Function at 0x140040620
Capabilities:
Create thread
Log keystrokes via polling
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x68], xmm11
mov rax, qword [0x1400f30c0]
xor rax, rsp
mov qword [rbp - 0x11], rax
mov edx, 0xff080808
mov ecx, 7
call fcn.14000db60
mov edx, 0xff000000
mov ecx, 2
call fcn.14000db60
mov edx, 0xff0000ff
mov ecx, 6
call fcn.14000db60
mov edx, 0xff050505
mov ecx, 5
call fcn.14000db60
mov edx, 0xcdff00ff
mov ecx, reloc.WLDAP32.dll_Ordinal_27
call fcn.14000db60
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400406d1
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
jmp 0x1400406d8
movzx eax, byte [reloc.WS2_32.dll_accept]
test al, al
je 0x140041f27
mov rax, qword [0x14011e390]
mov dword [rax + 0x1af4], 0x44160000
mov dword [rax + 0x1af8], 0x43c80000
mov dword [rax + 0x1acc], 2
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [0x1400df058]
mulss xmm1, dword [0x1400def08]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [0x1400df068]
movss dword [rax + 0x1ae4], xmm0
movss dword [rax + 0x1ae8], xmm1
xor edi, edi
mov qword [rax + 0x1aec], rdi
mov dword [rax + 0x1ac8], 2
mov r8d, Ordinal_46
lea rdx, [0x1400f3151]
lea rcx, str.Sebrix
call fcn.14000a630
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, dword [0x1400df06c]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
movss xmm11, dword [0x1400defe4]
addss xmm2, xmm11
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
call fcn.140028850
mov edx, 0xff060606
mov ecx, reloc.WS2_32.dll_setsockopt
call fcn.14000db60
mov edx, 0xff050505
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.14000db60
mov edx, 0xff0f0f0f
mov ecx, reloc.WS2_32.dll_socket
call fcn.14000db60
mov edx, 0xff050505
mov ecx, 3
call fcn.14000db60
call fcn.140035810
xorps xmm6, xmm6
movss xmm10, dword [0x1400defc4]
test al, al
je 0x140040db9
mov rbx, qword [0x14011e390]
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm6
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, xmm6
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
mov dword [rbp - 0x49], 0x441b0000
mov dword [rbp - 0x45], 0x42340000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.tabs
call fcn.140002fa0
cmp dword [rbx + 0x1a24], eax
jne 0x1400408f4
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x140040903
mov byte [rbx + 0x1a37], 1
mov dword [rsp + 0x20], edi
lea r8, [rbp - 0x49]
mov edx, eax
lea rcx, str.tabs
call fcn.140008900
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
movss xmm7, dword [0x1400defec]
addss xmm0, xmm7
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, xmm7
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
lea rcx, str.Sebrix_Private
call fcn.140025ec0
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm10
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, dword [0x1400df034]
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
mov dword [rbp - 0x49], 0x42fa0000
mov dword [rbp - 0x45], 0x420c0000
lea rdx, [rbp - 0x49]
lea rcx, [0x1400dcce0]
call fcn.1400265f0
test al, al
je 0x140040a34
mov dword [0x14011e398], edi
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov r9, qword [rcx + 0x19f8]
cmp byte [r9 + 0x7f], dil
jne 0x140040a9f
mov r10d, dword [r9 + 0x168]
mov dword [r9 + 0x168], edi
movss xmm0, dword [r9 + 0xec]
xorps xmm1, xmm1
comiss xmm0, xmm6
jbe 0x140040a78
mov qword [rbp - 0x49], rdi
jmp 0x140040a88
movss xmm0, dword [rcx + 0x18f8]
mov dword [rbp - 0x49], edi
movss dword [rbp - 0x45], xmm0
lea rcx, [rbp - 0x49]
call fcn.1400058e0
mov dword [r9 + 0x168], r10d
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm10
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, dword [0x1400df048]
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
mov dword [rbp - 0x49], 0x42fa0000
mov dword [rbp - 0x45], 0x420c0000
lea rdx, [rbp - 0x49]
lea rcx, str.Visuals
call fcn.1400265f0
test al, al
je 0x140040b36
mov dword [0x14011e398], 1
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm10
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, dword [0x1400df054]
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
mov dword [rbp - 0x49], 0x42fa0000
mov dword [rbp - 0x45], 0x420c0000
lea rdx, [rbp - 0x49]
lea rcx, str.Misc
call fcn.1400265f0
test al, al
je 0x140040bd4
mov dword [0x14011e398], 2
mov edx, 0xcd8b0000
xor ecx, ecx
call fcn.14000db60
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm7
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, dword [0x1400df030]
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
lea rcx, [0x1400dccf8]
call fcn.140025ec0
call fcn.140008bd0
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, dword [0x1400df018]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, dword [0x1400df014]
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
call fcn.140035bb0
mov r8, qword [0x14011e390]
movsxd rax, dword [r8 + 0x1a78]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1a80]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x1a78]
lea eax, [rcx - 1]
mov dword [r8 + 0x1a78], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1a80]
movsxd rax, dword [rcx + rdx*4]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x1a78]
lea eax, [rcx - 1]
mov dword [r8 + 0x1a78], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1a80]
movsxd rax, dword [rcx + rdx*4]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x1a78]
lea eax, [rcx - 1]
mov dword [r8 + 0x1a78], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1a80]
movsxd rax, dword [rcx + rdx*4]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1a78]
mov edx, 0xcd8b0000
mov ecx, reloc.WS2_32.dll_send
call fcn.14000db60
mov edx, 0xcd8b0000
mov ecx, reloc.WS2_32.dll_sendto
call fcn.14000db60
mov edx, 0xcd8b0000
mov ecx, 8
call fcn.14000db60
mov edx, 0xcd8b0000
mov ecx, 9
call fcn.14000db60
mov dword [rbp - 0x19], 0x64
movss xmm9, dword [0x1400df000]
movss xmm7, dword [0x1400df0ac]
movss xmm8, dword [0x1400def38]
mov eax, dword [0x14011e398]
test eax, eax
jne 0x1400412e3
mov edx, 0xff050505
mov ecx, 3
call fcn.14000db60
mov edx, 0xff0a0a0a
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.14000db60
mov rbx, qword [0x14011e390]
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm9
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, xmm11
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
mov dword [rbp - 0x49], 0x43ac8000
mov dword [rbp - 0x45], 0x43aa0000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.aimboy
call fcn.140002fa0
cmp dword [rbx + 0x1a24], eax
jne 0x140040f00
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x140040f0f
mov byte [rbx + 0x1a37], 1
mov dword [rsp + 0x20], edi
lea r8, [rbp - 0x49]
mov edx, eax
lea rcx, str.aimboy
call fcn.140008900
lea rdx, [0x14011ed4e]
lea rcx, str.Aimbot
call fcn.140027a10
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.14000e580
mov r8, qword [0x14011e390]
mov rax, qword [r8 + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [r8 + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm10
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, dword [0x1400df038]
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
mov ebx, dword [0x14011e518]
movsxd rax, dword [reloc.WS2_32.dll_bind]
mov rdx, rdi
cmp eax, 0x7b
ja 0x140040fd5
lea rdx, [0x14011ca10]
mov rdx, qword [rdx + rax*8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
movdqa xmm1, xmmword [0x1400df120]
movdqu xmmword [rbp - 0x29], xmm1
mov byte [rbp - 0x39], dil
test rdx, rdx
jne 0x140041001
mov r8d, 0xa
lea rdx, str.Select_Key
jmp 0x14004101a
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140041010
lea rcx, [rbp - 0x39]
call fcn.14004b710
cmp ebx, 1
jne 0x14004103e
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Press_the_key
lea rcx, [rbp - 0x39]
call fcn.14004b710
mov dword [rbp - 0x49], 0x42fa0000
mov dword [rbp - 0x45], 0x41c80000
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0xf
cmova rcx, qword [rbp - 0x39]
lea rdx, [rbp - 0x49]
call fcn.1400265f0
test al, al
je 0x140041089
test ebx, ebx
jne 0x140041089
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [0x14003d280]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x1400410c7
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400410c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400410c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c45e4
lea rdx, [0x14011ed4d]
lea rcx, str.Fov_Circle
call fcn.140027a10
mov dword [rbp - 0x41], 0x3e8
mov dword [rbp - 0x49], 0xa
movss dword [rsp + 0x30], xmm8
lea rsi, [0x1400d8648]
mov qword [rsp + 0x28], rsi
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x49]
lea r8, [0x14011cdf4]
xor edx, edx
lea rcx, str.Fov_Size
call fcn.14002a8c0
mov dword [rbp - 0x49], reloc.WLDAP32.dll_Ordinal_200
mov dword [rbp - 0x41], 1
movss dword [rsp + 0x30], xmm8
mov qword [rsp + 0x28], rsi
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x41]
lea r8, [0x14011cdf8]
xor edx, edx
lea rcx, str.Smoothing
call fcn.14002a8c0
call fcn.1400297e0
call fcn.140008bd0
mov rbx, qword [0x14011e390]
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm9
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, dword [0x1400df050]
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
mov dword [rbp - 0x49], 0x436b0000
mov dword [rbp - 0x45], 0x43aa0000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.trigger
call fcn.140002fa0
cmp dword [rbx + 0x1a24], eax
jne 0x140041224
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x140041233
mov byte [rbx + 0x1a37], 1
mov dword [rsp + 0x20], edi
lea r8, [rbp - 0x49]
mov edx, eax
lea rcx, str.trigger
call fcn.140008900
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.14000e580
lea rdx, [0x14011ed4b]
lea rcx, str.Triggerbot
call fcn.140027a10
mov dword [rbp - 0x49], 0x190
mov dword [rbp - 0x41], 0xa
movss dword [rsp + 0x30], xmm8
mov qword [rsp + 0x28], rsi
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x41]
lea r8, [rbp - 0x19]
xor edx, edx
lea rcx, [0x1400dcd5c]
call fcn.14002a8c0
call fcn.140008bd0
mov r8, qword [0x14011e390]
movsxd rax, dword [r8 + 0x1a78]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1a80]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1a78]
mov eax, dword [0x14011e398]
cmp eax, 1
jne 0x14004186c
mov edx, 0xff050505
mov ecx, 3
call fcn.14000db60
mov edx, 0xff0a0a0a
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.14000db60
mov rbx, qword [0x14011e390]
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm9
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, xmm11
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
mov dword [rbp - 0x49], 0x43ac8000
mov dword [rbp - 0x45], 0x43aa0000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.visual
call fcn.140002fa0
cmp dword [rbx + 0x1a24], eax
jne 0x1400413c8
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x1400413d7
mov byte [rbx + 0x1a37], 1
mov dword [rsp + 0x20], edi
lea r8, [rbp - 0x49]
mov edx, eax
lea rcx, str.visual
call fcn.140008900
lea rdx, [0x14011ed48]
lea rcx, str.2D_Box
call fcn.140027a10
test al, al
je 0x14004140b
mov byte [0x14011ed49], 0
lea rdx, [0x14011ed49]
lea rcx, str.Corner_Box
call fcn.140027a10
test al, al
je 0x140041429
mov byte [0x14011ed48], 0
lea rdx, [0x14011ed4f]
lea rcx, str.Skeleton
call fcn.140027a10
lea rdx, [0x14011ed50]
lea rcx, str.Render_Count
call fcn.140027a10
lea rdx, [0x14011ed51]
lea rcx, str.Distance
call fcn.140027a10
lea rdx, [0x14011ed4a]
lea rcx, str.Radar
call fcn.140027a10
lea rdx, [0x14011ed4c]
lea rcx, str.Crosshaird
call fcn.140027a10
call fcn.140008bd0
mov rbx, qword [0x14011e390]
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm9
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, dword [0x1400df050]
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
mov dword [rbp - 0x49], 0x436b0000
mov dword [rbp - 0x45], 0x43aa0000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.settings
call fcn.140002fa0
cmp dword [rbx + 0x1a24], eax
jne 0x14004154e
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x14004155d
mov byte [rbx + 0x1a37], 1
mov dword [rsp + 0x20], edi
lea r8, [rbp - 0x49]
mov edx, eax
lea rcx, str.settings
call fcn.140008900
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], 0
jne 0x1400415a6
mov qword [rbp - 0x49], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x49]
call fcn.1400058e0
lea rcx, str.Skeleton_Thickness
call fcn.140025ec0
mov dword [rbp - 0x49], 0x40a00000
mov dword [rbp - 0x41], 0x3f000000
movss dword [rsp + 0x30], xmm8
lea rbx, [0x1400dc388]
mov qword [rsp + 0x28], rbx
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x41]
lea r8, [0x14011ca00]
mov edx, 4
lea rcx, [0x1400d84c6]
call fcn.14002a8c0
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], 0
jne 0x140041632
mov qword [rbp - 0x49], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x49]
call fcn.1400058e0
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], 0
jne 0x14004165e
mov qword [rbp - 0x49], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x49]
call fcn.1400058e0
lea rcx, str.Box_Thickness
call fcn.140025ec0
mov dword [rbp - 0x49], 0x40a00000
mov dword [rbp - 0x41], 0x3f000000
movss dword [rsp + 0x30], xmm8
mov qword [rsp + 0x28], rbx
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x41]
lea r8, [0x14011c9fc]
mov edx, 4
lea rcx, [0x1400d84c6]
call fcn.14002a8c0
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], 0
jne 0x1400416e3
mov qword [rbp - 0x49], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x49]
call fcn.1400058e0
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rcx + 0x19f8]
cmp byte [rax + 0x7f], 0
jne 0x14004170f
mov qword [rbp - 0x49], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x49]
call fcn.1400058e0
lea rcx, str.Crosshair
call fcn.140025ec0
mov ecx, dword [0x1400f3170]
movzx eax, cl
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss xmm1, dword [0x1400deecc]
mulss xmm0, xmm1
movss dword [rbp - 0x39], xmm0
mov eax, ecx
shr eax, 8
movzx eax, al
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
movss dword [rbp - 0x35], xmm0
mov eax, ecx
shr eax, 0x10
movzx eax, al
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
movss dword [rbp - 0x31], xmm0
shr ecx, 0x18
mov eax, ecx
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
movss dword [rbp - 0x2d], xmm0
xor r8d, r8d
lea rdx, [rbp - 0x39]
lea rcx, str.Color
call fcn.140030ba0
test al, al
je 0x1400417ab
lea rcx, [rbp - 0x39]
call fcn.1400036f0
mov dword [0x1400f3170], eax
mov dword [rbp - 0x49], 0x41200000
mov dword [rbp - 0x41], 0x3f800000
movss dword [rsp + 0x30], xmm8
lea rax, str._.3f
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x49]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x41]
lea r8, [0x1400f3174]
mov edx, 4
lea rcx, str.Thickness
call fcn.14002a8c0
call fcn.140008bd0
mov r10, qword [0x14011e390]
movsxd rax, dword [r10 + 0x1a78]
lea rdx, [rax + rax*4]
mov rcx, qword [r10 + 0x1a80]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r10 + rax*8], xmm0
movsxd rcx, dword [r10 + 0x1a78]
lea eax, [rcx - 1]
mov dword [r10 + 0x1a78], eax
lea rax, [rcx - 2]
lea r9, [rax + rax*4]
mov r8, qword [r10 + 0x1a80]
movsxd rax, dword [r8 + r9*4]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [r8 + r9*4 + 4]
movups xmmword [r10 + rax*8], xmm0
dec dword [r10 + 0x1a78]
mov eax, dword [0x14011e398]
cmp eax, 2
jne 0x140041dff
mov edx, 0xff050505
mov ecx, reloc.WS2_32.dll_setsockopt
call fcn.14000db60
mov edx, 0xff050505
mov ecx, 3
call fcn.14000db60
mov edx, 0xff0a0a0a
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.14000db60
mov rbx, qword [0x14011e390]
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x5c]
addss xmm0, xmm9
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x58]
addss xmm2, xmm11
movss dword [rax + 0xc8], xmm2
movss dword [rax + 0xcc], xmm0
movss xmm1, dword [rax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe0]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm1
mov dword [rbp - 0x49], 0x43ac8000
mov dword [rbp - 0x45], 0x43aa0000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.misc
call fcn.140002fa0
cmp dword [rbx + 0x1a24], eax
jne 0x140041960
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x14004196f
mov byte [rbx + 0x1a37], 1
mov dword [rsp + 0x20], edi
lea r8, [rbp - 0x49]
mov edx, eax
lea rcx, str.misc
call fcn.140008900
mov dword [rbp - 0x49], 0x42f00000
mov dword [rbp - 0x45], 0x42480000
lea rdx, [rbp - 0x49]
lea rcx, str.Save_Config
call fcn.1400265f0
test al, al
je 0x140041a2d
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
movdqa xmm1, xmmword [0x1400df140]
movdqu xmmword [rbp - 0x29], xmm1
movsd xmm0, qword [str.config.json]
movsd qword [rbp - 0x39], xmm0
movzx eax, word [0x1400dce10]
mov word [rbp - 0x31], ax
movzx eax, byte [0x1400dce12]
mov byte [rbp - 0x2f], al
mov byte [rbp - 0x2e], 0
lea rcx, [rbp - 0x39]
call fcn.14003ef80
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x140041a2d
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041a28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041a28
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c45e4
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.14000e580
mov dword [rbp - 0x49], 0x42f00000
mov dword [rbp - 0x45], 0x42480000
lea rdx, [rbp - 0x49]
lea rcx, str.Load_Config
call fcn.1400265f0
test al, al
je 0x140041af1
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
movdqa xmm1, xmmword [0x1400df140]
movdqu xmmword [rbp - 0x29], xmm1
movsd xmm0, qword [str.config.json]
movsd qword [rbp - 0x39], xmm0
movzx eax, word [0x1400dce10]
mov word [rbp - 0x31], ax
movzx eax, byte [0x1400dce12]
mov byte [rbp - 0x2f], al
mov byte [rbp - 0x2e], 0
lea rcx, [rbp - 0x39]
call fcn.140040080
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x140041ae0
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041adb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140041adb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c45e4
movdqa xmm0, xmmword [0x1400df120]
movdqu xmmword [rbp - 0x29], xmm0
mov byte [rbp - 0x39], 0
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov r9, qword [rcx + 0x19f8]
cmp byte [r9 + 0x7f], 0
jne 0x140041b5e
mov r10d, dword [r9 + 0x168]
mov dword [r9 + 0x168], edi
movss xmm0, dword [r9 + 0xec]
movaps xmm1, xmm6
comiss xmm0, xmm6
jbe 0x140041b3a
mov qword [rbp - 0x49], 0
jmp 0x140041b4e
mov dword [rbp - 0x49], 0
movss xmm0, dword [rcx + 0x18f8]
movss dword [rbp - 0x45], xmm0
lea rcx, [rbp - 0x49]
call fcn.1400058e0
mov dword [r9 + 0x168], r10d
mov dword [rbp - 0x49], 0x42700000
mov dword [rbp - 0x45], 0x42700000
lea rdx, [rbp - 0x49]
lea rcx, str.Unload
call fcn.1400265f0
test al, al
je 0x140041b89
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x14011e390]
mov rax, qword [rcx + 0x19f8]
mov byte [rax + 0x7c], 1
mov r9, qword [rcx + 0x19f8]
cmp byte [r9 + 0x7f], 0
jne 0x140041bf6
mov r10d, dword [r9 + 0x168]
mov dword [r9 + 0x168], edi
movss xmm0, dword [r9 + 0xec]
movaps xmm1, xmm6
comiss xmm0, xmm6
jbe 0x140041bd2
mov qword [rbp - 0x49], 0
jmp 0x140041be6
mov dword [rbp - 0x49], 0
movss xmm0, dword [rcx + 0x18f8]
movss dword [rbp - 0x45], xmm0
lea rcx, [rbp - 0x49]
call fcn.1400058e0
mov dword [r9 + 0x168], r10d
call fcn.140008bd0
mov rbx, qword [0x14011e390]
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x58]
addss xmm0, dword [0x1400df050]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x5c]
addss xmm2, xmm9
movss dword [rax + 0xc8], xmm0
movss dword [rax + 0xcc], xmm2
movss xmm1, dword [rax + 0xe0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe4]
maxss xmm0, xmm2
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov dword [rbp - 0x49], 0x43ac8000
mov dword [rbp - 0x45], 0x43aa0000
mov rax, qword [rbx + 0x19f8]
mov byte [rax + 0x7c], 1
mov rax, qword [rbx + 0x19f8]
movsxd r8, dword [rax + 0x1e0]
mov rax, qword [rax + 0x1e8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.misc2
call fcn.140002fa0
cmp dword [rbx + 0x1a24], eax
jne 0x140041cbc
mov dword [rbx + 0x1a2c], eax
cmp dword [rbx + 0x1a28], eax
jne 0x140041ccb
mov byte [rbx + 0x1a37], 1
mov dword [rsp + 0x20], edi
lea r8, [rbp - 0x49]
mov edx, eax
lea rcx, str.misc2
call fcn.140008900
lea rcx, str.Status__
call fcn.140025ec0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.14000e580
mov edx, 0xff00ff00
xor ecx, ecx
call fcn.14000db60
lea rcx, str.Undetected
call fcn.140025ec0
mov edx, 0xffffffff
xor ecx, ecx
call fcn.14000db60
lea rcx, str.Last_Update__
call fcn.140025ec0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.14000e580
mov edx, 0xff323232
xor ecx, ecx
call fcn.14000db60
lea rcx, str.2024_08_02
call fcn.140025ec0
mov edx, 0xffffffff
xor ecx, ecx
call fcn.14000db60
lea rcx, str.Dev__
call fcn.140025ec0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.14000e580
mov edx, 0xff323232
xor ecx, ecx
call fcn.14000db60
lea rcx, str.qxsd
call fcn.140025ec0
mov edx, 0xffffffff
xor ecx, ecx
call fcn.14000db60
lea rcx, str.Owner__
call fcn.140025ec0
movaps xmm1, xmm7
movaps xmm0, xmm6
call fcn.14000e580
mov edx, 0xff323232
xor ecx, ecx
call fcn.14000db60
lea rcx, str.Pavelko
call fcn.140025ec0
call fcn.140008bd0
mov r9, qword [0x14011e390]
movsxd rax, dword [r9 + 0x1a78]
lea r8, [rax + rax*4]
mov rcx, qword [r9 + 0x1a80]
movsxd rax, dword [rcx + r8*4 - 0x14]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + r8*4 - 0x10]
movups xmmword [r9 + rax*8], xmm0
dec dword [r9 + 0x1a78]
mov edx, 0xcdff00ff
mov ecx, reloc.WS2_32.dll_select
call fcn.14000db60
mov r8, qword [0x14011e390]
movsxd rax, dword [r8 + 0x1a78]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1a80]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x1a78]
lea eax, [rcx - 1]
mov dword [r8 + 0x1a78], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1a80]
movsxd rax, dword [rcx + rdx*4]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x1a78]
lea eax, [rcx - 1]
mov dword [r8 + 0x1a78], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1a80]
movsxd rax, dword [rcx + rdx*4]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x1a78]
lea eax, [rcx - 1]
mov dword [r8 + 0x1a78], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1a80]
movsxd rax, dword [rcx + rdx*4]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8], xmm0
movsxd rcx, dword [r8 + 0x1a78]
lea eax, [rcx - 1]
mov dword [r8 + 0x1a78], eax
lea rax, [rcx - 2]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x1a80]
movsxd rax, dword [rcx + rdx*4]
add rax, 0x15f
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 + 4]
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x1a78]
call fcn.14000d5d0
mov rcx, qword [rbp - 0x11]
xor rcx, rsp
call fcn.1400c41d0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop rbp
ret