Function at 0x140065fc0
Capabilities:
Create process on windows
Create thread
Get common file path
Identify system language via api

Disassembly:
push rbp
push rbx
push rsi
push r15
lea rbp, [rsp - 0xe98]
sub rsp, 0xf98
mov rax, qword [0x140198190]
xor rax, rsp
mov qword [rbp + 0xe10], rax
xor esi, esi
lea r8, [0x140055800]
mov qword [rsp + 0x28], rsi
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], esi
xor ecx, ecx
mov dword [rsp + 0x64], esi
mov r15d, esi
call fcn.140122c38
mov ebx, esi
mov qword [rbp - 0x70], rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp - 0x70]
lea edx, [rsi + 8]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140066056
mov rcx, qword [rbp - 0x70]
lea rax, [rbp - 0x68]
lea r9d, [rsi + 4]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x78]
mov dword [rbp - 0x68], 4
lea edx, [rsi + 0x14]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne ebx, dword [rbp - 0x78]
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x140066065
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0xfd0], r13
test ebx, ebx
je 0x140069c21
xorps xmm0, xmm0
mov qword [rsp + 0x28], rsi
xor r9d, r9d
mov qword [rsp + 0xfc0], rdi
lea r8, [0x1400563a0]
mov dword [rsp + 0x20], esi
xor edx, edx
xor ecx, ecx
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
call fcn.140122c38
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
xor ecx, ecx
mov qword [rbp + 0xd8], rax
mov rdi, rax
call fcn.1401216d8
mov rcx, rax
call fcn.1401214c4
mov r13d, 1
mov qword [0x14019ec00], rsi
mov r8d, 0x104
mov dword [0x14019ec28], r13d
lea rdx, [rbp + 0x9f0]
mov dword [0x14019ec18], r13d
xor ecx, ecx
mov dword [0x14019ec2c], r13d
mov dword [0x14019ec3c], r13d
mov qword [0x14019ec0c], rsi
mov dword [0x14019ec14], esi
mov qword [0x14019ec1c], rsi
mov dword [0x14019ec24], esi
mov qword [0x14019ec34], rsi
mov dword [0x14019ec08], esi
mov dword [0x14019ec30], 0x50
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rbp + 0x9f0]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
cmp word [rax + rcx*2 + 2], si
lea rcx, [rcx + 1]
jne 0x140066160
xorps xmm0, xmm0
mov word [rax + rcx*2 - 8], si
movups xmmword [rbp + 0x690], xmm0
mov qword [rbp + 0x6a0], rsi
mov r8, 0xffffffffffffffff
mov qword [rbp + 0x6a8], rsi
nop
inc r8
cmp word [rax + r8*2], si
jne 0x140066190
mov rdx, rax
lea rcx, [rbp + 0x690]
call fcn.1400099b0
lea rax, [0x140053c40]
mov dword [rbp + 0xe0], 0x50
xor ecx, ecx
mov qword [rbp + 0xe8], rax
mov dword [rbp + 0xe4], 0x40
mov qword [rbp + 0xf0], rsi
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
xorps xmm0, xmm0
mov qword [rbp + 0x128], rsi
mov qword [rbp + 0xf8], rax
lea rcx, [rbp + 0xe0]
lea rax, [0x14017a5d8]
movdqu xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
mov qword [rbp + 0x120], rax
movdqu xmmword [rbp + 0x110], xmm1
call qword [sym.imp.USER32.dll_RegisterClassExW]
call fcn.140121498
mov ebx, eax
mov eax, 0xea0ea0eb
imul ebx
add edx, ebx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x8c
sub ebx, ecx
add ebx, 0x15e
call fcn.140121498
mov r8d, eax
mov qword [rsp + 0x58], rsi
mov eax, 0xea0ea0eb
mov r9d, 0xcf0000
imul r8d
mov rax, qword [rbp + 0xf8]
add edx, r8d
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
sar edx, 7
mov ecx, edx
mov qword [rsp + 0x40], rsi
shr ecx, 0x1f
add edx, ecx
mov dword [rsp + 0x38], ebx
imul ecx, edx, 0x8c
mov rdx, qword [rbp + 0x120]
sub r8d, ecx
xor ecx, ecx
add r8d, 0x2ee
mov dword [rsp + 0x30], r8d
lea r8, str.Default_IME
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, qword [rdi]
mov r8d, r13d
mov r9, rax
mov qword [0x14019e8c0], rax
xor edx, edx
mov r10, qword [rcx + 0x80]
lea rcx, [0x14019ebf0]
mov qword [rsp + 0x30], rcx
lea rcx, [0x14019ec00]
mov qword [rsp + 0x28], rcx
mov rcx, rdi
mov dword [rsp + 0x20], 0x40
call r10
test eax, eax
jns 0x14006645d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.WS2_32.dll_recv]
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0x120]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, dword [0x140177d80]
mov r9d, reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.directxInstall]
mov rbx, qword [0x14019eb78]
mov dword [rbp - 0x58], eax
movzx eax, word [0x140177d84]
mov word [rbp - 0x54], ax
mov word [rbp - 0x52], si
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohl
mov qword [rbp - 0x48], r9
movsd qword [rbp - 0x60], xmm0
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
cmp eax, 0x419
je 0x14006638e
cmp eax, 0x422
je 0x14006638e
mov ecx, 0x43f
cmp ax, cx
je 0x14006638e
lea rcx, [rbx + 0x10]
lea rdx, [rbp + 0x770]
jmp 0x140066395
lea rdx, [rbp + 0x60]
mov rcx, rbx
lea r8, [rbp - 0x60]
call fcn.140053590
lea rcx, [rbp + 0x790]
mov rdx, qword [rax]
add rdx, 0x40
call fcn.140007f90
lea rcx, [rbp - 0x60]
call fcn.140008ae0
lea rcx, [rbp + 0x790]
call fcn.14006e4b0
xor r9d, r9d
mov dword [rsp + 0x28], r13d
lea r8, str.https:__www.microsoft.com_download_details.aspx_id34429
mov qword [rsp + 0x20], rsi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rbp + 0x6a8]
cmp rdx, 8
jb 0x14006642f
mov rcx, qword [rbp + 0x690]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006642a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069df4
call fcn.14010f640
mov rdi, qword [rsp + 0xfc0]
xor eax, eax
mov r13, qword [rsp + 0xfd0]
mov rcx, qword [rbp + 0xe10]
xor rcx, rsp
call fcn.14010f620
add rsp, 0xf98
pop r15
pop rsi
pop rbx
pop rbp
ret
movaps xmmword [rsp + 0xf80], xmm6
lea rdx, str.ru_RU.UTF_8
xor ecx, ecx
movaps xmmword [rsp + 0xf70], xmm7
call fcn.140121a20
mov r8d, 0x104
lea rdx, [rbp + 0x9f0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rbp + 0x9f0]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov rcx, 0xffffffffffffffff
cmp word [rax + rcx*2 + 2], si
lea rcx, [rcx + 1]
jne 0x1400664a4
mov word [rax + rcx*2 - 8], si
xorps xmm0, xmm0
movups xmmword [rbp + 0x690], xmm0
mov qword [rbp + 0x6a0], rsi
mov r8, 0xffffffffffffffff
mov qword [rbp + 0x6a8], rsi
inc r8
cmp word [rax + r8*2], si
jne 0x1400664d3
mov rdx, rax
lea rcx, [rbp + 0x690]
call fcn.1400099b0
mov r8d, 4
lea rdx, str..bak
lea rcx, [rbp + 0x690]
call fcn.1400102e0
mov ecx, Ordinal_50
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
call fcn.14010f648
lea rcx, [0x14006e5e0]
mov r9, rax
lea r8, [0x14006e150]
xor edx, edx
mov dword [rax], 0xbb8
movups xmmword [rax + 8], xmm6
movups xmmword [rax + 0x18], xmm7
mov qword [rax + 0x28], rcx
lea rcx, [rbp + 0x138]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call fcn.140122c38
mov qword [rbp + 0x130], rax
test rax, rax
je 0x140069c10
mov rdx, qword [rbp + 0x6a8]
cmp rdx, 8
jb 0x1400665b7
mov rcx, qword [rbp + 0x690]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400665b2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069dfa
call fcn.14010f640
mov qword [rsp + 0x28], rsi
lea r8, [0x140060e90]
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor edx, edx
xor ecx, ecx
call fcn.140122c38
call fcn.140016640
mov rbx, qword [0x14019e7b0]
lea rcx, [rbp + 0xc00]
mov edx, 0x104
mov qword [rbx + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
lea rcx, [rbp + 0x590]
call fcn.1400070a0
lea rdx, [rbp + 0xc00]
lea rcx, [rbp + 0x5a0]
call fcn.140009320
mov rcx, rax
lea rdx, str.FontsTahoma.ttf
call fcn.1400095e0
mov rbx, qword [rbx + 0x38]
lea rdx, [rbp + 0x790]
lea rcx, [rbp + 0x5a8]
call fcn.140008770
lea rdx, [rbp + 0x790]
lea rcx, [rbp + 0x710]
call fcn.14006e910
cmp qword [rax + 0x18], 0x10
jb 0x140066657
mov rax, qword [rax]
movss xmm2, dword [0x14017cdc4]
lea rcx, [0x140175570]
mov qword [rsp + 0xfc8], r12
mov rdx, rax
mov qword [rsp + 0xf90], r14
movaps xmmword [rsp + 0xf60], xmm8
movaps xmmword [rsp + 0xf50], xmm9
movaps xmmword [rsp + 0xf40], xmm10
mov qword [rsp + 0x20], rcx
mov rcx, rbx
movaps xmmword [rsp + 0xf30], xmm11
movaps xmmword [rsp + 0xf20], xmm12
call fcn.140037610
lea rcx, [rbp + 0x710]
call fcn.140008ae0
lea rcx, [rbp + 0x790]
call fcn.1400089c0
xor ecx, ecx
call fcn.140032af0
mov rcx, qword [0x14019e8c0]
call fcn.14003ca20
mov rcx, qword [0x14019ebf0]
call fcn.14003c680
mov rcx, qword [0x14019e8c0]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14019e8c0]
call qword [sym.imp.USER32.dll_UpdateWindow]
xorps xmm0, xmm0
mov byte [rbp + 0x970], sil
xor eax, eax
mov qword [rbp + 0x7c0], rsi
cmp dword [rbp + 0x168], 0x12
xorps xmm1, xmm1
movups xmmword [rbp + 0x7b0], xmm0
mov word [rbp + 0x7b0], si
movups xmmword [rbp + 0x971], xmm0
mov qword [rbp + 0x9e1], rax
movups xmmword [rbp + 0x981], xmm0
mov dword [rbp + 0x9e9], eax
movups xmmword [rbp + 0x991], xmm0
mov word [rbp + 0x9ed], ax
movups xmmword [rbp + 0x9a1], xmm0
mov byte [rbp + 0x9ef], al
movups xmmword [rbp + 0x9b1], xmm0
mov byte [rbp + 0x8f0], al
movups xmmword [rbp + 0x9c1], xmm0
mov qword [rbp + 0x961], rax
movups xmmword [rbp + 0x9d1], xmm0
mov dword [rbp + 0x969], eax
movups xmmword [rbp + 0x8f1], xmm0
mov word [rbp + 0x96d], ax
movups xmmword [rbp + 0x901], xmm0
mov byte [rbp + 0x96f], al
movups xmmword [rbp + 0x911], xmm0
mov qword [rbp + 0x7c8], 7
movups xmmword [rbp + 0x921], xmm0
mov qword [rbp + 0x98], rsi
movups xmmword [rbp + 0x931], xmm0
mov qword [rbp - 0x50], rsi
movups xmmword [rbp + 0x941], xmm0
movups xmmword [rbp + 0x951], xmm0
movdqu xmmword [rbp + 0x88], xmm0
movdqu xmmword [rbp - 0x60], xmm1
je 0x1400673a6
movss xmm10, dword [0x14017ce2c]
lea esi, [rax + 0xf]
movss xmm11, dword [0x14017cd5c]
mov r12d, 0x419
movss xmm9, dword [0x14017ccf4]
movsd xmm12, qword [0x14017cd68]
lea r14d, [r12 + 0x26]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, [rbp + 0x160]
xor edx, edx
lea rbx, [0x1401754fc]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14006686f
lea rcx, [rbp + 0x160]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x160]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x140067392
mov rax, qword [0x14019e7b0]
xor edi, edi
test rax, rax
je 0x140066886
mov rcx, qword [rax + 0x98]
jmp 0x140066889
mov rcx, rdi
cmp qword [rcx + 0x18], 0
jne 0x1400668ac
test rax, rax
je 0x1400668ac
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x1400668ac
cmp qword [rcx], 0
je 0x1400668ac
call fcn.14003c810
call fcn.14003d410
call fcn.140018840
mov rax, qword [0x14019e7b0]
lea rcx, reloc.WLDAP32.dll_Ordinal_32
xor edx, edx
mov r8d, 0x83
or dword [rax + 0x47b0], 3
mov qword [rax + 0x47c0], 0
mov qword [rax + 0x47c8], 0
mov dword [rax + 0x47b4], r13d
mov dword [rax + 0x47d0], 0x44a00000
mov dword [rax + 0x47d4], 0x442f0000
mov dword [rax + 0x47b8], r13d
call fcn.14001d7b0
mov eax, dword [reloc.WS2_32.dll_closesocket]
cmp eax, r13d
jne 0x140067457
movzx eax, byte [0x140177c48]
xorps xmm0, xmm0
mov rbx, qword [0x14019eb78]
movups xmmword [rbp + 0x6f0], xmm0
mov qword [rbp + 0x700], 9
movsd xmm0, qword [str.xhookAuth]
movsd qword [rbp + 0x6f0], xmm0
mov qword [rbp + 0x708], rsi
mov byte [rbp + 0x6f8], al
mov byte [rbp + 0x6f9], 0
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
cmp eax, r12d
je 0x14006698e
cmp eax, 0x422
je 0x14006698e
cmp ax, r14w
je 0x14006698e
lea rcx, [rbx + 0x10]
lea rdx, [rbp + 0x220]
jmp 0x140066998
lea rdx, [rbp + 0x230]
mov rcx, rbx
lea r8, [rbp + 0x6f0]
call fcn.140053590
lea rcx, [rbp + 0x710]
mov rdx, qword [rax]
add rdx, 0x40
call fcn.140007f90
lea rcx, [rbp + 0x6f0]
call fcn.140008ae0
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0x790]
call fcn.14006e910
cmp qword [rax + 0x18], 0x10
jb 0x1400669e0
mov rax, qword [rax]
mov rcx, rax
call fcn.1400402d0
lea rcx, [rbp + 0x790]
call fcn.140008ae0
lea rcx, [rbp + 0x710]
call fcn.1400089c0
movzx eax, word [0x140177c90]
xorps xmm0, xmm0
mov rbx, qword [0x14019eb78]
movups xmmword [rbp + 0x770], xmm0
mov qword [rbp + 0x780], 0xa
movsd xmm0, qword [str.enterEmail]
movsd qword [rbp + 0x770], xmm0
mov qword [rbp + 0x788], rsi
mov word [rbp + 0x778], ax
mov byte [rbp + 0x77a], 0
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
cmp eax, r12d
je 0x140066a70
cmp eax, 0x422
je 0x140066a70
cmp ax, r14w
je 0x140066a70
lea rcx, [rbx + 0x10]
lea rdx, [rbp + 0x240]
jmp 0x140066a7a
lea rdx, [rbp + 0x250]
mov rcx, rbx
lea r8, [rbp + 0x770]
call fcn.140053590
lea rcx, [rbp + 0x690]
mov rdx, qword [rax]
add rdx, 0x40
call fcn.140007f90
lea rcx, [rbp + 0x770]
call fcn.140008ae0
lea rdx, [rbp + 0x690]
lea rcx, [rbp + 0x860]
call fcn.14006e910
cmp qword [rax + 0x18], 0x10
jb 0x140066ac2
mov rax, qword [rax]
mov qword [rsp + 0x38], rdi
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x30], rdi
lea r8, [rbp + 0x970]
mov dword [rsp + 0x28], edi
mov r9d, 0x80
mov qword [rsp + 0x20], rcx
mov rdx, rax
lea rcx, [0x140162640]
mov qword [rbp - 0x70], 0
call fcn.140044a20
lea rcx, [rbp + 0x860]
call fcn.140008ae0
lea rcx, [rbp + 0x690]
call fcn.1400089c0
mov eax, dword [0x140177ce0]
movsd xmm0, qword [str.enterPassword]
mov rbx, qword [0x14019eb78]
mov dword [rbp + 0x6d8], eax
movzx eax, byte [0x140177ce4]
mov byte [rbp + 0x6dc], al
mov word [rbp + 0x6de], di
mov qword [rbp + 0x6e0], reloc.WS2_32.dll_listen
mov qword [rbp + 0x6e8], rsi
movsd qword [rbp + 0x6d0], xmm0
mov byte [rbp + 0x6dd], 0
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
cmp eax, r12d
je 0x140066b8d
cmp eax, 0x422
je 0x140066b8d
cmp ax, r14w
je 0x140066b8d
lea rcx, [rbx + 0x10]
lea rdx, [rbp + 0x260]
jmp 0x140066b97
lea rdx, [rbp + 0x270]
mov rcx, rbx
lea r8, [rbp + 0x6d0]
call fcn.140053590
lea rcx, [rbp + 0x710]
mov rdx, qword [rax]
add rdx, 0x40
call fcn.140007f90
lea rcx, [rbp + 0x6d0]
call fcn.140008ae0
lea rdx, [rbp + 0x710]
lea rcx, [rbp + 0x790]
call fcn.14006e910
cmp qword [rax + 0x18], 0x10
jb 0x140066bdf
mov rax, qword [rax]
mov qword [rsp + 0x38], rdi
lea rcx, [rbp - 0x68]
mov qword [rsp + 0x30], rdi
lea r8, [rbp + 0x8f0]
mov dword [rsp + 0x28], edi
mov r9d, 0x80
mov qword [rsp + 0x20], rcx
mov rdx, rax
lea rcx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp - 0x68], 0
call fcn.140044a20
lea rcx, [rbp + 0x790]
call fcn.140008ae0
lea rcx, [rbp + 0x710]
call fcn.1400089c0
mov eax, dword [str.auth]
xorps xmm0, xmm0
mov rbx, qword [0x14019eb78]
movups xmmword [rbp + 0x690], xmm0
mov dword [rbp + 0x690], eax
mov byte [rbp + 0x694], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x6a0], 4
mov qword [rbp + 0x6a8], rsi
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
cmp eax, r12d
je 0x140066c98
cmp eax, 0x422
je 0x140066c98
cmp ax, r14w
je 0x140066c98
lea rcx, [rbx + 0x10]
lea rdx, [rbp + 0x280]
jmp 0x140066ca2
lea rdx, [rbp + 0x190]
mov rcx, rbx
lea r8, [rbp + 0x690]
call fcn.140053590
lea rcx, [rbp + 0x6f0]
mov rdx, qword [rax]
add rdx, 0x40
call fcn.140007f90
lea rcx, [rbp + 0x690]
call fcn.140008ae0
lea rdx, [rbp + 0x6f0]
lea rcx, [rbp + 0x860]
call fcn.14006e910
cmp qword [rax + 0x18], 0x10
jb 0x140066cea
mov rax, qword [rax]
lea rdx, [rbp + 0x70]
mov rcx, rax
call fcn.140040c60
lea rcx, [rbp + 0x860]
movzx ebx, al
call fcn.140008ae0
lea rcx, [rbp + 0x6f0]
call fcn.1400089c0
test bl, bl
je 0x1400671eb
lea rdx, [rbp + 0x8f0]
lea rcx, [rbp + 0x7d0]
call fcn.1400710f0
lea rdx, [rbp + 0x970]
mov rdi, rax
lea rcx, [rbp + 0x840]
call fcn.1400710f0
lea rcx, [rbp + 0x880]
mov rsi, rax
call fcn.14006f470
mov ecx, dword [str.login]
lea r8, [rbp + 0xa0]
mov edx, 6
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
add r8, rdx
mov qword [rbp + 0xb0], rdx
mov r14, rax
mov dword [rbp + 0xa0], ecx
movzx ecx, word [0x14017a6b4]
lea rdx, [rbp + 0xa0]
xor eax, eax
mov word [rbp + 0xa4], cx
mov byte [rbp + 0xa6], 0
mov r9d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0xb8], r9
mov qword [rbp + 0x700], rax
mov qword [rbp + 0x708], rax
movups xmmword [rbp + 0x6f0], xmm0
cmp rdx, r8
jne 0x140066dda
mov ebx, 7
mov word [rbp + 0x6f0], ax
mov qword [rbp + 0x708], rbx
jmp 0x140066df3
mov r9, r8
lea rcx, [rbp + 0x6f0]
sub r9, rdx
call fcn.14004f180
mov rbx, qword [rbp + 0x708]
lea rcx, [rbp + 0xa0]
call fcn.140008ae0
cmp rbx, 8
lea r8, [rbp + 0x6f0]
mov r9, 0xffffffffffffffff
cmovae r8, qword [rbp + 0x6f0]
nop dword [rax]
inc r9
cmp word [r8 + r9*2], 0
jne 0x140066e20
mov rcx, r14
call fcn.140012260
xor ebx, ebx
lea rdx, str.email
mov qword [rbp + 0x6a0], rbx
lea rcx, [rbp + 0x690]
mov qword [rbp + 0x6a8], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x690], xmm0
lea r8d, [rbx + 7]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x690], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x6a0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
call fcn.1400102e0
mov r9, rsi
lea r8, [rbp + 0x710]
lea rcx, [rbp + 0x790]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
movups xmmword [rbp + 0x710], xmm0
mov qword [rax + 0x18], 7
movups xmmword [rbp + 0x720], xmm1
mov word [rax], bx
call fcn.140011f70
lea r8, str.password
lea rdx, [rbp + 0x790]
lea rcx, [rbp + 0x770]
call fcn.140010d10
mov r8, rdi
lea rcx, [rbp + 0x6d0]
mov rdx, rax
call fcn.140010d80
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
lea rdx, str.handler
mov rbx, rax
lea rcx, [rbp + 0x730]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x860]
mov r8, rax
call fcn.14000b230
mov rdx, rax
lea rcx, [rbp + 0x7b0]
call fcn.14004b590
lea rcx, [rbp + 0x860]
call fcn.1400089c0
lea rcx, [rbp + 0x6d0]
call fcn.1400089c0
lea rcx, [rbp + 0x770]
call fcn.1400089c0
lea rcx, [rbp + 0x790]
call fcn.1400089c0
lea rcx, [rbp + 0x710]
call fcn.1400089c0
lea rcx, [rbp + 0x690]
call fcn.1400089c0
lea rcx, [rbp + 0x6f0]
call fcn.1400089c0
lea rcx, [rbp + 0x880]
call fcn.1400089c0
lea rcx, [rbp + 0x840]
call fcn.1400089c0
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
cmp qword [rbp + 0x7c0], 0
jne 0x140069feb
call fcn.140057e30
lea rdx, [rbp + 0x8f0]
lea rcx, [rbp + 0x6b0]
call fcn.1400710f0
lea rdx, [rbp + 0x970]
mov r14, rax
lea rcx, [rbp + 0x730]
call fcn.1400710f0
lea rcx, [rbp + 0x750]
mov rsi, rax
call fcn.1400701b0
lea rcx, [rbp + 0x770]
mov rdi, rax
call fcn.14006f470
lea rdx, str.loginHwid2
mov rbx, rax
lea rcx, [rbp + 0x140]
call fcn.1400080b0
mov rdx, rax
lea rcx, [rbp + 0x6d0]
call fcn.14006e7f0
mov rcx, rax
call fcn.14000dbb0
mov r8, rbx
lea rcx, [rbp + 0x6f0]
mov rdx, rax
call fcn.140010ca0
mov rdx, rax
lea r8, str.data
lea rcx, [rbp + 0x690]
call fcn.140010d10
mov r8, rdi
lea rcx, [rbp + 0x710]
mov rdx, rax
call fcn.140010d80
mov rdx, rax
lea r8, str.email
lea rcx, [rbp + 0x790]
call fcn.140010d10
mov r8, rsi
lea rcx, [rbp + 0x860]
mov rdx, rax
call fcn.140010d80
mov rdx, rax
lea r8, str.password
lea rcx, [rbp + 0x880]
call fcn.140010d10
mov r8, r14
lea rcx, [rbp + 0x840]
mov rdx, rax
call fcn.140010d80
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14006e910
lea rdx, str.handler
mov rbx, rax
lea rcx, [rsp + 0x68]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x7d0]
mov r8, rax
call fcn.14000b230
mov rdx, rax
lea rcx, [rbp + 0x7b0]
call fcn.14004b590
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
lea rcx, [rbp + 0x840]
call fcn.1400089c0
lea rcx, [rbp + 0x880]
call fcn.1400089c0
lea rcx, [rbp + 0x860]
call fcn.1400089c0
lea rcx, [rbp + 0x790]
call fcn.1400089c0
lea rcx, [rbp + 0x710]
call fcn.1400089c0
lea rcx, [rbp + 0x690]
call fcn.1400089c0
lea rcx, [rbp + 0x6f0]
call fcn.1400089c0
lea rcx, [rbp + 0x6d0]
call fcn.1400089c0
lea rcx, [rbp + 0x770]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
cmp qword [rbp + 0x7c0], 0
je 0x140067448
lea rdx, [rbp + 0x7b0]
lea rcx, [rsp + 0x68]
call fcn.140007f90
mov rcx, rax
call fcn.14006e4b0
lea rdx, str.Access_from
lea rcx, [rbp + 0x7b0]
call fcn.14006b6a0
cmp rax, 0xffffffffffffffff
jne 0x140069e00
xor edi, edi
mov r14d, 0x43f
mov esi, reloc.WS2_32.dll_ntohs
call fcn.14001fa70
call fcn.14001a510
mov rcx, qword [0x14019ebf0]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x14019ebf0]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x14019ebf0]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x14019ebf0]
mov r9d, 3
mov dword [rsp + 0x30], edi
xor r8d, r8d
movss dword [rsp + 0x28], xmm11
xor edx, edx
mov dword [rsp + 0x20], edi
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x14019ebf0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400672b2
call fcn.14001a900
mov rax, qword [0x14019e7b0]
mov rcx, qword [rax + 0x48b0]
mov rax, qword [rcx]
mov rcx, rdi
add rax, 0x48
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14003c0d0
mov rcx, qword [0x14019ebf0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14019ebf0]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140067392
mov rcx, qword [0x14019ebf0]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140067392
mov rbx, qword [0x14019e7b0]
test rbx, rbx
je 0x140067358
mov rbx, qword [rbx + 0x98]
test rbx, rbx
je 0x140067358
cmp qword [rbx], 0
je 0x140067358
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140067323
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 8], rdi
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140067336
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x10], rdi
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140067358
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x14019e7b0]
mov qword [rbx + 0x18], rdi
mov rcx, qword [rax + 0x38]
mov qword [rcx + 8], rdi
mov rcx, qword [0x14019ebf0]
lea rdx, [0x14019ec00]
mov rax, qword [rcx]
call qword [rax + 0x80]
mov rax, qword [0x14019e7b0]
test rax, rax
je 0x140067392
mov rax, qword [rax + 0x98]
test rax, rax
je 0x140067392
cmp qword [rax], 0
je 0x140067392
call fcn.14003c810
cmp dword [rbp + 0x168], 0x12
jne 0x14006682b
mov rdi, qword [rbp + 0xd8]
call fcn.14003c710
call fcn.14003cbd0
call fcn.1400166c0
mov rcx, qword [0x14019ebf0]
test rcx, rcx
je 0x1400673c7
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14019ea00]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [0x14019e8c0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0x120]
call qword [sym.imp.USER32.dll_UnregisterClassW]
cmp dword [0x14019e8b8], r13d
jne 0x140069a02
mov dword [0x14019e8b8], 2
call fcn.140053ac0
cmp dword [0x14019e8b8], 0
mov dword [0x14019ea10], eax
je 0x140069a02
nop dword [rax]
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x14019e8b8], 0
je 0x140069a02
jmp 0x140067430
mov ecx, 2
call fcn.1400584d0
jmp 0x1400671de
cmp eax, 2
jne 0x1400685be
mov rdi, qword [rbp + 0x90]
mov rax, rdi
sub rax, qword [rbp + 0x88]
test rax, 0xffffffffffffffe0
jne 0x140067602
lea rcx, [rbp + 0x750]
call fcn.14006f470
mov r8, rax
lea rdx, str.getCheats
lea rcx, [rbp + 0x730]
call fcn.140010ca0
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14006e910
lea rdx, str.handler
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x6b0]
mov r8, rax
call fcn.14000b230
mov rdx, rax
lea rcx, [rbp + 0x7b0]
call fcn.14004b590
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
xor edx, edx
mov dword [0x14019e8c8], r13d
lea rcx, [rbp + 0x7b0]
call fcn.14000dbc0
lea rcx, [rbp + 0x7b0]
cmp word [rax], 0x3a
jne 0x140067564
mov r8, r13
mov dword [0x14019e8c8], 2
call fcn.14006b750
mov rdx, rax
lea rcx, [rbp + 0x7b0]
call fcn.140053560
mov byte [0x14019e7a9], r13b
mov dword [reloc.WS2_32.dll_getpeername], 0xb4
mov dword [0x140198cc4], 0x1388
jmp 0x1400675aa
xor edx, edx
call fcn.14000dbc0
cmp word [rax], 0x2a
jne 0x1400675aa
mov r8, r13
mov byte [0x14019e7a9], r13b
lea rcx, [rbp + 0x7b0]
mov dword [reloc.WS2_32.dll_getpeername], 0xb4
mov dword [0x140198cc4], 0x1388
call fcn.14006b750
mov rdx, rax
lea rcx, [rbp + 0x7b0]
call fcn.140053560
lea rdx, str._br_
lea rcx, [rsp + 0x68]
call fcn.140007f50
lea rdx, [rbp + 0x7b0]
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.140007f90
mov r8, rbx
lea rcx, [rbp + 0x6d0]
mov rdx, rax
call fcn.140070e10
mov rdx, rax
lea rcx, [rbp + 0x88]
call fcn.14006afc0
lea rcx, [rbp + 0x6d0]
call fcn.14006ba70
mov rdi, qword [rbp + 0x90]
lea rdx, str.exit
mov qword [rbp + 0x78], 0
lea rcx, [rsp + 0x68]
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x7d0]
call fcn.1400534b0
mov rdx, rax
lea r8, [0x140179a84]
lea rcx, [rbp + 0x750]
call fcn.140010d10
mov rdx, rax
lea r8, [0x14019af00]
lea rcx, [rbp + 0x730]
call fcn.140010da0
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
lea rdx, [rbp + 0x78]
mov rcx, rax
call fcn.140040fa0
lea rcx, [rbp + 0x6b0]
movzx ebx, al
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
test bl, bl
je 0x140067741
lea rcx, [rbp + 0x860]
call fcn.14006f470
mov r8, rax
lea rdx, str.loginOut
lea rcx, [rbp + 0x880]
call fcn.140010ca0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14006e910
lea rdx, str.handler
mov rbx, rax
lea rcx, [rbp + 0x140]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x840]
mov r8, rax
call fcn.14000b230
lea rcx, [rbp + 0x840]
call fcn.1400089c0
lea rcx, [rbp + 0x880]
call fcn.1400089c0
lea rcx, [rbp + 0x860]
call fcn.1400089c0
mov ecx, Ordinal_301
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, r13d
call fcn.1400584d0
movzx eax, word [0x140178b60]
xorps xmm0, xmm0
mov rbx, qword [0x14019eb78]
movups xmmword [rbp + 0x690], xmm0
mov qword [rbp + 0x6a0], 0xa
movsd xmm0, qword [str.chooseGame]
movsd qword [rbp + 0x690], xmm0
mov qword [rbp + 0x6a8], rsi
mov word [rbp + 0x698], ax
mov byte [rbp + 0x69a], 0
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
cmp eax, r12d
je 0x1400677b1
cmp eax, 0x422
je 0x1400677b1
cmp ax, r14w
je 0x1400677b1
lea rcx, [rbx + 0x10]
lea rdx, [rbp + 0x1a0]
jmp 0x1400677bb
lea rdx, [rbp + 0x1b0]
mov rcx, rbx
lea r8, [rbp + 0x690]
call fcn.140053590
lea rcx, [rbp + 0x790]
mov rdx, qword [rax]
add rdx, 0x40
call fcn.140007f90
lea rcx, [rbp + 0x690]
call fcn.140008ae0
mov r8, r13
lea rdx, [0x14017a70c]
lea rcx, [rbp + 0x790]
call fcn.1400102e0
xor ebx, ebx
lea rdx, [rbp + 0x6f0]
mov qword [rbp + 0x700], rbx
lea rcx, [rbp + 0x840]
mov qword [rbp + 0x708], rbx
xorps xmm0, xmm0
movups xmmword [rbp + 0x6f0], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x6f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x700], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
call fcn.14006e910
cmp qword [rax + 0x18], 0x10
jb 0x140067857
mov rax, qword [rax]
mov rcx, rax
call fcn.1400402d0
lea rcx, [rbp + 0x840]
call fcn.140008ae0
mov rdx, qword [rbp + 0x708]
cmp rdx, 8
jb 0x1400678b1
mov rcx, qword [rbp + 0x6f0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400678ac
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006a00d
call fcn.14010f640
lea rcx, [rbp + 0x790]
mov qword [rbp + 0x700], rbx
mov qword [rbp + 0x708], 7
mov word [rbp + 0x6f0], bx
call fcn.1400089c0
mov r14, qword [rbp + 0x88]
cmp r14, rdi
je 0x140067d19
mov qword [rbp + 0x80], rbx
lea r15, [0x14017a74c]
nop dword [rax]
nop dword [rax + rax]
mov rdx, r14
lea rcx, [rbp + 0x710]
call fcn.140007f90
xorps xmm0, xmm0
mov qword [rbp + 0x780], rbx
mov r8, r13
mov qword [rbp + 0x788], rbx
lea rdx, [0x14017a710]
lea rcx, [rbp + 0x770]
movups xmmword [rbp + 0x770], xmm0
call fcn.1400099b0
lea rdx, [rbp + 0x710]
lea rcx, [rsp + 0x68]
call fcn.140007f90
lea r8, [rbp + 0x770]
mov rdx, rax
lea rcx, [rbp + 0x6d0]
call fcn.140070e10
mov rdx, qword [rbp + 0x6d0]
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
cmp qword [rax + 0x18], 0x10
jb 0x140067981
mov rax, qword [rax]
lea rdx, [rbp + 0x80]
mov rcx, rax
call fcn.140040c60
lea rcx, [rbp + 0x6b0]
movzx ebx, al
call fcn.140008ae0
test bl, bl
je 0x1400679fc
mov r8, qword [rbp + 0x6d8]
mov rdx, qword [rbp + 0x6d0]
sub r8, rdx
sar r8, 5
call fcn.14006cda0
mov r8, qword [rbp + 0x6d8]
lea rdx, [rbp + 0x710]
sub r8, qword [rbp + 0x6d0]
lea rcx, str._ls__d_n
sar r8, 5
cmp qword [rbp + 0x728], 8
cmovae rdx, qword [rbp + 0x710]
call fcn.140001580
mov ecx, 5
call fcn.1400584d0
mov rbx, qword [rbp + 0x6d0]
add rbx, 0x40
mov rcx, rbx
mov rdi, qword [rbx + 0x18]
mov rsi, qword [rbx + 0x10]
cmp rdi, 8
jb 0x140067a1b
mov rcx, qword [rbx]
lea r9, str.karos
mov qword [rsp + 0x20], 5
xor r8d, r8d
mov rdx, rsi
call fcn.14004e590
cmp rax, 0xffffffffffffffff
jne 0x140067a6d
mov rcx, rbx
cmp rdi, 8
jb 0x140067a48
mov rcx, qword [rbx]
lea r9, str.rosh
mov qword [rsp + 0x20], 4
xor r8d, r8d
mov rdx, rsi
call fcn.14004e590
cmp rax, 0xffffffffffffffff
je 0x140067ce4
mov rcx, rbx
cmp rdi, 8
jb 0x140067a79
mov rcx, qword [rbx]
lea r9, [0x14017a720]
mov qword [rsp + 0x20], 3
xor r8d, r8d
mov rdx, rsi
call fcn.14004e590
cmp rax, 0xffffffffffffffff
jne 0x140067ce4
mov rcx, rbx
cmp rdi, 8
jb 0x140067aaa
mov rcx, qword [rbx]
lea r9, str.translation
mov qword [rsp + 0x20], ntohl
xor r8d, r8d
mov rdx, rsi
call fcn.14004e590
cmp rax, 0xffffffffffffffff
jne 0x140067ce4
lea rdx, str.hwid
mov rcx, rbx
call fcn.14006b6a0
cmp rax, 0xffffffffffffffff
jne 0x140067ce4
movaps xmm1, xmm10
mov byte [rsp + 0x60], 0
xorps xmm0, xmm0
call fcn.140022f40
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
lea rcx, [rbp + 0x1c0]
lea r9d, [rdx - 0x59]
lea r8d, [r9 - 0x59]
call fcn.140053bb0
lea rdx, [rbp + 0x770]
xor ecx, ecx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x770], xmm0
call fcn.140014c40
mov rbx, qword [rbp + 0x6d0]
lea rdx, str.buyprem
lea rcx, [rsp + 0x68]
mov qword [rbp - 0x20], 0
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x7d0]
call fcn.1400534b0
mov rdx, rax
lea r8, [0x14017a734]
lea rcx, [rbp + 0x750]
call fcn.140010d10
lea r8, [rbx + 0x40]
mov rdx, rax
lea rcx, [rbp + 0x730]
call fcn.140010da0
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
lea r9, [rbp - 0x20]
mov rcx, rax
lea rdx, [rsp + 0x60]
call fcn.140047490
lea rcx, [rbp + 0x6b0]
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
call fcn.140014ca0
cmp byte [rsp + 0x60], 0
je 0x140067ce4
lea rcx, [rbp + 0x290]
call fcn.1400070a0
mov rdi, qword [rbp + 0x6d0]
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov rdx, qword [0x14019ea78]
lea rbx, [0x14017a754]
cmp ax, r12w
lea rcx, [rsp + 0x68]
cmove rbx, r15
add rdx, 0x10
call fcn.1400080f0
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e7f0
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.140009970
mov rdx, rbx
mov rcx, rax
call fcn.140009320
mov rcx, rax
lea rdx, str._cheats_
call fcn.1400095e0
lea rdx, [rdi + 0x40]
mov rcx, rax
call fcn.140009970
mov rcx, rax
lea rdx, [0x14017a73c]
call fcn.1400095e0
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rdx, [rbp + 0x6b0]
lea rcx, [rbp + 0x290]
call fcn.140006f90
mov rcx, rax
call fcn.14000dbb0
xor ebx, ebx
mov dword [rsp + 0x28], r13d
mov r8, rax
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rcx, [rbp + 0x290]
call fcn.140003d50
jmp 0x140067ce6
xor ebx, ebx
lea rcx, [rbp + 0x6d0]
call fcn.14006ba70
lea rcx, [rbp + 0x710]
call fcn.1400089c0
add r14, 0x20
cmp r14, qword [rbp + 0x90]
jne 0x140067900
mov r15d, dword [rsp + 0x64]
mov esi, reloc.WS2_32.dll_ntohs
mov rax, qword [0x14019e7b0]
mov rax, qword [rax + 0x3ed8]
cmp byte [rax + 0xbb], 0
jne 0x140067d46
mov eax, dword [rax + 0x1b4]
movaps xmm1, xmm11
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140042490
mov rax, qword [str.support]
xor edi, edi
mov rbx, qword [0x14019eb78]
mov dword [rbp + 0x6d0], eax
movzx eax, word [0x140178d4c]
mov word [rbp + 0x6d4], ax
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rbp + 0x6d6], al
mov qword [rbp - 0x18], 0
mov qword [rbp + 0x6d8], rdi
mov qword [rbp + 0x6e0], 7
mov qword [rbp + 0x6e8], rsi
mov byte [rbp + 0x6d7], dil
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx eax, ax
mov r14d, 0x43f
cmp eax, r12d
je 0x140067dcd
cmp eax, 0x422
je 0x140067dcd
cmp ax, r14w
je 0x140067dcd
lea rcx, [rbx + 0x10]
lea rdx, [rbp + 0x1d0]
jmp 0x140067dd7
lea rdx, [rbp + 0x1e0]
mov rcx, rbx
lea r8, [rbp + 0x6d0]
call fcn.140053590
lea rcx, [rbp + 0x770]
mov rdx, qword [rax]
add rdx, 0x40
call fcn.140007f90
lea rcx, [rbp + 0x6d0]
call fcn.140008ae0
lea rdx, [rbp + 0x770]
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
cmp qword [rax + 0x18], 0x10
jb 0x140067e1f
mov rax, qword [rax]
lea rdx, [rbp - 0x18]
mov rcx, rax
call fcn.140040c60
lea rcx, [rbp + 0x6b0]
movzx ebx, al
call fcn.140008ae0
lea rcx, [rbp + 0x770]
call fcn.1400089c0
test bl, bl
je 0x140068103
lea rcx, [rbp + 0x390]
call fcn.1400070a0
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov rdx, qword [0x14019ea78]
lea rdi, [0x14017a754]
cmp ax, r12w
lea rcx, [rsp + 0x68]
lea rax, [0x14017a74c]
cmove rdi, rax
add rdx, 0x10
call fcn.1400080f0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
mov r8, qword [rax + 0x10]
jb 0x140067ea1
mov rdx, qword [rax]
add r8, rdx
jmp 0x140067ea7
add r8, rbx
mov rdx, rbx
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x6e0], rax
mov qword [rbp + 0x6e8], rax
movups xmmword [rbp + 0x6d0], xmm0
cmp rdx, r8
jne 0x140067eda
mov qword [rbp + 0x6e8], 7
mov word [rbp + 0x6d0], ax
jmp 0x140067eec
mov r9, r8
lea rcx, [rbp + 0x6d0]
sub r9, rdx
call fcn.14004f180
mov rcx, rbx
call fcn.140008ae0
cmp qword [rbp + 0x6e8], 8
lea rdx, [rbp + 0x6d0]
mov r8, qword [rbp + 0x6e0]
lea rcx, [rbp + 0x3a0]
cmovae rdx, qword [rbp + 0x6d0]
call fcn.14000a580
mov rdx, rdi
mov rcx, rax
call fcn.140009320
mov rcx, rax
lea rdx, str._support
call fcn.1400095e0
mov rdx, qword [rbp + 0x6e8]
cmp rdx, 8
jb 0x140067f7e
mov rcx, qword [rbp + 0x6d0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140067f79
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006a013
call fcn.14010f640
lea rdx, [rbp + 0x790]
lea rcx, [rbp + 0x3a8]
call fcn.140008770
mov r9d, reloc.WS2_32.dll_recvfrom
lea r8, str.apiLoginRedirect
lea rcx, [rbp + 0x790]
call fcn.140012260
xor edi, edi
lea rdx, [rbp + 0x6f0]
mov qword [rbp + 0x700], rdi
lea rcx, [rsp + 0x68]
mov qword [rbp + 0x708], rdi
xorps xmm0, xmm0
movups xmmword [rbp + 0x6f0], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x6f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x700], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
call fcn.14006e910
mov rcx, qword [str.handler]
lea r8, [rbp + 0x690]
mov dword [rbp + 0x690], ecx
lea rdx, [rbp + 0x6b0]
movzx ecx, word [0x1401628fc]
mov r9, rax
mov word [rbp + 0x694], cx
movzx ecx, byte [0x1401628fe]
mov byte [rbp + 0x696], cl
mov qword [rbp + 0x698], rdi
mov qword [rbp + 0x6a0], 7
mov qword [rbp + 0x6a8], rsi
mov byte [rbp + 0x697], dil
call fcn.14000b230
cmp qword [rax + 0x18], 8
jb 0x140068061
mov rax, qword [rax]
mov dword [rsp + 0x28], r13d
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rdi
mov r8, rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
mov rdx, qword [rbp + 0x708]
cmp rdx, 8
jb 0x1400680d2
mov rcx, qword [rbp + 0x6f0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400680cd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006a019
call fcn.14010f640
lea rcx, [rbp + 0x790]
mov qword [rbp + 0x700], rdi
mov qword [rbp + 0x708], 7
mov word [rbp + 0x6f0], di
call fcn.1400089c0
lea rcx, [rbp + 0x390]
call fcn.140003d50
mov rax, qword [rbp - 0x58]
sub rax, qword [rbp - 0x60]
test rax, 0xffffffffffffffe0
jne 0x1400682d5
xorps xmm0, xmm0
mov qword [rbp + 0x720], rdi
mov r8d, reloc.WS2_32.dll_ntohl
mov qword [rbp + 0x728], rdi
lea rdx, str.launcherData3
lea rcx, [rbp + 0x710]
movups xmmword [rbp + 0x710], xmm0
call fcn.1400099b0
lea rdx, [rbp + 0x710]
lea rcx, [rsp + 0x68]
call fcn.14006e910
mov rcx, qword [str.handler]
lea r8, [rbp + 0x690]
mov dword [rbp + 0x690], ecx
lea rdx, [rbp + 0x6b0]
movzx ecx, word [0x1401628fc]
mov r9, rax
mov word [rbp + 0x694], cx
movzx ecx, byte [0x1401628fe]
mov byte [rbp + 0x696], cl
mov qword [rbp + 0x698], rdi
mov qword [rbp + 0x6a0], 7
mov qword [rbp + 0x6a8], rsi
mov byte [rbp + 0x697], 0
call fcn.14000b230
mov rbx, rax
lea rax, [rbp + 0x7b0]
cmp rax, rbx
je 0x14006824d
mov rdx, qword [rbp + 0x7c8]
cmp rdx, 8
jb 0x140068210
mov rcx, qword [rbp + 0x7b0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006820b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006a01f
call fcn.14010f640
mov qword [rbp + 0x7c0], rdi
mov qword [rbp + 0x7c8], 7
mov word [rbp + 0x7b0], di
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x7b0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x7c0], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rcx, [rbp + 0x710]
call fcn.1400089c0
xorps xmm0, xmm0
mov qword [rbp + 0x720], rdi
mov r8d, 4
mov qword [rbp + 0x728], rdi
lea rdx, str._br_
lea rcx, [rbp + 0x710]
movups xmmword [rbp + 0x710], xmm0
call fcn.1400099b0
lea rdx, [rbp + 0x7b0]
lea rcx, [rsp + 0x68]
call fcn.140007f90
lea r8, [rbp + 0x710]
mov rdx, rax
lea rcx, [rbp + 0x6d0]
call fcn.140070e10
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14006afc0
lea rcx, [rbp + 0x6d0]
call fcn.14006ba70
mov rsi, qword [rbp - 0x60]
cmp rsi, qword [rbp - 0x58]
je 0x1400671e6
nop dword [rax]
nop word [rax + rax]
mov rdx, rsi
lea rcx, [rbp + 0x790]
call fcn.140007f90
xorps xmm0, xmm0
mov qword [rbp + 0x720], rdi
mov r8, r13
mov qword [rbp + 0x728], rdi
lea rdx, [0x14017a710]
lea rcx, [rbp + 0x710]
movups xmmword [rbp + 0x710], xmm0
call fcn.1400099b0
lea rdx, [rbp + 0x790]
lea rcx, [rsp + 0x68]
call fcn.140007f90
lea r8, [rbp + 0x710]
mov rdx, rax
lea rcx, [rbp + 0x6d0]
call fcn.140070e10
mov rbx, qword [rbp + 0x6d0]
cmp qword [rbx + 0x70], r13
jbe 0x14006858d
add rbx, 0x40
call fcn.140123198
cmp qword [rbx + 0x18], 8
mov rdi, rax
jb 0x14006837b
mov rbx, qword [rbx]
xor r14d, r14d
lea rdx, [rbp + 0xc0]
mov rcx, rbx
mov dword [rax], r14d
lea r8d, [r14 + 0xa]
call fcn.140122910
mov r12d, eax
cmp rbx, qword [rbp + 0xc0]
je 0x1400699f5
cmp dword [rdi], 0x22
je 0x14006a059
mov rbx, qword [rbp + 0x6d0]
add rbx, 0x20
call fcn.140123198
cmp qword [rbx + 0x18], 8
mov rdi, rax
jb 0x1400683ca
mov rbx, qword [rbx]
mov r8d, 0xa
mov dword [rax], r14d
lea rdx, [rbp + 0xc8]
mov rcx, rbx
call fcn.140122910
mov r14d, eax
cmp rbx, qword [rbp + 0xc8]
je 0x14006a04c
cmp dword [rdi], 0x22
je 0x14006a03f
mov rbx, qword [rbp + 0x6d0]
call fcn.140123198
cmp qword [rbx + 0x18], 8
mov rdi, rax
jb 0x140068414
mov rbx, qword [rbx]
xor eax, eax
lea rdx, [rbp + 0xd0]
mov rcx, rbx
mov dword [rdi], eax
lea r8d, [rax + 0xa]
call fcn.140122910
cmp rbx, qword [rbp + 0xd0]
je 0x14006a032
cmp dword [rdi], 0x22
je 0x14006a025
mov rbx, qword [0x14019e7b0]
lea rdx, [rbp + 0x770]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mov dword [rbp + 0x6c], 0x3f800000
lea rcx, [rbx + 0x4820]
mov dword [rbp + 0x770], reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rbx + 0x39f4]
movd xmm7, r14d
cvtdq2ps xmm7, xmm7
movd xmm8, r12d
cvtdq2ps xmm8, xmm8
mulss xmm6, xmm9
mulss xmm7, xmm9
mulss xmm8, xmm9
movups xmmword [rbp + 0x774], xmm0
call fcn.14002adb0
movups xmm0, xmmword [rbp + 0x60]
lea rcx, [rbp + 0x6b0]
mov qword [rbp - 0x10], 0
movss xmm0, xmm6
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm7
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm8
shufps xmm0, xmm0, 0xc9
movups xmmword [rbx + 0x39f4], xmm0
mov rdx, qword [rbp + 0x6d0]
add rdx, 0x60
movups xmmword [rbp + 0x60], xmm0
call fcn.14006e910
cmp qword [rax + 0x18], 0x10
jb 0x1400684f2
mov rax, qword [rax]
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.140040c60
lea rcx, [rbp + 0x6b0]
movzx ebx, al
call fcn.140008ae0
test bl, bl
je 0x140068550
mov r8, qword [rbp + 0x6d0]
cmp qword [r8 + 0x90], 0
je 0x140068550
sub r8, 0xffffffffffffff80
cmp qword [r8 + 0x18], 8
jb 0x140068530
mov r8, qword [r8]
xor edi, edi
mov dword [rsp + 0x28], r13d
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x140068552
xor edi, edi
mov r8, qword [0x14019e7b0]
movsxd rax, dword [r8 + 0x4820]
cmp eax, r13d
jl 0x14006858d
mov rcx, qword [r8 + 0x4828]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x38a4], xmm0
dec dword [r8 + 0x4820]
lea rcx, [rbp + 0x6d0]
call fcn.14006ba70
lea rcx, [rbp + 0x790]
call fcn.1400089c0
add rsi, 0x20
cmp rsi, qword [rbp - 0x58]
jne 0x1400682f0
mov r12d, 0x419
jmp 0x1400671e0
cmp eax, 3
jne 0x140068666
mov rax, qword [0x14019e7b0]
lea rdx, str.loading
lea rcx, [rsp + 0x68]
movsd xmm0, qword [rax + 0x3e28]
divsd xmm0, xmm12
cvttsd2si eax, xmm0
and eax, 3
movsx ebx, byte [rax + rbx]
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x750]
call fcn.1400534b0
mov rdx, rax
lea rcx, [rbp + 0x730]
call fcn.14006e910
mov rdx, rax
lea r8, [0x14017a7b8]
lea rcx, [rbp + 0x6b0]
call fcn.14006c5f0
mov rcx, rax
call fcn.140008060
mov edx, ebx
mov rcx, rax
call fcn.1400402d0
lea rcx, [rbp + 0x6b0]
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.140008ae0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
jmp 0x1400671eb
cmp eax, 4
jne 0x1400688a4
lea rdx, str.crossfire_z8
lea rcx, [0x14019aee0]
call fcn.14006c830
test al, al
je 0x1400687c1
lea rdx, str.crossfire_z8
lea rcx, [0x14019af60]
call fcn.14006c830
test al, al
je 0x1400687c1
cmp dword [0x14019e854], 0
jne 0x1400687c1
lea rdx, [rbp - 8]
mov qword [rbp - 8], 0
lea rcx, str.HitBox:_2.75
call fcn.140040fa0
test al, al
je 0x1400686d8
mov dword [0x14019e854], 0x1b
lea rdx, [rbp]
mov qword [rbp], 0
lea rcx, str.HitBox:_2.5
call fcn.140040fa0
test al, al
je 0x1400686fe
mov dword [0x14019e854], 0x19
lea rdx, [rbp + 8]
mov qword [rbp + 8], 0
lea rcx, str.HitBox:_2.25
call fcn.140040fa0
test al, al
je 0x140068724
mov dword [0x14019e854], 0x16
lea rdx, [rbp + 0x10]
mov qword [rbp + 0x10], 0
lea rcx, str.HitBox:_2.0
call fcn.140040fa0
test al, al
je 0x14006874a
mov dword [0x14019e854], 0x14
lea rdx, [rbp + 0x18]
mov qword [rbp + 0x18], 0
lea rcx, str.HitBox:_1.75
call fcn.140040fa0
test al, al
je 0x140068770
mov dword [0x14019e854], 0x11
lea rdx, [rbp + 0x20]
mov qword [rbp + 0x20], 0
lea rcx, str.HitBox:_1.5
call fcn.140040fa0
test al, al
je 0x140068792
mov dword [0x14019e854], esi
lea rdx, [rbp + 0x28]
mov qword [rbp + 0x28], 0
lea rcx, str.HitBox:_1.25
call fcn.140040fa0
test al, al
je 0x1400671eb
mov dword [0x14019e854], 0xc
jmp 0x1400671eb
lea rdx, str.warface
lea rcx, [0x14019aee0]
call fcn.14006c830
test al, al
je 0x14006880b
lea rcx, str.Start_Warface___
call fcn.1400402d0
call fcn.1400620d0
mov ecx, eax
mov dword [0x14019eba0], eax
call fcn.140065850
mov qword [0x14019e8b0], rax
test rax, rax
jne 0x140069a0b
jmp 0x1400671eb
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
xor r9d, r9d
lea rcx, [rbp + 0x1f0]
lea r8d, [rdx - 0x15]
call fcn.140053bb0
lea rdx, [rbp + 0x770]
xor ecx, ecx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x770], xmm0
call fcn.140014c40
lea rdx, str.runGame
lea rcx, [rsp + 0x68]
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x730]
call fcn.1400534b0
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
mov rcx, rax
call fcn.1400402d0
lea rcx, [rbp + 0x6b0]
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
call fcn.140014ca0
jmp 0x1400671eb
cmp eax, 5
jne 0x1400671eb
mov rdx, qword [0x14019eb80]
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
mov rcx, rax
call fcn.1400402d0
lea rcx, [rbp + 0x6b0]
call fcn.140008ae0
mov rcx, qword [0x14019eb80]
sub rcx, 0xffffffffffffff80
call fcn.14000dbb0
mov rcx, rax
call fcn.140122d18
lea rcx, [rsp + 0x68]
mov edi, eax
cmp eax, 0x539
jne 0x140068a8f
lea rdx, str.infinitely
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x7d0]
call fcn.1400534b0
lea rdx, str.subTime
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x750]
call fcn.1400534b0
mov r8, rbx
lea rcx, [rbp + 0x730]
mov rdx, rax
call fcn.140010d80
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
mov rcx, rax
call fcn.1400402d0
lea rcx, [rbp + 0x6b0]
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
xor edi, edi
call fcn.140042ac0
xor edx, edx
mov dword [rbp + 0x38], 0x43c80000
lea rcx, [rbp + 0x38]
mov dword [rbp + 0x3c], 0x43160000
call fcn.140020390
call fcn.140024010
test al, al
je 0x140068a29
lea rdx, str.instructionRead
lea rcx, [rsp + 0x68]
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x730]
call fcn.1400534b0
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
mov rcx, rax
call fcn.1400402d0
lea rcx, [rbp + 0x6b0]
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
call fcn.1400241d0
mov rcx, qword [0x14019eb80]
add rcx, 0xc0
call fcn.140053b20
mov edx, eax
lea rcx, str.versions__d_n
mov r14d, eax
call fcn.140001580
mov ebx, edi
test r14d, r14d
js 0x140069086
mov qword [rbp + 0x40], 0
movaps xmm1, xmm10
xorps xmm0, xmm0
call fcn.140022f40
test ebx, ebx
jne 0x140068e17
or r15d, r13d
lea rdx, [0x140175828]
lea rcx, [rbp + 0x880]
call fcn.140007f50
jmp 0x140068e2a
lea rdx, str.hours
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x6f0]
call fcn.1400534b0
mov r14, rax
mov eax, 0xc22e4507
imul edi
mov eax, 0x91a2b3c5
lea ebx, [rdi + rdx]
sar ebx, 0x10
mov ecx, ebx
shr ecx, 0x1f
add ebx, ecx
imul ecx, ebx, 0x15180
sub edi, ecx
lea rcx, [rbp + 0x690]
imul edi
add edx, edi
sar edx, 0xb
mov eax, edx
shr eax, 0x1f
add edx, eax
call fcn.14000aed0
lea rdx, str.days
mov rsi, rax
lea rcx, [rbp - 0x40]
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x710]
call fcn.1400534b0
mov edx, ebx
lea rcx, [rbp + 0x790]
mov rdi, rax
call fcn.14000aed0
lea rdx, str.subTime
mov rbx, rax
lea rcx, [rbp + 0x140]
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x860]
call fcn.1400534b0
mov r8, rbx
lea rcx, [rbp + 0x880]
mov rdx, rax
call fcn.140010d80
mov r8, rdi
lea rcx, [rbp + 0x840]
mov rdx, rax
call fcn.140010d80
mov rdx, rax
lea r8, [0x140179a84]
lea rcx, [rbp + 0x7d0]
call fcn.140010d10
mov r8, rsi
lea rcx, [rbp + 0x750]
mov rdx, rax
call fcn.140010d80
mov r8, r14
lea rcx, [rbp + 0x730]
mov rdx, rax
call fcn.140010d80
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
mov rcx, rax
call fcn.1400402d0
lea rcx, [rbp + 0x6b0]
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
lea rcx, [rbp + 0x840]
call fcn.1400089c0
lea rcx, [rbp + 0x880]
call fcn.1400089c0
lea rcx, [rbp + 0x860]
call fcn.1400089c0
lea rcx, [rbp + 0x790]
call fcn.1400089c0
lea rcx, [rbp + 0x710]
call fcn.1400089c0
lea rcx, [rbp + 0x690]
call fcn.1400089c0
lea rcx, [rbp + 0x6f0]
call fcn.1400089c0
movaps xmm1, xmm10
xorps xmm0, xmm0
call fcn.140022f40
lea rcx, [rsp + 0x68]
mov qword [rbp + 0x30], 0
lea rdx, [0x1401789e0]
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x730]
call fcn.1400534b0
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
lea rdx, [rbp + 0x30]
mov rcx, rax
call fcn.140040fa0
lea rcx, [rbp + 0x6b0]
movzx ebx, al
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
test bl, bl
je 0x1400689a4
lea rcx, [rbp + 0x490]
call fcn.1400070a0
mov rdi, qword [0x14019eb80]
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov rdx, qword [0x14019ea78]
lea rbx, [0x14017a754]
cmp ax, r12w
lea rcx, [rsp + 0x68]
lea rax, [0x14017a74c]
cmove rbx, rax
add rdx, 0x10
call fcn.1400080f0
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e7f0
mov rdx, rax
lea rcx, [rbp + 0x4a0]
call fcn.140009970
mov rdx, rbx
mov rcx, rax
call fcn.140009320
mov rcx, rax
lea rdx, str._cheats_
call fcn.1400095e0
lea rdx, [rdi + 0x40]
mov rcx, rax
call fcn.140009970
mov rcx, rax
lea rdx, str._buy
call fcn.1400095e0
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rdx, [rbp + 0x750]
lea rcx, [rbp + 0x490]
call fcn.140006f90
mov r8, rax
lea rdx, str.apiLoginRedirect
lea rcx, [rbp + 0x730]
call fcn.140010ca0
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14006e910
lea rdx, str.handler
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x6b0]
mov r8, rax
call fcn.14000b230
mov rcx, rax
call fcn.14000dbb0
xor edi, edi
mov dword [rsp + 0x28], r13d
mov r8, rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
lea rcx, [rbp + 0x490]
call fcn.140003d50
jmp 0x1400689a6
or r15d, 2
lea edx, [rbx + 1]
lea rcx, [rbp + 0x840]
call fcn.14000aed0
lea rdx, [0x140178b9c]
mov rdi, rax
lea rcx, [rsp + 0x68]
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x7d0]
call fcn.1400534b0
mov rdx, rax
lea r8, [0x140179a84]
lea rcx, [rbp + 0x750]
call fcn.140010d10
mov r8, rdi
lea rcx, [rbp + 0x730]
mov rdx, rax
call fcn.140010d80
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
lea rdx, [rbp + 0x40]
mov rcx, rax
call fcn.140040fa0
lea rcx, [rbp + 0x6b0]
movzx edi, al
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
test r15b, 2
je 0x140068ee1
and r15d, 0xfffffffd
lea rcx, [rbp + 0x840]
call fcn.1400089c0
test r13b, r15b
je 0x140068ef6
and r15d, 0xfffffffe
lea rcx, [rbp + 0x880]
call fcn.1400089c0
mov esi, r15d
test dil, dil
je 0x140069053
mov rcx, qword [0x14019eb80]
add rcx, 0x60
call fcn.140053b20
cmp eax, r13d
jne 0x140068f28
mov byte [0x14019f0a0], r13b
call fcn.1400239c0
jmp 0x140069053
mov rdx, qword [0x14019eb80]
lea rcx, [0x14019aee0]
add rdx, 0x40
call fcn.140053560
test ebx, ebx
jne 0x140068f5c
lea rdx, [0x140175828]
lea rcx, [rbp + 0x7d0]
call fcn.140007f50
lea r15d, [rbx + 4]
jmp 0x140068f87
mov edx, r14d
lea rcx, [rbp + 0x750]
call fcn.14000aed0
mov r8, rax
lea rdx, [0x14017a910]
lea rcx, [rbp + 0x730]
call fcn.140010ca0
mov r15d, Ordinal_27
mov rdx, qword [0x14019eb80]
lea rcx, [rbp + 0x6b0]
add rdx, 0x40
mov r8, rax
or r15d, esi
call fcn.14006cb10
mov rdx, rax
lea rcx, [0x14019af60]
call fcn.14004b590
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
test r15b, 0x10
je 0x140068fd5
and r15d, 0xffffffef
lea rcx, [rbp + 0x730]
call fcn.1400089c0
test r15b, 8
je 0x140068feb
and r15d, 0xfffffff7
lea rcx, [rbp + 0x750]
call fcn.1400089c0
test r15b, 4
je 0x140069001
and r15d, 0xfffffffb
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
mov rdx, qword [0x14019eb80]
lea rcx, [0x14019af20]
call fcn.140053560
mov rdx, qword [0x14019eb80]
lea rcx, [0x14019af40]
add rdx, 0x20
call fcn.140053560
mov ecx, 3
call fcn.1400584d0
xor edi, edi
lea r8, [0x140059090]
mov qword [rsp + 0x28], rdi
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], edi
xor ecx, ecx
call fcn.140122c38
inc ebx
cmp ebx, r14d
jle 0x140068a60
mov dword [rsp + 0x64], r15d
mov dword [rsp + 0x64], r15d
mov dword [rsp + 0x64], r15d
mov dword [rsp + 0x64], r15d
mov dword [rsp + 0x64], r15d
mov dword [rsp + 0x64], r15d
mov dword [rsp + 0x64], r15d
mov dword [rsp + 0x64], r15d
mov r9, qword [0x14019eb80]
lea rdx, str.warface
lea rcx, [r9 + 0x40]
call fcn.14006c830
test al, al
jne 0x1400690b9
lea rdx, str.warface_wh1
lea rcx, [r9 + 0x40]
call fcn.14006c830
test al, al
je 0x1400694ae
lea rdx, [rbp + 0x48]
mov qword [rbp + 0x48], 0
lea rcx, str.Run_2_version
call fcn.140040fa0
test al, al
je 0x1400694ae
lea rdx, str.warface
lea rcx, [0x14019aee0]
call fcn.14006b7a0
xor edx, edx
lea rcx, [rbp + 0x6d0]
call fcn.140054d90
mov rdx, rax
lea rcx, [rbp + 0x6f0]
call fcn.14006e910
movzx edx, r13b
lea rcx, [rbp + 0x690]
mov rsi, rax
call fcn.140054d90
mov rdx, rax
lea rcx, [rbp + 0x710]
call fcn.14006e910
lea rdx, [0x14019aee0]
mov rdi, rax
lea rcx, [rbp + 0x860]
call fcn.14006e910
lea rdx, str.reps
mov rbx, rax
lea rcx, [rbp + 0x790]
call fcn.140007f50
lea rdx, [rbp + 0x790]
lea rcx, [rbp + 0x880]
call fcn.14006e910
mov r8, rbx
lea rcx, [rbp + 0x840]
mov rdx, rax
call fcn.14006c660
mov rdx, rax
lea r8, str.datacdesktop
lea rcx, [rbp + 0x7d0]
call fcn.14006c5f0
mov r8, rdi
lea rcx, [rbp + 0x750]
mov rdx, rax
call fcn.14006c660
mov rdx, rax
lea r8, str.monitor
lea rcx, [rbp + 0x730]
call fcn.14006c5f0
mov r8, rsi
lea rcx, [rsp + 0x68]
mov rdx, rax
call fcn.14006c660
lea rdx, str.handler
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x6b0]
mov r8, rax
call fcn.14000b230
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rcx, [rbp + 0x730]
call fcn.140008ae0
lea rcx, [rbp + 0x750]
call fcn.140008ae0
lea rcx, [rbp + 0x7d0]
call fcn.140008ae0
lea rcx, [rbp + 0x840]
call fcn.140008ae0
lea rcx, [rbp + 0x880]
call fcn.140008ae0
lea rcx, [rbp + 0x790]
call fcn.1400089c0
lea rcx, [rbp + 0x860]
call fcn.140008ae0
lea rcx, [rbp + 0x710]
call fcn.140008ae0
lea rcx, [rbp + 0x690]
call fcn.1400089c0
lea rcx, [rbp + 0x6f0]
call fcn.140008ae0
lea rcx, [rbp + 0x6d0]
call fcn.1400089c0
lea rcx, [0x14019eb98]
call fcn.140062190
test al, al
jne 0x1400694a4
call fcn.140047aa0
movzx esi, al
call fcn.140047b00
mov rdi, rax
lea rax, [rbp - 0x78]
mov rcx, rdi
mov qword [rsp + 0x48], rax
call fcn.14004f270
test rax, rax
jne 0x1400692c6
mov rcx, rdi
call fcn.140048560
mov esi, 2
mov rcx, rdi
call fcn.140048560
lea rdx, [0x14017a928]
lea rcx, [0x14017a92c]
call fcn.140123910
mov rbx, rax
nop dword [rax]
nop dword [rax + rax]
mov r8, rbx
lea rcx, [rbp + 0x9f0]
mov edx, 0x100
call fcn.1401230d8
test rax, rax
jne 0x1400692f0
lea r9, [0x14017a930]
lea r8, str.SOFTWAREMicrosoftWindows_NTCurrentVersion
lea rcx, [rsp + 0x68]
call fcn.14006f390
mov rdx, rax
lea rcx, [rbp + 0x790]
call fcn.14006e890
lea rcx, [rbp + 0x290]
call fcn.1400070a0
lea rcx, [rbp + 0x790]
call fcn.140008060
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.1400095e0
mov rcx, rax
lea rdx, [0x14017a9ac]
call fcn.1400095e0
mov rcx, rax
call fcn.14004b520
mov edi, dword [rbp - 0x78]
mov rcx, rax
mov edx, edi
call fcn.14004ff30
mov rcx, rax
lea rdx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400095e0
mov edx, esi
mov rcx, rax
call fcn.14006a400
mov rcx, rax
lea rdx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400095e0
mov rcx, rax
lea rdx, [rbp + 0x9f0]
call fcn.1400095e0
lea rdx, [rbp + 0x840]
lea rcx, [rbp + 0x290]
call fcn.140006f90
mov rcx, rax
call fcn.14000dbb0
lea r8, [0x14019aee0]
mov rbx, rax
lea rdx, str.toLogstart___runinj
lea rcx, [rbp + 0x7d0]
call fcn.1400518b0
mov rdx, rax
lea r8, [0x14017a9b0]
lea rcx, [rbp + 0x750]
call fcn.140010d10
mov r8, rbx
lea rcx, [rbp + 0x730]
mov rdx, rax
call fcn.140010d10
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14006e910
lea rdx, str.handler
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x6b0]
mov r8, rax
call fcn.14000b230
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
lea rcx, [rbp + 0x840]
call fcn.1400089c0
test edi, edi
je 0x14006948c
test esi, esi
jne 0x14006981e
lea rcx, [rbp + 0x290]
call fcn.140003d50
lea rcx, [rbp + 0x790]
call fcn.140008ae0
mov ecx, 4
call fcn.1400584d0
mov rcx, qword [0x14019eb80]
xor dil, dil
add rcx, 0x60
call fcn.140053b20
mov dword [rsp + 0x20], 0xff
cmp eax, r13d
jne 0x1400695bc
xor r9d, r9d
lea rcx, [rbp + 0x200]
xor edx, edx
mov r8d, __WSAFDIsSet
call fcn.140053bb0
lea rdx, [rbp + 0x770]
lea ecx, [r9 + 0x15]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x770], xmm0
call fcn.140014c40
mov rbx, qword [0x14019eb80]
lea rdx, str.instructionUpdated
lea rcx, [rsp + 0x68]
mov dword [rbp + 0x50], 0x43960000
mov dword [rbp + 0x54], 0x41a00000
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x7d0]
call fcn.1400534b0
mov rdx, rax
lea r8, [0x14017a734]
lea rcx, [rbp + 0x750]
call fcn.140010d10
lea r8, [rbx + 0x40]
mov rdx, rax
lea rcx, [rbp + 0x730]
call fcn.140010da0
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
lea rdx, [rbp + 0x50]
mov rcx, rax
call fcn.140040fa0
lea rcx, [rbp + 0x6b0]
movzx edi, al
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
jmp 0x1400696ac
mov edx, 0x59
lea rcx, [rbp + 0x210]
mov r9d, edx
mov r8d, edx
call fcn.140053bb0
lea rdx, [rbp + 0x770]
mov ecx, reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x770], xmm0
call fcn.140014c40
mov rbx, qword [0x14019eb80]
lea rdx, str.instruction
lea rcx, [rsp + 0x68]
mov dword [rbp + 0x58], 0x42a00000
mov dword [rbp + 0x5c], 0x41a00000
call fcn.1400080b0
mov r8, rax
lea rdx, [rbp + 0x7d0]
call fcn.1400534b0
mov rdx, rax
lea r8, [0x14017a734]
lea rcx, [rbp + 0x750]
call fcn.140010d10
lea r8, [rbx + 0x40]
mov rdx, rax
lea rcx, [rbp + 0x730]
call fcn.140010da0
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e910
mov rcx, rax
call fcn.140008060
lea rdx, [rbp + 0x58]
mov rcx, rax
call fcn.140040fa0
lea rcx, [rbp + 0x6b0]
movzx ebx, al
call fcn.140008ae0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
lea rcx, [rbp + 0x7d0]
call fcn.1400089c0
test bl, bl
movzx edi, dil
cmovne edi, r13d
call fcn.140014ca0
test dil, dil
je 0x1400671de
lea rcx, [rbp + 0x290]
call fcn.1400070a0
mov rdi, qword [0x14019eb80]
call qword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov rdx, qword [0x14019ea78]
lea rbx, [0x14017a754]
cmp ax, r12w
lea rcx, [rsp + 0x68]
lea rax, [0x14017a74c]
cmove rbx, rax
add rdx, 0x10
call fcn.1400080f0
mov rdx, rax
lea rcx, [rbp + 0x6b0]
call fcn.14006e7f0
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.140009970
mov rdx, rbx
mov rcx, rax
call fcn.140009320
mov rcx, rax
lea rdx, str._cheats_instruction_
call fcn.1400095e0
lea rdx, [rdi + 0x40]
mov rcx, rax
call fcn.140009970
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rdx, [rbp + 0x750]
lea rcx, [rbp + 0x290]
call fcn.140006f90
mov r8, rax
lea rdx, str.apiLoginRedirect
lea rcx, [rbp + 0x730]
call fcn.140010ca0
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14006e910
lea rdx, str.handler
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x6b0]
mov r8, rax
call fcn.14000b230
mov rcx, rax
call fcn.14000dbb0
xor edi, edi
mov dword [rsp + 0x28], r13d
mov r8, rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
mov rcx, qword [0x14019eb80]
lea rdx, [0x14017a15c]
add rcx, 0x60
call fcn.14006b7a0
lea rcx, [rbp + 0x290]
call fcn.140003d50
jmp 0x1400671e0
lea rdx, str.RunAsPPL
xor dil, dil
lea rcx, [rsp + 0x68]
call fcn.140007f50
lea rdx, str.SYSTEMCurrentControlSetControlLsa
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.140007f50
mov r8, rbx
mov rdx, rax
call fcn.14006e1d0
cmp eax, r13d
jne 0x1400698e8
lea r8, [0x14019aee0]
lea rdx, str.toLogstart___runinj
lea rcx, [rbp + 0x750]
call fcn.1400518b0
mov rdx, rax
lea r8, str._bad_restart_1
lea rcx, [rbp + 0x730]
call fcn.140010d10
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.14006e910
lea rdx, str.handler
mov rbx, rax
lea rcx, [rbp + 0x7d0]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x6b0]
mov r8, rax
call fcn.14000b230
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
movzx edi, r13b
lea rdx, str.Enabled
lea rcx, [rsp + 0x68]
call fcn.140007f50
lea rdx, str.SYSTEMCurrentControlSetControlDeviceGuardScenariosHypervisorEnforcedCodeIntegrity
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.140007f50
mov r8, rbx
mov rdx, rax
call fcn.14006e1d0
cmp eax, r13d
jne 0x1400699af
lea r8, [0x14019aee0]
lea rdx, str.toLogstart___runinj
lea rcx, [rbp + 0x750]
call fcn.1400518b0
mov rdx, rax
lea r8, str._bad_restart_2
lea rcx, [rbp + 0x730]
call fcn.140010d10
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.14006e910
lea rdx, str.handler
mov rbx, rax
lea rcx, [rbp + 0x7d0]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x6b0]
mov r8, rax
call fcn.14000b230
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
movzx edi, r13b
lea rdx, str.VulnerableDriverBlocklistEnable
lea rcx, [rsp + 0x68]
call fcn.140007f50
lea rdx, str.SYSTEMCurrentControlSetControlCIConfig
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.140007f50
mov r8, rbx
mov rdx, rax
call fcn.14006e1d0
cmp eax, r13d
je 0x140069a7d
test dil, dil
je 0x140069bee
jmp 0x140069b08
lea rcx, str.invalid_stoi_argument
call fcn.1400eadbc
int3
mov ecx, r13d
call fcn.140119040
int3
call fcn.140062060
test al, al
jne 0x140069a20
lea rcx, str.The_librarys_was_not_initialized_
call fcn.140001580
call fcn.140063760
test al, al
jne 0x140069a35
lea rcx, str.The_input_was_not_initialized_
call fcn.140001580
call fcn.140063db0
test al, al
jne 0x140069a4a
lea rcx, str.The_gui_was_not_initialized_
call fcn.140001580
lea rcx, [0x14019eb98]
call fcn.140062190
test al, al
jne 0x140069a66
lea rcx, str.The_driver_was_not_initialized_
call fcn.140001580
call fcn.1400641c0
call fcn.140063e20
call fcn.140065900
xor ecx, ecx
call fcn.140119040
int3
lea r8, [0x14019aee0]
lea rdx, str.toLogstart___runinj
lea rcx, [rbp + 0x750]
call fcn.1400518b0
mov rdx, rax
lea r8, str._bad_restart_3
lea rcx, [rbp + 0x730]
call fcn.140010d10
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.14006e910
lea rdx, str.handler
mov rbx, rax
lea rcx, [rbp + 0x7d0]
call fcn.1400080b0
mov r9, rbx
lea rdx, [rbp + 0x6b0]
mov r8, rax
call fcn.14000b230
lea rcx, [rbp + 0x6b0]
call fcn.1400089c0
lea rcx, [rbp + 0x730]
call fcn.1400089c0
lea rcx, [rbp + 0x750]
call fcn.1400089c0
movabs rax, 0xa21d629d5a15df6c
movabs rcx, 0xc57404f33576af05
mov qword [rbp + 0x690], rax
movabs rax, 0x860e05cbd06e42e6
mov qword [rbp + 0x698], rax
movabs rax, 0x26629a51fc7157d9
mov qword [rbp + 0x710], rcx
movabs rcx, 0xe26676bebc086dc6
mov qword [rbp + 0x6a0], rax
movabs rax, 0xc6869af493155158
mov qword [rbp + 0x718], rcx
movabs rcx, 0x26629a51fc7124b7
movdqa xmm0, xmmword [rbp + 0x710]
xorps xmm0, xmmword [rbp + 0x690]
mov qword [rbp + 0x720], rcx
lea rcx, [rbp + 0x690]
mov qword [rbp + 0x6a8], rax
mov qword [rbp + 0x728], rax
movdqa xmm1, xmmword [rbp + 0x720]
xorps xmm1, xmmword [rbp + 0x6a0]
movdqa xmmword [rbp + 0x6a0], xmm1
movdqa xmmword [rbp + 0x690], xmm0
call fcn.140122eac
lea rcx, str.C:WindowsSystem32_shutdown__r__t_5
call fcn.140122eac
xor r9d, r9d
lea r8, str.Restart
lea rdx, str.Restart_PC_n
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, r13d
call fcn.140119040
int3
lea rdx, [0x14017a9d0]
lea rcx, [rsp + 0x68]
call fcn.140007f50
mov rcx, rax
call fcn.14006e4b0
mov ecx, r13d
call fcn.140119040
int3
mov ecx, 6
mov dword [rbp + 0x138], esi
call fcn.1400f06b0
int3
movabs rax, 0xc13700cc3146ab12
movabs r8, 0xf0cb504be8703c4d
mov qword [rbp + 0x7f0], rax
movabs rdx, 0x8fa4cf760f5a5cce
mov qword [rbp + 0x830], r8
movabs rax, 0xe6247286b84a6987
mov qword [rbp + 0x7f8], rax
movabs rcx, 0xc57404f33576af05
movdqa xmm0, xmmword [rbp + 0x7f0]
movabs rax, 0x22209e6ffc512082
mov qword [rbp + 0x800], rax
xor r9d, r9d
mov qword [rbp + 0x8a0], rcx
movabs rax, 0xc2ba9ec097255178
mov qword [rbp + 0x808], rax
movabs rcx, 0xe26676bebc086dc6
mov qword [rbp + 0x8a8], rcx
movabs rax, 0x9f31f58fa7955361
xorps xmm0, xmmword [rbp + 0x8a0]
movabs rcx, 0x26629a51fc7124b7
mov qword [rbp + 0x810], rax
movabs rax, 0x3b95f014dd8ca8d8
mov qword [rbp + 0x818], rax
movabs rax, 0x2bfdcced4264ed2a
mov qword [rbp + 0x820], rax
movabs rax, 0xeb49d5c9f4780038
mov qword [rbp + 0x828], rax
movabs rax, 0xc6869af493155158
mov qword [rbp + 0x8b8], rax
movabs rax, 0x9f1ff1bfa3a85759
mov qword [rbp + 0x8c0], rax
movabs rax, 0x3bb5f07addf9a88a
movdqa xmmword [rbp + 0x7f0], xmm0
mov qword [rbp + 0x8c8], rax
movabs rax, 0x2bbccccd4217ed4b
movdqa xmm0, xmmword [rbp + 0x8c0]
xorps xmm0, xmmword [rbp + 0x810]
mov qword [rbp + 0x838], rdx
mov qword [rbp + 0x8b0], rcx
xor ecx, ecx
movdqa xmm1, xmmword [rbp + 0x8b0]
xorps xmm1, xmmword [rbp + 0x800]
mov qword [rbp + 0x8d0], rax
movabs rax, 0xeb27d5a0f415005c
mov qword [rbp + 0x8e0], r8
xor r8d, r8d
mov qword [rbp + 0x8e8], rdx
lea rdx, [rbp + 0x7f0]
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm0, xmmword [rbp + 0x8e0]
xorps xmm0, xmmword [rbp + 0x830]
mov qword [rbp + 0x8d8], rax
movdqa xmm1, xmmword [rbp + 0x8d0]
xorps xmm1, xmmword [rbp + 0x820]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmmword [rbp + 0x830], xmm0
call qword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, 1
call fcn.140119040
int3
call fcn.140118cb4
int3
call fcn.140118cb4
int3
movabs rax, 0xc50404873502af6d
mov dword [rsp + 0x28], r13d
mov qword [rbp + 0x7f0], rax
movabs rdx, 0x8fa4cf760f5a5cce
mov qword [rbp + 0x838], rdx
movabs rax, 0xe2497691bc326db5
mov qword [rbp + 0x7f8], rax
movabs rcx, 0xc57404f33576af05
mov qword [rbp + 0x8a0], rcx
movabs rax, 0x260d9a3efc1924cf
mov qword [rbp + 0x800], rax
movabs rcx, 0xe26676bebc086dc6
mov qword [rbp + 0x8a8], rcx
movabs rax, 0xc6e39a9a933b5133
movdqa xmm0, xmmword [rbp + 0x8a0]
movabs rcx, 0x26629a51fc7124b7
xorps xmm0, xmmword [rbp + 0x7f0]
movabs r8, 0xf0cb504be8703c4d
mov qword [rbp + 0x808], rax
xor r9d, r9d
movdqa xmmword [rbp + 0x7f0], xmm0
movabs rax, 0x9f6af1cda387572d
mov qword [rbp + 0x810], rax
movabs rax, 0x3bdaf008dd89a8a5
mov qword [rbp + 0x818], rax
movabs rax, 0x2bd9cca1427eed2d
mov qword [rbp + 0x820], rax
movabs rax, 0xeb4ed5d7f47d0073
mov qword [rbp + 0x828], rax
movabs rax, 0xf0cb504be8703c29
mov qword [rbp + 0x830], rax
movabs rax, 0xc6869af493155158
mov qword [rbp + 0x8b8], rax
movabs rax, 0x9f1ff1bfa3a85759
mov qword [rbp + 0x8c0], rax
movabs rax, 0x3bb5f07addf9a88a
mov qword [rbp + 0x8c8], rax
movabs rax, 0x2bbccccd4217ed4b
movdqa xmm0, xmmword [rbp + 0x8c0]
xorps xmm0, xmmword [rbp + 0x810]
mov qword [rbp + 0x8d0], rax
movabs rax, 0xeb27d5a0f415005c
mov qword [rbp + 0x8b0], rcx
xor ecx, ecx
movdqa xmm1, xmmword [rbp + 0x8b0]
xorps xmm1, xmmword [rbp + 0x800]
mov qword [rbp + 0x8d8], rax
xor eax, eax
mov qword [rbp + 0x8e0], r8
lea r8, [rbp + 0x7f0]
mov qword [rbp + 0x8e8], rdx
lea rdx, str.open
movdqa xmmword [rbp + 0x800], xmm1
movdqa xmm1, xmmword [rbp + 0x8d0]
xorps xmm1, xmmword [rbp + 0x820]
movdqa xmmword [rbp + 0x810], xmm0
movdqa xmm0, xmmword [rbp + 0x8e0]
xorps xmm0, xmmword [rbp + 0x830]
movdqa xmmword [rbp + 0x820], xmm1
movdqa xmmword [rbp + 0x830], xmm0
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, r13d
call fcn.140119040
int3
lea rdx, [rbp + 0x7b0]
lea rcx, [rsp + 0x68]
call fcn.140007f90
mov rcx, rax
call fcn.14006e4b0
mov ecx, r13d
call fcn.140119040
int3
call fcn.140118cb4
int3
call fcn.140118cb4
int3
call fcn.140118cb4
int3
call fcn.140118cb4
int3
lea rcx, str.stoi_argument_out_of_range
call fcn.1400eae04
int3
lea rcx, str.invalid_stoi_argument
call fcn.1400eadbc
int3
lea rcx, str.stoi_argument_out_of_range
call fcn.1400eae04
int3
lea rcx, str.invalid_stoi_argument
call fcn.1400eadbc
int3
lea rcx, str.stoi_argument_out_of_range
call fcn.1400eae04
int3