Function at 0x14003ab30
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x278]
sub rsp, 0x340
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
mov rsi, rcx
xor r13d, r13d
mov r12d, r13d
mov dword [rsp + 0x30], r13d
mov byte [rbp + 0x288], 1
mov dil, 1
mov byte [rbp + 0x290], dil
mov byte [rsp + 0x70], r12b
mov qword [rbp - 0x48], r13
mov dword [rbp + 0x298], r13d
mov dword [rbp - 0x80], r13d
mov qword [rbp + 0x130], r13
mov dword [rbp + 0x150], r13d
mov dword [rbp + 0x1d8], r13d
lea rax, [0x140161230]
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1e0], rax
lea rax, [0x14018c119]
mov qword [rbp + 0x1f8], rax
mov qword [rbp + 0x1e8], rax
mov dword [rsp + 0x20], 4
xor r9d, r9d
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x298]
lea rcx, [rbp + 0x120]
call fcn.140047650
mov rbx, rax
test rax, rax
je 0x14003accf
mov qword [rsp + 0x54], 1
mov qword [rsp + 0x64], r13
mov eax, dword [rbp + 0x298]
mov dword [rsp + 0x40], eax
mov ecx, dword [rbp - 0x80]
mov dword [rsp + 0x44], ecx
mov dword [rsp + 0x48], 1
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], 0x1c
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], 8
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x70], rbx
lea eax, [rax*4]
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x64], r13d
mov rcx, qword [0x1401cf230]
mov rax, qword [rcx]
lea r9, [rsp + 0x78]
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x40]
call qword [rax + 0x28]
mov qword [rbp + 0xa0], r13
mov dword [rbp + 0x90], 0x1c
mov qword [rbp + 0x94], 4
mov eax, dword [rsp + 0x48]
mov dword [rbp + 0x9c], eax
mov rcx, qword [0x1401cf230]
mov rax, qword [rcx]
lea r9, [rbp - 0x48]
lea r8, [rbp + 0x90]
mov rdx, qword [rsp + 0x78]
call qword [rax + 0x38]
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp byte [rbp + 0x288], r12b
je 0x14003bd41
mov r14d, dword [0x1401cf658]
mov r15, qword gs:[0x58]
movss xmm8, dword [0x1401232e4]
movss xmm7, dword [0x1400dfd58]
movss xmm9, dword [0x1400dfcd4]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xe8]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14003ad84
lea rcx, [rbp + 0xe8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xe8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx eax, byte [rbp + 0x288]
cmp dword [rbp + 0xf0], 0x12
cmove eax, r13d
mov byte [rbp + 0x288], al
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xe8]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14003ad31
cmp byte [rbp + 0x288], 0
je 0x14003bd41
call fcn.14002fff0
call fcn.140030ef0
call fcn.140016c50
test dil, dil
je 0x14003adcd
mov qword [rsp + 0x78], 0
mov qword [rbp - 0x80], 0
lea r8, [rsp + 0x78]
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.14001bf20
mov byte [rbp + 0x290], 0
call fcn.140010f50
mov r13, rax
movaps xmm0, xmmword [0x140123430]
movups xmmword [rax + 0xf8], xmm0
movaps xmm1, xmmword [0x1401234b0]
movups xmmword [rax + 0x118], xmm1
movaps xmm0, xmmword [0x140123400]
movups xmmword [rax + 0x3b8], xmm0
movaps xmm1, xmmword [0x140123470]
movups xmmword [rax + 0x138], xmm1
movaps xmm0, xmm1
movups xmmword [rax + 0x158], xmm1
movups xmmword [rax + 0x148], xmm1
movups xmmword [rax + 0x218], xmm1
movaps xmm0, xmmword [0x140123450]
movups xmmword [rax + 0x228], xmm0
movaps xmm1, xmm0
movups xmmword [rax + 0x238], xmm0
movaps xmm0, xmmword [0x1400dfda0]
movups xmmword [rax + 0xc8], xmm0
mov dword [rax + 0x10], 0x40800000
mov dword [rax + 0x14], 0x3fc00000
mov dword [rax + 0x48], 0x3f800000
mov dword [rax + 0x30], 0x3fc00000
mov dword [rax + 0x2c], 0x40e00000
mov dword [rax + 0x44], 0x40800000
xor edi, edi
mov dword [rax + 0x74], edi
movaps xmm0, xmmword [0x140123440]
movups xmmword [rax + 0xe8], xmm0
mov dword [rbp + 0x78], 0x43fa0000
mov dword [rbp + 0x7c], 0x43d48000
xor edx, edx
lea rcx, [rbp + 0x78]
call fcn.14001bf60
lea r8d, [rdi + 0x3f]
lea rdx, [rbp + 0x288]
lea rcx, str.Loader
call fcn.14000a4a0
test al, al
je 0x14003bca1
mov dword [rbp + 0x80], 0x43480000
mov dword [rbp + 0x84], 0x41f00000
lea rcx, [rbp + 0x80]
call fcn.14001bc90
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
movaps xmm1, xmmword [0x1400dfda0]
movups xmmword [rsp + 0x40], xmm1
mov dword [rbp - 0x60], 0x3f800000
mov dword [rbp - 0x5c], 0x3f800000
mov qword [rbp - 0x58], rdi
mov dword [rbp - 0x50], 0x42b40000
mov dword [rbp - 0x4c], 0x42b40000
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
call fcn.1400341b0
movaps xmm0, xmmword [0x140123470]
movups xmmword [r13 + 0x218], xmm0
mov dword [rbp - 0x40], 0x43e88000
mov dword [rbp - 0x3c], 0x40400000
lea rcx, [rbp - 0x40]
call fcn.14001bc90
mov dword [rbp - 0x38], 0x41f00000
mov dword [rbp - 0x34], 0x41f00000
lea rdx, [rbp - 0x38]
lea rcx, [0x1400dfc24]
call fcn.1400334c0
test al, al
je 0x14003af95
mov byte [rbp + 0x288], dil
call fcn.140004310
mov eax, dword [rsi + 0x118]
test eax, eax
jne 0x14003b359
mov dword [rbp - 0x30], 0x41f00000
mov dword [rbp - 0x2c], 0x435c0000
lea rcx, [rbp - 0x30]
call fcn.14001bc90
mov rcx, qword [0x1401cf260]
call fcn.140018730
movaps xmm0, xmm8
call fcn.14001bf00
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsi + 0x30]
lea rcx, str.Key
call fcn.1400343d0
call fcn.140018330
movups xmm6, xmmword [r13 + 0xc8]
mov rcx, qword [0x1401cf268]
call fcn.140018730
movaps xmm0, xmmword [0x1401234c0]
movups xmmword [r13 + 0xc8], xmm0
cmp byte [rsi + 9], dil
je 0x14003b027
movaps xmm0, xmmword [0x1401234a0]
movups xmmword [r13 + 0xc8], xmm0
lea rax, [rsi + 0x10]
cmp qword [rsi + 0x28], 0x10
jb 0x14003b036
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x14003b09b
mov ecx, 0x20
call fcn.1400953a8
mov rbx, rax
mov r14d, 0x1f
movups xmm0, xmmword [str.Cheat_is_under_maintence]
movups xmmword [rax], xmm0
movsd xmm1, qword [0x140123148]
movsd qword [rax + 0x10], xmm1
mov byte [rax + 0x18], 0
or dword [rsp + 0x30], 1
lea rcx, [rsi + 0x10]
cmp qword [rsi + 0x28], 0x10
jb 0x14003b07d
mov rcx, qword [rsi + 0x10]
cmp qword [rsi + 0x20], 0x18
jne 0x14003b096
mov r8d, 0x18
mov rdx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14003b0a5
mov r15b, 1
jmp 0x14003b0a8
mov r14, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x40]
xor r15b, r15b
mov eax, dword [rsp + 0x30]
test al, 1
je 0x14003b0ee
and eax, 0xfffffffe
mov dword [rsp + 0x30], eax
cmp r14, 0x10
jb 0x14003b0ee
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003b0e6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bd33
mov rcx, rbx
call fcn.1400953e4
test r15b, r15b
je 0x14003b152
mov dword [rbp - 0x28], 0x42700000
mov dword [rbp - 0x24], 0x43340000
lea rcx, [rbp - 0x28]
call fcn.14001bc90
lea r14, [rsi + 0x10]
cmp qword [rsi + 0x28], 0x10
jb 0x14003b119
mov r14, qword [rsi + 0x10]
movss dword [rsp + 0x20], xmm7
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp + 0xa8]
call fcn.14000d3f0
mov rbx, rax
call fcn.140011130
subss xmm0, dword [rbx]
mulss xmm0, xmm9
call fcn.14001bd10
mov rcx, r14
call fcn.1400385c0
call fcn.140018330
movups xmmword [r13 + 0xc8], xmm6
mov dword [rbp - 0x20], 0x42480000
mov dword [rbp - 0x1c], 0x43960000
lea rcx, [rbp - 0x20]
call fcn.14001bc90
movzx eax, byte [rsi + 8]
test al, al
je 0x14003b189
mov cl, 1
call fcn.14000cb50
movzx eax, byte [rsi + 8]
mov dword [rbp - 0x18], 0x43c80000
mov dword [rbp - 0x14], 0x42200000
lea rcx, str._______Login
test al, al
lea rax, str.____Logging...
cmovne rcx, rax
lea rdx, [rbp - 0x18]
call fcn.14003cfd0
test al, al
je 0x14003b290
xor r8d, r8d
lea rdx, [0x1400df138]
lea rcx, [rsi + 0x10]
call fcn.140004420
lea rcx, [rsi + 0x50]
xor r8d, r8d
lea rdx, [0x1400df138]
call fcn.140004420
lea rcx, [rsi + 0x90]
xor r8d, r8d
lea rdx, [0x1400df138]
call fcn.140004420
cmp qword [rsi + 0x40], 0xf
jae 0x14003b2ab
mov word [rsi + 8], 0x100
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], 0xb
movsd xmm0, qword [str.Invalid_key]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140123190]
mov word [rsp + 0x48], ax
movzx eax, byte [0x140123192]
mov byte [rsp + 0x4a], al
mov byte [rsp + 0x4b], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsi + 0x10]
call fcn.140003130
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14003b290
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b28b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bd33
call fcn.1400953e4
mov r12d, dword [rsp + 0x30]
xor edi, edi
cmp byte [rsi + 8], 0
je 0x14003ba5a
call fcn.14000f180
jmp 0x14003ba5a
mov ecx, 0x28
call fcn.1400953a8
mov rbx, rax
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x14003b2df
lea rdx, [rsi + 0x30]
mov rcx, rax
call fcn.140002e40
lea rax, [0x14003aaa0]
mov qword [rbx + 0x20], rax
xor edi, edi
jmp 0x14003b2e3
xor edi, edi
mov ebx, edi
mov qword [rbp + 0x298], rbx
mov r12d, dword [rsp + 0x30]
or r12d, 4
mov dword [rsp + 0x30], r12d
lea rax, [rbp - 0x68]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x14003a590]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14003bfc6
cmp dword [rbp - 0x68], 0
je 0x14003bfbb
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x14003bfb3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
jmp 0x14003b297
cmp eax, 1
jne 0x14003ba6a
mov dword [rbp - 0x10], 0x42700000
mov dword [rbp - 0xc], 0x42f00000
lea rcx, [rbp - 0x10]
call fcn.14001bc90
mov dword [rbp - 8], 0x43be0000
mov dword [rbp - 4], 0x42200000
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
lea rdi, [rsi + 0x90]
mov r14, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
jb 0x14003b3ab
mov rdi, qword [rdi]
cmp r14, 0x10
jae 0x14003b3c4
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x58], 0xf
jmp 0x14003b43f
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003b418
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003bda7
mov rcx, rax
call fcn.1400953a8
mov rcx, rax
test rax, rax
je 0x14003bd25
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14003b426
test rcx, rcx
je 0x14003b424
call fcn.1400953a8
jmp 0x14003b426
xor eax, eax
mov qword [rsp + 0x40], rax
lea r8, [r14 + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], r14
lea r8, [rbp - 8]
lea rdx, [rsp + 0x40]
lea rcx, str.Game_Cheat
call fcn.14003de00
mov dword [rbp], 0x42700000
mov dword [rbp + 4], 0x432a0000
lea rcx, [rbp]
call fcn.14001bc90
mov dword [rbp + 8], 0x43be0000
mov dword [rbp + 0xc], 0x42200000
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], al
lea r8d, [rax + 0x18]
lea rdx, str.Cheat_is_under_maintence
lea rcx, [rsp + 0x40]
call fcn.140004420
nop
lea rdx, [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0x10
setae r15b
mov rbx, qword [rsp + 0x40]
cmovae rdx, rbx
mov r8, qword [rsi + 0x20]
lea rcx, [rsi + 0x10]
cmp qword [rsi + 0x28], 0x10
jb 0x14003b4db
mov rcx, qword [rsi + 0x10]
cmp r8, qword [rsp + 0x50]
jne 0x14003b4f0
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14003b4f0
lea edx, [rax + 1]
jmp 0x14003b4f2
xor edx, edx
lea r8, [rbp + 8]
lea rcx, str.Cheat_Status
call fcn.14003e2d0
nop
test r15b, r15b
je 0x14003b539
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003b531
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bd33
mov rcx, rbx
call fcn.1400953e4
mov dword [rbp + 0x10], 0x42700000
mov dword [rbp + 0x14], 0x435c0000
lea rcx, [rbp + 0x10]
call fcn.14001bc90
mov dword [rbp + 0x18], 0x43be0000
mov dword [rbp + 0x1c], 0x42200000
xor ebx, ebx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
lea r14, [rsi + 0x70]
mov r15, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0x10
jb 0x14003b581
mov r14, qword [r14]
cmp r15, 0x10
jae 0x14003b59b
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x58], 0xf
jmp 0x14003b5dc
mov rbx, r15
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x40]
call fcn.1400043c0
mov qword [rsp + 0x40], rax
lea r8, [r15 + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x58], rbx
xor ebx, ebx
mov qword [rsp + 0x50], r15
lea r8, [rbp + 0x18]
lea rdx, [rsp + 0x40]
lea rcx, str.__Time_Left
call fcn.14003e8f0
movups xmm6, xmmword [r13 + 0xc8]
mov rcx, qword [0x1401cf268]
call fcn.140018730
movaps xmm0, xmmword [0x1401234c0]
movups xmmword [r13 + 0xc8], xmm0
cmp byte [rsi + 9], 0
je 0x14003b62e
movaps xmm0, xmmword [0x1401234a0]
movups xmmword [r13 + 0xc8], xmm0
lea rax, [rsi + 0x10]
cmp qword [rsi + 0x28], 0x10
jb 0x14003b63d
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x14003b6b4
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov r8d, 0x18
lea rdx, str.Cheat_is_under_maintence
lea rcx, [rsp + 0x40]
call fcn.140004420
or r12d, 2
mov dword [rsp + 0x30], r12d
lea rdx, [rsp + 0x40]
mov rbx, qword [rsp + 0x40]
mov r14, qword [rsp + 0x58]
cmp r14, 0x10
cmovae rdx, rbx
mov r8, qword [rsi + 0x20]
lea rcx, [rsi + 0x10]
cmp qword [rsi + 0x28], 0x10
jb 0x14003b69f
mov rcx, qword [rsi + 0x10]
cmp r8, qword [rsp + 0x50]
jne 0x14003b6af
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14003b6be
mov r15b, 1
jmp 0x14003b6c1
mov r14, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x40]
xor r15b, r15b
test r12b, 2
je 0x14003b707
and r12d, 0xfffffffd
mov dword [rsp + 0x30], r12d
cmp r14, 0x10
jb 0x14003b707
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003b6ff
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bd33
mov rcx, rbx
call fcn.1400953e4
test r15b, r15b
je 0x14003b737
mov dword [rbp + 0x20], 0x42700000
mov dword [rbp + 0x24], 0x43960000
lea rcx, [rbp + 0x20]
call fcn.14001bc90
lea rcx, [rsi + 0x10]
cmp qword [rsi + 0x28], 0x10
jb 0x14003b732
mov rcx, qword [rsi + 0x10]
call fcn.14003a920
call fcn.140018330
movups xmmword [r13 + 0xc8], xmm6
mov rcx, qword [0x1401cf268]
call fcn.140018730
cmp byte [rsi + 0xa], 0
je 0x14003b7c9
mov dword [rbp + 0x28], 0x42980000
mov dword [rbp + 0x2c], 0x43870000
lea rcx, [rbp + 0x28]
call fcn.14001bc90
call fcn.14003a980
mov rdx, rax
lea rcx, str.Spoofer
call fcn.14003c570
test al, al
je 0x14003b792
call fcn.14003a980
mov rcx, rax
call fcn.14005cf40
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.14001b440
mov dword [rbp + 0x30], 0x432a0000
mov dword [rbp + 0x34], 0x41f00000
lea rdx, [rbp + 0x30]
lea rcx, str.Configure_Spoofer
call fcn.1400334c0
test al, al
je 0x14003b7c9
cmp byte [rsp + 0x70], 0
sete byte [rsp + 0x70]
call fcn.140018330
mov dword [rbp + 0x38], 0x42700000
mov dword [rbp + 0x3c], 0x43a00000
lea rcx, [rbp + 0x38]
call fcn.14001bc90
movzx eax, byte [rsi + 8]
test al, al
je 0x14003b7f8
mov cl, 1
call fcn.14000cb50
movzx eax, byte [rsi + 8]
mov dword [rbp + 0x40], 0x43be0000
mov dword [rbp + 0x44], 0x42280000
lea rcx, str.Load_Cheat
test al, al
lea rax, str.Loading...
cmovne rcx, rax
lea rdx, [rbp + 0x40]
call fcn.14003cfd0
test al, al
je 0x14003b902
mov byte [rsi + 8], 1
xor r8d, r8d
lea rdx, [0x1400df138]
lea rcx, [rsi + 0x10]
call fcn.140004420
cmp qword [rsi + 0x40], 0xf
jae 0x14003b8c6
mov word [rsi + 8], 0x100
xor ebx, ebx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 0xb]
lea rdx, str.Invalid_key
lea rcx, [rsp + 0x40]
call fcn.140004420
lea rdx, [rsp + 0x40]
lea rcx, [rsi + 0x10]
call fcn.140003130
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14003b904
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b8bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bd33
call fcn.1400953e4
jmp 0x14003b904
mov byte [rbp + 0x298], 0
lea r8, [rsi + 0x30]
lea r9, [rbp + 0x298]
lea rdx, [0x14003aa00]
lea rcx, [rbp + 0xc8]
call fcn.14003a420
nop
mov rcx, rax
call fcn.14003cf80
nop
cmp dword [rbp + 0xd0], 0
jne 0x14003bd2c
xor ebx, ebx
cmp byte [rsi + 8], 0
je 0x14003b90f
call fcn.14000f180
cmp byte [rsi + 0xa], 0
je 0x14003ba58
mov dword [rbp + 0x48], 0x42700000
mov dword [rbp + 0x4c], 0x43b90000
lea rcx, [rbp + 0x48]
call fcn.14001bc90
movzx eax, byte [rsi + 8]
test al, al
je 0x14003b943
mov cl, 1
call fcn.14000cb50
movzx eax, byte [rsi + 8]
mov dword [rbp + 0x50], 0x43be0000
mov dword [rbp + 0x54], 0x42280000
lea rcx, str.Clean_My_PC
test al, al
lea rax, str.Clearing...
cmovne rcx, rax
lea rdx, [rbp + 0x50]
call fcn.14003cfd0
test al, al
je 0x14003ba4d
mov byte [rsi + 8], 1
xor r8d, r8d
lea rdx, [0x1400df138]
lea rcx, [rsi + 0x10]
call fcn.140004420
cmp qword [rsi + 0x40], 0xf
jae 0x14003ba11
mov word [rsi + 8], 0x100
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov r8d, 0xb
lea rdx, str.Invalid_key
lea rcx, [rsp + 0x40]
call fcn.140004420
lea rdx, [rsp + 0x40]
lea rcx, [rsi + 0x10]
call fcn.140003130
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14003ba4d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ba0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bd33
call fcn.1400953e4
jmp 0x14003ba4d
mov byte [rbp + 0x298], 1
lea r8, [rsi + 0x30]
lea r9, [rbp + 0x298]
lea rdx, [0x14003aa00]
lea rcx, [rbp + 0xd8]
call fcn.14003a420
nop
mov rcx, rax
call fcn.14003cf80
nop
cmp dword [rbp + 0xe0], 0
jne 0x14003bd3a
cmp byte [rsi + 8], 0
je 0x14003ba58
call fcn.14000f180
xor edi, edi
mov r14d, dword [0x1401cf658]
mov r15, qword gs:[0x58]
call fcn.14000ebe0
mov ebx, dword [rsp + 0x70]
test bl, bl
je 0x14003bca1
mov qword [rbp + 0x58], 0
mov dword [rbp + 0x60], 0x42fa0000
mov dword [rbp + 0x64], 0x42960000
lea r8, [rbp + 0x58]
xor edx, edx
lea rcx, [rbp + 0x60]
call fcn.14001bf20
mov dword [rbp + 0x68], 0x437a0000
mov dword [rbp + 0x6c], 0x43898000
xor edx, edx
lea rcx, [rbp + 0x68]
call fcn.14001bf60
mov r8d, 0x3f
lea rdx, [rbp + 0x288]
lea rcx, str.Spoofer
call fcn.14000a4a0
test al, al
je 0x14003bc9c
mov dword [r13 + 0x44], 0x40000000
mov dword [rbp + 0x70], 0x43520000
mov dword [rbp + 0x74], 0x41200000
lea rcx, [rbp + 0x70]
call fcn.14001bc90
mov dword [rbp + 0x88], 0x41c80000
mov dword [rbp + 0x8c], 0x41f00000
lea rdx, [rbp + 0x88]
lea rcx, [0x1400dfc24]
call fcn.1400334c0
movzx ebx, bl
test al, al
cmovne ebx, edi
mov dword [rsp + 0x70], ebx
mov eax, 0x38
mov ebx, eax
mov rdi, qword [r15 + r14*8]
mov eax, dword [rax + rdi]
cmp dword [0x1401cf088], eax
jg 0x14003bdad
lea rdx, [0x1401cf081]
lea rcx, str.Spoof_Disks
call fcn.14003c570
test al, al
je 0x14003bb6a
call fcn.14003a980
mov rcx, rax
call fcn.14005cf40
mov eax, dword [rbx + rdi]
cmp dword [0x1401cf088], eax
jg 0x14003bdf7
lea rdx, [0x1401cf082]
lea rcx, str.Alternative_Disk_Spoof
call fcn.14003c570
test al, al
je 0x14003bb9d
call fcn.14003a980
mov rcx, rax
call fcn.14005cf40
mov eax, dword [rbx + rdi]
cmp dword [0x1401cf088], eax
jg 0x14003be41
lea rdx, [0x1401cf083]
lea rcx, str.Spoof_MOBO
call fcn.14003c570
test al, al
je 0x14003bbd0
call fcn.14003a980
mov rcx, rax
call fcn.14005cf40
mov eax, dword [rbx + rdi]
cmp dword [0x1401cf088], eax
jg 0x14003be8b
lea rdx, [0x1401cf084]
lea rcx, str.Spoof_Boot
call fcn.14003c570
test al, al
je 0x14003bc03
call fcn.14003a980
mov rcx, rax
call fcn.14005cf40
mov eax, dword [rbx + rdi]
cmp dword [0x1401cf088], eax
jg 0x14003bed5
lea rdx, [0x1401cf085]
lea rcx, str.Spoof_MAC
call fcn.14003c570
test al, al
je 0x14003bc36
call fcn.14003a980
mov rcx, rax
call fcn.14005cf40
mov eax, dword [rbx + rdi]
cmp dword [0x1401cf088], eax
jg 0x14003bf1f
lea rdx, [0x1401cf086]
lea rcx, str.Spoof_Monitor
call fcn.14003c570
test al, al
je 0x14003bc69
call fcn.14003a980
mov rcx, rax
call fcn.14005cf40
mov eax, dword [rbx + rdi]
cmp dword [0x1401cf088], eax
jg 0x14003bf69
lea rdx, [0x1401cf087]
lea rcx, str.Spoof_GPU
call fcn.14003c570
test al, al
je 0x14003bc9c
call fcn.14003a980
mov rcx, rax
call fcn.14005cf40
call fcn.14000ebe0
call fcn.140018ab0
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov rcx, qword [0x1401cf238]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1401cf248]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x1401cf238]
mov rax, qword [rcx]
lea r8, [rbp + 0x90]
mov rdx, qword [0x1401cf248]
call qword [rax + 0x190]
call fcn.1400107a0
mov rcx, rax
call fcn.140030030
mov rcx, qword [0x1401cf240]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 1]
call qword [rax + 0x40]
cmp byte [rbp + 0x288], 0
je 0x14003bd41
movzx edi, byte [rbp + 0x290]
xor r13d, r13d
jmp 0x14003ad10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call fcn.140030c40
call fcn.140031130
xor ecx, ecx
call fcn.14000eb70
call fcn.14003a820
mov rcx, qword [0x1401cf250]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x1401cf298]
mov rcx, qword [0x1401cf2c0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140004340
int3
lea rcx, [0x1401cf088]
call fcn.1400957c4
cmp dword [0x1401cf088], 0xffffffff
jne 0x14003bb46
mov dword [0x1401cf080], 0x1010101
mov dword [0x1401cf084], 0x1010101
lea rcx, [0x1400da570]
call fcn.140095624
lea rcx, [0x1401cf088]
call fcn.140095764
jmp 0x14003bb46
lea rcx, [0x1401cf088]
call fcn.1400957c4
cmp dword [0x1401cf088], 0xffffffff
jne 0x14003bb79
mov dword [0x1401cf080], 0x1010101
mov dword [0x1401cf084], 0x1010101
lea rcx, [0x1400da570]
call fcn.140095624
lea rcx, [0x1401cf088]
call fcn.140095764
jmp 0x14003bb79
lea rcx, [0x1401cf088]
call fcn.1400957c4
cmp dword [0x1401cf088], 0xffffffff
jne 0x14003bbac
mov dword [0x1401cf080], 0x1010101
mov dword [0x1401cf084], 0x1010101
lea rcx, [0x1400da570]
call fcn.140095624
lea rcx, [0x1401cf088]
call fcn.140095764
jmp 0x14003bbac
lea rcx, [0x1401cf088]
call fcn.1400957c4
cmp dword [0x1401cf088], 0xffffffff
jne 0x14003bbdf
mov dword [0x1401cf080], 0x1010101
mov dword [0x1401cf084], 0x1010101
lea rcx, [0x1400da570]
call fcn.140095624
lea rcx, [0x1401cf088]
call fcn.140095764
jmp 0x14003bbdf
lea rcx, [0x1401cf088]
call fcn.1400957c4
cmp dword [0x1401cf088], 0xffffffff
jne 0x14003bc12
mov dword [0x1401cf080], 0x1010101
mov dword [0x1401cf084], 0x1010101
lea rcx, [0x1400da570]
call fcn.140095624
lea rcx, [0x1401cf088]
call fcn.140095764
jmp 0x14003bc12
lea rcx, [0x1401cf088]
call fcn.1400957c4
cmp dword [0x1401cf088], 0xffffffff
jne 0x14003bc45
mov dword [0x1401cf080], 0x1010101
mov dword [0x1401cf084], 0x1010101
lea rcx, [0x1400da570]
call fcn.140095624
lea rcx, [0x1401cf088]
call fcn.140095764
jmp 0x14003bc45
lea rcx, [0x1401cf088]
call fcn.1400957c4
cmp dword [0x1401cf088], 0xffffffff
jne 0x14003bc78
mov dword [0x1401cf080], 0x1010101
mov dword [0x1401cf084], 0x1010101
lea rcx, [0x1400da570]
call fcn.140095624
lea rcx, [0x1401cf088]
call fcn.140095764
jmp 0x14003bc78
mov ecx, eax
call sub.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_
int3
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rbp - 0x68], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3