Function at 0x1400b2970
Capabilities:
Acquire debug privileges
Create thread
Enumerate processes

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x358]
sub rsp, 0x430
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1400da040]
xor rax, rsp
mov qword [rbp + 0x310], rax
xor esi, esi
mov qword [rsp + 0x68], rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x68]
mov edx, 0xf01ff
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov rbx, qword [rsp + 0x68]
lea r8, [rbp + 0x50]
lea rdx, str.SeDebugPrivilege
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov r14d, 1
test eax, eax
jne 0x1400b2a03
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.LookupPrivilegeValue_error:__u_n
call fcn.1400175f0
jmp 0x1400b2a68
mov dword [rbp + 0x68], r14d
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x6c], rax
mov dword [rbp + 0x74], 2
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov r9d, 0x10
lea r8, [rbp + 0x68]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
jne 0x1400b2a4f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.AdjustTokenPrivileges_error:__u_n
call fcn.1400175f0
jmp 0x1400b2a68
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x514
jne 0x1400b2a68
lea rcx, str.The_token_does_not_have_the_specified_privilege.__n
call fcn.1400175f0
mov dword [rbp], 0x50
mov dword [rbp + 4], 2
lea rax, [0x1400b3ae0]
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rsi
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rbp + 0x28], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
lea rbx, str.FieldW_Ex_WidgetWin
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rsi
lea rcx, [rbp]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], 0xa
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
mov r9d, 0x80000000
lea r8, str.FieldWEx___Admin
mov rdx, rbx
mov ecx, 0x8000020
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rdi, rax
mov qword [rbp + 0x68], rax
mov qword [rbp - 0x7c], rsi
mov qword [rbp - 0x68], 2
mov qword [rbp - 0x50], 2
mov qword [rsp + 0x70], rsi
mov dword [rbp - 0x80], 0x1c
mov dword [rsp + 0x78], 0x3c
mov dword [rsp + 0x7c], r14d
mov dword [rbp - 0x6c], 0x20
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x74], r14
mov qword [rbp - 0x58], r14
mov dword [rbp + 0x300], 0xb000
mov dword [rbp + 0x304], 0xa000
lea rbx, [0x140145128]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x60]
mov qword [rsp + 0x50], rax
lea r15, [0x140145120]
mov qword [rsp + 0x48], r15
lea r12, [0x140145110]
mov qword [rsp + 0x40], r12
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x300]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, r14d
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x1400b2c25
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x60]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r12
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x300]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 5
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x1400b2c33
call fcn.1400b3a60
jmp 0x1400b39ba
mov rcx, qword [0x140145110]
mov rax, qword [rcx]
lea r9, [rbp + 0x50]
lea r8, [0x1400c2c08]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x140145120]
mov rax, qword [rcx]
lea r9, [0x140145108]
xor r8d, r8d
mov rdx, qword [rbp + 0x50]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140141918]
mov ecx, 0x64c0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r9, rax
mov r8, qword [0x140141918]
test r8, r8
je 0x1400b2d06
mov r10d, dword [r8 + 0x40a8]
movsx rax, word [r8 + 0x6328]
lea rdx, [r8 + 0x632c]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x1400b2cfb
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6328], cx
movsx rax, cx
lea rdx, [r8 + 0x632c]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], esi
inc word [rdx + 4]
inc dword [r8 + 0x6320]
mov qword [rbp + 0x50], r9
lea rax, [rsp + 0x60]
mov qword [rbp + 0x300], rax
mov qword [rbp + 0x60], r9
test r9, r9
je 0x1400b2d2b
xor edx, edx
mov rcx, r9
call fcn.1400179e0
jmp 0x1400b2d2e
mov rax, rsi
mov qword [0x140141918], rax
call fcn.14001d6c0
test rbx, rbx
je 0x1400b2d46
mov qword [0x140141918], rbx
mov ecx, 0x630
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
mov r9, qword [0x140141918]
test r9, r9
je 0x1400b2dbf
mov r8d, dword [r9 + 0x40a8]
movsx rax, word [r9 + 0x6328]
lea rdx, [r9 + 0x632c]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r8d
je 0x1400b2db4
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r9 + 0x6328], cx
movsx rax, cx
lea rdx, [r9 + 0x632c]
lea rdx, [rdx + rax*8]
mov dword [rdx], r8d
mov dword [rdx + 4], esi
inc word [rdx + 4]
inc dword [r9 + 0x6320]
mov qword [rbp + 0x50], rbx
lea rax, [rsp + 0x60]
mov qword [rbp + 0x300], rax
mov qword [rbp + 0x60], rbx
test rbx, rbx
je 0x1400b2df5
xor edx, edx
mov r8d, 0x630
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call fcn.140003580
mov rbx, rax
jmp 0x1400b2df8
mov rbx, rsi
mov rcx, rbx
call fcn.140003cd0
cmp qword [0x140141910], 0
jne 0x1400b2e11
mov qword [0x140141910], rbx
mov r13, qword [0x140141918]
or dword [r13 + 8], 0x443
xor ecx, ecx
call fcn.14004c5a0
mov rax, qword [0x140141918]
test dword [r13 + 8], 0x400
je 0x1400b2e48
mov dword [rax + 0x3a08], esi
mov dword [rax + 0x3b14], 0x3f800000
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
mov dword [rbp - 0x78], 2
mov dword [rbp - 0x74], r14d
mov dword [rbp - 0x4c], 0x7f7fffff
mov dword [rbp - 0x40], 0x3f800000
mov dword [rbp - 0x3c], 0x3f800000
mov eax, 0xffff
mov word [rbp - 0x38], ax
mov byte [rbp - 0x48], 1
mov byte [rsp + 0x7c], 0
mov dword [rbp - 0x50], 0x41500000
lea rax, [0x1400c2680]
mov qword [rsp + 0x20], rax
xor r9d, r9d
movss xmm2, dword [0x1400c8fbc]
lea rdx, str.C:WindowsFonts_tahomabd.ttf
mov rcx, qword [r13 + 0x38]
call fcn.140050b70
lea rax, [0x1400c2698]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
movss xmm6, dword [0x1400c8fc4]
movaps xmm2, xmm6
lea rdx, str.C:WindowsFontsMsyhbd.ttc
mov rcx, qword [r13 + 0x38]
call fcn.140050b70
lea rax, [0x1400c26c0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
movaps xmm2, xmm6
lea rdx, str.C:WindowsFontsMalgunbd.ttf
mov rcx, qword [r13 + 0x38]
call fcn.140050b70
movaps xmm0, xmmword [rsp + 0x70]
movaps xmmword [rbp + 0xc0], xmm0
movaps xmm1, xmmword [rbp - 0x80]
movaps xmmword [rbp + 0xd0], xmm1
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0xe0], xmm0
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0xf0], xmm1
movaps xmm0, xmmword [rbp - 0x50]
movaps xmmword [rbp + 0x100], xmm0
movaps xmm1, xmmword [rbp - 0x40]
movaps xmmword [rbp + 0x110], xmm1
movaps xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp + 0x120], xmm0
movaps xmm1, xmmword [rbp - 0x20]
movaps xmmword [rbp + 0x130], xmm1
movaps xmm0, xmmword [rbp - 0x10]
movaps xmmword [rbp + 0x140], xmm0
lea rax, [0x1400da0e0]
mov qword [rbp + 0xc0], rax
mov dword [rbp + 0xc8], 0x66788
mov dword [rbp + 0xd4], 0x41600000
lea rax, [0x1400c8d8c]
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xc0]
mov rcx, qword [r13 + 0x38]
call fcn.140050950
mov rcx, qword [r13 + 0x38]
call fcn.140051270
mov rcx, rdi
call fcn.140057990
call fcn.140057300
xor r15b, r15b
mov r12b, 1
call fcn.140079e40
call fcn.14008c240
mov byte [rbp + 0x50], 7
movsd xmm6, qword [0x1400c8f20]
movsd qword [rbp + 0x58], xmm6
lea r9, [rbp + 0x50]
lea r8, str.Main
lea rdx, str.Window
lea rcx, [rbp + 0x300]
call fcn.14008c0f0
nop
mov rcx, rax
call fcn.14009a380
movss dword [0x1401450d8], xmm0
movzx edx, byte [rbp + 0x300]
lea rcx, [rbp + 0x308]
call fcn.140079340
mov byte [rbp + 0x50], 7
movsd qword [rbp + 0x58], xmm6
lea r9, [rbp + 0x50]
lea r8, str.Table
lea rdx, str.Window
lea rcx, [rbp + 0x300]
call fcn.14008c0f0
nop
mov rcx, rax
call fcn.14009a380
movss dword [0x1401450dc], xmm0
movzx edx, byte [rbp + 0x300]
lea rcx, [rbp + 0x308]
call fcn.140079340
xor eax, eax
mov byte [rbp + 0x300], 4
mov byte [rbp + 0x50], al
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x308], rax
lea r9, [rbp + 0x300]
lea r8, str.Maps
lea rdx, str.Patch
lea rcx, [rbp + 0x50]
call fcn.14008c0f0
nop
cmp byte [rax], 4
jne 0x1400b3a03
movzx eax, byte [rax + 8]
mov byte [0x1401450d4], al
movzx edx, byte [rbp + 0x50]
lea rcx, [rbp + 0x58]
call fcn.140079340
call fcn.14008c960
call fcn.14008d830
call fcn.140092960
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x1400170d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop word [rax + rax]
mov rax, qword [0x1401450b8]
cmp rax, qword [0x1401450c0]
je 0x1400b3127
mov qword [0x1401450c0], rax
mov dword [rbp + 0xc0], 0x238
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0xc0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x1400b31d2
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
jne 0x1400b31d2
nop dword [rax + rax]
lea rdx, str.FieldW.exe
lea rcx, [rbp + 0xec]
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1400b31bd
mov rdx, qword [0x1401450c0]
cmp rdx, qword [0x1401450c8]
je 0x1400b31aa
mov eax, dword [rbp + 0xc8]
mov dword [rdx], eax
add qword [0x1401450c0], 4
jmp 0x1400b31bd
lea r8, [rbp + 0xc8]
lea rcx, [0x1401450b8]
call fcn.140089870
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x1400b3170
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r12b, r12b
jne 0x1400b321a
mov rax, qword [0x1401450c0]
mov rcx, qword [0x1401450b8]
sub rax, rcx
test rax, 0xfffffffffffffffc
je 0x1400b3203
mov eax, dword [rcx]
cmp dword [0x140145160], eax
je 0x1400b3274
mov rcx, qword [0x1401450b0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x1401450b0], rsi
mov r12b, 1
mov rax, qword [0x1401450c0]
mov r8, qword [0x1401450b8]
sub rax, r8
sar rax, 2
test rax, rax
je 0x1400b3274
mov r8d, dword [r8]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401450b0], rax
mov rax, qword [0x1401450c0]
mov rcx, qword [0x1401450b8]
sub rax, rcx
sar rax, 2
test rax, rax
je 0x1400b39fd
mov eax, dword [rcx]
mov dword [0x140145160], eax
xor r12b, r12b
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x88]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x1400b32e2
lea rcx, [rbp + 0x88]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x88]
call qword [sym.imp.USER32.dll_DispatchMessageW]
movzx r15d, r15b
cmp dword [rbp + 0x90], 0x12
cmove r15d, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x88]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x1400b3292
test r15b, r15b
jne 0x1400b362e
cmp byte [0x1401449dc], 0
je 0x1400b3314
mov rcx, qword [0x140145110]
mov rax, qword [rcx]
mov r8d, r14d
xor edx, edx
call qword [rax + 0x40]
cmp eax, 0x87a0001
jne 0x1400b3314
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400b3110
mov byte [0x1401449dc], 0
mov r8d, dword [0x140144a6c]
test r8d, r8d
je 0x1400b33c4
mov r9d, dword [0x140145118]
test r9d, r9d
je 0x1400b33c4
mov rcx, qword [0x140145108]
test rcx, rcx
je 0x1400b3362
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140145108], rsi
mov r8d, dword [0x140144a6c]
mov r9d, dword [0x140145118]
mov rcx, qword [0x140145110]
mov rax, qword [rcx]
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor edx, edx
call qword [rax + 0x68]
mov dword [0x140145118], esi
mov dword [0x140144a6c], esi
mov rcx, qword [0x140145110]
mov rax, qword [rcx]
lea r9, [rbp + 0x50]
lea r8, [0x1400c2c08]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x140145120]
mov rax, qword [rcx]
lea r9, [0x140145108]
xor r8d, r8d
mov rdx, qword [rbp + 0x50]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x140141918]
test rax, rax
je 0x1400b33d9
mov rcx, qword [rax + 0xa0]
jmp 0x1400b33dc
mov rcx, rsi
cmp qword [rcx + 0x48], 0
jne 0x1400b33e8
call fcn.140056de0
call fcn.140058880
call fcn.140020760
call fcn.140079080
cmp byte [0x1401450d1], 0
je 0x1400b340c
lea rcx, [0x1401450d1]
call fcn.14007cf60
cmp byte [0x1401450d2], 0
je 0x1400b3421
lea rcx, [0x1401450d2]
call fcn.14007ed10
cmp byte [0x1401450d3], 0
je 0x1400b3436
lea rcx, [0x1401450d3]
call fcn.1400847c0
cmp byte [0x1401450e0], 0
je 0x1400b34af
cmp byte [0x1401450d1], 0
jne 0x1400b34af
mov edi, esi
mov rax, qword [0x140144a18]
mov rdx, qword [0x140144a10]
sub rax, rdx
sar rax, 3
test rax, rax
je 0x1400b34a8
mov rbx, rsi
nop word [rax + rax]
mov rcx, qword [rbx + rdx]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x140144a10]
mov qword [rbx + rax], rsi
inc edi
lea rbx, [rbx + 8]
mov rcx, qword [0x140144a18]
mov rdx, qword [0x140144a10]
sub rcx, rdx
sar rcx, 3
movsxd rax, edi
cmp rax, rcx
jb 0x1400b3470
mov byte [0x1401450e0], 0
call fcn.140022ce0
xorps xmm0, xmm0
movups xmmword [rbp + 0x300], xmm0
mov rcx, qword [0x140145128]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140145108]
mov edx, r14d
call qword [rax + 0x108]
mov rcx, qword [0x140145128]
mov rax, qword [rcx]
lea r8, [rbp + 0x300]
mov rdx, qword [0x140145108]
call qword [rax + 0x190]
mov rax, qword [0x140141918]
mov rcx, qword [rax + 0x4c98]
mov rax, qword [rcx]
add rax, 0xa8
mov rcx, rsi
cmp byte [rax], 0
cmovne rcx, rax
call fcn.1400561b0
test dword [r13 + 8], 0x400
je 0x1400b3600
call fcn.140038340
mov rbx, qword [0x140141918]
mov eax, dword [rbx + 0x39e8]
cmp eax, 1
jle 0x1400b359c
mov esi, 8
nop dword [rax]
mov rax, qword [rbx + 0x39f0]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x1000
jne 0x1400b358a
mov rax, qword [rbx + 0x3988]
test rax, rax
je 0x1400b3577
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x39c8]
test rax, rax
je 0x1400b358a
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
mov eax, dword [rbx + 0x39e8]
cmp r14d, eax
jl 0x1400b3550
mov r14d, 1
cmp eax, r14d
jle 0x1400b3600
mov esi, 8
nop dword [rax]
mov rax, qword [rbx + 0x39f0]
mov rdi, qword [rsi + rax]
test dword [rdi + 4], 0x1000
jne 0x1400b35ea
mov rax, qword [rbx + 0x3990]
test rax, rax
je 0x1400b35d7
xor edx, edx
mov rcx, rdi
call rax
mov rax, qword [rbx + 0x39d0]
test rax, rax
je 0x1400b35ea
xor edx, edx
mov rcx, rdi
call rax
inc r14d
add rsi, 8
cmp r14d, dword [rbx + 0x39e8]
jl 0x1400b35b0
mov r14d, 1
mov rcx, qword [0x140145110]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, r14d
call qword [rax + 0x40]
cmp eax, 0x87a0001
sete byte [0x1401449dc]
xor esi, esi
cmp byte [0x1400da0cd], 1
je 0x1400b3110
mov rdi, qword [0x140141918]
test rdi, rdi
je 0x1400b3641
mov rsi, qword [rdi + 0xa0]
mov rbx, qword [rdi + 0x4c98]
movsxd rax, dword [rdi + 0x4c90]
lea r14, [rbx + rax*8]
cmp rbx, r14
je 0x1400b3669
mov rcx, qword [rbx]
call fcn.140038870
add rbx, 8
cmp rbx, r14
jne 0x1400b3658
call fcn.1400571e0
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x1400b367d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400b368b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x1400b369a
mov rax, qword [rcx]
call qword [rax + 0x10]
xor r15d, r15d
mov qword [rdi + 0x90], r15
mov qword [rdi + 0xa0], r15
and dword [rdi + 0xc], 0xffffeff7
mov r8, qword [0x140141918]
test r8, r8
je 0x1400b371e
mov r9d, dword [r8 + 0x40a8]
movsx rdx, word [r8 + 0x6328]
lea rcx, [r8 + 0x632c]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x1400b3713
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6328], cx
movsx rax, cx
lea rcx, [r8 + 0x632c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], r15d
inc word [rcx + 6]
inc dword [r8 + 0x6324]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x140141918]
test rdi, rdi
je 0x1400b373c
mov r14, qword [rdi + 0x98]
jmp 0x1400b373f
mov r14, r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdx, rax
lea rcx, str.ImGui_Platform
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov rax, qword [0x140141918]
mov rbx, qword [rax + 0x4c98]
movsxd rax, dword [rax + 0x4c90]
lea rsi, [rbx + rax*8]
cmp rbx, rsi
je 0x1400b3786
mov rcx, qword [rbx]
call fcn.140038870
add rbx, 8
cmp rbx, rsi
jne 0x1400b3775
mov rcx, qword [r14 + 0x38]
test rcx, rcx
je 0x1400b3795
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rdi + 0x88], r15
mov qword [rdi + 0x98], r15
and dword [rdi + 0xc], 0xfffff3f8
mov r8, qword [0x140141918]
test r8, r8
je 0x1400b3816
mov r9d, dword [r8 + 0x40a8]
movsx rdx, word [r8 + 0x6328]
lea rcx, [r8 + 0x632c]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x1400b380b
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6328], cx
movsx rax, cx
lea rcx, [r8 + 0x632c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], r15d
inc word [rcx + 6]
inc dword [r8 + 0x6324]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140141910]
mov qword [0x140141910], r15
test rbx, rbx
je 0x1400b38af
mov rcx, rbx
call fcn.140015fe0
mov r8, qword [0x140141918]
test r8, r8
je 0x1400b38a6
mov r9d, dword [r8 + 0x40a8]
movsx rdx, word [r8 + 0x6328]
lea rcx, [r8 + 0x632c]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x1400b389b
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6328], cx
movsx rax, cx
lea rcx, [r8 + 0x632c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], r15d
inc word [rcx + 6]
inc dword [r8 + 0x6324]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140141918]
mov qword [0x140141918], rbx
call fcn.14001dc50
mov qword [0x140141918], r15
test rbx, rbx
je 0x1400b394c
mov rcx, rbx
call fcn.140044470
mov r8, qword [0x140141918]
test r8, r8
je 0x1400b3943
mov r9d, dword [r8 + 0x40a8]
movsx r10, word [r8 + 0x6328]
lea rdx, [r8 + 0x632c]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x1400b3938
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6328], cx
movsx rax, cx
lea rdx, [r8 + 0x632c]
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], r15d
inc word [rdx + 6]
inc dword [r8 + 0x6324]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x140145108]
test rcx, rcx
je 0x1400b3965
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140145108], r15
mov rcx, qword [0x140145110]
test rcx, rcx
je 0x1400b397e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140145110], r15
mov rcx, qword [0x140145128]
test rcx, rcx
je 0x1400b3997
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140145128], r15
mov rcx, qword [0x140145120]
test rcx, rcx
je 0x1400b39b0
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140145120], r15
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov rcx, qword [rbp + 0x310]
xor rcx, rsp
call fcn.1400b3c10
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400b3be0
nop
mov rcx, rax
call fcn.140098050
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140087d70
nop
mov r8, rax
lea rdx, str.type_must_be_boolean__but_is
lea rcx, [rbp + 0x88]
call fcn.140088340
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x70]
call fcn.14008b0b0
lea rdx, [0x1400d7120]
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll__CxxThrowException
int3