Function at 0x140001440
Capabilities:
Enumerate process modules
Enumerate processes

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x798]
sub rsp, 0x870
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x14004d010]
xor rax, rsp
mov qword [rbp + 0x720], rax
xor r12d, r12d
mov r14d, r12d
mov dword [rbp + 0x580], r12d
call qword [sym.imp.KERNEL32.dll_FreeConsole]
mov edi, r12d
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140001501
mov dword [rbp + 0x130], 0x238
lea rdx, [rbp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140001501
lea rdx, str.btdadventuretime.exe
lea rcx, [rbp + 0x15c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400014fb
lea rdx, [rbp + 0x130]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
jmp 0x1400014cd
mov edi, dword [rbp + 0x138]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rsi, r12
mov edx, edi
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140001572
mov dword [rbp + 0x130], 0x438
lea rdx, [rbp + 0x130]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32FirstW]
test eax, eax
je 0x140001572
lea rdx, str.GameAssembly.dll
lea rcx, [rbp + 0x160]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x14000156b
lea rdx, [rbp + 0x130]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32NextW]
jmp 0x14000153d
mov rsi, qword [rbp + 0x148]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rax
mov r8, rsi
mov rdx, r15
lea rcx, [rbp + 0x60]
call fcn.1400011e0
nop
mov dword [rbp + 0xe0], 0x50
mov dword [rbp + 0xe4], 0x40
lea rax, [0x140003d80]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xf0], r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0xf8], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x110], xmm1
lea rax, str.ImGui_Example
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x128], r12
lea rcx, [rbp + 0xe0]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], r12
mov rax, qword [rbp + 0xf8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], 0x226
mov dword [rsp + 0x30], 0x384
mov dword [rsp + 0x28], 0x64
mov dword [rsp + 0x20], 0x64
mov r9d, 0xcf0000
lea r8, str.BATTD_Trainer
mov rdx, qword [rbp + 0x120]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rdi, rax
mov qword [rbp + 8], rax
mov ecx, 0x20
call qword [sym.imp.d3d9.dll_Direct3DCreate9]
mov rcx, rax
mov qword [0x14004d9d0], rax
mov esi, 1
test rax, rax
je 0x1400031e3
mov qword [0x14004d9f0], r12
mov qword [0x14004d9fc], r12
mov dword [0x14004da04], r12d
mov qword [0x14004da0c], r12
mov dword [0x14004da14], r12d
mov qword [0x14004da24], r12
mov dword [0x14004da18], esi
mov dword [0x14004da08], esi
mov dword [0x14004d9f8], r12d
mov dword [0x14004da1c], esi
mov dword [0x14004da20], 0x50
mov dword [0x14004da2c], esi
mov rax, qword [rax]
lea rdx, [0x14004d9e0]
mov qword [rsp + 0x30], rdx
lea rdx, [0x14004d9f0]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x40
mov r9, rdi
mov r8d, esi
xor edx, edx
call qword [rax + 0x80]
test eax, eax
js 0x1400031dc
lea edx, [rsi + 9]
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x14004d9c0]
mov rdx, qword [0x14004d9b0]
mov ecx, 0x6258
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r9, rax
mov r8, qword [0x14004d9c0]
test r8, r8
je 0x1400017ee
mov r10d, dword [r8 + 0x3f58]
movsx rax, word [r8 + 0x60c8]
lea rdx, [r8 + 0x60cc]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x1400017e3
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60c8], cx
movsx rax, cx
lea rdx, [r8 + 0x60cc]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r12d
inc word [rdx + 4]
inc dword [r8 + 0x60c0]
mov qword [rsp + 0x68], r9
lea rax, [rsp + 0x60]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x30], r9
test r9, r9
je 0x140001811
xor edx, edx
mov rcx, r9
call fcn.140007b40
jmp 0x140001814
mov rax, r12
mov qword [0x14004d9c0], rax
call fcn.14000c1c0
mov rax, qword [0x14004d9c0]
test rbx, rbx
cmovne rax, rbx
mov qword [0x14004d9c0], rax
or dword [rax + 8], 1
xor ecx, ecx
call fcn.14002a110
mov rcx, rdi
call fcn.1400057f0
mov rdi, qword [0x14004d9e0]
mov rbx, qword [0x14004d9c0]
mov rdx, qword [0x14004d9b0]
mov ecx, 0x28
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov r8, rax
mov r9, qword [0x14004d9c0]
test r9, r9
je 0x1400018d6
mov r10d, dword [r9 + 0x3f58]
movsx rdx, word [r9 + 0x60c8]
lea rax, [r9 + 0x60cc]
lea rax, [rax + rdx*8]
cmp dword [rax], r10d
je 0x1400018cb
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r9 + 0x60c8], cx
movsx rax, cx
lea rax, [rax*8 + 0x60cc]
add rax, r9
mov dword [rax], r10d
mov dword [rax + 4], r12d
inc word [rax + 4]
inc dword [r9 + 0x60c0]
test r8, r8
je 0x1400018fc
mov qword [r8], r12
mov qword [r8 + 8], r12
mov qword [r8 + 0x10], r12
mov qword [r8 + 0x18], r12
mov dword [r8 + 0x20], 0x1388
mov dword [r8 + 0x24], 0x2710
jmp 0x1400018ff
mov r8, r12
mov qword [rbx + 0x98], r8
lea rax, str.imgui_impl_dx9
mov qword [rbx + 0x88], rax
or dword [rbx + 0xc], 8
mov qword [r8], rdi
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
mov dword [rbp + 0x588], r12d
mov dword [rbp + 0x58c], r12d
mov dword [rbp + 0x598], r12d
mov dword [rbp + 0x594], r12d
mov dword [rbp + 0x590], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x680], xmm0
mov qword [rbp + 0x690], r12
mov qword [rbp + 0x698], 0xf
mov byte [rbp + 0x680], 0
movups xmmword [rbp + 0x660], xmm0
mov qword [rbp + 0x670], r12
mov qword [rbp + 0x678], 0xf
mov byte [rbp + 0x660], 0
movups xmmword [rbp + 0x640], xmm0
mov qword [rbp + 0x650], r12
mov qword [rbp + 0x658], 0xf
mov byte [rbp + 0x640], 0
movups xmmword [rbp + 0x620], xmm0
mov qword [rbp + 0x630], r12
mov qword [rbp + 0x638], 0xf
mov byte [rbp + 0x620], 0
movups xmmword [rbp + 0x600], xmm0
mov qword [rbp + 0x610], r12
mov qword [rbp + 0x618], 0xf
mov byte [rbp + 0x600], 0
mov dword [rbp + 0x578], esi
xor r12b, r12b
mov byte [rsp + 0x61], r12b
xor r13b, r13b
mov byte [rsp + 0x62], r13b
xor dil, dil
mov byte [rsp + 0x63], dil
mov byte [rsp + 0x64], dil
mov byte [rsp + 0x60], dil
lea rax, [rbp + 0x680]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x588]
mov qword [rbp + 0x18], rax
lea rax, [rbp + 0x660]
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x58c]
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x640]
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0x598]
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x620]
mov qword [rbp + 0x40], rax
lea rax, [rbp + 0x594]
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0x600]
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x590]
mov qword [rbp + 0x58], rax
xor sil, sil
movabs rdi, 0x7fffffffffffffff
movsd xmm7, qword [0x1400458d0]
movss xmm8, dword [0x140045860]
movss xmm6, dword [0x140045908]
movss xmm9, dword [0x140045858]
nop
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140001ace
imul rax, rax, 0x64
jmp 0x140001ae9
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffffffffb3b4bf
cmp rax, rcx
jge 0x140001aff
lea rdi, [rax + 0x4c4b40]
movabs r13, 0x311cdad160000
movabs r12, 0x112e0be826d694b3
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140001b31
imul rbx, rax, 0x64
jmp 0x140001b4d
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rbx, [rax + rcx]
cmp rbx, rdi
jge 0x140001bca
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rcx, rax, 0x64
mov rax, rdi
sub rax, rbx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
comisd xmm0, xmm7
seta r9b
test r9b, r9b
lea r8, [rcx + r13]
jne 0x140001b7f
lea r8, [rax + rcx]
add rax, rcx
lea rdx, [rcx + r13]
test r9b, r9b
cmove rdx, rax
mov rax, r12
imul rdx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x6a0], rdx
imul eax, edx, 0x3b9aca00
sub r8d, eax
mov dword [rbp + 0x6a8], r8d
lea rcx, [rbp + 0x6a0]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
jmp 0x140001b13
xor edi, edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x588]
mov rdx, qword [rbp + 0x60]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x58c]
mov rdx, qword [rbp + 0x68]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x598]
mov rdx, qword [rbp + 0x70]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x594]
mov rdx, qword [rbp + 0x78]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x590]
mov rdx, qword [rbp + 0x80]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rcx, [rbp + 0x10]
call fcn.1400032c0
mov ebx, 1
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x6b0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
movzx r12d, byte [rsp + 0x61]
movzx r13d, byte [rsp + 0x62]
je 0x140001cee
nop word [rax + rax]
lea rcx, [rbp + 0x6b0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x6b0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx esi, sil
cmp dword [rbp + 0x6b8], 0x12
cmove esi, ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x6b0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140001ca0
test sil, sil
jne 0x140002cb4
mov ecx, dword [0x14004d9d8]
test ecx, ecx
je 0x140001d1f
mov eax, dword [0x14004d9dc]
test eax, eax
je 0x140001d1f
mov dword [0x14004d9f0], ecx
mov dword [0x14004d9f4], eax
mov dword [0x14004d9dc], edi
mov dword [0x14004d9d8], edi
call fcn.140003cb0
mov rax, qword [0x14004d9c0]
test rax, rax
je 0x140001d34
mov rcx, qword [rax + 0x98]
jmp 0x140001d37
mov rcx, rdi
cmp qword [rcx + 0x18], rdi
jne 0x140001d58
test rax, rax
je 0x140001d58
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x140001d58
cmp qword [rcx], rdi
je 0x140001d58
call fcn.140005590
call fcn.1400061f0
call fcn.14000e7e0
mov r8, qword [0x14004d9c0]
mov rdx, qword [r8 + 0x4b10]
mov rax, qword [rdx]
mov ecx, dword [r8 + 0x49f8]
or ecx, ebx
mov dword [r8 + 0x49f8], ecx
movsd xmm0, qword [rax + 4]
movsd qword [r8 + 0x4a08], xmm0
mov qword [r8 + 0x4a10], rdi
mov dword [r8 + 0x49fc], ebx
mov rax, qword [rdx]
or ecx, 2
mov dword [r8 + 0x49f8], ecx
movsd xmm0, qword [rax + 0xc]
movsd qword [r8 + 0x4a18], xmm0
mov dword [r8 + 0x4a00], ebx
xor edx, edx
lea r8d, [rdx + 0x2b]
lea rcx, str.Trainer_Main
call fcn.140013d90
mov rdx, qword [0x14004d9c0]
mov rax, qword [rdx + 0x4000]
mov byte [rax + 0xc0], bl
mov rcx, qword [rdx + 0x4000]
mov dword [rcx + 0x2a0], 0x3f99999a
mov rax, qword [rcx]
movss xmm0, dword [rax + 0x3d3c]
mulss xmm0, xmm8
mov rax, qword [rcx + 0x378]
test rax, rax
je 0x140001e1c
mulss xmm0, dword [rax + 0x2a0]
movss dword [rdx + 0x3d50], xmm0
movss dword [rdx + 0x3d38], xmm0
lea rcx, [rbp + 0x680]
cmp qword [rbp + 0x698], 0x10
cmovae rcx, qword [rbp + 0x680]
call fcn.140035060
lea rcx, [rbp + 0x660]
cmp qword [rbp + 0x678], 0x10
cmovae rcx, qword [rbp + 0x660]
call fcn.140035060
lea rcx, [rbp + 0x640]
cmp qword [rbp + 0x658], 0x10
cmovae rcx, qword [rbp + 0x640]
call fcn.140035060
lea rcx, [rbp + 0x620]
cmp qword [rbp + 0x638], 0x10
cmovae rcx, qword [rbp + 0x620]
call fcn.140035060
lea rcx, [rbp + 0x600]
cmp qword [rbp + 0x618], 0x10
cmovae rcx, qword [rbp + 0x600]
call fcn.140035060
mov dword [rbp + 0x580], 0x3e8
mov dword [rbp + 0x570], ebx
lea rax, [rbp + 0x580]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x570]
lea r8, [rbp + 0x578]
call fcn.140036ee0
lea rcx, str.Add_Orbs:
call fcn.140035060
mov qword [rbp], rdi
lea rdx, [rbp]
lea rcx, str.Common
call fcn.1400358e0
test al, al
je 0x140001f3c
mov ecx, dword [rbp + 0x588]
add ecx, dword [rbp + 0x578]
mov dword [rbp + 0x570], ecx
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x570]
mov rdx, qword [rbp + 0x60]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140019a50
mov qword [rbp - 8], rdi
lea rdx, [rbp - 8]
lea rcx, str.Uncommon
call fcn.1400358e0
test al, al
je 0x140001f94
mov ecx, dword [rbp + 0x58c]
add ecx, dword [rbp + 0x578]
mov dword [rbp + 0x570], ecx
mov rdx, qword [rbp + 0x60]
add rdx, 0x10
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x570]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140019a50
mov qword [rbp - 0x30], rdi
lea rdx, [rbp - 0x30]
lea rcx, str.Rare
call fcn.1400358e0
test al, al
je 0x140001fec
mov ecx, dword [rbp + 0x598]
add ecx, dword [rbp + 0x578]
mov dword [rbp + 0x570], ecx
mov rdx, qword [rbp + 0x60]
add rdx, 0x20
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x570]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140019a50
mov qword [rbp - 0x28], rdi
lea rdx, [rbp - 0x28]
lea rcx, str.Super_rare
call fcn.1400358e0
test al, al
je 0x140002044
mov ecx, dword [rbp + 0x594]
add ecx, dword [rbp + 0x578]
mov dword [rbp + 0x570], ecx
mov rdx, qword [rbp + 0x60]
add rdx, 0x30
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x570]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140019a50
mov qword [rsp + 0x68], rdi
lea rdx, [rsp + 0x68]
lea rcx, str.Epic
call fcn.1400358e0
test al, al
je 0x14000209e
mov ecx, dword [rbp + 0x590]
add ecx, dword [rbp + 0x578]
mov dword [rbp + 0x570], ecx
mov rdx, qword [rbp + 0x60]
add rdx, 0x40
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x570]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ebx, r12b
lea rdx, [rsp + 0x61]
lea rcx, str.In_game_money_hack
call fcn.1400366e0
movzx r12d, byte [rsp + 0x61]
cmp bl, r12b
je 0x1400020f9
mov qword [rsp + 0x20], rdi
mov r9d, 1
lea r8, [rbp + 0x570]
mov rdx, qword [rbp + 0x90]
mov rcx, r15
test r12b, r12b
mov dword [rbp + 0x570], 0xf59
jne 0x1400020f3
mov dword [rbp + 0x570], 0xf58
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ebx, r13b
lea rdx, [rsp + 0x62]
lea rcx, str.Health_hack
call fcn.1400366e0
movzx r13d, byte [rsp + 0x62]
cmp bl, r13b
je 0x140002156
mov qword [rsp + 0x20], rdi
mov r9d, 5
lea r8, [rbp + 0x570]
mov rdx, qword [rbp + 0x98]
mov rcx, r15
test r13b, r13b
movabs rax, 0x9090909090
jne 0x140002149
mov eax, 0xd97696e8
mov qword [rbp + 0x570], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ebx, byte [rsp + 0x63]
lea rdx, [rsp + 0x63]
lea rcx, str.Cosmic_essence_hack
call fcn.1400366e0
movzx edi, byte [rsp + 0x63]
cmp bl, dil
je 0x1400021bf
mov qword [rsp + 0x20], 0
mov r9d, 5
lea r8, [rbp + 0x570]
mov rdx, qword [rbp + 0xa0]
mov rcx, r15
test dil, dil
je 0x1400021ae
movabs rax, 0x9090909090
mov qword [rbp + 0x570], rax
jmp 0x1400021b9
mov qword [rbp + 0x570], 0x9ffc8e8
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ebx, byte [rsp + 0x64]
lea rdx, [rsp + 0x64]
lea rcx, str.Martial_crystals_hack
call fcn.1400366e0
movzx edi, byte [rsp + 0x64]
cmp bl, dil
je 0x140002222
mov r9d, 5
lea r8, [rbp + 0x570]
mov rdx, qword [rbp + 0xa8]
mov rcx, r15
test dil, dil
je 0x14000221b
movabs rax, 0x4234584b8
mov qword [rbp + 0x570], rax
xor edi, edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x140002224
mov eax, 0xfd29cfe8
jmp 0x140002205
xor edi, edi
lea rdx, [rsp + 0x60]
lea rcx, str.Print_Addresses
call fcn.1400366e0
cmp byte [rsp + 0x60], 0
je 0x140002b95
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x130]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x1400443e0]
mov qword [rbp + 0x130], rax
lea rax, [0x14003f9c8]
mov qword [rbp + 0x140], rax
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or r14d, 8
mov dword [rbp + 0x580], r14d
xor r8d, r8d
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x130]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp + 0x130]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x130], rax
mov rax, qword [rbp + 0x130]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x12c], edx
lea rcx, [rbp + 0x148]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x1b0], rdi
mov dword [rbp + 0x1b8], edi
lea rdx, [0x1400011c0]
lea rcx, [rbp + 0x140]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
mov rdx, qword [rbp + 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov r9, rdi
mov qword [rbp - 0x40], rdi
mov r10d, 0xf
mov qword [rbp - 0x38], r10
mov byte [rbp - 0x50], 0
or r14d, 0x20
mov dword [rbp + 0x580], r14d
movups xmmword [rbp - 0x20], xmm0
mov ecx, dword [rbp + 0x1b8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140002383
mov rax, qword [rbp + 0x188]
mov r8, qword [rax]
test r8, r8
je 0x140002383
mov rax, qword [rbp + 0x168]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x1b0]
cmovb r8, qword [rbp + 0x1b0]
sub r8, rdx
jmp 0x1400023bb
test cl, 4
jne 0x1400023b3
mov rax, qword [rbp + 0x180]
mov rcx, qword [rax]
test rcx, rcx
je 0x1400023b3
mov rax, qword [rbp + 0x160]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x198]
movsxd r8, dword [rax]
add r8, rcx
sub r8, rdx
jmp 0x1400023bb
mov r8, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x1400023d1
lea rcx, [rbp - 0x50]
call fcn.140004600
mov r10, qword [rbp - 0x38]
mov r9, qword [rbp - 0x40]
and r14d, 0xffffffdf
or r14d, 0x10
mov rax, r10
sub rax, r9
cmp rax, 0x14
jb 0x140002476
lea rax, [r9 + 0x14]
mov qword [rbp - 0x40], rax
lea rbx, [rbp - 0x50]
cmp r10, 0x10
cmovae rbx, qword [rbp - 0x50]
lea rax, [0x14003f984]
cmp rax, rbx
jbe 0x140002427
lea rax, [rbx + r9]
lea rcx, str.Common_Orb_Address:
cmp rcx, rax
ja 0x140002427
cmp rbx, rcx
jbe 0x14000242c
mov rdi, rbx
sub rdi, rcx
jmp 0x14000242c
mov edi, 0x14
lea rcx, [rbx + 0x14]
lea r8, [r9 + 1]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
lea rdx, str.Common_Orb_Address:
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
mov r8d, 0x14
sub r8, rdi
lea rdx, str.Common_Orb_Address:
add rdx, 0x14
add rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x50]
xor edi, edi
jmp 0x140002499
mov qword [rsp + 0x28], 0x14
lea rax, str.Common_Orb_Address:
mov qword [rsp + 0x20], rax
mov edx, 0x14
lea rcx, [rbp - 0x50]
call fcn.1400049f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5e0], xmm0
mov qword [rbp + 0x5f0], rdi
mov qword [rbp + 0x5f8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x5e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x5f0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r14d, 0x40
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140002514
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000250f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400031b2
call fcn.14003cf2c
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea rcx, [rbp + 0x5e0]
cmp qword [rbp + 0x5f8], 0x10
cmovae rcx, qword [rbp + 0x5e0]
call fcn.140035060
nop
lea rcx, [rbp + 0x148]
call fcn.140004550
and dword [rbp + 0x1b8], 0xffffffdf
mov qword [rbp + 0x1b0], rdi
lea rdx, [0x1400011c0]
lea rcx, [rbp + 0x140]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
mov rdx, qword [rbp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov r9, rdi
mov qword [rbp - 0x60], rdi
mov r10d, 0xf
mov qword [rbp - 0x58], r10
mov byte [rbp - 0x70], 0
bts r14d, 8
mov dword [rbp + 0x580], r14d
movups xmmword [rbp - 0x20], xmm0
mov ecx, dword [rbp + 0x1b8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x1400025e7
mov rax, qword [rbp + 0x188]
mov r8, qword [rax]
test r8, r8
je 0x1400025e7
mov rax, qword [rbp + 0x168]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x1b0]
cmovb r8, qword [rbp + 0x1b0]
sub r8, rdx
jmp 0x14000261f
test cl, 4
jne 0x140002617
mov rax, qword [rbp + 0x180]
mov rcx, qword [rax]
test rcx, rcx
je 0x140002617
mov rax, qword [rbp + 0x160]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x198]
movsxd r8, dword [rax]
add r8, rcx
sub r8, rdx
jmp 0x14000261f
mov r8, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x140002635
lea rcx, [rbp - 0x70]
call fcn.140004600
mov r10, qword [rbp - 0x58]
mov r9, qword [rbp - 0x60]
btr r14d, 8
bts r14d, 7
mov rax, r10
sub rax, r9
cmp rax, 0x16
jb 0x1400026dc
lea rax, [r9 + 0x16]
mov qword [rbp - 0x60], rax
lea rbx, [rbp - 0x70]
cmp r10, 0x10
cmovae rbx, qword [rbp - 0x70]
lea rax, [0x14003f99e]
cmp rax, rbx
jbe 0x14000268d
lea rax, [rbx + r9]
lea rcx, str.Money_OpCode_Address:
cmp rcx, rax
ja 0x14000268d
cmp rbx, rcx
jbe 0x140002692
mov rdi, rbx
sub rdi, rcx
jmp 0x140002692
mov edi, 0x16
lea rcx, [rbx + 0x16]
lea r8, [r9 + 1]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
lea rdx, str.Money_OpCode_Address:
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
mov r8d, 0x16
sub r8, rdi
lea rdx, str.Money_OpCode_Address:
add rdx, 0x16
add rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x70]
xor edi, edi
jmp 0x1400026ff
mov qword [rsp + 0x28], 0x16
lea rax, str.Money_OpCode_Address:
mov qword [rsp + 0x20], rax
mov edx, 0x16
lea rcx, [rbp - 0x70]
call fcn.1400049f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5c0], xmm0
mov qword [rbp + 0x5d0], rdi
mov qword [rbp + 0x5d8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x5c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x5d0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r14d, 9
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14000277b
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002776
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400031b9
call fcn.14003cf2c
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
lea rcx, [rbp + 0x5c0]
cmp qword [rbp + 0x5d8], 0x10
cmovae rcx, qword [rbp + 0x5c0]
call fcn.140035060
nop
lea rcx, [rbp + 0x148]
call fcn.140004550
and dword [rbp + 0x1b8], 0xffffffdf
mov qword [rbp + 0x1b0], rdi
lea rdx, [0x1400011c0]
lea rcx, [rbp + 0x140]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
mov rdx, qword [rbp + 0x98]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov r9, rdi
mov qword [rbp - 0x80], rdi
mov r10d, 0xf
mov qword [rbp - 0x78], r10
mov byte [rsp + 0x70], 0
or r14d, 2
mov dword [rbp + 0x580], r14d
movups xmmword [rbp - 0x20], xmm0
mov ecx, dword [rbp + 0x1b8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x14000284f
mov rax, qword [rbp + 0x188]
mov r8, qword [rax]
test r8, r8
je 0x14000284f
mov rax, qword [rbp + 0x168]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x1b0]
cmovb r8, qword [rbp + 0x1b0]
sub r8, rdx
jmp 0x140002887
test cl, 4
jne 0x14000287f
mov rax, qword [rbp + 0x180]
mov rcx, qword [rax]
test rcx, rcx
je 0x14000287f
mov rax, qword [rbp + 0x160]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x198]
movsxd r8, dword [rax]
add r8, rcx
sub r8, rdx
jmp 0x140002887
mov r8, qword [rbp - 0x18]
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x14000289e
lea rcx, [rsp + 0x70]
call fcn.140004600
mov r10, qword [rbp - 0x78]
mov r9, qword [rbp - 0x80]
and r14d, 0xfffffffd
or r14d, 1
mov rax, r10
sub rax, r9
cmp rax, 0x17
jb 0x140002946
lea rax, [r9 + 0x17]
mov qword [rbp - 0x80], rax
lea rbx, [rsp + 0x70]
cmp r10, 0x10
cmovae rbx, qword [rsp + 0x70]
lea rax, [0x14003f9b7]
cmp rax, rbx
jbe 0x1400028f6
lea rax, [r9 + rbx]
lea rcx, str.Health_OpCode_Address:
cmp rcx, rax
ja 0x1400028f6
cmp rbx, rcx
jbe 0x1400028fb
mov rdi, rbx
sub rdi, rcx
jmp 0x1400028fb
mov edi, 0x17
lea rcx, [rbx + 0x17]
lea r8, [r9 + 1]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
lea rdx, str.Health_OpCode_Address:
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + rbx]
mov r8d, 0x17
sub r8, rdi
lea rdx, str.Health_OpCode_Address:
add rdx, 0x17
add rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x70]
xor edi, edi
jmp 0x14000296a
mov qword [rsp + 0x28], 0x17
lea rax, str.Health_OpCode_Address:
mov qword [rsp + 0x20], rax
mov edx, 0x17
lea rcx, [rsp + 0x70]
call fcn.1400049f0
xorps xmm0, xmm0
movups xmmword [rbp + 0x5a0], xmm0
mov qword [rbp + 0x5b0], rdi
mov qword [rbp + 0x5b8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x5a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x5b0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r14d, 4
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x1400029e6
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400029e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400031c0
call fcn.14003cf2c
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
lea rcx, [rbp + 0x5a0]
cmp qword [rbp + 0x5b8], 0x10
cmovae rcx, qword [rbp + 0x5a0]
call fcn.140035060
nop
mov rdx, qword [rbp + 0x5b8]
cmp rdx, 0x10
jb 0x140002a55
inc rdx
mov rcx, qword [rbp + 0x5a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400031c7
call fcn.14003cf2c
mov qword [rbp + 0x5b0], rdi
mov qword [rbp + 0x5b8], 0xf
mov byte [rbp + 0x5a0], 0
mov rdx, qword [rbp + 0x5d8]
cmp rdx, 0x10
jb 0x140002aaf
inc rdx
mov rcx, qword [rbp + 0x5c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002aaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400031ce
call fcn.14003cf2c
mov qword [rbp + 0x5d0], rdi
mov qword [rbp + 0x5d8], 0xf
mov byte [rbp + 0x5c0], 0
mov rdx, qword [rbp + 0x5f8]
cmp rdx, 0x10
jb 0x140002b09
inc rdx
mov rcx, qword [rbp + 0x5e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400031d5
call fcn.14003cf2c
mov qword [rbp + 0x5f0], rdi
mov qword [rbp + 0x5f8], 0xf
mov byte [rbp + 0x5e0], 0
mov rax, qword [rbp + 0x130]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x130], rax
mov rax, qword [rbp + 0x130]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x12c], edx
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x148], rax
lea rcx, [rbp + 0x148]
call fcn.140004550
lea rcx, [rbp + 0x148]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x150]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1c8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
call fcn.1400161d0
call fcn.140010580
mov rcx, qword [0x14004d9e0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x14004d9e0]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x14004d9e0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x14004d9e0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], edi
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 0xff000000
mov r9d, 3
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x14004d9e0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x140002c60
call fcn.140010950
mov rax, qword [0x14004d9c0]
mov rcx, qword [rax + 0x4b10]
mov rax, qword [rcx]
add rax, 0x48
mov rcx, rdi
cmp byte [rax], 0
cmovne rcx, rax
call fcn.140004fe0
mov rcx, qword [0x14004d9e0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x14004d9e0]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
movabs rdi, 0x7fffffffffffffff
jne 0x140001ab0
mov rcx, qword [0x14004d9e0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x140001ab0
call fcn.140003cb0
jmp 0x140001ab0
mov r8, qword [0x14004d9c0]
test r8, r8
je 0x140002cc9
mov rsi, qword [r8 + 0x98]
jmp 0x140002ccc
mov rsi, rdi
lea rdi, [r8 + 8]
test r8, r8
je 0x140002d45
mov rbx, qword [r8 + 0x98]
test rbx, rbx
je 0x140002d45
cmp qword [rbx], 0
je 0x140002d45
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140002d06
mov rax, qword [rcx]
call qword [rax + 0x10]
xor r14d, r14d
mov qword [rbx + 8], r14
mov r8, qword [0x14004d9c0]
jmp 0x140002d09
xor r14d, r14d
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140002d23
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x10], r14
mov r8, qword [0x14004d9c0]
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140002d45
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x18], r14
mov r8, qword [0x14004d9c0]
mov rax, qword [r8 + 0x38]
mov qword [rax + 8], r14
mov rcx, qword [rsi]
test rcx, rcx
je 0x140002d5a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov r8, qword [0x14004d9c0]
xor r14d, r14d
mov qword [rdi + 0x80], r14
mov qword [rdi + 0x90], r14
and dword [rdi + 4], 0xfffffff7
test r8, r8
je 0x140002dd4
mov r9d, dword [r8 + 0x3f58]
movsx rdx, word [r8 + 0x60c8]
lea rcx, [rdx*8 + 0x60cc]
add rcx, r8
cmp dword [rcx], r9d
je 0x140002dc9
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60c8], cx
movsx rax, cx
lea rcx, [rax*8 + 0x60cc]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], r14d
inc word [rcx + 6]
inc dword [r8 + 0x60c4]
mov rdx, qword [0x14004d9b0]
mov rcx, rsi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov r8, qword [0x14004d9c0]
test r8, r8
je 0x140002df8
mov rdi, qword [r8 + 0x90]
jmp 0x140002dfb
mov rdi, r14
lea rbx, [r8 + 8]
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x140002e15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x14004d9c0]
mov qword [rbx + 0x78], r14
mov qword [rbx + 0x88], r14
and dword [rbx + 4], 0xfffffff8
test r8, r8
je 0x140002e89
mov r9d, dword [r8 + 0x3f58]
movsx rdx, word [r8 + 0x60c8]
lea rcx, [rdx*8 + 0x60cc]
add rcx, r8
cmp dword [rcx], r9d
je 0x140002e7e
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60c8], cx
movsx rax, cx
lea rcx, [rax*8 + 0x60cc]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], r14d
inc word [rcx + 6]
inc dword [r8 + 0x60c4]
mov rdx, qword [0x14004d9b0]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rbx, qword [0x14004d9c0]
mov qword [0x14004d9c0], rbx
call fcn.14000c740
mov qword [0x14004d9c0], r14
test rbx, rbx
je 0x140002f3f
mov rcx, rbx
call fcn.140022380
mov r8, qword [0x14004d9c0]
test r8, r8
je 0x140002f30
mov r9d, dword [r8 + 0x3f58]
movsx r10, word [r8 + 0x60c8]
lea rdx, [r8 + 0x60cc]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x140002f25
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60c8], cx
movsx rax, cx
lea rdx, [r8 + 0x60cc]
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], r14d
inc word [rdx + 6]
inc dword [r8 + 0x60c4]
mov rdx, qword [0x14004d9b0]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rcx, qword [0x14004d9e0]
test rcx, rcx
je 0x140002f58
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14004d9e0], r14
mov rcx, qword [0x14004d9d0]
test rcx, rcx
je 0x140002f71
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14004d9d0], r14
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0x120]
call qword [sym.imp.USER32.dll_UnregisterClassW]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
nop
mov rdx, qword [rbp + 0x618]
cmp rdx, 0x10
jb 0x140002fda
inc rdx
mov rcx, qword [rbp + 0x600]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002fd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003cf2c
mov qword [rbp + 0x610], r14
mov qword [rbp + 0x618], 0xf
mov byte [rbp + 0x600], 0
mov rdx, qword [rbp + 0x638]
cmp rdx, 0x10
jb 0x140003037
inc rdx
mov rcx, qword [rbp + 0x620]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003032
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003032
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003cf2c
mov qword [rbp + 0x630], r14
mov qword [rbp + 0x638], 0xf
mov byte [rbp + 0x620], 0
mov rdx, qword [rbp + 0x658]
cmp rdx, 0x10
jb 0x140003094
inc rdx
mov rcx, qword [rbp + 0x640]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000308f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000308f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003cf2c
mov qword [rbp + 0x650], r14
mov qword [rbp + 0x658], 0xf
mov byte [rbp + 0x640], 0
mov rdx, qword [rbp + 0x678]
cmp rdx, 0x10
jb 0x1400030f1
inc rdx
mov rcx, qword [rbp + 0x660]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400030ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003cf2c
mov qword [rbp + 0x670], r14
mov qword [rbp + 0x678], 0xf
mov byte [rbp + 0x660], 0
mov rdx, qword [rbp + 0x698]
cmp rdx, 0x10
jb 0x14000314e
inc rdx
mov rcx, qword [rbp + 0x680]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003149
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003149
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003cf2c
mov qword [rbp + 0x690], r14
mov qword [rbp + 0x698], 0xf
mov byte [rbp + 0x680], 0
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x1400031ab
mov rdx, qword [rbp + 0xd0]
sub rdx, rcx
and rdx, 0xfffffffffffffffc
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003268
call fcn.14003cf2c
xor eax, eax
jmp 0x140003276
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [0x14004d9d0]
mov rdx, qword [0x14004d9e0]
test rdx, rdx
je 0x140003206
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x10]
mov qword [0x14004d9e0], r12
mov rcx, qword [0x14004d9d0]
test rcx, rcx
je 0x140003218
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14004d9d0], r12
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0x120]
call qword [sym.imp.USER32.dll_UnregisterClassW]
nop
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x140003274
mov rdx, qword [rbp + 0xd0]
sub rdx, rcx
and rdx, 0xfffffffffffffffc
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000326f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000326f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003cf2c
mov eax, esi
mov rcx, qword [rbp + 0x720]
xor rcx, rsp
call fcn.14003ced0
lea r11, [rsp + 0x870]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret