Function at 0x1400325e0
Capabilities:
Create process on windows
Create thread
Encode data using xor
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
lea rbp, [rsp - 0x3e0]
sub rsp, 0x4e0
movaps xmmword [rsp + 0x4b0], xmm7
mov rax, qword [0x1400cc0c0]
xor rax, rsp
mov qword [rbp + 0x320], rax
xor r13d, r13d
lea rax, [0x140151608]
cmp qword [0x140151620], 0xf
mov esi, r9d
mov qword [0x140151618], r13
mov rdi, rcx
cmova rax, qword [0x140151608]
mov byte [rax], r13b
lea rax, [0x140151328]
cmp qword [0x140151340], 0xf
mov qword [0x140151338], r13
cmova rax, qword [0x140151328]
mov byte [rax], r13b
lea rax, [0x140151628]
cmp qword [0x140151640], 0xf
mov qword [0x140151638], r13
cmova rax, qword [0x140151628]
mov byte [rax], r13b
lea rax, [0x140151308]
cmp qword [0x140151320], 0xf
mov qword [0x140151318], r13
cmova rax, qword [0x140151308]
mov byte [rax], r13b
lea rax, [0x140151348]
cmp qword [0x140151360], 0xf
mov qword [0x140151358], r13
cmova rax, qword [0x140151348]
mov byte [rax], r13b
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x1400ba23c]
lea rdx, str.CONOUT_
lea rcx, [rbp + 0x168]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x1400ba23c]
lea rdx, str.CONOUT_
lea rcx, [rbp + 0x168]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x1400ba248]
lea rdx, str.CONIN_
lea rcx, [rbp + 0x168]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
movzx ecx, word [0x1400bb8f0]
xorps xmm0, xmm0
movzx eax, byte [0x1400bb8f2]
mov r8, 0xffffffffffffffff
movups xmmword [rbp + 0x2a0], xmm0
mov word [rbp + 0x218], cx
xor cl, 0x3d
movsd xmm0, qword [str.f_ZHU_HO]
xor byte [rbp + 0x219], 0x3e
movsd qword [rbp + 0x210], xmm0
xorps xmm0, xmm0
xor byte [rbp + 0x211], 0x36
xor byte [rbp + 0x212], 0x37
xor byte [rbp + 0x213], 0x38
xor byte [rbp + 0x214], 0x39
xor byte [rbp + 0x215], 0x3a
xor byte [rbp + 0x216], 0x3b
xor byte [rbp + 0x217], 0x3c
xor al, 0x3f
mov qword [rbp + 0x2b0], r13
mov byte [rbp + 0x21a], al
lea rax, [rbp + 0x210]
mov qword [rbp + 0x2b8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2a0], r13b
mov byte [rbp + 0x210], 0x53
mov byte [rbp + 0x218], cl
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], r13
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140032800
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x240]
call fcn.140037a80
cmp qword [rbp + 0x258], 0xf
lea rcx, [rbp + 0x240]
jbe 0x140032834
mov rcx, qword [rbp + 0x240]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
movups xmm3, xmmword [0x1400bb808]
mov ebx, dword [reloc.WS2_32.dll_accept]
mov r8d, r13d
mov r10, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movdqa xmm7, xmmword [0x1400bbb80]
movaps xmmword [rsp + 0x4c0], xmm6
movups xmmword [rbp + 0x220], xmm3
cmp ebx, 2
jl 0x140032a17
movdqa xmm4, xmmword [0x1400bbed0]
movdqa xmm2, xmmword [0x1400bbb20]
movdqa xmm5, xmmword [str.6666]
movdqa xmm1, xmm2
movdqa xmm6, xmmword [0x1400bbbc0]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movd eax, xmm3
movdqa xmm3, xmmword [0x1400bbb50]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, eax
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
xorps xmm2, xmm0
movd dword [rbp + 0x220], xmm2
movdqa xmm2, xmmword [0x1400bbb40]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm5
psubd xmm2, xmm0
punpckldq xmm1, xmm3
movd xmm0, dword [rbp + 0x224]
andps xmm2, xmm7
pmuldq xmm1, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rbp + 0x224], xmm2
movdqa xmm2, xmmword [0x1400bbb60]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm5
psubd xmm3, xmm0
punpckldq xmm1, xmm2
movd xmm0, dword [rbp + 0x228]
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
pmuldq xmm1, xmm4
paddb xmm3, xmm6
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
movd dword [rbp + 0x228], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, dword [rbp + 0x22c]
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm6
xorps xmm2, xmm0
movd dword [rbp + 0x22c], xmm2
jmp 0x140032a53
lea r9, [rbp + 0x220]
nop
mov eax, 0x2f684bdb
lea r9, [r9 + 1]
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x35
xor byte [r9 - 1], al
cmp r8d, 0x10
jl 0x140032a20
lea rdx, [rbp + 0x220]
mov rcx, r10
call fcn.140037300
lea rcx, [0x140151370]
call fcn.140049cc0
cmp byte [0x1401515a0], r13b
jne 0x140032af0
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x210]
call fcn.140034b40
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x140032abf
xor byte [rax], 0x35
xor byte [rax + 1], 0x36
xor byte [rax + 2], 0x37
xor byte [rax + 3], 0x38
xor byte [rax + 4], 0x39
xor byte [rax + 5], 0x3a
xor byte [rax + 6], 0x3b
xor byte [rax + 7], 0x3c
xor byte [rax + 8], 0x3d
xor byte [rax + 9], 0x3e
xor cl, 0x3f
mov byte [rax + 0xa], cl
mov rdx, rax
mov rcx, r8
call fcn.140037300
mov rcx, rax
lea rdx, [0x1401515a8]
call fcn.1400374d0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movzx eax, word [0x1400bb828]
mov r8d, r13d
mov word [rbp + 0x300], ax
movups xmm6, xmmword [0x1400bb818]
movups xmmword [rbp + 0x2f0], xmm6
cmp ebx, 2
jl 0x140032cd0
movdqa xmm4, xmmword [0x1400bbed0]
movdqa xmm3, xmmword [0x1400bbb20]
movdqa xmm2, xmmword [0x1400bbb40]
movdqa xmm1, xmm3
movdqa xmm5, xmmword [str.6666]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
mov ecx, dword [0x1400bbbc0]
punpckldq xmm1, xmm3
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movd eax, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm5
psubd xmm3, xmm0
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, ecx
paddb xmm3, xmm0
movd xmm0, eax
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
movd dword [rbp + 0x2f0], xmm3
movdqa xmm3, xmmword [0x1400bbb50]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp + 0x2f4]
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
xorps xmm2, xmm1
pmuldq xmm0, xmm4
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd dword [rbp + 0x2f4], xmm2
movdqa xmm2, xmmword [0x1400bbb60]
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rbp + 0x2f8]
pmulld xmm0, xmm5
psubd xmm3, xmm0
movd xmm0, ecx
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
xorps xmm3, xmm1
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movd dword [rbp + 0x2f8], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
mov r8d, reloc.WS2_32.dll_recv
movd xmm1, dword [rbp + 0x2fc]
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rbp + 0x2fc], xmm2
mov eax, r8d
lea r9, [rbp + 0x2f0]
add r9, rax
nop dword [rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x35
xor byte [r9 - 1], al
cmp r8d, 0x12
jl 0x140032ce0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x2f0]
call fcn.140037300
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea rdx, [rbp + 0x2a0]
call fcn.1400374f0
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x2f0]
call fcn.140036630
mov rdx, rax
lea rcx, [0x140151370]
call fcn.14004bc20
cmp byte [0x1401515a0], r13b
jne 0x140032ddb
mov r8, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp + 0x210]
call fcn.140034b40
movzx ecx, byte [rax + 0xa]
test cl, cl
je 0x140032daa
xor byte [rax], 0x35
xor byte [rax + 1], 0x36
xor byte [rax + 2], 0x37
xor byte [rax + 3], 0x38
xor byte [rax + 4], 0x39
xor byte [rax + 5], 0x3a
xor byte [rax + 6], 0x3b
xor byte [rax + 7], 0x3c
xor byte [rax + 8], 0x3d
xor byte [rax + 9], 0x3e
xor cl, 0x3f
mov byte [rax + 0xa], cl
mov rdx, rax
mov rcx, r8
call fcn.140037300
mov rcx, rax
lea rdx, [0x1401515a8]
call fcn.1400374d0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Successfully_logged_in_n_Console_closing_in_5s.._n
mov qword [rsp + 0x518], r12
mov qword [rsp + 0x4d8], r14
mov qword [rsp + 0x4d0], r15
movaps xmmword [rsp + 0x4a0], xmm8
movaps xmmword [rsp + 0x490], xmm9
movaps xmmword [rsp + 0x480], xmm10
movaps xmmword [rsp + 0x470], xmm11
movaps xmmword [rsp + 0x460], xmm12
movaps xmmword [rsp + 0x450], xmm13
movaps xmmword [rsp + 0x440], xmm14
call fcn.140037300
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, reloc.WS2_32.dll_select
call qword [sym.imp.USER32.dll_PostMessageW]
lea rax, [0x140032580]
mov qword [rbp + 0x1d0], r13
mov qword [rbp + 0x1c8], rax
xorps xmm0, xmm0
lea rax, str.Simpless
mov qword [rbp + 0x1e8], r13
mov edx, 0x66
mov qword [rbp + 0x200], rax
mov rcx, rdi
movdqu xmmword [rbp + 0x1f0], xmm0
mov dword [rbp + 0x1c0], 0x50
mov dword [rbp + 0x1c4], 3
mov qword [rbp + 0x1d8], rdi
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x66
mov rcx, rdi
mov qword [rbp + 0x1e0], rax
call qword [sym.imp.USER32.dll_LoadIconW]
lea rcx, [rbp + 0x1c0]
mov qword [rbp + 0x208], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xor ecx, ecx
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [rbp + 0x1d8]
lea r8, str.Simple
mov rdx, qword [rbp + 0x200]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], rcx
mov ecx, 0x80028
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r9d, 2
mov r8b, 0xff
mov rcx, rax
xor edx, edx
mov r12, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
lea rdx, [rbp + 0x260]
mov rcx, r12
movups xmmword [rbp + 0x260], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
lea rdx, [rbp + 0x210]
mov rcx, r12
movups xmmword [rbp + 0x210], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rdx, [rbp + 0x120]
mov qword [rbp + 0x120], r13
mov rcx, r12
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x120]
lea rdx, [rbp + 0x220]
mov dword [rbp + 0x220], eax
mov rcx, r12
mov eax, dword [rbp + 0x124]
mov dword [rbp + 0x224], eax
mov eax, dword [rbp + 0x268]
mov dword [rbp + 0x228], eax
mov eax, dword [rbp + 0x26c]
mov dword [rbp + 0x22c], eax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
lea rax, [rbp + 0x138]
mov qword [rbp + 0x170], r13
mov qword [rsp + 0x58], rax
xor r9d, r9d
lea rax, [rbp + 0x270]
mov qword [rbp + 0x184], r13
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [rbp + 0x150]
mov qword [rbp + 0x18c], 1
mov qword [rsp + 0x48], rax
mov edx, 1
lea rax, [rbp + 0x148]
mov qword [rbp + 0x198], 2
mov qword [rsp + 0x40], rax
xor ecx, ecx
lea rax, [rbp + 0x170]
mov qword [rbp + 0x1b0], 2
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x318]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x178], 0xa5
mov dword [rbp + 0x17c], 1
mov dword [rbp + 0x180], Ordinal_35
mov dword [rbp + 0x194], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], 1
mov dword [rbp + 0x318], 0xb000
mov dword [rbp + 0x31c], 0xa000
mov qword [rbp + 0x150], r13
mov qword [rbp + 0x138], r13
mov qword [rbp + 0x148], r13
mov qword [rbp + 0x158], r13
mov dword [rbp + 0x270], r13d
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov rcx, qword [rbp + 0x148]
lea r9, [rbp + 0x160]
mov qword [rbp + 0x160], r13
lea r8, [0x1400bb830]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rdx, qword [rbp + 0x160]
test rdx, rdx
je 0x140034a12
mov rcx, qword [rbp + 0x150]
lea r9, [rbp + 0x158]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x160]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, esi
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov r14, qword [0x1401512e0]
test r14, r14
je 0x14003317e
inc dword [r14 + 0xf4]
mov ecx, 0x5588
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x14003319a
xor edx, edx
mov rcx, rax
call fcn.140001b40
jmp 0x14003319d
mov rax, r13
mov qword [0x1401512e0], rax
call fcn.1400086d0
test r14, r14
je 0x1400331b7
mov qword [0x1401512e0], r14
jmp 0x1400331be
mov r14, qword [0x1401512e0]
xor ecx, ecx
call fcn.14001fc20
mov rbx, qword [0x1401512e0]
lea rcx, [rbp + 0x238]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14003332d
lea rcx, [rbp + 0x230]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14003332d
mov rax, qword [0x1401512e0]
test rax, rax
je 0x140033208
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x140033235
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x140033238
mov rdi, r13
or dword [rbx + 0xc], 6
lea rax, [0x1400b9f38]
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, r13
mov qword [rdi], r12
mov byte [rdi + 0x2d], 1
mov rax, qword [rbp + 0x238]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x230]
mov qword [rdi + 0x18], rax
mov rax, qword [0x1401512e0]
mov dword [rdi + 0x28], 9
mov rax, qword [rax + 0x4090]
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x2f0], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x2f8], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x300], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x308], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 0x310], rax
mov qword [rcx + 0x28], r12
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rbp + rbx*8 + 0x2f0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x140033301
inc rbx
cmp rbx, 5
jl 0x1400332e0
jmp 0x14003332d
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rdi, qword [0x1401512e0]
mov r15, qword [rbp + 0x138]
mov rsi, qword [rbp + 0x150]
test rdi, rdi
je 0x14003334d
inc dword [rdi + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x14003338e
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140033391
mov rbx, r13
or dword [rdi + 0xc], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x90], rax
lea r8, [rbp + 0x120]
mov qword [rdi + 0xa0], rbx
lea rdx, [0x1400b9f08]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rbp + 0x120], r13
mov qword [rbp + 0x128], r13
mov qword [rbp + 0x140], r13
call qword [rax]
test eax, eax
jne 0x140033429
mov rcx, qword [rbp + 0x120]
lea r8, [rbp + 0x128]
lea rdx, [0x1400b9f18]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140033429
mov rcx, qword [rbp + 0x128]
lea r8, [rbp + 0x140]
lea rdx, [0x1400b9f28]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x140033429
mov qword [rbx], rsi
mov qword [rbx + 8], r15
mov rax, qword [rbp + 0x140]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x14003343b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x128]
test rcx, rcx
je 0x14003344d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [r14 + 0x58]
lea rbx, [0x1400bb8b8]
xorps xmm13, xmm13
lea rdx, [rbp - 0x30]
xor eax, eax
movups xmmword [rbp + 0x30], xmm13
mov qword [rbp + 0xe0], rax
mov sil, 1
movsd xmm6, qword [rbp + 0xe0]
mov eax, 0xffff
movups xmmword [rbp + 0x70], xmm13
mov dword [rbp + 0x78], 5
xor r15b, r15b
movups xmmword [rbp + 0xb0], xmm13
mov word [rbp + 0xb4], ax
lea rax, [0x1400cc150]
movups xmmword [rbp + 0x60], xmm13
mov byte [rbp + 0x6c], sil
movups xmm12, xmmword [rbp + 0x60]
movups xmmword [rbp + 0x90], xmm13
mov dword [rbp + 0x7c], 5
movups xmm11, xmmword [rbp + 0x70]
movups xmmword [rbp + 0x80], xmm13
mov qword [rbp + 0x98], rbx
movups xmm9, xmmword [rbp + 0x90]
movups xmmword [rbp + 0xa0], xmm13
mov dword [rbp + 0xa4], 0x7f7fffff
movups xmm8, xmmword [rbp + 0xa0]
movups xmmword [rbp - 0x30], xmm12
movups xmmword [rbp - 0x20], xmm11
movups xmmword [rbp], xmm9
mov byte [rbp + 0x80], r13b
movups xmm10, xmmword [rbp + 0x80]
mov dword [rbp + 0xb0], 0x3f99999a
movups xmm7, xmmword [rbp + 0xb0]
movups xmmword [rbp + 0x20], xmm7
mov qword [rbp - 0x30], rax
movups xmmword [rbp - 0x10], xmm10
movups xmmword [rbp + 0x10], xmm8
movups xmmword [rbp + 0x40], xmm13
movsd qword [rbp + 0x50], xmm6
mov dword [rbp - 0x28], 0x41d7c
mov dword [rbp - 0x1c], 0x41700000
mov qword [rbp + 8], rbx
call fcn.1400242d0
mov rcx, qword [r14 + 0x58]
lea rdx, [rbp - 0x30]
movss xmm14, dword [0x1400bba18]
movups xmmword [rbp - 0x30], xmm12
mov qword [0x1401512f8], rax
lea rax, str.OTTO
movups xmmword [rbp - 0x20], xmm11
movups xmmword [rbp], xmm9
mov qword [rbp - 0x30], rax
movups xmmword [rbp - 0x10], xmm10
movups xmmword [rbp + 0x10], xmm8
movups xmmword [rbp + 0x20], xmm7
movups xmmword [rbp + 0x30], xmm13
movups xmmword [rbp + 0x40], xmm13
movsd qword [rbp + 0x50], xmm6
mov dword [rbp - 0x28], 0x421a8
mov dword [rbp - 0x1c], 0x41880000
mov qword [rbp + 8], rbx
call fcn.1400242d0
mov ecx, 8
mov qword [0x140151300], rax
call fcn.1400a14b8
lea rcx, [0x140034b70]
mov r9, rax
lea r8, [0x140038dd0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x298]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x290], rax
test rax, rax
je 0x1400349ff
mov ecx, 8
call fcn.1400a14b8
lea rcx, [0x140034d40]
mov r9, rax
lea r8, [0x140038dd0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x288]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x280], rax
test rax, rax
je 0x1400349ec
cmp dword [rbp + 0x298], r13d
je 0x1400349e0
movaps xmm0, xmmword [rbp + 0x290]
lea rcx, [rbp + 0x220]
movdqa xmmword [rbp + 0x220], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400349e0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x290], xmm0
cmp dword [rbp + 0x288], r13d
je 0x1400349e0
movaps xmm0, xmmword [rbp + 0x280]
lea rcx, [rbp + 0x220]
movdqa xmmword [rbp + 0x220], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400349e0
movdqa xmm11, xmmword [0x1400bbc90]
lea rdi, str.simple
movss xmm8, dword [0x1400bba28]
lea r14, [0x1400b5170]
movss xmm12, dword [0x1400bba3c]
xorps xmm0, xmm0
movss xmm13, dword [0x1400bba10]
xorps xmm9, xmm9
movss xmm10, dword [0x1400bba40]
movaps xmmword [rsp + 0x430], xmm15
movdqa xmm15, xmmword [0x1400bbec0]
movdqa xmmword [rbp + 0x280], xmm0
mov qword [rbp + 0x210], 2
nop
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x2c0]
xor edx, edx
movzx ebx, r15b
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x1400337ba
nop word [rax + rax]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rbp + 0x2c8], 0x12
lea rcx, [rbp + 0x2c0]
movzx esi, sil
cmove esi, r13d
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140033770
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140033814
test r15b, r15b
mov edx, 0xffffffec
mov rcx, r12
sete r15b
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov rcx, rax
mov edx, 0xffffffec
or rcx, 0x20
and rax, 0xffffffffffffffdf
test bl, bl
cmovne rax, rcx
mov rcx, r12
mov r8, rax
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp byte [0x140151369], r13b
je 0x140033873
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x14003383b
inc ebx
cmp ebx, 0xff
jle 0x140033822
jmp 0x140033848
mov dword [str.GT7], ebx
mov byte [0x140151369], r13b
mov ebx, 1
nop dword [rax]
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x140033866
inc ebx
cmp ebx, 6
jle 0x140033850
jmp 0x140033873
mov dword [str.GT7], ebx
mov byte [0x140151369], r13b
cmp byte [0x14015136c], r13b
je 0x1400338d3
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x14003389a
inc ebx
cmp ebx, 0xff
jle 0x140033881
jmp 0x1400338a7
mov dword [0x14015007c], ebx
mov byte [0x14015136c], r13b
mov ebx, 1
nop dword [rax]
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x1400338c6
inc ebx
cmp ebx, 6
jle 0x1400338b0
jmp 0x1400338d3
mov dword [0x14015007c], ebx
mov byte [0x14015136c], r13b
mov ecx, dword [str.GT7]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400338fa
cmp byte [0x14015136b], r13b
je 0x1400338fa
cmp byte [0x140151368], r13b
sete byte [0x140151368]
mov ecx, dword [0x14015007c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140033921
cmp byte [0x14015136d], r13b
je 0x140033921
cmp byte [0x14015136a], r13b
sete byte [0x14015136a]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
movzx esi, sil
mov rax, qword [0x1401512e0]
cmovne esi, r13d
test rax, rax
je 0x14003394b
mov rax, qword [rax + 0xa0]
jmp 0x14003394e
mov rax, r13
cmp qword [rax + 0x48], r13
jne 0x140033959
call fcn.140028ff0
call fcn.140029e20
call fcn.1400073d0
test r15b, r15b
je 0x14003470d
mov rbx, qword [0x1401512e0]
lea rdx, [rbp + 0x260]
mov dword [rbp + 0x260], 2
or dword [rbx + 0x3f90], 2
lea rcx, [rbx + 0x4010]
mov dword [rbx + 0x3fb0], 0x43fa0000
mov dword [rbx + 0x3fb4], 0x43b90000
mov dword [rbx + 0x3f98], 1
movss xmm1, dword [rbx + 0x37e8]
movss xmm0, dword [rbx + 0x37ec]
movss dword [rbp + 0x264], xmm1
movss dword [rbp + 0x268], xmm0
call fcn.140017c10
mov qword [rbx + 0x37e8], r13
lea rdx, [rbp + 0x220]
mov rbx, qword [0x1401512e0]
mov dword [rbp + 0x220], recv
movss xmm0, dword [rbx + 0x3824]
lea rcx, [rbx + 0x4010]
movss dword [rbp + 0x224], xmm0
call fcn.140017c10
mov dword [rbx + 0x3824], 0x40a00000
lea rdx, [rsp + 0x60]
mov rbx, qword [0x1401512e0]
mov dword [rsp + 0x60], reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rbx + 0x39f8]
lea rcx, [rbx + 0x4000]
movups xmmword [rsp + 0x64], xmm0
call fcn.140017d00
movdqa xmm0, xmmword [0x1400bbd90]
lea rdx, [rsp + 0x60]
movups xmmword [rbx + 0x39f8], xmm0
mov rbx, qword [0x1401512e0]
mov dword [rsp + 0x60], reloc.WLDAP32.dll_Ordinal_22
movups xmm0, xmmword [rbx + 0x3a08]
lea rcx, [rbx + 0x4000]
movups xmmword [rsp + 0x64], xmm0
call fcn.140017d00
movdqa xmm6, xmmword [0x1400bbe20]
lea rdx, [rsp + 0x60]
movups xmmword [rbx + 0x3a08], xmm6
mov rbx, qword [0x1401512e0]
mov dword [rsp + 0x60], reloc.WS2_32.dll_socket
movups xmm0, xmmword [rbx + 0x3a18]
lea rcx, [rbx + 0x4000]
movups xmmword [rsp + 0x64], xmm0
call fcn.140017d00
mov rax, qword [0x1401512e0]
xor edx, edx
movups xmmword [rbx + 0x3a18], xmm6
mov r8d, Ordinal_45
mov rcx, rdi
or dword [rax + 0x3f90], 0x40
mov dword [rax + 0x3ff0], 0x3f666666
call fcn.14000d3e0
mov rcx, qword [0x1401512e0]
movdqa xmm1, xmmword [0x1400bbda0]
movups xmmword [rbp + 0x128], xmm1
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
lea rcx, [rbp + 0x128]
movsd xmm7, qword [rax + 0x18]
movss xmm0, dword [rax + 0x20]
mov rdi, qword [rax + 0x280]
addss xmm0, xmm7
movsd qword [rbp + 0x120], xmm7
movss xmm6, dword [rbp + 0x124]
addss xmm6, dword [0x1400bba34]
movss dword [rbp + 0x140], xmm0
movss dword [rbp + 0x144], xmm6
call fcn.140003600
movss xmm0, dword [0x1400bba00]
lea r8, [rbp + 0x140]
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0x120]
movss dword [rsp + 0x20], xmm0
mov rcx, rdi
call fcn.140022f80
movdqa xmm1, xmmword [0x1400bbbd0]
movdqa xmm0, xmmword [0x1400bbaf0]
lea rcx, [rbp + 0x128]
addss xmm7, dword [0x1400bba38]
movss dword [rbp - 0x34], xmm6
movups xmmword [rbp + 0x128], xmm1
movups xmmword [rbp + 0xf0], xmm0
movss dword [rbp - 0x38], xmm7
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm1
movups xmmword [rsp + 0x60], xmm0
call fcn.140003600
lea rcx, [rbp + 0xf0]
mov ebx, eax
call fcn.140003600
lea rcx, [rbp + 0x100]
mov r11d, eax
call fcn.140003600
lea rcx, [rbp + 0x110]
mov r10d, eax
call fcn.140003600
lea rcx, [rsp + 0x60]
mov r8d, eax
call fcn.140003600
movss xmm0, dword [0x1400bba00]
lea rdx, [rbp + 0x120]
movss dword [rsp + 0x40], xmm0
mov r9d, eax
mov dword [rsp + 0x38], ebx
mov rcx, rdi
mov dword [rsp + 0x30], r11d
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r8d
lea r8, [rbp - 0x38]
call fcn.140023130
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm15
call fcn.140003600
movss xmm6, dword [rbp + 0x120]
mov r8d, eax
movss xmm7, dword [rbp + 0x124]
movaps xmm0, xmm6
mov rcx, qword [0x1401512f0]
movaps xmm1, xmm7
addss xmm0, xmm8
addss xmm1, xmm14
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm1
test eax, 0xff000000
je 0x140033cf4
test rcx, rcx
jne 0x140033ca5
mov rax, qword [rdi + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1400b46e5]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp - 0x80]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm14
lea rax, [0x1400b46e4]
mov rdx, rdi
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
movups xmmword [rsp + 0x60], xmm0
call fcn.140027090
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm15
call fcn.140003600
mov rcx, qword [0x140151300]
movaps xmm0, xmm6
movaps xmm1, xmm7
mov r8d, eax
addss xmm0, dword [0x1400bba30]
addss xmm1, dword [0x1400bba1c]
movss dword [rbp - 0x78], xmm0
movss dword [rbp - 0x74], xmm1
test eax, 0xff000000
je 0x140033d91
test rcx, rcx
jne 0x140033d42
mov rax, qword [rdi + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1400ba2be]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp - 0x78]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm14
lea rax, str.simple
mov rdx, rdi
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
movups xmmword [rsp + 0x60], xmm0
call fcn.140027090
mov rcx, qword [0x1401512e0]
mov rax, qword [rcx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3e90]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1400bba50]
addss xmm0, dword [0x1400bba20]
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
call fcn.140011000
cmp dword [0x140151688], r13d
lea rcx, str.Trigger_Bot
sete dl
call fcn.14002fe30
test al, al
je 0x140033e12
mov edx, r13d
mov dword [0x140151688], edx
jmp 0x140033e18
mov edx, dword [0x140151688]
mov rax, qword [0x1401512e0]
mov rcx, qword [rax + 0x3e90]
cmp byte [rcx + 0x9b], r13b
jne 0x140033e76
movss xmm0, dword [rax + 0x382c]
addss xmm0, dword [rcx + 0xe8]
mov eax, dword [rcx + 0xec]
mov dword [rcx + 0xe4], eax
mov eax, dword [rcx + 0x11c]
mov dword [rcx + 0x118], eax
movss dword [rcx + 0xe0], xmm0
movsd xmm0, qword [rcx + 0x110]
movsd qword [rcx + 0x108], xmm0
mov byte [rcx + 0x120], 1
cmp edx, 1
lea rcx, str.Macro_Strafe
sete dl
call fcn.14002fe30
test al, al
je 0x140033e99
mov edx, 1
mov dword [0x140151688], edx
jmp 0x140033e9f
mov edx, dword [0x140151688]
mov rax, qword [0x1401512e0]
mov rcx, qword [rax + 0x3e90]
cmp byte [rcx + 0x9b], r13b
jne 0x140033efd
movss xmm0, dword [rax + 0x382c]
addss xmm0, dword [rcx + 0xe8]
mov eax, dword [rcx + 0xec]
mov dword [rcx + 0xe4], eax
mov eax, dword [rcx + 0x11c]
mov dword [rcx + 0x118], eax
movss dword [rcx + 0xe0], xmm0
movsd xmm0, qword [rcx + 0x110]
movsd qword [rcx + 0x108], xmm0
mov byte [rcx + 0x120], 1
cmp edx, 2
lea rbx, str.Contact
mov rcx, rbx
sete dl
call fcn.14002fe30
test al, al
je 0x140033f20
mov dword [0x140151688], 2
call fcn.140011130
mov ecx, dword [0x140151688]
test ecx, ecx
je 0x1400342ee
sub ecx, 1
je 0x1400340d5
cmp ecx, 1
jne 0x140034640
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm11
call fcn.140003600
mov rcx, qword [0x1401512f8]
addss xmm6, xmm8
addss xmm7, xmm12
mov r8d, eax
movss dword [rbp - 0x70], xmm6
movss dword [rbp - 0x6c], xmm7
test eax, 0xff000000
je 0x140033fcf
test rcx, rcx
jne 0x140033f87
mov rax, qword [rdi + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1400ba2e7]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp - 0x70]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm13
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov rdx, rdi
mov dword [rsp + 0x20], r8d
movups xmmword [rsp + 0x60], xmm0
call fcn.140027090
mov rbx, qword [0x1401512e0]
lea rcx, str.link_container
xor edx, edx
mov dword [rbp - 0x68], 0x433e0000
mov dword [rbp - 0x64], 0x43898000
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3e90]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, xmm8
addss xmm0, xmm10
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003130
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x140034081
lea r8, str.link_container
mov edx, ntohl
mov ecx, eax
call fcn.1400175a0
lea r8, [rbp - 0x68]
mov edx, edi
lea rcx, str.link_container
call fcn.14000a7a0
lea rdx, [rbp - 0x60]
mov qword [rbp - 0x60], r13
lea rcx, str.Contact_dev
call fcn.14002d280
test al, al
je 0x14003463b
mov dword [rsp + 0x28], 5
lea r8, str.https:__t.me_sampl752
xor r9d, r9d
mov qword [rsp + 0x20], r13
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x14003463b
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm11
call fcn.140003600
mov rcx, qword [0x1401512f8]
addss xmm6, xmm8
addss xmm7, xmm12
mov r8d, eax
movss dword [rbp - 0x58], xmm6
movss dword [rbp - 0x54], xmm7
test eax, 0xff000000
je 0x140034166
test rcx, rcx
jne 0x140034117
mov rax, qword [rdi + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1400ba2dc]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp - 0x58]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm13
lea rax, str.Macro_Strafe
mov rdx, rdi
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
movups xmmword [rsp + 0x60], xmm0
call fcn.140027090
mov rbx, qword [0x1401512e0]
lea rcx, str.macro_container
xor edx, edx
mov dword [rbp - 0x50], 0x433e0000
mov dword [rbp - 0x4c], 0x43898000
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3e90]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, xmm8
addss xmm0, xmm10
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003130
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x140034218
lea r8, str.macro_container
mov edx, ntohl
mov ecx, eax
call fcn.1400175a0
lea r8, [rbp - 0x50]
mov edx, edi
lea rcx, str.macro_container
call fcn.14000a7a0
lea rdx, [0x14015136b]
lea rcx, str.Enable_Macro_Strafe
call fcn.14002e0c0
lea rax, [rbp + 0x128]
mov dword [rbp + 0x128], 0x50
lea r9, [rbp + 0x120]
mov qword [rsp + 0x20], rax
lea r8, [0x140150080]
mov dword [rbp + 0x120], r13d
lea rcx, str.Macro_delay
call fcn.14002e670
cmp byte [0x140151369], r13b
je 0x14003428b
lea rcx, str.Press_any_key...
call fcn.14002ca90
jmp 0x1400342aa
lea rdx, [rbp - 0x48]
mov qword [rbp - 0x48], r13
lea rcx, str.Set_Strafe_Key
call fcn.14002d280
test al, al
je 0x1400342aa
mov byte [0x140151369], 1
mov ecx, dword [str.GT7]
call fcn.140035020
mov rdx, rax
lea rcx, str.Current_Key:__s
call fcn.14002ca90
cmp byte [0x140151368], r13b
lea rax, str.Enabled
lea rdx, str.Disabled
cmovne rdx, rax
lea rcx, str.Trigger_status:__s
call fcn.14002ca90
jmp 0x14003463b
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm11
call fcn.140003600
mov rcx, qword [0x1401512f8]
addss xmm6, xmm8
addss xmm7, xmm12
mov r8d, eax
movss dword [rsp + 0x78], xmm6
movss dword [rsp + 0x7c], xmm7
test eax, 0xff000000
je 0x140034382
test rcx, rcx
jne 0x140034332
mov rax, qword [rdi + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x1400ba2f6]
movss dword [rsp + 0x40], xmm9
lea r9, [rsp + 0x78]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm13
lea rax, str.Trigger_option
mov rdx, rdi
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
movups xmmword [rsp + 0x60], xmm0
call fcn.140027090
mov rbx, qword [0x1401512e0]
lea rcx, str.container
xor edx, edx
mov dword [rbp - 0x40], 0x433e0000
mov dword [rbp - 0x3c], 0x43898000
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3e90]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, xmm8
addss xmm0, xmm10
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003130
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x140034434
lea r8, str.container
mov edx, ntohl
mov ecx, eax
call fcn.1400175a0
lea r8, [rbp - 0x40]
mov edx, edi
lea rcx, str.container
call fcn.14000a7a0
lea rdx, [0x14015136d]
lea rcx, str.Enable_Triggerbot
call fcn.14002e0c0
lea rax, [rbp + 0x120]
mov dword [rbp + 0x120], 0x64
lea r9, [rbp + 0x128]
mov qword [rsp + 0x20], rax
lea r8, [0x14015168c]
mov dword [rbp + 0x128], r13d
lea rcx, str.Reaction_Time
call fcn.14002e670
lea rax, [rbp + 0x120]
mov dword [rbp + 0x120], 0x1f4
lea r9, [rbp + 0x128]
mov qword [rsp + 0x20], rax
lea r8, [0x140150084]
mov dword [rbp + 0x128], r13d
lea rcx, str.Trigger_Delay
call fcn.14002e670
cmp byte [0x14015136c], r13b
je 0x1400344de
lea rcx, str.Press_any_key...
call fcn.14002ca90
jmp 0x140034503
lea rdx, [rbp + 0x230]
mov qword [rbp + 0x230], r13
lea rcx, str.Set_Trigger_Key
call fcn.14002d280
test al, al
je 0x140034503
mov byte [0x14015136c], 1
mov ecx, dword [0x14015007c]
call fcn.140035020
mov rdx, rax
lea rcx, str.Current_Key:__s
call fcn.14002ca90
cmp byte [0x14015136a], r13b
lea rax, str.Enabled
lea rdx, str.Disabled
cmovne rdx, rax
lea rcx, str.Trigger_status:__s
call fcn.14002ca90
call fcn.14000a9a0
mov rbx, qword [0x1401512e0]
lea rcx, str.container1
xor edx, edx
mov dword [rbp + 0x238], 0x433e0000
mov dword [rbp + 0x23c], 0x43898000
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3e90]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x64]
subss xmm0, dword [rax + 0x68]
mov byte [rax + 0x121], 1
addss xmm1, dword [0x1400bba5c]
addss xmm0, xmm10
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xe4], xmm0
mov rax, qword [rbx + 0x3e90]
mov byte [rax + 0x98], 1
mov r8, qword [rbx + 0x3e90]
movsxd rax, dword [r8 + 0xd0]
mov r8, qword [r8 + 0xd8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003130
mov edi, eax
cmp dword [rbx + 0x3ec4], eax
jne 0x140034602
lea r8, str.container1
mov edx, ntohl
mov ecx, eax
call fcn.1400175a0
lea r8, [rbp + 0x238]
mov edx, edi
lea rcx, str.container1
call fcn.14000a7a0
lea rcx, str.__Trigger_delay_:_200_300ms
call fcn.14002ca90
lea rcx, str.__Strafe_Delay_:_200_300ms
call fcn.14002ca90
lea rcx, str.__Panic_:_FIN___END
call fcn.14002ca90
call fcn.14000a9a0
call fcn.14000f700
mov r8, qword [0x1401512e0]
mov r11d, 1
mov eax, dword [r8 + 0x4010]
cmp eax, r11d
jge 0x140034665
mov r11d, eax
test eax, eax
jle 0x1400346d2
mov rdx, qword [r8 + 0x4018]
cdqe
lea rcx, [rax + rax*2]
movsxd rax, dword [rdx + rcx*4 - 0xc]
lea r9, [rax + rax*2]
cmp dword [r14 + r9*4], 8
mov r10d, dword [r14 + r9*4 + 8]
jne 0x1400346bc
mov eax, dword [r14 + r9*4 + 4]
cmp eax, 1
jne 0x14003469f
mov eax, dword [rdx + rcx*4 - 8]
mov dword [r10 + r8 + 0x37e0], eax
jmp 0x1400346bc
cmp eax, 2
jne 0x1400346bc
mov eax, dword [rdx + rcx*4 - 8]
mov dword [r10 + r8 + 0x37e0], eax
mov eax, dword [rdx + rcx*4 - 4]
mov dword [r10 + r8 + 0x37e4], eax
dec dword [r8 + 0x4010]
dec r11d
mov eax, dword [r8 + 0x4010]
test r11d, r11d
jg 0x140034665
movsxd rax, dword [r8 + 0x4000]
lea rdi, str.simple
cmp eax, 1
jl 0x14003470d
mov rcx, qword [r8 + 0x4008]
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x38a8], xmm0
dec dword [r8 + 0x4000]
call fcn.14000a010
lea rcx, [rbp + 0x210]
call fcn.140037700
mov rcx, qword [rbp + 0x138]
lea r8, [rbp + 0x158]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x2f0], xmm0
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [rbp + 0x138]
lea r8, [rbp + 0x2f0]
mov rdx, qword [rbp + 0x158]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rax, qword [0x1401512e0]
mov rcx, qword [rax + 0x4090]
mov rax, qword [rcx]
mov rcx, r13
add rax, 0x48
cmp byte [rax], r13b
cmovne rcx, rax
call fcn.140028580
mov rcx, qword [rbp + 0x148]
xor r8d, r8d
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x40]
test sil, sil
jne 0x140033740
mov rdi, qword [0x1401512e0]
movaps xmm15, xmmword [rsp + 0x430]
test rdi, rdi
je 0x1400347c5
mov rbx, qword [rdi + 0xa0]
jmp 0x1400347c8
mov rbx, r13
call fcn.140029530
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400347dc
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400347ea
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400347f9
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x1401512e0]
mov qword [rdi + 0x90], r13
mov qword [rdi + 0xa0], r13
test rax, rax
je 0x140034819
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1401512e0]
test rax, rax
je 0x140034837
mov rbx, qword [rax + 0x98]
jmp 0x14003483a
mov rbx, r13
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x140034854
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1401512e0]
mov qword [rdi + 0x80], r13
mov qword [rdi + 0x90], r13
test rax, rax
je 0x14003486d
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1401512e0]
mov qword [0x1401512e0], rbx
call fcn.140008a50
mov qword [0x1401512e0], r13
test rbx, rbx
je 0x1400348b8
mov rcx, rbx
call fcn.140018740
mov rax, qword [0x1401512e0]
test rax, rax
je 0x1400348af
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp + 0x148]
test rcx, rcx
je 0x1400348ca
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x138]
test rcx, rcx
je 0x1400348dc
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x150]
test rcx, rcx
je 0x1400348ee
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x158]
test rcx, rcx
je 0x140034900
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, r12
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x1d8]
mov rcx, qword [rbp + 0x200]
call qword [sym.imp.USER32.dll_UnregisterClassW]
cmp dword [rbp + 0x288], r13d
jne 0x1400349d9
cmp dword [rbp + 0x298], r13d
jne 0x1400349d9
mov rdx, qword [rbp + 0x258]
cmp rdx, 0xf
jbe 0x140034978
mov rcx, qword [rbp + 0x240]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034973
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034aa0
call fcn.1400a0e40
mov rdx, qword [rbp + 0x2b8]
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x240], r13b
cmp rdx, 0xf
jbe 0x1400349d2
mov rcx, qword [rbp + 0x2a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400349cd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034aa0
call fcn.1400a0e40
xor eax, eax
jmp 0x140034ab1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x288], r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x298], r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov rdx, qword [rbp + 0x258]
cmp rdx, 0xf
jbe 0x140034a4f
mov rcx, qword [rbp + 0x240]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034a4a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034aa0
call fcn.1400a0e40
mov rdx, qword [rbp + 0x2b8]
mov qword [rbp + 0x250], r13
mov qword [rbp + 0x258], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x240], r13b
cmp rdx, 0xf
jbe 0x140034aac
mov rcx, qword [rbp + 0x2a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034aa7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034aa7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a0e40
mov eax, 1
movaps xmm13, xmmword [rsp + 0x450]
movaps xmm12, xmmword [rsp + 0x460]
movaps xmm11, xmmword [rsp + 0x470]
movaps xmm10, xmmword [rsp + 0x480]
movaps xmm9, xmmword [rsp + 0x490]
movaps xmm8, xmmword [rsp + 0x4a0]
mov r15, qword [rsp + 0x4d0]
mov r14, qword [rsp + 0x4d8]
mov r12, qword [rsp + 0x518]
movaps xmm14, xmmword [rsp + 0x440]
movaps xmm6, xmmword [rsp + 0x4c0]
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.1400a0d50
movaps xmm7, xmmword [rsp + 0x4b0]
add rsp, 0x4e0
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret