Function at 0x14004c670
Capabilities:
Enumerate processes
Hide graphical window
Log keystrokes via polling
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
lea rbp, [rsp - 0x9150]
mov eax, 0x9250
call fcn.1400b4020
sub rsp, rax
lea r8, str.C:WindowsSystem32kernel32.dll
mov edx, 0x104
lea rcx, [rbp + 0xd40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, str.C:WindowsSystem32charme_compressed.dll
mov edx, 0x104
lea rcx, [rbp + 0xe50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, str.C:WindowsSystem32kernel64.dll
mov edx, 0x104
lea rcx, [rbp + 0xf60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x1401ab720]
call fcn.14005d880
mov ebx, dword [0x14018a598]
xor r12d, r12d
test ebx, ebx
jne 0x14004c7a4
cmp qword [0x14018a5b8], r12
jne 0x14004c712
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400b37d4
mov dword [rax + 8], r12d
mov qword [0x14018a5b8], rax
xor edx, edx
mov ecx, 2
mov ebx, r12d
mov edi, r12d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0xae0]
mov dword [rbp + 0xae0], 0x130
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0xae0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14004c79e
nop word [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0xb0c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x14004c78a
mov eax, dword [rbp + 0xafc]
cmp eax, edi
jle 0x14004c78a
mov ebx, dword [rbp + 0xae8]
mov edi, eax
lea rdx, [rbp + 0xae0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14004c760
mov dword [0x14018a598], ebx
mov rdi, qword [0x14018a5b8]
test rdi, rdi
jne 0x14004c7ce
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400b37d4
mov rdi, rax
mov dword [rax + 8], r12d
mov ebx, dword [0x14018a598]
mov qword [0x14018a5b8], rax
mov dword [rdi + 8], ebx
test ebx, ebx
jne 0x14004c851
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0xc10]
mov dword [rbp + 0xc10], 0x130
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0xc10]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14004c84e
nop dword [rax]
nop word [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0xc3c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov ebx, dword [rbp + 0xc18]
lea rdx, [rbp + 0xc10]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14004c820
mov dword [rdi + 8], ebx
cmp dword [rdi + 8], r12d
je 0x14004c86a
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
cmp byte [0x1401ab938], r12b
jne 0x14004c8a4
lea rcx, [0x1401ab940]
call fcn.14003c500
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x140052950]
mov qword [rsp + 0x9280], r13
mov edx, 0x7f00
mov qword [rbp + 0x598], rax
xor ecx, ecx
mov qword [rsp + 0x9290], r15
mov dword [rbp + 0x590], 0x50
mov dword [rbp + 0x594], 0x40
mov qword [rbp + 0x5a0], r12
mov qword [rbp + 0x5a8], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x5b0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x5c0], r12
mov qword [rbp + 0x5b8], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x5c8], rax
lea rax, str.Example
mov qword [rbp + 0x5d0], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x590]
mov qword [rbp + 0x5d8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r15d, 1
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x104]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
lea r8, str.Entropy
mov qword [rsp + 0x50], r12
cdq
mov qword [rsp + 0x48], r12
sub eax, edx
mov rdx, qword [rbp + 0x5d0]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov dword [rsp + 0x38], 0x208
sar eax, 1
sub eax, 0x1a9
mov dword [rsp + 0x30], 0x352
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [rbp + 0x18], rax
mov edx, 0xffffffec
mov r13, rax
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xffffffec
mov rcx, r13
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, r13
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1401078c0]
lea rdx, [rbp + 0x800]
mov rcx, r13
movdqu xmmword [rbp + 0x800], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
lea rdx, [rbp + 0x20]
mov rcx, r13
movups xmmword [rbp + 0x20], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x524], r12
mov qword [rbp + 0x538], 2
mov qword [rbp + 0x550], 2
lea rax, [0x1401c01f0]
mov qword [rbp + 0x510], r12
mov qword [rsp + 0x58], rax
xor r9d, r9d
lea rax, [rbp + 0x4e0]
mov dword [rbp + 0x520], Ordinal_32
mov qword [rsp + 0x50], rax
xor r8d, r8d
lea rax, [0x1401c01e8]
mov dword [rbp + 0x518], reloc.WLDAP32.dll_Ordinal_60
mov qword [rsp + 0x48], rax
mov edx, r15d
lea rax, [0x1401c01e0]
mov dword [rbp + 0x51c], r15d
mov qword [rsp + 0x40], rax
xor ecx, ecx
lea rax, [rbp + 0x510]
mov dword [rbp + 0x534], reloc.WLDAP32.dll_Ordinal_32
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x88]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x540], r13
mov qword [rbp + 0x52c], r15
mov qword [rbp + 0x548], r15
mov dword [rbp + 0x88], 0xb000
mov dword [rbp + 0x8c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x140052889
mov rcx, qword [0x1401c01e0]
lea r9, [rbp + 0x90]
mov qword [rsp + 0x9288], r14
lea r8, [0x1401076b0]
movaps xmmword [rsp + 0x9230], xmm7
xor edx, edx
movaps xmmword [rsp + 0x9220], xmm8
mov rax, qword [rcx]
movaps xmmword [rsp + 0x9210], xmm9
movaps xmmword [rsp + 0x9200], xmm10
movaps xmmword [rsp + 0x91f0], xmm11
mov r10, qword [rax + 0x48]
movaps xmmword [rsp + 0x91e0], xmm12
movaps xmmword [rsp + 0x91d0], xmm13
movaps xmmword [rsp + 0x91c0], xmm14
movaps xmmword [rsp + 0x91b0], xmm15
call r10
mov rcx, qword [0x1401c01e8]
lea r9, [0x1401c01d8]
mov rdx, qword [rbp + 0x90]
xor r8d, r8d
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [rbp + 0x90]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0xa
mov rcx, r13
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r13
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x14018a4b0]
test rbx, rbx
je 0x14004cbea
inc dword [rbx + 0xf4]
mov rdx, qword [0x14018a4a0]
mov ecx, 0x5dd0
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x14004cc0c
xor edx, edx
mov rcx, rax
call fcn.140001d30
jmp 0x14004cc0f
mov rax, r12
mov qword [0x14018a4b0], rax
call fcn.140006180
test rbx, rbx
je 0x14004cc29
mov qword [0x14018a4b0], rbx
jmp 0x14004cc30
mov rbx, qword [0x14018a4b0]
test rbx, rbx
jne 0x14004cc56
mov r8d, 0xfdd
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14018a4b0]
movss xmm3, dword [0x1401077d0]
lea rdi, [0x140102c78]
mov rcx, qword [rbx + 0x58]
lea rdx, [0x14011cb00]
mov qword [rsp + 0x28], rdi
mov r8d, 0x4ba44
mov qword [rsp + 0x20], r12
call fcn.14002bb80
movss xmm11, dword [0x1401077e4]
lea rdx, [0x140168550]
mov rcx, qword [rbx + 0x58]
movaps xmm3, xmm11
mov qword [rsp + 0x28], rdi
mov r8d, 0x1eed4
mov qword [rsp + 0x20], r12
call fcn.14002bb80
movss xmm12, dword [0x1401077c8]
lea rdx, [0x14011cb00]
mov qword [0x14018a520], rax
movaps xmm3, xmm12
mov rcx, qword [rbx + 0x58]
mov r8d, 0x4ba44
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
call fcn.14002bb80
movss xmm3, dword [0x1401077d8]
lea rdx, [0x140187430]
mov qword [0x14018a4c8], rax
mov r8d, 0xd84
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
call fcn.14002bb80
movss xmm7, dword [0x1401077e0]
lea rdx, [0x140187430]
mov qword [0x14018a4d0], rax
movaps xmm3, xmm7
mov rcx, qword [rbx + 0x58]
mov r8d, 0xd84
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
call fcn.14002bb80
xor ecx, ecx
call fcn.140027100
mov rbx, qword [0x14018a4b0]
test rbx, rbx
jne 0x14004cd7b
mov r8d, 0xfdd
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14018a4b0]
cmp qword [rbx + 0x98], r12
je 0x14004cd9e
mov r8d, reloc.WS2_32.dll_WSACleanup
lea rdx, str.D:good_imguiAleGeyAleGeyAleGey_backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp + 0x4f8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14004cf1d
lea rcx, [rbp + 0x500]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14004cf1d
mov rax, qword [0x14018a4b0]
test rax, rax
je 0x14004cdda
inc dword [rax + 0xf4]
mov rdx, qword [0x14018a4a0]
mov ecx, 0x48
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rdi, rax
test rax, rax
je 0x14004ce0d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x14004ce10
mov rdi, r12
mov qword [rbx + 0x98], rdi
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
or dword [rbx + 0xc], 6
mov qword [rdi], r13
mov rax, qword [rbp + 0x4f8]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x500]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
mov rbx, qword [0x14018a4b0]
cmp dword [rbx + 0x4870], r12d
jg 0x14004ce73
mov r8d, 0x6fb
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x4878]
mov rbx, r12
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x560], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x568], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x570], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x578], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], r13
mov qword [rbp + 0x580], rax
mov byte [rdi + 0x2d], r15b
nop
mov rcx, qword [rbp + rbx*8 + 0x560]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x14004cef1
inc rbx
cmp rbx, 5
jl 0x14004ced0
jmp 0x14004cf1d
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x14018a4b0]
mov r14, qword [0x1401c01f0]
mov rsi, qword [0x1401c01e8]
test rax, rax
jne 0x14004cf58
mov r8d, 0xfdd
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14018a4b0]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r12
je 0x14004cf86
mov r8d, 0x221
lea rdx, str.D:good_imguiAleGeyAleGeyAleGey_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14018a4b0]
test rax, rax
je 0x14004cf91
inc dword [rax + 0xf4]
mov rdx, qword [0x14018a4a0]
mov ecx, 0x78
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rbx, rax
test rax, rax
je 0x14004cfd8
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x14004cfdb
mov rbx, r12
mov qword [rdi + 0x98], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp + 8]
or dword [rdi + 4], 8
lea rdx, [0x140103b90]
mov qword [rbp + 8], r12
mov rcx, rsi
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x98], r12
mov rax, qword [rsi]
mov r9, qword [rax]
call r9
test eax, eax
jne 0x14004d06d
mov rcx, qword [rbp + 8]
lea r8, [rbp + 0x10]
lea rdx, [0x140103ba0]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x14004d06d
mov rcx, qword [rbp + 0x10]
lea r8, [rbp + 0x98]
lea rdx, [0x140103bb0]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x14004d06d
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x98]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x14004d07c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x14004d08b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
movzx edi, byte [rbp - 0x80]
xor r14b, r14b
movzx esi, byte [rbp - 0x80]
xorps xmm9, xmm9
movzx ebx, byte [rbp - 0x80]
movss xmm14, dword [0x140107858]
movss xmm15, dword [0x140107840]
movss xmm10, dword [0x140107748]
movss xmm13, dword [0x14010788c]
mov dword [rbp - 0x30], r14d
movaps xmmword [rsp + 0x9240], xmm6
movss xmm8, dword [0x1401077a0]
lea rcx, [rbp + 0x840]
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004d164
nop dword [rax + rax]
lea rcx, [rbp + 0x840]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x840]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x848], 0x12
lea rcx, [rbp + 0x840]
movzx r14d, r14b
cmove r14d, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14004d110
mov dword [rbp - 0x30], r14d
test r14b, r14b
jne 0x140052538
mov r14, qword [0x14018a4b0]
test r14, r14
je 0x14004d17e
mov r14, qword [r14 + 0xa0]
test r14, r14
jne 0x14004d19b
jmp 0x14004d181
mov r14, r12
mov r8d, 0x250
lea rdx, str.D:good_imguiAleGeyAleGeyAleGey_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [r14 + 0x48], 0
jne 0x14004d1a7
call fcn.14003e400
call fcn.14003f5b0
mov ecx, dword [0x14018a584]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14004d1ca
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x1401896d8]
mov rax, qword [0x14018a4b0]
test rax, rax
jne 0x14004d1f7
mov r8d, 0xfdd
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14018a4b0]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x140117104]
mulss xmm0, xmm8
cmp ecx, 0xff
jg 0x14004d21d
cmp byte [reloc.WS2_32.dll_accept], 0
mov eax, Ordinal_301
jne 0x14004d220
mov eax, r12d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x140117104], r8d
cmp r8d, 0xff
jle 0x14004d25d
mov dword [0x140117104], 0xff
mov r8d, 0xff
xor edx, edx
mov r9d, 2
mov rcx, r13
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x140117104], 0
mov edx, r12d
mov eax, 5
mov rcx, r13
cmovg edx, eax
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140008990
mov eax, dword [reloc.WS2_32.dll_accept]
cmp eax, 1
jne 0x14004e57a
call fcn.14004aa10
cmp qword [0x14018a588], 0
jne 0x14004d2ea
mov rcx, qword [0x1401c01e8]
lea rax, [0x14018a588]
mov qword [rsp + 0x30], r12
lea r9, [0x140189640]
mov qword [rsp + 0x28], rax
lea rdx, [0x140117110]
mov rax, qword [0x14018a5b0]
mov r8d, 0x59ef
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
call fcn.140049aa0
call fcn.140049940
mov rax, qword [0x14018a4b0]
lea rdx, [0x14011caff]
movaps xmm0, xmm14
lea rcx, str.Login
unpcklps xmm0, xmm15
mov r8d, 0x20ab
or dword [rax + 0x4778], 2
movsd qword [rax + 0x4798], xmm0
mov dword [rax + 0x4780], r15d
call fcn.14000e7e0
mov r12, qword [0x14018a4b0]
test r12, r12
jne 0x14004d35f
mov r8d, 0xb56
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r12, qword [0x14018a4b0]
lea rdx, [rbp + 0x20]
mov rcx, r13
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm9
jp 0x14004d394
jne 0x14004d394
movss xmm0, dword [rax + 0x1c]
ucomiss xmm0, xmm9
jp 0x14004d394
je 0x14004d401
movd xmm0, dword [rbp + 0x24]
mov r9d, 0x352
movd xmm1, dword [rbp + 0x20]
mov rcx, r13
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 0x208
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x1c]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rax, qword [0x14018a4b0]
lea rdx, [rbp + 0xa8]
mov qword [rbp + 0xa8], 0
xor r8d, r8d
mov rcx, qword [rax + 0x3ea0]
call fcn.140011fa0
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c04a4]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c04a0]
movss xmm6, dword [r12 + 0x37f0]
movss dword [rbp + 0x31c], xmm1
movss xmm1, dword [0x1401c04ac]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x318]
mov r10, qword [rax + 0x290]
movss dword [rbp + 0x318], xmm0
movss xmm0, dword [0x1401c04a8]
movss dword [rbp + 0x324], xmm1
movss dword [rbp + 0x320], xmm0
call fcn.140003ff0
xor r14d, r14d
mov dword [rbp + 0xb0], 0x44548000
mov dword [rsp + 0x28], r14d
lea r8, [rbp + 0xb0]
mov r9d, eax
movss dword [rsp + 0x20], xmm6
lea rdx, [rbp + 0xb8]
mov dword [rbp + 0xb4], 0x44020000
mov rcx, r10
mov qword [rbp + 0xb8], 0
call fcn.14002a570
mov rdx, qword [0x14018a4b0]
lea rcx, [rbp + 0x328]
mov rax, qword [rdx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c03b4]
movss xmm0, dword [0x1401c03b0]
mov rax, qword [rdx + 0x3ea0]
movss xmm6, dword [r12 + 0x37f0]
movss dword [rbp + 0x32c], xmm1
movss xmm1, dword [0x1401c03bc]
mulss xmm1, dword [rdx + 0x37e0]
mov r10, qword [rax + 0x290]
movss dword [rbp + 0x328], xmm0
movss xmm0, dword [0x1401c03b8]
movss dword [rbp + 0x334], xmm1
movss dword [rbp + 0x330], xmm0
call fcn.140003ff0
mov r9d, eax
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0xc8]
movss dword [rsp + 0x20], xmm6
lea r8, [rbp + 0xc0]
mov dword [rbp + 0xc0], 0x43820000
mov rcx, r10
mov dword [rbp + 0xc4], 0x43f50000
mov dword [rbp + 0xc8], 0x41f00000
mov dword [rbp + 0xcc], 0x41f00000
call fcn.14002a570
mov rcx, qword [0x14018a4b0]
test rcx, rcx
jne 0x14004d5bb
mov r8d, 0xfdd
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x14018a4b0]
movss xmm3, dword [rcx + 0x18]
movaps xmm1, xmm9
subss xmm1, dword [0x1401c034c]
movss xmm2, dword [0x14010781c]
movaps xmm4, xmm9
subss xmm2, dword [0x1401c0348]
subss xmm4, dword [0x1401c0350]
mulss xmm3, xmm8
movaps xmm5, xmm10
subss xmm5, dword [0x1401c0354]
mulss xmm2, xmm3
mulss xmm1, xmm3
addss xmm2, dword [0x1401c0348]
mulss xmm4, xmm3
addss xmm1, dword [0x1401c034c]
mulss xmm5, xmm3
addss xmm4, dword [0x1401c0350]
shufps xmm2, xmm2, 0xe1
addss xmm5, dword [0x1401c0354]
movss xmm2, xmm1
shufps xmm2, xmm2, 0xc6
movss xmm2, xmm4
shufps xmm2, xmm2, 0x27
movss xmm2, xmm5
shufps xmm2, xmm2, 0x39
movups xmmword [0x1401c0348], xmm2
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c03b4]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c03b0]
movss dword [rbp + 0x33c], xmm1
movss xmm1, dword [0x1401c03bc]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x338]
mov r14, qword [rax + 0x290]
movss dword [rbp + 0x338], xmm0
movss xmm0, dword [0x1401c03b8]
movss dword [rbp + 0x344], xmm1
movss dword [rbp + 0x340], xmm0
call fcn.140003ff0
mov dword [rbp + 0xd0], 0x44418000
mov r15d, eax
mov dword [rbp + 0xd4], 0x42700000
test eax, 0xff000000
je 0x14004d724
movss xmm0, dword [0x140107798]
lea rdx, [rbp + 0xd0]
mov dword [rsp + 0x28], Ordinal_32
movaps xmm3, xmm9
movaps xmm2, xmm7
movss dword [rsp + 0x20], xmm0
mov rcx, r14
call fcn.140029aa0
mov r8d, dword [r14 + 0x78]
mov r9d, r15d
mov rdx, qword [r14 + 0x80]
mov rcx, r14
call fcn.140028fb0
mov dword [r14 + 0x78], 0
mov rcx, qword [0x14018a4b0]
movdqa xmm0, xmmword [0x1401080d0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x7f0]
mov r10, qword [rax + 0x290]
movups xmmword [rbp + 0x7f0], xmm0
call fcn.140003ff0
mov rdx, qword [0x14018a588]
lea r9, [rbp + 0xe8]
mov dword [rsp + 0x30], eax
lea r8, [rbp + 0xf0]
lea rax, [rbp + 0xd8]
mov dword [rbp + 0xd8], 0x3f800000
mov qword [rsp + 0x28], rax
mov rcx, r10
lea rax, [rbp + 0xe0]
mov dword [rbp + 0xdc], 0x3f800000
mov qword [rsp + 0x20], rax
mov qword [rbp + 0xe0], 0
mov dword [rbp + 0xe8], 0x44488000
mov dword [rbp + 0xec], 0x42b00000
mov dword [rbp + 0xf0], 0x443a8000
mov dword [rbp + 0xf4], 0x42000000
call fcn.14002a870
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1401077ec]
addss xmm1, dword [0x1401077ec]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
call fcn.140015a30
cmp dword [0x14018a52c], 0
lea r9, [rbp + 0xf8]
lea rdx, str.Login
mov dword [rbp + 0xf8], 0x433e0000
sete r8b
mov dword [rbp + 0xfc], 0x42340000
lea rcx, [0x1400c8214]
call fcn.140033650
test al, al
je 0x14004d883
xor eax, eax
mov dword [0x14018a52c], eax
jmp 0x14004d889
mov eax, dword [0x14018a52c]
cmp eax, 1
mov dword [rbp + 0x100], 0x433e0000
lea r9, [rbp + 0x100]
mov dword [rbp + 0x104], 0x42340000
sete r8b
lea rdx, str.Register
lea rcx, [0x1400c8214]
call fcn.140033650
test al, al
je 0x14004d8cc
mov dword [0x14018a52c], 1
call fcn.140015b80
mov eax, dword [0x14018a4dc]
mov r15d, dword [0x14018a52c]
cmp r15d, eax
jne 0x14004d8e9
movaps xmm7, xmm10
jmp 0x14004d8ed
movaps xmm7, xmm13
mov r14, qword [0x14018a4b0]
test r14, r14
jne 0x14004d927
mov r8d, 0xfdd
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x14018a4dc]
mov r15d, dword [0x14018a52c]
mov r14, qword [0x14018a4b0]
movss xmm6, dword [r14 + 0x18]
movaps xmm0, xmm6
mulss xmm0, dword [0x140107784]
mulss xmm0, xmm7
addss xmm0, dword [0x14018a590]
comiss xmm9, xmm0
jbe 0x14004d950
movaps xmm7, xmm9
jmp 0x14004d958
movaps xmm7, xmm10
minss xmm7, xmm0
movss dword [0x14018a590], xmm7
cmp r15d, eax
jne 0x14004d96b
movaps xmm8, xmm10
jmp 0x14004d96f
movaps xmm8, xmm13
movss xmm0, dword [0x140107830]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm6, xmm0
mulss xmm6, xmm8
addss xmm6, dword [0x14018a594]
comiss xmm9, xmm6
jbe 0x14004d999
movaps xmm0, xmm9
jmp 0x14004d9a1
movaps xmm0, xmm10
minss xmm0, xmm6
ucomiss xmm7, xmm9
movss dword [0x14018a594], xmm0
jp 0x14004d9c0
jne 0x14004d9c0
ucomiss xmm0, xmm9
jp 0x14004d9c0
jne 0x14004d9c0
mov dword [0x14018a4dc], r15d
movss xmm0, dword [r14 + 0x37e0]
lea rcx, [r14 + 0x47f8]
mulss xmm7, dword [r12 + 0x37e0]
lea rdx, [rbp + 0x4c4]
mov dword [rbp + 0x4c4], 0
movss dword [rbp + 0x4c8], xmm0
call fcn.14001e210
movss dword [r14 + 0x37e0], xmm7
cmp dword [0x14018a4dc], 0
jne 0x14004dc6a
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c035c]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0358]
movss dword [rbp + 0x34c], xmm1
movss xmm1, dword [0x1401c0364]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x348]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x348], xmm0
movss xmm0, dword [0x1401c0360]
movss dword [rbp + 0x354], xmm1
movss dword [rbp + 0x350], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a520]
mov r12d, eax
mov dword [rbp + 0x108], 0x438c8000
mov dword [rbp + 0x10c], 0x41f00000
test eax, 0xff000000
je 0x14004db3c
test r14, r14
jne 0x14004dabb
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14004dae6
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x14010696d]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x108]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm11
lea rax, str.Federal_Cheat
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c0314]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0310]
movss dword [rbp + 0x2bc], xmm1
movss xmm1, dword [0x1401c031c]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x2b8]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x2b8], xmm0
movss xmm0, dword [0x1401c0318]
movss dword [rbp + 0x2c4], xmm1
movss dword [rbp + 0x2c0], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a4c8]
mov r12d, eax
mov dword [rbp + 0x110], 0x438c8000
mov dword [rbp + 0x114], 0x42920000
test eax, 0xff000000
je 0x14004dc6a
test r14, r14
jne 0x14004dbe9
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14004dc14
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106981]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x110]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm12
lea rax, str.Login_to_continue
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
cmp dword [0x14018a4dc], 1
jne 0x14004ded3
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c035c]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0358]
movss dword [rbp + 0x35c], xmm1
movss xmm1, dword [0x1401c0364]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x358]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x358], xmm0
movss xmm0, dword [0x1401c0360]
movss dword [rbp + 0x364], xmm1
movss dword [rbp + 0x360], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a520]
mov r12d, eax
mov dword [rbp + 0x118], 0x438c8000
mov dword [rbp + 0x11c], 0x41f00000
test eax, 0xff000000
je 0x14004dda5
test r14, r14
jne 0x14004dd24
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14004dd4f
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106958]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x118]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm11
lea rax, str.Register
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c0314]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0310]
movss dword [rbp + 0x36c], xmm1
movss xmm1, dword [0x1401c031c]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x368]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x368], xmm0
movss xmm0, dword [0x1401c0318]
movss dword [rbp + 0x374], xmm1
movss dword [rbp + 0x370], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a4c8]
mov r12d, eax
mov dword [rbp + 0x120], 0x438c8000
mov dword [rbp + 0x124], 0x42920000
test eax, 0xff000000
je 0x14004ded3
test r14, r14
jne 0x14004de52
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14004de7d
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106999]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x120]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm12
lea rax, str.Register_to_login
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
mov rcx, qword [0x14018a4b0]
lea rdx, str.Child
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x140107824]
addss xmm1, dword [0x1401077fc]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
mov dword [rbp + 0x128], 0x44098000
mov dword [rbp + 0x12c], 0x43c58000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400075d0
xor r12d, r12d
lea r8, [rbp + 0x128]
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea rcx, str.Child
call fcn.14000b970
mov ecx, dword [0x14018a4dc]
test ecx, ecx
je 0x14004e233
cmp ecx, 1
jne 0x14004e49e
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x130]
mov qword [rsp + 0x30], r12
lea r8, [0x14018a4e0]
mov dword [rsp + 0x28], r12d
lea rcx, str.Username
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x130], r12
call fcn.140038ec0
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x138]
mov qword [rsp + 0x30], r12
lea r8, [0x14018a540]
mov dword [rsp + 0x28], r12d
lea rcx, str.Password
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x138], r12
call fcn.140038ec0
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x140]
mov qword [rsp + 0x30], r12
lea r8, [0x14018a5c0]
mov dword [rsp + 0x28], r12d
lea rcx, str.License_Key
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x140], r12
call fcn.140038ec0
lea rdx, [rbp + 0x148]
mov qword [rbp + 0x148], r12
lea rcx, str.Register
call fcn.140033350
test al, al
je 0x14004e49e
lea rdx, [0x14018a5c0]
lea rcx, [rbp + 0xa60]
call fcn.14003c600
lea rdx, [0x14018a540]
mov r15, rax
lea rcx, [rbp + 0xaa0]
call fcn.14003c600
lea rdx, [0x14018a4e0]
mov r14, rax
lea rcx, [rbp + 0xa80]
call fcn.14003c600
mov r9, r15
lea rcx, [0x1401ab720]
mov r8, r14
mov rdx, rax
call fcn.140061290
cmp byte [0x1401ab938], r12b
je 0x14004e313
mov r14, qword [0x1401ab900]
mov r15, qword [0x1401ab908]
cmp r14, r15
je 0x14004e49e
nop word [rax + rax]
mov rdx, r14
lea rcx, [rbp + 0x278]
call fcn.140052a80
mov r8, qword [rbp + 0x290]
lea rax, [rbp + 0x278]
mov rcx, qword [rbp + 0x278]
cmp r8, 0xf
mov rdx, qword [rbp + 0x288]
cmova rax, rcx
cmp rdx, 7
jne 0x14004e13f
cmp dword [rax], 0x61666564
jne 0x14004e13f
cmp word [rax + 4], 0x6c75
jne 0x14004e13f
cmp byte [rax + 6], 0x74
je 0x14004e162
cmp r8, 0xf
lea rax, [rbp + 0x278]
cmova rax, rcx
cmp rdx, 5
jne 0x14004e16e
cmp dword [rax], 0x656e6170
jne 0x14004e16e
cmp byte [rax + 4], 0x6c
jne 0x14004e16e
mov dword [reloc.WS2_32.dll_accept], 2
jmp 0x14004e1d4
cmp r8, 0xf
lea rax, [rbp + 0x278]
cmova rax, rcx
cmp rdx, 6
jne 0x14004e19f
cmp dword [rax], 0x61707962
jne 0x14004e19f
cmp word [rax + 4], 0x7373
jne 0x14004e19f
mov dword [reloc.WS2_32.dll_accept], 3
jmp 0x14004e1d4
cmp r8, 0xf
lea rax, [rbp + 0x278]
cmova rax, rcx
cmp rdx, 7
jne 0x14004e1d4
cmp dword [rax], 0x6d657270
jne 0x14004e1d4
cmp word [rax + 4], 0x7569
jne 0x14004e1d4
cmp byte [rax + 6], 0x6d
jne 0x14004e1d4
mov dword [reloc.WS2_32.dll_accept], 4
cmp r8, 0xf
jbe 0x14004e208
lea rdx, [r8 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e203
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052860
call fcn.1400b3b20
add r14, 0x20
mov qword [rbp + 0x288], r12
mov qword [rbp + 0x290], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x278], r12b
cmp r14, r15
jne 0x14004e0f0
jmp 0x14004e49e
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x150]
mov qword [rsp + 0x30], r12
lea r8, [0x14018a4e0]
mov dword [rsp + 0x28], r12d
lea rcx, str.Username
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x150], r12
call fcn.140038ec0
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x158]
mov qword [rsp + 0x30], r12
lea r8, [0x14018a540]
mov dword [rsp + 0x28], r12d
lea rcx, str.Password
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x158], r12
call fcn.140038ec0
lea rdx, [rbp + 0x160]
mov qword [rbp + 0x160], r12
lea rcx, str.Login
call fcn.140033350
test al, al
je 0x14004e49e
lea rdx, [0x14018a540]
lea rcx, [rbp + 0xac0]
call fcn.14003c600
lea rdx, [0x14018a4e0]
mov r14, rax
lea rcx, [rbp + 0xa40]
call fcn.14003c600
mov r8, r14
lea rcx, [0x1401ab720]
mov rdx, rax
call fcn.14005ef50
cmp byte [0x1401ab938], r12b
jne 0x14004e33d
cmp qword [0x1401ab958], 0xf
lea rdx, [0x1401ab940]
cmova rdx, qword [0x1401ab940]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x14004e49e
mov r14, qword [0x1401ab900]
mov r15, qword [0x1401ab908]
cmp r14, r15
je 0x14004e49e
nop dword [rax]
nop dword [rax + rax]
mov rdx, r14
lea rcx, [rbp + 0x298]
call fcn.140052a80
mov r8, qword [rbp + 0x2b0]
lea rax, [rbp + 0x298]
mov rcx, qword [rbp + 0x298]
cmp r8, 0xf
mov rdx, qword [rbp + 0x2a8]
cmova rax, rcx
cmp rdx, 7
jne 0x14004e3af
cmp dword [rax], 0x61666564
jne 0x14004e3af
cmp word [rax + 4], 0x6c75
jne 0x14004e3af
cmp byte [rax + 6], 0x74
je 0x14004e3d2
cmp r8, 0xf
lea rax, [rbp + 0x298]
cmova rax, rcx
cmp rdx, 5
jne 0x14004e3de
cmp dword [rax], 0x656e6170
jne 0x14004e3de
cmp byte [rax + 4], 0x6c
jne 0x14004e3de
mov dword [reloc.WS2_32.dll_accept], 2
jmp 0x14004e444
cmp r8, 0xf
lea rax, [rbp + 0x298]
cmova rax, rcx
cmp rdx, 6
jne 0x14004e40f
cmp dword [rax], 0x61707962
jne 0x14004e40f
cmp word [rax + 4], 0x7373
jne 0x14004e40f
mov dword [reloc.WS2_32.dll_accept], 3
jmp 0x14004e444
cmp r8, 0xf
lea rax, [rbp + 0x298]
cmova rax, rcx
cmp rdx, 7
jne 0x14004e444
cmp dword [rax], 0x6d657270
jne 0x14004e444
cmp word [rax + 4], 0x7569
jne 0x14004e444
cmp byte [rax + 6], 0x6d
jne 0x14004e444
mov dword [reloc.WS2_32.dll_accept], 4
cmp r8, 0xf
jbe 0x14004e478
lea rdx, [r8 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e473
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052860
call fcn.1400b3b20
add r14, 0x20
mov qword [rbp + 0x2a8], r12
mov qword [rbp + 0x2b0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x298], r12b
cmp r14, r15
jne 0x14004e360
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
cmp byte [rax + 0xb3], r12b
jne 0x14004e4da
movaps xmm1, xmm13
mov qword [rbp + 0x168], r12
lea rcx, [rbp + 0x168]
call fcn.140015490
call fcn.14000bb90
mov r15d, 1
mov ecx, r15d
call fcn.140004620
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r14, rax
test rax, rax
je 0x14004e55e
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14004e555
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x7e0]
mov qword [rbp + 0x648], rcx
lea rdx, [rbp + 0x640]
mov rcx, r13
mov dword [rbp + 0x640], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x7e0], xmm0
mov dword [rbp + 0x650], reloc.WS2_32.dll_recv
call rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.1400110f0
mov eax, dword [reloc.WS2_32.dll_accept]
movss xmm7, dword [0x1401077e0]
movss xmm8, dword [0x1401077a0]
cmp eax, 2
jne 0x14005247f
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WLDAP32.dll_Ordinal_50
and al, 1
mov dword [rsp + 0x60], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x33
and al, 1
mov dword [rbp - 0x7c], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_WSASetLastError
and al, 1
mov dword [rbp - 0x78], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, WSAStartup
and al, 1
mov dword [rbp - 0x74], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, WSAStartup
and al, 1
mov dword [rbp - 0x70], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_WSAStartup
and al, 1
mov dword [rbp - 0x6c], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x51
and al, 1
mov dword [rbp - 0x68], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x45
and al, 1
mov dword [rbp - 0x64], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x14018a4d8]
movzx edx, byte [0x14018a4ab]
movzx r8d, byte [0x14018a5ae]
movzx r9d, byte [0x14018a535]
movzx r10d, byte [0x14018a4c4]
movzx r11d, byte [0x14018a537]
movzx r14d, byte [0x14018a534]
movzx r15d, byte [0x14018a4ac]
movzx r12d, byte [0x14018a4ae]
movzx r13d, byte [0x14018a536]
shr eax, 0xf
and al, 1
mov dword [rsp + 0x70], eax
cmp ecx, 1
jne 0x14004e6a8
mov ecx, dword [rsp + 0x60]
test cl, cl
je 0x14004e7fa
test dl, dl
jne 0x14004e7fa
cmp byte [0x14018a53e], dl
sete byte [0x14018a53e]
jmp 0x14004e7fa
cmp ecx, 2
jne 0x14004e6d7
cmp byte [rbp - 0x7c], 0
je 0x14004e7f6
mov ecx, dword [rsp + 0x60]
test r8b, r8b
jne 0x14004e7fa
cmp byte [0x14018a53e], r8b
sete byte [0x14018a53e]
jmp 0x14004e7fa
cmp ecx, 3
jne 0x14004e706
cmp byte [rbp - 0x78], 0
je 0x14004e7f6
mov ecx, dword [rsp + 0x60]
test r9b, r9b
jne 0x14004e7fa
cmp byte [0x14018a53e], r9b
sete byte [0x14018a53e]
jmp 0x14004e7fa
cmp ecx, 4
jne 0x14004e735
cmp byte [rbp - 0x74], 0
je 0x14004e7f6
mov ecx, dword [rsp + 0x60]
test r10b, r10b
jne 0x14004e7fa
cmp byte [0x14018a53e], r10b
sete byte [0x14018a53e]
jmp 0x14004e7fa
cmp ecx, 5
jne 0x14004e764
cmp byte [rbp - 0x70], 0
je 0x14004e7f6
mov ecx, dword [rsp + 0x60]
test r11b, r11b
jne 0x14004e7fa
cmp byte [0x14018a53e], r11b
sete byte [0x14018a53e]
jmp 0x14004e7fa
cmp ecx, 6
jne 0x14004e78c
cmp byte [rbp - 0x6c], 0
je 0x14004e7f6
mov ecx, dword [rsp + 0x60]
test r14b, r14b
jne 0x14004e7fa
cmp byte [0x14018a53e], r14b
sete byte [0x14018a53e]
jmp 0x14004e7fa
cmp ecx, 7
jne 0x14004e7b0
cmp byte [rbp - 0x68], 0
je 0x14004e7f6
mov ecx, dword [rsp + 0x60]
test r15b, r15b
jne 0x14004e7fa
cmp byte [0x14018a53e], r15b
sete byte [0x14018a53e]
jmp 0x14004e7fa
cmp ecx, 8
jne 0x14004e7d4
cmp byte [rbp - 0x64], 0
je 0x14004e7f6
mov ecx, dword [rsp + 0x60]
test r12b, r12b
jne 0x14004e7fa
cmp byte [0x14018a53e], r12b
sete byte [0x14018a53e]
jmp 0x14004e7fa
cmp ecx, 9
jne 0x14004e7f6
test al, al
je 0x14004e7f6
mov ecx, dword [rsp + 0x60]
test r13b, r13b
jne 0x14004e7fa
cmp byte [0x14018a53e], r13b
sete byte [0x14018a53e]
jmp 0x14004e7fa
mov ecx, dword [rsp + 0x60]
mov eax, dword [0x14018a580]
cmp eax, 1
jne 0x14004e814
test cl, cl
je 0x14004e8a7
test dl, dl
jmp 0x14004e897
cmp eax, 2
jne 0x14004e828
cmp byte [rbp - 0x7c], 0
je 0x14004e8a7
test r8b, r8b
jmp 0x14004e897
cmp eax, 3
jne 0x14004e838
cmp byte [rbp - 0x78], 0
je 0x14004e8a7
test r9b, r9b
jmp 0x14004e897
cmp eax, 4
jne 0x14004e848
cmp byte [rbp - 0x74], 0
je 0x14004e8a7
test r10b, r10b
jmp 0x14004e897
cmp eax, 5
jne 0x14004e858
cmp byte [rbp - 0x70], 0
je 0x14004e8a7
test r11b, r11b
jmp 0x14004e897
cmp eax, 6
jne 0x14004e868
cmp byte [rbp - 0x6c], 0
je 0x14004e8a7
test r14b, r14b
jmp 0x14004e897
cmp eax, 7
jne 0x14004e878
cmp byte [rbp - 0x68], 0
je 0x14004e8a7
test r15b, r15b
jmp 0x14004e897
cmp eax, 8
jne 0x14004e888
cmp byte [rbp - 0x64], 0
je 0x14004e8a7
test r12b, r12b
jmp 0x14004e897
cmp eax, 9
jne 0x14004e8a7
cmp byte [rsp + 0x70], 0
je 0x14004e8a7
test r13b, r13b
jne 0x14004e8a7
cmp byte [0x14018a53b], 0
sete byte [0x14018a53b]
mov eax, dword [0x14018a528]
cmp eax, 1
jne 0x14004e8c1
test cl, cl
je 0x14004e954
test dl, dl
jmp 0x14004e944
cmp eax, 2
jne 0x14004e8d5
cmp byte [rbp - 0x7c], 0
je 0x14004e954
test r8b, r8b
jmp 0x14004e944
cmp eax, 3
jne 0x14004e8e5
cmp byte [rbp - 0x78], 0
je 0x14004e954
test r9b, r9b
jmp 0x14004e944
cmp eax, 4
jne 0x14004e8f5
cmp byte [rbp - 0x74], 0
je 0x14004e954
test r10b, r10b
jmp 0x14004e944
cmp eax, 5
jne 0x14004e905
cmp byte [rbp - 0x70], 0
je 0x14004e954
test r11b, r11b
jmp 0x14004e944
cmp eax, 6
jne 0x14004e915
cmp byte [rbp - 0x6c], 0
je 0x14004e954
test r14b, r14b
jmp 0x14004e944
cmp eax, 7
jne 0x14004e925
cmp byte [rbp - 0x68], 0
je 0x14004e954
test r15b, r15b
jmp 0x14004e944
cmp eax, 8
jne 0x14004e935
cmp byte [rbp - 0x64], 0
je 0x14004e954
test r12b, r12b
jmp 0x14004e944
cmp eax, 9
jne 0x14004e954
cmp byte [rsp + 0x70], 0
je 0x14004e954
test r13b, r13b
jne 0x14004e954
cmp byte [0x14018a53d], 0
sete byte [0x14018a53d]
mov eax, dword [0x1401abd28]
cmp eax, 1
jne 0x14004e96e
test cl, cl
je 0x14004ea1a
test dl, dl
jmp 0x14004ea0a
cmp eax, 2
jne 0x14004e985
cmp byte [rbp - 0x7c], 0
je 0x14004ea1a
test r8b, r8b
jmp 0x14004ea0a
cmp eax, 3
jne 0x14004e999
cmp byte [rbp - 0x78], 0
je 0x14004ea1a
test r9b, r9b
jmp 0x14004ea0a
cmp eax, 4
jne 0x14004e9a9
cmp byte [rbp - 0x74], 0
je 0x14004ea1a
test r10b, r10b
jmp 0x14004ea0a
cmp eax, 5
jne 0x14004e9cb
cmp byte [rbp - 0x70], 0
je 0x14004ea1a
test r11b, r11b
jne 0x14004ea1a
cmp byte [0x14018a53c], r11b
sete cl
mov byte [0x14018a53c], cl
jmp 0x14004ea21
cmp eax, 6
jne 0x14004e9db
cmp byte [rbp - 0x6c], 0
je 0x14004ea1a
test r14b, r14b
jmp 0x14004ea0a
cmp eax, 7
jne 0x14004e9eb
cmp byte [rbp - 0x68], 0
je 0x14004ea1a
test r15b, r15b
jmp 0x14004ea0a
cmp eax, 8
jne 0x14004e9fb
cmp byte [rbp - 0x64], 0
je 0x14004ea1a
test r12b, r12b
jmp 0x14004ea0a
cmp eax, 9
jne 0x14004ea1a
cmp byte [rsp + 0x70], 0
je 0x14004ea1a
test r13b, r13b
jne 0x14004ea1a
cmp byte [0x14018a53f], 0
sete byte [0x14018a53f]
movzx ecx, byte [0x14018a53c]
mov eax, dword [0x14018a5a8]
cmp eax, 1
jne 0x14004ea4e
mov eax, dword [rsp + 0x60]
test al, al
je 0x14004eb77
test dl, dl
jne 0x14004eb77
test cl, cl
sete byte [0x14018a53c]
jmp 0x14004eb77
cmp eax, 2
jne 0x14004ea78
cmp byte [rbp - 0x7c], 0
je 0x14004eb73
mov eax, dword [rsp + 0x60]
test r8b, r8b
jne 0x14004eb77
test cl, cl
sete byte [0x14018a53c]
jmp 0x14004eb77
cmp eax, 3
jne 0x14004eaa2
cmp byte [rbp - 0x78], 0
je 0x14004eb73
mov eax, dword [rsp + 0x60]
test r9b, r9b
jne 0x14004eb77
test cl, cl
sete byte [0x14018a53c]
jmp 0x14004eb77
cmp eax, 4
jne 0x14004eacc
cmp byte [rbp - 0x74], 0
je 0x14004eb73
mov eax, dword [rsp + 0x60]
test r10b, r10b
jne 0x14004eb77
test cl, cl
sete byte [0x14018a53c]
jmp 0x14004eb77
cmp eax, 5
jne 0x14004eaf6
cmp byte [rbp - 0x70], 0
je 0x14004eb73
mov eax, dword [rsp + 0x60]
test r11b, r11b
jne 0x14004eb77
test cl, cl
sete byte [0x14018a53c]
jmp 0x14004eb77
cmp eax, 6
jne 0x14004eb15
cmp byte [rbp - 0x6c], 0
je 0x14004eb73
mov eax, dword [rsp + 0x60]
test r14b, r14b
jne 0x14004eb77
test cl, cl
sete byte [0x14018a53c]
jmp 0x14004eb77
cmp eax, 7
jne 0x14004eb34
cmp byte [rbp - 0x68], 0
je 0x14004eb73
mov eax, dword [rsp + 0x60]
test r15b, r15b
jne 0x14004eb77
test cl, cl
sete byte [0x14018a53c]
jmp 0x14004eb77
cmp eax, 8
jne 0x14004eb53
cmp byte [rbp - 0x64], 0
je 0x14004eb73
mov eax, dword [rsp + 0x60]
test r12b, r12b
jne 0x14004eb77
test cl, cl
sete byte [0x14018a53c]
jmp 0x14004eb77
cmp eax, 9
jne 0x14004eb73
cmp byte [rsp + 0x70], 0
je 0x14004eb73
mov eax, dword [rsp + 0x60]
test r13b, r13b
jne 0x14004eb77
test cl, cl
sete byte [0x14018a53c]
jmp 0x14004eb77
mov eax, dword [rsp + 0x60]
mov byte [0x14018a4ab], al
mov ecx, WSAStartup
mov eax, dword [rbp - 0x7c]
mov byte [0x14018a5ae], al
mov eax, dword [rbp - 0x78]
mov byte [0x14018a535], al
mov eax, dword [rbp - 0x74]
mov byte [0x14018a4c4], al
mov eax, dword [rbp - 0x70]
mov byte [0x14018a537], al
mov eax, dword [rbp - 0x6c]
mov byte [0x14018a534], al
mov eax, dword [rbp - 0x68]
mov byte [0x14018a4ac], al
mov eax, dword [rbp - 0x64]
mov byte [0x14018a4ae], al
mov eax, dword [rsp + 0x70]
mov byte [0x14018a536], al
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rdx, qword [0x1401ab870]
movabs rcx, 0x7fffffffffffffff
sub rcx, rdx
mov r13, rax
cmp rcx, 6
jb 0x1400528aa
cmp qword [0x1401ab878], 0xf
lea rcx, [0x1401ab860]
mov qword [rsp + 0x30], rdx
lea r9, str.User:
cmova rcx, qword [0x1401ab860]
lea r8, [0x1401ab860]
mov qword [rsp + 0x28], rcx
movzx edx, dil
lea rcx, [rbp + 0x498]
mov qword [rsp + 0x20], 6
call fcn.14003cec0
mov r15, qword [0x1401ab928]
lea r12, [0x1401ab918]
xor r14d, r14d
movabs rax, 0x7fffffffffffffff
cmp qword [0x1401ab930], 0xf
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
cmova r12, qword [0x1401ab918]
mov qword [rbp - 8], r14
mov qword [rbp], r14
cmp r15, rax
ja 0x1400528aa
cmp r15, 0xf
ja 0x14004eca6
mov eax, reloc.WS2_32.dll_ntohs
mov qword [rbp - 8], r15
mov qword [rbp], rax
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x18], xmm0
jmp 0x14004ed3e
mov r14, r15
or r14, 0xf
cmp r14, rax
jbe 0x14004ecc5
mov r14, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14004ecf5
cmp r14, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb r14, rax
lea rcx, [r14 + 1]
test rcx, rcx
jne 0x14004ecdf
xor eax, eax
jmp 0x14004ed1c
cmp rcx, 0x1000
jb 0x14004ed17
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400528b0
mov rcx, rax
call fcn.1400b37d4
mov rcx, rax
test rax, rax
je 0x140052860
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14004ed1c
call fcn.1400b37d4
lea r8, [r15 + 1]
mov qword [rbp - 0x18], rax
mov rdx, r12
mov qword [rbp - 8], r15
mov rcx, rax
mov qword [rbp], r14
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp]
xor r14d, r14d
cmp rax, 0xf
lea rcx, [rbp - 0x18]
cmova rcx, qword [rbp - 0x18]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov ecx, eax
mov eax, 0xc22e4507
imul ecx
add edx, ecx
lea rcx, [rbp + 0x478]
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add edx, eax
call fcn.14003c960
cmp qword [rbp + 0x490], 0xf
lea rdx, [rbp + 0x478]
lea rcx, [rbp + 0x258]
cmova rdx, qword [rbp + 0x478]
call fcn.14003c600
mov rdx, qword [rbp + 0x490]
cmp rdx, 0xf
jbe 0x14004edd6
mov rcx, qword [rbp + 0x478]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004edd1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052860
call fcn.1400b3b20
mov rcx, qword [rbp + 0x268]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
mov qword [rbp + 0x488], r14
mov qword [rbp + 0x490], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x478], 0
cmp rax, 7
jb 0x1400528aa
cmp qword [rbp + 0x270], 0xf
lea rax, [rbp + 0x258]
mov qword [rsp + 0x30], rcx
lea r9, str.Days_:
cmova rax, qword [rbp + 0x258]
lea r8, [rbp + 0x258]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x458]
movzx edx, sil
mov qword [rsp + 0x20], 7
call fcn.14003cec0
xorps xmm0, xmm0
lea rdx, [rbp + 0x950]
movups xmmword [rbp + 0x950], xmm0
movups xmmword [rbp + 0x960], xmm0
movups xmmword [rbp + 0x970], xmm0
call fcn.140043ac0
cmp qword [rbp + 0x470], 0xf
lea rcx, str.Dev_Federal_Cheat
xorps xmm0, xmm0
lea rax, [rbp + 0x458]
cmova rax, qword [rbp + 0x458]
cmp qword [rbp + 0x4b0], 0xf
movups xmmword [rbp + 0x730], xmm0
mov qword [rbp + 0x730], rax
lea rax, [rbp + 0x498]
cmova rax, qword [rbp + 0x498]
mov qword [rbp + 0x738], rax
lea rax, str.https:__ibb.co_wML1hZC
movups xmmword [rbp + 0x750], xmm0
mov qword [rbp + 0x750], rax
movups xmmword [rbp + 0x760], xmm0
mov qword [rbp + 0x760], rax
lea rax, str.Federal_Cheat
mov qword [rbp + 0x758], rcx
lea rcx, reloc.WS2_32.dll_bind
movups xmmword [rbp + 0x740], xmm0
mov qword [rbp + 0x768], rax
movups xmmword [rbp + 0x770], xmm0
mov qword [rbp + 0x740], r13
movups xmmword [rbp + 0x780], xmm0
movups xmmword [rbp + 0x790], xmm0
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
jne 0x14005287d
cmp dword [0x14018963c], 0x7fffffff
je 0x140052867
mov r8d, dword [reloc.WS2_32.dll_accept]
lea rcx, [0x1401abe68]
lea eax, [r8 + 1]
mov dword [reloc.WS2_32.dll_accept], eax
lea rax, [rbp + 0x730]
mov qword [rsp + 0x20], rax
call fcn.1400481a0
mov qword [0x1401abe60], rax
lea rcx, reloc.WS2_32.dll_bind
mov eax, 1
xchg byte [0x14018a603], al
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rcx, qword [0x1401abd20]
test rcx, rcx
je 0x14004efa4
add rcx, 0x58
call qword [sym.imp.MSVCP140.dll__Cnd_broadcast]
cmp qword [0x14018a588], 0
jne 0x14004efec
mov rcx, qword [0x1401c01e8]
lea rax, [0x14018a588]
mov qword [rsp + 0x30], r14
lea r9, [0x140189640]
mov qword [rsp + 0x28], rax
lea rdx, [0x140117110]
mov rax, qword [0x14018a5b0]
mov r8d, 0x59ef
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
call fcn.140049aa0
call fcn.140049940
mov rax, qword [0x14018a4b0]
lea rdx, [0x14011caff]
movaps xmm0, xmm14
lea rcx, str.General
unpcklps xmm0, xmm15
mov r8d, 0x20ab
or dword [rax + 0x4778], 2
movsd qword [rax + 0x4798], xmm0
mov dword [rax + 0x4780], 1
call fcn.14000e7e0
mov r12, qword [0x14018a4b0]
test r12, r12
jne 0x14004f064
mov r8d, 0xb56
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r12, qword [0x14018a4b0]
mov r13, qword [rbp + 0x18]
lea rdx, [rbp + 0x20]
mov rcx, r13
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
movss xmm2, dword [rax + 0x18]
ucomiss xmm2, xmm9
jp 0x14004f09d
jne 0x14004f09d
movss xmm0, dword [rax + 0x1c]
ucomiss xmm0, xmm9
jp 0x14004f09d
je 0x14004f10d
movd xmm0, dword [rbp + 0x24]
mov r9d, 0x352
movd xmm1, dword [rbp + 0x20]
mov rcx, r13
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x208
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x1c]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x14018a4b0]
lea rdx, [rbp + 0x178]
mov qword [rbp + 0x178], 0
xor r8d, r8d
mov rcx, qword [rcx + 0x3ea0]
call fcn.140011fa0
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c04a4]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c04a0]
movss xmm6, dword [r12 + 0x37f0]
movss dword [rbp + 0x37c], xmm1
movss xmm1, dword [0x1401c04ac]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x378]
mov r10, qword [rax + 0x290]
movss dword [rbp + 0x378], xmm0
movss xmm0, dword [0x1401c04a8]
movss dword [rbp + 0x384], xmm1
movss dword [rbp + 0x380], xmm0
call fcn.140003ff0
mov r9d, eax
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0x188]
movss dword [rsp + 0x20], xmm6
lea r8, [rbp + 0x180]
mov dword [rbp + 0x180], 0x44548000
mov rcx, r10
mov dword [rbp + 0x184], 0x44020000
mov qword [rbp + 0x188], 0
call fcn.14002a570
mov rdx, qword [0x14018a4b0]
lea rcx, [rbp + 0x388]
mov rax, qword [rdx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c03b4]
movss xmm0, dword [0x1401c03b0]
mov rax, qword [rdx + 0x3ea0]
movss xmm6, dword [r12 + 0x37f0]
movss dword [rbp + 0x38c], xmm1
movss xmm1, dword [0x1401c03bc]
mulss xmm1, dword [rdx + 0x37e0]
mov r10, qword [rax + 0x290]
movss dword [rbp + 0x388], xmm0
movss xmm0, dword [0x1401c03b8]
movss dword [rbp + 0x394], xmm1
movss dword [rbp + 0x390], xmm0
call fcn.140003ff0
mov r9d, eax
mov dword [rsp + 0x28], r14d
lea rdx, [rbp + 0x198]
movss dword [rsp + 0x20], xmm6
lea r8, [rbp + 0x190]
mov dword [rbp + 0x190], 0x43820000
mov rcx, r10
mov dword [rbp + 0x194], 0x43f50000
mov dword [rbp + 0x198], 0x41f00000
mov dword [rbp + 0x19c], 0x41f00000
call fcn.14002a570
mov rcx, qword [0x14018a4b0]
test rcx, rcx
jne 0x14004f2c4
mov r8d, 0xfdd
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x14018a4b0]
movss xmm4, dword [rcx + 0x18]
movaps xmm3, xmm9
subss xmm3, dword [0x1401c034c]
movss xmm5, dword [0x14010781c]
movaps xmm2, xmm10
subss xmm5, dword [0x1401c0348]
subss xmm2, dword [0x1401c0354]
mulss xmm4, xmm8
movaps xmm6, xmm9
subss xmm6, dword [0x1401c0350]
mulss xmm5, xmm4
mulss xmm3, xmm4
addss xmm5, dword [0x1401c0348]
mulss xmm6, xmm4
addss xmm3, dword [0x1401c034c]
mulss xmm2, xmm4
addss xmm6, dword [0x1401c0350]
shufps xmm5, xmm5, 0xe1
addss xmm2, dword [0x1401c0354]
movss xmm5, xmm3
shufps xmm5, xmm5, 0xc6
movss xmm5, xmm6
shufps xmm5, xmm5, 0x27
movss xmm5, xmm2
shufps xmm5, xmm5, 0x39
movups xmmword [0x1401c0348], xmm5
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c03b4]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c03b0]
movss dword [rbp + 0x39c], xmm1
movss xmm1, dword [0x1401c03bc]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x398]
mov r14, qword [rax + 0x290]
movss dword [rbp + 0x398], xmm0
movss xmm0, dword [0x1401c03b8]
movss dword [rbp + 0x3a4], xmm1
movss dword [rbp + 0x3a0], xmm0
call fcn.140003ff0
mov dword [rbp + 0x1a0], 0x44418000
mov r15d, eax
mov dword [rbp + 0x1a4], 0x42700000
test eax, 0xff000000
je 0x14004f42d
movss xmm0, dword [0x140107798]
lea rdx, [rbp + 0x1a0]
mov dword [rsp + 0x28], Ordinal_32
movaps xmm3, xmm9
movaps xmm2, xmm7
movss dword [rsp + 0x20], xmm0
mov rcx, r14
call fcn.140029aa0
mov r8d, dword [r14 + 0x78]
mov r9d, r15d
mov rdx, qword [r14 + 0x80]
mov rcx, r14
call fcn.140028fb0
mov dword [r14 + 0x78], 0
mov rcx, qword [0x14018a4b0]
movdqa xmm0, xmmword [0x1401080d0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
lea rcx, [rbp + 0x7d0]
mov r10, qword [rax + 0x290]
movups xmmword [rbp + 0x7d0], xmm0
call fcn.140003ff0
mov rdx, qword [0x14018a588]
lea r9, [rbp + 0x1b8]
mov dword [rsp + 0x30], eax
lea r8, [rbp + 0x1c0]
lea rax, [rbp + 0x1a8]
mov dword [rbp + 0x1a8], 0x3f800000
mov qword [rsp + 0x28], rax
mov rcx, r10
lea rax, [rbp + 0x1b0]
mov dword [rbp + 0x1ac], 0x3f800000
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x1b0], 0
mov dword [rbp + 0x1b8], 0x44488000
mov dword [rbp + 0x1bc], 0x42b00000
mov dword [rbp + 0x1c0], 0x443a8000
mov dword [rbp + 0x1c4], 0x42000000
call fcn.14002a870
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1401077ec]
addss xmm1, dword [0x1401077ec]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
call fcn.140015a30
cmp dword [0x14018a52c], 0
lea r9, [rbp + 0x1c8]
lea rdx, str.Aim_Hacks
mov dword [rbp + 0x1c8], 0x433e0000
sete r8b
mov dword [rbp + 0x1cc], 0x42340000
lea rcx, [0x1400c8214]
call fcn.140033650
test al, al
je 0x14004f58c
xor eax, eax
mov dword [0x14018a52c], eax
jmp 0x14004f592
mov eax, dword [0x14018a52c]
cmp eax, 2
mov dword [rbp + 0x1d0], 0x433e0000
lea r9, [rbp + 0x1d0]
mov dword [rbp + 0x1d4], 0x42340000
sete r8b
lea rdx, str.Sniper
lea rcx, [0x1400c821c]
call fcn.140033650
test al, al
je 0x14004f5d8
mov eax, 2
mov dword [0x14018a52c], eax
jmp 0x14004f5de
mov eax, dword [0x14018a52c]
cmp eax, 1
mov dword [rbp + 0x1d8], 0x433e0000
lea r9, [rbp + 0x1d8]
mov dword [rbp + 0x1dc], 0x42340000
sete r8b
lea rdx, str.Visuals
lea rcx, [0x1400c8218]
call fcn.140033650
test al, al
je 0x14004f624
mov eax, 1
mov dword [0x14018a52c], eax
jmp 0x14004f62a
mov eax, dword [0x14018a52c]
cmp eax, 3
mov dword [rbp + 0x1e0], 0x433e0000
lea r9, [rbp + 0x1e0]
mov dword [rbp + 0x1e4], 0x42340000
sete r8b
lea rdx, str.Misc
lea rcx, [0x1400c8224]
call fcn.140033650
test al, al
je 0x14004f670
mov eax, 3
mov dword [0x14018a52c], eax
jmp 0x14004f676
mov eax, dword [0x14018a52c]
cmp eax, 4
mov dword [rbp + 0x1e8], 0x433e0000
lea r9, [rbp + 0x1e8]
mov dword [rbp + 0x1ec], 0x42340000
sete r8b
lea rdx, str.Settings
lea rcx, [0x1400c8220]
call fcn.140033650
test al, al
je 0x14004f6b9
mov dword [0x14018a52c], 4
call fcn.140015b80
mov eax, dword [0x14018a4dc]
mov r15d, dword [0x14018a52c]
cmp r15d, eax
jne 0x14004f6d6
movaps xmm6, xmm10
jmp 0x14004f6da
movaps xmm6, xmm13
mov r14, qword [0x14018a4b0]
test r14, r14
jne 0x14004f714
mov r8d, 0xfdd
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x14018a4dc]
mov r15d, dword [0x14018a52c]
mov r14, qword [0x14018a4b0]
movss xmm8, dword [r14 + 0x18]
movaps xmm0, xmm8
mulss xmm0, dword [0x140107784]
mulss xmm0, xmm6
addss xmm0, dword [0x14018a590]
comiss xmm9, xmm0
jbe 0x14004f73e
movaps xmm6, xmm9
jmp 0x14004f746
movaps xmm6, xmm10
minss xmm6, xmm0
movss dword [0x14018a590], xmm6
cmp r15d, eax
jne 0x14004f759
movaps xmm7, xmm10
jmp 0x14004f75d
movaps xmm7, xmm13
movss xmm0, dword [0x140107830]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm0, xmm8
mulss xmm0, xmm7
addss xmm0, dword [0x14018a594]
comiss xmm9, xmm0
jbe 0x14004f787
movaps xmm1, xmm9
jmp 0x14004f78f
movaps xmm1, xmm10
minss xmm1, xmm0
ucomiss xmm6, xmm9
movss dword [0x14018a594], xmm1
jp 0x14004f7ae
jne 0x14004f7ae
ucomiss xmm1, xmm9
jp 0x14004f7ae
jne 0x14004f7ae
mov dword [0x14018a4dc], r15d
movss xmm0, dword [r14 + 0x37e0]
lea rcx, [r14 + 0x47f8]
mulss xmm6, dword [r12 + 0x37e0]
lea rdx, [rbp + 0x4b8]
mov dword [rbp + 0x4b8], 0
movss dword [rbp + 0x4bc], xmm0
call fcn.14001e210
movss dword [r14 + 0x37e0], xmm6
cmp dword [0x14018a4dc], 0
jne 0x14004fa58
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c035c]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0358]
movss dword [rbp + 0x3ac], xmm1
movss xmm1, dword [0x1401c0364]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x3a8]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x3a8], xmm0
movss xmm0, dword [0x1401c0360]
movss dword [rbp + 0x3b4], xmm1
movss dword [rbp + 0x3b0], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a520]
mov r12d, eax
mov dword [rbp + 0x1f0], 0x438c8000
mov dword [rbp + 0x1f4], 0x41f00000
test eax, 0xff000000
je 0x14004f92a
test r14, r14
jne 0x14004f8a9
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14004f8d4
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106a47]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x1f0]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm11
lea rax, str.Aimbots
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c0314]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0310]
movss dword [rbp + 0x3bc], xmm1
movss xmm1, dword [0x1401c031c]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x3b8]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x3b8], xmm0
movss xmm0, dword [0x1401c0318]
movss dword [rbp + 0x3c4], xmm1
movss dword [rbp + 0x3c0], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a4c8]
mov r12d, eax
mov dword [rbp + 0x1f8], 0x438c8000
mov dword [rbp + 0x1fc], 0x42920000
test eax, 0xff000000
je 0x14004fa58
test r14, r14
jne 0x14004f9d7
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14004fa02
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106abd]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x1f8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm12
lea rax, str.Play_like_a_pro_with_federal_cheat_and_stay_unnoticed
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
cmp dword [0x14018a4dc], 2
jne 0x14004fcc1
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c035c]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0358]
movss dword [rbp + 0x3cc], xmm1
movss xmm1, dword [0x1401c0364]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x3c8]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x3c8], xmm0
movss xmm0, dword [0x1401c0360]
movss dword [rbp + 0x3d4], xmm1
movss dword [rbp + 0x3d0], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a520]
mov r12d, eax
mov dword [rbp + 0x80], 0x438c8000
mov dword [rbp + 0x84], 0x41f00000
test eax, 0xff000000
je 0x14004fb93
test r14, r14
jne 0x14004fb12
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14004fb3d
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106a5c]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x80]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm11
lea rax, str.Sniper_Hacks
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c0314]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0310]
movss dword [rbp + 0x3dc], xmm1
movss xmm1, dword [0x1401c031c]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x3d8]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x3d8], xmm0
movss xmm0, dword [0x1401c0318]
movss dword [rbp + 0x3e4], xmm1
movss dword [rbp + 0x3e0], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a4c8]
mov r12d, eax
mov dword [rbp + 0x200], 0x438c8000
mov dword [rbp + 0x204], 0x42920000
test eax, 0xff000000
je 0x14004fcc1
test r14, r14
jne 0x14004fc40
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14004fc6b
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106ae2]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x200]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm12
lea rax, str.Play_like_a_hacker_and_stay_hacker
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
cmp dword [0x14018a4dc], 1
jne 0x14004ff2a
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c035c]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0358]
movss dword [rbp + 0x30c], xmm1
movss xmm1, dword [0x1401c0364]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x308]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x308], xmm0
movss xmm0, dword [0x1401c0360]
movss dword [rbp + 0x314], xmm1
movss dword [rbp + 0x310], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a520]
mov r12d, eax
mov dword [rbp + 0x208], 0x438c8000
mov dword [rbp + 0x20c], 0x41f00000
test eax, 0xff000000
je 0x14004fdfc
test r14, r14
jne 0x14004fd7b
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14004fda6
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106a7e]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x208]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm11
lea rax, str.Location_Hacks
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c0314]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0310]
movss dword [rbp + 0x3ec], xmm1
movss xmm1, dword [0x1401c031c]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x3e8]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x3e8], xmm0
movss xmm0, dword [0x1401c0318]
movss dword [rbp + 0x3f4], xmm1
movss dword [rbp + 0x3f0], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a4c8]
mov r12d, eax
mov dword [rbp + 0x210], 0x438c8000
mov dword [rbp + 0x214], 0x42920000
test eax, 0xff000000
je 0x14004ff2a
test r14, r14
jne 0x14004fea9
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14004fed4
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106b10]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x210]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm12
lea rax, str.Your_eyes_will_gain_additional_abilities
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
cmp dword [0x14018a4dc], 3
jne 0x140050193
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c035c]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0358]
movss dword [rbp + 0x3fc], xmm1
movss xmm1, dword [0x1401c0364]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x3f8]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x3f8], xmm0
movss xmm0, dword [0x1401c0360]
movss dword [rbp + 0x404], xmm1
movss dword [rbp + 0x400], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a520]
mov r12d, eax
mov dword [rbp + 0x218], 0x438c8000
mov dword [rbp + 0x21c], 0x41f00000
test eax, 0xff000000
je 0x140050065
test r14, r14
jne 0x14004ffe4
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14005000f
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106a84]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x218]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm11
lea rax, str.Misc
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c0314]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0310]
movss dword [rbp + 0x40c], xmm1
movss xmm1, dword [0x1401c031c]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x408]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x408], xmm0
movss xmm0, dword [0x1401c0318]
movss dword [rbp + 0x414], xmm1
movss dword [rbp + 0x410], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a4c8]
mov r12d, eax
mov dword [rbp + 0x220], 0x438c8000
mov dword [rbp + 0x224], 0x42920000
test eax, 0xff000000
je 0x140050193
test r14, r14
jne 0x140050112
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14005013d
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106b4a]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x220]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm12
lea rax, str.Different_details_that_are_not_friends_with_others
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
cmp dword [0x14018a4dc], 4
jne 0x1400503fc
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c035c]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0358]
movss dword [rbp + 0x41c], xmm1
movss xmm1, dword [0x1401c0364]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x418]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x418], xmm0
movss xmm0, dword [0x1401c0360]
movss dword [rbp + 0x424], xmm1
movss dword [rbp + 0x420], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a520]
mov r12d, eax
mov dword [rbp + 0x228], 0x438c8000
mov dword [rbp + 0x22c], 0x41f00000
test eax, 0xff000000
je 0x1400502ce
test r14, r14
jne 0x14005024d
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x140050278
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x1400cb248]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x228]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm11
lea rax, str.Settings
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c0314]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0310]
movss dword [rbp + 0x42c], xmm1
movss xmm1, dword [0x1401c031c]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x428]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x428], xmm0
movss xmm0, dword [0x1401c0318]
movss dword [rbp + 0x434], xmm1
movss dword [rbp + 0x430], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a4c8]
mov r12d, eax
mov dword [rbp + 0x230], 0x438c8000
mov dword [rbp + 0x234], 0x42920000
test eax, 0xff000000
je 0x1400503fc
test r14, r14
jne 0x14005037b
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x1400503a6
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106b7f]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x230]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm12
lea rax, str.General_setting_of_the_entire_navigation_system
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
cmp dword [0x14018a4dc], 5
jne 0x140050665
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c035c]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0358]
movss dword [rbp + 0x43c], xmm1
movss xmm1, dword [0x1401c0364]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x438]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x438], xmm0
movss xmm0, dword [0x1401c0360]
movss dword [rbp + 0x444], xmm1
movss dword [rbp + 0x440], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a520]
mov r12d, eax
mov dword [rbp + 0x238], 0x438c8000
mov dword [rbp + 0x23c], 0x41f00000
test eax, 0xff000000
je 0x140050537
test r14, r14
jne 0x1400504b6
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x1400504e1
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106b87]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x238]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm11
lea rax, str.KeyBind
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
movss xmm1, dword [0x1401c0314]
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [0x1401c0310]
movss dword [rbp + 0x44c], xmm1
movss xmm1, dword [0x1401c031c]
mulss xmm1, dword [rcx + 0x37e0]
lea rcx, [rbp + 0x448]
mov r15, qword [rax + 0x290]
movss dword [rbp + 0x448], xmm0
movss xmm0, dword [0x1401c0318]
movss dword [rbp + 0x454], xmm1
movss dword [rbp + 0x450], xmm0
call fcn.140003ff0
mov r14, qword [0x14018a4c8]
mov r12d, eax
mov dword [rbp + 0x240], 0x438c8000
mov dword [rbp + 0x244], 0x42920000
test eax, 0xff000000
je 0x140050665
test r14, r14
jne 0x1400505e4
mov rcx, qword [r15 + 0x38]
mov r14, qword [rcx + 8]
mov rcx, qword [r14 + 0x40]
mov rax, qword [r15 + 0x98]
cmp qword [rcx + 8], rax
je 0x14005060f
mov r8d, 0x65b
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r15 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x140106bbb]
movss dword [rsp + 0x40], xmm9
lea r9, [rbp + 0x240]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm12
lea rax, str.Different_details_that_are_not_friends_with_othersb
mov rdx, r15
mov qword [rsp + 0x30], rax
mov rcx, r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x70], xmm0
call fcn.14002f940
mov rcx, qword [0x14018a4b0]
lea rdx, str.Child
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x140107824]
addss xmm1, dword [0x1401077fc]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
mov dword [rbp + 0x248], 0x44098000
mov dword [rbp + 0x24c], 0x43c58000
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rcx, qword [rcx + 0x3ea0]
call fcn.1400075d0
xor r12d, r12d
lea r8, [rbp + 0x248]
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea rcx, str.Child
call fcn.14000b970
movsxd rax, dword [0x14018a4dc]
cmp eax, 5
ja case.default.0x140050730
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x528b8]
add rcx, rdx
jmp rcx
lea rdx, [0x14018a53a]
lea rcx, str.External_Aimbot
call fcn.140035080
test al, al
je 0x1400507c8
cmp byte [0x14018a53a], 1
jne 0x1400507c8
mov ecx, 8
call fcn.1400b37d4
lea rcx, [0x14004b370]
mov r9, rax
lea r8, [0x140052f20]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x1400527d5
cmp dword [rbp + 0x38], r12d
je 0x14005283b
movaps xmm0, xmmword [rbp + 0x30]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005283b
xorps xmm0, xmm0
movaps xmmword [rbp + 0x30], xmm0
movdqa xmmword [rbp + 0x30], xmm0
mov r8, qword [0x14018a4b0]
mov r9, qword [r8 + 0x3ea0]
cmp byte [r8 + 0x48c3], r12b
je 0x140050817
cmp byte [r8 + 0x48c2], r12b
jne 0x140050817
test byte [r8 + 0x4740], 4
jne 0x14005092a
mov eax, dword [r8 + 0x4888]
cmp eax, dword [r8 + 0x473c]
jne 0x14005092a
test eax, eax
jne 0x1400508e1
jmp 0x14005092a
mov eax, dword [r8 + 0x4744]
test al, 1
je 0x14005092a
cmp qword [r8 + 0x3ea8], r9
je 0x140050837
test al, al
jns 0x14005092a
mov eax, dword [r8 + 0x3f00]
test eax, eax
je 0x14005085e
cmp eax, dword [r8 + 0x473c]
je 0x14005085e
cmp byte [r8 + 0x3f0d], r12b
jne 0x14005085e
cmp eax, dword [r9 + 0x74]
jne 0x14005092a
mov rcx, qword [r8 + 0x4880]
test rcx, rcx
je 0x1400508c1
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x1400508c1
cmp byte [rcx + 0xaf], r12b
je 0x1400508c1
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x1400508c1
mov edx, dword [rcx + 0xc]
bt edx, 0x1b
jb 0x14005089a
bt edx, 0x1a
jae 0x1400508c1
cmp qword [rax + 0x370], rcx
je 0x1400508c1
cmp rax, rcx
je 0x1400508c1
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400508a3
test dword [r8 + 0x4740], 0x100
je 0x14005092a
test byte [r8 + 0x4740], 4
jne 0x14005092a
mov eax, dword [r9 + 0x74]
cmp dword [r8 + 0x473c], eax
jne 0x1400508e1
cmp byte [r9 + 0xb0], r12b
jne 0x14005092a
xor ecx, ecx
call fcn.1400168f0
lea rcx, [0x140106bd0]
call fcn.140032930
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x140050925
mov r8d, 0x269a
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400110f0
lea rdx, [0x14018a4c7]
lea rcx, str.Aimbot_Drag
call fcn.140035080
test al, al
je 0x1400509c4
cmp byte [0x14018a4c7], 1
jne 0x1400509c4
mov ecx, 8
call fcn.1400b37d4
lea rcx, [0x14004b790]
mov r9, rax
lea r8, [0x140052f20]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x78]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x70], rax
test rax, rax
je 0x1400527e5
cmp dword [rbp + 0x78], r12d
je 0x14005283b
movaps xmm0, xmmword [rbp + 0x70]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005283b
xorps xmm0, xmm0
movaps xmmword [rbp + 0x70], xmm0
movdqa xmmword [rbp + 0x70], xmm0
mov r8, qword [0x14018a4b0]
mov r9, qword [r8 + 0x3ea0]
cmp byte [r8 + 0x48c3], r12b
je 0x140050a13
cmp byte [r8 + 0x48c2], r12b
jne 0x140050a13
test byte [r8 + 0x4740], 4
jne case.default.0x140050730
mov eax, dword [r8 + 0x4888]
cmp eax, dword [r8 + 0x473c]
jne case.default.0x140050730
test eax, eax
jne 0x140050af0
jmp case.default.0x140050730
mov eax, dword [r8 + 0x4744]
test al, 1
je case.default.0x140050730
cmp qword [r8 + 0x3ea8], r9
je 0x140050a33
test al, al
jns case.default.0x140050730
mov eax, dword [r8 + 0x3f00]
test eax, eax
je 0x140050a5a
cmp eax, dword [r8 + 0x473c]
je 0x140050a5a
cmp byte [r8 + 0x3f0d], r12b
jne 0x140050a5a
cmp eax, dword [r9 + 0x74]
jne case.default.0x140050730
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x4880]
test rcx, rcx
je 0x140050ac8
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x140050ac8
cmp byte [rcx + 0xaf], r12b
je 0x140050ac8
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x140050ac8
mov edx, dword [rcx + 0xc]
bt edx, 0x1b
jb 0x140050a9d
bt edx, 0x1a
jae 0x140050ac8
cmp qword [rax + 0x370], rcx
je 0x140050ac8
cmp rax, rcx
je 0x140050ac8
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140050aa6
test dword [r8 + 0x4740], 0x100
je case.default.0x140050730
test byte [r8 + 0x4740], 4
jne case.default.0x140050730
mov eax, dword [r9 + 0x74]
cmp dword [r8 + 0x473c], eax
jne 0x140050af0
cmp byte [r9 + 0xb0], r12b
jne case.default.0x140050730
xor ecx, ecx
call fcn.1400168f0
lea rcx, str.Ingame
call fcn.140032930
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x140050b34
mov r8d, 0x269a
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400110f0
jmp case.default.0x140050730
lea rdx, [0x14018a5ac]
lea rcx, str.Sniper_Scope
call fcn.140035080
test al, al
je 0x140050bd8
cmp byte [0x14018a5ac], 1
jne 0x140050bd8
mov ecx, 8
call fcn.1400b37d4
lea rcx, [0x14004b6b0]
mov r9, rax
lea r8, [0x140052f20]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x1400527f5
cmp dword [rbp + 0x68], r12d
je 0x14005283b
movaps xmm0, xmmword [rbp + 0x60]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005283b
xorps xmm0, xmm0
movaps xmmword [rbp + 0x60], xmm0
movdqa xmmword [rbp + 0x60], xmm0
mov r8, qword [0x14018a4b0]
mov r9, qword [r8 + 0x3ea0]
cmp byte [r8 + 0x48c3], r12b
je 0x140050c27
cmp byte [r8 + 0x48c2], r12b
jne 0x140050c27
test byte [r8 + 0x4740], 4
jne 0x140050d3a
mov eax, dword [r8 + 0x4888]
cmp eax, dword [r8 + 0x473c]
jne 0x140050d3a
test eax, eax
jne 0x140050cf1
jmp 0x140050d3a
mov eax, dword [r8 + 0x4744]
test al, 1
je 0x140050d3a
cmp qword [r8 + 0x3ea8], r9
je 0x140050c47
test al, al
jns 0x140050d3a
mov eax, dword [r8 + 0x3f00]
test eax, eax
je 0x140050c6e
cmp eax, dword [r8 + 0x473c]
je 0x140050c6e
cmp byte [r8 + 0x3f0d], r12b
jne 0x140050c6e
cmp eax, dword [r9 + 0x74]
jne 0x140050d3a
mov rcx, qword [r8 + 0x4880]
test rcx, rcx
je 0x140050cd1
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x140050cd1
cmp byte [rcx + 0xaf], r12b
je 0x140050cd1
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x140050cd1
mov edx, dword [rcx + 0xc]
bt edx, 0x1b
jb 0x140050caa
bt edx, 0x1a
jae 0x140050cd1
cmp qword [rax + 0x370], rcx
je 0x140050cd1
cmp rax, rcx
je 0x140050cd1
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140050cb3
test dword [r8 + 0x4740], 0x100
je 0x140050d3a
test byte [r8 + 0x4740], 4
jne 0x140050d3a
mov eax, dword [r9 + 0x74]
cmp dword [r8 + 0x473c], eax
jne 0x140050cf1
cmp byte [r9 + 0xb0], r12b
jne 0x140050d3a
xor ecx, ecx
call fcn.1400168f0
lea rcx, str.Ingame
call fcn.140032930
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x140050d35
mov r8d, 0x269a
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400110f0
lea rdx, [0x14018a4af]
lea rcx, str.Sniper_Quick_Switch
call fcn.140035080
test al, al
je 0x140050dbc
cmp byte [0x14018a4af], 1
jne 0x140050dbc
mov ecx, 8
call fcn.1400b37d4
lea rcx, [0x14004b810]
mov r9, rax
lea r8, [0x140052f20]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x2d0]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x2c8], rax
test rax, rax
je 0x140052805
lea rcx, [rbp + 0x2c8]
call fcn.14004a180
cmp dword [rbp + 0x2d0], r12d
jne 0x140050fc2
mov r8, qword [0x14018a4b0]
mov r9, qword [r8 + 0x3ea0]
cmp byte [r8 + 0x48c3], r12b
je 0x140050e0b
cmp byte [r8 + 0x48c2], r12b
jne 0x140050e0b
test byte [r8 + 0x4740], 4
jne case.default.0x140050730
mov eax, dword [r8 + 0x4888]
cmp eax, dword [r8 + 0x473c]
jne case.default.0x140050730
test eax, eax
jne 0x140050eea
jmp case.default.0x140050730
mov eax, dword [r8 + 0x4744]
test al, 1
je case.default.0x140050730
cmp qword [r8 + 0x3ea8], r9
je 0x140050e2b
test al, al
jns case.default.0x140050730
mov eax, dword [r8 + 0x3f00]
test eax, eax
je 0x140050e52
cmp eax, dword [r8 + 0x473c]
je 0x140050e52
cmp byte [r8 + 0x3f0d], r12b
jne 0x140050e52
cmp eax, dword [r9 + 0x74]
jne case.default.0x140050730
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x4880]
test rcx, rcx
je 0x140050ec2
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x140050ec2
cmp byte [rcx + 0xaf], r12b
je 0x140050ec2
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x140050ec2
mov edx, dword [rcx + 0xc]
bt edx, 0x1b
jb 0x140050e95
bt edx, 0x1a
jae 0x140050ec2
cmp qword [rax + 0x370], rcx
je 0x140050ec2
nop
cmp rax, rcx
je 0x140050ec2
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140050ea0
test dword [r8 + 0x4740], 0x100
je case.default.0x140050730
test byte [r8 + 0x4740], 4
jne case.default.0x140050730
mov eax, dword [r9 + 0x74]
cmp dword [r8 + 0x473c], eax
jne 0x140050eea
cmp byte [r9 + 0xb0], r12b
jne case.default.0x140050730
xor ecx, ecx
call fcn.1400168f0
lea rcx, [0x140106bd0]
call fcn.140032930
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x140050f2e
mov r8d, 0x269a
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400110f0
jmp case.default.0x140050730
lea rdx, [0x14018a59d]
lea rcx, str.Chams_Menu
call fcn.140035080
test al, al
je case.default.0x140050730
cmp byte [0x14018a59d], 1
jne case.default.0x140050730
mov ecx, 8
call fcn.1400b37d4
lea rcx, [fcn.1400018c0]
mov r9, rax
lea r8, [0x140052f20]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x2e0]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x2d8], rax
test rax, rax
je 0x140052818
lea rcx, [rbp + 0x2d8]
call fcn.14004a180
cmp dword [rbp + 0x2e0], r12d
je case.default.0x140050730
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
lea rdx, [0x14018a4c5]
lea rcx, str.Speed_Hack
call fcn.140035080
test al, al
je 0x14005100d
cmp byte [0x14018a4c5], 1
jne 0x14005100d
lea rdx, [0x14004b900]
lea rcx, [rbp + 0x7c0]
call fcn.140052c50
mov rcx, rax
call fcn.14004a180
cmp dword [rbp + 0x7c8], r12d
jne 0x140050fc2
mov r8, qword [0x14018a4b0]
mov r9, qword [r8 + 0x3ea0]
cmp byte [r8 + 0x48c3], r12b
je 0x14005105c
cmp byte [r8 + 0x48c2], r12b
jne 0x14005105c
test byte [r8 + 0x4740], 4
jne 0x14005116f
mov eax, dword [r8 + 0x4888]
cmp eax, dword [r8 + 0x473c]
jne 0x14005116f
test eax, eax
jne 0x140051126
jmp 0x14005116f
mov eax, dword [r8 + 0x4744]
test al, 1
je 0x14005116f
cmp qword [r8 + 0x3ea8], r9
je 0x14005107c
test al, al
jns 0x14005116f
mov eax, dword [r8 + 0x3f00]
test eax, eax
je 0x1400510a3
cmp eax, dword [r8 + 0x473c]
je 0x1400510a3
cmp byte [r8 + 0x3f0d], r12b
jne 0x1400510a3
cmp eax, dword [r9 + 0x74]
jne 0x14005116f
mov rcx, qword [r8 + 0x4880]
test rcx, rcx
je 0x140051106
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x140051106
cmp byte [rcx + 0xaf], r12b
je 0x140051106
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x140051106
mov edx, dword [rcx + 0xc]
bt edx, 0x1b
jb 0x1400510df
bt edx, 0x1a
jae 0x140051106
cmp qword [rax + 0x370], rcx
je 0x140051106
cmp rax, rcx
je 0x140051106
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400510e8
test dword [r8 + 0x4740], 0x100
je 0x14005116f
test byte [r8 + 0x4740], 4
jne 0x14005116f
mov eax, dword [r9 + 0x74]
cmp dword [r8 + 0x473c], eax
jne 0x140051126
cmp byte [r9 + 0xb0], r12b
jne 0x14005116f
xor ecx, ecx
call fcn.1400168f0
lea rcx, str.IN_LOBBY
call fcn.140032930
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x14005116a
mov r8d, 0x269a
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400110f0
lea rdx, [0x14018a4aa]
lea rcx, str.Magic_Bullet__SAFE_
call fcn.140035080
test al, al
je 0x1400511b7
cmp byte [0x14018a4aa], 1
jne 0x1400511b7
lea rdx, [0x14004b280]
lea rcx, [rbp + 0x7b0]
call fcn.140052c50
mov rcx, rax
call fcn.14004a180
cmp dword [rbp + 0x7b8], r12d
jne 0x140050fc2
mov r8, qword [0x14018a4b0]
mov r9, qword [r8 + 0x3ea0]
cmp byte [r8 + 0x48c3], r12b
je 0x140051206
cmp byte [r8 + 0x48c2], r12b
jne 0x140051206
test byte [r8 + 0x4740], 4
jne case.default.0x140050730
mov eax, dword [r8 + 0x4888]
cmp eax, dword [r8 + 0x473c]
jne case.default.0x140050730
test eax, eax
jne 0x1400512ea
jmp case.default.0x140050730
mov eax, dword [r8 + 0x4744]
test al, 1
je case.default.0x140050730
cmp qword [r8 + 0x3ea8], r9
je 0x140051226
test al, al
jns case.default.0x140050730
mov eax, dword [r8 + 0x3f00]
test eax, eax
je 0x14005124d
cmp eax, dword [r8 + 0x473c]
je 0x14005124d
cmp byte [r8 + 0x3f0d], r12b
jne 0x14005124d
cmp eax, dword [r9 + 0x74]
jne case.default.0x140050730
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x4880]
test rcx, rcx
je 0x1400512c2
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x1400512c2
cmp byte [rcx + 0xaf], r12b
je 0x1400512c2
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x1400512c2
mov edx, dword [rcx + 0xc]
bt edx, 0x1b
jb 0x140051290
bt edx, 0x1a
jae 0x1400512c2
cmp qword [rax + 0x370], rcx
je 0x1400512c2
nop dword [rax]
cmp rax, rcx
je 0x1400512c2
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400512a0
test dword [r8 + 0x4740], 0x100
je case.default.0x140050730
test byte [r8 + 0x4740], 4
jne case.default.0x140050730
mov eax, dword [r9 + 0x74]
cmp dword [r8 + 0x473c], eax
jne 0x1400512ea
cmp byte [r9 + 0xb0], r12b
jne case.default.0x140050730
xor ecx, ecx
call fcn.1400168f0
lea rcx, str.Login
call fcn.140032930
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x14005132e
mov r8d, 0x269a
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400110f0
jmp case.default.0x140050730
lea rax, [0x1400c8684]
mov dword [rsp + 0x28], 0xa
mov qword [rbp + 0x670], rax
lea r9, [rbp + 0x670]
lea rax, [0x1400c81f0]
mov dword [rsp + 0x20], 0xa
mov qword [rbp + 0x678], rax
lea rdx, [0x1401abd28]
lea rax, [0x1400c81f4]
mov qword [rbp + 0x680], rax
lea rcx, str.Wallhack
lea rax, [0x1400c81f8]
mov qword [rbp + 0x688], rax
lea rax, [0x1400c827c]
mov qword [rbp + 0x690], rax
lea rax, [0x1400c8280]
mov qword [rbp + 0x698], rax
lea rax, [0x1400c8284]
mov qword [rbp + 0x6a0], rax
lea rax, [0x1400c8288]
mov qword [rbp + 0x6a8], rax
lea rax, [0x1400c8254]
mov qword [rbp + 0x6b0], rax
lea rax, [0x1400c8224]
mov qword [rbp + 0x6b8], rax
call fcn.140036710
cmp byte [0x14018a53f], r12b
je 0x140051542
cmp byte [0x14018a539], r12b
jne case.default.0x140050730
mov rax, qword [0x1401ab6d8]
mov r15d, r12d
mov rdx, qword [0x1401ab6d0]
sub rax, rdx
mov byte [0x14018a539], 1
sar rax, 3
mov byte [0x14018a538], 1
mov dword [rbp - 0x48], 0x3f8147ae
mov dword [rbp - 0x44], 0x3f8147ae
mov dword [rbp - 0x40], 0x3f8147ae
mov dword [rbp - 0x3c], 0x3f8147ae
mov dword [rbp - 0x38], 0xeeb71a00
mov dword [rbp - 0x34], 0xed9f3adc
test rax, rax
je 0x1400514ce
mov r14, r12
mov rax, qword [0x14018a5b8]
mov r12, qword [r14 + rdx]
test rax, rax
jne 0x140051488
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400b37d4
mov dword [rax + 8], 0
mov qword [0x14018a5b8], rax
mov rcx, qword [rax]
lea r8, [rbp - 0x48]
mov r9d, Ordinal_26
mov qword [rsp + 0x20], 0
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1401ab6d8]
inc r15d
mov rdx, qword [0x1401ab6d0]
add r14, 8
sub rcx, rdx
movsxd rax, r15d
sar rcx, 3
cmp rax, rcx
jb 0x140051460
xor r12d, r12d
mov edx, 0x2bc
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Beep]
lea r9, str.Wallhack_applied
xor edx, edx
mov r8d, 0xbb8
lea rcx, [rbp + 0x1070]
call fcn.14004a1c0
mov rax, qword [0x1401c0548]
cmp rax, qword [0x1401c0550]
je 0x14005152e
lea rdx, [rbp + 0x1070]
mov r8d, 0x2010
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1401c0548], 0x2010
jmp case.default.0x140050730
lea r8, [rbp + 0x1070]
mov rdx, rax
call fcn.140052cc0
jmp case.default.0x140050730
cmp byte [0x14018a538], r12b
mov byte [0x14018a539], r12b
je case.default.0x140050730
mov rax, qword [0x1401ab6d8]
mov r15d, r12d
mov rdx, qword [0x1401ab6d0]
sub rax, rdx
mov byte [0x14018a538], r12b
sar rax, 3
mov dword [rbp - 0x60], 0xc1ef0000
mov dword [rbp - 0x5c], 0x3f8147ae
mov dword [rbp - 0x58], 0x3f8147ae
mov dword [rbp - 0x54], 0x3f8147ae
mov dword [rbp - 0x50], 0xeeb71a00
mov dword [rbp - 0x4c], 0xed9f3adc
test rax, rax
je 0x14005161e
mov r14, r12
nop word [rax + rax]
mov rax, qword [0x14018a5b8]
mov r12, qword [r14 + rdx]
test rax, rax
jne 0x1400515d8
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400b37d4
mov dword [rax + 8], 0
mov qword [0x14018a5b8], rax
mov rcx, qword [rax]
lea r8, [rbp - 0x60]
mov r9d, Ordinal_26
mov qword [rsp + 0x20], 0
mov rdx, r12
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1401ab6d8]
inc r15d
mov rdx, qword [0x1401ab6d0]
add r14, 8
sub rcx, rdx
movsxd rax, r15d
sar rcx, 3
cmp rax, rcx
jb 0x1400515b0
xor r12d, r12d
mov edx, 0x2bc
mov ecx, 0x190
call qword [sym.imp.KERNEL32.dll_Beep]
lea r9, str.wallhack_removed
xor edx, edx
mov r8d, 0xbb8
lea rcx, [rbp + 0x3080]
call fcn.14004a1c0
mov rax, qword [0x1401c0548]
cmp rax, qword [0x1401c0550]
je 0x140051665
lea rdx, [rbp + 0x3080]
jmp 0x140051510
lea r8, [rbp + 0x3080]
mov rdx, rax
call fcn.140052cc0
jmp case.default.0x140050730
cmp byte [0x14018a59c], 1
jne 0x1400516f8
mov ecx, 8
call fcn.1400b37d4
lea rcx, [0x14004b460]
mov r9, rax
lea r8, [0x140052f20]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14005282b
cmp dword [rbp + 0x58], r12d
je 0x14005283b
movaps xmm0, xmmword [rbp + 0x50]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005283b
xorps xmm0, xmm0
movaps xmmword [rbp + 0x50], xmm0
movdqa xmmword [rbp + 0x50], xmm0
mov r8, qword [0x14018a4b0]
mov r9, qword [r8 + 0x3ea0]
cmp byte [r8 + 0x48c3], r12b
je 0x140051747
cmp byte [r8 + 0x48c2], r12b
jne 0x140051747
test byte [r8 + 0x4740], 4
jne 0x140051861
mov eax, dword [r8 + 0x4888]
cmp eax, dword [r8 + 0x473c]
jne 0x140051861
test eax, eax
jne 0x140051811
jmp 0x140051861
mov eax, dword [r8 + 0x4744]
test al, 1
je 0x140051861
cmp qword [r8 + 0x3ea8], r9
je 0x140051767
test al, al
jns 0x140051861
mov eax, dword [r8 + 0x3f00]
test eax, eax
je 0x14005178e
cmp eax, dword [r8 + 0x473c]
je 0x14005178e
cmp byte [r8 + 0x3f0d], r12b
jne 0x14005178e
cmp eax, dword [r9 + 0x74]
jne 0x140051861
mov rcx, qword [r8 + 0x4880]
test rcx, rcx
je 0x1400517f1
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x1400517f1
cmp byte [rcx + 0xaf], r12b
je 0x1400517f1
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x1400517f1
mov edx, dword [rcx + 0xc]
bt edx, 0x1b
jb 0x1400517ca
bt edx, 0x1a
jae 0x1400517f1
cmp qword [rax + 0x370], rcx
je 0x1400517f1
cmp rax, rcx
je 0x1400517f1
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400517d3
test dword [r8 + 0x4740], 0x100
je 0x140051861
test byte [r8 + 0x4740], 4
jne 0x140051861
mov eax, dword [r9 + 0x74]
cmp dword [r8 + 0x473c], eax
jne 0x140051811
cmp byte [r9 + 0xb0], r12b
jne 0x140051861
xor ecx, ecx
call fcn.1400168f0
lea rcx, str.logo
call fcn.140032930
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x140051855
mov r8d, 0x269a
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400110f0
mov r8, qword [0x14018a4b0]
cmp byte [0x14018a5ad], 1
jne 0x1400518e7
mov ecx, 8
call fcn.1400b37d4
lea rcx, [0x14004b550]
mov r9, rax
lea r8, [0x140052f20]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140052847
cmp dword [rbp + 0x48], r12d
je 0x14005283b
movaps xmm0, xmmword [rbp + 0x40]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005283b
mov r8, qword [0x14018a4b0]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x40], xmm0
mov r9, qword [r8 + 0x3ea0]
cmp byte [r8 + 0x48c3], r12b
je 0x14005192f
cmp byte [r8 + 0x48c2], r12b
jne 0x14005192f
test byte [r8 + 0x4740], 4
jne 0x140051a47
mov eax, dword [r8 + 0x4888]
cmp eax, dword [r8 + 0x473c]
jne 0x140051a47
test eax, eax
jne 0x1400519fe
jmp 0x140051a47
mov eax, dword [r8 + 0x4744]
test al, 1
je 0x140051a47
cmp qword [r8 + 0x3ea8], r9
je 0x14005194f
test al, al
jns 0x140051a47
mov eax, dword [r8 + 0x3f00]
test eax, eax
je 0x140051976
cmp eax, dword [r8 + 0x473c]
je 0x140051976
cmp byte [r8 + 0x3f0d], r12b
jne 0x140051976
cmp eax, dword [r9 + 0x74]
jne 0x140051a47
mov rcx, qword [r8 + 0x4880]
test rcx, rcx
je 0x1400519de
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x1400519de
cmp byte [rcx + 0xaf], r12b
je 0x1400519de
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x1400519de
mov edx, dword [rcx + 0xc]
bt edx, 0x1b
jb 0x1400519b2
bt edx, 0x1a
jae 0x1400519de
cmp qword [rax + 0x370], rcx
je 0x1400519de
nop dword [rax + rax]
cmp rax, rcx
je 0x1400519de
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400519c0
test dword [r8 + 0x4740], 0x100
je 0x140051a47
test byte [r8 + 0x4740], 4
jne 0x140051a47
mov eax, dword [r9 + 0x74]
cmp dword [r8 + 0x473c], eax
jne 0x1400519fe
cmp byte [r9 + 0xb0], r12b
jne 0x140051a47
xor ecx, ecx
call fcn.1400168f0
lea rcx, str.Login__con_internet_apagado
call fcn.140032930
mov rax, qword [0x14018a4b0]
mov rcx, qword [rax + 0x3ea0]
test dword [rcx + 0xc], 0x2000000
jne 0x140051a42
mov r8d, 0x269a
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.1400110f0
lea rdx, [0x14018a59e]
lea rcx, str.Block_Internet
call fcn.140035080
test al, al
je 0x14005209b
cmp byte [0x14018a59e], 1
jne 0x140051e45
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
lea rcx, [rbp + 0x870]
call fcn.14003c600
lea rcx, [rbp + 0x870]
call fcn.14004c530
lea rcx, [rbp + 0x870]
call fcn.14003c510
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock0__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
lea rcx, [rbp + 0x890]
call fcn.14003c600
lea rcx, [rbp + 0x890]
call fcn.14004c530
lea rcx, [rbp + 0x890]
call fcn.14003c510
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirin_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x8b0]
call fcn.14003c600
lea rcx, [rbp + 0x8b0]
call fcn.14004c530
lea rcx, [rbp + 0x8b0]
call fcn.14003c510
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock1__dirout_actionblock_profileany_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x8d0]
call fcn.14003c600
lea rcx, [rbp + 0x8d0]
call fcn.14004c530
lea rcx, [rbp + 0x8d0]
call fcn.14003c510
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirin_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x8f0]
call fcn.14003c600
lea rcx, [rbp + 0x8f0]
call fcn.14004c530
lea rcx, [rbp + 0x8f0]
call fcn.14003c510
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock2__dirout_actionblock_profileany_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x910]
call fcn.14003c600
lea rcx, [rbp + 0x910]
call fcn.14004c530
lea rcx, [rbp + 0x910]
call fcn.14003c510
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlockMSI5_In__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x930]
call fcn.14003c600
lea rcx, [rbp + 0x930]
call fcn.14004c530
lea rcx, [rbp + 0x930]
call fcn.14003c510
mov ecx, 0xa0
mov qword [rbp + 0x628], r12
call fcn.1400b37d4
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlockMSI5_Out__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi5HD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x620], rax
mov qword [rbp + 0x630], 0x9b
mov qword [rbp + 0x638], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140107130]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140107140]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140107150]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140107160]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140107170]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140107180]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x140107190]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x1401071a0]
movups xmmword [rax + 0x80], xmm0
movsd xmm0, qword [0x1401071b0]
movsd qword [rax + 0x90], xmm0
movzx eax, word [0x1401071b8]
mov word [rcx + 0x98], ax
movzx eax, byte [0x1401071ba]
mov byte [rcx + 0x9a], al
mov byte [rcx + 0x9b], r12b
lea rcx, [rbp + 0x620]
call fcn.14004c530
lea rcx, [rbp + 0x620]
call fcn.14003c510
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2Bluestacks.exe_
lea rcx, [rbp + 0x560]
call fcn.14003c600
lea rcx, [rbp + 0x560]
call fcn.14004c530
lea rcx, [rbp + 0x560]
call fcn.14003c510
lea rdx, str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirin_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
lea rcx, [rbp + 0x2e8]
call fcn.14003c600
lea rcx, [rbp + 0x2e8]
call fcn.14004c530
mov rdx, qword [rbp + 0x300]
cmp rdx, 0xf
jbe 0x140051d07
mov rcx, qword [rbp + 0x2e8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051d02
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052860
call fcn.1400b3b20
mov ecx, 0xa0
mov qword [rbp + 0x5e8], r12
mov byte [rbp + 0x2e8], r12b
mov qword [rbp + 0x300], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x2f8], r12
call fcn.1400b37d4
movaps xmm0, xmmword [str.netsh_advfirewall_firewall_add_rule_name_TemporaryBlock3__dirout_actionblock_profileany_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_]
mov rcx, rax
mov qword [rbp + 0x5e0], rax
mov qword [rbp + 0x5f0], __WSAFDIsSet
mov qword [rbp + 0x5f8], 0x9f
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140107310]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140107320]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140107330]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140107340]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140107350]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140107360]
movups xmmword [rax + 0x60], xmm0
movaps xmm1, xmmword [0x140107370]
movups xmmword [rax + 0x70], xmm1
movaps xmm0, xmmword [0x140107380]
movups xmmword [rax + 0x80], xmm0
mov eax, dword [0x140107390]
mov dword [rcx + 0x90], eax
mov byte [rcx + 0x94], r12b
lea rcx, [rbp + 0x5e0]
call fcn.14004c530
lea rcx, [rbp + 0x5e0]
call fcn.14003c510
lea r9, str.Internet_disabled
xor edx, edx
mov r8d, 0xbb8
lea rcx, [rbp + 0x5090]
call fcn.14004a1c0
mov rax, qword [0x1401c0548]
cmp rax, qword [0x1401c0550]
je 0x140051e31
mov r8d, 0x2010
lea rdx, [rbp + 0x5090]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1401c0548], 0x2010
jmp 0x14005209b
lea r8, [rbp + 0x5090]
mov rdx, rax
call fcn.140052cc0
jmp 0x14005209b
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_nxtHD_Player.exe_
lea rcx, [rbp + 0x980]
call fcn.14003c600
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:ProgramDataBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0x9a0]
call fcn.14003c600
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacksHD_Player.exe_
lea rcx, [rbp + 0x9c0]
call fcn.14003c600
lea rdx, str.netsh_advfirewall_firewall_delete_rule_nameall_program_C:Program_FilesBlueStacks_msi2HD_Player.exe_
lea rcx, [rbp + 0x9e0]
call fcn.14003c600
lea rdx, str.netsh_advfirewall_firewall_delete_rule_name_TemporaryBlockMSI5_In__program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0xa00]
call fcn.14003c600
lea rdx, str.netsh_advfirewall_firewall_delete_rule_name_TemporaryBlockMSI5_Out__program_C:Program_FilesBlueStacks_msi5HD_Player.exe_
lea rcx, [rbp + 0xa20]
call fcn.14003c600
lea r14, [rbp + 0x980]
nop
xorps xmm0, xmm0
lea rax, str.cmd.exe
movups xmmword [rbp + 0x6c0], xmm0
mov dword [rbp + 0x6c0], reloc.WS2_32.dll_WSASetLastError
movups xmmword [rbp + 0x6d0], xmm0
mov qword [rbp + 0x6d8], rax
movabs rax, 0x7fffffffffffffff
mov dword [rbp + 0x6c4], 0x40
movups xmmword [rbp + 0x6e0], xmm0
movups xmmword [rbp + 0x6f0], xmm0
movups xmmword [rbp + 0x700], xmm0
movups xmmword [rbp + 0x710], xmm0
movups xmmword [rbp + 0x720], xmm0
mov rcx, qword [r14 + 0x10]
sub rax, rcx
cmp rax, 3
jb 0x1400528aa
cmp qword [r14 + 0x18], 0xf
mov rax, r14
jbe 0x140051f3e
mov rax, qword [r14]
mov qword [rsp + 0x30], rcx
lea r9, [0x140106890]
mov qword [rsp + 0x28], rax
lea rcx, [rbp + 0x600]
mov r8, r14
mov qword [rsp + 0x20], 3
movzx edx, bl
call fcn.14003cec0
mov rdx, qword [rbp + 0x618]
lea rax, [rbp + 0x600]
mov rcx, qword [rbp + 0x600]
cmp rdx, 0xf
cmova rax, rcx
mov qword [rbp + 0x6e0], rax
jbe 0x140051fbd
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051fb8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052860
call fcn.1400b3b20
lea rcx, [rbp + 0x6c0]
mov qword [rbp + 0x610], r12
mov qword [rbp + 0x618], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x600], r12b
mov dword [rbp + 0x6f0], r12d
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
je 0x14005200d
mov rcx, qword [rbp + 0x728]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x728]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add r14, 0x20
lea rax, [rbp + 0xa40]
cmp r14, rax
jne 0x140051ec0
lea r9, str.Internet_Activated
xor edx, edx
mov r8d, 0xbb8
lea rcx, [rbp + 0x70a0]
call fcn.14004a1c0
mov rax, qword [0x1401c0548]
cmp rax, qword [0x1401c0550]
je 0x14005206e
mov r8d, 0x2010
lea rdx, [rbp + 0x70a0]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1401c0548], 0x2010
jmp 0x14005207d
lea r8, [rbp + 0x70a0]
mov rdx, rax
call fcn.140052cc0
lea r9, [fcn.14003c510]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 6
lea rcx, [rbp + 0x980]
call fcn.1400b3810
lea rdx, [0x14018a59f]
lea rcx, str.Pause___Resume
call fcn.140035080
test al, al
je 0x140052107
mov r8d, dword [0x1401ab9c0]
xor edx, edx
mov ecx, 0xc00
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
test rax, rax
je 0x140052107
cmp byte [0x14018a4ad], r12b
mov rcx, rax
jne 0x1400520ed
call qword [sym.imp.ntdll.dll_NtSuspendProcess]
test eax, eax
jne 0x1400520fe
mov byte [0x14018a4ad], 1
jmp 0x1400520fe
call qword [sym.imp.ntdll.dll_NtResumeProcess]
test eax, eax
jne 0x1400520fe
mov byte [0x14018a4ad], r12b
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x14018a4c6]
lea rcx, str.Streamer_Mode
call fcn.140035080
test al, al
je 0x14005220a
cmp byte [0x14018a4c6], 1
jne 0x140052199
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x28], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x28]
xor edx, edx
lea r9, [0x1400b7f30]
mov qword [rsp + 0x20], rax
mov r8d, 1
lea rcx, [0x1400b7f40]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140052204
mov rax, qword [rbp - 0x28]
mov rcx, qword [rax]
mov r14, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x28]
mov rdx, rax
call r14
mov rcx, qword [rbp - 0x28]
jmp 0x1400521fe
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x20], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x20]
xor edx, edx
lea r9, [0x1400b7f30]
mov qword [rsp + 0x20], rax
mov r8d, 1
lea rcx, [0x1400b7f40]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140052204
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax]
mov r14, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x20]
mov rdx, rax
call r14
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rdx, [0x14018a4a9]
lea rcx, str.Exit
call fcn.140035080
test al, al
je 0x14005222e
cmp byte [0x14018a4a9], 1
je 0x140052857
mov dword [rsp + 0x28], 5
lea r9, [0x1401881b8]
lea rdx, [0x14018a530]
mov dword [rsp + 0x20], 2
lea rcx, str.Mode
call fcn.140036710
mov rcx, qword [0x14018a4b0]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
cmp byte [rax + 0xb3], 0
jne 0x140052298
movaps xmm1, xmm13
mov qword [rbp + 0x250], 0
lea rcx, [rbp + 0x250]
call fcn.140015490
call fcn.14000bb90
mov r15d, 1
mov ecx, r15d
call fcn.140004620
call fcn.14004a2a0
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r14, rax
test rax, rax
je 0x140052321
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140052318
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x7a0]
mov qword [rbp + 0x660], rcx
lea rdx, [rbp + 0x658]
mov rcx, r13
mov dword [rbp + 0x658], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x7a0], xmm0
mov dword [rbp + 0x668], reloc.WS2_32.dll_recv
call rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.1400110f0
mov rdx, qword [rbp + 0x470]
cmp rdx, 0xf
jbe 0x140052367
mov rcx, qword [rbp + 0x458]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052362
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052860
call fcn.1400b3b20
mov rdx, qword [rbp + 0x270]
mov qword [rbp + 0x468], r12
mov qword [rbp + 0x470], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x458], 0
cmp rdx, 0xf
jbe 0x1400523c1
mov rcx, qword [rbp + 0x258]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400523bc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052860
call fcn.1400b3b20
mov rdx, qword [rbp]
mov qword [rbp + 0x268], r12
mov qword [rbp + 0x270], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x258], 0
cmp rdx, 0xf
jbe 0x140052415
mov rcx, qword [rbp - 0x18]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052410
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052860
call fcn.1400b3b20
mov rdx, qword [rbp + 0x4b0]
mov qword [rbp - 8], r12
mov qword [rbp], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x18], 0
cmp rdx, 0xf
jbe 0x140052466
mov rcx, qword [rbp + 0x498]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052461
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052860
call fcn.1400b3b20
mov qword [rbp + 0x4a8], r12
mov qword [rbp + 0x4b0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x498], 0
call fcn.14000b060
mov rcx, qword [0x1401c01f0]
lea r8, [0x1401c01d8]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x830], xmm0
mov edx, r15d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1401c01f0]
lea r8, [rbp + 0x830]
mov rdx, qword [0x1401c01d8]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov r14, qword [0x14018a4b0]
cmp dword [r14 + 0x4870], 0
jg 0x1400524f4
mov r8d, 0x6fb
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r14 + 0x4878]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14003d980
mov rcx, qword [0x1401c01e0]
xor r8d, r8d
mov edx, r15d
mov rax, qword [rcx]
call qword [rax + 0x40]
movss xmm7, dword [0x1401077e0]
mov r14d, dword [rbp - 0x30]
jmp 0x14004d0e1
mov rbx, qword [0x14018a4b0]
test rbx, rbx
je 0x140052552
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x140052576
jmp 0x140052555
mov rdi, r12
mov r8d, 0x241
lea rdx, str.D:good_imguiAleGeyAleGeyAleGey_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14018a4b0]
test rbx, rbx
jne 0x14005259c
mov r8d, 0xfdd
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14018a4b0]
call fcn.14003e930
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x1400525b0
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400525be
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400525cd
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x90], r12
mov qword [rbx + 0xa0], r12
mov rax, qword [0x14018a4b0]
test rax, rax
je 0x1400525ed
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14018a4b0]
test rbx, rbx
je 0x140052610
mov rdi, qword [rbx + 0x98]
test rdi, rdi
jne 0x140052634
jmp 0x140052613
mov rdi, r12
mov r8d, 0xa6
lea rdx, str.D:good_imguiAleGeyAleGeyAleGey_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14018a4b0]
test rbx, rbx
jne 0x14005265a
mov r8d, 0xfdd
lea rdx, str.D:good_imguiAleGeyAleGeyAleGeyimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14018a4b0]
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x140052669
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [rbx + 0x88], r12
mov qword [rbx + 0x98], r12
mov rax, qword [0x14018a4b0]
test rax, rax
je 0x140052689
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14018a4b0]
mov qword [0x14018a4b0], rbx
call fcn.140006550
mov qword [0x14018a4b0], r12
test rbx, rbx
je 0x1400526d4
mov rcx, rbx
call fcn.14001ef10
mov rax, qword [0x14018a4b0]
test rax, rax
je 0x1400526cb
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1401c01d8]
test rcx, rcx
je 0x1400526ed
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401c01d8], r12
mov rcx, qword [0x1401c01e0]
test rcx, rcx
je 0x140052706
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401c01e0], r12
mov rcx, qword [0x1401c01f0]
test rcx, rcx
je 0x14005271f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401c01f0], r12
mov rcx, qword [0x1401c01e8]
test rcx, rcx
je 0x140052738
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1401c01e8], r12
mov rcx, r13
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x5a8]
mov rcx, qword [rbp + 0x5d0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm6, xmmword [rsp + 0x9240]
xor eax, eax
movaps xmm13, xmmword [rsp + 0x91d0]
movaps xmm12, xmmword [rsp + 0x91e0]
movaps xmm11, xmmword [rsp + 0x91f0]
movaps xmm10, xmmword [rsp + 0x9200]
movaps xmm9, xmmword [rsp + 0x9210]
movaps xmm8, xmmword [rsp + 0x9220]
movaps xmm7, xmmword [rsp + 0x9230]
movaps xmm14, xmmword [rsp + 0x91c0]
mov r14, qword [rsp + 0x9288]
movaps xmm15, xmmword [rsp + 0x91b0]
mov r13, qword [rsp + 0x9280]
mov r15, qword [rsp + 0x9290]
add rsp, 0x9250
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 6
mov dword [rbp + 0x38], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x78], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x68], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x2d0], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x2e0], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x58], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x48], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 6
mov dword [0x14018963c], 0x7ffffffe
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call fcn.1400528d0
mov rdx, qword [rbp + 0x5a8]
mov rcx, qword [rbp + 0x5d0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r15d
jmp 0x1400527b7
call fcn.140032290
int3
call fcn.140001bd0
int3