Function at 0x140051610
Capabilities:
Check for time delay via gettickcount
Create thread
Log keystrokes via polling
Terminate process

Disassembly:
push rbp
push rbx
push r13
push r15
lea rbp, [rsp - 0x498]
sub rsp, 0x598
mov rax, qword [0x1400f10c0]
xor rax, rsp
mov qword [rbp + 0x3e0], rax
lea rcx, str.dnsapi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
mov qword [0x140130fb0], rax
lea rdx, str.DnsFlushResolverCache
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x14005166d
mov rcx, qword [0x140130fb0]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [sym.imp.USER32.dll_DefWindowProcA]
xor r13d, r13d
xor ecx, ecx
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x270], r13
mov dword [rbp + 0x260], 0x50
mov dword [rbp + 0x264], 0x40
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov qword [rbp + 0x2a8], r13
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x280], xmm0
lea rbx, [0x1400de3a0]
movdqa xmmword [rbp + 0x290], xmm1
lea rcx, [rbp + 0x260]
mov qword [rbp + 0x278], rax
mov qword [rbp + 0x2a0], rbx
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov rax, qword [rbp + 0x278]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x2a0]
mov r8, rbx
mov qword [rsp + 0x58], r13
xor ecx, ecx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x230], rax
mov r15, rax
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov qword [0x140131358], rax
mov rcx, rax
test rax, rax
je 0x1400547d2
lea rdx, [0x140131360]
mov qword [0x140131370], r13
mov qword [rsp + 0x30], rdx
mov r9, r15
lea rdx, [0x140131370]
mov qword [0x14013137c], r13
mov qword [rsp + 0x28], rdx
mov r8d, 1
mov dword [0x140131384], r13d
xor edx, edx
mov qword [0x14013138c], r13
mov dword [0x140131394], r13d
mov qword [0x1401313a4], r13
mov dword [0x140131398], 1
mov dword [0x140131388], 1
mov dword [0x140131378], r13d
mov dword [0x14013139c], 1
mov dword [0x1401313a0], 0x50
mov dword [0x1401313ac], 1
mov rax, qword [rax]
mov dword [rsp + 0x20], 0x40
call qword [rax + 0x80]
test eax, eax
js 0x1400547cb
mov qword [rsp + 0x5c0], rsi
lea rdx, [rbp + 0x390]
mov qword [rsp + 0x5c8], rdi
xorps xmm0, xmm0
mov qword [rsp + 0x5d0], r12
mov rcx, r15
mov qword [rsp + 0x590], r14
movaps xmmword [rsp + 0x580], xmm6
movaps xmmword [rsp + 0x570], xmm7
movaps xmmword [rsp + 0x560], xmm8
movaps xmmword [rsp + 0x550], xmm9
movaps xmmword [rsp + 0x540], xmm10
movaps xmmword [rsp + 0x530], xmm11
movaps xmmword [rsp + 0x520], xmm12
movaps xmmword [rsp + 0x510], xmm13
movaps xmmword [rsp + 0x500], xmm14
movaps xmmword [rsp + 0x4f0], xmm15
movups xmmword [rbp + 0x390], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
xor edx, edx
mov rcx, r15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r15
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rsi, qword [0x140130d40]
mov qword [rbp - 0x80], rsi
test rsi, rsi
je 0x1400518b0
inc dword [rsi + 0xfc]
mov ecx, 0x6038
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x1400518cc
xor edx, edx
mov rcx, rax
call fcn.1400043c0
jmp 0x1400518cf
mov rax, r13
mov qword [0x140130d40], rax
call fcn.140008a30
test rsi, rsi
je 0x1400518e9
mov qword [0x140130d40], rsi
jmp 0x1400518f4
mov rsi, qword [0x140130d40]
mov qword [rbp - 0x80], rsi
or dword [rsi + 8], 0x400
mov r10, qword [rsi + 0x58]
mov qword [rsi + 0x20], r13
call fcn.14003ae20
movss xmm6, dword [0x1400de734]
mov rcx, r10
movaps xmm2, xmm6
mov qword [rsp + 0x20], rax
call fcn.140038e00
mov r10, qword [rsi + 0x58]
call fcn.14003ae20
mov rcx, r10
mov qword [rsp + 0x20], rax
movaps xmm2, xmm6
call fcn.140038e00
mov rcx, qword [rsi + 0x58]
lea rbx, [0x1400dc780]
movss xmm12, dword [0x1400de6b0]
lea rdx, [rbp + 0x20]
xorps xmm2, xmm2
mov qword [0x140130d60], rax
movups xmmword [rbp - 0x60], xmm2
xor eax, eax
mov dword [rbp - 0x58], 3
movups xmmword [rbp - 0x20], xmm2
mov qword [rbp + 0x10], rax
lea rax, [0x14012ccc0]
movups xmmword [rbp - 0x70], xmm2
mov byte [rbp - 0x64], 1
mov edi, 0xffff
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x20], xmm0
movups xmmword [rbp - 0x30], xmm2
mov dword [rbp - 0x54], 1
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x30], xmm1
movaps xmmword [rbp + 0x50], xmm2
mov dword [rbp - 0x2c], 0x7f7fffff
movaps xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x60], xmm0
movsd xmm0, qword [rbp + 0x10]
mov dword [rbp - 0x20], 0x3f800000
mov word [rbp - 0x1c], di
movaps xmm1, xmmword [rbp - 0x20]
movsd qword [rbp + 0xa0], xmm0
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x70], xmm1
movaps xmmword [rbp + 0x80], xmm2
movaps xmmword [rbp + 0x90], xmm2
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x28], 0x2e94
mov dword [rbp + 0x34], 0x42000000
mov qword [rbp + 0x58], rbx
call fcn.140038b30
xorps xmm2, xmm2
mov qword [rbp + 0xb8], rax
movups xmmword [rbp - 0x60], xmm2
mov dword [rbp - 0x58], 3
mov r14, rax
movups xmmword [rbp - 0x20], xmm2
mov dword [rbp - 0x54], 1
xor eax, eax
movaps xmm1, xmmword [rbp - 0x60]
movups xmmword [rbp - 0x70], xmm2
mov byte [rbp - 0x64], 1
movaps xmm0, xmmword [rbp - 0x70]
movups xmmword [rbp - 0x30], xmm2
mov dword [rbp - 0x2c], 0x7f7fffff
movaps xmmword [rbp + 0x20], xmm0
movaps xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x30], xmm1
mov dword [rbp - 0x20], 0x3f800000
mov word [rbp - 0x1c], di
movaps xmm1, xmmword [rbp - 0x20]
movaps xmmword [rbp + 0x60], xmm0
movaps xmmword [rbp + 0x70], xmm1
mov qword [rbp + 0x10], rax
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x50], xmm2
movaps xmmword [rbp + 0x80], xmm2
movaps xmmword [rbp + 0x90], xmm2
movsd xmm0, qword [rbp + 0x10]
lea rax, [0x14010bce0]
mov rcx, qword [rsi + 0x58]
lea rdx, [rbp + 0x20]
movss xmm10, dword [0x1400de74c]
movsd qword [rbp + 0xa0], xmm0
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x28], 0x20fe0
mov dword [rbp + 0x34], 0x420c0000
mov qword [rbp + 0x58], rbx
call fcn.140038b30
mov rcx, qword [rsi + 0x58]
lea rdx, [rbp + 0x20]
xorps xmm2, xmm2
mov qword [rbp + 0x228], rax
movups xmmword [rbp - 0x60], xmm2
mov r12, rax
xor eax, eax
movups xmmword [rbp - 0x20], xmm2
mov qword [rbp + 0x10], rax
lea rax, [0x1400f1160]
movups xmmword [rbp - 0x70], xmm2
mov byte [rbp - 0x64], 1
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x20], xmm0
movups xmmword [rbp - 0x30], xmm2
mov dword [rbp - 0x58], 3
movaps xmmword [rbp + 0x50], xmm2
mov dword [rbp - 0x54], 1
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x30], xmm1
mov dword [rbp - 0x2c], 0x7f7fffff
movaps xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x60], xmm0
movsd xmm0, qword [rbp + 0x10]
mov dword [rbp - 0x20], 0x3f800000
mov word [rbp - 0x1c], di
movaps xmm1, xmmword [rbp - 0x20]
movsd qword [rbp + 0xa0], xmm0
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x70], xmm1
movaps xmmword [rbp + 0x80], xmm2
movaps xmmword [rbp + 0x90], xmm2
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x28], 0x178ec
mov dword [rbp + 0x34], 0x41b80000
mov qword [rbp + 0x58], rbx
call fcn.140038b30
xorps xmm2, xmm2
lea rdx, [rbp + 0x20]
movups xmmword [rbp - 0x60], xmm2
xor eax, eax
mov dword [rbp - 0x58], 3
movups xmmword [rbp - 0x20], xmm2
mov qword [rbp + 0x10], rax
lea rax, [0x140108a50]
movups xmmword [rbp - 0x70], xmm2
mov byte [rbp - 0x64], 1
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x20], xmm0
movups xmmword [rbp - 0x30], xmm2
mov dword [rbp - 0x54], 1
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x30], xmm1
mov dword [rbp - 0x2c], 0x7f7fffff
movaps xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x60], xmm0
movsd xmm0, qword [rbp + 0x10]
mov dword [rbp - 0x20], 0x3f800000
mov word [rbp - 0x1c], di
movaps xmm1, xmmword [rbp - 0x20]
movaps xmmword [rbp + 0x50], xmm2
movsd qword [rbp + 0xa0], xmm0
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x70], xmm1
movaps xmmword [rbp + 0x80], xmm2
movaps xmmword [rbp + 0x90], xmm2
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x28], 0xb98
mov dword [rbp + 0x34], 0x41b00000
mov qword [rbp + 0x58], rbx
mov rcx, qword [rsi + 0x58]
call fcn.140038b30
cmp qword [0x140130f90], r13
mov qword [0x140130d68], rax
jne 0x140051c94
mov rcx, qword [0x140131360]
lea rax, [0x140130f90]
mov qword [rsp + 0x70], rax
lea rdx, [0x1401095f0]
mov qword [rsp + 0x68], r13
mov r9d, 0xf8
mov qword [rsp + 0x60], r13
mov r8d, 0x26e3
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0xf8
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
xor ecx, ecx
call fcn.140034760
test dword [rsi + 8], 0x400
mov rax, qword [0x140130d40]
je 0x140051d07
movdqa xmm0, xmmword [0x1400deb10]
movdqa xmm1, xmmword [0x1400deb20]
mov dword [rax + 0x393c], 0x40400000
mov dword [rax + 0x3934], 0x41000000
mov dword [rax + 0x3938], 0x41000000
mov qword [rax + 0x3900], r13
movups xmmword [rax + 0x39f4], xmm0
xorps xmm0, xmm0
movups xmmword [rax + 0x3a24], xmm0
movdqa xmm0, xmmword [0x1400dec80]
movups xmmword [rax + 0x39d4], xmm0
movups xmmword [rax + 0x3a44], xmm1
mov rcx, r15
call fcn.14003e740
mov rbx, qword [0x140130d40]
mov rdi, qword [0x140131360]
test rbx, rbx
je 0x140051d28
inc dword [rbx + 0xfc]
mov ecx, Ordinal_41
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140051d57
mov qword [rax], r13
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
mov dword [rax + 0x20], 0x1388
mov dword [rax + 0x24], 0x2710
jmp 0x140051d5a
mov rax, r13
or dword [rbx + 0xc], 0x1008
lea rcx, str.imgui_impl_dx9
mov qword [rbx + 0x98], rcx
mov rcx, rdi
mov qword [rbx + 0xa8], rax
mov qword [rax], rdi
mov rax, qword [rdi]
call qword [rax + reloc.WS2_32.dll_htonl]
test dword [rbx + 8], 0x400
je 0x140051dd8
mov rax, qword [0x140130d40]
lea rcx, [fcn.14003e3e0]
mov qword [rax + 0x3890], rcx
lea rcx, [0x14003e4c0]
mov qword [rax + 0x3898], rcx
lea rcx, [0x14003e540]
mov qword [rax + 0x38a0], rcx
lea rcx, [0x14003e5b0]
mov qword [rax + 0x38a8], rcx
lea rcx, [0x14003e710]
mov qword [rax + 0x38b0], rcx
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x330]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x338]
lea rcx, [0x140131040]
movss xmm9, dword [0x1400de66c]
add eax, 0xfffffcf4
movd xmm7, eax
mov eax, dword [rbp + 0x33c]
add eax, 0xfffffdf8
cvtdq2ps xmm7, xmm7
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm7, xmm9
mulss xmm8, xmm9
movss dword [rbp - 0x74], xmm7
movss dword [rbp - 0x78], xmm8
call fcn.140069630
movss xmm6, dword [0x1400de728]
lea rdi, [0x1400de3e0]
movss xmm13, dword [0x1400de624]
xorps xmm0, xmm0
movss xmm14, dword [0x1400de768]
xorps xmm11, xmm11
movss xmm15, dword [0x1400de740]
movups xmmword [rbp + 0x360], xmm0
movups xmmword [rbp + 0x370], xmm0
movups xmmword [rbp + 0x380], xmm0
nop dword [rax]
nop dword [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x360]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140051ed0
lea rcx, [rbp + 0x360]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x360]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x14005456f
mov rax, qword [0x140130d40]
test rax, rax
je 0x140051ee5
mov rcx, qword [rax + 0xa8]
jmp 0x140051ee8
mov rcx, r13
cmp qword [rcx + 0x18], 0
jne 0x140051ef4
call fcn.14003e1f0
call fcn.14003f6e0
call fcn.14000b830
mov rax, qword [0x140130d40]
lea rdx, [0x1400de3c8]
xor ecx, ecx
or dword [rax + 0x48d8], 0x43
movss dword [rax + 0x48ec], xmm7
movss dword [rax + 0x48f0], xmm8
mov qword [rax + 0x48f4], 0
mov dword [rax + 0x48dc], 2
mov byte [rax + 0x4914], 1
mov dword [rax + 0x48fc], 0x44430000
mov dword [rax + 0x4900], 0x44020000
mov dword [rax + 0x48e0], 1
mov dword [rax + 0x4938], 0x3f800000
call qword [sym.imp.USER32.dll_FindWindowA]
mov ecx, 0x24
mov rbx, rax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140051f90
mov edx, 6
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x1400547c2
cmp byte [0x140130d54], 0
jne 0x140052653
mov r8d, Ordinal_301
lea rdx, [0x140108a4d]
lea rcx, [0x1400de3c8]
call fcn.140011a60
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140051fd7
call fcn.14004f2f0
lea rdx, [0x1400de3c8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
xor edx, edx
mov dword [rsp + 0x28], reloc.WS2_32.dll_ntohs
xor ecx, ecx
mov dword [rsp + 0x20], reloc.WS2_32.dll_ntohs
mov r9d, 0x208
mov r8d, 0x30c
mov rbx, rax
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov r8d, 1
mov rcx, rbx
mov rdx, rax
call qword [sym.imp.USER32.dll_SetWindowRgn]
mov rcx, qword [0x140130d40]
lea r8, str.Foreground
mov edx, 1
mov rax, qword [rcx + 0x3ff8]
movsd xmm0, qword [rax + 0x50]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movsd qword [rbp + 0x2b0], xmm0
mov rcx, qword [rax + 0x38]
mov rbx, qword [rax + 0x300]
call fcn.14000a8a0
movss xmm0, dword [0x140130fa0]
ucomiss xmm0, xmm11
jp 0x14005208e
jne 0x14005208e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x140130fa0], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x140130fa0]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm6
cvtsi2ss xmm1, rax
mov rax, qword [0x140130d40]
comiss xmm1, xmm0
movss xmm1, dword [0x140130fa4]
jbe 0x140052139
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400520ff
movss xmm2, dword [0x1400de694]
comiss xmm2, xmm1
jbe 0x1400520f1
movaps xmm0, xmm13
divss xmm0, dword [rax + 0xe8]
mulss xmm0, xmm14
addss xmm1, xmm0
movss dword [0x140130fa4], xmm1
comiss xmm1, xmm2
jb 0x14005212f
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x14005212f
comiss xmm1, xmm11
jbe 0x140052122
movaps xmm0, xmm13
divss xmm0, dword [rax + 0xe8]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [0x140130fa4], xmm1
comiss xmm11, xmm1
jb 0x14005212f
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x140130fa0], 0
cmp byte [0x140130d76], 0
movss xmm2, dword [0x140130e88]
je 0x14005217c
comiss xmm12, xmm2
jbe 0x14005216d
movaps xmm0, xmm13
divss xmm0, dword [rax + 0xe8]
mulss xmm0, xmm14
addss xmm2, xmm0
movss dword [0x140130e88], xmm2
comiss xmm2, xmm12
jb 0x1400521ac
mov byte [0x140130d76], 0
jmp 0x1400521ac
comiss xmm2, xmm11
jbe 0x14005219f
movaps xmm0, xmm13
divss xmm0, dword [rax + 0xe8]
mulss xmm0, xmm14
subss xmm2, xmm0
movss dword [0x140130e88], xmm2
comiss xmm11, xmm2
jb 0x1400521ac
mov byte [0x140130d77], 0
lea rcx, [rbp + 0x218]
movss dword [rbp + 0x224], xmm1
mov qword [rbp + 0x218], 0x437f0000
mov dword [rbp + 0x220], 0
call fcn.1400064e0
movss xmm6, dword [rbp + 0x2b0]
mov r8d, eax
movss xmm7, dword [rbp + 0x2b4]
movaps xmm0, xmm6
movaps xmm1, xmm7
mov rcx, r12
addss xmm0, dword [0x1400de788]
addss xmm1, dword [0x1400de770]
movss dword [rbp + 0xc0], xmm0
movss dword [rbp + 0xc4], xmm1
test eax, 0xff000000
je 0x140052274
test r12, r12
jne 0x140052225
mov rax, qword [rbx + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, str.___LEAKS_PRIVATE
movss dword [rsp + 0x40], xmm11
lea r9, [rbp + 0xc0]
mov qword [rsp + 0x38], rdi
movaps xmm2, xmm10
mov qword [rsp + 0x30], rax
mov rdx, rbx
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r8d
movups xmmword [rbp + 0x2b0], xmm0
call fcn.14003bd60
mov rcx, r14
call fcn.140015310
mov rcx, qword [0x140130d40]
lea rdx, [rbp + 0xb0]
mov dword [rbp + 0xb0], 0x420c0000
mov dword [rbp + 0xb4], 0x420c0000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, dword [0x1400de7c8]
movss dword [rax + 0x138], xmm0
call fcn.140001580
test al, al
jne 0x1400547c2
call fcn.1400153b0
cmp byte [0x140130d77], 0
mov rax, qword [0x140130d40]
mov rcx, qword [rax + 0x3ff8]
mov byte [rcx + 0xed], 1
je 0x1400523f3
movss xmm0, dword [0x140130e88]
lea r8, [0x140131278]
cmp qword [0x140131290], 0xf
lea rcx, [rbp + 0x1d8]
movss dword [rbp + 0x1e4], xmm0
cmova r8, qword [0x140131278]
mov dword [rbp + 0x1d8], 0x3f800000
mov dword [rbp + 0x1dc], 0x3f800000
mov dword [rbp + 0x1e0], 0x3f800000
call fcn.1400064e0
mov r9d, eax
addss xmm7, dword [0x1400de7ac]
addss xmm6, dword [0x1400de7a8]
movss dword [rbp + 0xd4], xmm7
movss dword [rbp + 0xd0], xmm6
test eax, 0xff000000
je 0x1400523f3
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [r8 + rcx], 0
jne 0x140052390
add rcx, r8
cmp r8, rcx
je 0x1400523f3
mov rax, qword [rbx + 0x38]
mov rdx, rbx
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
movss xmm2, dword [rax + 0x10]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x2b0]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov rcx, qword [rax + 8]
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0xd0]
movups xmmword [rbp + 0x2b0], xmm0
call fcn.14003bd60
call fcn.1400183b0
mov rbx, qword [0x140130d40]
lea rdx, [rbp + 0xd8]
mov ecx, reloc.WS2_32.dll_ntohl
mov dword [rbp + 0xe8], 0x43500000
mov dword [rbp + 0xec], 0x43960000
mov dword [rbp + 0xd8], 0x41200000
mov rax, qword [rbx + 0x3ff8]
mov dword [rbp + 0xdc], 0x40a00000
mov byte [rax + 0xed], 1
mov rax, qword [rbx + 0x3ff8]
movss xmm1, dword [rax + 0x54]
movss xmm0, dword [rax + 0x50]
subss xmm1, dword [rax + 0xbc]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm1, dword [0x1400de798]
addss xmm0, dword [0x1400de7a4]
movss dword [rax + 0x13c], xmm1
movss dword [rax + 0x138], xmm0
mov rax, qword [rbx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rbx + 0x3ff8]
call fcn.140006920
lea rdx, [rbp + 0xe0]
mov dword [rbp + 0xe0], 0x41200000
mov ecx, 2
mov dword [rbp + 0xe4], 0x41700000
call fcn.140006920
movsxd r8, dword [rbx + 0x128]
lea rcx, [0x1400dc74c]
mov rax, qword [rbx + 0x130]
xor edx, edx
mov r8d, dword [rax + r8*4 - 4]
call fcn.140005f50
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x140052509
lea r8, [0x1400dc74c]
mov edx, ntohs
mov ecx, eax
call fcn.14002b540
lea r8, [rbp + 0xe8]
mov edx, edi
call fcn.140001c40
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x30], r13
lea r8, [0x140130d80]
mov dword [rsp + 0x28], r13d
lea rdx, [0x1400dc738]
mov r9d, 0xff
mov qword [rsp + 0x20], rax
lea rcx, str.user
mov qword [rbp + 0xf0], 0
call fcn.140048350
mov rcx, qword [0x140130d40]
lea rdx, [rbp + 0xf8]
mov dword [rbp + 0xf8], 0x433b0000
mov dword [rbp + 0xfc], 0x41f00000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xbc]
mov byte [rax + 0x179], 1
addss xmm0, dword [0x1400de784]
movss dword [rax + 0x13c], xmm0
call fcn.1400022e0
test al, al
je 0x14005263c
mov ecx, 1
call fcn.1400c2180
lea rcx, [rbp + 0x318]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140056070]
xor ecx, ecx
mov dword [rsp + 0x20], r13d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x310], rax
test rax, rax
je 0x14005458a
cmp dword [rbp + 0x318], 0
je 0x14005457e
movaps xmm0, xmmword [rbp + 0x310]
lea rcx, [rbp + 0x2b0]
movdqa xmmword [rbp + 0x2b0], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005457e
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x310], xmm0
call fcn.140001ff0
call fcn.1400184e0
call fcn.140014b30
movss xmm6, dword [0x1400de728]
cmp byte [0x140130d53], 0
je 0x14005273c
xor ecx, ecx
cmp byte [0x140130d7a], cl
je 0x1400526d0
mov qword [rbp + 0x248], r13
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x248]
xor edx, edx
lea r9, [0x1400c7040]
mov qword [rsp + 0x20], rax
mov r8d, 1
lea rcx, [0x1400c7050]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140052736
mov rax, qword [rbp + 0x248]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x248]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x248]
jmp 0x140052730
mov qword [rbp + 0x250], r13
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x250]
xor edx, edx
lea r9, [0x1400c7040]
mov qword [rsp + 0x20], rax
mov r8d, 1
lea rcx, [0x1400c7050]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140052736
mov rax, qword [rbp + 0x250]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x250]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x250]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x140130d78], 0
je 0x14005276c
cmp byte [0x140130e7f], 0
je 0x14005275b
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov edx, reloc.WS2_32.dll_recvfrom
jmp 0x140052763
call qword [sym.imp.USER32.dll_GetActiveWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
cmp byte [0x140130d54], 0
je 0x1400543c3
mov r8d, Ordinal_301
lea rdx, [0x140108a4d]
lea rcx, [0x1400de3c8]
call fcn.140011a60
mov r14, qword [0x140130d40]
lea rcx, str.user32.dll
mov dword [r14 + 0x3900], r13d
mov dword [r14 + 0x3904], 0x41200000
mov dword [r14 + 0x3944], 0x41200000
mov dword [r14 + 0x3948], 0x41200000
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140052832
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140052829
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x2b0]
mov qword [rbp + 0x2d8], rcx
lea rdx, [rbp + 0x2d0]
mov rcx, r15
mov dword [rbp + 0x2d0], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x2b0], xmm0
mov dword [rbp + 0x2e0], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140052840
call fcn.14004f2f0
mov rcx, qword [0x140130d40]
lea r8, str.Foreground
mov edx, 1
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movsd xmm0, qword [rax + 0x50]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movsd qword [rbp + 0x2b0], xmm0
mov rcx, qword [rax + 0x38]
mov rsi, qword [rax + 0x300]
call fcn.14000a8a0
mov rcx, qword [rbp + 0xb8]
mov r13, rax
call fcn.140015310
mov rdx, qword [0x140130d40]
movss xmm8, dword [0x1400de714]
mov dword [rbp + 0xc8], 0x420c0000
mov dword [rbp + 0xcc], 0x420c0000
mov rcx, qword [rdx + 0x3ff8]
mov byte [rcx + 0xed], 1
mov rcx, qword [rdx + 0x3ff8]
lea rdx, [rbp + 0xc8]
movss xmm1, dword [rcx + 0x54]
movss xmm0, dword [rcx + 0x50]
subss xmm1, dword [rcx + 0xbc]
subss xmm0, dword [rcx + 0xb8]
mov byte [rcx + 0x179], 1
addss xmm1, dword [0x1400de7b4]
addss xmm0, xmm8
movss dword [rcx + 0x13c], xmm1
movss dword [rcx + 0x138], xmm0
call fcn.140001580
test al, al
jne 0x1400547c2
call fcn.1400153b0
movss xmm0, dword [0x140130fa0]
ucomiss xmm0, xmm11
jp 0x14005295a
jne 0x14005295a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x140130fa0], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x140130fa0]
xorps xmm1, xmm1
mov rbx, qword [0x140130d40]
addss xmm0, xmm6
mov eax, eax
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
movss xmm1, dword [0x140130fa4]
jbe 0x140052a05
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400529cb
movss xmm2, dword [0x1400de694]
comiss xmm2, xmm1
jbe 0x1400529bd
movaps xmm0, xmm13
divss xmm0, dword [rbx + 0xe8]
mulss xmm0, xmm14
addss xmm1, xmm0
movss dword [0x140130fa4], xmm1
comiss xmm1, xmm2
jb 0x1400529fb
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x1400529fb
comiss xmm1, xmm11
jbe 0x1400529ee
movaps xmm0, xmm13
divss xmm0, dword [rbx + 0xe8]
mulss xmm0, xmm14
subss xmm1, xmm0
movss dword [0x140130fa4], xmm1
comiss xmm11, xmm1
jb 0x1400529fb
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x140130fa0], 0
lea rcx, [rbp + 0x1e8]
movss dword [rbp + 0x1f4], xmm1
mov qword [rbp + 0x1e8], 0x437f0000
mov dword [rbp + 0x1f0], 0
call fcn.1400064e0
movss xmm7, dword [0x1400de7f4]
lea rdx, [rbp + 0x100]
movss xmm3, dword [0x1400de7e4]
xor r15d, r15d
movss xmm2, dword [rbx + 0x3d58]
mov edi, eax
mov rcx, qword [rbx + 0x3d50]
lea rax, str.LEAKS_PRIVATE
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm7
call fcn.14003b950
movss xmm0, dword [rbp + 0x100]
mov rcx, r12
movss xmm10, dword [rbp + 0x2b4]
addss xmm0, dword [0x1400de6a8]
cvttss2si eax, xmm0
movd xmm1, eax
mov rax, qword [rbx + 0x3ff8]
cvtdq2ps xmm1, xmm1
movss xmm2, dword [rax + 0x58]
movss dword [rbp + 0x100], xmm1
subss xmm2, xmm1
movaps xmm1, xmm10
addss xmm1, xmm6
mulss xmm2, xmm9
movss xmm9, dword [rbp + 0x2b0]
movss dword [rbp + 0x10c], xmm1
movaps xmm0, xmm9
addss xmm0, xmm2
movss dword [rbp + 0x108], xmm0
test edi, 0xff000000
je 0x140052b51
test r12, r12
jne 0x140052afc
mov rax, qword [r13 + 0x38]
mov rcx, qword [rax + 8]
movups xmm0, xmmword [r13 + 0x88]
mov byte [rsp + 0x48], r15b
lea rax, [0x1400de41d]
movss dword [rsp + 0x40], xmm11
lea r9, [rbp + 0x108]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.LEAKS_PRIVATE
mov rdx, r13
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
movups xmmword [rbp + 0x2b0], xmm0
call fcn.14003bd60
movdqa xmm0, xmmword [0x1400deb00]
lea rcx, [rbp + 0x2b0]
movups xmmword [rbp + 0x2b0], xmm0
call fcn.1400064e0
movaps xmm0, xmm9
mov dword [rsp + 0x28], Ordinal_50
addss xmm0, dword [0x1400de7cc]
movaps xmm6, xmm10
movss dword [rsp + 0x20], xmm8
addss xmm6, dword [0x1400de754]
movaps xmm1, xmm10
lea r8, [rbp + 0x110]
addss xmm1, xmm11
mov r9d, eax
movss dword [rbp + 0x110], xmm0
lea rdx, [rbp + 0x118]
movaps xmm0, xmm9
mov rcx, rsi
addss xmm0, xmm11
movss dword [rbp + 0x114], xmm6
movss dword [rbp + 0x11c], xmm1
movss dword [rbp + 0x118], xmm0
call fcn.140037b90
movdqa xmm0, xmmword [0x1400deb00]
lea rcx, [rbp + 0x2b0]
movups xmmword [rbp + 0x2b0], xmm0
call fcn.1400064e0
movaps xmm1, xmm10
movss dword [rbp + 0x12c], xmm6
addss xmm1, dword [0x1400de7bc]
movaps xmm0, xmm9
movss dword [rsp + 0x20], xmm12
addss xmm0, dword [0x1400de78c]
mov r9d, eax
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x128]
mov rcx, r13
movss dword [rbp + 0x124], xmm1
movss dword [rbp + 0x120], xmm0
movss dword [rbp + 0x128], xmm0
call fcn.140037920
lea rdx, [rbp + 0x130]
mov dword [rbp + 0x130], 0x40e00000
mov ecx, reloc.WS2_32.dll_ntohl
mov dword [rbp + 0x134], 0x40e00000
call fcn.140006920
mov rcx, qword [0x140130d40]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
movss xmm1, dword [rax + 0x54]
movss xmm0, dword [rax + 0x50]
subss xmm1, dword [rax + 0xbc]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm1, dword [0x1400de760]
addss xmm0, dword [0x1400de704]
movss dword [rax + 0x13c], xmm1
movss dword [rax + 0x138], xmm0
call fcn.1400183b0
cmp dword [0x140130e80], r15d
lea r9, [rbp + 0x138]
lea r8, str.Security
mov dword [rbp + 0x138], 0x431d0000
sete cl
mov dword [rbp + 0x13c], 0x420c0000
lea rdx, [0x1400db360]
call fcn.1400028b0
test al, al
je 0x140052d1f
mov eax, r15d
mov dword [0x140130e80], eax
jmp 0x140052d25
mov eax, dword [0x140130e80]
cmp eax, 1
mov dword [rbp + 0x140], 0x431d0000
lea r9, [rbp + 0x140]
mov dword [rbp + 0x144], 0x420c0000
sete cl
lea r8, [0x1400de42c]
lea rdx, [0x1400db35c]
call fcn.1400028b0
test al, al
je 0x140052d6a
mov eax, 1
mov dword [0x140130e80], eax
jmp 0x140052d70
mov eax, dword [0x140130e80]
cmp eax, 2
mov dword [rbp + 0x148], 0x431d0000
lea r9, [rbp + 0x148]
mov dword [rbp + 0x14c], 0x420c0000
sete cl
lea r8, str.Visuals
lea rdx, [0x1400db364]
call fcn.1400028b0
test al, al
je 0x140052db5
mov eax, 2
mov dword [0x140130e80], eax
jmp 0x140052dbb
mov eax, dword [0x140130e80]
cmp eax, 3
mov dword [rbp + 0x150], 0x431d0000
lea r9, [rbp + 0x150]
mov dword [rbp + 0x154], 0x420c0000
sete cl
lea r8, str.Weapon
lea rdx, [0x1400db36c]
call fcn.1400028b0
test al, al
je 0x140052e00
mov eax, 3
mov dword [0x140130e80], eax
jmp 0x140052e06
mov eax, dword [0x140130e80]
cmp eax, 4
mov dword [rbp + 0x158], 0x431d0000
lea r9, [rbp + 0x158]
mov dword [rbp + 0x15c], 0x420c0000
sete cl
lea r8, str.Misc
lea rdx, [0x1400db370]
call fcn.1400028b0
test al, al
je 0x140052e4b
mov eax, 4
mov dword [0x140130e80], eax
jmp 0x140052e51
mov eax, dword [0x140130e80]
cmp eax, 5
mov dword [rbp + 0x160], 0x431d0000
lea r9, [rbp + 0x160]
mov dword [rbp + 0x164], 0x420c0000
sete cl
lea r8, str.Settings
lea rdx, [0x1400db368]
call fcn.1400028b0
test al, al
je 0x140052e93
mov dword [0x140130e80], 5
call fcn.1400184e0
mov ecx, 1
call fcn.1400069b0
mov eax, dword [0x140130d70]
mov edi, dword [0x140130e80]
cmp edi, eax
jne 0x140052eb8
movaps xmm1, xmm12
jmp 0x140052ebb
movaps xmm1, xmm7
mov rbx, qword [0x140130d40]
movss xmm8, dword [rbx + 0x18]
movaps xmm0, xmm8
mulss xmm0, dword [0x1400de6f8]
mulss xmm0, xmm1
addss xmm0, dword [0x140130f98]
comiss xmm11, xmm0
jbe 0x140052eec
movaps xmm6, xmm11
jmp 0x140052ef4
movaps xmm6, xmm12
minss xmm6, xmm0
movss dword [0x140130f98], xmm6
cmp edi, eax
jne 0x140052f04
movaps xmm7, xmm12
movss xmm0, dword [0x1400de7b0]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm0, xmm8
mulss xmm0, xmm7
addss xmm0, dword [0x140130f9c]
comiss xmm11, xmm0
jbe 0x140052f2e
movaps xmm1, xmm11
jmp 0x140052f36
movaps xmm1, xmm12
minss xmm1, xmm0
ucomiss xmm6, xmm11
movss dword [0x140130f9c], xmm1
jp 0x140052f54
jne 0x140052f54
ucomiss xmm1, xmm11
jp 0x140052f54
jne 0x140052f54
mov dword [0x140130d70], edi
mov rax, qword [rbx + 0x3ff8]
lea rcx, [rbx + 0x4978]
movss xmm7, dword [0x1400de794]
lea rdx, [rbp + 0x238]
mov dword [rbp + 0x238], r15d
mov byte [rax + 0xed], 1
mov rax, qword [rbx + 0x3ff8]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xbc]
mov byte [rax + 0x179], 1
addss xmm0, xmm7
addss xmm1, dword [0x1400de764]
movss dword [rax + 0x138], xmm0
movss dword [rax + 0x13c], xmm1
movss xmm0, dword [rbx + 0x38f8]
mulss xmm6, dword [r14 + 0x38f8]
movss dword [rbp + 0x23c], xmm0
call fcn.14002c010
movabs rcx, 0x7fffffffffffffff
movss dword [rbx + 0x38f8], xmm6
mov r15, qword [0x14012fb68]
mov rax, rcx
sub rax, r15
cmp rax, 7
jb 0x140054822
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea r14, [0x14012fb58]
lea rsi, [r15 + 7]
mov edi, reloc.WS2_32.dll_ntohs
cmova r14, qword [0x14012fb58]
lea rbx, [rbp + 0x340]
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
cmp rsi, rdi
jbe 0x1400530bd
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x14005305f
movabs rax, 0x8000000000000000
mov rdi, rcx
add rax, 0x27
jmp 0x14005308f
cmp rdi, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140053079
xor ebx, ebx
jmp 0x1400530b6
cmp rcx, 0x1000
jb 0x1400530ae
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140054828
mov rcx, rax
call fcn.1400c2180
test rax, rax
je 0x1400545a4
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400530b6
call fcn.1400c2180
mov rbx, rax
mov qword [rbp + 0x340], rbx
mov rcx, qword [str.Status:]
mov r8, r15
mov qword [rbp + 0x358], rdi
mov rdx, r14
mov dword [rbx], ecx
movzx ecx, word [0x1400de444]
mov word [rbx + 4], cx
lea rcx, [rbx + 7]
movzx eax, byte [0x1400de446]
mov byte [rbx + 6], al
call sub.VCRUNTIME140.dll_memcpy
cmp byte [0x140130d76], 0
movss xmm1, dword [0x140130e88]
mov byte [rbx + rsi], 0
je 0x140053219
comiss xmm12, xmm1
jbe 0x140053134
mov rax, qword [0x140130d40]
movaps xmm0, xmm13
divss xmm0, dword [rax + 0xe8]
mulss xmm0, xmm14
addss xmm1, xmm0
movss dword [0x140130e88], xmm1
comiss xmm1, xmm12
jb 0x140053141
mov byte [0x140130d76], 0
cmp byte [0x140130d77], 0
je 0x14005325b
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea r8, [0x14012fb58]
lea rcx, [rbp + 0x1f8]
movss dword [rbp + 0x204], xmm1
cmova r8, qword [0x14012fb58]
mov dword [rbp + 0x1f8], 0x3e4ccccd
mov dword [rbp + 0x1fc], 0x3f800000
mov dword [rbp + 0x200], 0x3e4ccccd
call fcn.1400064e0
addss xmm9, xmm7
mov r9d, eax
addss xmm10, dword [0x1400de7b8]
movss dword [rbp + 0x168], xmm9
movss dword [rbp + 0x16c], xmm10
test eax, 0xff000000
je 0x140053339
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [r8 + rcx], 0
jne 0x1400531d0
add rcx, r8
cmp r8, rcx
je 0x140053339
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x2b0]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x168]
jmp 0x140053315
comiss xmm1, xmm11
jbe 0x14005324a
mov rax, qword [0x140130d40]
movss xmm0, dword [0x1400de620]
divss xmm0, dword [rax + 0xe8]
mulss xmm0, dword [0x1400de750]
subss xmm1, xmm0
movss dword [0x140130e88], xmm1
comiss xmm11, xmm1
jb 0x140053141
mov byte [0x140130d77], 0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
lea r8, [0x14012fb58]
lea rcx, [rbp + 0x208]
movss dword [rbp + 0x214], xmm1
cmova r8, qword [0x14012fb58]
mov dword [rbp + 0x208], 0x3f800000
mov dword [rbp + 0x20c], 0x3e4ccccd
mov dword [rbp + 0x210], 0x3e4ccccd
call fcn.1400064e0
addss xmm9, xmm7
mov r9d, eax
addss xmm10, dword [0x1400de7b8]
movss dword [rbp + 0x170], xmm9
movss dword [rbp + 0x174], xmm10
test eax, 0xff000000
je 0x140053339
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [r8 + rcx], 0
jne 0x1400532d5
add rcx, r8
cmp r8, rcx
je 0x140053339
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm11
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x2b0]
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r9d
lea r9, [rbp + 0x170]
mov rax, qword [r13 + 0x38]
mov rdx, r13
movups xmm0, xmmword [r13 + 0x88]
movss xmm2, dword [rax + 0x10]
mov rcx, qword [rax + 8]
movups xmmword [rbp + 0x2b0], xmm0
call fcn.14003bd60
mov eax, dword [0x140130d70]
test eax, eax
jne 0x14005355b
call fcn.1400183b0
mov rcx, qword [0x140130d40]
xor edx, edx
mov dword [rbp + 0x178], 0x44138000
mov dword [rbp + 0x17c], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Security
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140005f50
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x1400533bd
lea r8, str.Security
mov edx, ntohs
mov ecx, eax
call fcn.14002b540
xor r13d, r13d
lea r8, [rbp + 0x178]
mov edx, edi
mov dword [rsp + 0x20], r13d
lea rcx, str.Security
call fcn.14000e8f0
lea rdx, [0x140130d7b]
lea rcx, str.Bypass_BlackList
call fcn.140003150
mov rbx, qword [0x140130d40]
lea rdx, [rbp + 0x2b0]
mov byte [0x140130d55], al
mov dword [rbp + 0x2b0], reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rbx + 0x3b24]
lea rcx, [rbx + 0x4968]
movups xmmword [rbp + 0x2b4], xmm0
call fcn.14002c100
movdqa xmm7, xmmword [0x1400dea90]
lea rdx, [rbp + 0x2b0]
movups xmmword [rbx + 0x3b24], xmm7
mov rbx, qword [0x140130d40]
mov esi, reloc.WLDAP32.dll_Ordinal_22
mov dword [rbp + 0x2b0], esi
movups xmm0, xmmword [rbx + 0x3b34]
lea rcx, [rbx + 0x4968]
movups xmmword [rbp + 0x2b4], xmm0
call fcn.14002c100
movdqa xmm8, xmmword [0x1400deab0]
lea rdx, [rbp + 0x2b0]
movups xmmword [rbx + 0x3b34], xmm8
mov rbx, qword [0x140130d40]
mov dword [rbp + 0x2b0], reloc.WS2_32.dll_socket
movups xmm0, xmmword [rbx + 0x3b44]
lea rcx, [rbx + 0x4968]
movups xmmword [rbp + 0x2b4], xmm0
call fcn.14002c100
movdqa xmm9, xmmword [0x1400deaa0]
lea rdx, [rbp + 0x180]
lea rcx, str.Bypass_Screen_Share
mov dword [rbp + 0x180], 0x44110000
movups xmmword [rbx + 0x3b44], xmm9
mov dword [rbp + 0x184], 0x420c0000
call fcn.140043c80
mov r8, qword [0x140130d40]
mov r9d, 3
mov eax, dword [r8 + 0x4968]
cmp eax, r9d
jge 0x140053510
mov r9d, eax
test eax, eax
jle 0x140053549
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [r8 + 0x4970]
dec r9d
cdqe
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4968]
mov eax, dword [r8 + 0x4968]
test r9d, r9d
jg 0x140053510
call fcn.14000eaf0
call fcn.1400184e0
mov eax, dword [0x140130d70]
jmp 0x14005357d
movdqa xmm7, xmmword [0x1400dea90]
xor r13d, r13d
movdqa xmm8, xmmword [0x1400deab0]
mov esi, reloc.WLDAP32.dll_Ordinal_22
movdqa xmm9, xmmword [0x1400deaa0]
cmp eax, 1
jne 0x140053671
call fcn.1400183b0
mov rcx, qword [0x140130d40]
xor edx, edx
mov dword [rbp + 0x188], 0x44138000
mov dword [rbp + 0x18c], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Aims
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140005f50
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x1400535fc
lea r8, str.Aims
mov edx, ntohs
mov ecx, eax
call fcn.14002b540
lea r8, [rbp + 0x188]
mov dword [rsp + 0x20], r13d
mov edx, edi
lea rcx, str.Aims
call fcn.14000e8f0
lea rdx, [0x140130d7e]
lea rcx, str.Aimbot___New
call fcn.140003150
lea rdx, [0x140130d7f]
mov byte [0x140130d74], al
lea rcx, str.Aimbot___Legit
call fcn.140003150
lea rdx, [0x140130e8d]
mov byte [0x140130d75], al
lea rcx, str.Aimbot___Scope
call fcn.140003150
mov byte [0x140130f8f], al
call fcn.14000eaf0
call fcn.1400184e0
mov eax, dword [0x140130d70]
cmp eax, 2
jne 0x1400538cb
call fcn.1400183b0
mov rcx, qword [0x140130d40]
xor edx, edx
mov dword [rbp + 0x190], 0x44138000
mov dword [rbp + 0x194], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Visuals
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140005f50
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x1400536f0
lea r8, str.Visuals
mov edx, ntohs
mov ecx, eax
call fcn.14002b540
lea r8, [rbp + 0x190]
mov dword [rsp + 0x20], r13d
mov edx, edi
lea rcx, str.Visuals
call fcn.14000e8f0
mov rbx, qword [0x140130d40]
lea rdx, [rbp + 0x2b0]
mov dword [rbp + 0x2b0], reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rbx + 0x3b24]
lea rcx, [rbx + 0x4968]
movups xmmword [rbp + 0x2b4], xmm0
call fcn.14002c100
movups xmmword [rbx + 0x3b24], xmm7
mov rbx, qword [0x140130d40]
lea rdx, [rbp + 0x2b0]
mov dword [rbp + 0x2b0], esi
movups xmm0, xmmword [rbx + 0x3b34]
lea rcx, [rbx + 0x4968]
movups xmmword [rbp + 0x2b4], xmm0
call fcn.14002c100
movups xmmword [rbx + 0x3b34], xmm8
mov rbx, qword [0x140130d40]
lea rdx, [rbp + 0x2b0]
mov dword [rbp + 0x2b0], reloc.WS2_32.dll_socket
movups xmm0, xmmword [rbx + 0x3b44]
lea rcx, [rbx + 0x4968]
movups xmmword [rbp + 0x2b4], xmm0
call fcn.14002c100
lea rdx, [rbp + 0x198]
mov dword [rbp + 0x198], 0x44110000
lea rcx, str.Load_Wall
mov dword [rbp + 0x19c], 0x420c0000
movups xmmword [rbx + 0x3b44], xmm9
call fcn.140043c80
mov rcx, qword [0x140130d40]
movss xmm6, dword [0x1400de7f4]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
cmp byte [rax + 0xf0], 0
jne 0x140053821
movaps xmm1, xmm6
mov qword [rbp + 0x1a0], 0
lea rcx, [rbp + 0x1a0]
call fcn.140017ec0
lea rcx, [rbp + 0x1a8]
mov dword [rbp + 0x1a8], 0
mov dword [rbp + 0x1ac], 0x40e00000
call fcn.1400452a0
lea rdx, [0x140130d7c]
lea rcx, str.Enable
call fcn.140003150
mov r8, qword [0x140130d40]
mov r9d, 3
mov byte [0x140130d56], al
mov eax, dword [r8 + 0x4968]
cmp eax, r9d
jge 0x140053880
mov r9d, eax
test eax, eax
jle 0x1400538b9
nop word [rax + rax]
mov rcx, qword [r8 + 0x4970]
dec r9d
cdqe
lea rdx, [rax + rax*4]
movsxd rax, dword [rcx + rdx*4 - 0x14]
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
add rax, rax
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4968]
mov eax, dword [r8 + 0x4968]
test r9d, r9d
jg 0x140053880
call fcn.14000eaf0
call fcn.1400184e0
mov eax, dword [0x140130d70]
jmp 0x1400538d3
movss xmm6, dword [0x1400de7f4]
cmp eax, 3
jne 0x1400539ae
call fcn.1400183b0
mov rcx, qword [0x140130d40]
xor edx, edx
mov dword [rbp + 0x1b0], 0x44138000
mov dword [rbp + 0x1b4], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Weapons
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140005f50
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x140053952
lea r8, str.Weapons
mov edx, ntohs
mov ecx, eax
call fcn.14002b540
lea r8, [rbp + 0x1b0]
mov dword [rsp + 0x20], r13d
mov edx, edi
lea rcx, str.Weapons
call fcn.14000e8f0
lea rdx, [0x140130d79]
lea rcx, str.No_Recoil
call fcn.140003150
lea rdx, [0x140130e8c]
mov byte [0x140130d52], al
lea rcx, str.Precision
call fcn.140003150
mov byte [0x140130e8f], al
call fcn.14000eaf0
call fcn.1400184e0
mov eax, dword [0x140130d70]
cmp eax, 4
jne 0x140053b27
call fcn.1400183b0
mov rcx, qword [0x140130d40]
xor edx, edx
mov dword [rbp + 0x1b8], 0x44138000
mov dword [rbp + 0x1bc], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Misc
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140005f50
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x140053a2d
lea r8, str.Misc
mov edx, ntohs
mov ecx, eax
call fcn.14002b540
lea r8, [rbp + 0x1b8]
mov dword [rsp + 0x20], r13d
mov edx, edi
lea rcx, str.Misc
call fcn.14000e8f0
mov rbx, qword [0x140130d40]
lea rdx, [rbp + 0x2b0]
mov dword [rbp + 0x2b0], reloc.WS2_32.dll_setsockopt
movups xmm0, xmmword [rbx + 0x3b24]
lea rcx, [rbx + 0x4968]
movups xmmword [rbp + 0x2b4], xmm0
call fcn.14002c100
movups xmmword [rbx + 0x3b24], xmm7
mov rbx, qword [0x140130d40]
lea rdx, [rbp + 0x2b0]
mov dword [rbp + 0x2b0], esi
movups xmm0, xmmword [rbx + 0x3b34]
lea rcx, [rbx + 0x4968]
movups xmmword [rbp + 0x2b4], xmm0
call fcn.14002c100
movups xmmword [rbx + 0x3b34], xmm8
mov rbx, qword [0x140130d40]
lea rdx, [rbp + 0x2b0]
mov dword [rbp + 0x2b0], reloc.WS2_32.dll_socket
movups xmm0, xmmword [rbx + 0x3b44]
lea rcx, [rbx + 0x4968]
movups xmmword [rbp + 0x2b4], xmm0
call fcn.14002c100
lea rdx, [rbp + 0x1c0]
mov dword [rbp + 0x1c0], 0x44110000
lea rcx, str.Enable_Net
mov dword [rbp + 0x1c4], 0x420c0000
movups xmmword [rbx + 0x3b44], xmm9
call fcn.140043c80
call fcn.14000eaf0
call fcn.1400184e0
mov eax, dword [0x140130d70]
cmp eax, 5
jne 0x14005426d
call fcn.1400183b0
mov rcx, qword [0x140130d40]
xor edx, edx
mov dword [rbp + 0x1c8], 0x440e0000
mov dword [rbp + 0x1cc], 0x42c80000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Login_Information
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140005f50
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x140053ba6
lea r8, str.Login_Information
mov edx, ntohs
mov ecx, eax
call fcn.14002b540
lea r8, [rbp + 0x1c8]
mov dword [rsp + 0x20], r13d
mov edx, edi
lea rcx, str.Login_Information
call fcn.14000e8f0
mov rcx, qword [0x1401311a8]
mov rdx, qword [0x1401311a0]
mov rax, rcx
sub rax, rdx
mov dword [rbp + 0x2b0], r13d
sar rax, 6
test rax, rax
je 0x140054068
mov rbx, r13
nop dword [rax + rax]
sub rcx, rdx
sar rcx, 6
cmp rcx, rbx
jbe 0x14005483a
shl rbx, 6
lea rcx, [rbp + 0x3a0]
add rbx, rdx
mov rdx, rbx
call fcn.140055140
lea rdx, [rbx + 0x20]
lea rcx, [rbp + 0x3c0]
call fcn.140055140
mov r14, qword [rbp + 0x3d0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 8
jb 0x140054834
mov r13, qword [rbp + 0x3d8]
lea r15, [rbp + 0x3c0]
mov r12, qword [rbp + 0x3c0]
lea rsi, [r14 + 8]
cmp r13, 0xf
lea rbx, [rbp + 0x2f0]
mov edi, reloc.WS2_32.dll_ntohs
xorps xmm0, xmm0
cmova r15, r12
xor eax, eax
mov qword [rbp + 0x300], rax
mov qword [rbp + 0x308], rax
movups xmmword [rbp + 0x2f0], xmm0
cmp rsi, rdi
jbe 0x140053d0c
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x140053cb2
movabs rax, 0x8000000000000000
mov rdi, rcx
add rax, 0x27
jmp 0x140053cde
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
je 0x140053d02
cmp rcx, 0x1000
jb 0x140053cfd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005482e
mov rcx, rax
call fcn.1400c2180
test rax, rax
je 0x14005459d
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140053d05
call fcn.1400c2180
mov rbx, rax
mov qword [rbp + 0x2f0], rbx
mov rcx, qword [str.Expiry:]
mov r8, r14
mov qword [rbp + 0x300], rsi
mov rdx, r15
mov qword [rbp + 0x308], rdi
mov qword [rbx], rcx
lea rcx, [rbx + 8]
call sub.VCRUNTIME140.dll_memcpy
movabs rcx, 0x7fffffffffffffff
mov byte [rbx + rsi], 0
mov r15, qword [0x140131150]
mov rax, rcx
sub rax, r15
cmp rax, 5
jb 0x140054834
cmp qword [0x140131158], 0xf
lea r14, [0x140131140]
lea rsi, [r15 + 5]
mov edi, reloc.WS2_32.dll_ntohs
cmova r14, qword [0x140131140]
lea rbx, [rbp + 0x2d0]
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0x2e8], rax
movups xmmword [rbp + 0x2d0], xmm0
cmp rsi, rdi
jbe 0x140053e17
mov rdi, rsi
or rdi, 0xf
cmp rdi, rcx
jbe 0x140053dbd
movabs rax, 0x8000000000000000
mov rdi, rcx
add rax, 0x27
jmp 0x140053de9
cmp rdi, 0x16
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
je 0x140053e0d
cmp rcx, 0x1000
jb 0x140053e08
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005482e
mov rcx, rax
call fcn.1400c2180
test rax, rax
je 0x14005459d
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140053e10
call fcn.1400c2180
mov rbx, rax
mov qword [rbp + 0x2d0], rbx
mov ecx, dword [str.HWID:]
mov r8, r15
mov qword [rbp + 0x2e0], rsi
mov rdx, r14
mov qword [rbp + 0x2e8], rdi
mov dword [rbx], ecx
movzx ecx, byte [0x1400de528]
mov byte [rbx + 4], cl
lea rcx, [rbx + 5]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [0x140130d40]
mov byte [rbx + rsi], 0
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, [rbp + 0x2f0]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm15
movss dword [rax + 0x138], xmm0
cmp qword [rbp + 0x308], 0xf
cmova rcx, qword [rbp + 0x2f0]
call fcn.140043340
mov rcx, qword [0x140130d40]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, [rbp + 0x2d0]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm15
movss dword [rax + 0x138], xmm0
cmp qword [rbp + 0x2e8], 0xf
cmova rcx, qword [rbp + 0x2d0]
call fcn.140043340
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 0xf
jbe 0x140053f3d
mov rcx, qword [rbp + 0x2d0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053f38
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005459d
call fcn.1400c23fc
mov rdx, qword [rbp + 0x308]
xor ebx, ebx
mov qword [rbp + 0x2e0], rbx
mov qword [rbp + 0x2e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2d0], bl
cmp rdx, 0xf
jbe 0x140053f98
mov rcx, qword [rbp + 0x2f0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053f93
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005459d
call fcn.1400c23fc
mov qword [rbp + 0x300], rbx
mov qword [rbp + 0x308], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2f0], bl
cmp r13, 0xf
jbe 0x140053fe8
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140053fe0
mov r12, qword [r12 - 8]
add rdx, 0x27
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005459d
mov rcx, r12
call fcn.1400c23fc
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0xf
jbe 0x140054029
mov rcx, qword [rbp + 0x3a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140054024
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005459d
call fcn.1400c23fc
mov r8d, dword [rbp + 0x2b0]
mov rcx, qword [0x1401311a8]
inc r8d
mov rdx, qword [0x1401311a0]
mov rax, rcx
sub rax, rdx
movsxd rbx, r8d
sar rax, 6
mov dword [rbp + 0x2b0], r8d
cmp rbx, rax
jb 0x140053bf0
mov r12, qword [rbp + 0x228]
xor r13d, r13d
call fcn.14000eaf0
mov rcx, qword [0x140130d40]
xor edx, edx
mov dword [rbp + 0x1d0], 0x44138000
mov dword [rbp + 0x1d4], 0x43e28000
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rbx, qword [rcx + 0x3ff8]
lea rcx, str.Settings
movsxd r8, dword [rbx + 0x128]
mov rax, qword [rbx + 0x130]
mov r8d, dword [rax + r8*4 - 4]
call fcn.140005f50
mov rcx, qword [rbx]
mov edi, eax
cmp dword [rcx + 0x4040], eax
jne 0x1400540de
lea r8, str.Settings
mov edx, ntohs
mov ecx, eax
call fcn.14002b540
lea r8, [rbp + 0x1d0]
mov dword [rsp + 0x20], r13d
mov edx, edi
lea rcx, str.Settings
call fcn.14000e8f0
lea rdx, [0x140130e7f]
lea rcx, str.Stream_Mode
call fcn.140003150
lea rdx, [0x140130d7a]
mov byte [0x140130d78], al
lea rcx, str.Hide_Taskbar
call fcn.140003150
lea rdx, [0x140108a4c]
mov byte [0x140130d53], al
lea rcx, str.Particles
call fcn.140003150
mov rcx, qword [0x140130d40]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Minimize_Process:
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm15
movss dword [rax + 0x138], xmm0
call fcn.140043340
movaps xmm1, xmm6
movaps xmm0, xmm11
call fcn.1400181e0
movdqa xmm7, xmmword [0x1400deb90]
lea rcx, [rbp + 0x2b0]
lea rdx, str.HOME
movups xmmword [rbp + 0x2b0], xmm7
call fcn.140043480
mov rcx, qword [0x140130d40]
mov rax, qword [rcx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rcx + 0x3ff8]
lea rcx, str.Close_Process:
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, xmm15
movss dword [rax + 0x138], xmm0
call fcn.140043340
movaps xmm1, xmm6
movaps xmm0, xmm11
call fcn.1400181e0
mov rdx, qword [0x140130d40]
lea rcx, [rbp + 0x2b0]
movups xmmword [rbp + 0x2b0], xmm7
mov rax, qword [rdx + 0x3ff8]
mov byte [rax + 0xed], 1
mov rax, qword [rdx + 0x3ff8]
lea rdx, [0x1400de590]
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0xb8]
mov byte [rax + 0x179], 1
addss xmm0, dword [0x1400de790]
movss dword [rax + 0x138], xmm0
call fcn.140043480
call fcn.14000eaf0
call fcn.1400184e0
mov ecx, 1
call fcn.1400069b0
cmp byte [0x140130fa8], 0
jne 0x1400542d5
cmp byte [0x140130d55], 0
jne 0x1400542d5
cmp byte [0x140130d52], 0
jne 0x1400542d5
cmp byte [0x140130d74], 0
jne 0x1400542d5
cmp byte [0x140130d75], 0
jne 0x1400542d5
cmp byte [0x140130f8f], 0
jne 0x1400542d5
cmp byte [0x140130d56], 0
jne 0x1400542d5
cmp byte [0x140130d57], 0
jne 0x1400542d5
cmp byte [0x140130e8f], 0
jne 0x1400542d5
cmp byte [0x140130d51], 0
je 0x14005435a
mov ecx, 8
call fcn.1400c2180
lea rcx, [0x1400548f0]
mov r9, rax
lea r8, [0x140056100]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x328]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x320], rax
test rax, rax
je 0x1400545b7
cmp dword [rbp + 0x328], 0
je 0x1400545ab
movaps xmm0, xmmword [rbp + 0x320]
lea rcx, [rbp + 0x2b0]
movdqa xmmword [rbp + 0x2b0], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400545ab
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x320], xmm0
mov rdx, qword [rbp + 0x358]
cmp rdx, 0xf
jbe 0x14005439b
mov rcx, qword [rbp + 0x340]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140054396
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400545a4
call fcn.1400c23fc
call fcn.140014b30
movss xmm8, dword [rbp - 0x78]
movss xmm9, dword [0x1400de66c]
movss xmm10, dword [0x1400de74c]
mov rsi, qword [rbp - 0x80]
mov r15, qword [rbp + 0x230]
mov rcx, qword [0x140130fb0]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.14000d9b0
mov rcx, qword [0x140131360]
mov r9d, 3
mov dword [rsp + 0x30], r13d
xor r8d, r8d
movss dword [rsp + 0x28], xmm12
xor edx, edx
mov dword [rsp + 0x20], 0xffffffff
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x140131360]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140054453
call fcn.14000df70
mov rax, qword [0x140130d40]
mov rcx, qword [rax + 0x49f8]
mov rax, qword [rcx]
mov rcx, r13
add rax, 0xa8
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14003d9e0
mov rcx, qword [0x140131360]
mov rax, qword [rcx]
call qword [rax + 0x150]
test dword [rsi + 8], 0x400
je 0x14005452a
call fcn.1400212c0
mov rbx, qword [0x140130d40]
mov r14d, 1
mov eax, dword [rbx + 0x38c8]
cmp eax, r14d
jle 0x1400544ce
mov esi, 8
mov rax, qword [rbx + 0x38d0]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x1400544bc
mov rax, qword [rbx + 0x3868]
test rax, rax
je 0x1400544a9
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x38a8]
test rax, rax
je 0x1400544bc
xor edx, edx
mov rcx, rdi
call rax
mov eax, dword [rbx + 0x38c8]
inc r14d
add rsi, 8
cmp r14d, eax
jl 0x140054482
mov r14d, 1
cmp eax, r14d
jle 0x14005452a
mov esi, 8
nop
mov rax, qword [rbx + 0x38d0]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x14005451a
mov rax, qword [rbx + 0x3870]
test rax, rax
je 0x140054507
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x38b0]
test rax, rax
je 0x14005451a
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
cmp r14d, dword [rbx + 0x38c8]
jl 0x1400544e0
mov rcx, qword [0x140131360]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r13
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400545ca
movss xmm6, dword [0x1400de728]
lea rdi, [0x1400de3e0]
movss xmm7, dword [rbp - 0x74]
mov rsi, qword [rbp - 0x80]
mov r14, qword [rbp + 0xb8]
cmp dword [rbp + 0x368], 0x12
jne 0x140051e90
jmp 0x1400545d4
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x318], r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x328], r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov dword [rbp + 0x368], reloc.WS2_32.dll_select
mov rbx, qword [0x140130d40]
test rbx, rbx
je 0x1400545e9
mov rdi, qword [rbx + 0xa8]
jmp 0x1400545ec
mov rdi, r13
call fcn.1400218c0
call fcn.14003e2a0
mov rcx, qword [rdi]
test rcx, rcx
je 0x140054604
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x140130d40]
mov qword [rbx + 0x98], r13
mov qword [rbx + 0xa8], r13
test rax, rax
je 0x140054624
dec dword [rax + 0xfc]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140130d40]
test rbx, rbx
je 0x140054642
mov rdi, qword [rbx + 0xa0]
jmp 0x140054645
mov rdi, r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
call fcn.1400218c0
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x140054671
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140130d40]
mov qword [rbx + 0x90], r13
mov qword [rbx + 0xa0], r13
test rax, rax
je 0x140054691
dec dword [rax + 0xfc]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140130d40]
mov qword [0x140130d40], rbx
call fcn.140008eb0
mov qword [0x140130d40], r13
test rbx, rbx
je 0x1400546dc
mov rcx, rbx
call fcn.14002d190
mov rax, qword [0x140130d40]
test rax, rax
je 0x1400546d3
dec dword [rax + 0xfc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x140131360]
test rcx, rcx
je 0x1400546f5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140131360], r13
mov rcx, qword [0x140131358]
test rcx, rcx
je 0x14005470e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140131358], r13
mov rcx, r15
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x278]
mov rcx, qword [rbp + 0x2a0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
movaps xmm14, xmmword [rsp + 0x500]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x510]
movaps xmm12, xmmword [rsp + 0x520]
movaps xmm11, xmmword [rsp + 0x530]
movaps xmm10, xmmword [rsp + 0x540]
movaps xmm9, xmmword [rsp + 0x550]
movaps xmm8, xmmword [rsp + 0x560]
movaps xmm7, xmmword [rsp + 0x570]
movaps xmm6, xmmword [rsp + 0x580]
mov r14, qword [rsp + 0x590]
mov r12, qword [rsp + 0x5d0]
mov rdi, qword [rsp + 0x5c8]
mov rsi, qword [rsp + 0x5c0]
movaps xmm15, xmmword [rsp + 0x4f0]
mov rcx, qword [rbp + 0x3e0]
xor rcx, rsp
call fcn.1400c2040
add rsp, 0x598
pop r15
pop r13
pop rbx
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x140131358]
mov rdx, qword [0x140131360]
test rdx, rdx
je 0x1400547f5
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140131358]
mov qword [0x140131360], r13
test rcx, rcx
je 0x140054807
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140131358], r13
mov rdx, qword [rbp + 0x278]
mov rcx, qword [rbp + 0x2a0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
jmp 0x1400547a5
call fcn.14004f2d0
int3
call fcn.1400014c0
int3
call fcn.1400014c0
int3
call fcn.14004f2d0
int3
call fcn.140055420
int3