Function at 0x140039030
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x490
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, [rsp + 0x3d0]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x340]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0x230], 0x50
mov dword [rsp + 0x234], 0x40
lea rax, [0x1400384d0]
mov qword [rsp + 0x238], rax
xor r14d, r14d
mov qword [rsp + 0x240], r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x248], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x250], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x260], xmm1
lea rax, str.Login_Panel
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x278], r14
lea rcx, [rsp + 0x230]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov eax, dword [rsp + 0x34c]
cdq
sub eax, edx
sar eax, 1
lea r8d, [rax - 0x96]
mov eax, dword [rsp + 0x348]
cdq
sub eax, edx
sar eax, 1
sub eax, 0xfa
mov qword [rsp + 0x58], r14
mov rcx, qword [rsp + 0x248]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], 0x12c
mov dword [rsp + 0x30], 0x1f4
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.dasdasdasdasd
mov rdx, qword [rsp + 0x270]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rdi, rax
mov qword [rsp + 0x98], rax
lea edx, [r14 - 0x14]
mov r8d, 0x80
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
lea r9d, [r14 + 1]
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea ecx, [r14 + 0x20]
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x1400a9b88], rax
test rax, rax
je 0x14003b3ee
mov qword [0x1400a9ba0], r14
mov qword [0x1400a9bac], r14
mov dword [0x1400a9bb4], r14d
mov qword [0x1400a9bbc], r14
mov dword [0x1400a9bc4], r14d
mov qword [0x1400a9bd4], r14
mov dword [0x1400a9bc8], 1
mov dword [0x1400a9bb8], 1
mov dword [0x1400a9ba8], r14d
mov dword [0x1400a9bcc], 1
mov dword [0x1400a9bd0], 0x50
mov dword [0x1400a9bdc], 0x80000000
mov rax, qword [rax]
lea rdx, [0x1400a9b90]
mov qword [rsp + 0x30], rdx
lea r12, [0x1400a9ba0]
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x40
mov r9, rdi
xor edx, edx
lea r8d, [r14 + 1]
call qword [rax + 0x80]
test eax, eax
js 0x14003b3e7
lea edx, [r14 + 0xa]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r14 - 1]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rax, qword [0x1400a9990]
test rax, rax
je 0x1400392e7
inc dword [rax + 0x3b4]
mov ecx, 0x3db8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x4e0], rax
lea rcx, [rsp + 0x4d8]
mov qword [rsp + 0x4e8], rcx
mov qword [rsp + 0x128], rax
test rax, rax
je 0x140039323
xor edx, edx
mov rcx, rax
call fcn.140001270
jmp 0x140039326
mov rax, r14
cmp qword [0x1400a9990], 0
jne 0x140039337
mov qword [0x1400a9990], rax
mov rcx, rax
call fcn.140007aa0
mov rbx, qword [0x1400a9990]
test rbx, rbx
jne 0x14003936c
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeExternalimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1400a9990]
lea rax, [0x140078728]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
movss xmm3, dword [0x140079a9c]
mov r8d, 0x10
lea rdx, [0x1400800a0]
mov rcx, qword [rbx + 0xa8]
call fcn.140024d00
cmp qword [0x1400a9990], 0
jne 0x1400393c2
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeExternalimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
or dword [rbx + 8], 1
xor ecx, ecx
call fcn.140020360
lea rcx, [0x1400a9b80]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14003959e
lea rcx, [0x1400a9b78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14003959e
mov qword [0x1400a9b70], rdi
mov rax, qword [0x1400a9990]
test rax, rax
jne 0x14003942b
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeExternalimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1400a9990]
or dword [rax + 0xc], 6
lea rcx, str.imgui_impl_win32
mov qword [rax + 0xd8], rcx
mov qword [rax + 0x120], rdi
mov dword [rax + 0x3c], 9
mov dword [rax + 0x40], 0x25
mov dword [rax + 0x44], 0x27
mov dword [rax + 0x48], 0x26
mov dword [rax + 0x4c], 0x28
mov dword [rax + 0x50], 0x21
mov dword [rax + 0x54], 0x22
mov dword [rax + 0x58], 0x24
mov dword [rax + 0x5c], 0x23
mov dword [rax + 0x60], 0x2d
mov dword [rax + 0x64], 0x2e
mov dword [rax + 0x68], 8
mov dword [rax + 0x6c], 0x20
mov dword [rax + 0x70], 0xd
mov dword [rax + 0x74], 0x1b
mov dword [rax + 0x78], 0xd
mov dword [rax + 0x7c], 0x41
mov dword [rax + 0x80], 0x43
mov dword [rax + 0x84], 0x56
mov dword [rax + 0x88], 0x58
mov dword [rax + 0x8c], 0x59
mov dword [rax + 0x90], 0x5a
lea rax, str.xinput1_4.dll
mov qword [rsp + 0x100], rax
lea rax, str.xinput1_3.dll
mov qword [rsp + 0x108], rax
lea rax, str.xinput9_1_0.dll
mov qword [rsp + 0x110], rax
lea rax, str.xinput1_2.dll
mov qword [rsp + 0x118], rax
lea rax, str.xinput1_1.dll
mov qword [rsp + 0x120], rax
mov rbx, r14
nop dword [rax + rax]
mov rcx, qword [rsp + rbx*8 + 0x100]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
jne 0x140039561
inc rbx
cmp rbx, 5
jl 0x140039540
jmp 0x140039596
mov qword [0x1400a9b58], rdi
lea rdx, str.XInputGetCapabilities
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400a9b60], rax
lea rdx, str.XInputGetState
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400a9b68], rax
mov rdi, qword [rsp + 0x98]
mov rbx, qword [0x1400a9b90]
mov rax, qword [0x1400a9990]
test rax, rax
jne 0x1400395d2
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeExternalimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1400a9990]
lea rcx, str.imgui_impl_dx9
mov qword [rax + 0xe0], rcx
or dword [rax + 0xc], 8
mov qword [0x1400a9b40], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
xor sil, sil
mov byte [rsp + 0x4d8], sil
mov rbx, qword [0x1400a9990]
test rbx, rbx
jne 0x14003962c
mov r8d, 0x952
lea rdx, str.D:SourceCodeExternalimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1400a9990]
xor ecx, ecx
call fcn.140020360
mov dword [rbx + 0x15a4], 0x3f800000
mov dword [rbx + 0x1598], 0x40800000
mov dword [rbx + 0x159c], 0x40000000
mov dword [rbx + 0x15a8], 0x41000000
mov dword [rbx + 0x15ac], 0x40000000
mov qword [rbx + 0x156c], 0x3f800000
mov dword [rbx + 0x1588], 0x3f800000
mov byte [rbx + 0x161a], 1
mov byte [rbx + 0x1618], 1
mov dword [rbx + 0x1624], 0x3f800000
mov dword [rbx + 0x1628], 0x3f800000
mov dword [rbx + 0x162c], 0x3f800000
mov dword [rbx + 0x1630], 0x3f800000
mov dword [rbx + 0x1634], 0x3f000000
mov dword [rbx + 0x1638], 0x3f000000
mov dword [rbx + 0x163c], 0x3f000000
mov dword [rbx + 0x1640], 0x3f800000
mov dword [rbx + 0x1644], 0x3d75c28f
mov dword [rbx + 0x1648], 0x3d75c28f
mov dword [rbx + 0x164c], 0x3d75c28f
mov dword [rbx + 0x1650], 0x3f70a3d7
mov dword [rbx + 0x1654], 0x3f800000
mov dword [rbx + 0x1658], 0x3f800000
mov qword [rbx + 0x165c], 0x3f800000
mov dword [rbx + 0x1664], 0x3da3d70a
mov dword [rbx + 0x1668], 0x3da3d70a
mov dword [rbx + 0x166c], 0x3da3d70a
mov dword [rbx + 0x1670], 0x3f70a3d7
mov dword [rbx + 0x1674], 0x3edc28f6
mov dword [rbx + 0x1678], 0x3edc28f6
mov dword [rbx + 0x167c], 0x3f000000
mov qword [rbx + 0x1680], 0x3f000000
mov qword [rbx + 0x1688], r14
mov dword [rbx + 0x1690], r14d
mov dword [rbx + 0x1694], 0x3e4ccccd
mov dword [rbx + 0x1698], 0x3e4ccccd
mov dword [rbx + 0x169c], 0x3e4ccccd
mov dword [rbx + 0x16a0], 0x3f000000
mov dword [rbx + 0x16a4], 0x3ecccccd
mov dword [rbx + 0x16a8], 0x3ecccccd
mov dword [rbx + 0x16ac], 0x3ecccccd
mov dword [rbx + 0x16b0], 0x3ecccccd
mov dword [rbx + 0x16b4], 0x3e3851ec
mov dword [rbx + 0x16b8], 0x3e3851ec
mov dword [rbx + 0x16bc], 0x3e3851ec
mov dword [rbx + 0x16c0], 0x3f2b851f
mov dword [rbx + 0x16c4], 0x3d23d70a
mov dword [rbx + 0x16c8], 0x3d23d70a
mov dword [rbx + 0x16cc], 0x3d23d70a
mov dword [rbx + 0x16d0], 0x3f800000
mov dword [rbx + 0x16d4], 0x3e947ae1
mov dword [rbx + 0x16d8], 0x3e947ae1
mov dword [rbx + 0x16dc], 0x3e947ae1
mov qword [rbx + 0x16e0], 0x3f800000
mov qword [rbx + 0x16e8], r14
mov dword [rbx + 0x16f0], 0x3f028f5c
mov dword [rbx + 0x16f4], 0x3e0f5c29
mov dword [rbx + 0x16f8], 0x3e0f5c29
mov dword [rbx + 0x16fc], 0x3e0f5c29
mov dword [rbx + 0x1700], 0x3f800000
mov dword [rbx + 0x1704], 0x3ca3d70a
mov dword [rbx + 0x1708], 0x3ca3d70a
mov dword [rbx + 0x170c], 0x3ca3d70a
mov dword [rbx + 0x1710], 0x3f07ae14
mov dword [rbx + 0x1714], 0x3e9eb852
mov dword [rbx + 0x1718], 0x3e9eb852
mov dword [rbx + 0x171c], 0x3e9eb852
mov dword [rbx + 0x1720], 0x3f800000
mov dword [rbx + 0x1724], 0x3ed1eb85
mov dword [rbx + 0x1728], 0x3ed1eb85
mov dword [rbx + 0x172c], 0x3ed1eb85
mov dword [rbx + 0x1730], 0x3f800000
mov dword [rbx + 0x1734], 0x3f028f5c
mov dword [rbx + 0x1738], 0x3f028f5c
mov dword [rbx + 0x173c], 0x3f028f5c
mov dword [rbx + 0x1740], 0x3f800000
mov dword [rbx + 0x1744], 0x3f70a3d7
mov dword [rbx + 0x1748], 0x3f70a3d7
mov dword [rbx + 0x174c], 0x3f70a3d7
mov dword [rbx + 0x1750], 0x3f800000
mov dword [rbx + 0x1754], 0x3f028f5c
mov dword [rbx + 0x1758], 0x3f028f5c
mov dword [rbx + 0x175c], 0x3f028f5c
mov dword [rbx + 0x1760], 0x3f800000
mov dword [rbx + 0x1764], 0x3f5c28f6
mov dword [rbx + 0x1768], 0x3f5c28f6
mov dword [rbx + 0x176c], 0x3f5c28f6
mov dword [rbx + 0x1770], 0x3f800000
mov dword [rbx + 0x1774], 0x3ee147ae
mov dword [rbx + 0x1778], 0x3ee147ae
mov dword [rbx + 0x177c], 0x3ee147ae
mov dword [rbx + 0x1780], 0x3ecccccd
mov dword [rbx + 0x1784], 0x3eeb851f
mov dword [rbx + 0x1788], 0x3ef0a3d7
mov dword [rbx + 0x178c], 0x3ef5c28f
mov dword [rbx + 0x1790], 0x3f800000
mov dword [rbx + 0x1794], 0x3ed70a3d
mov dword [rbx + 0x1798], 0x3ed70a3d
mov dword [rbx + 0x179c], 0x3ed70a3d
mov dword [rbx + 0x17a0], 0x3f800000
mov dword [rbx + 0x17a4], 0x3f333333
mov dword [rbx + 0x17a8], 0x3f333333
mov dword [rbx + 0x17ac], 0x3f333333
mov dword [rbx + 0x17b0], 0x3e9eb852
mov dword [rbx + 0x17b4], 0x3f333333
mov dword [rbx + 0x17b8], 0x3f333333
mov dword [rbx + 0x17bc], 0x3f333333
mov dword [rbx + 0x17c0], 0x3f4ccccd
mov dword [rbx + 0x17c4], 0x3ef5c28f
mov dword [rbx + 0x17c8], 0x3f000000
mov dword [rbx + 0x17cc], 0x3f051eb8
mov dword [rbx + 0x17d0], 0x3f800000
mov dword [rbx + 0x17d4], 0x3edc28f6
mov dword [rbx + 0x17d8], 0x3edc28f6
mov dword [rbx + 0x17dc], 0x3f000000
mov dword [rbx + 0x17e0], 0x3f000000
mov dword [rbx + 0x17e4], 0x3f3851ec
mov dword [rbx + 0x17e8], 0x3f3851ec
mov dword [rbx + 0x17ec], 0x3f3851ec
mov dword [rbx + 0x17f0], 0x3f47ae14
mov dword [rbx + 0x17f4], 0x3f028f5c
mov dword [rbx + 0x17f8], 0x3f028f5c
mov dword [rbx + 0x17fc], 0x3f028f5c
mov dword [rbx + 0x1800], 0x3f800000
mov dword [rbx + 0x1804], 0x3f68f5c3
mov dword [rbx + 0x1808], 0x3f68f5c3
mov dword [rbx + 0x180c], 0x3f68f5c3
mov dword [rbx + 0x1810], 0x3e800000
mov dword [rbx + 0x1814], 0x3f4f5c29
mov dword [rbx + 0x1818], 0x3f4f5c29
mov dword [rbx + 0x181c], 0x3f4f5c29
mov dword [rbx + 0x1820], 0x3f2b851f
mov dword [rbx + 0x1824], 0x3eeb851f
mov dword [rbx + 0x1828], 0x3eeb851f
mov dword [rbx + 0x182c], 0x3eeb851f
mov dword [rbx + 0x1830], 0x3f733333
mov dword [rbx + 0x1884], 0x3f1c28f6
mov dword [rbx + 0x1888], 0x3f1c28f6
mov dword [rbx + 0x188c], 0x3f1c28f6
mov dword [rbx + 0x1890], 0x3f800000
mov dword [rbx + 0x1894], 0x3f800000
mov dword [rbx + 0x1898], 0x3edc28f6
mov dword [rbx + 0x189c], 0x3eb33333
mov dword [rbx + 0x18a0], 0x3f800000
mov dword [rbx + 0x18a4], 0x3f3ae148
mov dword [rbx + 0x18a8], 0x3f19999a
mov dword [rbx + 0x18ac], 0x3e19999a
mov dword [rbx + 0x18b0], 0x3f800000
mov dword [rbx + 0x18b4], 0x3f800000
mov qword [rbx + 0x18b8], 0x3f19999a
mov dword [rbx + 0x18c0], 0x3f800000
mov dword [rbx + 0x1914], 0x3f5eb852
mov dword [rbx + 0x1918], 0x3f5eb852
mov dword [rbx + 0x191c], 0x3f5eb852
mov dword [rbx + 0x1920], 0x3eb33333
mov dword [rbx + 0x1924], 0x3f800000
mov qword [rbx + 0x1928], 0x3f800000
mov dword [rbx + 0x1930], 0x3f666666
mov dword [rbx + 0x1934], 0x3f19999a
mov dword [rbx + 0x1938], 0x3f19999a
mov dword [rbx + 0x193c], 0x3f19999a
mov dword [rbx + 0x1940], 0x3f800000
mov dword [rbx + 0x1944], 0x3f800000
mov dword [rbx + 0x1948], 0x3f800000
mov dword [rbx + 0x194c], 0x3f800000
mov dword [rbx + 0x1950], 0x3f333333
call fcn.140038d60
xorps xmm0, xmm0
movups xmmword [rsp + 0x370], xmm0
movups xmmword [rsp + 0x380], xmm0
movups xmmword [rsp + 0x390], xmm0
movabs rbx, 0xaca5a61d3f10cfec
movabs r15, 0xcd3710d422219a33
movabs r12, 0x109dcec7d71784d6
xorps xmm7, xmm7
movss xmm9, dword [0x140079b0c]
movss xmm14, dword [0x140079aac]
movss xmm13, dword [0x140079ac4]
movss xmm15, dword [0x140079a80]
movss xmm8, dword [0x140079a48]
movss xmm12, dword [0x140079af0]
movss xmm11, dword [0x1400799e4]
lea r13, [0x140079888]
nop dword [rax]
cmp dword [rsp + 0x378], 0x12
je 0x14003b2d3
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x370]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140039d7e
lea rcx, [rsp + 0x370]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x370]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x140039d30
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140039dc9
cmp byte [0x1400a9106], 0
sete al
mov byte [0x1400a9106], al
mov rcx, rdi
test al, al
je 0x140039db6
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, 0x11
jmp 0x140039dc0
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
cmp byte [0x1400a92c8], 0
jne 0x140039ddb
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
test sil, sil
jne 0x14003a46d
cmp qword [0x1400a9b30], 0
jne 0x140039df3
call fcn.14002ae60
call fcn.140037c80
call fcn.1400067b0
mov rax, qword [0x1400a9990]
mov dword [rax + 0x1ba8], 0x43fa0000
mov dword [rax + 0x1bac], 0x43960000
mov dword [rax + 0x1b90], 2
or dword [rax + 0x1b88], 3
movaps xmm0, xmm7
unpcklps xmm0, xmm7
movsd qword [rax + 0x1b98], xmm0
movaps xmm1, xmm7
unpcklps xmm1, xmm7
movsd qword [rax + 0x1ba0], xmm1
mov dword [rax + 0x1b8c], 2
mov qword [rsp + 0x2a0], r15
mov qword [rsp + 0x2a8], rbx
movabs rax, 0xa35e77bb6e9a1bdc
mov qword [rsp + 0x350], rax
movabs rax, 0xaca5ca7851719fcc
mov qword [rsp + 0x358], rax
movaps xmm0, xmmword [rsp + 0x350]
xorps xmm0, xmmword [rsp + 0x2a0]
movdqa xmmword [rsp + 0x70], xmm0
mov r8d, 0x13e
lea rdx, [0x1400a92c8]
lea rcx, [rsp + 0x70]
call fcn.14000c5d0
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x140039ef9
mov qword [rsp + 0x1c8], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x1c8]
call fcn.140010000
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x140039f57
movss xmm1, dword [rcx + 0x159c]
addss xmm1, xmm1
addss xmm1, dword [rcx + 0x1980]
movss xmm0, dword [rax + 0x104]
maxss xmm0, xmm1
movss dword [rax + 0x104], xmm0
movss xmm0, dword [rax + 0x110]
maxss xmm0, dword [rcx + 0x159c]
movss dword [rax + 0x110], xmm0
mov dword [rsp + 0x1d0], 0
mov dword [rsp + 0x1d4], 0x41a00000
lea rcx, [rsp + 0x1d0]
call fcn.14002efd0
mov r11, qword [0x1400a9990]
mov rax, qword [r11 + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [r11 + 0x1ae0]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x60]
addss xmm0, dword [0x140079ab0]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x5c]
addss xmm2, dword [0x140079abc]
movss dword [rax + 0xd8], xmm2
movss dword [rax + 0xdc], xmm0
movss xmm1, dword [rax + 0xf4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm0
movss dword [rax + 0xf4], xmm1
mov qword [rsp + 0x2c0], r15
mov qword [rsp + 0x2c8], rbx
movabs rax, 0xcd3710ee0258ff78
mov qword [rsp + 0x2b0], rax
mov qword [rsp + 0x2b8], rbx
movaps xmm0, xmmword [rsp + 0x2b0]
xorps xmm0, xmmword [rsp + 0x2c0]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.14002ce20
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.1400102a0
movss xmm0, dword [0x140079acc]
call fcn.140010350
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x60]
addss xmm0, xmm14
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x5c]
addss xmm2, xmm13
movss dword [rax + 0xd8], xmm2
movss dword [rax + 0xdc], xmm0
movss xmm1, dword [rax + 0xf4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm0
movss dword [rax + 0xf4], xmm1
mov qword [rsp + 0x2e0], r15
mov qword [rsp + 0x2e8], rbx
movabs rax, 0xcd3710ad476ab910
mov qword [rsp + 0x2d0], rax
mov qword [rsp + 0x2d8], rbx
movaps xmm0, xmmword [rsp + 0x2d0]
xorps xmm0, xmmword [rsp + 0x2e0]
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x1d8], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rsp + 0x1d8]
mov qword [rsp + 0x20], rax
mov r9d, pe_nt_image_headers64
lea r8, [0x1400a99c0]
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.140032f40
call fcn.140010400
mov dword [rsp + 0x1e0], 0
mov dword [rsp + 0x1e4], 0x40a00000
lea rcx, [rsp + 0x1e0]
call fcn.14002efd0
mov r11, qword [0x1400a9990]
mov rax, qword [r11 + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [r11 + 0x1ae0]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x60]
addss xmm0, dword [0x140079ac0]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x5c]
addss xmm2, xmm13
movss dword [rax + 0xd8], xmm2
movss dword [rax + 0xdc], xmm0
movss xmm1, dword [rax + 0xf4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm0
movss dword [rax + 0xf4], xmm1
mov qword [rsp + 0x130], r15
mov qword [rsp + 0x138], rbx
movabs rax, 0xf2b601d65e866f4d
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], r12
movabs rax, 0xbf5272b9474cff61
mov qword [rsp + 0x100], rax
movabs rax, 0xc885c874587fa3cc
mov qword [rsp + 0x108], rax
movabs rax, 0xf2b672ba37e71b28
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], r12
movups xmm0, xmmword [rsp + 0x100]
movups xmm1, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x130]
movdqa xmmword [rsp + 0x210], xmm0
xorps xmm1, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0x220], xmm1
lea rcx, [rsp + 0x210]
call fcn.14002e930
call fcn.140038a40
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003a2da
mov qword [rsp + 0x150], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x150]
call fcn.140010000
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
movss xmm0, dword [rax + 0x18]
subss xmm0, xmm14
mulss xmm0, dword [0x140079a14]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, xmm0
movss dword [rax + 0xd8], xmm1
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x60]
addss xmm0, xmm13
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x5c]
addss xmm2, dword [0x140079ac8]
movss dword [rax + 0xd8], xmm2
movss dword [rax + 0xdc], xmm0
movss xmm1, dword [rax + 0xf4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm0
movss dword [rax + 0xf4], xmm1
mov qword [rsp + 0x158], 0x42c80000
mov qword [rsp + 0x300], r15
mov qword [rsp + 0x308], rbx
movabs rax, 0xcd3710ba4b46f57f
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x2f8], rbx
movaps xmm0, xmmword [rsp + 0x2f0]
xorps xmm0, xmmword [rsp + 0x300]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x70]
call fcn.14002d6f0
test al, al
je 0x14003a414
mov byte [rsp + 0x4d8], 1
mov dword [0x1400a99b8], 1
call fcn.14000ec50
jmp 0x14003b16c
cmp dword [0x1400a99b8], 1
jne 0x14003b174
cmp qword [0x1400a9b30], 0
jne 0x14003a489
call fcn.14002ae60
call fcn.140037c80
call fcn.1400067b0
mov rax, qword [0x1400a9990]
mov dword [rax + 0x1ba8], 0x43fa0000
mov dword [rax + 0x1bac], 0x43960000
mov dword [rax + 0x1b90], 2
or dword [rax + 0x1b88], 3
movaps xmm0, xmm7
unpcklps xmm0, xmm7
movsd qword [rax + 0x1b98], xmm0
movaps xmm1, xmm7
unpcklps xmm1, xmm7
movsd qword [rax + 0x1ba0], xmm1
mov dword [rax + 0x1b8c], 2
mov qword [rsp + 0x130], r15
mov qword [rsp + 0x138], rbx
movabs rax, 0xf2b601d65e866f4d
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], r12
movabs rax, 0x827030996777d375
mov qword [rsp + 0x100], rax
movabs rax, 0xe2f0f63d795fefa8
mov qword [rsp + 0x108], rax
movabs rax, 0xc39857f622a6270e
mov qword [rsp + 0x110], rax
movabs rax, 0x109dcec7d717b4f8
mov qword [rsp + 0x118], rax
movups xmm0, xmmword [rsp + 0x100]
movups xmm1, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x130]
movdqa xmmword [rsp + 0xe0], xmm0
xorps xmm1, xmmword [rsp + 0x140]
movdqa xmmword [rsp + 0xf0], xmm1
mov r8d, 0x13e
lea rdx, [0x1400a92c8]
lea rcx, [rsp + 0xe0]
call fcn.14000c5d0
call fcn.140010630
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
movss xmm2, dword [rax + 0x14]
movss xmm0, dword [rax + 0xdc]
subss xmm0, xmm2
movss xmm4, dword [rax + 0xd8]
addss xmm0, dword [rax + 0x60]
addss xmm2, xmm0
mov byte [rax + 0x90], 1
movaps xmm0, xmm2
subss xmm0, dword [0x140079a64]
cvttss2si edx, xmm0
subss xmm2, xmm15
cvttss2si r8d, xmm2
subss xmm4, dword [rax + 0x10]
addss xmm4, dword [rax + 0x5c]
addss xmm4, dword [rax + 0x10]
subss xmm4, xmm15
cvttss2si r9d, xmm4
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
mov rbx, qword [rax + 0x2b8]
movss xmm2, dword [0x1400a9c10]
addss xmm2, dword [0x1400799e8]
movss dword [0x1400a9c10], xmm2
comiss xmm2, xmm8
jbe 0x14003a656
movaps xmm2, xmm7
movss dword [0x1400a9c10], xmm7
movaps xmm6, xmm7
mov dword [rsp + 0x160], 0x44c80000
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x164], xmm0
movd xmm10, r9d
cvtdq2ps xmm10, xmm10
movd xmm1, r8d
cvtdq2ps xmm1, xmm1
movss dword [rsp + 0x16c], xmm1
nop
movaps xmm1, xmm6
mulss xmm1, xmm11
subss xmm1, xmm2
comiss xmm7, xmm1
jbe 0x14003a6a6
addss xmm1, xmm8
movaps xmm3, xmm8
movaps xmm2, xmm8
lea rcx, [rsp + 0x90]
call fcn.14003b620
movzx r9d, byte [rsp + 0x91]
shl r9d, 8
movzx eax, byte [rsp + 0x92]
shl eax, 0x10
add r9d, eax
movzx eax, byte [rsp + 0x93]
shl eax, 0x18
add r9d, eax
movzx eax, byte [rsp + 0x90]
add r9d, eax
movaps xmm0, xmm10
addss xmm0, xmm6
movss dword [rsp + 0x168], xmm0
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm7
lea r8, [rsp + 0x160]
lea rdx, [rsp + 0x168]
mov rcx, rbx
call fcn.140023750
addss xmm6, xmm8
comiss xmm12, xmm6
jbe 0x14003a73e
movss xmm2, dword [0x1400a9c10]
jmp 0x14003a690
call fcn.140010770
mov qword [rsp + 0x3a0], r13
lea rax, [0x140079894]
mov qword [rsp + 0x3a8], rax
lea rax, str.0.35
mov qword [rsp + 0x3b0], rax
lea rax, [0x1400798a0]
mov qword [rsp + 0x3b8], rax
lea rax, str.0.45
mov qword [rsp + 0x3c0], rax
lea rax, [0x1400798ac]
mov qword [rsp + 0x3c8], rax
lea r9, [rsp + 0x3a0]
call fcn.14002fb10
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003a7ec
mov qword [rsp + 0x170], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x170]
call fcn.140010000
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003a827
mov qword [rsp + 0x178], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x178]
call fcn.140010000
mov dword [rsp + 0xa0], 0x42c80000
mov dword [rsp + 0xc0], 0x41480000
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xc0]
lea r8, [0x1400a92cc]
lea rcx, [0x1400798c8]
call fcn.1400301c0
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003a8ae
mov qword [rsp + 0x180], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x180]
call fcn.140010000
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003a8e9
mov qword [rsp + 0x188], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x188]
call fcn.140010000
mov dword [rsp + 0xc0], 0x461c4000
mov dword [rsp + 0xa0], 0x3f800000
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xa0]
lea r8, [0x1400a92c4]
lea rcx, [0x1400798f0]
call fcn.1400301c0
call fcn.140038620
mov ebx, eax
mov ecx, eax
call fcn.1400388b0
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rsp + 0x190], 0x30
mov dword [rsp + 0x194], 0x2b4
mov ecx, 8
call fcn.14003c170
mov r12, rax
mov qword [rsp + 0x210], rax
lea rdi, [rax + 8]
mov qword [rsp + 0x220], rdi
mov rcx, qword [rsp + 0x190]
mov qword [rax], rcx
mov qword [rsp + 0x218], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov ecx, 8
call fcn.14003c170
mov rbx, rax
mov qword [rsp + 0x70], rax
lea rcx, [rax + 8]
mov qword [rsp + 0x80], rcx
sub rdi, r12
mov r8, rdi
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x70]
lea rdx, [rsi + 0x212b208]
mov rcx, r15
call fcn.140038940
mov rbx, rax
lea rdx, [0x1400a9be8]
lea rcx, [0x140079948]
call fcn.14003b790
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.1400102a0
lea rcx, [rsp + 0x70]
cmp byte [0x1400a9be8], 0
je 0x14003aa36
movaps xmm0, xmmword [0x140079bd0]
movups xmmword [rsp + 0x70], xmm0
lea rdx, [0x140079970]
call fcn.14002cf20
xor al, al
jmp 0x14003aa50
movaps xmm0, xmmword [0x140079bc0]
movups xmmword [rsp + 0x70], xmm0
lea rdx, [0x140079974]
call fcn.14002cf20
mov al, 0xe
mov byte [rsp + 0x4e0], al
test r15, r15
je 0x14003aa7b
mov qword [rsp + 0x20], r14
mov r9d, 1
lea r8, [rsp + 0x4e0]
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003aacd
mov qword [rsp + 0x198], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x198]
call fcn.140010000
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003ab08
mov qword [rsp + 0x1c0], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x1c0]
call fcn.140010000
call fcn.140038620
mov ebx, eax
mov ecx, eax
call fcn.1400388b0
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
mov dword [rsp + 0x1a0], 0x30
mov dword [rsp + 0x1a4], 0x414
mov ecx, 8
call fcn.14003c170
mov r13, rax
mov qword [rsp + 0x280], rax
lea rdi, [rax + 8]
mov qword [rsp + 0x290], rdi
mov rcx, qword [rsp + 0x1a0]
mov qword [rax], rcx
mov qword [rsp + 0x288], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov ecx, 8
call fcn.14003c170
mov rbx, rax
mov qword [rsp + 0x70], rax
lea rcx, [rax + 8]
mov qword [rsp + 0x80], rcx
sub rdi, r13
mov r8, rdi
mov rdx, r13
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x70]
lea rdx, [rsi + 0x212b208]
mov rcx, r12
call fcn.140038940
mov rbx, rax
lea rdx, [0x1400a9bea]
lea rcx, [0x140079978]
call fcn.14003b790
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.1400102a0
lea rcx, [rsp + 0x70]
cmp byte [0x1400a9bea], 0
je 0x14003ac17
movaps xmm0, xmmword [0x140079bd0]
movups xmmword [rsp + 0x70], xmm0
lea rdx, [0x140079970]
call fcn.14002cf20
xor al, al
jmp 0x14003ac31
movaps xmm0, xmmword [0x140079bc0]
movups xmmword [rsp + 0x70], xmm0
lea rdx, [0x140079974]
call fcn.14002cf20
mov al, 0xe
mov byte [rsp + 0x4e8], al
test r15, r15
je 0x14003ac5c
mov qword [rsp + 0x20], r14
mov r9d, 1
lea r8, [rsp + 0x4e8]
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003acae
mov qword [rsp + 0x1a8], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x1a8]
call fcn.140010000
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003acf0
mov qword [rsp + 0x1b0], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x1b0]
call fcn.140010000
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003ad32
mov qword [rsp + 0x1b8], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x1b8]
call fcn.140010000
mov rcx, qword [0x1400a9990]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003ad6d
mov qword [rsp + 0x128], 0
movaps xmm1, xmm9
lea rcx, [rsp + 0x128]
call fcn.140010000
lea rdx, [0x1400a9be9]
lea rcx, str.__Unsupport_Nvidia_Experience_
call fcn.14003b790
test al, al
je 0x14003ada4
mov rcx, qword [rsp + 0x98]
cmp byte [0x1400a9be9], 0
je 0x14003ad9c
mov edx, 0x11
jmp 0x14003ad9e
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
call fcn.140038620
mov ebx, eax
mov ecx, eax
call fcn.1400388b0
mov rdi, rax
mov qword [rsp + 0xc0], rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
mov qword [rsp + 0xa0], rax
mov ecx, dword [0x1400a9bec]
test ecx, ecx
jne 0x14003adec
mov dword [rsp + 0x60], 0x3deb851f
jmp 0x14003ae2e
cmp ecx, 1
jne 0x14003adfb
mov dword [rsp + 0x60], 0x3e99999a
jmp 0x14003ae2e
cmp ecx, 2
jne 0x14003ae0a
mov dword [rsp + 0x60], 0x3eb33333
jmp 0x14003ae2e
cmp ecx, 3
jne 0x14003ae19
mov dword [rsp + 0x60], 0x3ecccccd
jmp 0x14003ae2e
cmp ecx, 4
mov dword [rsp + 0x60], 0x3ee66666
je 0x14003ae2e
mov dword [rsp + 0x60], 0x3f000000
test r12, r12
je 0x14003b13c
lea rsi, [rdi + 0x212b208]
mov dword [rsp + 0x1e8], 0x60
mov dword [rsp + 0x1ec], 0x20
mov dword [rsp + 0x1f0], 0x70
mov ecx, 0xc
call fcn.14003c170
mov r13, rax
mov qword [rsp + 0x130], rax
lea rdi, [rax + 0xc]
mov qword [rsp + 0x140], rdi
mov r8d, 0xc
lea rdx, [rsp + 0x1e8]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x138], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa8], xmm0
mov ecx, 0xc
call fcn.14003c170
mov rbx, rax
mov qword [rsp + 0xa8], rax
lea rcx, [rax + 0xc]
mov qword [rsp + 0xb8], rcx
sub rdi, r13
mov r8, rdi
mov rdx, r13
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0xc]
mov qword [rsp + 0xb0], rax
lea r8, [rsp + 0xa8]
mov rdx, rsi
mov rcx, r12
call fcn.140038940
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rsp + 0x60]
mov rdx, rax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rsp + 0xa8], r14d
mov qword [rsp + 0xac], 0x7d8
mov dword [rsp + 0xb4], r14d
mov dword [rsp + 0xb8], 0x10
mov dword [rsp + 0xbc], 0x1ac
mov ecx, 0x18
call fcn.14003c170
mov r15, rax
mov qword [rsp + 0x100], rax
lea rdi, [rax + 0x18]
mov qword [rsp + 0x110], rdi
mov r8d, 0x18
lea rdx, [rsp + 0xa8]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x108], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xe0], xmm0
mov ecx, 0x18
call fcn.14003c170
mov rbx, rax
mov qword [rsp + 0xe0], rax
lea rcx, [rax + 0x18]
mov qword [rsp + 0xf0], rcx
sub rdi, r15
mov r8, rdi
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x18]
mov qword [rsp + 0xe8], rax
lea r8, [rsp + 0xe0]
mov rdx, rsi
mov rcx, r12
call fcn.140038940
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [0x1400a92cc]
mov rdx, rax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rsi, qword [rsp + 0xc0]
mov dword [rsp + 0x1f8], 8
mov dword [rsp + 0x1fc], 0x10b8
mov dword [rsp + 0x200], 0xca8
mov ecx, 0xc
call fcn.14003c170
mov r12, rax
mov qword [rsp + 0xc0], rax
lea rdi, [rax + 0xc]
mov qword [rsp + 0xd0], rdi
mov r8d, 0xc
lea rdx, [rsp + 0x1f8]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0xc8], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xe0], xmm0
mov ecx, 0xc
call fcn.14003c170
mov rbx, rax
mov qword [rsp + 0xe0], rax
lea rcx, [rax + 0xc]
mov qword [rsp + 0xf0], rcx
sub rdi, r12
mov r8, rdi
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0xc]
mov qword [rsp + 0xe8], rax
lea r8, [rsp + 0xe0]
lea rdx, [rsi + 0x247f840]
mov rbx, qword [rsp + 0xa0]
mov rcx, rbx
call fcn.140038940
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [0x1400a92c4]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r12, r12
je 0x14003b10f
mov edx, 0xc
mov rcx, r12
call fcn.14003beb8
nop
test r15, r15
je 0x14003b122
mov edx, 0x18
mov rcx, r15
call fcn.14003beb8
nop
test r13, r13
je 0x14003b134
mov edx, 0xc
mov rcx, r13
call fcn.14003beb8
mov r13, qword [rsp + 0x280]
call fcn.14000ec50
nop
test r13, r13
je 0x14003b155
mov edx, 8
mov rcx, r13
call fcn.14003beb8
nop
mov rcx, qword [rsp + 0x210]
test rcx, rcx
je 0x14003b16c
mov edx, 8
call fcn.14003beb8
movzx esi, byte [rsp + 0x4d8]
call fcn.140008a90
mov rcx, qword [0x1400a9b90]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r14d
movss dword [rsp + 0x28], xmm8
mov dword [rsp + 0x20], r14d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1400a9b90]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003b218
call fcn.140008f20
mov rbx, qword [0x1400a9990]
cmp dword [rbx + 0x1c90], 0
jg 0x14003b1e8
mov r8d, 0x675
lea rdx, str.D:SourceCodeExternalimguiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x1c98]
mov rcx, qword [rax]
add rcx, 0x40
mov rax, r14
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14002a880
mov rcx, qword [0x1400a9b90]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1400a9b90]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
mov rdi, qword [rsp + 0x98]
movabs rbx, 0xaca5a61d3f10cfec
movabs r15, 0xcd3710d422219a33
movabs r12, 0x109dcec7d71784d6
lea r13, [0x140079888]
jne 0x140039d30
mov rcx, qword [0x1400a9b90]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
lea r13, [0x140079888]
jne 0x140039d30
call fcn.14002aff0
mov rcx, qword [0x1400a9b90]
mov rax, qword [rcx]
lea rdx, [0x1400a9ba0]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x14003b2c9
mov r8d, 0x2f
lea rdx, str.D:SourceCodeExternalmain.h
lea rcx, [0x14003e8b4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.14002ae60
jmp 0x140039d26
call fcn.14002aff0
mov rcx, qword [0x1400a9b40]
test rcx, rcx
je 0x14003b2f1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400a9b40], r14
mov rcx, qword [0x1400a9b58]
test rcx, rcx
je 0x14003b303
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x1400a9b58], r14
mov qword [0x1400a9b60], r14
mov qword [0x1400a9b68], r14
mov qword [0x1400a9b70], r14
mov qword [0x1400a9b78], r14
mov qword [0x1400a9b80], r14
mov dword [0x1400a92c0], 9
mov byte [0x1400a9b50], 0
mov byte [0x1400a9105], 1
mov rbx, qword [0x1400a9990]
mov rcx, rbx
call fcn.140007db0
cmp qword [0x1400a9990], rbx
jne 0x14003b364
mov qword [0x1400a9990], r14
test rbx, rbx
je 0x14003b392
mov rcx, rbx
call fcn.1400186d0
mov rax, qword [0x1400a9990]
test rax, rax
je 0x14003b383
dec dword [rax + 0x3b4]
mov rdx, qword [0x1400a9980]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rcx, qword [0x1400a9b90]
test rcx, rcx
je 0x14003b3ab
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400a9b90], r14
mov rcx, qword [0x1400a9b88]
test rcx, rcx
je 0x14003b3c4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400a9b88], r14
mov rcx, rdi
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0x248]
mov rcx, qword [rsp + 0x270]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x14003b43e
mov rcx, qword [0x1400a9b88]
mov rdx, qword [0x1400a9b90]
test rdx, rdx
je 0x14003b411
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x1400a9b90], r14
mov rcx, qword [0x1400a9b88]
test rcx, rcx
je 0x14003b423
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov qword [0x1400a9b88], r14
mov rdx, qword [rsp + 0x248]
mov rcx, qword [rsp + 0x270]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, 1
lea r11, [rsp + 0x490]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret