Function at 0x14003e850
Capabilities:
Encode data using xor
Hide graphical window
Log keystrokes via polling
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x3b0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x280]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0x230], 0x50
mov dword [rsp + 0x234], 0x40
lea rax, [0x14003c5d0]
mov qword [rsp + 0x238], rax
xor r13d, r13d
mov qword [rsp + 0x240], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x248], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x250], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x260], xmm1
lea rax, str.Login_Panel
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x278], r13
lea rcx, [rsp + 0x230]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov eax, dword [rsp + 0x28c]
cdq
sub eax, edx
sar eax, 1
lea r8d, [rax - 0xd6]
mov eax, dword [rsp + 0x288]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x172
mov qword [rsp + 0x58], r13
mov rcx, qword [rsp + 0x248]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], 0x1ac
mov dword [rsp + 0x30], 0x2e4
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.179.64Bit
mov rdx, qword [rsp + 0x270]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r14, rax
mov qword [rsp + 0x148], rax
lea edx, [r13 - 0x14]
mov r8d, 0x80
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
lea ecx, [r13 + 0x20]
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x140117fe8], rax
test rax, rax
je 0x140041716
mov qword [0x140118000], r13
mov qword [0x14011800c], r13
mov dword [0x140118014], r13d
mov qword [0x14011801c], r13
mov dword [0x140118024], r13d
mov qword [0x140118034], r13
mov dword [0x140118028], 1
mov dword [0x140118018], 1
mov dword [0x140118008], r13d
mov dword [0x14011802c], 1
mov dword [0x140118030], 0x50
mov dword [0x14011803c], 0x80000000
mov rax, qword [rax]
lea rdx, [0x140117ff0]
mov qword [rsp + 0x30], rdx
lea rdx, [0x140118000]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, r14
xor edx, edx
lea r8d, [r13 + 1]
call qword [rax + 0x80]
test eax, eax
js 0x14004170f
lea edx, [r13 + 0xa]
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r14
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r13 - 1]
mov rcx, r14
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rax, qword [0x140117da0]
test rax, rax
je 0x14003eaf5
inc dword [rax + 0x3b4]
mov ecx, 0x3db8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x400], rax
lea rcx, [rsp + 0x3f8]
mov qword [rsp + 0x408], rcx
mov qword [rsp + 0x1a8], rax
test rax, rax
je 0x14003eb31
xor edx, edx
mov rcx, rax
call fcn.140001ab0
jmp 0x14003eb34
mov rax, r13
cmp qword [0x140117da0], 0
jne 0x14003eb45
mov qword [0x140117da0], rax
mov rcx, rax
call fcn.1400090a0
mov rbx, qword [0x140117da0]
test rbx, rbx
jne 0x14003eb7a
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179imguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140117da0]
lea rax, [0x1400f1858]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
movss xmm3, dword [0x1400f3234]
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, [0x140102100]
mov rcx, qword [rbx + 0xa8]
call fcn.140026790
cmp qword [0x140117da0], 0
jne 0x14003ebd0
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179imguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
or dword [rbx + 8], 1
xor ecx, ecx
call fcn.140021cd0
lea rcx, [0x140117fe0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14003eda6
lea rcx, [0x140117fd8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14003eda6
mov qword [0x140117fd0], r14
mov rax, qword [0x140117da0]
test rax, rax
jne 0x14003ec39
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179imguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140117da0]
or dword [rax + 0xc], 6
lea rcx, str.imgui_impl_win32
mov qword [rax + 0xd8], rcx
mov qword [rax + 0x120], r14
mov dword [rax + 0x3c], 9
mov dword [rax + 0x40], Ordinal_41
mov dword [rax + 0x44], Ordinal_41
mov dword [rax + 0x48], Ordinal_41
mov dword [rax + 0x4c], Ordinal_46
mov dword [rax + 0x50], reloc.WLDAP32.dll_Ordinal_33
mov dword [rax + 0x54], Ordinal_35
mov dword [rax + 0x58], Ordinal_41
mov dword [rax + 0x5c], reloc.WLDAP32.dll_Ordinal_35
mov dword [rax + 0x60], reloc.WLDAP32.dll_Ordinal_45
mov dword [rax + 0x64], reloc.WLDAP32.dll_Ordinal_46
mov dword [rax + 0x68], 8
mov dword [rax + 0x6c], reloc.WLDAP32.dll_Ordinal_32
mov dword [rax + 0x70], reloc.WS2_32.dll_listen
mov dword [rax + 0x74], reloc.WLDAP32.dll_Ordinal_27
mov dword [rax + 0x78], reloc.WS2_32.dll_listen
mov dword [rax + 0x7c], 0x41
mov dword [rax + 0x80], 0x43
mov dword [rax + 0x84], 0x56
mov dword [rax + 0x88], 0x58
mov dword [rax + 0x8c], 0x59
mov dword [rax + 0x90], 0x5a
lea rax, str.xinput1_4.dll
mov qword [rsp + 0xe8], rax
lea rax, str.xinput1_3.dll
mov qword [rsp + 0xf0], rax
lea rax, str.xinput9_1_0.dll
mov qword [rsp + 0xf8], rax
lea rax, str.xinput1_2.dll
mov qword [rsp + 0x100], rax
lea rax, str.xinput1_1.dll
mov qword [rsp + 0x108], rax
mov rbx, r13
nop dword [rax]
mov rcx, qword [rsp + rbx*8 + 0xe8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
jne 0x14003ed71
inc rbx
cmp rbx, 5
jl 0x14003ed50
jmp 0x14003eda6
mov qword [0x140117fb8], rdi
lea rdx, str.XInputGetCapabilities
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140117fc0], rax
lea rdx, str.XInputGetState
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140117fc8], rax
mov rbx, qword [0x140117ff0]
mov rax, qword [0x140117da0]
test rax, rax
jne 0x14003edda
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179imguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140117da0]
lea rcx, str.imgui_impl_dx9
mov qword [rax + 0xe0], rcx
or dword [rax + 0xc], 8
mov qword [0x140117fa0], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [0x140117da0]
test rax, rax
jne 0x14003ee29
mov r8d, 0x952
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179imguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140117da0]
mov dword [rax + 0x1564], 0x41200000
mov dword [rax + 0x1568], 0x41200000
mov qword [rax + 0x158c], 0x40800000
mov dword [rax + 0x1598], 0x41000000
mov dword [rax + 0x159c], 0x40800000
mov dword [rax + 0x15a8], 0x41200000
mov dword [rax + 0x15ac], 0x41000000
mov dword [rax + 0x15b0], 0x40c00000
mov dword [rax + 0x15b4], 0x40c00000
mov qword [rax + 0x15c0], r13
mov dword [rax + 0x15c8], 0x41a80000
mov qword [rax + 0x15d8], 0x41000000
mov dword [rax + 0x1570], 0x3f800000
mov dword [rax + 0x1594], 0x3f800000
mov qword [rax + 0x15a0], 0x40600000
mov qword [rax + 0x15e4], r13
mov dword [rax + 0x156c], 0x40e00000
mov dword [rax + 0x1588], 0x40c00000
mov dword [rax + 0x157c], 0x3f000000
mov dword [rax + 0x1580], 0x3f000000
mov dword [rax + 0x15f4], 0x3f000000
mov dword [rax + 0x15f8], 0x3f000000
mov dword [rax + 0x160c], 0x40400000
mov dword [rax + 0x1610], 0x40400000
xor ecx, ecx
call fcn.140021cd0
call fcn.14003dba0
xor r12b, r12b
mov byte [rsp + 0x3f8], r12b
xorps xmm0, xmm0
movups xmmword [rsp + 0x2b8], xmm0
movups xmmword [rsp + 0x2c8], xmm0
movups xmmword [rsp + 0x2d8], xmm0
movabs rbx, 0x7fffffffffffffff
lea rsi, [0x140118de0]
movss xmm15, dword [0x1400f32b0]
movss xmm6, dword [0x1400f32a0]
xorps xmm10, xmm10
movss xmm14, dword [0x1400f32c8]
movss xmm12, dword [0x1400f324c]
movss xmm9, dword [0x1400f31dc]
movss xmm13, dword [0x1400f31a8]
movss xmm11, dword [0x1400f32d8]
movss xmm7, dword [0x1400f3298]
movsd xmm8, qword [0x1400f3278]
lea r15, [0x140118060]
nop dword [rax]
nop word [rax + rax]
cmp dword [rsp + 0x2c0], 0x12
je 0x140041601
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14003f00e
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x2b8]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x14003efc0
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003f03d
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
neg al
sbb edx, edx
and edx, 0xa
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14003f04f
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
lea rcx, [rsp + 0x210]
call fcn.14003c330
mov rdi, qword [rsp + 0x210]
movabs rax, 0x7ffffffffeced2ff
cmp rdi, rax
jge 0x14003f07c
add rdi, 0x1312d00
jmp 0x14003f080
mov rdi, rbx
nop
lea rcx, [rsp + 0x1a8]
call fcn.14003c330
mov rbx, qword [rsp + 0x1a8]
cmp rbx, rdi
jl 0x14004156c
test r12b, r12b
jne 0x14003fe89
cmp qword [0x140117f90], 0
jne 0x14003f0b6
call fcn.14003b550
call fcn.14003bc40
call fcn.140007db0
mov rax, qword [0x140117da0]
movaps xmm0, xmm15
unpcklps xmm0, xmm6
movsd qword [rax + 0x1ba8], xmm0
mov dword [rax + 0x1b90], 2
or dword [rax + 0x1b88], 3
movaps xmm0, xmm10
unpcklps xmm0, xmm10
movsd qword [rax + 0x1b98], xmm0
movaps xmm1, xmm10
unpcklps xmm1, xmm10
movsd qword [rax + 0x1ba0], xmm1
mov dword [rax + 0x1b8c], 2
movsd xmm0, qword [0x1400f30e0]
movsd qword [rsp + 0xd8], xmm0
mov eax, dword [0x1400f30e8]
mov dword [rsp + 0xe0], eax
cmp byte [0x1400f30eb], 0
je 0x14003f2a3
mov r8d, r13d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14003f259
movdqa xmm4, xmmword [0x1400f3440]
movdqa xmm2, xmmword [0x1400f3370]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400f33a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400f33c0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.6666666666666666]
movd xmm0, dword [0x1400f30e0]
xorps xmm2, xmm0
movd dword [rsp + 0xd8], xmm2
movdqa xmm3, xmmword [0x1400f3390]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1400f33a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400f33c0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.6666666666666666]
movd xmm0, dword [rsp + 0xdc]
xorps xmm2, xmm0
movd dword [rsp + 0xdc], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0xd8]
add r9, rax
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x14003f270
mov r8d, 0x13e
lea rdx, [0x140116fb4]
lea rcx, [rsp + 0xd8]
call fcn.14000dd40
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
mov r12, qword [rax + 0x2b8]
mov qword [rsp + 0xb0], r12
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003f317
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
neg al
sbb edx, edx
and edx, 0xa
mov rcx, r14
call qword [sym.imp.USER32.dll_ShowWindow]
mov ebx, 4
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x140118058], eax
jle 0x14003f36d
lea rcx, [0x140118058]
call fcn.1400a46ec
cmp dword [0x140118058], 0xffffffff
jne 0x14003f36d
mov rax, rsi
mov ecx, reloc.WS2_32.dll_WSAStartup
mov qword [rax], 0
lea rax, [rax + 8]
sub rcx, 1
jne 0x14003f350
lea rcx, [0x140118058]
call fcn.1400a4680
mov eax, dword [rbx + rdi]
cmp dword [0x140118404], eax
jle 0x14003f3a4
lea rcx, [0x140118404]
call fcn.1400a46ec
cmp dword [0x140118404], 0xffffffff
jne 0x14003f3a4
mov qword [0x140118b48], 0
lea rcx, [0x140118404]
call fcn.1400a4680
mov eax, dword [rbx + rdi]
cmp dword [0x1401183f8], eax
jle 0x14003f3ff
lea rcx, [0x1401183f8]
call fcn.1400a46ec
cmp dword [0x1401183f8], 0xffffffff
jne 0x14003f3ff
lea rdi, [0x140118410]
mov rax, rdi
mov ecx, reloc.WS2_32.dll_WSAStartup
nop dword [rax]
nop word [rax + rax]
mov qword [rax], 0
lea rax, [rax + 8]
sub rcx, 1
jne 0x14003f3e0
lea rcx, [0x1401183f8]
call fcn.1400a4680
jmp 0x14003f406
lea rdi, [0x140118410]
cmp byte [0x140118049], 0
jne 0x14003f528
mov rbx, r13
nop word [rax + rax]
mov rax, qword [0x140117da0]
mov rcx, qword [rax + 0x1ae0]
movss xmm6, dword [rcx + 0x1c]
movss xmm7, dword [rcx + 0x14]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm6
divss xmm8, xmm14
addss xmm8, xmm7
mov rax, qword [0x140117da0]
mov rcx, qword [rax + 0x1ae0]
movss xmm7, dword [rcx + 0x10]
movss xmm6, dword [rcx + 0x18]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, xmm14
addss xmm0, xmm7
movss dword [rbx + rsi], xmm0
movss dword [rsi + rbx + 4], xmm8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xc8
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xc8
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [rbx + rdi], xmm0
movss dword [rdi + rbx + 4], xmm6
add rbx, 8
cmp rbx, 0x398
jl 0x14003f420
mov byte [0x140118049], 1
movss xmm7, dword [0x1400f3298]
movsd xmm8, qword [0x1400f3278]
mov rsi, qword [0x140117da0]
test rsi, rsi
jne 0x14003f555
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179imguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rsi, qword [0x140117da0]
mov r15d, 1
lea r14, [0x140118de4]
mov r13, qword [rsp + 0xb0]
nop word [rax + rax]
cmp r15d, 0x73
jge 0x14003f64d
lea rbx, [r14 + 4]
movsxd rax, r15d
lea rcx, [0x140118de0]
lea rdi, [rcx + rax*8]
mov r12d, reloc.WS2_32.dll_WSAStartup
sub r12d, r15d
nop word [rax + rax]
movss xmm1, dword [rbx + 4]
subss xmm1, dword [r14]
movss xmm0, dword [rbx]
subss xmm0, dword [r14 - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm12
movaps xmm1, xmm9
subss xmm1, xmm0
comiss xmm1, xmm10
jbe 0x14003f62f
mov qword [rsp + 0x1f0], 0x3f800000
mov dword [rsp + 0x1f8], 0
mulss xmm1, dword [rsi + 0x1560]
movss dword [rsp + 0x1fc], xmm1
lea rcx, [rsp + 0x1f0]
call fcn.1400032a0
lea ecx, [r15 - 1]
movsxd rdx, ecx
lea rcx, [0x140118de0]
lea rdx, [rcx + rdx*8]
movss dword [rsp + 0x20], xmm9
mov r9d, eax
mov r8, rdi
mov rcx, r13
call fcn.140024e30
mov rsi, qword [0x140117da0]
add rdi, 8
add rbx, 8
sub r12, 1
jne 0x14003f5a0
inc r15d
add r14, 8
jmp 0x14003f570
test rsi, rsi
mov r13d, 0
jne 0x14003f679
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179imguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rsi, qword [0x140117da0]
movss xmm6, dword [rsi + 0x18]
xorps xmm0, xmm0
movups xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
call fcn.1400032a0
mov r15d, eax
lea rcx, [0x140118de0]
mov rdi, rcx
mov rbx, r13
mov r14d, reloc.WS2_32.dll_WSAStartup
mov r12, qword [rsp + 0xb0]
nop dword [rax]
nop dword [rax + rax]
movaps xmm1, xmm6
lea rax, [0x140118410]
mulss xmm1, dword [rbx + rax]
addss xmm1, dword [rbx + rcx]
movss dword [rbx + rcx], xmm1
movaps xmm2, xmm6
mulss xmm2, dword [rbx + rax + 4]
addss xmm2, dword [rbx + rcx + 4]
movss dword [rbx + rcx + 4], xmm2
mov rax, qword [rsi + 0x1ae0]
movss xmm3, dword [rax + 0x10]
movss xmm4, dword [rax + 0x14]
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm3
comiss xmm3, xmm1
jbe 0x14003f714
movss dword [rbx + rcx], xmm0
jmp 0x14003f72d
comiss xmm1, xmm0
jbe 0x14003f72d
movaps xmm0, xmm3
unpcklps xmm0, xmm4
movsd qword [rsp + 0xb0], xmm0
movss dword [rbx + rcx], xmm0
mov rax, qword [rsi + 0x1ae0]
movss xmm1, dword [rax + 0x14]
movss xmm0, dword [rax + 0x1c]
addss xmm0, xmm1
comiss xmm1, xmm2
jbe 0x14003f74f
movss dword [rbx + rcx + 4], xmm0
jmp 0x14003f772
comiss xmm2, xmm0
jbe 0x14003f772
movss xmm0, dword [rax + 0x10]
unpcklps xmm0, xmm1
movaps xmm2, xmm0
shufps xmm2, xmm2, 0x55
movsd qword [rsp + 0xb0], xmm0
movss dword [rbx + rcx + 4], xmm2
mov dword [rsp + 0x20], r13d
mov r9d, r15d
movaps xmm2, xmm13
mov rdx, rdi
mov rcx, r12
call fcn.140025390
add rdi, 8
add rbx, 8
sub r14, 1
je 0x14003f7aa
mov rsi, qword [0x140117da0]
lea rcx, [0x140118de0]
jmp 0x14003f6c0
movss xmm0, dword [0x1400f3294]
call fcn.140011bf0
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x60]
addss xmm0, dword [0x1400f3260]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x5c]
addss xmm2, dword [0x1400f3240]
movss dword [rax + 0xd8], xmm2
movss dword [rax + 0xdc], xmm0
movss xmm1, dword [rax + 0xf4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm0
movss dword [rax + 0xf4], xmm1
lea rcx, [0x1400f2cb0]
call fcn.14002ef10
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x60]
addss xmm0, dword [0x1400f3264]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x5c]
addss xmm2, dword [0x1400f328c]
movss dword [rax + 0xd8], xmm2
movss dword [rax + 0xdc], xmm0
movss xmm1, dword [rax + 0xf4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm0
movss dword [rax + 0xf4], xmm1
mov qword [rsp + 0x1b0], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x140117dd0]
xor edx, edx
lea rcx, str._Key
call fcn.1400345e0
call fcn.14003d690
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], r13b
jne 0x14003f93c
mov qword [rsp + 0x1b8], r13
movaps xmm1, xmm11
lea rcx, [rsp + 0x1b8]
call fcn.1400118a0
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [0x1400f3268]
mulss xmm0, xmm13
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, xmm0
movss dword [rax + 0xd8], xmm1
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003f9d6
mov qword [rsp + 0x1d8], 0
movaps xmm1, xmm11
lea rcx, [rsp + 0x1d8]
call fcn.1400118a0
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003fa18
mov qword [rsp + 0x1e0], 0
movaps xmm1, xmm11
lea rcx, [rsp + 0x1e0]
call fcn.1400118a0
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003fa5a
mov qword [rsp + 0x1e8], 0
movaps xmm1, xmm11
lea rcx, [rsp + 0x1e8]
call fcn.1400118a0
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rdx, qword [rcx + 0x1ae0]
cmp byte [rdx + 0x93], 0
jne 0x14003fab8
movss xmm1, dword [rdx + 0xe0]
addss xmm1, xmm7
movss xmm0, dword [rdx + 0xe4]
movss dword [rdx + 0xd8], xmm1
movss dword [rdx + 0xdc], xmm0
movsd xmm0, qword [rdx + 0x108]
movsd qword [rdx + 0x100], xmm0
mov eax, dword [rdx + 0x114]
mov dword [rdx + 0x110], eax
mov qword [rsp + 0x150], 0x42c80000
movups xmm0, xmmword [0x1400f3110]
movups xmmword [rsp + 0xe8], xmm0
movups xmm1, xmmword [0x1400f3120]
movups xmmword [rsp + 0xf8], xmm1
movzx eax, word [0x1400f3130]
mov word [rsp + 0x108], ax
mov r8d, r13d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14003fc4d
movdqa xmm5, xmmword [0x1400f3370]
movdqa xmm4, xmmword [0x1400f3440]
movdqa xmm6, xmmword [0x1400f33a0]
movdqa xmm0, xmmword [str.6666666666666666]
movdqa xmmword [rsp + 0xb0], xmm0
lea rcx, [rsp + 0xec]
mov edx, dword [rsp + 0xb0]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400f33c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400f33c0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x14003fb40
cmp r8d, 0x22
jge 0x14003fc93
movsxd rax, r8d
lea r9, [rsp + 0xe8]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x22
jl 0x14003fc60
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0xe8]
call fcn.14002f6e0
test al, al
je 0x14003fe20
mov rbx, qword [0x140117da0]
lea rcx, [rbx + 0x1c20]
movss xmm0, dword [rbx + 0x156c]
mov dword [rsp + 0x218], 2
movss dword [rsp + 0x21c], xmm0
lea rdx, [rsp + 0x218]
call fcn.1400196a0
mov dword [rbx + 0x156c], 0x40a00000
movaps xmm6, xmmword [0x1400f33f0]
mov rbx, qword [0x140117da0]
mov dword [rsp + 0xc0], 2
movups xmm0, xmmword [rbx + 0x1644]
movups xmmword [rsp + 0xc4], xmm0
lea rcx, [rbx + 0x1c10]
lea rdx, [rsp + 0xc0]
call fcn.140019790
movups xmmword [rbx + 0x1644], xmm6
call fcn.14003cf80
mov ecx, 1
call fcn.140003d80
mov ecx, 1
call fcn.140003c00
lea rcx, [0x140118b50]
call fcn.14004e860
lea rdx, [0x140117dd0]
lea rcx, [rsp + 0xe8]
call fcn.140041a70
mov rdx, rax
lea rcx, [0x140118b50]
call fcn.140050250
cmp byte [0x140118d60], 0
jne 0x14003fe0e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x2e8]
call fcn.140041820
movzx edx, byte [rax + 0xa]
test dl, dl
je 0x14003fdd2
xor byte [rax], 0x36
xor byte [rax + 1], 0x37
xor byte [rax + 2], 0x38
xor byte [rax + 3], 0x39
xor byte [rax + 4], 0x3a
xor byte [rax + 5], 0x3b
xor byte [rax + 6], 0x3c
xor byte [rax + 7], 0x3d
xor byte [rax + 8], 0x3e
xor byte [rax + 9], 0x3f
xor dl, 0x40
mov byte [rax + 0xa], dl
mov rdx, rax
call fcn.140041f70
lea rdx, [0x140118d68]
mov rcx, rax
call fcn.140042140
mov r9d, 0x40000
lea r8, str.KeyAuthApp
lea rdx, [0x1400f2d08]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov byte [rsp + 0x3f8], 1
mov dword [0x140117dc8], 1
jmp 0x14003fe70
movss xmm6, dword [0x1400f32a0]
lea rsi, [0x140118de0]
call fcn.1400103c0
jmp 0x140041418
cmp dword [0x140117dc8], 1
jne 0x140041429
cmp qword [0x140117f90], 0
jne 0x14003fea5
call fcn.14003b550
call fcn.14003bc40
call fcn.140007db0
mov rax, qword [0x140117da0]
movaps xmm0, xmm15
unpcklps xmm0, xmm6
movsd qword [rax + 0x1ba8], xmm0
mov dword [rax + 0x1b90], 2
or dword [rax + 0x1b88], 3
movaps xmm0, xmm10
unpcklps xmm0, xmm10
movsd qword [rax + 0x1b98], xmm0
movaps xmm1, xmm10
unpcklps xmm1, xmm10
movsd qword [rax + 0x1ba0], xmm1
mov dword [rax + 0x1b8c], 2
movups xmm1, xmmword [str.w_Y_eyPQS55_Eq]
movups xmmword [rsp + 0xc0], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
test al, al
je 0x1400400c3
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140040077
movdqa xmm5, xmmword [0x1400f3370]
mov edx, r13d
movdqa xmm4, xmmword [0x1400f3440]
movdqa xmm6, xmmword [0x1400f33a0]
movdqa xmm0, xmmword [str.6666666666666666]
movdqa xmmword [rsp + 0xb0], xmm0
lea rcx, [rsp + 0xc4]
mov r8d, dword [rsp + 0xb0]
nop dword [rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400f33c0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400f33c0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x14003ff70
jmp 0x1400400c3
lea r9, [rsp + 0xc0]
mov r8d, r13d
nop dword [rax]
nop word [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x36
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x140040090
mov r8d, 0x13e
lea rdx, [0x140116fb4]
lea rcx, [rsp + 0xc0]
call fcn.14000dd40
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
mov r12, qword [rax + 0x2b8]
mov ebx, 4
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x140118400], eax
jle 0x14004015d
lea rcx, [0x140118400]
call fcn.1400a46ec
cmp dword [0x140118400], 0xffffffff
jne 0x14004015d
mov rax, r15
mov ecx, reloc.WS2_32.dll_WSAStartup
nop dword [rax]
mov qword [rax], 0
lea rax, [rax + 8]
sub rcx, 1
jne 0x140040140
lea rcx, [0x140118400]
call fcn.1400a4680
mov eax, dword [rbx + rdi]
cmp dword [0x14011805c], eax
jle 0x140040194
lea rcx, [0x14011805c]
call fcn.1400a46ec
cmp dword [0x14011805c], 0xffffffff
jne 0x140040194
mov qword [0x1401187a8], 0
lea rcx, [0x14011805c]
call fcn.1400a4680
mov eax, dword [rbx + rdi]
cmp dword [0x1401183fc], eax
jle 0x1400401ef
lea rcx, [0x1401183fc]
call fcn.1400a46ec
cmp dword [0x1401183fc], 0xffffffff
jne 0x1400401ef
lea rdi, [0x1401187b0]
mov rax, rdi
mov ecx, reloc.WS2_32.dll_WSAStartup
nop dword [rax]
nop word [rax + rax]
mov qword [rax], 0
lea rax, [rax + 8]
sub rcx, 1
jne 0x1400401d0
lea rcx, [0x1401183fc]
call fcn.1400a4680
jmp 0x1400401f6
lea rdi, [0x1401187b0]
cmp byte [0x14011804a], 0
jne 0x140040311
mov rbx, r13
nop word [rax + rax]
mov rax, qword [0x140117da0]
mov rcx, qword [rax + 0x1ae0]
movss xmm7, dword [rcx + 0x14]
movss xmm6, dword [rcx + 0x1c]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm6
divss xmm8, xmm14
addss xmm8, xmm7
mov rax, qword [0x140117da0]
mov rcx, qword [rax + 0x1ae0]
movss xmm7, dword [rcx + 0x10]
movss xmm6, dword [rcx + 0x18]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, xmm14
addss xmm0, xmm7
movss dword [rbx + r15], xmm0
movss dword [r15 + rbx + 4], xmm8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xc8
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xc8
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [rbx + rdi], xmm0
movss dword [rdi + rbx + 4], xmm6
add rbx, 8
cmp rbx, 0x398
jl 0x140040210
mov byte [0x14011804a], 1
movsd xmm8, qword [0x1400f3278]
cmp qword [0x140117da0], 0
jne 0x140040335
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179imguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r14d, 1
lea rsi, [0x140118064]
cmp r14d, 0x73
jge 0x14004044a
lea rbx, [rsi + 4]
movsxd rax, r14d
lea rdi, [r15 + rax*8]
mov r15d, reloc.WS2_32.dll_WSAStartup
sub r15d, r14d
lea r13, [0x140118060]
nop word [rax + rax]
movss xmm1, dword [rbx + 4]
subss xmm1, dword [rsi]
movss xmm0, dword [rbx]
subss xmm0, dword [rsi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm12
movaps xmm1, xmm9
subss xmm1, xmm0
comiss xmm1, xmm10
jbe 0x140040425
mov qword [rsp + 0x200], 0x3f800000
mov dword [rsp + 0x208], 0
mov rax, qword [0x140117da0]
movups xmm0, xmmword [rsp + 0x200]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rsp + 0x200], xmm0
movups xmmword [rsp + 0xb0], xmm0
mulss xmm1, dword [rax + 0x1560]
movss dword [rsp + 0xbc], xmm1
lea rcx, [rsp + 0xb0]
call fcn.1400032a0
lea ecx, [r14 - 1]
movsxd rdx, ecx
lea rdx, [rdx*8]
add rdx, r13
movss dword [rsp + 0x20], xmm9
mov r9d, eax
mov r8, rdi
mov rcx, r12
call fcn.140024e30
add rdi, 8
add rbx, 8
sub r15, 1
jne 0x140040370
inc r14d
add rsi, 8
lea r15, [0x140118060]
jmp 0x140040342
cmp qword [0x140117da0], 0
mov r13d, 0
jne 0x140040474
mov r8d, 0xd3d
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179imguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140117da0]
movss xmm6, dword [rax + 0x18]
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
lea rcx, [rsp + 0xb0]
call fcn.1400032a0
mov r14d, eax
mov rdi, r15
mov rbx, r13
mov esi, reloc.WS2_32.dll_WSAStartup
nop word [rax + rax]
movaps xmm1, xmm6
lea rax, [0x1401187b0]
mulss xmm1, dword [rbx + rax]
addss xmm1, dword [rbx + r15]
movss dword [rbx + r15], xmm1
movaps xmm2, xmm6
mulss xmm2, dword [rbx + rax + 4]
addss xmm2, dword [rbx + r15 + 4]
movss dword [rbx + r15 + 4], xmm2
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
movss xmm3, dword [rax + 0x10]
movss xmm4, dword [rax + 0x14]
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm3
comiss xmm3, xmm1
jbe 0x140040510
movss dword [rbx + r15], xmm0
jmp 0x14004052a
comiss xmm1, xmm0
jbe 0x14004052a
movaps xmm0, xmm3
unpcklps xmm0, xmm4
movsd qword [rsp + 0xb0], xmm0
movss dword [rbx + r15], xmm0
mov rax, qword [rcx + 0x1ae0]
movss xmm1, dword [rax + 0x14]
movss xmm0, dword [rax + 0x1c]
addss xmm0, xmm1
comiss xmm1, xmm2
jbe 0x14004054d
movss dword [rbx + r15 + 4], xmm0
jmp 0x140040571
comiss xmm2, xmm0
jbe 0x140040571
movss xmm0, dword [rax + 0x10]
unpcklps xmm0, xmm1
movaps xmm2, xmm0
shufps xmm2, xmm2, 0x55
movsd qword [rsp + 0xb0], xmm0
movss dword [rbx + r15 + 4], xmm2
mov dword [rsp + 0x20], r13d
mov r9d, r14d
movaps xmm2, xmm13
mov rdx, rdi
mov rcx, r12
call fcn.140025390
add rdi, 8
add rbx, 8
sub rsi, 1
jne 0x1400404b0
call fcn.1400377f0
test al, al
je 0x1400413f7
lea rcx, [0x1400f2d28]
call fcn.140039440
test al, al
je 0x1400412e5
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
movss xmm6, dword [rax + 0x10]
movss xmm7, dword [rax + 0x14]
xorps xmm0, xmm0
movups xmmword [rsp + 0xe8], xmm0
mov qword [rsp + 0xf8], r13
mov qword [rsp + 0x100], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xe8], r13b
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x60]
addss xmm0, dword [0x1400f3254]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x5c]
addss xmm2, dword [0x1400f3258]
movss dword [rax + 0xd8], xmm2
movss dword [rax + 0xdc], xmm0
movss xmm1, dword [rax + 0xf4]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm0
movss dword [rax + 0xf4], xmm1
lea rcx, [rsp + 0xe8]
cmp qword [rsp + 0x100], 0xf
cmova rcx, qword [rsp + 0xe8]
call fcn.14002ed70
lea rax, [0x1400f2d50]
mov qword [rsp + 0x2a0], rax
lea rax, str._____
mov qword [rsp + 0x2a8], rax
lea rax, [0x1400f2e30]
mov qword [rsp + 0x2b0], rax
lea r9, [rsp + 0x2a0]
call fcn.1400374b0
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
mov r10, qword [rax + 0x2b8]
movaps xmm0, xmmword [0x1400f33e0]
movups xmmword [rsp + 0xc0], xmm0
lea rcx, [rsp + 0xc0]
call fcn.1400032a0
movaps xmm1, xmm7
addss xmm1, dword [0x1400f3280]
movaps xmm0, xmm6
addss xmm0, dword [0x1400f3288]
movss dword [rsp + 0x158], xmm0
movss dword [rsp + 0x15c], xmm1
addss xmm7, dword [0x1400f3250]
addss xmm6, dword [0x1400f3234]
movss dword [rsp + 0x160], xmm6
movss dword [rsp + 0x164], xmm7
movss dword [rsp + 0x30], xmm9
mov dword [rsp + 0x28], reloc.WS2_32.dll_ntohs
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rsp + 0x158]
lea rdx, [rsp + 0x160]
mov rcx, r10
call fcn.140024fa0
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], sil
jne 0x1400407b5
mov qword [rsp + 0x168], rsi
movaps xmm1, xmm11
lea rcx, [rsp + 0x168]
call fcn.1400118a0
mov qword [rsp + 0x170], 0
lea rdx, [rsp + 0x170]
lea rcx, [0x1400f2ea8]
call fcn.14002f6e0
movzx r8d, al
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140011b40
test r8b, r8b
je 0x140041299
xor edx, edx
lea rcx, str.grcWindow
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140040829
lea r9d, [rax + 0x10]
lea r8, [0x1400f2ed4]
lea rdx, str.Press_Open_in_game
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x60], 0x99a3998f
mov dword [rsp + 0x64], 0x99a999bd
mov dword [rsp + 0x68], 0x99919980
mov dword [rsp + 0x6c], 0x99e299ad
mov dword [rsp + 0x70], 0x99e699e8
mov dword [rsp + 0x74], 0x998b99e7
mov dword [rsp + 0x78], 0x99829992
mov dword [rsp + 0x7c], 0x99889996
mov dword [rsp + 0x80], 0x99b599ab
mov dword [rsp + 0x84], 0x99b999b8
mov dword [rsp + 0x88], 0x99ad99ae
mov dword [rsp + 0x8c], 0x998599f1
mov dword [rsp + 0x90], 0x99879999
mov word [rsp + 0x94], r13w
mov byte [rsp + 0x96], 1
mov rcx, r13
mov edi, 0x6637
nop dword [rax]
movzx eax, cx
sub ax, di
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 0x1a
jb 0x1400408c0
mov byte [rsp + 0x96], 0
lea rcx, [rsp + 0x60]
call fcn.14003e610
mov r14d, eax
test eax, eax
jne 0x140040b50
mov dword [rsp + 0x60], 0x99a3998f
mov dword [rsp + 0x64], 0x99a999bd
mov dword [rsp + 0x68], 0x99919980
mov dword [rsp + 0x6c], 0x99e299ad
mov dword [rsp + 0x70], 0x99eb99e7
mov dword [rsp + 0x74], 0x998b99ea
mov dword [rsp + 0x78], 0x99829992
mov dword [rsp + 0x7c], 0x99889996
mov dword [rsp + 0x80], 0x99b599ab
mov dword [rsp + 0x84], 0x99b999b8
mov dword [rsp + 0x88], 0x99ad99ae
mov dword [rsp + 0x8c], 0x998599f1
mov dword [rsp + 0x90], 0x99879999
mov word [rsp + 0x94], r13w
mov byte [rsp + 0x96], 1
mov rcx, r13
nop dword [rax]
movzx eax, cx
sub ax, di
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 0x1a
jb 0x140040980
mov byte [rsp + 0x96], 0
lea rcx, [rsp + 0x60]
call fcn.14003e610
mov r14d, eax
test eax, eax
jne 0x140040b50
mov dword [rsp + 0x60], 0x99a3998f
mov dword [rsp + 0x64], 0x99a999bd
mov dword [rsp + 0x68], 0x99919980
mov dword [rsp + 0x6c], 0x99e299ad
mov dword [rsp + 0x70], 0x99e299e9
mov dword [rsp + 0x74], 0x998b99e1
mov dword [rsp + 0x78], 0x99829992
mov dword [rsp + 0x7c], 0x99889996
mov dword [rsp + 0x80], 0x99b599ab
mov dword [rsp + 0x84], 0x99b999b8
mov dword [rsp + 0x88], 0x99ad99ae
mov dword [rsp + 0x8c], 0x998599f1
mov dword [rsp + 0x90], 0x99879999
mov word [rsp + 0x94], r13w
mov byte [rsp + 0x96], 1
mov rcx, r13
nop dword [rax]
movzx eax, cx
sub ax, di
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 0x1a
jb 0x140040a40
mov byte [rsp + 0x96], 0
lea rcx, [rsp + 0x60]
call fcn.14003e610
mov r14d, eax
test eax, eax
jne 0x140040b50
mov dword [rsp + 0x60], 0x99a3998f
mov dword [rsp + 0x64], 0x99a999bd
mov dword [rsp + 0x68], 0x99919980
mov dword [rsp + 0x6c], 0x99e299ad
mov dword [rsp + 0x70], 0x99e699e8
mov dword [rsp + 0x74], 0x998b99e7
mov dword [rsp + 0x78], 0x99829992
mov dword [rsp + 0x7c], 0x99889996
mov dword [rsp + 0x80], 0x99b599ab
mov dword [rsp + 0x84], 0x99b999b8
mov dword [rsp + 0x88], 0x99ad99ae
mov dword [rsp + 0x8c], 0x998599f1
mov dword [rsp + 0x90], 0x99879999
mov word [rsp + 0x94], r13w
mov byte [rsp + 0x96], 1
mov rcx, r13
nop dword [rax]
movzx eax, cx
sub ax, di
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 0x1a
jb 0x140040b00
mov byte [rsp + 0x96], 0
lea rcx, [rsp + 0x60]
call fcn.14003e610
mov r14d, eax
test eax, eax
jne 0x140040b50
lea r9d, [rax + 0x10]
lea r8, str.Dev_:_DirtyX
lea rdx, str._Open_FiveM____
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov dword [rsp + 0x110], 0x99a3998f
mov dword [rsp + 0x114], 0x99a999bd
mov dword [rsp + 0x118], 0x99919980
mov dword [rsp + 0x11c], 0x99e299ad
mov dword [rsp + 0x120], 0x99e299e9
mov dword [rsp + 0x124], 0x998b99e1
mov dword [rsp + 0x128], 0x99829992
mov dword [rsp + 0x12c], 0x99889996
mov dword [rsp + 0x130], 0x99b599ab
mov dword [rsp + 0x134], 0x99b999b8
mov dword [rsp + 0x138], 0x99ad99ae
mov dword [rsp + 0x13c], 0x998599f1
mov dword [rsp + 0x140], 0x99879999
mov word [rsp + 0x144], r13w
mov byte [rsp + 0x146], 1
mov rcx, r13
nop dword [rax]
nop word [rax + rax]
movzx eax, cx
sub ax, di
xor word [rsp + rcx*2 + 0x110], ax
inc rcx
cmp rcx, 0x1a
jb 0x140040c00
mov byte [rsp + 0x146], 0
lea rcx, [rsp + 0x110]
call fcn.14003e610
cmp r14d, eax
jne 0x140040dd6
call fcn.14003e2c0
mov ebx, eax
lea rdx, str.FiveM_b2802_GTAProcess.exe
mov ecx, eax
call fcn.14003e6b0
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
mov dword [rsp + 0x178], Ordinal_143
mov dword [rsp + 0x17c], 0x3c0
mov ecx, 8
call fcn.1400a49a4
mov r15, rax
mov qword [rsp + 0x1c0], rax
lea rdi, [rax + 8]
mov qword [rsp + 0x1d0], rdi
mov rcx, qword [rsp + 0x178]
mov qword [rax], rcx
mov qword [rsp + 0x1c8], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xc0], xmm0
mov ecx, 8
call fcn.1400a49a4
mov rbx, rax
mov qword [rsp + 0xc0], rax
lea rcx, [rax + 8]
mov qword [rsp + 0xd0], rcx
sub rdi, r15
mov r8, rdi
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0xc8], rax
lea r8, [rsp + 0xc0]
lea rdx, [rsi + 0x1dc74d8]
mov rcx, r12
call fcn.14003e750
movsxd rcx, dword [0x14011804c]
cmp ecx, 7
ja case.default.0x140040d29
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x417b8]
add rdx, r8
jmp rdx
mov dword [rsp + 0x400], 0x39d91a1b
jmp case.default.0x140040d29
mov dword [rsp + 0x400], 0x25c7daab
jmp case.default.0x140040d29
mov dword [rsp + 0x400], 0x1474607a
jmp case.default.0x140040d29
mov dword [rsp + 0x400], 0x3ecccccd
jmp case.default.0x140040d29
mov dword [rsp + 0x400], 0x3ee66666
jmp case.default.0x140040d29
mov dword [rsp + 0x400], 0x3f000000
jmp case.default.0x140040d29
mov dword [rsp + 0x400], 0x3f4ccccd
jmp case.default.0x140040d29
mov dword [rsp + 0x400], 0x3f800000
test r12, r12
je 0x140040db5
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x400]
mov rdx, rax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r15, r15
je 0x140040dd1
mov edx, 8
mov rcx, r15
call fcn.1400a45cc
mov edi, 0x6637
mov dword [rsp + 0x60], 0x99a3998f
mov dword [rsp + 0x64], 0x99a999bd
mov dword [rsp + 0x68], 0x99919980
mov dword [rsp + 0x6c], 0x99e299ad
mov dword [rsp + 0x70], 0x99eb99e7
mov dword [rsp + 0x74], 0x998b99ea
mov dword [rsp + 0x78], 0x99829992
mov dword [rsp + 0x7c], 0x99889996
mov dword [rsp + 0x80], 0x99b599ab
mov dword [rsp + 0x84], 0x99b999b8
mov dword [rsp + 0x88], 0x99ad99ae
mov dword [rsp + 0x8c], 0x998599f1
mov dword [rsp + 0x90], 0x99879999
mov word [rsp + 0x94], r13w
mov byte [rsp + 0x96], 1
mov rcx, r13
movzx eax, cx
sub ax, di
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 0x1a
jb 0x140040e61
mov byte [rsp + 0x96], 0
lea rcx, [rsp + 0x60]
call fcn.14003e610
cmp r14d, eax
jne 0x140041031
call fcn.14003e2c0
mov ebx, eax
lea rdx, str.FiveM_b2699_GTAProcess.exe
mov ecx, eax
call fcn.14003e6b0
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
mov dword [rsp + 0x180], WSAGetLastError
mov dword [rsp + 0x184], Ordinal_50
mov ecx, 8
call fcn.1400a49a4
mov r15, rax
mov qword [rsp + 0x1c0], rax
lea rdi, [rax + 8]
mov qword [rsp + 0x1d0], rdi
mov rcx, qword [rsp + 0x180]
mov qword [rax], rcx
mov qword [rsp + 0x1c8], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xc0], xmm0
mov ecx, 8
call fcn.1400a49a4
mov rbx, rax
mov qword [rsp + 0xc0], rax
lea rcx, [rax + 8]
mov qword [rsp + 0xd0], rcx
sub rdi, r15
mov r8, rdi
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0xc8], rax
lea r8, [rsp + 0xc0]
lea rdx, [rsi + 0x2f32010]
mov rcx, r12
call fcn.14003e750
movsxd rcx, dword [0x14011804c]
cmp ecx, 7
ja case.default.0x140040f84
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x417d8]
add rdx, r8
jmp rdx
mov dword [rsp + 0x408], 0x39d91a1b
jmp case.default.0x140040f84
mov dword [rsp + 0x408], 0x25c7daab
jmp case.default.0x140040f84
mov dword [rsp + 0x408], 0x1474607a
jmp case.default.0x140040f84
mov dword [rsp + 0x408], 0x3ecccccd
jmp case.default.0x140040f84
mov dword [rsp + 0x408], 0x3ee66666
jmp case.default.0x140040f84
mov dword [rsp + 0x408], 0x3f000000
jmp case.default.0x140040f84
mov dword [rsp + 0x408], 0x3f4ccccd
jmp case.default.0x140040f84
mov dword [rsp + 0x408], 0x3f800000
test r12, r12
je 0x140041010
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x408]
mov rdx, rax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r15, r15
je 0x14004102c
mov edx, 8
mov rcx, r15
call fcn.1400a45cc
mov edi, 0x6637
mov dword [rsp + 0x60], 0x99a3998f
mov dword [rsp + 0x64], 0x99a999bd
mov dword [rsp + 0x68], 0x99919980
mov dword [rsp + 0x6c], 0x99e299ad
mov dword [rsp + 0x70], 0x99e699e8
mov dword [rsp + 0x74], 0x998b99e7
mov dword [rsp + 0x78], 0x99829992
mov dword [rsp + 0x7c], 0x99889996
mov dword [rsp + 0x80], 0x99b599ab
mov dword [rsp + 0x84], 0x99b999b8
mov dword [rsp + 0x88], 0x99ad99ae
mov dword [rsp + 0x8c], 0x998599f1
mov dword [rsp + 0x90], 0x99879999
mov word [rsp + 0x94], r13w
mov byte [rsp + 0x96], 1
mov rcx, r13
nop dword [rax]
movzx eax, cx
sub ax, di
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 0x1a
jb 0x1400410c0
mov byte [rsp + 0x96], 0
lea rcx, [rsp + 0x60]
call fcn.14003e610
cmp r14d, eax
jne 0x140041299
mov edx, 0x1f4
lea ecx, [rdx - 0x64]
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.14003e2c0
mov ebx, eax
lea rdx, str.FiveM_b2944_GTAProcess.exe
mov ecx, eax
call fcn.14003e6b0
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rsp + 0x188], 0x80
mov dword [rsp + 0x18c], 0xe70
mov ecx, 8
call fcn.1400a49a4
mov r14, rax
mov qword [rsp + 0x1c0], rax
lea rdi, [rax + 8]
mov qword [rsp + 0x1d0], rdi
mov rcx, qword [rsp + 0x188]
mov qword [rax], rcx
mov qword [rsp + 0x1c8], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xc0], xmm0
mov ecx, 8
call fcn.1400a49a4
mov rbx, rax
mov qword [rsp + 0xc0], rax
lea rcx, [rax + 8]
mov qword [rsp + 0xd0], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0xc8], rax
lea r8, [rsp + 0xc0]
lea rdx, [rsi + 0x1df28b8]
mov rcx, r15
call fcn.14003e750
movsxd rcx, dword [0x14011804c]
cmp ecx, 7
ja case.default.0x1400411f1
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x417f8]
add rdx, r8
jmp rdx
mov dword [rsp + 0xa0], 0x39d91a1b
jmp case.default.0x1400411f1
mov dword [rsp + 0xa0], 0x25c7daab
jmp case.default.0x1400411f1
mov dword [rsp + 0xa0], 0x1474607a
jmp case.default.0x1400411f1
mov dword [rsp + 0xa0], 0x3ecccccd
jmp case.default.0x1400411f1
mov dword [rsp + 0xa0], 0x3ee66666
jmp case.default.0x1400411f1
mov dword [rsp + 0xa0], 0x3f000000
jmp case.default.0x1400411f1
mov dword [rsp + 0xa0], 0x3f4ccccd
jmp case.default.0x1400411f1
mov dword [rsp + 0xa0], 0x3f800000
test r15, r15
je 0x14004127d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0xa0]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x140041299
mov edx, 8
mov rcx, r14
call fcn.1400a45cc
call fcn.140039550
nop
mov rdx, qword [rsp + 0x100]
cmp rdx, 0xf
jbe 0x1400412e5
inc rdx
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400412e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400412e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a45cc
lea rcx, [0x1400f2fb8]
call fcn.140039440
test al, al
je 0x1400413f7
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x140041342
mov qword [rsp + 0x190], 0
movaps xmm1, xmm11
lea rcx, [rsp + 0x190]
call fcn.1400118a0
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x140041384
mov qword [rsp + 0x198], 0
movaps xmm1, xmm11
lea rcx, [rsp + 0x198]
call fcn.1400118a0
mov rcx, qword [0x140117da0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x1400413bf
mov qword [rsp + 0x1a0], 0
movaps xmm1, xmm11
lea rcx, [rsp + 0x1a0]
call fcn.1400118a0
call fcn.140030bb0
test al, al
je 0x1400413f2
xor edx, edx
mov rbx, qword [rsp + 0x148]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
cmp byte [0x140118048], 0
je 0x1400413f2
mov edx, reloc.WS2_32.dll_recvfrom
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
call fcn.140039550
call fcn.140037c10
call fcn.1400103c0
movss xmm6, dword [0x1400f32a0]
movss xmm7, dword [0x1400f3298]
lea rsi, [0x140118de0]
movzx r12d, byte [rsp + 0x3f8]
mov r14, qword [rsp + 0x148]
call fcn.14000a090
mov rcx, qword [0x140117ff0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r13d
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], r13d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x140117ff0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400414cd
call fcn.14000a520
mov rbx, qword [0x140117da0]
cmp dword [rbx + 0x1c90], 0
jg 0x14004149d
mov r8d, 0x675
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179imguiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x1c98]
mov rcx, qword [rax]
add rcx, 0x40
mov rax, r13
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14003af70
mov rcx, qword [0x140117ff0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140117ff0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
lea r15, [0x140118060]
movabs rbx, 0x7fffffffffffffff
jne 0x14003efc0
mov rcx, qword [0x140117ff0]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
lea r15, [0x140118060]
jne 0x14003efc0
call fcn.14003b6e0
mov rcx, qword [0x140117ff0]
mov rax, qword [rcx]
lea rdx, [0x140118000]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x140041562
mov r8d, reloc.WLDAP32.dll_Ordinal_45
lea rdx, str.D:ALL_SRCloader_knidfeExternal_Overlay__LoaderExternal_179main.h
lea rcx, [0x1400b7778]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.14003b550
jmp 0x14003efac
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rax, rax, 0x64
mov rdx, rdi
sub rdx, rbx
xorps xmm0, xmm0
cvtsi2sd xmm0, rdx
comisd xmm0, xmm8
seta r9b
test r9b, r9b
je 0x1400415a1
movabs rcx, 0x311cdad160000
add rcx, rax
jmp 0x1400415a5
lea rcx, [rdx + rax]
add rdx, rax
movabs r8, 0x311cdad160000
add r8, rax
test r9b, r9b
cmove r8, rdx
movabs rax, 0x112e0be826d694b3
imul r8
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rsp + 0x290], rdx
imul eax, edx, 0x3b9aca00
sub ecx, eax
mov dword [rsp + 0x298], ecx
lea rcx, [rsp + 0x290]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
jmp 0x14003f080
call fcn.14003b6e0
mov rcx, qword [0x140117fa0]
test rcx, rcx
je 0x14004161f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140117fa0], r13
mov rcx, qword [0x140117fb8]
test rcx, rcx
je 0x140041631
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140117fb8], r13
mov qword [0x140117fc0], r13
mov qword [0x140117fc8], r13
mov qword [0x140117fd0], r13
mov qword [0x140117fd8], r13
mov qword [0x140117fe0], r13
mov dword [reloc.WS2_32.dll_htons], 9
mov byte [0x140117fb0], 0
mov byte [reloc.WS2_32.dll_accept], 1
mov rbx, qword [0x140117da0]
mov rcx, rbx
call fcn.1400093b0
cmp qword [0x140117da0], rbx
jne 0x140041692
mov qword [0x140117da0], r13
test rbx, rbx
je 0x1400416ba
mov rcx, rbx
call fcn.140019fe0
mov rax, qword [0x140117da0]
test rax, rax
je 0x1400416b1
dec dword [rax + 0x3b4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x140117ff0]
test rcx, rcx
je 0x1400416d3
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140117ff0], r13
mov rcx, qword [0x140117fe8]
test rcx, rcx
je 0x1400416ec
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140117fe8], r13
mov rcx, r14
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0x248]
mov rcx, qword [rsp + 0x270]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x140041766
mov rcx, qword [0x140117fe8]
mov rdx, qword [0x140117ff0]
test rdx, rdx
je 0x140041739
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140117ff0], r13
mov rcx, qword [0x140117fe8]
test rcx, rcx
je 0x14004174b
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
mov qword [0x140117fe8], r13
mov rdx, qword [rsp + 0x248]
mov rcx, qword [rsp + 0x270]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, 1
lea r11, [rsp + 0x3b0]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret