Function at 0x140034ef0
Capabilities:
Enumerate process modules
Log keystrokes via polling
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x748]
sub rsp, 0x810
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, [rbp + 0x220]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x110]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rbp + 0x80], 0x50
mov dword [rbp + 0x84], 0x40
lea rax, [0x140033b70]
mov qword [rbp + 0x88], rax
xor r13d, r13d
mov qword [rbp + 0x90], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x98], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
lea rax, str.Login_Panel
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], r13
lea rcx, [rbp + 0x80]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov eax, dword [rbp + 0x11c]
cdq
sub eax, edx
sar eax, 1
lea r8d, [rax - 0x73]
mov eax, dword [rbp + 0x118]
cdq
sub eax, edx
sar eax, 1
sub eax, 0xaf
mov qword [rsp + 0x58], r13
mov rcx, qword [rbp + 0x98]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], 0xe6
mov dword [rsp + 0x30], 0x15e
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.dasdasdasdasd
mov rdx, qword [rbp + 0xc0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rdi, rax
mov qword [rbp - 0x38], rax
lea edx, [r13 - 0x14]
mov r8d, 0x80
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
lea r9d, [r13 + 1]
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea ecx, [r13 + 0x20]
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x140112480], rax
test rax, rax
je 0x140036ef4
mov qword [0x140112490], r13
mov qword [0x14011249c], r13
mov dword [0x1401124a4], r13d
mov qword [0x1401124ac], r13
mov dword [0x1401124b4], r13d
mov qword [0x1401124c4], r13
mov dword [0x1401124b8], 1
mov dword [0x1401124a8], 1
mov dword [0x140112498], r13d
mov dword [0x1401124bc], 1
mov dword [0x1401124c0], 0x50
mov dword [0x1401124cc], 0x80000000
mov rax, qword [rax]
lea rdx, [0x140112488]
mov qword [rsp + 0x30], rdx
lea rdx, [0x140112490]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, rdi
xor edx, edx
lea r8d, [r13 + 1]
call qword [rax + 0x80]
test eax, eax
js 0x140036ef4
lea edx, [r13 + 0xa]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r13 - 1]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rax, qword [0x140112020]
test rax, rax
je 0x14003519b
inc dword [rax + 0x3b4]
mov ecx, 0x3db8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0x760], rax
lea rcx, [rbp + 0x758]
mov qword [rbp + 0x768], rcx
mov qword [rbp + 0x60], rax
test rax, rax
je 0x1400351d0
xor edx, edx
mov rcx, rax
call fcn.140001630
jmp 0x1400351d3
mov rax, r13
cmp qword [0x140112020], 0
jne 0x1400351e4
mov qword [0x140112020], rax
mov rcx, rax
call fcn.140007b90
mov rbx, qword [0x140112020]
test rbx, rbx
jne 0x140035219
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeSHARKSHOPimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140112020]
lea rax, [0x1400eb708]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
movss xmm3, dword [0x1400ec65c]
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [0x1400fc140]
mov rcx, qword [rbx + 0xa8]
call fcn.1400231d0
cmp qword [0x140112020], 0
jne 0x14003526f
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeSHARKSHOPimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
or dword [rbx + 8], 1
xor ecx, ecx
call fcn.14001ec70
lea rcx, [0x140112478]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14003542b
lea rcx, [0x140112470]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14003542b
mov qword [0x140112468], rdi
mov rax, qword [0x140112020]
test rax, rax
jne 0x1400352d8
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeSHARKSHOPimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140112020]
or dword [rax + 0xc], 6
lea rcx, str.imgui_impl_win32
mov qword [rax + 0xd8], rcx
mov qword [rax + 0x120], rdi
mov dword [rax + 0x3c], 9
mov dword [rax + 0x40], Ordinal_41
mov dword [rax + 0x44], Ordinal_41
mov dword [rax + 0x48], Ordinal_41
mov dword [rax + 0x4c], Ordinal_41
mov dword [rax + 0x50], reloc.WLDAP32.dll_Ordinal_33
mov dword [rax + 0x54], Ordinal_35
mov dword [rax + 0x58], Ordinal_41
mov dword [rax + 0x5c], reloc.WLDAP32.dll_Ordinal_35
mov dword [rax + 0x60], reloc.WLDAP32.dll_Ordinal_45
mov dword [rax + 0x64], reloc.WLDAP32.dll_Ordinal_46
mov dword [rax + 0x68], 8
mov dword [rax + 0x6c], reloc.WLDAP32.dll_Ordinal_32
mov dword [rax + 0x70], reloc.WS2_32.dll_listen
mov dword [rax + 0x74], reloc.WLDAP32.dll_Ordinal_27
mov dword [rax + 0x78], reloc.WS2_32.dll_listen
mov dword [rax + 0x7c], 0x41
mov dword [rax + 0x80], 0x43
mov dword [rax + 0x84], 0x56
mov dword [rax + 0x88], 0x58
mov dword [rax + 0x8c], 0x59
mov dword [rax + 0x90], 0x5a
lea rax, str.xinput1_4.dll
mov qword [rbp - 0x60], rax
lea rax, str.xinput1_3.dll
mov qword [rbp - 0x58], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp - 0x50], rax
lea rax, str.xinput1_2.dll
mov qword [rbp - 0x48], rax
lea rax, str.xinput1_1.dll
mov qword [rbp - 0x40], rax
mov rbx, r13
mov rcx, qword [rbp + rbx*8 - 0x60]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
jne 0x1400353f2
inc rbx
cmp rbx, 5
jl 0x1400353d4
jmp 0x140035427
mov qword [0x140112450], rdi
lea rdx, str.XInputGetCapabilities
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140112458], rax
lea rdx, str.XInputGetState
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140112460], rax
mov rdi, qword [rbp - 0x38]
mov rbx, qword [0x140112488]
mov rax, qword [0x140112020]
test rax, rax
jne 0x14003545f
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeSHARKSHOPimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140112020]
lea rcx, str.imgui_impl_dx9
mov qword [rax + 0xe0], rcx
or dword [rax + 0xc], 8
mov qword [0x140112440], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [0x140112020]
test rax, rax
jne 0x1400354ae
mov r8d, 0x952
lea rdx, str.D:SourceCodeSHARKSHOPimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140112020]
mov dword [rax + 0x156c], r13d
mov dword [rax + 0x15a0], 0x40400000
mov dword [rax + 0x1570], 0x3f800000
mov dword [rax + 0x157c], 0x3f000000
mov dword [rax + 0x1580], 0x3f000000
mov word [rax + 0x1618], 0x101
mov byte [rax + 0x161a], 1
movaps xmm0, xmmword [0x1400ec8b0]
movups xmmword [rax + 0x1774], xmm0
test rax, rax
jne 0x140035521
mov r8d, 0x952
lea rdx, str.D:SourceCodeSHARKSHOPimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140112020]
movaps xmm0, xmmword [0x1400ec900]
movups xmmword [rax + 0x1624], xmm0
movaps xmm1, xmmword [0x1400ec8d0]
movups xmmword [rax + 0x1634], xmm1
movaps xmm0, xmmword [0x1400ec800]
movups xmmword [rax + 0x1644], xmm0
movaps xmm1, xmmword [0x1400ec850]
movups xmmword [rax + 0x1654], xmm1
movaps xmm0, xmmword [0x1400ec7f0]
movups xmmword [rax + 0x1664], xmm0
movaps xmm1, xmmword [0x1400ec7a0]
movups xmmword [rax + 0x1674], xmm1
xorps xmm0, xmm0
movups xmmword [rax + 0x1684], xmm0
movaps xmm1, xmmword [0x1400ec870]
movups xmmword [rax + 0x1694], xmm1
movaps xmm0, xmmword [0x1400ec8a0]
movups xmmword [rax + 0x16a4], xmm0
movaps xmm1, xmmword [0x1400ec8f0]
movups xmmword [rax + 0x16b4], xmm1
movaps xmm0, xmmword [0x1400ec830]
movups xmmword [rax + 0x16c4], xmm0
movaps xmm1, xmmword [0x1400ec840]
movups xmmword [rax + 0x16d4], xmm1
movaps xmm0, xmmword [0x1400ec7b0]
movups xmmword [rax + 0x16e4], xmm0
movaps xmm1, xmmword [0x1400ec850]
movups xmmword [rax + 0x16f4], xmm1
movaps xmm0, xmmword [0x1400ec7c0]
movups xmmword [rax + 0x1704], xmm0
movaps xmm1, xmmword [0x1400ec890]
movups xmmword [rax + 0x1714], xmm1
movaps xmm0, xmmword [0x1400ec8c0]
movups xmmword [rax + 0x1724], xmm0
movaps xmm1, xmmword [0x1400ec8e0]
movups xmmword [rax + 0x1734], xmm1
movaps xmm0, xmmword [0x1400ec900]
movups xmmword [rax + 0x1744], xmm0
movaps xmm1, xmmword [0x1400ec870]
movups xmmword [rax + 0x1754], xmm1
movaps xmm0, xmmword [0x1400ec8f0]
movups xmmword [rax + 0x1764], xmm0
movups xmmword [rax + 0x1774], xmm1
movaps xmm0, xmmword [0x1400ec8a0]
movups xmmword [rax + 0x1784], xmm0
movaps xmm1, xmmword [0x1400ec8f0]
movups xmmword [rax + 0x1794], xmm1
movaps xmm0, xmmword [0x1400ec860]
movups xmmword [rax + 0x17a4], xmm0
movaps xmm1, xmmword [0x1400ec8a0]
movups xmmword [rax + 0x17b4], xmm1
movaps xmm0, xmmword [0x1400ec8f0]
movups xmmword [rax + 0x17c4], xmm0
movaps xmm1, xmmword [0x1400ec7d0]
movups xmmword [rax + 0x17d4], xmm1
movaps xmm0, xmmword [0x1400ec7e0]
movups xmmword [rax + 0x17e4], xmm0
movaps xmm1, xmmword [0x1400ec880]
movups xmmword [rax + 0x17f4], xmm1
movaps xmm0, xmmword [0x1400ec7d0]
movups xmmword [rax + 0x1804], xmm0
movaps xmm1, xmmword [0x1400ec7e0]
movups xmmword [rax + 0x1814], xmm1
movaps xmm0, xmmword [0x1400ec880]
movups xmmword [rax + 0x1824], xmm0
movaps xmm1, xmmword [0x1400ec850]
movups xmmword [rax + 0x1834], xmm1
movaps xmm0, xmmword [0x1400ec8a0]
movups xmmword [rax + 0x1844], xmm0
movaps xmm1, xmmword [0x1400ec8f0]
movups xmmword [rax + 0x1854], xmm1
movaps xmm0, xmmword [0x1400ec850]
movups xmmword [rax + 0x1864], xmm0
xor bl, bl
mov byte [rbp + 0x758], bl
lea rcx, [0x140112160]
call fcn.140047760
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
movups xmmword [rbp + 0x1c0], xmm0
movups xmmword [rbp + 0x1d0], xmm0
movabs r12, 0x964ee04d877a4dc5
movabs r15, 0x1d713b20848b025e
lea r14, [0x1401125d0]
lea rsi, [0x140112500]
xorps xmm14, xmm14
movss xmm7, dword [0x1400ec6cc]
movss xmm8, dword [0x1400ec674]
movss xmm15, dword [0x1400ec66c]
movss xmm10, dword [0x1400ec6bc]
movss xmm9, dword [0x1400ec5fc]
movss xmm11, dword [0x1400ec610]
movss xmm12, dword [0x1400ec630]
movss xmm13, dword [0x1400ec61c]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140035800
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x140036d85
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003584b
cmp byte [reloc.WS2_32.dll_accept], 0
sete al
mov byte [reloc.WS2_32.dll_accept], al
mov rcx, rdi
test al, al
je 0x140035838
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, reloc.WS2_32.dll_recvfrom
jmp 0x140035842
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140036eeb
test bl, bl
jne 0x140035e2f
call fcn.140032c40
call fcn.140033290
call fcn.1400068a0
mov rax, qword [0x140112020]
movss xmm0, dword [0x1400ec694]
movss xmm6, dword [0x1400ec688]
unpcklps xmm0, xmm6
movsd qword [rax + 0x1ba8], xmm0
mov dword [rax + 0x1b90], 2
or dword [rax + 0x1b88], 3
movaps xmm0, xmm14
unpcklps xmm0, xmm14
movsd qword [rax + 0x1b98], xmm0
movaps xmm1, xmm14
unpcklps xmm1, xmm14
movsd qword [rax + 0x1ba0], xmm1
mov dword [rax + 0x1b8c], 2
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r15
movabs rdi, 0x76ab0c63320340b7
mov qword [rbp - 0x70], rdi
movabs rbx, 0xe58cdb6274792f0
mov qword [rbp - 0x68], rbx
movabs rax, 0xde1dc006d53b0596
mov qword [rbp - 0x60], rax
movabs rax, 0x5c3e7700a9ab5211
mov qword [rbp - 0x58], rax
movabs rax, 0x76ab0c63325105f3
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rbx
movups xmm0, xmmword [rbp - 0x60]
movups xmm1, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x20], xmm0
xorps xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x10], xmm1
mov r8d, 0x13e
lea rdx, reloc.WS2_32.dll_accept
lea rcx, [rbp - 0x20]
call fcn.14000ba90
mov rcx, qword [0x140112020]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003598e
mov qword [rbp], 0
movaps xmm1, xmm7
lea rcx, [rbp]
call fcn.14000f390
mov rcx, qword [0x140112020]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x1400359ec
movss xmm1, dword [rcx + 0x159c]
addss xmm1, xmm1
addss xmm1, dword [rcx + 0x1980]
movss xmm0, dword [rax + 0x104]
maxss xmm0, xmm1
movss dword [rax + 0x104], xmm0
movss xmm1, dword [rax + 0x110]
maxss xmm1, dword [rcx + 0x159c]
movss dword [rax + 0x110], xmm1
mov dword [rbp + 8], 0
mov dword [rbp + 0xc], 0x41a00000
lea rcx, [rbp + 8]
call fcn.14002c8b0
mov r11, qword [0x140112020]
mov rax, qword [r11 + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [r11 + 0x1ae0]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, dword [0x1400ec668]
addss xmm2, xmm8
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
mov qword [rbp + 0x130], r12
mov qword [rbp + 0x138], r15
movabs rax, 0x964ee077a703288e
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x128], r15
movaps xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.14002a720
movaps xmm0, xmm6
call fcn.14000f6e0
mov rcx, qword [0x140112020]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, dword [0x1400ec670]
addss xmm2, xmm8
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xd8], r15
movabs rax, 0x964ee034e2316ee6
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], r15
movaps xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rbp + 0x10], 0
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x140112030]
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14002f7a0
call fcn.14000f790
mov rcx, qword [0x140112020]
mov rax, qword [rcx + 0x1ae0]
movss xmm0, dword [rax + 0x18]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
subss xmm0, dword [0x1400ec678]
mulss xmm0, dword [0x1400ec5c8]
addss xmm1, xmm0
movss dword [rax + 0xd8], xmm1
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
mov qword [rbp + 0x18], 0x42c80000
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], r15
movabs rax, 0x964ee023ee1d2289
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], r15
movaps xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x70]
call fcn.14002aff0
test al, al
je 0x140035c9d
lea rdx, [0x140112030]
lea rcx, [rbp - 0x60]
call fcn.140037230
mov rdx, rax
lea rcx, [0x140112160]
nop
nop
nop
nop
nop
cmp byte [0x140112370], 0
je 0x140036d97
mov byte [rbp + 0x758], 1
mov dword [0x140112130], 1
mov qword [rbp + 0x20], 0
lea rcx, [rbp + 0x20]
call fcn.14002c8b0
mov r11, qword [0x140112020]
mov rax, qword [r11 + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [r11 + 0x1ae0]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, xmm15
addss xmm2, dword [0x1400ec684]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rbx
movabs rax, 0xe42b8220e2172897
mov qword [rbp - 0x60], rax
movabs rax, 0x79515549e3e46e7e
mov qword [rbp - 0x58], rax
movabs rax, 0x76ab7f0f5b6234d2
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rbx
movups xmm0, xmmword [rbp - 0x60]
movups xmm1, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x20], xmm0
xorps xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x10], xmm1
lea rdx, [0x140110e34]
lea rcx, [rbp - 0x20]
call fcn.14002c230
call fcn.1400346a0
mov rcx, qword [0x140112020]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x5c]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x60]
addss xmm0, dword [0x1400ec64c]
addss xmm2, dword [0x1400ec69c]
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm2
movss xmm1, dword [rax + 0xf0]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xf4]
maxss xmm0, xmm2
movss dword [rax + 0xf0], xmm1
movss dword [rax + 0xf4], xmm0
movaps xmm0, xmmword [0x1400ec910]
movups xmmword [rsp + 0x70], xmm0
lea rdx, str.SHARK_SHOP
lea rcx, [rsp + 0x70]
call fcn.14002a820
call fcn.14000e110
jmp 0x140036cbd
cmp dword [0x140112130], 1
jne 0x140036cbd
call fcn.140032c40
call fcn.140033290
call fcn.1400068a0
mov rax, qword [0x140112020]
mov dword [rax + 0x1ba8], 0x43af0000
mov dword [rax + 0x1bac], 0x43660000
mov dword [rax + 0x1b90], 2
or dword [rax + 0x1b88], 3
movaps xmm0, xmm14
unpcklps xmm0, xmm14
movsd qword [rax + 0x1b98], xmm0
movaps xmm1, xmm14
unpcklps xmm1, xmm14
movsd qword [rax + 0x1ba0], xmm1
mov dword [rax + 0x1b8c], 2
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], r15
movabs rax, 0x76ab0c63320340b7
mov qword [rbp - 0x70], rax
movabs rax, 0xe58cdb6274792f0
mov qword [rbp - 0x68], rax
movabs rax, 0xd909c000c22c0483
mov qword [rbp - 0x60], rax
movabs rax, 0x53246b00c2c4221a
mov qword [rbp - 0x58], rax
movabs rax, 0x47855a434e2308f4
mov qword [rbp - 0x50], rax
movabs rax, 0xe58cdb62747a2de
mov qword [rbp - 0x48], rax
movups xmm0, xmmword [rbp - 0x60]
movups xmm1, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x20], xmm0
xorps xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x10], xmm1
mov r8d, 0x13e
lea rdx, reloc.WS2_32.dll_accept
lea rcx, [rbp - 0x20]
call fcn.14000ba90
mov rcx, qword [0x140112020]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
mov r12, qword [rax + 0x2b8]
mov qword [rbp + 0x60], r12
mov ebx, 4
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x1401126a0], eax
jle 0x140035fad
lea rcx, [0x1401126a0]
call fcn.14009e8d0
cmp dword [0x1401126a0], 0xffffffff
jne 0x140035fad
mov rax, r14
mov ecx, Ordinal_27
nop dword [rax]
mov qword [rax], 0
lea rax, [rax + 8]
sub rcx, 1
jne 0x140035f90
lea rcx, [0x1401126a0]
call fcn.14009e864
mov eax, dword [rbx + rdi]
cmp dword [0x14011269c], eax
jle 0x140035fe4
lea rcx, [0x14011269c]
call fcn.14009e8d0
cmp dword [0x14011269c], 0xffffffff
jne 0x140035fe4
mov qword [0x1401125c8], 0
lea rcx, [0x14011269c]
call fcn.14009e864
mov eax, dword [rbx + rdi]
cmp dword [0x140112698], eax
jle 0x14003602b
lea rcx, [0x140112698]
call fcn.14009e8d0
cmp dword [0x140112698], 0xffffffff
jne 0x14003602b
mov rax, rsi
mov ecx, Ordinal_27
xor edi, edi
nop
mov qword [rax], rdi
lea rax, [rax + 8]
sub rcx, 1
jne 0x140036010
lea rcx, [0x140112698]
call fcn.14009e864
jmp 0x14003602d
xor edi, edi
cmp byte [0x1401124e0], 0
jne 0x140036130
mov rbx, rdi
nop dword [rax]
mov rax, qword [0x140112020]
mov rcx, qword [rax + 0x1ae0]
movss xmm6, dword [rcx + 0x1c]
movss xmm7, dword [rcx + 0x14]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm6
divss xmm8, xmm10
addss xmm8, xmm7
mov rax, qword [0x140112020]
mov rcx, qword [rax + 0x1ae0]
movss xmm7, dword [rcx + 0x10]
movss xmm6, dword [rcx + 0x18]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, xmm10
addss xmm0, xmm7
movss dword [rbx + r14], xmm0
movss dword [rbx + r14 + 4], xmm8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [rbx + rsi], xmm0
movss dword [rbx + rsi + 4], xmm6
add rbx, 8
cmp rbx, 0xc8
jl 0x140036040
mov byte [0x1401124e0], 1
cmp qword [0x140112020], 0
jne 0x140036154
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeSHARKSHOPimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r15d, 1
lea rsi, [0x1401125d4]
cmp r15d, 0x19
jge 0x140036253
lea rbx, [rsi + 4]
movsxd rax, r15d
lea rdi, [r14 + rax*8]
mov r14d, Ordinal_27
sub r14d, r15d
lea r13, [0x1401125d0]
nop word [rax + rax]
movss xmm1, dword [rbx + 4]
subss xmm1, dword [rsi]
movss xmm0, dword [rbx]
subss xmm0, dword [rsi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm15
movaps xmm1, xmm9
subss xmm1, xmm0
comiss xmm1, xmm14
jbe 0x14003622e
mov dword [rbp + 0x68], 0x3f800000
mov dword [rbp + 0x6c], 0x3f800000
mov dword [rbp + 0x70], 0x3f800000
mov rax, qword [0x140112020]
movups xmm0, xmmword [rbp + 0x68]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rbp + 0x68], xmm0
movups xmmword [rsp + 0x70], xmm0
mulss xmm1, dword [rax + 0x1560]
movss dword [rsp + 0x7c], xmm1
lea rcx, [rsp + 0x70]
call fcn.140002e20
lea ecx, [r15 - 1]
movsxd rdx, ecx
lea rdx, [rdx*8]
add rdx, r13
movss dword [rsp + 0x20], xmm9
mov r9d, eax
mov r8, rdi
mov rcx, r12
call fcn.140021de0
add rdi, 8
add rbx, 8
sub r14, 1
jne 0x140036190
inc r15d
add rsi, 8
lea r14, [0x1401125d0]
jmp 0x140036161
cmp qword [0x140112020], 0
jne 0x140036277
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeSHARKSHOPimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140112020]
movss xmm10, dword [rax + 0x18]
movaps xmm0, xmmword [0x1400ec920]
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.140002e20
mov r13d, eax
xor edi, edi
mov ebx, edi
lea r15d, [rdi + 0x19]
nop word [rax + rax]
movaps xmm1, xmm10
lea rax, [0x140112500]
mulss xmm1, dword [rbx + rax]
addss xmm1, dword [rbx + r14]
movss dword [rbx + r14], xmm1
movaps xmm2, xmm10
mulss xmm2, dword [rbx + rax + 4]
addss xmm2, dword [rbx + r14 + 4]
movss dword [rbx + r14 + 4], xmm2
mov rcx, qword [0x140112020]
mov rax, qword [rcx + 0x1ae0]
movss xmm3, dword [rax + 0x10]
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm3
comiss xmm3, xmm1
jbe 0x14003630d
movss dword [rbx + r14], xmm0
jmp 0x140036318
comiss xmm1, xmm0
jbe 0x140036318
movss dword [rbx + r14], xmm3
mov rax, qword [rcx + 0x1ae0]
movss xmm1, dword [rax + 0x14]
movss xmm0, dword [rax + 0x1c]
addss xmm0, xmm1
comiss xmm1, xmm2
jbe 0x14003633b
movss dword [rbx + r14 + 4], xmm0
jmp 0x140036347
comiss xmm2, xmm0
jbe 0x140036347
movss dword [rbx + r14 + 4], xmm1
mov rax, qword [0x140112020]
movsd xmm8, qword [rax + 0x1a60]
cvtpd2ps xmm8, xmm8
mov qword [rsp + 0x70], 0xa
mov ecx, 0x50
call fcn.14009ebcc
mov r14, rax
mov qword [rsp + 0x70], rax
mov edx, 0xa
mov rcx, rax
nop
mov qword [rcx], 0
lea rcx, [rcx + 8]
sub rdx, 1
jne 0x140036380
mov esi, edi
lea rdi, [rax + 4]
lea r12, [0x1401125d0]
nop
xorps xmm6, xmm6
cvtsi2ss xmm6, esi
mulss xmm6, xmm11
addss xmm6, xmm8
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm7, xmm0
mulss xmm7, xmm12
addss xmm7, dword [rbx + r12]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm12
addss xmm0, dword [rbx + r12 + 4]
movss dword [rdi - 4], xmm7
movss dword [rdi], xmm0
lea eax, [rsi + 1]
xorps xmm6, xmm6
cvtsi2ss xmm6, eax
mulss xmm6, xmm11
addss xmm6, xmm8
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm7, xmm0
mulss xmm7, xmm13
addss xmm7, dword [rbx + r12]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm13
addss xmm0, dword [rbx + r12 + 4]
movss dword [rdi + 4], xmm7
movss dword [rdi + 8], xmm0
add esi, 2
add rdi, 0x10
cmp esi, 0xa
jl 0x1400363a0
mov r9d, r13d
mov r8d, 0xa
mov rdx, r14
mov rcx, qword [rbp + 0x60]
call fcn.140021020
mov rcx, r14
call fcn.14009e7b0
add rbx, 8
sub r15, 1
lea r14, [0x1401125d0]
mov edi, 0
jne 0x1400362b0
lea rbx, [0x1400ec3e0]
mov qword [rbp + 0x1e0], rbx
lea rax, str.0.30
mov qword [rbp + 0x1e8], rax
lea rax, str.0.35
mov qword [rbp + 0x1f0], rax
lea rax, [0x1400ec408]
mov qword [rbp + 0x1f8], rax
lea rax, str.0.45
mov qword [rbp + 0x200], rax
lea rax, [0x1400ec414]
mov qword [rbp + 0x208], rax
lea rax, [0x1400ec418]
mov qword [rbp + 0x210], rax
lea rax, [0x1400ec314]
mov qword [rbp + 0x218], rax
mov dword [rsp + 0x20], 8
lea r9, [rbp + 0x1e0]
lea rdx, [0x1401124dc]
lea rcx, [0x1400ec420]
call fcn.14002d440
mov rcx, qword [0x140112020]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm7, dword [0x1400ec6cc]
cmp byte [rax + 0x93], dil
jne 0x140036542
mov qword [rbp + 0x28], rdi
movaps xmm1, xmm7
lea rcx, [rbp + 0x28]
call fcn.14000f390
mov qword [rbp + 0x150], rbx
lea rdi, [0x1400ec448]
mov qword [rbp + 0x158], rdi
lea rsi, [0x1400ec44c]
mov qword [rbp + 0x160], rsi
lea r14, [0x1400ec450]
mov qword [rbp + 0x168], r14
lea r15, [0x1400ec454]
mov qword [rbp + 0x170], r15
lea r12, [0x1400ec458]
mov qword [rbp + 0x178], r12
mov dword [rsp + 0x20], 6
lea r9, [rbp + 0x150]
lea rdx, [0x1401124d8]
lea rcx, [0x1400ec460]
call fcn.14002d440
mov rcx, qword [0x140112020]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x1400365ea
mov qword [rbp + 0x30], 0
movaps xmm1, xmm7
lea rcx, [rbp + 0x30]
call fcn.14000f390
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x188], rdi
mov qword [rbp + 0x190], rsi
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], r15
mov qword [rbp + 0x1a8], r12
mov dword [rsp + 0x20], 6
lea r9, [rbp + 0x180]
lea rdx, [0x1401124e4]
lea rcx, [0x1400ec488]
call fcn.14002d440
mov rcx, qword [0x140112020]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003666f
mov qword [rbp + 0x38], 0
movaps xmm1, xmm7
lea rcx, [rbp + 0x38]
call fcn.14000f390
lea rax, [0x1400ec4b0]
mov qword [rbp + 0x100], rax
lea rax, [0x1400ec4c0]
mov qword [rbp + 0x108], rax
mov dword [rsp + 0x20], 2
lea r9, [rbp + 0x100]
lea rdx, [0x1401124e8]
lea rcx, str.BOOTFPS
call fcn.14002d440
lea rdx, [0x1401124e1]
lea rcx, str.Protect_Capture____
call fcn.14002c230
test al, al
je 0x1400366e0
mov rcx, qword [rbp - 0x38]
cmp byte [0x1401124e1], 0
je 0x1400366d8
mov edx, reloc.WS2_32.dll_recvfrom
jmp 0x1400366da
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov eax, 0x2b8
cmp dword [0x1401124e8], 0
mov ecx, 0xffffffff
cmove eax, ecx
mov dword [rbp - 0x30], eax
mov rax, qword [0x140112020]
mov rcx, qword [rax + 0x1ae0]
movss xmm6, dword [rcx + 0x18]
subss xmm6, dword [0x1400ec678]
mulss xmm6, dword [0x1400ec5c8]
mov dword [rbp + 0x40], 0
mov dword [rbp + 0x44], 0x40600000
lea rcx, [rbp + 0x40]
call fcn.14002c8b0
mov r11, qword [0x140112020]
mov rax, qword [r11 + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [r11 + 0x1ae0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, xmm6
movss dword [rax + 0xd8], xmm1
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
call fcn.1400349f0
mov esi, eax
xor r13d, r13d
mov edi, r13d
mov edx, eax
lea ecx, [r13 + 0x18]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400367f5
mov dword [rbp + 0x230], 0x438
lea rdx, [rbp + 0x230]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x1400367f5
nop word [rax + rax]
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x260]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400367ee
lea rdx, [rbp + 0x230]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x1400367c0
jmp 0x1400367f5
mov rdi, qword [rbp + 0x248]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rdx, [rdi + 0x27716f0]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0x48], 0x42c80000
lea rdx, [rbp + 0x48]
lea rcx, str.
call fcn.14002aff0
movzx r12d, al
movaps xmm0, xmmword [0x1400ec910]
movups xmmword [rsp + 0x70], xmm0
lea rdx, str.SHARK_SHOP
lea rcx, [rsp + 0x70]
call fcn.14002a820
test r12b, r12b
je 0x140036c84
call fcn.1400349f0
mov ebx, eax
mov ecx, eax
call fcn.140034d60
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp - 0x20], 0x328
mov dword [rbp - 0x1c], 0x88
mov dword [rbp - 0x18], 0x150
mov dword [rbp - 0x14], 8
mov qword [rbp - 0x10], 8
mov ecx, Ordinal_27
call fcn.14009eb90
mov r14, rax
mov qword [rbp - 0x60], rax
lea rdi, [rax + 0x18]
mov qword [rbp - 0x50], rdi
mov r8d, Ordinal_27
lea rdx, [rbp - 0x20]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x58], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov ecx, Ordinal_27
call fcn.14009eb90
mov rbx, rax
mov qword [rbp - 0x80], rax
lea rcx, [rax + 0x18]
mov qword [rbp - 0x70], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x18]
mov qword [rbp - 0x78], rax
lea r8, [rbp - 0x80]
lea rdx, [rsi + 0x2de1d90]
mov rcx, r15
call fcn.140034df0
movsxd rcx, dword [0x1401124dc]
cmp ecx, 7
ja case.default.0x140036951
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x36f60]
add rdx, r8
jmp rdx
mov dword [rbp + 0x760], 0x3deb851f
jmp case.default.0x140036951
mov dword [rbp + 0x760], 0x3e99999a
jmp case.default.0x140036951
mov dword [rbp + 0x760], 0x3eb33333
jmp case.default.0x140036951
mov dword [rbp + 0x760], 0x3ecccccd
jmp case.default.0x140036951
mov dword [rbp + 0x760], 0x3ee66666
jmp case.default.0x140036951
mov dword [rbp + 0x760], 0x3f000000
jmp case.default.0x140036951
mov dword [rbp + 0x760], 0x3f4ccccd
jmp case.default.0x140036951
mov dword [rbp + 0x760], 0x3f800000
test r15, r15
je 0x1400369d4
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x760]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x1400369f0
mov edx, Ordinal_27
mov rcx, r14
call fcn.14009e7b0
test r12b, r12b
je 0x140036c84
call fcn.1400349f0
mov ebx, eax
mov ecx, eax
call fcn.140034d60
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp + 0x50], 0x40
mov dword [rbp + 0x54], 0x28c
mov ecx, 8
call fcn.14009eb90
mov r14, rax
mov qword [rbp - 0x60], rax
lea rdi, [rax + 8]
mov qword [rbp - 0x50], rdi
mov rcx, qword [rbp + 0x50]
mov qword [rax], rcx
mov qword [rbp - 0x58], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov ecx, 8
call fcn.14009eb90
mov rbx, rax
mov qword [rbp - 0x80], rax
lea rcx, [rax + 8]
mov qword [rbp - 0x70], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rbp - 0x78], rax
lea r8, [rbp - 0x80]
lea rdx, [rsi + 0x212b208]
mov rcx, r15
call fcn.140034df0
movsxd rcx, dword [0x1401124d8]
cmp ecx, 5
ja case.default.0x140036aba
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x36f80]
add rdx, r8
jmp rdx
mov dword [rbp + 0x768], 0x41480000
jmp case.default.0x140036aba
mov dword [rbp + 0x768], 0x41700000
jmp case.default.0x140036aba
mov dword [rbp + 0x768], 0x41a00000
jmp case.default.0x140036aba
mov dword [rbp + 0x768], 0x41c80000
jmp case.default.0x140036aba
mov dword [rbp + 0x768], 0x42480000
jmp case.default.0x140036aba
mov dword [rbp + 0x768], 0x42c80000
test r15, r15
je 0x140036b25
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x768]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x140036b41
mov edx, 8
mov rcx, r14
call fcn.14009e7b0
test r12b, r12b
je 0x140036c84
call fcn.1400349f0
mov ebx, eax
mov ecx, eax
call fcn.140034d60
mov rsi, rax
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp + 0x58], 0x40
mov dword [rbp + 0x5c], 0x1cc
mov ecx, 8
call fcn.14009eb90
mov r14, rax
mov qword [rbp - 0x60], rax
lea rdi, [rax + 8]
mov qword [rbp - 0x50], rdi
mov rcx, qword [rbp + 0x58]
mov qword [rax], rcx
mov qword [rbp - 0x58], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov ecx, 8
call fcn.14009eb90
mov rbx, rax
mov qword [rbp - 0x80], rax
lea rcx, [rax + 8]
mov qword [rbp - 0x70], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rbp - 0x78], rax
lea r8, [rbp - 0x80]
lea rdx, [rsi + 0x212b208]
mov rcx, r15
call fcn.140034df0
movsxd rcx, dword [0x1401124e4]
cmp ecx, 5
ja case.default.0x140036c0b
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x36f98]
add rdx, r8
jmp rdx
mov dword [rsp + 0x60], 0x41200000
jmp case.default.0x140036c0b
mov dword [rsp + 0x60], 0x41700000
jmp case.default.0x140036c0b
mov dword [rsp + 0x60], 0x41a00000
jmp case.default.0x140036c0b
mov dword [rsp + 0x60], 0x41c80000
jmp case.default.0x140036c0b
mov dword [rsp + 0x60], 0x42480000
jmp case.default.0x140036c0b
mov dword [rsp + 0x60], 0x42c80000
test r15, r15
je 0x140036c68
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x60]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x140036c84
mov edx, 8
mov rcx, r14
call fcn.14009e7b0
call fcn.14000e110
movss xmm10, dword [0x1400ec6bc]
movss xmm8, dword [0x1400ec674]
lea r14, [0x1401125d0]
lea rsi, [0x140112500]
movabs r15, 0x1d713b20848b025e
movabs r12, 0x964ee04d877a4dc5
call fcn.140008400
mov rcx, qword [0x140112488]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r13d
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], r13d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x140112488]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140036d61
call fcn.140008890
mov rbx, qword [0x140112020]
cmp dword [rbx + 0x1c90], 0
jg 0x140036d31
mov r8d, 0x675
lea rdx, str.D:SourceCodeSHARKSHOPimguiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x1c98]
mov rcx, qword [rax]
add rcx, 0x40
mov rax, r13
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.140032660
mov rcx, qword [0x140112488]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140112488]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
movzx ebx, byte [rbp + 0x758]
cmp dword [rbp + 0x1b8], 0x12
je 0x140036dbc
mov rdi, qword [rbp - 0x38]
jmp 0x1400357c0
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Command_Prompt
lea rdx, [0x1400ec390]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rcx, qword [0x140112440]
test rcx, rcx
je 0x140036e7f
mov rdx, qword [0x140112448]
test rdx, rdx
je 0x140036def
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140112448], r13
mov rcx, qword [0x140112440]
mov rdx, qword [0x140112438]
test rdx, rdx
je 0x140036e12
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140112438], r13
mov rcx, qword [0x140112440]
mov r9, qword [0x140112430]
test r9, r9
je 0x140036e6d
mov rax, qword [r9]
mov rcx, r9
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140112430], r13
mov rax, qword [0x140112020]
test rax, rax
jne 0x140036e5b
mov r8d, 0xd3d
lea rdx, str.D:SourceCodeSHARKSHOPimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140112020]
mov rax, qword [rax + 0xa8]
mov qword [rax + 8], r13
mov rcx, qword [0x140112440]
test rcx, rcx
je 0x140036e7f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140112440], r13
mov rcx, qword [0x140112450]
test rcx, rcx
je 0x140036e91
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x140112450], r13
mov qword [0x140112458], r13
mov qword [0x140112460], r13
mov qword [0x140112468], r13
mov qword [0x140112470], r13
mov qword [0x140112478], r13
mov dword [reloc.WS2_32.dll_htons], 9
mov byte [0x140112134], 0
mov byte [reloc.WS2_32.dll_accept], 1
mov rdx, qword [rbp + 0x98]
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x140036f0d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rdx, qword [rbp + 0x98]
mov rcx, qword [rbp + 0xc0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, 1
lea r11, [rsp + 0x810]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret