Function at 0x140086db0
Capabilities:
Access peb ldr_data
Check http status code
Contain obfuscated stackstrings
Create thread
Encode data using xor
Enumerate processes
Execute command
Hash data using fnv
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2b8]
sub rsp, 0x390
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x1400da5c0]
xor rax, rsp
mov qword [rbp + 0x270], rax
xor edi, edi
mov dword [rsp + 0x50], edi
mov ecx, 8
call fcn.140088850
test rax, rax
je 0x140086e0c
lea rcx, [0x14007c0d0]
mov qword [rax], rcx
jmp 0x140086e0f
mov rax, rdi
mov qword [rbp - 0x40], rax
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14003abd0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140088691
mov qword [rbp - 0x40], rdi
cmp dword [rsp + 0x58], 0
je 0x140088674
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x140088674
xorps xmm0, xmm0
movaps xmmword [rbp - 0x40], xmm0
movdqa xmmword [rsp + 0x50], xmm0
mov ecx, 3
call sub.libcurl.dll_curl_global_init
call sub.libcurl.dll_curl_easy_init
mov r13, rax
test rax, rax
je 0x140088638
mov rcx, qword [0x140098e60]
mov qword [rbp - 0x40], rcx
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov esi, dword [rax + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x140086f36
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x140086f36
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [r10 + r9*4]
mov eax, dword [rax + rbx]
add rax, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rax]
inc rax
test dl, dl
je 0x140086f31
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rax]
lea rax, [rax + 1]
test dl, dl
jne 0x140086f10
cmp r8d, 0x491e0a9c
je 0x140086f3b
test r9d, r9d
jne 0x140086ef0
mov rcx, qword [rcx]
jmp 0x140086ec0
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov eax, dword [rsi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
movdqa xmm7, xmmword [0x14009a3a0]
cmp dword [0x1400da628], 2
jl 0x140087044
movdqa xmm4, xmmword [0x14009a3d0]
movdqa xmm2, xmmword [0x140095880]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009a390]
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x14009a3b0]
movd xmm0, dword [rbp - 0x40]
xorps xmm2, xmm0
movd dword [rbp - 0x40], xmm2
movdqa xmm3, xmmword [0x14009a380]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009a390]
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x14009a3b0]
movd xmm0, dword [rbp - 0x3c]
xorps xmm3, xmm0
movd dword [rbp - 0x3c], xmm3
jmp 0x140087083
lea r9, [rbp - 0x40]
mov r8d, edi
nop dword [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x140087050
lea rcx, [rbp - 0x40]
call r11
lea rdx, str.Ascent_Services_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037180
lea rcx, str.Ascent_Services
call fcn.140074420
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x30], 0
lea rax, [0x140098730]
mov qword [rbp + 0x30], rax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x50], 3
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x30]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rsi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x30], rsi
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x2c], edx
lea rcx, [rbp + 0x40]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x40], rax
mov byte [rbp + 0xbc], 0
mov byte [rbp + 0xb1], 0
lea rcx, [rbp + 0x40]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0xc0], rdi
mov rax, qword [0x1400de6e0]
mov qword [rbp + 0xb4], rax
mov qword [rbp + 0xa8], rdi
mov r9d, 0x40
mov r8d, 1
lea rdx, str.license.key
lea rcx, [rbp + 0x40]
call fcn.140076530
test rax, rax
jne 0x1400871a4
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x30]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x30]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
movzx ebx, al
mov rcx, qword [rbp + 0x30]
movsxd rdx, dword [rcx + 4]
mov qword [rbp + rdx + 0x30], rsi
mov rcx, qword [rbp + 0x30]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0xb0]
mov dword [rbp + rdx + 0x2c], r8d
lea rcx, [rbp + 0x40]
call fcn.140047ab0
lea rcx, [rbp + 0x48]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
test bl, bl
je 0x1400872dc
lea rcx, str.License_key_found
call fcn.140074420
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x30]
call fcn.140089d28
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
lea rdx, str.license.key
lea rcx, [rbp + 0x30]
call fcn.1400444e0
nop
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x30]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x30]
call fcn.14003f980
lea rcx, [rbp + 0x40]
call fcn.140064b90
test rax, rax
jne 0x14008729b
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x30]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x30], rsi
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x2c], edx
lea rcx, [rbp + 0x40]
call fcn.140047ab0
lea rcx, [rbp + 0x48]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x14008730b
lea rcx, str.License_key_not_found
call fcn.140074420
lea rdx, str.Enter_your_license_key:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037180
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140036ac0
lea rcx, [rbp + 0x10]
call fcn.14006c7d0
nop
lea rdx, str.Content_Type:_application_json
xor ecx, ecx
call sub.libcurl.dll_curl_slist_append
mov qword [rbp - 0x40], rax
mov r15, qword [rbp - 0x20]
movabs rax, 0x7fffffffffffffff
mov rcx, rax
sub rcx, r15
cmp rcx, 0xf
jb 0x1400886a0
lea r12, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r12, qword [rbp - 0x30]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r14, [r15 + 0xf]
mov esi, reloc.WS2_32.dll_ntohs
lea rbx, [rsp + 0x50]
movabs rcx, 0x8000000000000000
mov edx, reloc.WS2_32.dll_shutdown
cmp r14, rsi
jbe 0x1400873f2
mov rsi, r14
or rsi, 0xf
cmp rsi, rax
jbe 0x1400873b8
mov rsi, rax
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.140088850
test rax, rax
je 0x14008748c
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400873ed
cmp rsi, rdx
cmovb rsi, rdx
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x1400873cd
mov rbx, rdi
jmp 0x1400873ed
cmp rcx, 0x1000
jb 0x1400873e5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14008867f
jmp 0x140087399
call fcn.140088850
mov rbx, rax
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rsi
movsd xmm0, qword [str.authorization:]
movsd qword [rbx], xmm0
mov ecx, dword [0x140098d40]
mov dword [rbx + 8], ecx
movzx eax, word [0x140098d44]
mov word [rbx + 0xc], ax
movzx eax, byte [0x140098d46]
mov byte [rbx + 0xe], al
lea rcx, [rbx + 0xf]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r14], 0
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rdx, qword [rsp + 0x50]
mov rcx, qword [rbp - 0x40]
call sub.libcurl.dll_curl_slist_append
mov qword [rbp - 0x40], rax
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140087498
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140087493
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140087493
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008888c
movdqa xmm0, xmmword [0x1400963e0]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov r15, qword [rbp + 0x20]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 6
jb 0x1400886a6
lea r12, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova r12, qword [rbp + 0x10]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea r14, [r15 + 6]
mov ebx, reloc.WS2_32.dll_ntohs
lea rsi, [rbp - 0x80]
cmp r14, rbx
jbe 0x140087573
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x140087534
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140088850
test rax, rax
je 0x1400875ef
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14008756f
cmp rbx, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14008754f
mov rsi, rdi
jmp 0x14008756f
cmp rcx, 0x1000
jb 0x140087567
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140088685
jmp 0x140087515
call fcn.140088850
mov rsi, rax
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], rbx
mov ecx, dword [str.hwid:]
mov dword [rsi], ecx
movzx ecx, word [0x140098d4c]
mov word [rsi + 4], cx
lea rcx, [rsi + 6]
mov r8, r15
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r14], 0
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
mov rcx, qword [rbp - 0x40]
call sub.libcurl.dll_curl_slist_append
mov qword [rbp - 0x40], rax
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400875fb
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400875f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400875f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008888c
movdqa xmm0, xmmword [0x1400963e0]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov r14, qword [0x1400de3f8]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0xd
jb 0x1400886ac
lea r12, [0x1400de3e8]
cmp qword [0x1400de400], 0xf
cmova r12, qword [0x1400de3e8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
lea r15, [r14 + 0xd]
mov ebx, reloc.WS2_32.dll_ntohs
lea rsi, [rbp - 0x10]
cmp r15, rbx
jbe 0x1400876e3
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x14008769d
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140088850
test rax, rax
je 0x1400876d0
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400876df
cmp rbx, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400876b8
mov rsi, rdi
jmp 0x1400876df
cmp rcx, 0x1000
jb 0x1400876d7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14008868b
jmp 0x140087682
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140088850
mov rsi, rax
mov qword [rbp - 0x10], rsi
mov qword [rbp], r15
mov qword [rbp + 8], rbx
mov r8, r14
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str._checkLicense]
movsd qword [rsi + r14], xmm0
mov eax, dword [0x140098f08]
mov dword [rsi + r14 + 8], eax
movzx eax, byte [0x140098f0c]
mov byte [rsi + r14 + 0xc], al
mov byte [rsi + r15], 0
mov dword [rsp + 0x50], 0x1f
lea r8, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova r8, qword [rbp - 0x10]
mov edx, 0x2712
mov rcx, r13
call sub.libcurl.dll_curl_easy_setopt
xor r8d, r8d
mov edx, 0x40
mov rcx, r13
call sub.libcurl.dll_curl_easy_setopt
xor r8d, r8d
mov edx, 0x51
mov rcx, r13
call sub.libcurl.dll_curl_easy_setopt
lea r8, [0x14005ba80]
mov edx, 0x4e2b
mov rcx, r13
call sub.libcurl.dll_curl_easy_setopt
lea r8, [0x1400da120]
mov edx, 0x2711
mov rcx, r13
call sub.libcurl.dll_curl_easy_setopt
mov r8, qword [rbp - 0x40]
mov edx, 0x2727
mov rcx, r13
call sub.libcurl.dll_curl_easy_setopt
lea rcx, str.Sending_request_to_server
call fcn.140074420
mov rcx, r13
call sub.libcurl.dll_curl_easy_perform
mov ebx, eax
lea rcx, str.Request_sent
call fcn.140074420
test ebx, ebx
jne 0x1400886b2
lea r8, [rbp - 0x40]
mov edx, 0x200002
mov rcx, r13
call sub.libcurl.dll_curl_easy_getinfo
mov eax, dword [rbp - 0x40]
cmp eax, 0xc8
jne 0x140088607
lea rcx, str.License_key_is_valid
call fcn.140074420
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x30]
call fcn.140089d28
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rdx, str.license.key
lea rcx, [rbp + 0x30]
call fcn.140044750
nop
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rdx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp + 0x30]
call fcn.14003a530
lea rcx, [rbp + 0x38]
call fcn.140064b90
test rax, rax
jne 0x140087870
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x30]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 1
lea rdx, str.C:mvvad.sys
lea rcx, [rbp + 0x140]
call fcn.1400444e0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
movzx ebx, al
mov rcx, qword [rbp + 0x140]
movsxd rdx, dword [rcx + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rdx + 0x140], rax
mov rcx, qword [rbp + 0x140]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0xb0]
mov dword [rbp + rdx + 0x13c], r8d
lea rcx, [rbp + 0x150]
call fcn.140047ab0
lea rcx, [rbp + 0x158]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov r14d, dword [0x1400da628]
test bl, bl
je 0x140087add
movsd xmm0, qword [0x140098e68]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [0x140098e70]
mov dword [rsp + 0x58], eax
movzx eax, byte [0x140098e74]
mov byte [rsp + 0x5c], al
mov r8d, edi
cmp r14d, 2
jl 0x140087a2f
movdqa xmm4, xmmword [0x14009a3d0]
movdqa xmm3, xmmword [0x140095880]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009a390]
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
mov eax, dword [0x14009a3b0]
movd xmm0, eax
paddb xmm3, xmm0
movd xmm0, dword [0x140098e68]
xorps xmm3, xmm0
movd dword [rsp + 0x50], xmm3
movdqa xmm2, xmmword [0x14009a380]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x14009a390]
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x54]
xorps xmm2, xmm1
movd dword [rsp + 0x54], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140087a40
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea rax, [rsp + 0x50]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140087a90
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call fcn.140004d60
nop
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
lea rcx, [0x1400de518]
cmp qword [0x1400de530], 0xf
cmova rcx, qword [0x1400de518]
call fcn.140069f90
nop
lea rcx, [rbp - 0x80]
call fcn.140005200
mov byte [rbp - 0x80], 0x33
mov byte [rbp - 0x7f], 0x22
mov byte [rbp - 0x7e], 0x64
mov byte [rbp - 0x7d], 0x21
mov byte [rbp - 0x7c], 0x3b
mov byte [rbp - 0x7b], 0x24
mov byte [rbp - 0x7a], 0x27
mov byte [rbp - 0x79], 0x3a
mov byte [rbp - 0x78], 0x25
mov byte [rbp - 0x77], 0x60
mov byte [rbp - 0x76], 0xa
mov byte [rbp - 0x75], 0x27
mov byte [rbp - 0x74], 0x34
mov byte [rbp - 0x73], 0x22
mov byte [rbp - 0x72], 0x36
mov byte [rbp - 0x71], 0x29
mov byte [rbp - 0x70], 4
mov byte [rbp - 0x6f], 0x39
mov byte [rbp - 0x6e], 0x31
mov byte [rbp - 0x6d], reloc.WS2_32.dll_setsockopt
mov byte [rbp - 0x6c], 0x36
mov byte [rbp - 0x6b], 0x30
mov byte [rbp - 0x6a], 0x22
mov byte [rbp - 0x69], 0x7e
mov byte [rbp - 0x68], 0x32
mov byte [rbp - 0x67], 0x39
mov byte [rbp - 0x66], 0x37
mov byte [rbp - 0x65], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x64], 4
mov byte [rbp - 0x63], reloc.WS2_32.dll_setsockopt
mov byte [rbp - 0x62], ntohl
mov byte [rbp - 0x61], 0x56
mov byte [rbp - 0x60], 0x23
mov byte [rbp - 0x5f], 0x5b
mov byte [rbp - 0x5e], 0x38
mov byte [rbp - 0x5d], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x5c], 0x1f
mov byte [rbp - 0x5b], 0x17
mov byte [rbp - 0x5a], 7
mov byte [rbp - 0x59], 0xa
mov byte [rbp - 0x58], 0x4e
mov byte [rbp - 0x57], shutdown
mov byte [rbp - 0x56], select
mov byte [rbp - 0x55], 0x1c
mov byte [rbp - 0x54], 0x55
mov byte [rbp - 0x53], 5
mov byte [rbp - 0x52], 0xa
mov byte [rbp - 0x51], ntohl
mov byte [rbp - 0x50], reloc.WS2_32.dll_setsockopt
mov byte [rbp - 0x4f], 0x4c
mov byte [rbp - 0x4e], 0x1f
mov byte [rbp - 0x4d], 0x17
mov byte [rbp - 0x4c], ntohl
mov byte [rbp - 0x4b], 0x1f
mov byte [rbp - 0x4a], shutdown
mov byte [rbp - 0x49], reloc.WS2_32.dll_select
mov byte [rbp - 0x48], reloc.WS2_32.dll_WSASetLastError
movzx eax, byte [rbp - 0x80]
mov r9, rdi
movabs r11, 0x810507dc5c815244
mov r10, r11
lea rax, [rbp - 0x80]
sub r10, rax
mov r15d, reloc.WS2_32.dll_ntohs
nop dword [rax]
nop word [rax + rax]
lea r8, [rbp - 0x80]
add r8, r9
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, r15b
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + r9 - 0x80], dl
inc r9
cmp r9, 0x39
jb 0x140087bf0
lea rcx, [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rsp + 0x50], 0x63
mov byte [rsp + 0x51], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x52], 0x3e
mov byte [rsp + 0x53], WSASetLastError
mov byte [rsp + 0x54], 0x66
mov byte [rsp + 0x55], 0x7f
mov byte [rsp + 0x56], 0x63
mov byte [rsp + 0x57], WSASetLastError
mov byte [rsp + 0x58], 0x38
mov byte [rsp + 0x59], 0x59
mov byte [rsp + 0x5a], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x5b], 0x78
mov byte [rsp + 0x5c], 0x60
mov byte [rsp + 0x5d], 0x7c
mov byte [rsp + 0x5e], 0x68
mov byte [rsp + 0x5f], 0x4d
mov byte [rsp + 0x60], 0x48
mov byte [rsp + 0x61], 0x45
mov byte [rsp + 0x62], 0x69
mov byte [rsp + 0x63], 0x40
mov byte [rsp + 0x64], 0x43
mov byte [rsp + 0x65], 0x5a
mov byte [rsp + 0x66], 0x21
movzx eax, byte [rsp + 0x50]
mov r9, rdi
movabs r11, 0x644f2630f7b6cc10
mov r10, r11
lea rax, [rsp + 0x50]
sub r10, rax
nop dword [rax]
nop dword [rax + rax]
lea r8, [rsp + 0x50]
add r8, r9
mov rcx, r9
and ecx, r15d
cmp rcx, r15
cmovae rcx, r15
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, r15b
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rsp + r9 + 0x50], dl
inc r9
cmp r9, 0x17
jb 0x140087cd0
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.SC_Driver_loaded
call fcn.140074420
mov eax, dword [str.U_K9U_K9U_K9]
mov dword [rsp + 0x50], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov esi, dword [rcx + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x140087db6
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x140087db6
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140087db1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140087d90
cmp r8d, 0x491e0a9c
je 0x140087dbb
test r9d, r9d
jne 0x140087d70
mov rax, qword [rax]
jmp 0x140087d40
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov eax, dword [rsi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
cmp r14d, 2
jl 0x140087e4e
movdqa xmm3, xmmword [0x140095880]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14009a3d0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14009a3d0]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x14009a390]
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x14009a3b0]
movd xmm0, dword [rsp + 0x50]
xorps xmm3, xmm0
movd dword [rsp + 0x50], xmm3
jmp 0x140087e93
lea r9, [rsp + 0x50]
mov r8d, edi
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140087e60
lea rcx, [rsp + 0x50]
call r11
call fcn.140003f80
lea rcx, str.Driver_initialized
call fcn.140074420
lea rdx, str.Load_driver__Once_per_boot_n__y_n_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037180
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], r15
mov byte [rbp - 0x80], 0
lea rdx, [rbp - 0x80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140036ac0
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rcx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
cmp r8, 1
jne 0x140087f1b
lea rdx, [0x140098d84]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140087f1b
call fcn.140073b20
lea rcx, str.Driver_loaded
call fcn.140074420
call fcn.140084ff0
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, str..VMDriver
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1400de2e0], rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1400886dd
cmp qword [0x1400de300], 0
jne 0x140087f9b
nop dword [rax + rax]
lea rdx, str.Fortnite
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1400de300], rax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x1400de300], 0
je 0x140087f70
lea rcx, str.Fortnite_found
call fcn.140074420
xor edx, edx
mov ecx, 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
mov dword [rbp + 0x140], 0x130
lea rdx, [rbp + 0x140]
mov rcx, rax
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x14008800f
nop dword [rax]
nop word [rax + rax]
lea rdx, str.FortniteClient_Win64_Shipping.exe
lea rcx, [rbp + 0x16c]
call qword [sym.imp.KERNEL32.dll_lstrcmpiA]
mov rcx, rbx
test eax, eax
je 0x14008816b
lea rdx, [rbp + 0x140]
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x140087fe0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
mov dword [0x1400de2e8], eax
mov qword [rsp + 0x50], 1
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
cdqe
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x30
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x30
lea r8, [rsp + 0x50]
mov edx, 0x225620
mov rcx, qword [0x1400de2e0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rsp + 0x78]
mov qword [0x1400de2d8], rax
lea rcx, str.Base_address_found
call fcn.140074420
mov rdx, qword [0x1400de2d8]
lea rcx, [rsp + 0x50]
call fcn.14007f2d0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1400880b0
mov rax, qword [rax]
mov rcx, rax
call fcn.140074420
nop
lea rcx, [rsp + 0x50]
call fcn.140005200
cmp qword [0x1400de2d8], 0
je 0x1400886d0
mov eax, dword [0x140098e7c]
mov dword [rsp + 0x50], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov esi, dword [rcx + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x140088166
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x140088166
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140088161
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140088140
cmp r8d, 0x491e0a9c
je 0x14008817c
test r9d, r9d
jne 0x140088120
mov rax, qword [rax]
jmp 0x1400880f0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x148]
jmp 0x14008801a
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov eax, dword [rsi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r11d, dword [rcx + rax*4]
add r11, r10
cmp r14d, 2
jl 0x14008820f
movdqa xmm3, xmmword [0x140095880]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14009a3d0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14009a3d0]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x14009a390]
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x14009a3b0]
movd xmm0, dword [rsp + 0x50]
xorps xmm3, xmm0
movd dword [rsp + 0x50], xmm3
jmp 0x140088253
lea r9, [rsp + 0x50]
mov r8d, edi
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x140088220
lea rcx, [rsp + 0x50]
call r11
lea rdx, str._i__Please_wait..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037180
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x1400de460]
mov dword [rcx + 0xc], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x1400de460]
mov dword [rcx + 0x10], eax
mov rcx, qword [0x1400de330]
test rcx, rcx
jne 0x1400882c4
call fcn.14005aab0
mov qword [0x1400de330], rax
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x1400de330]
test rcx, rcx
je 0x1400882a1
movdqa xmm0, xmmword [0x14009a360]
movdqu xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xor edx, edx
mov rcx, qword [0x1400de330]
call qword [sym.imp.USER32.dll_SetMenu]
mov edx, 0xfffffff0
mov r8d, 0x10000000
mov rcx, qword [0x1400de330]
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov edx, 0xffffffec
mov r8d, 0x80020
mov rcx, qword [0x1400de330]
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov edx, 5
mov rcx, qword [0x1400de330]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400de330]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov edx, 0xffffffec
mov rcx, qword [0x1400de330]
call qword [sym.imp.USER32.dll_GetWindowLongA]
or eax, 0x80020
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x1400de330]
call qword [sym.imp.USER32.dll_SetWindowLongA]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400360e0
nop
mov rcx, rax
call fcn.140067ad0
nop
cmp dword [rsp + 0x58], 0
je 0x1400883a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140036290
nop
mov rcx, rax
call fcn.140067ad0
nop
cmp dword [rsp + 0x58], 0
je 0x1400883c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140036170
nop
mov rcx, rax
call fcn.140067ad0
nop
cmp dword [rsp + 0x58], 0
je 0x1400883f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rcx, str.Caching_started
call fcn.140074420
mov rcx, qword [0x1400de4d8]
call fcn.140059a70
lea rcx, str.DirectX_initialized
call fcn.140074420
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140036200
nop
mov rcx, rax
call fcn.140067ad0
nop
cmp dword [rsp + 0x58], 0
je 0x14008843b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rcx, str.Menu_started
call fcn.140074420
mov eax, dword [0x140098e80]
mov dword [rsp + 0x50], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov esi, dword [rcx + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x1400884e6
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x1400884e6
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400884e1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400884c0
cmp r8d, 0x491e0a9c
je 0x1400884eb
test r9d, r9d
jne 0x1400884a0
mov rax, qword [rax]
jmp 0x140088470
mov ecx, dword [rsi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov r9d, dword [rcx + rdx*4]
add r9, r10
cmp r14d, 2
jl 0x14008857e
movdqa xmm3, xmmword [0x140095880]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14009a3d0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14009a3d0]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x14009a390]
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x14009a3b0]
movd xmm0, dword [rsp + 0x50]
xorps xmm3, xmm0
movd dword [rsp + 0x50], xmm3
jmp 0x1400885bf
lea r8, [rsp + 0x50]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x38
movzx eax, dil
sub al, cl
add al, 0x36
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 4
jl 0x140088590
lea rcx, [rsp + 0x50]
call r9
lea rdx, str._i__Cheat_loaded._Have_fun__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037180
lea rdx, str._i__Open_https:__ascent_menu.pages.dev_in_your_browser_to_configure_the_cheat_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140037180
call fcn.14005b260
mov qword [rsp + 0x50], 1
lea rcx, [rsp + 0x50]
call fcn.1400425e0
jmp 0x1400885f2
cmp eax, 0x191
je 0x1400886f6
mov rcx, r13
call sub.libcurl.dll_curl_easy_cleanup
nop
lea rcx, [rbp - 0x10]
call fcn.140005200
nop
lea rcx, [rbp + 0x10]
call fcn.140005200
nop
lea rcx, [rbp - 0x30]
call fcn.140005200
call sub.libcurl.dll_curl_global_cleanup
xor eax, eax
mov rcx, qword [rbp + 0x270]
xor rcx, rsp
call fcn.140088830
lea r11, [rsp + 0x390]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm7, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.140005300
int3
call fcn.140005300
int3
call fcn.140005300
nop
mov dword [rsp + 0x58], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.140005320
int3
call fcn.140005320
int3
call fcn.140005320
nop
lea rcx, str.Request_failed
call fcn.140074420
call fcn.140073a40
lea rcx, str.0__curl_easy_perform___failed
call fcn.14006af00
nop
lea rcx, [0x140090f40]
call fcn.14006af00
int3
lea rcx, str.Driver_not_found
call fcn.140074420
lea rcx, [0x140090f38]
call fcn.14006af00
nop
call fcn.140073a40
lea rcx, [0x140090f30]
call fcn.14006af00
int3