Function at 0x14005fdc0
Capabilities:
Create thread
Execute command
Log keystrokes via polling
Query environment variable
Read file on windows

Disassembly:
push rbp
push rbx
push r12
lea rbp, [rsp - 0xa30]
sub rsp, 0xb30
mov rax, qword [0x140118480]
xor rax, rsp
mov qword [rbp + 0x970], rax
xor r12d, r12d
mov dword [rbp + 0x370], 0x50
lea rax, [0x140065920]
mov dword [rsp + 0x70], r12d
xor ecx, ecx
mov qword [rbp + 0x378], rax
mov qword [rbp + 0x380], r12
mov dword [rbp + 0x374], 0x40
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov qword [rbp + 0x3b8], r12
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x390], xmm0
lea rbx, [0x1400f8754]
movdqa xmmword [rbp + 0x3a0], xmm1
lea rcx, [rbp + 0x370]
mov qword [rbp + 0x388], rax
mov qword [rbp + 0x3b0], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rax, qword [rbp + 0x388]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x3b0]
mov r8, rbx
mov qword [rsp + 0x58], r12
xor ecx, ecx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_CreateWindowExA]
lea ecx, [r12 + 0x20]
mov qword [0x14014f610], rax
mov rbx, rax
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x14014f608], rax
mov rcx, rax
test rax, rax
je 0x140062fca
lea rdx, [0x14014f600]
mov qword [0x14014f5c0], r12
mov qword [rsp + 0x30], rdx
lea r8d, [r12 + 1]
lea rdx, [0x14014f5c0]
mov qword [0x14014f5cc], r12
mov qword [rsp + 0x28], rdx
mov r9, rbx
mov dword [0x14014f5d4], r12d
xor edx, edx
mov qword [0x14014f5dc], r12
mov dword [0x14014f5e4], r12d
mov qword [0x14014f5f4], r12
mov dword [0x14014f5e8], 1
mov dword [0x14014f5d8], 1
mov dword [0x14014f5c8], r12d
mov dword [0x14014f5ec], 1
mov dword [0x14014f5f0], 0x50
mov dword [0x14014f5fc], 1
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x140062fc3
mov rcx, qword [0x14014f610]
xor edx, edx
mov qword [rsp + 0xb50], rsi
mov qword [rsp + 0xb58], rdi
mov qword [rsp + 0xb60], r13
mov qword [rsp + 0xb28], r14
mov qword [rsp + 0xb20], r15
movaps xmmword [rsp + 0xb10], xmm6
movaps xmmword [rsp + 0xb00], xmm7
movaps xmmword [rsp + 0xaf0], xmm8
movaps xmmword [rsp + 0xae0], xmm9
movaps xmmword [rsp + 0xad0], xmm10
movaps xmmword [rsp + 0xac0], xmm11
movaps xmmword [rsp + 0xab0], xmm12
movaps xmmword [rsp + 0xaa0], xmm13
movaps xmmword [rsp + 0xa90], xmm14
movaps xmmword [rsp + 0xa80], xmm15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14014f610]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rax, qword [0x14014f5a0]
test rax, rax
je 0x14006001e
inc dword [rax + 0x3b0]
mov ecx, 0x40c0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x14006003a
xor edx, edx
mov rcx, rax
call fcn.1400024e0
jmp 0x14006003d
mov rax, r12
cmp qword [0x14014f5a0], r12
jne 0x14006004d
mov qword [0x14014f5a0], rax
mov rcx, rax
call fcn.1400098a0
mov rbx, qword [0x14014f5a0]
xor ecx, ecx
mov qword [rbp + 0xa0], rbx
or dword [rbx + 8], 0x400
mov qword [rbx + 0x20], r12
call fcn.14002d2b0
test dword [rbx + 8], 0x400
movss xmm12, dword [0x14010019c]
je 0x140060775
mov rbx, qword [0x14014f5a0]
mov rcx, qword [rbx + 0xa8]
call fcn.1400323e0
mov r12, qword [rbx + 0xa8]
lea r13, str.C:WindowsFontsl_10646.ttf
mov rcx, r13
lea rdx, [0x1400f831c]
call fcn.140003ce0
mov rdi, rax
test rax, rax
je 0x1400603a4
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
mov esi, eax
cmp eax, 0xffffffff
je 0x14006039b
xor edx, edx
mov rcx, rdi
lea r8d, [rdx + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
test eax, eax
jne 0x14006039b
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
movsxd r15, eax
cmp r15d, 0xffffffff
je 0x14006039b
xor r8d, r8d
mov edx, esi
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
test eax, eax
jne 0x14006039b
cmp r15, 0xffffffffffffffff
je 0x14006039b
mov rax, qword [0x14014f5a0]
test rax, rax
je 0x14006013a
inc dword [rax + 0x3b0]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
test rax, rax
je 0x14006039b
mov r9, rdi
mov r8, r15
mov edx, 1
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rcx, rdi
cmp rax, r15
je 0x140060191
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rax, qword [0x14014f5a0]
test rax, rax
je 0x140060183
dec dword [rax + 0x3b0]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x1400603a4
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
xorps xmm1, xmm1
xor eax, eax
mov qword [rbp + 0x240], rax
xorps xmm5, xmm5
movsd xmm9, qword [rbp + 0x240]
mov eax, 0xffff
movups xmmword [rbp + 0x210], xmm1
mov word [rbp + 0x214], ax
movups xmmword [rbp + 0x1d0], xmm1
mov dword [rbp + 0x210], 0x3f800000
movaps xmm2, xmmword [rbp + 0x210]
xorps xmm7, xmm7
movups xmmword [rbp + 0x1c0], xmm1
mov byte [rbp + 0x1cc], 1
movaps xmm3, xmmword [rbp + 0x1c0]
movdqa xmm0, xmm2
movups xmmword [rbp + 0x200], xmm1
mov dword [rbp + 0x1d8], 3
psrldq xmm0, 6
xorps xmm8, xmm8
movd eax, xmm0
mov dword [rbp + 0x1dc], 1
movaps xmm4, xmmword [rbp + 0x1d0]
mov dword [rbp + 0x204], 0x7f7fffff
movaps xmm6, xmmword [rbp + 0x200]
movaps xmmword [rbp + 0x1e0], xmm1
movaps xmmword [rbp + 0x1f0], xmm1
movaps xmmword [rbp + 0x220], xmm1
movaps xmmword [rbp + 0x230], xmm1
movaps xmmword [rbp + 0x560], xmm3
movaps xmmword [rbp + 0x570], xmm4
movaps xmmword [rbp + 0x580], xmm1
movaps xmmword [rbp + 0x590], xmm5
movaps xmmword [rbp + 0x5a0], xmm6
movaps xmmword [rbp + 0x5b0], xmm2
movaps xmmword [rbp + 0x5c0], xmm7
movaps xmmword [rbp + 0x5d0], xmm8
movsd qword [rbp + 0x5e0], xmm9
test al, al
jne 0x140060324
lea r9, [0x1400fdc54]
movzx eax, byte [r9 - 1]
lea rcx, [r9 - 1]
cmp al, 0x2f
je 0x1400602bc
cmp al, 0x5c
je 0x1400602bc
mov r9, rcx
cmp rcx, r13
ja 0x1400602a3
movsd xmm0, qword [0x140100208]
lea r8, str._s___.0fpx
mov edx, Ordinal_41
movsd qword [rsp + 0x20], xmm0
lea rcx, [rbp + 0x5b6]
call fcn.140003bb0
movaps xmm2, xmmword [rbp + 0x5b0]
movaps xmm5, xmmword [rbp + 0x590]
movaps xmm1, xmmword [rbp + 0x580]
movaps xmm4, xmmword [rbp + 0x570]
movaps xmm3, xmmword [rbp + 0x560]
movsd xmm9, qword [rbp + 0x5e0]
movaps xmm8, xmmword [rbp + 0x5d0]
movaps xmm7, xmmword [rbp + 0x5c0]
movaps xmm6, xmmword [rbp + 0x5a0]
movaps xmmword [rbp + 0x260], xmm3
lea rdx, [rbp + 0x260]
movaps xmmword [rbp + 0x270], xmm4
mov rcx, r12
mov qword [rbp + 0x260], r14
mov dword [rbp + 0x268], r15d
mov dword [rbp + 0x274], 0x41900000
movaps xmmword [rbp + 0x280], xmm1
movaps xmmword [rbp + 0x290], xmm5
movaps xmmword [rbp + 0x2a0], xmm6
movaps xmmword [rbp + 0x2b0], xmm2
movaps xmmword [rbp + 0x2c0], xmm7
movaps xmmword [rbp + 0x2d0], xmm8
movsd qword [rbp + 0x2e0], xmm9
call fcn.140032770
test rax, rax
je 0x1400603a4
mov qword [rbx + 0xb8], rax
jmp 0x1400603a4
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, qword [rbx + 0xa8]
mov rax, qword [rcx + 0x478]
test rax, rax
jne 0x1400603cc
lea rax, [0x140032e90]
mov qword [0x14014fb20], rax
lea rax, [0x14014fb20]
mov rax, qword [rax]
call rax
movaps xmm0, xmmword [0x1401005f0]
xor r12d, r12d
movaps xmm1, xmmword [0x140100590]
mov dword [rbx + 0x1648], r12d
mov qword [rbx + 0x1660], r12
mov qword [rbx + 0x1668], r12
mov qword [rbx + 0x16b0], r12
mov qword [rbx + 0x16bc], r12
mov dword [rbx + 0x16c4], r12d
mov qword [rbx + 0x16e4], r12
mov dword [rbx + 0x1638], 0x3f800000
mov dword [rbx + 0x163c], 0x41000000
mov qword [rbx + 0x1640], 0x41000000
mov dword [rbx + 0x164c], 0x42000000
mov qword [rbx + 0x1650], 0x42000000
mov qword [rbx + 0x1658], 0x3f000000
mov dword [rbx + 0x1670], 0x40800000
mov dword [rbx + 0x1674], 0x40400000
mov qword [rbx + 0x1678], 0x40800000
mov dword [rbx + 0x1680], 0x41000000
mov dword [rbx + 0x1684], 0x40800000
mov dword [rbx + 0x1688], 0x40800000
mov dword [rbx + 0x168c], 0x40800000
mov dword [rbx + 0x1690], 0x40400000
mov dword [rbx + 0x1694], 0x40000000
mov dword [rbx + 0x16a0], 0x41a80000
mov dword [rbx + 0x16a4], 0x40c00000
mov qword [rbx + 0x16a8], 0x41600000
mov dword [rbx + 0x16c8], 1
mov dword [rbx + 0x16cc], 0x3f000000
mov dword [rbx + 0x16d0], 0x3f000000
movups xmmword [rbx + 0x170c], xmm0
movaps xmm0, xmmword [0x140100500]
movups xmmword [rbx + 0x172c], xmm0
movups xmmword [rbx + 0x173c], xmm0
movups xmmword [rbx + 0x174c], xmm0
movups xmmword [rbx + 0x171c], xmm1
movaps xmm1, xmm0
movaps xmm0, xmmword [0x140100520]
movaps xmm1, xmmword [0x140100570]
movups xmmword [rbx + 0x176c], xmm0
movaps xmm0, xmmword [0x140100570]
movups xmmword [rbx + 0x178c], xmm0
movaps xmm0, xmmword [0x140100510]
movups xmmword [rbx + 0x175c], xmm1
movaps xmm1, xmmword [0x140100560]
movups xmmword [rbx + 0x17ac], xmm0
movups xmmword [rbx + 0x17bc], xmm0
movups xmmword [rbx + 0x177c], xmm1
movaps xmm1, xmmword [0x1401005b0]
movups xmmword [rbx + 0x179c], xmm1
movaps xmm1, xmm0
movaps xmm0, xmmword [0x140100520]
movaps xmm1, xmmword [0x140100540]
movups xmmword [rbx + 0x17cc], xmm0
movaps xmm0, xmmword [0x140100510]
movups xmmword [rbx + 0x17ec], xmm0
movaps xmm0, xmmword [0x140100570]
movups xmmword [rbx + 0x180c], xmm0
movaps xmm0, xmmword [0x140100610]
movups xmmword [rbx + 0x17dc], xmm1
movaps xmm1, xmmword [0x140100560]
movups xmmword [rbx + 0x182c], xmm0
movaps xmm0, xmm1
movaps xmm0, xmmword [0x1401005a0]
movups xmmword [rbx + 0x17fc], xmm1
movups xmmword [rbx + 0x181c], xmm1
movups xmmword [rbx + 0x183c], xmm1
movups xmmword [rbx + 0x184c], xmm1
movaps xmm1, xmmword [0x140100500]
movups xmmword [rbx + 0x185c], xmm1
movaps xmm1, xmmword [0x1401005b0]
movups xmmword [rbx + 0x186c], xmm0
movaps xmm0, xmmword [0x140100560]
movups xmmword [rbx + 0x187c], xmm1
movaps xmm1, xmmword [0x1401005a0]
movups xmmword [rbx + 0x188c], xmm0
movaps xmm0, xmmword [0x1401005b0]
movups xmmword [rbx + 0x189c], xmm1
movaps xmm1, xmmword [0x140100580]
movups xmmword [rbx + 0x18ac], xmm0
movaps xmm0, xmm1
movaps xmm0, xmmword [0x140100560]
movups xmmword [rbx + 0x18bc], xmm1
movups xmmword [rbx + 0x18cc], xmm1
movups xmmword [rbx + 0x18dc], xmm1
movaps xmm1, xmmword [0x1401005a0]
movups xmmword [rbx + 0x18ec], xmm0
movaps xmm0, xmmword [0x1401005b0]
movups xmmword [rbx + 0x18fc], xmm1
movaps xmm1, xmmword [0x140100510]
movups xmmword [rbx + 0x190c], xmm0
movaps xmm0, xmmword [0x140100560]
movups xmmword [rbx + 0x191c], xmm1
movaps xmm1, xmmword [0x140100540]
movups xmmword [rbx + 0x192c], xmm0
movaps xmm0, xmmword [0x140100510]
movups xmmword [rbx + 0x193c], xmm1
movaps xmm1, xmmword [0x140100520]
movups xmmword [rbx + 0x194c], xmm0
movaps xmm0, xmmword [0x1401005e0]
movups xmmword [rbx + 0x195c], xmm1
movaps xmm1, xmmword [0x140100600]
movups xmmword [rbx + 0x198c], xmm0
movaps xmm0, xmmword [0x1401005c0]
movups xmmword [rbx + 0x199c], xmm1
movaps xmm1, xmmword [0x1401005d0]
movups xmmword [rbx + 0x19ac], xmm0
movaps xmm0, xmmword [0x140100510]
movups xmmword [rbx + 0x19bc], xmm1
movaps xmm1, xmm0
movaps xmm1, xmmword [0x140100560]
movups xmmword [rbx + 0x19cc], xmm0
movups xmmword [rbx + 0x19dc], xmm0
movaps xmm0, xmmword [0x1401004e0]
movups xmmword [rbx + 0x19ec], xmm0
movaps xmm0, xmmword [0x140100540]
movups xmmword [rbx + 0x19fc], xmm1
movaps xmm1, xmmword [0x140100610]
movups xmmword [rbx + 0x1a0c], xmm0
movaps xmm0, xmm1
movaps xmm0, xmmword [0x1401004d0]
movups xmmword [rbx + 0x1a2c], xmm1
movups xmmword [rbx + 0x1a3c], xmm1
movups xmmword [rbx + 0x1a4c], xmm1
movups xmmword [rbx + 0x1a5c], xmm0
movaps xmm1, xmm0
movups xmmword [rbx + 0x1a6c], xmm0
call fcn.140038bf0
mov rcx, qword [0x14014f600]
lea rax, str.imgui_impl_dx9
mov rbx, qword [0x14014f5a0]
mov qword [0x14014fa40], rcx
or dword [rbx + 0xc], 0x1008
mov qword [rbx + 0xe8], rax
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
test dword [rbx + 8], 0x400
je 0x140060800
mov rax, qword [0x14014f5a0]
lea rcx, [fcn.1400388c0]
mov qword [rax + 0x15f0], rcx
lea rcx, [fcn.140038990]
mov qword [rax + 0x15f8], rcx
lea rcx, [0x140038a10]
mov qword [rax + 0x1600], rcx
lea rcx, [0x140038a70]
mov qword [rax + 0x1608], rcx
lea rcx, [0x140038bc0]
mov qword [rax + 0x1610], rcx
call fcn.14005d8d0
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x620]
call qword [sym.imp.USER32.dll_GetWindowRect]
movzx ebx, byte [rbp + 0x430]
lea rsi, str.INSERT
movzx edi, byte [rbp + 0x430]
lea r14, str.None
movss xmm8, dword [0x14010028c]
lea r13, str.Legit
movss xmm9, dword [0x140100290]
xorps xmm0, xmm0
movss xmm13, dword [0x140100120]
mov r15d, reloc.WS2_32.dll_select
movss xmm14, dword [0x140100134]
xorps xmm10, xmm10
movss xmm15, dword [0x140100178]
movss xmm11, dword [0x140100158]
movups xmmword [rbp + 0x528], xmm0
movups xmmword [rbp + 0x538], xmm0
movups xmmword [rbp + 0x548], xmm0
nop word [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x528]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400608e0
lea rcx, [rbp + 0x528]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x528]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x140062cfe
movsxd rcx, dword [0x14014f738]
add rcx, rcx
mov ecx, dword [rsi + rcx*8 + 8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140060906
cmp byte [0x14014f625], 0
sete byte [0x14014f625]
cmp qword [0x14014fa30], 0
jne 0x140060915
call fcn.140038750
mov rcx, qword [0x14014fa68]
lea rdx, [rbp + 0x360]
mov rsi, qword [0x14014f5a0]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x360], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp + 0x36c]
sub eax, dword [rbp + 0x364]
movd xmm1, eax
mov eax, dword [rbp + 0x368]
sub eax, dword [rbp + 0x360]
cmp byte [reloc.WS2_32.dll_accept], 0
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsi + 0x14], xmm1
movss dword [rsi + 0x10], xmm0
je 0x1400609cc
mov r14, qword [0x14014f5a0]
mov ecx, dword [r14 + 0x161c]
test ecx, ecx
jns 0x1400609a3
mov eax, ecx
cdq
sub eax, edx
mov edx, r12d
sar eax, 1
add eax, ecx
lea rcx, [r14 + 0x1618]
test eax, eax
cmovg edx, eax
call fcn.1400252d0
xor r9d, r9d
mov dword [r14 + 0x1618], r12d
lea r8, [0x140039650]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov byte [reloc.WS2_32.dll_accept], 0
lea r14, str.None
lea rcx, [rbp + 0x508]
mov qword [rbp + 0x508], r12
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp + 0x508]
xorps xmm1, xmm1
mov rax, rcx
xorps xmm0, xmm0
sub rax, qword [0x14014fa70]
cvtsi2ss xmm0, qword [0x14014fa78]
cvtsi2ss xmm1, rax
divss xmm1, xmm0
movss dword [rsi + 0x18], xmm1
mov qword [0x14014fa70], rcx
mov ecx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_recv
and al, 1
mov byte [rsi + 0x13c], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov ecx, r15d
and al, 1
mov byte [rsi + 0x13d], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
mov byte [rsi + 0x13f], 0
mov byte [rsi + 0x13e], al
call fcn.140039170
cmp byte [rsi + 0xcf], 0
je 0x140060a71
mov eax, 0xffffffff
jmp 0x140060a7e
mov rax, qword [0x14014f5a0]
mov eax, dword [rax + 0x20e0]
cmp dword [reloc.WS2_32.dll_htons], eax
je 0x140060a91
mov dword [reloc.WS2_32.dll_htons], eax
call fcn.140038ff0
call fcn.140039380
call fcn.140008580
lea rax, str.Rage
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a8], rax
xorps xmm0, xmm0
lea rax, str.Recommended
mov qword [rbp + 0x1a0], r13
mov qword [rbp + 0x1b0], rax
mov ecx, Ordinal_41
lea rax, str.Legit_delay
mov qword [rbp + 0x1b8], rax
movdqu xmmword [rbp + 0x518], xmm0
call fcn.1400e3214
mov r8d, Ordinal_45
mov qword [rbp - 0x28], rax
lea rdx, [rbp + 0x198]
mov qword [rbp + 0x510], rax
mov rcx, rax
mov rsi, rax
lea r13, [rax + 0x28]
mov qword [rbp + 0x520], r13
call sub.VCRUNTIME140.dll_memmove
mov r8d, 0x104
mov qword [rbp + 0x518], r13
lea rdx, [rbp + 0x660]
mov byte [rbp + 0x430], 1
lea rcx, str.USERPROFILE
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xorps xmm0, xmm0
mov qword [rbp + 0x4f8], r12
mov qword [rbp + 0x500], r12
movups xmmword [rbp + 0x4e8], xmm0
test eax, eax
je 0x140060b83
lea rax, [rbp + 0x660]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140060b70
lea rdx, [rbp + 0x660]
jmp 0x140060b8d
xor r8d, r8d
lea rdx, [0x1400f8196]
lea rcx, [rbp + 0x4e8]
call fcn.14006aec0
cmp qword [rbp + 0x4f8], 0
je 0x140062f21
cmp byte [0x14014f625], 0
je 0x140062a7c
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor r9d, r9d
mov dword [rsp + 0x30], 0x43
mov dword [rsp + 0x28], r12d
xor r8d, r8d
mov rcx, rax
mov dword [rsp + 0x20], r12d
lea rdx, [r9 - 1]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rax, qword [0x14014f5a0]
lea rdx, [rbp + 0x430]
mov r8d, 0x203a
lea rcx, str.nullcrum.win
or dword [rax + 0x1dd0], 2
mov dword [rax + 0x1df4], 0x43e60000
mov dword [rax + 0x1df8], 0x44048000
mov dword [rax + 0x1dd8], 1
call fcn.14000eb80
movaps xmm0, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm7, xmm0
movss xmm0, dword [0x1401001d8]
mulss xmm7, xmm8
addss xmm7, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm6, xmm0
movss xmm0, dword [0x140100230]
mulss xmm6, xmm8
addss xmm6, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movss xmm4, dword [0x140100100]
lea rcx, [0x140118758]
mulss xmm0, xmm8
mov dword [rbp + 0x3c], 0x3f800000
cvttss2si eax, xmm7
addss xmm0, xmm9
movd xmm1, eax
cvttss2si eax, xmm6
cvtdq2ps xmm1, xmm1
movd xmm2, eax
cvttss2si eax, xmm0
movups xmm0, xmmword [rbp + 0x30]
cvtdq2ps xmm2, xmm2
movd xmm3, eax
mov rax, qword [0x14014f5a0]
mulss xmm1, xmm4
cvtdq2ps xmm3, xmm3
movss xmm0, xmm1
mulss xmm2, xmm4
shufps xmm0, xmm0, 0xe1
mulss xmm3, xmm4
movss xmm0, xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rax + 0x17ac], xmm0
call fcn.140004100
mov ecx, eax
call fcn.14005d5b0
mov rcx, qword [0x14014f5a0]
lea r15, str.______NULLCRUM_EXTERNAL
movss xmm9, dword [0x140100308]
lea rdx, [rbp - 0x58]
movss xmm3, dword [0x1401002e4]
mov qword [rsp + 0x38], r12
mov rax, qword [rcx + 0x1d28]
movss xmm2, dword [rcx + 0x1a90]
mov rcx, qword [rcx + 0x1a88]
mov qword [rsp + 0x30], r12
movss xmm6, dword [rax + 0x11c]
movss xmm8, dword [rax + 0x118]
subss xmm6, dword [rax + 0x54]
subss xmm8, dword [rax + 0x50]
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm9
addss xmm6, dword [rax + 0xa0]
addss xmm8, dword [rax + 0x9c]
call fcn.140035660
movss xmm0, dword [rbp - 0x58]
addss xmm0, dword [0x140100194]
mov rsi, qword [0x14014f5a0]
mov r14d, r12d
cvttss2si eax, xmm0
mov dword [rbp + 0x4c], 0x3f800000
movd xmm1, eax
mov rax, qword [rsi + 0x1d28]
cvtdq2ps xmm1, xmm1
movss xmm7, dword [rax + 0x58]
subss xmm7, xmm1
movss dword [rbp - 0x58], xmm1
movss xmm1, dword [0x14014faec]
addss xmm1, dword [rsi + 0x18]
mulss xmm7, dword [0x140100150]
movss dword [0x14014faec], xmm1
nop dword [rax]
nop dword [rax + rax]
movd xmm0, r14d
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm13
addss xmm0, xmm1
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
mov rax, qword [rsi + 0x1d28]
movaps xmm2, xmm0
mulss xmm2, xmm14
mulss xmm0, xmm11
mov byte [rax + 0xd1], 1
mov rax, qword [rsi + 0x1d28]
movaps xmm1, xmm2
addss xmm2, xmm11
movd xmm3, r12d
addss xmm0, xmm10
addss xmm1, xmm15
cvtdq2ps xmm3, xmm3
movss dword [rbp + 0x44], xmm0
movss xmm0, dword [rax + 0x50]
addss xmm3, xmm7
subss xmm0, dword [rax + 0x9c]
movss dword [rbp + 0x40], xmm2
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
movss dword [rbp + 0x48], xmm1
addss xmm3, xmm0
addss xmm2, xmm6
movss dword [rax + 0x118], xmm3
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
movss xmm0, dword [rax + 0x130]
maxss xmm1, xmm2
maxss xmm0, xmm3
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
mov rcx, qword [rsi + 0x1a88]
call fcn.140012390
movsx r8d, byte [r15]
lea rdx, [0x1400fdcd8]
lea rcx, [rbp + 0x40]
call fcn.14003ca10
call fcn.140012430
inc r14d
add r12d, 0xc
inc r15
cmp r14d, 0x17
jae 0x140060edc
movss xmm1, dword [0x14014faec]
mov rsi, qword [0x14014f5a0]
jmp 0x140060dd0
mov rcx, qword [0x14014f5a0]
mov rax, qword [rcx + 0x1d28]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d28]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
addss xmm8, xmm0
addss xmm2, xmm6
movss dword [rax + 0x118], xmm8
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x134]
movss xmm0, dword [rax + 0x130]
maxss xmm1, xmm2
maxss xmm0, xmm8
movss dword [rax + 0x134], xmm1
movss dword [rax + 0x130], xmm0
call fcn.14004e5c0
lea rcx, str.Main
call fcn.1400501f0
xor r12d, r12d
test al, al
je 0x140060fb5
mov rdx, qword [0x14014f5a0]
mov dword [0x14014fae8], r12d
mov r8, qword [rdx + 0x1d28]
cmp byte [r8 + 0xd4], r12b
jne 0x140060fb5
mov rdx, qword [rdx + 0x21e8]
test rdx, rdx
je 0x140060fb5
movsx rax, word [rdx + 0x70]
lea rcx, [rax + rax*2]
shl rcx, 4
add rcx, qword [rdx + 8]
test byte [rcx + 4], 8
jne 0x140060fb5
dec dword [r8 + 0x108]
lea rcx, str.Settings
call fcn.1400501f0
test al, al
je 0x140061011
mov rdx, qword [0x14014f5a0]
mov dword [0x14014fae8], 1
mov r8, qword [rdx + 0x1d28]
cmp byte [r8 + 0xd4], 0
jne 0x140061011
mov rdx, qword [rdx + 0x21e8]
test rdx, rdx
je 0x140061011
movsx rax, word [rdx + 0x70]
lea rcx, [rax + rax*2]
shl rcx, 4
add rcx, qword [rdx + 8]
test byte [rcx + 4], 8
jne 0x140061011
dec dword [r8 + 0x108]
lea rcx, str.Misc
call fcn.1400501f0
test al, al
je 0x14006106d
mov rdx, qword [0x14014f5a0]
mov dword [0x14014fae8], 2
mov r8, qword [rdx + 0x1d28]
cmp byte [r8 + 0xd4], 0
jne 0x14006106d
mov rdx, qword [rdx + 0x21e8]
test rdx, rdx
je 0x14006106d
movsx rax, word [rdx + 0x70]
lea rcx, [rax + rax*2]
shl rcx, 4
add rcx, qword [rdx + 8]
test byte [rcx + 4], 8
jne 0x14006106d
dec dword [r8 + 0x108]
lea rcx, str.Theme
call fcn.1400501f0
test al, al
je 0x1400610c9
mov rdx, qword [0x14014f5a0]
mov dword [0x14014fae8], 3
mov r8, qword [rdx + 0x1d28]
cmp byte [r8 + 0xd4], 0
jne 0x1400610c9
mov rdx, qword [rdx + 0x21e8]
test rdx, rdx
je 0x1400610c9
movsx rax, word [rdx + 0x70]
lea rcx, [rax + rax*2]
shl rcx, 4
add rcx, qword [rdx + 8]
test byte [rcx + 4], 8
jne 0x1400610c9
dec dword [r8 + 0x108]
call fcn.14004ea30
call fcn.1400130d0
cmp dword [0x14014fae8], 0
jne 0x140061dfe
lea rcx, [0x1400f8196]
call fcn.14003c910
mov rsi, qword [0x14014f5a0]
lea rdx, [rbp + 0x168]
movaps xmm6, xmmword [0x140100620]
movups xmmword [rbp + 0x2f0], xmm6
mov dword [rbp + 0x168], reloc.WS2_32.dll_select
movups xmm0, xmmword [rsi + 0x182c]
lea rcx, [rsi + 0x1e80]
movups xmmword [rbp + 0x16c], xmm0
call fcn.1400251e0
lea rcx, str.Main:
movups xmmword [rsi + 0x182c], xmm6
call fcn.14003c910
lea rdx, [0x14014f59a]
lea rcx, str._Auto_trigger
call fcn.14003eb20
lea rdx, [0x14014f59d]
lea rcx, str._Spray
call fcn.14003eb20
lea rdx, [0x14014f59e]
lea rcx, str._Run_and_gun
call fcn.14003eb20
lea rdx, [0x14014f59c]
lea rcx, str._Auto_head_bob
call fcn.14003eb20
lea rcx, [0x1400f8196]
call fcn.14003c910
lea rcx, str.Autolock:
call fcn.14003c910
xor r8d, r8d
mov qword [rbp - 0x60], 0
lea rdx, [rbp - 0x60]
lea rcx, str.Install_instalock_depepndencies
call fcn.14003d3e0
test al, al
je 0x1400611cf
lea rcx, str.py__m_pip_install_valclient
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor r8d, r8d
mov qword [rbp - 0x20], 0
lea rdx, [rbp - 0x20]
lea rcx, str.Launch_instalocker
call fcn.14003d3e0
test al, al
je 0x1400611fb
lea rcx, str._python_instalocker.py
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400f8196]
call fcn.14003c910
lea rcx, str.Screen:
call fcn.14003c910
movsxd rax, dword [0x14014f6bc]
mov r14d, dword [rsp + 0x70]
test eax, eax
js 0x1400612ce
mov rdx, qword [0x14014f6d8]
lea rcx, [rbp + 0x128]
or r14d, 1
mov edx, dword [rdx + rax*8 + 4]
call fcn.140057510
movsxd rcx, dword [0x14014f6bc]
mov rsi, rax
mov rdx, qword [0x14014f6d8]
mov edx, dword [rdx + rcx*8]
lea rcx, [rbp + 0x148]
call fcn.140057510
mov r8d, 1
lea rdx, [0x1400fdd78]
mov rcx, rax
call fcn.140068f80
or r14d, 0xe
lea r8, [rbp + 0xa8]
mov r9, rsi
mov dword [rsp + 0x70], r14d
movzx edx, dil
lea rcx, [rbp + 0x70]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
movups xmmword [rbp + 0xa8], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0xb8], xmm1
mov byte [rax], 0
call fcn.14006cd70
cmp qword [rbp + 0x88], 0xf
lea rdx, [rbp + 0x70]
cmova rdx, qword [rbp + 0x70]
jmp 0x1400612d5
lea rdx, str.Select...
xor r8d, r8d
lea rcx, str.Resolutions
call fcn.1400407c0
movzx esi, al
test r14b, 8
je 0x14006134a
mov rdx, qword [rbp + 0x88]
and r14d, 0xfffffff7
mov dword [rsp + 0x70], r14d
cmp rdx, 0xf
jbe 0x140061334
mov rcx, qword [rbp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006132f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062ed1
call fcn.1400e2f00
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], 0
test r14b, 4
je 0x1400613b3
mov rdx, qword [rbp + 0xc0]
and r14d, 0xfffffffb
mov dword [rsp + 0x70], r14d
cmp rdx, 0xf
jbe 0x14006139a
mov rcx, qword [rbp + 0xa8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061395
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062ed1
call fcn.1400e2f00
mov qword [rbp + 0xb8], r12
mov qword [rbp + 0xc0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa8], 0
test r14b, 2
je 0x14006141c
mov rdx, qword [rbp + 0x160]
and r14d, 0xfffffffd
mov dword [rsp + 0x70], r14d
cmp rdx, 0xf
jbe 0x140061403
mov rcx, qword [rbp + 0x148]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400613fe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062ed1
call fcn.1400e2f00
mov qword [rbp + 0x158], r12
mov qword [rbp + 0x160], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x148], 0
test r14b, 1
je 0x140061485
mov rdx, qword [rbp + 0x140]
and r14d, 0xfffffffe
mov dword [rsp + 0x70], r14d
cmp rdx, 0xf
jbe 0x14006146c
mov rcx, qword [rbp + 0x128]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061467
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062ed1
call fcn.1400e2f00
mov qword [rbp + 0x138], r12
mov qword [rbp + 0x140], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x128], 0
test sil, sil
je 0x140061884
mov rax, qword [0x14014f6e0]
mov r15d, r12d
mov rdx, qword [0x14014f6d8]
sub rax, rdx
sar rax, 3
test rax, rax
je 0x140061840
mov qword [rbp - 0x18], 0
mov r14, r12
nop word [rax + rax]
cmp dword [0x14014f6bc], r15d
lea r10, [rbp + 0x65d]
mov r8d, dword [r14 + rdx + 4]
sete r12b
test r8d, r8d
jns 0x140061520
neg r8d
nop
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x1400614e0
dec r10
mov byte [r10], reloc.WLDAP32.dll_Ordinal_45
jmp 0x14006154a
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x140061520
lea r9, [rsp + 0x74]
mov rdx, r10
lea r8, [rbp + 0x65d]
lea rcx, [rbp + 0xe8]
call fcn.14006f690
mov rax, qword [0x14014f6d8]
lea r10, [rbp + 0x645]
mov r8d, dword [r14 + rax]
test r8d, r8d
jns 0x1400615c0
neg r8d
nop
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x140061580
dec r10
mov byte [r10], reloc.WLDAP32.dll_Ordinal_45
jmp 0x1400615ea
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x1400615c0
lea r9, [rsp + 0x75]
mov rdx, r10
lea r8, [rbp + 0x645]
lea rcx, [rbp + 0x108]
call fcn.14006f690
mov r8d, 1
lea rdx, [0x1400fdd78]
lea rcx, [rbp + 0x108]
call fcn.140068f80
lea r9, [rbp + 0xe8]
movzx edx, bl
lea r8, [rbp + 0xc8]
lea rcx, [rbp + 0x50]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], 0
movups xmmword [rbp + 0xc8], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0xd8], xmm1
mov byte [rax], 0
call fcn.14006cd70
cmp qword [rbp + 0x68], 0xf
lea rcx, [rbp + 0x50]
lea r9, [rbp - 0x18]
movzx edx, r12b
cmova rcx, qword [rbp + 0x50]
xor r8d, r8d
call fcn.14004d7e0
mov rdx, qword [rbp + 0x68]
movzx esi, al
cmp rdx, 0xf
jbe 0x1400616bc
mov rcx, qword [rbp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400616b7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062ed8
call fcn.1400e2f00
mov rdx, qword [rbp + 0xe0]
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x50], 0
cmp rdx, 0xf
jbe 0x140061711
mov rcx, qword [rbp + 0xc8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006170c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062ed8
call fcn.1400e2f00
mov rdx, qword [rbp + 0x120]
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xe0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xc8], 0
cmp rdx, 0xf
jbe 0x14006176f
mov rcx, qword [rbp + 0x108]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006176a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062ed8
call fcn.1400e2f00
mov rdx, qword [rbp + 0x100]
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x120], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x108], 0
cmp rdx, 0xf
jbe 0x1400617cd
mov rcx, qword [rbp + 0xe8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400617c8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062ed8
call fcn.1400e2f00
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0x100], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xe8], 0
test sil, sil
je 0x14006180b
mov rcx, qword [0x14014f6d8]
mov dword [0x14014f6bc], r15d
mov edx, dword [r14 + rcx + 4]
mov ecx, dword [r14 + rcx]
call fcn.14005cc70
test r12b, r12b
je 0x140061815
call fcn.1400126b0
mov rcx, qword [0x14014f6e0]
inc r15d
mov rdx, qword [0x14014f6d8]
add r14, 8
sub rcx, rdx
movsxd rax, r15d
sar rcx, 3
cmp rax, rcx
jb 0x1400614c0
xor r12d, r12d
mov rsi, qword [0x14014f5a0]
mov rax, qword [rsi + 0x1d28]
cmp qword [rsi + 0x1f60], rax
jne 0x140061868
mov qword [rsi + 0x2080], rax
mov dword [rsi + 0x2088], 2
test dword [rax + 0xc], 0x1000000
je 0x140061878
mov byte [rsi + 0x1cb2], 1
call fcn.140011c80
mov byte [rsi + 0x1cb2], 0
movsxd rax, dword [0x14014f6bc]
test eax, eax
js 0x1400618ac
mov rdx, qword [0x14014f6d8]
lea rcx, str.True_stretch_Resolution:__dx_d
mov r8d, dword [rdx + rax*8 + 4]
mov edx, dword [rdx + rax*8]
call fcn.14003c910
jmp 0x1400618b8
lea rcx, str.True_stretch_Resolution:_Not_selected
call fcn.14003c910
lea rcx, [0x1400f8196]
call fcn.14003c910
mov r15d, 4
cmp dword [0x14014fae8], 3
jne 0x140061cb6
mov r8d, 2
lea rdx, [0x140118738]
lea rcx, str.Text_Color
call fcn.140048e40
mov r8d, 2
lea rdx, [0x140118788]
lea rcx, str.Background_Color
call fcn.140048e40
mov r8d, 2
lea rdx, [0x140118748]
lea rcx, str.Button_Color
call fcn.140048e40
mov r8d, 2
lea rdx, [0x140118798]
lea rcx, str.Window_Color
call fcn.140048e40
lea rax, [rbp + 0x470]
mov dword [rbp + 0x470], 0x41200000
lea rsi, str._.3f
mov dword [rbp + 0x468], 0
mov qword [rsp + 0x28], rsi
lea r9, [rbp + 0x468]
lea r8, [0x14014f5b0]
mov qword [rsp + 0x20], rax
mov edx, 8
lea rcx, str.Button_Rounding
call fcn.1400428b0
lea rax, [rbp + 0x460]
mov qword [rsp + 0x28], rsi
lea r9, [rbp + 0x458]
mov qword [rsp + 0x20], rax
lea r8, [0x14014f5b8]
mov dword [rbp + 0x460], 0x41200000
mov edx, 8
mov dword [rbp + 0x458], 0
lea rcx, str.Frame_Rounding
call fcn.1400428b0
lea rax, [rbp + 0x448]
mov qword [rsp + 0x28], rsi
lea r9, [rbp + 0x440]
mov qword [rsp + 0x20], rax
lea r8, [0x14014f618]
mov dword [rbp + 0x448], 0x41200000
mov edx, 8
mov dword [rbp + 0x440], 0
lea rcx, str.Window_Rounding
call fcn.1400428b0
lea rax, [rbp + 0x4e0]
mov qword [rsp + 0x28], rsi
lea r9, [rbp + 0x4d8]
mov qword [rsp + 0x20], rax
lea r8, [0x14011851c]
mov dword [rbp + 0x4e0], 0x41a00000
mov edx, 8
mov dword [rbp + 0x4d8], 0
lea rcx, str.Item_Spacing
call fcn.1400428b0
lea rax, [rbp + 0x4d0]
mov qword [rsp + 0x28], rsi
lea r9, [rbp + 0x4c8]
mov qword [rsp + 0x20], rax
lea r8, [0x140118504]
mov dword [rbp + 0x4d0], 0x41a00000
mov edx, 8
mov dword [rbp + 0x4c8], 0
lea rcx, str.Padding
call fcn.1400428b0
lea rax, [rbp + 0x4c0]
mov qword [rsp + 0x28], rsi
lea r9, [rbp + 0x4b8]
mov qword [rsp + 0x20], rax
lea r8, [0x140118524]
mov dword [rbp + 0x4c0], 0x40000000
mov edx, 8
mov dword [rbp + 0x4b8], 0
lea rcx, str.Window_Border_Size
call fcn.1400428b0
lea rax, [rbp + 0x438]
mov dword [rbp + 0x438], 0x41a00000
mov dword [rbp + 0x450], 0x41200000
mov qword [rsp + 0x28], rsi
lea r9, [rbp + 0x450]
mov qword [rsp + 0x20], rax
lea r8, [0x140118518]
mov edx, 8
lea rcx, str.Scrollbar_Size
call fcn.1400428b0
lea rax, [rbp + 0x488]
mov qword [rsp + 0x28], rsi
lea r9, [rbp + 0x498]
mov qword [rsp + 0x20], rax
lea r8, [0x14014f61c]
mov dword [rbp + 0x488], 0x41200000
mov edx, 8
mov dword [rbp + 0x498], 0
lea rcx, str.Scrollbar_Rounding
call fcn.1400428b0
xor r8d, r8d
lea rdx, [0x140118758]
lea rcx, str.Animated_Background
call fcn.140048e40
xor r8d, r8d
mov qword [rbp - 0x40], 0
lea rdx, [rbp - 0x40]
lea rcx, str.Apply
call fcn.14003d3e0
test al, al
je 0x140061c6e
movups xmm0, xmmword [0x140118738]
mov rax, qword [0x14014f5a0]
movss xmm9, dword [0x14014f61c]
movss xmm8, dword [0x140118518]
movss xmm7, dword [0x140118524]
movss xmm6, dword [0x140118504]
movss xmm5, dword [0x14011851c]
movss xmm4, dword [0x14014f618]
movss xmm2, dword [0x14014f5b8]
movss xmm3, dword [0x14014f5b0]
movups xmmword [rax + 0x170c], xmm0
movups xmm1, xmmword [0x140118788]
movups xmmword [rax + 0x172c], xmm1
movups xmm0, xmmword [0x140118748]
movups xmmword [rax + 0x185c], xmm0
movups xmm1, xmmword [0x140118798]
movss dword [rax + 0x1678], xmm2
movups xmmword [rax + 0x173c], xmm1
movss dword [rax + 0x16b4], xmm3
movss dword [rax + 0x1644], xmm4
movss dword [rax + 0x1680], xmm5
movss dword [rax + 0x1684], xmm5
movss dword [rax + 0x1670], xmm6
movss dword [rax + 0x1674], xmm6
movss dword [rax + 0x1648], xmm7
movss dword [rax + 0x16a8], xmm8
movss dword [rax + 0x16ac], xmm9
xor r8d, r8d
mov qword [rbp - 0x38], 0
lea rdx, [rbp - 0x38]
lea rcx, str.Save_Config
call fcn.14003d3e0
test al, al
je 0x140061c92
call fcn.14005db20
xor r8d, r8d
mov qword [rbp - 0x68], 0
lea rdx, [rbp - 0x68]
lea rcx, str.Load_Config
call fcn.14003d3e0
test al, al
je 0x140061cb6
call fcn.14005e0d0
mov rax, qword gs:[0x58]
mov edx, r15d
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14014fb90], eax
jle 0x140061d63
lea rcx, [0x14014fb90]
call fcn.1400e2b78
cmp dword [0x14014fb90], 0xffffffff
jne 0x140061d63
xorps xmm0, xmm0
mov byte [0x14014fbe0], 0
xorps xmm1, xmm1
mov dword [0x14014fbf8], r12d
mov edx, 2
movdqa xmmword [0x14014fc00], xmm1
lea rcx, [0x14014fbf8]
mov qword [0x14014fc40], 0
movups xmmword [0x14014fbe8], xmm0
movups xmmword [0x14014fc10], xmm0
movups xmmword [0x14014fc20], xmm0
movups xmmword [0x14014fc30], xmm0
call qword [sym.imp.MSVCP140.dll__Mtx_init_in_situ]
lea rcx, [0x14014fc48]
call qword [sym.imp.MSVCP140.dll__Cnd_init_in_situ]
lea rcx, [0x1400e7570]
call fcn.1400e2ee8
lea rcx, [0x14014fb90]
call fcn.1400e2b0c
cmp byte [0x14014f59a], 0
je 0x1400629b4
cmp dword [0x14014fbf0], 0
jne 0x140062a38
mov ecx, reloc.WS2_32.dll_recv
mov byte [0x14014fbe0], 0
call fcn.1400e3214
lea rcx, [0x14014fbe0]
mov r9, rax
lea r8, [0x140073d20]
xor edx, edx
mov qword [rax], rcx
lea rcx, [0x14005f2e0]
mov qword [rax + 8], rcx
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x140062eed
cmp dword [0x14014fbf0], 0
jne 0x140062ee6
movaps xmm0, xmmword [rbp + 0x20]
xorps xmm1, xmm1
movaps xmmword [rbp + 0x300], xmm1
movaps xmmword [rbp + 0x310], xmm0
movdqa xmmword [rbp + 0x20], xmm1
jmp 0x140062a31
cmp dword [0x14014fae8], 1
jne 0x1400622ed
mov rax, qword [0x14014f5a0]
mov rax, qword [rax + 0x1d28]
cmp byte [rax + 0xd4], 0
jne 0x140061e34
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14003fc70
lea rcx, [0x1400f8196]
call fcn.14003c910
lea rax, [rbp + 0x4b0]
mov dword [rbp + 0x4b0], 7
lea r15, [0x1400f8750]
mov dword [rbp + 0x4a8], 1
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0x4a8]
lea r8, [0x140118520]
mov qword [rsp + 0x20], rax
mov edx, 4
lea rcx, str.Crosshair_detection
call fcn.1400428b0
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0x490]
mov qword [rsp + 0x20], rax
lea r8, [0x140118514]
mov dword [rbp + 0x4a0], 0x64
mov edx, 4
mov dword [rbp + 0x490], 1
lea rcx, str.Trigger_Delay
call fcn.1400428b0
lea rax, [rbp + 0x480]
mov qword [rsp + 0x28], r15
lea r9, [rbp + 0x478]
mov qword [rsp + 0x20], rax
lea r8, [0x140118508]
mov dword [rbp + 0x480], 0x64
mov edx, 4
mov dword [rbp + 0x478], r12d
lea rcx, str.Color_detection
call fcn.1400428b0
lea rcx, [0x1400f8196]
call fcn.14003c910
mov rax, qword [0x14014f5a0]
mov rax, qword [rax + 0x1d28]
cmp byte [rax + 0xd4], 0
jne 0x140061f45
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14003fc70
lea rcx, [0x1400f8196]
call fcn.14003c910
lea rax, [rbp + 0x350]
mov qword [rsp + 0x28], r15
lea rsi, [0x140118500]
mov qword [rsp + 0x20], rax
mov r8, rsi
mov dword [rbp + 0x350], 0x64
lea r9, [rbp + 0x358]
mov dword [rbp + 0x358], 1
lea rcx, [0x1400fde20]
call fcn.1400435c0
lea rax, [rbp + 0x348]
mov qword [rsp + 0x28], r15
lea r14, [0x14011850c]
mov qword [rsp + 0x20], rax
mov r8, r14
mov dword [rbp + 0x348], 0x64
lea r9, [rbp + 0x340]
mov dword [rbp + 0x340], 1
lea rcx, [0x1400fde24]
call fcn.1400435c0
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x338]
lea r15, [0x140118528]
mov dword [rbp + 0x338], 0x64
mov r8, r15
mov dword [rbp + 0x330], 1
lea r9, [rbp + 0x330]
mov qword [rsp + 0x20], rax
lea rcx, [0x1400fcd24]
call fcn.1400435c0
mov edx, dword [0x140118500]
lea rcx, [rbp - 0x80]
test edx, edx
mov dword [rbp - 0x7c], 0xff
lea rax, [rbp - 0x7c]
mov dword [rbp - 0x80], r12d
cmovns rcx, rsi
mov dword [rbp - 0x74], 0xff
cmp edx, 0xff
mov dword [rbp - 0x78], r12d
mov edx, dword [0x14011850c]
lea r9, [rbp - 0x6c]
cmovle rax, rcx
mov dword [rbp - 0x6c], 0xff
test edx, edx
mov dword [rbp - 0x70], r12d
lea rcx, [rbp - 0x78]
cmovns rcx, r14
cmp edx, 0xff
mov r10d, dword [rax]
lea rax, [rbp - 0x74]
cmovle rax, rcx
mov dword [0x140118500], r10d
mov ecx, dword [0x140118528]
mov edx, r10d
test ecx, ecx
mov r8d, dword [rax]
lea rax, [rbp - 0x70]
cmovns rax, r15
mov dword [0x14011850c], r8d
cmp ecx, 0xff
lea rcx, str.Player_Color:___d___d___d_
cmovle r9, rax
mov r9d, dword [r9]
mov dword [0x140118528], r9d
call fcn.14003c910
lea rcx, [0x1400f8196]
call fcn.14003c910
mov rax, qword [0x14014f5a0]
mov rax, qword [rax + 0x1d28]
cmp byte [rax + 0xd4], 0
jne 0x1400620f4
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14003fc70
lea rcx, [0x1400f8196]
call fcn.14003c910
xor r8d, r8d
lea rcx, str._Change_shoot_key_
call fcn.14004e0d0
test al, al
je 0x14006211a
mov byte [0x14014f59b], 1
movsx edx, byte [0x140118510]
lea rcx, str.Current_Shoot_Key:__c
call fcn.14003c910
lea rcx, [0x1400f8196]
call fcn.14003c910
mov rax, qword [0x14014f5a0]
mov rax, qword [rax + 0x1d28]
cmp byte [rax + 0xd4], 0
jne 0x140062162
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14003fc70
lea rcx, [0x1400f8196]
call fcn.14003c910
lea rcx, str.Presets:
call fcn.14003c910
movaps xmm1, xmm9
movaps xmm0, xmm10
call fcn.140012e10
mov r9, qword [rbp - 0x28]
mov r8, r13
sub r8, r9
sar r8, 3
mov dword [rsp + 0x20], r8d
call fcn.140041300
mov ecx, dword [0x1401187c8]
cmp ecx, 0xffffffff
je 0x1400618c4
test ecx, ecx
je 0x140062265
sub ecx, 1
je 0x140062242
sub ecx, 1
je 0x140062222
sub ecx, 1
je 0x1400621ff
cmp ecx, 1
jne 0x1400622de
mov dword [reloc.WS2_32.dll_connect], 3
mov dword [reloc.WS2_32.dll_accept], 6
mov dword [reloc.WLDAP32.dll_Ordinal_50], 0x3c
mov dword [0x1401187c8], 0xffffffff
jmp 0x1400618c4
mov dword [reloc.WS2_32.dll_accept], 1
mov dword [reloc.WLDAP32.dll_Ordinal_50], 0x36
mov dword [0x1401187c8], 0xffffffff
jmp 0x1400618c4
mov dword [reloc.WS2_32.dll_accept], r12d
mov dword [reloc.WLDAP32.dll_Ordinal_50], 0x46
mov dword [0x1401187c8], 0xffffffff
jmp 0x1400618c4
mov dword [reloc.WS2_32.dll_accept], 1
mov dword [reloc.WLDAP32.dll_Ordinal_50], 0x32
mov dword [0x1401187c8], 0xffffffff
jmp 0x1400618c4
xorps xmm0, xmm0
mov qword [rbp + 8], r12
mov r8d, 7
mov qword [rbp + 0x10], r12
lea rdx, str.CLEARED
lea rcx, [rbp - 8]
movups xmmword [rbp - 8], xmm0
call fcn.14006aec0
lea rcx, [rbp - 8]
call fcn.14005ede0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x1400622ce
mov rcx, qword [rbp - 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400622c9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062edf
call fcn.1400e2f00
mov qword [rbp + 8], r12
mov qword [rbp + 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 8], 0
mov dword [0x1401187c8], 0xffffffff
jmp 0x1400618c4
cmp dword [0x14014fae8], 2
jne 0x1400618c4
lea rcx, [0x1400f8196]
call fcn.14003c910
movsxd rdx, dword [0x14014f738]
lea rax, str.INSERT
add rdx, rdx
lea rcx, str.Menu_Key
xor r8d, r8d
mov rdx, qword [rax + rdx*8]
call fcn.1400407c0
test al, al
je 0x1400624a3
cmp dword [0x14014f738], 0
lea r9, [rsp + 0x78]
mov rcx, qword [str.INSERT]
sete sil
mov qword [rsp + 0x78], 0
movzx edx, sil
xor r8d, r8d
call fcn.14004d7e0
test al, al
je 0x140062369
mov dword [0x14014f738], r12d
test sil, sil
je 0x140062373
call fcn.1400126b0
cmp dword [0x14014f738], 1
lea r9, [rsp + 0x78]
mov rcx, qword [str.Page_Down]
sete sil
xor r8d, r8d
movzx edx, sil
call fcn.14004d7e0
test al, al
je 0x1400623a4
mov dword [0x14014f738], 1
test sil, sil
je 0x1400623ae
call fcn.1400126b0
cmp dword [0x14014f738], 2
lea r9, [rsp + 0x78]
mov rcx, qword [str.Page_Up]
sete sil
xor r8d, r8d
movzx edx, sil
call fcn.14004d7e0
test al, al
je 0x1400623df
mov dword [0x14014f738], 2
test sil, sil
je 0x1400623e9
call fcn.1400126b0
cmp dword [0x14014f738], 3
lea r9, [rsp + 0x78]
mov rcx, qword [str.Pause]
sete sil
xor r8d, r8d
movzx edx, sil
call fcn.14004d7e0
test al, al
je 0x14006241a
mov dword [0x14014f738], 3
test sil, sil
je 0x140062424
call fcn.1400126b0
cmp dword [0x14014f738], 4
lea r9, [rsp + 0x78]
mov rcx, qword [str.Home]
sete sil
xor r8d, r8d
movzx edx, sil
call fcn.14004d7e0
test al, al
je 0x140062455
mov dword [0x14014f738], 4
test sil, sil
je 0x14006245f
call fcn.1400126b0
mov rsi, qword [0x14014f5a0]
mov rax, qword [rsi + 0x1d28]
cmp qword [rsi + 0x1f60], rax
jne 0x140062487
mov qword [rsi + 0x2080], rax
mov dword [rsi + 0x2088], 2
test dword [rax + 0xc], 0x1000000
je 0x140062497
mov byte [rsi + 0x1cb2], 1
call fcn.140011c80
mov byte [rsi + 0x1cb2], 0
lea rcx, [0x1400f8196]
call fcn.14003c910
mov rax, qword [0x14014f5a0]
mov rax, qword [rax + 0x1d28]
cmp byte [rax + 0xd4], 0
jne 0x1400624d8
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14003fc70
lea rcx, [0x1400f8196]
call fcn.14003c910
xor r8d, r8d
mov qword [rbp - 0x10], 0
lea rdx, [rbp - 0x10]
lea rcx, str.verify_bot
call fcn.14003d3e0
test al, al
je 0x14006252a
lea r8, str.https:__nullcrum.novanode.win_
lea rdx, str.start______s_
lea rcx, [rbp + 0x770]
call fcn.1400263d0
lea rcx, [rbp + 0x770]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400f8196]
call fcn.14003c910
mov rax, qword [0x14014f5a0]
mov rax, qword [rax + 0x1d28]
cmp byte [rax + 0xd4], 0
jne 0x14006255f
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14003fc70
lea rcx, [0x1400f8196]
call fcn.14003c910
xor r8d, r8d
mov qword [rbp - 0x30], 0
lea rdx, [rbp - 0x30]
lea rcx, str.Start_rich_presence
call fcn.14003d3e0
test al, al
je 0x140062669
xorps xmm0, xmm0
lea rdx, [rbp + 0x5f0]
xor r9d, r9d
lea rcx, str.1212813293119611000
movups xmmword [rbp + 0x5f0], xmm0
movups xmmword [rbp + 0x600], xmm0
lea r8d, [r9 + 1]
movups xmmword [rbp + 0x610], xmm0
call fcn.14007a150
xor eax, eax
lea rsi, str.logo
mov qword [rbp + 0x3d8], rax
xorps xmm0, xmm0
mov qword [rbp + 0x410], rax
xor ecx, ecx
lea rax, str._discord.gg_CTXk4Eh99G_
movaps xmmword [rbp + 0x420], xmm0
mov qword [rbp + 0x3c0], rax
lea rax, str.Best_valorant_triggerbot
mov qword [rbp + 0x3c8], rax
lea rax, str.nullcrum
mov qword [rbp + 0x3e8], rax
mov qword [rbp + 0x3e0], rsi
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea rcx, [rbp + 0x3c0]
mov qword [rbp + 0x408], 1
mov qword [rbp + 0x3d0], rax
lea rax, str.legit_cheating_on_noobs
mov qword [rbp + 0x400], rax
lea rax, str.ahahaha
mov qword [rbp + 0x418], rax
lea rax, str.The_empire_of_perfection
mov qword [rbp + 0x3f8], rax
mov qword [rbp + 0x3f0], rsi
call fcn.14007a4e0
xor r8d, r8d
mov qword [rbp - 0x50], 0
lea rdx, [rbp - 0x50]
lea rcx, str.click_to_join_discord
call fcn.14003d3e0
test al, al
je 0x1400626af
lea r8, str.https:__dsc.gg_nullcrum
lea rdx, str.start______s_
lea rcx, [rbp + 0x870]
call fcn.1400263d0
lea rcx, [rbp + 0x870]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x1400f8196]
call fcn.14003c910
mov rax, qword [0x14014f5a0]
mov rax, qword [rax + 0x1d28]
cmp byte [rax + 0xd4], 0
jne 0x1400626e4
mov eax, dword [rax + 0x1f4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14003fc70
lea rcx, [0x1400f8196]
call fcn.14003c910
mov rax, qword gs:[0x58]
mov r15d, 4
mov r14, qword [rax]
mov eax, dword [r15 + r14]
cmp dword [0x14014fb98], eax
jle 0x14006273d
lea rcx, [0x14014fb98]
call fcn.1400e2b78
cmp dword [0x14014fb98], 0xffffffff
jne 0x14006273d
movaps xmm0, xmmword [0x140100620]
lea rcx, [0x14014fb98]
movups xmmword [0x14014fba0], xmm0
call fcn.1400e2b0c
mov eax, dword [r15 + r14]
cmp dword [0x14014fb9c], eax
jle 0x140062778
lea rcx, [0x14014fb9c]
call fcn.1400e2b78
cmp dword [0x14014fb9c], 0xffffffff
jne 0x140062778
movaps xmm0, xmmword [0x1401004b0]
lea rcx, [0x14014fb9c]
movups xmmword [0x14014fbc8], xmm0
call fcn.1400e2b0c
mov eax, dword [r15 + r14]
cmp dword [0x14014fb94], eax
jle 0x1400627b3
lea rcx, [0x14014fb94]
call fcn.1400e2b78
cmp dword [0x14014fb94], 0xffffffff
jne 0x1400627b3
movaps xmm0, xmmword [0x1401004c0]
lea rcx, [0x14014fb94]
movups xmmword [0x14014fbb0], xmm0
call fcn.1400e2b0c
mov rsi, qword [0x14014f5a0]
movsd xmm0, qword [rsi + 0x1c98]
addsd xmm0, xmm0
cvtpd2ps xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movss xmm8, dword [0x14014fba4]
lea rcx, [rsi + 0x1e80]
movss xmm7, dword [0x14014fba8]
lea rdx, [rbp + 0x180]
movss xmm6, dword [0x14014fbac]
movaps xmm3, xmm0
mulss xmm3, dword [0x140100150]
movaps xmm2, xmm12
mov dword [rbp + 0x180], r12d
addss xmm3, dword [0x140100150]
subss xmm2, xmm3
movaps xmm0, xmm3
mulss xmm0, dword [0x14014fbcc]
movaps xmm1, xmm3
mulss xmm1, dword [0x14014fbc8]
mulss xmm8, xmm2
movaps xmm9, xmm2
mulss xmm9, dword [0x14014fba0]
addss xmm8, xmm0
mulss xmm7, xmm2
movaps xmm0, xmm3
mulss xmm6, xmm2
mulss xmm0, dword [0x14014fbd0]
addss xmm9, xmm1
mulss xmm3, dword [0x14014fbd4]
addss xmm7, xmm0
movups xmm0, xmmword [rsi + 0x170c]
addss xmm6, xmm3
movups xmmword [rbp + 0x184], xmm0
call fcn.1400251e0
mov rax, qword [0x14014f5a0]
lea rcx, str._NULLCRUM.WIN__PRIVATE_BUILD_VERSION:_4.1
movss xmm0, dword [0x140100308]
lea rdx, [rbp - 0x48]
movss xmm3, dword [0x1401002e4]
shufps xmm9, xmm9, 0xe1
movss xmm9, xmm8
mov qword [rsp + 0x38], r12
shufps xmm9, xmm9, 0xc6
movss xmm9, xmm7
mov qword [rsp + 0x30], r12
shufps xmm9, xmm9, 0x27
mov qword [rsp + 0x28], rcx
movss xmm9, xmm6
shufps xmm9, xmm9, 0x39
movups xmmword [rsi + 0x170c], xmm9
mov rcx, qword [rax + 0x1a88]
movss xmm2, dword [rax + 0x1a90]
movss dword [rsp + 0x20], xmm0
call fcn.140035660
mov rcx, qword [0x14014f5a0]
movss xmm0, dword [rbp - 0x48]
addss xmm0, dword [0x140100194]
cvttss2si eax, xmm0
movd xmm1, eax
mov rax, qword [rcx + 0x1d28]
cvtdq2ps xmm1, xmm1
movss xmm0, dword [rax + 0x58]
mov byte [rax + 0xd1], 1
subss xmm0, xmm1
mov rax, qword [rcx + 0x1d28]
lea rcx, str._NULLCRUM.WIN__PRIVATE_BUILD_VERSION:_V4.1
movss dword [rbp - 0x48], xmm1
mulss xmm0, dword [0x140100150]
movss xmm1, dword [rax + 0x50]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x118], xmm1
movss dword [rax + 0x130], xmm0
call fcn.14003c910
mov r8, qword [0x14014f5a0]
movsxd rax, dword [r8 + 0x1e80]
mov rcx, qword [r8 + 0x1e88]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x170c], xmm0
dec dword [r8 + 0x1e80]
jmp 0x1400618ca
cmp dword [0x14014fbf0], 0
je 0x140062a38
movzx eax, byte [0x14014fbe0]
test al, al
sete al
lea rcx, [0x14014fc48]
mov byte [0x14014fbe0], al
call qword [sym.imp.MSVCP140.dll__Cnd_signal]
cmp dword [0x14014fbf0], 0
je 0x140062f15
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [0x14014fbf0], eax
je 0x140062f09
movups xmm0, xmmword [0x14014fbe8]
xor edx, edx
lea rcx, [rbp + 0x250]
movaps xmmword [rbp + 0x250], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
jne 0x140062efd
mov r13, qword [rbp + 0x520]
xorps xmm0, xmm0
movups xmmword [rbp + 0x320], xmm0
movups xmmword [0x14014fbe8], xmm0
cmp byte [0x14014f59b], 0
je 0x140062a46
call fcn.14005f0b0
cmp byte [0x14014f599], 0
je 0x140062a60
mov dword [reloc.WS2_32.dll_accept], r12d
mov dword [reloc.WLDAP32.dll_Ordinal_50], 0x28
call fcn.140013200
call fcn.140011c80
movss xmm8, dword [0x14010028c]
movss xmm9, dword [0x140100290]
call fcn.14000ad30
call fcn.14000b200
mov rax, qword [0x14014f5a0]
mov rcx, qword [rax + 0x1f08]
mov rax, qword [rcx]
mov rcx, r12
add rax, 0xa8
cmp byte [rax], 0
cmovne rcx, rax
call fcn.140037f30
mov rcx, qword [0x14014f600]
mov r9d, 3
mov dword [rsp + 0x30], r12d
xor r8d, r8d
movss dword [rsp + 0x28], xmm12
xor edx, edx
mov dword [rsp + 0x20], r12d
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x14014f600]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140062b27
call fcn.14000b200
mov rax, qword [0x14014f5a0]
mov rcx, qword [rax + 0x1f08]
mov rax, qword [rcx]
mov rcx, r12
add rax, 0xa8
cmp byte [rax], 0
cmovne rcx, rax
call fcn.140037f30
mov rcx, qword [0x14014f600]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rax, qword [rbp + 0xa0]
test dword [rax + 8], 0x400
je 0x140062c0e
call fcn.14001b600
mov rsi, qword [0x14014f5a0]
mov r12d, 1
mov eax, dword [rsi + 0x1628]
cmp eax, r12d
jle 0x140062bad
mov r15d, 8
nop
mov rax, qword [rsi + 0x1630]
mov r14, qword [r15 + rax]
test dword [r14 + 4], 0x400
jne 0x140062b9b
mov rax, qword [rsi + 0x15c0]
test rax, rax
je 0x140062b88
xor edx, edx
mov rcx, r14
call rax
mov rax, qword [rsi + 0x1608]
test rax, rax
je 0x140062b9b
xor edx, edx
mov rcx, r14
call rax
mov eax, dword [rsi + 0x1628]
inc r12d
add r15, 8
cmp r12d, eax
jl 0x140062b60
mov r12d, 1
cmp eax, r12d
jle 0x140062c0b
mov r15d, 8
nop
mov rax, qword [rsi + 0x1630]
mov r14, qword [r15 + rax]
test dword [r14 + 4], 0x400
jne 0x140062bfb
mov rax, qword [rsi + 0x15c8]
test rax, rax
je 0x140062be8
xor edx, edx
mov rcx, r14
call rax
mov rax, qword [rsi + 0x1610]
test rax, rax
je 0x140062bfb
xor edx, edx
mov rcx, r14
call rax
inc r12d
add r15, 8
cmp r12d, dword [rsi + 0x1628]
jl 0x140062bc0
xor r12d, r12d
mov rcx, qword [0x14014f600]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r12
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140062c4b
mov rcx, qword [0x14014f600]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140062c4b
call fcn.14005c7b0
cmp byte [rbp + 0x430], 0
mov r15d, reloc.WS2_32.dll_select
mov eax, dword [rbp + 0x530]
mov rdx, qword [rbp + 0x500]
cmove eax, r15d
mov dword [rbp + 0x530], eax
cmp rdx, 0xf
jbe 0x140062ca9
mov rcx, qword [rbp + 0x4e8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062ca4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062fbc
call fcn.1400e2f00
mov rax, qword [rbp - 0x28]
test rax, rax
je 0x140062ce9
sub r13, rax
and r13, 0xfffffffffffffff8
cmp r13, 0x1000
jb 0x140062cde
mov rcx, qword [rax - 8]
add r13, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062fbc
mov rax, rcx
mov rdx, r13
mov rcx, rax
call fcn.1400e2f00
lea r13, str.Legit
lea r14, str.None
lea rsi, str.INSERT
cmp dword [rbp + 0x530], 0x12
jne 0x1400608a0
call fcn.14001bbe0
call fcn.1400387e0
mov rcx, qword [0x14014fa40]
test rcx, rcx
je 0x140062d2e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14014fa40], r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov rcx, qword [0x14014fa50]
test rcx, rcx
je 0x140062d58
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rbx, qword [0x14014f5a0]
mov rcx, rbx
mov qword [0x14014fa50], r12
mov qword [0x14014fa58], r12
mov qword [0x14014fa60], r12
mov qword [0x14014fa68], r12
mov qword [0x14014fa70], r12
mov qword [0x14014fa78], r12
mov dword [reloc.WS2_32.dll_htons], 9
mov byte [0x14014f624], 0
mov byte [reloc.WS2_32.dll_accept], 1
call fcn.140009c00
cmp qword [0x14014f5a0], rbx
jne 0x140062db9
mov qword [0x14014f5a0], r12
test rbx, rbx
je 0x140062de1
mov rcx, rbx
call fcn.140025df0
mov rax, qword [0x14014f5a0]
test rax, rax
je 0x140062dd8
dec dword [rax + 0x3b0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x14014f600]
test rcx, rcx
je 0x140062dfa
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14014f600], r12
mov rcx, qword [0x14014f608]
test rcx, rcx
je 0x140062e13
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14014f608], r12
mov rcx, qword [0x14014f610]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x388]
mov rcx, qword [rbp + 0x3b0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
movaps xmm14, xmmword [rsp + 0xa90]
movaps xmm13, xmmword [rsp + 0xaa0]
movaps xmm12, xmmword [rsp + 0xab0]
movaps xmm11, xmmword [rsp + 0xac0]
movaps xmm10, xmmword [rsp + 0xad0]
movaps xmm9, xmmword [rsp + 0xae0]
movaps xmm8, xmmword [rsp + 0xaf0]
movaps xmm7, xmmword [rsp + 0xb00]
movaps xmm6, xmmword [rsp + 0xb10]
mov r15, qword [rsp + 0xb20]
mov r14, qword [rsp + 0xb28]
mov r13, qword [rsp + 0xb60]
mov rdi, qword [rsp + 0xb58]
mov rsi, qword [rsp + 0xb50]
movaps xmm15, xmmword [rsp + 0xa80]
mov rcx, qword [rbp + 0x970]
xor rcx, rsp
call fcn.1400e2ab0
add rsp, 0xb30
pop r12
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 6
mov dword [rbp + 0x28], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Error
lea rdx, str.Failed_to_retrieve_user_profile_directory.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x500]
cmp rdx, 0xf
jbe 0x140062f7a
mov rcx, qword [rbp + 0x4e8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062f75
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140062fbc
call fcn.1400e2f00
test rsi, rsi
je 0x140062fb2
sub r13, rsi
and r13, 0xfffffffffffffff8
cmp r13, 0x1000
jb 0x140062fa7
mov rcx, qword [rsi - 8]
add r13, 0x27
sub rsi, rcx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x140062fbc
mov rsi, rcx
mov rdx, r13
mov rcx, rsi
call fcn.1400e2f00
mov eax, 0xffffffff
jmp 0x140062e36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [0x14014f608]
mov rdx, qword [0x14014f600]
test rdx, rdx
je 0x140062fed
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14014f608]
mov qword [0x14014f600], r12
test rcx, rcx
je 0x140062fff
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x14014f608], r12
mov rdx, qword [rbp + 0x388]
mov rcx, qword [rbp + 0x3b0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
jmp 0x140062eb6