Function at 0x140046f90
Capabilities:
Get disk information
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x550]
sub rsp, 0x650
mov rax, qword [0x14008d010]
xor rax, rsp
mov qword [rbp + 0x540], rax
xor edi, edi
mov dword [rsp + 0x38], 0x105
lea rax, [rbp + 0x320]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x84]
mov r8d, 0x105
lea rdx, [rbp + 0x430]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14004703f
mov eax, dword [rbp + 0x80]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp + 0x84]
lea r8, str._08X__04X
mov edx, 0x100
lea rcx, [rbp + 0x220]
call fcn.1400406d0
lea rdx, [0x14008d0f0]
lea rcx, [rbp + 0xb0]
call fcn.14003cca0
nop
lea r8, str.USERNAME
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x48]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
mov rbx, qword [rbp + 0x48]
lea rax, [rbp + 0x220]
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140047080
mov rdx, qword [0x14008d100]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, rcx
jb 0x14004810f
lea rax, [0x14008d0f0]
cmp qword [0x14008d108], 0x10
cmovae rax, qword [0x14008d0f0]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x220]
lea r8, [0x14008d0f0]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.14003f0d0
nop
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], 0
jne 0x1400470f0
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.14004cb70
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140047168
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047163
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047163
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140057bec
movdqa xmm0, xmmword [0x140081a20]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov r13, qword [rbp + 0xc8]
mov qword [rbp + 0x78], r13
mov rbx, qword [rbp + 0xb0]
mov qword [rsp + 0x48], rbx
mov r15, qword [rbp + 0xa0]
mov qword [rsp + 0x70], r15
mov r14, qword [rbp + 0x88]
mov qword [rsp + 0x60], r14
cmp byte [0x14008e1ec], 0
jne 0x140047c1d
mov rax, qword [0x14008e0b0]
or dword [rax + 0x47d0], 2
mov dword [rax + 0x47f0], 0x43960000
mov dword [rax + 0x47f4], 0x42c80000
mov dword [rax + 0x47d8], 1
xor edx, edx
lea r8d, [rdx + 0x61]
lea rcx, str.Login
call fcn.14000d6f0
lea rcx, str.SIGMA_SOLUTIONS
call fcn.140033150
mov rcx, qword [0x14008e0b0]
mov rax, qword [rcx + 0x3ef8]
cmp byte [rax + 0xbb], 0
jne 0x140047237
mov eax, dword [rax + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1400818c4]
call fcn.140034ea0
mov rcx, qword [0x14008e0b0]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
cmp byte [rax + 0xbb], 0
jne 0x140047275
mov qword [rbp + 0x50], 0
movss xmm1, dword [0x1400819bc]
lea rcx, [rbp + 0x50]
call fcn.140012c50
mov rcx, qword [0x14008e0b0]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
cmp byte [rax + 0xbb], 0
jne 0x1400472ac
mov qword [rbp + 0x50], 0
movss xmm1, dword [0x1400819bc]
lea rcx, [rbp + 0x50]
call fcn.140012c50
lea rcx, str.Enter_Key:
call fcn.140033150
movss xmm1, dword [0x1400819bc]
xorps xmm0, xmm0
call fcn.140012f70
mov qword [rbp + 0x50], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea rsi, [0x14008e0d0]
mov r8, rsi
xor edx, edx
lea rcx, [0x14007fc00]
call fcn.140038210
mov edx, 0x20d
mov rcx, qword [0x14008e0b0]
call fcn.140010580
sub rax, qword [0x14008e0b0]
lea rcx, [rax - 0xe2c]
sar rcx, 4
xor edx, edx
lea r8d, [rdx + 1]
call fcn.140010c70
test al, al
je 0x140047ae4
mov r13, qword [0x14008e2a0]
mov r12, qword [0x14008e2a8]
mov r15, qword [rbp + 0xc0]
cmp r13, r12
je 0x1400475ba
lea rdi, [r13 + 0x38]
nop dword [rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], 0
jne 0x140047367
mov r8, qword [rdi - 8]
lea r14, [rdi - 0x18]
mov rcx, r14
cmp qword [rdi], 0x10
jb 0x140047384
mov rcx, qword [r14]
cmp r8, rax
jne 0x1400475a3
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400475a3
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xor eax, eax
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], rax
lea rsi, [rbp + 0xb0]
cmp qword [rbp + 0x78], 0x10
cmovae rsi, rbx
movabs rcx, 0x7fffffffffffffff
cmp r15, rcx
ja 0x140047dfa
mov qword [rbp + 0x70], 0xf
cmp r15, 0x10
jae 0x1400473ef
mov qword [rbp + 0x68], r15
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x58], xmm0
jmp 0x14004747d
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x14004740e
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140047435
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140047457
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140048115
mov rcx, rax
call fcn.140057f98
mov rcx, rax
test rax, rax
je 0x140047c3e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140047461
test rcx, rcx
je 0x140047461
call fcn.140057f98
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], rbx
lea r8, [r15 + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rbx, [rdi + 8]
lea r9, [rbp + 0x58]
mov r8, rbx
call fcn.140044a40
test al, al
je 0x14004751f
mov rcx, rbx
call fcn.140045520
lea rdx, str.Message_updated:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004d220
cmp qword [rdi + 0x20], 0x10
jb 0x1400474ba
mov rbx, qword [rbx]
mov r8, qword [rdi + 0x18]
mov rdx, rbx
mov rcx, rax
call fcn.14004e410
lea rdx, [0x14004d3f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x220]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1400474e7
mov r8, qword [rdi - 8]
cmp qword [rdi], 0x10
jb 0x1400474fd
mov r14, qword [r14]
cmp r8, rax
jne 0x140047e00
lea rdx, [rbp + 0x220]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140047e00
jmp 0x14004755c
lea rdx, str.Failed_to_update_messae:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004d220
cmp qword [rdi + 0x20], 0x10
jb 0x14004753c
mov rbx, qword [rbx]
mov r8, qword [rdi + 0x18]
mov rdx, rbx
mov rcx, rax
call fcn.14004e410
lea rdx, [0x14004d3f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x140047597
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047592
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047c3e
call fcn.140057bec
lea rsi, [0x14008e0d0]
mov rbx, qword [rsp + 0x48]
add r13, 0x140
add rdi, 0x140
cmp r13, r12
jne 0x140047360
mov r14, qword [0x14008e228]
mov r12, qword [0x14008e230]
cmp r14, r12
je 0x140047848
lea rdi, [r14 + 0xd8]
nop dword [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], 0
jne 0x1400475e7
mov r8, qword [rdi - 8]
lea rcx, [rdi - 0x18]
cmp qword [rdi], 0x10
jb 0x140047601
mov rcx, qword [rcx]
cmp r8, rax
jne 0x14004782b
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14004782b
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xor eax, eax
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], rax
lea rsi, [rbp + 0xb0]
cmp qword [rbp + 0x78], 0x10
cmovae rsi, rbx
movabs rcx, 0x7fffffffffffffff
cmp r15, rcx
ja 0x140047dfa
mov qword [rbp + 0x70], 0xf
cmp r15, 0x10
jae 0x14004766c
mov qword [rbp + 0x68], r15
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x58], xmm0
jmp 0x1400476fa
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x14004768b
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400476b2
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400476d4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140048115
mov rcx, rax
call fcn.140057f98
mov rcx, rax
test rax, rax
je 0x140047c3e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400476de
test rcx, rcx
je 0x1400476de
call fcn.140057f98
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], rbx
lea r8, [r15 + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rbx, [rdi + 8]
lea r9, [rbp + 0x58]
mov r8, rbx
lea rdx, [0x14008d0d0]
lea rcx, [0x14008d050]
call fcn.140044fc0
test al, al
je 0x1400477ac
mov rcx, rbx
call fcn.140045c00
lea rdx, str.Message_updated:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004d220
cmp qword [rdi + 0x20], 0x10
jb 0x140047745
mov rbx, qword [rbx]
mov r8, qword [rdi + 0x18]
mov rdx, rbx
mov rcx, rax
call fcn.14004e410
lea rdx, [0x14004d3f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x220]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140047772
mov r8, qword [rdi + 0x38]
lea rcx, [rdi + 0x28]
cmp qword [rdi + 0x40], 0x10
jb 0x14004778d
mov rcx, qword [rcx]
cmp r8, rax
jne 0x140047ef9
lea rdx, [rbp + 0x220]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140047ef9
jmp 0x1400477e9
lea rdx, str.Failed_to_update_messae:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004d220
cmp qword [rdi + 0x20], 0x10
jb 0x1400477c9
mov rbx, qword [rbx]
mov r8, qword [rdi + 0x18]
mov rdx, rbx
mov rcx, rax
call fcn.14004e410
lea rdx, [0x14004d3f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x140047824
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004781f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047c3e
call fcn.140057bec
lea rsi, [0x14008e0d0]
add r14, 0x140
add rdi, 0x140
cmp r14, r12
je 0x140047848
mov rbx, qword [rsp + 0x48]
jmp 0x1400475e0
mov r13, qword [0x14008e260]
mov r12, qword [0x14008e268]
cmp r13, r12
je 0x140047ad6
lea rdi, [r13 + 0x110]
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], 0
jne 0x140047877
mov r8, qword [rdi]
lea r14, [rdi - 0x10]
mov rcx, r14
cmp qword [rdi + 8], 0x10
jb 0x140047894
mov rcx, qword [r14]
cmp r8, rax
jne 0x140047abf
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140047abf
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xor eax, eax
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], rax
lea rsi, [rbp + 0xb0]
cmp qword [rbp + 0x78], 0x10
cmovae rsi, qword [rsp + 0x48]
movabs rcx, 0x7fffffffffffffff
cmp r15, rcx
ja 0x140047dfa
mov qword [rbp + 0x70], 0xf
cmp r15, 0x10
jae 0x140047901
mov qword [rbp + 0x68], r15
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x58], xmm0
jmp 0x14004798f
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140047920
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140047947
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140047969
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140048115
mov rcx, rax
call fcn.140057f98
mov rcx, rax
test rax, rax
je 0x140047c3e
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140047973
test rcx, rcx
je 0x140047973
call fcn.140057f98
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x70], rbx
lea r8, [r15 + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rbx, [rdi + 0x10]
lea r9, [rbp + 0x58]
mov r8, rbx
lea rdx, [0x14008d110]
lea rcx, [0x14008d190]
call fcn.140044fc0
test al, al
je 0x140047a3f
mov rcx, rbx
call fcn.1400462e0
lea rdx, str.Message_updated:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004d220
cmp qword [rdi + 0x28], 0x10
jb 0x1400479da
mov rbx, qword [rbx]
mov r8, qword [rdi + 0x20]
mov rdx, rbx
mov rcx, rax
call fcn.14004e410
lea rdx, [0x14004d3f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x220]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140047a07
mov r8, qword [rdi]
cmp qword [rdi + 8], 0x10
jb 0x140047a1d
mov r14, qword [r14]
cmp r8, rax
jne 0x140048004
lea rdx, [rbp + 0x220]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140048004
jmp 0x140047a7d
lea rdx, str.Failed_to_update_messae:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004d220
lea rdx, [rdi - 0x30]
cmp qword [rdi - 0x18], 0x10
jb 0x140047a60
mov rdx, qword [rdx]
mov r8, qword [rdi - 0x20]
mov rcx, rax
call fcn.14004e410
lea rdx, [0x14004d3f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x140047ab8
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047ab3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047c3e
call fcn.140057bec
lea rsi, [0x14008e0d0]
add r13, 0x140
add rdi, 0x140
cmp r13, r12
jne 0x140047870
mov r13, qword [rbp + 0x78]
mov r15, qword [rsp + 0x70]
mov r14, qword [rsp + 0x60]
mov rsi, qword [0x14008e340]
mov rbx, qword [0x14008e338]
mov rdi, qword [rbp + 0x98]
cmp rbx, rsi
je 0x140047b4b
nop
lea rdx, [rbp + 0x88]
cmp r15, 0x10
cmovae rdx, r14
mov r8, qword [rbx + 0x90]
lea rcx, [rbx + 0x80]
cmp qword [rbx + 0x98], 0x10
jb 0x140047b2a
mov rcx, qword [rcx]
cmp r8, rdi
jne 0x140047b3f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140047b3f
mov byte [0x14008e1ec], 1
add rbx, 0x140
cmp rbx, rsi
jne 0x140047b00
mov rsi, qword [0x14008e2e0]
mov rbx, qword [0x14008e2d8]
cmp rbx, rsi
je 0x140047bab
nop
lea rdx, [rbp + 0x88]
cmp r15, 0x10
cmovae rdx, r14
mov r8, qword [rbx + 0x90]
lea rcx, [rbx + 0x80]
cmp qword [rbx + 0x98], 0x10
jb 0x140047b8a
mov rcx, qword [rcx]
cmp r8, rdi
jne 0x140047b9f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140047b9f
mov byte [0x14008e1ec], 1
add rbx, 0x140
cmp rbx, rsi
jne 0x140047b60
mov rsi, qword [0x14008e358]
mov rbx, qword [0x14008e350]
cmp rbx, rsi
je 0x140047c0b
nop
lea rdx, [rbp + 0x88]
cmp r15, 0x10
cmovae rdx, r14
mov r8, qword [rbx + 0x90]
lea rcx, [rbx + 0x80]
cmp qword [rbx + 0x98], 0x10
jb 0x140047bea
mov rcx, qword [rcx]
cmp r8, rdi
jne 0x140047bff
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140047bff
mov byte [0x14008e1ec], 1
add rbx, 0x140
cmp rbx, rsi
jne 0x140047bc0
call fcn.14000f9a0
cmp byte [0x14008e1ec], 0
je 0x140047d53
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140047c45
cmp byte [0x14008d04c], 0
sete al
mov byte [0x14008d04c], al
jmp 0x140047c4c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movzx eax, byte [0x14008d04c]
test al, al
je 0x140047d53
mov rax, qword [0x14008e0b0]
or dword [rax + 0x47d0], 2
mov dword [rax + 0x47f0], 0x43c80000
mov dword [rax + 0x47f4], 0x43480000
mov dword [rax + 0x47d8], 1
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, str.Menu
call fcn.14000d6f0
lea rdx, [0x14008e0ab]
lea rcx, str.DoTheSeeThruWallsPlease
call fcn.140034660
lea rdx, [0x14008e0a9]
lea rcx, str.DoTheAimlock
call fcn.140034660
lea rdx, [0x14008e0aa]
lea rcx, str.TransgenderCircle
call fcn.140034660
mov rax, qword [0x14008e0b0]
mov rcx, qword [rax + 0x3ef8]
cmp byte [rcx + 0xbb], 0
jne 0x140047d2d
movss xmm1, dword [rax + 0x381c]
addss xmm1, dword [rcx + 0x108]
movss xmm0, dword [rcx + 0x10c]
movss dword [rcx + 0x100], xmm1
movss dword [rcx + 0x104], xmm0
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov dword [rbp + 0x50], 0x42c80000
mov dword [rbp + 0x78], 0
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x78]
call fcn.1400354e0
call fcn.14000f9a0
nop
cmp r15, 0x10
jb 0x140047d8e
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140047d85
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047d85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140057bec
nop
cmp r13, 0x10
jb 0x140047dca
lea rdx, [r13 + 1]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047dc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047dc5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140057bec
mov rcx, qword [rbp + 0x540]
xor rcx, rsp
call fcn.140057980
lea r11, [rsp + 0x650]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14003cba0
nop
lea rcx, [rbp + 0xe0]
call fcn.140048590
lea rdx, str.content
lea rcx, [rbp - 0x40]
call fcn.14003e3c0
nop
lea r8, [rbp + 0x88]
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.1400415d0
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x70]
call fcn.14004c5e0
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x60]
call fcn.140052b90
mov rbx, rax
lea rdx, str.https:__discord.com_api_webhooks_1158567993907888169_UGeDbr2RL7d0uBUqihu32zAgYY8tvA1zmc4OZjj8_Y59nFgvpCBcK7A7MWive9iW7R_s
lea rcx, [rbp - 0x80]
call fcn.14003e3c0
nop
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x48]
call fcn.14004c5e0
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.1400414a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.14004d430
nop
lea rcx, [rbp + 0x20]
call fcn.140041560
nop
lea r9, [fcn.14003cc40]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rbp - 0x80]
call fcn.140057b1c
nop
lea rcx, [rbp - 0x60]
call fcn.1400481d0
nop
lea r9, [fcn.140048120]
mov edx, 0x40
lea r8d, [rdx - 0x3f]
lea rcx, [rbp - 0x20]
call fcn.140057b1c
nop
lea rcx, [rbp - 0x40]
call fcn.14003cc40
call fcn.140046ee0
nop
lea rcx, [rbp - 0x60]
call fcn.140044070
lea rcx, [rbp - 0x60]
call fcn.14003cc40
lea rcx, [rbp + 0xe0]
call fcn.140048590
lea rdx, str.content
lea rcx, [rbp - 0x40]
call fcn.14003e3c0
nop
lea r8, [rbp + 0x88]
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.1400415d0
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x70]
call fcn.14004c5e0
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x60]
call fcn.140052b90
mov rbx, rax
lea rdx, str.https:__discord.com_api_webhooks_1158568125760012351_NRU_cLWTnTQk_VaWW5kJSVgxtHMuCTZ7_2x_dvOZ4WXR1_TqEBbhFxvwhZ9swDeqINSj
lea rcx, [rbp - 0x80]
call fcn.14003e3c0
nop
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x48]
call fcn.14004c5e0
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.1400414a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.14004d430
nop
lea rcx, [rbp + 0x20]
call fcn.140041560
nop
lea r9, [fcn.14003cc40]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rbp - 0x80]
call fcn.140057b1c
nop
lea rcx, [rbp - 0x60]
call fcn.1400481d0
nop
lea r9, [fcn.140048120]
mov edx, 0x40
lea r8d, [rdx - 0x3f]
lea rcx, [rbp - 0x20]
call fcn.140057b1c
nop
lea rcx, [rbp - 0x40]
call fcn.14003cc40
call fcn.140046ee0
nop
lea rcx, [rbp - 0x60]
call fcn.1400439f0
lea rcx, [rbp - 0x60]
call fcn.14003cc40
lea rcx, [rbp + 0xe0]
call fcn.140048590
lea rdx, str.content
lea rcx, [rbp - 0x40]
call fcn.14003e3c0
nop
lea r8, [rbp + 0x88]
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.1400415d0
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x70]
call fcn.14004c5e0
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x60]
call fcn.140052b90
mov rbx, rax
lea rdx, str.https:__discord.com_api_webhooks_1158567880032522301_hw7wgwy_oglBU_rXm4APZ1BE_nsy1UXJQw7k2TqkCrqctPm1qUR1NdqbUroJc9_83Ulu
lea rcx, [rbp - 0x80]
call fcn.14003e3c0
nop
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x48]
call fcn.14004c5e0
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.1400414a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.14004d430
nop
lea rcx, [rbp + 0x20]
call fcn.140041560
nop
lea r9, [fcn.14003cc40]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rbp - 0x80]
call fcn.140057b1c
nop
lea rcx, [rbp - 0x60]
call fcn.1400481d0
nop
lea r9, [fcn.140048120]
mov edx, 0x40
lea r8d, [rdx - 0x3f]
lea rcx, [rbp - 0x20]
call fcn.140057b1c
nop
lea rcx, [rbp - 0x40]
call fcn.14003cc40
call fcn.140046ee0
nop
call fcn.14003cba0
nop
call fcn.14003cb00
int3