Function at 0x14003dc00
Capabilities:
Create thread
Delete file
Execute command
Log keystrokes via polling
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x360]
sub rsp, 0x460
call fcn.14003a380
mov rcx, rax
call fcn.14003a410
test eax, eax
je 0x14003dc3f
mov r8d, eax
mov dword [0x14016b100], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14016b108], rax
call fcn.14003a380
mov rcx, rax
call fcn.14003a410
test eax, eax
je 0x14003dc72
mov r8d, eax
mov dword [0x14016b100], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14016b108], rax
test rax, rax
jne 0x14003dc8b
mov r8d, Ordinal_30
lea rdx, str.Status:_No_Process_Found_
lea rcx, [0x14016a208]
call fcn.1400361d0
mov qword [rsp + 0x450], r13
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x78]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400404d9
mov rcx, qword [rsp + 0x78]
lea rax, [rsp + 0x68]
xor r13d, r13d
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
mov dword [rsp + 0x60], r13d
lea r9d, [r13 + 4]
lea edx, [r13 + 0x14]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x1400404d9
cmp dword [rsp + 0x60], r13d
setne al
test al, al
je 0x1400404d9
mov qword [rsp + 0x28], r13
lea r8, [0x140040950]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003a960]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003c000]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003c6a0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003c810]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003c360]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003c4f0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003d360]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003d4f0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003d7b0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003bc00]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r13
lea r8, [0x14003c980]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003ce30]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003bde0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003bef0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003c680]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003d900]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x14003da80]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14003a380
mov rcx, rax
call fcn.14003a410
lea rcx, [0x14016b160]
call fcn.1400b95c0
cmp byte [0x14016b370], r13b
jne 0x14003df5a
lea rcx, [0x14016b378]
call fcn.140002530
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x140040580]
mov qword [rsp + 0x470], rbx
mov edx, 0x7f00
mov qword [rbp + 0x1f8], rax
xor ecx, ecx
mov qword [rsp + 0x458], r12
mov dword [rbp + 0x1f0], 0x50
mov dword [rbp + 0x1f4], 0x40
mov qword [rbp + 0x200], r13
mov qword [rbp + 0x208], r13
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x210], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x220], r13
mov qword [rbp + 0x218], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x228], rax
lea rax, str.Alpha_X_Panel
mov qword [rbp + 0x230], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x1f0]
mov qword [rbp + 0x238], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0xc8]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r13
lea r8, [0x14014a13c]
mov qword [rsp + 0x50], r13
cdq
mov qword [rsp + 0x48], r13
sub eax, edx
mov rdx, qword [rbp + 0x230]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r13
xor ecx, ecx
mov dword [rsp + 0x38], 0x190
sar eax, 1
sub eax, 0xaf
mov dword [rsp + 0x30], 0x15e
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov edx, 0xffffffec
mov r12, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xffffffec
mov rcx, r12
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x14003e11b
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14003e112
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp - 0x68]
mov qword [rbp + 0x1e0], rcx
lea rdx, [rbp + 0x1d8]
mov rcx, r12
mov dword [rbp + 0x1d8], reloc.WS2_32.dll_send
movdqu xmmword [rbp - 0x68], xmm0
mov dword [rbp + 0x1e8], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movdqa xmm0, xmmword [0x14014ad10]
lea rdx, [rbp + 0x288]
mov rcx, r12
movdqu xmmword [rbp + 0x288], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
lea rdx, [rbp - 0x78]
mov rcx, r12
movups xmmword [rbp - 0x78], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rax, [0x14016b420]
mov qword [rbp + 0x144], r13
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x60]
lea rax, [rsp + 0x68]
mov qword [rbp + 0x158], 2
mov qword [rsp + 0x50], rax
xor r9d, r9d
lea rax, [0x14016b418]
mov qword [rbp + 0x170], 2
mov qword [rsp + 0x48], rax
xor r8d, r8d
lea rax, [0x14016b408]
mov qword [rbp + 0x130], r13
mov qword [rsp + 0x40], rax
lea edx, [r9 + 1]
lea rax, [rbp + 0x130]
mov dword [rbp + 0x140], Ordinal_30
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rcx
xor ecx, ecx
mov dword [rbp + 0x138], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x13c], 1
mov dword [rbp + 0x154], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x160], r12
mov qword [rbp + 0x14c], 1
mov qword [rbp + 0x168], 1
mov dword [rsp + 0x60], 0xb000
mov dword [rsp + 0x64], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x14003e255
call fcn.140040500
mov rdx, qword [rbp + 0x208]
mov rcx, qword [rbp + 0x230]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, 1
jmp 0x140040492
mov rcx, qword [0x14016b408]
lea r9, [rsp + 0x70]
mov qword [rsp + 0x478], rsi
lea r8, [0x14014ab58]
mov qword [rsp + 0x480], rdi
xor edx, edx
mov qword [rsp + 0x448], r14
mov rax, qword [rcx]
mov qword [rsp + 0x440], r15
movaps xmmword [rsp + 0x430], xmm6
movaps xmmword [rsp + 0x420], xmm7
movaps xmmword [rsp + 0x410], xmm8
movaps xmmword [rsp + 0x400], xmm9
movaps xmmword [rsp + 0x3f0], xmm10
movaps xmmword [rsp + 0x3e0], xmm11
movaps xmmword [rsp + 0x3d0], xmm12
movaps xmmword [rsp + 0x3c0], xmm13
movaps xmmword [rsp + 0x3b0], xmm14
movaps xmmword [rsp + 0x3a0], xmm15
call qword [rax + 0x48]
mov rcx, qword [0x14016b418]
lea r9, [0x14016b400]
mov rdx, qword [rsp + 0x70]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0xa
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x14016b030]
test rbx, rbx
je 0x14003e338
inc dword [rbx + 0xf4]
mov ecx, 0x5dd8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x14003e354
xor edx, edx
mov rcx, rax
call fcn.140002ed0
jmp 0x14003e357
mov rax, r13
mov qword [0x14016b030], rax
call fcn.1400071d0
test rbx, rbx
je 0x14003e371
mov qword [0x14016b030], rbx
jmp 0x14003e378
mov rbx, qword [0x14016b030]
test rbx, rbx
jne 0x14003e39e
mov r8d, 0xfd8
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b030]
mov rsi, qword [rbx + 0x58]
xorps xmm6, xmm6
movss xmm12, dword [0x14014abd8]
xor eax, eax
movups xmmword [rbp + 0x140], xmm6
mov qword [rbp + 0x1b0], rax
mov eax, 0xffff
movups xmmword [rbp + 0x170], xmm6
mov dword [rbp + 0x148], 3
movups xmmword [rbp + 0x180], xmm6
mov dword [rbp + 0x14c], 1
movups xmmword [rbp + 0x130], xmm6
mov byte [rbp + 0x13c], 1
mov dword [rbp + 0x174], 0x7f7fffff
mov dword [rbp + 0x180], 0x3f800000
mov word [rbp + 0x184], ax
mov dword [rbp + 0x17c], 0x10c
cmp byte [rsi + 0x18], r13b
je 0x14003e438
mov r8d, 0x89b
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm7, xmmword [rbp + 0x130]
movaps xmm8, xmmword [rbp + 0x140]
movq rdi, xmm7
movaps xmm9, xmmword [rbp + 0x170]
movaps xmm10, xmmword [rbp + 0x180]
movsd xmm11, qword [rbp + 0x1b0]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x14003e4ad
mov r8d, 0x89d
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r15, [0x1401610d0]
mov dword [rbp - 0x48], 0x8574
lea r14, [0x1401480c8]
mov qword [rbp - 0x50], r15
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x18], r14
mov rcx, rsi
mov dword [rbp - 0x3c], 0x41b00000
call fcn.1400258a0
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], r13b
je 0x14003e501
mov r8d, 0x89b
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x14003e549
mov r8d, 0x89d
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], r15
mov rcx, rsi
mov dword [rbp - 0x48], 0x8574
mov dword [rbp - 0x3c], 0x41a00000
mov qword [rbp - 0x18], r14
call fcn.1400258a0
mov rsi, qword [rbx + 0x58]
mov qword [0x14016b040], rax
cmp byte [rsi + 0x18], r13b
je 0x14003e596
mov r8d, 0x89b
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x14003e5de
mov r8d, 0x89d
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r15, [0x140169650]
mov dword [rbp - 0x48], 0xb98
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], r15
mov rcx, rsi
mov dword [rbp - 0x3c], 0x41b00000
mov qword [rbp - 0x18], r14
call fcn.1400258a0
mov rbx, qword [rbx + 0x58]
cmp byte [rbx + 0x18], r13b
je 0x14003e62b
mov r8d, 0x89b
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x14003e673
mov r8d, 0x89d
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], r15
mov rcx, rbx
mov dword [rbp - 0x48], 0xb98
mov dword [rbp - 0x3c], 0x41880000
mov qword [rbp - 0x18], r14
call fcn.1400258a0
xor ecx, ecx
call fcn.140020a60
mov rbx, qword [0x14016b030]
test rbx, rbx
jne 0x14003e6c9
mov r8d, 0xfd8
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b030]
cmp qword [rbx + 0x98], r13
je 0x14003e6ec
mov r8d, 0x75
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeee_backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14003e85d
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14003e85d
mov rax, qword [0x14016b030]
test rax, rax
je 0x14003e723
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x14003e750
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x14003e753
mov rdi, r13
or dword [rbx + 0xc], 6
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, qword [0x14016b030]
mov qword [rdi], r12
mov rax, qword [rsp + 0x78]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp - 0x80]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
cmp dword [rbx + 0x4870], r13d
jg 0x14003e7b1
mov r8d, 0x6ff
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rbx, r13
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x260], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x268], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x270], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x278], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], r12
mov qword [rbp + 0x280], rax
mov byte [rdi + 0x2d], 1
nop dword [rax]
mov rcx, qword [rbp + rbx*8 + 0x260]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x14003e831
inc rbx
cmp rbx, 5
jl 0x14003e810
jmp 0x14003e85d
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x14016b030]
mov r14, qword [0x14016b420]
mov rsi, qword [0x14016b418]
test rax, rax
jne 0x14003e898
mov r8d, 0xfd8
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b030]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r13
je 0x14003e8c6
mov r8d, 0x221
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeee_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b030]
test rax, rax
je 0x14003e8d1
inc dword [rax + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x14003e912
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x14003e915
mov rbx, r13
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rsp + 0x68]
mov qword [rdi + 0x98], rbx
lea rdx, [0x140149580]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x70], r13
call qword [rax]
test eax, eax
jne 0x14003e99b
mov rcx, qword [rsp + 0x68]
lea r8, [rsp + 0x60]
lea rdx, [0x140149590]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14003e99b
mov rcx, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
lea rdx, [0x1401495a0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14003e99b
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rsp + 0x70]
mov qword [rbx + 0x10], rax
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14003e9ab
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14003e9bb
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
call fcn.14003b2f0
movss xmm10, dword [0x14014acec]
xor r15b, r15b
movss xmm15, dword [0x14014abd0]
xorps xmm9, xmm9
movss xmm14, dword [0x14014acb4]
mov r14d, 1
movss xmm11, dword [0x14014ac40]
movss xmm8, dword [0x14014aca4]
movss xmm13, dword [0x14014ac24]
movss xmm7, dword [0x14014aba0]
lea rcx, [rbp + 0x130]
xor r9d, r9d
mov dword [rsp + 0x20], r14d
xor r8d, r8d
lea rsi, str.LIMITLISSE
xor edx, edx
mov edi, 5
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14003eaa0
nop dword [rax + rax]
lea rcx, [rbp + 0x130]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x130]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x138], 0x12
lea rcx, [rbp + 0x130]
movzx r15d, r15b
cmove r15d, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14003ea50
test r15b, r15b
jne 0x140040256
mov rbx, qword [0x14016b030]
test rbx, rbx
je 0x14003eaba
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x14003ead7
jmp 0x14003eabd
mov rbx, r13
mov r8d, 0x250
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeee_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], r13
jne 0x14003eae2
call fcn.140037710
call fcn.1400388c0
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003eb04
cmp byte [reloc.WS2_32.dll_accept], r13b
sete byte [0x14016a2ac]
mov rax, qword [0x14016b030]
test rax, rax
jne 0x14003eb31
mov r8d, 0xfd8
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b030]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x14016a2a8]
mulss xmm0, dword [0x14014ac38]
cmp ecx, 0xff
jg 0x14003eb5a
cmp byte [reloc.WS2_32.dll_accept], r13b
mov eax, Ordinal_301
jne 0x14003eb5d
mov eax, r13d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x14016a2a8], r8d
cmp r8d, 0xff
jle 0x14003eb9a
mov dword [0x14016a2a8], 0xff
mov r8d, 0xff
xor edx, edx
mov rcx, r12
lea r9d, [rdx + 2]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x14016a2a8], r13d
mov edx, r13d
mov rcx, r12
cmovg edx, edi
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140009a40
movzx eax, byte [0x14016b02a]
test al, al
jne 0x14003f467
mov rdi, qword [0x14016b030]
test rdi, rdi
jne 0x14003ec00
mov r8d, 0xb67
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x14016b030]
movaps xmm0, xmmword [0x14014aff0]
lea rcx, str.ZITADOKM
movaps xmm1, xmmword [0x14014afb0]
xor edx, edx
mov dword [rdi + 0x37f0], 0x41200000
mov r8d, 0x20bb
mov dword [rdi + 0x380c], 0x41200000
mov dword [rdi + 0x37e8], r13d
mov dword [rdi + 0x37ec], 0x41f00000
mov dword [rdi + 0x37f4], r13d
mov dword [rdi + 0x3824], 0x40800000
mov qword [rdi + 0x382c], r13
mov dword [rdi + 0x3854], 0x40c00000
mov qword [rdi + 0x3814], 0x41000000
movups xmmword [0x14016b788], xmm0
movups xmmword [0x14016b898], xmm1
or dword [rdi + 0x4778], 2
mov dword [rdi + 0x4798], 0x43af0000
mov dword [rdi + 0x479c], 0x43c80000
mov dword [rdi + 0x4780], r14d
call fcn.14000f960
lea rdx, [rbp - 0x78]
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r8, qword [0x14016b030]
mov rax, qword [r8 + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm9
movss xmm1, dword [rax + 0x1c]
jp 0x14003ecd9
jne 0x14003ecd9
ucomiss xmm1, xmm9
jp 0x14003ecd9
je 0x14003ed3d
movd xmm0, dword [rbp - 0x74]
mov r9d, 0x15e
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r14d
mov rcx, r12
mov dword [rsp + 0x20], 0x190
addss xmm0, xmm1
movd xmm1, dword [rbp - 0x78]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x14016b030]
lea rdx, [rsp + 0x70]
xor r8d, r8d
mov qword [rsp + 0x70], r13
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400131a0
mov r8, qword [0x14016b030]
mov rax, qword [r8 + 0x3ea0]
lea rcx, [rbp + 0xd8]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x14016b54c]
movss xmm0, dword [0x14016b548]
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0xdc], xmm1
movss xmm1, dword [0x14016b554]
mulss xmm1, dword [r8 + 0x37e0]
mov rbx, qword [rax + 0x290]
movss dword [rbp + 0xd8], xmm0
movss xmm0, dword [0x14016b550]
movss dword [rbp + 0xe4], xmm1
movss dword [rbp + 0xe0], xmm0
call fcn.140005200
mov rdx, qword [r8 + 0x3ea0]
mov r14d, eax
movss xmm3, dword [0x14014ace0]
movss xmm2, dword [r8 + 0x3c00]
mov rcx, qword [r8 + 0x3bf8]
movss xmm6, dword [rdx + 0x20]
lea rdx, [rbp + 0xb0]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rsi
movss dword [rsp + 0x20], xmm10
call fcn.140028260
movss xmm0, dword [rbp + 0xb0]
mov dword [rbp + 0xbc], 0x41400000
addss xmm0, xmm15
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xb0], xmm1
subss xmm6, xmm1
mulss xmm6, xmm7
addss xmm6, xmm9
movss dword [rbp + 0xb8], xmm6
test r14d, 0xff000000
je 0x14003eed5
mov rax, qword [rbx + 0x38]
mov rsi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rsi + 0x40]
cmp qword [rcx + 8], rax
je 0x14003ee76
mov r8d, 0x65b
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x14014a15a]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0xb8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.LIMITLISSE
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rsi
lea rax, [rbp + 0x240]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
movups xmmword [rbp + 0x240], xmm0
call fcn.140028480
lea rsi, str.LIMITLISSE
mov rbx, qword [0x14016b030]
cmp dword [rbx + 0x4870], r13d
jg 0x14003eeff
mov r8d, 0x6ff
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140009090
movss xmm1, dword [0x14016b55c]
mov r10, rax
movss xmm0, dword [0x14016b558]
mov rcx, qword [0x14016b030]
movss dword [rbp + 0xec], xmm1
movss xmm1, dword [0x14016b564]
movss dword [rbp + 0xe8], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0xe8]
mov dword [rbp + 0x40], 0x43af0000
movss xmm0, dword [0x14016b560]
movss dword [rbp + 0xf0], xmm0
movss dword [rbp + 0xf4], xmm1
mov dword [rbp + 0x44], 0x42340000
mov qword [rbp + 0x48], r13
call fcn.140005200
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0x48]
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x40]
mov rcx, r10
call fcn.1400244c0
mov rbx, qword [0x14016b030]
cmp dword [rbx + 0x4870], r13d
jg 0x14003efd3
mov r8d, 0x6ff
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140009090
movss xmm1, dword [0x14016b7ac]
mov r10, rax
movss xmm0, dword [0x14016b7a8]
mov rcx, qword [0x14016b030]
movss dword [rbp + 0xfc], xmm1
movss xmm1, dword [0x14016b7b4]
movss dword [rbp + 0xf8], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0xf8]
mov dword [rbp + 0x50], 0x43af0000
movss xmm0, dword [0x14016b7b0]
movss dword [rbp + 0x100], xmm0
movss dword [rbp + 0x104], xmm1
mov dword [rbp + 0x54], 0x43c80000
mov dword [rbp + 0x58], r13d
mov dword [rbp + 0x5c], 0x42340000
call fcn.140005200
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0x58]
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x50]
mov rcx, r10
call fcn.1400244c0
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x1400404d0
mov rcx, qword [0x14016b030]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x14016a208]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, xmm8
addss xmm0, dword [0x14014acc0]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rcx, qword [0x14016a208]
call fcn.14002dd90
mov rbx, qword [0x14016b030]
lea rdx, [rbp + 0xc0]
mov dword [rbp + 0xc0], reloc.WS2_32.dll_ntohl
movss xmm1, dword [rbx + 0x382c]
lea rcx, [rbx + 0x47f8]
movss xmm0, dword [rbx + 0x3830]
movss dword [rbp + 0xc4], xmm1
movss dword [rbp + 0xc8], xmm0
call fcn.14001ee70
mov rcx, qword [0x14016b030]
mov r14d, 1
mov dword [rbx + 0x382c], 0x40e00000
mov dword [rbx + 0x3830], 0x40e00000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
mov ecx, r14d
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x14014ac14]
addss xmm0, dword [0x14014ac8c]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.1400057f0
mov eax, dword [0x14016b04c]
mov ecx, dword [0x14016b048]
cmp eax, ecx
jne 0x14003f1e0
movaps xmm7, xmm12
jmp 0x14003f1e4
movaps xmm7, xmm10
mov rbx, qword [0x14016b030]
test rbx, rbx
jne 0x14003f21d
mov r8d, 0xfd8
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x14016b04c]
mov ecx, dword [0x14016b048]
mov rbx, qword [0x14016b030]
movss xmm6, dword [rbx + 0x18]
movaps xmm0, xmm6
mulss xmm0, xmm13
mulss xmm0, xmm7
addss xmm0, dword [0x14016b094]
comiss xmm9, xmm0
jbe 0x14003f242
movaps xmm1, xmm9
jmp 0x14003f24a
movaps xmm1, xmm12
minss xmm1, xmm0
movss dword [0x14016b094], xmm1
cmp eax, ecx
jne 0x14003f25c
movaps xmm7, xmm12
jmp 0x14003f260
movaps xmm7, xmm10
movaps xmm0, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm6, xmm0
mulss xmm6, xmm7
addss xmm6, dword [0x14016b098]
comiss xmm9, xmm6
jbe 0x14003f285
movaps xmm0, xmm9
jmp 0x14003f28d
movaps xmm0, xmm12
minss xmm0, xmm6
mov rax, qword [rbx + 0x3ea0]
lea rdx, [rbp + 0x60]
movss dword [0x14016b098], xmm0
lea rcx, str.Welcome
mov dword [rbp + 0x60], 0x43960000
mov dword [rbp + 0x64], 0x43c80000
mov byte [rax + 0xb0], r14b
mov rax, qword [rbx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r14b
addss xmm1, dword [0x14014ac6c]
addss xmm0, dword [0x14014ac90]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.14000cc40
lea rcx, str.C:Windows_svchosts.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:Windows_systems.exe
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x68]
mov qword [rsp + 0x30], r13
lea r8, [0x14016b0c0]
mov dword [rsp + 0x28], r13d
lea rcx, str.Username00
mov r9d, 0x50
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x68], r13
call fcn.140032b90
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x70]
mov qword [rsp + 0x30], r13
lea r8, [0x14016b050]
mov dword [rsp + 0x28], r13d
lea rcx, str.Password.00
mov r9d, 0x50
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x70], r13
call fcn.140032b90
lea rdx, [rbp + 0x78]
mov dword [rbp + 0x78], 0x438c0000
mov dword [rbp + 0x7c], 0x42200000
call fcn.14002e7e0
test al, al
je 0x14003f3f8
lea rdx, [0x14016b050]
lea rcx, [rbp + 0x240]
call fcn.1400025a0
lea rdx, [0x14016b0c0]
mov rbx, rax
lea rcx, [rbp + 0x260]
call fcn.1400025a0
mov r8, rbx
lea rcx, [0x14016b160]
mov rdx, rax
call fcn.1400bb590
cmp byte [0x14016b370], r13b
je 0x1400404b3
mov byte [0x14016b02a], r14b
call fcn.14000cd50
mov rbx, qword [0x14016b030]
lea rdx, [rbp + 0x1cc]
movss xmm6, dword [0x14016b094]
mulss xmm6, dword [rdi + 0x37e0]
mov dword [rbp + 0x1cc], r13d
movss xmm0, dword [rbx + 0x37e0]
lea rcx, [rbx + 0x47f8]
movss dword [rbp + 0x1d0], xmm0
call fcn.14001ee70
mov ecx, r14d
movss dword [rbx + 0x37e0], xmm6
call fcn.1400057f0
call fcn.14003af60
call fcn.140012400
movzx eax, byte [0x14016b02a]
movss xmm7, dword [0x14014aba0]
cmp al, 1
jne 0x1400401aa
mov rdi, qword [0x14016b030]
test rdi, rdi
jne 0x14003f49c
mov r8d, 0xb67
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x14016b030]
movaps xmm0, xmmword [0x14014aff0]
lea rcx, str.JAMESxD_
movaps xmm1, xmmword [0x14014afb0]
xor edx, edx
mov dword [rdi + 0x37f0], 0x41200000
mov r8d, 0x20bb
mov dword [rdi + 0x380c], 0x41200000
mov dword [rdi + 0x37e8], r13d
mov dword [rdi + 0x37ec], 0x41f00000
mov dword [rdi + 0x37f4], r13d
mov dword [rdi + 0x3824], 0x40800000
mov qword [rdi + 0x382c], r13
mov dword [rdi + 0x3854], 0x40c00000
mov qword [rdi + 0x3814], 0x41000000
movups xmmword [0x14016b788], xmm0
movups xmmword [0x14016b898], xmm1
or dword [rdi + 0x4778], 2
mov dword [rdi + 0x4798], 0x43af0000
mov dword [rdi + 0x479c], 0x43c80000
mov dword [rdi + 0x4780], r14d
call fcn.14000f960
lea rdx, [rbp - 0x78]
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r8, qword [0x14016b030]
mov rax, qword [r8 + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm9
movss xmm1, dword [rax + 0x1c]
jp 0x14003f575
jne 0x14003f575
ucomiss xmm1, xmm9
jp 0x14003f575
je 0x14003f5dd
movd xmm0, dword [rbp - 0x74]
mov r9d, 0x15e
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r14d
mov rcx, r12
mov dword [rsp + 0x20], 0x190
addss xmm0, xmm1
movd xmm1, dword [rbp - 0x78]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x14016b030]
lea rdx, [rbp + 0x80]
xor r8d, r8d
mov qword [rbp + 0x80], r13
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400131a0
mov r8, qword [0x14016b030]
mov rax, qword [r8 + 0x3ea0]
lea rcx, [rbp + 0x108]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x14016b54c]
movss xmm0, dword [0x14016b548]
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x10c], xmm1
movss xmm1, dword [0x14016b554]
mulss xmm1, dword [r8 + 0x37e0]
mov rbx, qword [rax + 0x290]
movss dword [rbp + 0x108], xmm0
movss xmm0, dword [0x14016b550]
movss dword [rbp + 0x114], xmm1
movss dword [rbp + 0x110], xmm0
call fcn.140005200
mov rdx, qword [r8 + 0x3ea0]
mov r14d, eax
movss xmm3, dword [0x14014ace0]
movss xmm2, dword [r8 + 0x3c00]
mov rcx, qword [r8 + 0x3bf8]
movss xmm6, dword [rdx + 0x20]
lea rdx, [rbp + 0x88]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rsi
movss dword [rsp + 0x20], xmm10
call fcn.140028260
movss xmm0, dword [rbp + 0x88]
mov dword [rbp + 0x94], 0x41400000
addss xmm0, xmm15
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x88], xmm1
subss xmm6, xmm1
mulss xmm6, xmm7
addss xmm6, xmm9
movss dword [rbp + 0x90], xmm6
test r14d, 0xff000000
je 0x14003f76e
mov rax, qword [rbx + 0x38]
mov rsi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rsi + 0x40]
cmp qword [rcx + 8], rax
je 0x14003f716
mov r8d, 0x65b
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r13b
lea rax, [0x14014a15a]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x90]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.LIMITLISSE
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rsi
lea rax, [rbp + 0x240]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
movups xmmword [rbp + 0x240], xmm0
call fcn.140028480
mov rbx, qword [0x14016b030]
cmp dword [rbx + 0x4870], r13d
jg 0x14003f798
mov r8d, 0x6ff
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140009090
movss xmm1, dword [0x14016b55c]
mov r10, rax
movss xmm0, dword [0x14016b558]
mov rcx, qword [0x14016b030]
movss dword [rbp + 0x11c], xmm1
movss xmm1, dword [0x14016b564]
movss dword [rbp + 0x118], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x118]
mov dword [rbp + 0x98], 0x43af0000
movss xmm0, dword [0x14016b560]
movss dword [rbp + 0x120], xmm0
movss dword [rbp + 0x124], xmm1
mov dword [rbp + 0x9c], 0x42340000
mov qword [rbp + 0xa0], r13
call fcn.140005200
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0xa0]
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0x98]
mov rcx, r10
call fcn.1400244c0
mov rbx, qword [0x14016b030]
cmp dword [rbx + 0x4870], r13d
jg 0x14003f87b
mov r8d, 0x6ff
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140009090
movss xmm1, dword [0x14016b7ac]
mov r10, rax
movss xmm0, dword [0x14016b7a8]
mov rcx, qword [0x14016b030]
movss dword [rbp - 0x64], xmm1
movss xmm1, dword [0x14016b7b4]
movss dword [rbp - 0x68], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp - 0x68]
mov dword [rbp + 0xa8], 0x43af0000
movss xmm0, dword [0x14016b7b0]
movss dword [rbp - 0x60], xmm0
movss dword [rbp - 0x5c], xmm1
mov dword [rbp + 0xac], 0x43c80000
mov dword [rbp - 0x80], r13d
mov dword [rbp - 0x7c], 0x42340000
call fcn.140005200
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp - 0x80]
movss dword [rsp + 0x20], xmm11
lea r8, [rbp + 0xa8]
mov rcx, r10
call fcn.1400244c0
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x1400404d0
mov rcx, qword [0x14016b030]
lea rdx, [0x14016a208]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x240]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
mov byte [rax + 0x139], 1
addss xmm0, dword [0x14014acb8]
addss xmm1, dword [0x14014ac0c]
movss dword [rax + 0xfc], xmm0
movaps xmm0, xmmword [0x14014b010]
movss dword [rax + 0xf8], xmm1
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
movups xmmword [rbp + 0x240], xmm0
cmovae rdx, qword [0x14016a208]
call fcn.14002ded0
mov rbx, qword [0x14016b030]
lea rdx, [rbp + 0xcc]
mov dword [rbp + 0xcc], reloc.WS2_32.dll_ntohl
movss xmm1, dword [rbx + 0x382c]
lea rcx, [rbx + 0x47f8]
movss xmm0, dword [rbx + 0x3830]
movss dword [rbp + 0xd0], xmm1
movss dword [rbp + 0xd4], xmm0
call fcn.14001ee70
mov rcx, qword [0x14016b030]
mov r14d, 1
mov dword [rbx + 0x382c], 0x40e00000
mov dword [rbx + 0x3830], 0x40e00000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
mov ecx, r14d
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], 1
addss xmm1, dword [0x14014ac34]
addss xmm0, dword [0x14014ac84]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.1400057f0
mov eax, dword [0x14016b048]
mov esi, dword [0x14016b04c]
cmp esi, eax
jne 0x14003fa9a
movaps xmm6, xmm12
jmp 0x14003fa9e
movaps xmm6, xmm10
mov rbx, qword [0x14016b030]
test rbx, rbx
jne 0x14003fad7
mov r8d, 0xfd8
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x14016b048]
mov esi, dword [0x14016b04c]
mov rbx, qword [0x14016b030]
movss xmm8, dword [rbx + 0x18]
movaps xmm0, xmm8
mulss xmm0, xmm13
mulss xmm0, xmm6
addss xmm0, dword [0x14016b094]
comiss xmm9, xmm0
jbe 0x14003fafe
movaps xmm6, xmm9
jmp 0x14003fb06
movaps xmm6, xmm12
minss xmm6, xmm0
movss dword [0x14016b094], xmm6
cmp esi, eax
jne 0x14003fb18
movaps xmm7, xmm12
jmp 0x14003fb1c
movaps xmm7, xmm10
movaps xmm0, xmm14
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm0, xmm8
mulss xmm0, xmm7
addss xmm0, dword [0x14016b098]
comiss xmm9, xmm0
jbe 0x14003fb42
movaps xmm1, xmm9
jmp 0x14003fb4a
movaps xmm1, xmm12
minss xmm1, xmm0
ucomiss xmm6, xmm9
movss dword [0x14016b098], xmm1
jp 0x14003fb68
jne 0x14003fb68
ucomiss xmm1, xmm9
jp 0x14003fb68
jne 0x14003fb68
mov dword [0x14016b048], esi
mov rax, qword [rbx + 0x3ea0]
lea rcx, [rbx + 0x47f8]
lea rdx, [rbp + 0x1c0]
mov dword [rbp + 0x1c0], r13d
mov byte [rax + 0xb0], r14b
mov rax, qword [rbx + 0x3ea0]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x7c]
mov byte [rax + 0x139], r14b
addss xmm0, dword [0x14014ac94]
addss xmm1, dword [0x14014ac18]
movss dword [rax + 0xfc], xmm0
movss dword [rax + 0xf8], xmm1
movss xmm0, dword [rbx + 0x37e0]
mulss xmm6, dword [rdi + 0x37e0]
movss dword [rbp + 0x1c4], xmm0
call fcn.14001ee70
lea rdx, [rsp + 0x78]
movss dword [rbx + 0x37e0], xmm6
lea rcx, str.IN_GAME
mov dword [rsp + 0x78], 0x43af0000
mov dword [rsp + 0x7c], 0x43960000
call fcn.14000cc40
lea rdx, [0x14016b0a7]
lea rcx, str.External_Aimbot
call fcn.14002fdb0
lea rdx, [0x14016b0a4]
mov byte [0x14016b09c], al
lea rcx, str.Chams_V1
call fcn.14002fdb0
lea rdx, [0x14016b0ad]
mov byte [0x14016b091], al
lea rcx, str.Stream_Mode
call fcn.14002fdb0
mov byte [0x14016b0b4], al
call fcn.14000cd50
cmp byte [0x14016b0b4], r13b
je 0x14003fd5d
cmp byte [0x14016b0ad], r13b
je 0x14003fceb
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x68], r13
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x68]
mov r8d, r14d
lea r9, [0x140112fe0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140112ff0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14003fd57
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x68]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x68]
jmp 0x14003fd51
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x60], r13
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x60]
mov r8d, r14d
lea r9, [0x140112fe0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140112ff0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x14003fd57
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x60]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, r14d
call fcn.1400057f0
mov rcx, qword [0x14016b030]
movss xmm8, dword [0x14014aca4]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r14b
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x14016a208]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r14b
addss xmm1, xmm8
addss xmm0, dword [0x14014acc0]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rcx, qword [0x14016a208]
call fcn.14002dd90
cmp byte [0x14016b0b5], r13b
je 0x14003fecc
cmp byte [0x14016b0ae], r13b
je 0x14003fe7f
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Internet_Block:_Enabled
jmp 0x14003fec0
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_26
lea rdx, str.Internet_Block:_Disabled
lea rcx, [0x14016a208]
call fcn.1400361d0
cmp byte [0x14016b093], r13b
je 0x14003ff78
cmp byte [0x14016b0a6], r13b
lea rcx, str.taskkill__f__im_HD_Player.exe
je 0x14003ff3e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_MEmuHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_LdVBoxHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_AndroidProcess.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Nox.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_30
lea rdx, str.Destruct_emulator_:_Done_
lea rcx, [0x14016a208]
call fcn.1400361d0
jmp 0x14003ff78
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_MEmuHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_LdVBoxHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_AndroidProcess.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Nox.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x14016b0b6], r13b
je 0x140040052
mov r8d, dword [0x14016b3d8]
xor edx, edx
cmp byte [0x14016b0af], r13b
mov ecx, 0xc00
je 0x14003fff2
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14003ffe3
cmp byte [0x14016b02c], r13b
mov rcx, rax
jne 0x14003ffc9
call qword [sym.imp.ntdll.dll_NtSuspendProcess]
test eax, eax
jne 0x14003ffda
mov byte [0x14016b02c], r14b
jmp 0x14003ffda
call qword [sym.imp.ntdll.dll_NtResumeProcess]
test eax, eax
jne 0x14003ffda
mov byte [0x14016b02c], r13b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Process_:_Paused
jmp 0x140040046
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140040039
cmp byte [0x14016b02c], r13b
mov rcx, rax
jne 0x14004001f
call qword [sym.imp.ntdll.dll_NtSuspendProcess]
test eax, eax
jne 0x140040030
mov byte [0x14016b02c], r14b
jmp 0x140040030
call qword [sym.imp.ntdll.dll_NtResumeProcess]
test eax, eax
jne 0x140040030
mov byte [0x14016b02c], r13b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Process_:_Resumed
lea rcx, [0x14016a208]
call fcn.1400361d0
cmp byte [0x14016b02f], r13b
je 0x14004006b
cmp byte [0x14016b0a2], r13b
je 0x14004006b
mov byte [0x14016b15d], r14b
cmp byte [0x14016b02b], r13b
je 0x14004008d
cmp byte [0x14016b09f], r13b
je 0x140040086
mov byte [0x14016b159], r14b
jmp 0x14004008d
mov byte [0x14016b158], r14b
cmp byte [0x14016b02d], r13b
je 0x1400400a4
cmp byte [0x14016b0a0], r13b
je 0x1400400a4
call fcn.14003b920
cmp byte [0x14016b09d], r13b
je 0x1400400c6
cmp byte [0x14016b0a8], r13b
je 0x1400400bf
mov byte [0x14016b15a], r14b
jmp 0x1400400c6
mov byte [0x14016b15e], r14b
cmp byte [0x14016b029], r13b
je 0x1400400e8
cmp byte [0x14016b09e], r13b
je 0x1400400e1
mov byte [0x14016b411], r14b
jmp 0x1400400e8
mov byte [0x14016b410], r14b
cmp byte [0x14016b091], r13b
je 0x140040101
cmp byte [0x14016b0a4], r13b
je 0x140040101
mov byte [0x14016b15c], r14b
cmp byte [0x14016b09c], r13b
je 0x14004011a
cmp byte [0x14016b0a7], r13b
je 0x14004011a
mov byte [0x14016b412], r14b
cmp byte [0x14016b0b0], r13b
je 0x140040133
cmp byte [0x14016b0a9], r13b
je 0x140040133
mov byte [0x14016b3de], r14b
cmp byte [0x14016b090], r13b
je 0x14004014c
cmp byte [0x14016b0a3], r13b
je 0x14004014c
mov byte [0x14016b15b], r14b
cmp byte [0x14016b02e], r13b
je 0x140040165
cmp byte [0x14016b0a1], r13b
je 0x140040165
mov byte [0x14016b3dc], r14b
cmp byte [0x14016b0b3], r13b
je 0x140040187
cmp byte [0x14016b0ac], r13b
je 0x140040180
mov byte [0x14016b3dd], r14b
jmp 0x140040187
mov byte [0x14016b15f], r14b
cmp byte [0x14016b092], r13b
je 0x1400401a0
cmp byte [0x14016b0a5], r13b
je 0x1400401a0
mov byte [0x14016b3df], r14b
call fcn.14003af60
call fcn.140012400
call fcn.14000bfe0
mov rcx, qword [0x14016b420]
lea r8, [0x14016b400]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x1d8], xmm0
mov edx, r14d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x14016b420]
lea r8, [rbp + 0x1d8]
mov rdx, qword [0x14016b400]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x14016b030]
cmp dword [rbx + 0x4870], r13d
jg 0x14004021e
mov r8d, 0x6ff
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rcx, qword [rax]
mov rax, r13
add rcx, 0x48
cmp byte [rcx], r13b
cmovne rax, rcx
mov rcx, rax
call fcn.140036ca0
mov rcx, qword [0x14016b408]
xor r8d, r8d
mov edx, r14d
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x14003ea16
mov rbx, qword [0x14016b030]
test rbx, rbx
je 0x140040270
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x140040294
jmp 0x140040273
mov rdi, r13
mov r8d, 0x241
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeee_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b030]
test rbx, rbx
jne 0x1400402ba
mov r8d, 0xfd8
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b030]
call fcn.140037c40
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x1400402ce
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400402dc
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400402eb
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x14016b030]
mov qword [rbx + 0x90], r13
mov qword [rbx + 0xa0], r13
test rax, rax
je 0x14004030b
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x14016b030]
test rax, rax
je 0x14004032e
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x140040352
jmp 0x140040331
mov rbx, r13
mov r8d, 0xa7
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeee_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b030]
test rax, rax
jne 0x140040378
mov r8d, 0xfd8
lea rdx, str.C:UserszitadoDesktoppanles_steeeeeeeeimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b030]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x140040392
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x14016b030]
mov qword [rdi + 0x80], r13
mov qword [rdi + 0x90], r13
test rax, rax
je 0x1400403ab
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14016b030]
mov qword [0x14016b030], rbx
call fcn.1400075a0
mov qword [0x14016b030], r13
test rbx, rbx
je 0x1400403f6
mov rcx, rbx
call fcn.14001fa50
mov rax, qword [0x14016b030]
test rax, rax
je 0x1400403ed
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140040500
mov rcx, r12
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x208]
mov rcx, qword [rbp + 0x230]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm14, xmmword [rsp + 0x3b0]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x3c0]
movaps xmm12, xmmword [rsp + 0x3d0]
movaps xmm11, xmmword [rsp + 0x3e0]
movaps xmm10, xmmword [rsp + 0x3f0]
movaps xmm9, xmmword [rsp + 0x400]
movaps xmm8, xmmword [rsp + 0x410]
movaps xmm7, xmmword [rsp + 0x420]
movaps xmm6, xmmword [rsp + 0x430]
mov r15, qword [rsp + 0x440]
mov r14, qword [rsp + 0x448]
mov rsi, qword [rsp + 0x478]
mov rdi, qword [rsp + 0x480]
movaps xmm15, xmmword [rsp + 0x3a0]
mov rbx, qword [rsp + 0x470]
mov r12, qword [rsp + 0x458]
mov r13, qword [rsp + 0x450]
add rsp, 0x460
pop rbp
ret
lea rcx, [0x14016b378]
call fcn.140002530
mov rdx, rax
call fcn.140036110
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
lea rdx, str.____Run_the_program_as_admin
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3