Function at 0x14003caf0
Capabilities:
Create directory
Create http request
Create thread
Get common file path
Read file via mapping

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x4f0
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
mov rax, qword [0x140057040]
xor rax, rsp
mov qword [rsp + 0x450], rax
xor r15d, r15d
mov dword [rsp + 0x64], r15d
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebx, eax
lea ecx, [r15 + 1]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, eax
lea eax, [rbx - 0x253]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
lea eax, [rcx - 0x24e]
cdq
sub eax, edx
sar eax, 1
mov edi, eax
mov dword [rsp + 0x120], 0x50
mov dword [rsp + 0x124], 0x40
lea rax, [0x140041790]
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x138], rax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x140], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x150], xmm1
lea rax, str.SMI_MainWindow
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x28], 0x50
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8d, [r15 + 1]
lea rdx, str.C:_reee.ico
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rsp + 0x140], rax
test rax, rax
jne 0x14003cc37
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x168], rax
lea rcx, [rsp + 0x120]
call qword [sym.imp.USER32.dll_RegisterClassExW]
lea rcx, [rsp + 0x240]
call fcn.14003bf20
nop
lea rcx, [rsp + 0x240]
mov r8, qword [rsp + 0x250]
cmp qword [rsp + 0x258], 0xf
jbe 0x14003cc83
mov rdx, qword [rsp + 0x240]
add r8, rdx
jmp 0x14003cc8e
add r8, rcx
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x1a0]
call fcn.14003f690
nop
lea r8, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 7
cmova r8, qword [rsp + 0x1a0]
mov qword [rsp + 0x58], r15
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], 0x24e
mov dword [rsp + 0x30], 0x253
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebx
mov r9d, 0xca0000
mov rdx, qword [rsp + 0x160]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140057ce0], rax
mov qword [rsp + 0x284], r15
mov qword [rsp + 0x298], 2
mov qword [rsp + 0x2b0], 2
mov qword [rsp + 0x270], r15
mov dword [rsp + 0x280], 0x1c
mov dword [rsp + 0x278], 0x3c
mov dword [rsp + 0x27c], 1
mov dword [rsp + 0x294], 0x20
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x28c], 1
mov qword [rsp + 0x2a8], 1
mov dword [rsp + 0x330], 0xb000
mov dword [rsp + 0x334], 0xa000
lea rax, [0x140057cc0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x198]
mov qword [rsp + 0x50], rax
lea rax, [0x140057cc8]
mov qword [rsp + 0x48], rax
lea rax, [0x140057cd0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x270]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rsp + 0x330]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x14003cef1
mov r9d, 0x10
xor r8d, r8d
lea rdx, str.Error_Create
mov rcx, qword [0x140057ce0]
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.1400416a0
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.USER32.dll_UnregisterClassW]
nop
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 7
jbe 0x14003ce87
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ce82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f000
call fcn.140042e3c
mov qword [rsp + 0x1b0], r15
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r15w
mov rdx, qword [rsp + 0x258]
cmp rdx, 0xf
jbe 0x14003cee7
inc rdx
mov rcx, qword [rsp + 0x240]
mov r8, rcx
cmp rdx, 0x1000
jb 0x14003cee2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x14003f063
call fcn.140042e3c
mov eax, 1
jmp 0x14003f071
call fcn.140041720
mov edx, 1
mov rcx, qword [0x140057ce0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rbx, qword [0x140057c70]
mov ecx, 0x61f8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov r8, qword [0x140057c70]
test r8, r8
je 0x14003cf89
mov r10d, dword [r8 + 0x3f60]
movsx rax, word [r8 + 0x60a8]
lea rdx, [r8 + 0x60ac]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x14003cf7e
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60a8], cx
movsx rax, cx
lea rdx, [r8 + 0x60ac]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r15d
inc word [rdx + 4]
inc dword [r8 + 0x60a0]
mov qword [rsp + 0x118], r9
lea rax, [rsp + 0x60]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], r9
test r9, r9
je 0x14003cfb1
xor edx, edx
mov rcx, r9
call fcn.140001470
jmp 0x14003cfb4
mov rax, r15
mov qword [0x140057c70], rax
call fcn.140005e30
test rbx, rbx
je 0x14003cfce
mov qword [0x140057c70], rbx
jmp 0x14003cfd5
mov rbx, qword [0x140057c70]
mov qword [rbx + 0x20], r15
mov rcx, qword [0x140057ce0]
call fcn.14002e560
call fcn.14002e390
lea r8, str.SystemDrive
xor edx, edx
lea rcx, [rsp + 0x110]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
test eax, eax
jne 0x14003d43a
mov rdx, qword [rsp + 0x110]
test rdx, rdx
je 0x14003d43a
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], r15
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14003d040
lea rcx, [rsp + 0x200]
call fcn.14003aa80
nop
mov r8d, 0x18
lea rdx, str.WindowsFonts_times.ttf
lea rcx, [rsp + 0x200]
call fcn.14003f490
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
mov qword [rsp + 0x1f0], r15
mov qword [rsp + 0x1f8], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x1e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x1f0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rsp + 0x64], 2
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x14003d101
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d0fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003d0fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140042e3c
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], 0xf
mov byte [rsp + 0x200], 0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14003f7e0
lea rdx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rdx, qword [rsp + 0x1e0]
mov r8, qword [rsp + 0x1f0]
mov rcx, rax
call fcn.1400404b0
lea rdx, [0x14003f990]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rsi, qword [rbx + 0x38]
lea rbx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0xf
cmova rbx, qword [rsp + 0x1e0]
mov qword [rsp + 0x198], r15
lea r8, [rsp + 0x198]
mov rcx, rbx
call fcn.140003580
mov rdi, rax
movss xmm10, dword [0x14004d658]
test rax, rax
je 0x14003d3d6
xorps xmm1, xmm1
movups xmmword [rsp + 0x340], xmm1
movups xmmword [rsp + 0x350], xmm1
movups xmmword [rsp + 0x380], xmm1
movups xmmword [rsp + 0x390], xmm1
mov byte [rsp + 0x34c], 1
mov dword [rsp + 0x358], 2
mov dword [rsp + 0x35c], 1
mov dword [rsp + 0x384], 0x7f7fffff
mov dword [rsp + 0x390], 0x3f800000
mov dword [rsp + 0x394], 0x3f800000
mov eax, 0xffff
mov word [rsp + 0x398], ax
movaps xmm3, xmmword [rsp + 0x340]
movaps xmmword [rsp + 0x270], xmm3
movaps xmm4, xmmword [rsp + 0x350]
movaps xmmword [rsp + 0x280], xmm4
movaps xmmword [rsp + 0x290], xmm1
xorps xmm5, xmm5
movaps xmmword [rsp + 0x2a0], xmm5
movaps xmm6, xmmword [rsp + 0x380]
movaps xmmword [rsp + 0x2b0], xmm6
movaps xmm2, xmmword [rsp + 0x390]
movaps xmmword [rsp + 0x2c0], xmm2
xorps xmm7, xmm7
movaps xmmword [rsp + 0x2d0], xmm7
xorps xmm8, xmm8
movaps xmmword [rsp + 0x2e0], xmm8
xorps xmm9, xmm9
movaps xmmword [rsp + 0x2f0], xmm9
movdqa xmm0, xmm2
psrldq xmm0, 0xa
movd eax, xmm0
test al, al
jne 0x14003d35a
mov r9, 0xffffffffffffffff
nop
inc r9
cmp byte [rbx + r9], 0
jne 0x14003d2c0
add r9, rbx
cmp r9, rbx
jbe 0x14003d2e9
lea rcx, [r9 - 1]
movzx eax, byte [rcx]
cmp al, 0x2f
je 0x14003d2e9
cmp al, 0x5c
je 0x14003d2e9
mov r9, rcx
cmp rcx, rbx
ja 0x14003d2d2
movsd xmm0, qword [0x14004d678]
movsd qword [rsp + 0x20], xmm0
lea r8, str._s___.0fpx
mov edx, 0x28
lea rcx, [rsp + 0x2ca]
call fcn.1400031e0
movaps xmm9, xmmword [rsp + 0x2f0]
movaps xmm8, xmmword [rsp + 0x2e0]
movaps xmm7, xmmword [rsp + 0x2d0]
movaps xmm2, xmmword [rsp + 0x2c0]
movaps xmm6, xmmword [rsp + 0x2b0]
movaps xmm5, xmmword [rsp + 0x2a0]
movaps xmm1, xmmword [rsp + 0x290]
movaps xmm4, xmmword [rsp + 0x280]
movaps xmm3, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x340], xmm3
movaps xmmword [rsp + 0x350], xmm4
movaps xmmword [rsp + 0x360], xmm1
movaps xmmword [rsp + 0x370], xmm5
movaps xmmword [rsp + 0x380], xmm6
movaps xmmword [rsp + 0x390], xmm2
movaps xmmword [rsp + 0x3a0], xmm7
movaps xmmword [rsp + 0x3b0], xmm8
movaps xmmword [rsp + 0x3c0], xmm9
mov qword [rsp + 0x340], rdi
mov eax, dword [rsp + 0x198]
mov dword [rsp + 0x348], eax
mov dword [rsp + 0x354], 0x41b80000
lea rdx, [rsp + 0x340]
mov rcx, rsi
call fcn.1400286f0
nop
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 0xf
jbe 0x14003d41c
inc rdx
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d417
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003d417
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140042e3c
mov qword [rsp + 0x1f0], r15
mov qword [rsp + 0x1f8], 0xf
mov byte [rsp + 0x1e0], 0
jmp 0x14003d443
movss xmm10, dword [0x14004d658]
xorps xmm0, xmm0
movups xmmword [rsp + 0x300], xmm0
movups xmmword [rsp + 0x310], xmm0
movups xmmword [rsp + 0x320], xmm0
lea r13, [0x140057c80]
lea r14, str.freedom
lea r12, str.GTA5.exe
movss xmm14, dword [0x14004d6bc]
xorps xmm7, xmm7
movss xmm8, dword [0x14004d704]
movss xmm13, dword [0x14004d6cc]
movss xmm11, dword [0x14004d5e8]
movss xmm12, dword [0x14004d66c]
movss xmm9, dword [0x14004d6d0]
nop dword [rax]
cmp dword [rsp + 0x308], 0x12
je 0x14003ed6f
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x300]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14003d4fe
lea rcx, [rsp + 0x300]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x300]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x14003d4b0
mov rax, qword [0x140057c70]
test rax, rax
je 0x14003d513
mov rcx, qword [rax + 0x98]
jmp 0x14003d516
mov rcx, r15
cmp qword [rcx + 0x48], 0
jne 0x14003d522
call fcn.14002dd30
call fcn.14002ef70
call fcn.140008670
call fcn.140041a50
cmp qword [0x140057108], 0
je 0x14003d73d
mov rsi, qword [0x140057c70]
mov rbx, qword [rsi + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.PopupNotification
call fcn.1400033e0
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4054], eax
jne 0x14003d58e
lea r8, str.PopupNotification
mov edx, 0xb
mov ecx, eax
call fcn.14001a810
test byte [rsi + 0x600c], 4
je 0x14003d5ad
mov r8d, edi
lea rdx, str.PopupNotification
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14001a430
mov ecx, edi
call fcn.140014080
mov rax, qword [0x140057c70]
or dword [rax + 0x49e8], 2
mov qword [rax + 0x4a08], 0x437a0000
mov dword [rax + 0x49f0], 1
mov r8d, 0x6f
lea rcx, str.PopupNotification
call fcn.140014650
test al, al
je 0x14003d73d
lea rdi, [0x1400570f8]
mov rcx, rdi
cmp qword [0x140057110], 0xf
cmova rcx, qword [0x1400570f8]
call fcn.140032010
lea rcx, [0x140046ab7]
call fcn.140031eb0
mov rcx, qword [0x140057c70]
mov rax, qword [rcx + 0x4008]
movss xmm2, dword [rax + 0x114]
subss xmm2, dword [rax + 0x2c]
movss xmm3, dword [rax + 0x110]
subss xmm3, dword [rax + 0x28]
addss xmm2, dword [rax + 0x90]
addss xmm3, dword [rax + 0x8c]
addss xmm3, xmm14
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov qword [rsp + 0x80], 0x42480000
lea rdx, [rsp + 0x80]
lea rcx, [0x14004cea0]
call fcn.140032be0
test al, al
je 0x14003d6e6
mov rax, rdi
cmp qword [0x140057110], 0xf
cmova rax, qword [0x1400570f8]
mov qword [0x140057108], r15
mov byte [rax], 0
call fcn.140014570
mov rbx, qword [0x140057c70]
mov rcx, qword [rbx + 0x4008]
cmp qword [rbx + 0x4b08], rcx
jne 0x14003d721
cmp byte [rbx + 0x4b99], 0
je 0x14003d721
cmp dword [rbx + 0x4b40], 0
jne 0x14003d721
mov eax, dword [rbx + 0x4b9c]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4b9c], eax
test dword [rcx + 0x14], 0x1000000
je 0x14003d731
mov byte [rbx + 0x3f6e], 1
call fcn.14000fed0
mov byte [rbx + 0x3f6e], 0
mov rax, qword [0x140057c70]
mov dword [rax + 0x4a08], 0x44110000
mov dword [rax + 0x4a0c], 0x44098000
mov dword [rax + 0x49f0], 1
or dword [rax + 0x49e8], 3
mov qword [rax + 0x49f8], 0
mov qword [rax + 0x4a00], 0
mov dword [rax + 0x49ec], 1
xor edx, edx
lea r8d, [rdx + 0x27]
lea rcx, str.beginwin
call fcn.14000db50
call fcn.14003c820
test al, al
jne 0x14003dc00
cmp byte [0x1400570b8], al
je 0x14003d82c
mov rsi, qword [0x140057c70]
mov rbx, qword [rsi + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Password_Popup
call fcn.1400033e0
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4054], eax
jne 0x14003d7ff
lea r8, str.Password_Popup
mov edx, 0xb
mov ecx, eax
call fcn.14001a810
test byte [rsi + 0x600c], 4
je 0x14003d81e
mov r8d, edi
lea rdx, str.Password_Popup
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14001a430
mov ecx, edi
call fcn.140014080
mov byte [0x1400570b8], 0
mov r8d, 0x6f
lea rcx, str.Password_Popup
call fcn.140014650
test al, al
je 0x14003da4c
lea rcx, str.Enter_Key:
call fcn.140031eb0
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x8000
lea rax, [rsp + 0x88]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
mov r8, r13
xor edx, edx
lea rcx, str.PasswordInput
call fcn.140036180
mov qword [rsp + 0x90], 0
lea rdx, [rsp + 0x90]
lea rcx, [0x14004cea0]
call fcn.140032be0
test al, al
je 0x14003d8ff
mov rcx, r15
nop dword [rax + rax]
movzx eax, byte [rcx + r13]
inc rcx
cmp al, byte [r14 + rcx - 1]
jne 0x14003d8f8
cmp rcx, 8
jne 0x14003d8c0
lea r8d, [rcx + 0xa]
lea rdx, str.Login_Successfully
call fcn.14003a7e0
call fcn.140014570
mov byte [0x140057c80], 0
call fcn.14003c1e0
jmp 0x14003d8ff
mov byte [0x140057c69], 1
movaps xmm1, xmm8
movaps xmm0, xmm7
call fcn.140013640
mov qword [rsp + 0x98], 0
lea rdx, [rsp + 0x98]
lea rcx, str.Cancel
call fcn.140032be0
test al, al
je 0x14003d9f5
call fcn.140014570
mov byte [0x140057c80], 0
movzx ebx, byte [0x1400570b8]
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 7
jbe 0x14003d98e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14003d989
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003f000
call fcn.140042e3c
mov word [rsp + 0x1a0], r15w
mov qword [rsp + 0x1b8], 7
mov qword [rsp + 0x1b0], r15
mov rdx, qword [rsp + 0x258]
cmp rdx, 0xf
jbe 0x14003d9ee
inc rdx
mov rcx, qword [rsp + 0x240]
cmp rdx, 0x1000
mov r8, rcx
jb 0x14003d9e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x14003f063
call fcn.140042e3c
mov eax, ebx
jmp 0x14003f071
mov rbx, qword [0x140057c70]
mov rcx, qword [rbx + 0x4008]
cmp qword [rbx + 0x4b08], rcx
jne 0x14003da30
cmp byte [rbx + 0x4b99], 0
je 0x14003da30
cmp dword [rbx + 0x4b40], 0
jne 0x14003da30
mov eax, dword [rbx + 0x4b9c]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4b9c], eax
test dword [rcx + 0x14], 0x1000000
je 0x14003da40
mov byte [rbx + 0x3f6e], 1
call fcn.14000fed0
mov byte [rbx + 0x3f6e], 0
cmp byte [0x140057c69], 0
je 0x14003dad1
mov rsi, qword [0x140057c70]
mov rbx, qword [rsi + 0x4008]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.Login_Failed
call fcn.1400033e0
mov edi, eax
mov rcx, qword [rbx]
cmp dword [rcx + 0x4054], eax
jne 0x14003daa4
lea r8, str.Login_Failed
mov edx, 0xb
mov ecx, eax
call fcn.14001a810
test byte [rsi + 0x600c], 4
je 0x14003dac3
mov r8d, edi
lea rdx, str.Login_Failed
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14001a430
mov ecx, edi
call fcn.140014080
mov byte [0x140057c69], 0
mov r8d, 0x44
lea rcx, str.Login_Failed
call fcn.140014650
test al, al
je 0x14003dc00
lea rcx, str.Please_enter_correct_key_and_try_again
call fcn.140031eb0
mov rcx, qword [0x140057c70]
mov rax, qword [rcx + 0x4008]
movss xmm2, dword [rax + 0x114]
subss xmm2, dword [rax + 0x2c]
movss xmm3, dword [rax + 0x110]
subss xmm3, dword [rax + 0x28]
addss xmm2, dword [rax + 0x90]
addss xmm3, dword [rax + 0x8c]
addss xmm3, xmm13
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov qword [rsp + 0xa0], 0
lea rdx, [rsp + 0xa0]
lea rcx, [0x14004cea0]
call fcn.140032be0
test al, al
je 0x14003dba9
call fcn.140014570
jmp 0x14003d93f
mov rbx, qword [0x140057c70]
mov rcx, qword [rbx + 0x4008]
cmp qword [rbx + 0x4b08], rcx
jne 0x14003dbe4
cmp byte [rbx + 0x4b99], 0
je 0x14003dbe4
cmp dword [rbx + 0x4b40], 0
jne 0x14003dbe4
mov eax, dword [rbx + 0x4b9c]
and eax, 0xfffffff2
or eax, 2
mov dword [rbx + 0x4b9c], eax
test dword [rcx + 0x14], 0x1000000
je 0x14003dbf4
mov byte [rbx + 0x3f6e], 1
call fcn.14000fed0
mov byte [rbx + 0x3f6e], 0
mov rbx, qword [0x140057c70]
mov dword [rbx + 0x39ac], 0x43820000
mov dword [rbx + 0x39b0], 0x40400000
mov dword [rbx + 0x39a0], 0x40a00000
movss xmm0, dword [0x140057d24]
subss xmm0, xmm11
movss dword [0x140057d24], xmm0
comiss xmm8, xmm0
jbe 0x14003dc4d
addss xmm0, xmm10
movss dword [0x140057d24], xmm0
addss xmm0, xmm10
comiss xmm7, xmm0
jbe 0x14003dc5c
addss xmm0, xmm10
lea rax, [rsp + 0x330]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x74]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
movaps xmm2, xmm10
movaps xmm1, xmm10
call fcn.140003a40
movss xmm0, dword [rsp + 0x70]
movss dword [rsp + 0x200], xmm0
movss xmm1, dword [rsp + 0x74]
movss dword [rsp + 0x204], xmm1
movss xmm0, dword [rsp + 0x330]
movss dword [rsp + 0x208], xmm0
mov dword [rsp + 0x20c], 0x3f800000
mov dword [rsp + 0x1c0], r15d
movups xmm0, xmmword [rbx + 0x39d4]
movups xmmword [rsp + 0x1c4], xmm0
lea rcx, [rbx + 0x4a60]
lea rdx, [rsp + 0x1c0]
call fcn.14001b300
cmp dword [rbx + 0x4a5c], 0
je 0x14003dd03
movups xmm0, xmmword [rsp + 0x200]
movups xmmword [rbx + 0x39d4], xmm0
mov rdx, qword [0x140057c70]
mov rax, qword [rdx + 0x4008]
mov byte [rax + 0xc0], 1
mov rcx, qword [rdx + 0x4008]
mov dword [rcx + 0x2a0], 0x3fe66666
mov rax, qword [rcx]
movss xmm0, dword [rax + 0x3d44]
mulss xmm0, xmm12
mov rax, qword [rcx + 0x378]
test rax, rax
je 0x14003dd4d
mulss xmm0, dword [rax + 0x2a0]
movss dword [rdx + 0x3d58], xmm0
movss dword [rdx + 0x3d40], xmm0
lea rcx, str.___________________ROOX_MOD
call fcn.140031eb0
mov r8, qword [0x140057c70]
mov rax, qword [r8 + 0x4008]
mov byte [rax + 0xc0], 1
mov rcx, qword [r8 + 0x4008]
mov dword [rcx + 0x2a0], 0x3f800000
mov rax, qword [rcx]
movss xmm0, dword [rax + 0x3d44]
mov rax, qword [rcx + 0x378]
test rax, rax
je 0x14003ddae
mulss xmm0, dword [rax + 0x2a0]
movss dword [r8 + 0x3d58], xmm0
movss dword [r8 + 0x3d40], xmm0
movsxd rax, dword [r8 + 0x4a60]
cmp eax, 1
jl 0x14003ddf4
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a68]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a60]
mov rax, qword [r8 + 0x4008]
mov byte [rax + 0xc0], 1
mov rax, qword [r8 + 0x4008]
cmp byte [rax + 0xc3], 0
jne 0x14003de59
lea rax, [0x14004cf5c]
mov r8, rax
cmp rax, 0xffffffffffffffff
jae 0x14003de47
movzx ecx, byte [r8]
test cl, cl
je 0x14003de40
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x14003de37
cmp byte [rax], cl
je 0x14003de40
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x14003de22
lea rax, [0x14004cf5c]
movaps xmm3, xmm7
mov rdx, rax
call fcn.140033a00
mov r8, qword [0x140057c70]
mov rax, qword [r8 + 0x4008]
movss xmm2, dword [rax + 0x114]
subss xmm2, dword [rax + 0x2c]
movss xmm3, dword [rax + 0x110]
subss xmm3, dword [rax + 0x28]
addss xmm2, dword [rax + 0x90]
addss xmm3, dword [rax + 0x8c]
addss xmm3, xmm9
mov byte [rax + 0xc0], 1
mov rax, qword [r8 + 0x4008]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov qword [rsp + 0xa8], 0x43480000
lea rdx, [rsp + 0xa8]
lea rcx, str.Check_State_Online
call fcn.140032be0
test al, al
je 0x14003e093
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], r15
mov r8d, 0x38
lea rdx, [0x14004cf80]
lea rcx, [rsp + 0x170]
call fcn.14003fd30
nop
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, str.Download_Checker
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rbx, rax
test rax, rax
je 0x14003e048
lea rdx, [rsp + 0x170]
cmp qword [rsp + 0x188], 7
cmova rdx, qword [rsp + 0x170]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 0x4000000
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov rdi, rax
test rax, rax
jne 0x14003dfb8
lea r8d, [rax + 0x30]
lea rdx, str.Check_Failed_:_unable_to_connect_to_the_internet
call fcn.14003a7e0
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x14003e048
mov dword [rsp + 0x190], r15d
mov dword [rsp + 0x198], 4
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x198]
lea r8, [rsp + 0x190]
mov edx, 0x20000013
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpQueryInfoW]
mov rcx, rdi
test eax, eax
jne 0x14003e006
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x14003e048
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [rsp + 0x190]
add eax, 0xffffff38
cmp eax, 0x63
ja 0x14003e035
mov r8d, 0xb
lea rdx, str.Safe_To_Use
jmp 0x14003e042
mov r8d, 0x41
lea rdx, str.Detected_:_Dont_Use_it._Visit_Official_Site_To_Know_When_Updated
call fcn.14003a7e0
nop
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x14003e093
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e08e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e08e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140042e3c
xor ecx, ecx
call fcn.140007800
test al, al
je 0x14003e0aa
lea rcx, str._Check_Every_Time_Before_Run_The_Mod__
call fcn.140013ff0
mov rcx, qword [0x140057c70]
mov rax, qword [rcx + 0x4008]
movss xmm3, dword [rax + 0x114]
subss xmm3, dword [rax + 0x2c]
movss xmm2, dword [rax + 0x110]
subss xmm2, dword [rax + 0x28]
addss xmm3, dword [rax + 0x90]
addss xmm2, dword [rax + 0x8c]
addss xmm2, xmm9
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm3, xmm0
addss xmm1, xmm2
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm3
mov byte [rax + 0x151], 1
mov qword [rsp + 0xb0], 0x43480000
lea rdx, [rsp + 0xb0]
lea rcx, str.Run_Roox
call fcn.140032be0
test al, al
je 0x14003e4a3
lea rax, [rsp + 0x340]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1a]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jne 0x14003e289
lea r8, [0x14004d4a8]
mov edx, 0x104
lea rcx, [rsp + 0x340]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea r8, str.AdllBin.dll
mov edx, 0x104
lea rcx, [rsp + 0x340]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
mov ecx, 0x104
call fcn.1400430f4
mov r14, rax
lea r8, [rsp + 0x340]
mov edx, 0x104
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14003e270
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
test rax, rax
je 0x14003e270
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rsi, rax
test rax, rax
je 0x14003e270
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x5a4d
cmp word [rsi], ax
jne 0x14003e270
mov qword [0x140057c78], r14
jmp 0x14003e282
mov r8d, 0x12
lea rdx, str.Download_Mod_First
call fcn.14003a7e0
lea r14, str.freedom
cmp qword [0x140057c78], 0
jne 0x14003e2aa
mov r8d, 0x12
lea rdx, str.Download_Mod_First
call fcn.14003a7e0
jmp 0x14003e4a3
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], r15
mov qword [rsp + 0x238], r15
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r12 + r8], 0
jne 0x14003e2d0
mov rdx, r12
lea rcx, [rsp + 0x220]
call fcn.14003aa80
nop
cmp qword [rsp + 0x230], 0
je 0x14003e45d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rdi, rax
lea rbx, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rbx, qword [rsp + 0x220]
mov dword [rax], r15d
mov r8d, 0xa
lea rdx, [rsp + 0x118]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov esi, eax
cmp rbx, qword [rsp + 0x118]
jne 0x14003e350
lea rcx, str.invalid_stoi_argument
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_]
cmp dword [rdi], 0x22
jne 0x14003e362
lea rcx, str.stoi_argument_out_of_range
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_]
lea rax, [rsp + 0x170]
mov qword [rsp + 0xe8], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], r15
xor r8d, r8d
lea rdx, [0x14004d044]
lea rcx, [rsp + 0x170]
call fcn.14003fd30
nop
mov rdx, qword [0x140057c78]
xorps xmm0, xmm0
movups xmmword [rsp + 0xc8], xmm0
mov qword [rsp + 0xd8], r15
mov qword [rsp + 0xe0], r15
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14003e3d0
lea rcx, [rsp + 0xc8]
call fcn.14003aa80
nop
mov r8d, esi
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0xc8]
call fcn.140039070
nop
jmp 0x14003e45d
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x14003e4a3
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e49e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e49e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140042e3c
xor ecx, ecx
call fcn.140007800
test al, al
je 0x14003e4ba
lea rcx, str.Run_the_mod_in_offline_mode_first__then_go_online__
call fcn.140013ff0
mov rcx, qword [0x140057c70]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
cmp byte [rax + 0xc3], 0
jne 0x14003e520
lea rsi, str.Load
mov r8, rsi
cmp rsi, 0xffffffffffffffff
jae 0x14003e50e
nop
movzx ecx, byte [r8]
test cl, cl
je 0x14003e50e
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x14003e505
cmp byte [rax], cl
je 0x14003e50e
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x14003e4f0
movaps xmm3, xmm7
mov rdx, rsi
call fcn.140033a00
mov rcx, qword [0x140057c70]
mov rax, qword [rcx + 0x4008]
movss xmm2, dword [rax + 0x114]
subss xmm2, dword [rax + 0x2c]
movss xmm3, dword [rax + 0x110]
subss xmm3, dword [rax + 0x28]
addss xmm2, dword [rax + 0x90]
addss xmm3, dword [rax + 0x8c]
addss xmm3, xmm9
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov qword [rsp + 0xb8], 0x43480000
lea rdx, [rsp + 0xb8]
lea rcx, str.Download
call fcn.140032be0
test al, al
je 0x14003e729
lea rax, [rsp + 0x340]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1a]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jne 0x14003e729
lea r8, [0x14004d4a8]
mov edx, 0x104
lea rcx, [rsp + 0x340]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea r8, [0x14004d0e0]
mov edx, 0x104
lea rcx, [rsp + 0x340]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
xor edx, edx
lea rcx, [rsp + 0x340]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x14003e645
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x14003e729
lea r8, [0x14004d4a8]
mov edx, 0x104
lea rcx, [rsp + 0x340]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea r8, str.Bin.dll
mov edx, 0x104
lea rcx, [rsp + 0x340]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
mov ecx, 0x18
call fcn.140042e44
lea rcx, [rsp + 0x340]
mov qword [rax], rcx
lea rcx, str.https:__github.com_tocti_t_releases_download_full_RX.dll
mov qword [rax + 8], rcx
lea rcx, [0x140041860]
mov qword [rax + 0x10], rcx
mov qword [rsp + 0x1c0], rax
or dword [rsp + 0x64], 1
lea rcx, [rsp + 0x268]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140042c50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x260], rax
test rax, rax
je 0x14003e8e0
cmp dword [rsp + 0x268], 0
je 0x14003e8d4
movaps xmm0, xmmword [rsp + 0x260]
movdqa xmmword [rsp + 0x1c0], xmm0
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14003e8d4
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x260], xmm0
xor ecx, ecx
call fcn.140007800
test al, al
je 0x14003e740
lea rcx, str._When_press_wait_a_seconds_for_downlaoding_...
call fcn.140013ff0
mov rcx, qword [0x140057c70]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
cmp byte [rax + 0xc3], 0
jne 0x14003e7a5
lea rsi, str.Open
mov r8, rsi
cmp rsi, 0xffffffffffffffff
jae 0x14003e793
movzx ecx, byte [r8]
test cl, cl
je 0x14003e793
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x14003e78a
cmp byte [rax], cl
je 0x14003e793
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x14003e775
movaps xmm3, xmm7
mov rdx, rsi
call fcn.140033a00
mov rcx, qword [0x140057c70]
mov rax, qword [rcx + 0x4008]
movss xmm3, dword [rax + 0x114]
subss xmm3, dword [rax + 0x2c]
movss xmm2, dword [rax + 0x110]
subss xmm2, dword [rax + 0x28]
addss xmm3, dword [rax + 0x90]
addss xmm2, dword [rax + 0x8c]
addss xmm2, xmm9
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
addss xmm3, xmm0
addss xmm1, xmm2
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm3
mov byte [rax + 0x151], 1
mov qword [rsp + 0xc0], 0x43480000
lea rdx, [rsp + 0xc0]
lea rcx, str.Open_Main_Folder
call fcn.140032be0
test al, al
je 0x14003e8f9
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], r15
mov r8d, 4
lea rdx, str.ROOX
lea rcx, [rsp + 0x170]
call fcn.14003fd30
nop
lea rcx, [rsp + 0x170]
call fcn.1400422c0
nop
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x14003e8f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e8f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e8f4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x268], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.140042e3c
mov rcx, qword [0x140057c70]
mov rax, qword [rcx + 0x4008]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4008]
cmp byte [rax + 0xc3], 0
jne 0x14003e959
lea rdi, str.Delete
mov r8, rdi
cmp rdi, 0xffffffffffffffff
jae 0x14003e94e
nop
movzx ecx, byte [r8]
test cl, cl
je 0x14003e94e
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x14003e945
cmp byte [rax], cl
je 0x14003e94e
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x14003e930
movaps xmm3, xmm7
mov rdx, rdi
call fcn.140033a00
mov qword [rsp + 0x78], 0x43898000
lea rdx, [rsp + 0x78]
lea rcx, str.Delete_Download_File
call fcn.140032be0
test al, al
je 0x14003ea2f
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], r15
mov r8d, 4
lea rdx, str.Adll
lea rcx, [rsp + 0x170]
call fcn.14003fd30
nop
lea rcx, [rsp + 0x170]
call fcn.140041e50
test al, al
je 0x14003e9d1
mov r8d, 0x12
lea rdx, str.Delete_successfuly
jmp 0x14003e9de
mov r8d, 0xd
lea rdx, str.Delete_Failed
call fcn.14003a7e0
nop
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x14003ea2f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ea2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ea2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140042e3c
movaps xmm1, xmm8
movaps xmm0, xmm7
call fcn.140013640
mov qword [rsp + 0x68], 0x43898000
lea rdx, [rsp + 0x68]
lea rcx, str.Delete_Main_Folder
call fcn.140032be0
test al, al
je 0x14003eb2e
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], r15
mov r8d, 4
lea rdx, str.ROOX
lea rcx, [rsp + 0x170]
call fcn.14003fd30
nop
lea rcx, [rsp + 0x170]
call fcn.140041e50
test al, al
je 0x14003eab3
mov r8d, 0x12
lea rdx, str.Delete_successfuly
jmp 0x14003eac0
mov r8d, 0xd
lea rdx, str.Delete_Failed
call fcn.14003a7e0
nop
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x14003eb11
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003eb0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003eb0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140042e3c
mov qword [rsp + 0x180], r15
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], r15w
mov rbx, qword [0x140057c70]
mov rax, qword [rbx + 0x4008]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4008]
cmp byte [rax + 0xc3], 0
jne 0x14003eb93
lea rdi, str.Info
mov r8, rdi
cmp rdi, 0xffffffffffffffff
jae 0x14003eb81
movzx ecx, byte [r8]
test cl, cl
je 0x14003eb81
lea rax, [r8 + 1]
cmp cl, 0x23
jne 0x14003eb78
cmp byte [rax], cl
je 0x14003eb81
mov r8, rax
cmp rax, 0xffffffffffffffff
jb 0x14003eb63
movaps xmm3, xmm7
mov rdx, rdi
call fcn.140033a00
mov rbx, qword [0x140057c70]
movaps xmm6, xmmword [0x14004d7f0]
mov dword [rsp + 0x1c0], r15d
movups xmm0, xmmword [rbx + 0x39d4]
movups xmmword [rsp + 0x1c4], xmm0
lea rcx, [rbx + 0x4a60]
lea rdx, [rsp + 0x1c0]
call fcn.14001b300
cmp dword [rbx + 0x4a5c], 0
je 0x14003ebd5
movups xmmword [rbx + 0x39d4], xmm6
lea rcx, str.After_run_the_mod_close_the_launcher
call fcn.1400320f0
lea rcx, str.Recommended_run_in_offline_mode_then_go_online
call fcn.1400320f0
mov r8, qword [0x140057c70]
movsxd rax, dword [r8 + 0x4a60]
cmp eax, 1
jl 0x14003ec28
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a68]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a60]
lea rcx, [0x140046ab7]
call fcn.140031eb0
lea rcx, str.Launcher_Version_:_1.0
call fcn.1400320f0
lea rcx, str.Follow_Official_Site_For_The_Latest_News
call fcn.1400320f0
mov rbx, qword [0x140057c70]
mov dword [rsp + 0x1c0], r15d
movups xmm0, xmmword [rbx + 0x39d4]
movups xmmword [rsp + 0x1c4], xmm0
lea rcx, [rbx + 0x4a60]
lea rdx, [rsp + 0x1c0]
call fcn.14001b300
cmp dword [rbx + 0x4a5c], 0
je 0x14003ec96
movups xmm0, xmmword [rsp + 0x200]
movups xmmword [rbx + 0x39d4], xmm0
lea rcx, str.________________________Other_Info_Visit_Official_Site_
call fcn.140031eb0
mov r8, qword [0x140057c70]
movsxd rax, dword [r8 + 0x4a60]
cmp eax, 1
jl 0x14003ecdd
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a68]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a60]
call fcn.14000fed0
call fcn.14000a770
mov rcx, qword [0x140057cc0]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140057cd8]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rax, qword [0x140057c70]
mov rcx, qword [rax + 0x4b00]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r15
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14002d2d0
mov rcx, qword [0x140057cd0]
mov rax, qword [rcx]
mov r8d, dword [0x140057d20]
mov edx, 1
call qword [rax + 0x40]
cmp eax, 0x87a0001
jne 0x14003ed63
mov dword [0x140057d20], 1
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14003d4b0
mov dword [0x140057d20], r15d
jmp 0x14003d4b0
mov rbx, qword [0x140057c70]
test rbx, rbx
je 0x14003ed84
mov rdi, qword [rbx + 0x98]
jmp 0x14003ed87
mov rdi, r15
call fcn.14002e270
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14003ed9b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14003eda9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14003edb8
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x88], r15
mov qword [rbx + 0x98], r15
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x140057c70]
test r8, r8
je 0x14003ee39
mov r9d, dword [r8 + 0x3f60]
movsx rdx, word [r8 + 0x60a8]
lea rcx, [r8 + 0x60ac]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x14003ee2e
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60a8], cx
movsx rax, cx
lea rcx, [r8 + 0x60ac]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x60a4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x140057c70]
test r8, r8
je 0x14003ee57
mov rdi, qword [r8 + 0x90]
jmp 0x14003ee5a
mov rdi, r15
lea rbx, [r8 + 8]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x14003ee74
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x140057c70]
mov qword [rbx + 0x78], r15
mov qword [rbx + 0x88], r15
and dword [rbx + 4], 0xfffffff8
test r8, r8
je 0x14003eeeb
mov r9d, dword [r8 + 0x3f60]
movsx rdx, word [r8 + 0x60a8]
lea rcx, [rdx*8 + 0x60ac]
add rcx, r8
cmp dword [rcx], r9d
je 0x14003eee0
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60a8], cx
movsx rax, cx
lea rcx, [rax*8 + 0x60ac]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x60a4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140057c70]
mov qword [0x140057c70], rbx
call fcn.1400062b0
mov qword [0x140057c70], r15
test rbx, rbx
je 0x14003ef98
mov rcx, rbx
call fcn.14001c230
mov r8, qword [0x140057c70]
test r8, r8
je 0x14003ef8f
mov r9d, dword [r8 + 0x3f60]
movsx r10, word [r8 + 0x60a8]
lea rdx, [r8 + 0x60ac]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x14003ef84
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60a8], cx
movsx rax, cx
lea rdx, [r8 + 0x60ac]
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [r8 + 0x60a4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.1400416a0
mov rcx, qword [0x140057ce0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.USER32.dll_UnregisterClassW]
nop
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 7
jbe 0x14003f00c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f007
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f007
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140042e3c
mov qword [rsp + 0x1b0], r15
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r15w
mov rdx, qword [rsp + 0x258]
cmp rdx, 0xf
jbe 0x14003f06f
inc rdx
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f06a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003f06a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140042e3c
xor eax, eax
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.140042ca0
lea r11, [rsp + 0x4f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
mov rsp, r11
pop r15
pop r14
pop r13
ret