Function at 0x1400504e0
Capabilities:
Check for foreground window switch
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
mov rax, qword [0x1400b0010]
xor rax, rsp
mov qword [rbp + 0x170], rax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x78]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x80]
add eax, 0xfffffe0c
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mulss xmm7, dword [0x14009a06c]
mov eax, dword [rbp + 0x84]
add eax, 0xfffffed4
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mulss xmm6, dword [0x14009a06c]
call fcn.14005b930
mov dword [rbp + 0x10], 0x50
mov dword [rbp + 0x14], 0x40
lea rax, [0x140051360]
mov qword [rbp + 0x18], rax
xor r13d, r13d
mov qword [rbp + 0x20], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x28], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x40], xmm1
lea rax, str.LOGIN
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], r13
lea rcx, [rbp + 0x10]
call qword [sym.imp.USER32.dll_RegisterClassExW]
lea edx, [r13 + 0x65]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.USER32.dll_LoadIconW]
mov rbx, rax
cvttss2si edx, xmm6
cvttss2si r8d, xmm7
mov qword [rsp + 0x58], r13
mov rcx, qword [rbp + 0x28]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], 0x12c
mov dword [rsp + 0x30], 0x1f4
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r8d
mov r9d, 0xc80000
lea r8, [0x140096d84]
mov rdx, qword [rbp + 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r12, rax
mov r9, rbx
mov r14d, 1
mov r8d, r14d
lea edx, [r14 + 0x7f]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9, rbx
xor r8d, r8d
lea edx, [r14 + 0x7f]
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [r13 + 0x20]
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x1400cc2d0], rax
test rax, rax
je 0x1400511f2
mov qword [0x1400cc2e0], r13
mov qword [0x1400cc2ec], r13
mov dword [0x1400cc2f4], r13d
mov qword [0x1400cc2fc], r13
mov dword [0x1400cc304], r13d
mov qword [0x1400cc314], r13
mov dword [0x1400cc308], r14d
mov dword [0x1400cc2f8], r14d
mov dword [0x1400cc2e8], r13d
mov dword [0x1400cc30c], r14d
mov dword [0x1400cc310], 0x50
mov dword [0x1400cc31c], r14d
mov rax, qword [rax]
lea rdx, [0x1400bcd30]
mov qword [rsp + 0x30], rdx
lea rdx, [0x1400cc2e0]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, r12
mov r8d, r14d
xor edx, edx
call qword [rax + 0x80]
test eax, eax
js 0x1400511eb
lea r9, [0x1400bcd00]
mov r8d, 0xea0
lea rdx, [0x1400b0ce0]
mov rcx, qword [0x1400bcd30]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
test eax, eax
jne 0x14005074d
mov rcx, qword [0x1400bcd00]
mov rax, qword [rcx]
lea r8, [0x1400bccb8]
xor edx, edx
call qword [rax + 0x88]
lea r9, [0x1400bccf8]
mov r8d, 0x718
lea rdx, [0x1400b1b80]
mov rcx, qword [0x1400bcd30]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemory]
test eax, eax
jne 0x14005078b
mov rcx, qword [0x1400bccf8]
mov rax, qword [rcx]
lea r8, [0x1400bccd8]
xor edx, edx
call qword [rax + 0x88]
mov edx, 0xa
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [0x1400bcd10], r12
mov rbx, qword [0x1400bcd20]
test rbx, rbx
je 0x1400507bb
inc dword [rbx + 0xf0]
mov ecx, 0x5e78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0x68], rax
lea rcx, [rsp + 0x60]
mov qword [rbp + 0x60], rcx
mov qword [rbp + 0x70], rax
test rax, rax
je 0x1400507e8
xor edx, edx
mov rcx, rax
call fcn.14000d050
jmp 0x1400507eb
mov rax, r13
mov qword [0x1400bcd20], rax
call fcn.140010f80
mov rdi, qword [0x1400bcd20]
test rbx, rbx
cmovne rdi, rbx
mov qword [0x1400bcd20], rdi
mov qword [rdi + 0x20], r13
or dword [rdi + 8], 3
xor ecx, ecx
call fcn.14002e8d0
mov rcx, r12
call fcn.1400384a0
mov rsi, qword [0x1400bcd30]
mov rbx, qword [0x1400bcd20]
test rbx, rbx
je 0x14005083c
inc dword [rbx + 0xf0]
mov ecx, 0x28
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0x68], rax
test rax, rax
je 0x140050870
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax + 0x20], rcx
mov dword [rax + 0x20], 0x1388
mov dword [rax + 0x24], 0x2710
jmp 0x140050873
mov rax, r13
mov qword [rbx + 0x98], rax
lea rcx, str.imgui_impl_dx9
mov qword [rbx + 0x88], rcx
or dword [rbx + 0xc], 8
mov qword [rax], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + htons]
mov rdi, qword [rdi + 0x38]
mov qword [rbp + 0x60], r13
lea r8, [rbp + 0x60]
lea rsi, str.c:WindowsFontsmsyh.ttc
mov rcx, rsi
call fcn.14000ed00
mov rbx, rax
movss xmm10, dword [0x14009a0bc]
test rax, rax
je 0x140050a6c
xorps xmm2, xmm2
xor eax, eax
movups xmmword [rsp + 0x70], xmm2
movups xmmword [rbp - 0x80], xmm2
movups xmmword [rbp - 0x40], xmm2
mov qword [rbp - 0x10], rax
mov byte [rsp + 0x7c], 1
mov dword [rbp - 0x78], 2
mov dword [rbp - 0x74], r14d
movss xmm0, dword [0x14009a234]
mov dword [rbp - 0x40], 0x3f800000
mov eax, 0xffff
mov word [rbp - 0x3c], ax
movaps xmm4, xmmword [rsp + 0x70]
movaps xmmword [rbp + 0xb0], xmm4
movaps xmm5, xmmword [rbp - 0x80]
movaps xmmword [rbp + 0xc0], xmm5
movaps xmmword [rbp + 0xd0], xmm2
xorps xmm6, xmm6
movaps xmmword [rbp + 0xe0], xmm6
xorps xmm1, xmm1
shufps xmm1, xmm1, 0xe1
movss xmm1, xmm0
shufps xmm1, xmm1, 0xe1
movaps xmmword [rbp - 0x50], xmm1
movaps xmmword [rbp + 0xf0], xmm1
movaps xmm3, xmmword [rbp - 0x40]
movaps xmmword [rbp + 0x100], xmm3
xorps xmm7, xmm7
movaps xmmword [rbp + 0x110], xmm7
xorps xmm8, xmm8
movaps xmmword [rbp + 0x120], xmm8
movsd xmm9, qword [rbp - 0x10]
movsd qword [rbp + 0x130], xmm9
movdqa xmm0, xmm3
psrldq xmm0, 6
movd eax, xmm0
test al, al
jne 0x140050a13
lea r9, [0x140098381]
lea rcx, [r9 - 1]
movzx eax, byte [rcx]
cmp al, 0x2f
je 0x1400509ab
cmp al, 0x5c
je 0x1400509ab
mov r9, rcx
cmp rcx, rsi
ja 0x140050994
movsd xmm0, qword [0x14009a128]
movsd qword [rsp + 0x20], xmm0
lea r8, str._s___.0fpx
mov edx, 0x28
lea rcx, [rbp + 0x106]
call fcn.14000e970
movsd xmm9, qword [rbp + 0x130]
movaps xmm8, xmmword [rbp + 0x120]
movaps xmm7, xmmword [rbp + 0x110]
movaps xmm3, xmmword [rbp + 0x100]
movaps xmm1, xmmword [rbp + 0xf0]
movaps xmm6, xmmword [rbp + 0xe0]
movaps xmm2, xmmword [rbp + 0xd0]
movaps xmm5, xmmword [rbp + 0xc0]
movaps xmm4, xmmword [rbp + 0xb0]
movaps xmmword [rsp + 0x70], xmm4
movaps xmmword [rbp - 0x80], xmm5
movaps xmmword [rbp - 0x70], xmm2
movaps xmmword [rbp - 0x60], xmm6
movaps xmmword [rbp - 0x50], xmm1
movaps xmmword [rbp - 0x40], xmm3
movaps xmmword [rbp - 0x30], xmm7
movaps xmmword [rbp - 0x20], xmm8
movsd qword [rbp - 0x10], xmm9
mov qword [rsp + 0x70], rbx
mov eax, dword [rbp + 0x60]
mov dword [rsp + 0x78], eax
movss xmm0, dword [0x14009a194]
movss dword [rbp - 0x7c], xmm0
lea rax, [0x140098070]
mov qword [rbp - 0x58], rax
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.1400333c0
xor dil, dil
movsd xmm6, qword [0x14009a0f8]
mov ebx, 0x8000
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x140]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140050af0
nop word [rax + rax]
lea rcx, [rbp + 0x140]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x140]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx edi, dil
cmp dword [rbp + 0x148], 0x12
cmove edi, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x140]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140050aa0
test dil, dil
jne 0x14005103e
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bx, ax
je 0x140050b3a
cmp byte [0x1400bcd08], 0
sete al
mov byte [0x1400bcd08], al
cmp byte [0x1400bcd09], 0
jne 0x140050b2f
mov rcx, r12
test al, al
je 0x140050b24
xor edx, edx
jmp 0x140050b29
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test bx, ax
jne 0x140051281
mov ecx, dword [0x1400cc0dc]
test ecx, ecx
je 0x140050b81
mov eax, dword [0x1400cc2d8]
test eax, eax
je 0x140050b81
mov dword [0x1400cc2e0], ecx
mov dword [0x1400cc2e4], eax
mov dword [0x1400cc2d8], r13d
mov dword [0x1400cc0dc], r13d
call fcn.140051290
mov rbx, qword [0x1400bcd20]
test rbx, rbx
je 0x140050b96
mov rax, qword [rbx + 0x98]
jmp 0x140050b99
mov rax, r13
cmp qword [rax + 0x18], 0
jne 0x140050bc3
test rbx, rbx
je 0x140050bd1
mov rax, qword [rbx + 0x98]
test rax, rax
je 0x140050bc3
cmp qword [rax], 0
je 0x140050bc3
call fcn.140038270
mov rbx, qword [0x1400bcd20]
test rbx, rbx
je 0x140050bd1
mov rsi, qword [rbx + 0x90]
jmp 0x140050bd4
mov rsi, r13
xorps xmm0, xmm0
movdqu xmmword [rbp], xmm0
lea rdx, [rbp]
mov rcx, qword [rsi]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp + 8]
sub eax, dword [rbp]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [rbp + 0xc]
sub eax, dword [rbp + 4]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x10], xmm1
movss dword [rbx + 0x14], xmm0
mov qword [rbp + 0x68], r13
lea rcx, [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp + 0x68]
mov rax, rcx
sub rax, qword [rsi + 0x18]
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [rsi + 0x20]
divss xmm1, xmm0
movss dword [rbx + 0x18], xmm1
mov qword [rsi + 0x18], rcx
mov r14, qword [0x1400bcd20]
test r14, r14
je 0x140050c59
mov r15, qword [r14 + 0x90]
jmp 0x140050c5c
mov r15, r13
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [r15]
cmp rax, rcx
jne 0x140050cf3
cmp byte [r14 + 0xd5], 0
je 0x140050cb4
cvttss2si eax, dword [r14 + 0xe00]
mov dword [rbp + 0x70], eax
cvttss2si eax, dword [r14 + 0xe04]
mov dword [rbp + 0x74], eax
lea rdx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x140050caa
mov edx, dword [rbp + 0x74]
mov ecx, dword [rbp + 0x70]
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [r14 + 0xd5], 0
jne 0x140050cf3
cmp dword [r15 + 0x10], 0
jne 0x140050cf3
lea rcx, [rbp + 0x60]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x140050cf3
lea rdx, [rbp + 0x60]
mov rcx, qword [r15]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x140050cf3
movd xmm2, dword [rbp + 0x64]
cvtdq2ps xmm2, xmm2
movd xmm1, dword [rbp + 0x60]
cvtdq2ps xmm1, xmm1
lea rcx, [r14 + 8]
call fcn.14000e5d0
call fcn.1400387c0
cmp byte [rbx + 0x58], 0
je 0x140050d05
mov eax, 0xffffffff
jmp 0x140050d12
mov rax, qword [0x1400bcd20]
mov eax, dword [rax + 0x4c18]
cmp dword [rsi + 0x28], eax
je 0x140050d1f
mov dword [rsi + 0x28], eax
call fcn.140038650
call fcn.140038990
call fcn.1400136c0
cmp byte [0x1400bcd08], 0
jne 0x140050e6d
mov byte [0x1400bcd0f], 0
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 1]
mov rcx, r12
call qword [sym.imp.USER32.dll_SetWindowPos]
cmp byte [reloc.d2d1.dll_Ordinal_1], 0
je 0x140050d87
cmp byte [0x1400bcf5f], 0
jne 0x140050d82
call fcn.140061300
mov byte [0x1400bcf5f], 1
jmp 0x140050d87
call fcn.1400620c0
cmp byte [0x1400bcd0d], 0
je 0x140050dfa
cmp byte [0x1400bcd0c], 0
jne 0x140050df5
call fcn.1400514c0
lea rdx, [rbp + 0x88]
mov rcx, qword [0x1400bcd10]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0x30], 6
mov dword [rsp + 0x28], 0x258
mov dword [rsp + 0x20], 0x1f4
mov r9d, dword [rbp + 0x8c]
mov r8d, dword [rbp + 0x88]
mov rdx, 0xffffffffffffffff
mov rcx, qword [0x1400bcd10]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov byte [0x1400bcd0c], 1
jmp 0x140050dfa
call fcn.1400561c0
cmp byte [0x1400bcd5a], 0
je 0x140050e6d
cmp byte [0x1400bcd59], 0
jne 0x140050e68
call fcn.140058700
lea rdx, [rbp + 0x98]
mov rcx, qword [0x1400bcd10]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0x30], 6
mov dword [rsp + 0x28], 0x258
mov dword [rsp + 0x20], 0x1f4
mov r9d, dword [rbp + 0x9c]
mov r8d, dword [rbp + 0x98]
mov rdx, 0xffffffffffffffff
mov rcx, qword [0x1400bcd10]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov byte [0x1400bcd59], 1
jmp 0x140050e6d
call fcn.14005a7a0
cmp byte [0x1400bcd0d], 0
je 0x140050f2f
cmp byte [0x1400bcd09], 0
je 0x140050f2f
cmp byte [0x1400bcd08], 0
je 0x140050f2f
mov byte [0x1400bcd0c], 0
cmp byte [0x1400bcd0f], 0
jne 0x140050f2a
mov ecx, dword [0x1400bcd54]
sub ecx, dword [0x1400bcd4c]
movd xmm0, ecx
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm6
cvttsd2si r11d, xmm0
mov eax, r11d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mov r9d, eax
sub r9d, r8d
add r9d, dword [0x1400bcd4c]
mov eax, dword [0x1400bcd50]
mov ecx, dword [0x1400bcd48]
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
sub eax, r8d
lea r8d, [rcx + rax]
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x20], r11d
mov rdx, 0xffffffffffffffff
mov rcx, qword [0x1400bcd10]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov byte [0x1400bcd0f], 1
jmp 0x140050f2f
call fcn.140058360
call fcn.140015430
mov rcx, qword [0x1400bcd30]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400bcd30]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400bcd30]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x1400bcd30]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r13d
movss dword [rsp + 0x28], xmm10
mov dword [rsp + 0x20], 0xff728c99
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1400bcd30]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140050ff6
call fcn.140015820
mov rax, qword [0x1400bcd20]
mov rcx, qword [rax + 0x48c8]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, r13
cmp byte [rax], r13b
cmovne rcx, rax
call fcn.140037cb0
mov rcx, qword [0x1400bcd30]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1400bcd30]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140051033
mov rcx, qword [0x1400bcd30]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140051033
call fcn.140051290
mov r14d, 1
jmp 0x140050a77
mov rcx, qword [0x1400bcd20]
test rcx, rcx
je 0x140051053
mov rsi, qword [rcx + 0x98]
jmp 0x140051056
mov rsi, r13
lea rdi, [rcx + 8]
test rcx, rcx
je 0x1400510d0
mov rbx, qword [rcx + 0x98]
test rbx, rbx
je 0x1400510d0
cmp qword [rbx], 0
je 0x1400510d0
mov rdx, qword [rbx + 8]
test rdx, rdx
je 0x14005108e
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rbx + 8], r13
mov rcx, qword [0x1400bcd20]
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x1400510ab
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rbx + 0x10], r13
mov rcx, qword [0x1400bcd20]
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x1400510d0
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rbx + 0x18], r13
mov rcx, qword [0x1400bcd20]
mov rax, qword [rcx + 0x38]
mov qword [rax + 8], r13
mov rdx, qword [rsi]
test rdx, rdx
je 0x1400510e8
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1400bcd20]
mov qword [rdi + 0x80], r13
mov qword [rdi + 0x90], r13
and dword [rdi + 4], 0xfffffff7
test rcx, rcx
je 0x140051105
dec dword [rcx + 0xf0]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1400bcd20]
test rax, rax
je 0x140051123
mov rdi, qword [rax + 0x90]
jmp 0x140051126
mov rdi, r13
lea rbx, [rax + 8]
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x140051140
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1400bcd20]
mov qword [rbx + 0x78], r13
mov qword [rbx + 0x88], r13
and dword [rbx + 4], 0xfffffff8
test rax, rax
je 0x14005115a
dec dword [rax + 0xf0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1400bcd20]
call fcn.1400113c0
mov qword [0x1400bcd20], r13
test rbx, rbx
je 0x14005119e
mov rcx, rbx
call fcn.140027400
mov rax, qword [0x1400bcd20]
test rax, rax
je 0x140051195
dec dword [rax + 0xf0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1400bcd30]
test rcx, rcx
je 0x1400511b7
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [0x1400bcd30], r13
mov rcx, qword [0x1400cc2d0]
test rcx, rcx
je 0x1400511d0
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [0x1400cc2d0], r13
mov rcx, r12
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x50]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x140051238
mov rcx, qword [0x1400cc2d0]
mov rdx, qword [0x1400bcd30]
test rdx, rdx
je 0x140051215
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [0x1400bcd30], r13
mov rcx, qword [0x1400cc2d0]
test rcx, rcx
je 0x140051227
mov rdx, qword [rcx]
call qword [rdx + reloc.WSOCK32.dll_recv]
mov qword [0x1400cc2d0], r13
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x50]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r14d
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.14008a4a0
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14005fcf0
int3