Function at 0x140031580
Capabilities:
Enumerate process modules
Log keystrokes via polling
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x6c8]
sub rsp, 0x790
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rbp + 0x90]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rbp + 0x40], 0x50
mov dword [rbp + 0x44], 0x40
lea rax, [0x140030590]
mov qword [rbp + 0x48], rax
xor r13d, r13d
mov qword [rbp + 0x50], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x58], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
lea rax, [0x14006fde0]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], r13
lea rcx, [rbp + 0x40]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov eax, dword [rbp + 0x9c]
cdq
sub eax, edx
sar eax, 1
lea r8d, [rax - 0x73]
mov eax, dword [rbp + 0x98]
cdq
sub eax, edx
sar eax, 1
sub eax, 0xaf
mov qword [rsp + 0x58], r13
mov rcx, qword [rbp + 0x58]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], 0xe6
mov dword [rsp + 0x30], 0x15e
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
lea r8, str.dasdasdasdasd
mov rdx, qword [rbp + 0x80]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rsi, rax
mov qword [rsp + 0x78], rax
lea edx, [r13 - 0x14]
mov r8d, 0x80
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
lea r9d, [r13 + 1]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea ecx, [r13 + 0x20]
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x14008b1c8], rax
test rax, rax
je 0x1400330ae
mov qword [0x14008b1e0], r13
mov qword [0x14008b1ec], r13
mov dword [0x14008b1f4], r13d
mov qword [0x14008b1fc], r13
mov dword [0x14008b204], r13d
mov qword [0x14008b214], r13
mov dword [0x14008b208], 1
mov dword [0x14008b1f8], 1
mov dword [0x14008b1e8], r13d
mov dword [0x14008b20c], 1
mov dword [0x14008b210], 0x50
mov dword [0x14008b21c], 0x80000000
mov rax, qword [rax]
lea rdx, [0x14008b1d0]
mov qword [rsp + 0x30], rdx
lea rdx, [0x14008b1e0]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, rsi
xor edx, edx
lea r8d, [r13 + 1]
call qword [rax + 0x80]
test eax, eax
js 0x1400330a7
lea edx, [r13 + 0xa]
mov rcx, rsi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r13 - 1]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rax, qword [0x14008b0a0]
test rax, rax
je 0x140031811
inc dword [rax + 0x3b4]
mov ecx, 0x3db8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0x6e0], rax
lea rcx, [rbp + 0x6d8]
mov qword [rbp + 0x6e8], rcx
mov qword [rbp - 8], rax
test rax, rax
je 0x140031846
xor edx, edx
mov rcx, rax
call fcn.140001750
jmp 0x140031849
mov rax, r13
cmp qword [0x14008b0a0], 0
jne 0x14003185a
mov qword [0x14008b0a0], rax
mov rcx, rax
call fcn.140007d80
mov rbx, qword [0x14008b0a0]
test rbx, rbx
jne 0x14003188f
mov r8d, 0xd3d
lea rdx, str.D:New_ProjectNewNewNewExternalPunchimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14008b0a0]
lea rax, [0x14006f4e8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
movss xmm3, dword [0x1400700b8]
mov r8d, 0x10
lea rdx, [0x140076090]
mov rcx, qword [rbx + 0xa8]
call fcn.1400243e0
cmp qword [0x14008b0a0], 0
jne 0x1400318e5
mov r8d, 0xd3d
lea rdx, str.D:New_ProjectNewNewNewExternalPunchimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
or dword [rbx + 8], 1
xor ecx, ecx
call fcn.14001fa40
lea rcx, [0x14008b1c0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140031aa3
lea rcx, [0x14008b1b8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140031aa3
mov qword [0x14008b1b0], rsi
mov rax, qword [0x14008b0a0]
test rax, rax
jne 0x14003194e
mov r8d, 0xd3d
lea rdx, str.D:New_ProjectNewNewNewExternalPunchimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b0a0]
or dword [rax + 0xc], 6
lea rcx, str.imgui_impl_win32
mov qword [rax + 0xd8], rcx
mov qword [rax + 0x120], rsi
mov dword [rax + 0x3c], 9
mov dword [rax + 0x40], 0x25
mov dword [rax + 0x44], 0x27
mov dword [rax + 0x48], 0x26
mov dword [rax + 0x4c], 0x28
mov dword [rax + 0x50], 0x21
mov dword [rax + 0x54], 0x22
mov dword [rax + 0x58], 0x24
mov dword [rax + 0x5c], 0x23
mov dword [rax + 0x60], 0x2d
mov dword [rax + 0x64], 0x2e
mov dword [rax + 0x68], 8
mov dword [rax + 0x6c], 0x20
mov dword [rax + 0x70], 0xd
mov dword [rax + 0x74], 0x1b
mov dword [rax + 0x78], 0xd
mov dword [rax + 0x7c], 0x41
mov dword [rax + 0x80], 0x43
mov dword [rax + 0x84], 0x56
mov dword [rax + 0x88], 0x58
mov dword [rax + 0x8c], 0x59
mov dword [rax + 0x90], 0x5a
lea rax, str.xinput1_4.dll
mov qword [rbp], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 8], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x10], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x18], rax
lea rax, str.xinput1_1.dll
mov qword [rbp + 0x20], rax
mov rbx, r13
nop word [rax + rax]
mov rcx, qword [rbp + rbx*8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
jne 0x140031a6e
inc rbx
cmp rbx, 5
jl 0x140031a50
jmp 0x140031aa3
mov qword [0x14008b198], rdi
lea rdx, str.XInputGetCapabilities
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008b1a0], rax
lea rdx, str.XInputGetState
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14008b1a8], rax
mov rbx, qword [0x14008b1d0]
mov rax, qword [0x14008b0a0]
test rax, rax
jne 0x140031ad7
mov r8d, 0xd3d
lea rdx, str.D:New_ProjectNewNewNewExternalPunchimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b0a0]
lea rcx, str.imgui_impl_dx9
mov qword [rax + 0xe0], rcx
or dword [rax + 0xc], 8
mov qword [0x14008b180], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
mov rax, qword [0x14008b0a0]
test rax, rax
jne 0x140031b26
mov r8d, 0x952
lea rdx, str.D:New_ProjectNewNewNewExternalPunchimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b0a0]
mov dword [rax + 0x156c], r13d
mov dword [rax + 0x15a0], 0x40400000
mov dword [rax + 0x1570], 0x3f800000
mov dword [rax + 0x157c], 0x3f000000
mov dword [rax + 0x1580], 0x3f000000
mov word [rax + 0x1618], 0x101
mov byte [rax + 0x161a], 1
movaps xmm0, xmmword [0x1400702d0]
movups xmmword [rax + 0x1774], xmm0
test rax, rax
jne 0x140031b99
mov r8d, 0x952
lea rdx, str.D:New_ProjectNewNewNewExternalPunchimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b0a0]
movaps xmm0, xmmword [0x140070330]
movups xmmword [rax + 0x1624], xmm0
movaps xmm1, xmmword [0x140070300]
movups xmmword [rax + 0x1634], xmm1
movaps xmm0, xmmword [0x140070220]
movups xmmword [rax + 0x1644], xmm0
movaps xmm1, xmmword [0x140070270]
movups xmmword [rax + 0x1654], xmm1
movaps xmm0, xmmword [0x140070210]
movups xmmword [rax + 0x1664], xmm0
movaps xmm1, xmmword [0x1400701c0]
movups xmmword [rax + 0x1674], xmm1
xorps xmm0, xmm0
movups xmmword [rax + 0x1684], xmm0
movaps xmm1, xmmword [0x140070290]
movups xmmword [rax + 0x1694], xmm1
movaps xmm0, xmmword [0x1400702c0]
movups xmmword [rax + 0x16a4], xmm0
movaps xmm1, xmmword [0x140070320]
movups xmmword [rax + 0x16b4], xmm1
movaps xmm0, xmmword [0x140070250]
movups xmmword [rax + 0x16c4], xmm0
movaps xmm1, xmmword [0x140070260]
movups xmmword [rax + 0x16d4], xmm1
movaps xmm0, xmmword [0x1400701d0]
movups xmmword [rax + 0x16e4], xmm0
movaps xmm1, xmmword [0x140070270]
movups xmmword [rax + 0x16f4], xmm1
movaps xmm0, xmmword [0x1400701e0]
movups xmmword [rax + 0x1704], xmm0
movaps xmm1, xmmword [0x1400702b0]
movups xmmword [rax + 0x1714], xmm1
movaps xmm0, xmmword [0x1400702e0]
movups xmmword [rax + 0x1724], xmm0
movaps xmm1, xmmword [0x140070310]
movups xmmword [rax + 0x1734], xmm1
movaps xmm0, xmmword [0x140070330]
movups xmmword [rax + 0x1744], xmm0
movaps xmm1, xmmword [0x140070290]
movups xmmword [rax + 0x1754], xmm1
movaps xmm0, xmmword [0x140070320]
movups xmmword [rax + 0x1764], xmm0
movups xmmword [rax + 0x1774], xmm1
movaps xmm0, xmmword [0x1400702c0]
movups xmmword [rax + 0x1784], xmm0
movaps xmm1, xmmword [0x140070320]
movups xmmword [rax + 0x1794], xmm1
movaps xmm0, xmmword [0x140070280]
movups xmmword [rax + 0x17a4], xmm0
movaps xmm1, xmmword [0x1400702c0]
movups xmmword [rax + 0x17b4], xmm1
movaps xmm0, xmmword [0x140070320]
movups xmmword [rax + 0x17c4], xmm0
movaps xmm1, xmmword [0x1400701f0]
movups xmmword [rax + 0x17d4], xmm1
movaps xmm0, xmmword [0x140070200]
movups xmmword [rax + 0x17e4], xmm0
movaps xmm1, xmmword [0x1400702a0]
movups xmmword [rax + 0x17f4], xmm1
movaps xmm0, xmmword [0x1400701f0]
movups xmmword [rax + 0x1804], xmm0
movaps xmm1, xmmword [0x140070200]
movups xmmword [rax + 0x1814], xmm1
movaps xmm0, xmmword [0x1400702a0]
movups xmmword [rax + 0x1824], xmm0
movaps xmm1, xmmword [0x140070270]
movups xmmword [rax + 0x1834], xmm1
movaps xmm0, xmmword [0x1400702c0]
movups xmmword [rax + 0x1844], xmm0
movaps xmm1, xmmword [0x140070320]
movups xmmword [rax + 0x1854], xmm1
movaps xmm0, xmmword [0x140070270]
movups xmmword [rax + 0x1864], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movabs rbx, 0xb88bd7cfeff87cb5
movabs rdi, 0xc60e09f678c47786
movabs r12, 0x98ed98ef889615fe
lea r14, [0x14008b5b0]
lea r15, [0x14008b4e0]
xorps xmm14, xmm14
movss xmm10, dword [0x140070108]
movss xmm15, dword [0x1400700c4]
movss xmm9, dword [0x140070060]
movss xmm11, dword [0x140070070]
movss xmm12, dword [0x14007008c]
movss xmm13, dword [0x140070078]
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x130]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140031e60
lea rcx, [rbp + 0x130]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x130]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x140032f88
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140031eab
cmp byte [0x14008ad85], 0
sete al
mov byte [0x14008ad85], al
mov rcx, rsi
test al, al
je 0x140031e98
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, 0x11
jmp 0x140031ea2
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
cmp byte [0x14008af44], 0
je 0x14003309e
cmp qword [0x14008b170], 0
jne 0x140031ec7
call fcn.14002f650
call fcn.14002fd40
call fcn.140006a90
mov rax, qword [0x14008b0a0]
movss xmm0, dword [0x1400700e4]
movss xmm1, dword [0x1400700d8]
unpcklps xmm0, xmm1
movsd qword [rax + 0x1ba8], xmm0
mov dword [rax + 0x1b90], 2
or dword [rax + 0x1b88], 3
movaps xmm0, xmm14
unpcklps xmm0, xmm14
movsd qword [rax + 0x1b98], xmm0
movaps xmm1, xmm14
unpcklps xmm1, xmm14
movsd qword [rax + 0x1ba0], xmm1
mov dword [rax + 0x1b8c], 2
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], rdi
mov qword [rbp + 0xb0], r12
movabs rax, 0xc60e099e1baa02d6
mov qword [rbp + 0xb8], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x60], xmm0
mov r8d, 0x13e
lea rdx, [0x14008af44]
lea rcx, [rbp - 0x60]
call fcn.14000c400
mov rcx, qword [0x14008b0a0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
mov r12, qword [rax + 0x2b8]
mov qword [rbp - 8], r12
mov ebx, 4
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [rbx + rdi]
cmp dword [0x14008b25c], eax
jle 0x140031ffd
lea rcx, [0x14008b25c]
call fcn.140033944
cmp dword [0x14008b25c], 0xffffffff
jne 0x140031ffd
mov rax, r14
mov ecx, 0x19
nop
mov qword [rax], 0
lea rax, [rax + 8]
sub rcx, 1
jne 0x140031fe0
lea rcx, [0x14008b25c]
call fcn.1400338d8
mov eax, dword [rbx + rdi]
cmp dword [0x14008b248], eax
jle 0x140032034
lea rcx, [0x14008b248]
call fcn.140033944
cmp dword [0x14008b248], 0xffffffff
jne 0x140032034
mov qword [0x14008b250], 0
lea rcx, [0x14008b248]
call fcn.1400338d8
mov eax, dword [rbx + rdi]
cmp dword [0x14008b258], eax
jle 0x14003207b
lea rcx, [0x14008b258]
call fcn.140033944
cmp dword [0x14008b258], 0xffffffff
jne 0x14003207b
mov rax, r15
mov ecx, 0x19
xor edi, edi
nop
mov qword [rax], rdi
lea rax, [rax + 8]
sub rcx, 1
jne 0x140032060
lea rcx, [0x14008b258]
call fcn.1400338d8
jmp 0x14003207d
xor edi, edi
cmp byte [0x14008b230], 0
jne 0x140032182
mov rbx, rdi
nop dword [rax]
mov rax, qword [0x14008b0a0]
mov rcx, qword [rax + 0x1ae0]
movss xmm7, dword [rcx + 0x14]
movss xmm6, dword [rcx + 0x1c]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, xmm6
divss xmm8, xmm10
addss xmm8, xmm7
mov rax, qword [0x14008b0a0]
mov rcx, qword [rax + 0x1ae0]
movss xmm7, dword [rcx + 0x10]
movss xmm6, dword [rcx + 0x18]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, xmm10
addss xmm0, xmm7
movss dword [rbx + r14], xmm0
movss dword [rbx + r14 + 4], xmm8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm6, r8d
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xb
sub r8d, ecx
sub r8d, 5
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [rbx + r15], xmm0
movss dword [rbx + r15 + 4], xmm6
add rbx, 8
cmp rbx, 0xc8
jl 0x140032090
mov byte [0x14008b230], 1
cmp qword [0x14008b0a0], 0
jne 0x1400321a6
mov r8d, 0xd3d
lea rdx, str.D:New_ProjectNewNewNewExternalPunchimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r15d, 1
lea rsi, [0x14008b5b4]
cmp r15d, 0x19
jge 0x1400322a0
lea rbx, [rsi + 4]
movsxd rax, r15d
lea rdi, [r14 + rax*8]
mov r14d, 0x19
sub r14d, r15d
lea r13, [0x14008b5b0]
nop dword [rax + rax]
movss xmm1, dword [rbx + 4]
subss xmm1, dword [rsi]
movss xmm0, dword [rbx]
subss xmm0, dword [rsi - 4]
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
divss xmm0, xmm15
movaps xmm1, xmm9
subss xmm1, xmm0
comiss xmm1, xmm14
jbe 0x14003227b
mov dword [rbp + 0x28], 0x3f800000
mov dword [rbp + 0x2c], 0x3f800000
mov dword [rbp + 0x30], 0x3f800000
mov rax, qword [0x14008b0a0]
movups xmm0, xmmword [rbp + 0x28]
shufps xmm0, xmm0, 0x93
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rbp + 0x28], xmm0
movups xmmword [rbp - 0x80], xmm0
mulss xmm1, dword [rax + 0x1560]
movss dword [rbp - 0x74], xmm1
lea rcx, [rbp - 0x80]
call fcn.140002f40
lea ecx, [r15 - 1]
movsxd rdx, ecx
lea rdx, [rdx*8]
add rdx, r13
movss dword [rsp + 0x20], xmm9
mov r9d, eax
mov r8, rdi
mov rcx, r12
call fcn.140022bb0
add rdi, 8
add rbx, 8
sub r14, 1
jne 0x1400321e0
inc r15d
add rsi, 8
lea r14, [0x14008b5b0]
jmp 0x1400321b3
cmp qword [0x14008b0a0], 0
jne 0x1400322c4
mov r8d, 0xd3d
lea rdx, str.D:New_ProjectNewNewNewExternalPunchimguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14008b0a0]
movss xmm10, dword [rax + 0x18]
movaps xmm0, xmmword [0x140070340]
movups xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call fcn.140002f40
mov r13d, eax
xor edi, edi
mov ebx, edi
lea r15d, [rdi + 0x19]
movaps xmm1, xmm10
lea rax, [0x14008b4e0]
mulss xmm1, dword [rbx + rax]
addss xmm1, dword [rbx + r14]
movss dword [rbx + r14], xmm1
movaps xmm2, xmm10
mulss xmm2, dword [rbx + rax + 4]
addss xmm2, dword [rbx + r14 + 4]
movss dword [rbx + r14 + 4], xmm2
mov rcx, qword [0x14008b0a0]
mov rax, qword [rcx + 0x1ae0]
movss xmm3, dword [rax + 0x10]
comiss xmm3, xmm1
jbe 0x14003234d
movss xmm0, dword [rax + 0x18]
addss xmm0, xmm3
movss dword [rbx + r14], xmm0
jmp 0x140032360
movaps xmm0, xmm3
addss xmm0, dword [rax + 0x18]
comiss xmm1, xmm0
jbe 0x140032360
movss dword [rbx + r14], xmm3
mov rax, qword [rcx + 0x1ae0]
movss xmm1, dword [rax + 0x14]
movss xmm0, dword [rax + 0x1c]
addss xmm0, xmm1
comiss xmm1, xmm2
jbe 0x140032383
movss dword [rbx + r14 + 4], xmm0
jmp 0x14003238f
comiss xmm2, xmm0
jbe 0x14003238f
movss dword [rbx + r14 + 4], xmm1
mov rax, qword [0x14008b0a0]
movsd xmm8, qword [rax + 0x1a60]
cvtpd2ps xmm8, xmm8
mov qword [rbp - 0x80], 0xa
mov ecx, 0x50
call fcn.140033c40
mov r14, rax
mov qword [rbp - 0x80], rax
mov edx, 0xa
mov rcx, rax
nop word [rax + rax]
mov qword [rcx], 0
lea rcx, [rcx + 8]
sub rdx, 1
jne 0x1400323d0
mov esi, edi
lea rdi, [rax + 4]
lea r12, [0x14008b5b0]
nop
xorps xmm6, xmm6
cvtsi2ss xmm6, esi
mulss xmm6, xmm11
addss xmm6, xmm8
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm7, xmm0
mulss xmm7, xmm12
addss xmm7, dword [rbx + r12]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm12
addss xmm0, dword [rbx + r12 + 4]
movss dword [rdi - 4], xmm7
movss dword [rdi], xmm0
lea eax, [rsi + 1]
xorps xmm6, xmm6
cvtsi2ss xmm6, eax
mulss xmm6, xmm11
addss xmm6, xmm8
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm7, xmm0
mulss xmm7, xmm13
addss xmm7, dword [rbx + r12]
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mulss xmm0, xmm13
addss xmm0, dword [rbx + r12 + 4]
movss dword [rdi + 4], xmm7
movss dword [rdi + 8], xmm0
add esi, 2
add rdi, 0x10
cmp esi, 0xa
jl 0x1400323f0
mov r9d, r13d
mov r8d, 0xa
mov rdx, r14
mov rcx, qword [rbp - 8]
call fcn.140021df0
mov rcx, r14
call fcn.140033824
add rbx, 8
sub r15, 1
lea r14, [0x14008b5b0]
mov edi, 0
jne 0x1400322f0
lea rbx, [0x14006fe18]
mov qword [rbp + 0x160], rbx
lea rax, str.0.30
mov qword [rbp + 0x168], rax
lea rax, str.0.35
mov qword [rbp + 0x170], rax
lea rax, [0x14006fe40]
mov qword [rbp + 0x178], rax
lea rax, str.0.45
mov qword [rbp + 0x180], rax
lea rax, [0x14006fe4c]
mov qword [rbp + 0x188], rax
lea rax, [0x14006fe50]
mov qword [rbp + 0x190], rax
lea rax, [0x14006fddc]
mov qword [rbp + 0x198], rax
mov dword [rsp + 0x20], 8
lea r9, [rbp + 0x160]
lea rdx, [0x14008b22c]
lea rcx, [0x14006fe58]
call fcn.14002e660
mov rcx, qword [0x14008b0a0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
movss xmm7, dword [0x140070118]
cmp byte [rax + 0x93], dil
jne 0x140032592
mov qword [rbp - 0x40], rdi
movaps xmm1, xmm7
lea rcx, [rbp - 0x40]
call fcn.14000fd00
mov qword [rbp + 0xd0], rbx
lea rdi, [0x14006fe80]
mov qword [rbp + 0xd8], rdi
lea rsi, [0x14006fe84]
mov qword [rbp + 0xe0], rsi
lea r14, [0x14006fe88]
mov qword [rbp + 0xe8], r14
lea r15, [0x14006fe8c]
mov qword [rbp + 0xf0], r15
lea r12, [0x14006fe90]
mov qword [rbp + 0xf8], r12
mov dword [rsp + 0x20], 6
lea r9, [rbp + 0xd0]
lea rdx, [0x14008b238]
lea rcx, [0x14006fe98]
call fcn.14002e660
mov rcx, qword [0x14008b0a0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x14003263a
mov qword [rbp - 0x38], 0
movaps xmm1, xmm7
lea rcx, [rbp - 0x38]
call fcn.14000fd00
mov qword [rbp + 0x100], rbx
mov qword [rbp + 0x108], rdi
mov qword [rbp + 0x110], rsi
mov qword [rbp + 0x118], r14
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], r12
mov dword [rsp + 0x20], 6
lea r9, [rbp + 0x100]
lea rdx, [0x14008b234]
lea rcx, [0x14006fec0]
call fcn.14002e660
mov rcx, qword [0x14008b0a0]
mov rax, qword [rcx + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1ae0]
cmp byte [rax + 0x93], 0
jne 0x1400326bf
mov qword [rbp - 0x30], 0
movaps xmm1, xmm7
lea rcx, [rbp - 0x30]
call fcn.14000fd00
lea rax, [0x14006fee8]
mov qword [rbp + 0xc0], rax
lea rax, [0x14006fef8]
mov qword [rbp + 0xc8], rax
mov dword [rsp + 0x20], 2
lea r9, [rbp + 0xc0]
lea rdx, [0x14008b228]
lea rcx, str.BOOTFPS
call fcn.14002e660
call fcn.14002d430
test al, al
je 0x140032723
mov rcx, qword [rsp + 0x78]
cmp byte [0x14008b231], 0
je 0x14003271b
mov edx, 0x11
jmp 0x14003271d
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov eax, 0x2b8
cmp dword [0x14008b228], 0
mov ecx, 0xffffffff
cmove eax, ecx
mov dword [rbp - 0x70], eax
mov rax, qword [0x14008b0a0]
mov rcx, qword [rax + 0x1ae0]
movss xmm6, dword [rcx + 0x18]
subss xmm6, dword [0x1400700cc]
mulss xmm6, dword [0x14007002c]
mov dword [rbp - 0x28], 0
mov dword [rbp - 0x24], 0x40600000
lea rcx, [rbp - 0x28]
call fcn.14002dad0
mov r11, qword [0x14008b0a0]
mov rax, qword [r11 + 0x1ae0]
mov byte [rax + 0x90], 1
mov rax, qword [r11 + 0x1ae0]
movss xmm1, dword [rax + 0x10]
subss xmm1, dword [rax + 0x5c]
addss xmm1, xmm6
movss dword [rax + 0xd8], xmm1
movss xmm0, dword [rax + 0xf0]
maxss xmm0, xmm1
movss dword [rax + 0xf0], xmm0
call fcn.140030eb0
mov esi, eax
xor r13d, r13d
mov edi, r13d
mov edx, eax
lea ecx, [r13 + 0x18]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140032835
mov dword [rbp + 0x1b0], 0x438
lea rdx, [rbp + 0x1b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x140032835
nop word [rax + rax]
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003282e
lea rdx, [rbp + 0x1b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x140032800
jmp 0x140032835
mov rdi, qword [rbp + 0x1c8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea rdx, [rdi + 0x27716f0]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp - 0x20], 0x42c80000
lea rdx, [rbp - 0x20]
call fcn.14002c200
movzx r12d, al
movaps xmm0, xmmword [0x1400702f0]
movups xmmword [rbp - 0x60], xmm0
lea rdx, str.Powered_By_:_HunterXStore
lea rcx, [rbp - 0x60]
call fcn.14002ba30
test r12b, r12b
je 0x140032e2b
call fcn.140030eb0
mov edi, eax
mov rsi, r13
mov edx, eax
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140032925
mov dword [rbp + 0x1b0], 0x438
lea rdx, [rbp + 0x1b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x140032925
nop dword [rax]
nop dword [rax + rax]
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14003291e
lea rdx, [rbp + 0x1b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x1400328f0
jmp 0x140032925
mov rsi, qword [rbp + 0x1c8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp - 0x60], 0x328
mov dword [rbp - 0x5c], 0x88
mov dword [rbp - 0x58], 0x150
mov dword [rbp - 0x54], 8
mov qword [rbp - 0x50], 8
mov ecx, 0x18
call fcn.140033c04
mov r14, rax
mov qword [rbp], rax
lea rdi, [rax + 0x18]
mov qword [rbp + 0x10], rdi
mov r8d, 0x18
lea rdx, [rbp - 0x60]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 8], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov ecx, 0x18
call fcn.140033c04
mov rbx, rax
mov qword [rsp + 0x60], rax
lea rcx, [rax + 0x18]
mov qword [rsp + 0x70], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x18]
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x60]
lea rdx, [rsi + 0x2de1d90]
mov rcx, r15
call fcn.140031220
movsxd rcx, dword [0x14008b22c]
cmp ecx, 7
ja case.default.0x140032a04
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x3314c]
add rdx, r8
jmp rdx
mov dword [rbp + 0x6d8], 0x3deb851f
jmp case.default.0x140032a04
mov dword [rbp + 0x6d8], 0x3e99999a
jmp case.default.0x140032a04
mov dword [rbp + 0x6d8], 0x3eb33333
jmp case.default.0x140032a04
mov dword [rbp + 0x6d8], 0x3ecccccd
jmp case.default.0x140032a04
mov dword [rbp + 0x6d8], 0x3ee66666
jmp case.default.0x140032a04
mov dword [rbp + 0x6d8], 0x3f000000
jmp case.default.0x140032a04
mov dword [rbp + 0x6d8], 0x3f4ccccd
jmp case.default.0x140032a04
mov dword [rbp + 0x6d8], 0x3f800000
test r15, r15
je 0x140032a87
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x6d8]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x140032aa3
mov edx, 0x18
mov rcx, r14
call fcn.140033824
test r12b, r12b
je 0x140032e2b
call fcn.140030eb0
mov edi, eax
mov rsi, r13
mov edx, eax
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140032b25
mov dword [rbp + 0x1b0], 0x438
lea rdx, [rbp + 0x1b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x140032b25
nop word [rax + rax]
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140032b1e
lea rdx, [rbp + 0x1b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x140032af0
jmp 0x140032b25
mov rsi, qword [rbp + 0x1c8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp - 0x18], 0x40
mov dword [rbp - 0x14], 0x28c
mov ecx, 8
call fcn.140033c04
mov r14, rax
mov qword [rbp], rax
lea rdi, [rax + 8]
mov qword [rbp + 0x10], rdi
mov rcx, qword [rbp - 0x18]
mov qword [rax], rcx
mov qword [rbp + 8], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov ecx, 8
call fcn.140033c04
mov rbx, rax
mov qword [rsp + 0x60], rax
lea rcx, [rax + 8]
mov qword [rsp + 0x70], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x60]
lea rdx, [rsi + 0x212b208]
mov rcx, r15
call fcn.140031220
movsxd rcx, dword [0x14008b238]
cmp ecx, 5
ja case.default.0x140032be3
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x3316c]
add rdx, r8
jmp rdx
mov dword [rbp + 0x6e0], 0x41480000
jmp case.default.0x140032be3
mov dword [rbp + 0x6e0], 0x41700000
jmp case.default.0x140032be3
mov dword [rbp + 0x6e0], 0x41a00000
jmp case.default.0x140032be3
mov dword [rbp + 0x6e0], 0x41c80000
jmp case.default.0x140032be3
mov dword [rbp + 0x6e0], 0x42480000
jmp case.default.0x140032be3
mov dword [rbp + 0x6e0], 0x42c80000
test r15, r15
je 0x140032c4e
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x6e0]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x140032c6a
mov edx, 8
mov rcx, r14
call fcn.140033824
test r12b, r12b
je 0x140032e2b
call fcn.140030eb0
mov edi, eax
mov rsi, r13
mov edx, eax
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140032ce6
mov dword [rbp + 0x1b0], 0x438
lea rdx, [rbp + 0x1b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x140032ce6
lea rdx, str.FiveM_GTAProcess.exe
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140032cdf
lea rdx, [rbp + 0x1b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
test eax, eax
jne 0x140032cb1
jmp 0x140032ce6
mov rsi, qword [rbp + 0x1c8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
mov dword [rbp - 0x10], 0x40
mov dword [rbp - 0xc], 0x1cc
mov ecx, 8
call fcn.140033c04
mov r14, rax
mov qword [rbp], rax
lea rdi, [rax + 8]
mov qword [rbp + 0x10], rdi
mov rcx, qword [rbp - 0x10]
mov qword [rax], rcx
mov qword [rbp + 8], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov ecx, 8
call fcn.140033c04
mov rbx, rax
mov qword [rsp + 0x60], rax
lea rcx, [rax + 8]
mov qword [rsp + 0x70], rcx
sub rdi, r14
mov r8, rdi
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 8]
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x60]
lea rdx, [rsi + 0x212b208]
mov rcx, r15
call fcn.140031220
movsxd rcx, dword [0x14008b234]
cmp ecx, 5
ja case.default.0x140032da4
lea r8, [0x140000000]
mov edx, dword [r8 + rcx*4 + 0x33184]
add rdx, r8
jmp rdx
mov dword [rbp + 0x6e8], 0x41200000
jmp case.default.0x140032da4
mov dword [rbp + 0x6e8], 0x41700000
jmp case.default.0x140032da4
mov dword [rbp + 0x6e8], 0x41a00000
jmp case.default.0x140032da4
mov dword [rbp + 0x6e8], 0x41c80000
jmp case.default.0x140032da4
mov dword [rbp + 0x6e8], 0x42480000
jmp case.default.0x140032da4
mov dword [rbp + 0x6e8], 0x42c80000
test r15, r15
je 0x140032e0f
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x6e8]
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r14, r14
je 0x140032e2b
mov edx, 8
mov rcx, r14
call fcn.140033824
call fcn.14000ea80
call fcn.140008d70
mov rcx, qword [0x14008b1d0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], r13d
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], r13d
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x14008b1d0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140032ed4
call fcn.140009200
mov rbx, qword [0x14008b0a0]
cmp dword [rbx + 0x1c90], 0
jg 0x140032ea4
mov r8d, 0x675
lea rdx, str.D:New_ProjectNewNewNewExternalPunchimguiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x1c98]
mov rcx, qword [rax]
add rcx, 0x40
mov rax, r13
cmp byte [rcx], r13b
cmovne rax, rcx
mov rcx, rax
call fcn.14002f070
mov rcx, qword [0x14008b1d0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14008b1d0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140032f4e
mov rcx, qword [0x14008b1d0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140032f4e
call fcn.14002f7e0
mov rcx, qword [0x14008b1d0]
mov rax, qword [rcx]
lea rdx, [0x14008b1e0]
call qword [rax + 0x80]
cmp eax, 0x8876086c
jne 0x140032f49
mov r8d, 0x2d
lea rdx, str.D:New_ProjectNewNewNewExternalPunchmain.h
lea rcx, [0x1400357d4]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.14002f650
movss xmm10, dword [0x140070108]
mov rsi, qword [rsp + 0x78]
lea r14, [0x14008b5b0]
lea r15, [0x14008b4e0]
movabs rbx, 0xb88bd7cfeff87cb5
movabs rdi, 0xc60e09f678c47786
movabs r12, 0x98ed98ef889615fe
cmp dword [rbp + 0x138], 0x12
jne 0x140031e20
call fcn.14002f7e0
mov rcx, qword [0x14008b180]
test rcx, rcx
je 0x140032fb3
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14008b180], r13
mov rcx, qword [0x14008b198]
test rcx, rcx
je 0x140032fc5
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [0x14008b198], r13
mov qword [0x14008b1a0], r13
mov qword [0x14008b1a8], r13
mov qword [0x14008b1b0], r13
mov qword [0x14008b1b8], r13
mov qword [0x14008b1c0], r13
mov dword [0x14008af40], 9
mov byte [0x14008b190], 0
mov byte [0x14008ad84], 1
mov rbx, qword [0x14008b0a0]
mov rcx, rbx
call fcn.140008090
cmp qword [0x14008b0a0], rbx
jne 0x140033026
mov qword [0x14008b0a0], r13
test rbx, rbx
je 0x14003304e
mov rcx, rbx
call fcn.140017db0
mov rax, qword [0x14008b0a0]
test rax, rax
je 0x140033045
dec dword [rax + 0x3b4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x14008b1d0]
test rcx, rcx
je 0x140033067
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14008b1d0], r13
mov rcx, qword [0x14008b1c8]
test rcx, rcx
je 0x140033080
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14008b1c8], r13
mov rcx, rsi
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x80]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x1400330f9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [0x14008b1c8]
mov rdx, qword [0x14008b1d0]
test rdx, rdx
je 0x1400330d1
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x14008b1d0], r13
mov rcx, qword [0x14008b1c8]
test rcx, rcx
je 0x1400330e3
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov qword [0x14008b1c8], r13
mov rdx, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x80]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, 1
lea r11, [rsp + 0x790]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret