Function at 0x140056bb0
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x1400faad8]
xor rax, rsp
mov qword [rbp + 0x3f], rax
xor edi, edi
call fcn.140056060
mov qword [rbp + 0x37], rdi
movss xmm0, dword [0x1400fa948]
movss dword [rbp + 7], xmm0
movss xmm1, dword [0x1400fa94c]
movss dword [rbp + 0xb], xmm1
lea r8, [rbp + 0x37]
lea edx, [rdi + 2]
lea rcx, [rbp + 7]
call fcn.140026670
movss xmm0, dword [0x1400fa950]
movss dword [rbp + 7], xmm0
movss xmm1, dword [0x1400fa954]
movss dword [rbp + 0xb], xmm1
xor edx, edx
lea rcx, [rbp + 7]
call fcn.140026710
movss xmm0, dword [0x140078864]
call fcn.140026650
cmp byte [0x1400fa920], dil
je 0x140057040
mov r8d, dword [0x1400fa958]
lea rdx, [0x1400fa430]
mov rcx, qword [str.Arien]
call fcn.140005540
lea rcx, [rbp + 0x37]
call fcn.140018db0
movss xmm0, dword [rax]
movss dword [rbp + 7], xmm0
mov dword [rbp + 0xb], 0x42c80000
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 7]
lea rcx, str.Left
call fcn.1400082b0
mov dword [rbp + 7], 0x43160000
mov dword [rbp + 0xb], 0x41f00000
lea rcx, [rbp + 7]
call fcn.140026020
mov dword [rbp + 7], 0x42a00000
mov dword [rbp + 0xb], 0x41f00000
lea rdx, [rbp + 7]
lea rcx, [0x1400e743c]
call fcn.140047570
lea rsi, [0x1400fa431]
test al, al
je 0x140056d18
mov dword [0x1401042d8], edi
xor edx, edx
mov r8d, 0xff
lea rcx, [0x1400fa530]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xff
mov rcx, rsi
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xff
lea rcx, [0x1400fa62f]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 7], 0x437a0000
mov dword [rbp + 0xb], 0x41f00000
lea rcx, [rbp + 7]
call fcn.140026020
mov dword [rbp + 7], 0x42a00000
mov dword [rbp + 0xb], 0x41f00000
lea rdx, [rbp + 7]
lea rcx, [0x1400e7440]
call fcn.140047570
test al, al
je 0x140056d93
mov dword [0x1401042d8], 2
xor edx, edx
mov r8d, 0xff
lea rcx, [0x1400fa530]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xff
mov rcx, rsi
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xff
lea rcx, [0x1400fa62f]
call sub.VCRUNTIME140.dll_memset
call fcn.140015ea0
lea rcx, [rbp + 0x37]
call fcn.140018db0
movss xmm6, dword [rax + 4]
lea rcx, [rbp - 0x69]
call fcn.140018db0
movss xmm0, dword [rax]
movss dword [rbp + 7], xmm0
movss dword [rbp + 0xb], xmm6
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp + 7]
lea rcx, str.Right
call fcn.1400082b0
cmp dword [0x1401042d8], edi
jne 0x140056f9f
lea rcx, [rbp - 0x69]
call fcn.140018db0
movss xmm0, dword [rax]
mulss xmm0, dword [0x140078834]
subss xmm0, dword [0x1400788b0]
call fcn.1400260a0
lea rcx, str.Login
call fcn.140050740
call fcn.14004d5d0
lea rcx, [rbp - 0x69]
call fcn.140018db0
movss xmm0, dword [rax]
cvtps2pd xmm0, xmm0
movsd xmm6, qword [0x1400e7570]
divsd xmm0, xmm6
subsd xmm0, qword [0x14007fcf8]
cvtpd2ps xmm0, xmm0
call fcn.1400260a0
lea rcx, [rbp - 0x69]
call fcn.140018db0
movss xmm0, dword [rax + 4]
cvtps2pd xmm0, xmm0
divsd xmm0, xmm6
addsd xmm0, qword [0x14007fcf0]
cvtpd2ps xmm0, xmm0
call fcn.1400260f0
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
mov r9d, 0xff
mov r8, rsi
lea rdx, str.License
lea rcx, str.license
call fcn.14004b490
call fcn.14004d5d0
lea rcx, [rbp - 0x69]
call fcn.140018db0
movss xmm0, dword [rax]
cvtps2pd xmm0, xmm0
divsd xmm0, xmm6
addsd xmm0, qword [0x1400e7578]
cvtpd2ps xmm0, xmm0
call fcn.1400260a0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [rbp + 7], 0x42a00000
mov dword [rbp + 0xb], 0x41f00000
lea rdx, [rbp + 7]
lea rcx, str.Login
call fcn.140047570
test al, al
je 0x140056f9f
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rbx, rax
cmp rbx, 0x2710
ja 0x14005732c
lea rax, [rbp - 0x61]
mov qword [rbp - 0x69], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], rdi
mov qword [rbp - 0x49], rdi
mov r8d, 0x13
lea rdx, str.1071199783806570648
lea rcx, [rbp - 0x61]
call fcn.1400017c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
mov qword [rbp + 0x27], rdi
mov qword [rbp + 0x2f], rdi
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x140056f50
mov rdx, rsi
lea rcx, [rbp + 0x17]
call fcn.1400017c0
nop
lea r8, [rbp - 0x61]
lea rdx, [rbp + 0x17]
lea rcx, [0x140104220]
call sub.SafeGuard.dll_public:_enum_SafeGuard::StatusCode___cdecl_SafeGuard::SafeGuardSDK::keyAuthenticateUser_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______ptr64
test eax, eax
jne 0x140057339
mov edx, 0x12c
lea ecx, [rdx - 0x32]
call qword [sym.imp.KERNEL32.dll_Beep]
mov byte [0x1400fa920], 0
mov byte [0x1400fc170], 1
cmp dword [0x1401042d8], 2
jne 0x140057036
lea rcx, [rbp - 0x69]
call fcn.140018db0
movss xmm0, dword [rax]
mulss xmm0, dword [0x140078834]
subss xmm0, dword [0x1400e7584]
movss dword [rbp + 7], xmm0
mov dword [rbp + 0xb], 0x41c80000
lea rcx, [rbp + 7]
call fcn.140026020
lea rcx, str.Build
call fcn.140050740
movss xmm1, dword [0x1400788e4]
xorps xmm0, xmm0
call fcn.1400256d0
movaps xmm0, xmmword [0x1400e75b0]
movups xmmword [rbp + 0x17], xmm0
lea rdx, [rbp + 0x17]
xor ecx, ecx
call fcn.1400220e0
lea rcx, [0x1400fa730]
cmp qword [0x1400fa748], 0x10
cmovae rcx, qword [0x1400fa730]
call fcn.140050740
mov ecx, 1
call fcn.1400219e0
call fcn.140015ea0
call fcn.140015980
cmp byte [0x1400fc170], 0
je 0x1400572e7
lea rcx, str.U2tpZHdhcmUgVjEuMTE
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
lea rax, [0x1400e74bc]
mov qword [rbp + 0x37], rax
mov r8d, dword [0x1400fa958]
lea rdx, [0x1400fa430]
mov rcx, qword [str.Arien]
call fcn.140005540
mov ebx, dword [0x1400fa958]
lea rcx, [rbp - 0x69]
call fcn.140018db0
movss xmm6, dword [rax + 4]
lea rcx, [rbp + 0x17]
call fcn.140018db0
movss xmm1, dword [rax]
movss dword [rbp + 7], xmm1
movss dword [rbp + 0xb], xmm6
mov r9d, ebx
mov r8b, 1
lea rdx, [rbp + 7]
lea rcx, str.main
call fcn.1400082b0
movsxd rdx, dword [0x1400fc174]
mov rdx, qword [rbp + rdx*8 + 0x37]
lea rcx, str.Product:__s
call fcn.140050740
movss xmm0, dword [0x140078978]
call fcn.140026630
mov dword [rsp + 0x20], 0xa
mov r9d, 1
lea r8, [rbp + 0x37]
lea rdx, [0x1400fc174]
lea rcx, str.cheat
call fcn.14004b750
movss xmm1, dword [0x1400788e4]
xorps xmm0, xmm0
call fcn.1400256d0
movss xmm0, dword [0x1400e7588]
call fcn.1400260a0
mov dword [rbp + 7], 0x43020000
mov dword [rbp + 0xb], 0x41f00000
lea rdx, [rbp + 7]
lea rcx, str.Load_Cheat
call fcn.140047570
test al, al
je 0x1400572b2
cmp byte [0x1400fc171], 0
jne 0x1400572bb
mov ecx, 8
call fcn.14006d4c4
test rax, rax
je 0x140057175
lea rcx, [0x1400568d0]
mov qword [rax], rcx
jmp 0x140057178
mov rax, rdi
mov qword [rbp + 0x17], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140054280]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x140057311
cmp dword [rbp + 0xf], 0
je 0x14005735b
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x17], xmm0
lea rcx, [rbp + 0x17]
call sub.MSVCP140.dll__Thrd_detach
test eax, eax
jne 0x14005735b
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
lea rax, [rbp - 0x41]
mov qword [rbp + 0x17], rax
movups xmmword [rbp - 0x41], xmm0
mov qword [rbp - 0x31], rdi
mov qword [rbp - 0x29], rdi
mov r8d, 5
lea rdx, str.arien
lea rcx, [rbp - 0x41]
call fcn.1400017c0
nop
lea rax, [rbp - 0x21]
mov qword [rbp - 0x69], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], rdi
mov qword [rbp - 9], rdi
mov r8d, 7
lea rdx, str.cs2.exe
lea rcx, [rbp - 0x21]
call fcn.1400017c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], 4
mov qword [rbp - 0x49], 0xf
mov dword [rbp - 0x61], 0x33333231
mov byte [rbp - 0x5d], 0
lea r9, [rbp - 0x41]
lea r8, [rbp - 0x21]
lea rdx, [rbp - 0x61]
lea rcx, [0x140104220]
call sub.SafeGuard.dll_public:_enum_SafeGuard::StatusCode___cdecl_SafeGuard::SafeGuardSDK::injectDll_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______ptr64
mov ebx, eax
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x1400572a9
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400572a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400572a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d500
test ebx, ebx
je 0x14005731f
jmp 0x14005734e
cmp byte [0x1400fc171], 0
je 0x1400572dd
mov dword [rbp + 7], 0x80800000
mov dword [rbp + 0xb], 0
xor r8d, r8d
lea rdx, [rbp + 7]
movss xmm0, dword [0x1400fc178]
call fcn.14004bb00
call fcn.140015ea0
call fcn.140015980
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.14006d620
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret
mov dword [rbp + 0xf], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
lea rcx, str.Press_INSERT_in_game
call fcn.140001e00
nop
lea rcx, str.An_error_occured__0x1_
call fcn.140001e00
int3
lea rcx, [0x140104268]
call fcn.140056ba0
mov rcx, rax
call fcn.140001e00
nop
lea rcx, str.An_error_occured__0x5_
call fcn.140001e00
int3
mov ecx, 1
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3