Function at 0x140008930
Capabilities:
Write file on windows

Disassembly:
mov rax, rsp
push rsi
push rdi
sub rsp, 0xb8
mov rdi, qword [0x1402bad40]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], r14
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rsp + 0x40], xmm12
test rdi, rdi
jne 0x140008997
mov r8d, 0x113f
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x1402bad40]
mov ebx, dword [rdi + 0x5c30]
sub ebx, 1
js 0x140008a8d
movsxd rbp, ebx
shl rbp, 5
mov r14, rbp
cmp ebx, dword [rdi + 0x5c30]
jl 0x1400089d2
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x5c38]
cmp dword [rax + rbp + 4], 7
jne 0x140008a7c
cmp ebx, dword [rdi + 0x5c30]
jl 0x140008a06
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rdi + 0x5c38]
lea rsi, [rcx + r14]
cmp rsi, rcx
jb 0x140008a29
movsxd rax, dword [rdi + 0x5c30]
shl rax, 5
add rax, rcx
cmp rsi, rax
jb 0x140008a43
mov r8d, 0x72d
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, [0x1401599c8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rdi + 0x5c38]
movsxd r8, dword [rdi + 0x5c30]
sub rsi, rcx
sar rsi, 5
sub r8, rsi
mov rax, rsi
shl rax, 5
add rcx, rax
shl r8, 5
sub r8, 0x20
lea rdx, [rcx + 0x20]
call sub.VCRUNTIME140.dll_memmove
dec dword [rdi + 0x5c30]
sub r14, 0x20
sub rbp, 0x20
sub ebx, 1
jns 0x1400089b0
xor edx, edx
mov rcx, rdi
call fcn.140006e80
call fcn.140016790
mov rbx, qword [0x1402bad40]
xor esi, esi
cmp byte [rbx + 0x5be9], sil
jne 0x140008b31
cmp dword [rbx + 0x5c10], esi
je 0x140008ad4
mov r8d, 0x327e
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.g.SettingsWindows.empty__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140008b2a
lea r8, [rsp + 0xd0]
mov qword [rsp + 0xd0], rsi
call fcn.140003a60
mov rbp, rax
test rax, rax
je 0x140008b2a
mov rdx, qword [rsp + 0xd0]
test rdx, rdx
je 0x140008b0f
mov rcx, rax
call fcn.14001e8b0
mov rcx, qword [0x1402bad40]
test rcx, rcx
je 0x140008b21
dec dword [rcx + 0xf4]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov byte [rbx + 0x5be9], 1
movss xmm0, dword [rbx + 0x5bec]
xorps xmm12, xmm12
comiss xmm0, xmm12
jbe 0x140008bd0
subss xmm0, dword [rbx + 0x18]
comiss xmm12, xmm0
movss dword [rbx + 0x5bec], xmm0
jb 0x140008bd0
mov rbp, qword [rbx + 0x20]
test rbp, rbp
je 0x140008bc3
mov rax, qword [0x1402bad40]
lea rcx, [rsp + 0xd0]
mov qword [rsp + 0xd0], rsi
mov dword [rax + 0x5bec], esi
call fcn.14001ec60
lea rdx, [0x14015969c]
mov rcx, rbp
mov r14, rax
call fcn.1400038b0
mov rbp, rax
test rax, rax
je 0x140008bca
mov r8, qword [rsp + 0xd0]
mov r9, rax
mov edx, 1
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x140008bca
mov byte [rbx + 0xdc], 1
mov dword [rbx + 0x5bec], esi
inc dword [rdi + 0x3e50]
movss xmm0, dword [rdi + 0x18]
cvtps2pd xmm0, xmm0
mov byte [rdi + 0x3e5c], 1
mov word [rdi + 0x5ba2], si
mov dword [rdi + 0x3ee8], esi
addsd xmm0, qword [rdi + 0x3e48]
movsd qword [rdi + 0x3e48], xmm0
mov ecx, dword [rdi + 0x5bbc]
test ecx, ecx
jns 0x140008c28
mov eax, ecx
cdq
sub eax, edx
mov edx, esi
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x5bb8]
test eax, eax
cmovg edx, eax
call fcn.140021000
movss xmm11, dword [0x1401639dc]
movss xmm10, dword [0x140163854]
mov dword [rdi + 0x5bb8], esi
movsxd rax, dword [rdi + 0x5e28]
movss xmm1, dword [rdi + 0x18]
movaps xmm0, xmm1
subss xmm0, dword [rdi + rax*4 + 0x5d38]
addss xmm0, dword [rdi + 0x5e30]
movss dword [rdi + 0x5e30], xmm0
movss dword [rdi + rax*4 + 0x5d38], xmm1
mov eax, 0x88888889
mov ecx, dword [rdi + 0x5e28]
movss xmm2, dword [rdi + 0x5e30]
inc ecx
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x3c
sub ecx, eax
mov eax, dword [rdi + 0x5e2c]
inc eax
mov dword [rdi + 0x5e28], ecx
mov ecx, reloc.WLDAP32.dll_Ordinal_60
cmp eax, ecx
cmovl ecx, eax
comiss xmm2, xmm12
mov dword [rdi + 0x5e2c], ecx
jbe 0x140008cd2
movd xmm0, ecx
movaps xmm1, xmm10
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
divss xmm1, xmm2
jmp 0x140008cd6
movaps xmm1, xmm11
movss dword [rdi + 0xe0], xmm1
mov ecx, dword [rdi + 0x3e84]
test ecx, ecx
jns 0x140008d04
mov eax, ecx
cdq
sub eax, edx
mov edx, esi
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x3e80]
test eax, eax
cmovg edx, eax
call fcn.140020e40
mov dword [rdi + 0x3e80], esi
movzx ecx, byte [rdi + 0x7a]
call fcn.140015b00
mov rbp, qword [0x1402bad40]
cmp dword [rbp + 0x48c8], 1
je 0x140008d3d
mov r8d, 0x33e9
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.g.Viewports.Size__1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp dword [rbp + 0x48c8], esi
jg 0x140008d5f
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbp + 0x48d0]
mov r14d, esi
mov rcx, qword [rax]
mov qword [rcx], 5
mov dword [rcx + 8], esi
movsd xmm0, qword [rbp + 0x10]
movsd qword [rcx + 0xc], xmm0
mov eax, dword [rbp + 0x48c8]
test eax, eax
jle 0x140008e64
mov rbx, rsi
test rbx, rbx
js 0x140008d9b
cmp r14d, eax
jl 0x140008db5
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbp + 0x48d0]
inc r14d
mov rcx, qword [rax + rbx*8]
inc rbx
movsd xmm4, qword [rcx + 0xa8]
movsd xmm3, qword [rcx + 0xb0]
movaps xmm0, xmm4
movss xmm1, dword [rcx + 8]
movaps xmm2, xmm4
addss xmm2, dword [rcx + 4]
shufps xmm0, xmm0, 0x55
addss xmm1, xmm0
mov qword [rcx + 0xb0], rsi
movss xmm0, dword [rcx + 0xc]
subss xmm0, xmm4
mov qword [rcx + 0xa8], rsi
movss dword [rcx + 0x14], xmm2
movaps xmm2, xmm12
movsd qword [rcx + 0xa0], xmm3
movss dword [rcx + 0x18], xmm1
movss xmm1, dword [rcx + 0x10]
addss xmm0, xmm3
movsd qword [rcx + 0x98], xmm4
maxss xmm2, xmm0
movaps xmm0, xmm4
shufps xmm0, xmm0, 0x55
subss xmm1, xmm0
movaps xmm0, xmm12
addss xmm1, dword [rcx + 0xa4]
movss dword [rcx + 0x1c], xmm2
maxss xmm0, xmm1
movss dword [rcx + 0x20], xmm0
mov eax, dword [rbp + 0x48c8]
cmp r14d, eax
jl 0x140008d91
mov rax, qword [rdi + 0x58]
mov rbx, qword [0x1402bad40]
mov byte [rax + 0x18], 1
mov rcx, qword [rbx + 0x68]
test rcx, rcx
jne 0x140008ea6
mov rbx, qword [rbx + 0x58]
cmp dword [rbx + 0x58], esi
jg 0x140008e9f
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
call fcn.140012b60
mov rax, qword [rdi + 0x3c18]
cmp qword [rax + 0x40], rsi
jne 0x140008ed2
mov r8d, 0x1168
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.g.Font__IsLoaded__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm7, dword [0x140163a00]
movaps xmm6, xmm11
mov eax, dword [rdi + 0x48c8]
movaps xmm8, xmm7
movaps xmm9, xmm11
mov ebx, esi
test eax, eax
jle 0x140008f7b
mov rbp, rsi
nop dword [rax]
test rbp, rbp
js 0x140008f09
cmp ebx, eax
jl 0x140008f23
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x48d0]
mov rcx, qword [rax + rbp*8]
movss xmm3, dword [rcx + 4]
comiss xmm6, xmm3
movss xmm2, dword [rcx + 8]
movaps xmm0, xmm3
addss xmm0, dword [rcx + 0xc]
movaps xmm1, xmm2
addss xmm1, dword [rcx + 0x10]
jbe 0x140008f50
movaps xmm6, xmm3
comiss xmm9, xmm2
jbe 0x140008f5a
movaps xmm9, xmm2
comiss xmm0, xmm7
jbe 0x140008f62
movaps xmm7, xmm0
comiss xmm1, xmm8
jbe 0x140008f6c
movaps xmm8, xmm1
mov eax, dword [rdi + 0x48c8]
inc ebx
inc rbp
cmp ebx, eax
jl 0x140008f00
mov eax, dword [rdi + 0x38a4]
shufps xmm6, xmm6, 0xe1
movss xmm6, xmm9
mov dword [rdi + 0x3c3c], eax
movaps xmm9, xmmword [rsp + 0x70]
shufps xmm6, xmm6, 0xc6
movss xmm6, xmm7
movaps xmm7, xmmword [rsp + 0x90]
shufps xmm6, xmm6, 0x27
movss xmm6, xmm8
movaps xmm8, xmmword [rsp + 0x80]
shufps xmm6, xmm6, 0x39
movups xmmword [rdi + 0x3c44], xmm6
movss xmm0, dword [rdi + 0x3c40]
movups xmmword [rsp + 0x20], xmm6
movss xmm6, dword [rdi + 0x38a8]
ucomiss xmm0, xmm6
jp 0x140008fe3
je 0x1400090b5
comiss xmm6, xmm12
ja 0x140009003
mov r8d, 0x1bd
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui_draw.cpp
lea rcx, str.max_error___0.0f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss dword [rdi + 0x3c40], xmm6
lea r14, [rdi + 0x3dec]
movss xmm6, dword [0x14016387c]
mov ebx, esi
mov ebp, 0x800
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
test ebx, ebx
je 0x14000907a
movss xmm1, dword [rdi + 0x3c40]
minss xmm1, xmm0
divss xmm1, xmm0
movaps xmm0, xmm10
subss xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_acosf
movaps xmm1, xmm6
divss xmm1, xmm0
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_ceilf
cvttss2si eax, xmm0
inc eax
cdq
sub eax, edx
sar eax, 1
add eax, eax
cmp eax, 0xc8
jge 0x140009073
mov eax, reloc.WLDAP32.dll_Ordinal_200
jmp 0x14000907f
cmp eax, ebp
cmovg eax, ebp
jmp 0x14000907f
mov eax, Ordinal_50
mov byte [r14], al
inc ebx
inc r14
cmp ebx, 0x40
jl 0x140009021
movss xmm0, dword [0x1401637ec]
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movss xmm1, dword [rdi + 0x3c40]
movaps xmm2, xmm10
subss xmm2, xmm0
divss xmm1, xmm2
movss dword [rdi + 0x3de8], xmm1
mov r8d, esi
movaps xmm6, xmmword [rsp + 0xa0]
mov dword [rdi + 0x3c54], esi
cmp byte [rdi + 0x38a0], sil
je 0x1400090df
mov dword [rdi + 0x3c54], 1
mov r8d, 1
mov edx, r8d
cmp byte [rdi + 0x38a1], sil
je 0x140009104
mov rax, qword [rdi + 0x3c18]
mov rcx, qword [rax + 0x40]
test byte [rcx], 4
jne 0x140009104
or edx, 2
mov dword [rdi + 0x3c54], edx
cmp byte [rdi + 0x38a2], sil
je 0x140009116
or edx, 4
mov dword [rdi + 0x3c54], edx
test byte [rdi + 0xc], 8
je 0x140009125
or edx, 8
mov dword [rdi + 0x3c54], edx
mov eax, dword [rdi + 0x48c8]
mov ebx, esi
test eax, eax
jle 0x140009180
mov rbp, rsi
test rbp, rbp
js 0x14000913d
cmp ebx, eax
jl 0x140009157
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x48d0]
xorps xmm0, xmm0
inc ebx
mov rcx, qword [rax + rbp*8]
inc rbp
movups xmmword [rcx + 0x48], xmm0
movups xmmword [rcx + 0x58], xmm0
movups xmmword [rcx + 0x68], xmm0
mov eax, dword [rdi + 0x48c8]
cmp ebx, eax
jl 0x140009134
cmp byte [rdi + 0x4a7c], sil
je 0x1400091bb
mov eax, dword [rdi + 0x4a9c]
cmp eax, dword [rdi + 0x3f58]
jne 0x1400091bb
mov rcx, qword [0x1402bad40]
cmp dword [rcx + 0x3f58], eax
jne 0x1400091ac
mov dword [rcx + 0x3f5c], eax
cmp dword [rcx + 0x3f88], eax
jne 0x1400091bb
mov byte [rcx + 0x3f8c], 1
cmp dword [rdi + 0x3f48], esi
jne 0x1400091cb
mov dword [rdi + 0x3f50], esi
jmp 0x1400091dd
mov eax, dword [rdi + 0x3f44]
test eax, eax
je 0x1400091e3
cmp dword [rdi + 0x3f58], eax
jne 0x1400091e3
mov dword [rdi + 0x3f54], esi
mov eax, dword [rdi + 0x3f44]
test eax, eax
je 0x14000921d
movss xmm1, dword [rdi + 0x18]
movaps xmm0, xmm1
addss xmm0, dword [rdi + 0x3f50]
movss dword [rdi + 0x3f50], xmm0
cmp dword [rdi + 0x3f58], eax
je 0x14000921d
addss xmm1, dword [rdi + 0x3f54]
movss dword [rdi + 0x3f54], xmm1
mov dword [rdi + 0x3f48], eax
mov eax, dword [rdi + 0x3f58]
mov dword [rdi + 0x3f44], esi
mov word [rdi + 0x3f4c], si
test eax, eax
je 0x140009268
cmp dword [rdi + 0x3f5c], eax
je 0x140009268
cmp dword [rdi + 0x3f88], eax
jne 0x140009268
test byte [rdi + 0x5cc4], 1
je 0x14000925f
lea rcx, str.NewFrame__:_ClearActiveID___because_it_isnt_marked_alive_anymore__n
call fcn.14001f9b0
xor edx, edx
xor ecx, ecx
call fcn.140007b10
mov ecx, dword [rdi + 0x3f58]
test ecx, ecx
je 0x140009287
movss xmm0, dword [rdi + 0x18]
addss xmm0, dword [rdi + 0x3f60]
movss dword [rdi + 0x3f60], xmm0
mov rax, qword [rdi + 0x3f78]
movss xmm0, dword [rdi + 0x18]
addss xmm0, dword [rdi + 0x3f9c]
mov qword [rdi + 0x3f90], rax
movzx eax, byte [rdi + 0x3f68]
mov byte [rdi + 0x3f8d], al
mov eax, dword [rdi + 0x5b28]
movss dword [rdi + 0x3f9c], xmm0
mov dword [rdi + 0x3f88], ecx
mov dword [rdi + 0x3f5c], esi
mov byte [rdi + 0x3f69], sil
mov byte [rdi + 0x3f8c], sil
mov byte [rdi + 0x3f64], sil
test eax, eax
je 0x1400092ec
cmp ecx, eax
je 0x1400092ec
mov dword [rdi + 0x5b28], esi
test ecx, ecx
jne 0x140009305
mov dword [rdi + 0x4768], esi
mov byte [rdi + 0x476c], sil
mov dword [rdi + 0x4770], esi
jmp 0x140009377
mov eax, dword [rdi + 0x4770]
test eax, eax
je 0x140009377
test al, 2
je 0x140009351
mov ebx, dword [rdi + 0x3f58]
test ebx, ebx
jne 0x140009337
mov r8d, 0x2394
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.IsNamedKeyOrModKey_key____owner_id_____ImGuiID_0____flags___ImGuiInputFlags_LockThisFrame__ImGuiInputFlags_LockUntilRelease___
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x1402bad40]
mov edx, 0x20e
call fcn.140002880
mov dword [rax + 4], ebx
mov dword [rax], ebx
mov word [rax + 8], si
test dword [rdi + 0x4770], 0xfffffffd
je 0x140009377
mov r8d, 0x11bb
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, [0x1401543f0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [rdi + 0x4bf0]
movss xmm0, dword [rdi + 0x4bf8]
mov dword [rdi + 0x4bf4], eax
test eax, eax
je 0x1400093aa
addss xmm0, dword [rdi + 0x18]
mov dword [rdi + 0x4bfc], esi
mov dword [rdi + 0x4bf0], esi
movss dword [rdi + 0x4bf8], xmm0
jmp 0x1400093e4
comiss xmm0, xmm12
jbe 0x1400093e4
movss xmm2, dword [rdi + 0x18]
movss xmm0, dword [0x140163800]
movaps xmm1, xmm2
addss xmm1, dword [rdi + 0x4bfc]
addss xmm2, xmm2
movss dword [rdi + 0x4bfc], xmm1
maxss xmm0, xmm2
comiss xmm1, xmm0
jb 0x1400093e4
mov qword [rdi + 0x4bf8], rsi
mov eax, dword [rdi + 0x4aec]
mov dword [rdi + 0x4af0], eax
mov qword [rdi + 0x4ae8], 0x7f7fffff
mov word [rdi + 0x4a7d], si
mov dword [rdi + 0x4af8], esi
call fcn.140014350
call fcn.14001a9d0
call fcn.140014b80
call fcn.1400084e0
mov rbx, qword [0x1402bad40]
mov rcx, qword [rbx + 0x3f10]
test rcx, rcx
je 0x140009546
mov eax, dword [rbx + 0x3f58]
mov dword [rbx + 0x3f5c], eax
cmp dword [rbx + 0x3f88], eax
jne 0x14000944e
mov byte [rbx + 0x3f8c], 1
cmp qword [rcx + 0x378], rsi
jne 0x140009471
mov r8d, 0x109b
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.g.MovingWindow__g.MovingWindow__RootWindow
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x3f10]
mov r14, qword [rax + 0x378]
cmp byte [rbx + 0xe10], sil
je 0x14000953d
cmp qword [0x1402bad40], rsi
lea rbp, [rbx + 0xe08]
jne 0x1400094b6
mov r8d, 0x2125
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.GImGui___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
test rbp, rbp
jne 0x1400094c9
mov rbp, qword [0x1402bad40]
add rbp, 0xe08
movss xmm0, dword [rbp]
movss xmm1, dword [0x1401639fc]
comiss xmm0, xmm1
movss xmm2, dword [rbp + 4]
jb 0x14000953d
comiss xmm2, xmm1
jb 0x14000953d
movss xmm0, dword [rbx + 0xe08]
lea rdx, [rsp + 0xd0]
movss xmm1, dword [rbx + 0xe0c]
mov r8d, 1
subss xmm0, dword [rbx + 0x3f6c]
subss xmm1, dword [rbx + 0x3f70]
mov rcx, r14
movss dword [rsp + 0xd0], xmm0
movss dword [rsp + 0xd4], xmm1
call fcn.140013130
mov rcx, qword [rbx + 0x3f10]
xor edx, edx
call fcn.1400127b0
jmp 0x140009584
mov qword [rbx + 0x3f10], rsi
jmp 0x14000957b
mov rcx, qword [rbx + 0x3f78]
test rcx, rcx
je 0x140009584
mov eax, dword [rbx + 0x3f58]
cmp dword [rcx + 0x7c], eax
jne 0x140009584
mov dword [rbx + 0x3f5c], eax
cmp dword [rbx + 0x3f88], eax
jne 0x140009572
mov byte [rbx + 0x3f8c], 1
cmp byte [rbx + 0xe10], sil
jne 0x140009584
xor edx, edx
xor ecx, ecx
call fcn.140007b10
mov r8, qword [0x1402bad40]
mov eax, dword [r8 + 0x48a0]
sub eax, 1
js 0x1400095cb
mov r8, qword [r8 + 0x48a8]
movsxd rdx, eax
add r8, 8
imul rcx, rdx, 0x38
add r8, rcx
nop dword [rax]
mov rax, qword [r8]
test rax, rax
je 0x1400095c1
test dword [rax + 0x14], 0x8000000
jne 0x1400095e2
sub r8, 0x38
sub rdx, 1
jns 0x1400095b0
cmp qword [rdi + 0x4a40], rsi
je 0x1400095fe
movss xmm0, dword [rdi + 0x4a5c]
comiss xmm0, xmm12
jbe 0x1400095fe
movss xmm1, dword [rdi + 0x18]
mulss xmm1, dword [0x14016389c]
addss xmm1, dword [rdi + 0x4a74]
minss xmm1, xmm10
jmp 0x14000961c
movss xmm0, dword [rdi + 0x18]
mulss xmm0, dword [0x1401638cc]
movss xmm1, dword [rdi + 0x4a74]
subss xmm1, xmm0
maxss xmm1, xmm12
movss dword [rdi + 0x4a74], xmm1
movups xmm0, xmmword [rdi + 0x5bc8]
mov dword [rdi + 0x4a78], esi
mov qword [rdi + 0x5e38], 0xffffffffffffffff
movups xmmword [rdi + 0x5bd8], xmm0
mov dword [rdi + 0x5e34], 0xffffffff
mov byte [rdi + 0x5bc8], sil
call fcn.140015160
mov eax, dword [rdi + 0x3e98]
movaps xmm10, xmmword [rsp + 0x60]
cmp dword [rdi + 0x3ea8], eax
jle 0x14000968d
mov r8d, 0x1202
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.g.WindowsFocusOrder.Size___g.Windows.Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [rdi + 0x3e98]
cmp byte [rdi + 0x3e5f], sil
jne 0x1400096b7
movss xmm0, dword [rdi + 0x80]
comiss xmm12, xmm0
ja 0x1400096b7
movsd xmm11, qword [rdi + 0x3e48]
cvtpd2ps xmm11, xmm11
subss xmm11, xmm0
mov ebp, esi
test eax, eax
je 0x14000984c
mov r14, rsi
test r14, r14
js 0x1400096cd
cmp ebp, eax
jl 0x1400096e7
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x3ea0]
mov rbx, qword [rax + r14*8]
movzx ecx, byte [rbx + 0xb6]
movzx eax, word [rbx + 0xc2]
mov byte [rbx + 0xb7], cl
mov byte [rbx + 0xb6], sil
mov byte [rbx + 0xb8], sil
mov word [rbx + 0xc4], ax
mov word [rbx + 0xc2], si
test cl, cl
jne 0x140009839
cmp byte [rbx + 0x3e4], sil
jne 0x140009839
comiss xmm11, dword [rbx + 0x264]
jbe 0x140009839
mov rcx, qword [rbx + 0x298]
mov byte [rbx + 0x3e4], 1
mov eax, dword [rcx + 0x14]
mov dword [rbx + 0x3dc], eax
mov eax, dword [rcx + 0x24]
mov dword [rbx + 0x3e0], eax
mov rcx, qword [rbx + 0xf8]
test rcx, rcx
je 0x140009797
mov rax, qword [0x1402bad40]
mov qword [rbx + 0xf0], rsi
test rax, rax
je 0x14000978a
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0xf8], rsi
mov rcx, qword [rbx + 0x298]
call fcn.140029d00
mov rcx, qword [rbx + 0x198]
test rcx, rcx
je 0x1400097d5
mov rax, qword [0x1402bad40]
mov qword [rbx + 0x190], rsi
test rax, rax
je 0x1400097c8
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x198], rsi
mov rcx, qword [rbx + 0x1d0]
test rcx, rcx
je 0x140009807
mov rax, qword [0x1402bad40]
mov qword [rbx + 0x1c8], rsi
test rax, rax
je 0x1400097fa
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1d0], rsi
mov rcx, qword [rbx + 0x1e0]
test rcx, rcx
je 0x140009839
mov rax, qword [0x1402bad40]
mov qword [rbx + 0x1d8], rsi
test rax, rax
je 0x14000982c
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x1e0], rsi
mov eax, dword [rdi + 0x3e98]
inc ebp
inc r14
cmp ebp, eax
jne 0x1400096c4
mov eax, dword [rdi + 0x4b80]
mov ebx, esi
test eax, eax
jle 0x140009918
mov rbp, rsi
nop
test ebx, ebx
js 0x140009868
cmp ebx, eax
jl 0x140009882
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x4b88]
movss xmm0, dword [rax + rbp]
comiss xmm0, xmm12
jb 0x140009904
test ebx, ebx
js 0x1400098a0
cmp ebx, dword [rdi + 0x4b80]
jl 0x1400098ba
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x4b88]
comiss xmm11, dword [rax + rbp]
jbe 0x140009904
test ebx, ebx
js 0x1400098d4
cmp ebx, dword [rdi + 0x4b58]
jl 0x1400098ee
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rax, ebx
imul rcx, rax, 0x238
add rcx, qword [rdi + 0x4b60]
call fcn.140037b90
mov eax, dword [rdi + 0x4b80]
inc ebx
add rbp, 4
cmp ebx, eax
jl 0x140009860
mov eax, dword [rdi + 0x4b48]
mov ebp, esi
mov qword [rsp + 0xb0], r15
test eax, eax
jle 0x1400099fd
mov r15, rsi
mov r14, rsi
test r15, r15
js 0x14000993f
cmp ebp, eax
jl 0x140009959
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x4b50]
movss xmm0, dword [rax + r14 + 4]
comiss xmm0, xmm12
jb 0x1400099e6
test r15, r15
js 0x14000997a
cmp ebp, dword [rdi + 0x4b48]
jl 0x140009994
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x4b50]
comiss xmm11, dword [rax + r14 + 4]
jbe 0x1400099e6
test r15, r15
js 0x1400099b0
cmp ebp, dword [rdi + 0x4b48]
jl 0x1400099ca
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [rdi + 0x4b50]
lea rcx, [rbx + 0x10]
add rcx, r14
call fcn.14002fc30
mov dword [r14 + rbx + 4], 0xbf800000
mov eax, dword [rdi + 0x4b48]
inc ebp
inc r15
add r14, 0x70
cmp ebp, eax
jl 0x140009936
movaps xmm12, xmmword [rsp + 0x40]
movaps xmm11, xmmword [rsp + 0x50]
cmp byte [rdi + 0x3e5f], sil
je 0x140009a7e
mov rax, qword [0x1402bad40]
mov rbx, rax
mov rcx, qword [rax + 0x4888]
test rcx, rcx
je 0x140009a4e
mov qword [rax + 0x4880], rsi
test rax, rax
je 0x140009a3a
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1402bad40]
mov qword [rbx + 0x4888], rsi
mov rcx, qword [rbx + 0x4898]
test rcx, rcx
je 0x140009a79
mov qword [rbx + 0x4890], rsi
test rax, rax
je 0x140009a6c
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x4898], rsi
call fcn.140037d60
mov rax, qword [rdi + 0x48d8]
mov byte [rdi + 0x3e5f], sil
test rax, rax
je 0x140009b47
cmp byte [rax + 0xb7], sil
jne 0x140009b47
mov r15, qword [0x1402bad40]
mov r14d, dword [r15 + 0x3ea8]
sub r14d, 1
js 0x140009b3b
movsxd rbp, r14d
nop dword [rax]
test rbp, rbp
js 0x140009ace
cmp r14d, dword [r15 + 0x3ea8]
jl 0x140009ae8
mov r8d, 0x715
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r15 + 0x3eb0]
mov rbx, qword [rax + rbp*8]
cmp rbx, qword [rbx + 0x378]
je 0x140009b16
mov r8d, 0x1c25
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.window__window__RootWindow
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp byte [rbx + 0xb7], sil
je 0x140009b32
mov eax, dword [rbx + 0x14]
and eax, 0x40200
cmp eax, 0x40200
jne 0x140009c7a
dec r14d
sub rbp, 1
jns 0x140009ac0
xor ecx, ecx
mov edx, 1
call fcn.1400127b0
mov ecx, dword [rdi + 0x3ecc]
mov r15, qword [rsp + 0xb0]
test ecx, ecx
jns 0x140009b75
mov eax, ecx
cdq
sub eax, edx
mov edx, esi
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x3ec8]
test eax, eax
cmovg edx, eax
call fcn.140020db0
mov dword [rdi + 0x3ec8], esi
mov ecx, dword [rdi + 0x48b4]
test ecx, ecx
jns 0x140009ba1
mov eax, ecx
cdq
sub eax, edx
mov edx, esi
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x48b0]
test eax, eax
cmovg edx, eax
call fcn.140020d20
lea rbx, [rdi + 0x4880]
mov dword [rdi + 0x48b0], esi
mov ecx, dword [rbx + 4]
test ecx, ecx
jns 0x140009bcd
mov eax, ecx
cdq
sub eax, edx
mov edx, esi
sar eax, 1
add eax, ecx
mov rcx, rbx
test eax, eax
cmovg edx, eax
call fcn.140021000
mov dword [rbx], esi
cmp dword [rbx + 4], esi
jne 0x140009be1
mov edx, 8
mov rcx, rbx
call fcn.140021000
movsxd rcx, dword [rbx]
xor edx, edx
mov rax, qword [rbx + 8]
mov dword [rax + rcx*4], esi
lea rcx, [rdi + 0x4890]
inc dword [rbx]
call fcn.1400203c0
mov rbx, qword [0x1402bad40]
mov dword [rbx + 0x5cf8], esi
cmp byte [rbx + 0x5cf3], sil
je 0x140009db1
mov ebp, dword [rbx + 0x3f48]
xor edx, edx
mov ecx, 0x20e
mov dword [rbx + 0x4a78], 7
mov r8d, 1
call fcn.140013e70
test al, al
je 0x140009c42
mov byte [rbx + 0x5cf3], sil
mov r14d, dword [rbx + 0xe28]
xor r8d, r8d
xor edx, edx
cmp r14d, 0x3000
je 0x140009c82
movzx ecx, byte [rbx + 0x5cf4]
call fcn.140014050
test al, al
je 0x140009cc8
test ebp, ebp
je 0x140009cc8
mov dword [rbx + 0x5cf8], ebp
mov byte [rbx + 0x5cf3], sil
jmp 0x140009cc8
mov rcx, rbx
jmp 0x140009b3d
xor ecx, ecx
call fcn.140014050
test al, al
je 0x140009c94
mov byte [rbx + 0x5cf4], sil
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.140014050
test al, al
je 0x140009cae
mov byte [rbx + 0x5cf4], 1
xor r8d, r8d
xor edx, edx
mov ecx, 2
call fcn.140014050
test al, al
je 0x140009cc8
mov byte [rbx + 0x5cf4], 2
mov rax, qword [0x1402bad40]
xor ecx, ecx
or dword [rax + 0x47d0], 0x40
mov dword [rax + 0x4830], 0x3f333333
call fcn.140018050
test al, al
je 0x140009db1
mov edx, ebp
lea rcx, str.HoveredId:_0x_08X
call fcn.14003a370
lea rcx, str.Press_ESC_to_abort_picking.
call fcn.14003a370
lea rax, str.Left
mov qword [rsp + 0x20], rax
lea rax, str.Right
mov qword [rsp + 0x28], rax
lea rax, str.Middle
mov qword [rsp + 0x30], rax
cmp r14d, 0x3000
jne 0x140009d44
lea rcx, str.Remap_w__CtrlShift:_click_anywhere_to_select_new_mouse_button.
call fcn.14003a370
jmp 0x140009d7b
movzx r8d, byte [rbx + 0x5cf4]
lea rdx, str.Click__s_Button_to_break_in_debugger___remap_w__CtrlShift_
test ebp, ebp
mov eax, reloc.WS2_32.dll_recv
mov rcx, rsi
cmove rcx, rax
mov rax, qword [0x1402bad40]
mov r8, qword [rsp + r8*8 + 0x20]
add rax, 0x38b8
add rcx, rax
call fcn.14003a4b0
mov rax, qword [0x1402bad40]
mov rcx, qword [rax + 0x3ef8]
test dword [rcx + 0x14], 0x2000000
jne 0x140009dac
mov r8d, 0x2813
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011cd0
mov rbx, qword [0x1402bad40]
mov dword [rbx + 0x3f40], esi
mov eax, dword [rbx + 0x5d10]
inc eax
cmp dword [rbx + 0x3e50], eax
jne 0x140009e9b
mov ebp, dword [rbx + 0x3f48]
test ebp, ebp
jne 0x140009de2
mov ebp, dword [rbx + 0x3f58]
cmp dword [rbx + 0x5d18], ebp
je 0x140009e26
mov dword [rbx + 0x5d18], ebp
mov dword [rbx + 0x5d14], 0xffffffff
mov ecx, dword [rbx + 0x5d24]
test ecx, ecx
jns 0x140009e20
mov eax, ecx
cdq
sub eax, edx
mov edx, esi
sar eax, 1
add eax, ecx
lea rcx, [rbx + 0x5d20]
test eax, eax
cmovg edx, eax
call fcn.140020ed0
mov dword [rbx + 0x5d20], esi
test ebp, ebp
je 0x140009e9b
movsxd rax, dword [rbx + 0x5d14]
test eax, eax
js 0x140009e5c
cmp eax, dword [rbx + 0x5d20]
jge 0x140009e5c
lea rcx, [rax + rax*8]
mov rax, qword [rbx + 0x5d28]
cmp byte [rax + rcx*8 + 5], sil
jne 0x140009e56
cmp byte [rax + rcx*8 + 4], 2
jle 0x140009e5c
inc dword [rbx + 0x5d14]
movsxd rdx, dword [rbx + 0x5d14]
cmp edx, 0xffffffff
jne 0x140009e70
mov dword [rbx + 0x3f40], ebp
jmp 0x140009e9b
test edx, edx
js 0x140009e9b
cmp edx, dword [rbx + 0x5d20]
jge 0x140009e9b
mov rax, qword [rbx + 0x5d28]
lea rbp, [rdx + rdx*8]
mov ecx, dword [rax + rbp*8]
mov dword [rbx + 0x3f40], ecx
mov rax, qword [rbx + 0x5d28]
inc byte [rax + rbp*8 + 4]
movzx eax, byte [rdi + 0x5cf1]
mov r14, qword [rsp + 0xe8]
mov rbp, qword [rsp + 0xe0]
mov rbx, qword [rsp + 0xd8]
test al, al
je 0x140009ece
sub al, 1
mov byte [rdi + 0x5cf1], al
jne 0x140009ece
mov dword [rdi + 0x477c], esi
movzx eax, byte [rdi + 0x5cf0]
test al, al
je 0x140009ef6
sub al, 1
mov byte [rdi + 0x5cf0], al
jne 0x140009ef6
lea rcx, str._Auto_disabled_ImGuiDebugLogFlags_EventClipper_to_avoid_spamming__n
call fcn.14001f9b0
and dword [rdi + 0x5cc4], 0xffffffef
mov rax, qword [0x1402bad40]
lea rcx, str.DebugDefault
movss xmm1, dword [0x1401639a4]
xor r8d, r8d
mov byte [rdi + 0x3e5d], 1
movaps xmm0, xmm1
unpcklps xmm0, xmm1
xor edx, edx
or dword [rax + 0x47d0], 2
movsd qword [rax + 0x47f0], xmm0
mov dword [rax + 0x47d8], 4
call fcn.14000f4d0
mov rax, qword [rdi + 0x3ef8]
cmp byte [rax + 0xbe], 1
je 0x140009f66
mov r8d, 0x123a
lea rdx, str.C:UsersNATCHODesktopcheat_natchoimgui.cpp
lea rcx, str.g.CurrentWindow__IsFallbackWindow__true
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp byte [rdi + 0x85], sil
je 0x140009fb1
movsx edx, byte [rdi + 0x5cf2]
cmp dl, 0xff
je 0x140009fb4
mov eax, dword [rdi + 0x3e50]
and eax, 0x80000003
jge 0x140009f8f
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
mov eax, 0x66666667
sete sil
add esi, edx
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub esi, eax
jmp 0x140009fb4
mov sil, 0xff
mov edx, 1
mov byte [rdi + 0x5cf2], sil
mov rcx, rdi
add rsp, 0xb8
pop rdi
pop rsi
jmp fcn.140006e80