Function at 0x1400534e0
Capabilities:
Create process on windows
Create thread
Download url
Enumerate processes
Inject dll
Inject thread
Link many functions at runtime
Log keystrokes via polling
Receive data
Set registry value
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r15
lea rbp, [rsp - 0x1330]
mov eax, 0x1430
call fcn.1400be840
sub rsp, rax
lea rdx, [rbp + 0x11d0]
xor r15d, r15d
lea rdx, [rdx + 0x80]
mov qword [rsp + 0x20], r15
lea rbx, [0x140000000]
xor r9d, r9d
movups xmm0, xmmword [rbx + 0x112b70]
lea rcx, [rbx + 0x112b70]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea r8, [rbp + 0x5d8]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm0
movups xmm0, xmmword [str.C:WindowsTempCHAMS.dll]
movups xmmword [rdx + 0x20], xmm1
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0xb4]
xor ecx, ecx
mov word [rdx + 0x34], ax
lea rdx, [rbp + 0x11d0]
movzx eax, word [0x140112a80]
movups xmmword [rbp + 0x5d8], xmm0
mov word [rbp + 0x5f0], ax
movsd xmm0, qword [0x140112a78]
movsd qword [rbp + 0x5e8], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x112c30]
lea rcx, [rbx + 0x112c30]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0xf90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
mov byte [rdx + 0x36], al
movzx eax, word [0x140112ad8]
movups xmmword [rbp + 0x560], xmm0
mov word [rbp + 0x578], ax
movsd xmm0, qword [0x140112ad0]
movsd qword [rbp + 0x570], xmm0
movzx eax, byte [0x140112ada]
lea r8, [rbp + 0x560]
xor r9d, r9d
mov byte [rbp + 0x57a], al
lea rdx, [rbp + 0xf90]
mov qword [rsp + 0x20], r15
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x112cf0]
lea rcx, [rbx + 0x112cf0]
xor r9d, r9d
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x1050]
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rbp + 0x5a0]
mov qword [rsp + 0x20], r15
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTemp_blanca_1.dll]
mov byte [rdx + 0x38], al
lea rdx, [rbp + 0x1050]
mov eax, dword [0x140112b10]
mov dword [rbp + 0x5b8], eax
movzx eax, byte [0x140112b14]
movups xmmword [rbp + 0x5a0], xmm0
mov byte [rbp + 0x5bc], al
movsd xmm0, qword [0x140112b08]
movsd qword [rbp + 0x5b0], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x112db0]
lea rcx, [rbx + 0x112db0]
movups xmm1, xmmword [rcx + 0x10]
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x1110]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
movups xmm0, xmmword [str.C:WindowsTempchamsred.dll]
mov byte [rdx + 0x38], al
mov eax, dword [0x140112b48]
lea r8, [rbp + 0x580]
mov dword [rbp + 0x598], eax
lea rdx, [rbp + 0x1110]
movzx eax, byte [0x140112b4c]
xor r9d, r9d
movups xmmword [rbp + 0x580], xmm0
xor ecx, ecx
mov byte [rbp + 0x59c], al
movsd xmm0, qword [0x140112b40]
movsd qword [rbp + 0x590], xmm0
mov qword [rsp + 0x20], r15
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x1400510e0]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x140052b50]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [0x14025ea20]
call fcn.140066fc0
mov ebx, dword [0x14023d710]
test ebx, ebx
jne 0x140053976
cmp qword [0x14023d7d8], r15
jne 0x1400538f0
lea ecx, [rbx + 0x10]
call fcn.1400bdff8
mov dword [rax + 8], r15d
mov qword [0x14023d7d8], rax
xor edx, edx
mov ebx, r15d
mov edi, r15d
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0xd30]
mov dword [rbp + 0xd30], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0xd30]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x140053970
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0xd5c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x14005395c
mov eax, dword [rbp + 0xd4c]
cmp eax, edi
jle 0x14005395c
mov ebx, dword [rbp + 0xd38]
mov edi, eax
lea rdx, [rbp + 0xd30]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140053932
mov dword [0x14023d710], ebx
mov rdi, qword [0x14023d7d8]
test rdi, rdi
jne 0x14005399e
lea ecx, [rdi + 0x10]
call fcn.1400bdff8
mov rdi, rax
mov dword [rax + 8], r15d
mov ebx, dword [0x14023d710]
mov qword [0x14023d7d8], rax
mov dword [rdi + 8], ebx
test ebx, ebx
jne 0x140053a12
xor edx, edx
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0xe60]
mov dword [rbp + 0xe60], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0xe60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x140053a0f
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0xe8c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov ebx, dword [rbp + 0xe68]
lea rdx, [rbp + 0xe60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400539e1
mov dword [rdi + 8], ebx
cmp dword [rdi + 8], r15d
je 0x140053a2b
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
cmp byte [0x14025ec30], r15b
jne 0x140053a65
lea rcx, [0x14025ec38]
call fcn.1400418f0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x14004e230]
mov qword [rsp + 0x1468], r13
mov edx, 0x7f00
mov qword [rbp + 0x498], rax
xor ecx, ecx
mov dword [rbp + 0x490], 0x50
mov dword [rbp + 0x494], 0x40
mov qword [rbp + 0x4a0], r15
mov qword [rbp + 0x4a8], r15
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x4b0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea rdi, str.Example
mov qword [rbp + 0x4c0], r15
mov qword [rbp + 0x4b8], rax
mov edx, 0x7f00
lea rax, str.ImGui
mov qword [rbp + 0x4d0], rdi
xor ecx, ecx
mov qword [rbp + 0x4c8], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x490]
mov qword [rbp + 0x4d8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r13d, 1
mov ecx, r13d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x121]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r15
mov r9d, 0x80000000
mov qword [rsp + 0x50], r15
cdq
mov qword [rsp + 0x48], r15
sub eax, edx
mov rdx, qword [rbp + 0x4d0]
mov r8, rdi
mov qword [rsp + 0x40], r15
xor ecx, ecx
mov dword [rsp + 0x38], 0x242
sar eax, 1
sub eax, 0x18b
mov dword [rsp + 0x30], 0x316
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea rcx, str.user32.dll
mov qword [0x14023d6e8], rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140053bf4
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140053beb
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x750]
mov qword [rbp + 0x5c8], rcx
lea rdx, [rbp + 0x5c0]
mov rcx, rdi
mov dword [rbp + 0x5c0], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x750], xmm0
mov dword [rbp + 0x5d0], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movdqa xmm0, xmmword [0x140113fb0]
lea rdx, [rbp + 0x760]
mov rcx, qword [0x14023d6e8]
movdqu xmmword [rbp + 0x760], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x14023d6e8]
lea rdx, [0x14023d700]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa38], xmm0
movups xmmword [0x14023d700], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x14023d6e8]
lea rbx, [0x140273528]
mov qword [rsp + 0x58], rbx
lea rdi, [0x140273520]
mov qword [rbp + 0x470], rax
lea rsi, [0x1402734d8]
lea rax, [rbp - 8]
mov qword [rbp + 0x454], r15
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x440]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r13d
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x10]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x468], 2
mov qword [rbp + 0x480], 2
mov qword [rbp + 0x440], r15
mov dword [rbp + 0x450], Ordinal_32
mov dword [rbp + 0x448], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x44c], r13d
mov dword [rbp + 0x464], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x45c], r13
mov qword [rbp + 0x478], r13
mov dword [rbp + 0x10], 0xb000
mov dword [rbp + 0x14], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x140053d69
mov qword [rsp + 0x58], rbx
lea rax, [rbp - 8]
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x440]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
xor ecx, ecx
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x10]
mov dword [rsp + 0x28], 2
lea edx, [r9 + 5]
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140053d8e
call fcn.14004e1b0
mov rdx, qword [rbp + 0x4a8]
mov rcx, qword [rbp + 0x4d0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r13d
jmp 0x1400597d1
mov rcx, qword [0x1402734d8]
lea r9, [rbp + 0x1c8]
mov qword [rsp + 0x1460], r12
lea r8, [0x140113d40]
mov qword [rsp + 0x1470], r14
xor edx, edx
movaps xmmword [rsp + 0x1420], xmm6
mov rax, qword [rcx]
movaps xmmword [rsp + 0x1410], xmm7
movaps xmmword [rsp + 0x13f0], xmm9
movaps xmmword [rsp + 0x13a0], xmm14
mov r10, qword [rax + 0x48]
movaps xmmword [rsp + 0x1390], xmm15
call r10
mov rcx, qword [0x140273520]
lea r9, [0x140263268]
mov rdx, qword [rbp + 0x1c8]
xor r8d, r8d
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [rbp + 0x1c8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14023d6e8]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14023d6e8]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x14023d640]
test rbx, rbx
je 0x140053e4a
inc dword [rbx + 0xf4]
mov ecx, 0x5dd0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140053e66
xor edx, edx
mov rcx, rax
call fcn.140001dc0
jmp 0x140053e69
mov rax, r15
mov qword [0x14023d640], rax
call fcn.140006070
test rbx, rbx
je 0x140053e83
mov qword [0x14023d640], rbx
jmp 0x140053e8a
mov rbx, qword [0x14023d640]
test rbx, rbx
jne 0x140053eb0
mov r8d, 0xfdc
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14023d640]
movss xmm9, dword [0x140113e68]
lea rdi, [0x14010e0e8]
mov qword [rbx + 0x20], r15
lea rdx, [0x140124100]
mov rcx, qword [rbx + 0x58]
movaps xmm3, xmm9
mov qword [rsp + 0x28], rdi
mov r8d, 0x41f54
mov qword [rsp + 0x20], r15
call fcn.14002de20
movss xmm3, dword [0x140113e7c]
lea rdx, [0x1401cf3c0]
mov rcx, qword [rbx + 0x58]
mov r8d, 0xe5c
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
call fcn.14002de20
movss xmm3, dword [0x140113e90]
lea rdx, [0x1401cf3c0]
mov qword [0x14023d658], rax
mov r8d, 0xe5c
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
call fcn.14002de20
movss xmm3, dword [0x140113e74]
lea rdx, [0x1401f59e0]
mov qword [0x14023d668], rax
mov r8d, 0x459d0
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
call fcn.14002de20
movss xmm6, dword [0x140113e88]
lea rdx, [0x1401f59e0]
mov rcx, qword [rbx + 0x58]
movaps xmm3, xmm6
mov qword [rsp + 0x28], rdi
mov r8d, 0x459d0
mov qword [rsp + 0x20], r15
call fcn.14002de20
mov qword [0x14023d660], rax
lea rdx, [0x140186110]
mov rcx, qword [rbx + 0x58]
movaps xmm3, xmm6
mov qword [rsp + 0x28], rdi
mov r8d, 0x492a4
mov qword [rsp + 0x20], r15
call fcn.14002de20
mov qword [0x14023d650], rax
lea rdx, [0x140124100]
mov rcx, qword [rbx + 0x58]
movaps xmm3, xmm9
mov qword [rsp + 0x28], rdi
mov r8d, 0x41f54
mov qword [rsp + 0x20], r15
call fcn.14002de20
xor ecx, ecx
mov qword [0x14023d648], rax
call fcn.140028180
mov rbx, qword [0x14023d640]
mov rsi, qword [0x14023d6e8]
test rbx, rbx
jne 0x140054030
mov r8d, 0xfdc
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14023d640]
cmp qword [rbx + 0x98], r15
je 0x140054053
mov r8d, reloc.WS2_32.dll_WSACleanup
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panel_backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp + 0x3c8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x1400541cd
lea rcx, [rbp + 0x3d0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1400541cd
mov rax, qword [0x14023d640]
test rax, rax
je 0x14005408f
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x1400540bc
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x1400540bf
mov rdi, r15
mov qword [rbx + 0x98], rdi
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
or dword [rbx + 0xc], 6
mov qword [rdi], rsi
mov rax, qword [rbp + 0x3c8]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x3d0]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
mov rbx, qword [0x14023d640]
cmp dword [rbx + 0x4870], r15d
jg 0x140054122
mov r8d, 0x72d
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rbx, r15
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x5f8], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x600], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x608], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x610], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], rsi
mov qword [rbp + 0x618], rax
mov byte [rdi + 0x2d], r13b
nop dword [rax]
mov rcx, qword [rbp + rbx*8 + 0x5f8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x1400541a1
inc rbx
cmp rbx, 5
jl 0x140054180
jmp 0x1400541cd
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x14023d640]
mov r14, qword [0x140273528]
mov rsi, qword [0x140273520]
test rax, rax
jne 0x140054208
mov r8d, 0xfdc
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14023d640]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r15
je 0x140054236
mov r8d, 0x221
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panel_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14023d640]
test rax, rax
je 0x140054241
inc dword [rax + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x140054282
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140054285
mov rbx, r15
mov qword [rdi + 0x98], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp + 0x18]
or dword [rdi + 4], 8
lea rdx, [0x14010f6c0]
mov qword [rbp + 0x18], r15
mov rcx, rsi
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x1d0], r15
mov rax, qword [rsi]
mov r9, qword [rax]
call r9
test eax, eax
jne 0x140054317
mov rcx, qword [rbp + 0x18]
lea r8, [rbp + 0x20]
lea rdx, [0x14010f6d0]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x140054317
mov rcx, qword [rbp + 0x20]
lea r8, [rbp + 0x1d0]
lea rdx, [0x14010f6e0]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x140054317
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x1d0]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x18]
test rcx, rcx
je 0x140054326
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x140054335
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov ecx, r13d
xorps xmm14, xmm14
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
sub eax, 0x121
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm7, dword [0x140113f04]
xor bl, bl
movss xmm15, dword [0x140113e78]
cdq
sub eax, edx
movaps xmmword [rsp + 0x1400], xmm8
sar eax, 1
xorps xmm1, xmm1
sub eax, 0x18b
movaps xmmword [rsp + 0x13e0], xmm10
movaps xmmword [rsp + 0x13d0], xmm11
unpcklps xmm1, xmm14
movaps xmmword [rsp + 0x13c0], xmm12
movd xmm0, eax
mov rax, qword [0x14023d640]
cvtdq2ps xmm0, xmm0
mov dword [rbp - 0xc], ebx
or dword [rax + 0x4778], r13d
xor esi, esi
movaps xmmword [rsp + 0x13b0], xmm13
unpcklps xmm0, xmm6
movsd qword [rax + 0x4788], xmm0
movsd qword [rax + 0x4790], xmm1
mov dword [rax + 0x477c], r13d
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
lea rcx, [rbp + 0x990]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140054462
lea rcx, [rbp + 0x990]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x990]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x998], 0x12
lea rcx, [rbp + 0x990]
movzx ebx, bl
cmove ebx, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140054411
mov dword [rbp - 0xc], ebx
test bl, bl
jne 0x140059546
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r15d, ax
mov ecx, reloc.WLDAP32.dll_Ordinal_50
shr r15d, 0xf
and r15b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r12d, ax
mov ecx, 0x33
shr r12d, 0xf
and r12b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r13d, ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
shr r13d, 0xf
and r13b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, WSAStartup
and al, 1
mov dword [rsp + 0x60], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, WSAStartup
and al, 1
mov dword [rsp + 0x64], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_WSAStartup
and al, 1
mov dword [rsp + 0x68], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x51
and al, 1
mov dword [rsp + 0x6c], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x45
and al, 1
mov dword [rsp + 0x70], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x14026315c]
movzx edx, byte [0x14023d671]
movzx r8d, byte [0x14023d7d1]
movzx r9d, byte [0x14023d6df]
movzx r10d, byte [0x14023d686]
movzx r11d, byte [0x14023d6f3]
movzx ebx, byte [0x14023d6dd]
movzx edi, byte [0x14023d678]
movzx esi, byte [0x14023d67a]
movzx r14d, byte [0x14023d6f0]
shr eax, 0xf
and al, 1
mov dword [rsp + 0x74], eax
cmp ecx, 1
jne 0x140054595
test r15b, r15b
je 0x1400546e1
mov ecx, dword [rsp + 0x60]
test dl, dl
jne 0x1400546e5
cmp byte [0x14023d77e], dl
sete byte [0x14023d77e]
jmp 0x1400546e5
cmp ecx, 2
jne 0x1400545c3
test r12b, r12b
je 0x1400546e1
mov ecx, dword [rsp + 0x60]
test r8b, r8b
jne 0x1400546e5
cmp byte [0x14023d77e], r8b
sete byte [0x14023d77e]
jmp 0x1400546e5
cmp ecx, 3
jne 0x1400545f1
test r13b, r13b
je 0x1400546e1
mov ecx, dword [rsp + 0x60]
test r9b, r9b
jne 0x1400546e5
cmp byte [0x14023d77e], r9b
sete byte [0x14023d77e]
jmp 0x1400546e5
cmp ecx, 4
jne 0x14005461e
mov ecx, dword [rsp + 0x60]
test cl, cl
je 0x1400546e5
test r10b, r10b
jne 0x1400546e5
cmp byte [0x14023d77e], r10b
sete byte [0x14023d77e]
jmp 0x1400546e5
cmp ecx, 5
jne 0x14005464e
cmp byte [rsp + 0x64], 0
je 0x1400546e1
mov ecx, dword [rsp + 0x60]
test r11b, r11b
jne 0x1400546e5
cmp byte [0x14023d77e], r11b
sete byte [0x14023d77e]
jmp 0x1400546e5
cmp ecx, 6
jne 0x140054675
cmp byte [rsp + 0x68], 0
je 0x1400546e1
mov ecx, dword [rsp + 0x60]
test bl, bl
jne 0x1400546e5
cmp byte [0x14023d77e], bl
sete byte [0x14023d77e]
jmp 0x1400546e5
cmp ecx, 7
jne 0x14005469a
cmp byte [rsp + 0x6c], 0
je 0x1400546e1
mov ecx, dword [rsp + 0x60]
test dil, dil
jne 0x1400546e5
cmp byte [0x14023d77e], dil
sete byte [0x14023d77e]
jmp 0x1400546e5
cmp ecx, 8
jne 0x1400546bf
cmp byte [rsp + 0x70], 0
je 0x1400546e1
mov ecx, dword [rsp + 0x60]
test sil, sil
jne 0x1400546e5
cmp byte [0x14023d77e], sil
sete byte [0x14023d77e]
jmp 0x1400546e5
cmp ecx, 9
jne 0x1400546e1
test al, al
je 0x1400546e1
mov ecx, dword [rsp + 0x60]
test r14b, r14b
jne 0x1400546e5
cmp byte [0x14023d77e], r14b
sete byte [0x14023d77e]
jmp 0x1400546e5
mov ecx, dword [rsp + 0x60]
mov eax, dword [0x14023d688]
cmp eax, 1
jne 0x140054700
test r15b, r15b
je 0x140054792
test dl, dl
jmp 0x140054782
cmp eax, 2
jne 0x140054713
test r12b, r12b
je 0x140054792
test r8b, r8b
jmp 0x140054782
cmp eax, 3
jne 0x140054722
test r13b, r13b
je 0x140054792
test r9b, r9b
jmp 0x140054782
cmp eax, 4
jne 0x140054730
test cl, cl
je 0x140054792
test r10b, r10b
jmp 0x140054782
cmp eax, 5
jne 0x140054741
cmp byte [rsp + 0x64], 0
je 0x140054792
test r11b, r11b
jmp 0x140054782
cmp eax, 6
jne 0x140054751
cmp byte [rsp + 0x68], 0
je 0x140054792
test bl, bl
jmp 0x140054782
cmp eax, 7
jne 0x140054762
cmp byte [rsp + 0x6c], 0
je 0x140054792
test dil, dil
jmp 0x140054782
cmp eax, 8
jne 0x140054773
cmp byte [rsp + 0x70], 0
je 0x140054792
test sil, sil
jmp 0x140054782
cmp eax, 9
jne 0x140054792
cmp byte [rsp + 0x74], 0
je 0x140054792
test r14b, r14b
jne 0x140054792
cmp byte [0x14023d77b], 0
sete byte [0x14023d77b]
mov eax, dword [0x140263158]
cmp eax, 1
jne 0x1400547ad
test r15b, r15b
je 0x14005483f
test dl, dl
jmp 0x14005482f
cmp eax, 2
jne 0x1400547c0
test r12b, r12b
je 0x14005483f
test r8b, r8b
jmp 0x14005482f
cmp eax, 3
jne 0x1400547cf
test r13b, r13b
je 0x14005483f
test r9b, r9b
jmp 0x14005482f
cmp eax, 4
jne 0x1400547dd
test cl, cl
je 0x14005483f
test r10b, r10b
jmp 0x14005482f
cmp eax, 5
jne 0x1400547ee
cmp byte [rsp + 0x64], 0
je 0x14005483f
test r11b, r11b
jmp 0x14005482f
cmp eax, 6
jne 0x1400547fe
cmp byte [rsp + 0x68], 0
je 0x14005483f
test bl, bl
jmp 0x14005482f
cmp eax, 7
jne 0x14005480f
cmp byte [rsp + 0x6c], 0
je 0x14005483f
test dil, dil
jmp 0x14005482f
cmp eax, 8
jne 0x140054820
cmp byte [rsp + 0x70], 0
je 0x14005483f
test sil, sil
jmp 0x14005482f
cmp eax, 9
jne 0x14005483f
cmp byte [rsp + 0x74], 0
je 0x14005483f
test r14b, r14b
jne 0x14005483f
cmp byte [0x14023d77d], 0
sete byte [0x14023d77d]
mov eax, dword [0x14025f018]
cmp eax, 1
jne 0x14005485a
test r15b, r15b
je 0x140054905
test dl, dl
jmp 0x1400548f5
cmp eax, 2
jne 0x140054870
test r12b, r12b
je 0x140054905
test r8b, r8b
jmp 0x1400548f5
cmp eax, 3
jne 0x140054883
test r13b, r13b
je 0x140054905
test r9b, r9b
jmp 0x1400548f5
cmp eax, 4
jne 0x140054891
test cl, cl
je 0x140054905
test r10b, r10b
jmp 0x1400548f5
cmp eax, 5
jne 0x1400548b4
cmp byte [rsp + 0x64], 0
je 0x140054905
test r11b, r11b
jne 0x140054905
cmp byte [0x14023d77c], r11b
sete al
mov byte [0x14023d77c], al
jmp 0x14005490c
cmp eax, 6
jne 0x1400548c4
cmp byte [rsp + 0x68], 0
je 0x140054905
test bl, bl
jmp 0x1400548f5
cmp eax, 7
jne 0x1400548d5
cmp byte [rsp + 0x6c], 0
je 0x140054905
test dil, dil
jmp 0x1400548f5
cmp eax, 8
jne 0x1400548e6
cmp byte [rsp + 0x70], 0
je 0x140054905
test sil, sil
jmp 0x1400548f5
cmp eax, 9
jne 0x140054905
cmp byte [rsp + 0x74], 0
je 0x140054905
test r14b, r14b
jne 0x140054905
cmp byte [0x14023d77f], 0
sete byte [0x14023d77f]
movzx eax, byte [0x14023d77c]
mov ecx, dword [0x14023d764]
cmp ecx, 1
jne 0x14005493a
test r15b, r15b
je 0x140054a5e
mov ecx, dword [rsp + 0x60]
test dl, dl
jne 0x140054a62
test al, al
sete byte [0x14023d77c]
jmp 0x140054a62
cmp ecx, 2
jne 0x140054963
test r12b, r12b
je 0x140054a5e
mov ecx, dword [rsp + 0x60]
test r8b, r8b
jne 0x140054a62
test al, al
sete byte [0x14023d77c]
jmp 0x140054a62
cmp ecx, 3
jne 0x14005498c
test r13b, r13b
je 0x140054a5e
mov ecx, dword [rsp + 0x60]
test r9b, r9b
jne 0x140054a62
test al, al
sete byte [0x14023d77c]
jmp 0x140054a62
cmp ecx, 4
jne 0x1400549b4
mov ecx, dword [rsp + 0x60]
test cl, cl
je 0x140054a62
test r10b, r10b
jne 0x140054a62
test al, al
sete byte [0x14023d77c]
jmp 0x140054a62
cmp ecx, 5
jne 0x1400549df
cmp byte [rsp + 0x64], 0
je 0x140054a5e
mov ecx, dword [rsp + 0x60]
test r11b, r11b
jne 0x140054a62
test al, al
sete byte [0x14023d77c]
jmp 0x140054a62
cmp ecx, 6
jne 0x1400549fe
cmp byte [rsp + 0x68], 0
je 0x140054a5e
mov ecx, dword [rsp + 0x60]
test bl, bl
jne 0x140054a62
test al, al
sete byte [0x14023d77c]
jmp 0x140054a62
cmp ecx, 7
jne 0x140054a1e
cmp byte [rsp + 0x6c], 0
je 0x140054a5e
mov ecx, dword [rsp + 0x60]
test dil, dil
jne 0x140054a62
test al, al
sete byte [0x14023d77c]
jmp 0x140054a62
cmp ecx, 8
jne 0x140054a3e
cmp byte [rsp + 0x70], 0
je 0x140054a5e
mov ecx, dword [rsp + 0x60]
test sil, sil
jne 0x140054a62
test al, al
sete byte [0x14023d77c]
jmp 0x140054a62
cmp ecx, 9
jne 0x140054a5e
cmp byte [rsp + 0x74], 0
je 0x140054a5e
mov ecx, dword [rsp + 0x60]
test r14b, r14b
jne 0x140054a62
test al, al
sete byte [0x14023d77c]
jmp 0x140054a62
mov ecx, dword [rsp + 0x60]
mov eax, dword [rsp + 0x64]
mov byte [0x14023d6f3], al
mov eax, dword [rsp + 0x68]
mov byte [0x14023d6dd], al
mov eax, dword [rsp + 0x6c]
mov byte [0x14023d678], al
mov eax, dword [rsp + 0x70]
mov byte [0x14023d67a], al
mov eax, dword [rsp + 0x74]
mov byte [0x14023d686], cl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov byte [0x14023d6f0], al
mov byte [0x14023d671], r15b
mov byte [0x14023d7d1], r12b
mov byte [0x14023d6df], r13b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140059840
mov ecx, dword [0x14023d6fc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140054b5a
lea rdx, [0x1401128b4]
lea rcx, [rbp + 0xbb0]
call fcn.1400419f0
lea r14, [0x1400d1d5a]
mov rsi, rax
mov rdx, r14
lea rcx, [rbp + 0xbd0]
call fcn.1400419f0
mov rdx, r14
lea rcx, [rbp + 0xc10]
mov rdi, rax
call fcn.1400419f0
lea rdx, [0x1401128b4]
mov rbx, rax
lea rcx, [rbp + 0xc30]
call fcn.1400419f0
mov qword [rsp + 0x30], rsi
lea rcx, [0x14023c7c8]
movabs r15, 0x7fffffffffff
mov qword [rsp + 0x28], rdi
mov r9, r15
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov rdx, rax
call fcn.140051500
jmp 0x140054b6b
lea r14, [0x1400d1d5a]
movabs r15, 0x7fffffffffff
mov ecx, dword [0x14023d7d4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140054bec
lea rdx, [0x14011290c]
lea rcx, [rbp + 0xc50]
call fcn.1400419f0
mov rdx, r14
lea rcx, [rbp + 0xc70]
mov rsi, rax
call fcn.1400419f0
mov rdx, r14
lea rcx, [rbp + 0xc90]
mov rdi, rax
call fcn.1400419f0
lea rdx, [0x14011290c]
mov rbx, rax
lea rcx, [rbp + 0xcb0]
call fcn.1400419f0
mov qword [rsp + 0x30], rsi
lea rcx, [0x14023c7c8]
mov qword [rsp + 0x28], rdi
mov r9, r15
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov rdx, rax
call fcn.140051500
mov ecx, dword [0x14023d68c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140054c97
movzx eax, word [0x140112968]
lea rcx, [rbp + 0xcd0]
xorps xmm0, xmm0
mov qword [rbp + 0x4f0], 2
movups xmmword [rbp + 0x4e0], xmm0
mov rdx, r14
mov word [rbp + 0x4e0], ax
mov byte [rbp + 0x4e2], 0
mov qword [rbp + 0x4f8], reloc.WS2_32.dll_ntohs
call fcn.1400419f0
mov rdx, r14
lea rcx, [rbp + 0xb50]
mov rdi, rax
call fcn.1400419f0
lea rdx, [0x140112968]
mov rbx, rax
lea rcx, [rbp + 0xcf0]
call fcn.1400419f0
lea rcx, [rbp + 0x4e0]
mov r9, r15
mov qword [rsp + 0x30], rcx
xor r8d, r8d
mov qword [rsp + 0x28], rdi
lea rcx, [0x14023c7c8]
mov rdx, rax
mov qword [rsp + 0x20], rbx
call fcn.140051500
mov rbx, qword [0x14023d640]
test rbx, rbx
je 0x140054caf
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x140054cc9
mov r8d, 0x250
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panel_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], 0
jne 0x140054cd5
call fcn.1400433c0
call fcn.140044570
call fcn.140008890
mov rcx, qword [0x14023d640]
mov r13d, 1
movaps xmm0, xmm14
movaps xmm1, xmm14
unpcklps xmm0, xmm14
unpcklps xmm1, xmm14
or dword [rcx + 0x4778], 2
mov dword [rcx + 0x4798], 0x44458000
mov dword [rcx + 0x479c], 0x44108000
mov dword [rcx + 0x4780], r13d
or dword [rcx + 0x4778], r13d
movsd qword [rcx + 0x4788], xmm0
movsd qword [rcx + 0x4790], xmm1
mov dword [rcx + 0x477c], r13d
test rcx, rcx
jne 0x140054d5b
mov r8d, 0xb55
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14023d640]
xor esi, esi
movaps xmm0, xmmword [0x1401140f0]
movaps xmm1, xmmword [0x1401141a0]
movups xmmword [rbp + 0xa48], xmm0
movups xmmword [rax + 0x38c8], xmm0
movaps xmm0, xmmword [0x140114170]
movups xmmword [rax + 0x38d8], xmm1
movups xmmword [rax + 0x38e8], xmm0
movups xmmword [rbp + 0xa58], xmm1
movaps xmm1, xmmword [0x140114260]
movups xmmword [rax + 0x38b8], xmm1
movups xmmword [rbp + 0xa68], xmm0
movaps xmm0, xmmword [0x140114010]
movups xmmword [rax + 0x38f8], xmm0
movups xmmword [rbp + 0xa88], xmm1
movaps xmm1, xmmword [0x140114100]
movups xmmword [rax + 0x3b98], xmm1
mov qword [rax + 0x37f0], 0x41000000
mov qword [rax + 0x37e8], rsi
mov dword [rax + 0x380c], 0x40e00000
mov qword [rax + 0x3814], 0x40a00000
mov qword [rax + 0x3824], 0x40800000
mov dword [rax + 0x3854], 0x40000000
mov dword [rax + 0x381c], 0x40c00000
mov dword [rax + 0x3820], 0x40400000
mov qword [rax + 0x3834], 0x41200000
mov dword [rax + 0x382c], esi
mov dword [rax + 0x3830], 0x41200000
cmp qword [0x14023d780], rsi
movups xmmword [rbp + 0xa98], xmm0
mov qword [rbp + 0x380], 0xffffffffffffffff
movups xmmword [rbp + 0xa78], xmm1
mov qword [rbp + 0x388], 0xffffffffffffffff
mov qword [rbp + 0x390], 0xffffffffffffffff
mov qword [rbp + 0x398], 0xffffffffffffffff
mov dword [rbp + 0x3a0], 0xffffffff
mov qword [rbp + 0x3a4], 0xfffffffffffffffd
mov dword [rbp + 0x3ac], 0xffffffff
mov qword [rbp + 0x3b0], rsi
jne 0x140054edf
mov rcx, qword [0x140273520]
lea rax, [0x14023d780]
mov qword [rsp + 0x30], rsi
lea r9, [rbp + 0x380]
mov qword [rsp + 0x28], rax
lea rdx, [0x140166060]
mov r8d, 0x200a6
mov qword [rsp + 0x20], rsi
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
lea rcx, [rbp + 0x3e8]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
cmp byte [0x14023d63e], sil
movzx r12d, word [rbp + 0x3e8]
movzx r15d, word [rbp + 0x3ea]
movzx r14d, word [rbp + 0x3ee]
jne 0x140055854
mov r8d, 0x20ab
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Hello__world_
call fcn.14000f7e0
call fcn.14004e360
mov rcx, qword [0x14023d6e8]
lea rdx, [0x14023d700]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r9, qword [0x14023d640]
mov rax, qword [r9 + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm14
jp 0x140054f6b
jne 0x140054f6b
movss xmm0, dword [rax + 0x1c]
ucomiss xmm0, xmm14
jp 0x140054f6b
je 0x140054fde
movd xmm0, dword [0x14023d704]
mov r9d, 0x316
movd xmm1, dword [0x14023d700]
mov rcx, qword [0x14023d6e8]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0x242
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x1c]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rax, qword [0x14023d640]
lea rdx, [rbp + 0x240]
mov qword [rbp + 0x240], rsi
xor r8d, r8d
mov rcx, qword [rax + 0x3ea0]
call fcn.140013070
mov r9, qword [0x14023d640]
mov rax, qword [r9 + 0x3ea0]
lea rcx, [rbp + 0x250]
mov byte [rax + 0xb0], r13b
movss xmm1, dword [0x14027386c]
movss xmm0, dword [0x140273868]
mov r8, qword [r9 + 0x3ea0]
movss dword [rbp + 0x254], xmm1
movss xmm1, dword [0x140273874]
mulss xmm1, dword [r9 + 0x37e0]
mov rbx, qword [r8 + 0x290]
movss dword [rbp + 0x250], xmm0
movss xmm0, dword [0x140273870]
movss dword [rbp + 0x25c], xmm1
movss dword [rbp + 0x258], xmm0
call fcn.140004070
movss xmm8, dword [0x140113f6c]
lea rdx, [rbp + 0x248]
movss xmm3, dword [0x140113f48]
mov esi, eax
movss xmm2, dword [r9 + 0x3c00]
lea rax, [0x140112ea0]
mov rcx, qword [r9 + 0x3bf8]
movss xmm6, dword [r8 + 0x20]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm8
call fcn.140031c50
movss xmm0, dword [rbp + 0x248]
mov dword [rbp + 0x2c], 0x41400000
addss xmm0, dword [0x140113df0]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x248], xmm1
subss xmm6, xmm1
mulss xmm6, dword [0x140113dc0]
movss dword [rbp + 0x28], xmm6
test esi, 0xff000000
je 0x140055173
mov rax, qword [rbx + 0x38]
mov rdi, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rbx + 0x98]
mov rcx, qword [rdi + 0x40]
cmp qword [rcx + 8], rax
je 0x14005511f
mov r8d, 0x663
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rbx + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140112ea3]
movss dword [rsp + 0x40], xmm14
lea r9, [rbp + 0x28]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [0x140112ea0]
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rcx, rdi
lea rax, [rbp + 0x770]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp + 0x770], xmm0
call fcn.140031e70
mov rbx, qword [0x14023d640]
cmp dword [rbx + 0x4870], 0
jg 0x14005519d
mov r8d, 0x72d
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140007f00
movss xmm1, dword [0x14027388c]
mov r10, rax
movss xmm0, dword [0x140273888]
mov rcx, qword [0x14023d640]
movss dword [rbp + 0x264], xmm1
movss xmm1, dword [0x140273894]
movss dword [rbp + 0x260], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x260]
movss xmm0, dword [0x140273890]
movss dword [rbp + 0x268], xmm0
movss dword [rbp + 0x26c], xmm1
call fcn.140004070
movss xmm6, dword [0x140113e58]
lea rdx, [rbp + 0x38]
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea r8, [rbp + 0x30]
movss dword [rsp + 0x20], xmm6
mov rcx, r10
mov dword [rbp + 0x30], 0x44458000
mov dword [rbp + 0x34], 0x42340000
mov qword [rbp + 0x38], 0
call fcn.14002bbb0
mov rbx, qword [0x14023d640]
cmp dword [rbx + 0x4870], 0
jg 0x14005527c
mov r8d, 0x72d
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140007f00
movss xmm1, dword [0x14027385c]
mov r10, rax
movss xmm0, dword [0x140273858]
mov rcx, qword [0x14023d640]
movss dword [rbp + 0x274], xmm1
movss xmm1, dword [0x140273864]
movss dword [rbp + 0x270], xmm0
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x270]
movss xmm0, dword [0x140273860]
movss dword [rbp + 0x278], xmm0
movss dword [rbp + 0x27c], xmm1
call fcn.140004070
mov r9d, eax
mov dword [rsp + 0x28], 0xc0
lea rdx, [rbp + 0x48]
movss dword [rsp + 0x20], xmm6
lea r8, [rbp + 0x40]
mov dword [rbp + 0x40], 0x44458000
mov rcx, r10
mov dword [rbp + 0x44], 0x44108000
mov dword [rbp + 0x48], 0
mov dword [rbp + 0x4c], 0x42340000
call fcn.14002bbb0
mov rcx, qword [0x14023d640]
mov dword [rbp + 0x50], 0x443e0000
mov dword [rbp + 0x54], 0x41200000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rbx, qword [rcx + 0x3ea0]
cmp dword [rbx + 0xe8], 0
jg 0x14005537c
mov r8d, 0x736
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd r8, dword [rbx + 0xe8]
lea rcx, str.CLOSE
mov rax, qword [rbx + 0xf0]
xor edx, edx
mov r8d, dword [rax + r8*4 - 4]
call fcn.140003a40
mov rcx, qword [0x14023d640]
mov edi, eax
cmp dword [rcx + 0x3ee8], eax
jne 0x1400553c1
lea r8, str.CLOSE
mov edx, ntohl
mov ecx, eax
call fcn.14001ea00
lea rdx, [rbp + 0x50]
mov ecx, edi
call fcn.140037600
test al, al
jne 0x140059840
cmp dword [rbx + 0xe8], 0
mov dword [rbp + 0x58], 0x44340000
mov dword [rbp + 0x5c], 0x41200000
jg 0x140055405
mov r8d, 0x736
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd r8, dword [rbx + 0xe8]
lea rcx, str.MIN
mov rax, qword [rbx + 0xf0]
xor edx, edx
mov r8d, dword [rax + r8*4 - 4]
call fcn.140003a40
mov rcx, qword [0x14023d640]
mov ebx, eax
cmp dword [rcx + 0x3ee8], eax
jne 0x14005544a
lea r8, str.MIN
mov edx, ntohl
mov ecx, eax
call fcn.14001ea00
lea rdx, [rbp + 0x58]
mov ecx, ebx
call fcn.140037360
test al, al
je 0x14005546d
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14023d640]
test rcx, rcx
jne 0x14005549a
mov r8d, 0xb55
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x14023d640]
mov rax, qword [rcx + 0x3ea0]
lea rdx, [rbp + 0x60]
mov dword [rbp + 0x60], 0x43fa0000
mov dword [rbp + 0x64], 0x43fa0000
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x140112eac]
movss xmm0, dword [rax + 0x18]
movss xmm1, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x7c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x140113ee8]
addss xmm1, dword [0x140113ed8]
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], r13b
call fcn.14000bac0
mov rcx, qword [0x14023d640]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [rax + 0x18]
movss xmm1, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x7c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm14
addss xmm1, xmm6
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], r13b
call fcn.140016cb0
xor esi, esi
mov qword [rbp + 0x68], 0
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x68]
mov qword [rsp + 0x30], rsi
lea rbx, [0x1400d1d5a]
mov dword [rsp + 0x28], esi
lea r8, [0x14023d790]
lea r9d, [rsi + 0x41]
mov qword [rsp + 0x20], rax
mov rdx, rbx
lea rcx, str.Username
call fcn.14003cb50
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x70]
mov qword [rsp + 0x30], rsi
lea r9d, [rsi + 0x41]
mov dword [rsp + 0x28], 0x8000
lea r8, [0x14023d690]
mov rdx, rbx
mov qword [rsp + 0x20], rax
lea rcx, str.Password
mov qword [rbp + 0x70], rsi
call fcn.14003cb50
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x78]
mov qword [rsp + 0x30], rsi
lea r9d, [rsi + 0x41]
mov dword [rsp + 0x28], esi
lea r8, [0x14023d720]
mov rdx, rbx
mov qword [rsp + 0x20], rax
lea rcx, str.Key_License
mov qword [rbp + 0x78], rsi
call fcn.14003cb50
mov rcx, qword [0x14023d640]
mov dword [rbp + 0x80], 0x43020000
mov dword [rbp + 0x84], 0x42200000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [rax + 0x18]
movss xmm1, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x7c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm9
addss xmm1, xmm7
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], r13b
lea rdx, [rbp + 0x80]
lea rcx, str.Login
call fcn.140035e60
test al, al
je 0x14005570a
lea rdx, [0x14023d690]
lea rcx, [rbp + 0xd10]
call fcn.1400419f0
lea rdx, [0x14023d790]
mov rbx, rax
lea rcx, [rbp + 0xb10]
call fcn.1400419f0
mov r8, rbx
lea rcx, [0x14025ea20]
mov rdx, rax
call fcn.140068e20
cmp byte [0x14025ec30], sil
jne 0x1400556fc
cmp qword [0x14025ec50], 0xf
lea rdx, [0x14025ec38]
cmova rdx, qword [0x14025ec38]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140055703
mov byte [0x14023d63e], r13b
lea rbx, [0x1400d1d5a]
mov rcx, qword [0x14023d640]
lea rdx, [rbp + 0x88]
mov dword [rbp + 0x88], 0x43020000
mov dword [rbp + 0x8c], 0x42200000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.Register
movss xmm0, dword [rax + 0x18]
movss xmm1, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x7c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x140113ef8]
addss xmm1, xmm7
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], r13b
call fcn.140035e60
test al, al
je 0x140055833
mov rdx, rbx
lea rcx, [rbp + 0xb30]
call fcn.1400419f0
lea rdx, [0x14023d720]
mov rsi, rax
lea rcx, [rbp + 0xbf0]
call fcn.1400419f0
lea rdx, [0x14023d690]
mov rdi, rax
lea rcx, [rbp + 0xb70]
call fcn.1400419f0
lea rdx, [0x14023d790]
mov rbx, rax
lea rcx, [rbp + 0xb90]
call fcn.1400419f0
mov r9, rdi
mov qword [rsp + 0x20], rsi
mov r8, rbx
lea rcx, [0x14025ea20]
mov rdx, rax
call fcn.14006b5e0
cmp byte [0x14025ec30], 0
jne 0x14005582a
cmp qword [0x14025ec50], 0xf
lea rdx, [0x14025ec38]
cmova rdx, qword [0x14025ec38]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140055831
mov byte [0x14023d63e], r13b
xor esi, esi
call fcn.140016e00
call fcn.14000bc00
call fcn.140052a20
call fcn.1400120e0
cmp byte [0x14023d63e], 0
je 0x140059492
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rbx, rax
lea r10, [rbp + 0x635]
mov eax, dword [rbp - 8]
mov r8d, eax
test eax, eax
jns 0x1400558c0
neg r8d
nop dword [rax]
nop word [rax + rax]
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x140055880
dec r10
mov byte [r10], reloc.WLDAP32.dll_Ordinal_45
jmp 0x1400558ea
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x1400558c0
lea r9, [rbp - 0x10]
mov rdx, r10
lea r8, [rbp + 0x635]
lea rcx, [rbp + 0x2a0]
call fcn.1400422c0
cmp qword [rbp + 0x2b8], 0xf
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x280]
cmova rdx, qword [rbp + 0x2a0]
call fcn.1400419f0
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 0xf
jbe 0x140055968
mov rcx, qword [rbp + 0x2a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140055963
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059817
call fcn.1400be344
mov rcx, qword [rbp + 0x290]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
mov qword [rbp + 0x2b0], rsi
mov qword [rbp + 0x2b8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2a0], 0
cmp rax, 7
jb 0x140059849
cmp qword [rbp + 0x298], 0xf
lea rax, [rbp + 0x280]
mov qword [rsp + 0x30], rcx
lea r9, str.Dias_:
cmova rax, qword [rbp + 0x280]
lea rcx, [rbp + 0x2c0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 7
call fcn.140042070
xorps xmm0, xmm0
lea rdx, [rbp + 0xa08]
movups xmmword [rbp + 0xa08], xmm0
movups xmmword [rbp + 0xa18], xmm0
movups xmmword [rbp + 0xa28], xmm0
call fcn.140047810
cmp qword [rbp + 0x2d8], 0xf
lea rax, [rbp + 0x2c0]
xorps xmm0, xmm0
lea rcx, [0x14023e850]
cmova rax, qword [rbp + 0x2c0]
movups xmmword [rbp + 0x920], xmm0
mov qword [rbp + 0x920], rax
lea rax, [0x1400d1d5a]
movups xmmword [rbp + 0x940], xmm0
mov qword [rbp + 0x940], rax
lea rax, str.Dev:_ARCK____
movups xmmword [rbp + 0x930], xmm0
mov qword [rbp + 0x930], rbx
movups xmmword [rbp + 0x950], xmm0
mov qword [rbp + 0x958], rax
movups xmmword [rbp + 0x960], xmm0
movups xmmword [rbp + 0x970], xmm0
movups xmmword [rbp + 0x980], xmm0
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
jne 0x140059834
cmp dword [0x14023e89c], 0x7fffffff
je 0x14005981e
mov r8d, dword [reloc.WS2_32.dll_accept]
lea rcx, [0x14025f158]
lea eax, [r8 + 1]
mov dword [reloc.WS2_32.dll_accept], eax
lea rax, [rbp + 0x920]
mov qword [rsp + 0x20], rax
call fcn.14004bff0
mov qword [0x14025f150], rax
lea rcx, [0x14023e850]
mov eax, r13d
xchg byte [0x14023d7e3], al
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rcx, qword [0x14025f010]
test rcx, rcx
je 0x140055af6
add rcx, 0x58
call qword [sym.imp.MSVCP140.dll__Cnd_broadcast]
cmp qword [0x14023d718], 0
jne 0x140055b37
mov rcx, qword [0x140273520]
lea rax, [0x14023d718]
mov qword [rsp + 0x30], rsi
lea r9, [rbp + 0x380]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401d0220]
mov r8d, 0x257b2
mov qword [rsp + 0x20], rsi
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov r8d, 0x20ab
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str.Hello__world_
call fcn.14000f7e0
mov rcx, qword [0x14023d640]
mov dword [rbp + 0x90], 0x443e0000
mov dword [rbp + 0x94], 0x41200000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], r13b
mov rbx, qword [rcx + 0x3ea0]
cmp dword [rbx + 0xe8], 0
jg 0x140055ba3
mov r8d, 0x736
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd r8, dword [rbx + 0xe8]
lea rcx, str.CLOSE
mov rax, qword [rbx + 0xf0]
xor edx, edx
mov r8d, dword [rax + r8*4 - 4]
call fcn.140003a40
mov rcx, qword [0x14023d640]
mov edi, eax
cmp dword [rcx + 0x3ee8], eax
jne 0x140055be8
lea r8, str.CLOSE
mov edx, ntohl
mov ecx, eax
call fcn.14001ea00
lea rdx, [rbp + 0x90]
mov ecx, edi
call fcn.140037600
test al, al
jne 0x140059840
cmp dword [rbx + 0xe8], 0
mov dword [rbp + 0x98], 0x44340000
mov dword [rbp + 0x9c], 0x41200000
jg 0x140055c35
mov r8d, 0x736
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd r8, dword [rbx + 0xe8]
lea rcx, str.MIN
mov rax, qword [rbx + 0xf0]
xor edx, edx
mov r8d, dword [rax + r8*4 - 4]
call fcn.140003a40
mov rcx, qword [0x14023d640]
mov ebx, eax
cmp dword [rcx + 0x3ee8], eax
jne 0x140055c7a
lea r8, str.MIN
mov edx, ntohl
mov ecx, eax
call fcn.14001ea00
lea rdx, [rbp + 0x98]
mov ecx, ebx
call fcn.140037360
test al, al
je 0x140055ca0
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
mov r13, qword [0x14023d640]
movaps xmm0, xmmword [0x1401141e0]
mov rax, qword [r13 + 0x3ea0]
movsd xmm6, qword [rax + 0x18]
mov byte [rax + 0xb0], 1
mov rcx, qword [r13 + 0x3ea0]
mov rax, qword [rcx + 0x290]
mov ebx, dword [rax + 0x20]
mov byte [rcx + 0xb0], 1
lea rcx, [rbp + 0x780]
mov rax, qword [r13 + 0x3ea0]
movss xmm7, dword [r13 + 0x37f0]
mov r10, qword [rax + 0x290]
movups xmmword [rbp + 0x780], xmm0
call fcn.140004070
movaps xmm13, xmm6
movsd qword [rbp + 0x418], xmm6
movss xmm12, dword [rbp + 0x418]
lea r8, [rbp + 0xa0]
shufps xmm13, xmm13, 0x55
lea rdx, [rbp + 0xa8]
movaps xmm9, xmm13
mov dword [rsp + 0x28], 0xa0
addss xmm9, dword [0x140113f14]
movaps xmm11, xmm12
movss dword [rsp + 0x20], xmm7
addss xmm11, dword [0x140113f28]
movaps xmm8, xmm13
movaps xmm10, xmm12
addss xmm10, dword [0x140113ee0]
addss xmm8, xmm14
movss dword [rbp + 0xa4], xmm9
mov r9d, eax
mov rcx, r10
movss dword [rbp + 0xa0], xmm11
movss dword [rbp + 0xa8], xmm10
movss dword [rbp + 0xac], xmm8
call fcn.14002bbb0
movaps xmm0, xmmword [0x140114180]
lea rcx, [rbp + 0x790]
movups xmmword [rbp + 0x790], xmm0
call fcn.140004070
movaps xmm0, xmmword [0x1401141e0]
lea rcx, [rbp + 0x7a0]
movups xmmword [rbp + 0x7a0], xmm0
mov r11d, eax
call fcn.140004070
mov r9, qword [0x14023d640]
mov r10d, eax
movaps xmm1, xmm12
mov dword [rsp + 0x30], r11d
addss xmm1, dword [0x140113edc]
movaps xmm0, xmm11
mov dword [rsp + 0x28], r10d
mov rcx, qword [r9 + 0x3ea0]
mov edx, ebx
unpcklps xmm0, xmm9
movsd qword [rsp + 0x20], xmm0
unpcklps xmm1, xmm8
mov byte [rcx + 0xb0], 1
mov rcx, qword [r9 + 0x3ea0]
mov rax, qword [rcx + 0x290]
mov r8d, dword [rax + 0x20]
mov byte [rcx + 0xb0], 1
mov rax, qword [r9 + 0x3ea0]
movq r9, xmm1
mov rcx, qword [rax + 0x290]
call fcn.14002cf00
mov rcx, qword [0x14023d640]
movaps xmm0, xmmword [0x140114110]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x7b0]
movss xmm6, dword [r13 + 0x37f0]
mov r10, qword [rax + 0x290]
movups xmmword [rbp + 0x7b0], xmm0
call fcn.140004070
movss dword [rbp + 0xb0], xmm10
movaps xmm7, xmm12
movss dword [rbp + 0xb4], xmm9
addss xmm7, xmm14
mov dword [rsp + 0x28], 0x50
mov r9d, eax
movss dword [rbp + 0xbc], xmm8
lea r8, [rbp + 0xb0]
movss dword [rsp + 0x20], xmm6
lea rdx, [rbp + 0xb8]
mov rcx, r10
movss dword [rbp + 0xb8], xmm7
call fcn.14002bbb0
mov rcx, qword [0x14023d640]
movaps xmm0, xmmword [0x140114210]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x7c0]
movss xmm6, dword [r13 + 0x37f0]
mov r10, qword [rax + 0x290]
movups xmmword [rbp + 0x7c0], xmm0
call fcn.140004070
movss xmm0, dword [0x140113e0c]
lea r8, [rbp + 0xc0]
movss dword [rsp + 0x30], xmm0
lea rdx, [rbp + 0xc8]
mov r9d, eax
movss dword [rsp + 0x20], xmm6
mov rcx, r10
movss dword [rbp + 0xc0], xmm11
movss dword [rbp + 0xc4], xmm9
movss dword [rbp + 0xc8], xmm7
movss dword [rbp + 0xcc], xmm8
call fcn.14002baa0
mov rcx, qword [0x14023d640]
movaps xmm0, xmmword [0x140114210]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x7d0]
mov r10, qword [rax + 0x290]
movups xmmword [rbp + 0x7d0], xmm0
call fcn.140004070
movaps xmm0, xmm12
mov dword [rsp + 0x28], esi
addss xmm0, dword [0x140113ee4]
mov r9d, eax
movss dword [rbp + 0xd4], xmm9
lea r8, [rbp + 0xd0]
movss dword [rbp + 0xd8], xmm10
lea rdx, [rbp + 0xd8]
movss dword [rbp + 0xdc], xmm8
mov rcx, r10
movss dword [rsp + 0x20], xmm14
movss dword [rbp + 0xd0], xmm0
call fcn.14002bbb0
mov rcx, qword [0x14023d640]
movaps xmm0, xmmword [0x140114230]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x7e0]
mov r10, qword [rax + 0x290]
movups xmmword [rbp + 0x7e0], xmm0
call fcn.140004070
movaps xmm0, xmm13
movss dword [rbp + 0xe0], xmm10
addss xmm0, dword [0x140113eb0]
movaps xmm6, xmm12
movss dword [rsp + 0x20], xmm14
addss xmm6, dword [0x140113ea0]
mov r9d, eax
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0xe8]
mov rcx, r10
movss dword [rbp + 0xe4], xmm0
movss dword [rbp + 0xec], xmm0
movss dword [rbp + 0xe8], xmm6
call fcn.14002b940
mov rcx, qword [0x14023d640]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movaps xmm0, xmmword [0x140114200]
lea rcx, [rbp + 0x7f0]
mov r10, qword [rax + 0x290]
movups xmmword [rbp + 0x7f0], xmm0
call fcn.140004070
movaps xmm0, xmm13
movss dword [rbp + 0xf0], xmm11
addss xmm0, dword [0x140113ec0]
mov r9d, eax
movss dword [rbp + 0xf8], xmm10
lea r8, [rbp + 0xf0]
movss dword [rsp + 0x20], xmm14
lea rdx, [rbp + 0xf8]
mov rcx, r10
movss dword [rbp + 0xf4], xmm0
movss dword [rbp + 0xfc], xmm0
call fcn.14002b940
mov rcx, qword [0x14023d640]
movaps xmm0, xmmword [0x140114330]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x800]
mov r10, qword [rax + 0x290]
movups xmmword [rbp + 0x800], xmm0
call fcn.140004070
mov rdx, qword [0x14023d780]
lea r9, [rbp + 0x110]
mov dword [rsp + 0x30], eax
lea r8, [rbp + 0x118]
movaps xmm0, xmm12
mov dword [rbp + 0x100], 0x3f800000
addss xmm0, dword [0x140113f24]
addss xmm12, dword [0x140113f20]
movaps xmm1, xmm13
mov dword [rbp + 0x104], 0x3f800000
addss xmm1, dword [0x140113eb4]
movaps xmm2, xmm13
mov qword [rbp + 0x108], 0
addss xmm2, dword [0x140113e7c]
lea rax, [rbp + 0x100]
movss dword [rbp + 0x110], xmm0
mov qword [rsp + 0x28], rax
mov rcx, r10
lea rax, [rbp + 0x108]
movss dword [rbp + 0x114], xmm1
movss dword [rbp + 0x118], xmm12
movss dword [rbp + 0x11c], xmm2
mov qword [rsp + 0x20], rax
call fcn.14002c680
mov rcx, qword [0x14023d640]
movaps xmm0, xmmword [0x140114330]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x810]
mov rdi, qword [rax + 0x290]
movups xmmword [rbp + 0x810], xmm0
call fcn.140004070
mov rbx, qword [0x14023d660]
addss xmm13, xmm15
movss dword [rbp + 0x120], xmm6
mov esi, eax
movss dword [rbp + 0x124], xmm13
test eax, 0xff000000
je 0x1400562fc
test rbx, rbx
jne 0x140056279
mov rcx, qword [rdi + 0x38]
mov rbx, qword [rcx + 8]
mov rcx, qword [rbx + 0x40]
mov rax, qword [rdi + 0x98]
cmp qword [rcx + 8], rax
je 0x1400562a4
mov r8d, 0x663
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140112ea3]
movss dword [rsp + 0x40], xmm14
lea r9, [rbp + 0x120]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm15
lea rax, [0x140112ea0]
mov rdx, rdi
mov qword [rsp + 0x30], rax
mov rcx, rbx
lea rax, [rbp + 0x820]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
movups xmmword [rbp + 0x820], xmm0
call fcn.140031e70
mov rcx, qword [0x14023d640]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x80]
addss xmm0, dword [0x140113ebc]
movss dword [rax + 0xfc], xmm0
mov byte [rax + 0x139], 1
call fcn.14004e360
call fcn.140016cb0
movaps xmm0, xmmword [0x140114290]
lea rdx, str._t__AIMBOT_OPTIONS
lea rcx, [rbp + 0x830]
movups xmmword [rbp + 0x830], xmm0
call fcn.140034f60
cmp dword [0x14023d67c], 0
lea r9, [rbp + 0x128]
lea rdx, str.Aim_Hacks
mov dword [rbp + 0x128], 0x43480000
sete r8b
mov dword [rbp + 0x12c], 0x41c80000
xor esi, esi
lea rcx, [0x1400d364c]
mov dword [rsp + 0x28], esi
mov byte [rsp + 0x20], 1
call fcn.140036640
test al, al
je 0x1400563b5
mov dword [0x14023d67c], esi
movaps xmm0, xmmword [0x140114290]
lea rdx, str._t__VISUALS
lea rcx, [rbp + 0x840]
movups xmmword [rbp + 0x840], xmm0
call fcn.140034f60
cmp dword [0x14023d67c], 1
lea r9, [rbp + 0x130]
mov dword [rsp + 0x28], esi
lea rdx, str.Visual_options
sete r8b
mov dword [rbp + 0x130], 0x43480000
lea rcx, [0x1400d3644]
mov dword [rbp + 0x134], 0x41c80000
mov byte [rsp + 0x20], 1
call fcn.140036640
test al, al
je 0x140056426
mov dword [0x14023d67c], 1
movaps xmm0, xmmword [0x140114290]
lea rdx, str._t__MISC
lea rcx, [rbp + 0x850]
movups xmmword [rbp + 0x850], xmm0
call fcn.140034f60
cmp dword [0x14023d67c], 2
lea r9, [rbp + 0x138]
mov dword [rsp + 0x28], esi
lea rdx, str.Extra_Functions
sete r8b
mov dword [rbp + 0x138], 0x43480000
lea rcx, [0x1400d3654]
mov dword [rbp + 0x13c], 0x41c80000
mov byte [rsp + 0x20], 1
call fcn.140036640
test al, al
je 0x140056497
mov dword [0x14023d67c], 2
movaps xmm0, xmmword [0x140114290]
lea rdx, str._t__SECURITY
lea rcx, [rbp + 0x860]
movups xmmword [rbp + 0x860], xmm0
call fcn.140034f60
cmp dword [0x14023d67c], 3
lea r9, [rbp + 0x140]
mov dword [rsp + 0x28], esi
lea rdx, str.Account_Guard
sete r8b
mov dword [rbp + 0x140], 0x43480000
lea rcx, [0x1400d3648]
mov dword [rbp + 0x144], 0x41c80000
mov byte [rsp + 0x20], 1
call fcn.140036640
test al, al
je 0x14005650b
mov eax, 3
mov dword [0x14023d67c], eax
jmp 0x140056511
mov eax, dword [0x14023d67c]
cmp eax, 4
mov dword [rsp + 0x28], esi
lea r9, [rbp + 0x148]
mov dword [rbp + 0x148], 0x43480000
sete r8b
mov dword [rbp + 0x14c], 0x41c80000
lea rdx, str.Settings
mov byte [rsp + 0x20], 1
lea rcx, [0x1400d365c]
call fcn.140036640
test al, al
je 0x14005655d
mov dword [0x14023d67c], 4
call fcn.140016e00
mov eax, dword [0x14023d67c]
cmp eax, dword [0x14023d674]
movss xmm7, dword [0x140113df8]
movss xmm8, dword [0x140113f6c]
jne 0x140056586
movaps xmm6, xmm7
jmp 0x14005658a
movaps xmm6, xmm8
mov rbx, qword [0x14023d640]
test rbx, rbx
jne 0x1400565bd
mov r8d, 0xfdc
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x14023d67c]
mov rbx, qword [0x14023d640]
movss xmm0, dword [rbx + 0x18]
movss xmm9, dword [0x140113e34]
mulss xmm0, xmm9
mulss xmm0, xmm6
addss xmm0, dword [0x14023d6d4]
comiss xmm14, xmm0
jbe 0x1400565f2
mov dword [0x14023d6d4], esi
movaps xmm6, xmm14
movaps xmm0, xmm14
jmp 0x14005660c
movaps xmm6, xmm7
minss xmm6, xmm0
ucomiss xmm6, xmm14
movss dword [0x14023d6d4], xmm6
movaps xmm0, xmm6
jp 0x14005662b
jne 0x14005662b
movaps xmm1, xmm6
movaps xmm6, xmm0
movss xmm0, dword [0x14023d6e4]
ucomiss xmm0, xmm14
jp 0x14005662b
jne 0x14005662b
mov dword [0x14023d674], eax
movaps xmm6, xmm1
movss xmm0, dword [rbx + 0x37e0]
lea rcx, [rbx + 0x47f8]
mulss xmm6, dword [r13 + 0x37e0]
lea rdx, [rbp + 0x420]
mov dword [rbp + 0x420], esi
movss dword [rbp + 0x424], xmm0
call fcn.14001f2b0
movss dword [rbx + 0x37e0], xmm6
mov rcx, qword [0x14023d640]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [rax + 0x18]
movss xmm1, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x7c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x140113ef0]
addss xmm1, dword [0x140113eb8]
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
call fcn.140016cb0
cmp dword [0x14023d674], esi
lea rbx, [0x1400d1d5a]
jne 0x14005671a
cmp dword [0x14023d680], esi
lea r9, [rbp + 0x150]
mov dword [rsp + 0x28], esi
lea rdx, str.Aim_Hacks
sete r8b
mov dword [rbp + 0x150], 0x428c0000
mov rcx, rbx
mov dword [rbp + 0x154], 0x41c80000
mov byte [rsp + 0x20], sil
call fcn.140036640
test al, al
je 0x14005671a
mov dword [0x14023d680], esi
cmp dword [0x14023d674], 1
jne 0x14005676a
cmp dword [0x14023d680], esi
lea r9, [rbp + 0x158]
mov dword [rsp + 0x28], esi
lea rdx, str.Players
sete r8b
mov dword [rbp + 0x158], 0x428c0000
mov rcx, rbx
mov dword [rbp + 0x15c], 0x41c80000
mov byte [rsp + 0x20], sil
call fcn.140036640
test al, al
je 0x14005676a
mov dword [0x14023d680], esi
cmp dword [0x14023d674], 2
jne 0x1400567ba
cmp dword [0x14023d680], esi
lea r9, [rbp + 0x160]
mov dword [rsp + 0x28], esi
lea rdx, str.Extra
sete r8b
mov dword [rbp + 0x160], 0x428c0000
mov rcx, rbx
mov dword [rbp + 0x164], 0x41c80000
mov byte [rsp + 0x20], sil
call fcn.140036640
test al, al
je 0x1400567ba
mov dword [0x14023d680], esi
cmp dword [0x14023d674], 3
jne 0x14005680a
cmp dword [0x14023d680], esi
lea r9, [rbp + 0x168]
mov dword [rsp + 0x28], esi
lea rdx, str.Security
sete r8b
mov dword [rbp + 0x168], 0x428c0000
mov rcx, rbx
mov dword [rbp + 0x16c], 0x41c80000
mov byte [rsp + 0x20], sil
call fcn.140036640
test al, al
je 0x14005680a
mov dword [0x14023d680], esi
cmp dword [0x14023d674], 4
jne 0x14005685a
cmp dword [0x14023d680], esi
lea r9, [rbp + 0x170]
mov dword [rsp + 0x28], esi
lea rdx, str.Settings
sete r8b
mov dword [rbp + 0x170], 0x428c0000
mov rcx, rbx
mov dword [rbp + 0x174], 0x41c80000
mov byte [rsp + 0x20], sil
call fcn.140036640
test al, al
je 0x14005685a
mov dword [0x14023d680], esi
call fcn.140016e00
mov eax, dword [0x14023d680]
cmp eax, dword [0x14023d6e0]
jne 0x140056872
movaps xmm6, xmm7
jmp 0x140056876
movaps xmm6, xmm8
mov rbx, qword [0x14023d640]
test rbx, rbx
jne 0x1400568a9
mov r8d, 0xfdc
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x14023d680]
mov rbx, qword [0x14023d640]
movss xmm0, dword [rbx + 0x18]
mulss xmm0, xmm9
mulss xmm0, xmm6
addss xmm0, dword [0x14023d788]
comiss xmm14, xmm0
jbe 0x1400568d5
mov dword [0x14023d788], esi
movaps xmm6, xmm14
movaps xmm0, xmm14
jmp 0x1400568ef
movaps xmm6, xmm7
minss xmm6, xmm0
ucomiss xmm6, xmm14
movss dword [0x14023d788], xmm6
movaps xmm0, xmm6
jp 0x14005690e
jne 0x14005690e
movaps xmm1, xmm6
movaps xmm6, xmm0
movss xmm0, dword [0x14023d6d8]
ucomiss xmm0, xmm14
jp 0x14005690e
jne 0x14005690e
mov dword [0x14023d6e0], eax
movaps xmm6, xmm1
movss xmm0, dword [rbx + 0x37e0]
lea rcx, [rbx + 0x47f8]
mulss xmm6, dword [r13 + 0x37e0]
lea rdx, [rbp + 0x408]
mov dword [rbp + 0x408], esi
movss dword [rbp + 0x40c], xmm0
call fcn.14001f2b0
movss dword [rbx + 0x37e0], xmm6
lea rdx, [rbp + 0x178]
mov rcx, qword [0x14023d640]
mov dword [rbp + 0x178], 0x440d8000
mov dword [rbp + 0x17c], 0x43de8000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, str.General_CHILD
movss xmm0, dword [rax + 0x18]
movss xmm1, dword [rax + 0x1c]
subss xmm0, dword [rax + 0x7c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x140113ef4]
addss xmm1, dword [0x140113ec8]
movss dword [rax + 0xf8], xmm0
movss dword [rax + 0xfc], xmm1
mov byte [rax + 0x139], 1
call fcn.14000bac0
mov eax, dword [0x14023d674]
test eax, eax
jne 0x140056ec0
cmp dword [0x14023d6e0], esi
jne 0x140058cdb
call fcn.140016cb0
lea rdx, [rbp + 0x180]
mov dword [rbp + 0x180], 0x43858000
lea rcx, str.Aim_Options
mov dword [rbp + 0x184], 0x439b0000
call fcn.14000ca40
lea rdx, [0x14023d6de]
lea rcx, str.Aimbot_Partida
call fcn.1400385f0
test al, al
je 0x140056ac1
cmp byte [0x14023d6de], 1
jne 0x140056ac1
mov ecx, 8
call fcn.1400bdff8
lea rcx, [0x140052980]
mov r9, rax
lea r8, [0x14005b270]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x1e8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1e0], rax
test rax, rax
je 0x1400597e7
cmp dword [rbp + 0x1e8], esi
je 0x1400597f9
movaps xmm0, xmmword [rbp + 0x1e0]
lea rcx, [rbp + 0x870]
movdqa xmmword [rbp + 0x870], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400597f9
xorps xmm0, xmm0
movaps xmmword [rbp + 0xaf0], xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
mov rcx, qword [0x14023d640]
mov r9, qword [rcx + 0x3ea0]
cmp byte [rcx + 0x48c3], sil
je 0x140056b0d
cmp byte [rcx + 0x48c2], sil
jne 0x140056b0d
test byte [rcx + 0x4740], 4
jne 0x140056c24
mov eax, dword [rcx + 0x4888]
cmp eax, dword [rcx + 0x473c]
jne 0x140056c24
test eax, eax
je 0x140056c24
jmp 0x140056bdb
mov eax, dword [rcx + 0x4744]
test al, 1
je 0x140056c24
cmp qword [rcx + 0x3ea8], r9
je 0x140056b2c
test al, al
jns 0x140056c24
mov eax, dword [rcx + 0x3f00]
test eax, eax
je 0x140056b51
cmp eax, dword [rcx + 0x473c]
je 0x140056b51
cmp byte [rcx + 0x3f0d], sil
jne 0x140056b51
cmp eax, dword [r9 + 0x74]
jne 0x140056c24
mov rdx, qword [rcx + 0x4880]
test rdx, rdx
je 0x140056bbd
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140056bbd
cmp byte [rdx + 0xaf], sil
je 0x140056bbd
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140056bbd
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140056b90
bt r8d, 0x1a
jae 0x140056bbd
cmp qword [rax + 0x370], rdx
je 0x140056bbd
nop dword [rax]
cmp rax, rdx
je 0x140056bbd
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140056ba0
test dword [rcx + 0x4740], 0x100
je 0x140056c24
test byte [rcx + 0x4740], 4
jne 0x140056c24
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x473c], eax
jne 0x140056bdb
cmp byte [r9 + 0xb0], sil
jne 0x140056c24
xor ecx, ecx
call fcn.140017b50
lea rcx, str.Aplicar_en_Partida
call fcn.140034e60
mov rax, qword [0x14023d640]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x140056c1f
mov r8d, 0x2726
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400120e0
call fcn.14000cb40
call fcn.140016e00
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.140016a50
call fcn.140016cb0
lea rdx, [rbp + 0x188]
mov dword [rbp + 0x188], 0x43858000
lea rcx, str.Sniper_Options
mov dword [rbp + 0x18c], 0x43720000
call fcn.14000ca40
lea rdx, [0x14023d763]
lea rcx, str.Aim_Sniper
call fcn.1400385f0
mov rcx, qword [0x14023d640]
mov byte [0x14023d63b], al
mov r9, qword [rcx + 0x3ea0]
cmp byte [rcx + 0x48c3], sil
je 0x140056cbf
cmp byte [rcx + 0x48c2], sil
jne 0x140056cbf
mov eax, dword [rcx + 0x4888]
cmp eax, dword [rcx + 0x473c]
jne 0x140056d8e
test eax, eax
je 0x140056d8e
jmp 0x140056d82
mov eax, dword [rcx + 0x4744]
test al, 1
je 0x140056d8e
cmp qword [rcx + 0x3ea8], r9
je 0x140056cde
test al, al
jns 0x140056d8e
mov eax, dword [rcx + 0x3f00]
test eax, eax
je 0x140056d03
cmp eax, dword [rcx + 0x473c]
je 0x140056d03
cmp byte [rcx + 0x3f0d], sil
jne 0x140056d03
cmp eax, dword [r9 + 0x74]
jne 0x140056d8e
mov rdx, qword [rcx + 0x4880]
test rdx, rdx
je 0x140056d6d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140056d6d
cmp byte [rdx + 0xaf], sil
je 0x140056d6d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140056d6d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140056d42
bt r8d, 0x1a
jae 0x140056d6d
cmp qword [rax + 0x370], rdx
je 0x140056d6d
nop dword [rax + rax]
cmp rax, rdx
je 0x140056d6d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140056d50
test dword [rcx + 0x4740], 0x100
je 0x140056d8e
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x473c], eax
jne 0x140056d82
cmp byte [r9 + 0xb0], sil
jne 0x140056d8e
lea rcx, str.Aplicar_en_entrenamiento
call fcn.140017cf0
lea rdx, [0x14023d77a]
lea rcx, str.Quick_Switch
call fcn.1400385f0
mov rcx, qword [0x14023d640]
mov byte [0x14023d7d2], al
mov r9, qword [rcx + 0x3ea0]
cmp byte [rcx + 0x48c3], sil
je 0x140056de6
cmp byte [rcx + 0x48c2], sil
jne 0x140056de6
mov eax, dword [rcx + 0x4888]
cmp eax, dword [rcx + 0x473c]
jne 0x140056eb0
test eax, eax
je 0x140056eb0
jmp 0x140056ea4
mov eax, dword [rcx + 0x4744]
test al, 1
je 0x140056eb0
cmp qword [rcx + 0x3ea8], r9
je 0x140056e05
test al, al
jns 0x140056eb0
mov eax, dword [rcx + 0x3f00]
test eax, eax
je 0x140056e2a
cmp eax, dword [rcx + 0x473c]
je 0x140056e2a
cmp byte [rcx + 0x3f0d], sil
jne 0x140056e2a
cmp eax, dword [r9 + 0x74]
jne 0x140056eb0
mov rdx, qword [rcx + 0x4880]
test rdx, rdx
je 0x140056e8f
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140056e8f
cmp byte [rdx + 0xaf], sil
je 0x140056e8f
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140056e8f
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140056e69
bt r8d, 0x1a
jae 0x140056e8f
cmp qword [rax + 0x370], rdx
je 0x140056e8f
cmp rax, rdx
je 0x140056e8f
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140056e72
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x473c], eax
jne 0x140056ea4
cmp byte [r9 + 0xb0], sil
jne 0x140056eb0
lea rcx, str.Aplicar_en_entrenamiento
call fcn.140017cf0
call fcn.14000cb40
call fcn.140016e00
mov eax, dword [0x14023d674]
cmp eax, 1
jne 0x1400578b4
cmp dword [0x14023d6e0], esi
jne 0x140058cdb
call fcn.140016cb0
lea rdx, [rbp + 0x190]
mov dword [rbp + 0x190], 0x43858000
lea rcx, str.Player_Options
mov dword [rbp + 0x194], 0x43960000
call fcn.14000ca40
call fcn.14000cb40
call fcn.140016e00
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.140016a50
call fcn.140016cb0
lea rdx, [rbp + 0x198]
mov dword [rbp + 0x198], 0x43858000
lea rcx, str.Menu_CHAMS
mov dword [rbp + 0x19c], 0x43960000
call fcn.14000ca40
lea rdx, [0x14023d672]
lea rcx, str.CHAMS_3D
call fcn.1400385f0
test al, al
je 0x14005703d
cmp byte [0x14023d672], 1
jne 0x14005703d
call fcn.140053440
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov rcx, rax
mov rdi, rax
lea r8d, [rdx + 0x1a]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r9d, reloc.WLDAP32.dll_Ordinal_26
mov qword [rsp + 0x20], rsi
mov rdx, rax
lea r8, str.C:WindowsTempCHAMS.dll
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140112a88]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov r9, rax
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r9d, 0x8000
mov r8d, reloc.WLDAP32.dll_Ordinal_26
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.CHAMS_3D_Activada
lea rcx, [0x14023c818]
call fcn.140041b30
mov rcx, qword [0x14023d640]
mov r9, qword [rcx + 0x3ea0]
cmp byte [rcx + 0x48c3], sil
je 0x140057089
cmp byte [rcx + 0x48c2], sil
jne 0x140057089
test byte [rcx + 0x4740], 4
jne 0x140057199
mov eax, dword [rcx + 0x4888]
cmp eax, dword [rcx + 0x473c]
jne 0x140057199
test eax, eax
je 0x140057199
jmp 0x140057150
mov eax, dword [rcx + 0x4744]
test al, 1
je 0x140057199
cmp qword [rcx + 0x3ea8], r9
je 0x1400570a8
test al, al
jns 0x140057199
mov eax, dword [rcx + 0x3f00]
test eax, eax
je 0x1400570cd
cmp eax, dword [rcx + 0x473c]
je 0x1400570cd
cmp byte [rcx + 0x3f0d], sil
jne 0x1400570cd
cmp eax, dword [r9 + 0x74]
jne 0x140057199
mov rdx, qword [rcx + 0x4880]
test rdx, rdx
je 0x140057132
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140057132
cmp byte [rdx + 0xaf], sil
je 0x140057132
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140057132
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005710c
bt r8d, 0x1a
jae 0x140057132
cmp qword [rax + 0x370], rdx
je 0x140057132
cmp rax, rdx
je 0x140057132
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140057115
test dword [rcx + 0x4740], 0x100
je 0x140057199
test byte [rcx + 0x4740], 4
jne 0x140057199
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x473c], eax
jne 0x140057150
cmp byte [r9 + 0xb0], sil
jne 0x140057199
xor ecx, ecx
call fcn.140017b50
lea rcx, str.Aplicar_en_Partida
call fcn.140034e60
mov rax, qword [0x14023d640]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x140057194
mov r8d, 0x2726
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400120e0
lea rdx, [0x14023d78c]
lea rcx, str.CHAMS_BOX_RGB
call fcn.1400385f0
test al, al
je 0x140057292
cmp byte [0x14023d78c], 1
jne 0x140057292
call fcn.140053440
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov rcx, rax
mov rdi, rax
lea r8d, [rdx + 0x1b]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r9d, reloc.WLDAP32.dll_Ordinal_27
mov qword [rsp + 0x20], rsi
mov rdx, rax
lea r8, str.C:WindowsTemp_boxrgb.dll
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140112a88]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov r9, rax
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r9d, 0x8000
mov r8d, reloc.WLDAP32.dll_Ordinal_27
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.CHAMS_BOX_RGB_Activadas
lea rcx, [0x14023c818]
call fcn.140041b30
mov rcx, qword [0x14023d640]
mov r9, qword [rcx + 0x3ea0]
cmp byte [rcx + 0x48c3], sil
je 0x1400572de
cmp byte [rcx + 0x48c2], sil
jne 0x1400572de
test byte [rcx + 0x4740], 4
jne 0x1400573f4
mov eax, dword [rcx + 0x4888]
cmp eax, dword [rcx + 0x473c]
jne 0x1400573f4
test eax, eax
je 0x1400573f4
jmp 0x1400573ab
mov eax, dword [rcx + 0x4744]
test al, 1
je 0x1400573f4
cmp qword [rcx + 0x3ea8], r9
je 0x1400572fd
test al, al
jns 0x1400573f4
mov eax, dword [rcx + 0x3f00]
test eax, eax
je 0x140057322
cmp eax, dword [rcx + 0x473c]
je 0x140057322
cmp byte [rcx + 0x3f0d], sil
jne 0x140057322
cmp eax, dword [r9 + 0x74]
jne 0x1400573f4
mov rdx, qword [rcx + 0x4880]
test rdx, rdx
je 0x14005738d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005738d
cmp byte [rdx + 0xaf], sil
je 0x14005738d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005738d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140057361
bt r8d, 0x1a
jae 0x14005738d
cmp qword [rax + 0x370], rdx
je 0x14005738d
nop word [rax + rax]
cmp rax, rdx
je 0x14005738d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140057370
test byte [rcx + 0x4740], 4
jne 0x1400573f4
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x473c], eax
jne 0x1400573ab
cmp byte [r9 + 0xb0], sil
jne 0x1400573f4
xor ecx, ecx
call fcn.140017b50
lea rcx, str.Aplicar_en_Partida
call fcn.140034e60
mov rax, qword [0x14023d640]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x1400573ef
mov r8d, 0x2726
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400120e0
lea rdx, [0x14023d63d]
lea rcx, str.CHAMS_BLANCAS
call fcn.1400385f0
test al, al
je 0x1400574ed
cmp byte [0x14023d63d], 1
jne 0x1400574ed
call fcn.140053440
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov rcx, rax
mov rdi, rax
lea r8d, [rdx + 0x1d]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r9d, Ordinal_32
mov qword [rsp + 0x20], rsi
mov rdx, rax
lea r8, str.C:WindowsTemp_blanca_1.dll
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140112a88]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov r9, rax
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r9d, 0x8000
mov r8d, Ordinal_32
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.CHAMS_BLANCAS_Activadas
lea rcx, [0x14023c818]
call fcn.140041b30
mov rcx, qword [0x14023d640]
mov r9, qword [rcx + 0x3ea0]
cmp byte [rcx + 0x48c3], sil
je 0x140057539
cmp byte [rcx + 0x48c2], sil
jne 0x140057539
test byte [rcx + 0x4740], 4
jne 0x140057649
mov eax, dword [rcx + 0x4888]
cmp eax, dword [rcx + 0x473c]
jne 0x140057649
test eax, eax
je 0x140057649
jmp 0x140057600
mov eax, dword [rcx + 0x4744]
test al, 1
je 0x140057649
cmp qword [rcx + 0x3ea8], r9
je 0x140057558
test al, al
jns 0x140057649
mov eax, dword [rcx + 0x3f00]
test eax, eax
je 0x14005757d
cmp eax, dword [rcx + 0x473c]
je 0x14005757d
cmp byte [rcx + 0x3f0d], sil
jne 0x14005757d
cmp eax, dword [r9 + 0x74]
jne 0x140057649
mov rdx, qword [rcx + 0x4880]
test rdx, rdx
je 0x1400575e2
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x1400575e2
cmp byte [rdx + 0xaf], sil
je 0x1400575e2
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x1400575e2
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400575bc
test byte [rcx + 0x4740], 4
jne 0x140057649
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x473c], eax
jne 0x140057600
cmp byte [r9 + 0xb0], sil
jne 0x140057649
xor ecx, ecx
call fcn.140017b50
lea rcx, str.Aplicar_en_Partida
call fcn.140034e60
mov rax, qword [0x14023d640]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x140057644
mov r8d, 0x2726
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400120e0
lea rdx, [0x14023d63c]
lea rcx, str.CHAMS_REDS
call fcn.1400385f0
test al, al
je 0x140057742
cmp byte [0x14023d63c], 1
jne 0x140057742
call fcn.140053440
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
xor edx, edx
mov dword [rsp + 0x20], 4
mov r9d, 0x1000
mov rcx, rax
mov rdi, rax
lea r8d, [rdx + 0x1d]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r9d, Ordinal_32
mov qword [rsp + 0x20], rsi
mov rdx, rax
lea r8, str.C:WindowsTempchamsred.dll
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x140112a88]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x30], rsi
xor r8d, r8d
mov r9, rax
mov dword [rsp + 0x28], esi
xor edx, edx
mov qword [rsp + 0x20], rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov rcx, rax
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r9d, 0x8000
mov r8d, Ordinal_32
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.CHAMS_REDS_Activadas
lea rcx, [0x14023c818]
call fcn.140041b30
mov rcx, qword [0x14023d640]
mov r9, qword [rcx + 0x3ea0]
cmp byte [rcx + 0x48c3], sil
je 0x14005778e
cmp byte [rcx + 0x48c2], sil
jne 0x14005778e
test byte [rcx + 0x4740], 4
jne 0x1400578a4
mov eax, dword [rcx + 0x4888]
cmp eax, dword [rcx + 0x473c]
jne 0x1400578a4
test eax, eax
je 0x1400578a4
jmp 0x14005785b
mov eax, dword [rcx + 0x4744]
test al, 1
je 0x1400578a4
cmp qword [rcx + 0x3ea8], r9
je 0x1400577ad
test al, al
jns 0x1400578a4
mov eax, dword [rcx + 0x3f00]
test eax, eax
je 0x1400577d2
cmp eax, dword [rcx + 0x473c]
je 0x1400577d2
cmp byte [rcx + 0x3f0d], sil
jne 0x1400577d2
mov rdx, qword [rcx + 0x4880]
test rdx, rdx
je 0x14005783d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005783d
test byte [rcx + 0x4740], 4
jne 0x1400578a4
call fcn.14000cb40
call fcn.140016e00
mov eax, dword [0x14023d674]
cmp eax, 2
jne 0x140058385
cmp dword [0x14023d6e0], esi
jne 0x140058cdb
call fcn.140016cb0
lea rdx, [rbp + 0x1a0]
mov dword [rbp + 0x1a0], 0x43858000
lea rcx, str.TECLAS_MENU
mov dword [rbp + 0x1a4], 0x43910000
call fcn.14000ca40
lea rax, [0x1400d3ab4]
mov qword [rbp + 0x640], rax
lea rbx, [0x1400d3654]
lea rax, [0x1400d3620]
mov qword [rbp + 0x688], rbx
mov qword [rbp + 0x648], rax
lea r9, [rbp + 0x640]
lea rax, [0x1400d3624]
mov qword [rbp + 0x650], rax
lea rdx, [0x14026315c]
lea rax, [0x1400d3628]
mov qword [rbp + 0x658], rax
lea rcx, str.TECLA_FANTASMA
lea rax, [0x1400d36ac]
mov qword [rbp + 0x660], rax
lea rax, [0x1400d36b0]
mov qword [rbp + 0x668], rax
lea rax, [0x1400d36b4]
mov qword [rbp + 0x670], rax
lea rax, [0x1400d36b8]
mov qword [rbp + 0x678], rax
lea rax, [0x1400d3684]
mov qword [rbp + 0x680], rax
call fcn.140039f70
cmp byte [0x14023d77e], sil
je 0x140057a85
cmp byte [0x14023d6f8], sil
jne 0x140057baa
mov rax, qword [0x14025e978]
mov edi, esi
mov rdx, qword [0x14025e970]
sub rax, rdx
mov byte [0x14023d6f8], 1
sar rax, 3
mov byte [0x14023d6f7], 1
mov dword [rsp + 0x78], esi
test rax, rax
je 0x140057a62
mov rbx, rsi
nop word [rax + rax]
mov rax, qword [0x14023d7d8]
mov rsi, qword [rbx + rdx]
test rax, rax
jne 0x140057a16
lea ecx, [rax + 0x10]
call fcn.1400bdff8
mov dword [rax + 8], 0
mov qword [0x14023d7d8], rax
mov rcx, qword [rax]
lea r8, [rsp + 0x78]
mov r9d, 4
mov qword [rsp + 0x20], 0
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x14025e978]
inc edi
mov rdx, qword [0x14025e970]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x1400579f0
xor esi, esi
lea rbx, [0x1400d3654]
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.FANTASMA_APLICADO
lea rcx, [0x14023c7a8]
call fcn.140041b30
mov ecx, 0x320
jmp 0x140057b9f
cmp byte [0x14023d6f7], sil
mov byte [0x14023d6f8], sil
je 0x140057baa
mov rax, qword [0x14025e978]
mov edi, esi
mov rdx, qword [0x14025e970]
sub rax, rdx
mov byte [0x14023d6f7], sil
sar rax, 3
mov dword [rbp - 0x60], 0x447a0000
mov dword [rbp - 0x5c], 0x4e5a3d8
mov dword [rbp - 0x58], 0xe92d4ff0
mov dword [rbp - 0x54], 0xe28db01c
mov dword [rbp - 0x50], 0xe24dd084
mov dword [rbp - 0x4c], 0xe1a05000
mov dword [rbp - 0x48], 0xe59f0270
mov dword [rbp - 0x44], 0xe1a06002
mov dword [rbp - 0x40], 0xe1a07001
mov dword [rbp - 0x3c], 0xe08f0000
test rax, rax
je 0x140057b81
mov rbx, rsi
nop word [rax + rax]
mov rax, qword [0x14023d7d8]
mov rsi, qword [rbx + rdx]
test rax, rax
jne 0x140057b36
lea ecx, [rax + 0x10]
call fcn.1400bdff8
mov dword [rax + 8], 0
mov qword [0x14023d7d8], rax
mov rcx, qword [rax]
lea r8, [rbp - 0x60]
mov r9d, Ordinal_41
mov qword [rsp + 0x20], 0
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x14025e978]
inc edi
mov rdx, qword [0x14025e970]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x140057b10
xor esi, esi
lea rbx, [0x1400d3654]
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.FANTASMA_KITADO
lea rcx, [0x14023c7a8]
call fcn.140041b30
mov ecx, 0x190
mov edx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
lea rax, [0x1400d3ab4]
mov qword [rbp + 0x6d8], rbx
mov qword [rbp + 0x690], rax
lea r9, [rbp + 0x690]
lea rax, [0x1400d3620]
mov qword [rbp + 0x698], rax
lea rdx, [0x14025f018]
lea rax, [0x1400d3624]
mov qword [rbp + 0x6a0], rax
lea rcx, str.TECLA_WALLHACK
lea rax, [0x1400d3628]
mov qword [rbp + 0x6a8], rax
lea rax, [0x1400d36ac]
mov qword [rbp + 0x6b0], rax
lea rax, [0x1400d36b0]
mov qword [rbp + 0x6b8], rax
lea rax, [0x1400d36b4]
mov qword [rbp + 0x6c0], rax
lea rax, [0x1400d36b8]
mov qword [rbp + 0x6c8], rax
lea rax, [0x1400d3684]
mov qword [rbp + 0x6d0], rax
call fcn.140039f70
cmp byte [0x14023d77f], 0
je 0x140057d3b
cmp byte [0x14023d6f9], 0
jne 0x140057e3a
mov rax, qword [0x14025e9a8]
mov edi, esi
mov rdx, qword [0x14025e9a0]
sub rax, rdx
mov byte [0x14023d6f9], 1
sar rax, 3
mov byte [0x14023d6f5], 1
mov dword [rbp - 0x80], 0xea000000
mov dword [rbp - 0x7c], 0xbf800000
mov dword [rbp - 0x78], 0xee408a85
mov dword [rbp - 0x74], 0xee409a87
test rax, rax
je 0x140057d21
mov rbx, rsi
nop dword [rax]
mov rax, qword [0x14023d7d8]
mov rsi, qword [rbx + rdx]
test rax, rax
jne 0x140057cd6
lea ecx, [rax + 0x10]
call fcn.1400bdff8
mov dword [rax + 8], 0
mov qword [0x14023d7d8], rax
mov rcx, qword [rax]
lea r8, [rbp - 0x80]
mov r9d, reloc.WS2_32.dll_recv
mov qword [rsp + 0x20], 0
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x14025e9a8]
inc edi
mov rdx, qword [0x14025e9a0]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x140057cb0
xor esi, esi
lea rbx, [0x1400d3654]
mov edx, 0x2bc
lea ecx, [rdx + 0x64]
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.WALLHACK_APLICADO
jmp 0x140057e28
cmp byte [0x14023d6f5], 0
mov byte [0x14023d6f9], 0
je 0x140057e3a
mov rax, qword [0x14025e9a8]
mov edi, esi
mov rdx, qword [0x14025e9a0]
sub rax, rdx
mov byte [0x14023d6f5], 0
sar rax, 3
mov dword [rbp - 0x70], 0xea000000
mov dword [rbp - 0x6c], 0x358637bd
mov dword [rbp - 0x68], 0xee238a85
mov dword [rbp - 0x64], 0xee229a87
test rax, rax
je 0x140057e11
mov rbx, rsi
nop word [rax + rax]
mov rax, qword [0x14023d7d8]
mov rsi, qword [rbx + rdx]
test rax, rax
jne 0x140057dc6
lea ecx, [rax + 0x10]
call fcn.1400bdff8
mov dword [rax + 8], 0
mov qword [0x14023d7d8], rax
mov rcx, qword [rax]
lea r8, [rbp - 0x70]
mov r9d, reloc.WS2_32.dll_recv
mov qword [rsp + 0x20], 0
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x14025e9a8]
inc edi
mov rdx, qword [0x14025e9a0]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x140057da0
xor esi, esi
lea rbx, [0x1400d3654]
mov edx, 0x2bc
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
lea rdx, str.WALLHACK_REMOVIDO
mov r8d, reloc.WS2_32.dll_recvfrom
lea rcx, [0x14023c7a8]
call fcn.140041b30
lea rax, [0x1400d3ab4]
mov qword [rbp + 0x728], rbx
mov qword [rbp + 0x6e0], rax
lea r9, [rbp + 0x6e0]
lea rax, [0x1400d3620]
mov qword [rbp + 0x6e8], rax
lea rdx, [0x140263158]
lea rax, [0x1400d3624]
mov qword [rbp + 0x6f0], rax
lea rcx, str.TECLA_TELEPORT
lea rax, [0x1400d3628]
mov qword [rbp + 0x6f8], rax
lea rax, [0x1400d36ac]
mov qword [rbp + 0x700], rax
lea rax, [0x1400d36b0]
mov qword [rbp + 0x708], rax
lea rax, [0x1400d36b4]
mov qword [rbp + 0x710], rax
lea rax, [0x1400d36b8]
mov qword [rbp + 0x718], rax
lea rax, [0x1400d3684]
mov qword [rbp + 0x720], rax
call fcn.140039f70
cmp byte [0x14023d77d], 0
je 0x140057fbe
cmp byte [0x14023d6f6], 0
jne 0x1400580d3
mov rax, qword [0x14025e908]
mov edi, esi
mov rdx, qword [0x14025e900]
sub rax, rdx
mov byte [0x14023d6f6], 1
sar rax, 3
mov byte [0x14023d6f4], 1
mov dword [rsp + 0x7c], 0xc47a0000
test rax, rax
je 0x140057f9b
mov rbx, rsi
nop dword [rax + rax]
mov rax, qword [0x14023d7d8]
mov rsi, qword [rbx + rdx]
test rax, rax
jne 0x140057f56
lea ecx, [rax + 0x10]
call fcn.1400bdff8
mov dword [rax + 8], 0
mov qword [0x14023d7d8], rax
mov rcx, qword [rax]
lea r8, [rsp + 0x7c]
mov r9d, 4
mov qword [rsp + 0x20], 0
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x14025e908]
inc edi
mov rdx, qword [0x14025e900]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x140057f30
xor esi, esi
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.TELEPORT_APLICADO
lea rcx, [0x14023c7a8]
call fcn.140041b30
mov ecx, 0x320
jmp 0x1400580c8
cmp byte [0x14023d6f4], 0
mov byte [0x14023d6f6], 0
je 0x1400580d3
mov rax, qword [0x14025e908]
mov edi, esi
mov rdx, qword [0x14025e900]
sub rax, rdx
mov byte [0x14023d6f4], 0
sar rax, 3
mov dword [rbp - 0x38], 0x447a0000
mov dword [rbp - 0x34], 0x4e5a3d8
mov dword [rbp - 0x30], 0xe92d4ff0
mov dword [rbp - 0x2c], 0xe28db01c
mov dword [rbp - 0x28], 0xe24dd084
mov dword [rbp - 0x24], 0xe1a05000
mov dword [rbp - 0x20], 0xe59f0270
mov dword [rbp - 0x1c], 0xe1a06002
mov dword [rbp - 0x18], 0xe1a07001
mov dword [rbp - 0x14], 0xe08f0000
test rax, rax
je 0x1400580aa
mov rbx, rsi
nop
mov rax, qword [0x14023d7d8]
mov rsi, qword [rbx + rdx]
test rax, rax
jne 0x140058066
lea ecx, [rax + 0x10]
call fcn.1400bdff8
mov dword [rax + 8], 0
mov qword [0x14023d7d8], rax
mov rcx, qword [rax]
lea r8, [rbp - 0x38]
mov r9d, Ordinal_41
mov qword [rsp + 0x20], 0
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x14025e908]
inc edi
mov rdx, qword [0x14025e900]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x140058040
xor esi, esi
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.TELEPORT_REMOVIDO
lea rcx, [0x14023c7a8]
call fcn.140041b30
mov ecx, 0x190
mov edx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 0x200
call fcn.140007b10
test al, al
je 0x1400580ed
lea rcx, str.Applies_in_Game
call fcn.140017cf0
mov ecx, 0x200
call fcn.140007b10
test al, al
je 0x140058107
lea rcx, str.Applies_in_Game
call fcn.140017cf0
mov ecx, 0x200
call fcn.140007b10
test al, al
je 0x140058121
lea rcx, str.Applies_in_Game
call fcn.140017cf0
call fcn.14000cb40
call fcn.140016e00
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.140016a50
call fcn.140016cb0
lea rdx, [rbp + 0x1a8]
mov dword [rbp + 0x1a8], 0x43858000
lea rcx, str.Magic_Options
mov dword [rbp + 0x1ac], 0x43910000
call fcn.14000ca40
lea rdx, [0x14023d670]
lea rcx, str.Magic_Bullets_V1_____RIESGO__
call fcn.1400385f0
test al, al
je 0x140058217
cmp byte [0x14023d670], 1
jne 0x140058217
mov ecx, 8
call fcn.1400bdff8
lea rcx, [0x1400529d0]
mov r9, rax
lea r8, [0x14005b270]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x1f8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], esi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x1f0], rax
test rax, rax
je 0x140059805
cmp dword [rbp + 0x1f8], 0
je 0x1400597f9
movaps xmm0, xmmword [rbp + 0x1f0]
lea rcx, [rbp + 0x880]
movdqa xmmword [rbp + 0x880], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400597f9
xorps xmm0, xmm0
movaps xmmword [rbp + 0xb00], xmm0
movdqa xmmword [rbp + 0x1f0], xmm0
mov rcx, qword [0x14023d640]
cmp byte [rcx + 0x48c3], 0
mov r9, qword [rcx + 0x3ea0]
je 0x140058263
cmp byte [rcx + 0x48c2], 0
jne 0x140058263
test byte [rcx + 0x4740], 4
jne 0x140058375
mov eax, dword [rcx + 0x4888]
cmp eax, dword [rcx + 0x473c]
jne 0x140058375
test eax, eax
je 0x140058375
mov eax, dword [rcx + 0x4744]
test al, 1
je 0x140058375
cmp qword [rcx + 0x3ea8], r9
je 0x140058282
test al, al
jns 0x140058375
mov eax, dword [rcx + 0x3f00]
test eax, eax
je 0x1400582a7
cmp eax, dword [rcx + 0x473c]
je 0x1400582a7
mov rdx, qword [rcx + 0x4880]
test rdx, rdx
je 0x14005830d
call fcn.14000cb40
call fcn.140016e00
mov eax, dword [0x14023d674]
cmp eax, 3
jne 0x1400585e0
cmp dword [0x14023d6e0], 0
jne 0x140058cdb
call fcn.140016cb0
lea rdx, [rbp + 0x1b0]
mov dword [rbp + 0x1b0], 0x43858000
lea rcx, str.Security_Options
mov dword [rbp + 0x1b4], 0x43700000
call fcn.14000ca40
lea rdx, [0x14023d76e]
lea rcx, str.Bypass_Emulator_____NO_USAR__
call fcn.1400385f0
mov ecx, 0x200
mov byte [0x14023d6d3], al
call fcn.140007b10
test al, al
je 0x1400583fa
lea rcx, str.Applies_in_Login
call fcn.140017cf0
call fcn.14000cb40
call fcn.140016e00
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.140016a50
call fcn.140016cb0
lea rdx, [rbp + 0x1b8]
mov dword [rbp + 0x1b8], 0x43858000
lea rcx, str.Tools_Options
mov dword [rbp + 0x1bc], 0x43480000
call fcn.14000ca40
lea rdx, [0x14023d715]
lea rcx, str.Block_Internet
call fcn.1400385f0
mov byte [0x14023d673], al
test al, al
je 0x14005859e
xor edx, edx
cmp byte [0x14023d715], dl
je 0x14005852d
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Desactivado_Internet_
jmp 0x140058592
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Activado_Internet_
lea rcx, [0x14023c818]
call fcn.140041b30
lea rdx, [0x14023d772]
lea rcx, str.Pause___Resume
call fcn.1400385f0
lea rdx, [0x14023d769]
mov byte [0x14023d6fa], al
lea rcx, str.Stream_Mode
call fcn.1400385f0
mov byte [0x14023d67b], al
call fcn.14000cb40
call fcn.140016e00
mov eax, dword [0x14023d674]
cmp eax, 4
jne 0x140058cdb
cmp dword [0x14023d6e0], 0
jne 0x140058cdb
call fcn.140016cb0
lea rdx, [rbp + 0x1c0]
mov dword [rbp + 0x1c0], 0x44098000
lea rcx, str.Login_Information
mov dword [rbp + 0x1c4], 0x437a0000
call fcn.14000ca40
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea r10, [rbp + 0x9d5]
dec r10
mov eax, 0xcccccccd
mul r14d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r14b, cl
add r14b, 0x30
mov byte [r10], r14b
mov r14d, edx
test edx, edx
jne 0x140058631
lea r9, [rbp - 0xf]
mov rdx, r10
lea r8, [rbp + 0x9d5]
lea rcx, [rbp + 0x200]
call fcn.1400422c0
cmp qword [rbp + 0x218], 0xf
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x540]
cmova rdx, qword [rbp + 0x200]
call fcn.1400419f0
mov rdx, qword [rbp + 0x218]
cmp rdx, 0xf
jbe 0x1400586d9
mov rcx, qword [rbp + 0x200]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400586d4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059817
call fcn.1400be344
mov byte [rbp + 0x200], 0
lea r10, [rbp + 0x9ed]
mov qword [rbp + 0x218], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x210], rsi
nop dword [rax]
dec r10
mov eax, 0xcccccccd
mul r15d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r15b, cl
add r15b, 0x30
mov byte [r10], r15b
mov r15d, edx
test edx, edx
jne 0x140058700
lea r9, [rbp - 0xe]
mov rdx, r10
lea r8, [rbp + 0x9ed]
lea rcx, [rbp + 0x220]
call fcn.1400422c0
cmp qword [rbp + 0x238], 0xf
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x520]
cmova rdx, qword [rbp + 0x220]
call fcn.1400419f0
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x1400587a8
mov rcx, qword [rbp + 0x220]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400587a3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059817
call fcn.1400be344
mov byte [rbp + 0x220], 0
lea r10, [rbp + 0xa05]
mov qword [rbp + 0x238], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x230], rsi
nop dword [rax + rax]
dec r10
mov eax, 0xcccccccd
mul r12d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r12b, cl
add r12b, 0x30
mov byte [r10], r12b
mov r12d, edx
test edx, edx
jne 0x1400587d0
lea r9, [rbp - 0xd]
mov rdx, r10
lea r8, [rbp + 0xa05]
lea rcx, [rbp + 0x360]
call fcn.1400422c0
cmp qword [rbp + 0x378], 0xf
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x500]
cmova rdx, qword [rbp + 0x360]
call fcn.1400419f0
mov rdx, qword [rbp + 0x378]
cmp rdx, 0xf
jbe 0x140058878
mov rcx, qword [rbp + 0x360]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058873
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059817
call fcn.1400be344
mov rcx, qword [0x14025eb70]
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov qword [rbp + 0x370], rsi
sub rax, rcx
mov qword [rbp + 0x378], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x360], 0
cmp rax, 0xa
jb 0x140059849
cmp qword [0x14025eb78], 0xf
lea rax, [0x14025eb60]
mov qword [rsp + 0x30], rcx
lea r9, str.Username:
cmova rax, qword [0x14025eb60]
lea rcx, [rbp + 0x2e0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xa
call fcn.140042070
mov rcx, qword [0x14025ebf0]
mov rax, rbx
sub rax, rcx
cmp rax, 6
jb 0x140059849
cmp qword [0x14025ebf8], 0xf
lea rax, [0x14025ebe0]
mov qword [rsp + 0x30], rcx
lea r9, str.Days:
cmova rax, qword [0x14025ebe0]
lea rcx, [rbp + 0x300]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 6
call fcn.140042070
mov rcx, qword [0x14025eb90]
mov rax, rbx
sub rax, rcx
cmp rax, 4
jb 0x140059849
cmp qword [0x14025eb98], 0xf
lea rax, [0x14025eb80]
mov qword [rsp + 0x30], rcx
lea r9, str.Ip:
cmova rax, qword [0x14025eb80]
lea rcx, [rbp + 0x320]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 4
call fcn.140042070
mov rcx, qword [0x14025ebb0]
mov rax, rbx
sub rax, rcx
cmp rax, 6
jb 0x140059849
cmp qword [0x14025ebb8], 0xf
lea rax, [0x14025eba0]
mov qword [rsp + 0x30], rcx
lea r9, str.HWID:
cmova rax, qword [0x14025eba0]
lea rcx, [rbp + 0x340]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 6
call fcn.140042070
cmp qword [rbp + 0x2f8], 0xf
lea rcx, [rbp + 0x2e0]
cmova rcx, qword [rbp + 0x2e0]
call fcn.140034e60
cmp qword [rbp + 0x318], 0xf
lea rcx, [rbp + 0x300]
cmova rcx, qword [rbp + 0x300]
call fcn.140034e60
cmp qword [rbp + 0x338], 0xf
lea rcx, [rbp + 0x320]
cmova rcx, qword [rbp + 0x320]
call fcn.140034e60
cmp qword [rbp + 0x358], 0xf
lea rcx, [rbp + 0x340]
cmova rcx, qword [rbp + 0x340]
call fcn.140034e60
mov rdx, qword [rbp + 0x358]
cmp rdx, 0xf
jbe 0x140058a9c
mov rcx, qword [rbp + 0x340]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058a97
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140059817
call fcn.1400be344
mov rdx, qword [rbp + 0x338]
mov qword [rbp + 0x350], rsi
mov qword [rbp + 0x358], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x340], 0
cmp rdx, 0xf
jbe 0x140058af6
mov rcx, qword [rbp + 0x320]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058af1
mov rdx, qword [rbp + 0x318]
mov qword [rbp + 0x330], rsi
mov qword [rbp + 0x338], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x320], 0
cmp rdx, 0xf
jbe 0x140058b50
call fcn.14000bc00
mov ecx, 2
call fcn.1400046a0
mov rcx, qword [0x14023d640]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
addss xmm1, dword [0x140113efc]
addss xmm0, dword [0x140113e80]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov byte [rax + 0x139], 1
call fcn.140016cb0
mov rbx, qword [0x14023d640]
lea rdx, [rbp + 0x42c]
movss xmm6, dword [0x14023d6d4]
mulss xmm6, dword [r13 + 0x37e0]
mov dword [rbp + 0x42c], esi
movss xmm0, dword [rbx + 0x37e0]
lea rcx, [rbx + 0x47f8]
movss dword [rbp + 0x430], xmm0
call fcn.14001f2b0
movss dword [rbx + 0x37e0], xmm6
mov eax, dword [0x14023d674]
test eax, eax
jne 0x140058dca
movups xmm0, xmmword [0x1402736d8]
lea r8, str.Aims___
lea rdx, [0x1400d3644]
lea rcx, [rbp + 0x890]
movups xmmword [rbp + 0x890], xmm0
call fcn.140034f90
mov eax, dword [0x14023d674]
cmp eax, 1
jne 0x140058dfd
movups xmm0, xmmword [0x1402736d8]
lea r8, str.Visuals__
lea rdx, [0x1400d3658]
lea rcx, [rbp + 0x8a0]
movups xmmword [rbp + 0x8a0], xmm0
call fcn.140034f90
mov eax, dword [0x14023d674]
cmp eax, 2
jne 0x140058e30
movups xmm0, xmmword [0x1402736d8]
lea r8, str.Misc___
lea rdx, [0x1400d3654]
lea rcx, [rbp + 0x8b0]
movups xmmword [rbp + 0x8b0], xmm0
call fcn.140034f90
mov eax, dword [0x14023d674]
cmp eax, 3
jne 0x140058e63
movups xmm0, xmmword [0x1402736d8]
lea r8, str.Security___
lea rdx, [0x1400d3664]
lea rcx, [rbp + 0x8c0]
movups xmmword [rbp + 0x8c0], xmm0
call fcn.140034f90
mov eax, dword [0x14023d674]
cmp eax, 4
jne 0x140058e90
movups xmm0, xmmword [0x1402736d8]
lea r8, str.Settings___
lea rdx, [0x1400d365c]
lea rcx, [rbp + 0x8d0]
movups xmmword [rbp + 0x8d0], xmm0
call fcn.140034f90
mov rbx, qword [0x14023d640]
lea rdx, [rbp + 0x3b8]
movss xmm6, dword [0x14023d788]
mulss xmm6, dword [r13 + 0x37e0]
mov dword [rbp + 0x3b8], esi
movss xmm0, dword [rbx + 0x37e0]
lea rcx, [rbx + 0x47f8]
movss dword [rbp + 0x3bc], xmm0
call fcn.14001f2b0
movss dword [rbx + 0x37e0], xmm6
mov eax, dword [0x14023d674]
test eax, eax
jne 0x140058f16
cmp dword [0x14023d6e0], eax
jne 0x140058fec
movups xmm0, xmmword [0x1402737a8]
lea rdx, str.Enemy
lea rcx, [rbp + 0x8e0]
movups xmmword [rbp + 0x8e0], xmm0
call fcn.1400351b0
mov eax, dword [0x14023d674]
cmp eax, 1
jne 0x140058f4f
cmp dword [0x14023d6e0], 0
jne 0x140058fec
movups xmm0, xmmword [0x1402737a8]
lea rdx, str.Players
lea rcx, [rbp + 0x8f0]
movups xmmword [rbp + 0x8f0], xmm0
call fcn.1400351b0
mov eax, dword [0x14023d674]
cmp eax, 2
jne 0x140058f88
cmp dword [0x14023d6e0], 0
jne 0x140058fec
movups xmm0, xmmword [0x1402737a8]
lea rdx, str.Extra
lea rcx, [rbp + 0x900]
movups xmmword [rbp + 0x900], xmm0
call fcn.1400351b0
mov eax, dword [0x14023d674]
cmp eax, 3
jne 0x140058fbd
cmp dword [0x14023d6e0], 0
jne 0x140058fec
movups xmm0, xmmword [0x1402737a8]
lea rdx, str.Account
lea rcx, [rbp + 0x910]
movups xmmword [rbp + 0x910], xmm0
call fcn.1400351b0
mov eax, dword [0x14023d674]
cmp eax, 4
jne 0x140058fec
cmp dword [0x14023d6e0], 0
jne 0x140058fec
movups xmm0, xmmword [0x1402737a8]
lea rdx, str.Settings
lea rcx, [rbp + 0x730]
movups xmmword [rbp + 0x730], xmm0
call fcn.1400351b0
mov ecx, 2
call fcn.1400046a0
call fcn.140016e00
call fcn.140052a20
mov rcx, qword [0x14023d640]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [0x14023c7a8]
movss xmm1, dword [rax + 0x18]
movss xmm0, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x7c]
subss xmm0, dword [rax + 0x80]
addss xmm1, dword [0x140113eec]
addss xmm0, dword [0x140113f10]
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
mov byte [rax + 0x139], 1
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x14023c7a8]
call fcn.140034e60
call fcn.1400120e0
cmp byte [0x14023d6fb], 0
je 0x140059094
cmp byte [0x14023d773], 0
je 0x140059094
mov byte [0x14023d7ec], 1
cmp byte [0x14023d685], 0
je 0x1400590ad
cmp byte [0x14023d76b], 0
je 0x1400590ad
mov byte [0x14023d7ea], 1
cmp byte [0x14023d63f], 0
je 0x1400590c6
cmp byte [0x14023d768], 0
je 0x1400590c6
cmp byte [0x14023d63a], 0
je 0x1400590df
call fcn.140052210
call fcn.14000af10
mov rcx, qword [0x140273528]
lea r8, [0x140263268]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x740], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x140273528]
lea r8, [rbp + 0x740]
mov rdx, qword [0x140263268]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x14023d640]
cmp dword [rbx + 0x4870], 0
jg 0x14005950b
mov r8d, 0x72d
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rcx, qword [rax]
mov rax, rsi
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.140042960
mov rcx, qword [0x1402734d8]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov ebx, dword [rbp - 0xc]
jmp 0x1400543f3
mov rbx, qword [0x14023d640]
test rbx, rbx
je 0x140059560
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x140059584
jmp 0x140059563
mov rdi, rsi
mov r8d, 0x241
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panel_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14023d640]
test rbx, rbx
jne 0x1400595aa
mov r8d, 0xfdc
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14023d640]
call fcn.1400438f0
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x1400595be
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400595cc
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400595db
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x90], rsi
mov qword [rbx + 0xa0], rsi
mov rax, qword [0x14023d640]
test rax, rax
je 0x1400595fb
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14023d640]
test rbx, rbx
je 0x14005961e
mov rdi, qword [rbx + 0x98]
test rdi, rdi
jne 0x140059642
jmp 0x140059621
mov rdi, rsi
mov r8d, 0xa6
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panel_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14023d640]
test rbx, rbx
jne 0x140059668
mov r8d, 0xfdc
lea rdx, str.C:dxVIDEOS__20240228T005426Z_001VIDEOSAtlas_PanelAtlas_Panelimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14023d640]
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x140059677
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rbx + 0x88], rsi
mov qword [rbx + 0x98], rsi
mov rax, qword [0x14023d640]
test rax, rax
je 0x140059697
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14023d640]
mov qword [0x14023d640], rbx
call fcn.140006440
mov qword [0x14023d640], rsi
test rbx, rbx
je 0x1400596e2
mov rcx, rbx
call fcn.14001ffb0
mov rax, qword [0x14023d640]
test rax, rax
je 0x1400596d9
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x140263268]
test rcx, rcx
je 0x1400596fb
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140263268], rsi
mov rcx, qword [0x1402734d8]
test rcx, rcx
je 0x140059714
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402734d8], rsi
mov rcx, qword [0x140273528]
test rcx, rcx
je 0x14005972d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140273528], rsi
mov rcx, qword [0x140273520]
test rcx, rcx
je 0x140059746
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x140273520], rsi
mov rcx, qword [0x14023d6e8]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x4a8]
mov rcx, qword [rbp + 0x4d0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm10, xmmword [rsp + 0x13e0]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x13b0]
movaps xmm12, xmmword [rsp + 0x13c0]
movaps xmm11, xmmword [rsp + 0x13d0]
movaps xmm8, xmmword [rsp + 0x1400]
movaps xmm9, xmmword [rsp + 0x13f0]
movaps xmm14, xmmword [rsp + 0x13a0]
movaps xmm7, xmmword [rsp + 0x1410]
movaps xmm6, xmmword [rsp + 0x1420]
mov r14, qword [rsp + 0x1470]
mov r12, qword [rsp + 0x1460]
movaps xmm15, xmmword [rsp + 0x1390]
mov r13, qword [rsp + 0x1468]
add rsp, 0x1430
pop r15
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 6
mov dword [rbp + 0x1e8], esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x1f8], esi
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 6
mov dword [0x14023e89c], 0x7ffffffe
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400347a0
int3