Function at 0x140046c30
Capabilities:
Delete file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c8]
sub rsp, 0x2c8
movaps xmmword [rsp + 0x2b0], xmm6
mov rax, qword [0x1400ff040]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov qword [rbp - 0x28], r9
mov rax, r8
mov qword [rbp - 0x30], rax
mov r14, rdx
mov rbx, rcx
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], rax
mov qword [rbp], r9
call fcn.14003dc20
lea rcx, [rax + 0x10]
cmp qword [rax + 0x28], 0xf
jbe 0x140046c96
mov rcx, qword [rax + 0x10]
mov qword [rax + 0x20], 0
mov byte [rcx], 0
call fcn.14003dc20
mov byte [rax + 8], 1
call fcn.14003dc20
mov byte [rax + 9], 0
movzx esi, byte [rbx + 7]
movzx r15d, byte [rbx + 6]
movzx r12d, byte [rbx + 5]
movzx r13d, byte [rbx + 4]
movzx eax, byte [rbx + 3]
mov dword [rbp - 0x20], eax
movzx eax, byte [rbx + 2]
mov dword [rbp - 0x1c], eax
movzx eax, byte [rbx + 1]
mov dword [rbp - 0x18], eax
call fcn.14003dc20
mov eax, dword [rax + 0xf0]
mov dword [rsp + 0x70], eax
xor edi, edi
cmp byte [rbx], dil
setne dil
mov rbx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x140046d00
mov rbx, qword [r14]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xor eax, eax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
lea r8d, [rax + 0x20]
lea rdx, str._s__d__d__d__d__d__d__d__d__d__d
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
mov dword [rsp + 0x60], esi
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x50], r12d
mov dword [rsp + 0x48], r13d
mov eax, dword [rbp - 0x20]
mov dword [rsp + 0x40], eax
mov eax, dword [rbp - 0x1c]
mov dword [rsp + 0x38], eax
mov eax, dword [rbp - 0x18]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x28], eax
xor r12d, r12d
mov dword [rsp + 0x20], r12d
mov r9d, edi
mov r8, rbx
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x70]
call fcn.14004a0c0
nop
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rcx, qword [rbp + 0x70]
call fcn.1400059b0
lea rcx, [rbp + 0x50]
call fcn.140046790
nop
cmp qword [rbp + 0x60], r12
je 0x140047e45
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rcx, qword [rbp + 0x50]
xor edx, edx
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access_s]
test eax, eax
jne 0x140047e45
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova rdx, qword [rbp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140046df0
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rdx, qword [rbp + 0x50]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140046e21
mov r8, rbx
lea rcx, [rbp - 0x50]
call fcn.14003b1b0
nop
mov r9b, 1
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.1400388b0
test eax, eax
jne 0x140046f13
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, 0x1770
mov qword [rbp + 0x10], rax
lea rax, str.asdasd
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x20], r12d
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x140046ea3
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x140046ead
lea r8, [rsp + 0x70]
call fcn.140043ba0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 0xf
cmova rcx, qword [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
call fcn.14003dc20
cmp qword [rax + 0x28], 0x1b
jb 0x140046f02
mov rbx, qword [rax + 0x10]
mov qword [rax + 0x20], 0x1b
mov r8d, 0x1b
lea rdx, str.Failed_to_load_loader_addon
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1b], 0
jmp 0x140047ef6
lea r9, str.Failed_to_load_loader_addon
mov edx, 0x1b
jmp 0x140047eed
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 7
lea rdx, str.Inj.log
lea rcx, [rbp - 0x50]
call fcn.14003b1b0
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova rcx, qword [rbp - 0x50]
xor edx, edx
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__access_s]
mov ebx, eax
lea rcx, [rbp - 0x50]
call fcn.14003ab00
test ebx, ebx
je 0x140046fbc
call fcn.14003dc20
mov rcx, qword [rax + 0x28]
cmp rcx, 0xe
jb 0x140046fab
lea rbx, [rax + 0x10]
cmp rcx, 0xf
jbe 0x140046f85
mov rbx, qword [rax + 0x10]
mov qword [rax + 0x20], 0xe
mov r8d, 0xe
lea rdx, str.Inj_File_Error
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xe], 0
jmp 0x140047ef6
lea r9, str.Inj_File_Error
mov edx, 0xe
jmp 0x140047eed
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x90]
call sub.VCRUNTIME140.dll_memset
lea rdx, str.Inj.log
lea rcx, [rbp + 0x90]
call fcn.140048040
nop
mov qword [rsp + 0x70], r12
mov word [rsp + 0x78], 1
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
mov rcx, qword [rbp + rcx + 0xd8]
mov qword [rbp + 0x10], rcx
test rcx, rcx
sete byte [rbp + 0x18]
mov byte [rbp + 0x19], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], r12
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0x10], xmm0
movaps xmm6, xmmword [rsp + 0x70]
test rcx, rcx
je 0x140047060
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x14004704f
mov byte [rbp + 0x19], al
mov rax, qword [rbp + 0x10]
mov byte [rbp + 0x18], 1
movaps xmm0, xmmword [rbp + 0x10]
jmp 0x140047065
mov rax, r12
mov qword [rbp + 0x10], rax
mov byte [rbp + 0x18], 1
movaps xmm0, xmmword [rbp + 0x10]
jmp 0x140047065
movq rax, xmm0
test rax, rax
movq rax, xmm6
jne 0x1400471e6
test rax, rax
je 0x1400471ef
movdqa xmmword [rbp + 0x10], xmm6
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rbp + 0x10]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x30]
call fcn.140048500
nop
lea rcx, [rbp + 0xa0]
call fcn.14003f090
test rax, rax
jne 0x1400470cd
mov rax, qword [rbp + 0x90]
movsxd rdx, dword [rax + 4]
lea rcx, [rbp + 0x90]
add rcx, rdx
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rcx, str.Inj.log
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rcx, qword [rbp + 0x30]
call fcn.1400059b0
lea rax, [rbp - 0x50]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
mov r8d, 7
lea rdx, str.success
lea rcx, [rbp - 0x50]
call fcn.14003b1b0
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.14003a510
mov rbx, rax
lea rdx, [rbp - 0x50]
mov rcx, rax
call fcn.14003a2b0
mov rdi, rax
mov rcx, rbx
call fcn.14003ab00
lea rcx, [rbp - 0x50]
call fcn.14003ab00
cmp rdi, 0xffffffffffffffff
jne 0x140047f7b
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 0x10
lea rdx, str.injection_failed
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
mov rdi, qword [rbp + 0x40]
lea r15, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova r15, qword [rbp + 0x30]
movabs rsi, 0x7fffffffffffffff
cmp rdi, rsi
ja 0x140047fba
movabs rax, 0x8000000000000000
mov r13d, 0x16
cmp rdi, 0xf
ja 0x140047204
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x50], xmm0
jmp 0x14004728a
test rax, rax
je 0x14004707c
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
jmp 0x14004709a
mov rbx, rdi
or rbx, 0xf
cmp rbx, rsi
jbe 0x140047235
mov rbx, rsi
add rax, 0x27
mov rcx, rax
call fcn.140086254
mov rcx, rax
test rax, rax
je 0x140047258
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14004726e
cmp rbx, r13
cmovb rbx, r13
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14004725f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140047f69
jmp 0x140047217
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14004726b
call fcn.140086254
jmp 0x14004726e
mov rax, r12
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.14003a2b0
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.14003ab00
lea rcx, [rbp - 0x70]
call fcn.14003ab00
cmp rbx, 0xffffffffffffffff
je 0x1400473db
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
lea rdi, str.Injection_failed__See_guides.
add rax, 0x1770
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rdi
mov dword [rbp + 0x20], 1
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x14004730d
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x140047317
lea r8, [rsp + 0x70]
call fcn.140043ba0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14003dc20
cmp qword [rax + 0x28], 0x1d
jb 0x140047351
mov rbx, qword [rax + 0x10]
mov qword [rax + 0x20], 0x1d
mov r8d, 0x1d
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1d], 0
jmp 0x140047362
mov edx, 0x1d
mov r9, rdi
lea rcx, [rax + 0x10]
call fcn.14003b740
call fcn.14003dc20
mov byte [rax + 8], 0
call fcn.14003dc20
mov byte [rax + 9], 1
lea rcx, [rbp + 0x30]
call fcn.14003ab00
nop
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x90], rax
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x8c], edx
lea rcx, [rbp + 0xa0]
call fcn.14003ee70
lea rcx, [rbp + 0xa8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x140]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x140047f08
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 0xe
lea rdx, str.internal_error
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.14003a510
mov rbx, rax
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.14003a2b0
mov rdi, rax
mov rcx, rbx
call fcn.14003ab00
lea rcx, [rbp - 0x70]
call fcn.14003ab00
cmp rdi, 0xffffffffffffffff
je 0x140047451
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
lea rdi, str.Injection_error1__See_guides.
jmp 0x1400472c3
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 0xd
lea rdx, str.hwid_mismatch
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.14003a510
mov rbx, rax
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.14003a2b0
mov rdi, rax
mov rcx, rbx
call fcn.14003ab00
lea rcx, [rbp - 0x70]
call fcn.14003ab00
cmp rdi, 0xffffffffffffffff
je 0x140047561
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, 0x1770
mov qword [rbp + 0x10], rax
lea rdi, str.HWID_is_not_the_same_registered
mov qword [rbp + 0x18], rdi
mov dword [rbp + 0x20], 1
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x140047510
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x14004751a
lea r8, [rsp + 0x70]
call fcn.140043ba0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14003dc20
cmp qword [rax + 0x28], 0x1f
jb 0x140047557
mov rbx, qword [rax + 0x10]
mov qword [rax + 0x20], 0x1f
mov r8d, 0x1f
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1f], 0
jmp 0x140047362
mov edx, 0x1f
jmp 0x140047356
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 0xb
lea rdx, str.key_invalid
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
mov rdi, qword [rbp + 0x40]
lea r15, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova r15, qword [rbp + 0x30]
cmp rdi, rsi
ja 0x140047fc0
cmp rdi, 0xf
ja 0x1400475d8
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x50], xmm0
jmp 0x140047669
mov rbx, rdi
or rbx, 0xf
cmp rbx, rsi
jbe 0x140047613
mov rbx, rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140086254
mov rcx, rax
test rax, rax
je 0x140047637
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14004764d
cmp rbx, 0x16
cmovb rbx, r13
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14004763e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140047f6f
jmp 0x1400475f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14004764a
call fcn.140086254
jmp 0x14004764d
mov rax, r12
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.14003a2b0
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.14003ab00
lea rcx, [rbp - 0x70]
call fcn.14003ab00
cmp rbx, 0xffffffffffffffff
je 0x14004774a
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, 0x1770
mov qword [rbp + 0x10], rax
lea rdi, str.Invalid_Key
mov qword [rbp + 0x18], rdi
mov dword [rbp + 0x20], 1
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x1400476ec
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x1400476f6
lea r8, [rsp + 0x70]
call fcn.140043ba0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14003dc20
mov rcx, qword [rax + 0x28]
cmp rcx, 0xb
jb 0x140047740
lea rbx, [rax + 0x10]
cmp rcx, 0xf
jbe 0x14004771e
mov rbx, qword [rax + 0x10]
mov qword [rax + 0x20], 0xb
mov r8d, 0xb
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xb], 0
jmp 0x140047362
mov edx, 0xb
jmp 0x140047356
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 0xd
lea rdx, str.unknown_error
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.14003a510
mov rbx, rax
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.14003a2b0
mov rdi, rax
mov rcx, rbx
call fcn.14003ab00
lea rcx, [rbp - 0x70]
call fcn.14003ab00
cmp rdi, 0xffffffffffffffff
je 0x1400477c0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
lea rdi, str.Injection_error2__See_guides.
jmp 0x1400472c3
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 0x12
lea rdx, str.wrong_requirements
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.14003a510
mov rbx, rax
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.14003a2b0
mov rdi, rax
mov rcx, rbx
call fcn.14003ab00
lea rcx, [rbp - 0x70]
call fcn.14003ab00
cmp rdi, 0xffffffffffffffff
je 0x1400478d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, 0x1770
mov qword [rbp + 0x10], rax
lea rdi, str.Your_PC_doesnt_meet_the_minimum_requirements_
mov qword [rbp + 0x18], rdi
mov dword [rbp + 0x20], 1
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x14004787f
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x140047889
lea r8, [rsp + 0x70]
call fcn.140043ba0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14003dc20
cmp qword [rax + 0x28], 0x2e
jb 0x1400478c6
mov rbx, qword [rax + 0x10]
mov qword [rax + 0x20], 0x2e
mov r8d, 0x2e
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x2e], 0
jmp 0x140047362
mov edx, 0x2e
jmp 0x140047356
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 0x10
lea rdx, str.version_outdated
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.14003a510
mov rbx, rax
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.14003a2b0
mov rdi, rax
mov rcx, rbx
call fcn.14003ab00
lea rcx, [rbp - 0x70]
call fcn.14003ab00
cmp rdi, 0xffffffffffffffff
je 0x140047946
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
lea rdi, str.Injection_error3__See_guides.
jmp 0x1400472c3
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8, r13
lea rdx, str.process_must_be_closed
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
mov rbx, qword [rbp + 0x40]
lea rdi, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rdi, qword [rbp + 0x30]
cmp rbx, rsi
ja 0x140047f63
cmp rbx, 0xf
ja 0x1400479b9
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], 0xf
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x50], xmm0
jmp 0x140047a4a
mov rax, rbx
or rax, 0xf
cmp rax, rsi
jbe 0x1400479f1
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140086254
mov rcx, rax
test rax, rax
je 0x140047a18
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140047a2e
mov rsi, rax
cmp rax, 0x16
cmovb rsi, r13
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x140047a1f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140047f75
jmp 0x1400479d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140047a2b
call fcn.140086254
jmp 0x140047a2e
mov rax, r12
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rsi
lea r8, [rbx + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.14003a2b0
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.14003ab00
lea rcx, [rbp - 0x70]
call fcn.14003ab00
cmp rbx, 0xffffffffffffffff
je 0x140047b1e
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, 0x1770
mov qword [rbp + 0x10], rax
lea rdi, str.Close_game_to_inject_
mov qword [rbp + 0x18], rdi
mov dword [rbp + 0x20], 1
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x140047acd
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x140047ad7
lea r8, [rsp + 0x70]
call fcn.140043ba0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14003dc20
cmp qword [rax + 0x28], 0x15
jb 0x140047b14
mov rbx, qword [rax + 0x10]
mov qword [rax + 0x20], 0x15
mov r8d, 0x15
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x15], 0
jmp 0x140047362
mov edx, 0x15
jmp 0x140047356
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 0x14
lea rdx, str.process_must_be_open
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.14003a510
mov rbx, rax
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.14003a2b0
mov rdi, rax
mov rcx, rbx
call fcn.14003ab00
lea rcx, [rbp - 0x70]
call fcn.14003ab00
cmp rdi, 0xffffffffffffffff
je 0x140047c3b
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, 0x1770
mov qword [rbp + 0x10], rax
lea rdi, str.Run_as_admin_
mov qword [rbp + 0x18], rdi
mov dword [rbp + 0x20], 1
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x140047bdd
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x140047be7
lea r8, [rsp + 0x70]
call fcn.140043ba0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14003dc20
mov rcx, qword [rax + 0x28]
cmp rcx, 0xd
jb 0x140047c31
cmp rcx, 0xf
lea rbx, [rax + 0x10]
jbe 0x140047c0f
mov rbx, qword [rax + 0x10]
mov qword [rax + 0x20], 0xd
mov r8d, 0xd
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xd], 0
jmp 0x140047362
mov edx, 0xd
jmp 0x140047356
lea rax, [rbp - 0x70]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r12
mov r8d, 0x11
lea rdx, str.under_maintenance
lea rcx, [rbp - 0x70]
call fcn.14003b1b0
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.14003a510
mov rbx, rax
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.14003a2b0
mov rdi, rax
mov rcx, rbx
call fcn.14003ab00
lea rcx, [rbp - 0x70]
call fcn.14003ab00
cmp rdi, 0xffffffffffffffff
je 0x140047d4b
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, 0x1770
mov qword [rbp + 0x10], rax
lea rdi, str.Updating_game_in_prgoress_
mov qword [rbp + 0x18], rdi
mov dword [rbp + 0x20], 1
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x140047cfa
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x140047d04
lea r8, [rsp + 0x70]
call fcn.140043ba0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14003dc20
cmp qword [rax + 0x28], 0x1a
jb 0x140047d41
mov rbx, qword [rax + 0x10]
mov qword [rax + 0x20], 0x1a
mov r8d, 0x1a
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1a], 0
jmp 0x140047362
mov edx, 0x1a
jmp 0x140047356
cmp qword [rbp + 0x40], 0
je 0x140047dea
lea rbx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rbx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, 0x1770
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rbx
mov dword [rbp + 0x20], r12d
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x140047db1
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x140047dbb
lea r8, [rsp + 0x70]
call fcn.140043ba0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rbx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rbx, qword [rbp + 0x30]
call fcn.14003dc20
lea rcx, [rax + 0x10]
mov rdx, rbx
call fcn.14003a3b0
jmp 0x140047362
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, 0x1770
mov qword [rbp + 0x10], rax
lea rdi, str.Unknown_Error
mov qword [rbp + 0x18], rdi
mov dword [rbp + 0x20], r12d
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x140047bdd
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x140047be7
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
add rax, 0x1770
mov qword [rbp + 0x10], rax
lea rax, str.asdasd
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x20], r12d
movups xmm0, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x70], xmm0
movsd xmm1, qword [rbp + 0x20]
movsd qword [rbp - 0x80], xmm1
mov rdx, qword [0x14023c5d0]
cmp rdx, qword [0x14023c5d8]
je 0x140047e99
movups xmmword [rdx], xmm0
movsd qword [rdx + 0x10], xmm1
add qword [0x14023c5d0], 0x18
jmp 0x140047ea3
lea r8, [rsp + 0x70]
call fcn.140043ba0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14003dc20
cmp qword [rax + 0x28], 0x1f
jb 0x140047ee1
mov rbx, qword [rax + 0x10]
mov qword [rax + 0x20], 0x1f
mov r8d, 0x1f
lea rdx, str.Failed_to_download_loader_addon
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x1f], 0
jmp 0x140047ef6
lea r9, str.Failed_to_download_loader_addon
mov edx, 0x1f
lea rcx, [rax + 0x10]
call fcn.14003b740
call fcn.14003dc20
mov byte [rax + 8], 0
call fcn.14003dc20
mov byte [rax + 9], 1
lea rcx, [rbp + 0x50]
call fcn.14003ab00
nop
lea rcx, [rbp + 0x70]
call fcn.14003ab00
nop
mov rcx, r14
call fcn.14003ab00
nop
mov rcx, qword [rbp - 0x30]
call fcn.14003ab00
nop
mov rcx, qword [rbp - 0x28]
call fcn.14003ab00
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.140085d50
movaps xmm6, xmmword [rsp + 0x2b0]
add rsp, 0x2c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140037f20
nop
call fcn.1400305e0
nop
call fcn.1400305e0
nop
call fcn.1400305e0
nop
xor r8d, r8d
lea rdx, str.Cheat_injected_
lea rcx, [rsp + 0x70]
call fcn.14003f740
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x10], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x20], xmm1
lea rcx, [rbp + 0x10]
call fcn.14003f790
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14003dab0
nop
call fcn.140037f20
nop
call fcn.140037f20
int3