Function at 0x14002ed00
Capabilities:
Hash data with md5
Log keystrokes via application hook

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x14032aa00]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rbx, rdx
mov dword [rsp + 0x30], ecx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov ecx, 0x20
call fcn.1401ae1f0
mov rdx, rax
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [0x1401f97f0]
movdqu xmmword [rbp - 0x78], xmm0
movups xmm0, xmmword [str.GammaRayClientInner.log]
movups xmmword [rax], xmm0
mov ecx, dword [0x1401f8b40]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x1401f8b44]
mov word [rax + 0x14], cx
movzx eax, byte [0x1401f8b46]
mov byte [rdx + 0x16], al
mov byte [rdx + 0x17], r12b
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.14001e5b0
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14002edd8
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002edd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f23b
call fcn.1401ae118
mov r9d, 0x60700
mov r8, rbx
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call qword [sym.imp.Qt6Widgets.dll_public:_void___cdecl_QApplication::constructor_int____ptr64__char____ptr64____ptr64__int____ptr64]
nop
lea rcx, [rsp + 0x50]
call fcn.14001ed50
lea rdx, [0x140327390]
lea rcx, [rbp - 0x68]
call fcn.140018550
nop
mov r15d, dword [0x140350624]
mov rbx, qword [rbp - 0x58]
test rbx, rbx
je 0x14002f156
lea eax, [r15 - 1]
cmp eax, 0xfffd
ja 0x14002f156
mov dword [rbp - 0x18], 0x67452301
mov dword [rbp - 0x14], 0xefcdab89
mov dword [rbp - 0x10], 0x98badcfe
mov dword [rbp - 0xc], 0x10325476
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rdx, qword [rbp - 0x68]
mov eax, ebx
and eax, 0x1fffffff
mov dword [rbp - 0x20], eax
mov eax, ebx
shr eax, 0x1d
mov dword [rbp - 0x1c], eax
cmp ebx, 0x40
jb 0x14002ee8e
mov r9d, ebx
and r9d, 0xffffffc0
mov r8, rdx
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140020de0
mov rdx, rax
and ebx, 0x3f
mov r8d, ebx
lea rcx, [rbp - 8]
call fcn.1401e4900
xor r8d, r8d
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x20]
call fcn.14002d980
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov r8d, 0xa
cmp qword [rbp - 0x78], r8
cmovb r8, qword [rbp - 0x78]
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rdx, qword [rsp + 0x78]
lea rcx, [rbp - 0x48]
call fcn.140005780
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14002ef20
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ef1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f241
call fcn.1401ae118
movdqa xmm0, xmmword [0x1401f97c0]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
mov ecx, 0x120
call fcn.1401ae1f0
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14002ef79
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_tc::ClientContext_.0
mov qword [rbx], rax
lea rcx, [rbx + 0x10]
xor r8d, r8d
lea rdx, [rbp - 0x48]
call fcn.1400394c0
jmp 0x14002ef7c
mov rbx, r12
lea rax, [rbx + 0x10]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rbx
mov edi, 0xffffffff
test rax, rax
je 0x14002f01c
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x14002efa7
cmp dword [rcx + 8], 0
jne 0x14002f01c
test rbx, rbx
je 0x14002efb5
lock inc dword [rbx + 8]
mov rbx, qword [rsp + 0x40]
mov rcx, r12
mov rdx, r12
test rbx, rbx
je 0x14002efca
mov rdx, rbx
lock inc dword [rbx + 0xc]
mov rcx, rax
mov qword [rax + 0x10], rcx
mov rcx, qword [rax + 0x18]
mov qword [rax + 0x18], rdx
test rcx, rcx
je 0x14002efed
mov eax, edi
lock xadd dword [rcx + 0xc], eax
cmp eax, 1
jne 0x14002efed
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
test rbx, rbx
je 0x14002f01c
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14002f01c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x14002f01c
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov dl, 1
mov rcx, qword [rsp + 0x38]
call fcn.14003c1a0
mov ecx, dword [0x1403570f0]
mov rax, qword gs:[0x58]
mov edx, 0xcc
mov rax, qword [rax + rcx*8]
mov eax, dword [rdx + rax]
cmp dword [0x140350948], eax
jg 0x14002f247
mov r9d, edi
xor r8d, r8d
lea rdx, str.GammaRay_Game_Streamer
lea rcx, [rsp + 0x78]
call qword [sym.imp.Qt6Widgets.dll_public:_static_class_QString___cdecl_QMainWindow::tr_char_const____ptr64__char_const____ptr64__int_]
nop
mov rdx, rax
lea rcx, [0x140350870]
call qword [sym.imp.Qt6Widgets.dll_public:_void___cdecl_QWidget::setWindowTitle_class_QString_const____ptr64____ptr64]
nop
lea rcx, [rsp + 0x78]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov edx, 0x500
mov r8d, 0x300
lea rcx, [0x140350870]
call qword [sym.imp.Qt6Widgets.dll_public:_void___cdecl_QWidget::resize_int__int____ptr64]
lea rcx, [0x140350870]
call qword [sym.imp.Qt6Widgets.dll_public:_void___cdecl_QWidget::show_void____ptr64]
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x140004ba0]
mov ecx, reloc.WS2_32.dll_listen
call qword [sym.imp.USER32.dll_SetWindowsHookExA]
mov rbx, rax
call qword [sym.imp.Qt6Widgets.dll_public:_static_int___cdecl_QApplication::exec_void_]
mov esi, eax
mov rcx, rbx
call qword [sym.imp.USER32.dll_UnhookWindowsHookEx]
nop
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x14002f108
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x14002f108
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x14002f108
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x14002f143
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f13e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f43e
call fcn.1401ae118
movdqa xmm0, xmmword [0x1401f97c0]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
jmp 0x14002f1b6
lea rdx, str.You_must_give_HOST__PORT
lea rcx, [rsp + 0x78]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
nop
lea rdx, str.Error_Params
lea rcx, [rsp + 0x60]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::constructor_char_const____ptr64____ptr64]
nop
mov dword [rsp + 0x20], r12d
mov r9d, 0x400
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.Qt6Widgets.dll_public:_static_enum_QMessageBox::StandardButton___cdecl_QMessageBox::critical_class_QWidget____ptr64__class_QString_const____ptr64__class_QString_const____ptr64__class_QFlags_enum_QMessageBox::StandardButton___enum_QMessageBox::StandardButton_]
nop
lea rcx, [rsp + 0x60]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x78]
call qword [sym.imp.Qt6Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov esi, 0xffffffff
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x14002f1ed
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f1e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f235
call fcn.1401ae118
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], 0
lea rcx, [rsp + 0x50]
call qword [sym.imp.Qt6Widgets.dll_public_virtual:_void___cdecl_QApplication::destructor_void____ptr64]
mov eax, esi
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1401ae6a0
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1401bc384
nop
call fcn.1401bc384
nop
call fcn.1401bc384
nop
lea rcx, [0x140350948]
call fcn.1401ae514
cmp dword [0x140350948], 0xffffffff
jne 0x14002f04f
mov dword [rbp - 0x20], 0x10100
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r12
mov qword [rbp], r12
mov rsi, qword [rbp - 0x58]
lea r14, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova r14, qword [rbp - 0x68]
movabs rbx, 0x7fffffffffffffff
cmp rsi, rbx
jbe 0x14002f29d
call fcn.1400206d0
int3
cmp rsi, 0xf
ja 0x14002f2bc
mov qword [rbp - 8], rsi
mov qword [rbp], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x18], xmm0
jmp 0x14002f34e
mov rax, rsi
or rax, 0xf
cmp rax, rbx
jbe 0x14002f2f8
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1401ae1f0
mov rcx, rax
test rax, rax
je 0x14002f415
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14002f332
mov rbx, rax
mov ecx, reloc.WS2_32.dll_shutdown
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14002f315
mov rax, r12
jmp 0x14002f332
cmp rcx, 0x1000
jb 0x14002f32d
lea rax, [rcx + 0x27]
cmp rax, rcx
ja 0x14002f2d6
call fcn.140020590
int3
call fcn.1401ae1f0
mov qword [rbp - 0x18], rax
mov qword [rbp - 8], rsi
mov qword [rbp], rbx
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call fcn.1401e4900
nop
mov dword [rbp + 8], r15d
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_getsockname]
movdqa xmmword [rbp + 0x20], xmm1
mov eax, dword [str._media]
mov dword [rbp + 0x10], eax
movzx eax, word [0x1401f8b7c]
mov word [rbp + 0x14], ax
mov byte [rbp + 0x16], 0
mov dword [rbp + 0x30], r12d
xor r9d, r9d
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x38]
lea rcx, [0x140350870]
call fcn.140044b60
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x14002f3d2
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f3cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f415
call fcn.1401ae118
movdqa xmm0, xmmword [0x1401f97c0]
movdqa xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x14002f420
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002f41b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002f41b
call fcn.1401bc384
int3
call fcn.1401ae118
lea rcx, [0x1401f2930]
call fcn.1401ae454
nop
lea rcx, [0x140350948]
call fcn.1401ae4a8
jmp 0x14002f04f
call fcn.1401bc384
int3