Function at 0x140001940
Capabilities:
Create thread
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x230
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
mov rax, qword [0x140055040]
xor rax, rsp
mov qword [rbp + 0x98], rax
mov r15, rcx
mov qword [rbp + 0x40], rcx
xor r12d, r12d
lea ecx, [r12 + 0x18]
call fcn.140045f24
mov qword [rax], 0xbb8
lea rcx, [0x1400550c0]
mov qword [rax + 8], rcx
lea rdi, [0x1400017f0]
mov qword [rax + 0x10], rdi
mov qword [rbp + 0x48], rax
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140003330]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140003234
cmp dword [rsp + 0x78], r12d
je 0x140003228
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003228
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
mov dword [rbp - 0x10], 0x50
mov dword [rbp - 0xc], 0x40
lea rax, [0x140003250]
mov qword [rbp - 8], rax
mov qword [rbp], r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 8], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x20], xmm1
mov rax, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x140001a8a
mov rax, qword [r15]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], r12
lea rcx, [rbp - 0x10]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov r8, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x140001aa9
mov r8, qword [r15]
mov qword [rsp + 0x58], r12
mov rax, qword [rbp + 8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], 5
mov dword [rsp + 0x30], 5
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x30]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rbx, rax
mov qword [0x1400559c0], rax
mov ecx, 0x20
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x1400559b8], rax
test rax, rax
je 0x140001bb5
mov qword [0x140055970], r12
mov qword [0x14005597c], r12
mov dword [0x140055984], r12d
mov qword [0x14005598c], r12
mov dword [0x140055994], r12d
mov qword [0x1400559a4], r12
mov dword [0x140055998], 1
mov dword [0x140055988], 1
mov dword [0x140055978], r12d
mov dword [0x14005599c], 1
mov dword [0x1400559a0], 0x50
mov dword [0x1400559ac], 1
mov rax, qword [rax]
lea rdx, [0x1400559b0]
mov qword [rsp + 0x30], rdx
lea rdx, [0x140055970]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, rbx
xor edx, edx
lea r8d, [rdx + 1]
call qword [rax + 0x80]
test eax, eax
jns 0x140001bf8
mov rcx, qword [0x1400559b8]
mov rdx, qword [0x1400559b0]
test rdx, rdx
je 0x140001bd8
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x1400559b0], r12
mov rcx, qword [0x1400559b8]
test rcx, rcx
je 0x140001bea
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400559b8], r12
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.USER32.dll_UnregisterClassA]
xor edx, edx
mov rcx, qword [0x1400559c0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400559c0]
call qword [sym.imp.USER32.dll_UpdateWindow]
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov rax, qword [0x1400559c8]
test rax, rax
je 0x140001c46
inc dword [rax + 0x3b0]
mov ecx, 0x40b0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0x48], rax
lea rcx, [rsp + 0x60]
mov qword [rbp + 0x50], rcx
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140001c73
xor edx, edx
mov rcx, rax
call fcn.140006d20
jmp 0x140001c76
mov rax, r12
cmp qword [0x1400559c8], 0
jne 0x140001c87
mov qword [0x1400559c8], rax
mov rcx, rax
call fcn.14000da80
mov r13, qword [0x1400559c8]
mov qword [r13 + 0x20], r12
or dword [r13 + 8], 0x400
movaps xmm8, xmmword [0x14004d4b0]
movaps xmm5, xmmword [0x14004d4c0]
movaps xmm2, xmmword [0x14004d4d0]
movaps xmm4, xmm8
movaps xmm7, xmmword [0x14004d500]
movaps xmm6, xmmword [0x14004d510]
movaps xmm0, xmmword [0x14004d520]
movaps xmm1, xmmword [0x14004d4f0]
movaps xmm3, xmmword [0x14004d480]
movups xmmword [r13 + 0x16fc], xmm0
movups xmmword [r13 + 0x170c], xmm1
movups xmmword [r13 + 0x1a0c], xmm6
movups xmmword [r13 + 0x171c], xmm8
movaps xmm0, xmmword [0x14004d4e0]
movups xmmword [r13 + 0x172c], xmm0
movups xmmword [r13 + 0x173c], xmm8
movups xmmword [r13 + 0x174c], xmm3
movups xmmword [r13 + 0x175c], xmm3
movups xmmword [r13 + 0x176c], xmm4
movups xmmword [r13 + 0x177c], xmm7
movups xmmword [r13 + 0x178c], xmm6
movups xmmword [r13 + 0x179c], xmm8
movups xmmword [r13 + 0x17ac], xmm8
movups xmmword [r13 + 0x17bc], xmm8
movups xmmword [r13 + 0x17cc], xmm4
movups xmmword [r13 + 0x17dc], xmm4
movups xmmword [r13 + 0x17ec], xmm5
movups xmmword [r13 + 0x17fc], xmm2
movups xmmword [r13 + 0x180c], xmm2
movups xmmword [r13 + 0x181c], xmm6
movups xmmword [r13 + 0x182c], xmm7
movups xmmword [r13 + 0x183c], xmm6
movups xmmword [r13 + 0x184c], xmm4
movups xmmword [r13 + 0x185c], xmm7
movups xmmword [r13 + 0x186c], xmm7
movups xmmword [r13 + 0x187c], xmm4
movups xmmword [r13 + 0x188c], xmm7
movups xmmword [r13 + 0x189c], xmm6
movups xmmword [r13 + 0x18ac], xmm3
movups xmmword [r13 + 0x18bc], xmm3
movups xmmword [r13 + 0x18cc], xmm3
movups xmmword [r13 + 0x18dc], xmm8
movups xmmword [r13 + 0x18ec], xmm4
movups xmmword [r13 + 0x18fc], xmm5
movups xmmword [r13 + 0x197c], xmm6
movups xmmword [r13 + 0x198c], xmm7
movups xmmword [r13 + 0x199c], xmm6
movups xmmword [r13 + 0x19ac], xmm7
movups xmmword [r13 + 0x1a1c], xmm8
movups xmmword [r13 + 0x1a2c], xmm8
movups xmmword [r13 + 0x195c], xmm6
movups xmmword [r13 + 0x190c], xmm8
movups xmmword [r13 + 0x192c], xmm6
movups xmmword [r13 + 0x193c], xmm8
movups xmmword [r13 + 0x194c], xmm6
movups xmmword [r13 + 0x191c], xmm7
mov dword [r13 + 0x1644], r12d
mov dword [r13 + 0x1660], r12d
mov dword [r13 + 0x1678], r12d
mov dword [r13 + 0x16b4], r12d
mov dword [r13 + 0x1668], r12d
mov dword [r13 + 0x16ac], r12d
mov dword [r13 + 0x16bc], r12d
call fcn.1400044e0
mov rcx, qword [0x1400559b0]
mov rbx, qword [0x1400559c8]
lea rax, str.imgui_impl_dx9
mov qword [rbx + 0xe8], rax
or dword [rbx + 0xc], 0x1008
mov qword [0x1400559e8], rcx
mov rax, qword [rcx]
call qword [rax + 8]
test dword [rbx + 8], 0x400
je 0x140001f12
mov rax, qword [0x1400559c8]
lea rcx, [fcn.1400041b0]
mov qword [rax + 0x15f0], rcx
lea rcx, [fcn.140004280]
mov qword [rax + 0x15f8], rcx
lea rcx, [0x140004300]
mov qword [rax + 0x1600], rcx
lea rcx, [0x140004360]
mov qword [rax + 0x1608], rcx
lea rcx, [0x1400044b0]
mov qword [rax + 0x1610], rcx
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x58]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x60]
add eax, 0xfffffdda
movd xmm9, eax
cvtdq2ps xmm9, xmm9
mulss xmm9, dword [0x14004d290]
mov eax, dword [rbp + 0x64]
add eax, 0xfffffea2
movd xmm10, eax
cvtdq2ps xmm10, xmm10
mulss xmm10, dword [0x14004d290]
xorps xmm0, xmm0
movups xmmword [rbp + 0x68], xmm0
movups xmmword [rbp + 0x78], xmm0
movups xmmword [rbp + 0x88], xmm0
lea rsi, [0x140055950]
lea r14, str.test
movss xmm12, dword [0x14004d364]
movss xmm13, dword [0x14004d380]
movss xmm14, dword [0x14004d36c]
movss xmm6, dword [0x14004d3b4]
movss xmm11, dword [0x14004d2d4]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x68]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140001fe7
lea rcx, [rbp + 0x68]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x68]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x140002f89
cmp qword [0x1400559d8], 0
jne 0x140001ff6
call fcn.140004040
mov rbx, qword [0x1400559c8]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
lea rdx, [rbp - 0x20]
mov rcx, qword [0x140055a18]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp - 0x14]
sub eax, dword [rbp - 0x1c]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [rbp - 0x18]
sub eax, dword [rbp - 0x20]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x10], xmm0
movss dword [rbx + 0x14], xmm1
cmp byte [0x1400550c6], 0
je 0x14000209a
mov rdi, qword [0x1400559c8]
mov ecx, dword [rdi + 0x161c]
test ecx, ecx
jns 0x140002071
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edx, r12d
test eax, eax
cmovg edx, eax
lea rcx, [rdi + 0x1618]
call fcn.1400063b0
mov dword [rdi + 0x1618], r12d
xor r9d, r9d
lea r8, [0x140004f40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov byte [0x1400550c6], 0
lea rdi, [0x1400017f0]
mov qword [rbp + 0x50], r12
lea rcx, [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
sub rax, qword [0x140055a20]
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [0x140055a28]
divss xmm1, xmm0
movss dword [rbx + 0x18], xmm1
mov qword [0x140055a20], rcx
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
mov byte [rbx + 0x13c], al
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
mov byte [rbx + 0x13d], al
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
mov byte [rbx + 0x13e], al
mov byte [rbx + 0x13f], 0
call fcn.140004a60
cmp byte [rbx + 0xcf], 0
je 0x140002138
mov eax, 0xffffffff
jmp 0x140002145
mov rax, qword [0x1400559c8]
mov eax, dword [rax + 0x20d0]
cmp dword [0x1400550f0], eax
je 0x140002158
mov dword [0x1400550f0], eax
call fcn.1400048e0
call fcn.140004c70
call fcn.14000c760
mov rax, qword [0x1400559c8]
movss dword [rax + 0x1dd4], xmm9
movss dword [rax + 0x1dd8], xmm10
mov qword [rax + 0x1ddc], r12
mov dword [rax + 0x1dc4], 2
mov byte [rax + 0x1dfc], 1
mov dword [rax + 0x1de4], 0x44098000
mov dword [rax + 0x1de8], 0x43af0000
mov dword [rax + 0x1dc8], 1
or dword [rax + 0x1dc0], 0x43
mov dword [rax + 0x1e20], 0x3f000000
mov rcx, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x1400021cf
mov rcx, qword [r15]
mov r8d, 0x14d
lea rdx, [0x1400550c3]
call fcn.140012950
cmp byte [0x1400550c0], 0
je 0x14000228f
mov rcx, qword [0x1400559c8]
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
movss xmm0, dword [rax + 0x54]
subss xmm0, dword [rax + 0xa0]
movss xmm2, dword [rax + 0x50]
subss xmm2, dword [rax + 0x9c]
addss xmm0, xmm12
addss xmm2, xmm13
movss dword [rax + 0x118], xmm2
movss dword [rax + 0x11c], xmm0
movss xmm1, dword [rax + 0x134]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x130]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm0
movss dword [rax + 0x134], xmm1
movaps xmm0, xmmword [0x14004d490]
movups xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call fcn.140008690
mov dword [rbp - 0x20], eax
lea r9, [rbp - 0x20]
movaps xmm1, xmm14
call fcn.140006450
jmp 0x140002dc9
cmp byte [0x14005596e], 0
je 0x1400025ba
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Authorizing...
call fcn.1400292e0
mov byte [0x14005596e], 0
mov rcx, r12
nop word [rax + rax]
movzx eax, byte [rsi + rcx]
inc rcx
cmp al, byte [r14 + rcx - 1]
jne 0x14000252e
cmp rcx, 5
jne 0x140002310
mov byte [0x14005596a], 1
mov ecx, 0x18
call fcn.140045f24
mov qword [rax], 0xbb8
lea rcx, [0x1400550c2]
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rdi
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140003330]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x40], rax
test rax, rax
je 0x140002ff8
cmp dword [rbp - 0x38], 0
je 0x140002fec
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140002fec
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x40], xmm0
lea ecx, [rax + 0x18]
call fcn.140045f24
mov qword [rax], 0x1770
lea rcx, [0x1400550c1]
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rdi
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140003330]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140002fdc
cmp dword [rbp - 0x48], 0
je 0x140002fd0
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140002fd0
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x50], xmm0
lea ecx, [rax + 0x18]
call fcn.140045f24
mov qword [rax], 0x2328
lea rcx, [0x1400550c4]
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rdi
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140003330]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x60], rax
test rax, rax
je 0x140002fc0
cmp dword [rbp - 0x58], 0
je 0x140002fb4
movaps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140002fb4
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x60], xmm0
lea ecx, [rax + 0x18]
call fcn.140045f24
mov qword [rax], 0x2328
lea rcx, [0x140055969]
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rdi
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140003330]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140002fa4
cmp dword [rbp - 0x68], 0
je 0x140002f98
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140002f98
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
jmp 0x140002dc9
mov byte [0x14005596c], 1
mov ecx, 0x18
call fcn.140045f24
mov qword [rax], 0x1770
lea rcx, [0x14005596c]
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rdi
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140003330]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140003014
cmp dword [rbp - 0x28], 0
je 0x140003008
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003008
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
jmp 0x140002dc9
cmp byte [0x14005596c], 0
je 0x140002633
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d490]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c808]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Incorrect_License...
call fcn.1400292e0
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140002dc9
cmp byte [0x14005596a], 0
je 0x140002ccd
cmp byte [0x1400550c4], 0
je 0x140002860
lea rcx, str.___
cmp byte [0x1400550c2], 0
je 0x140002694
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
lea rbx, str.Preparing_Mapper...
jmp 0x14000282a
cmp byte [0x1400550c1], 0
je 0x140002738
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Preparing_Mapper...
call fcn.1400292e0
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
lea rbx, str.Loading_Driver...
jmp 0x14000282a
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Preparing_Mapper...
call fcn.1400292e0
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Loading_Driver...
call fcn.1400292e0
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
lea rbx, str.Success_
movaps xmm8, xmm6
lea r8, [0x14004c80c]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
mov rcx, r8
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
mov rcx, rbx
call fcn.1400292e0
jmp 0x140002dc9
cmp byte [0x140055969], 0
je 0x140002dc9
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Press_F2_In_Lobby
call fcn.1400292e0
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.At_Any_Time_To_Inject
call fcn.1400292e0
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Waiting...
call fcn.1400292e0
cmp byte [0x14005596b], 0
jne 0x140002ac5
cmp byte [0x14005596d], 0
jne 0x140002ace
mov ecx, 0x71
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140002ac5
mov byte [0x14005596d], 1
mov ecx, 0x18
call fcn.140045f24
mov qword [rax], 0xbb8
lea rcx, [0x14005596b]
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rdi
mov qword [rbp - 0x20], rax
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140003330]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000304c
cmp dword [rsp + 0x78], 0
je 0x140003040
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003040
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x70], xmm0
lea ecx, [rax + 0x18]
call fcn.140045f24
mov qword [rax], 0xbb8
lea rcx, [0x14005596d]
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rdi
mov qword [rbp - 0x20], rax
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140003330]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x80], rax
test rax, rax
je 0x140003030
cmp dword [rbp - 0x78], 0
je 0x140003024
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x20], xmm0
lea rcx, [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003024
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
cmp byte [0x14005596d], 0
je 0x140002b2e
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Injecting...
call fcn.1400292e0
cmp byte [0x14005596b], 0
je 0x140002bfb
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Injecting...
call fcn.1400292e0
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Injection_Success_
call fcn.1400292e0
cmp byte [0x140055968], 0
je 0x140002dc9
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Injecting...
call fcn.1400292e0
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d490]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c808]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Injection_Failed_
call fcn.1400292e0
jmp 0x140002dc9
lea rcx, str.___
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
movaps xmm4, xmmword [0x14004d4a0]
movups xmmword [rbp - 0x20], xmm4
lea rdx, [0x14004c810]
lea rcx, [rbp - 0x20]
call fcn.1400293e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, [0x14004c80c]
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
lea rcx, str.Enter_License:
call fcn.1400292e0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140016810
mov r8, qword [0x1400559c8]
or dword [r8 + 0x1e58], 1
mov dword [r8 + 0x1e5c], 0x43700000
mov qword [rbp + 0x48], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8020
lea rax, [rbp + 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 0x18
mov r8, rsi
xor edx, edx
lea rcx, str.password
call fcn.14002dd00
mov rdx, qword [0x1400559c8]
mov rax, qword [rdx + 0x1d18]
mov qword [rdx + 0x20b0], rax
mov ecx, dword [rax + 0x1fc]
inc ecx
mov dword [rdx + 0x20c0], ecx
mov dword [rdx + 0x20c4], 0x7fffffff
call fcn.14000fe50
test al, al
je 0x140002dc9
mov byte [0x14005596e], 1
call fcn.1400159c0
call fcn.14000eea0
mov rcx, qword [0x1400559b0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r12d
movss dword [rsp + 0x28], xmm11
mov dword [rsp + 0x20], r12d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1400559b0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140002e52
call fcn.14000f370
mov rax, qword [0x1400559c8]
mov rax, qword [rax + 0x1ef8]
mov rcx, qword [rax]
add rcx, 0xa8
mov rax, r12
cmp byte [rcx], r12b
cmovne rax, rcx
mov rcx, rax
call fcn.140003820
mov rcx, qword [0x1400559b0]
mov rax, qword [rcx]
call qword [rax + 0x150]
test dword [r13 + 8], 0x400
je 0x140002f31
call fcn.14001e390
mov rbx, qword [0x1400559c8]
mov r14d, 1
mov eax, dword [rbx + 0x1628]
cmp eax, r14d
jle 0x140002ece
mov esi, 8
mov rax, qword [rbx + 0x1630]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x140002ebc
mov rax, qword [rbx + 0x15c0]
test rax, rax
je 0x140002ea9
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x1608]
test rax, rax
je 0x140002ebc
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
mov eax, dword [rbx + 0x1628]
cmp r14d, eax
jl 0x140002e82
mov r14d, 1
cmp eax, r14d
jle 0x140002f2a
mov esi, 8
nop
mov rax, qword [rbx + 0x1630]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x400
jne 0x140002f1a
mov rax, qword [rbx + 0x15c8]
test rax, rax
je 0x140002f07
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x1610]
test rax, rax
je 0x140002f1a
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
cmp r14d, dword [rbx + 0x1628]
jl 0x140002ee0
lea r14, str.test
mov rcx, qword [0x1400559b0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140002f6e
mov rcx, qword [0x1400559b0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140002f6e
call fcn.140001750
cmp byte [0x1400550c3], 0
je 0x14000305d
lea rdi, [0x1400017f0]
lea rsi, [0x140055950]
cmp dword [rbp + 0x70], 0x12
jne 0x140001fb0
jmp 0x140003064
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x68], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x58], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x48], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x38], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x28], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x78], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x78], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x70], 0x12
call fcn.14001e970
call fcn.1400040d0
mov rcx, qword [0x1400559e8]
test rcx, rcx
je 0x140003087
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400559e8], r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov rcx, qword [0x140055a00]
test rcx, rcx
je 0x1400030b1
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140055a00], r12
mov qword [0x140055a08], r12
mov qword [0x140055a10], r12
mov qword [0x140055a18], r12
mov qword [0x140055a20], r12
mov qword [0x140055a28], r12
mov dword [0x1400550f0], 9
mov byte [0x1400559f8], 0
mov byte [0x1400550c5], 1
mov rbx, qword [0x1400559c8]
mov rcx, rbx
call fcn.14000dde0
cmp qword [0x1400559c8], rbx
jne 0x140003112
mov qword [0x1400559c8], r12
test rbx, rbx
je 0x14000313a
mov rcx, rbx
call fcn.1400287c0
mov rax, qword [0x1400559c8]
test rax, rax
je 0x140003131
dec dword [rax + 0x3b0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1400559b0]
test rcx, rcx
je 0x140003153
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400559b0], r12
mov rcx, qword [0x1400559b8]
test rcx, rcx
je 0x14000316c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400559b8], r12
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.USER32.dll_UnregisterClassA]
nop
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x1400031b1
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x1400031ac
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140003221
mov rcx, r8
call fcn.1400461a0
mov qword [r15 + 0x10], r12
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rcx, qword [rbp + 0x98]
xor rcx, rsp
call fcn.140045c90
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x78], r12d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3