Function at 0x140007440
Capabilities:
Enumerate processes
Log keystrokes via polling
Terminate process
Terminate process by name

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push rbp
push r14
push r15
lea rbp, [r11 - 0x258]
sub rsp, 0x340
mov rax, qword [0x140093040]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov rax, qword [0x1403a41b8]
lea rcx, [rsp + 0x40]
movss xmm0, dword [0x1403a385c]
xor r12d, r12d
movss xmm1, dword [0x1403a3860]
xor edx, edx
mov r8d, 0x2b
mov qword [r11 + 8], rsi
or dword [rax + 0x47b8], 3
movss dword [rax + 0x47d8], xmm0
movss dword [rax + 0x47dc], xmm1
mov dword [rax + 0x47c0], 1
mov qword [rax + 0x47c8], r12
mov qword [rax + 0x47d0], r12
mov dword [rax + 0x47bc], 1
movabs rax, 0x34a48d4b365af554
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x40], rax
movabs rax, 0x1a4ae77b542fd1a2
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x48], rax
movabs rax, 0x51dee4265f2e851b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x1a4ae77b542fd1d0
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x1b8], rax
movdqa xmm0, xmmword [rbp + 0x1b0]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
call fcn.140018100
mov rcx, qword [0x1403a41b8]
lea rdx, str.obs64.exe
xorps xmm0, xmm0
mov qword [rsp + 0x60], r12
mov r8d, 9
mov qword [rsp + 0x68], r12
movups xmmword [rsp + 0x50], xmm0
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [rsp + 0x50]
mov r15, qword [rax + 0x298]
call fcn.14000af20
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r14, qword [rsp + 0x68]
mov rsi, rax
mov rdi, qword [rsp + 0x50]
cmp rax, 0xffffffffffffffff
je 0x14000766c
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x70], 0x238
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140007663
mov rbx, qword [rsp + 0x60]
nop word [rax + rax]
lea rcx, [rbp - 0x64]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], r12w
jne 0x140007600
cmp r14, 7
lea r8, [rsp + 0x50]
cmova r8, rdi
cmp rbx, rax
jne 0x140007651
lea rcx, [rbp - 0x64]
mov rdx, rbx
test rbx, rbx
je 0x140007644
lea rax, [rbp - 0x64]
sub r8, rax
nop
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140007651
add rcx, 2
sub rdx, 1
jne 0x140007630
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor bl, bl
jmp 0x14000766e
lea rdx, [rsp + 0x70]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400075f0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
mov rsi, qword [rsp + 0x360]
cmp r14, 7
jbe 0x1400076b4
lea rdx, [r14*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400076ac
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400076ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140042840
movaps xmmword [rsp + 0x330], xmm6
movaps xmmword [rsp + 0x320], xmm7
movaps xmmword [rsp + 0x310], xmm8
movaps xmmword [rsp + 0x300], xmm9
movaps xmmword [rsp + 0x2f0], xmm11
test bl, bl
jne 0x14000770c
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000770c
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000770c
mov word [0x1403a3858], 1
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x14008afc0]
mov rax, qword [0x1403a41b8]
movss xmm8, dword [0x14008ac44]
movups xmmword [rbp + 0x1b0], xmm0
mov rcx, qword [rax + 0x3ed8]
movsd xmm2, qword [rcx + 0x20]
movss xmm7, dword [rcx + 0x28]
movaps xmm0, xmm2
shufps xmm0, xmm0, 0x55
lea rcx, [rbp + 0x1b0]
movaps xmm1, xmm2
movsd qword [rsp + 0x40], xmm2
addss xmm1, dword [0x14008aca8]
addss xmm0, xmm8
movss dword [rsp + 0x30], xmm1
movss dword [rsp + 0x34], xmm0
call fcn.14000e940
xorps xmm11, xmm11
mov dword [rsp + 0x28], r12d
mov r9d, eax
movss dword [rsp + 0x20], xmm11
lea r8, [rsp + 0x30]
mov rcx, r15
lea rdx, [rsp + 0x40]
call fcn.1400309c0
mov rcx, qword [0x1403a41b8]
movss xmm6, dword [0x14008ac18]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, str.Optimizer
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm6
addss xmm0, xmm6
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.14003a5d0
mov rcx, qword [0x1403a41b8]
movss xmm9, dword [0x14008ac40]
subss xmm7, xmm9
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [0x1400841ac]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, xmm6
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.14003a5d0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.14001b640
test al, al
je 0x14000789d
xor ecx, ecx
call fcn.140011f00
test al, al
je 0x14000789d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rbx, qword [0x1403a41b8]
lea rcx, str.Options
movaps xmmword [rsp + 0x2e0], xmm12
xor edx, edx
movaps xmmword [rsp + 0x2d0], xmm13
mov dword [rsp + 0x30], 0x43c80000
mov rax, qword [rbx + 0x3ed8]
mov dword [rsp + 0x34], 0x43660000
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, dword [0x14008ac4c]
addss xmm0, dword [0x14008ac58]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rbx, qword [rbx + 0x3ed8]
movsxd rax, dword [rbx + 0xf0]
mov r8, qword [rbx + 0xf8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.14000e3b0
mov rdx, qword [rbx]
mov edi, eax
cmp dword [rdx + 0x3f20], eax
jne 0x140007972
lea r8, str.Options
mov edx, 0xb
mov ecx, eax
call fcn.140024f40
lea r8, [rsp + 0x30]
mov dword [rsp + 0x20], r12d
mov edx, edi
lea rcx, str.Options
call fcn.140015420
mov rcx, qword [0x1403a41b8]
movss xmm12, dword [0x14008ac30]
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x104]
subss xmm1, dword [rax + 0x24]
addss xmm1, dword [rax + 0x88]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, str.General_Windows_Optimizations
addss xmm1, xmm12
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm0, xmm1
movss dword [rax + 0x104], xmm0
call fcn.14003a5d0
mov rcx, qword [0x1403a41b8]
movss xmm13, dword [0x14008ac8c]
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x104]
subss xmm1, dword [rax + 0x24]
addss xmm1, dword [rax + 0x88]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
addss xmm1, xmm12
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm0, xmm1
movss dword [rax + 0x104], xmm0
mov rax, qword [rcx + 0x3ed8]
movss xmm0, dword [rax + 0x100]
subss xmm0, dword [rax + 0x20]
addss xmm0, dword [rax + 0x84]
addss xmm0, xmm13
call fcn.14001aaf0
lea rcx, str.This_optimization_offers_a_range_of_general_optimizations_for_Windows_operating_systems._It_includes_tweaks_and_settings_adjustments_to_improve_system_performance__responsiveness__and_stability._By_applying_these_optimizations__you_can_optimize_your_Windows_environment_for_better_overall_experience.
call fcn.14003a5d0
mov r9, qword [0x1403a41b8]
movss xmm6, dword [0x14008acc8]
mov rax, qword [r9 + 0x3ed8]
mov byte [rax + 0xb8], 1
mov r8, qword [r9 + 0x3ed8]
mov rax, qword [r8 + 0x1e0]
movsxd rdx, dword [r8 + 0x1d8]
mov ecx, dword [rax + rdx*4 - 4]
lea eax, [rdx - 1]
mov dword [r8 + 0x1d8], eax
mov dword [r8 + 0x1c0], ecx
mov rax, qword [r9 + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [r9 + 0x3ed8]
cmp byte [rax + 0xbb], r12b
jne 0x140007afd
movaps xmm1, xmm6
mov qword [rsp + 0x30], r12
lea rcx, [rsp + 0x30]
call fcn.14001d510
movdqa xmm0, xmmword [0x14008b0e0]
lea rdx, str.Windows
lea rcx, [rbp + 0x1b0]
movups xmmword [rbp + 0x1b0], xmm0
call fcn.14003a710
mov rbx, qword [0x1403a41b8]
movaps xmm1, xmm6
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x28]
subss xmm0, xmm8
call fcn.14001d830
mov rax, qword [rbx + 0x3ed8]
lea rdx, [0x1403a41b1]
movss xmm7, dword [0x14008abfc]
lea rcx, [0x140045a1f]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, xmm9
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.140041180
test al, al
je 0x140007bd9
xor ecx, ecx
lea r8, str.Notification
cmp byte [0x1403a41b1], r12b
lea rdx, str.Active_Optimization
mov r9d, 0x40
jne 0x140007bd3
lea rdx, str.Disabled_Desactived
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.140015680
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14001d830
mov rcx, qword [0x1403a41b8]
xor edx, edx
mov dword [rsp + 0x30], 0x43c80000
mov dword [rsp + 0x34], 0x43660000
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rbx, qword [rcx + 0x3ed8]
lea rcx, str.Details
movsxd rax, dword [rbx + 0xf0]
mov r8, qword [rbx + 0xf8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.14000e3b0
mov rdx, qword [rbx]
mov edi, eax
cmp dword [rdx + 0x3f20], eax
jne 0x140007c56
lea r8, str.Details
mov edx, 0xb
mov ecx, eax
call fcn.140024f40
lea r8, [rsp + 0x30]
mov dword [rsp + 0x20], r12d
mov edx, edi
lea rcx, str.Details
call fcn.140015420
mov rcx, qword [0x1403a41b8]
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x104]
subss xmm1, dword [rax + 0x24]
addss xmm1, dword [rax + 0x88]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, str.Optimize_Applications
addss xmm1, xmm12
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm0, xmm1
movss dword [rax + 0x104], xmm0
call fcn.14003a5d0
mov rcx, qword [0x1403a41b8]
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x104]
subss xmm1, dword [rax + 0x24]
addss xmm1, dword [rax + 0x88]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
addss xmm1, xmm12
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm0, xmm1
movss dword [rax + 0x104], xmm0
mov rax, qword [rcx + 0x3ed8]
movss xmm0, dword [rax + 0x100]
subss xmm0, dword [rax + 0x20]
addss xmm0, dword [rax + 0x84]
addss xmm0, xmm13
call fcn.14001aaf0
lea rcx, str.The_optimization_will_use_shellcode_to_read_the_memory_of_possible_heavy_and_frequently_used_applications__and_will_change_the_optimization_to_the_one_with_higher_quality__after_completing_the_optimization_we_will_ask_you_to_restart_your_PC.
call fcn.14003a5d0
mov r9, qword [0x1403a41b8]
mov rax, qword [r9 + 0x3ed8]
mov byte [rax + 0xb8], 1
mov r8, qword [r9 + 0x3ed8]
mov rax, qword [r8 + 0x1e0]
movsxd rdx, dword [r8 + 0x1d8]
mov ecx, dword [rax + rdx*4 - 4]
lea eax, [rdx - 1]
mov dword [r8 + 0x1d8], eax
mov dword [r8 + 0x1c0], ecx
mov rax, qword [r9 + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [r9 + 0x3ed8]
cmp byte [rax + 0xbb], r12b
jne 0x140007dc7
movaps xmm1, xmm6
mov qword [rsp + 0x30], r12
lea rcx, [rsp + 0x30]
call fcn.14001d510
movdqa xmm0, xmmword [0x14008b0e0]
lea rdx, str.Shellcode
lea rcx, [rbp + 0x1b0]
movups xmmword [rbp + 0x1b0], xmm0
call fcn.14003a710
mov rbx, qword [0x1403a41b8]
movaps xmm1, xmm6
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x28]
subss xmm0, xmm8
call fcn.14001d830
mov rax, qword [rbx + 0x3ed8]
lea rdx, [0x1403a41b3]
lea rcx, [0x140045a1f]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, xmm9
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.140041180
test al, al
je 0x140007ecc
xor ecx, ecx
lea r8, str.Notification
cmp byte [0x1403a41b3], r12b
mov r9d, 0x40
je 0x140007ebf
lea rdx, str.Start_Optimization
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], 0xa
call fcn.14000a960
mov r9d, 0x30
lea r8, str.Notification
lea rdx, str.Restart_the_PC
xor ecx, ecx
jmp 0x140007ec6
lea rdx, str.Stop_Optimization
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.140015680
mov rbx, qword [0x1403a41b8]
lea rcx, str.AdvancedSettings
xor edx, edx
mov dword [rsp + 0x30], 0x43c80000
mov dword [rsp + 0x34], 0x43660000
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, dword [0x14008ac4c]
addss xmm0, dword [0x14008ac80]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov rax, qword [rbx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rbx, qword [rbx + 0x3ed8]
movsxd rax, dword [rbx + 0xf0]
mov r8, qword [rbx + 0xf8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.14000e3b0
mov rdx, qword [rbx]
mov edi, eax
cmp dword [rdx + 0x3f20], eax
jne 0x140007f94
lea r8, str.AdvancedSettings
mov edx, 0xb
mov ecx, eax
call fcn.140024f40
lea r8, [rsp + 0x30]
mov dword [rsp + 0x20], r12d
mov edx, edi
lea rcx, str.AdvancedSettings
call fcn.140015420
mov rcx, qword [0x1403a41b8]
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x104]
subss xmm1, dword [rax + 0x24]
addss xmm1, dword [rax + 0x88]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, str.Optimize_Windows_Timer_Resolution
addss xmm1, xmm12
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm0, xmm1
movss dword [rax + 0x104], xmm0
call fcn.14003a5d0
mov rcx, qword [0x1403a41b8]
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x104]
subss xmm1, dword [rax + 0x24]
addss xmm1, dword [rax + 0x88]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
addss xmm1, xmm12
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm0, xmm1
movss dword [rax + 0x104], xmm0
mov rax, qword [rcx + 0x3ed8]
movss xmm0, dword [rax + 0x100]
subss xmm0, dword [rax + 0x20]
addss xmm0, dword [rax + 0x84]
addss xmm0, xmm13
call fcn.14001aaf0
lea rcx, str.This_optimization_adjusts_the_timer_resolution_of_your_Windows_system__improving_the_accuracy_and_responsiveness_of_time_sensitive_applications_and_processes__as_well_as_improving_system_performance.
call fcn.14003a5d0
mov r9, qword [0x1403a41b8]
mov rax, qword [r9 + 0x3ed8]
mov byte [rax + 0xb8], 1
mov r8, qword [r9 + 0x3ed8]
mov rax, qword [r8 + 0x1e0]
movsxd rdx, dword [r8 + 0x1d8]
mov ecx, dword [rax + rdx*4 - 4]
lea eax, [rdx - 1]
mov dword [r8 + 0x1d8], eax
mov dword [r8 + 0x1c0], ecx
mov rax, qword [r9 + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [r9 + 0x3ed8]
cmp byte [rax + 0xbb], r12b
jne 0x140008105
movaps xmm1, xmm6
mov qword [rsp + 0x30], r12
lea rcx, [rsp + 0x30]
call fcn.14001d510
movdqa xmm0, xmmword [0x14008b0e0]
lea rdx, str.Power_Resolution
lea rcx, [rbp + 0x1b0]
movups xmmword [rbp + 0x1b0], xmm0
call fcn.14003a710
mov rbx, qword [0x1403a41b8]
movaps xmm1, xmm6
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x28]
subss xmm0, xmm8
call fcn.14001d830
mov rax, qword [rbx + 0x3ed8]
lea rdx, [0x1403a41b2]
lea rcx, [0x140045a1f]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, xmm9
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.140041180
test al, al
je 0x14000820a
xor ecx, ecx
lea r8, str.Notification
cmp byte [0x1403a41b2], r12b
mov r9d, 0x40
je 0x1400081fd
lea rdx, str.Active_Timer_Resolution
call qword [sym.imp.USER32.dll_MessageBoxW]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], 5
call fcn.14000a960
mov r9d, 0x40
lea r8, str.Notification
lea rdx, str.0.500_Milliseconds
xor ecx, ecx
jmp 0x140008204
lea rdx, str.Disabled_Timer_Resolution
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.140015680
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14001d830
mov rcx, qword [0x1403a41b8]
xor edx, edx
mov dword [rsp + 0x30], 0x43c80000
mov dword [rsp + 0x34], 0x43660000
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rbx, qword [rcx + 0x3ed8]
lea rcx, str.Logs
movsxd rax, dword [rbx + 0xf0]
mov r8, qword [rbx + 0xf8]
mov r8d, dword [r8 + rax*4 - 4]
call fcn.14000e3b0
mov r8, qword [rbx]
mov edi, eax
cmp dword [r8 + 0x3f20], eax
jne 0x140008288
lea r8, str.Logs
mov edx, 0xb
mov ecx, eax
call fcn.140024f40
lea r8, [rsp + 0x30]
mov dword [rsp + 0x20], r12d
mov edx, edi
lea rcx, str.Logs
call fcn.140015420
mov rcx, qword [0x1403a41b8]
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x104]
subss xmm1, dword [rax + 0x24]
addss xmm1, dword [rax + 0x88]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, str.Game_optimizations
addss xmm1, xmm12
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm0, xmm1
movss dword [rax + 0x104], xmm0
call fcn.14003a5d0
mov rcx, qword [0x1403a41b8]
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x104]
subss xmm1, dword [rax + 0x24]
addss xmm1, dword [rax + 0x88]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed8]
addss xmm1, xmm12
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm0, xmm1
movss dword [rax + 0x104], xmm0
mov rax, qword [rcx + 0x3ed8]
movss xmm0, dword [rax + 0x100]
subss xmm0, dword [rax + 0x20]
addss xmm0, dword [rax + 0x84]
addss xmm0, xmm13
call fcn.14001aaf0
lea rcx, str.This_optimization_is_specifically_designed_to_improve_gaming_performance_on_your_system._It_includes_a_collection_of_optimizations__such_as_graphical_settings_adjustments__system_tweaks__and_performance_improvements__to_maximize_the_gaming_experience._By_applying_these_optimizations__you_can.
call fcn.14003a5d0
mov r9, qword [0x1403a41b8]
movaps xmm13, xmmword [rsp + 0x2d0]
movaps xmm12, xmmword [rsp + 0x2e0]
mov rax, qword [r9 + 0x3ed8]
mov byte [rax + 0xb8], 1
mov r8, qword [r9 + 0x3ed8]
mov rax, qword [r8 + 0x1e0]
movsxd rdx, dword [r8 + 0x1d8]
mov ecx, dword [rax + rdx*4 - 4]
lea eax, [rdx - 1]
mov dword [r8 + 0x1d8], eax
mov dword [r8 + 0x1c0], ecx
mov rax, qword [r9 + 0x3ed8]
mov byte [rax + 0xb8], 1
mov rax, qword [r9 + 0x3ed8]
cmp byte [rax + 0xbb], r12b
jne 0x14000840b
movaps xmm1, xmm6
mov qword [rsp + 0x30], r12
lea rcx, [rsp + 0x30]
call fcn.14001d510
movdqa xmm0, xmmword [0x14008b0e0]
lea rdx, str._Fps
lea rcx, [rbp + 0x1b0]
movups xmmword [rbp + 0x1b0], xmm0
call fcn.14003a710
mov rbx, qword [0x1403a41b8]
movaps xmm1, xmm6
mov rax, qword [rbx + 0x3ed8]
movss xmm0, dword [rax + 0x28]
subss xmm0, xmm8
call fcn.14001d830
mov rax, qword [rbx + 0x3ed8]
lea rdx, [0x1403a41b4]
lea rcx, [0x140045a1f]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ed8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, xmm9
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.140041180
test al, al
je 0x1400084df
xor ecx, ecx
lea r8, str.Notification
cmp byte [0x1403a41b4], r12b
lea rdx, str.Game_Optimization_Active
mov r9d, 0x40
jne 0x1400084d9
lea rdx, str.Game_Optimization_Desactived
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.140015680
call fcn.14001a310
movaps xmm9, xmmword [rsp + 0x300]
movaps xmm8, xmmword [rsp + 0x310]
movaps xmm7, xmmword [rsp + 0x320]
movaps xmm6, xmmword [rsp + 0x330]
movaps xmm11, xmmword [rsp + 0x2f0]
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.140042820
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret