Function at 0x1400c74d0
Capabilities:
Accept command line arguments
Create thread

Disassembly:
push rbp
lea rbp, [rsp - 0x5e0]
sub rsp, 0x6e0
mov rax, qword [0x1400f7028]
xor rax, rsp
mov qword [rbp + 0x5b0], rax
lea rdx, str.Counter_Strike_2
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
je 0x1400c8983
lea rdx, [rsp + 0x70]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp dword [rsp + 0x70], 0
je 0x1400c8983
movups xmm0, xmmword [str.resource_gdrv.sys]
mov eax, dword [reloc.WS2_32.dll_WSAStartup]
xor r8d, r8d
movups xmm1, xmmword [0x1400ddc30]
mov dword [rbp + 0x118], eax
lea r9, [rsp + 0x44]
movzx eax, word [0x1400ddcc0]
mov dl, 1
movups xmmword [rbp + 0xf8], xmm0
lea ecx, [r8 + 0xa]
mov qword [rsp + 0x6c0], r15
movups xmm0, xmmword [str.resource_kaban_d.sys]
mov word [rbp + 0x160], ax
movups xmmword [rbp + 0x108], xmm1
movups xmm1, xmmword [0x1400ddca8]
movups xmmword [rbp + 0x138], xmm0
movsd xmm0, qword [0x1400ddcb8]
movsd qword [rbp + 0x158], xmm0
movups xmm0, xmmword [str.resource_MInput.sys]
movups xmmword [rbp + 0x148], xmm1
movups xmm1, xmmword [0x1400ddcd8]
movups xmmword [rbp + 0x168], xmm0
movsd xmm0, qword [0x1400ddce8]
movsd qword [rbp + 0x188], xmm0
movups xmmword [rbp + 0x178], xmm1
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
test eax, eax
js 0x1400c895e
xor r15d, r15d
lea r8, [rbp + 0x3a0]
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov edx, 0x208
lea rcx, [rbp + 0xf8]
call qword [sym.imp.ntdll.dll_RtlGetFullPathName_UEx]
test eax, eax
js 0x1400c895e
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x190]
mov edx, 0x208
lea rcx, [rbp + 0x138]
call qword [sym.imp.ntdll.dll_RtlGetFullPathName_UEx]
test eax, eax
js 0x1400c895e
lea rdx, [rbp + 0x190]
lea rcx, [0x140131900]
call fcn.1400c6f60
test eax, eax
js 0x1400c895e
lea rdx, [rbp + 0x3a0]
lea rcx, [0x140131b10]
call fcn.1400c6f60
test eax, eax
js 0x1400c895e
call fcn.1400c7190
lea r9, [rsp + 0x44]
xor r8d, r8d
mov dl, 1
lea ecx, [r15 + 0xa]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
test eax, eax
js 0x1400c895e
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x190]
mov edx, 0x208
lea rcx, [rbp + 0xf8]
call qword [sym.imp.ntdll.dll_RtlGetFullPathName_UEx]
test eax, eax
js 0x1400c895e
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x3a0]
mov edx, 0x208
lea rcx, [rbp + 0x168]
call qword [sym.imp.ntdll.dll_RtlGetFullPathName_UEx]
test eax, eax
js 0x1400c895e
lea rdx, [rbp + 0x3a0]
lea rcx, [0x140131900]
call fcn.1400c6f60
test eax, eax
js 0x1400c895e
lea rdx, [rbp + 0x190]
lea rcx, [0x140131b10]
call fcn.1400c6f60
test eax, eax
js 0x1400c895e
mov qword [rsp + 0x6f0], rbx
mov qword [rsp + 0x6f8], rsi
mov qword [rsp + 0x700], rdi
call fcn.1400c7190
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x3bc0
call fcn.1400c9508
xor edx, edx
mov r8d, 0x3bc0
mov rcx, rax
mov rbx, rax
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call fcn.140010fe0
mov rbx, qword [0x14012d138]
mov qword [0x14012d138], rax
test rbx, rbx
je 0x1400c77bb
lea rcx, [rbx + 0x3ba0]
call fcn.14000a380
lea rcx, [rbx + 0x3b88]
call fcn.14000a830
lea rcx, [rbx + 0x3b60]
call fcn.140008db0
lea rcx, [rbx + 0x2b0]
call fcn.14000a380
lea rcx, [rbx + 0x210]
call fcn.14000a380
lea rcx, [rbx + 0x18]
call fcn.14000a3f0
mov edx, 0x3bc0
mov rcx, rbx
call fcn.1400c9500
mov ecx, 0x38
call fcn.1400c9508
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r15b
mov qword [rax + 0x20], r15
mov qword [rax + 0x28], r15
mov qword [rax + 0x30], r15
mov rbx, qword [0x14012d430]
mov qword [0x14012d430], rax
test rbx, rbx
je 0x1400c781e
lea rcx, [rbx + 0x20]
call fcn.14000a770
mov rcx, rbx
call fcn.14000a3f0
mov edx, 0x38
mov rcx, rbx
call fcn.1400c9500
mov rax, qword [0x14012d430]
mov rcx, rax
call fcn.14001b1e0
mov rcx, qword [0x14012d138]
xor edx, edx
call fcn.140011800
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xor r9d, r9d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rcx, str..kaban_dev
mov edx, 0xc0000000
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 6]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
xor r9d, r9d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
lea rcx, str..MInput
mov edx, 0xc0000000
mov dword [rsp + 0x20], 3
mov rdi, rax
lea r8d, [r9 + 6]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [rsp + 0x40], r15d
mov rsi, rax
cmp rdi, 0xffffffffffffffff
je 0x1400c8939
mov qword [rsp + 0x38], r15
lea rax, [rbp - 0x20]
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x40]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x28], 4
mov r9d, 4
mov qword [rsp + 0x20], rax
mov edx, 0x228d40
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, dword [rbp - 0x20]
test eax, eax
cmovne ecx, dword [rsp + 0x40]
test ecx, ecx
je 0x1400c8939
mov ecx, 8
call fcn.1400c9508
lea rcx, [0x140055f20]
mov r9, rax
lea r8, [0x1400c89c0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0xb8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x1400c8926
xor eax, eax
mov qword [rsp + 0x38], r15
mov dword [rbp - 0x20], eax
xor r9d, r9d
mov word [rbp - 0x1c], ax
xor r8d, r8d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x6d8], r12
mov qword [rsp + 0x30], rax
mov edx, 0xbe9860e0
lea rax, [rbp - 0x20]
mov qword [rsp + 0x6d0], r13
mov dword [rsp + 0x28], 6
mov rcx, rsi
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x6c8], r14
mov dword [rsp + 0x40], r15d
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp dword [rbp + 0xb8], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0xb8], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0xb0]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
lea rdx, str.NVIDIA_GeForce_Overlay
lea rcx, str.CEF_OSC_WIDGET
movdqa xmmword [rbp + 0xb0], xmm0
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [0x140131820], rax
mov r14, 0xffffffffffffffff
test rax, rax
je 0x1400c7bda
lea edx, [r14 - 0x13]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [0x140131820]
lea edx, [r14 - 0x13]
or eax, 0x20
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongW]
movdqa xmm0, xmmword [0x1400de6f0]
lea rdx, [rsp + 0x50]
mov rcx, qword [0x140131820]
movdqu xmmword [rsp + 0x50], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140131820]
lea r9d, [r14 + 3]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
test eax, eax
je 0x1400c7bda
mov rcx, qword [0x140131820]
xor r9d, r9d
mov dword [rsp + 0x30], 3
xor r8d, r8d
mov dword [rsp + 0x28], r15d
mov rdx, r14
mov dword [rsp + 0x20], r15d
call qword [sym.imp.USER32.dll_SetWindowPos]
test eax, eax
je 0x1400c7bda
mov rcx, qword [0x140131820]
lea edx, [r14 + 6]
call qword [sym.imp.USER32.dll_ShowWindow]
test eax, eax
je 0x1400c7bda
mov rcx, qword [0x140131820]
lea rdx, [0x140131828]
call qword [sym.imp.USER32.dll_GetClientRect]
test eax, eax
je 0x1400c7bda
mov ecx, dword [0x140131830]
lea r9, [0x140131840]
sub ecx, dword [0x140131828]
lea rdx, [0x1400daa50]
mov eax, dword [0x140131834]
xor r8d, r8d
sub eax, dword [0x14013182c]
mov dword [0x140131838], ecx
xor ecx, ecx
mov dword [0x14013183c], eax
call qword [sym.imp.d2d1.dll_Ordinal_1]
test eax, eax
js 0x1400c7bda
lea r8, [0x140131848]
xor ecx, ecx
lea rdx, [0x1400daa60]
call qword [sym.imp.DWrite.dll_DWriteCreateFactory]
test eax, eax
js 0x1400c7bda
mov rax, qword [0x14012d138]
lea r9, [0x140131850]
mov rcx, qword [0x140131840]
cmp byte [rax + 0x3b80], r15b
mov rax, qword [0x140131820]
mov qword [rsp + 0x78], rax
mov eax, dword [0x140131838]
mov dword [rbp - 0x80], eax
mov eax, dword [0x14013183c]
mov dword [rbp - 0x7c], eax
movups xmm0, xmmword [rsp + 0x78]
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], 1
jne 0x1400c7c3d
movups xmmword [rsp + 0x50], xmm0
mov dword [rbp - 0x78], 2
lea r8, [rsp + 0x50]
movsd xmm1, qword [rbp - 0x78]
lea rdx, [rbp - 0x40]
movups xmm0, xmmword [rsp + 0x78]
mov dword [rbp - 0x28], r15d
movsd qword [rsp + 0x60], xmm1
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x78], r15
movsd xmm1, qword [rbp - 0x78]
movsd qword [rbp - 0x30], xmm1
mov rax, qword [rcx]
call qword [rax + 0x70]
test eax, eax
jns 0x1400c7c80
mov r15d, r14d
cmp dword [rbp + 0xb8], 0
jne 0x1400c8831
mov r14, qword [rsp + 0x6c8]
mov eax, r15d
mov r13, qword [rsp + 0x6d0]
mov r12, qword [rsp + 0x6d8]
mov rdi, qword [rsp + 0x700]
mov rsi, qword [rsp + 0x6f8]
mov rbx, qword [rsp + 0x6f0]
mov r15, qword [rsp + 0x6c0]
mov rcx, qword [rbp + 0x5b0]
xor rcx, rsp
call fcn.1400c94e0
add rsp, 0x6e0
pop rbp
ret
movups xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x78], r15d
lea r8, [rbp - 0x20]
movsd xmm1, qword [rbp - 0x78]
lea rdx, [rbp - 0x68]
movups xmm0, xmmword [rsp + 0x78]
mov dword [rbp - 0x50], r15d
movsd qword [rbp - 0x10], xmm1
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x78], r15
movsd xmm1, qword [rbp - 0x78]
movsd qword [rbp - 0x58], xmm1
mov rax, qword [rcx]
call qword [rax + 0x70]
test eax, eax
js 0x1400c7bda
lea rcx, str.resource_weaponfont.ttf
call qword [sym.imp.GDI32.dll_AddFontResourceW]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___p___argc]
cmp dword [rax], 1
jle 0x1400c801f
movdqa xmm0, xmmword [0x1400de6d0]
mov ecx, 0x24
movdqa xmm1, xmmword [0x1400de6e0]
movdqu xmmword [rbp - 0x68], xmm0
mov dword [rbp - 0x48], 0xffffff88
movdqu xmmword [rbp - 0x58], xmm1
call fcn.1400c9508
mov r8d, 0x24
mov qword [rsp + 0x78], rax
lea rdx, [rbp - 0x68]
mov rcx, rax
lea rbx, [rax + 0x24]
mov qword [rbp - 0x78], rbx
call sub.ntdll.dll_memmove
mov qword [rbp - 0x80], rbx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___p___argc]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rbx - 4]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0x50], rax
mov rbx, rax
test rax, rax
je 0x1400c7fcc
mov dword [rsp + 0x40], 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___p___argc]
cmp dword [rax], 1
jle 0x1400c7fcc
add rbx, 8
mov qword [rbp - 0x20], rbx
nop word [rax + rax]
mov rdx, qword [rbx]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], r15
mov r8, r14
mov qword [rbp + 0xd8], r15
nop
inc r8
cmp word [rdx + r8*2], r15w
jne 0x1400c7d60
lea rcx, [rbp + 0xc0]
call fcn.14001d550
cmp qword [rbp + 0xd8], 8
lea rcx, [rbp + 0xc0]
mov rax, qword [rbp + 0xd0]
jb 0x1400c7d9b
mov r12, qword [rbp + 0xc0]
lea rbx, [r12 + rax*2]
jmp 0x1400c7da6
lea rbx, [rcx + rax*2]
lea r12, [rbp + 0xc0]
mov qword [rbp - 0x58], r15
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
cmp r12, rbx
jne 0x1400c7dcc
mov r12, r15
mov r13d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x50], r13
mov byte [rbp - 0x68], r12b
jmp 0x1400c7eca
mov rax, rbx
movabs rcx, 0x7fffffffffffffff
sub rax, r12
mov r14d, reloc.WS2_32.dll_ntohs
sar rax, 1
mov r13, r15
mov qword [rbp - 0x50], r14
cmp rax, rcx
ja 0x1400c89a8
cmp rax, 0x10
jb 0x1400c7e80
mov r14, rax
or r14, 0xf
cmp r14, rcx
jbe 0x1400c7e10
mov r14, rcx
jmp 0x1400c7e1d
cmp r14, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb r14, rax
mov rcx, r14
mov rax, 0xffffffffffffffff
add rcx, 1
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x1400c7e67
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400c89ae
mov rcx, rax
call fcn.1400c9508
mov rcx, rax
test rax, rax
je 0x1400c7fc0
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400c7e76
test rcx, rcx
je 0x1400c7e73
call fcn.1400c9508
jmp 0x1400c7e76
mov rax, r15
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x50], r14
nop
movzx eax, byte [r12]
lea rcx, [rbp - 0x68]
cmp r14, 0x10
cmovae rcx, qword [rbp - 0x68]
add r12, 2
mov byte [rcx + r13], al
mov r13, qword [rbp - 0x58]
inc r13
mov qword [rbp - 0x58], r13
cmp r12, rbx
je 0x1400c7eb0
mov r14, qword [rbp - 0x50]
jmp 0x1400c7e80
cmp qword [rbp - 0x50], 0x10
lea rax, [rbp - 0x68]
cmovae rax, qword [rbp - 0x68]
mov byte [rax + r13], r15b
mov r13, qword [rbp - 0x50]
mov r12, qword [rbp - 0x58]
mov r14, qword [rbp - 0x80]
mov rcx, r15
mov rbx, qword [rsp + 0x78]
xorps xmm0, xmm0
mov qword [rbp - 0x30], rcx
mov edx, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x28], rdx
movups xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x40], cl
cmp rbx, r14
je 0x1400c7f37
mov r9d, dword [rbx]
neg r9b
cmp rcx, rdx
jae 0x1400c7f1d
lea rax, [rcx + 1]
cmp rdx, 0x10
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x40]
cmovae rax, qword [rbp - 0x40]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], r15b
jmp 0x1400c7f26
lea rcx, [rbp - 0x40]
call fcn.14000b790
mov rdx, qword [rbp - 0x28]
add rbx, 4
mov rcx, qword [rbp - 0x30]
cmp rbx, r14
jne 0x1400c7ef2
cmp rdx, 0x10
lea rax, [rbp - 0x40]
lea r9, [rbp - 0x68]
cmovae rax, qword [rbp - 0x40]
cmp r13, 0x10
cmovae r9, qword [rbp - 0x68]
cmp r12, rcx
jne 0x1400c7f72
mov r8, r12
mov rdx, rax
mov rcx, r9
call sub.ntdll.dll_memcmp
test eax, eax
jne 0x1400c7f72
mov rax, qword [0x14012d138]
mov byte [rax], r15b
lea rcx, [rbp - 0x40]
call fcn.14000a3f0
lea rcx, [rbp - 0x68]
call fcn.14000a3f0
lea rcx, [rbp + 0xc0]
call fcn.14000a380
mov r12d, dword [rsp + 0x40]
mov rbx, qword [rbp - 0x20]
inc r12d
add rbx, 8
mov dword [rsp + 0x40], r12d
mov qword [rbp - 0x20], rbx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___p___argc]
cmp r12d, dword [rax]
jge 0x1400c7fc7
mov r14, 0xffffffffffffffff
jmp 0x1400c7d40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, qword [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400c801f
mov rax, qword [rbp - 0x78]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c801a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400c801a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c9500
mov rax, qword [0x14012d138]
cmp byte [rax], r15b
je 0x1400c80ce
mov ecx, 8
call fcn.1400c9508
lea rcx, [0x140032130]
mov r9, rax
lea r8, [0x1400c89c0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1400c8838
cmp dword [rsp + 0x58], r15d
jne 0x1400c8087
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rsp + 0x58], eax
jne 0x1400c809f
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rsp + 0x50]
lea rcx, [rbp - 0x20]
xor edx, edx
movdqa xmmword [rbp - 0x20], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x1400c80c5
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x50], xmm0
mov ecx, 8
call fcn.1400c9508
lea rcx, [0x14001e840]
mov r9, rax
lea r8, [0x1400c89c0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0xa8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xa0], rax
test rax, rax
je 0x1400c88ef
mov ecx, 8
call fcn.1400c9508
lea rcx, [0x140055f70]
mov r9, rax
lea r8, [0x1400c89c0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x98]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x90], rax
test rax, rax
je 0x1400c88dc
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400c9508
lea rcx, [0x140046f60]
mov r9, rax
lea r8, [0x1400c89f0]
xor edx, edx
mov qword [rax], rdi
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x80], rax
test rax, rax
je 0x1400c88c9
mov ecx, 0x20
call fcn.1400c9508
mov ecx, dword [rsp + 0x70]
lea r8, [0x1400c8a20]
mov r9, rax
xor edx, edx
mov dword [rax], ecx
lea rcx, [0x140007ae0]
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], rcx
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x1400c88b9
mov ecx, 0x20
call fcn.1400c9508
mov ecx, dword [rsp + 0x70]
lea r8, [0x1400c8a20]
mov r9, rax
xor edx, edx
mov dword [rax], ecx
lea rcx, [0x1400554f0]
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], rcx
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x1400c88a9
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400c9508
lea rcx, [0x140045900]
mov r9, rax
lea r8, [0x1400c89f0]
xor edx, edx
mov qword [rax], rdi
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x1400c8899
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400c9508
lea rcx, [0x140050e90]
mov r9, rax
lea r8, [0x1400c89f0]
xor edx, edx
mov qword [rax], rdi
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x1400c8889
mov ecx, 8
call fcn.1400c9508
lea rdx, [rbp + 0x38]
mov r9, rax
mov qword [rsp + 0x28], rdx
lea rcx, [0x140051a80]
lea r8, [0x1400c8a60]
mov dword [rsp + 0x20], r15d
mov qword [rax], rcx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x1400c8879
mov ecx, 8
call fcn.1400c9508
lea rdx, [0x14001f6e0]
mov r9, rax
lea r8, [0x1400c8a60]
xor ecx, ecx
mov qword [rax], rdx
lea rdx, [rbp + 0x28]
mov qword [rsp + 0x28], rdx
xor edx, edx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x1400c8869
mov ecx, 0x20
call fcn.1400c9508
mov ecx, dword [rsp + 0x70]
lea rdx, [0x1400211c0]
mov r9, rax
lea r8, [0x1400c8a20]
mov dword [rax], ecx
xor ecx, ecx
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], rdx
lea rdx, [rbp + 0x18]
mov qword [rsp + 0x28], rdx
xor edx, edx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x1400c8859
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400c9508
lea rcx, [0x140045660]
mov r9, rax
lea r8, [0x1400c89f0]
xor edx, edx
mov qword [rax], rdi
mov qword [rax + 8], rcx
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x1400c8849
cmp dword [rbp + 0x68], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x68], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0x60]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x60], xmm0
cmp dword [rbp + 0x78], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x78], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0x70]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x70], xmm0
cmp dword [rbp + 0x88], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x88], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0x80]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x80], xmm0
cmp dword [rbp + 0x98], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x98], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0x90]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x90], xmm0
cmp dword [rbp + 0x58], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x58], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0x50]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x50], xmm0
cmp dword [rbp + 0x48], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x48], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0x40]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x40], xmm0
cmp dword [rbp + 0x38], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x38], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0x30]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
cmp dword [rbp + 0x28], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x28], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0x20]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
cmp dword [rbp + 0x18], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0x18], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0x10]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
cmp dword [rbp + 8], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 8], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
cmp dword [rbp + 0xa8], r15d
je 0x1400c891a
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp + 0xa8], eax
je 0x1400c890e
movaps xmm0, xmmword [rbp + 0xa0]
lea rcx, [rsp + 0x50]
xor edx, edx
movdqa xmmword [rsp + 0x50], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x1400c8902
xorps xmm0, xmm0
mov rcx, rdi
movdqa xmmword [rbp + 0xa0], xmm0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
movups xmm0, xmmword [str.kaban_d.sys]
mov eax, dword [0x1400ddd18]
lea rcx, [rbp + 0x120]
movups xmm1, xmmword [str.MInput.sys]
mov dword [rbp + 0xf0], eax
movzx eax, word [0x1400ddd1c]
movups xmmword [rbp + 0x120], xmm0
mov word [rbp + 0xf4], ax
movsd xmm0, qword [0x1400ddd00]
movsd qword [rbp + 0x130], xmm0
movups xmmword [rbp + 0xe0], xmm1
call fcn.1400c73b0
lea rcx, [rbp + 0xe0]
call fcn.1400c73b0
mov rcx, qword [0x140131850]
mov rax, qword [rcx]
call qword [rax + 0x180]
mov rcx, qword [0x140131850]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x178]
mov rcx, qword [0x140131850]
xor r8d, r8d
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x188]
mov rcx, qword [0x140131840]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140131848]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140131850]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rdi, qword [0x1401318a8]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x1400c87e2
nop word [rax + rax]
mov rcx, qword [rbx + 0x18]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x1400c87d0
cmp dword [rbp + 8], r15d
jne 0x1400c8831
cmp dword [rbp + 0x18], r15d
jne 0x1400c8831
cmp dword [rbp + 0x28], r15d
jne 0x1400c8831
cmp dword [rbp + 0x38], r15d
jne 0x1400c8831
cmp dword [rbp + 0x48], r15d
jne 0x1400c8831
cmp dword [rbp + 0x58], r15d
jne 0x1400c8831
cmp dword [rbp + 0x68], r15d
jne 0x1400c8831
cmp dword [rbp + 0x78], r15d
jne 0x1400c8831
cmp dword [rbp + 0x88], r15d
jne 0x1400c8831
cmp dword [rbp + 0x98], r15d
jne 0x1400c8831
cmp dword [rbp + 0xa8], r15d
je 0x1400c7bdd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 6
mov dword [rsp + 0x58], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 8], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x18], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x28], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x38], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x48], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x58], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x68], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x78], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x88], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x98], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0xa8], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0xb8], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xor r9d, r9d
lea r8, [0x1400d6848]
lea rdx, str.Driver_initialization_failed::_RESTART_YOUR_PC
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rax, 0xffffffffffffffff
jmp 0x1400c7c05
xor r9d, r9d
lea r8, [0x1400d6848]
lea rdx, str.Driver_load_failed::_RESTART_YOUR_PC
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rax, 0xffffffffffffffff
jmp 0x1400c7c1d
xor r9d, r9d
lea r8, [0x1400d6848]
lea rdx, str.Start_CS2_first_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rax, 0xffffffffffffffff
jmp 0x1400c7c25
call fcn.1400031e0
int3
call fcn.140003140
int3