Function at 0x140550110
Capabilities:
Check mutex on windows
Check os version
Create thread
Encode data using xor
Enumerate processes
Hash data using fnv
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm15
mov rax, qword [0x1406dc5c0]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1405501a2
mov byte [0x1406ddda9], 0
mov rcx, qword [0x1406dd888]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1405501cd
mov byte [0x1406ddda9], 1
mov rcx, qword [0x1406ddb60]
mov rcx, qword [rcx + 0x110]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
cmp byte [0x1406ddda8], 0
je 0x1405501e4
mov byte [0x1406ddda9], 1
mov byte [0x1406ddda8], 0
xor edi, edi
lea r13d, [rdi + 1]
cmp byte [reloc.WS2_32.dll_accept], dil
je 0x140550257
mov rax, qword [0x1406dd860]
or dword [rax + 0x40f0], r13d
mov dword [rax + 0x4104], 0x42c80000
mov qword [rax + 0x4108], 0x42c80000
mov dword [rax + 0x4110], edi
mov dword [rax + 0x40f4], r13d
mov byte [rax + 0x412c], r13b
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x1406de028], xmm0
movups xmmword [0x1406de038], xmm0
movups xmmword [0x1406de048], xmm0
mov word [0x1406de058], ax
call fcn.140552a50
mov byte [reloc.WS2_32.dll_accept], dil
mov rbx, qword [0x1406ddb60]
lea rdx, [rbx + 0x120]
cmp qword [rdx + 0x18], 0x10
jb 0x14055026f
mov rdx, qword [rdx]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x140550288
mov byte [rbx + 0x170], dil
jmp 0x14055036d
cmp dword [0x1406dd83c], 0xa
jne 0x14055036d
mov rdx, qword [0x1406ddb60]
mov eax, dword [rdx + 0x164]
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov eax, dword [rdx + 0x160]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mov r8, qword [0x1406dd860]
or dword [r8 + 0x40f0], r13d
movss dword [r8 + 0x4104], xmm0
movss dword [r8 + 0x4108], xmm1
mov qword [r8 + 0x410c], rdi
mov dword [r8 + 0x40f4], r13d
mov byte [r8 + 0x412c], r13b
mov eax, dword [rdx + 0x16c]
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mov eax, dword [rdx + 0x168]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
or dword [r8 + 0x40f0], 2
movss dword [r8 + 0x4114], xmm0
movss dword [r8 + 0x4118], xmm1
mov dword [r8 + 0x40f8], r13d
xor edx, edx
mov r8d, 0xc038f
lea rcx, str.Overlay
call fcn.140577c90
mov rcx, qword [0x1406dd860]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], r13b
mov rax, qword [rcx + 0x3fe0]
mov rcx, qword [rax + 0x2c0]
mov qword [0x1406dd848], rcx
call fcn.14057ab20
lea r8, str.GamingAET_mutex
mov edx, r13d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rbp - 0x60], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r12, [0x1406dc638]
cmp eax, 0xb7
jne 0x140550445
mov r8d, Ordinal_26
lea rdx, str.Hack_was_already_running
mov rcx, r12
call fcn.14054ed20
mov dword [0x1406dd83c], edi
mov byte [0x1406ddf26], r13b
mov ecx, 8
call fcn.14063c358
lea rcx, [rbp - 0x60]
mov qword [rax], rcx
mov qword [rbp - 0x50], rax
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140558140]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140550436
cmp dword [rbp - 0x18], 0
jne 0x14055040c
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x14055042c
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x20], xmm0
jmp 0x14055044f
mov dword [rbp - 0x18], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm15, xmm15
movss xmm10, dword [0x1406c0ce8]
mov eax, dword [0x1406dd83c]
cmp eax, 0xa
jge 0x14055172c
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
mov r8d, 7
lea rdx, str.DUN.log
lea rcx, [rsp + 0x48]
call fcn.14054ed20
nop
lea rcx, [rsp + 0x48]
call fcn.14055a330
mov ecx, 0x10e
mov r14d, 0x136
test al, al
cmovne r14d, ecx
lea rcx, [rsp + 0x48]
call fcn.14054ecc0
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov ecx, 0x2d8
mov eax, dword [rcx + rsi]
mov ebx, 0x454
test al, 1
jne 0x140550503
or eax, 1
mov dword [rcx + rsi], eax
mov word [rbx + rsi + 5], 0x153
mov dword [rbx + rsi], 0xfc7a7453
mov byte [rbx + rsi + 4], 0x43
lea rcx, [0x140642c20]
call fcn.14063c804
nop
lea rcx, [rbx + rsi]
cmp byte [rcx + 6], 0
je 0x140550528
xor byte [rcx], 0x1f
xor byte [rcx + 1], 0x1b
xor byte [rcx + 2], 0x1d
xor byte [rcx + 3], 0x95
xor byte [rcx + 4], 0x2d
xor byte [rcx + 5], 0x53
mov byte [rcx + 6], 0
xor edx, edx
mov r8d, 0x1ab
call fcn.140577c90
call fcn.14056e350
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 1]
mov rcx, qword [rax + 0xc8]
call qword [sym.imp.USER32.dll_SetWindowPos]
movaps xmm6, xmmword [0x1406c1a30]
mov rbx, qword [0x1406dd860]
mov dword [rbp - 0x40], 3
movups xmm0, xmmword [rbx + 0x3a00]
movups xmmword [rbp - 0x3c], xmm0
lea rcx, [rbx + 0x4180]
lea rdx, [rbp - 0x40]
call fcn.1405975c0
movups xmmword [rbx + 0x3a00], xmm6
movss xmm0, dword [0x1406c0f78]
movss dword [rsp + 0x40], xmm0
movd xmm1, r14d
cvtdq2ps xmm1, xmm1
movss dword [rsp + 0x44], xmm1
mov dword [rbp - 0x50], 0xf45f22d8
mov dword [rbp - 0x4c], 0xcaf6a00
mov dword [rbp - 0x48], 0xff7f6893
mov ecx, 0x278
mov eax, dword [rcx + rsi]
mov ebx, 0x2e8
test al, 1
jne 0x140550607
or eax, 1
mov dword [rcx + rsi], eax
mov word [rbx + rsi + 0xc], 0x167
movsd xmm0, qword [rbp - 0x50]
movsd qword [rbx + rsi], xmm0
mov eax, dword [rbp - 0x48]
mov dword [rbx + rsi + 8], eax
lea rcx, [0x140642c00]
call fcn.14063c804
nop
add rbx, rsi
cmp byte [rbx + 0xd], 0
je 0x14055063f
mov rdx, rdi
movabs r8, 0x4fc103679b1301fb
nop dword [rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + rbx], al
inc rdx
cmp rdx, 0xd
jb 0x140550620
mov byte [rbx + 0xd], 0
mov rcx, qword [0x1406dd860]
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rdx, rbx
mov rcx, qword [rcx + 0x3fe0]
call fcn.14056d830
mov edx, eax
mov dword [rsp + 0x20], edi
xor r9d, r9d
lea r8, [rsp + 0x40]
mov rcx, rbx
call fcn.1405746c0
mov ecx, r13d
call fcn.14056b630
lea eax, [r14 - 0x96]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x1406c0d38]
mov rbx, qword [0x1406dd860]
mov rax, qword [rbx + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rbx + 0x3fe0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rbx + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rbx + 0x3fe0]
movss xmm1, dword [rax + 0x48]
subss xmm1, dword [rax + 0x98]
addss xmm1, dword [0x1406c0f34]
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
movaps xmm6, xmmword [0x1406c1ba0]
mov dword [rbp - 0x40], 3
movups xmm0, xmmword [rbx + 0x3a00]
movups xmmword [rbp - 0x3c], xmm0
lea rcx, [rbx + 0x4180]
lea rdx, [rbp - 0x40]
call fcn.1405975c0
movups xmmword [rbx + 0x3a00], xmm6
movaps xmm0, xmmword [0x1406c1750]
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x70], xmm1
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x44], 0x3f800000
mov qword [rsp + 0x68], 0
mov dword [rbp - 0x50], 0x43160000
mov dword [rbp - 0x4c], 0x43160000
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
mov r8d, 0xa
lea rdx, str.GamingLogo
lea rcx, [rsp + 0x48]
call fcn.14054ed20
nop
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0x10
cmovae rdx, qword [rsp + 0x48]
movabs r14, 0xcbf29ce484222325
mov r9, r14
mov rcx, rdi
movabs r15, 0x100000001b3
mov r8, qword [rsp + 0x58]
test r8, r8
je 0x140550813
nop word [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r15
inc rcx
cmp rcx, r8
jb 0x140550800
lea r8, [rsp + 0x48]
lea rdx, [rbp - 0x40]
call fcn.1405d04d0
mov rcx, qword [rax + 8]
mov rdx, qword [0x1406dde08]
test rcx, rcx
cmovne rdx, rcx
cmp rdx, qword [0x1406dde08]
jne 0x140550841
mov rcx, rdi
jmp 0x140550849
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x28]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x68]
lea rdx, [rbp - 0x50]
call fcn.1405b5cb0
nop
lea rcx, [rsp + 0x48]
call fcn.14054ecc0
mov r8, qword [0x1406dd860]
mov rax, qword [r8 + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [r8 + 0x3fe0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm15
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [r8 + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [r8 + 0x3fe0]
movss xmm1, dword [rax + 0x48]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm15
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
movss xmm13, dword [0x1406c100c]
test r8, r8
jne 0x14055092b
movaps xmm0, xmm13
movss dword [rsp + 0x40], xmm0
movaps xmm2, xmm13
movss dword [rsp + 0x44], xmm2
jmp 0x14055094d
mov rax, qword [r8 + 0x3fe0]
movsd xmm1, qword [rax + 0x48]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movaps xmm2, xmm0
movsd qword [rsp + 0x40], xmm1
movss xmm0, dword [rsp + 0x40]
addss xmm0, dword [0x1406c0f7c]
movss dword [rbp - 0x50], xmm0
movss dword [rbp - 0x4c], xmm2
movaps xmm0, xmmword [0x1406c1b90]
movups xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call fcn.14056ac70
mov rcx, qword [r8 + 0x3fe0]
mov byte [rcx + 0xcd], 1
mov rcx, qword [r8 + 0x3fe0]
movss xmm0, dword [0x1406c0ea4]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x50]
lea rdx, [rsp + 0x40]
mov rcx, qword [rcx + 0x2c0]
call fcn.1405a3240
mov ecx, r13d
call fcn.14056b630
mov rcx, qword [0x1406dd880]
call fcn.14057b790
mov rcx, qword [0x1406dd860]
mov rax, qword [rcx + 0x3fe0]
movss xmm0, dword [rax + 0x11c]
subss xmm0, dword [rax + 0x4c]
addss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1406c0f00]
mov byte [rax + 0xcd], 1
mov rax, qword [rcx + 0x3fe0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rcx + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rcx + 0x3fe0]
movss xmm1, dword [rax + 0x48]
subss xmm1, dword [rax + 0x98]
addss xmm1, dword [0x1406c0f00]
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov dword [rbp - 0x50], 0xb4b59398
mov dword [rbp - 0x4c], 0x213adc7a
mov dword [rbp - 0x48], 0xbd4b7857
mov ecx, 0x27c
mov eax, dword [rcx + rsi]
mov ebx, 0x2a8
test al, 1
jne 0x140550abd
or eax, 1
mov dword [rcx + rsi], eax
mov byte [rbx + rsi + 0xc], 1
movsd xmm0, qword [rbp - 0x50]
movsd qword [rbx + rsi], xmm0
mov eax, dword [rbp - 0x48]
mov dword [rbx + rsi + 8], eax
lea rcx, [0x140642be0]
call fcn.14063c804
nop
lea r8, [rbx + rsi]
cmp byte [r8 + 0xc], 0
je 0x140550b01
mov rdx, rdi
movabs r9, 0x4f5db529bd251177
nop word [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r9
shr rax, cl
xor byte [r8 + rdx], al
inc rdx
cmp rdx, 0xc
jb 0x140550ae0
mov byte [r8 + 0xc], 0
mov rcx, r8
call fcn.1405b3c00
call fcn.14057b850
mov rbx, qword [0x1406dd860]
mov rax, qword [rbx + 0x3fe0]
movss xmm0, dword [rax + 0x11c]
subss xmm0, dword [rax + 0x4c]
addss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1406c0f14]
mov byte [rax + 0xcd], 1
mov rax, qword [rbx + 0x3fe0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rbx + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rbx + 0x3fe0]
movss xmm1, dword [rax + 0x48]
subss xmm1, dword [rax + 0x98]
movss xmm7, dword [0x1406c0f1c]
addss xmm1, xmm7
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
or dword [rbx + 0x409c], 1
mov dword [rbx + 0x40a0], 0x43660000
lea rcx, [rbx + 0x4190]
movss xmm1, dword [rbx + 0x3944]
movss xmm0, dword [rbx + 0x3948]
mov dword [rbp - 0x50], ntohs
movss dword [rbp - 0x4c], xmm1
movss dword [rbp - 0x48], xmm0
lea rdx, [rbp - 0x50]
call fcn.1405974c0
mov dword [rbx + 0x3944], edi
mov dword [rbx + 0x3948], 0x40e00000
movaps xmm6, xmmword [0x1406c17d0]
mov rbx, qword [0x1406dd860]
mov dword [rbp - 0x40], 7
movups xmm0, xmmword [rbx + 0x3a40]
movups xmmword [rbp - 0x3c], xmm0
lea rcx, [rbx + 0x4180]
lea rdx, [rbp - 0x40]
call fcn.1405975c0
movups xmmword [rbx + 0x3a40], xmm6
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
mov r8d, 7
lea rdx, str.DUN.log
lea rcx, [rsp + 0x48]
call fcn.14054ed20
nop
lea rcx, [rsp + 0x48]
call fcn.14055a330
movzx ebx, al
lea rcx, [rsp + 0x48]
call fcn.14054ecc0
test bl, bl
jne 0x140550cd1
mov qword [rbp - 0x50], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x64
lea r8, [0x1406ddec0]
lea rdx, str.____Discord_User_Name
lea rcx, str.UserNameInput
call fcn.1405bce90
mov ecx, r13d
call fcn.14056b630
mov ecx, r13d
call fcn.14056b890
mov rbx, qword [0x1406dd860]
mov rax, qword [rbx + 0x3fe0]
movss xmm0, dword [rax + 0x11c]
subss xmm0, dword [rax + 0x4c]
addss xmm0, dword [rax + 0x9c]
movss xmm8, dword [0x1406c0ebc]
addss xmm0, xmm8
mov byte [rax + 0xcd], 1
mov rax, qword [rbx + 0x3fe0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rbx + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rbx + 0x3fe0]
movss xmm1, dword [rax + 0x48]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm15
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
movaps xmm6, xmmword [0x1406c1830]
mov dword [rbp - 0x40], reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rbx + 0x3b20]
movups xmmword [rbp - 0x3c], xmm0
lea rcx, [rbx + 0x4180]
lea rdx, [rbp - 0x40]
call fcn.1405975c0
movups xmmword [rbx + 0x3b20], xmm6
movaps xmm6, xmmword [0x1406c1b10]
mov rbx, qword [0x1406dd860]
mov dword [rbp - 0x40], reloc.WLDAP32.dll_Ordinal_22
movups xmm0, xmmword [rbx + 0x3b30]
movups xmmword [rbp - 0x3c], xmm0
lea rcx, [rbx + 0x4180]
lea rdx, [rbp - 0x40]
call fcn.1405975c0
movups xmmword [rbx + 0x3b30], xmm6
movaps xmm6, xmmword [0x1406c1aa0]
mov rbx, qword [0x1406dd860]
mov dword [rbp - 0x40], reloc.WS2_32.dll_socket
movups xmm0, xmmword [rbx + 0x3b40]
movups xmmword [rbp - 0x3c], xmm0
lea rcx, [rbx + 0x4180]
lea rdx, [rbp - 0x40]
call fcn.1405975c0
movups xmmword [rbx + 0x3b40], xmm6
movaps xmm6, xmmword [0x1406c1990]
mov rbx, qword [0x1406dd860]
mov dword [rbp - 0x40], edi
movups xmm0, xmmword [rbx + 0x39d0]
movups xmmword [rbp - 0x3c], xmm0
lea rcx, [rbx + 0x4180]
lea rdx, [rbp - 0x40]
call fcn.1405975c0
movups xmmword [rbx + 0x39d0], xmm6
movaps xmm1, xmm8
mov ecx, ntohs
call fcn.14056b6e0
mov rcx, qword [0x1406dd860]
mov rax, qword [rcx + 0x3fe0]
movss xmm0, dword [rax + 0x11c]
subss xmm0, dword [rax + 0x4c]
addss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1406c0ee0]
mov byte [rax + 0xcd], 1
mov rax, qword [rcx + 0x3fe0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
movzx eax, byte [0x1406dde4d]
mov ecx, eax
test al, al
cmove ecx, r13d
mov byte [0x1406dde4d], cl
movss xmm1, dword [0x1406c0f0c]
mov byte [rsp + 0x20], 1
mov r9b, 1
movzx r8d, r9b
movss xmm0, dword [0x1406c0f6c]
unpcklps xmm0, xmm1
movq rdx, xmm0
lea rcx, str.Login
call fcn.14054fe50
test al, al
je 0x140550fa9
cmp byte [0x1406ddf26], 0
jne 0x140550fa9
mov eax, reloc.WS2_32.dll_sendto
mov eax, dword [rax + rsi]
cmp dword [0x1406de000], eax
jle 0x140550fa9
lea rcx, [0x1406de000]
call fcn.14063c248
cmp dword [0x1406de000], 0xffffffff
jne 0x140550fa9
mov rcx, r13
call fcn.14063c358
mov qword [rbp - 0x50], rax
lea rcx, [0x1406de020]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140558190]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [0x1406de018], rax
test rax, rax
je 0x140551234
lea rcx, [0x140642a80]
call fcn.14063c69c
nop
lea rcx, [0x1406de000]
call fcn.14063c1e8
mov rsi, qword [0x1406dd860]
mov rax, qword [rsi + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rsi + 0x3fe0]
movss xmm1, dword [rax + 0x48]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm7
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
cmp byte [0x1406ddf27], 0
je 0x14055150d
lea rcx, [0x1406dc610]
call fcn.14054f520
cmp byte [0x1406ddf25], 0
jne 0x140551029
cmp byte [0x1406dc610], 0
sete byte [0x1406dc610]
mov byte [0x1406ddf25], 1
mov dword [rsp + 0x40], 0x41a00000
mov dword [rsp + 0x44], 0x41a00000
movaps xmm1, xmm13
movaps xmm0, xmm15
call fcn.140580200
mov rdx, qword [0x1406dd860]
mov r8, qword [rdx + 0x3fe0]
movss xmm0, dword [r8 + 0x270]
cmp qword [r8 + 0x1c8], 0
jne 0x140551071
cmp qword [rdx + 0x44b8], 0
je 0x14055107a
movss xmm0, dword [r8 + 0x240]
movss xmm2, dword [r8 + 0x118]
subss xmm0, xmm2
subss xmm0, dword [0x1406c0eec]
divss xmm0, dword [0x1406c0e54]
cvttss2si eax, xmm0
subss xmm2, dword [r8 + 0x48]
addss xmm2, dword [r8 + 0x98]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm2, xmm0
mov byte [r8 + 0xcd], 1
mov rax, qword [rdx + 0x3fe0]
movss xmm1, dword [rax + 0x48]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm2
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rdx + 0x3fe0]
movss xmm2, dword [rax + 0x11c]
subss xmm2, dword [rax + 0x4c]
addss xmm2, dword [rax + 0x9c]
addss xmm2, xmm8
mov byte [rax + 0xcd], 1
mov rax, qword [rdx + 0x3fe0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm2
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rax, qword [rdx + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rdx + 0x3fe0]
mov rcx, qword [rax + 0x2c0]
mov eax, dword [rcx + 0x20]
mov dword [0x1406dd844], eax
movaps xmm0, xmmword [0x1406c1c40]
movups xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x68], 0
mov dword [rbp - 0x50], 0x3f800000
mov dword [rbp - 0x4c], 0x3f800000
xorps xmm1, xmm1
movups xmmword [rbp - 0x80], xmm1
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
mov r8d, 7
lea rdx, str.Loading
lea rcx, [rsp + 0x48]
call fcn.14054ed20
nop
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0x10
cmovae rdx, qword [rsp + 0x48]
mov rcx, rdi
mov r8, qword [rsp + 0x58]
test r8, r8
je 0x140551203
nop word [rax + rax]
movzx eax, byte [rcx + rdx]
xor r14, rax
imul r14, r15
inc rcx
cmp rcx, r8
jb 0x1405511f0
mov r9, r14
lea r8, [rsp + 0x48]
lea rdx, [rbp - 0x40]
call fcn.1405d04d0
mov rcx, qword [rax + 8]
mov rdx, qword [0x1406dde08]
test rcx, rcx
cmovne rdx, rcx
cmp rdx, qword [0x1406dde08]
jne 0x140551246
mov rcx, rdi
jmp 0x14055124e
mov dword [0x1406de020], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x28]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x50]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x40]
call fcn.1405b5cb0
nop
lea rcx, [rsp + 0x48]
call fcn.14054ecc0
movss xmm8, dword [0x1406c0fdc]
movaps xmm7, xmm8
movss xmm6, dword [0x1406c1064]
movaps xmm9, xmm6
mov rsi, qword [0x1406dd860]
mov rax, qword [rsi + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rsi + 0x3fe0]
mov r15, qword [rax + 0x2c0]
movsxd rbx, dword [0x1406dd844]
mov ecx, dword [r15 + 0x20]
cmp ebx, ecx
jge 0x14055136c
mov r14, rbx
lea rsi, [rbx + rbx*4]
shl rsi, 2
mov edx, ecx
nop dword [rax + rax]
test r14, r14
js 0x1405512e9
cmp ebx, ecx
jl 0x140551307
mov r8d, 0x74f
lea rdx, str.D:BackupGamingAET_New_MenuImGui_Standalone_mainSourceImGui_StandaloneImGuiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov edx, dword [r15 + 0x20]
mov rax, qword [r15 + 0x28]
minss xmm7, dword [rsi + rax + 4]
minss xmm8, dword [rsi + rax]
test r14, r14
js 0x140551322
mov ecx, edx
cmp ebx, edx
jl 0x140551344
mov r8d, 0x74f
lea rdx, str.D:BackupGamingAET_New_MenuImGui_Standalone_mainSourceImGui_StandaloneImGuiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x28]
mov ecx, dword [r15 + 0x20]
maxss xmm9, dword [rax + rsi + 4]
maxss xmm6, dword [rax + rsi]
inc ebx
inc r14
add rsi, 0x14
mov edx, ecx
cmp ebx, ecx
jl 0x1405512e0
mov rsi, qword [0x1406dd860]
mov ebx, dword [0x1406dd844]
addss xmm7, xmm9
mulss xmm7, xmm10
addss xmm8, xmm6
mulss xmm8, xmm10
movss xmm0, dword [0x1406dc61c]
mulss xmm0, dword [0x1406c0f80]
cvttss2si eax, xmm0
xorps xmm1, xmm1
cvtsi2sd xmm1, eax
mulsd xmm1, qword [0x1406c0d40]
cvtpd2ps xmm6, xmm1
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm9, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm10, xmm0
movaps xmm11, xmm0
mulss xmm11, xmm8
movaps xmm1, xmm9
mulss xmm1, xmm7
addss xmm11, xmm1
movaps xmm12, xmm9
mulss xmm12, xmm8
movaps xmm1, xmm7
mulss xmm1, xmm10
subss xmm12, xmm1
subss xmm11, xmm7
subss xmm12, xmm8
mov rax, qword [rsi + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rsi + 0x3fe0]
mov r15, qword [rax + 0x2c0]
mov eax, dword [r15 + 0x20]
cmp ebx, eax
jge 0x1405514e3
movsxd r14, ebx
lea rsi, [r14 + r14*4]
shl rsi, 2
mov ecx, eax
nop word [rax + rax]
test r14, r14
js 0x140551439
cmp ebx, eax
jl 0x140551457
mov r8d, 0x74e
lea rdx, str.D:BackupGamingAET_New_MenuImGui_Standalone_mainSourceImGui_StandaloneImGuiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov ecx, dword [r15 + 0x20]
mov rax, qword [r15 + 0x28]
movaps xmm6, xmm10
mulss xmm6, dword [rsi + rax]
movaps xmm0, xmm9
mulss xmm0, dword [rsi + rax + 4]
addss xmm6, xmm0
movaps xmm7, xmm9
mulss xmm7, dword [rsi + rax]
movaps xmm0, xmm10
mulss xmm0, dword [rsi + rax + 4]
subss xmm7, xmm0
subss xmm6, xmm11
subss xmm7, xmm12
test r14, r14
js 0x14055149c
cmp ebx, ecx
jl 0x1405514ba
mov r8d, 0x74e
lea rdx, str.D:BackupGamingAET_New_MenuImGui_Standalone_mainSourceImGui_StandaloneImGuiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x28]
movss dword [rax + rsi], xmm7
movss dword [rax + rsi + 4], xmm6
inc ebx
inc r14
add rsi, 0x14
mov eax, dword [r15 + 0x20]
mov ecx, eax
cmp ebx, eax
jl 0x140551430
mov rsi, qword [0x1406dd860]
movss xmm0, dword [0x1406dc61c]
ucomiss xmm0, dword [0x1406c0d30]
movss xmm10, dword [0x1406c0ce8]
jp 0x14055150d
jne 0x14055150d
cmp byte [0x1406dc610], 0
sete byte [0x1406dc610]
mov rax, qword [rsi + 0x3fe0]
mov byte [rax + 0xcd], 1
mov rax, qword [rsi + 0x3fe0]
movss xmm1, dword [rax + 0x48]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm15
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
mov rax, qword [rsi + 0x3fe0]
movss xmm0, dword [rax + 0x11c]
subss xmm0, dword [rax + 0x4c]
addss xmm0, dword [rax + 0x9c]
addss xmm0, dword [0x1406c0ec8]
mov byte [rax + 0xcd], 1
mov rax, qword [rsi + 0x3fe0]
movss xmm1, dword [rax + 0x4c]
subss xmm1, dword [rax + 0x9c]
addss xmm1, xmm0
movss dword [rax + 0x11c], xmm1
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm1
movss dword [rax + 0x134], xmm0
mov rdx, qword [rsi + 0x3fe0]
mov rcx, rdx
movss xmm6, dword [rdx + 0x270]
cmp qword [rdx + 0x1c8], 0
jne 0x1405515d5
cmp qword [rsi + 0x44b8], 0
je 0x1405515dd
movss xmm6, dword [rdx + 0x240]
subss xmm6, dword [rdx + 0x118]
mov rax, r12
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rax, qword [0x1406dc638]
test rax, rax
jne 0x140551603
movaps xmm0, xmm15
jmp 0x14055165b
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm13
movss xmm3, dword [0x1406c0fdc]
movss xmm2, dword [rsi + 0x3d50]
lea rdx, [rbp - 0x50]
mov rcx, qword [rsi + 0x3d48]
call fcn.1405a9180
movss xmm0, dword [rbp - 0x50]
addss xmm0, dword [0x1406c0d28]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov rdx, qword [rsi + 0x3fe0]
mov rcx, rdx
subss xmm6, xmm0
mulss xmm6, xmm10
cvttss2si eax, xmm6
movss xmm2, dword [rdx + 0x118]
subss xmm2, dword [rdx + 0x48]
addss xmm2, dword [rdx + 0x98]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm2, xmm0
mov byte [rcx + 0xcd], 1
mov rax, qword [rsi + 0x3fe0]
movss xmm1, dword [rax + 0x48]
subss xmm1, dword [rax + 0x98]
addss xmm1, xmm2
movss dword [rax + 0x118], xmm1
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm1
movss dword [rax + 0x130], xmm0
movaps xmm6, xmmword [0x1406c19a0]
mov dword [rbp - 0x40], edi
movups xmm0, xmmword [rsi + 0x39d0]
movups xmmword [rbp - 0x3c], xmm0
lea rcx, [rsi + 0x4180]
lea rdx, [rbp - 0x40]
call fcn.1405975c0
movups xmmword [rsi + 0x39d0], xmm6
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae r12, qword [0x1406dc638]
mov rcx, r12
call fcn.1405b3c00
mov ecx, 5
call fcn.14056b630
mov ecx, r13d
call fcn.14056b890
call fcn.1405748f0
call fcn.14057ab20
mov eax, dword [0x1406dd83c]
cmp eax, 0xa
jne 0x1405519bf
cmp byte [0x1406ddf24], 0
je 0x1405519c8
mov rbx, qword [0x1406ddb60]
cmp byte [rbx + 0x170], 0
jne 0x1405519cf
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov ecx, 0x460
mov eax, dword [rcx + rbx]
mov esi, 0x29c
test al, 1
jne 0x140551791
or eax, 1
mov dword [rcx + rbx], eax
mov dword [rsi + rbx + 2], 0x1e597e4
mov word [rsi + rbx], 0xc515
lea rcx, [0x140642a60]
call fcn.14063c804
nop
lea rdx, [rsi + rbx]
cmp byte [rdx + 5], 0
je 0x1405517b2
xor byte [rdx], 0x25
xor byte [rdx + 1], 0xbd
xor byte [rdx + 2], 0xd7
xor byte [rdx + 3], 0xbb
xor byte [rdx + 4], 0xe5
mov byte [rdx + 5], 0
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1405517d0
lea rcx, [rbp - 0x40]
call fcn.14054ed20
nop
mov dword [rbp - 0x50], 0x82565278
mov dword [rbp - 0x4c], 0xec2d788d
mov dword [rbp - 0x48], 0xe75f564c
mov ecx, 0x2e4
mov eax, dword [rcx + rbx]
mov esi, 0x400
test al, 1
jne 0x140551833
or eax, 1
mov dword [rcx + rbx], eax
mov byte [rsi + rbx + 0xc], 1
movsd xmm0, qword [rbp - 0x50]
movsd qword [rsi + rbx], xmm0
mov eax, dword [rbp - 0x48]
mov dword [rsi + rbx + 8], eax
lea rcx, [0x140642a40]
call fcn.14063c804
nop
lea r9, [rsi + rbx]
cmp byte [r9 + 0xc], 0
je 0x140551871
mov rdx, rdi
movabs r8, 0x83413bade73b333f
nop dword [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + r9], al
inc rdx
cmp rdx, 0xc
jb 0x140551850
mov byte [r9 + 0xc], 0
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r9 + r8], 0
jne 0x140551890
mov rdx, r9
lea rcx, [rsp + 0x48]
call fcn.14054ed20
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x80]
call fcn.14055f830
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x1405518c5
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.140557910
nop
lea rcx, [rbp - 0x80]
call fcn.14054ecc0
nop
lea rcx, [rsp + 0x48]
call fcn.14054ecc0
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
mov rsi, qword [rbp - 0x30]
lea r14, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae r14, qword [rbp - 0x40]
cmp rsi, 0x10
jae 0x140551921
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
jmp 0x1405519a0
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140551978
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140551e6d
mov rcx, rax
call fcn.14063c358
mov rcx, rax
test rax, rax
je 0x140551971
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140551987
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140551984
call fcn.14063c358
jmp 0x140551987
mov rax, rdi
mov qword [rsp + 0x48], rax
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rsi
lea rcx, [rsp + 0x48]
call fcn.140562ba0
nop
lea rcx, [rbp - 0x40]
call fcn.14054ecc0
mov eax, dword [0x1406dd83c]
cmp eax, 0xa
jl 0x140551e0d
mov rbx, qword [0x1406ddb60]
lea rdx, [rbx + 0x120]
cmp qword [rdx + 0x18], 0x10
jb 0x1405519e0
mov rdx, qword [rdx]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1405519f8
mov byte [rbx + 0x170], al
jmp 0x140551e0d
cmp byte [0x1406ddf24], 0
jne 0x140551b29
mov rsi, qword [0x1406ddb60]
lea rdx, [rsi + 0x120]
cmp qword [rdx + 0x18], 0x10
jb 0x140551a1d
mov rdx, qword [rdx]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [rsi + 0x110], rax
test rax, rax
je 0x140551b1a
mov r15d, edi
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140551ac7
mov dword [rbp - 0x10], 0x130
lea rdx, [rbp - 0x10]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140551abe
nop dword [rax]
nop dword [rax + rax]
lea rax, [rsi + 0xd8]
cmp qword [rsi + 0xf0], 0x10
jb 0x140551a88
mov rax, qword [rsi + 0xd8]
lea r8, [rbp + 0x1c]
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140551aa3
inc rax
test ecx, ecx
jne 0x140551a90
test edx, edx
je 0x140551aba
lea rdx, [rbp - 0x10]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140551a70
jmp 0x140551abe
mov r15d, dword [rbp - 8]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsi + 0x118], r15d
mov r8d, r15d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsi + 0x108], rax
cmp qword [rsi + 0x110], 0xffffffffffffffff
je 0x140551b1a
cmp dword [rsi + 0x118], 0
je 0x140551b1a
lea rdx, [rsi + 0xd8]
mov rcx, rsi
call fcn.1405675f0
lea rdx, [rsi + 0xa8]
mov rcx, rsi
call fcn.1405675f0
mov al, 1
jmp 0x140551b1c
xor al, al
mov byte [rsi + 0x170], al
mov byte [0x1406ddf24], 1
mov rbx, qword [0x1406ddb60]
lea rdx, [rbp - 0x20]
mov rcx, qword [rbx + 0x110]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [rbp - 0x1c]
lea eax, [rdx + 0x21]
mov dword [rbx + 0x164], eax
mov ecx, dword [rbp - 0x20]
lea eax, [rcx + 8]
mov dword [rbx + 0x160], eax
mov eax, dword [rbp - 0x18]
sub eax, ecx
sub eax, 0x10
mov dword [rbx + 0x168], eax
mov eax, dword [rbp - 0x14]
sub eax, edx
sub eax, 0x28
mov dword [rbx + 0x16c], eax
mov rbx, qword [0x1406ddb60]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp qword [rbx + 0x110], rax
je 0x140551bbf
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r11, qword [0x1406dd888]
cmp rax, r11
je 0x140551bc6
mov rax, qword [0x1406ddb60]
mov dword [rsp + 0x30], pe_nt_image_headers64
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
mov rdx, 0xfffffffffffffffe
jmp 0x140551bf2
mov r11, qword [0x1406dd888]
mov rax, qword [0x1406ddb60]
mov ecx, dword [rax + 0x16c]
mov r10d, dword [rax + 0x168]
mov dword [rsp + 0x30], 0x40
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], r10d
mov rdx, 0xffffffffffffffff
mov r9d, dword [rax + 0x164]
mov r8d, dword [rax + 0x160]
mov rcx, r11
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rbx, qword [0x1406ddb60]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp qword [rbx + 0x110], rax
je 0x140551c53
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, qword [0x1406dd888]
cmp rax, rcx
je 0x140551c53
mov dword [rsp + 0x30], pe_nt_image_headers64
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 2]
call qword [sym.imp.USER32.dll_SetWindowPos]
call fcn.14056e350
and dword [rax], 0x400
cmp byte [0x1406ddda9], 0
jne 0x140551c76
cmp byte [0x1406ddf24], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_32
jne 0x140551c7c
mov r8d, 0x80020
mov edx, 0xffffffec
mov rcx, qword [0x1406dd888]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x1406dd888]
call qword [sym.imp.USER32.dll_UpdateWindow]
cmp byte [0x1406ddda9], 0
je 0x140551d3b
movaps xmm1, xmm15
xor ecx, ecx
call fcn.14056b6e0
mov rax, qword [0x1406ddb60]
movd xmm2, dword [rax + 0x16c]
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm10
movd xmm0, dword [rax + 0x164]
cvtdq2ps xmm0, xmm0
addss xmm2, xmm0
subss xmm2, dword [0x1406c0f74]
movd xmm1, dword [rax + 0x168]
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm10
movd xmm0, dword [rax + 0x160]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
subss xmm1, dword [0x1406c0f90]
mov rax, qword [0x1406dd860]
or dword [rax + 0x40f0], 1
movss dword [rax + 0x4104], xmm1
movss dword [rax + 0x4108], xmm2
mov qword [rax + 0x410c], rdi
mov dword [rax + 0x40f4], r13d
mov byte [rax + 0x412c], 1
mov dword [rbp - 0x50], 0x30902214
mov dword [rbp - 0x4c], 0x60d05003
mov dword [rbp - 0x48], 0x38b06307
mov word [rbp - 0x44], 0x5904
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov ecx, 0x414
mov eax, dword [rcx + rsi]
mov ebx, 0x2c8
test al, 1
jne 0x140551da7
or eax, 1
mov dword [rcx + rsi], eax
mov word [rbx + rsi + 0xe], 0x191
movsd xmm0, qword [rbp - 0x50]
movsd qword [rbx + rsi], xmm0
mov eax, dword [rbp - 0x48]
mov dword [rbx + rsi + 8], eax
movzx eax, word [rbp - 0x44]
mov word [rbx + rsi + 0xc], ax
lea rcx, [0x140642a10]
call fcn.14063c804
nop
lea r9, [rbx + rsi]
cmp byte [r9 + 0xf], 0
je 0x140551de2
movabs rdx, 0x2591376d59fd4353
nop dword [rax]
movzx ecx, dil
and cl, 7
shl cl, 3
mov rax, rdx
shr rax, cl
xor byte [rdi + r9], al
inc rdi
cmp rdi, 0xf
jb 0x140551dc0
mov byte [r9 + 0xf], 0
xor edx, edx
mov r8d, Ordinal_301
mov rcx, r9
call fcn.140577c90
call fcn.140552d30
call fcn.14057ab20
cmp byte [0x1406ddda9], 0
je 0x140551e0d
mov ecx, r13d
call fcn.14056b890
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.14063c0a0
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm15, xmmword [r11 - 0x90]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140547a30
nop
int3