Function at 0x14003b8b0
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov r11, rsp
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [r11 - 0x6b8]
sub rsp, 0x790
movaps xmmword [r11 - 0x38], xmm6
movaps xmmword [r11 - 0x48], xmm7
movaps xmmword [r11 - 0x58], xmm8
movaps xmmword [r11 - 0x68], xmm9
movaps xmmword [r11 - 0x78], xmm10
movaps xmmword [r11 - 0x88], xmm11
movaps xmmword [r11 - 0x98], xmm12
movaps xmmword [r11 - 0xa8], xmm13
movaps xmmword [r11 - 0xc8], xmm15
mov rax, qword [0x1401a9600]
xor rax, rsp
mov qword [rbp + 0x5e0], rax
mov rdi, qword [0x140231b80]
lea rbx, [0x140172c90]
movss xmm15, dword [0x140172f50]
lea rdx, [rsp + 0x70]
xorps xmm13, xmm13
mov qword [r11 + 8], r12
xor eax, eax
mov qword [r11 + 0x10], r13
mov rcx, qword [rdi + 0x58]
mov qword [rbp + 0xc0], rax
mov eax, 0xffff
movsd xmm6, qword [rbp + 0xc0]
movups xmmword [rbp + 0x50], xmm13
mov dword [rbp + 0x58], 5
movups xmmword [rbp + 0x90], xmm13
mov word [rbp + 0x94], ax
lea rax, [0x1401a96a0]
movups xmmword [rbp + 0x40], xmm13
mov byte [rbp + 0x4c], 1
movaps xmm12, xmmword [rbp + 0x40]
movups xmmword [rbp + 0x70], xmm13
mov dword [rbp + 0x5c], 5
movaps xmm11, xmmword [rbp + 0x50]
movups xmmword [rbp + 0x60], xmm13
mov qword [rbp + 0x78], rbx
movaps xmm9, xmmword [rbp + 0x70]
movups xmmword [rbp + 0x80], xmm13
mov dword [rbp + 0x84], 0x7f7fffff
movaps xmm8, xmmword [rbp + 0x80]
movaps xmmword [rsp + 0x70], xmm12
mov byte [rbp + 0x60], 0
movaps xmm10, xmmword [rbp + 0x60]
mov dword [rbp + 0x90], 0x3fcccccd
movaps xmm7, xmmword [rbp + 0x90]
movaps xmmword [rbp - 0x80], xmm11
movaps xmmword [rbp - 0x60], xmm9
movaps xmmword [rbp - 0x40], xmm7
mov qword [rsp + 0x70], rax
mov qword [r11 + 0x18], r15
movaps xmmword [rbp - 0x70], xmm10
movaps xmmword [rbp - 0x50], xmm8
movaps xmmword [rbp - 0x30], xmm13
movaps xmmword [rbp - 0x20], xmm13
movsd qword [rbp - 0x10], xmm6
mov dword [rsp + 0x78], 0x41d7c
mov dword [rbp - 0x7c], 0x41700000
mov qword [rbp - 0x58], rbx
call fcn.140026870
mov rcx, qword [rdi + 0x58]
lea rax, str.OTTO
movaps xmmword [rsp + 0x70], xmm12
lea rdx, [rsp + 0x70]
movaps xmmword [rbp - 0x80], xmm11
movaps xmmword [rbp - 0x60], xmm9
mov qword [rsp + 0x70], rax
movaps xmmword [rbp - 0x70], xmm10
movaps xmmword [rbp - 0x50], xmm8
movaps xmmword [rbp - 0x40], xmm7
movaps xmmword [rbp - 0x30], xmm13
movaps xmmword [rbp - 0x20], xmm13
movsd qword [rbp - 0x10], xmm6
mov dword [rsp + 0x78], 0x421a8
mov dword [rbp - 0x7c], 0x41880000
mov qword [rbp - 0x58], rbx
call fcn.140026870
mov rcx, qword [rdi + 0x58]
lea rax, [0x14022d5f0]
movaps xmmword [rsp + 0x70], xmm12
lea rdx, [rsp + 0x70]
movaps xmmword [rbp - 0x80], xmm11
movaps xmmword [rbp - 0x60], xmm9
mov qword [rsp + 0x70], rax
movaps xmmword [rbp - 0x70], xmm10
movaps xmmword [rbp - 0x50], xmm8
movaps xmmword [rbp - 0x40], xmm7
movaps xmmword [rbp - 0x30], xmm13
movaps xmmword [rbp - 0x20], xmm13
movsd qword [rbp - 0x10], xmm6
mov dword [rsp + 0x78], 0x6bc
mov dword [rbp - 0x7c], 0x41880000
mov qword [rbp - 0x58], rbx
call fcn.140026870
mov rcx, qword [0x140231c40]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
add rcx, 0x2a8
je 0x14003bb2b
movabs rax, 0xcccccccccccccccc
cmp rcx, rax
je 0x14003bb2b
cmp rcx, 0xffffffffffffffff
je 0x14003bb2b
lea rax, [rcx - 0x400001]
movabs rdx, 0x7fffffffffbffffe
cmp rax, rdx
ja 0x14003bb2b
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x58]
call fcn.140037590
mov r8d, dword [rsp + 0x60]
lea rdx, str.render_count:__d
lea rcx, [rbp + 0xd0]
call fcn.14001afb0
call fcn.14003abc0
mov r8d, eax
lea rdx, str.fps:__d
lea rcx, [rbp + 0x1d0]
call fcn.14001afb0
call fcn.14003abc0
mov r8d, eax
lea r9, [rbp + 0xd0]
lea rdx, str.EVASIVE___.i_FPS___s
lea rcx, [rbp + 0x40]
call fcn.140045520
mov rax, qword gs:[0x58]
lea r13, str.build:_dev
movss xmm13, dword [0x140172f68]
lea r15, [0x140171fa4]
mov r12d, 4
lea rbx, str.evasive
xor r14d, r14d
mov rsi, qword [rax]
mov eax, dword [r12 + rsi]
cmp dword [0x140232310], eax
jle 0x14003be1b
lea rcx, [0x140232310]
call fcn.140123908
cmp dword [0x140232310], 0xffffffff
jne 0x14003be1b
mov rbx, qword [0x140231b80]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x30], r14
movaps xmm3, xmm15
mov qword [rsp + 0x28], r13
movss dword [rsp + 0x20], xmm13
movss xmm2, dword [rbx + 0x3c00]
mov rcx, qword [rbx + 0x3bf8]
call fcn.140029410
movss xmm2, dword [rbx + 0x3c00]
lea rdx, [rbp + 8]
mov rcx, qword [rbx + 0x3bf8]
movaps xmm3, xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm13
call fcn.140029410
movss xmm2, dword [rbx + 0x3c00]
lea rax, [rbp + 0x1d0]
mov rcx, qword [rbx + 0x3bf8]
lea rdx, [rbp]
mov qword [rsp + 0x30], r14
movaps xmm3, xmm15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm13
call fcn.140029410
movss xmm2, dword [rbx + 0x3c00]
lea rdx, [rbp + 0x38]
mov rcx, qword [rbx + 0x3bf8]
movaps xmm3, xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm13
call fcn.140029410
movss xmm2, dword [rbx + 0x3c00]
lea rax, [rbp + 0xd0]
mov rcx, qword [rbx + 0x3bf8]
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x30], r14
movaps xmm3, xmm15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm13
call fcn.140029410
movss xmm2, dword [rbx + 0x3c00]
lea rdx, [rsp + 0x68]
mov rcx, qword [rbx + 0x3bf8]
movaps xmm3, xmm15
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
movss dword [rsp + 0x20], xmm13
call fcn.140029410
movss xmm2, dword [rbx + 0x3c00]
lea rax, str.evasive
mov rcx, qword [rbx + 0x3bf8]
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], r14
movaps xmm3, xmm15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm13
call fcn.140029410
movss xmm3, dword [0x140172e00]
movss xmm0, dword [rsp + 0x50]
addss xmm0, xmm3
cvttss2si eax, xmm0
movss xmm0, dword [rsp + 0x68]
addss xmm0, xmm3
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x30]
addss xmm0, xmm3
movd xmm2, eax
cvtdq2ps xmm2, xmm2
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x38]
addss xmm2, xmm1
addss xmm0, xmm3
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
addss xmm2, xmm1
movss xmm0, dword [rbp]
lea rcx, [0x140232310]
addss xmm0, xmm3
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 8]
addss xmm2, xmm1
addss xmm0, xmm3
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [rsp + 0x58]
addss xmm2, xmm1
addss xmm0, xmm3
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm0
movss xmm0, dword [rdi + 0x382c]
addss xmm2, xmm1
cvtps2pd xmm0, xmm0
movd xmm1, eax
mulsd xmm0, qword [0x140172e58]
cvtdq2ps xmm1, xmm1
addss xmm2, xmm1
cvtps2pd xmm2, xmm2
addsd xmm2, xmm0
cvtpd2ps xmm0, xmm2
movss dword [0x1402324ac], xmm0
call fcn.14012389c
lea rbx, str.evasive
mov eax, dword [r12 + rsi]
cmp dword [0x14023244c], eax
mov r12, qword [rsp + 0x7c0]
jle 0x14003be77
lea rcx, [0x14023244c]
call fcn.140123908
cmp dword [0x14023244c], 0xffffffff
jne 0x14003be77
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea rcx, [0x14023244c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x1402324ac]
mulss xmm0, dword [0x140172dcc]
movss dword [0x140232480], xmm0
call fcn.14012389c
movss xmm0, dword [0x140232480]
xor ecx, ecx
mov rax, qword [0x140231b80]
movaps xmm1, xmm0
subss xmm1, xmm0
movaps xmmword [rsp + 0x700], xmm14
movss xmm2, dword [rax + 0x18]
mulss xmm2, dword [0x140172eb4]
mulss xmm1, xmm2
addss xmm1, xmm0
movss dword [0x140232480], xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm1, dword [0x140232480]
xorps xmm12, xmm12
sub eax, 2
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x14003c364
mov rax, qword [0x140231b80]
lea rcx, str.info_bar
movss xmm0, dword [0x1402324ac]
xor edx, edx
mov r8d, 0xab
or dword [rax + 0x3f90], 3
movss dword [rax + 0x3fa0], xmm1
movss dword [rax + 0x3fb0], xmm0
mov qword [rax + 0x3fa4], 0x40a00000
mov dword [rax + 0x3fac], r14d
mov dword [rax + 0x3f94], 1
mov dword [rax + 0x3fb4], 0x42340000
mov dword [rax + 0x3f98], 1
call fcn.14000e790
mov rcx, qword [0x140231b80]
mov rax, qword [rcx + 0x3e90]
movsd xmm0, qword [rax + 0x18]
movss xmm14, dword [rax + 0x238]
movsd qword [rbp + 0x30], xmm0
movss xmm0, dword [rdi + 0x382c]
movss dword [rbp + 0x38], xmm0
movss xmm0, dword [rax + 0x18]
subss xmm14, xmm0
cmp qword [rax + 0x190], r14
jne 0x14003bf8e
cmp qword [rcx + 0x42f8], r14
je 0x14003bf9c
movss xmm14, dword [rax + 0x208]
subss xmm14, xmm0
mov rax, qword [rcx + 0x4090]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140006ee0
movss xmm0, dword [0x1402324b0]
mov r10, rax
movss xmm1, dword [0x1402324b4]
mov rcx, qword [0x140231b80]
movss xmm8, dword [rbp + 0x34]
movss xmm10, dword [rbp + 0x30]
movaps xmm9, xmm8
movss xmm11, dword [0x140172ef4]
movss dword [rsp + 0x58], xmm0
addss xmm9, xmm11
movss xmm0, dword [0x1402324b8]
movss dword [rsp + 0x60], xmm0
movss xmm0, dword [0x1402324ac]
movss dword [rsp + 0x5c], xmm1
addss xmm0, xmm10
movss xmm1, dword [0x1402324bc]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rsp + 0x58]
movss dword [rsp + 0x6c], xmm9
movss dword [rsp + 0x68], xmm0
movss dword [rsp + 0x64], xmm1
call fcn.1400044d0
movss xmm0, dword [0x140172eb4]
lea r8, [rsp + 0x68]
mov r9d, eax
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0x30]
movss dword [rsp + 0x20], xmm0
mov rcx, r10
call fcn.140025190
mov rax, qword [0x140231b80]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4090]
mov rcx, qword [rcx]
call fcn.140006ee0
movdqa xmm0, xmmword [0x140173230]
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm0
mov r10, rax
movaps xmm0, xmm10
movaps xmm1, xmm10
addss xmm1, dword [0x140172e90]
movaps xmm6, xmm8
addss xmm0, xmm12
addss xmm6, dword [0x140172eec]
addss xmm8, dword [0x140172ebc]
movss dword [rsp + 0x68], xmm1
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x6c], xmm6
movss dword [rsp + 0x54], xmm8
call fcn.1400044d0
movss xmm0, dword [0x140172eb8]
lea r8, [rsp + 0x68]
mov r9d, eax
mov dword [rsp + 0x28], 0xa0
lea rdx, [rsp + 0x50]
movss dword [rsp + 0x20], xmm0
mov rcx, r10
call fcn.140025190
mov rax, qword [0x140231b80]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4090]
mov rcx, qword [rcx]
call fcn.140006ee0
movdqa xmm0, xmmword [0x140173230]
mov r10, rax
movups xmmword [rsp + 0x58], xmm0
movaps xmm0, xmm14
movss dword [rsp + 0x54], xmm6
subss xmm14, dword [0x140172e90]
addss xmm0, xmm10
addss xmm14, xmm10
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x68], xmm14
lea rcx, [rsp + 0x58]
movss dword [rsp + 0x6c], xmm8
call fcn.1400044d0
movss xmm0, dword [0x140172eb8]
lea r8, [rsp + 0x50]
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rsp + 0x68]
movss dword [rsp + 0x20], xmm0
mov rcx, r10
call fcn.140025190
mov rax, qword [0x140231b80]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4090]
mov rcx, qword [rcx]
call fcn.140006ee0
movss xmm0, dword [0x140232408]
mov r10, rax
movss xmm1, dword [0x14023240c]
mov rcx, qword [0x140231b80]
movss dword [rsp + 0x58], xmm0
movss xmm0, dword [0x140232410]
movss dword [rsp + 0x60], xmm0
movss xmm0, dword [0x1402324ac]
movss dword [rsp + 0x5c], xmm1
addss xmm0, xmm10
movss xmm1, dword [0x140232414]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rsp + 0x58]
movss dword [rsp + 0x54], xmm9
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x64], xmm1
call fcn.1400044d0
movss xmm0, dword [0x140172e08]
lea r8, [rsp + 0x50]
movss dword [rsp + 0x30], xmm0
lea rdx, [rbp + 0x30]
movss xmm0, dword [0x140172eb4]
mov r9d, eax
mov rcx, r10
movss dword [rsp + 0x20], xmm0
call fcn.140025080
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x30], r14
mov qword [rbp + 0x18], rax
lea rdx, [rsp + 0x58]
lea rax, [rbp + 0x1d0]
mov qword [rbp + 0x10], rbx
mov rbx, qword [0x140231b80]
movaps xmm3, xmm15
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm13
movss xmm2, dword [rbx + 0x3c00]
mov rcx, qword [rbx + 0x3bf8]
mov qword [rbp + 0x28], r13
call fcn.140029410
mov rax, qword [rbx + 0x3e90]
subss xmm11, dword [rsp + 0x5c]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3e90]
mulss xmm11, dword [0x140172dcc]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [rbp + 0x38]
addss xmm0, xmm11
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140012690
mov ebx, r14d
lea rdi, [rbp + 0x10]
mov rcx, qword [rdi]
call fcn.14002c1a0
movaps xmm1, xmm13
movaps xmm0, xmm12
call fcn.140012390
cmp ebx, 3
jge 0x14003c34f
mov rcx, r15
call fcn.14002c1a0
movaps xmm1, xmm13
movaps xmm0, xmm12
call fcn.140012390
inc ebx
add rdi, 8
cmp ebx, 4
jb 0x14003c320
call fcn.1400127c0
call fcn.140010ab0
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r15, qword [rsp + 0x7d0]
mov r13, qword [rsp + 0x7c8]
test al, 1
je 0x14003c395
cmp byte [0x140231b94], r14b
sete al
mov byte [0x140231b94], al
jmp 0x14003c39c
movzx eax, byte [0x140231b94]
mov rcx, qword [0x140231c08]
mov edx, 0xfffffff0
mov r8d, 0x10000000
test al, al
je 0x14003d2ec
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov rcx, qword [0x140231c08]
mov edx, 0xffffffec
mov r8d, 0x80088
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov rax, qword [0x140231b80]
lea rcx, str.devbuild
xor edx, edx
mov r8d, Ordinal_301
or dword [rax + 0x3f90], 2
mov dword [rax + 0x3fb0], 0x44160000
mov dword [rax + 0x3fb4], 0x43fa0000
mov dword [rax + 0x3f98], 1
call fcn.14000e790
mov rcx, qword [0x140231b80]
movdqa xmm0, xmmword [0x140173350]
movss xmm14, dword [0x140172efc]
movups xmmword [rsp + 0x58], xmm0
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
lea rcx, [rsp + 0x58]
movss xmm8, dword [rax + 0x18]
movss xmm7, dword [rax + 0x1c]
movaps xmm10, xmm8
movss xmm15, dword [rax + 0x20]
movaps xmm9, xmm7
mov rbx, qword [rax + 0x280]
addss xmm10, xmm15
movss xmm11, dword [rax + 0x24]
addss xmm9, xmm14
movss dword [rsp + 0x68], xmm8
movss dword [rsp + 0x6c], xmm7
movss dword [rsp + 0x50], xmm10
movss dword [rsp + 0x54], xmm9
call fcn.1400044d0
mov r9d, eax
mov dword [rsp + 0x28], r14d
lea rdx, [rsp + 0x68]
movss dword [rsp + 0x20], xmm12
lea r8, [rsp + 0x50]
mov rcx, rbx
call fcn.140025190
movdqa xmm0, xmmword [0x1401734f0]
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm0
call fcn.1400044d0
movaps xmm0, xmm8
mov ecx, eax
addss xmm0, dword [0x140172ecc]
addss xmm7, dword [0x140172ed0]
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm7
test eax, 0xff000000
je 0x14003c557
mov rax, qword [rbx + 0x38]
lea rdx, [0x140172460]
movups xmm0, xmmword [rbx + 0x88]
lea r9, [rsp + 0x50]
mov byte [rsp + 0x48], r14b
movss xmm2, dword [0x140172ed4]
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rdx
lea rdx, str.evasive.
mov qword [rsp + 0x30], rdx
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x28], rdx
mov rdx, rbx
mov dword [rsp + 0x20], ecx
mov rcx, qword [rax + 8]
movups xmmword [rsp + 0x58], xmm0
call fcn.140029630
movdqa xmm6, xmmword [0x140173500]
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm6
call fcn.1400044d0
movss dword [rsp + 0x54], xmm7
movaps xmm0, xmm8
addss xmm0, dword [0x140172f04]
movss dword [rsp + 0x50], xmm0
test eax, 0xff000000
je 0x14003c5e8
mov rcx, qword [rbx + 0x38]
lea rdx, [0x140172472]
movups xmm0, xmmword [rbx + 0x88]
lea r9, [rsp + 0x50]
mov byte [rsp + 0x48], r14b
movss xmm2, dword [0x140172ed4]
mov rcx, qword [rcx + 8]
movss dword [rsp + 0x40], xmm12
mov qword [rsp + 0x38], rdx
lea rdx, str.__devbuild
mov qword [rsp + 0x30], rdx
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x28], rdx
mov rdx, rbx
movups xmmword [rsp + 0x58], xmm0
mov dword [rsp + 0x20], eax
call fcn.140029630
movdqa xmm0, xmmword [0x1401733a0]
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm0
movss dword [rsp + 0x50], xmm10
movss dword [rsp + 0x54], xmm9
movss dword [rsp + 0x68], xmm8
movss dword [rsp + 0x6c], xmm9
call fcn.1400044d0
movss xmm0, dword [0x140172e08]
lea r8, [rsp + 0x50]
mov r9d, eax
movss dword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x68]
mov rcx, rbx
call fcn.140024f20
mov rbx, qword [0x140231b80]
subss xmm11, xmm14
xor edx, edx
movss dword [rsp + 0x50], xmm15
lea rcx, str.main_content
mov rax, qword [rbx + 0x3e90]
movss dword [rsp + 0x54], xmm11
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3e90]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, xmm12
addss xmm0, xmm14
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140004000
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x14003c6f5
lea r8, str.main_content
mov edx, listen
mov ecx, eax
call fcn.1400195a0
xor r9d, r9d
mov dword [rsp + 0x20], 8
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.main_content
call fcn.14000bb30
mov rbx, qword [0x140231b80]
lea rcx, str.sidebar
xor edx, edx
mov qword [rsp + 0x50], 0x42f00000
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140004000
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x14003c776
lea r8, str.sidebar
mov edx, listen
mov ecx, eax
call fcn.1400195a0
mov r9b, 1
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.sidebar
call fcn.14000bb30
mov rbx, qword [0x140231b80]
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x58], reloc.WS2_32.dll_ntohl
movss xmm1, dword [rbx + 0x382c]
lea rcx, [rbx + 0x4010]
movss xmm0, dword [rbx + 0x3830]
movss dword [rsp + 0x5c], xmm1
movss dword [rsp + 0x60], xmm0
call fcn.140019cf0
mov rcx, qword [0x140231b80]
cmp dword [0x140232140], r14d
mov dword [rbx + 0x382c], r14d
mov dword [rbx + 0x3830], 0x41200000
sete dl
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
lea rcx, str.Aimbot
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm0, dword [0x140172edc]
movss dword [rax + 0xe4], xmm0
call fcn.1400021f0
test al, al
je 0x14003c83c
mov dword [0x140232140], r14d
mov rax, qword [0x140231b80]
mov rax, qword [rax + 0x3e90]
cmp byte [rax + 0x9b], r14b
jne 0x14003c865
mov eax, dword [rax + 0x19c]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14002e980
cmp dword [0x140232140], 1
lea rcx, str.Triggerbot
sete dl
call fcn.1400021f0
test al, al
je 0x14003c889
mov dword [0x140232140], 1
mov rax, qword [0x140231b80]
mov rax, qword [rax + 0x3e90]
cmp byte [rax + 0x9b], r14b
jne 0x14003c8b2
mov eax, dword [rax + 0x19c]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14002e980
cmp dword [0x140232140], 2
lea rcx, str.Visuals
sete dl
call fcn.1400021f0
test al, al
je 0x14003c8d6
mov dword [0x140232140], 2
mov rax, qword [0x140231b80]
mov rax, qword [rax + 0x3e90]
cmp byte [rax + 0x9b], r14b
jne 0x14003c8ff
mov eax, dword [rax + 0x19c]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14002e980
cmp dword [0x140232140], 3
lea rcx, str.Exploits
sete dl
call fcn.1400021f0
test al, al
je 0x14003c923
mov dword [0x140232140], 3
mov rax, qword [0x140231b80]
mov rax, qword [rax + 0x3e90]
cmp byte [rax + 0x9b], r14b
jne 0x14003c94c
mov eax, dword [rax + 0x19c]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.14002e980
cmp dword [0x140232140], 4
lea rcx, str.Settings
sete dl
call fcn.1400021f0
test al, al
je 0x14003c970
mov dword [0x140232140], 4
mov ecx, 1
call fcn.1400049e0
call fcn.14000bd50
movaps xmm1, xmm13
movaps xmm0, xmm12
call fcn.140012390
mov rbx, qword [0x140231b80]
lea rcx, str.content_area
xor edx, edx
mov qword [rsp + 0x50], r14
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140004000
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x14003c9eb
lea r8, str.content_area
mov edx, listen
mov ecx, eax
call fcn.1400195a0
xor r9d, r9d
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.content_area
call fcn.14000bb30
mov ecx, dword [0x140232140]
test ecx, ecx
je 0x14003d0f9
sub ecx, 1
je 0x14003cfae
sub ecx, 1
je 0x14003cdc3
sub ecx, 1
je 0x14003cc89
cmp ecx, 1
jne 0x14003d2db
lea rdx, str.Configs
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm6
call fcn.14002c2b0
mov rbx, qword [0x140231b80]
lea rcx, str.configs_container
xor edx, edx
mov qword [rsp + 0x50], r14
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140004000
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x14003caad
lea r8, str.configs_container
mov edx, listen
mov ecx, eax
call fcn.1400195a0
xor r9d, r9d
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.configs_container
call fcn.14000bb30
mov rcx, qword [0x140231b80]
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
mov rcx, qword [rax + 0x190]
test rcx, rcx
je 0x14003cb01
cmp dword [rcx + 0x10], 2
jne 0x14003cafc
cmp dword [rcx + 4], 1
je 0x14003cb11
call fcn.140036d40
mov edx, 2
mov r8d, 1
call fcn.1400363f0
lea rdx, [0x140232438]
lea rcx, str.Streamproof
call fcn.14002dad0
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x50], r14
lea rcx, str.Unload_Cheat
call fcn.14002ca70
test al, al
je 0x14003cb47
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140036a40
mov rax, qword [0x140231b80]
lea rdx, [0x140231cf0]
xor r9d, r9d
lea rcx, str.Box_Color
mov r8d, 0x10020
or dword [rax + 0x3f40], 1
mov dword [rax + 0x3f44], 0x42480000
call fcn.140030d60
mov rax, qword [0x140231b80]
lea rdx, [0x140232098]
xor r9d, r9d
lea rcx, str.Distance_Color
mov r8d, 0x10020
or dword [rax + 0x3f40], 1
mov dword [rax + 0x3f44], 0x42480000
call fcn.140030d60
mov rax, qword [0x140231b80]
lea rdx, [0x140231cd8]
xor r9d, r9d
lea rcx, str.Weapon_Color
mov r8d, 0x10020
or dword [rax + 0x3f40], 1
mov dword [rax + 0x3f44], 0x42480000
call fcn.140030d60
mov rax, qword [0x140231b80]
lea rdx, [0x140231d60]
xor r9d, r9d
lea rcx, str.Snapline_Color
mov r8d, 0x10020
or dword [rax + 0x3f40], 1
mov dword [rax + 0x3f44], 0x42480000
call fcn.140030d60
mov rax, qword [0x140231b80]
lea rdx, [0x140231ca8]
xor r9d, r9d
lea rcx, str.Skeleton_Color
mov r8d, 0x10020
or dword [rax + 0x3f40], 1
mov dword [rax + 0x3f44], 0x42480000
call fcn.140030d60
mov rax, qword [0x140231b80]
lea rdx, [0x140232088]
xor r9d, r9d
lea rcx, str.Rank_Color
mov r8d, 0x10020
or dword [rax + 0x3f40], 1
mov dword [rax + 0x3f44], 0x42480000
call fcn.140030d60
jmp 0x14003d29d
lea rdx, str.Exploits
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm6
call fcn.14002c2b0
mov rbx, qword [0x140231b80]
lea rcx, str.exploits_container
xor edx, edx
mov qword [rsp + 0x50], r14
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140004000
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x14003ccfe
lea r8, str.exploits_container
mov edx, listen
mov ecx, eax
call fcn.1400195a0
xor r9d, r9d
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.exploits_container
call fcn.14000bb30
mov rcx, qword [0x140231b80]
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
mov rcx, qword [rax + 0x190]
test rcx, rcx
je 0x14003cd52
cmp dword [rcx + 0x10], 2
jne 0x14003cd4d
cmp dword [rcx + 4], 1
je 0x14003cd62
call fcn.140036d40
mov edx, 2
mov r8d, 1
call fcn.1400363f0
lea rdx, [0x140232444]
lea rcx, str.Silent_Aim
call fcn.14002dad0
lea rdx, [0x140232440]
lea rcx, str.Car_Fly
call fcn.14002dad0
lea rdx, [0x140232443]
lea rcx, str.Spinbot
call fcn.14002dad0
movdqa xmm0, xmmword [0x140173290]
lea rdx, str.These_exploits_may_lead_to_a_ban.
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm0
call fcn.14002c2b0
call fcn.140036a40
jmp 0x14003d29d
lea rdx, str.Visuals
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm6
call fcn.14002c2b0
mov rbx, qword [0x140231b80]
lea rcx, str.visuals_container
xor edx, edx
mov qword [rsp + 0x50], r14
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140004000
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x14003ce38
lea r8, str.visuals_container
mov edx, listen
mov ecx, eax
call fcn.1400195a0
xor r9d, r9d
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.visuals_container
call fcn.14000bb30
mov rcx, qword [0x140231b80]
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
mov rcx, qword [rax + 0x190]
test rcx, rcx
je 0x14003ce8c
cmp dword [rcx + 0x10], 2
jne 0x14003ce87
cmp dword [rcx + 4], 1
je 0x14003ce9c
call fcn.140036d40
mov edx, 2
mov r8d, 1
call fcn.1400363f0
lea rdx, [0x14023243d]
lea rcx, str.Full_Box
call fcn.14002dad0
lea rdx, [0x140232445]
lea rcx, str.Weapons
call fcn.14002dad0
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Skeleton
call fcn.14002dad0
lea rdx, [0x14023243b]
lea rcx, str.Rank
call fcn.14002dad0
lea rdx, [0x14023243a]
lea rcx, str.Distance
call fcn.14002dad0
lea rdx, [0x140232446]
lea rcx, str.Snapline
call fcn.14002dad0
lea rdx, [0x14023244a]
lea rcx, str.Username
call fcn.14002dad0
lea rdx, [0x14023243c]
lea rcx, str.Platform
call fcn.14002dad0
lea rdx, [0x140232448]
lea rcx, str.Render_Count
call fcn.14002dad0
call fcn.140036a40
lea rdx, [0x14023244b]
lea rcx, str.Outlined_Box
call fcn.14002dad0
lea rax, [rbp + 0x38]
mov dword [rbp + 0x38], 7
lea r9, [rbp + 0x30]
mov qword [rsp + 0x20], rax
lea r8, [0x14022dcdc]
mov dword [rbp + 0x30], 1
lea rcx, str.Box_Thickness
call fcn.14002ffd0
lea r8, [0x14022dce8]
mov dword [rbp + 0x30], reloc.WS2_32.dll_ntohs
lea rcx, str.Skeleton_Thickness
mov dword [rbp + 0x38], 1
jmp 0x14003d28b
lea rdx, str.Triggerbot
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm6
call fcn.14002c2b0
mov rbx, qword [0x140231b80]
lea rcx, str.triggerbot_container
xor edx, edx
mov qword [rsp + 0x50], r14
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140004000
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x14003d023
lea r8, str.triggerbot_container
mov edx, listen
mov ecx, eax
call fcn.1400195a0
xor r9d, r9d
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.triggerbot_container
call fcn.14000bb30
mov rcx, qword [0x140231b80]
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
mov rcx, qword [rax + 0x190]
test rcx, rcx
je 0x14003d077
cmp dword [rcx + 0x10], 2
jne 0x14003d072
cmp dword [rcx + 4], 1
je 0x14003d087
call fcn.140036d40
mov edx, 2
mov r8d, 1
call fcn.1400363f0
lea rdx, [0x14023243e]
lea rcx, str.Triggerbot_Enabled
call fcn.14002dad0
call fcn.140036a40
mov r8d, dword [0x14023216c]
lea rdx, [0x14003acc0]
mov ecx, dword [reloc.WS2_32.dll_bind]
call fcn.14003ad10
lea rax, [rbp + 0x30]
mov dword [rbp + 0x30], reloc.WLDAP32.dll_Ordinal_200
lea r9, [rbp + 0x38]
mov qword [rsp + 0x20], rax
lea r8, [0x14022dcd8]
mov dword [rbp + 0x38], 1
lea rcx, str.Triggerbot_Delay
call fcn.14002ffd0
lea r8, [0x14022dcbc]
lea rcx, str.Triggerbot_Distance
jmp 0x14003d27d
lea rdx, str.Aimbot
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm6
call fcn.14002c2b0
mov rbx, qword [0x140231b80]
lea rcx, str.aimbot_container
xor edx, edx
mov qword [rsp + 0x50], r14
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140004000
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x14003d16e
lea r8, str.aimbot_container
mov edx, listen
mov ecx, eax
call fcn.1400195a0
xor r9d, r9d
mov dword [rsp + 0x20], r14d
lea r8, [rsp + 0x50]
mov edx, edi
lea rcx, str.aimbot_container
call fcn.14000bb30
mov rcx, qword [0x140231b80]
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
mov rdx, qword [rax + 0x190]
test rdx, rdx
je 0x14003d1c2
cmp dword [rdx + 0x10], 2
jne 0x14003d1bd
cmp dword [rdx + 4], 1
je 0x14003d1d2
call fcn.140036d40
mov edx, 2
mov r8d, 1
call fcn.1400363f0
lea rdx, [0x140232447]
lea rcx, str.Aimbot
call fcn.14002dad0
lea rdx, [0x140232441]
lea rcx, str.Prediction
call fcn.14002dad0
lea rdx, [0x140232442]
lea rcx, str.Draw_Fov
call fcn.14002dad0
lea rdx, [0x140232449]
lea rcx, str.Fov_Arrows
call fcn.14002dad0
call fcn.140036a40
mov r8d, dword [0x140232164]
lea rdx, [0x14003ac70]
mov ecx, dword [reloc.WS2_32.dll_bind]
call fcn.14003ad10
lea rax, [rbp + 0x30]
mov dword [rbp + 0x30], Ordinal_27
lea r9, [rbp + 0x38]
mov qword [rsp + 0x20], rax
lea r8, [0x14022dcec]
mov dword [rbp + 0x38], 2
lea rcx, str.Smoothing
call fcn.14002ffd0
call fcn.14002fc30
lea r8, [0x14022dce4]
lea rcx, str.Fov_Size
mov dword [rbp + 0x38], Ordinal_27
mov dword [rbp + 0x30], 0xfa
lea rax, [rbp + 0x30]
lea r9, [rbp + 0x38]
mov qword [rsp + 0x20], rax
call fcn.14002ffd0
mov rcx, qword [0x140231b80]
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
mov rcx, qword [rax + 0x190]
test rcx, rcx
je 0x14003d2d6
cmp dword [rcx + 0x10], 1
jne 0x14003d2d1
cmp dword [rcx + 4], r14d
je 0x14003d2d6
call fcn.140036d40
call fcn.14000bd50
call fcn.14000bd50
call fcn.14000bd50
call fcn.140010ab0
jmp 0x14003d30a
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
mov rcx, qword [0x140231c08]
mov edx, 0xffffffec
mov r8d, 0x800a8
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
movaps xmm14, xmmword [rsp + 0x700]
mov rcx, qword [rbp + 0x5e0]
xor rcx, rsp
call fcn.140123840
lea r11, [rsp + 0x790]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret