Function at 0x14000d890
Capabilities:
Create process on windows
Encode data using xor
Execute command
Get common file path
Get disk information
Get startup folder
Set console window title

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x690
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x1400f6180]
xor rax, rsp
mov qword [rsp + 0x670], rax
xor edi, edi
movups xmm0, xmmword [str.aZYEZRBn_IY]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [str.b_n_______b]
movups xmmword [rsp + 0x70], xmm1
movzx eax, byte [0x1400d6ff8]
mov byte [rsp + 0x80], al
mov r8d, edi
mov esi, dword [0x1400f61d0]
cmp esi, 2
jl 0x14000da4d
movdqa xmm5, xmmword [0x1400d9950]
movdqa xmm4, xmmword [0x1400d9b70]
movdqa xmm6, xmmword [0x1400d9980]
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rsp + 0x4e0], xmm0
lea rcx, [rsp + 0x60]
mov edx, dword [rsp + 0x4e0]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14000d940
cmp r8d, 0x21
jge 0x14000da93
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x21
jl 0x14000da60
lea rax, [rsp + 0x60]
mov r14, 0xffffffffffffffff
mov rcx, r14
inc rcx
cmp byte [rax + rcx], dil
jne 0x14000daa2
movabs rax, 0x7fffffffffffffff
mov rdx, qword [0x14011d150]
sub rax, rdx
cmp rax, rcx
jb 0x1400100c4
lea rax, [0x14011d140]
cmp qword [0x14011d158], 0xf
cmova rax, qword [0x14011d140]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x60]
lea r8, [0x14011d140]
movzx edx, byte [rsp + 0x200]
lea rcx, [rsp + 0x40]
call fcn.14001b960
nop
mov r8d, 1
lea rdx, [0x1400d540c]
lea rcx, [rsp + 0x40]
call fcn.140013990
xorps xmm0, xmm0
movups xmmword [rsp + 0x210], xmm0
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x228], rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x210], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x220], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [0x14011d160]
cmp qword [0x14011d178], 0xf
cmova rdx, qword [0x14011d160]
mov r8, qword [0x14011d170]
lea rcx, [rsp + 0x210]
call fcn.140013990
xorps xmm0, xmm0
movups xmmword [rsp + 0x280], xmm0
mov qword [rsp + 0x290], rdi
mov qword [rsp + 0x298], rdi
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x280], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x290], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x228]
cmp rdx, 0xf
jbe 0x14000dc17
inc rdx
mov rcx, qword [rsp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dc12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x228], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x210], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000dc73
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dc6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x280]
cmp qword [rsp + 0x298], 0xf
cmova rcx, qword [rsp + 0x280]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, str.color_b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1400d71f0]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [0x1400d7200]
movups xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [0x1400d7210]
movups xmmword [rsp + 0x80], xmm0
movsd xmm0, qword [0x1400d7220]
movsd qword [rsp + 0x90], xmm0
mov eax, dword [0x1400d7228]
mov dword [rsp + 0x98], eax
mov r8d, edi
cmp esi, 2
jl 0x14000de4d
movdqa xmm5, xmmword [0x1400d9950]
movdqa xmm4, xmmword [0x1400d9b70]
movdqa xmm6, xmmword [0x1400d9980]
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rsp + 0x4e0], xmm0
lea rcx, [rsp + 0x60]
mov edx, dword [rsp + 0x4e0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x38
jl 0x14000dd40
cmp r8d, 0x3c
jge 0x14000de93
movsxd rax, r8d
lea r9, [rsp + 0x60]
add r9, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x3c
jl 0x14000de60
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [rsp + 0x200], 0x32
lea rdx, [rsp + 0x200]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [rsp + 0x200], 0x32
lea rdx, [rsp + 0x200]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r15, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x60], 0x32009a
mov cl, 0x9a
mov rax, rdi
lea rdx, str._DO_NOT_CLOSE_THIS_CONSOLE_after_authentication_successful_
movzx ebx, byte [rsp + 0x62]
nop dword [rax]
xor bl, byte [rax + rdx]
xor cl, bl
mov byte [rsp + rax + 0x64], cl
movzx ebx, byte [rsp + 0x62]
xor cl, bl
inc rax
cmp rax, 0x3b
jb 0x14000df30
mov byte [rsp + 0x9f], 0
mov ecx, 0x3c
call fcn.1400bff00
movzx r8d, byte [rsp + 0x60]
mov rdx, rdi
nop dword [rax]
nop dword [rax + rax]
movzx ecx, bl
xor cl, byte [rsp + rdx + 0x64]
xor r8b, cl
mov byte [rax + rdx], r8b
movzx r8d, cl
inc rdx
cmp rdx, 0x3b
jb 0x14000df70
mov byte [rax + 0x3b], 0
mov rdx, rax
mov rcx, r15
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov ecx, 1
call fcn.1400bff00
mov byte [rax], 0
mov rdx, rax
mov rcx, rbx
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov ecx, reloc.WS2_32.dll_send
call fcn.1400bff00
mov dword [rax], 0x706d6953
mov dword [rax + 4], 0x2620656c
mov dword [rax + 8], 0x66664520
mov dword [rax + 0xc], 0x69746365
mov word [rax + 0x10], 0x6576
mov byte [rax + 0x12], 0
mov rdx, rax
mov rcx, rbx
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov ecx, 1
call fcn.1400bff00
mov byte [rax], 0
mov rdx, rax
mov rcx, rbx
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movups xmm0, xmmword [0x1400d7040]
movups xmmword [rsp + 0x500], xmm0
movups xmm1, xmmword [0x1400d7050]
movups xmmword [rsp + 0x510], xmm1
movups xmm0, xmmword [0x1400d7060]
movups xmmword [rsp + 0x520], xmm0
movups xmm1, xmmword [0x1400d7070]
movups xmmword [rsp + 0x530], xmm1
movups xmm0, xmmword [0x1400d7080]
movups xmmword [rsp + 0x540], xmm0
movzx eax, byte [0x1400d7090]
mov byte [rsp + 0x550], al
mov ecx, edi
cmp esi, 2
jl 0x14000e20a
movdqa xmm5, xmmword [0x1400d9950]
movdqa xmm4, xmmword [0x1400d9b70]
movdqa xmm6, xmmword [0x1400d9980]
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rsp + 0x4e0], xmm0
lea rdx, [rsp + 0x500]
mov r8d, dword [rsp + 0x4e0]
nop word [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx + 4]
xorps xmm2, xmm0
movd dword [rdx + 4], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x50
jl 0x14000e100
cmp ecx, 0x51
jge 0x14000e24e
movsxd rax, ecx
lea r8, [rsp + 0x500]
add r8, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, cl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x51
jl 0x14000e220
lea rdx, [rsp + 0x500]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [rsp + 0x200], 0
lea rdx, [rsp + 0x200]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movups xmm0, xmmword [str._VYP_U_K]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [0x1400d6fa0]
movups xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [0x1400d6fb0]
movups xmmword [rsp + 0x80], xmm0
mov eax, dword [str._a_aJe]
mov dword [rsp + 0x90], eax
mov ecx, edi
cmp esi, 2
jl 0x14000e41d
movdqa xmm5, xmmword [0x1400d9950]
movdqa xmm4, xmmword [0x1400d9b70]
movdqa xmm6, xmmword [0x1400d9980]
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rsp + 0x4e0], xmm0
lea rdx, [rsp + 0x60]
mov r8d, dword [rsp + 0x4e0]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx + 4]
xorps xmm2, xmm0
movd dword [rdx + 4], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x30
jl 0x14000e313
cmp ecx, 0x34
jge 0x14000e45e
movsxd rax, ecx
lea r8, [rsp + 0x60]
add r8, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, cl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x34
jl 0x14000e430
lea rdx, [rsp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x4e0], xmm0
mov qword [rsp + 0x4f0], rdi
mov qword [rsp + 0x4f8], rdi
mov r8d, 0x19
lea rdx, str.clpk650z0001vmx014e4t4i6e
lea rcx, [rsp + 0x4e0]
call fcn.1400033b0
nop
lea rcx, [rsp + 0x4e0]
call fcn.14009b258
nop
mov rdx, qword [rsp + 0x4f8]
cmp rdx, 0xf
jbe 0x14000e509
inc rdx
mov rcx, qword [rsp + 0x4e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e504
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e504
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
xorps xmm0, xmm0
movups xmmword [rsp + 0x250], xmm0
mov qword [rsp + 0x260], rdi
mov qword [rsp + 0x268], rdi
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.SimplezWare.json
lea rcx, [rsp + 0x250]
call fcn.1400033b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x230], xmm0
mov qword [rsp + 0x240], rdi
mov qword [rsp + 0x248], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x230], 0
xor sil, sil
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rsp + 0x3d0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x3d0]
call fcn.140011480
nop
cmp qword [rsp + 0x460], 0
je 0x14000e901
xor edx, edx
lea rcx, [rsp + 0x4e0]
call fcn.140013670
nop
mov qword [rsp + 0x538], rdi
lea rax, [rsp + 0x3d0]
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x3d0]
movsxd rcx, dword [rax + 4]
mov rax, qword [rsp + rcx + 0x418]
mov qword [rsp + 0x218], rax
lea r8, [rsp + 0x500]
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x110]
call fcn.1400174b0
nop
lea r8, [rsp + 0x4e0]
mov rcx, rax
call fcn.140012b10
nop
lea rcx, [rsp + 0x158]
call fcn.140011f90
mov rcx, qword [rsp + 0x148]
test rcx, rcx
je 0x14000e644
mov rax, qword [rcx]
lea rdx, [rsp + 0x110]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov r15d, recv
cmp byte [rsp + 0x4e0], 1
jne 0x14000e6ec
mov rax, qword [rsp + 0x4e8]
mov r12, qword [rax]
mov rbx, qword [r12 + 8]
mov r13, r12
cmp byte [rbx + 0x19], 0
jne 0x14000e6b6
lea rcx, [rbx + 0x20]
mov rsi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x14000e683
mov rcx, qword [rcx]
mov r8, rsi
cmp rsi, r15
cmova r8, r15
lea rdx, str.license_key
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000e739
js 0x14000e742
mov r13, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14000e671
xor sil, sil
cmp byte [r13 + 0x19], 0
jne 0x14000e6ec
lea rcx, [r13 + 0x20]
mov rbx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x14000e6cf
mov rcx, qword [rcx]
mov r8, rbx
cmp rbx, 0xb
cmova r8, r15
lea rdx, str.license_key
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14000e74b
jle 0x14000e751
xor al, al
test al, al
je 0x14000e8ad
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8, r15
lea rdx, str.license_key
lea rcx, [rsp + 0x40]
call fcn.1400033b0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x4e0]
call fcn.140011890
cmp byte [rax], 3
jne 0x1400100ca
jmp 0x14000e75a
cmp rsi, r15
jae 0x14000e6a7
mov rbx, qword [rbx + 0x10]
jmp 0x14000e6ad
cmp rbx, 0xb
ja 0x14000e6ec
cmp r13, r12
je 0x14000e6ec
mov al, 1
jmp 0x14000e6ee
mov rsi, qword [rax + 8]
mov r9, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14000e76b
mov r9, qword [rsi]
mov rsi, qword [rsi + 0x10]
mov rax, qword [rsp + 0x248]
cmp rsi, rax
ja 0x14000e7ad
lea rbx, [rsp + 0x230]
cmp rax, 0xf
cmova rbx, qword [rsp + 0x230]
mov qword [rsp + 0x240], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rbx], 0
jmp 0x14000e7c0
xor r8d, r8d
mov rdx, rsi
lea rcx, [rsp + 0x230]
call fcn.14000b150
mov sil, 1
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x210], 0x32009a
movdqa xmm0, xmmword [0x1400d9b60]
movdqu xmmword [rsp + 0x214], xmm0
mov dword [rsp + 0x224], 0xc5a383e7
mov dword [rsp + 0x228], 0x95b5d8b7
mov byte [rsp + 0x22c], 0
lea rcx, [rsp + 0x210]
call fcn.140010510
mov rdx, rax
mov rcx, rbx
call fcn.140016ed0
lea rdx, [rsp + 0x250]
cmp qword [rsp + 0x268], 0xf
cmova rdx, qword [rsp + 0x250]
mov r8, qword [rsp + 0x260]
mov rcx, rax
call fcn.14001c1e0
mov dword [rsp + 0x208], 0x32009a
mov word [rsp + 0x20c], 0xb292
mov byte [rsp + 0x20e], 0
lea rdx, [rsp + 0x20c]
mov rcx, rax
call fcn.140016ed0
lea rdx, [rsp + 0x230]
cmp qword [rsp + 0x248], 0xf
cmova rdx, qword [rsp + 0x230]
mov r8, qword [rsp + 0x240]
mov rcx, rax
call fcn.14001c1e0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x3e0]
call fcn.140013020
test rax, rax
jne 0x14000e8e4
mov rax, qword [rsp + 0x3d0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x3d0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
movzx edx, byte [rsp + 0x4e0]
lea rcx, [rsp + 0x4e8]
call fcn.1400130e0
nop
test sil, sil
jne 0x14000e961
jmp 0x14000e907
mov r15d, recv
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov ecx, 0x18
call fcn.1400bff00
mov dword [rax], 0x61656c50
mov dword [rax + 4], 0x65206573
mov dword [rax + 8], 0x7265746e
mov dword [rax + 0xc], 0x756f7920
mov dword [rax + 0x10], 0x656b2072
mov dword [rax + 0x14], 0x203a79
mov rdx, rax
mov rcx, rbx
call fcn.140016ed0
lea rdx, [rsp + 0x230]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400170e0
nop
xor edx, edx
lea rcx, [rsp + 0x270]
call fcn.140013670
nop
lea rax, [rsp + 0x4e0]
mov qword [rsp + 0x208], rax
mov byte [rsp + 0x4e0], 0
xor eax, eax
mov qword [rsp + 0x4e8], rax
xor edx, edx
lea rcx, [rsp + 0x4e8]
call fcn.1400130e0
mov byte [rsp + 0x4e0], 3
xorps xmm0, xmm0
movups xmmword [rsp + 0x210], xmm0
mov ecx, 0x20
call fcn.1400bfb80
mov rbx, rax
lea rax, [rsp + 0x200]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x218], rbx
lea rdx, [rsp + 0x230]
mov rcx, rbx
call fcn.14000a320
nop
mov qword [rsp + 0x4e8], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8, r15
lea rdx, str.license_key
lea rcx, [rsp + 0x40]
call fcn.1400033b0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x270]
call fcn.140011890
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x4e0]
mov byte [rax], cl
mov byte [rsp + 0x4e0], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x4e8]
mov qword [rax + 8], rdx
mov qword [rsp + 0x4e8], rcx
movzx edx, byte [rsp + 0x4e0]
lea rcx, [rsp + 0x4e8]
call fcn.1400130e0
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x2c0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x2c0]
call fcn.1400106e0
nop
cmp qword [rsp + 0x348], 0
je 0x14000ebb0
mov edx, 4
lea rcx, [rsp + 0x4e0]
call qword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__]
mov r8, qword [rax]
mov rcx, qword [rsp + 0x2c0]
movsxd rdx, dword [rcx + 4]
lea rcx, [rsp + 0x2c0]
add rcx, rdx
mov rdx, qword [rax + 8]
call r8
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x2c0]
call fcn.1400115b0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x2c8]
call fcn.140013020
test rax, rax
jne 0x14000eb37
mov rax, qword [rsp + 0x2c0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x2c0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
test sil, sil
jne 0x14000ec14
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov ecx, reloc.WS2_32.dll_shutdown
call fcn.1400bff00
mov dword [rax], 0x6563694c
mov dword [rax + 4], 0x2065736e
mov dword [rax + 8], 0x2079656b
mov dword [rax + 0xc], 0x65766173
mov dword [rax + 0x10], 0x6f742064
mov word [rax + 0x14], 0x20
mov rdx, rax
mov rcx, rbx
call fcn.140016ed0
lea rdx, [rsp + 0x250]
cmp qword [rsp + 0x268], 0xf
cmova rdx, qword [rsp + 0x250]
mov r8, qword [rsp + 0x260]
mov rcx, rax
call fcn.14001c1e0
jmp 0x14000ec03
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov ecx, 0x20
call fcn.1400bff00
mov dword [rax], 0x62616e55
mov dword [rax + 4], 0x7420656c
mov dword [rax + 8], 0x706f206f
mov dword [rax + 0xc], 0x66206e65
mov dword [rax + 0x10], 0x20656c69
mov dword [rax + 0x14], 0x20726f66
mov dword [rax + 0x18], 0x74697277
mov dword [rax + 0x1c], 0x676e69
mov rdx, rax
mov rcx, rbx
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x208]
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400d53f0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x140010119
lea r10, [rsp + 0x4f5]
mov r8d, dword [rsp + 0x208]
nop dword [rax]
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x14000ec60
lea r9, [rsp + 0x200]
lea r8, [rsp + 0x4f5]
mov rdx, r10
lea rcx, [rsp + 0x60]
call fcn.14001c0b0
nop
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x230]
call fcn.14009110c
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14000ecfb
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ecf6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ecf6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x4e0], 0x32009a
movdqa xmm0, xmmword [0x1400d9bb0]
movdqu xmmword [rsp + 0x4e4], xmm0
mov dword [rsp + 0x4f4], 0xd1a2c7a4
mov dword [rsp + 0x4f8], 0xddb1c4a2
mov word [rsp + 0x4fc], 0xc8b1
mov byte [rsp + 0x4fe], 0
lea rcx, [rsp + 0x4e0]
call fcn.1400103c0
mov rdx, rax
mov rcx, rbx
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2a0], xmm0
mov qword [rsp + 0x2b0], rdi
mov qword [rsp + 0x2b8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x2a0], 0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, 9
lea rdx, str.expiresAt
lea rcx, [rsp + 0x40]
call fcn.1400033b0
nop
lea rcx, [rsp + 0x40]
call fcn.14007c61c
movsxd rbx, eax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000ee0a
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ee05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ee05
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
mov qword [rsp + 0x208], rbx
lea rcx, [rsp + 0x208]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov r9, rax
lea r8, str._Y__m__d__H:_M:_S
mov edx, 0x50
lea rcx, [rsp + 0x500]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov ecx, setsockopt
call fcn.1400bff00
mov dword [rax], 0x2079654b
mov dword [rax + 4], 0x69707865
mov dword [rax + 8], 0x69746172
mov dword [rax + 0xc], 0x203a6e6f
mov byte [rax + 0x10], 0
mov rdx, rax
mov rcx, rbx
call fcn.140016ed0
lea rdx, [rsp + 0x500]
mov rcx, rax
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x14000eea1
mov esi, dword [0x1400f61d0]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov r15, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
lea rcx, str.color__1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.tasklist__find__steam.exe____NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
je 0x14000f1ee
movsd xmm0, qword [str.CQ__Y_]
movsd qword [rsp + 0x4e0], xmm0
mov eax, dword [str.iOYS_]
mov dword [rsp + 0x4e8], eax
movzx eax, word [0x1400d72ac]
mov word [rsp + 0x4ec], ax
cmp byte [0x1400d72ad], 0
je 0x14000f083
mov r8d, edi
cmp esi, 2
jl 0x14000f041
movdqa xmm4, xmmword [0x1400d9b70]
movdqa xmm2, xmmword [0x1400d9950]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400d9980]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
mov eax, dword [str.2222222222222222]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.CQ__Y_]
xorps xmm2, xmm0
movd dword [rsp + 0x4e0], xmm2
movdqa xmm3, xmmword [0x1400d9970]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400d9980]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x4e4]
xorps xmm2, xmm1
movd dword [rsp + 0x4e4], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x4e0]
add r9, rax
nop
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x14000f050
lea rdx, [rsp + 0x4e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x210], xmm0
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x228], rdi
mov r8d, 0x26
lea rdx, str.C:Program_Files__x86_SteamSteam.exe
lea rcx, [rsp + 0x210]
call fcn.1400033b0
nop
mov rcx, qword [rsp + 0x220]
inc rcx
mov eax, 2
mul rcx
cmovo rax, r14
mov rcx, rax
call fcn.1400bff00
mov rbx, rax
lea rcx, [rsp + 0x210]
mov rdx, qword [rsp + 0x220]
cmp qword [rsp + 0x228], 0xf
jbe 0x14000f127
mov r9, qword [rsp + 0x210]
add rdx, r9
jmp 0x14000f132
add rdx, rcx
lea r9, [rsp + 0x210]
mov r8, rbx
mov rcx, r9
call fcn.1400172d0
mov rax, qword [rsp + 0x220]
mov word [rbx + rax*2], di
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.tasklist__find__steam.exe____NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
je 0x14000f19c
nop
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.tasklist__find__steam.exe____NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
jne 0x14000f180
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rsp + 0x228]
cmp rdx, 0xf
jbe 0x14000f1ee
inc rdx
mov rcx, qword [rsp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f1e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f1e9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
lea rcx, str.tasklist__find__cs2.exe____NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
je 0x14000f73b
mov r9, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movsd xmm0, qword [0x1400d6828]
movsd qword [rsp + 0x4e0], xmm0
mov eax, dword [0x1400d6830]
mov dword [rsp + 0x4e8], eax
cmp byte [0x1400d6833], 0
je 0x14000f38e
mov ecx, edi
cmp esi, 2
jl 0x14000f352
movdqa xmm4, xmmword [0x1400d9b70]
movdqa xmm2, xmmword [0x1400d9950]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400d9980]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
mov eax, dword [str.2222222222222222]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1400d6828]
xorps xmm2, xmm0
movd dword [rsp + 0x4e0], xmm2
movdqa xmm3, xmmword [0x1400d9970]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400d9980]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x4e4]
xorps xmm2, xmm1
movd dword [rsp + 0x4e4], xmm2
mov ecx, 8
movsxd rax, ecx
lea r8, [rsp + 0x4e0]
add r8, rax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, cl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0xc
jl 0x14000f360
lea rdx, [rsp + 0x4e0]
mov rcx, r9
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movzx eax, word [0x1400d7238]
movsd xmm0, qword [str._PUCQW__]
mov word [rsp + 0x4e8], ax
movsd qword [rsp + 0x4e0], xmm0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov byte [rsp + 0x4e0], 0x49
xor byte [rsp + 0x4e1], 0x33
xor byte [rsp + 0x4e2], 0x34
xor byte [rsp + 0x4e3], 0x35
xor byte [rsp + 0x4e4], 0x36
xor byte [rsp + 0x4e5], 0x37
xor byte [rsp + 0x4e6], 0x38
xor byte [rsp + 0x4e7], 0x39
xor byte [rsp + 0x4e8], 0x3a
xor byte [rsp + 0x4e9], 0x3b
lea rdx, [rsp + 0x4e0]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x210], xmm0
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x228], rdi
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.steam:__rungameid_730
lea rcx, [rsp + 0x210]
call fcn.1400033b0
nop
mov rcx, qword [rsp + 0x220]
inc rcx
mov eax, 2
mul rcx
cmovo rax, r14
mov rcx, rax
call fcn.1400bff00
mov rbx, rax
lea rcx, [rsp + 0x210]
mov rdx, qword [rsp + 0x220]
cmp qword [rsp + 0x228], 0xf
jbe 0x14000f4c2
mov r9, qword [rsp + 0x210]
add rdx, r9
jmp 0x14000f4cd
add rdx, rcx
lea r9, [rsp + 0x210]
mov r8, rbx
mov rcx, r9
call fcn.1400172d0
mov rax, qword [rsp + 0x220]
mov word [rbx + rax*2], di
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.tasklist__find__cs2.exe____NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
je 0x14000f6e9
nop dword [rax]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
movsd xmm0, qword [0x1400d6fc8]
movsd qword [rsp + 0x4e0], xmm0
mov eax, dword [0x1400d6fd0]
mov dword [rsp + 0x4e8], eax
movzx eax, byte [0x1400d6fd4]
mov byte [rsp + 0x4ec], al
mov ecx, edi
cmp esi, 2
jl 0x14000f674
movdqa xmm4, xmmword [0x1400d9b70]
movdqa xmm2, xmmword [0x1400d9950]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400d9980]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
mov eax, dword [str.2222222222222222]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1400d6fc8]
xorps xmm2, xmm0
movd dword [rsp + 0x4e0], xmm2
movdqa xmm3, xmmword [0x1400d9970]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400d9980]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x4e4]
xorps xmm2, xmm1
movd dword [rsp + 0x4e4], xmm2
mov ecx, 8
movsxd rax, ecx
lea r8, [rsp + 0x4e0]
add r8, rax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, cl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0xd
jl 0x14000f682
lea rdx, [rsp + 0x4e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.tasklist__find__cs2.exe____NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
jne 0x14000f520
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rsp + 0x228]
cmp rdx, 0xf
jbe 0x14000f73b
inc rdx
mov rcx, qword [rsp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f736
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f736
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
movups xmm0, xmmword [str._PUC__]
movups xmmword [rsp + 0x210], xmm0
mov eax, dword [0x1400d72c0]
mov dword [rsp + 0x220], eax
movzx eax, word [0x1400d72c4]
mov word [rsp + 0x224], ax
cmp byte [0x1400d72c5], 0
je 0x14000f90e
mov ecx, edi
cmp esi, 2
jl 0x14000f8ca
movdqa xmm5, xmmword [0x1400d9950]
movdqa xmm4, xmmword [0x1400d9b70]
movdqa xmm6, xmmword [0x1400d9980]
movdqa xmm0, xmmword [str.2222222222222222]
movdqa xmmword [rsp + 0x4e0], xmm0
lea rdx, [rsp + 0x210]
mov r8d, dword [rsp + 0x4e0]
nop word [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400d9a20]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx + 4]
xorps xmm2, xmm0
movd dword [rdx + 4], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x10
jl 0x14000f7c0
cmp ecx, 0x16
jge 0x14000f90e
movsxd rax, ecx
lea r8, [rsp + 0x210]
add r8, rax
nop dword [rax + rax]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, cl
sub al, dl
add al, 0x32
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x16
jl 0x14000f8e0
lea rdx, [rsp + 0x210]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [rsp + 0x60], 0x32009a
lea rdx, str.Press_INSERT_or_INS_in_your_keyboard_to_Show_or_Hide_Menu
lea rcx, [rsp + 0x60]
call fcn.140012dd0
lea rcx, [rsp + 0x60]
call fcn.140010160
mov rdx, rax
mov rcx, rbx
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x60], 0x32009a
lea rdx, str.25tagbjagih4wtwognkgboiwht2ogkjk_gjregowjwj2oihiwhgrgirhg
lea rcx, [rsp + 0x60]
call fcn.140012dd0
lea rdx, [rsp + 0x64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1770
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 5
mov rcx, r15
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rsp + 0x40]
call fcn.1400033b0
lea rdx, [rsp + 0x40]
call fcn.14000bd00
mov r15d, eax
lea rax, [rsp + 0x560]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 5]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
je 0x14000fa4b
lea rdx, str._Info__Error:_Failed_to_get_the_Documents_folder_path.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140016ed0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000feaf
lea rax, [rsp + 0x560]
inc r14
cmp byte [rax + r14], 0
jne 0x14000fa53
mov rax, qword [0x14011d9e8]
lea rsi, [0x14011d9d0]
cmp r14, rax
ja 0x14000faa0
mov rbx, rsi
cmp rax, 0xf
cmova rbx, qword [0x14011d9d0]
mov qword [0x14011d9e0], r14
mov r8, r14
lea rdx, [rsp + 0x560]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + r14], 0
jmp 0x14000fab6
lea r9, [rsp + 0x560]
xor r8d, r8d
mov rdx, r14
mov rcx, rsi
call fcn.14000b150
mov r8d, recv
lea rdx, [0x1400d5640]
mov rcx, rsi
call fcn.140013990
sub r15d, 1
je 0x14000feaf
sub r15d, 1
je 0x14000feaf
cmp r15d, 1
je 0x14000feaf
call fcn.140021240
test al, al
jne 0x14000fb31
mov dword [rsp + 0x60], 0x32009a
movdqa xmm0, xmmword [0x1400d9ba0]
movdqu xmmword [rsp + 0x64], xmm0
movdqa xmm1, xmmword [0x1400d9b90]
movdqu xmmword [rsp + 0x74], xmm1
mov word [rsp + 0x84], __WSAFDIsSet
lea rdx, [rsp + 0x64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
jmp 0x14000fa31
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, 0xa
lea rdx, str.client.dll
lea rcx, [rsp + 0x40]
call fcn.1400033b0
lea rdx, [rsp + 0x40]
call fcn.14000b290
mov rdx, rax
mov qword [0x14011d890], rax
mov ecx, dword [0x1400f6224]
add rcx, rax
mov qword [0x14011d898], rcx
mov ecx, dword [0x1400f6228]
add rcx, rax
mov qword [0x14011d8a0], rcx
mov ecx, dword [0x1400f6220]
add rcx, rax
mov qword [0x14011d8a8], rcx
mov ecx, dword [0x1400f6238]
add rcx, rax
mov qword [0x14011d8b8], rcx
mov ecx, dword [0x1400f6234]
add rcx, rax
mov qword [0x14011d8c0], rcx
mov eax, dword [0x1400f6230]
add rax, rdx
mov qword [0x14011d8c8], rax
mov eax, dword [0x1400f622c]
add rax, rdx
mov qword [0x14011d8d0], rax
test rdx, rdx
jne 0x14000fc2d
mov dword [rsp + 0x60], 0x32009a
movdqa xmm0, xmmword [0x1400d9ba0]
movdqu xmmword [rsp + 0x64], xmm0
movdqa xmm1, xmmword [0x1400d9b80]
movdqu xmmword [rsp + 0x74], xmm1
mov dword [rsp + 0x84], 0xa188a0d3
mov word [rsp + 0x88], __WSAFDIsSet
lea rdx, [rsp + 0x64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
jmp 0x14000fa31
mov rax, rsi
cmp qword [0x14011d9e8], 0xf
cmova rax, qword [0x14011d9d0]
mov qword [rsp + 0x4e0], rax
mov rax, qword [0x14011d9e0]
mov qword [rsp + 0x4e8], rax
call fcn.1400befb8
movaps xmm0, xmmword [rsp + 0x4e0]
movdqa xmmword [rsp + 0x4e0], xmm0
lea r8, [rsp + 0x4e0]
mov edx, eax
lea rcx, [rsp + 0x60]
call fcn.14000c150
nop
lea rcx, [rsp + 0x60]
call fcn.14000ca30
movzx ebx, al
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14000fcd4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fccf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000fccf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
test bl, bl
je 0x14000fce4
lea rdx, str.Config_folder_connected:
jmp 0x14000fdb5
mov rax, rsi
cmp qword [0x14011d9e8], 0xf
cmova rax, qword [0x14011d9d0]
mov qword [rsp + 0x4e0], rax
mov rax, qword [0x14011d9e0]
mov qword [rsp + 0x4e8], rax
call fcn.1400befb8
movaps xmm0, xmmword [rsp + 0x4e0]
movdqa xmmword [rsp + 0x4e0], xmm0
lea r8, [rsp + 0x4e0]
mov edx, eax
lea rcx, [rsp + 0x40]
call fcn.14000c150
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rcx, qword [rsp + 0x40]
call fcn.1400bf218
mov rbx, rax
mov rdx, rax
shr rdx, 0x20
test edx, edx
jne 0x140010142
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x14000fda6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fda1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000fda1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
test bl, bl
je 0x14000feaf
lea rdx, str.Config_folder_created:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016ed0
cmp qword [0x14011d9e8], 0xf
cmova rsi, qword [0x14011d9d0]
mov r8, qword [0x14011d9e0]
mov rdx, rsi
mov rcx, rax
call fcn.14001c1e0
lea rdx, [0x1400170a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rax, [rsp + 0x500]
mov qword [rsp + 0x210], rax
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rsp + 0x500], rax
lea rax, [0x140007500]
mov qword [rsp + 0x508], rax
lea rax, [rsp + 0x500]
mov qword [rsp + 0x538], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x208], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, 7
lea rdx, str.SDL_app
lea rcx, [rsp + 0x40]
call fcn.1400033b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Counter_Strike_2
lea rcx, [rsp + 0x60]
call fcn.1400033b0
nop
lea r9, [rsp + 0x500]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
call fcn.14006e520
nop
jmp 0x14000feaf
mov rax, qword [rsp + 0x2c0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x2c0], rax
mov rax, qword [rsp + 0x2c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x2bc], edx
lea rcx, [rsp + 0x2c8]
call fcn.140011410
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x368]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
movzx edx, byte [rsp + 0x270]
lea rcx, [rsp + 0x278]
call fcn.1400130e0
nop
mov rax, qword [rsp + 0x3d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x3d0], rax
mov rax, qword [rsp + 0x3d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x3cc], edx
lea rcx, [rsp + 0x3e0]
call fcn.140011410
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x480]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x248]
cmp rdx, 0xf
jbe 0x14000ffc7
inc rdx
mov rcx, qword [rsp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ffc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ffc2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
mov qword [rsp + 0x240], rdi
mov qword [rsp + 0x248], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x230], 0
mov rdx, qword [rsp + 0x268]
cmp rdx, 0xf
jbe 0x140010029
inc rdx
mov rcx, qword [rsp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010024
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010024
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
mov qword [rsp + 0x260], rdi
mov qword [rsp + 0x268], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x250], 0
mov rdx, qword [rsp + 0x298]
cmp rdx, 0xf
jbe 0x14001008b
inc rdx
mov rcx, qword [rsp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010086
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010086
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bfecc
xor eax, eax
mov rcx, qword [rsp + 0x670]
xor rcx, rsp
call fcn.1400bfa40
lea r11, [rsp + 0x690]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.1400028b0
nop
mov rcx, rax
call fcn.1400135e0
mov qword [rsp + 0x208], rax
lea r8, [rsp + 0x208]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rsp + 0x60]
call fcn.140017730
nop
mov r8, rax
lea rcx, [rsp + 0xd0]
call fcn.140020dc0
lea rdx, [0x1400f1f10]
lea rcx, [rsp + 0xd0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rdx, str.Failed_to_get_HWID
lea rcx, [rsp + 0xb8]
call fcn.14000b570
lea rdx, [0x1400f1f30]
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea r8, [rsp + 0x40]
lea rcx, str.create_directory
call fcn.14000c960
int3