Function at 0x1400415c0
Capabilities:
Create thread
Execute command
Log keystrokes via polling
Set registry value
Terminate process

Disassembly:
push rbp
lea rbp, [rsp - 0x3e0]
sub rsp, 0x4e0
call fcn.14003f400
mov rcx, rax
call fcn.14003f490
test eax, eax
je 0x1400415ff
mov r8d, eax
mov dword [0x14016b190], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14016b198], rax
call fcn.14003f400
mov rcx, rax
call fcn.14003f490
test eax, eax
je 0x140041632
mov r8d, eax
mov dword [0x14016b190], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14016b198], rax
test rax, rax
jne 0x14004164b
mov r8d, Ordinal_26
lea rdx, str.Status:_No_Process_Found_
lea rcx, [0x14016a258]
call fcn.14003ac90
mov qword [rsp + 0x4d8], r12
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x78]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140044125
mov rcx, qword [rbp - 0x78]
lea rax, [rbp - 0x80]
xor r12d, r12d
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x78]
mov dword [rsp + 0x78], r12d
lea r9d, [r12 + 4]
lea edx, [r12 + 0x14]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x140044125
cmp dword [rsp + 0x78], r12d
setne al
test al, al
je 0x140044125
mov qword [rsp + 0x28], r12
lea r8, [0x140044410]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
mov qword [rsp + 0x4c0], r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003f9e0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400412f0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400411e0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400407c0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400407c0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400407e0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400407c0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140040990]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.14003f400
mov rcx, rax
call fcn.14003f490
lea rcx, [0x14016b1f0]
call fcn.1400b94d0
cmp byte [0x14016b408], r12b
jne 0x140041813
lea rcx, [0x14016b410]
call fcn.14003aa50
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x4f0], rbx
lea rax, [0x1400441d0]
mov qword [rsp + 0x500], rdi
mov edx, 0x7f00
xor ecx, ecx
mov qword [rsp + 0x4d0], r13
mov qword [rbp + 0x298], rax
mov dword [rbp + 0x290], 0x50
mov dword [rbp + 0x294], 0x40
mov qword [rbp + 0x2a0], r12
mov qword [rbp + 0x2a8], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x2b0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x2c0], r12
mov qword [rbp + 0x2b8], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x2c8], rax
lea rax, str.WipX_Corp
mov qword [rbp + 0x2d0], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x290]
mov qword [rbp + 0x2d8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r13d, 1
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0xd2]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
lea r8, [0x140149e74]
mov qword [rsp + 0x50], r12
cdq
mov qword [rsp + 0x48], r12
sub eax, edx
mov rdx, qword [rbp + 0x2d0]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov dword [rsp + 0x38], 0x1a4
sar eax, 1
sub eax, 0x96
mov dword [rsp + 0x30], Ordinal_301
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x14016b120], rax
lea edx, [r13 - 0x15]
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x14016b120]
lea edx, [r13 - 0x15]
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x14016b120]
lea r9d, [r13 + 1]
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rdi, qword [0x14016b120]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x1400419ef
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400419e6
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp - 0x68]
mov qword [rbp + 0x278], rcx
lea rdx, [rbp + 0x270]
mov rcx, rdi
mov dword [rbp + 0x270], reloc.WS2_32.dll_send
movdqu xmmword [rbp - 0x68], xmm0
mov dword [rbp + 0x280], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movdqa xmm0, xmmword [0x14014ae00]
lea rdx, [rbp + 0x308]
mov rcx, qword [0x14016b120]
movdqu xmmword [rbp + 0x308], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x14016b120]
lea rdx, [0x14016b130]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x14016b120]
lea rcx, [rsp + 0x68]
mov qword [rbp + 0x210], rax
xor r9d, r9d
lea rax, [0x14016b4a8]
mov qword [rbp + 0x1f4], r12
mov qword [rsp + 0x58], rax
xor r8d, r8d
lea rax, [rbp - 0x80]
mov qword [rbp + 0x208], 2
mov qword [rsp + 0x50], rax
mov edx, r13d
lea rax, [0x14016b4a0]
mov qword [rbp + 0x220], 2
mov qword [rsp + 0x48], rax
lea rax, [0x14016b498]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rcx
xor ecx, ecx
mov qword [rbp + 0x1e0], r12
mov dword [rbp + 0x1f0], Ordinal_33
mov dword [rbp + 0x1e8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x1ec], r13d
mov dword [rbp + reloc.WLDAP32.dll_Ordinal_324], 0x20
mov qword [rbp + 0x1fc], r13
mov qword [rbp + 0x218], r13
mov dword [rsp + 0x68], 0xb000
mov dword [rsp + 0x6c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140041b25
call fcn.140044150
mov rdx, qword [rbp + 0x2a8]
mov rcx, qword [rbp + 0x2d0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r13d
jmp 0x1400440eb
mov rcx, qword [0x14016b498]
lea r9, [rsp + 0x60]
mov qword [rsp + 0x4f8], rsi
lea r8, [0x14014abd0]
mov qword [rsp + 0x4c8], r14
xor edx, edx
movaps xmmword [rsp + 0x4b0], xmm6
mov rax, qword [rcx]
movaps xmmword [rsp + 0x4a0], xmm7
movaps xmmword [rsp + 0x490], xmm8
movaps xmmword [rsp + 0x480], xmm9
movaps xmmword [rsp + 0x470], xmm10
movaps xmmword [rsp + 0x460], xmm11
movaps xmmword [rsp + 0x450], xmm12
movaps xmmword [rsp + 0x440], xmm13
movaps xmmword [rsp + 0x430], xmm14
movaps xmmword [rsp + 0x420], xmm15
call qword [rax + 0x48]
mov rcx, qword [0x14016b4a0]
lea r9, [0x14016b490]
mov rdx, qword [rsp + 0x60]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14016b120]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14016b120]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x14016b0c0]
test rbx, rbx
je 0x140041c00
inc dword [rbx + 0xf4]
mov ecx, 0x5dd8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140041c1c
xor edx, edx
mov rcx, rax
call fcn.140001af0
jmp 0x140041c1f
mov rax, r12
mov qword [0x14016b0c0], rax
call fcn.140006280
test rbx, rbx
je 0x140041c39
mov qword [0x14016b0c0], rbx
jmp 0x140041c40
mov rbx, qword [0x14016b0c0]
test rbx, rbx
jne 0x140041c66
mov r8d, 0xfd8
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b0c0]
mov rsi, qword [rbx + 0x58]
xorps xmm6, xmm6
movss xmm14, dword [0x14014adc4]
xor eax, eax
movups xmmword [rbp + 0x1f0], xmm6
mov qword [rbp + 0x260], rax
mov eax, 0xffff
movups xmmword [rbp + 0x220], xmm6
mov dword [rbp + 0x1f8], 3
movups xmmword [rbp + 0x230], xmm6
mov dword [rbp + 0x1fc], r13d
movups xmmword [rbp + 0x1e0], xmm6
mov byte [rbp + 0x1ec], r13b
mov dword [rbp + 0x224], 0x7f7fffff
mov dword [rbp + 0x230], 0x3f800000
mov word [rbp + 0x234], ax
mov dword [rbp + 0x22c], 0x10c
cmp byte [rsi + 0x18], r12b
je 0x140041cfd
mov r8d, 0x89b
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm7, xmmword [rbp + 0x1e0]
movaps xmm8, xmmword [rbp + 0x1f0]
movq rdi, xmm7
movaps xmm9, xmmword [rbp + 0x220]
movaps xmm10, xmmword [rbp + 0x230]
movsd xmm11, qword [rbp + 0x260]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x140041d72
mov r8d, 0x89d
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r15, [0x140161110]
mov dword [rbp - 0x48], 0x8574
lea r14, [0x140147f78]
mov qword [rbp - 0x50], r15
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x18], r14
mov rcx, rsi
mov dword [rbp - 0x3c], 0x41b00000
call fcn.140025fe0
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], r12b
je 0x140041dc6
mov r8d, 0x89b
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x140041e0e
mov r8d, 0x89d
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], r15
mov rcx, rsi
mov dword [rbp - 0x48], 0x8574
mov dword [rbp - 0x3c], 0x41a00000
mov qword [rbp - 0x18], r14
call fcn.140025fe0
mov rsi, qword [rbx + 0x58]
mov qword [0x14016b0d0], rax
cmp byte [rsi + 0x18], r12b
je 0x140041e5b
mov r8d, 0x89b
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x140041ea3
mov r8d, 0x89d
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r15, [0x140169690]
mov dword [rbp - 0x48], 0xb98
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], r15
mov rcx, rsi
mov dword [rbp - 0x3c], 0x41b00000
mov qword [rbp - 0x18], r14
call fcn.140025fe0
mov rbx, qword [rbx + 0x58]
cmp byte [rbx + 0x18], r12b
je 0x140041ef0
mov r8d, 0x89b
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x50], xmm7
movaps xmmword [rbp - 0x40], xmm8
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x20], xmm6
movaps xmmword [rbp - 0x10], xmm9
movaps xmmword [rbp], xmm10
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movsd qword [rbp + 0x30], xmm11
test rdi, rdi
je 0x140041f38
mov r8d, 0x89d
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], r15
mov rcx, rbx
mov dword [rbp - 0x48], 0xb98
mov dword [rbp - 0x3c], 0x41880000
mov qword [rbp - 0x18], r14
call fcn.140025fe0
xor ecx, ecx
call fcn.140020a20
mov rbx, qword [0x14016b0c0]
mov rsi, qword [0x14016b120]
test rbx, rbx
jne 0x140041f95
mov r8d, 0xfd8
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b0c0]
cmp qword [rbx + 0x98], r12
je 0x140041fb8
mov r8d, 0x75
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffff_backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14004212d
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14004212d
mov rax, qword [0x14016b0c0]
test rax, rax
je 0x140041fee
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x14004201b
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x14004201e
mov rdi, r12
or dword [rbx + 0xc], 6
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, qword [0x14016b0c0]
mov qword [rdi], rsi
mov rax, qword [rbp - 0x78]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp - 0x70]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
cmp dword [rbx + 0x4870], r12d
jg 0x14004207b
mov r8d, 0x6ff
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rbx, r12
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x2e0], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x2e8], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x2f0], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x2f8], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], rsi
mov qword [rbp + 0x300], rax
mov byte [rdi + 0x2d], r13b
nop word [rax + rax]
mov rcx, qword [rbp + rbx*8 + 0x2e0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x140042101
inc rbx
cmp rbx, 5
jl 0x1400420e0
jmp 0x14004212d
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x14016b0c0]
mov r14, qword [0x14016b4a8]
mov rsi, qword [0x14016b4a0]
test rax, rax
jne 0x140042168
mov r8d, 0xfd8
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b0c0]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r12
je 0x140042196
mov r8d, 0x221
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffff_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b0c0]
test rax, rax
je 0x1400421a1
inc dword [rax + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x1400421e2
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x1400421e5
mov rbx, r12
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rsp + 0x60]
mov qword [rdi + 0x98], rbx
lea rdx, [0x1401497c0]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
call qword [rax]
test eax, eax
jne 0x14004226b
mov rcx, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
lea rdx, [0x1401497d0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14004226b
mov rcx, qword [rsp + 0x70]
lea r8, [rsp + 0x68]
lea rdx, [0x1401497e0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x14004226b
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rsp + 0x68]
mov qword [rbx + 0x10], rax
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14004227b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14004228b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
call fcn.140040330
movss xmm9, dword [0x14014ac20]
lea r15, [0x14016b410]
movss xmm13, dword [0x14014ad18]
xor r14b, r14b
movss xmm15, dword [0x14014ada0]
xorps xmm8, xmm8
movss xmm11, dword [0x14014add8]
movss xmm12, dword [0x14014ac50]
movss xmm10, dword [0x14014ad04]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, [rbp + 0x1e0]
xor edx, edx
lea rdi, str.Genjutsu_X_External
mov esi, 5
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140042361
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x1e8], 0x12
lea rcx, [rbp + 0x1e0]
movzx r14d, r14b
cmove r14d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140042311
test r14b, r14b
jne 0x140043ebb
mov rbx, qword [0x14016b0c0]
test rbx, rbx
je 0x14004237b
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x140042398
jmp 0x14004237e
mov rbx, r12
mov r8d, 0x250
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffff_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], r12
jne 0x1400423a3
call fcn.14003c700
call fcn.14003d8b0
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400423c6
cmp byte [reloc.WS2_32.dll_accept], r12b
sete byte [0x14016a2fc]
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400424cc
cmp byte [0x14016b14d], r12b
je 0x1400424cc
cmp byte [0x14016b147], r12b
je 0x14004245a
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x80], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x80]
mov r8d, r13d
lea r9, [0x140112f30]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140112f40]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x1400424c6
mov rax, qword [rbp - 0x80]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x80]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x80]
jmp 0x1400424c0
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x78], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x78]
mov r8d, r13d
lea r9, [0x140112f30]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140112f40]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x1400424c6
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x78]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, 0x7a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140042548
cmp byte [0x14016b0dc], r12b
je 0x140042548
cmp byte [0x14016b140], r12b
je 0x140042548
lea rcx, str.taskkill__f__im_HD_Player.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_MEmuHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_LdVBoxHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_AndroidProcess.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Nox.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_26
lea rdx, str.Destruct_emulator_:_Done_
lea rcx, [0x14016a258]
call fcn.14003ac90
mov rax, qword [0x14016b0c0]
test rax, rax
jne 0x140042575
mov r8d, 0xfd8
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b0c0]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x14016a2f8]
mulss xmm0, dword [0x14014acf8]
cmp ecx, 0xff
jg 0x14004259e
cmp byte [reloc.WS2_32.dll_accept], r12b
mov eax, Ordinal_301
jne 0x1400425a1
mov eax, r12d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x14016a2f8], r8d
cmp r8d, 0xff
jle 0x1400425de
mov dword [0x14016a2f8], 0xff
mov r8d, 0xff
mov rcx, qword [0x14016b120]
xor edx, edx
lea r9d, [rdx + 2]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x14016a2f8], r12d
mov edx, r12d
mov rcx, qword [0x14016b120]
cmovg edx, esi
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140008ae0
movzx eax, byte [0x14016b0ba]
test al, al
jne 0x140042d50
mov rax, qword [0x14016b0c0]
test rax, rax
jne 0x14004264c
mov r8d, 0xb67
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b0c0]
mov dword [rax + 0x37f0], 0x41200000
lea rcx, str.Genjutsu_X
mov dword [rax + 0x380c], 0x41200000
xor edx, edx
mov dword [rax + 0x37e8], r12d
mov r8d, 0x20bb
mov dword [rax + 0x37ec], 0x41f00000
mov dword [rax + 0x37f4], r12d
mov dword [rax + 0x3824], 0x40800000
mov qword [rax + 0x382c], r12
mov dword [rax + 0x3854], 0x40c00000
mov qword [rax + 0x3814], 0x41000000
movss xmm1, dword [0x14016a228]
movss xmm2, dword [0x14016a22c]
movss xmm3, dword [0x14016a230]
mov dword [rbp + 0x164], 0x3f800000
movups xmm0, xmmword [rbp + 0x158]
mov dword [rbp + 0x1b4], 0x3f800000
movss xmm0, xmm1
mulss xmm1, xmm9
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
mulss xmm2, xmm9
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
mulss xmm3, xmm9
shufps xmm0, xmm0, 0xc9
movups xmmword [0x14016b7a8], xmm0
movups xmmword [rbp + 0x158], xmm0
movups xmm0, xmmword [rbp + 0x1a8]
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
shufps xmm0, xmm0, 0xc9
movups xmmword [0x14016b8b8], xmm0
or dword [rax + 0x4778], 2
mov dword [rax + 0x4798], 0x43960000
mov dword [rax + 0x479c], 0x43d20000
mov dword [rax + 0x4780], r13d
movups xmmword [rbp + 0x1a8], xmm0
call fcn.14000ebd0
mov rcx, qword [0x14016b120]
lea rdx, [0x14016b130]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x14016b0c0]
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm8
movss xmm1, dword [rax + 0x1c]
jp 0x1400427a5
jne 0x1400427a5
ucomiss xmm1, xmm8
jp 0x1400427a5
je 0x140042817
movd xmm0, dword [0x14016b134]
mov r9d, Ordinal_301
mov rcx, qword [0x14016b120]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x1a4
addss xmm0, xmm1
movd xmm1, dword [0x14016b130]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x14016b0c0]
lea rdx, [rbp + 0x100]
xor r8d, r8d
mov qword [rbp + 0x100], r12
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400124b0
mov rcx, qword [0x14016b0c0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x14016a258]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r13b
addss xmm1, xmm13
addss xmm0, xmm15
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14016a258]
call fcn.14002ec70
mov r8, qword [0x14016b0c0]
lea rcx, [rbp + 0x1c8]
mov rax, qword [r8 + 0x3ea0]
mov byte [rax + 0xb0], r13b
movss xmm1, dword [0x14016b56c]
movss xmm0, dword [0x14016b568]
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x1cc], xmm1
movss xmm1, dword [0x14016b574]
mulss xmm1, dword [r8 + 0x37e0]
mov rbx, qword [rax + 0x290]
movss dword [rbp + 0x1c8], xmm0
movss xmm0, dword [0x14016b570]
movss dword [rbp + 0x1d4], xmm1
movss dword [rbp + 0x1d0], xmm0
call fcn.140003fc0
mov rdx, qword [r8 + 0x3ea0]
movaps xmm3, xmm14
movss xmm2, dword [r8 + 0x3c00]
mov esi, eax
mov rcx, qword [r8 + 0x3bf8]
mov qword [rsp + 0x30], r12
movss xmm6, dword [rdx + 0x20]
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm11
call fcn.1400289e0
movss xmm0, dword [rbp + 0x110]
mov dword [rbp + 0x11c], 0x41400000
addss xmm0, xmm12
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x110], xmm1
subss xmm6, xmm1
mulss xmm6, xmm9
addss xmm6, xmm8
movss dword [rbp + 0x118], xmm6
test esi, 0xff000000
je 0x140042a13
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x1400429bb
mov r8d, 0x65b
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x140149f73]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0x118]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.Genjutsu_X_External
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp + 0x40], xmm0
call fcn.140028c00
lea rdi, str.Genjutsu_X_External
mov rbx, qword [0x14016b0c0]
cmp dword [rbx + 0x4870], r12d
jg 0x140042a3d
mov r8d, 0x6ff
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008150
movss xmm1, dword [0x14016b57c]
mov r10, rax
movss xmm0, dword [0x14016b578]
mov rcx, qword [0x14016b0c0]
movss dword [rbp + 0x12c], xmm1
movss xmm1, dword [0x14016b584]
movss dword [rbp + 0x128], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x128]
mov dword [rbp + 0x120], 0x43960000
movss xmm0, dword [0x14016b580]
movss dword [rbp + 0x130], xmm0
movss dword [rbp + 0x134], xmm1
mov dword [rbp + 0x124], 0x42340000
mov qword [rbp + 0x60], r12
call fcn.140003fc0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0x60]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x120]
mov rcx, r10
call fcn.140024a40
mov rbx, qword [0x14016b0c0]
cmp dword [rbx + 0x4870], r12d
jg 0x140042b1a
mov r8d, 0x6ff
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008150
movaps xmm0, xmmword [0x14014af60]
lea rcx, [rbp + 0x40]
movups xmmword [rbp + 0x40], xmm0
mov r10, rax
mov dword [rbp + 0x68], 0x43960000
mov dword [rbp + 0x6c], 0x43d20000
mov dword [rbp + 0x70], r12d
mov dword [rbp + 0x74], 0x42340000
call fcn.140003fc0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0x70]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x68]
mov rcx, r10
call fcn.140024a40
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
jne 0x14004411c
mov rcx, qword [0x14016b0c0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r13b
addss xmm1, xmm13
addss xmm0, dword [0x14014ad4c]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.140016010
lea rdx, [rbp + 0x78]
mov dword [rbp + 0x78], 0x43898000
lea rcx, str.Login
mov dword [rbp + 0x7c], 0x43e28000
call fcn.14000bdd0
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x80]
mov qword [rsp + 0x30], r12
lea r8, [0x14016b150]
mov dword [rsp + 0x28], r12d
lea rcx, str.Username00
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x80], r12
call fcn.140034350
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x88]
mov qword [rsp + 0x30], r12
lea r8, [0x14016b0e0]
mov dword [rsp + 0x28], r12d
lea rcx, str.Password.00
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x88], r12
call fcn.140034350
lea rdx, [rbp + 0x90]
mov dword [rbp + 0x90], 0x43480000
lea rcx, str.Login
mov dword [rbp + 0x94], 0x42200000
call fcn.14002f650
test al, al
je 0x140042d35
lea rdx, [0x14016b0e0]
lea rcx, [rbp + 0x40]
call fcn.14003ab50
lea rdx, [0x14016b150]
mov rbx, rax
lea rcx, [rbp + 0x2e0]
call fcn.14003ab50
mov r8, rbx
lea rcx, [0x14016b1f0]
mov rdx, rax
call fcn.1400baba0
cmp byte [0x14016b408], r12b
je 0x140042d01
mov byte [0x14016b0ba], r13b
jmp 0x140042d35
cmp qword [0x14016b428], 0xf
mov rdx, r15
mov r8, 0xffffffffffffffff
cmova rdx, qword [0x14016b410]
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], r12b
jne 0x140042d20
lea rcx, [0x14016a258]
call fcn.14003ac90
call fcn.14000bee0
call fcn.140016160
call fcn.14003fff0
call fcn.1400115b0
movzx eax, byte [0x14016b0ba]
cmp al, r13b
jne 0x140043e0f
mov rax, qword [0x14016b0c0]
test rax, rax
jne 0x140042d86
mov r8d, 0xb67
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b0c0]
mov dword [rax + 0x37f0], 0x41200000
lea rcx, str.Genjutsu_X
mov dword [rax + 0x380c], 0x41200000
xor edx, edx
mov dword [rax + 0x37e8], r12d
mov r8d, 0x20bb
mov dword [rax + 0x37ec], 0x41f00000
mov dword [rax + 0x37f4], r12d
mov dword [rax + 0x3824], 0x40800000
mov qword [rax + 0x382c], r12
mov dword [rax + 0x3854], 0x40c00000
mov qword [rax + 0x3814], 0x41000000
movss xmm1, dword [0x14016a228]
movss xmm2, dword [0x14016a22c]
movss xmm3, dword [0x14016a230]
mov dword [rbp + 0x144], 0x3f800000
movups xmm0, xmmword [rbp + 0x138]
mov dword [rbp + 0x154], 0x3f800000
movss xmm0, xmm1
mulss xmm1, xmm9
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
mulss xmm2, xmm9
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
mulss xmm3, xmm9
shufps xmm0, xmm0, 0xc9
movups xmmword [0x14016b7a8], xmm0
movups xmmword [rbp + 0x138], xmm0
movups xmm0, xmmword [rbp + 0x148]
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
shufps xmm0, xmm0, 0xc9
movups xmmword [0x14016b8b8], xmm0
or dword [rax + 0x4778], 2
mov dword [rax + 0x4798], 0x43960000
mov dword [rax + 0x479c], 0x43d20000
mov dword [rax + 0x4780], r13d
movups xmmword [rbp + 0x148], xmm0
call fcn.14000ebd0
cmp byte [0x14016b0bb], r12b
lea rdx, [0x14016b130]
mov rcx, qword [0x14016b120]
jne 0x140043415
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x14016b0c0]
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm8
movss xmm1, dword [rax + 0x1c]
jp 0x140042eec
jne 0x140042eec
ucomiss xmm1, xmm8
jp 0x140042eec
je 0x140042f5e
movd xmm0, dword [0x14016b134]
mov r9d, Ordinal_301
mov rcx, qword [0x14016b120]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x1a4
addss xmm0, xmm1
movd xmm1, dword [0x14016b130]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x14016b0c0]
lea rdx, [rbp + 0x98]
xor r8d, r8d
mov qword [rbp + 0x98], r12
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400124b0
mov rcx, qword [0x14016b0c0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x14016a258]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r13b
addss xmm1, xmm13
addss xmm0, xmm15
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14016a258]
call fcn.14002ec70
mov r8, qword [0x14016b0c0]
lea rcx, [rbp + 0x1b8]
mov rax, qword [r8 + 0x3ea0]
mov byte [rax + 0xb0], r13b
movss xmm1, dword [0x14016b56c]
movss xmm0, dword [0x14016b568]
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x1bc], xmm1
movss xmm1, dword [0x14016b574]
mulss xmm1, dword [r8 + 0x37e0]
mov rbx, qword [rax + 0x290]
movss dword [rbp + 0x1b8], xmm0
movss xmm0, dword [0x14016b570]
movss dword [rbp + 0x1c4], xmm1
movss dword [rbp + 0x1c0], xmm0
call fcn.140003fc0
movss xmm2, dword [r8 + 0x3c00]
lea rdx, [rbp + 0xa0]
mov rcx, qword [r8 + 0x3bf8]
movaps xmm3, xmm14
mov qword [rsp + 0x30], r12
mov esi, eax
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm11
call fcn.1400289e0
movss xmm0, dword [rbp + 0xa0]
mov rdi, qword [0x14016b0c0]
addss xmm0, xmm12
mov dword [rbp + 0xac], 0x41400000
mov rax, qword [rdi + 0x3ea0]
cvttss2si ecx, xmm0
movss xmm0, dword [rax + 0x20]
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xa0], xmm1
subss xmm0, xmm1
mulss xmm0, xmm9
addss xmm0, xmm8
movss dword [rbp + 0xa8], xmm0
test esi, 0xff000000
je 0x140043161
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x140043109
mov r8d, 0x65b
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x140149f73]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.Genjutsu_X_External
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp + 0x40], xmm0
call fcn.140028c00
mov rdi, qword [0x14016b0c0]
cmp dword [rdi + 0x4870], r12d
jg 0x140043184
mov r8d, 0x6ff
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008150
movss xmm1, dword [0x14016b57c]
mov r10, rax
movss xmm0, dword [0x14016b578]
mov rcx, qword [0x14016b0c0]
movss dword [rbp + 0x16c], xmm1
movss xmm1, dword [0x14016b584]
movss dword [rbp + 0x168], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x168]
mov dword [rbp + 0xd8], 0x43960000
movss xmm0, dword [0x14016b580]
movss dword [rbp + 0x170], xmm0
movss dword [rbp + 0x174], xmm1
mov dword [rbp + 0xdc], 0x42340000
mov qword [rbp + 0xb0], r12
call fcn.140003fc0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0xb0]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0xd8]
mov rcx, r10
call fcn.140024a40
mov rbx, qword [0x14016b0c0]
cmp dword [rbx + 0x4870], r12d
jg 0x140043267
mov r8d, 0x6ff
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008150
movaps xmm0, xmmword [0x14014af60]
lea rcx, [rbp + 0x40]
movups xmmword [rbp + 0x40], xmm0
mov r10, rax
mov dword [rbp + 0xb8], 0x43960000
mov dword [rbp + 0xbc], 0x43d20000
mov dword [rbp + 0xc0], r12d
mov dword [rbp + 0xc4], 0x42340000
call fcn.140003fc0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0xc0]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0xb8]
mov rcx, r10
call fcn.140024a40
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
jne 0x14004411c
mov rcx, qword [0x14016b0c0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
mov byte [rax + 0x139], r13b
addss xmm1, dword [0x14014acb4]
addss xmm0, dword [0x14014ad4c]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
call fcn.140016010
lea rdx, [rbp + 0xc8]
mov dword [rbp + 0xc8], 0x43910000
lea rcx, str.List_Of_Hacks
mov dword [rbp + 0xcc], 0x43e28000
call fcn.14000bdd0
mov rcx, qword [0x14016b0c0]
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x248]
subss xmm0, xmm1
cmp qword [rax + 0x1a0], r12
jne 0x1400433ae
cmp qword [rcx + 0x4ae8], r12
je 0x1400433ba
movss xmm0, dword [rax + 0x218]
subss xmm0, xmm1
subss xmm0, dword [0x14014ad0c]
lea rdx, [rbp + 0xd0]
mov dword [rbp + 0xd4], 0x42200000
lea rcx, str.External_Aimbot
movss dword [rbp + 0xd0], xmm0
call fcn.14002f650
mov r8d, 0x20108
mov byte [0x14016b14a], al
lea rdx, [0x14016a228]
lea rcx, str.Change_Theme_Color0
call fcn.140036dc0
call fcn.14000bee0
call fcn.140016160
jmp 0x140043a8b
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r8, qword [0x14016b0c0]
mov rax, qword [r8 + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm8
movss xmm1, dword [rax + 0x1c]
jp 0x140043443
jne 0x140043443
ucomiss xmm1, xmm8
jp 0x140043443
je 0x1400434b5
movd xmm0, dword [0x14016b134]
mov r9d, Ordinal_301
mov rcx, qword [0x14016b120]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x1a4
addss xmm0, xmm1
movd xmm1, dword [0x14016b130]
cvtdq2ps xmm1, xmm1
cvttss2si r8d, xmm0
addss xmm1, xmm2
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x14016b0c0]
lea rdx, [rbp + 0x108]
xor r8d, r8d
mov qword [rbp + 0x108], r12
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400124b0
mov r8, qword [0x14016b0c0]
mov rax, qword [r8 + 0x3ea0]
lea rcx, [rbp + 0x178]
mov byte [rax + 0xb0], r13b
movss xmm1, dword [0x14016b56c]
movss xmm0, dword [0x14016b568]
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x17c], xmm1
movss xmm1, dword [0x14016b574]
mulss xmm1, dword [r8 + 0x37e0]
mov rbx, qword [rax + 0x290]
movss dword [rbp + 0x178], xmm0
movss xmm0, dword [0x14016b570]
movss dword [rbp + 0x184], xmm1
movss dword [rbp + 0x180], xmm0
call fcn.140003fc0
movss xmm2, dword [r8 + 0x3c00]
lea rdx, [rbp + 0xe0]
mov rcx, qword [r8 + 0x3bf8]
movaps xmm3, xmm14
mov qword [rsp + 0x30], r12
mov esi, eax
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm11
call fcn.1400289e0
movss xmm0, dword [rbp + 0xe0]
mov rdi, qword [0x14016b0c0]
addss xmm0, xmm12
mov dword [rbp + 0xec], 0x41400000
mov rax, qword [rdi + 0x3ea0]
cvttss2si ecx, xmm0
movss xmm0, dword [rax + 0x20]
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xe0], xmm1
subss xmm0, xmm1
mulss xmm0, xmm9
addss xmm0, xmm8
movss dword [rbp + 0xe8], xmm0
test esi, 0xff000000
je 0x140043648
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x1400435f0
mov r8d, 0x65b
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x140149f73]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0xe8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.Genjutsu_X_External
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp + 0x40]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp + 0x40], xmm0
call fcn.140028c00
mov rdi, qword [0x14016b0c0]
cmp dword [rdi + 0x4870], r12d
jg 0x14004366b
mov r8d, 0x6ff
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008150
movss xmm1, dword [0x14016b57c]
mov r10, rax
movss xmm0, dword [0x14016b578]
mov rcx, qword [0x14016b0c0]
movss dword [rbp + 0x18c], xmm1
movss xmm1, dword [0x14016b584]
movss dword [rbp + 0x188], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x188]
mov dword [rbp + 0xf0], 0x43960000
movss xmm0, dword [0x14016b580]
movss dword [rbp + 0x190], xmm0
movss dword [rbp + 0x194], xmm1
mov dword [rbp + 0xf4], 0x42340000
mov qword [rbp + 0xf8], r12
call fcn.140003fc0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0xf8]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0xf0]
mov rcx, r10
call fcn.140024a40
mov rbx, qword [0x14016b0c0]
cmp dword [rbx + 0x4870], r12d
jg 0x14004374e
mov r8d, 0x6ff
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008150
movaps xmm0, xmmword [0x14014af60]
lea rcx, [rbp + 0x40]
movups xmmword [rbp + 0x40], xmm0
mov r10, rax
mov dword [rbp - 0x70], 0x43960000
mov dword [rbp - 0x6c], 0x43d20000
mov dword [rbp - 0x78], r12d
mov dword [rbp - 0x74], 0x42340000
call fcn.140003fc0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp - 0x78]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp - 0x70]
mov rcx, r10
call fcn.140024a40
mov rbx, qword [0x14016b0c0]
mov rax, qword [rbx + 0x3ea0]
movss xmm1, dword [rbx + 0x18]
addss xmm1, xmm1
movss xmm6, dword [rax + 0x18]
movss xmm7, dword [rax + 0x1c]
addss xmm1, dword [0x14016b950]
comiss xmm8, xmm1
jbe 0x1400437ed
movaps xmm0, xmm8
jmp 0x1400437f9
movss xmm0, dword [0x14014ac58]
minss xmm0, xmm1
mulss xmm0, dword [rbx + 0x37e0]
movss dword [0x14016b950], xmm0
cmp dword [rbx + 0x4870], r12d
jg 0x14004382c
mov r8d, 0x6ff
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Foreground
mov rdx, r13
mov rcx, qword [rax]
call fcn.140008150
mov rcx, qword gs:[0x58]
mov rbx, rax
addss xmm6, dword [0x14014ad78]
addss xmm7, dword [0x14014ad94]
mov eax, 4
mov rdx, qword [rcx]
movss dword [rsp + 0x68], xmm6
movups xmm6, xmmword [0x14016b7a8]
mov ecx, dword [rax + rdx]
cmp dword [0x14016b968], ecx
movss dword [rsp + 0x6c], xmm7
jle 0x1400438b6
lea rcx, [0x14016b968]
call fcn.14010e64c
cmp dword [0x14016b968], 0xffffffff
jne 0x1400438b6
movaps xmm0, xmmword [0x14014afb0]
lea rcx, [0x14016b968]
movups xmmword [0x14016b958], xmm0
call fcn.14010e5e0
mov rax, qword [0x14016b0c0]
test rax, rax
jne 0x1400438e3
mov r8d, 0xfd8
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b0c0]
movss xmm3, dword [0x14014ace0]
lea rdx, [rsp + 0x68]
movss xmm2, dword [rax + 0x18]
movaps xmm0, xmm3
mulss xmm2, dword [0x14014ac88]
mov rcx, rbx
mov dword [rsp + Ordinal_41], 0x28
subss xmm0, dword [0x14016b4b8]
movss dword [rsp + 0x20], xmm3
movaps xmm3, xmm8
mov dword [rbx + 0x78], r12d
mulss xmm2, xmm0
addss xmm2, dword [0x14016b4b8]
movss dword [0x14016b4b8], xmm2
movss xmm2, dword [0x14014ad4c]
call fcn.140023bd0
movss xmm1, dword [0x14016b95c]
lea rcx, [rbp + 0x198]
movss xmm0, dword [0x14016b958]
mov rax, qword [0x14016b0c0]
movss dword [rbp + 0x19c], xmm1
movss xmm1, dword [0x14016b964]
movss dword [rbp + 0x198], xmm0
mulss xmm1, dword [rax + 0x37e0]
movss xmm0, dword [0x14016b960]
movss dword [rbp + 0x1a0], xmm0
movss dword [rbp + 0x1a4], xmm1
call fcn.140003fc0
movss xmm0, dword [0x14014acf8]
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.1400223e0
movss xmm3, dword [0x14016b4b8]
lea rdx, [rsp + 0x68]
movss xmm2, dword [0x14014ad4c]
movaps xmm0, xmm3
addss xmm0, dword [0x14014acd4]
addss xmm3, dword [0x14014acac]
mov dword [rsp + Ordinal_41], 0x28
mov rcx, rbx
mov dword [rbx + 0x78], r12d
movss dword [rsp + 0x20], xmm0
call fcn.140023bd0
mov rax, qword [0x14016b0c0]
lea rcx, [rbp - 0x68]
movaps xmm0, xmm6
movss dword [rbp - 0x68], xmm6
movaps xmm1, xmm6
shufps xmm0, xmm6, 0x55
shufps xmm1, xmm6, 0xaa
shufps xmm6, xmm6, 0xff
mulss xmm6, dword [rax + 0x37e0]
movss dword [rbp - 0x64], xmm0
movss dword [rbp - 0x60], xmm1
movss dword [rbp - 0x5c], xmm6
call fcn.140003fc0
movss xmm0, dword [0x14014acf8]
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.1400223e0
movss xmm0, dword [0x14016b4b8]
comiss xmm0, dword [0x14014acc4]
mov dword [rbx + 0x78], r12d
jb 0x140043a8b
mov dword [0x14016b4b8], r12d
cmp byte [0x14016b14e], r12b
je 0x140043b76
cmp byte [0x14016b148], r12b
je 0x140043b29
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Internet_Block:_Enabled
jmp 0x140043b6a
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_26
lea rdx, str.Internet_Block:_Disabled
lea rcx, [0x14016a258]
call fcn.14003ac90
cmp byte [0x14016b0dc], r12b
je 0x140043bd9
lea rcx, str.taskkill__f__im_HD_Player.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_MEmuHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_LdVBoxHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_AndroidProcess.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Nox.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_26
lea rdx, str.Destruct_emulator_:_Done_
lea rcx, [0x14016a258]
call fcn.14003ac90
cmp byte [0x14016b14f], r12b
je 0x140043cb3
mov r8d, dword [0x14016b1ec]
xor edx, edx
cmp byte [0x14016b149], r12b
mov ecx, 0xc00
je 0x140043c53
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140043c44
cmp byte [0x14016b0bd], r12b
mov rcx, rax
jne 0x140043c2a
call qword [sym.imp.ntdll.dll_NtSuspendProcess]
test eax, eax
jne 0x140043c3b
mov byte [0x14016b0bd], r13b
jmp 0x140043c3b
call qword [sym.imp.ntdll.dll_NtResumeProcess]
test eax, eax
jne 0x140043c3b
mov byte [0x14016b0bd], r12b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Process_:_Paused
jmp 0x140043ca7
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140043c9a
cmp byte [0x14016b0bd], r12b
mov rcx, rax
jne 0x140043c80
call qword [sym.imp.ntdll.dll_NtSuspendProcess]
test eax, eax
jne 0x140043c91
mov byte [0x14016b0bd], r13b
jmp 0x140043c91
call qword [sym.imp.ntdll.dll_NtResumeProcess]
test eax, eax
jne 0x140043c91
mov byte [0x14016b0bd], r12b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Process_:_Resumed
lea rcx, [0x14016a258]
call fcn.14003ac90
cmp byte [0x14016b14a], r12b
je 0x140043cc3
mov byte [0x14016b1eb], r13b
cmp byte [0x14016b0df], r12b
je 0x140043cdc
cmp byte [0x14016b143], r12b
je 0x140043cdc
mov byte [0x14016b1e8], r13b
cmp byte [0x14016b0de], r12b
je 0x140043cf5
cmp byte [0x14016b142], r12b
je 0x140043cf5
mov byte [0x14016b1ea], r13b
cmp byte [0x14016b14d], r12b
je 0x140043dec
cmp byte [0x14016b147], r12b
je 0x140043d7a
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x70], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x70]
mov r8d, r13d
lea r9, [0x140112f30]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140112f40]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140043de6
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x70]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x70]
jmp 0x140043de0
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x60], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x60]
mov r8d, r13d
lea r9, [0x140112f30]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140112f40]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140043de6
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x60]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x14016b0db], r12b
je 0x140043e05
cmp byte [0x14016b12f], r12b
je 0x140043e05
mov byte [0x14016b1e9], r13b
call fcn.14003fff0
call fcn.1400115b0
call fcn.14000b160
mov rcx, qword [0x14016b4a8]
lea r8, [0x14016b490]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x270], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x14016b4a8]
lea r8, [rbp + 0x270]
mov rdx, qword [0x14016b490]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x14016b0c0]
cmp dword [rbx + 0x4870], r12d
jg 0x140043e83
mov r8d, 0x6ff
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0x48
cmp byte [rcx], r12b
cmovne rax, rcx
mov rcx, rax
call fcn.14003bca0
mov rcx, qword [0x14016b498]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x1400422e7
mov rbx, qword [0x14016b0c0]
test rbx, rbx
je 0x140043ed5
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x140043ef9
jmp 0x140043ed8
mov rdi, r12
mov r8d, 0x241
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffff_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b0c0]
test rbx, rbx
jne 0x140043f1f
mov r8d, 0xfd8
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b0c0]
call fcn.14003cc30
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140043f33
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140043f41
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140043f50
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x14016b0c0]
mov qword [rbx + 0x90], r12
mov qword [rbx + 0xa0], r12
test rax, rax
je 0x140043f70
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x14016b0c0]
test rax, rax
je 0x140043f93
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x140043fb7
jmp 0x140043f96
mov rbx, r12
mov r8d, 0xa7
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffff_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b0c0]
test rax, rax
jne 0x140043fdd
mov r8d, 0xfd8
lea rdx, str.E:ALL_THINGS_OF_PROJECTPROJECTStreetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b0c0]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x140043ff7
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x14016b0c0]
mov qword [rdi + 0x80], r12
mov qword [rdi + 0x90], r12
test rax, rax
je 0x140044010
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14016b0c0]
mov qword [0x14016b0c0], rbx
call fcn.140006650
mov qword [0x14016b0c0], r12
test rbx, rbx
je 0x14004405b
mov rcx, rbx
call fcn.14001fa00
mov rax, qword [0x14016b0c0]
test rax, rax
je 0x140044052
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140044150
mov rcx, qword [0x14016b120]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x2a8]
mov rcx, qword [rbp + 0x2d0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm14, xmmword [rsp + 0x430]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x440]
movaps xmm12, xmmword [rsp + 0x450]
movaps xmm11, xmmword [rsp + 0x460]
movaps xmm10, xmmword [rsp + 0x470]
movaps xmm9, xmmword [rsp + 0x480]
movaps xmm8, xmmword [rsp + 0x490]
movaps xmm7, xmmword [rsp + 0x4a0]
movaps xmm6, xmmword [rsp + 0x4b0]
mov rsi, qword [rsp + 0x4f8]
mov r14, qword [rsp + 0x4c8]
movaps xmm15, xmmword [rsp + 0x420]
mov rdi, qword [rsp + 0x500]
mov r13, qword [rsp + 0x4d0]
mov rbx, qword [rsp + 0x4f0]
mov r15, qword [rsp + 0x4c0]
mov r12, qword [rsp + 0x4d8]
add rsp, 0x4e0
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor r9d, r9d
lea rdx, str.____Run_the_program_as_admin
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3