov ecx, dword [rdx + rcx]
cmp dword [0x14014dc70], ecx
jg 0x140040c6c
lea rax, [rbp - 0x78]
mov qword [rbp + 0x190], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], 0xa
mov qword [rbp - 0x60], 0xf
movsd xmm0, qword [str.C:_str.png]
movsd qword [rbp - 0x78], xmm0
movzx eax, word [0x1400da100]
mov word [rbp - 0x70], ax
mov byte [rbp - 0x6e], 0
mov rdx, rbx
lea rcx, [rbp + 0x110]
call fcn.1400035e0
nop
lea r8, [rbp - 0x78]
mov rdx, rax
lea rcx, [0x14014dc6c]
call fcn.140078a40
test al, al
je 0x1400403ca
lea r9, [0x14014dbfc]
lea r8, [0x14014dbf8]
lea rdx, [0x14014dc00]
lea rcx, str.C:_str.png
call fcn.14003f2f0
xor esi, esi
test al, al
jne 0x1400403cc
mov qword [0x14014dc00], rsi
jmp 0x1400403cc
xor esi, esi
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140040406
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140040401
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140040b43
mov rcx, r8
call fcn.14008fed8
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
cmp qword [0x14014dc00], 0
je 0x140040527
jmp 0x140040427
xor esi, esi
mov dword [rbp + 0x38], 0x41a00000
mov dword [rbp + 0x3c], 0x41a31062
lea rcx, [rbp + 0x38]
call fcn.14001ea00
mov rcx, qword [0x14014db50]
mov rax, qword [rcx + 0x1c20]
mov byte [rax + 0x90], 1
mov rbx, qword [rcx + 0x1c20]
movss xmm2, dword [rbx + 0xdc]
addss xmm2, xmm8
movss xmm0, dword [rbx + 0xd8]
movaps xmm1, xmm0
addss xmm1, xmm8
movss dword [rbp - 0x50], xmm0
movss xmm0, dword [rbx + 0xdc]
movss dword [rbp - 0x4c], xmm0
movss dword [rbp - 0x48], xmm1
movss dword [rbp - 0x44], xmm2
movaps xmm1, xmm6
lea rcx, [rbp - 0x50]
call fcn.1400151e0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.140014ee0
test al, al
je 0x140040bee
mov rbx, qword [rbx + 0x270]
movaps xmm0, xmmword [0x1400d4f90]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.140012e40
mov dword [rbp + 0x40], 0x3f800000
mov dword [rbp + 0x44], 0x3f800000
mov qword [rbp + 0x48], 0
mov dword [rsp + 0x40], esi
movss dword [rsp + 0x38], xmm8
mov dword [rsp + 0x30], eax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x50]
mov rdx, qword [0x14014dc00]
mov rcx, rbx
call fcn.1400242e0
jmp 0x140040527
xor esi, esi
mov rcx, qword [0x14014dbe0]
call fcn.14001af80
mov dword [r13 + 0x48], 0x3f800000
movaps xmm0, xmmword [0x1400d4f90]
movups xmmword [r13 + 0xc8], xmm0
movaps xmm1, xmmword [0x1400d5010]
movups xmmword [r13 + 0x118], xmm1
mov dword [r13 + 0x3c], esi
mov dword [r13 + 0x40], 0x40a00000
mov dword [r13 + 0x44], 0x40000000
call fcn.14003f110
cmp byte [rax], 0
je 0x140040741
mov dword [rbp + 0x50], 0x41a00000
mov dword [rbp + 0x54], 0x42f00000
lea rcx, [rbp + 0x50]
call fcn.14001ea00
call fcn.14003f110
lea rdx, [rax + 1]
lea rcx, str.Spoof_Disks
call fcn.140037bc0
test al, al
je 0x1400405b8
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.140012ee0
mov dword [rbp + 0x58], 0x41a00000
movss dword [rbp + 0x5c], xmm0
lea rcx, [rbp + 0x58]
call fcn.14001ea00
call fcn.14003f110
lea rdx, [rax + 2]
lea rcx, str.Alternative_Disk_Spoof
call fcn.140037bc0
test al, al
je 0x1400405f8
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.140012ee0
mov dword [rbp + 0x60], 0x41a00000
movss dword [rbp + 0x64], xmm0
lea rcx, [rbp + 0x60]
call fcn.14001ea00
call fcn.14003f110
lea rdx, [rax + 3]
lea rcx, str.Spoof_MOBO
call fcn.140037bc0
test al, al
je 0x140040638
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.140012ee0
mov dword [rbp + 0x68], 0x41a00000
movss dword [rbp + 0x6c], xmm0
lea rcx, [rbp + 0x68]
call fcn.14001ea00
call fcn.14003f110
lea rdx, [rax + 4]
lea rcx, str.Spoof_Boot
call fcn.140037bc0
test al, al
je 0x140040678
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.140012ee0
mov dword [rbp + 0x70], 0x41a00000
movss dword [rbp + 0x74], xmm0
lea rcx, [rbp + 0x70]
call fcn.14001ea00
call fcn.14003f110
lea rdx, [rax + 5]
lea rcx, str.Spoof_MAC
call fcn.140037bc0
test al, al
je 0x1400406b8
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.140012ee0
mov dword [rbp + 0x78], 0x41a00000
movss dword [rbp + 0x7c], xmm0
lea rcx, [rbp + 0x78]
call fcn.14001ea00
call fcn.14003f110
lea rdx, [rax + 6]
lea rcx, str.Spoof_Monitor
call fcn.140037bc0
test al, al
je 0x1400406f8
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
call fcn.140012ee0
mov dword [rbp + 0x80], 0x41a00000
movss dword [rbp + 0x84], xmm0
lea rcx, [rbp + 0x80]
call fcn.14001ea00
call fcn.14003f110
lea rdx, [rax + 7]
lea rcx, str.Spoof_GPU
call fcn.140037bc0
test al, al
je 0x140040741
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
mov dword [rbp + 0x88], 0x43870000
mov dword [rbp + 0x8c], 0x43870000
lea rcx, [rbp + 0x88]
call fcn.14001ea00
call fcn.14003f110
mov rdx, rax
lea rcx, str.Enable_Spoofer
call fcn.140037bc0
test al, al
je 0x140040786
call fcn.14003f110
mov rcx, rax
call fcn.140058a00
mov dword [rbp + 0x90], 0x41a00000
mov dword [rbp + 0x94], 0x43940000
lea rcx, [rbp + 0x90]
call fcn.14001ea00
cmp byte [rdi + 8], 0
jne 0x1400407b2
cmp byte [rdi + 9], 0
je 0x1400407b9
mov cl, 1
call fcn.14000f170
mov dword [rbp + 0x98], 0x43e10000
mov dword [rbp + 0x9c], 0x42480000
lea rcx, str.INJECT
cmp byte [rdi + 8], 0
lea rax, str.INJECTING...
cmovne rcx, rax
lea rdx, [rbp + 0x98]
call fcn.140037410
test al, al
je 0x140040948
mov byte [rdi + 8], 1
lea rcx, [rdi + 0x10]
xor r8d, r8d
lea rdx, [0x1400d423a]
call fcn.1400058d0
cmp qword [rdi + 0x130], 5
jb 0x1400408b7
cmp qword [rdi + 0x150], 5
jb 0x1400408b7
mov byte [rbp + 0x298], 0
movsxd rax, dword [rsp + 0x50]
lea rcx, [rax + rax*2]
shl rcx, 4
add rcx, qword [rdi + 0x160]
lea r9, [rdi + 0x140]
lea r8, [rdi + 0x120]
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rdx, [0x14003f190]
lea rcx, [rbp + 0x158]
call fcn.14003e980
mov rbx, rax
cmp dword [rax + 8], 0
je 0x140040cbe
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x140040cbe
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
cmp dword [rbp + 0x160], eax
je 0x140040948
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov word [rdi + 8], 0x100
mov dword [rsp + 0x6c], esi
mov qword [rsp + 0x70], 0xb
mov qword [rsp + 0x78], 0xf
movsd xmm0, qword [str.Invalid_key]
movsd qword [rsp + 0x60], xmm0
movzx eax, word [0x1400da2a0]
mov word [rsp + 0x68], ax
movzx eax, byte [0x1400da2a2]
mov byte [rsp + 0x6a], al
mov byte [rsp + 0x6b], 0
lea rcx, [rdi + 0x10]
lea rdx, [rsp + 0x60]
call fcn.140003f40
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140040948
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040943
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040b4a
call fcn.14008fed8
cmp byte [rdi + 8], 0
jne 0x140040954
cmp byte [rdi + 9], 0
je 0x140040959
call fcn.1400117f0
cmp byte [rdi + 0xa], 0
je 0x140040b32
mov dword [rbp + 0xa0], 0x41a00000
mov dword [rbp + 0xa4], 0x43b20000
lea rcx, [rbp + 0xa0]
call fcn.14001ea00
cmp byte [rdi + 8], 0
jne 0x14004098f
cmp byte [rdi + 9], 0
je 0x140040996
mov cl, 1
call fcn.14000f170
mov dword [rbp + 0xa8], 0x43e10000
mov dword [rbp + 0xac], 0x42480000
lea rcx, str.CLEAN_MY_PC
cmp byte [rdi + 8], 0
lea rax, str.CLEANING...
cmovne rcx, rax
lea rdx, [rbp + 0xa8]
call fcn.140037410
test al, al
je 0x140040b21
mov byte [rdi + 8], 1
lea rcx, [rdi + 0x10]
xor r8d, r8d
lea rdx, [0x1400d423a]
call fcn.1400058d0
cmp qword [rdi + 0x130], 5
jb 0x140040a94
cmp qword [rdi + 0x150], 5
jb 0x140040a94
mov byte [rbp + 0x298], 1
movsxd rax, dword [rsp + 0x50]
lea rcx, [rax + rax*2]
shl rcx, 4
add rcx, qword [rdi + 0x160]
lea r9, [rdi + 0x140]
lea r8, [rdi + 0x120]
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rdx, [0x14003f190]
lea rcx, [rbp + 0x168]
call fcn.14003e980
mov rbx, rax
cmp dword [rax + 8], 0
je 0x140040c61
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x140040c61
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
cmp dword [rbp + 0x170], eax
je 0x140040b21
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov word [rdi + 8], 0x100
mov dword [rsp + 0x6c], esi
mov qword [rsp + 0x70], 0xb
mov qword [rsp + 0x78], 0xf
movsd xmm0, qword [str.Invalid_key]
movsd qword [rsp + 0x60], xmm0
movzx eax, word [0x1400da2a0]
mov word [rsp + 0x68], ax
movzx eax, byte [0x1400da2a2]
mov byte [rsp + 0x6a], al
mov byte [rsp + 0x6b], 0
lea rcx, [rdi + 0x10]
lea rdx, [rsp + 0x60]
call fcn.140003f40
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140040b21
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040b1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040b4a
call fcn.14008fed8
cmp byte [rdi + 8], 0
jne 0x140040b2d
cmp byte [rdi + 9], 0
je 0x140040b32
call fcn.1400117f0
call fcn.14001ab80
jmp 0x14003fd47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400345d0
call fcn.140034ac0
xor ecx, ecx
call fcn.1400111e0
mov rcx, qword [0x14014dbc8]
test rcx, rcx
je 0x140040b7f
mov rax, qword [rcx]
call qword [rax + 0x10]
xor ebx, ebx
mov qword [0x14014dbc8], rbx
jmp 0x140040b81
xor ebx, ebx
mov rcx, qword [0x14014dbc0]
test rcx, rcx
je 0x140040b9a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14014dbc0], rbx
mov rcx, qword [0x14014dbb8]
test rcx, rcx
je 0x140040bb3
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14014dbb8], rbx
mov rcx, qword [0x14014dbb0]
test rcx, rcx
je 0x140040bcc
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14014dbb0], rbx
mov rcx, qword [0x14014dbd0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x14014dc28]
mov rcx, qword [0x14014dc50]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
test r15, r15
je 0x140040c2d
sub r14, r15
and r14, 0xfffffffffffffff8
mov rax, r15
cmp r14, 0x1000
jb 0x140040c22
add r14, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040c22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r14
mov rcx, r15
call fcn.14008fed8
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
lea rcx, [0x14014dc70]
call fcn.1400901c8
cmp dword [0x14014dc70], 0xffffffff
jne 0x140040335
lea rcx, [0x1400cfab0]
call fcn.140090108
lea rcx, [0x14014dc70]
call fcn.14009015c
jmp 0x140040335
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rbp + 0xf8], esi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3