Function at 0x140032550
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x618]
sub rsp, 0x6f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400b7040]
xor rax, rsp
mov qword [rbp + 0x540], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x378], xmm0
xor r12d, r12d
mov esi, r12d
mov qword [rbp + 0x378], r12
mov r14d, r12d
mov qword [rbp + 0x380], r12
xor edx, edx
mov r8d, 0x12c
lea rcx, [rbp + 0x404]
call fcn.1400914f0
mov dword [rbp + 0x400], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
lea rdx, [rbp + 0x400]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400326b0
nop dword [rax + rax]
lea rax, [rbp + 0x42c]
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rax + rbx], sil
jne 0x140032640
mov r8d, 7
cmp rbx, r8
cmovb r8, rbx
lea rdx, [rbp + 0x42c]
lea rcx, str.cs2.exe
call fcn.140091890
test eax, eax
jne 0x140032673
cmp rbx, 7
je 0x140032689
lea rdx, [rbp + 0x400]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140032630
jmp 0x1400326b0
mov esi, dword [rbp + 0x408]
mov qword [rbp + 0x378], rsi
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
mov qword [rbp + 0x380], rax
test rdi, rdi
je 0x1400326bf
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
xor edx, edx
mov r8d, 0x234
lea rcx, [rbp + 0xa4]
call fcn.1400914f0
mov dword [rbp + 0xa0], 0x238
mov edx, esi
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
mov rsi, r12
lea rdx, [rbp + 0xa0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
je 0x140032770
nop dword [rax]
nop dword [rax + rax]
lea rax, [rbp + 0xd0]
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rax + rbx], sil
jne 0x140032720
mov r8d, 0xa
cmp rbx, r8
cmovb r8, rbx
lea rdx, [rbp + 0xd0]
lea rcx, str.client.dll
call fcn.140091890
test eax, eax
jne 0x140032753
cmp rbx, 0xa
je 0x140032769
lea rdx, [rbp + 0xa0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x140032710
jmp 0x140032770
mov rsi, qword [rbp + 0xb8]
test rdi, rdi
je 0x14003277e
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x1400b9768], 1
mov byte [0x1400b9758], 0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x1400b9754], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x1400b9750], eax
mov dword [0x1400b96b0], 0x50
mov dword [0x1400b96b4], 0x40
lea rax, [0x1400343c0]
mov qword [0x1400b96b8], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [0x1400b96c8], rax
lea rax, str.douglas
mov qword [0x1400b96f0], rax
lea rcx, [0x1400b96b0]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov qword [rsp + 0x58], r12
mov rax, qword [0x1400b96c8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov eax, dword [0x1400b9750]
mov dword [rsp + 0x38], eax
mov eax, dword [0x1400b9754]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
mov r9d, 0x80000000
lea r8, str.doug
mov rdx, qword [0x1400b96f0]
mov ecx, 0x800a8
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [0x1400b9718], rax
test rax, rax
jne 0x140032867
lea rcx, str.Failed_to_create_Overlay_n
jmp 0x14003293c
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp + 0x368], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x358], xmm1
lea rdx, [rbp + 0x368]
mov rcx, qword [0x1400b9718]
call qword [sym.imp.USER32.dll_GetClientRect]
lea rdx, [rbp + 0x358]
mov rcx, qword [0x1400b9718]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x2e0], r12
lea rdx, [rbp + 0x2e0]
mov rcx, qword [0x1400b9718]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x2e0]
mov dword [rbp + 0x348], eax
mov eax, dword [rbp + 0x2e4]
mov dword [rbp + 0x34c], eax
mov eax, dword [rbp + 0x370]
mov dword [rbp + 0x350], eax
mov eax, dword [rbp + 0x374]
mov dword [rbp + 0x354], eax
lea rdx, [rbp + 0x348]
mov rcx, qword [0x1400b9718]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 5
mov rcx, qword [0x1400b9718]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400b9718]
call qword [sym.imp.USER32.dll_UpdateWindow]
lea rcx, str._____Overlay_Created_n
call fcn.140001180
mov qword [rbp + 0x64], r12
mov qword [rbp + 0x78], 2
mov qword [rbp + 0x90], 2
mov qword [rbp + 0x50], r12
mov dword [rbp + 0x60], 0x1c
mov dword [rbp + 0x58], 0x3c
mov dword [rbp + 0x5c], 1
mov dword [rbp + 0x74], 0x20
mov rax, qword [0x1400b9718]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x6c], 1
mov qword [rbp + 0x88], 1
mov dword [rbp + 0x2e0], 0xb000
mov dword [rbp + 0x2e4], 0xa000
lea rdi, [0x1400b9710]
mov qword [rsp + 0x58], rdi
lea rax, [rbp + 0x2ec]
mov qword [rsp + 0x50], rax
lea r15, [0x1400b9700]
mov qword [rsp + 0x48], r15
lea r13, [0x1400b9708]
mov qword [rsp + 0x40], r13
lea rax, [rbp + 0x50]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ebx, eax
cmp eax, 0x887a0004
jne 0x140032a7d
mov qword [rsp + 0x58], rdi
lea rax, [rbp + 0x2ec]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r13
lea rax, [rbp + 0x50]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 5]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ebx, eax
lea rcx, str._____DXGI_ERROR__Created_with_D3D_DRIVER_TYPE_WARP_n
call fcn.140001180
test ebx, ebx
je 0x140032a8a
lea rcx, str.Device_Not_Okay_n
jmp 0x140032aee
mov qword [rbp + 0x2f8], r12
mov rcx, qword [0x1400b9708]
mov rax, qword [rcx]
lea r9, [rbp + 0x2f8]
lea r8, [0x1400ae8c0]
xor edx, edx
call qword [rax + 0x48]
mov rdx, qword [rbp + 0x2f8]
test rdx, rdx
je 0x140032ae7
mov rcx, qword [0x1400b9700]
mov rax, qword [rcx]
lea r9, [0x1400b9720]
xor r8d, r8d
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x2f8]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rcx, str._____Created_Device_n
jmp 0x140032aee
lea rcx, str._____Failed_to_create_Device_n
call fcn.140001180
mov rbx, qword [0x1400b96a0]
mov ecx, 0x6198
call fcn.1400601e0
mov r9, rax
mov r8, qword [0x1400b96a0]
test r8, r8
je 0x140032b73
mov r10d, dword [r8 + 0x3f60]
movsx rax, word [r8 + 0x6048]
lea rdx, [r8 + 0x604c]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x140032b68
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6048], cx
movsx rax, cx
lea rdx, [r8 + 0x604c]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r12d
inc word [rdx + 4]
inc dword [r8 + 0x6040]
mov qword [rbp - 0x28], r9
lea rax, [rsp + 0x60]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x38], r9
test r9, r9
je 0x140032b95
xor edx, edx
mov rcx, r9
call fcn.140001470
jmp 0x140032b98
mov rax, r12
mov qword [0x1400b96a0], rax
call fcn.140004e00
test rbx, rbx
je 0x140032bb0
mov qword [0x1400b96a0], rbx
xor ecx, ecx
call fcn.1400223d0
mov rcx, qword [0x1400b9718]
call fcn.14002c910
test al, al
jne 0x140032bd0
lea rcx, str.Failed_ImGui_ImplWin32_Init_n
jmp 0x140032be9
call fcn.14002c740
lea rcx, str.Failed_ImGui_ImplDX11_Init_n
lea rdx, str._____ImGui_Initialized_n
test al, al
cmovne rcx, rdx
call fcn.140001180
lea rcx, str._____Hit_insert_to_show_the_menu_in_this_overlay__n
call fcn.140001180
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, rbx
je 0x140032c17
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetForegroundWindow]
cmp byte [0x1400b9768], 0
je 0x140033e13
lea rdi, [rsi + 0x17371a8]
mov qword [rbp - 0x28], rdi
lea r15, [rsi + 0x19241a0]
mov qword [rbp - 0x48], r15
add rsi, 0x18c2d58
mov qword [rbp - 0x40], rsi
movss xmm14, dword [0x1400ae918]
movzx r13d, byte [rsp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.140032200
mov rbx, qword [rbp + 0x40]
movabs rax, 0x7ffffffffff0bdbf
cmp rbx, rax
je 0x140032c80
setl al
test al, al
je 0x140032c80
add rbx, 0xf4240
jmp 0x140032c8a
movabs rbx, 0x7fffffffffffffff
movabs rsi, 0x4e94914effff
mov r12d, 0xff
movabs r15, 0x431bde82d7b634db
lea rcx, [rbp + 0x38]
call fcn.140032200
mov rax, qword [rbp + 0x38]
cmp rbx, rax
je 0x140032d06
mov ecx, 1
cmovl ecx, r12d
test cl, cl
jle 0x140032d06
mov rcx, rbx
sub rcx, rax
cmp rcx, rsi
jg 0x140032cfa
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140032cf1
inc rdx
mov ecx, edx
call fcn.140036880
jmp 0x140032ca4
mov ecx, 0x5265c00
call fcn.140036880
jmp 0x140032ca4
xor r12d, r12d
mov qword [rbp + 0x2e0], r12
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 8]
lea r8, [rbp + 0x2e0]
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12, qword [rbp + 0x2e0]
mov qword [rbp - 0x30], r12
lea rdx, [r12 + 0x127c]
mov qword [rbp + 0x368], 0
mov dword [rbp + 0x370], 0
xor edi, edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 0xc]
lea r8, [rbp + 0x368]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 0x40]
lea r8, [rbp + 0x50]
mov rdx, qword [rbp - 0x48]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x388], rdi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 8]
lea r8, [rbp + 0x388]
mov rdx, qword [rbp - 0x40]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x388]
mov qword [rbp - 0x38], rbx
lea rdx, [r12 + 0x3cb]
mov dword [rbp + 0x300], edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x300]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140032e5b
nop word [rax + rax]
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140032e20
mov rax, qword [0x1400b96a0]
test rax, rax
je 0x140032e70
mov rcx, qword [rax + 0x98]
jmp 0x140032e73
mov rcx, rdi
cmp qword [rcx + 0x48], rdi
jne 0x140032e7e
call fcn.14002c0e0
call fcn.14002d320
call fcn.140007300
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140032ec9
cmp byte [0x1400b9758], dil
sete al
mov byte [0x1400b9758], al
mov edx, 0xffffffec
mov rcx, qword [0x1400b9718]
test al, al
mov r8d, 0xa0
jne 0x140032ec3
mov r8d, 0x800a8
call qword [sym.imp.USER32.dll_SetWindowLongA]
cmp byte [0x1400b9758], dil
je 0x140032f1c
mov rax, qword [0x1400b96a0]
or dword [rax + 0x49b8], 2
mov dword [rax + 0x49d8], 0x437a0000
mov dword [rax + 0x49dc], 0x437a0000
mov dword [rax + 0x49c0], 1
mov r8d, pe_nt_image_headers64
lea rdx, [0x1400b9758]
lea rcx, str.dougie
call fcn.14000c630
call fcn.14000e980
lea rdx, [rbx + 0x10]
xor ebx, ebx
mov qword [rbp + 0x390], rbx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 8]
lea r8, [rbp + 0x390]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x390]
add rax, 0x78
mov qword [rbp - 0x58], rax
mov esi, 0x3f
mov qword [rbp - 0x50], rsi
mov r15d, dword [rbp + 0x300]
mov qword [rbp + 0x2e0], rbx
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rbp + 0x2e0]
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x2e0]
test rdi, rdi
je 0x140033d62
lea rdx, [rdi + 0x7e4]
mov dword [rbp + 0x2e8], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 4
lea r8, [rbp + 0x2e8]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, dword [rbp + 0x2e8]
test ebx, ebx
je 0x140033d60
mov eax, ebx
sar eax, 9
and eax, 0x3f
lea edx, [rax*8 + 0x10]
add rdx, qword [rbp - 0x38]
xor eax, eax
mov qword [rbp + 0x2e0], rax
mov qword [rsp + 0x20], rax
lea r9d, [rax + 8]
lea r8, [rbp + 0x2e0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x2e0]
test rcx, rcx
je 0x140033d60
and ebx, 0x1ff
imul edx, ebx, 0x78
add rdx, rcx
xor eax, eax
mov qword [rbp + 0x2f8], rax
mov qword [rsp + 0x20], rax
lea r9d, [rax + 8]
lea r8, [rbp + 0x2f8]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x2f8]
test rbx, rbx
je 0x140033d60
cmp rbx, r12
je 0x140033d60
lea rdx, [rbx + 0x338]
xor eax, eax
mov dword [rbp + 0x2e8], eax
mov qword [rsp + 0x20], rax
lea r9d, [rax + 4]
lea r8, [rbp + 0x2e8]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x2e8], 0x100
jne 0x140033d60
lea rdx, [rbx + 0x3cb]
xor r12d, r12d
mov dword [rbp + 0x2f0], r12d
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 4]
lea r8, [rbp + 0x2f0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rbx + 0x334]
mov dword [rbp + 0x2ec], r12d
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 4]
lea r8, [rbp + 0x2ec]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rax, [rdi + 0x638]
mov qword [rbp - 0x78], rax
lea r8, [rbp - 0x78]
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x378]
call fcn.140033ff0
nop
cmp byte [0x1400b9758], r12b
je 0x14003314e
movups xmm0, xmmword [rbp + 0x3d0]
movaps xmmword [rbp + 0x3a0], xmm0
movups xmm1, xmmword [rbp + 0x3e0]
movaps xmmword [rbp + 0x3b0], xmm1
movsd xmm0, qword [rbp + 0x3f0]
movsd qword [rbp + 0x3c0], xmm0
lea rdx, [rbp + 0x3a0]
lea rcx, str._____playerName:__s_n
call fcn.140001180
lea rdx, [rbx + 0x318]
mov qword [rbp + 0x2e0], r12
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x2e0]
mov r14, qword [rbp + 0x380]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2e0]
add rdx, 0x1e0
mov qword [rbp + 0x398], r12
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x398]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x398]
mov qword [rbp - 0x78], rdi
lea rdx, [rbx + 0x127c]
mov qword [rbp + 0x318], 0
mov dword [rbp + 0x320], 0
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x318]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rbx + 0xc58]
mov qword [rbp + 0x348], 0
mov dword [rbp + 0x350], 0
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x348]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rbx + 0x1578]
mov qword [rbp + 0x358], 0
mov dword [rbp + 0x360], 0
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x358]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rdi + 0xc0]
mov qword [rbp + 0x308], 0
mov dword [rbp + 0x310], 0
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x308]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movss dword [rbp + 0x2e8], xmm0
xorps xmm9, xmm9
movss dword [rsp + 0x6c], xmm9
mov ebx, 0xff0000ff
movsxd rsi, dword [rbp + 0x2f0]
cmp esi, r15d
mov eax, 0xff00ff00
cmove ebx, eax
movss xmm5, dword [rbp + 0x318]
movaps xmm10, xmm5
movss xmm8, dword [rbp + 0x50]
mulss xmm10, xmm8
movss xmm3, dword [rbp + 0x31c]
movaps xmm0, xmm3
movss xmm11, dword [rbp + 0x54]
mulss xmm0, xmm11
addss xmm10, xmm0
movss xmm2, dword [rbp + 0x320]
movaps xmm1, xmm2
movss xmm12, dword [rbp + 0x58]
mulss xmm1, xmm12
addss xmm10, xmm1
addss xmm10, dword [rbp + 0x5c]
movaps xmm15, xmm5
movss xmm13, dword [rbp + 0x60]
mulss xmm15, xmm13
movaps xmm0, xmm3
mulss xmm0, dword [rbp + 0x64]
addss xmm15, xmm0
movaps xmm1, xmm2
movss xmm0, dword [rbp + 0x68]
movss dword [rbp + 0x2ec], xmm0
mulss xmm1, xmm0
addss xmm15, xmm1
addss xmm15, dword [rbp + 0x6c]
movss xmm0, dword [rbp + 0x80]
movss dword [rsp + 0x68], xmm0
mulss xmm5, xmm0
movss xmm4, dword [rbp + 0x84]
mulss xmm3, xmm4
addss xmm5, xmm3
movss xmm0, dword [rbp + 0x88]
movss dword [rsp + 0x64], xmm0
mulss xmm2, xmm0
addss xmm5, xmm2
addss xmm5, dword [rbp + 0x8c]
movss xmm6, dword [0x1400ae8e4]
comiss xmm6, xmm5
ja 0x1400336c9
movss xmm0, dword [0x1400ae950]
divss xmm0, xmm5
mulss xmm10, xmm0
mulss xmm15, xmm0
xorps xmm6, xmm6
cvtsi2ss xmm6, dword [0x1400b9754]
movaps xmm3, xmm6
mulss xmm3, xmm14
mulss xmm10, xmm14
mulss xmm10, xmm6
addss xmm10, xmm14
addss xmm10, xmm3
xorps xmm7, xmm7
cvtsi2ss xmm7, dword [0x1400b9750]
movaps xmm5, xmm7
mulss xmm5, xmm14
mulss xmm15, xmm14
mulss xmm15, xmm7
movaps xmm0, xmm15
addss xmm0, xmm14
movaps xmm15, xmm5
subss xmm15, xmm0
movss xmm2, dword [rbp + 0x30c]
mulss xmm11, xmm2
movss xmm1, dword [rbp + 0x308]
mulss xmm8, xmm1
addss xmm11, xmm8
movss xmm0, dword [rbp + 0x310]
mulss xmm12, xmm0
addss xmm11, xmm12
addss xmm11, dword [rbp + 0x5c]
movss dword [rbp + 0x2e8], xmm11
movss xmm9, dword [rbp + 0x64]
mulss xmm9, xmm2
mulss xmm13, xmm1
addss xmm9, xmm13
movss xmm8, dword [rbp + 0x2ec]
mulss xmm8, xmm0
addss xmm9, xmm8
addss xmm9, dword [rbp + 0x6c]
movss dword [rsp + 0x6c], xmm9
mulss xmm4, xmm2
movss xmm2, dword [rsp + 0x68]
mulss xmm2, xmm1
addss xmm4, xmm2
movss xmm1, dword [rsp + 0x64]
mulss xmm1, xmm0
addss xmm4, xmm1
addss xmm4, dword [rbp + 0x8c]
movss xmm1, dword [0x1400ae8e4]
movss xmm13, dword [0x1400ae950]
comiss xmm1, xmm4
ja 0x1400336a1
movaps xmm0, xmm13
divss xmm0, xmm4
mulss xmm11, xmm0
mulss xmm9, xmm0
mulss xmm11, xmm14
mulss xmm11, xmm6
addss xmm11, xmm14
addss xmm11, xmm3
movss dword [rbp + 0x2e8], xmm11
mulss xmm9, xmm14
mulss xmm9, xmm7
movaps xmm0, xmm9
addss xmm0, xmm14
movaps xmm9, xmm5
subss xmm9, xmm0
movss dword [rsp + 0x6c], xmm9
movaps xmm8, xmm15
subss xmm8, xmm9
movaps xmm12, xmm8
mulss xmm12, dword [0x1400ae8f8]
movaps xmm6, xmm8
divss xmm6, dword [0x1400ae964]
movaps xmm0, xmm6
mulss xmm0, xmm14
movaps xmm7, xmm11
subss xmm7, xmm0
mov rax, qword [0x1400b96a0]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400069b0
movaps xmm0, xmm7
addss xmm0, xmm6
movss dword [rbp - 0x20], xmm0
addss xmm8, xmm9
movss dword [rbp - 0x1c], xmm8
movss dword [rbp - 0x18], xmm7
movss dword [rbp - 0x14], xmm9
movss xmm0, dword [0x1400ae95c]
movss dword [rsp + 0x30], xmm0
xorps xmm6, xmm6
movss dword [rsp + 0x20], xmm6
mov r9d, ebx
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x18]
mov rcx, rax
call fcn.140025ba0
comiss xmm10, xmm6
jbe 0x140033632
movd xmm0, dword [0x1400b9754]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm10
jbe 0x140033632
comiss xmm9, xmm6
jbe 0x140033632
movd xmm0, dword [0x1400b9750]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm9
jbe 0x140033632
subss xmm12, dword [0x1400ae96c]
mov rax, qword [0x1400b96a0]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400069b0
movss dword [rbp - 0x10], xmm11
movss dword [rbp - 0xc], xmm9
movss dword [rsp + 0x28], xmm13
mov r9d, 0xffffffff
movaps xmm2, xmm12
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.140025fb0
movd xmm7, dword [0x1400b9750]
cvtdq2ps xmm7, xmm7
mov eax, dword [0x1400b9754]
cdq
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mov rax, qword [0x1400b96a0]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400069b0
movss dword [rbp - 8], xmm10
movss dword [rbp - 4], xmm15
movss dword [rbp], xmm6
movss dword [rbp + 4], xmm7
movss dword [rsp + 0x20], xmm13
mov r9d, 0x9bffffff
lea r8, [rbp - 8]
lea rdx, [rbp]
mov rcx, rax
call fcn.140025a40
movss xmm6, dword [0x1400ae8e4]
subss xmm15, xmm9
divss xmm15, dword [0x1400ae9ac]
mov edi, r12d
movsxd r15, r15d
mov r12, rsi
lea rsi, [0x1400b7b14]
jmp 0x1400336e9
movss xmm13, dword [0x1400ae950]
jmp 0x1400336a9
movss xmm13, dword [0x1400ae950]
mov eax, dword [rsi - 4]
mov ebx, dword [rsi]
shl eax, 5
movsxd rdx, eax
add rdx, qword [rbp - 0x78]
mov qword [rbp + 0x328], 0
mov dword [rbp + 0x330], 0
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9d, [rax + 0xc]
lea r8, [rbp + 0x328]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
shl ebx, 5
movsxd rdx, ebx
add rdx, qword [rbp - 0x78]
mov qword [rbp + 0x338], 0
mov dword [rbp + 0x340], 0
xor ebx, ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xc]
lea r8, [rbp + 0x338]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm5, dword [rbp + 0x328]
movaps xmm11, xmm5
movss xmm0, dword [rbp + 0x50]
movss dword [rbp + 0x2f0], xmm0
mulss xmm11, xmm0
movss xmm3, dword [rbp + 0x32c]
movaps xmm0, xmm3
movss xmm9, dword [rbp + 0x54]
mulss xmm0, xmm9
addss xmm11, xmm0
movss xmm2, dword [rbp + 0x330]
movaps xmm1, xmm2
movss xmm0, dword [rbp + 0x58]
movss dword [rsp + 0x70], xmm0
mulss xmm1, xmm0
addss xmm11, xmm1
addss xmm11, dword [rbp + 0x5c]
movaps xmm4, xmm5
movss xmm0, dword [rbp + 0x60]
movss dword [rsp + 0x74], xmm0
mulss xmm4, xmm0
movaps xmm0, xmm3
movss xmm10, dword [rbp + 0x64]
mulss xmm0, xmm10
addss xmm4, xmm0
movaps xmm1, xmm2
movss xmm0, dword [rbp + 0x68]
movss dword [rsp + 0x78], xmm0
mulss xmm1, xmm0
addss xmm4, xmm1
addss xmm4, dword [rbp + 0x6c]
movss xmm7, dword [rbp + 0x80]
movss dword [rbp - 0x70], xmm7
mulss xmm5, xmm7
movss xmm12, dword [rbp + 0x84]
mulss xmm3, xmm12
addss xmm5, xmm3
movss xmm8, dword [rbp + 0x88]
movss dword [rbp - 0x6c], xmm8
mulss xmm2, xmm8
addss xmm5, xmm2
addss xmm5, dword [rbp + 0x8c]
comiss xmm6, xmm5
ja 0x140033d34
movaps xmm0, xmm13
divss xmm0, xmm5
mulss xmm11, xmm0
mulss xmm4, xmm0
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [0x1400b9754]
movss dword [rsp + 0x7c], xmm1
movaps xmm0, xmm1
mulss xmm0, xmm14
movss dword [rbp - 0x80], xmm0
mulss xmm11, xmm14
mulss xmm11, xmm1
addss xmm11, xmm14
addss xmm11, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1400b9750]
movss dword [rsp + 0x64], xmm0
movaps xmm6, xmm0
mulss xmm6, xmm14
movss dword [rbp + 0x2e0], xmm6
mulss xmm4, xmm14
mulss xmm4, xmm0
addss xmm4, xmm14
movaps xmm0, xmm6
subss xmm0, xmm4
movss dword [rbp + 0x2ec], xmm0
movss xmm5, dword [rbp + 0x338]
movaps xmm13, xmm5
mulss xmm13, dword [rbp + 0x2f0]
movss xmm3, dword [rbp + 0x33c]
movaps xmm0, xmm3
mulss xmm0, xmm9
addss xmm13, xmm0
movss xmm2, dword [rbp + 0x340]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x70]
addss xmm13, xmm1
addss xmm13, dword [rbp + 0x5c]
movaps xmm4, xmm5
mulss xmm4, dword [rsp + 0x74]
movaps xmm0, xmm3
mulss xmm0, xmm10
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x78]
addss xmm4, xmm1
addss xmm4, dword [rbp + 0x6c]
mulss xmm5, xmm7
mulss xmm3, xmm12
addss xmm5, xmm3
mulss xmm2, xmm8
addss xmm5, xmm2
addss xmm5, dword [rbp + 0x8c]
movss xmm0, dword [0x1400ae8e4]
comiss xmm0, xmm5
ja 0x140033d2c
movss xmm0, dword [0x1400ae950]
divss xmm0, xmm5
mulss xmm13, xmm0
mulss xmm4, xmm0
mulss xmm13, xmm14
mulss xmm13, dword [rsp + 0x7c]
addss xmm13, xmm14
addss xmm13, dword [rbp - 0x80]
mulss xmm4, xmm14
mulss xmm4, dword [rsp + 0x64]
addss xmm4, xmm14
movaps xmm0, xmm6
subss xmm0, xmm4
movss dword [rsp + 0x68], xmm0
movss xmm8, dword [rbp + 0x358]
mulss xmm8, dword [0x1400ae970]
divss xmm8, dword [0x1400ae9bc]
movaps xmm0, xmm8
call fcn.14008f9e0
movaps xmm7, xmm0
mulss xmm7, dword [0x1400ae9a4]
movss xmm6, dword [rbp + 0x35c]
mulss xmm6, dword [0x1400ae970]
divss xmm6, dword [0x1400ae9bc]
movaps xmm0, xmm6
call fcn.14008f9e0
mulss xmm0, xmm7
addss xmm0, dword [rbp + 0x308]
movss dword [rbp + 0x2f8], xmm0
movaps xmm0, xmm6
call fcn.14008fee0
movaps xmm6, xmm0
mulss xmm6, xmm7
addss xmm6, dword [rbp + 0x30c]
movaps xmm0, xmm8
call fcn.14008fee0
mulss xmm0, dword [0x1400ae9a4]
movss xmm4, dword [rbp + 0x310]
subss xmm4, xmm0
movss xmm7, dword [rsp + 0x6c]
movaps xmm2, xmm7
mulss xmm2, xmm12
movss xmm8, dword [rbp + 0x2e8]
movaps xmm0, xmm8
movss xmm3, dword [rbp - 0x70]
mulss xmm0, xmm3
addss xmm2, xmm0
movss xmm0, dword [rbp - 0x6c]
movaps xmm1, xmm0
mulss xmm1, dword [0x1400ae8d0]
addss xmm2, xmm1
movss xmm5, dword [rbp + 0x8c]
addss xmm2, xmm5
movss xmm1, dword [0x1400ae8e4]
comiss xmm1, xmm2
jbe 0x140033aa5
xor r13b, r13b
jmp 0x140033bdd
test r13b, r13b
je 0x140033bdd
mulss xmm9, xmm6
movss xmm1, dword [rbp + 0x2f0]
movss xmm2, dword [rbp + 0x2f8]
mulss xmm1, xmm2
addss xmm9, xmm1
movss xmm1, dword [rsp + 0x70]
mulss xmm1, xmm4
addss xmm9, xmm1
addss xmm9, dword [rbp + 0x5c]
mulss xmm10, xmm6
movss xmm1, dword [rsp + 0x74]
mulss xmm1, xmm2
addss xmm10, xmm1
movss xmm1, dword [rsp + 0x78]
mulss xmm1, xmm4
addss xmm10, xmm1
addss xmm10, dword [rbp + 0x6c]
mulss xmm12, xmm6
mulss xmm3, xmm2
addss xmm12, xmm3
mulss xmm0, xmm4
addss xmm12, xmm0
addss xmm12, xmm5
movss xmm0, dword [0x1400ae8e4]
comiss xmm0, xmm12
ja 0x140033bdd
movss xmm0, dword [0x1400ae950]
divss xmm0, xmm12
mulss xmm9, xmm0
mulss xmm10, xmm0
mulss xmm9, xmm14
mulss xmm9, dword [rsp + 0x7c]
addss xmm9, xmm14
addss xmm9, dword [rbp - 0x80]
mulss xmm10, xmm14
mulss xmm10, dword [rsp + 0x64]
addss xmm10, xmm14
movss xmm6, dword [rbp + 0x2e0]
subss xmm6, xmm10
mov rax, qword [0x1400b96a0]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400069b0
movss dword [rbp + 8], xmm9
movss dword [rbp + 0xc], xmm6
movss dword [rbp + 0x10], xmm8
movss dword [rbp + 0x14], xmm7
movss xmm0, dword [0x1400ae960]
movss dword [rsp + 0x20], xmm0
mov r9d, 0xffff0000
lea r8, [rbp + 8]
lea rdx, [rbp + 0x10]
mov rcx, rax
call fcn.140025a40
mov rax, qword [0x1400b96a0]
lea r8, str.Background
xor edx, edx
mov rax, qword [rax + 0x4ad0]
mov rcx, qword [rax]
call fcn.1400069b0
movss xmm6, dword [rsp + 0x68]
movss xmm0, dword [rbp + 0x2ec]
mov r9d, 0x9bc8c8c8
mov rcx, rax
cmp r15, r12
jne 0x140033c86
movss dword [rbp + 0x18], xmm13
movss dword [rbp + 0x1c], xmm6
movss dword [rbp + 0x20], xmm11
movss dword [rbp + 0x24], xmm0
movss xmm0, dword [0x1400ae95c]
movss dword [rsp + 0x20], xmm0
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x20]
call fcn.140025a40
mov rax, qword [0x1400b96a0]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400069b0
mov rbx, rax
movss dword [rbp + 0x28], xmm13
movss dword [rbp + 0x2c], xmm6
comiss xmm14, xmm15
ja 0x140033d2a
lea rdx, [rbp + 0x28]
jmp 0x140033cee
movss dword [rbp + 0x30], xmm13
movss dword [rbp + 0x34], xmm6
movss dword [rbp - 0x68], xmm11
movss dword [rbp - 0x64], xmm0
movss xmm0, dword [0x1400ae95c]
movss dword [rsp + 0x20], xmm0
lea r8, [rbp + 0x30]
lea rdx, [rbp - 0x68]
call fcn.140025a40
mov rax, qword [0x1400b96a0]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400069b0
mov rbx, rax
movss dword [rbp - 0x60], xmm13
movss dword [rbp - 0x5c], xmm6
comiss xmm14, xmm15
ja 0x140033d2a
lea rdx, [rbp - 0x60]
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
movaps xmm2, xmm15
mov rcx, rbx
call fcn.140024bd0
mov r8d, dword [rbx + 0x78]
dec r8d
mov dword [rbx + 0x78], r8d
mov r9d, 0xffffffff
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140024650
xor eax, eax
mov dword [rbx + 0x78], eax
xor ebx, ebx
movss xmm6, dword [0x1400ae8e4]
inc edi
add rsi, 8
cmp edi, 0x10
jb 0x1400336e0
lea rcx, [rbp + 0x3d0]
call fcn.140033f00
mov rsi, qword [rbp - 0x50]
mov r15d, dword [rbp + 0x300]
mov r12, qword [rbp - 0x30]
jmp 0x140033d62
xor ebx, ebx
mov rax, qword [rbp - 0x58]
add rax, 0x78
mov qword [rbp - 0x58], rax
sub rsi, 1
mov qword [rbp - 0x50], rsi
jne 0x140032f61
call fcn.1400092e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x530], xmm0
mov rcx, qword [0x1400b9710]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1400b9720]
lea edx, [r9 + 1]
call qword [rax + pe_nt_image_headers64]
mov rcx, qword [0x1400b9710]
mov rax, qword [rcx]
lea r8, [rbp + 0x530]
mov rdx, qword [0x1400b9720]
call qword [rax + 0x190]
mov rax, qword [0x1400b96a0]
mov rax, qword [rax + 0x4ad0]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, rbx
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14002b680
mov rcx, qword [0x1400b9708]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 1]
call qword [rax + 0x40]
cmp byte [0x1400b9768], 0
mov rdi, qword [rbp - 0x28]
jne 0x140032c54
call fcn.1400345b0
mov rcx, qword [0x1400b9700]
test rcx, rcx
je 0x140033e5a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x1400b9710]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x1400b9708]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x1400b9720]
mov rax, qword [rcx]
call qword [rax + 0x10]
lea rcx, str._____Released_Device_n
jmp 0x140033e61
lea rcx, str._____Device_Not_Found_when_Exiting._n
call fcn.140001180
mov rcx, qword [0x1400b9718]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x1400b96c8]
mov rcx, qword [0x1400b96f0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
test r14, r14
je 0x140033e96
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rcx, qword [rbp + 0x540]
xor rcx, rsp
call fcn.140034800
lea r11, [rsp + 0x6f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret