Function at 0x14005a1a0
Capabilities:
Create http request
Create process on windows
Create thread
Download and write a file
Execute command
Log keystrokes via polling
Read data from internet
Receive and write data from server to client
Receive data
Set registry value
Terminate process
Write and execute a file
Write file on windows

Disassembly:
push rbp
push r13
lea rbp, [rsp - 0x2658]
mov eax, 0x2758
call fcn.140129f90
sub rsp, rax
call fcn.14004ef80
mov rdx, rax
lea rcx, [0x1402bfec0]
call fcn.140050020
call fcn.14004ef80
mov rdx, rax
lea rcx, [0x1402bfec0]
call fcn.140050020
test eax, eax
jne 0x14005a244
lea r9, str.No_Process_Found_
mov edx, 3
mov r8d, 0xfa0
lea rcx, [rbp + 0x590]
call fcn.14004e0b0
mov rax, qword [0x1402bef58]
cmp rax, qword [0x1402bef60]
je 0x14005a235
mov r8d, 0x2010
lea rdx, [rbp + 0x590]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1402bef58], 0x2010
jmp 0x14005a244
lea r8, [rbp + 0x590]
mov rdx, rax
call fcn.1400602d0
xor r13d, r13d
lea r8, [0x1400523f0]
mov qword [rsp + 0x28], r13
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], r13d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140056360]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140058080]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140058660]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140058c70]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140058f50]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140059260]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140052700]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140059590]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x1400569e0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140059950]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r13
xor r9d, r9d
mov dword [rsp + 0x20], r13d
lea r8, [0x140057a70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140057490]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140056f30]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140053ce0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x1400552f0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140054240]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140052ce0]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140053290]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r13
lea r8, [0x140054650]
mov dword [rsp + 0x20], r13d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [0x1402c0080]
call fcn.14006af60
xor ecx, ecx
cmp byte [0x1402c0298], r13b
jne 0x14005a4dd
xor r9d, r9d
lea rdx, str.Couldnt_Connect_To_KeyAuth_
xor r8d, r8d
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x2770], rbx
lea rax, [0x14005f4a0]
mov qword [rsp + 0x2778], rsi
mov edx, 0x7f00
mov qword [rsp + 0x2780], rdi
mov qword [rsp + 0x2750], r12
mov qword [rsp + 0x2748], r14
mov dword [rbp + 0x520], 0x50
mov dword [rbp + 0x524], 0x40
mov qword [rbp + 0x528], rax
mov qword [rbp + 0x530], r13
mov qword [rbp + 0x538], r13
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x540], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x550], r13
mov qword [rbp + 0x548], rax
xor ecx, ecx
lea rax, [0x140166e98]
mov qword [rbp + 0x558], rax
mov qword [rbp + 0x560], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x520]
mov qword [rbp + 0x568], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov edi, 1
mov ecx, edi
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x131]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r13
lea r8, str.NATCHO_CHEAT
mov qword [rsp + 0x50], r13
cdq
mov qword [rsp + 0x48], r13
sub eax, edx
mov rdx, qword [rbp + 0x560]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r13
xor ecx, ecx
mov dword [rsp + 0x38], 0x262
sar eax, 1
sub eax, 0x1e0
mov dword [rsp + 0x30], 0x3c0
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [rbp + 0x260], rax
mov edx, 0xffffffec
mov r12, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xffffffec
mov rcx, r12
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x140167e60]
lea rdx, [rbp + 0x570]
mov rcx, r12
movdqu xmmword [rbp + 0x570], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
lea rdx, [rbp - 0x18]
mov rcx, r12
movups xmmword [rbp - 0x18], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x464], r13
mov qword [rbp + 0x478], 2
lea rax, [rbp - 0x78]
mov qword [rbp + 0x490], 2
lea rbx, [0x1402c0378]
mov qword [rbp + 0x450], r13
mov qword [rsp + 0x58], rbx
lea rsi, [0x1402c0368]
mov qword [rsp + 0x50], rax
lea r14, [0x1402c0360]
mov qword [rsp + 0x48], rsi
lea rax, [rbp + 0x450]
mov qword [rsp + 0x40], r14
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rsp + 0x70]
mov dword [rsp + 0x28], 2
mov edx, edi
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x460], Ordinal_32
mov dword [rbp + 0x458], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x45c], edi
mov dword [rbp + 0x474], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x480], r12
mov qword [rbp + 0x46c], rdi
mov qword [rbp + 0x488], rdi
mov dword [rsp + 0x70], 0xb000
mov dword [rsp + 0x74], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x14005a7a7
mov qword [rsp + 0x58], rbx
lea rax, [rbp - 0x78]
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rsi
lea rax, [rbp + 0x450]
mov qword [rsp + 0x40], r14
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, 5
mov dword [rsp + 0x30], 7
lea rax, [rsp + 0x70]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x14005a7cb
call fcn.14005f420
mov rdx, qword [rbp + 0x538]
mov rcx, qword [rbp + 0x560]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, edi
jmp 0x14005f352
mov rcx, qword [0x1402c0360]
lea r9, [rbp - 0x70]
mov qword [rsp + 0x2740], r15
lea r8, [0x140167bd0]
movaps xmmword [rsp + 0x2730], xmm6
xor edx, edx
movaps xmmword [rsp + 0x2720], xmm7
mov rax, qword [rcx]
movaps xmmword [rsp + 0x2710], xmm8
movaps xmmword [rsp + 0x2700], xmm9
movaps xmmword [rsp + 0x26f0], xmm10
movaps xmmword [rsp + 0x26e0], xmm11
movaps xmmword [rsp + 0x26d0], xmm12
movaps xmmword [rsp + 0x26c0], xmm13
movaps xmmword [rsp + 0x26b0], xmm14
call qword [rax + 0x48]
mov rcx, qword [0x1402c0368]
lea r9, [0x1402c0358]
mov rdx, qword [rbp - 0x70]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp - 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0xa
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x1402bfd40]
test rbx, rbx
je 0x14005a88a
inc dword [rbx + 0xf4]
mov rdx, qword [0x1402bfd30]
mov ecx, 0x5e50
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x14005a8ac
xor edx, edx
mov rcx, rax
call fcn.1400019e0
jmp 0x14005a8af
mov rax, r13
mov qword [0x1402bfd40], rax
call fcn.140006190
test rbx, rbx
je 0x14005a8c9
mov qword [0x1402bfd40], rbx
jmp 0x14005a8d0
mov rbx, qword [0x1402bfd40]
test rbx, rbx
jne 0x14005a8f6
mov r8d, 0x1031
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402bfd40]
mov rsi, qword [rbx + 0x58]
xorps xmm6, xmm6
or dword [rbx + 8], 3
xor eax, eax
movups xmmword [rbp + 0x460], xmm6
mov qword [rbp + 0x4d0], rax
mov eax, 0xffff
movups xmmword [rbp + 0x490], xmm6
mov dword [rbp + 0x468], 3
movups xmmword [rbp + 0x4a0], xmm6
mov dword [rbp + 0x46c], edi
movups xmmword [rbp + 0x450], xmm6
mov byte [rbp + 0x45c], dil
mov dword [rbp + 0x494], 0x7f7fffff
mov dword [rbp + 0x4a0], 0x3f800000
mov word [rbp + 0x4a4], ax
mov dword [rbp + 0x49c], 0x10c
cmp byte [rsi + 0x18], r13b
je 0x14005a987
mov r8d, 0xb89
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm7, xmmword [rbp + 0x450]
movaps xmm8, xmmword [rbp + 0x460]
movq rdi, xmm7
movaps xmm9, xmmword [rbp + 0x490]
movaps xmm10, xmmword [rbp + 0x4a0]
movsd xmm11, qword [rbp + 0x4d0]
movaps xmmword [rbp + 0x590], xmm7
movaps xmmword [rbp + 0x5a0], xmm8
movaps xmmword [rbp + 0x5b0], xmm6
movaps xmmword [rbp + 0x5c0], xmm6
movaps xmmword [rbp + 0x5d0], xmm9
movaps xmmword [rbp + 0x5e0], xmm10
movaps xmmword [rbp + 0x5f0], xmm6
movaps xmmword [rbp + 0x600], xmm6
movsd qword [rbp + 0x610], xmm11
test rdi, rdi
je 0x14005aa17
mov r8d, 0xb8b
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x140272670]
mov dword [rbp + 0x598], 0x4ba44
lea r14, [0x1401641e0]
mov qword [rbp + 0x590], rax
lea rdx, [rbp + 0x590]
mov qword [rbp + 0x5c8], r14
mov rcx, rsi
mov dword [rbp + 0x5a4], 0x41880000
call fcn.140030bf0
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], r13b
je 0x14005aa7a
mov r8d, 0xb89
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x590], xmm7
movaps xmmword [rbp + 0x5a0], xmm8
movaps xmmword [rbp + 0x5b0], xmm6
movaps xmmword [rbp + 0x5c0], xmm6
movaps xmmword [rbp + 0x5d0], xmm9
movaps xmmword [rbp + 0x5e0], xmm10
movaps xmmword [rbp + 0x5f0], xmm6
movaps xmmword [rbp + 0x600], xmm6
movsd qword [rbp + 0x610], xmm11
test rdi, rdi
je 0x14005aadd
mov r8d, 0xb8b
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x140181740]
mov dword [rbp + 0x598], 0x4d2c4
lea rdx, [rbp + 0x590]
mov qword [rbp + 0x590], rax
mov rcx, rsi
mov dword [rbp + 0x5a4], 0x41880000
mov qword [rbp + 0x5c8], r14
call fcn.140030bf0
mov rbx, qword [rbx + 0x58]
mov qword [0x1402bfd50], rax
cmp byte [rbx + 0x18], r13b
je 0x14005ab40
mov r8d, 0xb89
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp + 0x590], xmm7
movaps xmmword [rbp + 0x5a0], xmm8
movaps xmmword [rbp + 0x5b0], xmm6
movaps xmmword [rbp + 0x5c0], xmm6
movaps xmmword [rbp + 0x5d0], xmm9
movaps xmmword [rbp + 0x5e0], xmm10
movaps xmmword [rbp + 0x5f0], xmm6
movaps xmmword [rbp + 0x600], xmm6
movsd qword [rbp + 0x610], xmm11
test rdi, rdi
je 0x14005aba3
mov r8d, 0xb8b
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1402be2c0]
mov dword [rbp + 0x598], 0xb18
lea rdx, [rbp + 0x590]
mov qword [rbp + 0x590], rax
mov rcx, rbx
mov dword [rbp + 0x5a4], 0x41700000
mov qword [rbp + 0x5c8], r14
call fcn.140030bf0
xor ecx, ecx
mov qword [0x1402bfe08], rax
call fcn.140029330
cmp qword [0x1402bfd90], r13
mov qword [rbp + 0x78], 0xffffffffffffffff
mov qword [rbp + 0x80], 0xffffffffffffffff
mov qword [rbp + 0x88], 0xffffffffffffffff
mov qword [rbp + 0x90], 0xffffffffffffffff
mov dword [rbp + 0x98], 0xffffffff
mov qword [rbp + 0x9c], 0xfffffffffffffffd
mov dword [rbp + 0xa4], 0xffffffff
mov qword [rbp + 0xa8], r13
jne 0x14005ac75
mov rcx, qword [0x1402c0368]
lea rax, [0x1402bfd90]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x140271270]
mov r8d, 0x249
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bfda0], r13
jne 0x14005acb2
mov rcx, qword [0x1402c0368]
lea rax, [0x1402bfda0]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x140272480]
mov r8d, 0x1e8
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bfd80], r13
jne 0x14005acef
mov rcx, qword [0x1402c0368]
lea rax, [0x1402bfd80]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401cea10]
mov r8d, 0x193
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bfda8], r13
jne 0x14005ad2c
mov rcx, qword [0x1402c0368]
lea rax, [0x1402bfda8]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402be0c0]
mov r8d, 0x1f7
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bfd88], r13
jne 0x14005ad69
mov rcx, qword [0x1402c0368]
lea rax, [0x1402bfd88]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401cebb0]
mov r8d, 0xa26be
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bfd60], r13
jne 0x14005ada6
mov rcx, qword [0x1402c0368]
lea rax, [0x1402bfd60]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402bede0]
mov r8d, 0x100
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bfd58], r13
jne 0x14005ade3
mov rcx, qword [0x1402c0368]
lea rax, [0x1402bfd58]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401812b0]
mov r8d, 0x243
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bfd78], r13
jne 0x14005ae20
mov rcx, qword [0x1402c0368]
lea rax, [0x1402bfd78]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x140181500]
mov r8d, 0x23f
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bfd98], r13
jne 0x14005ae5d
mov rcx, qword [0x1402c0368]
lea rax, [0x1402bfd98]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x1402714c0]
mov r8d, 0xfbe
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1402bfd70], r13
jne 0x14005ae9a
mov rcx, qword [0x1402c0368]
lea rax, [0x1402bfd70]
mov qword [rsp + 0x30], r13
lea r9, [rbp + 0x78]
mov qword [rsp + 0x28], rax
lea rdx, [0x140180110]
mov r8d, 0x1192
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, r12
call fcn.14004be20
mov rax, qword [0x1402bfd40]
mov r14, qword [0x1402c0378]
mov rsi, qword [0x1402c0368]
test rax, rax
jne 0x14005aedd
mov r8d, 0x1031
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402bfd40]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r13
je 0x14005af0b
mov r8d, 0x221
lea rdx, str.C:Users_natchOneDriveBureaucheat_natcho_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402bfd40]
test rax, rax
je 0x14005af16
inc dword [rax + 0xf4]
mov rdx, qword [0x1402bfd30]
mov ecx, 0x78
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rbx, rax
test rax, rax
je 0x14005af5d
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x14005af60
mov rbx, r13
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp - 0x40]
mov qword [rdi + 0x98], rbx
lea rdx, [0x140165bd0]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
mov qword [rbp + 0x268], r13
call qword [rax]
test eax, eax
jne 0x14005afe6
mov rcx, qword [rbp - 0x40]
lea r8, [rbp - 0x38]
lea rdx, [0x140165be0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14005afe6
mov rcx, qword [rbp - 0x38]
lea r8, [rbp + 0x268]
lea rdx, [0x140165bf0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14005afe6
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x268]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14005aff5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x14005b004
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
movzx ebx, byte [rsp + 0x60]
xor r15b, r15b
movzx edi, byte [rsp + 0x60]
movzx esi, byte [rsp + 0x60]
movzx r14d, byte [rsp + 0x60]
movss xmm12, dword [0x140167c50]
movss xmm14, dword [0x140167c4c]
movss xmm13, dword [0x140167cb0]
mov dword [rbp - 0x78], r15d
movaps xmmword [rsp + 0x26a0], xmm15
nop word [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x450]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005b0e8
mov ebx, 1
nop word [rax + rax]
lea rcx, [rbp + 0x450]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x450]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x458], 0x12
lea rcx, [rbp + 0x450]
movzx r15d, r15b
cmove r15d, ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14005b090
movzx ebx, byte [rsp + 0x60]
mov dword [rbp - 0x78], r15d
test r15b, r15b
jne 0x14005f114
mov r15, qword [0x1402bfd40]
test r15, r15
je 0x14005b102
mov r15, qword [r15 + 0xa0]
test r15, r15
jne 0x14005b11f
jmp 0x14005b105
mov r15, r13
mov r8d, 0x251
lea rdx, str.C:Users_natchOneDriveBureaucheat_natcho_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [r15 + 0x48], 0
jne 0x14005b12b
call fcn.14004b7b0
call fcn.14004cba0
call fcn.140008930
mov r13, qword [0x1402bfd40]
test r13, r13
jne 0x14005b162
mov r8d, 0xba2
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r13, qword [0x1402bfd40]
mov dword [r13 + 0x381c], 0x41a00000
lea rcx, str.Menu
mov dword [r13 + 0x3820], 0x41a00000
xor eax, eax
mov qword [r13 + 0x37d8], rax
xor edx, edx
mov dword [r13 + 0x37e4], eax
mov r8d, 0x20bb
mov dword [r13 + 0x3844], 0x41000000
movss xmm0, dword [0x1402bef40]
movss xmm1, dword [str._O_]
movss dword [0x1402c0ab8], xmm0
movss xmm0, dword [0x1402bef48]
movss dword [0x1402c0ac0], xmm0
movss dword [0x1402c0abc], xmm1
mov dword [0x1402c0ac4], 0x3f800000
or dword [r13 + 0x47d0], 2
mov dword [r13 + 0x47f0], 0x44700000
mov dword [r13 + 0x47f4], 0x44188000
mov dword [r13 + 0x47d8], 1
call fcn.14000f4d0
call fcn.140051d10
mov rax, qword [0x1402bfd40]
lea rdx, [rbp - 0x18]
mov rcx, qword [rax + 0x3ef8]
mov byte [rcx + 0xb8], 1
mov rcx, r12
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r15, qword [0x1402bfd40]
xorps xmm15, xmm15
mov rax, qword [r15 + 0x3ef8]
movss xmm2, dword [rax + 0x20]
ucomiss xmm2, xmm15
jp 0x14005b25d
jne 0x14005b25d
movss xmm0, dword [rax + 0x24]
ucomiss xmm0, xmm15
jp 0x14005b25d
je 0x14005b2cd
movd xmm0, dword [rbp - 0x14]
mov r9d, 0x3c0
movd xmm1, dword [rbp - 0x18]
mov rcx, r12
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x262
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x24]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rax, qword [0x1402bfd40]
lea rdx, [rbp + 0x270]
xor r8d, r8d
mov qword [rbp + 0x270], 0
mov rcx, qword [rax + 0x3ef8]
call fcn.140013130
mov r15, qword [0x1402bfd40]
mov rax, qword [r15 + 0x3ef8]
cmp qword [rax + 0x1a8], 0
movsd xmm0, qword [rax + 0x20]
movss xmm6, dword [rax + 0x250]
movss xmm7, dword [rax + 0x254]
subss xmm7, dword [rax + 0x24]
movsd qword [rsp + 0x70], xmm0
movss xmm0, dword [rax + 0x20]
subss xmm6, xmm0
jne 0x14005b311
cmp qword [r15 + 0x4b38], 0
je 0x14005b31d
movss xmm6, dword [rax + 0x220]
subss xmm6, xmm0
cmp dword [r15 + 0x48c8], 0
jg 0x14005b341
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0b4c]
mov r10, rax
movss xmm0, dword [0x1402c0b48]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x3d4], xmm1
movss xmm1, dword [0x1402c0b54]
movss dword [rbp + 0x3d0], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x3d0]
movss xmm0, dword [0x1402c0b50]
movss dword [rbp + 0x3d8], xmm0
movss dword [rbp + 0x3dc], xmm1
call fcn.140003e30
movss xmm10, dword [rsp + 0x70]
lea r8, [rbp + 0x2c0]
movss xmm11, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
movaps xmm0, xmm10
mov dword [rsp + 0x28], 0
addss xmm0, xmm6
movaps xmm1, xmm11
addss xmm1, xmm7
mov r9d, eax
mov rcx, r10
movss dword [rbp + 0x2c0], xmm0
movss xmm0, dword [0x140167d04]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x2c4], xmm1
call fcn.14002cc50
mov r8, qword [0x1402bfd40]
lea rcx, [rbp + 0x3e0]
mov rax, qword [r8 + 0x3ef8]
movsd xmm0, qword [rax + 0x20]
movsd xmm1, qword [rax + 0x28]
movaps xmm7, xmm0
movss xmm8, dword [rax + 0x20]
addss xmm7, xmm1
movss xmm9, dword [rax + 0x24]
movaps xmm6, xmm0
movsd qword [rbp - 0x80], xmm0
movaps xmm0, xmm1
movsd qword [rbp - 0x80], xmm1
movss xmm1, dword [0x1402c0abc]
shufps xmm0, xmm0, 0x55
movss dword [rbp + 0x3e4], xmm1
movss xmm1, dword [0x1402c0ac4]
mulss xmm1, dword [r8 + 0x37d0]
shufps xmm6, xmm6, 0x55
addss xmm6, xmm0
movss xmm0, dword [0x1402c0ab8]
movss dword [rbp + 0x3e0], xmm0
movss xmm0, dword [0x1402c0ac0]
movss dword [rbp + 0x3ec], xmm1
movss dword [rbp + 0x3e8], xmm0
call fcn.140003e30
mov rcx, qword [r8 + 0x3ef8]
mov r12d, eax
mov byte [rcx + 0xb8], 1
mov rcx, qword [r8 + 0x3ef8]
mov r15, qword [rcx + 0x298]
test eax, 0xff000000
je 0x14005b5ac
test byte [r15 + 0x30], 1
addss xmm9, xmm12
movss xmm3, dword [0x140167cd0]
addss xmm8, xmm12
mov dword [rsp + 0x20], 0xf0
mov rcx, r15
je 0x14005b538
subss xmm7, xmm12
movss dword [rbp + 0x2d0], xmm8
subss xmm6, xmm12
movss dword [rbp + 0x2d4], xmm9
lea r8, [rbp + 0x2c8]
lea rdx, [rbp + 0x2d0]
movss dword [rbp + 0x2c8], xmm7
movss dword [rbp + 0x2cc], xmm6
jmp 0x14005b572
subss xmm6, xmm14
movss dword [rbp + 0x2e0], xmm8
subss xmm7, xmm14
movss dword [rbp + 0x2e4], xmm9
lea r8, [rbp + 0x2d8]
lea rdx, [rbp + 0x2e0]
movss dword [rbp + 0x2dc], xmm6
movss dword [rbp + 0x2d8], xmm7
call fcn.14002c5a0
mov r8d, dword [r15 + 0x78]
mov r9d, r12d
mov rdx, qword [r15 + 0x80]
mov rcx, r15
movss dword [rsp + 0x28], xmm13
mov dword [rsp + 0x20], 1
call fcn.14002a700
mov r8, qword [0x1402bfd40]
xor r12d, r12d
mov dword [r15 + 0x78], r12d
jmp 0x14005b5af
xor r12d, r12d
cmp byte [0x1402bfdba], 0
movss xmm3, dword [r13 + 0x3820]
mov rax, qword [r8 + 0x3ef8]
movaps xmm0, xmm3
movss xmm2, dword [r13 + 0x381c]
addss xmm0, dword [0x140167db4]
addss xmm2, dword [0x140167dd4]
mov byte [rax + 0xb8], 1
mov rax, qword [r8 + 0x3ef8]
addss xmm3, xmm0
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
jne 0x14005c28b
call fcn.1400170f0
mov rcx, qword [0x1402bfd40]
lea r15, [0x1401665b8]
mov rdx, r15
mov qword [rbp + 0x2e8], 0
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rcx, qword [rcx + 0x3ef8]
call fcn.140007680
mov edx, eax
mov dword [rsp + 0x20], 0x10000
xor r9d, r9d
lea r8, [rbp + 0x2e8]
mov rcx, r15
call fcn.14000c260
movss xmm8, dword [0x140167dec]
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x38], r12
lea r8, [0x1402bfdc0]
movaps xmm0, xmm8
mov qword [rsp + 0x30], r12
subss xmm0, dword [r13 + 0x37d8]
mov dword [rsp + 0x28], r12d
lea rdx, str.Username
mov r9d, 0x40
mov dword [rbp + 0xb4], 0x42200000
lea rcx, str.Username01
mov qword [rsp + 0x20], rax
movss dword [rbp + 0xb0], xmm0
call fcn.140041d90
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0xb8]
movaps xmm0, xmm8
mov qword [rsp + 0x30], r12
subss xmm0, dword [r13 + 0x37d8]
mov dword [rsp + 0x28], r12d
lea r8, [0x1402bfe40]
mov r9d, 0x40
mov dword [rbp + 0xbc], 0x42200000
lea rdx, str.Password
mov qword [rsp + 0x20], rax
lea rcx, str.Password01
movss dword [rbp + 0xb8], xmm0
call fcn.140041d90
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0xc0]
movaps xmm0, xmm8
mov qword [rsp + 0x30], r12
subss xmm0, dword [r13 + 0x37d8]
mov dword [rsp + 0x28], r12d
lea r8, [0x1402bfe80]
mov r9d, 0x40
mov dword [rbp + 0xc4], 0x42200000
lea rdx, [0x140166f14]
mov qword [rsp + 0x20], rax
lea rcx, str.Key01
movss dword [rbp + 0xc0], xmm0
call fcn.140041d90
lea rdx, [rbp + 0xc8]
mov dword [rbp + 0xc8], 0x43fa0000
lea rcx, str.Login
mov dword [rbp + 0xcc], 0x42200000
call fcn.14003ba80
test al, al
je 0x14005bc24
lea rdx, [0x1402bfe40]
lea rcx, [rbp + 0x500]
call fcn.140049810
lea rdx, [0x1402bfdc0]
mov r15, rax
lea rcx, [rbp + 0x2f0]
call fcn.140049810
mov r8, r15
lea rcx, [0x1402c0080]
mov rdx, rax
call fcn.14006c630
cmp byte [0x1402c0298], 0
je 0x14005bbff
xorps xmm0, xmm0
mov qword [rbp + 0x68], r12
mov ecx, 0x50
mov qword [rbp + 0x70], r12
movups xmmword [rbp + 0x58], xmm0
call fcn.140129754
movaps xmm0, xmmword [str.https:__github.com_Natcho33_WELCOM_TO_PANNEL_NT_raw_refs_heads_main_WELCOM.wav]
mov rcx, rax
mov qword [rbp + 0x58], rax
xor r9d, r9d
mov qword [rbp + 0x68], Ordinal_79
xor r8d, r8d
mov qword [rbp + 0x70], reloc.WLDAP32.dll_Ordinal_79
mov edx, 1
movups xmmword [rax], xmm0
mov dword [rsp + 0x20], r12d
movaps xmm1, xmmword [0x140166f40]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140166f50]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140166f60]
movups xmmword [rax + 0x30], xmm1
movsd xmm0, qword [0x140166f70]
movsd qword [rax + 0x40], xmm0
xorps xmm0, xmm0
mov eax, dword [0x140166f78]
mov dword [rcx + 0x48], eax
movzx eax, word [0x140166f7c]
mov word [rcx + 0x4c], ax
mov byte [rcx + 0x4e], 0
lea rcx, str.Download_File
movzx eax, word [0x140166f88]
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], 0xa
movsd xmm0, qword [str.WELCOM.wav]
movsd qword [rbp + 0x38], xmm0
mov qword [rbp + 0x50], reloc.WS2_32.dll_ntohs
mov word [rbp + 0x40], ax
mov byte [rbp + 0x42], 0
call qword [sym.imp.WININET.dll_InternetOpenA]
mov qword [rbp - 0x80], rax
mov r12, rax
test rax, rax
je 0x14005b937
cmp qword [rbp + 0x70], 0xf
lea rdx, [rbp + 0x58]
mov qword [rsp + 0x28], 0
mov rcx, rax
cmova rdx, qword [rbp + 0x58]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0x80000000
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r15, rax
test rax, rax
jne 0x14005b9ae
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14005fc30
lea rdx, [0x14005fbf0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r15d, 1
lea r9, str.Logged_In__Welcome
mov edx, r15d
lea rcx, [rbp + 0x590]
mov r8d, 0xfa0
call fcn.14004e0b0
mov rax, qword [0x1402bef58]
cmp rax, qword [0x1402bef60]
je 0x14005ba7b
mov r8d, 0x2010
lea rdx, [rbp + 0x590]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1402bef58], 0x2010
jmp 0x14005ba8a
cmp qword [rbp + 0x50], 0xf
lea rcx, [rbp + 0x38]
lea rdx, [0x140166538]
cmova rcx, qword [rbp + 0x38]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r12, rax
mov rcx, r15
test rax, rax
jne 0x14005b9e3
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp - 0x80]
jmp 0x14005b931
lea r9, [rbp - 0x68]
mov r8d, 0x1000
lea rdx, [rbp + 0x590]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14005ba45
mov r14d, 1
mov eax, dword [rbp - 0x68]
test eax, eax
je 0x14005ba3f
mov r8d, eax
lea rcx, [rbp + 0x590]
mov r9, r12
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
lea r9, [rbp - 0x68]
mov r8d, 0x1000
lea rdx, [rbp + 0x590]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x14005ba04
movzx r14d, byte [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor edx, edx
lea rcx, str.WELCOM.wav
mov r8d, 0x20001
call qword [sym.imp.WINMM.dll_PlaySoundA]
jmp 0x14005b953
lea r8, [rbp + 0x590]
mov rdx, rax
call fcn.1400602d0
xorps xmm0, xmm0
mov byte [0x1402bfdba], r15b
xor r12d, r12d
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], r12
call fcn.140129754
movups xmm0, xmmword [str.https:__discord.gg_VeVDBmDqBq]
mov qword [rbp + 0x18], rax
lea r8, [rbp + 0x18]
mov qword [rbp + 0x30], Ordinal_32
mov rdx, rax
mov qword [rbp + 0x28], Ordinal_32
movups xmmword [rax], xmm0
mov dword [rsp + 0x28], r15d
movsd xmm0, qword [0x140166fb8]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x140166fc0]
mov dword [rax + 0x18], ecx
movzx eax, byte [0x140166fc4]
mov byte [rdx + 0x1c], al
mov byte [rdx + 0x1d], r12b
lea rdx, str.open
cmp qword [rbp + 0x30], 0xf
mov qword [rsp + 0x20], r12
cmova r8, qword [rbp + 0x18]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x14005bb57
mov rcx, qword [rbp + 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bb52
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f385
call fcn.140129aa8
mov rdx, qword [rbp + 0x50]
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x18], r12b
cmp rdx, 0xf
jbe 0x14005bba2
mov rcx, qword [rbp + 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bb9d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f38c
call fcn.140129aa8
mov rdx, qword [rbp + 0x70]
mov qword [rbp + 0x48], r12
mov qword [rbp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x38], r12b
cmp rdx, 0xf
jbe 0x14005bbed
mov rcx, qword [rbp + 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005bbe8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f38c
call fcn.140129aa8
mov qword [rbp + 0x68], r12
mov qword [rbp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x58], r12b
jmp 0x14005bc24
cmp qword [0x1402c02b8], 0xf
lea rdx, [0x1402c02a0]
cmova rdx, qword [0x1402c02a0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r15, qword [0x1402bfd40]
mov rax, qword [r15 + 0x3ef8]
cmp qword [rax + 0x1a8], 0
movss xmm7, dword [rax + 0x254]
movss xmm0, dword [rax + 0x20]
movss xmm6, dword [rax + 0x250]
subss xmm7, dword [rax + 0x24]
subss xmm6, xmm0
jne 0x14005bc64
cmp qword [r15 + 0x4b38], 0
je 0x14005bc70
movss xmm6, dword [rax + 0x220]
subss xmm6, xmm0
cmp dword [r15 + 0x48c8], 0
jg 0x14005bc94
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0b4c]
mov r10, rax
movss xmm0, dword [0x1402c0b48]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x3f4], xmm1
movss xmm1, dword [0x1402c0b54]
movss dword [rbp + 0x3f0], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x3f0]
movss xmm0, dword [0x1402c0b50]
movss dword [rbp + 0x3f8], xmm0
movss dword [rbp + 0x3fc], xmm1
call fcn.140003e30
movaps xmm0, xmm10
mov dword [rsp + 0x28], r12d
addss xmm0, xmm6
movaps xmm1, xmm11
addss xmm1, xmm7
mov r9d, eax
lea r8, [rbp + 0xd0]
mov rcx, r10
lea rdx, [rsp + 0x70]
movss dword [rbp + 0xd0], xmm0
movss xmm0, dword [0x140167d04]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0xd4], xmm1
call fcn.14002cc50
movss xmm1, dword [0x1402c0abc]
lea rcx, [rbp + 0x400]
movss xmm0, dword [0x1402c0ab8]
mov r8, qword [0x1402bfd40]
movss dword [rbp + 0x404], xmm1
movss xmm1, dword [0x1402c0ac4]
movss dword [rbp + 0x400], xmm0
mulss xmm1, dword [r8 + 0x37d0]
movss xmm0, dword [0x1402c0ac0]
movss dword [rbp + 0x408], xmm0
movss dword [rbp + 0x40c], xmm1
call fcn.140003e30
movss xmm0, dword [0x140167e34]
lea rdx, [rbp - 0x30]
movss xmm3, dword [0x140167e20]
mov r15d, eax
movss xmm2, dword [r8 + 0x3c20]
lea rax, [0x1401588ea]
mov rcx, qword [r8 + 0x3c18]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.140035b60
movss xmm0, dword [rbp - 0x30]
lea r8, [0x1401588ea]
addss xmm0, dword [0x140167c7c]
movss xmm2, dword [r13 + 0x381c]
addss xmm2, dword [0x140167e14]
mov rcx, qword [0x1402bfd50]
mov dword [rsp + 0x20], r15d
cvttss2si eax, xmm0
movss xmm0, dword [r13 + 0x3820]
movaps xmm3, xmm0
addss xmm3, dword [0x140167e0c]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm3, xmm0
subss xmm2, xmm1
movss dword [rbp - 0x30], xmm1
movss xmm1, dword [0x140167d40]
subss xmm3, dword [rbp - 0x2c]
mulss xmm2, xmm12
addss xmm10, xmm2
mulss xmm3, xmm12
addss xmm11, xmm3
unpcklps xmm10, xmm11
movq r9, xmm10
call fcn.14003a5d0
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14005be9c
cmp byte [0x1402c06b0], 0
sete byte [0x1402c06b0]
cmp qword [0x1402bfd40], 0
jne 0x14005bec0
mov r8d, 0xba2
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp + 0xd8]
mov dword [rbp + 0xd8], 0x43fa0000
lea rcx, str.Register
mov dword [rbp + 0xdc], 0x42200000
call fcn.14003ba80
test al, al
je 0x14005c274
lea rdx, [0x1402bfe80]
lea rcx, [rbp + 0x500]
call fcn.140049810
lea rdx, [0x1402bfe40]
mov r12, rax
lea rcx, [rbp + 0x2f0]
call fcn.140049810
lea rdx, [0x1402bfdc0]
mov r15, rax
lea rcx, [rbp + 0x420]
call fcn.140049810
mov r9, r12
lea rcx, [0x1402c0080]
mov r8, r15
mov rdx, rax
call fcn.14006e970
cmp byte [0x1402c0298], 0
je 0x14005c24c
xorps xmm0, xmm0
xor r15d, r15d
mov ecx, 0x50
mov qword [rbp - 0x50], r15
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x48], r15
call fcn.140129754
movaps xmm0, xmmword [str.https:__github.com_Natcho33_WELCOM_TO_PANNEL_NT_raw_refs_heads_main_WELCOM.wav]
mov rcx, rax
mov qword [rbp - 0x60], rax
xor r9d, r9d
mov qword [rbp - 0x50], Ordinal_79
xor r8d, r8d
mov qword [rbp - 0x48], reloc.WLDAP32.dll_Ordinal_79
mov edx, 1
movups xmmword [rax], xmm0
mov dword [rsp + 0x20], r15d
movaps xmm1, xmmword [0x140166f40]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140166f50]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140166f60]
movups xmmword [rax + 0x30], xmm1
movsd xmm0, qword [0x140166f70]
movsd qword [rax + 0x40], xmm0
xorps xmm0, xmm0
mov eax, dword [0x140166f78]
mov dword [rcx + 0x48], eax
movzx eax, word [0x140166f7c]
mov word [rcx + 0x4c], ax
mov byte [rcx + 0x4e], r15b
lea rcx, str.Download_File
movzx eax, word [0x140166f88]
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], 0xa
movsd xmm0, qword [str.WELCOM.wav]
movsd qword [rbp - 8], xmm0
mov qword [rbp + 0x10], reloc.WS2_32.dll_ntohs
mov word [rbp], ax
mov byte [rbp + 2], r15b
call qword [sym.imp.WININET.dll_InternetOpenA]
mov qword [rsp + 0x70], rax
mov r12, rax
test rax, rax
je 0x14005c06b
cmp qword [rbp - 0x48], 0xf
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x28], r15
mov rcx, rax
cmova rdx, qword [rbp - 0x60]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0x80000000
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov r15, rax
test rax, rax
jne 0x14005c0de
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14005fc30
lea rdx, [0x14005fbf0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r9, str.Logged_In__Welcome
mov edx, 1
mov r8d, 0xfa0
lea rcx, [rbp + 0x590]
call fcn.14004e0b0
mov rax, qword [0x1402bef58]
cmp rax, qword [0x1402bef60]
je 0x14005c1ab
mov r8d, 0x2010
lea rdx, [rbp + 0x590]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1402bef58], 0x2010
jmp 0x14005c1ba
cmp qword [rbp + 0x10], 0xf
lea rcx, [rbp - 8]
lea rdx, [0x140166538]
cmova rcx, qword [rbp - 8]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r12, rax
mov rcx, r15
test rax, rax
jne 0x14005c114
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x70]
jmp 0x14005c065
lea r9, [rbp - 0x64]
mov r8d, 0x1000
lea rdx, [rbp + 0x590]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x14005c174
mov ebx, 1
mov eax, dword [rbp - 0x64]
test eax, eax
je 0x14005c16f
mov r8d, eax
lea rcx, [rbp + 0x590]
mov r9, r12
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
lea r9, [rbp - 0x64]
mov r8d, 0x1000
lea rdx, [rbp + 0x590]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x14005c134
movzx ebx, byte [rsp + 0x60]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor edx, edx
lea rcx, str.WELCOM.wav
mov r8d, 0x20001
call qword [sym.imp.WINMM.dll_PlaySoundA]
jmp 0x14005c087
lea r8, [rbp + 0x590]
mov rdx, rax
call fcn.1400602d0
mov rdx, qword [rbp + 0x10]
mov byte [0x1402bfdba], 1
cmp rdx, 0xf
jbe 0x14005c1fc
mov rcx, qword [rbp - 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c1f7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f393
call fcn.140129aa8
mov rdx, qword [rbp - 0x48]
xor r12d, r12d
mov qword [rbp + 8], r12
mov qword [rbp + 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 8], r12b
cmp rdx, 0xf
jbe 0x14005c274
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c245
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f393
call fcn.140129aa8
jmp 0x14005c274
cmp qword [0x1402c02b8], 0xf
lea rdx, [0x1402c02a0]
cmova rdx, qword [0x1402c02a0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor r12d, r12d
call fcn.14000c600
call fcn.140017240
cmp byte [0x1402bfdba], 0
je 0x14005ec6e
mov r15, qword [rbp + 0x260]
lea rdx, [rbp - 0x18]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1402bfd40]
mov rax, qword [rcx + 0x3ef8]
movss xmm2, dword [rax + 0x20]
ucomiss xmm2, xmm15
jp 0x14005c2c7
jne 0x14005c2c7
movss xmm0, dword [rax + 0x24]
ucomiss xmm0, xmm15
jp 0x14005c2c7
je 0x14005c337
movd xmm0, dword [rbp - 0x14]
mov r9d, 0x3c0
movd xmm1, dword [rbp - 0x18]
mov rcx, r15
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x262
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x24]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rax, qword [0x1402bfd40]
lea rdx, [rbp + 0xe0]
xor r8d, r8d
mov qword [rbp + 0xe0], 0
mov rcx, qword [rax + 0x3ef8]
call fcn.140013130
mov rcx, qword [0x1402bfd40]
mov rax, qword [rcx + 0x3ef8]
lea rdx, str.__________________________________________________Dev:_NATCHO_CHEAT
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
lea rcx, [rsp + 0x70]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm0, dword [0x140167df8]
addss xmm1, dword [0x140167df4]
movss dword [rax + 0x100], xmm0
movdqa xmm0, xmmword [0x140168000]
movups xmmword [rsp + 0x70], xmm0
movss dword [rax + 0x104], xmm1
call fcn.14003a550
mov r15, qword [0x1402bfd40]
mov rax, qword [r15 + 0x3ef8]
cmp qword [rax + 0x1a8], 0
movsd xmm0, qword [rax + 0x20]
movss xmm13, dword [rax + 0x254]
movss xmm9, dword [rax + 0x250]
subss xmm13, dword [rax + 0x24]
movsd qword [rsp + 0x70], xmm0
movss xmm0, dword [rax + 0x20]
subss xmm9, xmm0
jne 0x14005c3fa
cmp qword [r15 + 0x4b38], 0
je 0x14005c408
movss xmm9, dword [rax + 0x220]
subss xmm9, xmm0
cmp dword [r15 + 0x48c8], 0
jg 0x14005c42c
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0b4c]
mov r10, rax
movss xmm0, dword [0x1402c0b48]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x414], xmm1
movss xmm1, dword [0x1402c0b54]
movss dword [rbp + 0x410], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x410]
movss xmm0, dword [0x1402c0b50]
movss dword [rbp + 0x418], xmm0
movss dword [rbp + 0x41c], xmm1
call fcn.140003e30
movss xmm0, dword [0x140167d04]
lea r8, [rbp + 0xe8]
movss xmm7, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
movss xmm10, dword [rsp + 0x70]
movaps xmm15, xmm13
movaps xmm14, xmm9
mov dword [rsp + 0x28], r12d
addss xmm15, xmm7
movss dword [rsp + 0x20], xmm0
addss xmm14, xmm10
mov r9d, eax
mov rcx, r10
movss dword [rbp + 0xec], xmm15
movss dword [rbp + 0xe8], xmm14
call fcn.14002cc50
mov r15, qword [0x1402bfd40]
lea rcx, [rbp + 0x440]
mov rax, qword [r15 + 0x3ef8]
movsd xmm1, qword [rax + 0x28]
movsd xmm8, qword [rax + 0x20]
movaps xmm0, xmm1
movss xmm11, dword [rax + 0x20]
movaps xmm6, xmm8
movss xmm12, dword [rax + 0x24]
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x80], xmm8
addss xmm8, xmm1
movsd qword [rbp - 0x80], xmm1
movss xmm1, dword [0x1402c0abc]
movss dword [rbp + 0x444], xmm1
movss xmm1, dword [0x1402c0ac4]
mulss xmm1, dword [r15 + 0x37d0]
shufps xmm6, xmm6, 0x55
addss xmm6, xmm0
movss xmm0, dword [0x1402c0ab8]
movss dword [rbp + 0x440], xmm0
movss xmm0, dword [0x1402c0ac0]
movss dword [rbp + 0x44c], xmm1
movss dword [rbp + 0x448], xmm0
call fcn.140003e30
mov rcx, qword [r15 + 0x3ef8]
mov dword [rbp - 0x80], eax
mov byte [rcx + 0xb8], 1
mov rcx, qword [r15 + 0x3ef8]
mov r12, qword [rcx + 0x298]
test eax, 0xff000000
je 0x14005c6b3
test byte [r12 + 0x30], 1
mov rcx, r12
movss xmm0, dword [0x140167c50]
movss xmm3, dword [0x140167cd8]
addss xmm12, xmm0
addss xmm11, xmm0
mov dword [rsp + 0x20], 0xf0
je 0x14005c62d
subss xmm6, xmm0
movss dword [rbp + 0xf8], xmm11
subss xmm8, xmm0
movss dword [rbp + 0xfc], xmm12
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0xf8]
movss dword [rbp + 0xf4], xmm6
movss dword [rbp + 0xf0], xmm8
jmp 0x14005c66f
subss xmm6, dword [0x140167c4c]
subss xmm8, dword [0x140167c4c]
movss dword [rbp + 0x108], xmm11
lea r8, [rbp + 0x100]
movss dword [rbp + 0x10c], xmm12
lea rdx, [rbp + 0x108]
movss dword [rbp + 0x104], xmm6
movss dword [rbp + 0x100], xmm8
call fcn.14002c5a0
movss xmm0, dword [0x140167cd0]
mov rcx, r12
mov r9d, dword [rbp - 0x80]
mov r8d, dword [r12 + 0x78]
mov rdx, qword [r12 + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
call fcn.14002a700
mov r15, qword [0x1402bfd40]
mov dword [r12 + 0x78], 0
movss xmm0, dword [r13 + 0x3820]
mov rax, qword [r15 + 0x3ef8]
movaps xmm3, xmm0
movss xmm2, dword [r13 + 0x381c]
addss xmm3, dword [0x140167db4]
addss xmm2, dword [0x140167dd4]
mov byte [rax + 0xb8], 1
mov rax, qword [r15 + 0x3ef8]
addss xmm3, xmm0
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], 1
addss xmm1, xmm3
addss xmm0, xmm2
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
cmp dword [r15 + 0x48c8], 0
jg 0x14005c74e
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0b4c]
mov r10, rax
movss xmm0, dword [0x1402c0b48]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x314], xmm1
movss xmm1, dword [0x1402c0b54]
movss dword [rbp + 0x310], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x310]
movss xmm0, dword [0x1402c0b50]
movss dword [rbp + 0x318], xmm0
movss dword [rbp + 0x31c], xmm1
call fcn.140003e30
movss xmm0, dword [0x140167d04]
lea r8, [rbp + 0x110]
xor r12d, r12d
movss dword [rbp + 0x110], xmm14
mov dword [rsp + 0x28], r12d
lea rdx, [rsp + 0x70]
mov r9d, eax
movss dword [rsp + 0x20], xmm0
mov rcx, r10
movss dword [rbp + 0x114], xmm15
call fcn.14002cc50
mov r15, qword [0x1402bfd40]
cmp dword [r15 + 0x48c8], r12d
jg 0x14005c82d
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0b5c]
mov r10, rax
movss xmm0, dword [0x1402c0b58]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x324], xmm1
movss xmm1, dword [0x1402c0b64]
movss dword [rbp + 0x320], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x320]
movss xmm0, dword [0x1402c0b60]
movss dword [rbp + 0x328], xmm0
movss dword [rbp + 0x32c], xmm1
call fcn.140003e30
movss xmm1, dword [r13 + 0x3820]
lea r8, [rbp + 0x118]
movss xmm11, dword [0x140167d78]
lea rdx, [rbp + 0x120]
movss xmm14, dword [0x140167dbc]
movaps xmm0, xmm1
addss xmm0, xmm11
mov dword [rsp + 0x28], r12d
movaps xmm6, xmm10
addss xmm1, xmm7
addss xmm6, xmm14
mov r9d, eax
mov rcx, r10
addss xmm0, xmm7
movss dword [rbp + 0x124], xmm1
movss dword [rbp + 0x118], xmm6
movss dword [rbp + 0x11c], xmm0
movaps xmm0, xmm10
addss xmm0, dword [r13 + 0x381c]
movss dword [rbp + 0x120], xmm0
movss xmm0, dword [0x140167d00]
movss dword [rsp + 0x20], xmm0
call fcn.14002cc50
mov r15, qword [0x1402bfd40]
cmp dword [r15 + 0x48c8], r12d
jg 0x14005c95a
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0acc]
mov r10, rax
movss xmm0, dword [0x1402c0ac8]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x334], xmm1
movss xmm1, dword [0x1402c0ad4]
movss dword [rbp + 0x330], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x330]
movss xmm0, dword [0x1402c0ad0]
movss dword [rbp + 0x338], xmm0
movss dword [rbp + 0x33c], xmm1
call fcn.140003e30
movss xmm1, dword [r13 + 0x3820]
lea r8, [rbp + 0x128]
movss xmm12, dword [0x140167c84]
lea rdx, [rbp + 0x130]
movaps xmm0, xmm1
movss dword [rsp + 0x30], xmm12
addss xmm0, xmm11
mov dword [rsp + 0x28], r12d
addss xmm1, xmm7
movss dword [rbp + 0x128], xmm6
mov r9d, eax
mov rcx, r10
addss xmm0, xmm7
movss dword [rbp + 0x134], xmm1
movss dword [rbp + 0x12c], xmm0
movaps xmm0, xmm10
addss xmm0, dword [r13 + 0x381c]
movss dword [rbp + 0x130], xmm0
movss xmm0, dword [0x140167d00]
movss dword [rsp + 0x20], xmm0
call fcn.14002cb40
mov r15, qword [0x1402bfd40]
cmp dword [r15 + 0x48c8], r12d
jg 0x14005ca7c
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0b5c]
mov r10, rax
movss xmm0, dword [0x1402c0b58]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x344], xmm1
movss xmm1, dword [0x1402c0b64]
movss dword [rbp + 0x340], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x340]
movss xmm0, dword [0x1402c0b60]
movss dword [rbp + 0x348], xmm0
movss dword [rbp + 0x34c], xmm1
call fcn.140003e30
movss xmm2, dword [r13 + 0x3820]
lea r8, [rbp + 0x138]
movaps xmm0, xmm13
mov dword [rsp + 0x28], r12d
subss xmm0, xmm2
movss dword [rbp + 0x138], xmm6
movaps xmm1, xmm2
lea rdx, [rbp + 0x140]
movaps xmm8, xmm10
addss xmm1, xmm11
xorps xmm15, xmm15
mov r9d, eax
addss xmm8, xmm15
mov rcx, r10
addss xmm0, xmm7
addss xmm1, xmm7
movss dword [rbp + 0x13c], xmm0
movaps xmm0, xmm8
addss xmm0, dword [r13 + 0x381c]
addss xmm2, xmm1
movss dword [rbp + 0x140], xmm0
movss xmm0, dword [0x140167d00]
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x144], xmm2
call fcn.14002cc50
mov r15, qword [0x1402bfd40]
cmp dword [r15 + 0x48c8], r12d
jg 0x14005cba7
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0acc]
mov r10, rax
movss xmm0, dword [0x1402c0ac8]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x354], xmm1
movss xmm1, dword [0x1402c0ad4]
movss dword [rbp + 0x350], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x350]
movss xmm0, dword [0x1402c0ad0]
movss dword [rbp + 0x358], xmm0
movss dword [rbp + 0x35c], xmm1
call fcn.140003e30
movss xmm2, dword [r13 + 0x3820]
lea r8, [rbp + 0x148]
addss xmm8, dword [r13 + 0x381c]
movaps xmm0, xmm13
movss dword [rsp + 0x30], xmm12
subss xmm0, xmm2
mov dword [rsp + 0x28], r12d
movaps xmm1, xmm2
movss dword [rbp + 0x148], xmm6
addss xmm1, xmm11
mov r9d, eax
lea rdx, [rbp + 0x150]
movss dword [rbp + 0x150], xmm8
mov rcx, r10
addss xmm0, xmm7
addss xmm1, xmm7
movss dword [rbp + 0x14c], xmm0
movss xmm0, dword [0x140167d00]
addss xmm1, xmm2
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x154], xmm1
call fcn.14002cb40
mov r15, qword [0x1402bfd40]
cmp dword [r15 + 0x48c8], r12d
jg 0x14005ccc9
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0b5c]
mov r10, rax
movss xmm0, dword [0x1402c0b58]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x364], xmm1
movss xmm1, dword [0x1402c0b64]
movss dword [rbp + 0x360], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x360]
movss xmm0, dword [0x1402c0b60]
movss dword [rbp + 0x368], xmm0
movss dword [rbp + 0x36c], xmm1
call fcn.140003e30
movss xmm3, dword [r13 + 0x381c]
lea r8, [rbp + 0x158]
movss xmm4, dword [r13 + 0x3820]
addss xmm6, xmm3
movaps xmm0, xmm3
mov dword [rsp + 0x28], r12d
addss xmm0, xmm3
movaps xmm8, xmm7
movaps xmm1, xmm9
addss xmm8, xmm15
movaps xmm2, xmm4
lea rdx, [rbp + 0x160]
addss xmm2, xmm11
movss dword [rbp + 0x160], xmm6
mov r9d, eax
mov rcx, r10
subss xmm1, xmm0
movaps xmm0, xmm8
addss xmm0, xmm4
addss xmm2, xmm7
subss xmm1, xmm11
movss dword [rbp + 0x164], xmm0
movss xmm0, dword [0x140167d00]
movss dword [rbp + 0x15c], xmm2
addss xmm1, xmm10
movss dword [rsp + 0x20], xmm0
movss dword [rbp + 0x158], xmm1
call fcn.14002cc50
mov r15, qword [0x1402bfd40]
cmp dword [r15 + 0x48c8], r12d
jg 0x14005ce01
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0acc]
mov r10, rax
movss xmm0, dword [0x1402c0ac8]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x374], xmm1
movss xmm1, dword [0x1402c0ad4]
movss dword [rbp + 0x370], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x370]
movss xmm0, dword [0x1402c0ad0]
movss dword [rbp + 0x378], xmm0
movss dword [rbp + 0x37c], xmm1
call fcn.140003e30
movss xmm3, dword [r13 + 0x381c]
lea r8, [rbp + 0x168]
movss xmm4, dword [r13 + 0x3820]
lea rdx, [rbp + 0x170]
movaps xmm0, xmm3
movss dword [rsp + 0x30], xmm12
addss xmm0, xmm3
mov dword [rsp + 0x28], r12d
movaps xmm1, xmm9
movaps xmm2, xmm4
addss xmm2, xmm11
mov r9d, eax
mov rcx, r10
subss xmm1, xmm0
movaps xmm0, xmm8
addss xmm0, xmm4
addss xmm2, xmm7
subss xmm1, xmm11
movss dword [rbp + 0x174], xmm0
movss xmm0, dword [0x140167d00]
movss dword [rbp + 0x16c], xmm2
movss dword [rsp + 0x20], xmm0
addss xmm1, xmm10
movss dword [rbp + 0x168], xmm1
movaps xmm1, xmm10
addss xmm1, xmm14
addss xmm1, xmm3
movss dword [rbp + 0x170], xmm1
call fcn.14002cb40
mov r15, qword [0x1402bfd40]
cmp dword [r15 + 0x48c8], r12d
jg 0x14005cf40
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0b5c]
mov r10, rax
movss xmm0, dword [0x1402c0b58]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x384], xmm1
movss xmm1, dword [0x1402c0b64]
movss dword [rbp + 0x380], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x380]
movss xmm0, dword [0x1402c0b60]
movss dword [rbp + 0x388], xmm0
movss dword [rbp + 0x38c], xmm1
call fcn.140003e30
movss xmm2, dword [r13 + 0x381c]
lea r8, [rbp + 0x178]
movss xmm3, dword [r13 + 0x3820]
lea rdx, [rbp + 0x180]
movaps xmm0, xmm9
mov dword [rsp + 0x28], r12d
subss xmm0, xmm2
movaps xmm1, xmm3
addss xmm1, xmm11
mov r9d, eax
mov rcx, r10
addss xmm0, xmm10
addss xmm1, xmm7
movss dword [rbp + 0x178], xmm0
movaps xmm0, xmm2
movss dword [rbp + 0x17c], xmm1
addss xmm0, xmm2
movaps xmm1, xmm9
subss xmm1, xmm0
movaps xmm0, xmm8
addss xmm0, xmm3
subss xmm1, xmm11
movss dword [rbp + 0x184], xmm0
movss xmm0, dword [0x140167d00]
movss dword [rsp + 0x20], xmm0
addss xmm1, xmm10
addss xmm1, xmm2
movss dword [rbp + 0x180], xmm1
call fcn.14002cc50
mov r15, qword [0x1402bfd40]
cmp dword [r15 + 0x48c8], r12d
jg 0x14005d07c
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008090
movss xmm1, dword [0x1402c0acc]
mov r10, rax
movss xmm0, dword [0x1402c0ac8]
mov rcx, qword [0x1402bfd40]
movss dword [rbp + 0x394], xmm1
movss xmm1, dword [0x1402c0ad4]
movss dword [rbp + 0x390], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x390]
movss xmm0, dword [0x1402c0ad0]
movss dword [rbp + 0x398], xmm0
movss dword [rbp + 0x39c], xmm1
call fcn.140003e30
movss xmm2, dword [r13 + 0x381c]
lea r8, [rbp + 0x188]
movss xmm3, dword [r13 + 0x3820]
lea rdx, [rbp + 0x190]
movaps xmm0, xmm9
movss dword [rsp + 0x30], xmm12
subss xmm0, xmm2
mov dword [rsp + 0x28], r12d
movaps xmm1, xmm3
mov r9d, eax
addss xmm1, xmm11
mov rcx, r10
addss xmm0, xmm10
addss xmm1, xmm7
movss dword [rbp + 0x188], xmm0
movaps xmm0, xmm2
addss xmm0, xmm2
movss dword [rbp + 0x18c], xmm1
movaps xmm1, xmm9
subss xmm1, xmm0
movaps xmm0, xmm8
addss xmm0, xmm3
subss xmm1, xmm11
movss dword [rbp + 0x194], xmm0
movss xmm0, dword [0x140167d00]
movss dword [rsp + 0x20], xmm0
addss xmm1, xmm10
addss xmm1, xmm2
movss dword [rbp + 0x190], xmm1
call fcn.14002cb40
mov rcx, qword [0x1402bfd40]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
movss xmm1, dword [0x1402c0abc]
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [0x1402c0ab8]
movss dword [rbp + 0x3a4], xmm1
movss xmm1, dword [0x1402c0ac4]
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x3a0]
mov r10, qword [rax + 0x298]
movss dword [rbp + 0x3a0], xmm0
movss xmm0, dword [0x1402c0ac0]
movss dword [rbp + 0x3ac], xmm1
movss dword [rbp + 0x3a8], xmm0
call fcn.140003e30
movss xmm3, dword [r13 + 0x381c]
movaps xmm0, xmm9
movss xmm4, dword [0x140167d24]
subss xmm0, xmm3
movss xmm2, dword [r13 + 0x3820]
movaps xmm1, xmm2
mov dword [rbp + 0x198], 0x3f800000
addss xmm1, xmm11
mov dword [rbp + 0x19c], 0x3f800000
mov qword [rbp + 0x1a0], r12
addss xmm0, xmm10
addss xmm1, xmm7
subss xmm0, xmm4
subss xmm1, xmm4
movss dword [rbp + 0x1a8], xmm0
movaps xmm0, xmm3
movss dword [rbp + 0x1ac], xmm1
mov rdx, qword [0x1402bfd80]
addss xmm0, xmm3
mov dword [rsp + 0x30], eax
addss xmm8, xmm2
movaps xmm1, xmm9
lea rax, [rbp + 0x198]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x1a8]
lea rax, [rbp + 0x1a0]
mov rcx, r10
subss xmm1, xmm0
mov qword [rsp + 0x20], rax
addss xmm8, xmm4
lea r8, [rbp + 0x1b0]
subss xmm1, xmm11
movss dword [rbp + 0x1b4], xmm8
addss xmm1, xmm10
addss xmm3, xmm1
addss xmm3, xmm4
movss dword [rbp + 0x1b0], xmm3
call fcn.14002d230
movss xmm1, dword [0x1402c0abc]
lea rcx, [rbp + 0x3b0]
movss xmm0, dword [0x1402c0ab8]
mov r8, qword [0x1402bfd40]
movss dword [rbp + 0x3b4], xmm1
movss xmm1, dword [0x1402c0ac4]
movss dword [rbp + 0x3b0], xmm0
mulss xmm1, dword [r8 + 0x37d0]
movss xmm0, dword [0x1402c0ac0]
movss dword [rbp + 0x3b8], xmm0
movss dword [rbp + 0x3bc], xmm1
call fcn.140003e30
movss xmm6, dword [0x140167e34]
lea rdx, [rbp - 0x28]
movss xmm3, dword [0x140167e20]
mov r15d, eax
movss xmm2, dword [r8 + 0x3c20]
lea rax, [0x1401665b8]
mov rcx, qword [r8 + 0x3c18]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
call fcn.140035b60
movss xmm0, dword [rbp - 0x28]
lea r8, [0x1401665b8]
addss xmm0, dword [0x140167c7c]
movss xmm2, dword [r13 + 0x381c]
addss xmm2, dword [0x140167db0]
movss xmm12, dword [0x140167c50]
mov rcx, qword [0x1402bfd50]
cvttss2si eax, xmm0
mov dword [rsp + 0x20], r15d
movss xmm0, dword [r13 + 0x3820]
movaps xmm3, xmm0
addss xmm3, dword [0x140167d70]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm3, xmm0
subss xmm2, xmm1
movss dword [rbp - 0x28], xmm1
movss xmm1, dword [0x140167d40]
subss xmm3, dword [rbp - 0x24]
mulss xmm2, xmm12
addss xmm2, xmm10
mulss xmm3, xmm12
addss xmm3, xmm7
unpcklps xmm2, xmm3
movq r9, xmm2
call fcn.14003a5d0
movss xmm1, dword [0x1402c0abc]
lea rcx, [rbp + 0x3c0]
movss xmm0, dword [0x1402c0ab8]
mov r8, qword [0x1402bfd40]
movss dword [rbp + 0x3c4], xmm1
movss xmm1, dword [0x1402c0ac4]
movss dword [rbp + 0x3c0], xmm0
mulss xmm1, dword [r8 + 0x37d0]
movss xmm0, dword [0x1402c0ac0]
movss dword [rbp + 0x3c8], xmm0
movss dword [rbp + 0x3cc], xmm1
call fcn.140003e30
movss xmm3, dword [0x140167e20]
lea rdx, [rbp - 0x70]
movss xmm2, dword [r8 + 0x3c20]
mov r15d, eax
mov rcx, qword [r8 + 0x3c18]
lea rax, [0x1401665b8]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
call fcn.140035b60
movss xmm0, dword [rbp - 0x70]
lea r8, [0x1401665b8]
addss xmm0, dword [0x140167c7c]
movss xmm3, dword [r13 + 0x3820]
movss xmm2, dword [r13 + 0x381c]
addss xmm2, dword [0x140167db0]
mov rcx, qword [0x1402bfd50]
cvttss2si eax, xmm0
mov dword [rsp + 0x20], r15d
movaps xmm0, xmm3
addss xmm0, dword [0x140167d70]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm3, xmm0
subss xmm2, xmm1
movss dword [rbp - 0x70], xmm1
movss xmm1, dword [0x140167d40]
subss xmm3, dword [rbp - 0x6c]
mulss xmm2, xmm12
addss xmm2, xmm10
mulss xmm3, xmm12
addss xmm3, xmm7
unpcklps xmm2, xmm3
movq r9, xmm2
call fcn.14003a5d0
movss xmm3, dword [r13 + 0x3820]
movss xmm2, dword [r13 + 0x381c]
mov rcx, qword [0x1402bfd40]
addss xmm2, xmm2
movss xmm7, dword [0x140167cb0]
mulss xmm3, xmm7
mov rax, qword [rcx + 0x3ef8]
addss xmm3, xmm11
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], 1
addss xmm1, xmm3
addss xmm0, xmm2
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
call fcn.1400170f0
movss xmm1, dword [r13 + 0x381c]
lea r9, [rbp + 0x1b8]
cmp dword [0x1402c06b8], r12d
lea r8, str.AIMBOT
mov rdx, qword [0x1402bfd90]
movaps xmm0, xmm14
mulss xmm1, xmm7
sete cl
mov dword [rbp + 0x1bc], 0x420c0000
subss xmm0, xmm1
movss dword [rbp + 0x1b8], xmm0
call fcn.14003b0b0
test al, al
je 0x14005d615
mov eax, r12d
mov dword [0x1402c06b8], eax
jmp 0x14005d61b
mov eax, dword [0x1402c06b8]
movss xmm1, dword [r13 + 0x381c]
lea r9, [rbp + 0x1c0]
mov rdx, qword [0x1402bfda0]
lea r8, str.VISUAL
mulss xmm1, xmm7
movaps xmm0, xmm14
cmp eax, 1
mov dword [rbp + 0x1c4], 0x420c0000
sete cl
subss xmm0, xmm1
movss dword [rbp + 0x1c0], xmm0
call fcn.14003b0b0
test al, al
je 0x14005d673
mov eax, 1
mov dword [0x1402c06b8], eax
jmp 0x14005d679
mov eax, dword [0x1402c06b8]
movss xmm1, dword [r13 + 0x381c]
lea r9, [rbp + 0x1c8]
mov rdx, qword [0x1402bfda8]
lea r8, str.SETTINGS
mulss xmm1, xmm7
movaps xmm0, xmm14
cmp eax, 2
mov dword [rbp + 0x1cc], 0x420c0000
sete cl
subss xmm0, xmm1
movss dword [rbp + 0x1c8], xmm0
call fcn.14003b0b0
test al, al
je 0x14005d6ce
mov dword [0x1402c06b8], 2
call fcn.140017240
mov edx, dword [0x1402c06b8]
mov eax, dword [0x1402bfdb0]
movss xmm10, dword [0x140167c84]
cmp edx, eax
jne 0x14005d6f0
movaps xmm6, xmm10
mov rcx, qword [0x1402bfd40]
test rcx, rcx
jne 0x14005d729
mov r8d, 0x1031
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov edx, dword [0x1402c06b8]
mov eax, dword [0x1402bfdb0]
mov rcx, qword [0x1402bfd40]
movss xmm0, dword [rcx + 0x18]
movss xmm8, dword [0x140167cc0]
mulss xmm0, xmm8
mulss xmm0, xmm6
addss xmm0, dword [0x1402bfe04]
comiss xmm15, xmm0
jbe 0x14005d753
xorps xmm1, xmm1
jmp 0x14005d75b
movaps xmm1, xmm10
minss xmm1, xmm0
ucomiss xmm1, xmm15
movss dword [0x1402bfe04], xmm1
jp 0x14005d783
jne 0x14005d783
movss xmm0, dword [0x1402bfe10]
ucomiss xmm0, xmm15
jp 0x14005d783
jne 0x14005d783
mov eax, edx
mov dword [0x1402bfdb0], edx
test edx, edx
jne 0x14005df66
test eax, eax
jne 0x14005ec5c
movss xmm3, dword [r13 + 0x3820]
mov rax, qword [rcx + 0x3ef8]
movaps xmm0, xmm3
movss xmm2, dword [r13 + 0x381c]
addss xmm0, xmm11
addss xmm2, xmm14
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
addss xmm3, xmm0
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
mov byte [rax + 0x141], 1
addss xmm1, xmm3
addss xmm0, xmm2
movss dword [rax + 0x104], xmm1
movss dword [rax + 0x100], xmm0
call fcn.1400170f0
movss xmm0, dword [r13 + 0x3820]
lea rdx, [rbp + 0x1d0]
mov rcx, qword [0x1402bfd40]
movaps xmm2, xmm13
movss xmm1, dword [r13 + 0x381c]
movss xmm6, dword [0x140167d60]
mulss xmm0, xmm8
mov rax, qword [rcx + 0x3ef8]
mulss xmm1, xmm7
mov dword [rbp + 0x1d0], 0x41200000
addss xmm0, xmm11
mov dword [rbp + 0x1d4], 0x41200000
mov byte [rax + 0xb8], 1
mov r15, qword [rcx + 0x3ef8]
addss xmm1, xmm14
mov ecx, 2
subss xmm2, xmm0
movaps xmm0, xmm9
subss xmm0, xmm1
mulss xmm2, xmm12
mulss xmm0, xmm12
subss xmm2, xmm6
movss dword [rbp + 0x1d8], xmm0
movss dword [rbp + 0x1dc], xmm2
call fcn.1400047a0
lea rdx, str.External_Menu
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x1d8]
lea rcx, str.External_Menu
call fcn.14000ba90
mov r9b, 1
lea r8, [0x1402c06b4]
lea rdx, [0x1402c0344]
lea rcx, str.Aimbot_IA___External_Key
call fcn.140038cd0
mov ecx, dword [0x1402c0344]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r15d, 1
test r15b, al
je 0x14005da1b
cmp byte [0x1402bfdbb], r12b
jne 0x14005da14
cmp byte [0x1402bfe31], r12b
mov ecx, r15d
mov byte [0x1402bfdbb], r15b
sete al
mov byte [0x1402bfe31], al
test al, al
je 0x14005d9a0
call fcn.140129754
lea rcx, [rbp + 0x288]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140060510]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x280], rax
test rax, rax
je 0x14005f3a4
cmp dword [rbp + 0x288], r12d
je 0x14005f39a
movaps xmm0, xmmword [rbp + 0x280]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005f39a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x280], xmm0
jmp 0x14005da1b
call fcn.140129754
lea rcx, [rbp + 0x298]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140060510]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x290], rax
test rax, rax
je 0x14005f3c1
cmp dword [rbp + 0x298], r12d
je 0x14005f3b7
movaps xmm0, xmmword [rbp + 0x290]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005f3b7
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x290], xmm0
jmp 0x14005da1b
mov byte [0x1402bfdbb], r12b
mov r9b, 1
lea r8, [0x1402c06b4]
lea rdx, [0x1402c0348]
lea rcx, str.Scope_Traking___Traning_Key
call fcn.140038cd0
mov ecx, dword [0x1402c0348]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14005db66
cmp byte [0x1402bfe3b], r12b
jne 0x14005db5f
cmp byte [0x1402bfe33], r12b
mov rcx, r15
mov byte [0x1402bfe3b], 1
sete al
mov byte [0x1402bfe33], al
test al, al
je 0x14005daeb
call fcn.140129754
lea rcx, [rbp + 0x2a8]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140060540]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x2a0], rax
test rax, rax
je 0x14005f3de
cmp dword [rbp + 0x2a8], r12d
je 0x14005f3d4
movaps xmm0, xmmword [rbp + 0x2a0]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005f3d4
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2a0], xmm0
jmp 0x14005db66
call fcn.140129754
lea rcx, [rbp + 0x2b8]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140060540]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x2b0], rax
test rax, rax
je 0x14005f3fb
cmp dword [rbp + 0x2b8], r12d
je 0x14005f3f1
movaps xmm0, xmmword [rbp + 0x2b0]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005f3f1
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x2b0], xmm0
jmp 0x14005db66
mov byte [0x1402bfe3b], r12b
lea rdx, [0x1402bfe27]
lea rcx, str.AimBot_Body___Traning
call fcn.14003d340
mov byte [0x1402bfdb4], al
lea r9, [rsp + 0x70]
lea rax, [0x14015d7b4]
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], rax
lea r8, [0x1402bfe14]
lea rax, [rbp - 0x80]
mov dword [rbp - 0x80], 0xa
mov edx, 4
mov qword [rsp + 0x20], rax
lea rcx, str.Fake_Lag
mov dword [rsp + 0x70], r15d
call fcn.14003e4f0
mov r9b, 1
lea r8, [0x1402c06b4]
lea rdx, [0x1402bfe18]
lea rcx, str.Fake_Lag_Key
call fcn.140038cd0
call fcn.14000bf20
movss xmm3, dword [r13 + 0x3820]
lea rdx, [rbp + 0x1e0]
movss xmm2, dword [r13 + 0x381c]
movaps xmm0, xmm3
mov r15, qword [0x1402bfd40]
addss xmm2, xmm14
movss xmm10, dword [0x140167de4]
mov ecx, 2
addss xmm0, xmm10
mov dword [rbp + 0x1e0], 0x41200000
mov dword [rbp + 0x1e4], 0x41200000
mov rax, qword [r15 + 0x3ef8]
addss xmm3, xmm0
mov byte [rax + 0xb8], 1
mov rax, qword [r15 + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
movaps xmm0, xmm9
movss xmm1, dword [r13 + 0x381c]
mov rax, qword [r15 + 0x3ef8]
mulss xmm1, xmm7
addss xmm1, xmm14
subss xmm0, xmm1
movss xmm1, dword [r13 + 0x3820]
mulss xmm1, xmm8
mov byte [rax + 0xb8], 1
mov r15, qword [r15 + 0x3ef8]
mulss xmm0, xmm12
addss xmm1, xmm11
movss dword [rbp + 0x1e8], xmm0
movaps xmm0, xmm13
subss xmm0, xmm1
mulss xmm0, xmm12
subss xmm0, xmm6
movss dword [rbp + 0x1ec], xmm0
call fcn.1400047a0
lea rdx, str.EXPLOIT_HACKS_MENU
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x1e8]
lea rcx, str.EXPLOIT_HACKS_MENU
call fcn.14000ba90
lea rdx, [0x1402bfe25]
lea rcx, str.No_Recoil___Traning
call fcn.14003d340
lea rdx, [0x1402bfe1d]
mov byte [0x1402bfd6e], al
lea rcx, str.Vision___Traning
call fcn.14003d340
mov byte [0x1402bfd3a], al
lea rdx, [0x1402bfe35]
lea rcx, str.Glitch_Fire___External
call fcn.14003d340
lea rdx, [0x1402bfe1c]
mov byte [0x1402bfe3d], al
lea rcx, str.Fast_Reload___Traning
call fcn.14003d340
lea rdx, [0x1402bfe22]
mov byte [0x1402bfd39], al
lea rcx, str.Bypass_WallHack___LOBBY
call fcn.14003d340
lea rdx, [0x1402bfe30]
mov byte [0x1402bfd3f], al
lea rcx, str.Wall_Hack___Traning
call fcn.14003d340
mov byte [0x1402bfe38], al
call fcn.14000bf20
movss xmm3, dword [r13 + 0x3820]
lea rdx, [rbp + 0x1f0]
movss xmm2, dword [r13 + 0x381c]
movaps xmm0, xmm3
mov r15, qword [0x1402bfd40]
addss xmm0, xmm11
movss xmm15, dword [0x140167df0]
mov ecx, 2
addss xmm2, xmm15
mov dword [rbp + 0x1f0], 0x41200000
mov dword [rbp + 0x1f4], 0x41200000
mov rax, qword [r15 + 0x3ef8]
addss xmm3, xmm0
mov byte [rax + 0xb8], 1
mov rax, qword [r15 + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
movaps xmm0, xmm9
movss xmm1, dword [r13 + 0x381c]
mov rax, qword [r15 + 0x3ef8]
mulss xmm1, xmm7
addss xmm1, xmm14
subss xmm0, xmm1
movss xmm1, dword [r13 + 0x3820]
mulss xmm1, xmm8
mov byte [rax + 0xb8], 1
mov r15, qword [r15 + 0x3ef8]
mulss xmm0, xmm12
addss xmm1, xmm11
movss dword [rbp + 0x1f8], xmm0
movaps xmm0, xmm13
subss xmm0, xmm1
mulss xmm0, xmm12
subss xmm0, xmm6
movss dword [rbp + 0x1fc], xmm0
call fcn.1400047a0
lea rdx, str.Sniper_Menu
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x1f8]
lea rcx, str.Sniper_Menu
call fcn.14000ba90
lea rdx, [0x1402bfe21]
lea rcx, str.Sniper_Scope___Traning
call fcn.14003d340
lea rdx, [0x1402bfe2a]
mov byte [0x1402bfd3e], al
lea rcx, str.Ultra_Fast_Switch___Traning
call fcn.14003d340
lea rdx, [0x1402bfe20]
mov byte [0x1402bfdb7], al
lea rcx, str.M82B_Fast_Switch___Traning
call fcn.14003d340
lea rdx, [0x1402bfe29]
mov byte [0x1402bfd3d], al
lea rcx, str.Fix_Damage___Login
call fcn.14003d340
mov byte [0x1402bfdb6], al
call fcn.14000bf20
call fcn.140017240
mov edx, dword [0x1402c06b8]
mov eax, dword [0x1402bfdb0]
mov rcx, qword [0x1402bfd40]
jmp 0x14005df80
movss xmm6, dword [0x140167d60]
movss xmm10, dword [0x140167de4]
movss xmm15, dword [0x140167df0]
cmp edx, 1
jne 0x14005e13e
cmp eax, edx
jne 0x14005ec5c
movss xmm3, dword [r13 + 0x3820]
mov rax, qword [rcx + 0x3ef8]
movaps xmm0, xmm3
movss xmm2, dword [r13 + 0x381c]
addss xmm0, xmm11
addss xmm2, xmm14
mov byte [rax + 0xb8], dl
mov rax, qword [rcx + 0x3ef8]
addss xmm3, xmm0
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], dl
addss xmm1, xmm2
addss xmm3, xmm0
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm3
call fcn.1400170f0
movss xmm1, dword [r13 + 0x381c]
lea rdx, [rbp + 0x200]
mov rcx, qword [0x1402bfd40]
movaps xmm0, xmm9
mulss xmm1, xmm7
mov dword [rbp + 0x200], 0x41200000
mov dword [rbp + 0x204], 0x41200000
mov rax, qword [rcx + 0x3ef8]
addss xmm1, xmm14
subss xmm0, xmm1
movss xmm1, dword [r13 + 0x3820]
mulss xmm1, xmm8
mov byte [rax + 0xb8], 1
mov r15, qword [rcx + 0x3ef8]
mov ecx, 2
mulss xmm0, xmm12
addss xmm1, xmm11
movss dword [rbp + 0x208], xmm0
movaps xmm0, xmm13
subss xmm0, xmm1
mulss xmm0, xmm12
subss xmm0, xmm6
movss dword [rbp + 0x20c], xmm0
call fcn.1400047a0
lea rdx, str.CHAMS
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x208]
lea rcx, str.CHAMS
call fcn.14000ba90
lea rdx, [0x1402bfe2b]
lea rcx, str.Chams_Menu___Lobby
call fcn.14003d340
lea rdx, [0x1402bfe37]
mov byte [0x1402bfdb8], al
lea rcx, str.Chams_3D___Lobby
call fcn.14003d340
lea rdx, [0x1402bfe2d]
mov byte [0x1402bfe3f], al
lea rcx, str.Esp_Line___3D
call fcn.14003d340
lea rdx, [0x1402bfe2e]
mov byte [0x1402bfdbd], al
lea rcx, str.3D_Blue
call fcn.14003d340
mov byte [0x1402bfdbe], al
call fcn.14000bf20
call fcn.140017240
mov edx, dword [0x1402c06b8]
mov eax, dword [0x1402bfdb0]
mov rcx, qword [0x1402bfd40]
cmp edx, 2
jne 0x14005ec5c
cmp eax, edx
jne 0x14005ec5c
movss xmm3, dword [r13 + 0x3820]
mov rax, qword [rcx + 0x3ef8]
movaps xmm0, xmm3
movss xmm2, dword [r13 + 0x381c]
addss xmm0, xmm11
addss xmm2, xmm14
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
addss xmm3, xmm0
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.1400170f0
movss xmm1, dword [r13 + 0x381c]
lea rdx, [rbp + 0x210]
mov rcx, qword [0x1402bfd40]
movaps xmm0, xmm9
mulss xmm1, xmm7
mov dword [rbp + 0x210], 0x41200000
mov dword [rbp + 0x214], 0x41200000
mov rax, qword [rcx + 0x3ef8]
addss xmm1, xmm14
subss xmm0, xmm1
movss xmm1, dword [r13 + 0x3820]
mulss xmm1, xmm8
mov byte [rax + 0xb8], 1
mov r15, qword [rcx + 0x3ef8]
mov ecx, 2
mulss xmm0, xmm12
addss xmm1, xmm11
movss dword [rbp + 0x218], xmm0
movaps xmm0, xmm13
subss xmm0, xmm1
mulss xmm0, xmm12
subss xmm0, xmm6
movss dword [rbp + 0x21c], xmm0
call fcn.1400047a0
lea rdx, str.Settings
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x218]
lea rcx, str.Settings
call fcn.14000ba90
lea rdx, [0x1402bfe34]
lea rcx, str.Block__Unblock_Internet
call fcn.14003d340
lea rdx, [0x1402bfe2c]
mov byte [0x1402bfe3c], al
lea rcx, str.Reset_Guest___Login
call fcn.14003d340
mov r8d, 0x30120
mov byte [0x1402bfdb9], al
lea rdx, [0x1402bef40]
lea rcx, str.Color_Changer
call fcn.140045f50
call fcn.14000bf20
movss xmm3, dword [r13 + 0x3820]
movss xmm2, dword [r13 + 0x381c]
movaps xmm0, xmm3
mov r15, qword [0x1402bfd40]
addss xmm0, xmm11
addss xmm2, xmm15
mov rax, qword [r15 + 0x3ef8]
addss xmm3, xmm0
mov byte [rax + 0xb8], 1
mov rax, qword [r15 + 0x3ef8]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x24]
subss xmm0, dword [rax + 0x84]
subss xmm1, dword [rax + 0x88]
addss xmm2, xmm0
addss xmm3, xmm1
movss dword [rax + 0x100], xmm2
movss dword [rax + 0x104], xmm3
mov byte [rax + 0x141], 1
lea rdx, [rbp + 0x220]
movss xmm1, dword [r13 + 0x381c]
movaps xmm0, xmm9
mov rax, qword [r15 + 0x3ef8]
mov ecx, 2
mulss xmm1, xmm7
mov dword [rbp + 0x220], 0x41200000
mov dword [rbp + 0x224], 0x41200000
addss xmm1, xmm14
subss xmm0, xmm1
movss xmm1, dword [r13 + 0x3820]
mulss xmm1, xmm8
mov byte [rax + 0xb8], 1
mov r15, qword [r15 + 0x3ef8]
mulss xmm0, xmm12
addss xmm1, xmm11
movss dword [rbp + 0x228], xmm0
movaps xmm0, xmm13
subss xmm0, xmm1
mulss xmm0, xmm12
subss xmm0, xmm6
movss dword [rbp + 0x22c], xmm0
call fcn.1400047a0
lea rdx, str.Social_Links
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x228]
lea rcx, str.Social_Links
call fcn.14000ba90
lea rdx, [rbp + 0x230]
mov dword [rbp + 0x230], 0x43910000
lea rcx, str.YOUTUBE_CHANNEL
mov dword [rbp + 0x234], 0x420c0000
call fcn.14003ba80
mov r15d, 1
test al, al
je 0x14005e44a
mov dword [rsp + 0x28], r15d
lea r8, str.https:__www.youtube.com__natchox86
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdx, [rbp + 0x238]
mov dword [rbp + 0x238], 0x43910000
lea rcx, str.DISCORD_SERVER
mov dword [rbp + 0x23c], 0x420c0000
call fcn.14003ba80
test al, al
je 0x14005e498
mov dword [rsp + 0x28], r15d
lea r8, str.https:__discord.gg_VeVDBmDqBq
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdx, [rbp + 0x240]
mov dword [rbp + 0x240], 0x43910000
lea rcx, str.Download_Emulator
mov dword [rbp + 0x244], 0x420c0000
call fcn.14003ba80
test al, al
je 0x14005e4e6
mov dword [rsp + 0x28], r15d
lea r8, str.https:__www.mediafire.com_file_qgzwlnnuwmxetef_msi_e4v.4.240.15.6305.7z_file
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rdx, [rbp + 0x248]
mov dword [rbp + 0x248], 0x43910000
lea rcx, str.Download_Free_Fire
mov dword [rbp + 0x24c], 0x420c0000
call fcn.14003ba80
test al, al
je 0x14005e534
mov dword [rsp + 0x28], r15d
lea r8, str.https:__www.mediafire.com_file_gilkns0c1ui7s9y_FreeFire_x86_Amazon_ob46_by_td_amos.rar_file
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.14000bf20
movss xmm3, dword [r13 + 0x3820]
lea rdx, [rbp + 0x250]
movss xmm2, dword [r13 + 0x381c]
movaps xmm0, xmm3
mov r15, qword [0x1402bfd40]
addss xmm0, xmm10
addss xmm2, xmm14
mov dword [rbp + 0x250], 0x41200000
mov ecx, 2
mov dword [rbp + 0x254], 0x41200000
mov rax, qword [r15 + 0x3ef8]
addss xmm3, xmm0
mov byte [rax + 0xb8], 1
mov rax, qword [r15 + 0x3ef8]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm2, xmm0
addss xmm3, xmm1
movss dword [rax + 0x100], xmm2
movss dword [rax + 0x104], xmm3
movss xmm0, dword [r13 + 0x381c]
mov rax, qword [r15 + 0x3ef8]
mulss xmm0, xmm7
addss xmm0, xmm14
subss xmm9, xmm0
movss xmm0, dword [r13 + 0x3820]
mulss xmm0, xmm8
mov byte [rax + 0xb8], 1
mov r15, qword [r15 + 0x3ef8]
addss xmm0, xmm11
mulss xmm9, xmm12
movss dword [rbp + 0x258], xmm9
subss xmm13, xmm0
mulss xmm13, xmm12
subss xmm13, xmm6
movss dword [rbp + 0x25c], xmm13
call fcn.1400047a0
lea rdx, str.Account_Infos
mov rcx, r15
call fcn.140007680
mov edx, eax
lea r8, [rbp + 0x258]
lea rcx, str.Account_Infos
call fcn.14000ba90
mov rcx, qword [0x1402bfd40]
movabs r15, 0x7fffffffffffffff
movss xmm7, dword [0x140167d0c]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, dword [0x140167cd0]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov rax, r15
mov rcx, qword [0x1402c01d0]
sub rax, rcx
cmp rax, 0xa
jb 0x14005f415
cmp qword [0x1402c01d8], 0xf
lea rax, [0x1402c01c0]
mov qword [rsp + 0x30], rcx
lea r9, str.Username:
cmova rax, qword [0x1402c01c0]
lea r8, [0x1402c01c0]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x500]
movzx edx, dil
mov qword [rsp + 0x20], 0xa
call fcn.14004a480
cmp qword [rbp + 0x518], 0xf
lea rdx, [rbp + 0x500]
movdqa xmm6, xmmword [0x140168070]
lea rcx, [rsp + 0x70]
cmova rdx, qword [rbp + 0x500]
movups xmmword [rsp + 0x70], xmm6
call fcn.14003a550
mov rcx, qword [0x1402bfd40]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, dword [0x140167da0]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov rax, r15
mov rcx, qword [0x1402c0190]
sub rax, rcx
cmp rax, 0xa
jb 0x14005f415
cmp qword [0x1402c0198], 0xf
lea rax, [0x1402c0180]
mov qword [rsp + 0x30], rcx
lea r9, str.Versions:
cmova rax, qword [0x1402c0180]
lea r8, [0x1402c0180]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x2f0]
movzx edx, sil
mov qword [rsp + 0x20], 0xa
call fcn.14004a480
cmp qword [rbp + 0x308], 0xf
lea rdx, [rbp + 0x2f0]
lea rcx, [rsp + 0x70]
cmova rdx, qword [rbp + 0x2f0]
movups xmmword [rsp + 0x70], xmm6
call fcn.14003a550
mov rcx, qword [0x1402bfd40]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, dword [0x140167d8c]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov rax, r15
mov rcx, qword [0x1402c0210]
sub rax, rcx
cmp rax, 6
jb 0x14005f415
cmp qword [0x1402c0218], 0xf
lea rax, [0x1402c0200]
mov qword [rsp + 0x30], rcx
lea r9, str.HWID:
cmova rax, qword [0x1402c0200]
lea r8, [0x1402c0200]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x420]
movzx edx, r14b
mov qword [rsp + 0x20], 6
call fcn.14004a480
cmp qword [rbp + 0x438], 0xf
lea rdx, [rbp + 0x420]
lea rcx, [rsp + 0x70]
cmova rdx, qword [rbp + 0x420]
movups xmmword [rsp + 0x70], xmm6
call fcn.14003a550
mov rcx, qword [0x1402bfd40]
lea rdx, [0x1402c0278]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
lea rcx, [rbp - 0x60]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, dword [0x140167d5c]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.14005f9b0
cmp qword [rbp - 0x48], 0xf
lea rcx, [rbp - 0x60]
cmova rcx, qword [rbp - 0x60]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rcx, eax
mov qword [rbp - 0x20], rcx
lea rcx, [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
lea r8, str.Expiry:__d__m__Y
mov edx, reloc.WS2_32.dll_sendto
mov r9, rax
lea rcx, [rbp - 8]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
cmp qword [rbp - 0x48], 0xf
lea r8, [rbp - 0x60]
lea rdx, [rbp - 8]
cmova r8, qword [rbp - 0x60]
lea rcx, [rsp + 0x70]
movups xmmword [rsp + 0x70], xmm6
call fcn.14003a550
mov rcx, qword [0x1402bfd40]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], 1
addss xmm1, xmm7
addss xmm0, dword [0x140167d7c]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov rax, r15
mov rcx, qword [0x1402c01f0]
sub rax, rcx
cmp rax, 4
jb 0x14005f415
cmp qword [0x1402c01f8], 0xf
lea rax, [0x1402c01e0]
mov qword [rsp + 0x30], rcx
lea r9, str.IP:
cmova rax, qword [0x1402c01e0]
lea r8, [0x1402c01e0]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x4e0]
movzx edx, bl
mov qword [rsp + 0x20], 4
call fcn.14004a480
cmp qword [rbp + 0x4f8], 0xf
lea rdx, [rbp + 0x4e0]
lea rcx, [rsp + 0x70]
cmova rdx, qword [rbp + 0x4e0]
movups xmmword [rsp + 0x70], xmm6
call fcn.14003a550
mov rdx, qword [rbp + 0x4f8]
cmp rdx, 0xf
jbe 0x14005eaf9
mov rcx, qword [rbp + 0x4e0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005eaf4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f40e
call fcn.140129aa8
mov rdx, qword [rbp - 0x48]
mov qword [rbp + 0x4f0], r12
mov qword [rbp + 0x4f8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x4e0], r12b
cmp rdx, 0xf
jbe 0x14005eb4d
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005eb48
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f40e
call fcn.140129aa8
mov rdx, qword [rbp + 0x438]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], r12b
cmp rdx, 0xf
jbe 0x14005eb9e
mov rcx, qword [rbp + 0x420]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005eb99
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f40e
call fcn.140129aa8
mov rdx, qword [rbp + 0x308]
mov qword [rbp + 0x430], r12
mov qword [rbp + 0x438], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x420], r12b
cmp rdx, 0xf
jbe 0x14005ebf8
mov rcx, qword [rbp + 0x2f0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ebf3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f40e
call fcn.140129aa8
mov rdx, qword [rbp + 0x518]
mov qword [rbp + 0x300], r12
mov qword [rbp + 0x308], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2f0], r12b
cmp rdx, 0xf
jbe 0x14005ec52
mov rcx, qword [rbp + 0x500]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ec4d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005f40e
call fcn.140129aa8
call fcn.14000bf20
call fcn.140017240
movss xmm13, dword [0x140167cb0]
movss xmm14, dword [0x140167c4c]
call fcn.140011cd0
call fcn.14004e190
cmp byte [0x1402bfd6e], 0
je 0x14005ec91
cmp byte [0x1402bfe25], 0
je 0x14005ec91
mov byte [0x1402c0352], 1
cmp byte [0x1402bfdbf], 0
je 0x14005ecaa
cmp byte [0x1402bfe2f], 0
je 0x14005ecaa
mov byte [0x1402bfdbf], 1
cmp byte [0x1402bfd3c], 0
je 0x14005ecc1
cmp byte [0x1402bfe1f], 0
je 0x14005ecc1
call fcn.14004f270
cmp byte [0x1402bfd3e], 0
je 0x14005ecda
cmp byte [0x1402bfe21], 0
je 0x14005ecda
mov byte [0x1402c0356], 1
cmp byte [0x1402bfd3a], 0
je 0x14005ecf3
cmp byte [0x1402bfe1d], 0
je 0x14005ecf3
mov byte [0x1402c034f], 1
cmp byte [0x1402bfd6f], 0
je 0x14005ed0c
cmp byte [0x1402bfe26], 0
je 0x14005ed0c
mov byte [0x1402c0342], 1
cmp byte [0x1402bfd6c], 0
je 0x14005ed25
cmp byte [0x1402bfe23], 0
je 0x14005ed25
mov byte [0x1402c0354], 1
cmp byte [0x1402bfe3a], 0
je 0x14005ed3e
cmp byte [0x1402bfe32], 0
je 0x14005ed3e
mov byte [0x1402c0357], 1
cmp byte [0x1402bfdb7], 0
je 0x14005ed57
cmp byte [0x1402bfe2a], 0
je 0x14005ed57
mov byte [0x1402c0370], 1
cmp byte [0x1402bfe39], 0
je 0x14005ed6e
cmp byte [0x1402bfe31], 0
je 0x14005ed6e
call fcn.1400505a0
cmp byte [0x1402bfd3b], 0
je 0x14005ed87
cmp byte [0x1402bfe1e], 0
je 0x14005ed87
mov byte [0x1402c034c], 1
cmp byte [0x1402bfe38], 0
je 0x14005eda0
cmp byte [0x1402bfe30], 0
je 0x14005eda0
mov byte [0x1402c0355], 1
cmp byte [0x1402bfdb4], 0
je 0x14005edb9
cmp byte [0x1402bfe27], 0
je 0x14005edb9
mov byte [0x1402c034d], 1
cmp byte [0x1402bfd3f], 0
je 0x14005edd2
cmp byte [0x1402bfe22], 0
je 0x14005edd2
mov byte [0x1402c0341], 1
cmp byte [0x1402bfe3d], 0
je 0x14005edeb
cmp byte [0x1402bfe35], 0
je 0x14005edeb
mov byte [0x1402c0353], 1
cmp byte [0x1402bfe3e], 0
je 0x14005ee04
cmp byte [0x1402bfe36], 0
je 0x14005ee04
mov byte [0x1402c0350], 1
cmp byte [0x1402bfd39], 0
je 0x14005ee1d
cmp byte [0x1402bfe1c], 0
je 0x14005ee1d
mov byte [0x1402c0340], 1
cmp byte [0x1402bfe3f], 0
je 0x14005ee34
cmp byte [0x1402bfe37], 0
je 0x14005ee34
call fcn.14004fa50
cmp byte [0x1402bfdbd], 0
je 0x14005ee4b
cmp byte [0x1402bfe2d], 0
je 0x14005ee4b
call fcn.14004f870
cmp byte [0x1402bfdbe], 0
je 0x14005ee62
cmp byte [0x1402bfe2e], 0
je 0x14005ee62
call fcn.14004fc40
cmp byte [0x1402bfdb8], 0
je 0x14005ee79
cmp byte [0x1402bfe2b], 0
je 0x14005ee79
call fcn.14004fe30
cmp byte [0x1402bfe3c], 0
je 0x14005efd6
cmp byte [0x1402bfe34], 0
je 0x14005ef4e
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgrProgram_FilesamDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r13d, 1
lea r9, str.Internet_Block:_Enabled_
mov edx, r13d
lea rcx, [rbp + 0x590]
mov r8d, 0x2710
call fcn.14004e0b0
mov rax, qword [0x1402bef58]
cmp rax, qword [0x1402bef60]
jne 0x14005efb4
lea r8, [rbp + 0x590]
mov rdx, rax
call fcn.1400602d0
jmp 0x14005efdc
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r13d, 1
lea r9, str.Internet_Block:_Disabled_
mov edx, r13d
lea rcx, [rbp + 0x590]
mov r8d, 0x2710
call fcn.14004e0b0
mov rax, qword [0x1402bef58]
cmp rax, qword [0x1402bef60]
je 0x14005ef3a
mov r8d, 0x2010
lea rdx, [rbp + 0x590]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1402bef58], 0x2010
jmp 0x14005efdc
mov r13d, 1
cmp byte [0x1402bfdb6], 0
je 0x14005eff5
cmp byte [0x1402bfe29], 0
je 0x14005eff5
mov byte [0x1402c034e], 1
cmp byte [0x1402bfd6d], 0
je 0x14005f00e
cmp byte [0x1402bfe24], 0
je 0x14005f00e
mov byte [0x1402c0373], 1
cmp byte [0x1402bfd3d], 0
je 0x14005f027
cmp byte [0x1402bfe20], 0
je 0x14005f027
mov byte [0x1402c0343], 1
cmp byte [0x1402bfdb9], 0
je 0x14005f040
cmp byte [0x1402bfe2c], 0
je 0x14005f040
mov byte [0x1402c0371], 1
cmp byte [0x1402bfdb5], 0
je 0x14005f059
cmp byte [0x1402bfe28], 0
je 0x14005f059
mov byte [0x1402c0372], 1
call fcn.14000b180
mov rcx, qword [0x1402c0378]
lea r8, [0x1402c0358]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x580], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1402c0378]
lea r8, [rbp + 0x580]
mov rdx, qword [0x1402c0358]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov r15, qword [0x1402bfd40]
cmp dword [r15 + 0x48c8], 0
jg 0x14005f0ce
mov r8d, 0x715
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x48d0]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14004ad30
mov rcx, qword [0x1402c0360]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r15d, dword [rbp - 0x78]
xor r13d, r13d
mov r12, qword [rbp + 0x260]
jmp 0x14005b060
mov rbx, qword [0x1402bfd40]
test rbx, rbx
je 0x14005f12e
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x14005f152
jmp 0x14005f131
mov rdi, r13
mov r8d, 0x241
lea rdx, str.C:Users_natchOneDriveBureaucheat_natcho_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402bfd40]
test rbx, rbx
jne 0x14005f178
mov r8d, 0x1031
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1402bfd40]
call fcn.14004bce0
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14005f18c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14005f19a
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14005f1a9
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x1402bfd40]
mov qword [rbx + 0x90], r13
mov qword [rbx + 0xa0], r13
and dword [rbx + 0xc], 0xfffffff7
test rax, rax
je 0x14005f1cd
dec dword [rax + 0xf4]
mov rdx, qword [0x1402bfd30]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rax, qword [0x1402bfd40]
test rax, rax
je 0x14005f1f6
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x14005f21a
jmp 0x14005f1f9
mov rbx, r13
mov r8d, 0xb7
lea rdx, str.C:Users_natchOneDriveBureaucheat_natcho_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402bfd40]
test rax, rax
jne 0x14005f240
mov r8d, 0x1031
lea rdx, str.C:Users_natchOneDriveBureaucheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1402bfd40]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x14005f25a
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1402bfd40]
mov qword [rdi + 0x80], r13
mov qword [rdi + 0x90], r13
and dword [rdi + 4], 0xfffffff8
test rax, rax
je 0x14005f277
dec dword [rax + 0xf4]
mov rdx, qword [0x1402bfd30]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rbx, qword [0x1402bfd40]
mov qword [0x1402bfd40], rbx
call fcn.140006590
mov qword [0x1402bfd40], r13
test rbx, rbx
je 0x14005f2ce
mov rcx, rbx
call fcn.140021170
mov rax, qword [0x1402bfd40]
test rax, rax
je 0x14005f2bf
dec dword [rax + 0xf4]
mov rdx, qword [0x1402bfd30]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
call fcn.14005f420
mov rcx, r12
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x538]
mov rcx, qword [rbp + 0x560]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm15, xmmword [rsp + 0x26a0]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x26c0]
movaps xmm12, xmmword [rsp + 0x26d0]
movaps xmm11, xmmword [rsp + 0x26e0]
movaps xmm10, xmmword [rsp + 0x26f0]
movaps xmm9, xmmword [rsp + 0x2700]
movaps xmm8, xmmword [rsp + 0x2710]
movaps xmm7, xmmword [rsp + 0x2720]
movaps xmm6, xmmword [rsp + 0x2730]
mov r15, qword [rsp + 0x2740]
movaps xmm14, xmmword [rsp + 0x26b0]
mov r12, qword [rsp + 0x2750]
mov rdi, qword [rsp + 0x2780]
mov rsi, qword [rsp + 0x2778]
mov rbx, qword [rsp + 0x2770]
mov r14, qword [rsp + 0x2748]
add rsp, 0x2758
pop r13
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x288], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x298], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x2a8], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x2b8], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140038ae0
int3