Function at 0x14005aca0
Capabilities:
Create process on windows
Encode data using xor
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x510
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
movaps xmmword [rax - 0xb8], xmm15
mov rax, qword [0x1400ba040]
xor rax, rsp
mov qword [rsp + 0x460], rax
xor r13d, r13d
mov dword [rsp + 0x60], r13d
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x450]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rbx, qword [0x14013ed60]
mov dword [rbx + 0x1dd4], 0x43aa0000
mov qword [rbx + 0x1dd8], 0x43480000
mov dword [rbx + 0x1de0], r13d
mov dword [rbx + 0x1dc4], 2
mov byte [rbx + 0x1dfc], 1
or dword [rbx + 0x1dc0], 3
mov dword [rbx + 0x1de4], 0x44960000
mov dword [rbx + 0x1de8], 0x442f0000
mov dword [rbx + 0x1dc8], 1
lea rcx, [rbx + 0x1e80]
movss xmm1, dword [rbx + 0x163c]
movss xmm0, dword [rbx + 0x1640]
mov dword [rsp + 0x50], 1
movss dword [rsp + 0x54], xmm1
movss dword [rsp + 0x58], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov qword [rbx + 0x163c], r13
xor edx, edx
lea r8d, [r13 + 0x2b]
lea rcx, str.Loader
call fcn.140023bd0
mov rdx, qword [0x14013ed60]
mov rax, qword [rdx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rcx, qword [rdx + 0x1d18]
mov rbx, qword [rcx + 0x2f8]
movsd xmm8, qword [rcx + 0x50]
movss xmm6, dword [rcx + 0x58]
mov byte [rcx + 0xd1], 1
mov rax, qword [rdx + 0x1d18]
mov rdi, qword [rax + 0x2f8]
movss xmm9, dword [rax + 0x118]
movss xmm10, dword [rax + 0x11c]
movss xmm13, dword [0x1400ad764]
subss xmm10, xmm13
addss xmm9, dword [0x1400ad798]
movss dword [rsp + 0x68], xmm9
movss dword [rsp + 0x6c], xmm10
xorps xmm12, xmm12
mov qword [rsp + 0x300], r13
mov dword [rsp + 0x70], 0x3f800000
mov dword [rsp + 0x74], 0x3f800000
movaps xmm0, xmmword [0x1400ad8f0]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
movaps xmm7, xmm8
shufps xmm7, xmm7, 0x55
movss xmm11, dword [0x1400ad7ac]
addss xmm7, xmm11
movsd qword [rsp + 0x50], xmm8
addss xmm6, xmm8
movss dword [rsp + 0x78], xmm6
movss dword [rsp + 0x7c], xmm7
mov dword [rsp + 0x28], 0x30
movss xmm6, dword [0x1400ad750]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140044990
movaps xmm0, xmmword [0x1400ad9e0]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov r11d, eax
movaps xmm0, xmmword [0x1400ad920]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov r10d, eax
movaps xmm0, xmmword [0x1400ad920]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov r9d, eax
movaps xmm0, xmmword [0x1400ad9e0]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov r8d, eax
movaps xmm0, xmmword [0x1400ad920]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
addss xmm8, dword [0x1400ad794]
movss dword [rsp + 0x78], xmm8
movss dword [rsp + 0x7c], xmm7
movss dword [rsp + 0x40], xmm6
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], r8d
mov r9d, eax
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.140049a50
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm12
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad84c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x41f00000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
call fcn.140050a60
test al, al
je 0x14005b05e
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [0x14013ed60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm12
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm12
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43870000
mov dword [rsp + 0x54], 0x44480000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.leftside
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005b12a
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005b139
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 0x30
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.leftside
call fcn.140020c40
movaps xmm0, xmmword [0x1400adb20]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov r15d, eax
addss xmm10, dword [0x1400ad7c4]
addss xmm9, dword [0x1400ad7e4]
movss dword [rsp + 0x78], xmm9
movss dword [rsp + 0x7c], xmm10
mov rsi, qword [0x14013ee38]
test eax, 0xff000000
je 0x14005b25f
mov r14, qword [rdi + 0x98]
cmp rsi, r14
je 0x14005b1bc
mov rdx, rsi
mov rcx, rdi
call fcn.140041ea0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movss xmm3, dword [0x1400ad740]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.1400441b0
mov r9d, r15d
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400431d0
mov dword [rdi + 0x78], r13d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400454c0
cmp rsi, r14
je 0x14005b25f
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005b247
mov rax, r13
jmp 0x14005b250
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140041c50
mov rax, qword [0x14013ed60]
mov rcx, qword [rax + 0x1d18]
movss xmm6, dword [rcx + 0x118]
movss xmm7, dword [rcx + 0x11c]
addss xmm7, dword [0x1400ad7cc]
addss xmm6, dword [0x1400ad7bc]
movss dword [rsp + 0x78], xmm6
movss dword [rsp + 0x7c], xmm7
movaps xmm0, xmmword [0x1400adb20]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140019590
mov r15d, eax
addss xmm7, dword [0x1400ad7a8]
addss xmm6, xmm11
movss dword [rsp + 0x68], xmm6
movss dword [rsp + 0x6c], xmm7
mov rsi, qword [0x14013ed98]
test eax, 0xff000000
je 0x14005b397
mov r14, qword [rdi + 0x98]
cmp rsi, r14
je 0x14005b2f4
mov rdx, rsi
mov rcx, rdi
call fcn.140041ea0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movss xmm3, dword [0x1400ad7c0]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x78]
mov rcx, rdi
call fcn.1400441b0
mov r9d, r15d
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400431d0
mov dword [rdi + 0x78], r13d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x78]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400454c0
cmp rsi, r14
je 0x14005b397
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005b37f
mov rax, r13
jmp 0x14005b388
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140041c50
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400ad7f8]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad7b0]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013ed80]
call fcn.140027300
mov qword [rsp + 0x1b0], r13
lea rax, [rsp + 0x178]
mov qword [rsp + 0x50], rax
xor edx, edx
lea rcx, [rsp + 0x2e0]
call fcn.1400687a0
nop
mov r15d, 1
mov dword [rsp + 0x60], r15d
lea rax, [rsp + 0x3d0]
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x408], r13
mov rcx, qword [rsp + 0x1b0]
test rcx, rcx
je 0x14005b48b
mov rax, qword [rcx]
lea rdx, [rsp + 0x3d0]
call qword [rax]
mov qword [rsp + 0x408], rax
lea rcx, [0x14013ef28]
mov rdx, qword [0x14013ef38]
cmp qword [0x14013ef40], 0xf
jbe 0x14005b4aa
mov rcx, qword [0x14013ef28]
add rdx, rcx
mov qword [rsp + 0x300], rcx
mov qword [rsp + 0x308], rdx
movaps xmm0, xmmword [rsp + 0x300]
movdqa xmmword [rsp + 0x300], xmm0
lea r8, [rsp + 0x3d0]
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x1f0]
call fcn.14006ae70
nop
lea r8, [rsp + 0x2e0]
mov rcx, rax
call fcn.140066f70
nop
lea rcx, [rsp + 0x238]
call fcn.140066ec0
mov rcx, qword [rsp + 0x228]
test rcx, rcx
je 0x14005b533
mov rax, qword [rcx]
lea rdx, [rsp + 0x1f0]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rsp + 0x228], r13
mov rcx, qword [rsp + 0x1b0]
test rcx, rcx
je 0x14005b55c
mov rax, qword [rcx]
lea rdx, [rsp + 0x178]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rsp + 0x1b0], r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x300], xmm0
mov qword [rsp + 0x310], r13
mov qword [rsp + 0x318], r13
mov r8d, 6
lea rdx, str.status
lea rcx, [rsp + 0x300]
call fcn.1400668d0
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x2e0]
call fcn.1400679e0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x58], rax
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.140065710
mov byte [rsp + 0x50], 3
mov ecx, 0x20
call fcn.14007ac14
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
mov r8d, 7
lea rdx, str.success
mov rcx, rax
call fcn.1400668d0
mov qword [rsp + 0x58], rbx
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.140067610
movzx ebx, al
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.140065710
nop
test bl, bl
je 0x14005b85c
xorps xmm0, xmm0
movups xmmword [rsp + 0x300], xmm0
mov qword [rsp + 0x310], r13
mov qword [rsp + 0x318], r13
mov r8d, 8
lea rdx, str.username
lea rcx, [rsp + 0x300]
call fcn.1400668d0
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x2e0]
call fcn.1400679e0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x370], xmm0
movdqa xmm1, xmmword [0x1400ad8e0]
movdqu xmmword [rsp + 0x380], xmm1
mov byte [rsp + 0x370], 0
mov dword [rsp + 0x60], 9
cmp byte [rax], 3
jne 0x14005f64a
mov r9, qword [rax + 8]
lea rax, [rsp + 0x370]
cmp rax, r9
je 0x14005b6fc
mov rbx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x14005b6c8
mov r9, qword [r9]
lea rcx, [rsp + 0x370]
cmp rbx, 0xf
ja 0x14005b6f3
mov qword [rsp + 0x380], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x370], 0
jmp 0x14005b6fc
mov rdx, rbx
call fcn.140073d20
nop
mov r15d, 7
mov dword [rsp + 0x60], r15d
mov rbx, qword [0x14013ed60]
mov rax, qword [rbx + 0x1d18]
movss xmm6, dword [rax + 0x58]
lea rax, [rsp + 0x370]
cmp qword [rsp + 0x388], 0xf
cmova rax, qword [rsp + 0x370]
test rax, rax
jne 0x14005b73e
xorps xmm0, xmm0
jmp 0x14005b795
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1400ad870]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x1400ad860]
movss xmm2, dword [rbx + 0x1a80]
lea rdx, [rsp + 0x50]
mov rcx, qword [rbx + 0x1a78]
call fcn.140048bd0
movss xmm0, dword [rsp + 0x50]
addss xmm0, dword [0x1400ad698]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm6, xmm0
mulss xmm6, dword [0x1400ad658]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
lea rdx, [rsp + 0x370]
cmp qword [rsp + 0x388], 0xf
cmova rdx, qword [rsp + 0x370]
movaps xmm0, xmmword [0x1400adb20]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.14004fd50
nop
mov rdx, qword [rsp + 0x388]
cmp rdx, 0xf
jbe 0x14005b879
inc rdx
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b855
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005b855
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a900
jmp 0x14005b879
movaps xmm0, xmmword [0x1400ada10]
movups xmmword [rsp + 0x50], xmm0
lea rdx, str.Failed_to_get_username
lea rcx, [rsp + 0x50]
call fcn.14004fd50
call fcn.1400273a0
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400ad7d4]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
movss xmm6, dword [0x1400ad724]
subss xmm2, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm0, xmmword [0x1400ad9f0]
movups xmmword [rsp + 0x50], xmm0
lea rdx, str.user
lea rcx, [rsp + 0x50]
call fcn.14004fd50
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
movss xmm7, dword [0x1400ad780]
addss xmm0, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400ad790]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
cmp dword [0x14013f1c8], 0
sete r8b
lea rdx, str.Home
lea rcx, [0x1400ab8e8]
call fcn.140051fd0
test al, al
je 0x14005ba5a
mov edx, r13d
mov dword [0x14013f1c8], edx
jmp 0x14005ba60
mov edx, dword [0x14013f1c8]
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
cmp edx, 1
sete r8b
lea rdx, str.Settings
lea rcx, [0x1400ab8ec]
call fcn.140051fd0
test al, al
je 0x14005bb45
mov dword [0x14013f1c8], 1
and r15d, 0xfffffffe
movzx edx, byte [rsp + 0x2e0]
lea rcx, [rsp + 0x2e8]
call fcn.140065710
nop
call fcn.140020e60
mov eax, dword [0x14013f1c8]
movss xmm14, dword [0x1400ad7b4]
test eax, eax
jne 0x14005e54c
mov rbx, qword [0x14013ed60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm14
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad818]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43870000
mov dword [rsp + 0x54], 0x435c0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container1
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005bc4a
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005bc59
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.container1
call fcn.140020c40
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rdi, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
movss xmm8, dword [0x1400ad758]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rsp + 0x70], xmm6
movss dword [rsp + 0x74], xmm7
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
movaps xmm0, xmmword [0x1400adb20]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov r12d, eax
movss xmm9, dword [0x1400ad7d0]
addss xmm7, xmm9
movss xmm10, dword [0x1400ad804]
addss xmm6, xmm10
movss dword [rsp + 0x300], xmm6
movss dword [rsp + 0x304], xmm7
mov rsi, qword [0x14013ee40]
test eax, 0xff000000
je 0x14005bdf7
mov r14, qword [rdi + 0x98]
cmp rsi, r14
je 0x14005bd55
mov rdx, rsi
mov rcx, rdi
call fcn.140041ea0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rsp + 0x300]
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.1400441b0
mov r9d, r12d
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400431d0
mov dword [rdi + 0x78], r13d
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400454c0
cmp rsi, r14
je 0x14005bdf7
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005bddf
mov rax, r13
jmp 0x14005bde8
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140041c50
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm11, dword [0x1400ad7e0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
movss xmm13, dword [0x1400ad7f0]
addss xmm2, xmm13
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013ed88]
call fcn.140027300
lea rdx, [0x14013f3f0]
lea rcx, [rsp + 0x320]
call fcn.140064e50
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005beb1
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005bef7
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005bef2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005c115
mov rcx, r8
call fcn.14007a900
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x3d0], xmm0
movups xmmword [rsp + 0x3e0], xmm0
mov dword [rsp + 0x3f0], eax
lea r14, [0x140000000]
lea rax, [r14 + 0xad330]
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x110]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r15d, 0x10
mov dword [rsp + 0x60], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x80], rbx
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x7c], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x90]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x90], rax
lea rdx, [0x14013ef48]
cmp qword [0x14013ef60], 0xf
cmova rdx, qword [0x14013ef48]
mov r9d, 2
mov r8, qword [0x14013ef58]
lea rcx, [rsp + 0x90]
call fcn.1400655d0
nop
lea rax, [rsp + 0x3d0]
mov qword [rsp + 0x2e0], rax
lea rdi, str._Y__m__d
mov qword [rsp + 0x2e8], rdi
mov qword [rsp + 0x2f0], rdi
mov rax, rdi
nop dword [rax]
inc rax
cmp byte [rax], 0
jne 0x14005c030
mov qword [rsp + 0x2f0], rax
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x80]
call fcn.14006a840
nop
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x80], rbx
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rsp + 0x90]
call fcn.140063a90
lea rcx, [rsp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x110]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov rsi, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub rsi, rdx
cmp rsi, 0x278d00
jle 0x14005c11c
movaps xmm0, xmmword [0x1400adb00]
movups xmmword [rsp + 0x2e0], xmm0
lea rdx, str.Lifetime
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
jmp 0x14005c1f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rsi, rsi
jg 0x14005c190
mov rax, qword [0x14013ed60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a10
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm3
lea rdx, str.No_License
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
jmp 0x14005c1f1
movabs rax, 0x1845c8a0ce512957
imul rsi
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm3
mov r8d, r10d
lea rdx, str._d_Days
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ad75c]
addss xmm0, dword [0x1400ad770]
movss dword [rsp + 0x300], xmm0
movss dword [rsp + 0x304], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ad72c]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ad728]
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0x4c0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], r13d
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ad6e0]
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0xff0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], r13d
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad77c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400ada40]
movups xmmword [rsp + 0x2e0], xmm1
lea rdx, str.Undetected
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013ed60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x50], 0xb
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm15, dword [0x1400ad7ec]
addss xmm0, xmm15
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad784]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
test rsi, rsi
jle 0x14005c829
lea rcx, str.Start
call fcn.140050710
test al, al
je 0x14005c835
lea r8, str.downloadfivem.php_hwid
lea rcx, [rsp + 0x320]
call fcn.140065db0
nop
lea rbx, [0x14013f498]
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x390]
call fcn.140065f20
nop
lea rcx, [rsp + 0x320]
call fcn.140064ca0
lea r8, str.downloadinj.php_hwid
lea rcx, [rsp + 0x410]
call fcn.140065db0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x300]
call fcn.140065f20
nop
lea rcx, [rsp + 0x410]
call fcn.140064ca0
lea rdx, str.C:Windows_securitydatabase_rage_scripting_fivem.dll
lea rcx, [rsp + 0x350]
call fcn.140064e10
nop
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x320]
call fcn.140064e50
mov rdx, rax
lea rcx, [rsp + 0x430]
call fcn.140059b60
nop
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x410]
call fcn.140064e50
mov rdx, rax
lea rcx, [rsp + 0x3b0]
call fcn.140059b60
nop
lea r8, [rsp + 0x430]
lea rcx, [rsp + 0x2e0]
call fcn.140065f90
nop
lea r8, str.__o_C:Windows_securitydatabase_rage_scripting_fivem.dll___silent
mov rdx, rax
lea rcx, [rsp + 0x320]
call fcn.140065d40
mov rcx, rax
call fcn.140064c10
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x320]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x2e0]
call fcn.140064ca0
lea r8, [rsp + 0x3b0]
lea rcx, [rsp + 0x2e0]
call fcn.140065f90
nop
lea r8, str.__o_C:Windows_securitydatabaselauncher.exe___silent
mov rdx, rax
lea rcx, [rsp + 0x320]
call fcn.140065d40
mov rcx, rax
call fcn.140064c10
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x320]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x2e0]
call fcn.140064ca0
movups xmm0, xmmword [0x1400ad1d8]
movups xmmword [rsp + 0x320], xmm0
movups xmm1, xmmword [0x1400ad1e8]
movups xmmword [rsp + 0x330], xmm1
movsd xmm0, qword [0x1400ad1f8]
movsd qword [rsp + 0x340], xmm0
movzx eax, word [0x1400ad200]
mov word [rsp + 0x348], ax
mov r8d, r13d
cmp dword [0x1400ba008], 2
jl 0x14005c78d
movdqa xmm5, xmmword [0x1400ad950]
movdqa xmm4, xmmword [0x1400adb50]
movdqa xmm6, xmmword [str.3333]
movdqa xmm0, xmmword [str.4444444444444444]
movdqa xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x324]
mov edx, dword [rsp + 0x2e0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ad9c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400ad9c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x14005c680
cmp r8d, 0x2a
jge 0x14005c7d3
movsxd rax, r8d
lea r9, [rsp + 0x320]
add r9, rax
nop dword [rax + rax]
mov eax, 0xa0a0a0a1
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
sub al, cl
add al, 0x34
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x2a
jl 0x14005c7a0
lea rcx, [rsp + 0x320]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rcx, [rsp + 0x3b0]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x430]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x350]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x300]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x390]
call fcn.140064ca0
jmp 0x14005c835
lea rcx, str.No_License
call fcn.140050710
mov rcx, qword [0x14013ed60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r14 + r10*4 + 0x80278]
cmp dword [r14 + r10*4 + 0x80270], 8
jne 0x14005c8a5
mov eax, dword [r14 + r10*4 + 0x80274]
cmp eax, 1
jne 0x14005c886
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005c8a5
cmp eax, 2
jne 0x14005c8a5
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov eax, dword [0x14013f1c8]
test eax, eax
jne 0x14005e558
mov rbx, qword [0x14013ed60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm14
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad830]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43870000
mov dword [rsp + 0x54], 0x435c0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container2
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005c98d
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005c99c
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.container2
call fcn.140020c40
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rsi, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rsp + 0x70], xmm6
movss dword [rsp + 0x74], xmm7
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
movaps xmm0, xmmword [0x1400adb20]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov dword [rsp + 0x60], eax
addss xmm7, xmm9
addss xmm6, xmm10
movss dword [rsp + 0x300], xmm6
movss dword [rsp + 0x304], xmm7
mov r12, qword [0x14013ee18]
test eax, 0xff000000
je 0x14005cb3c
mov r13, qword [rsi + 0x98]
cmp r12, r13
je 0x14005ca7e
mov rdx, r12
mov rcx, rsi
call fcn.140041ea0
mov ebx, dword [rsi + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rsp + 0x300]
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1400441b0
mov r9d, dword [rsp + 0x60]
mov r8d, dword [rsi + 0x78]
mov rdx, qword [rsi + 0x80]
mov rcx, rsi
call fcn.1400431d0
mov dword [rsi + 0x78], 0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
mov r8d, dword [rsi + 0x20]
mov edx, ebx
mov rcx, rsi
call fcn.1400454c0
cmp r12, r13
je 0x14005cb39
movsxd rcx, dword [rsi + 0x68]
lea eax, [rcx - 1]
mov dword [rsi + 0x68], eax
xor r13d, r13d
test eax, eax
jne 0x14005cb1f
mov eax, r13d
mov qword [rsi + 0x98], rax
mov rcx, rsi
call fcn.140041c50
jmp 0x14005cb3c
mov rax, qword [rsi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rsi + 0x98], rax
mov rcx, rsi
call fcn.140041c50
jmp 0x14005cb3c
xor r13d, r13d
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm13
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013ed88]
call fcn.140027300
lea rdx, [0x14013f3f0]
lea rcx, [rsp + 0x350]
call fcn.140064e50
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005cbe4
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005cc2a
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005cc25
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005ce37
mov rcx, r8
call fcn.14007a900
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x3d0], xmm0
movups xmmword [rsp + 0x3e0], xmm0
mov dword [rsp + 0x3f0], eax
lea rax, [r14 + 0xad330]
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x110]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r15d, 0x20
mov dword [rsp + 0x60], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x80], rbx
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x7c], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x90]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x90], rax
lea rdx, [0x14013efd8]
cmp qword [0x14013eff0], 0xf
cmova rdx, qword [0x14013efd8]
mov r9d, 2
mov r8, qword [0x14013efe8]
lea rcx, [rsp + 0x90]
call fcn.1400655d0
nop
lea rax, [rsp + 0x3d0]
mov qword [rsp + 0x2e0], rax
mov qword [rsp + 0x2e8], rdi
mov qword [rsp + 0x2f0], rdi
mov rax, rdi
inc rax
cmp byte [rax], 0
jne 0x14005cd52
mov qword [rsp + 0x2f0], rax
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x80]
call fcn.14006a840
nop
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x80], rbx
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rsp + 0x90]
call fcn.140063a90
lea rcx, [rsp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x110]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov rsi, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub rsi, rdx
cmp rsi, 0x278d00
jle 0x14005ce3e
movaps xmm0, xmmword [0x1400adb00]
movups xmmword [rsp + 0x2e0], xmm0
lea rdx, str.Lifetime
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
jmp 0x14005cf13
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rsi, rsi
jg 0x14005ceb2
mov rax, qword [0x14013ed60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a10
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm3
lea rdx, str.No_License
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
jmp 0x14005cf13
movabs rax, 0x1845c8a0ce512957
imul rsi
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm3
mov r8d, r10d
lea rdx, str._d_Days
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ad75c]
addss xmm0, dword [0x1400ad770]
movss dword [rsp + 0x300], xmm0
movss dword [rsp + 0x304], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ad72c]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ad728]
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0x4c0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], r13d
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ad6e0]
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0xff0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], r13d
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad77c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400ada40]
movups xmmword [rsp + 0x2e0], xmm1
lea rdx, str.Undetected
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013ed60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x50], 0xb
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm15
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad784]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
test rsi, rsi
jle 0x14005d262
lea rcx, str.Start
call fcn.140050710
test al, al
je 0x14005d26e
lea r8, str.downloadow.php_hwid
lea rcx, [rsp + 0x350]
call fcn.140065db0
nop
lea r8, [0x14013f498]
mov rdx, rax
lea rcx, [rsp + 0x3b0]
call fcn.140065f20
nop
lea rcx, [rsp + 0x350]
call fcn.140064ca0
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x320]
call fcn.140064e50
mov rdx, rax
lea rcx, [rsp + 0x390]
call fcn.140059b60
nop
lea r8, [rsp + 0x390]
lea rcx, [rsp + 0x410]
call fcn.140065f90
nop
lea r8, str.__o_C:Windows_apppatchproduction.exe___silent
mov rdx, rax
lea rcx, [rsp + 0x350]
call fcn.140065d40
mov rcx, rax
call fcn.140064c10
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x350]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x410]
call fcn.140064ca0
call fcn.1400591f0
nop
lea rcx, [rsp + 0x390]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x3b0]
call fcn.140064ca0
jmp 0x14005d26e
lea rcx, str.Dont_Have_License
call fcn.140050dc0
mov rcx, qword [0x14013ed60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r14 + r10*4 + 0x80278]
cmp dword [r14 + r10*4 + 0x80270], 8
jne 0x14005d2de
mov eax, dword [r14 + r10*4 + 0x80274]
cmp eax, 1
jne 0x14005d2bf
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005d2de
cmp eax, 2
jne 0x14005d2de
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov eax, dword [0x14013f1c8]
test eax, eax
jne 0x14005e558
mov rbx, qword [0x14013ed60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm14
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad844]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43870000
mov dword [rsp + 0x54], 0x435c0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container3
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005d3c6
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005d3d5
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.container3
call fcn.140020c40
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rsi, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rsp + 0x70], xmm6
movss dword [rsp + 0x74], xmm7
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
movaps xmm0, xmmword [0x1400adb20]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov dword [rsp + 0x60], eax
addss xmm7, xmm9
addss xmm6, xmm10
movss dword [rsp + 0x300], xmm6
movss dword [rsp + 0x304], xmm7
mov r12, qword [0x14013ede8]
test eax, 0xff000000
je 0x14005d575
mov r13, qword [rsi + 0x98]
cmp r12, r13
je 0x14005d4b7
mov rdx, r12
mov rcx, rsi
call fcn.140041ea0
mov ebx, dword [rsi + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rsp + 0x300]
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1400441b0
mov r9d, dword [rsp + 0x60]
mov r8d, dword [rsi + 0x78]
mov rdx, qword [rsi + 0x80]
mov rcx, rsi
call fcn.1400431d0
mov dword [rsi + 0x78], 0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
mov r8d, dword [rsi + 0x20]
mov edx, ebx
mov rcx, rsi
call fcn.1400454c0
cmp r12, r13
je 0x14005d572
movsxd rcx, dword [rsi + 0x68]
lea eax, [rcx - 1]
mov dword [rsi + 0x68], eax
xor r13d, r13d
test eax, eax
jne 0x14005d558
mov eax, r13d
mov qword [rsi + 0x98], rax
mov rcx, rsi
call fcn.140041c50
jmp 0x14005d575
mov rax, qword [rsi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rsi + 0x98], rax
mov rcx, rsi
call fcn.140041c50
jmp 0x14005d575
xor r13d, r13d
lea rdx, [0x14013f3f0]
lea rcx, [rsp + 0x350]
call fcn.140064e50
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005d599
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
movsxd rsi, eax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005d5e2
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005d5dd
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005d719
mov rcx, r8
call fcn.14007a900
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm13
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013ed88]
call fcn.140027300
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
sub rsi, rax
movabs r13, 0x1845c8a0ce512957
mov rax, r13
imul rsi
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
cmp r10d, 0x13a6
jg 0x14005d769
cmp r10d, 0x1388
jge 0x14005d720
mov rax, qword [0x14013ed60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a10
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm3
lea rdx, str.No_License
jmp 0x14005d77f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm3
lea r8d, [r10 - 0x1388]
lea rdx, str._d_Days
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
jmp 0x14005d78c
movaps xmm0, xmmword [0x1400adb00]
movups xmmword [rsp + 0x2e0], xmm0
lea rdx, str.Lifetime
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ad75c]
addss xmm0, dword [0x1400ad770]
movss dword [rsp + 0x300], xmm0
movss dword [rsp + 0x304], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ad72c]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ad728]
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0x4c02ddf5
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
xor esi, esi
mov dword [rbx + 0x78], esi
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ad6e0]
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0xff02ddf5
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], esi
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad77c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400ada20]
movups xmmword [rsp + 0x2e0], xmm1
lea rdx, str.Updating
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013ed60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x50], 0xb
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm15
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad784]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
lea rcx, str.Dont_Have_License
call fcn.140050dc0
mov rcx, qword [0x14013ed60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea rax, [rax + rax*2]
mov r9d, dword [r14 + rax*4 + 0x80278]
cmp dword [r14 + rax*4 + 0x80270], 8
jne 0x14005da5e
mov eax, dword [r14 + rax*4 + 0x80274]
cmp eax, 1
jne 0x14005da3f
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005da5e
cmp eax, 2
jne 0x14005da5e
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov eax, dword [0x14013f1c8]
test eax, eax
jne 0x14005e555
mov rbx, qword [0x14013ed60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400ad81c]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad818]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43870000
mov dword [rsp + 0x54], 0x43610000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container4
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005db49
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005db58
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.container4
call fcn.140020c40
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rsi, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rsp + 0x70], xmm6
movss dword [rsp + 0x74], xmm7
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
movaps xmm0, xmmword [0x1400adb20]
movups xmmword [rsp + 0x2e0], xmm0
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov dword [rsp + 0x60], eax
addss xmm7, xmm9
addss xmm6, xmm10
movss dword [rsp + 0x300], xmm6
movss dword [rsp + 0x304], xmm7
mov r12, qword [0x14013ede0]
test eax, 0xff000000
je 0x14005dcea
mov r13, qword [rsi + 0x98]
cmp r12, r13
je 0x14005dc3a
mov rdx, r12
mov rcx, rsi
call fcn.140041ea0
mov ebx, dword [rsi + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rsp + 0x300]
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1400441b0
mov r9d, dword [rsp + 0x60]
mov r8d, dword [rsi + 0x78]
mov rdx, qword [rsi + 0x80]
mov rcx, rsi
call fcn.1400431d0
mov dword [rsi + 0x78], 0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
mov r8d, dword [rsi + 0x20]
mov edx, ebx
mov rcx, rsi
call fcn.1400454c0
cmp r12, r13
je 0x14005dce0
movsxd rcx, dword [rsi + 0x68]
lea eax, [rcx - 1]
mov dword [rsi + 0x68], eax
test eax, eax
jne 0x14005dcc8
xor eax, eax
jmp 0x14005dcd1
mov rax, qword [rsi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rsi + 0x98], rax
mov rcx, rsi
call fcn.140041c50
movabs r13, 0x1845c8a0ce512957
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm13
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013ed88]
call fcn.140027300
lea rdx, [0x14013f3f0]
lea rcx, [rsp + 0x350]
call fcn.140064e50
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005dd92
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005ddd8
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005ddd3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005e003
mov rcx, r8
call fcn.14007a900
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x3d0], xmm0
movups xmmword [rsp + 0x3e0], xmm0
mov dword [rsp + 0x3f0], eax
lea rax, [r14 + 0xad330]
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x110]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r15d, 0x40
mov dword [rsp + 0x60], r15d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x80], rbx
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x7c], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x90]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x90], rax
lea rdx, [0x14013f018]
cmp qword [0x14013f030], 0xf
cmova rdx, qword [0x14013f018]
mov r9d, 2
mov r8, qword [0x14013f028]
lea rcx, [rsp + 0x90]
call fcn.1400655d0
nop
lea rax, [rsp + 0x3d0]
mov qword [rsp + 0x2e0], rax
mov qword [rsp + 0x2e8], rdi
mov qword [rsp + 0x2f0], rdi
inc rdi
cmp byte [rdi], 0
jne 0x14005df01
mov qword [rsp + 0x2f0], rdi
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x80]
call fcn.14006a840
nop
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x80], rbx
mov rax, qword [rsp + 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rsp + 0x90]
call fcn.140063a90
lea rcx, [rsp + 0x98]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x110]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub rdi, rdx
cmp rdi, 0x278d00
jle 0x14005e00a
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm3
lea rdx, str.Lifetime
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
jmp 0x14005e0d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rdi, rdi
jg 0x14005e07e
mov rax, qword [0x14013ed60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a10
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm3
lea rdx, str.No_License
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
jmp 0x14005e0d8
mov rax, r13
imul rdi
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x50]
call fcn.14004f5b0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm3
mov r8d, r10d
lea rdx, str._d_Days
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ad75c]
addss xmm0, dword [0x1400ad770]
movss dword [rsp + 0x300], xmm0
movss dword [rsp + 0x304], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ad72c]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ad728]
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0x4c0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
xor r13d, r13d
mov dword [rbx + 0x78], r13d
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ad6e0]
lea rdx, [rsp + 0x300]
mov rcx, rbx
call fcn.140043d80
mov r9d, 0xff0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400431d0
mov dword [rbx + 0x78], r13d
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad77c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400ada40]
movups xmmword [rsp + 0x2e0], xmm1
lea rdx, str.Undetected
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013ed60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x50], 0xb
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm15
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ad784]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
test rdi, rdi
jle 0x14005e4bd
lea rcx, str.Start
call fcn.140050710
test al, al
je 0x14005e4c9
lea r8, str.downloadfn.php_hwid
lea rcx, [rsp + 0x350]
call fcn.140065db0
nop
lea r8, [0x14013f498]
mov rdx, rax
lea rcx, [rsp + 0x3b0]
call fcn.140065f20
nop
lea rcx, [rsp + 0x350]
call fcn.140064ca0
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x320]
call fcn.140064e50
mov rdx, rax
lea rcx, [rsp + 0x390]
call fcn.140059b60
nop
call fcn.140074270
mov rbx, rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x14005e3dc
xor r9d, r9d
lea r8, str.Regst
lea rdx, str.Couldnt_Load_Driver_iqvw64e.sys
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [0x14013f138]
lea rcx, [rsp + 0x2e0]
call fcn.140064a60
mov rdx, rax
mov rcx, rbx
call fcn.140077420
test rax, rax
jne 0x14005e423
xor r9d, r9d
lea r8, str.Regst
lea rdx, str.Failder_To_Map_Driver
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, rbx
call fcn.1400746c0
jmp 0x14005e4a0
mov rcx, rbx
call fcn.1400746c0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [rsp + 0x390]
lea rcx, [rsp + 0x410]
call fcn.140065f90
nop
lea r8, str.__o_C:Windows_apppatchChrome.exe___silent
mov rdx, rax
lea rcx, [rsp + 0x350]
call fcn.140065d40
mov rcx, rax
call fcn.140064c10
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x350]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x410]
call fcn.140064ca0
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400594d0
nop
lea rcx, [rsp + 0x390]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x3b0]
call fcn.140064ca0
jmp 0x14005e4c9
lea rcx, str.Dont_Have_License
call fcn.140050dc0
mov rcx, qword [0x14013ed60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r14 + r10*4 + 0x80278]
cmp dword [r14 + r10*4 + 0x80270], 8
jne 0x14005e539
mov eax, dword [r14 + r10*4 + 0x80274]
cmp eax, 1
jne 0x14005e51a
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005e539
cmp eax, 2
jne 0x14005e539
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov eax, dword [0x14013f1c8]
jmp 0x14005e558
lea r14, [0x140000000]
jmp 0x14005e561
xor r13d, r13d
movss xmm13, dword [0x1400ad764]
lea rsi, [0x14013f498]
cmp eax, 1
jne 0x14005f4eb
mov rbx, qword [0x14013ed60]
mov rax, qword [rbx + 0x1d18]
movss xmm6, dword [rax + 0x118]
movss dword [rsp + 0x60], xmm6
movss xmm7, dword [rax + 0x11c]
movss dword [rsp + 0x78], xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm14
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
movss xmm8, dword [0x1400ad820]
addss xmm2, xmm8
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x50], 0x443a4000
mov dword [rsp + 0x54], 0x431b0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.clean
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005e662
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005e671
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.clean
call fcn.140020c40
mov rcx, qword [0x14013ed80]
call fcn.140027300
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
movss xmm10, dword [0x1400ad7c0]
addss xmm0, xmm10
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
movss xmm9, dword [0x1400ad778]
addss xmm2, xmm9
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm0, xmmword [0x1400adb20]
movups xmmword [rsp + 0x2e0], xmm0
lea rdx, str.CLEANER
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
call fcn.1400273a0
mov rcx, qword [0x14013ed88]
call fcn.140027300
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm10
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm12
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm0, xmmword [0x1400ad9f0]
movups xmmword [rsp + 0x2e0], xmm0
lea rdx, str.Clean_all_traces_of_the_loader_from_your_pc
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013ed60]
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm10
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm13
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x50], 0xb
movss dword [rsp + 0x54], xmm0
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
lea rcx, str.Clean
call fcn.140050710
test al, al
je 0x14005ef3d
mov r9d, 0x24
lea r8, str.Tutorial
lea rdx, str.Do_you_want_to_watch_a_tutorial_before_cleaning_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x14005e9e4
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, str.https:__www.youtube.com_watch_v5eUSOFLM4cM
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [0x14013f068]
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
sub rax, rcx
cmp rax, 0x19
jb 0x14005f68f
lea rbx, [0x14013f058]
mov r9, rbx
cmp qword [0x14013f070], 0xf
cmova r9, qword [0x14013f058]
mov qword [rsp + 0x30], 0x19
lea rax, str.downloadcleaner.php_hwid
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x2e0]
call fcn.140067c60
nop
mov rdx, rsi
cmp qword [0x14013f4b0], 0xf
cmova rdx, qword [0x14013f498]
mov r8, qword [0x14013f4a8]
lea rcx, [rsp + 0x2e0]
call fcn.140064c20
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x3b0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x3c0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0xf
jbe 0x14005eada
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ead5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ead5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a900
movdqa xmm0, xmmword [0x1400ad8e0]
movdqu xmmword [rsp + 0x2f0], xmm0
mov byte [rsp + 0x2e0], 0
mov rcx, qword [0x14013f068]
mov rax, rdi
sub rax, rcx
cmp rax, 0x1c
jb 0x14005f695
cmp qword [0x14013f070], 0xf
cmova rbx, qword [0x14013f058]
mov qword [rsp + 0x30], 0x1c
lea rax, str.downloadcleanerexe.php_hwid
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9, rbx
lea rcx, [rsp + 0x300]
call fcn.140067c60
nop
cmp qword [0x14013f4b0], 0xf
cmova rsi, qword [0x14013f498]
mov r8, qword [0x14013f4a8]
mov rdx, rsi
lea rcx, [rsp + 0x300]
call fcn.140064c20
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x430], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x440], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x318]
cmp rdx, 0xf
jbe 0x14005ebd8
inc rdx
mov rcx, qword [rsp + 0x300]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ebd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ebd3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a900
movdqa xmm0, xmmword [0x1400ad8e0]
movdqu xmmword [rsp + 0x310], xmm0
mov byte [rsp + 0x300], 0
lea rdx, [rsp + 0x3b0]
lea rcx, [rsp + 0x350]
call fcn.140064e50
mov rdx, rax
lea rcx, [rsp + 0x320]
call fcn.140059b60
nop
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x3d0]
call fcn.140064e50
mov rdx, rax
lea rcx, [rsp + 0x410]
call fcn.140059b60
nop
lea r8, [rsp + 0x410]
lea rcx, [rsp + 0x390]
call fcn.140065f90
nop
mov r8d, 0x28
lea rdx, str.__o_C:WindowsGhosTCleaner.exe___silent
mov rcx, rax
call fcn.140064c20
xorps xmm0, xmm0
movups xmmword [rsp + 0x2e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2f0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x2f0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rsp + 0x2e0]
cmp qword [rsp + 0x2f8], 0xf
cmova rcx, qword [rsp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0xf
jbe 0x14005ed0b
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ed06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ed06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a900
movdqa xmm0, xmmword [0x1400ad8e0]
movdqu xmmword [rsp + 0x2f0], xmm0
mov byte [rsp + 0x2e0], 0
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 0xf
jbe 0x14005ed6a
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ed65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ed65
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a900
lea rcx, str.C:WindowsGhosTCleaner.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [rsp + 0x320]
lea rcx, [rsp + 0x390]
call fcn.140065f90
nop
mov r8d, 0x23
lea rdx, str.__o_C:Windowscleaner.bat___silent
mov rcx, rax
call fcn.140064c20
xorps xmm0, xmm0
movups xmmword [rsp + 0x2e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x2f0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x2f0], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rsp + 0x2e0]
cmp qword [rsp + 0x2f8], 0xf
cmova rcx, qword [rsp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 0xf
jbe 0x14005ee50
inc rdx
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ee4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005ee4b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a900
movdqa xmm0, xmmword [0x1400ad8e0]
movdqu xmmword [rsp + 0x2f0], xmm0
mov byte [rsp + 0x2e0], 0
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 0xf
jbe 0x14005eeaf
inc rdx
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005eeaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005eeaa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007a900
lea rcx, str.C:Windowscleaner.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rcx, [rsp + 0x410]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x320]
call fcn.140064ca0
nop
jmp 0x14005ef20
lea rcx, [rsp + 0x430]
call fcn.140064ca0
nop
lea rcx, [rsp + 0x3b0]
call fcn.140064ca0
jmp 0x14005ef47
movabs rdi, 0x7fffffffffffffff
mov rcx, qword [0x14013ed60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r14 + r10*4 + 0x80278]
cmp dword [r14 + r10*4 + 0x80270], 8
jne 0x14005efb7
mov eax, dword [r14 + r10*4 + 0x80274]
cmp eax, 1
jne 0x14005ef98
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005efb7
cmp eax, 2
jne 0x14005efb7
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov rbx, qword [0x14013ed60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm8
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400ad80c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, dword [rax + 0x118]
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov dword [rsp + 0x50], 0x443a4000
mov dword [rsp + 0x54], 0x431b0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov r8, qword [rbx + 0x1d18]
movsxd rax, dword [r8 + 0x108]
mov r8, qword [r8 + 0x110]
mov r8d, dword [r8 + rax*4 - 4]
xor edx, edx
lea rcx, str.support
call fcn.1400190c0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005f095
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005f0a4
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, str.support
call fcn.140020c40
mov rcx, qword [0x14013ed80]
call fcn.140027300
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm10
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm9
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm1, xmmword [0x1400adb20]
movups xmmword [rsp + 0x2e0], xmm1
lea rdx, str.Support
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
call fcn.1400273a0
mov rcx, qword [0x14013ed88]
call fcn.140027300
mov rcx, qword [0x14013ed60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm10
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm12
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm1, xmmword [0x1400ad9f0]
movups xmmword [rsp + 0x2e0], xmm1
lea rdx, str.If_you_need_any_help_or_if_you_have_any_question_please_click_button_bellow
lea rcx, [rsp + 0x2e0]
call fcn.14004fd50
call fcn.1400273a0
mov rbx, qword [0x14013ed60]
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm10
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm13
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov dword [rsp + 0x50], 0xb
movss xmm0, dword [rbx + 0x1678]
movss dword [rsp + 0x54], xmm0
lea rcx, [rbx + 0x1e80]
lea rdx, [rsp + 0x50]
call fcn.140038f60
mov dword [rbx + 0x1678], 0x41200000
mov dword [rsp + 0x50], 0x43340000
mov dword [rsp + 0x54], 0x41f00000
lea rdx, [rsp + 0x50]
lea rcx, str.Contact
call fcn.140050710
test al, al
je 0x14005f3c7
lea rcx, str.start_https:__discord.gg_ghostesport
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x14013ed60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r14 + r10*4 + 0x80278]
cmp dword [r14 + r10*4 + 0x80270], 8
jne 0x14005f437
mov eax, dword [r14 + r10*4 + 0x80274]
cmp eax, 1
jne 0x14005f418
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005f437
cmp eax, 2
jne 0x14005f437
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e60
mov r8, qword [0x14013ed60]
mov rax, qword [r8 + 0x1d18]
mov byte [rax + 0xd1], 1
movaps xmm0, xmmword [0x1400adaa0]
movups xmmword [rsp + 0x2e0], xmm0
mov rax, qword [r8 + 0x1d18]
movaps xmm1, xmm6
addss xmm1, dword [rax + 0x58]
movss dword [rsp + 0x50], xmm1
movaps xmm0, xmm7
subss xmm0, dword [0x1400ad838]
movss dword [rsp + 0x54], xmm0
addss xmm6, xmm12
movss dword [rsp + 0x300], xmm6
subss xmm7, dword [0x1400ad83c]
movss dword [rsp + 0x304], xmm7
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov r9d, eax
mov rcx, qword [r8 + 0x1d18]
movss xmm0, dword [0x1400ad6a0]
movss dword [rsp + 0x20], xmm0
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x300]
mov rcx, qword [rcx + 0x2f8]
call fcn.140044720
jmp 0x14005f4f5
movabs rdi, 0x7fffffffffffffff
mov r8, qword [0x14013ed60]
mov rax, qword [r8 + 0x1d18]
movss xmm2, dword [rax + 0x118]
movss xmm3, dword [rax + 0x11c]
mov byte [rax + 0xd1], 1
movaps xmm0, xmmword [0x1400adaa0]
movups xmmword [rsp + 0x2e0], xmm0
mov rax, qword [r8 + 0x1d18]
movaps xmm1, xmm2
addss xmm1, dword [rax + 0x58]
movss dword [rsp + 0x50], xmm1
subss xmm3, dword [0x1400ad828]
movss dword [rsp + 0x54], xmm3
addss xmm2, xmm12
movss dword [rsp + 0x300], xmm2
movss dword [rsp + 0x304], xmm3
lea rcx, [rsp + 0x2e0]
call fcn.140019590
mov r9d, eax
mov rcx, qword [r8 + 0x1d18]
movss xmm0, dword [0x1400ad6a0]
movss dword [rsp + 0x20], xmm0
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x300]
mov rcx, qword [rcx + 0x2f8]
call fcn.140044720
call fcn.140026be0
lea rcx, [rsp + 0x50]
call fcn.140058520
movabs rcx, 0x7fffffffff67697f
mov rax, qword [rsp + 0x50]
cmp rax, rcx
jge 0x14005f5d1
add rax, 0x989680
mov qword [rsp + 0x50], rax
jmp 0x14005f5d6
mov qword [rsp + 0x50], rdi
lea rcx, [rsp + 0x50]
call fcn.14006ad50
mov rcx, qword [rsp + 0x460]
xor rcx, rsp
call fcn.14007a4b0
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov rcx, rax
call fcn.140068710
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x50]
lea rcx, [rsp + 0x3d0]
call fcn.140073950
nop
mov r8, rax
lea rcx, [rsp + 0x1b8]
call fcn.140073a10
lea rdx, [0x1400b6de0]
lea rcx, [rsp + 0x1b8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140057b30
nop
call fcn.140057b30
int3