Function at 0x140033240
Capabilities:
Enumerate process modules
Link many functions at runtime
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
lea rbp, [rsp - 0x1460]
mov eax, 0x1560
call fcn.140036d60
sub rsp, rax
mov rax, qword [0x140045010]
xor rax, rsp
mov qword [rbp + 0x13a0], rax
lea rax, [0x1400331e0]
mov qword [rbp + 0x118], rcx
xor esi, esi
mov qword [rbp + 0x108], rax
xorps xmm0, xmm0
mov qword [rbp + 0x110], rsi
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x120], xmm0
lea rdi, str.fortnite_balls
movdqa xmmword [rbp + 0x130], xmm1
lea rcx, [rbp + 0x100]
mov qword [rbp + 0x140], rdi
mov qword [rbp + 0x148], rsi
mov ebx, r9d
mov dword [rbp + 0x100], 0x50
mov dword [rbp + 0x104], 3
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov rax, qword [rbp + 0x118]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x140]
mov r8, rdi
mov qword [rsp + 0x58], rsi
mov ecx, 0x80028
mov qword [rsp + 0x50], rax
mov eax, dword [0x14004584c]
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], eax
mov eax, dword [0x140045848]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea r9d, [rsi + 2]
mov r8b, 0xff
mov rcx, rax
mov qword [rbp - 0x30], rax
xor edx, edx
mov r12, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
lea rdx, [rbp + 0x1f8]
mov rcx, r12
movups xmmword [rbp + 0x1f8], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
lea rdx, [rbp + 0x210]
mov rcx, r12
movups xmmword [rbp + 0x210], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rdx, [rbp + 0x1d8]
mov qword [rbp + 0x1d8], rsi
mov rcx, r12
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x1d8]
lea rdx, [rbp + 0x1e0]
mov dword [rbp + 0x1e0], eax
mov rcx, r12
mov eax, dword [rbp + 0x1dc]
mov dword [rbp + 0x1e4], eax
mov eax, dword [rbp + 0x200]
mov dword [rbp + 0x1e8], eax
mov eax, dword [rbp + 0x204]
mov dword [rbp + 0x1ec], eax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xc4], rsi
mov qword [rbp + 0xcc], 1
mov qword [rbp + 0xd8], 2
mov qword [rbp + 0xf0], 2
mov dword [rbp + 0xb8], 0x3c
mov dword [rbp + 0xbc], 1
mov dword [rbp + 0xc0], 0x1c
mov dword [rbp + 0xd4], 0x20
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], 1
mov dword [rbp + 0x280], 0xb000
mov dword [rbp + 0x284], 0xa000
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x80], rsi
mov qword [rbp + 0x88], rsi
lea rax, [rbp + 0x80]
mov qword [rbp + 0x98], rsi
mov qword [rsp + 0x58], rax
lea edx, [rsi + 1]
lea rax, [rbp + 0x1d0]
mov dword [rbp + 0x1d0], esi
mov qword [rsp + 0x50], rax
xor r9d, r9d
lea rax, [rbp + 0x90]
xor r8d, r8d
mov qword [rsp + 0x48], rax
xor ecx, ecx
lea rax, [rbp + 0x88]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x280]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov rcx, qword [rbp + 0x88]
lea r9, [rbp + 0xa0]
mov qword [rbp + 0xa0], rsi
lea r8, [0x14003ea48]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rdx, qword [rbp + 0xa0]
test rdx, rdx
je 0x140034b11
mov rcx, qword [rbp + 0x90]
lea r9, [rbp + 0x98]
mov qword [rsp + 0x1598], r13
xor r8d, r8d
mov qword [rsp + 0x1558], r14
mov qword [rsp + 0x1550], r15
mov rax, qword [rcx]
movaps xmmword [rsp + 0x1540], xmm6
movaps xmmword [rsp + 0x1530], xmm7
movaps xmmword [rsp + 0x1520], xmm8
movaps xmmword [rsp + 0x1510], xmm9
movaps xmmword [rsp + 0x1500], xmm10
movaps xmmword [rsp + 0x14f0], xmm11
movaps xmmword [rsp + 0x14e0], xmm12
movaps xmmword [rsp + 0x14d0], xmm13
movaps xmmword [rsp + 0x14c0], xmm14
movaps xmmword [rsp + 0x14b0], xmm15
call qword [rax + 0x48]
mov rcx, qword [rbp + 0xa0]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov edx, ebx
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140045818]
mov ecx, 0x6280
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, qword [0x140045818]
mov r9, rax
test r8, r8
je 0x140033634
movsx rax, word [r8 + 0x60f0]
lea rdx, [r8 + 0x60f4]
mov r10d, dword [r8 + 0x3f58]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x140033629
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x60f4]
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], esi
inc word [rdx + 4]
inc dword [r8 + 0x60e8]
test r9, r9
je 0x140033645
xor edx, edx
mov rcx, r9
call fcn.140001480
jmp 0x140033648
mov rax, rsi
mov qword [0x140045818], rax
call fcn.140005460
mov rax, qword [0x140045818]
test rbx, rbx
cmovne rax, rbx
xor ecx, ecx
mov qword [0x140045818], rax
call fcn.140023870
mov rcx, r12
call fcn.14002dce0
mov rdx, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x90]
call fcn.14002db20
mov ecx, 0x38
call fcn.1400362dc
mov r14, rax
mov qword [rbp - 0x28], rax
lea rsi, [r14 + 0x10]
xorps xmm0, xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_pProcess_.0
mov qword [r14], rax
xor eax, eax
movups xmmword [rsi], xmm0
movups xmmword [rsi + 0x10], xmm0
mov qword [rsi + 0x20], rax
call fcn.1400353b0
mov dword [rsi], eax
test eax, eax
je 0x140033794
mov ecx, eax
call fcn.140035040
mov qword [rsi + 8], rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x1400337aa
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400359b0
lea rdx, [0x140035b60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.1400353b0
mov dword [rsi], eax
test eax, eax
je 0x14003378e
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r9, [rbp + 0x1f0]
mov dword [rsp + 0x20], 2
mov rcx, rax
mov qword [rsi + 8], rax
mov r8d, 0x7f8
lea rdx, [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rbp + 0x2a0]
lea r8, [rbp + 0x250]
mov rcx, qword [rsi + 8]
mov r9d, 0x18
mov qword [rsi + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rbp + 0x258]
mov edx, dword [rsi]
mov qword [rsi + 0x20], rax
call fcn.1400355e0
mov qword [rsi + 0x10], rax
mov al, 1
jmp 0x140033790
xor al, al
test al, al
jne 0x140033810
lea rcx, [rbp + 0x40]
mov qword [rbp + 0x40], 1
call fcn.140034bf0
jmp 0x1400336c8
lea r9, [rbp + 0x1f4]
mov dword [rsp + 0x20], 2
mov r8d, 0x7f8
lea rdx, [rbp + 0xaa0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rbp + 0xaa0]
lea r8, [rbp + 0x268]
mov rcx, qword [rsi + 8]
mov r9d, 0x18
mov qword [rsi + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rbp + 0x270]
mov edx, dword [rsi]
mov qword [rsi + 0x20], rax
call fcn.1400355e0
mov qword [rsi + 0x10], rax
nop word [rax + rax]
lea r8, str.client.dll
mov rcx, rsi
lea rdx, [rbp + 0x60]
call fcn.1400356a0
lea r8, str.engine2.dll
mov rcx, rsi
lea rdx, [rbp + 0x70]
movups xmm6, xmmword [rax]
call fcn.1400356a0
movq rdi, xmm6
mov qword [rbp - 0x48], rdi
mov rbx, qword [rax]
test rdi, rdi
je 0x14003384f
test rbx, rbx
jne 0x140033860
lea rcx, [rbp + 0x48]
mov qword [rbp + 0x48], 1
call fcn.140034bf0
test rdi, rdi
je 0x140033810
test rbx, rbx
je 0x140033810
movss xmm12, dword [0x14003ebc4]
mov r13b, 1
mov dword [rsp + 0x7c], r13d
mov r15, 0xffffffffffffffff
xorps xmm7, xmm7
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x220]
xor edx, edx
mov r14d, 0x8000
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14003390f
xor edi, edi
nop
lea rcx, [rbp + 0x220]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x220]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x228], 0x12
lea rcx, [rbp + 0x220]
movzx r13d, r13b
cmove r13d, edi
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
movzx ebx, r13b
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400338b0
mov rdi, qword [rbp - 0x48]
mov dword [rsp + 0x7c], r13d
test bl, bl
je 0x1400347d3
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r14w, ax
jne 0x1400347d3
mov rax, qword [0x140045818]
test rax, rax
je 0x140033939
mov rcx, qword [rax + 0x98]
jmp 0x14003393b
xor ecx, ecx
cmp qword [rcx + 0x48], 0
jne 0x140033947
call fcn.14002d4c0
call fcn.14002e6e0
call fcn.140007a20
lea rdx, [rdi + 0x1912578]
mov rcx, rsi
call fcn.140034b40
xorps xmm0, xmm0
mov qword [rbp - 0x38], rax
lea rcx, str.ntdll.dll
mov r13, rax
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea rdx, [rdi + 0x19241a0]
mov r9d, 0x40
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x160]
call rbx
lea rdx, [rdi + 0x18c2d58]
mov rcx, rsi
call fcn.140034b40
lea rdx, [r13 + 0x3cb]
mov qword [rsp + 0x68], rax
mov rcx, rsi
mov r14, rax
call fcn.140034d80
mov dword [rbp - 0x70], eax
mov r12d, 1
nop word [rax + rax]
mov edx, r12d
mov rcx, rsi
and edx, 0x7fff
shl edx, 3
sar edx, 9
add rdx, 0x10
add rdx, r14
call fcn.140034b40
test rax, rax
je 0x140034735
mov ecx, r12d
and ecx, 0x1ff
imul edx, ecx, 0x78
mov rcx, rsi
add rdx, rax
call fcn.140034b40
mov rdi, rax
test rax, rax
je 0x140034735
lea rdx, [rax + 0x3cb]
mov rcx, rsi
call fcn.140034b40
lea rdx, [rdi + 0x7e4]
mov rcx, rsi
mov r15, rax
call fcn.140034b40
mov rcx, rax
mov rbx, rax
shr rcx, 9
and ecx, 0x3f
lea rcx, [rcx + 2]
lea rdx, [r14 + rcx*8]
mov rcx, rsi
call fcn.140034b40
test rax, rax
je 0x14003472e
and ebx, 0x1ff
mov rcx, rsi
imul rdx, rbx, 0x78
add rdx, rax
call fcn.140034b40
mov r14, rax
test rax, rax
je 0x140034729
lea rcx, str.ntdll.dll
mov qword [rbp + 0x150], 0
mov dword [rbp + 0x158], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea rdx, [r14 + 0x127c]
mov r9d, 0xc
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x150]
call rbx
cmp rdi, r13
je 0x140034729
cmp dword [rbp - 0x70], r15d
je 0x140034729
lea rdx, [r14 + 0x334]
mov rcx, rsi
call fcn.140034d80
lea rdx, [r14 + 0x1570]
mov dword [rbp - 0x78], eax
mov rcx, rsi
mov ebx, eax
call fcn.140034d80
lea ecx, [rbx - 1]
mov dword [rbp - 0x74], eax
cmp ecx, 0x63
ja 0x140034729
lea rdx, [rdi + 0x748]
mov rcx, rsi
call fcn.140034b40
lea rcx, str.ntdll.dll
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea rax, [rbp + 0x208]
mov r9d, 0x100
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x12a0]
mov rdx, rdi
call rbx
lea rdx, [r14 + 0x318]
mov rcx, rsi
call fcn.140034b40
mov rcx, rsi
lea rdx, [rax + 0x1e0]
call fcn.140034b40
movss xmm6, dword [rbp + 0x158]
lea rcx, str.ntdll.dll
addss xmm6, dword [0x14003ec60]
movss xmm8, dword [rbp + 0x150]
mov rdi, rax
movss xmm9, dword [rbp + 0x154]
mov qword [rbp - 0x40], rax
mov qword [rbp + 0x1a0], 0
mov dword [rbp + 0x1a8], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea rdx, [rdi + 0xc0]
xor edi, edi
lea r8, [rbp + 0x1a0]
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 0xc]
call rbx
movss xmm5, dword [rbp + 0x194]
movss xmm10, dword [rbp + 0x190]
movaps xmm0, xmm5
movss xmm4, dword [rbp + 0x150]
movaps xmm3, xmm10
movss xmm14, dword [rbp + 0x154]
movss xmm11, dword [rbp + 0x198]
movss xmm15, dword [rbp + 0x158]
movaps xmm1, xmm11
movss xmm13, dword [rbp + 0x19c]
mov ecx, dword [0x14004584c]
mulss xmm3, xmm4
mulss xmm0, xmm14
mulss xmm1, xmm15
addss xmm3, xmm0
movss xmm0, dword [0x14003eb84]
addss xmm3, xmm1
addss xmm3, xmm13
comiss xmm0, xmm3
jbe 0x140033d3e
movss xmm4, dword [rbp + 0x17c]
movss dword [rsp + 0x60], xmm7
jmp 0x140033dc1
movss xmm2, dword [rbp + 0x170]
xorps xmm0, xmm0
movss xmm1, dword [rbp + 0x178]
mov eax, ecx
mulss xmm2, xmm4
cdq
sub eax, edx
movss xmm4, dword [rbp + 0x17c]
sar eax, 1
mulss xmm1, xmm15
cvtsi2ss xmm0, eax
movss dword [rsp + 0x60], xmm0
movss xmm0, dword [rbp + 0x174]
mulss xmm0, xmm14
addss xmm2, xmm0
movss xmm0, dword [0x14003ebf8]
divss xmm0, xmm3
addss xmm2, xmm1
addss xmm2, xmm4
mulss xmm2, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm2, xmm12
mulss xmm2, xmm0
movss xmm0, dword [rsp + 0x60]
addss xmm2, xmm12
subss xmm0, xmm2
movss dword [rsp + 0x60], xmm0
mov r8d, dword [0x140045848]
movaps xmm0, xmm5
movss xmm14, dword [rbp + 0x16c]
movaps xmm2, xmm10
movss xmm15, dword [rbp + 0x168]
movaps xmm1, xmm11
mulss xmm2, xmm8
mulss xmm0, xmm9
mulss xmm1, xmm6
addss xmm2, xmm0
movss xmm0, dword [0x14003eb84]
addss xmm2, xmm1
addss xmm2, xmm13
comiss xmm0, xmm2
jbe 0x140033e25
movss xmm8, dword [rbp + 0x178]
movaps xmm9, xmm7
movss dword [rsp + 0x78], xmm7
jmp 0x140033f03
movss xmm0, dword [rbp + 0x164]
movaps xmm1, xmm15
movss xmm3, dword [0x14003ebf8]
mov eax, r8d
divss xmm3, xmm2
cdq
sub eax, edx
sar eax, 1
movss xmm2, dword [rbp + 0x160]
mulss xmm2, xmm8
mulss xmm0, xmm9
mulss xmm1, xmm6
addss xmm2, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, r8d
addss xmm2, xmm1
addss xmm2, xmm14
mulss xmm2, xmm3
mulss xmm2, xmm12
mulss xmm2, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
addss xmm2, xmm12
addss xmm2, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
movss dword [rsp + 0x78], xmm2
movss xmm2, dword [rbp + 0x170]
mulss xmm2, xmm8
movss xmm8, dword [rbp + 0x178]
movss dword [rsp + 0x64], xmm0
movaps xmm1, xmm8
movss xmm0, dword [rbp + 0x174]
mulss xmm0, xmm9
movss xmm9, dword [rsp + 0x64]
mulss xmm1, xmm6
addss xmm2, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
addss xmm2, xmm1
addss xmm2, xmm4
mulss xmm2, xmm3
mulss xmm2, xmm12
mulss xmm2, xmm0
addss xmm2, xmm12
subss xmm9, xmm2
movss xmm4, dword [rbp + 0x1a4]
movss xmm6, dword [rbp + 0x1a8]
movaps xmm3, xmm4
mulss xmm3, xmm5
movaps xmm1, xmm6
movss xmm5, dword [rbp + 0x1a0]
movaps xmm0, xmm5
mulss xmm1, xmm11
mulss xmm0, xmm10
movss xmm10, dword [0x14003eb84]
movss dword [rsp + 0x64], xmm9
addss xmm3, xmm0
addss xmm3, xmm1
addss xmm3, xmm13
comiss xmm10, xmm3
jbe 0x140033f63
movss dword [rsp + 0x70], xmm7
movaps xmm3, xmm7
jmp 0x140034025
movss xmm2, dword [0x14003ebf8]
movaps xmm11, xmm4
mulss xmm11, dword [rbp + 0x164]
movaps xmm0, xmm5
mov eax, r8d
mulss xmm0, dword [rbp + 0x160]
movaps xmm1, xmm6
cdq
mulss xmm4, dword [rbp + 0x174]
sub eax, edx
sar eax, 1
mulss xmm5, dword [rbp + 0x170]
addss xmm11, xmm0
divss xmm2, xmm3
xorps xmm0, xmm0
mulss xmm1, xmm15
addss xmm4, xmm5
mulss xmm6, xmm8
addss xmm11, xmm1
xorps xmm3, xmm3
cvtsi2ss xmm0, r8d
addss xmm11, xmm14
addss xmm4, xmm6
mulss xmm11, xmm2
addss xmm4, dword [rbp + 0x17c]
mulss xmm11, xmm12
mulss xmm4, xmm2
mulss xmm11, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mulss xmm4, xmm12
addss xmm11, xmm12
cvtsi2ss xmm3, eax
addss xmm11, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
movss dword [rsp + 0x70], xmm11
mulss xmm4, xmm0
addss xmm4, xmm12
subss xmm3, xmm4
movss xmm0, dword [rsp + 0x60]
movaps xmm1, xmm0
movss dword [rsp + 0x74], xmm3
subss xmm0, xmm9
subss xmm1, xmm3
movss dword [rsp + 0x60], xmm0
divss xmm0, dword [0x14003ec14]
mulss xmm1, dword [0x14003eb98]
movss dword [rbp - 0x7c], xmm0
movss dword [rbp - 0x80], xmm1
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [rsi + 0x10]
jne 0x140034729
mov r13, qword [rbp - 0x40]
lea r15, [0x140045054]
mov dword [rbp - 0x20], 0xff
mov r14d, edi
mov dword [rbp - 0x1c], 0xff
movsd xmm11, qword [rbp - 0x20]
jmp 0x14003409a
movss xmm10, dword [0x14003eb84]
mov eax, dword [r15 - 4]
lea rcx, str.ntdll.dll
shl eax, 5
movsxd rdi, eax
add rdi, r13
mov qword [rbp + 0x1b0], 0
mov dword [rbp + 0x1b8], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea r8, [rbp + 0x1b0]
mov r9d, 0xc
mov qword [rsp + 0x20], 0
mov rdx, rdi
call rbx
mov eax, dword [r15]
lea rcx, str.ntdll.dll
shl eax, 5
movsxd rdi, eax
add rdi, r13
mov qword [rbp + 0x1c0], 0
mov dword [rbp + 0x1c8], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea r8, [rbp + 0x1c0]
mov r9d, 0xc
mov qword [rsp + 0x20], 0
mov rdx, rdi
call rbx
movss xmm3, dword [rbp + 0x1b0]
movss xmm5, dword [rbp + 0x1b4]
movaps xmm4, xmm3
movss xmm9, dword [rbp + 0x190]
movaps xmm0, xmm5
movss xmm13, dword [rbp + 0x194]
movss xmm8, dword [rbp + 0x1b8]
movss xmm14, dword [rbp + 0x198]
movaps xmm1, xmm8
movss xmm15, dword [rbp + 0x19c]
mov ecx, dword [0x14004584c]
mov r8d, dword [0x140045848]
mulss xmm4, xmm9
mulss xmm0, xmm13
mulss xmm1, xmm14
addss xmm4, xmm0
addss xmm4, xmm1
addss xmm4, xmm15
comiss xmm10, xmm4
jbe 0x140034217
movaps xmm6, xmm7
movaps xmm10, xmm7
jmp 0x1400342da
movss xmm2, dword [0x14003ebf8]
movaps xmm6, xmm3
mulss xmm6, dword [rbp + 0x160]
movaps xmm0, xmm5
mov eax, r8d
mulss xmm0, dword [rbp + 0x164]
movaps xmm1, xmm8
cdq
mulss xmm3, dword [rbp + 0x170]
sub eax, edx
sar eax, 1
mulss xmm1, dword [rbp + 0x168]
addss xmm6, xmm0
mulss xmm5, dword [rbp + 0x174]
xorps xmm10, xmm10
mulss xmm8, dword [rbp + 0x178]
xorps xmm0, xmm0
addss xmm6, xmm1
addss xmm3, xmm5
cvtsi2ss xmm0, r8d
addss xmm6, dword [rbp + 0x16c]
addss xmm3, xmm8
divss xmm2, xmm4
addss xmm3, dword [rbp + 0x17c]
mulss xmm6, xmm2
mulss xmm6, xmm12
mulss xmm3, xmm2
mulss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mulss xmm3, xmm12
addss xmm6, xmm12
cvtsi2ss xmm10, eax
addss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm3, xmm0
addss xmm3, xmm12
subss xmm10, xmm3
movss xmm5, dword [rbp + 0x1c4]
movss xmm8, dword [rbp + 0x1c0]
movaps xmm3, xmm5
mulss xmm3, xmm13
movaps xmm0, xmm8
mulss xmm0, xmm9
movss xmm9, dword [rbp + 0x1c8]
movaps xmm1, xmm9
addss xmm3, xmm0
mulss xmm1, xmm14
movss xmm0, dword [0x14003eb84]
movss xmm14, dword [0x14003ebf8]
addss xmm3, xmm1
addss xmm3, xmm15
comiss xmm0, xmm3
jbe 0x14003433c
movaps xmm4, xmm7
movaps xmm1, xmm7
jmp 0x1400343fb
movaps xmm4, xmm5
movaps xmm0, xmm8
mulss xmm4, dword [rbp + 0x164]
movaps xmm1, xmm9
mov eax, r8d
mulss xmm0, dword [rbp + 0x160]
movaps xmm2, xmm14
cdq
mulss xmm5, dword [rbp + 0x174]
sub eax, edx
sar eax, 1
mulss xmm1, dword [rbp + 0x168]
addss xmm4, xmm0
mulss xmm8, dword [rbp + 0x170]
xorps xmm0, xmm0
mulss xmm9, dword [rbp + 0x178]
addss xmm4, xmm1
xorps xmm1, xmm1
addss xmm5, xmm8
cvtsi2ss xmm0, r8d
addss xmm4, dword [rbp + 0x16c]
addss xmm5, xmm9
divss xmm2, xmm3
addss xmm5, dword [rbp + 0x17c]
mulss xmm4, xmm2
mulss xmm4, xmm12
mulss xmm5, xmm2
mulss xmm4, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mulss xmm5, xmm12
addss xmm4, xmm12
cvtsi2ss xmm1, eax
addss xmm4, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm5, xmm0
addss xmm5, xmm12
subss xmm1, xmm5
lea rax, [rbp - 0x10]
mov dword [rsp + 0x28], 1
cvttss2si r9d, xmm1
mov dword [rbp - 8], 0xff
mov qword [rsp + 0x20], rax
cvttss2si r8d, xmm4
cvttss2si edx, xmm10
cvttss2si ecx, xmm6
movsd qword [rbp - 0x10], xmm11
call fcn.1400330f0
inc r14d
add r15, 8
cmp r14d, 0x10
jb 0x140034091
mov rax, qword [0x140045818]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4b10]
mov rcx, qword [rcx]
call fcn.1400070c0
cvttss2si ecx, dword [rsp + 0x70]
lea rdx, [rbp - 0x6c]
mov r9d, 0xffffffff
movss xmm2, dword [rbp - 0x80]
subss xmm2, dword [0x14003ec1c]
movss dword [rsp + 0x28], xmm14
movd xmm0, ecx
cvttss2si ecx, dword [rsp + 0x74]
cvtdq2ps xmm0, xmm0
movd xmm1, ecx
mov rcx, rax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x6c], xmm0
movss dword [rbp - 0x68], xmm1
call fcn.140027370
mov rax, qword [0x140045818]
lea r8, str.Background
movss xmm11, dword [rbp - 0x7c]
xor edx, edx
movss xmm6, dword [rsp + 0x78]
movaps xmm0, xmm11
movss xmm13, dword [rsp + 0x64]
movaps xmm8, xmm6
mov rcx, qword [rax + 0x4b10]
mulss xmm0, xmm12
cvttss2si ebx, xmm13
mov rcx, qword [rcx]
subss xmm8, xmm0
cvttss2si edi, xmm8
call fcn.1400070c0
lea r8, [rbp - 0x64]
mov r9d, 0xff0000ff
lea rdx, [rbp - 0x5c]
movss xmm9, dword [rsp + 0x60]
cvttss2si ecx, xmm11
movss dword [rsp + 0x30], xmm14
add ecx, edi
movd xmm10, edi
cvtdq2ps xmm10, xmm10
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
cvttss2si ecx, xmm9
movss dword [rbp - 0x64], xmm0
add ecx, ebx
movss dword [rbp - 0x5c], xmm10
movss dword [rsp + 0x20], xmm7
movd xmm0, ecx
mov rcx, rax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x60], xmm0
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x58], xmm0
call fcn.140026f60
mov rax, qword [0x140045818]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4b10]
mov rcx, qword [rcx]
call fcn.1400070c0
subss xmm6, dword [0x14003ec40]
movaps xmm1, xmm13
mov r15, 0xffffffffffffffff
subss xmm1, dword [0x14003ec48]
mov r8, rax
lea rax, [rbp + 0x12a0]
cvttss2si ecx, xmm6
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
cvttss2si ecx, xmm1
movss dword [rbp - 0x54], xmm0
movd xmm0, ecx
mov rcx, r15
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x50], xmm0
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x1400345d0
lea rdx, [rbp + 0x12a0]
add rdx, rcx
lea rax, [rbp + 0x12a0]
cmp rax, rdx
je 0x140034641
mov rax, qword [r8 + 0x38]
lea rcx, [rbp + 0x12a0]
movups xmm0, xmmword [r8 + 0x88]
mov byte [rsp + 0x48], 0
lea r9, [rbp - 0x54]
movss dword [rsp + 0x40], xmm7
movss xmm2, dword [rax + 0x10]
mov qword [rsp + 0x38], rdx
mov rdx, r8
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x50]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rax + 8]
movups xmmword [rbp + 0x50], xmm0
mov dword [rsp + 0x20], 0xffffffff
call fcn.14002b4e0
subss xmm8, dword [0x14003ec38]
mov eax, 0x64
mov dword [rbp + 4], 0xff
sub eax, dword [rbp - 0x78]
xor ebx, ebx
mov dword [rbp], ebx
movaps xmm6, xmm9
movsd xmm0, qword [rbp]
addss xmm6, xmm13
movsd qword [rbp + 0x10], xmm0
movd xmm0, eax
lea rax, [rbp + 0x10]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 4
mov dword [rbp + 0x18], ebx
mov qword [rsp + 0x20], rax
cvttss2si ecx, xmm8
mulss xmm0, xmm9
mov r8d, ecx
cvttss2si r9d, xmm6
divss xmm0, dword [0x14003ec64]
addss xmm0, xmm13
cvttss2si edx, xmm0
call fcn.1400330f0
addss xmm6, dword [0x14003ec28]
mov eax, 0x64
mov qword [rbp + 0x20], rbx
sub eax, dword [rbp - 0x74]
movaps xmm1, xmm11
movsd xmm0, qword [rbp + 0x20]
addss xmm1, xmm10
movsd qword [rbp + 0x30], xmm0
mov ecx, edi
cvttss2si edx, xmm6
mov dword [rsp + 0x28], 4
mov dword [rbp + 0x38], 0xff
movd xmm0, eax
lea rax, [rbp + 0x30]
cvtdq2ps xmm0, xmm0
mov r9d, edx
mov qword [rsp + 0x20], rax
mulss xmm0, xmm11
divss xmm0, dword [0x14003ec64]
subss xmm1, xmm0
cvttss2si r8d, xmm1
call fcn.1400330f0
mov r14, qword [rsp + 0x68]
mov r13, qword [rbp - 0x38]
jmp 0x140034737
mov r14, qword [rsp + 0x68]
mov r15, 0xffffffffffffffff
xor ebx, ebx
inc r12d
cmp r12d, 0x20
jl 0x140033a20
call fcn.140009ab0
mov rcx, qword [rbp + 0x80]
lea r8, [rbp + 0x98]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x288], xmm0
mov rax, qword [rcx]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [rbp + 0x80]
lea r8, [rbp + 0x288]
mov rdx, qword [rbp + 0x98]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rax, qword [0x140045818]
mov rcx, qword [rax + 0x4b10]
mov rax, qword [rcx]
mov rcx, rbx
add rax, 0x48
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14002ca50
mov rcx, qword [rbp + 0x88]
xor r8d, r8d
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r13d, dword [rsp + 0x7c]
mov rdi, qword [rbp - 0x48]
jmp 0x140033885
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [0x140045818]
xor esi, esi
movaps xmm15, xmmword [rsp + 0x14b0]
movaps xmm14, xmmword [rsp + 0x14c0]
movaps xmm13, xmmword [rsp + 0x14d0]
movaps xmm12, xmmword [rsp + 0x14e0]
movaps xmm11, xmmword [rsp + 0x14f0]
movaps xmm10, xmmword [rsp + 0x1500]
movaps xmm9, xmmword [rsp + 0x1510]
movaps xmm8, xmmword [rsp + 0x1520]
movaps xmm7, xmmword [rsp + 0x1530]
movaps xmm6, xmmword [rsp + 0x1540]
mov r13, qword [rsp + 0x1598]
test rbx, rbx
je 0x140034854
mov rdi, qword [rbx + 0x98]
jmp 0x140034857
mov rdi, rsi
call fcn.14002da00
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14003486b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140034879
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140034888
mov rax, qword [rcx]
call qword [rax + 0x10]
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x140045818]
mov qword [rbx + 0x88], rsi
mov qword [rbx + 0x98], rsi
test r8, r8
je 0x140034909
movsx rdx, word [r8 + 0x60f0]
lea rcx, [r8 + 0x60f4]
mov r9d, dword [r8 + 0x3f58]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x1400348fe
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rcx, [r8 + 0x60f4]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x60ec]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x140045818]
test r8, r8
je 0x140034927
mov rdi, qword [r8 + 0x90]
jmp 0x14003492a
mov rdi, rsi
mov rcx, qword [rdi + 0x38]
lea rbx, [r8 + 8]
test rcx, rcx
je 0x140034944
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x140045818]
and dword [rbx + 4], 0xfffffff8
mov qword [rbx + 0x78], rsi
mov qword [rbx + 0x88], rsi
test r8, r8
je 0x1400349bb
movsx rdx, word [r8 + 0x60f0]
mov r9d, dword [r8 + 0x3f58]
lea rcx, [rdx*8 + 0x60f4]
add rcx, r8
cmp dword [rcx], r9d
je 0x1400349b0
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rcx, [rax*8 + 0x60f4]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x60ec]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140045818]
mov qword [0x140045818], rbx
call fcn.140005970
mov qword [0x140045818], rsi
test rbx, rbx
je 0x140034a68
mov rcx, rbx
call fcn.14001b560
mov r8, qword [0x140045818]
test r8, r8
je 0x140034a5f
movsx r10, word [r8 + 0x60f0]
lea rdx, [r8 + 0x60f4]
mov r9d, dword [r8 + 0x3f58]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x140034a54
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x60f4]
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [r8 + 0x60ec]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x140034a7a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x80]
test rcx, rcx
je 0x140034a8c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x140034a9e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x140034ab0
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x118]
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov r14, qword [rbp - 0x28]
mov eax, r15d
lock xadd dword [r14 + 8], eax
cmp eax, 1
jne 0x140034afd
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
lock xadd dword [r14 + 0xc], r15d
cmp r15d, 1
jne 0x140034afd
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 8]
mov r15, qword [rsp + 0x1550]
xor eax, eax
mov r14, qword [rsp + 0x1558]
jmp 0x140034b16
mov eax, 1
mov rcx, qword [rbp + 0x13a0]
xor rcx, rsp
call fcn.140035df0
add rsp, 0x1560
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret