Function at 0x140034170
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x768]
sub rsp, 0x830
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
lea rcx, [rbp + 0x180]
call fcn.140037120
nop
cmp qword [rbp + 0x210], 0
je 0x14003426f
mov r8d, 0x40
lea rdx, [0x14025fa10]
lea rcx, [rbp + 0x180]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::getline_char____ptr64__long_long___int64_____ptr64]
lea rdx, str.Loaded_license_key_from_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140038b80
mov rcx, rax
lea rdx, str.license.txt
call fcn.140038b80
lea rdx, [0x140038d60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x190]
call fcn.140038610
test rax, rax
jne 0x1400342a2
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x180]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
jmp 0x1400342a2
lea rdx, str.Unable_to_open_file_for_loading:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140038b80
mov rcx, rax
lea rdx, str.license.txt
call fcn.140038b80
lea rdx, [0x140038d60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x180], rax
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x17c], edx
lea rcx, [rbp + 0x190]
call fcn.140037da0
lea rcx, [rbp + 0x198]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x230]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0xa0]
call qword [sym.imp.USER32.dll_GetWindowRect]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
xor r12d, r12d
mov ebx, r12d
movabs rdi, 0x2492492492492493
lea rsi, str.abcdefghijklmnopqrstuvwxyz0123456789
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movsxd rcx, eax
mov rax, rdi
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
sub rcx, rax
movzx eax, byte [rcx + rsi]
mov byte [rbp + rbx + 0x590], al
inc rbx
cmp rbx, 0xff
jl 0x140034337
mov byte [rbp + 0x68f], r12b
mov qword [rbp + 0xa0], r12
mov ecx, 0x3b
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rbp + 0xa8], eax
mov ecx, 0x3c
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rbp + 0xac], eax
mov dword [rbp + 0x4a0], 0x50
mov dword [rbp + 0x4a4], 0x40
lea rax, [0x140036fd0]
mov qword [rbp + 0x4a8], rax
mov qword [rbp + 0x4b0], r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x4b8], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x4c0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x4d0], xmm1
lea rax, [rbp + 0x590]
mov qword [rbp + 0x4e0], rax
mov qword [rbp + 0x4e8], r12
lea rcx, [rbp + 0x4a0]
call qword [sym.imp.USER32.dll_RegisterClassExA]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
lea ebx, [rax - 0xc8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x12c
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], 0x190
mov dword [rsp + 0x30], 0x258
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
xor r8d, r8d
lea rdx, [rbp + 0x590]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rsi, rax
mov qword [rbp + 0x290], rax
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, 0xa
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov edx, 0xffffffec
mov r8d, 0x80
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov ecx, 0x20
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x14025fa50], rax
test rax, rax
je 0x140036ee1
mov qword [0x14025fa80], r12
mov qword [0x14025fa8c], r12
mov dword [0x14025fa94], r12d
mov qword [0x14025fa9c], r12
mov dword [0x14025faa4], r12d
mov qword [0x14025fab4], r12
mov dword [0x14025faa8], 1
mov dword [0x14025fa98], 1
mov dword [0x14025fa88], r12d
mov dword [0x14025faac], 1
mov dword [0x14025fab0], 0x50
mov dword [0x14025fabc], 1
mov rax, qword [rax]
lea rdx, [0x14025fa58]
mov qword [rsp + 0x30], rdx
lea rdx, [0x14025fa80]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, rsi
xor edx, edx
mov r8d, 1
call qword [rax + 0x80]
test eax, eax
js 0x140036eda
mov edx, 0xa
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowPos]
call fcn.140004f90
mov rbx, qword [0x14025f8a0]
test rbx, rbx
jne 0x140034616
mov r8d, 0xd3f
lea rdx, str.D:NEW4K___Copy__2____Copyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14025f8a0]
test rbx, rbx
jne 0x140034616
mov r8d, 0x960
lea rdx, str.D:NEW4K___Copy__2____Copyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
xor ecx, ecx
call fcn.14001e610
mov qword [rbp + 0x2a0], r12
mov dword [rbp + 0x2a8], r12d
mov byte [rbp + 0x2ac], 1
mov qword [rbp + 0x2b0], r12
mov qword [rbp + 0x2c4], r12
mov qword [rbp + 0x2cc], r12
mov qword [rbp + 0x2d8], r12
mov dword [rbp + 0x2e0], r12d
mov dword [rbp + 0x2e4], 0x7f7fffff
mov byte [rbp + 0x2e8], r12b
mov dword [rbp + 0x2ec], r12d
mov dword [rbp + 0x2f0], 0x3f800000
mov eax, 0xffff
mov word [rbp + 0x2f4], ax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x2f6], xmm0
movups xmmword [rbp + 0x306], xmm0
mov qword [rbp + 0x316], rax
mov qword [rbp + 0x320], r12
mov dword [rbp + 0x2b8], 1
mov dword [rbp + 0x2bc], 1
mov byte [rbp + 0x2c0], 1
lea rdi, [0x1400446e0]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
movss xmm15, dword [0x140045aec]
movaps xmm3, xmm15
mov r8d, 0x1fb48c
lea rdx, [0x140052d70]
mov rcx, qword [rbx + 0xa8]
call fcn.140022ac0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
movss xmm3, dword [0x140045ae4]
mov r8d, 0x1fb48c
lea rdx, [0x140052d70]
mov rcx, qword [rbx + 0xa8]
call fcn.140022ac0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
movss xmm3, dword [0x140045af0]
mov r8d, 0x1fb48c
lea rdx, [0x140052d70]
mov rcx, qword [rbx + 0xa8]
call fcn.140022ac0
mov rdi, qword [rbx + 0xa8]
cmp byte [rdi], r12b
je 0x140034772
mov r8d, 0x7f6
lea rdx, str.D:NEW4K___Copy__2____Copyimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm6, xmmword [rbp + 0x2a0]
movups xmmword [rbp + 0x180], xmm6
movups xmm7, xmmword [rbp + 0x2b0]
movups xmmword [rbp + 0x190], xmm7
movups xmm8, xmmword [rbp + 0x2c0]
movups xmmword [rbp + 0x1a0], xmm8
movups xmm9, xmmword [rbp + 0x2d0]
movups xmmword [rbp + 0x1b0], xmm9
movups xmm10, xmmword [rbp + 0x2e0]
movups xmmword [rbp + 0x1c0], xmm10
movups xmm11, xmmword [rbp + 0x2f0]
movups xmmword [rbp + 0x1d0], xmm11
movups xmm12, xmmword [rbp + 0x300]
movups xmmword [rbp + 0x1e0], xmm12
movups xmm13, xmmword [rbp + 0x310]
movups xmmword [rbp + 0x1f0], xmm13
movsd xmm14, qword [rbp + 0x320]
movsd qword [rbp + 0x200], xmm14
lea r15, [0x14025d630]
mov qword [rbp + 0x180], r15
mov dword [rbp + 0x188], 0x1908
mov dword [rbp + 0x194], 0x41c80000
lea r14, [0x140045a00]
mov qword [rbp + 0x1b8], r14
lea rdx, [rbp + 0x180]
mov rcx, rdi
call fcn.140022790
mov rdi, qword [rbx + 0xa8]
cmp byte [rdi], r12b
je 0x140034865
mov r8d, 0x7f6
lea rdx, str.D:NEW4K___Copy__2____Copyimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmmword [rbp + 0x180], xmm6
movups xmmword [rbp + 0x190], xmm7
movups xmmword [rbp + 0x1a0], xmm8
movups xmmword [rbp + 0x1b0], xmm9
movups xmmword [rbp + 0x1c0], xmm10
movups xmmword [rbp + 0x1d0], xmm11
movups xmmword [rbp + 0x1e0], xmm12
movups xmmword [rbp + 0x1f0], xmm13
movsd qword [rbp + 0x200], xmm14
mov qword [rbp + 0x180], r15
mov dword [rbp + 0x188], 0x1908
mov dword [rbp + 0x194], 0x428c0000
mov qword [rbp + 0x1b8], r14
lea rdx, [rbp + 0x180]
mov rcx, rdi
call fcn.140022790
mov rdi, qword [rbx + 0xa8]
cmp byte [rdi], r12b
je 0x140034903
mov r8d, 0x7f6
lea rdx, str.D:NEW4K___Copy__2____Copyimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmmword [rbp + 0x180], xmm6
movups xmmword [rbp + 0x190], xmm7
movups xmmword [rbp + 0x1a0], xmm8
movups xmmword [rbp + 0x1b0], xmm9
movups xmmword [rbp + 0x1c0], xmm10
movups xmmword [rbp + 0x1d0], xmm11
movups xmmword [rbp + 0x1e0], xmm12
movups xmmword [rbp + 0x1f0], xmm13
movsd qword [rbp + 0x200], xmm14
lea r15, [0x1400513b0]
mov qword [rbp + 0x180], r15
mov dword [rbp + 0x188], 0x19c0
mov dword [rbp + 0x194], 0x41c80000
mov qword [rbp + 0x1b8], r14
lea rdx, [rbp + 0x180]
mov rcx, rdi
call fcn.140022790
mov qword [0x14025f8b0], rax
mov rdi, qword [rbx + 0xa8]
cmp byte [rdi], r12b
je 0x1400349af
mov r8d, 0x7f6
lea rdx, str.D:NEW4K___Copy__2____Copyimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmmword [rbp + 0x180], xmm6
movups xmmword [rbp + 0x190], xmm7
movups xmmword [rbp + 0x1a0], xmm8
movups xmmword [rbp + 0x1b0], xmm9
movups xmmword [rbp + 0x1c0], xmm10
movups xmmword [rbp + 0x1d0], xmm11
movups xmmword [rbp + 0x1e0], xmm12
movups xmmword [rbp + 0x1f0], xmm13
movsd qword [rbp + 0x200], xmm14
mov qword [rbp + 0x180], r15
mov dword [rbp + 0x188], 0x19c0
mov dword [rbp + 0x194], 0x42be0000
mov qword [rbp + 0x1b8], r14
lea rdx, [rbp + 0x180]
mov rcx, rdi
call fcn.140022790
lea rdi, [0x1400446c8]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
movaps xmm3, xmm15
mov r8d, 0xf428
lea rdx, str.OTTO
mov rcx, qword [rbx + 0xa8]
call fcn.140022ac0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
movss xmm3, dword [0x140045ae4]
mov r8d, 0xf428
lea rdx, str.OTTO
mov rcx, qword [rbx + 0xa8]
call fcn.140022ac0
lea rcx, [0x14025fa00]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140034ba2
lea rcx, [0x14025f9f8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140034ba2
mov qword [0x14025f9f0], rsi
mov rax, qword [0x14025f8a0]
test rax, rax
jne 0x140034ade
mov r8d, 0xd3f
lea rdx, str.D:NEW4K___Copy__2____Copyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14025f8a0]
or dword [rax + 0xc], 6
lea rcx, str.imgui_impl_win32
mov qword [rax + 0xd8], rcx
mov qword [rax + 0x120], rsi
mov dword [rax + 0x3c], 9
mov dword [rax + 0x40], 0x25
mov dword [rax + 0x44], 0x27
mov dword [rax + 0x48], 0x26
mov dword [rax + 0x4c], 0x28
mov dword [rax + 0x50], 0x21
mov dword [rax + 0x54], 0x22
mov dword [rax + 0x58], 0x24
mov dword [rax + 0x5c], 0x23
mov dword [rax + 0x60], 0x2d
mov dword [rax + 0x64], 0x2e
mov dword [rax + 0x68], 8
mov dword [rax + 0x6c], 0x20
mov dword [rax + 0x70], 0xd
mov dword [rax + 0x74], 0x1b
mov dword [rax + 0x78], 0xd
mov dword [rax + 0x7c], 0x41
mov dword [rax + 0x80], 0x43
mov dword [rax + 0x84], 0x56
mov dword [rax + 0x88], 0x58
mov dword [rax + 0x8c], 0x59
mov dword [rax + 0x90], 0x5a
jmp 0x140034ba9
mov rax, qword [0x14025f8a0]
mov rbx, qword [0x14025fa58]
test rax, rax
jne 0x140034bd6
mov r8d, 0xd3f
lea rdx, str.D:NEW4K___Copy__2____Copyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14025f8a0]
lea rcx, str.imgui_impl_dx9
mov qword [rax + 0xe0], rcx
or dword [rax + 0xc], 8
mov qword [0x14025f9e0], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x510], xmm0
movups xmmword [rbp + 0x520], xmm0
movups xmmword [rbp + 0x530], xmm0
movabs rbx, 0x124704a775cf5fc7
movabs r15, 0xbe6d28c9f19849c5
movabs r14, 0xde9e04ac030b69de
movabs r13, 0x13f85b026006ffa0
lea rdi, [0x14025f8b8]
movdqa xmm15, xmmword [0x140045ea0]
movss xmm14, dword [0x140045ae0]
movss xmm11, dword [0x140045ad4]
movss xmm12, dword [0x140045b40]
movss xmm13, dword [0x140045b0c]
movss xmm6, dword [0x140045b70]
movss xmm7, dword [0x140045b14]
movss xmm8, dword [0x140045b08]
movss xmm9, dword [0x140045af8]
nop
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x510]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140034cd0
lea rcx, [rbp + 0x510]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x510]
call qword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x140036dbe
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140034d05
cmp byte [0x14025f548], 0
sete al
mov byte [0x14025f548], al
mov rcx, rsi
test al, al
je 0x140034cfd
mov edx, 0xa
jmp 0x140034cff
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
cmp qword [0x14025f9d0], 0
jne 0x140034d14
call fcn.140031d40
call fcn.140032410
call fcn.140006560
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], r14
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], r13
movabs rax, 0xce02409adcac7ffd
mov qword [rbp - 0x18], rax
movabs rax, 0x9abe6dd9446620fe
mov qword [rbp - 0x10], rax
movabs rax, 0x124704c912a62ca2
mov qword [rbp - 8], rax
mov qword [rbp], r13
movdqu xmm0, xmmword [rbp - 0x18]
movups xmm1, xmmword [rbp - 8]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0xd0], xmm1
xor edx, edx
mov r8d, 0x383b
lea rcx, [rbp + 0xc0]
call fcn.14000bb20
lea rdx, [rbp + 0xa0]
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x14025f8a0]
mov rcx, qword [rax + 0x1b10]
movss xmm2, dword [rcx + 0x10]
movss xmm1, dword [rcx + 0x14]
xorps xmm10, xmm10
ucomiss xmm2, xmm10
jp 0x140034dcd
jne 0x140034dcd
ucomiss xmm1, xmm10
jp 0x140034dcd
je 0x140034e3b
movd xmm0, dword [rbp + 0xa4]
cvtdq2ps xmm0, xmm0
addss xmm0, xmm1
cvttss2si r8d, xmm0
movd xmm1, dword [rbp + 0xa0]
cvtdq2ps xmm1, xmm1
addss xmm1, xmm2
cvttss2si edx, xmm1
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x190
mov r9d, 0x258
mov rcx, rsi
call qword [sym.imp.USER32.dll_MoveWindow]
mov qword [rbp + 0xe0], 0
mov rax, qword [0x14025f8a0]
xor r8d, r8d
lea rdx, [rbp + 0xe0]
mov rcx, qword [rax + 0x1b10]
call fcn.14000ecd0
lea rcx, [rbp + 0x550]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov dword [rbp + 0xe8], 0x44160000
mov dword [rbp + 0xec], 0x43c80000
xor r8d, r8d
lea rdx, [rbp + 0xe8]
mov rcx, qword [0x14025f8a0]
mov rcx, qword [rcx + 0x1b10]
call fcn.14000ee00
mov rdx, qword [0x14025f8a0]
mov rax, qword [rdx + 0x1b10]
movss xmm0, dword [rax + 0x14]
movss xmm1, dword [rax + 0x10]
unpcklps xmm1, xmm0
movsd qword [0x14025fa78], xmm1
mov rax, qword [rdx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rdx + 0x1b10]
mov rcx, qword [rax + 0x2a8]
mov qword [0x14025f8a8], rcx
movss xmm0, dword [rdx + 0x14]
movss xmm1, dword [rdx + 0x10]
unpcklps xmm1, xmm0
movq rdx, xmm1
call fcn.14002b890
mov eax, dword [0x14025fa08]
test eax, eax
jne 0x140035553
cmp qword [0x14025f8b8], 0
jne 0x140034f51
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x60], r12
mov dword [rsp + 0x58], r12d
mov dword [rsp + 0x50], 0xffffffff
mov dword [rsp + 0x48], 0xffffffff
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], 0xffffffff
mov dword [rsp + 0x20], 0xd8
mov r9d, 0xc8
mov r8d, 0x4304
lea rdx, [0x14004d0a0]
mov rcx, qword [0x14025fa58]
call qword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileInMemoryEx]
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x58]
addss xmm0, xmm14
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [0x140045b28]
movss dword [rax + 0xd0], xmm2
movss dword [rax + 0xd4], xmm0
movss xmm1, dword [rax + 0xec]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm0
movss dword [rax + 0xec], xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp + 0x88], xmm15
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov qword [rbp + 0xf8], 0
mov dword [rbp + 0x100], 0x43340000
mov dword [rbp + 0x104], 0x43440000
lea rax, [rbp - 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x88]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xf0]
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
mov rcx, qword [0x14025f8b8]
call fcn.14002b270
mov rcx, qword [0x14025f8b0]
mov qword [rbp + 0x780], rcx
mov rdi, qword [0x14025f8a0]
mov rbx, rcx
test rcx, rcx
jne 0x14003509e
mov rcx, qword [rdi + 0xb8]
test rcx, rcx
jne 0x140035094
mov rbx, qword [rdi + 0xa8]
cmp dword [rbx + 0x40], ecx
jg 0x14003508d
mov r8d, 0x657
lea rdx, str.D:NEW4K___Copy__2____Copyimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48]
mov rcx, qword [rax]
mov qword [rbp + 0x780], rcx
mov rbx, rcx
call fcn.14000ea80
lea rcx, [rdi + 0x1c60]
lea rdx, [rbp + 0x780]
call fcn.140016310
mov rax, qword [rdi + 0x1b10]
mov rdx, qword [rbx + 0x40]
mov rdx, qword [rdx + 8]
mov rcx, qword [rax + 0x2a8]
call fcn.14001f200
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x58]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x54]
addss xmm2, xmm12
movss dword [rax + 0xd0], xmm2
movss dword [rax + 0xd4], xmm0
movss xmm1, dword [rax + 0xec]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm0
movss dword [rax + 0xec], xmm1
mov qword [rbp + 0x440], r15
mov qword [rbp + 0x448], r14
movabs rax, 0xbe6d28c9f1984984
mov qword [rbp + 0x430], rax
mov qword [rbp + 0x438], r14
movdqu xmm0, xmmword [rbp + 0x430]
xorps xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call fcn.1400298d0
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x58]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x54]
addss xmm2, xmm12
movss dword [rax + 0xd0], xmm2
movss dword [rax + 0xd4], xmm0
movss xmm1, dword [rax + 0xec]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm0
movss dword [rax + 0xec], xmm1
mov dword [rbp + 0x168], 0x41a00000
mov dword [rbp + 0x16c], 0x41a00000
mov qword [rbp + 0x470], r15
mov qword [rbp + 0x478], r14
movabs rax, 0xbe6d28c985f13180
mov qword [rbp + 0x450], rax
mov qword [rbp + 0x458], r14
movdqu xmm0, xmmword [rbp + 0x450]
xorps xmm0, xmmword [rbp + 0x470]
movdqa xmmword [rbp - 0x40], xmm0
lea rdx, [rbp + 0x168]
lea rcx, [rbp - 0x40]
call fcn.14002a4e0
test al, al
je 0x140035263
mov rcx, rsi
call qword [sym.imp.USER32.dll_DestroyWindow]
call fcn.14000eba0
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x58]
addss xmm0, dword [0x140045b20]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [0x140045b1c]
movss dword [rax + 0xd0], xmm2
movss dword [rax + 0xd4], xmm0
movss xmm1, dword [rax + 0xec]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm0
movss dword [rax + 0xec], xmm1
mov qword [rbp + 0x490], r15
mov qword [rbp + 0x498], r14
movabs rax, 0xd5085ba794fb20a9
mov qword [rbp + 0x480], rax
movabs rax, 0xde9e04ac030b10bb
mov qword [rbp + 0x488], rax
movdqu xmm0, xmmword [rbp + 0x480]
xorps xmm0, xmmword [rbp + 0x490]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm0, xmmword [0x140045e80]
movups xmmword [rbp + 0x88], xmm0
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x88]
call fcn.1400299d0
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x58]
addss xmm0, dword [0x140045b24]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [0x140045b1c]
movss dword [rax + 0xd0], xmm2
movss dword [rax + 0xd4], xmm0
movss xmm1, dword [rax + 0xec]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm0
movss dword [rax + 0xec], xmm1
movss xmm0, dword [0x140045b38]
call fcn.14000f600
mov qword [rbp + 0x500], r15
mov qword [rbp + 0x508], r14
movabs rax, 0xdf035aac82ed6ae6
mov qword [rbp + 0x4f0], rax
movabs rax, 0xde9e04ac030b0cb3
mov qword [rbp + 0x4f8], rax
movdqu xmm0, xmmword [rbp + 0x4f0]
xorps xmm0, xmmword [rbp + 0x500]
movdqa xmmword [rbp - 0x40], xmm0
mov qword [rbp + 0x160], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8, [0x14025fa10]
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002e490
call fcn.14000f6a0
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x58]
addss xmm0, dword [0x140045b30]
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x54]
addss xmm2, dword [0x140045b30]
movss dword [rax + 0xd0], xmm2
movss dword [rax + 0xd4], xmm0
movss xmm1, dword [rax + 0xec]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm0
movss dword [rax + 0xec], xmm1
mov dword [rbp + 0x158], 0x42f00000
mov dword [rbp + 0x15c], 0x41f00000
mov qword [rbp + 0x340], r15
mov qword [rbp + 0x348], r14
movabs rax, 0xbe6d28a798ff2689
mov qword [rbp + 0x330], rax
mov qword [rbp + 0x338], r14
movdqu xmm0, xmmword [rbp + 0x330]
xorps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0x540], xmm0
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x540]
call fcn.14002a1a0
test al, al
mov eax, dword [0x14025fad8]
je 0x14003553d
inc eax
mov dword [0x14025fad8], eax
test al, 1
je 0x14003554d
mov dword [0x14025fa08], 1
jmp 0x14003555c
mov eax, dword [0x14025fa08]
cmp eax, 1
jne 0x140036c69
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm1, dword [rax + 0x14]
subss xmm1, dword [rax + 0x58]
addss xmm1, xmm14
movss dword [rax + 0xd4], xmm1
movss xmm0, dword [rax + 0xec]
maxss xmm0, xmm1
movss dword [rax + 0xec], xmm0
mov dword [rbp + 0x150], 0x44124000
mov dword [rbp + 0x154], 0x43be0000
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
lea rdx, str.Page1
mov rcx, qword [rcx + 0x1b10]
call fcn.140004960
mov edx, eax
mov dword [rsp + 0x20], 0x800
lea r8, [rbp + 0x150]
lea rcx, str.Page1
call fcn.140009050
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x54]
addss xmm1, dword [0x140045b2c]
movss dword [rax + 0xd0], xmm1
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm1
movss dword [rax + 0xe8], xmm0
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], r14
movabs rax, 0x124704a775cf5fc7
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], r13
movabs rax, 0xc7014686d1ec2c87
mov qword [rbp - 0x18], rax
movabs rax, 0xbbea65da6a7939fe
mov qword [rbp - 0x10], rax
movabs rax, 0x7d2e70c41bba19e7
mov qword [rbp - 8], rax
movabs rax, 0x13f85b026006ffce
mov qword [rbp], rax
movdqu xmm0, xmmword [rbp - 0x18]
movups xmm1, xmmword [rbp - 8]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0xd0], xmm1
lea rcx, [rbp + 0xc0]
call fcn.1400298d0
mov rcx, qword [0x14025f8b0]
mov qword [rbp + 0x780], rcx
mov rdi, qword [0x14025f8a0]
mov rbx, rcx
test rcx, rcx
jne 0x14003571e
mov rcx, qword [rdi + 0xb8]
test rcx, rcx
jne 0x140035714
mov rbx, qword [rdi + 0xa8]
cmp dword [rbx + 0x40], ecx
jg 0x14003570d
mov r8d, 0x657
lea rdx, str.D:NEW4K___Copy__2____Copyimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48]
mov rcx, qword [rax]
mov qword [rbp + 0x780], rcx
mov rbx, rcx
call fcn.14000ea80
lea rcx, [rdi + 0x1c60]
lea rdx, [rbp + 0x780]
call fcn.140016310
mov rax, qword [rdi + 0x1b10]
mov rdx, qword [rbx + 0x40]
mov rdx, qword [rdx + 8]
mov rcx, qword [rax + 0x2a8]
call fcn.14001f200
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x58]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x54]
addss xmm2, xmm12
movss dword [rax + 0xd0], xmm2
movss dword [rax + 0xd4], xmm0
movss xmm1, dword [rax + 0xec]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm0
movss dword [rax + 0xec], xmm1
mov qword [rbp + 0x360], r15
mov qword [rbp + 0x368], r14
movabs rax, 0xbe6d28c9f1984984
mov qword [rbp + 0x350], rax
mov qword [rbp + 0x358], r14
movdqu xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x360]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call fcn.1400298d0
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm0, dword [rax + 0x14]
subss xmm0, dword [rax + 0x58]
addss xmm0, xmm11
movss xmm2, dword [rax + 0x10]
subss xmm2, dword [rax + 0x54]
addss xmm2, xmm12
movss dword [rax + 0xd0], xmm2
movss dword [rax + 0xd4], xmm0
movss xmm1, dword [rax + 0xec]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm0
movss dword [rax + 0xec], xmm1
mov dword [rbp + 0x148], 0x41a00000
mov dword [rbp + 0x14c], 0x41a00000
mov qword [rbp + 0x380], r15
mov qword [rbp + 0x388], r14
movabs rax, 0xbe6d28c985f13180
mov qword [rbp + 0x370], rax
mov qword [rbp + 0x378], r14
movdqu xmm0, xmmword [rbp + 0x370]
xorps xmm0, xmmword [rbp + 0x380]
movdqa xmmword [rbp - 0x40], xmm0
lea rdx, [rbp + 0x148]
lea rcx, [rbp - 0x40]
call fcn.14002a4e0
test al, al
je 0x1400358e3
mov rcx, rsi
call qword [sym.imp.USER32.dll_DestroyWindow]
call fcn.14000eba0
mov dword [rbp + 0x138], 0x438ac000
mov dword [rbp + 0x13c], 0x43a50000
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
lea rdx, str.Block1
mov rcx, qword [rcx + 0x1b10]
call fcn.140004960
mov edx, eax
mov dword [rsp + 0x20], 0x800
lea r8, [rbp + 0x138]
lea rcx, str.Block1
call fcn.140009050
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x54]
addss xmm1, xmm13
movss dword [rax + 0xd0], xmm1
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm1
movss dword [rax + 0xe8], xmm0
mov qword [rbp + 0x3a0], r15
mov qword [rbp + 0x3a8], r14
movabs rax, 0xbe0a46a085ec2c96
mov qword [rbp + 0x390], rax
mov qword [rbp + 0x398], r14
movdqu xmm0, xmmword [rbp + 0x390]
xorps xmm0, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x40]
call fcn.1400298d0
lea rdx, [0x14025f8cd]
lea rcx, str.Boost_FPS
call fcn.14002bc40
test al, al
je 0x1400359fc
mov eax, 0xffffffff
cmp byte [0x14025f8cd], 0
mov ecx, 0x2b8
cmovne eax, ecx
mov dword [0x14025f158], eax
lea rcx, str.FiveM_b2699_GTAProcess.exe
call fcn.1400333b0
mov ebx, eax
lea rcx, str.FiveM_b2802_GTAProcess.exe
call fcn.1400333b0
mov r13d, eax
lea rcx, str.FiveM_b2944_GTAProcess.exe
call fcn.1400333b0
mov edi, eax
mov dword [rbp + 0x788], eax
lea rcx, str.FiveM_b3095_GTAProcess.exe
call fcn.1400333b0
mov r14d, eax
mov dword [rbp + 0xb0], eax
mov ecx, ebx
call fcn.1400335a0
mov rsi, rax
mov ecx, r13d
call fcn.1400335a0
mov r15, rax
mov qword [rbp + 8], rax
mov ecx, edi
call fcn.1400335a0
mov qword [rbp + 0x88], rax
mov ecx, r14d
call fcn.1400335a0
mov qword [rbp - 0x40], rax
test ebx, ebx
je 0x140035ace
test rsi, rsi
je 0x140035ace
mov rdx, rsi
mov ecx, ebx
call fcn.140033670
mov r14, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x140035ace
lea rdx, [r14 + 0x294eeb0]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f158]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140009350
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14000f550
mov dword [rbp + 0x130], 0x438ac000
mov dword [rbp + 0x134], 0x43a50000
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
lea rdx, str.Block2
mov rcx, qword [rcx + 0x1b10]
call fcn.140004960
mov edx, eax
mov dword [rsp + 0x20], 0x800
lea r8, [rbp + 0x130]
lea rcx, str.Block2
call fcn.140009050
mov rcx, qword [0x14025f8a0]
mov rax, qword [rcx + 0x1b10]
mov byte [rax + 0x88], 1
mov rax, qword [rcx + 0x1b10]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x54]
addss xmm1, xmm13
movss dword [rax + 0xd0], xmm1
movss xmm0, dword [rax + 0xe8]
maxss xmm0, xmm1
movss dword [rax + 0xe8], xmm0
movabs rax, 0xbe6d28c9f19849c5
mov qword [rbp + 0x3c0], rax
movabs rax, 0xde9e04ac030b69de
mov qword [rbp + 0x3c8], rax
movabs rcx, 0xbe6d5aac88f92595
mov qword [rbp + 0x3b0], rcx
mov qword [rbp + 0x3b8], rax
movdqu xmm0, xmmword [rbp + 0x3b0]
xorps xmm0, xmmword [rbp + 0x3c0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x60]
call fcn.1400298d0
movsd xmm0, qword [str._100_]
movsd qword [rbp + 0x170], xmm0
mov eax, dword [0x140045898]
mov dword [rbp + 0x178], eax
movzx eax, word [0x14004589c]
mov word [rbp + 0x17c], ax
movzx eax, byte [0x14004589e]
mov byte [rbp + 0x17e], al
lea rdx, [0x14025fac8]
lea rcx, [rbp + 0x170]
call fcn.14002bc40
mov edi, 0x3b9aca00
test al, al
je 0x140035c5e
mov eax, 0x4b
movzx ecx, byte [0x14025fac8]
test cl, cl
cmovne eax, edi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x14025f108], xmm0
mov byte [0x14025f89b], cl
mov edx, 0x12c
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Beep]
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.14000f550
movaps xmm4, xmm8
unpcklps xmm4, xmm9
movq r9, xmm4
mov r8d, dword [0x14025f8c0]
call fcn.140033cf0
mov ecx, dword [str.tuv]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x140035cb7
cmp byte [0x14025f89c], 0
jne 0x140035cc7
cmp byte [0x14025f899], 0
sete cl
mov byte [0x14025f899], cl
mov byte [0x14025f89c], 1
jmp 0x140035cce
cmp byte [0x14025f89c], 0
je 0x140035cc7
mov byte [0x14025f89c], 0
movzx ecx, byte [0x14025f899]
cmp cl, byte [0x14025f89b]
je 0x140035d0b
mov byte [0x14025fac8], cl
mov eax, 0x4b
test cl, cl
cmovne eax, edi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x14025f108], xmm0
mov byte [0x14025f89b], cl
mov edx, 0x12c
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Beep]
movups xmm0, xmmword [0x1400458a0]
movups xmmword [rbp + 0x558], xmm0
lea rdx, [0x14025fac9]
lea rcx, [rbp + 0x558]
call fcn.14002bc40
test al, al
je 0x140035d4a
mov eax, 0xe
cmp byte [0x14025fac9], 0
mov ecx, 0x12
cmovne eax, ecx
mov dword [0x14025f540], eax
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.14000f550
movaps xmm4, xmm8
unpcklps xmm4, xmm9
movq r9, xmm4
mov r8d, dword [0x14025f8c8]
call fcn.140033f20
mov ecx, dword [0x1400513a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140035d9e
cmp byte [0x14025fac9], 0
sete al
mov byte [0x14025fac9], al
movzx eax, al
lea eax, [rax*4 + 0xe]
mov dword [0x14025f540], eax
movups xmm0, xmmword [0x1400458b0]
movups xmmword [rbp + 0x568], xmm0
movups xmm1, xmmword [0x1400458c0]
movups xmmword [rbp + 0x578], xmm1
movzx eax, word [0x1400458d0]
mov word [rbp + 0x588], ax
lea rcx, [rbp + 0x568]
call fcn.1400298d0
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.14000f550
movaps xmm4, xmm8
unpcklps xmm4, xmm9
movq r9, xmm4
mov r8d, dword [0x14025f8c4]
call fcn.140033ac0
mov ecx, dword [0x1400513ac]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movsx ecx, ax
sar ecx, 0xf
and ecx, 0x80
add ecx, 0x40000c
mov dword [0x14025f104], ecx
test ebx, ebx
je 0x1400362ec
test rsi, rsi
je 0x1400362ec
mov rdx, rsi
mov ecx, ebx
call fcn.140033670
mov rdi, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x1400362ec
lea r12, [rdi + 0x2140688]
mov dword [rbp + 0x50], 0x30
mov dword [rbp + 0x54], 0x2b4
lea rax, [rbp + 0x50]
mov qword [rbp + 0x3d0], rax
lea rax, [rbp + 0x58]
mov qword [rbp + 0x3d8], rax
movaps xmm0, xmmword [rbp + 0x3d0]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x18]
call fcn.140037f60
nop
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x80]
call fcn.140037e70
mov r8, rax
mov rdx, r12
mov rcx, rsi
call fcn.140033710
xor r14d, r14d
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [0x14025f540]
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x58], 8
mov dword [rbp + 0x5c], 0x188
lea rax, [rbp + 0x58]
mov qword [rbp + 0x3e0], rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x3e8], rax
movaps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x30]
call fcn.140037f60
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.140037e70
mov r8, rax
lea rdx, [rdi + 0x26684d8]
mov rcx, rsi
call fcn.140033710
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [0x14025f104]
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x60], 0x50
mov dword [rbp + 0x64], 0x1a0
lea rax, [rbp + 0x60]
mov qword [rbp + 0x3f0], rax
lea rax, [rbp + 0x68]
mov qword [rbp + 0x3f8], rax
movaps xmm0, xmmword [rbp + 0x3f0]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0xc0]
call fcn.140037f60
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x80]
call fcn.140037e70
mov r8, rax
mov rdx, r12
mov rcx, rsi
call fcn.140033710
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [0x14025f108]
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x68], 0x50
mov dword [rbp + 0x6c], 0x1a4
lea rax, [rbp + 0x68]
mov qword [rbp + 0x460], rax
lea rax, [rbp + 0x70]
mov qword [rbp + 0x468], rax
movaps xmm0, xmmword [rbp + 0x460]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x10]
call fcn.140037f60
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x80]
call fcn.140037e70
mov r8, rax
mov rdx, r12
mov rcx, rsi
call fcn.140033710
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [0x14025f108]
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp - 0x60], 0x10
mov dword [rbp - 0x5c], 0x10
mov dword [rbp - 0x58], 0xf6c
mov dword [rbp - 0x54], 0x120
mov dword [rbp - 0x50], 0x140
mov dword [rbp - 0x4c], 0x1040
lea rbx, [rbp - 0x60]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov ecx, 0x18
call fcn.1400396cc
mov rdi, rax
mov qword [rbp - 0x30], rax
lea r14, [rax + 0x18]
mov qword [rbp - 0x20], r14
mov r8d, 0x18
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea r15, [rdi + 0x18]
mov qword [rbp - 0x28], r15
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], 0
sub r15, rdi
mov rbx, r15
sar rbx, 2
test rbx, rbx
je 0x14003614b
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x140036f8e
lea rbx, [rbx*4]
test rbx, rbx
jne 0x1400360f1
xor eax, eax
jmp 0x14003612e
cmp rbx, 0x1000
jb 0x140036126
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140036f88
call fcn.1400396cc
mov rcx, rax
test rax, rax
je 0x140036e8d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14003612e
mov rcx, rbx
call fcn.1400396cc
mov qword [rbp - 0x80], rax
add rbx, rax
mov qword [rbp - 0x70], rbx
mov r8, r15
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x78], rbx
lea r8, [rbp - 0x80]
mov rdx, r12
mov rcx, rsi
call fcn.140033710
xor r12d, r12d
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f544]
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rdi, rdi
je 0x1400361c7
sub r14, rdi
sar r14, 2
lea rdx, [r14*4]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400361be
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036e94
mov rcx, rdi
call fcn.140039534
nop
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x14003620e
mov rax, qword [rbp + 0x20]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036208
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036e9b
call fcn.140039534
nop
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x14003625b
mov rax, qword [rbp + 0xd0]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036255
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036ea2
call fcn.140039534
nop
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x1400362a2
mov rax, qword [rbp + 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003629c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036ea9
call fcn.140039534
nop
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x1400362e8
mov rax, qword [rbp - 8]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400362e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036ebe
call fcn.140039534
mov r15, qword [rbp + 8]
test r13d, r13d
je 0x1400366b1
test r15, r15
je 0x1400366b1
mov rdx, r15
mov ecx, r13d
call fcn.140033670
mov rbx, rax
mov r8d, r13d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
test rax, rax
je 0x1400366b1
lea r14, [rbx + 0x2024890]
mov qword [rbp + 0x780], r14
mov dword [rbp + 0x128], 0x30
mov dword [rbp + 0x12c], 0x2b4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov ecx, 8
call fcn.1400396cc
mov rsi, rax
mov qword [rbp - 0x30], rax
lea r13, [rax + 8]
mov qword [rbp - 0x20], r13
mov rax, qword [rbp + 0x128]
mov qword [rsi], rax
lea rdi, [rsi + 8]
mov qword [rbp - 0x28], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
sub rdi, rsi
mov rbx, rdi
sar rbx, 2
test rbx, rbx
je 0x140036417
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x140036f9a
lea rbx, [rbx*4]
test rbx, rbx
jne 0x1400363bd
mov rax, r12
jmp 0x1400363fa
cmp rbx, 0x1000
jb 0x1400363f2
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140036f94
call fcn.1400396cc
mov rcx, rax
test rax, rax
je 0x140036eb7
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400363fa
mov rcx, rbx
call fcn.1400396cc
mov qword [rbp - 0x80], rax
add rbx, rax
mov qword [rbp - 0x70], rbx
mov r8, rdi
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x78], rbx
lea r8, [rbp - 0x80]
mov rdx, r14
mov rcx, r15
call fcn.140033710
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f540]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x140], 0x50
mov dword [rbp + 0x144], 0x1a0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
mov ecx, 8
call fcn.1400396cc
mov rdi, rax
mov qword [rbp + 0x10], rax
lea r14, [rax + 8]
mov qword [rbp + 0x20], r14
mov rax, qword [rbp + 0x140]
mov qword [rdi], rax
lea r12, [rdi + 8]
mov qword [rbp + 0x18], r12
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], 0
sub r12, rdi
mov rbx, r12
sar rbx, 2
test rbx, rbx
je 0x140036528
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x140036fa6
lea rbx, [rbx*4]
test rbx, rbx
jne 0x1400364ce
xor eax, eax
jmp 0x14003650b
cmp rbx, 0x1000
jb 0x140036503
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140036fa0
call fcn.1400396cc
mov rcx, rax
test rax, rax
je 0x140036eb0
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14003650b
mov rcx, rbx
call fcn.1400396cc
mov qword [rbp - 0x80], rax
add rbx, rax
mov qword [rbp - 0x70], rbx
mov r8, r12
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x78], rbx
lea r8, [rbp - 0x80]
mov rdx, qword [rbp + 0x780]
mov rcx, r15
call fcn.140033710
xor r12d, r12d
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f108]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x108], 0x50
mov dword [rbp + 0x10c], 0x1a4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov ecx, 8
call fcn.1400396cc
mov qword [rbp - 0x60], rax
lea rcx, [rax + 8]
mov qword [rbp - 0x50], rcx
mov rcx, qword [rbp + 0x108]
mov qword [rax], rcx
add rax, 8
mov qword [rbp - 0x58], rax
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x18]
call fcn.140037e70
mov r8, rax
mov rdx, qword [rbp + 0x780]
mov rcx, r15
call fcn.140033710
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f108]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x14003662e
mov rax, qword [rbp - 0x50]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036628
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036eb0
call fcn.140039534
nop
test rdi, rdi
je 0x140036670
sub r14, rdi
sar r14, 2
lea rdx, [r14*4]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140036667
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036eb7
mov rcx, rdi
call fcn.140039534
nop
test rsi, rsi
je 0x1400366b1
sub r13, rsi
sar r13, 2
lea rdx, [r13*4]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400366a9
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036ebe
mov rcx, rsi
call fcn.140039534
mov edi, dword [rbp + 0x788]
test edi, edi
je 0x140036a4b
mov rax, qword [rbp + 0x88]
test rax, rax
je 0x140036a4b
mov rdx, rax
mov ecx, edi
call fcn.140033670
mov rbx, rax
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
test rax, rax
je 0x140036a4b
lea r15, [rbx + 0x2053218]
mov dword [rbp + 0x110], 0x30
mov dword [rbp + 0x114], 0x2b4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov ecx, 8
call fcn.1400396cc
mov rdi, rax
mov qword [rbp - 0x30], rax
add rax, 8
mov qword [rbp - 0x20], rax
mov rax, qword [rbp + 0x110]
mov qword [rdi], rax
lea rsi, [rdi + 8]
mov qword [rbp - 0x28], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
sub rsi, rdi
mov rbx, rsi
sar rbx, 2
movabs r13, 0x3fffffffffffffff
test rbx, rbx
je 0x1400367e0
cmp rbx, r13
ja 0x140036fb2
lea rbx, [rbx*4]
test rbx, rbx
jne 0x140036786
mov rax, r12
jmp 0x1400367c3
cmp rbx, 0x1000
jb 0x1400367bb
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140036fac
call fcn.1400396cc
mov rcx, rax
test rax, rax
je 0x140036ec5
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400367c3
mov rcx, rbx
call fcn.1400396cc
mov qword [rbp - 0x80], rax
add rbx, rax
mov qword [rbp - 0x70], rbx
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x78], rbx
lea r8, [rbp - 0x80]
mov rdx, r15
mov rcx, r14
call fcn.140033710
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f540]
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x118], 0x50
mov dword [rbp + 0x11c], 0x1a0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x88], xmm0
mov ecx, 8
call fcn.1400396cc
mov rdi, rax
mov qword [rbp + 0x88], rax
add rax, 8
mov qword [rbp + 0x98], rax
mov rax, qword [rbp + 0x118]
mov qword [rdi], rax
lea rsi, [rdi + 8]
mov qword [rbp + 0x90], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
sub rsi, rdi
mov rbx, rsi
sar rbx, 2
test rbx, rbx
je 0x1400368f0
cmp rbx, r13
ja 0x140036fbe
lea rbx, [rbx*4]
test rbx, rbx
jne 0x140036896
mov rax, r12
jmp 0x1400368d3
cmp rbx, 0x1000
jb 0x1400368cb
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140036fb8
call fcn.1400396cc
mov rcx, rax
test rax, rax
je 0x140036ecc
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400368d3
mov rcx, rbx
call fcn.1400396cc
mov qword [rbp - 0x80], rax
add rbx, rax
mov qword [rbp - 0x70], rbx
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x78], rbx
lea r8, [rbp - 0x80]
mov rdx, r15
mov rcx, r14
call fcn.140033710
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f108]
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x120], 0x50
mov dword [rbp + 0x124], 0x1a4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov ecx, 8
call fcn.1400396cc
mov rdi, rax
mov qword [rbp - 0x60], rax
add rax, 8
mov qword [rbp - 0x50], rax
mov rax, qword [rbp + 0x120]
mov qword [rdi], rax
lea rsi, [rdi + 8]
mov qword [rbp - 0x58], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
sub rsi, rdi
mov rbx, rsi
sar rbx, 2
test rbx, rbx
je 0x1400369f4
cmp rbx, r13
ja 0x140036f82
lea rbx, [rbx*4]
test rbx, rbx
jne 0x14003699a
mov rax, r12
jmp 0x1400369d7
cmp rbx, 0x1000
jb 0x1400369cf
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140036fc4
call fcn.1400396cc
mov rcx, rax
test rax, rax
je 0x140036ed3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400369d7
mov rcx, rbx
call fcn.1400396cc
mov qword [rbp - 0x80], rax
add rbx, rax
mov qword [rbp - 0x70], rbx
mov r8, rsi
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x78], rbx
lea r8, [rbp - 0x80]
mov rdx, r15
mov rcx, r14
call fcn.140033710
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f108]
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp - 0x60]
call fcn.140037e10
nop
lea rcx, [rbp + 0x88]
call fcn.140037e10
nop
lea rcx, [rbp - 0x30]
call fcn.140037e10
mov edi, dword [rbp + 0xb0]
test edi, edi
je 0x140036c3a
mov rax, qword [rbp - 0x40]
test rax, rax
je 0x140036c3a
mov rdx, rax
mov ecx, edi
call fcn.140033670
mov rbx, rax
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x140036c3a
add rbx, 0x206a778
mov dword [rbp + 0x70], 0x30
mov dword [rbp + 0x74], 0x2b4
lea rax, [rbp + 0x70]
mov qword [rbp + 0x400], rax
lea rax, [rbp + 0x78]
mov qword [rbp + 0x408], rax
movaps xmm0, xmmword [rbp + 0x400]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0xc0]
call fcn.140037f60
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x10]
call fcn.140037e70
mov r8, rax
mov rdx, rbx
mov rcx, rdi
call fcn.140033710
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f540]
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x78], 0x50
mov dword [rbp + 0x7c], 0x1a0
lea rax, [rbp + 0x78]
mov qword [rbp + 0x410], rax
lea rax, [rbp + 0x80]
mov qword [rbp + 0x418], rax
movaps xmm0, xmmword [rbp + 0x410]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x30]
call fcn.140037f60
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.140037e70
mov r8, rax
mov rdx, rbx
mov rcx, rdi
call fcn.140033710
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f108]
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x80], 0x50
mov dword [rbp + 0x84], 0x1a4
lea rax, [rbp + 0x80]
mov qword [rbp + 0x420], rax
lea rax, [rbp + 0x88]
mov qword [rbp + 0x428], rax
movaps xmm0, xmmword [rbp + 0x420]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x18]
call fcn.140037f60
nop
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x10]
call fcn.140037e70
mov r8, rax
mov rdx, rbx
mov rcx, rdi
call fcn.140033710
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [0x14025f108]
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rbp - 0x18]
call fcn.140037e10
nop
lea rcx, [rbp + 0x30]
call fcn.140037e10
nop
lea rcx, [rbp + 0xc0]
call fcn.140037e10
call fcn.140009350
call fcn.140009350
mov rsi, qword [rbp + 0x290]
movabs r14, 0xde9e04ac030b69de
movabs r15, 0xbe6d28c9f19849c5
movabs r13, 0x13f85b026006ffa0
call fcn.14000e160
call fcn.140008200
mov rcx, qword [0x14025fa58]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 7
call qword [rax + 0x1c8]
mov rcx, qword [0x14025fa58]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0x1b
call qword [rax + 0x1c8]
mov rcx, qword [0x14025fa58]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x14025fa58]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r12d
movss xmm0, dword [0x140045a94]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x14025fa58]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140036d33
call fcn.140008690
mov rax, qword [0x14025f8a0]
add rax, 0x1e40
mov rcx, r12
cmp byte [rax], 0
cmovne rcx, rax
call fcn.140031760
mov rcx, qword [0x14025fa58]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14025fa58]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140036dad
mov rcx, qword [0x14025fa58]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140036dad
call fcn.140031ed0
mov rcx, qword [0x14025fa58]
mov rax, qword [rcx]
lea rdx, [0x14025fa80]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x140036da8
mov r8d, 0x4f2
lea rdx, str.D:NEW4K___Copy__2____Copyexamplesexample_win32_directx9main.cpp
lea rcx, [0x14003b994]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140031d40
movabs rbx, 0x124704a775cf5fc7
lea rdi, [0x14025f8b8]
cmp dword [rbp + 0x518], 0x12
jne 0x140034c90
call fcn.140031ed0
mov rcx, qword [0x14025f9e0]
test rcx, rcx
je 0x140036de9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14025f9e0], r12
mov qword [0x14025f9f0], r12
mov rbx, qword [0x14025f8a0]
mov rcx, rbx
call fcn.140007610
cmp qword [0x14025f8a0], rbx
jne 0x140036e0f
mov qword [0x14025f8a0], r12
test rbx, rbx
je 0x140036e37
mov rcx, rbx
call fcn.1400168f0
mov rax, qword [0x14025f8a0]
test rax, rax
je 0x140036e2e
dec dword [rax + 0x3b4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x14025fa58]
test rcx, rcx
je 0x140036e50
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14025fa58], r12
mov rcx, qword [0x14025fa50]
test rcx, rcx
je 0x140036e69
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14025fa50], r12
mov rcx, rsi
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x4b8]
mov rcx, qword [rbp + 0x4e0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
jmp 0x140036f2f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [0x14025fa50]
mov rdx, qword [0x14025fa58]
test rdx, rdx
je 0x140036f04
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x14025fa58], r12
mov rcx, qword [0x14025fa50]
test rcx, rcx
je 0x140036f16
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov qword [0x14025fa50], r12
mov rdx, qword [rbp + 0x4b8]
mov rcx, qword [rbp + 0x4e0]
call qword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
lea r11, [rsp + 0x830]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400391d0
nop
call fcn.14002b7d0
int3
call fcn.1400391d0
nop
call fcn.14002b7d0
int3
call fcn.1400391d0
nop
call fcn.14002b7d0
int3
call fcn.1400391d0
nop
call fcn.14002b7d0
int3
call fcn.1400391d0
nop
call fcn.14002b7d0
int3
call fcn.1400391d0
nop
call fcn.14002b7d0
int3