Function at 0x140062260
Capabilities:
Check for time delay via gettickcount
Check if file exists
Check mutex and terminate process on windows
Check mutex on windows
Create directory
Create process on windows
Create thread
Download url
Enumerate processes
Execute command
Get file attributes
Hide graphical window
Log keystrokes via polling
Receive data
Self delete
Set registry value
Terminate process
Terminate process by name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a50]
mov eax, 0x1b50
call fcn.1400ce480
sub rsp, rax
movaps xmmword [rsp + 0x1b40], xmm6
lea rcx, str.C:MiPrograma
movaps xmmword [rsp + 0x1b30], xmm7
movaps xmmword [rsp + 0x1b20], xmm8
movaps xmmword [rsp + 0x1b10], xmm9
movaps xmmword [rsp + 0x1b00], xmm10
movaps xmmword [rsp + 0x1af0], xmm11
movaps xmmword [rsp + 0x1ae0], xmm12
movaps xmmword [rsp + 0x1ad0], xmm13
movaps xmmword [rsp + 0x1ac0], xmm14
movaps xmmword [rsp + 0x1ab0], xmm15
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__mkdir]
lea rcx, str.C:_adb
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__mkdir]
mov eax, dword [0x1400f24c0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
xor r15d, r15d
mov dword [rbp + 0x30], eax
movsd xmm0, qword [str.C:_adb_adb.exe]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
movzx eax, word [0x1400f24c4]
mov word [rbp + 0x34], ax
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohl
mov qword [rbp + 0x40], reloc.WS2_32.dll_ntohs
movsd qword [rbp + 0x28], xmm0
mov byte [rbp + 0x36], 0
mov qword [rbp - 0x30], r15
call fcn.1400cdc38
movups xmm0, xmmword [str.C:_adbAdbWinApi.dll]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x28], reloc.WS2_32.dll_sendto
mov qword [rbp - 0x20], Ordinal_32
movups xmmword [rax], xmm0
mov ecx, dword [0x1400f24d8]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], r15b
lea rax, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rax, qword [rbp + 0x28]
mov qword [rbp + 0x798], rax
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x7a0], rax
movups xmm6, xmmword [rbp + 0x798]
call fcn.1400cd4e0
lea r8, [rbp - 0x10]
movaps xmmword [rbp - 0x10], xmm6
mov edx, eax
lea rcx, [rbp + 0x580]
call fcn.1400570f0
lea rcx, [rbp + 0x580]
call fcn.140057b50
mov rdx, qword [rbp + 0x598]
movzx ebx, al
cmp rdx, 7
jbe 0x14006240e
mov rcx, qword [rbp + 0x580]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062409
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov qword [rbp + 0x590], r15
mov qword [rbp + 0x598], 7
mov word [rbp + 0x580], r15w
test bl, bl
jne 0x14006260f
cmp qword [rbp - 0x20], 0xf
lea rax, [rbp - 0x38]
cmova rax, qword [rbp - 0x38]
mov qword [rbp + 0x7a8], rax
mov rax, qword [rbp - 0x28]
mov qword [rbp + 0x7b0], rax
movups xmm6, xmmword [rbp + 0x7a8]
call fcn.1400cd4e0
lea r8, [rbp - 0x10]
movaps xmmword [rbp - 0x10], xmm6
mov edx, eax
lea rcx, [rbp + 0x5a0]
call fcn.1400570f0
lea rcx, [rbp + 0x5a0]
call fcn.140057b50
mov rdx, qword [rbp + 0x5b8]
movzx ebx, al
cmp rdx, 7
jbe 0x1400624c7
mov rcx, qword [rbp + 0x5a0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400624c2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov qword [rbp + 0x5b0], r15
mov qword [rbp + 0x5b8], 7
mov word [rbp + 0x5a0], r15w
test bl, bl
jne 0x14006260f
movups xmm0, xmmword [str.https:__green_mandrill_989137.hostingersite.com_adb_adb.exe]
mov eax, dword [0x1400f2518]
lea r8, [rbp + 0x470]
movups xmm1, xmmword [0x1400f24f0]
mov dword [rbp + 0xbf0], eax
xor r9d, r9d
mov eax, dword [0x1400f24c0]
lea rdx, [rbp + 0xbb8]
movups xmmword [rbp + 0xbb8], xmm0
mov dword [rbp + 0x478], eax
xor ecx, ecx
movups xmm0, xmmword [0x1400f2500]
movzx eax, word [0x1400f24c4]
mov word [rbp + 0x47c], ax
movzx eax, byte [0x1400f24c6]
movups xmmword [rbp + 0xbd8], xmm0
mov byte [rbp + 0x47e], al
movsd xmm0, qword [0x1400f2510]
movsd qword [rbp + 0xbe8], xmm0
movsd xmm0, qword [str.C:_adb_adb.exe]
movsd qword [rbp + 0x470], xmm0
movups xmmword [rbp + 0xbc8], xmm1
mov qword [rsp + 0x20], r15
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__green_mandrill_989137.hostingersite.com_adb_AdbWinApi.dll]
lea r8, [rbp + 0x720]
movzx eax, word [0x1400f2560]
lea rdx, [rbp + 0xc60]
movaps xmm1, xmmword [0x1400f2530]
xor r9d, r9d
movaps xmmword [rbp + 0xc60], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1400f2540]
mov word [rbp + 0xca0], ax
mov eax, dword [0x1400f24d8]
movaps xmmword [rbp + 0xc80], xmm0
movups xmm0, xmmword [str.C:_adbAdbWinApi.dll]
mov dword [rbp + 0x730], eax
movzx eax, byte [0x1400f24dc]
movaps xmmword [rbp + 0xc70], xmm1
movaps xmm1, xmmword [0x1400f2550]
movups xmmword [rbp + 0x720], xmm0
mov byte [rbp + 0x734], al
movaps xmmword [rbp + 0xc90], xmm1
mov qword [rsp + 0x20], r15
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__github.com_Parrotsecurity12_exes_raw_refs_heads_main_desconectar_adb.bat]
lea r8, [rbp + 0xb38]
movaps xmm1, xmmword [0x1400f2580]
lea rdx, [rbp + 0xcb0]
movzx eax, byte [0x1400f25c0]
xor r9d, r9d
movaps xmmword [rbp + 0xcb0], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1400f2590]
movaps xmmword [rbp + 0xcd0], xmm0
movaps xmm0, xmmword [0x1400f25b0]
movaps xmmword [rbp + 0xcc0], xmm1
movaps xmm1, xmmword [0x1400f25a0]
movaps xmmword [rbp + 0xcf0], xmm0
movups xmm0, xmmword [str.C:WindowsTempdesconectar_adb.bat]
mov byte [rbp + 0xd00], al
mov eax, dword [0x1400f23c0]
movaps xmmword [rbp + 0xce0], xmm1
movups xmm1, xmmword [0x1400f23b0]
mov dword [rbp + 0xb58], eax
movups xmmword [rbp + 0xb38], xmm0
mov qword [rsp + 0x20], r15
movups xmmword [rbp + 0xb48], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
cmp qword [0x14022a0f0], 0xf
lea rbx, [0x14022a0d8]
mov rax, rbx
cmova rax, qword [0x14022a0d8]
mov qword [rbp + 0x7b8], rax
mov rax, qword [0x14022a0e8]
mov qword [rbp + 0x7c0], rax
movups xmm6, xmmword [rbp + 0x7b8]
call fcn.1400cd4e0
lea r8, [rbp - 0x10]
movaps xmmword [rbp - 0x10], xmm6
mov edx, eax
lea rcx, [rbp + 0x5c0]
call fcn.1400570f0
lea rcx, [rbp + 0x5c0]
call fcn.140057b50
mov rdx, qword [rbp + 0x5d8]
movzx edi, al
cmp rdx, 7
jbe 0x14006274e
mov rcx, qword [rbp + 0x5c0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062749
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov qword [rbp + 0x5d0], r15
mov qword [rbp + 0x5d8], 7
mov word [rbp + 0x5c0], r15w
test dil, dil
jne 0x140062819
mov eax, dword [0x1400f2600]
lea r8, [rbp + 0x818]
movups xmm0, xmmword [str.https:__green_mandrill_989137.hostingersite.com_adb_tdis.exe]
mov dword [rbp + 0xb30], eax
xor r9d, r9d
movzx eax, byte [0x1400f2604]
lea rdx, [rbp + 0xaf8]
movups xmm1, xmmword [0x1400f25d8]
mov byte [rbp + 0xb34], al
xor ecx, ecx
mov eax, dword [0x1400f2300]
movups xmmword [rbp + 0xaf8], xmm0
mov dword [rbp + 0x830], eax
movups xmm0, xmmword [0x1400f25e8]
movzx eax, byte [0x1400f2304]
movups xmmword [rbp + 0xb08], xmm1
mov byte [rbp + 0x834], al
movups xmmword [rbp + 0xb18], xmm0
mov qword [rsp + 0x20], r15
movsd xmm0, qword [0x1400f25f8]
movsd qword [rbp + 0xb28], xmm0
movups xmm0, xmmword [str.C:WindowsSystem32_tdis.exe]
movups xmmword [rbp + 0x818], xmm0
movsd xmm0, qword [0x1400f22f8]
movsd qword [rbp + 0x828], xmm0
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__github.com_Parrotsecurity12_exes_raw_refs_heads_main_desconectar_adb.bat]
lea r8, [rbp + 0xb60]
movaps xmm1, xmmword [0x1400f2580]
lea rdx, [rbp + 0xd10]
movzx eax, byte [0x1400f25c0]
xor r9d, r9d
movaps xmmword [rbp + 0xd10], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1400f2590]
movaps xmmword [rbp + 0xd30], xmm0
movaps xmm0, xmmword [0x1400f25b0]
movaps xmmword [rbp + 0xd20], xmm1
movaps xmm1, xmmword [0x1400f25a0]
movaps xmmword [rbp + 0xd50], xmm0
movups xmm0, xmmword [str.C:WindowsTempdesconectar_adb.bat]
mov byte [rbp + 0xd60], al
mov eax, dword [0x1400f23c0]
movaps xmmword [rbp + 0xd40], xmm1
movups xmm1, xmmword [0x1400f23b0]
mov dword [rbp + 0xb80], eax
movups xmmword [rbp + 0xb60], xmm0
mov qword [rsp + 0x20], r15
movups xmmword [rbp + 0xb70], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movzx eax, word [0x1400f2660]
lea r8, [rbp + 0x8f0]
movaps xmm0, xmmword [str.https:__github.com_Parrotsecurity12_exes_raw_refs_heads_main_conectar_emulador.bat]
lea rdx, [rbp + 0xc00]
movaps xmm1, xmmword [0x1400f2620]
xor r9d, r9d
movaps xmmword [rbp + 0xc00], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1400f2630]
mov word [rbp + 0xc50], ax
movzx eax, byte [0x1400f2662]
movaps xmmword [rbp + 0xc20], xmm0
movaps xmm0, xmmword [0x1400f2650]
movaps xmmword [rbp + 0xc10], xmm1
movaps xmm1, xmmword [0x1400f2640]
mov byte [rbp + 0xc52], al
mov eax, dword [0x1400f23e8]
movaps xmmword [rbp + 0xc40], xmm0
movups xmm0, xmmword [str.C:WindowsTempconectar_emulador.bat]
mov dword [rbp + 0x910], eax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
movaps xmmword [rbp + 0xc30], xmm1
movups xmm1, xmmword [0x1400f23d8]
mov word [rbp + 0x914], ax
movups xmmword [rbp + 0x8f0], xmm0
mov qword [rsp + 0x20], r15
movups xmmword [rbp + 0x900], xmm1
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov dword [rsp + 0x28], r15d
lea r8, str.C:WindowsTempconectar_emulador.bat
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.140061c40
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Credenciales_cargadas_correctamente.
test al, al
jne 0x1400629a8
lea rdx, str.No_se_encontraron_credenciales_guardadas.
call fcn.14006ace0
lea rdx, [0x14006aec0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp - 0x50], r15
call fcn.1400cdc38
movups xmm0, xmmword [str.BLACK_BULL_PANEL.exe]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x48], reloc.WS2_32.dll_sendto
mov qword [rbp - 0x40], Ordinal_32
movups xmmword [rax], xmm0
mov ecx, dword [0x1400f26d0]
mov dword [rax + 0x10], ecx
lea rcx, [rbp]
mov byte [rax + 0x14], r15b
call fcn.1400620a0
cmp qword [rbp - 0x40], 0xf
lea rdx, [rbp - 0x58]
mov r8, qword [rbp + 0x10]
lea rcx, [rbp]
cmova rdx, qword [rbp - 0x58]
mov r12d, 1
cmp qword [rbp + 0x18], 0xf
cmova rcx, qword [rbp]
cmp r8, qword [rbp - 0x48]
jne 0x140068985
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140068985
cmp qword [0x14022a0f0], 0xf
mov rax, qword [0x14022a0e8]
cmova rbx, qword [0x14022a0d8]
mov qword [rbp + 0x7d0], rax
mov qword [rbp + 0x7c8], rbx
movups xmm6, xmmword [rbp + 0x7c8]
call fcn.1400cd4e0
lea r8, [rbp - 0x10]
movaps xmmword [rbp - 0x10], xmm6
mov edx, eax
lea rcx, [rbp + 0x5e0]
call fcn.1400570f0
lea rcx, [rbp + 0x5e0]
call fcn.140057b50
mov rdx, qword [rbp + 0x5f8]
movzx ebx, al
cmp rdx, 7
jbe 0x140062ae3
mov rcx, qword [rbp + 0x5e0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062ade
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov qword [rbp + 0x5f0], r15
mov qword [rbp + 0x5f8], 7
mov word [rbp + 0x5e0], r15w
test bl, bl
jne 0x140062b06
call fcn.140057c40
mov qword [rsp + 0x28], r15
lea r8, [0x140056f00]
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 8
call fcn.1400cdc38
lea rcx, [0x140056630]
mov r9, rax
lea r8, [0x14006ce60]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x3e8]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x3e0], rax
test rax, rax
je 0x140068972
cmp dword [rbp + 0x3e8], r15d
je 0x140068968
movaps xmm0, xmmword [rbp + 0x3e0]
lea rcx, [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140068968
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x3e0], xmm0
call fcn.140056690
lea r8, str.C:_Users_WindowsSystem32opcionActivada.wav
mov edx, 0x104
lea rcx, [rbp + 0x1680]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, str.C:_Users_WindowsSystem32logintrick.wav
mov edx, 0x104
lea rcx, [rbp + 0x1790]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, str.C:_Users_WindowsSystem32opcionDesactivado.wav
mov edx, 0x104
lea rcx, [rbp + 0x18a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
movups xmm0, xmmword [str.https:__github.com_cosmos21312_cosmos21312_raw_main_glew32.dll]
mov eax, dword [0x1400f2798]
lea r8, str.C:_Windows_System32_glew32.dll
movups xmm1, xmmword [0x1400f2770]
mov dword [rbp + 0x950], eax
mov edx, 0x104
movzx eax, word [0x1400f279c]
lea rcx, [rbp + 0x1460]
movups xmmword [rbp + 0x918], xmm0
mov word [rbp + 0x954], ax
movups xmm0, xmmword [0x1400f2780]
movzx eax, byte [0x1400f279e]
movups xmmword [rbp + 0x928], xmm1
mov byte [rbp + 0x956], al
movups xmmword [rbp + 0x938], xmm0
movsd xmm0, qword [0x1400f2790]
movsd qword [rbp + 0x948], xmm0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x1460]
xor ecx, ecx
lea rdx, [rbp + 0x918]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movups xmm0, xmmword [str.https:__github.com_cosmos21312_cosmos21312_raw_main_glew64.dll]
mov eax, dword [0x1400f27d8]
lea r8, str.C:_Windows_System32_glew64.dll
movups xmm1, xmmword [0x1400f27b0]
mov dword [rbp + 0x990], eax
mov edx, 0x104
movzx eax, word [0x1400f27dc]
lea rcx, [rbp + 0x1570]
movups xmmword [rbp + 0x958], xmm0
mov word [rbp + 0x994], ax
movups xmm0, xmmword [0x1400f27c0]
movzx eax, byte [0x1400f27de]
movups xmmword [rbp + 0x968], xmm1
mov byte [rbp + 0x996], al
movups xmmword [rbp + 0x978], xmm0
movsd xmm0, qword [0x1400f27d0]
movsd qword [rbp + 0x988], xmm0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea r8, [rbp + 0x1570]
xor ecx, ecx
lea rdx, [rbp + 0x958]
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
call fcn.1400596c0
call fcn.1400596c0
mov rdx, rax
call fcn.1400595f0
test eax, eax
je 0x140062d56
mov r8d, eax
mov dword [0x140229fe0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140229fe8], rax
call fcn.1400596c0
call fcn.1400596c0
mov rdx, rax
call fcn.1400595f0
test eax, eax
je 0x140062d89
mov r8d, eax
mov dword [0x140229fe0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140229fe8], rax
mov r8d, ntohs
lea rdx, str.Bienvenido_
lea rcx, [0x140207a58]
call fcn.14006a520
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [0x140208ed0], rax
test rax, rax
jne 0x140063024
movups xmm6, xmmword [0x140207c38]
mov ecx, Ordinal_50
mov qword [rbp + 0x858], r15
call fcn.1400cdc38
movups xmm0, xmmword [str._Failed_to_create_mutex._Error_code]
mov qword [rbp + 0x850], rax
lea r9, [rbp - 0x10]
mov qword [rbp + 0x860], Ordinal_46
lea r8, [rbp + 0x850]
mov qword [rbp + 0x868], Ordinal_50
lea rdx, [rbp + 0x600]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400f2800]
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm6
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400f2810]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], r15b
mov eax, dword [0x1400f1130]
movups xmmword [rbp + 0x600], xmm0
mov qword [rbp + 0x610], recvfrom
movsd xmm0, qword [str.Notification]
movsd qword [rbp + 0x600], xmm0
mov qword [rbp + 0x618], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x608], eax
mov byte [rbp + 0x60c], r15b
call fcn.140055540
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_mutex._Error_code:
call fcn.14006ace0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x14006aec0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140062ee7
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062ee2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov rdx, qword [rbp - 0x40]
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp], r15b
cmp rdx, 0xf
jbe 0x140062f32
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062f2d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov rdx, qword [rbp - 0x20]
mov byte [rbp - 0x58], r15b
mov qword [rbp - 0x40], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x48], r15
cmp rdx, 0xf
jbe 0x140062f7d
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062f78
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov rdx, qword [rbp + 0x40]
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], r15b
cmp rdx, 0xf
jbe 0x140062fc8
mov rcx, qword [rbp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062fc3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov eax, r12d
lea r11, [rsp + 0x1b50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [rsp + 0x28], r15
lea r8, [0x14005f280]
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x140061240]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x14005f280]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
jne 0x1400630cf
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_thread._Error_code:
call fcn.14006ace0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x14006aec0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x140208ed0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140062eac
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140208ed0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r15
lea r8, [0x14005f220]
mov dword [rsp + 0x20], r15d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [0x14022a100]
call fcn.140077ab0
mov ebx, dword [0x140208f08]
test ebx, ebx
jne 0x1400631d4
cmp qword [0x140208f38], r15
jne 0x140063149
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400cdc38
mov qword [0x140208f38], rax
mov dword [rax + 8], r15d
xor edx, edx
mov ecx, 2
mov ebx, r15d
mov edi, r15d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x1200]
mov dword [rbp + 0x1200], 0x130
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x1200]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400631ce
nop dword [rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0x122c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jne 0x1400631ba
mov eax, dword [rbp + 0x121c]
cmp eax, edi
jle 0x1400631ba
mov ebx, dword [rbp + 0x1208]
mov edi, eax
lea rdx, [rbp + 0x1200]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140063190
mov dword [0x140208f08], ebx
mov rdi, qword [0x140208f38]
test rdi, rdi
jne 0x1400631fe
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400cdc38
mov ebx, dword [0x140208f08]
mov rdi, rax
mov qword [0x140208f38], rax
mov dword [rax + 8], r15d
mov dword [rdi + 8], ebx
test ebx, ebx
jne 0x140063281
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea rdx, [rbp + 0x1330]
mov dword [rbp + 0x1330], 0x130
mov rcx, rax
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
lea rdx, [rbp + 0x1330]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x14006327e
nop dword [rax]
nop word [rax + rax]
lea rdx, str.HD_Player.exe
lea rcx, [rbp + 0x135c]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
mov ebx, dword [rbp + 0x1338]
lea rdx, [rbp + 0x1330]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140063250
mov dword [rdi + 8], ebx
cmp dword [rdi + 8], r15d
je 0x14006329a
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rdi], rax
lea rax, [0x1400594c0]
mov dword [rbp + 0x530], 0x50
xor ecx, ecx
mov qword [rbp + 0x538], rax
mov dword [rbp + 0x534], 0x40
mov qword [rbp + 0x540], r15
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov qword [rbp + 0x548], rax
mov edx, 0x65
mov rbx, rax
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x550], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
mov edx, 0x65
mov qword [rbp + 0x560], r15
mov qword [rbp + 0x558], rax
mov rcx, rbx
lea rax, str.COSMOS_CHEAT
mov qword [rbp + 0x568], rax
mov qword [rbp + 0x570], rax
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x530]
mov qword [rbp + 0x578], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov edx, 0x20001
lea rcx, str.C:WindowsTempDarling.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
cvttss2si edi, dword [0x140207adc]
mov ecx, r12d
cvttss2si esi, dword [0x140207ad8]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140207adc]
xor ecx, ecx
mulss xmm0, dword [0x1400f2e38]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140207ad8]
lea r8, str.Example
mulss xmm0, dword [0x1400f2e38]
cdq
mov qword [rsp + 0x58], r15
sub eax, edx
mov rdx, qword [rbp + 0x570]
mov r9d, 0x80000000
mov qword [rsp + 0x50], r15
xor ecx, ecx
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
sar eax, 1
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], ebx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rcx, rax
mov qword [0x140208ee0], rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x140208ee0]
mov edx, 0xffffffec
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x140208ee0]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400f3090]
lea rdx, [rbp + 0x9b8]
mov rcx, qword [0x140208ee0]
movdqu xmmword [rbp + 0x9b8], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
cvttss2si r9d, dword [0x140207adc]
mov dword [rsp + 0x28], 0xa
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0xa
cvttss2si r8d, dword [0x140207ad8]
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov rcx, qword [0x140208ee0]
mov r8d, r12d
mov rdx, rax
call qword [sym.imp.USER32.dll_SetWindowRgn]
mov rcx, qword [0x140208ee0]
lea rdx, [0x140208ef8]
xorps xmm0, xmm0
movups xmmword [0x140208ef8], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x140208ee0]
lea rbx, [0x14023ec40]
mov qword [rsp + 0x58], rbx
lea rdi, [0x14023ebf8]
mov qword [rbp + 0x510], rax
lea rsi, [0x14023ebf0]
lea rax, [rbp + 0x78]
mov qword [rbp + 0x4f4], r15
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x4e0]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r12d
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x80]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x508], 2
mov qword [rbp + 0x520], 2
mov qword [rbp + 0x4e0], r15
mov dword [rbp + 0x4f0], Ordinal_32
mov dword [rbp + 0x4e8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x4ec], r12d
mov dword [rbp + 0x504], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x4fc], r12
mov qword [rbp + 0x518], r12
mov dword [rbp + 0x80], 0xb000
mov dword [rbp + 0x84], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov r13d, 5
cmp eax, 0x887a0004
jne 0x1400635fb
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x78]
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x4e0]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r13d
mov dword [rsp + 0x30], 7
lea rax, [rbp + 0x80]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x140068944
mov rcx, qword [0x14023ebf0]
lea r9, [rbp + 0x3d8]
lea r8, [0x1400f0778]
xor edx, edx
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [0x14023ebf8]
lea r9, [0x14023ebe8]
mov rdx, qword [rbp + 0x3d8]
xor r8d, r8d
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [rbp + 0x3d8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140208ee0]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140208ee0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140208ce0]
test rbx, rbx
je 0x140063684
inc dword [rbx + 0xf4]
mov rdx, qword [0x140208cd0]
mov ecx, 0x5e00
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test rax, rax
je 0x1400636a6
xor edx, edx
mov rcx, rax
call fcn.1400020d0
jmp 0x1400636a9
mov rax, r15
mov qword [0x140208ce0], rax
call fcn.140006980
test rbx, rbx
je 0x1400636c3
mov qword [0x140208ce0], rbx
jmp 0x1400636ca
mov rbx, qword [0x140208ce0]
test rbx, rbx
jne 0x1400636f0
mov r8d, 0xfe3
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140208ce0]
movss xmm3, dword [0x1400f2f38]
lea rdi, [0x1400ecaa0]
mov qword [rbp + 0x480], 0xffffffffffffffff
lea rdx, [0x14019a950]
mov qword [rbp + 0x488], 0xffffffffffffffff
mov r8d, 0x26a20
mov qword [rbp + 0x490], 0xffffffffffffffff
mov qword [rbp + 0x498], 0xffffffffffffffff
mov dword [rbp + 0x4a0], 0xffffffff
mov qword [rbp + 0x4a4], 0xfffffffffffffffd
mov dword [rbp + 0x4ac], 0xffffffff
mov qword [rbp + 0x4b0], r15
mov rcx, qword [rbx + 0x58]
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
call fcn.140030070
movss xmm3, dword [0x1400f2f50]
lea rdx, [0x1401433b0]
mov rcx, qword [rbx + 0x58]
mov r8d, 0x25958
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r15
call fcn.140030070
movss xmm3, dword [0x1400f2f30]
lea rdx, [0x14019a950]
mov rcx, qword [rbx + 0x58]
mov r8d, 0x26a20
mov qword [rsp + 0x28], rdi
mov qword [0x140240278], rax
mov qword [rsp + 0x20], r15
call fcn.140030070
movss xmm6, dword [0x1400f2f34]
lea rdx, [0x1401f37f0]
mov rcx, qword [rbx + 0x58]
movaps xmm3, xmm6
mov qword [rsp + 0x28], rdi
mov r8d, 0xb80
mov qword [0x14023ecb0], rax
mov qword [rsp + 0x20], r15
call fcn.140030070
mov rcx, qword [0x14023ebf8]
lea r9, [rbp + 0x480]
mov qword [0x14023ec60], rax
lea rdx, [0x140106110]
lea rax, [0x140208d40]
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
mov r8d, 0x3d29a
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x14023ebf8]
lea rax, [0x140208e20]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x480]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401f4370]
mov r8d, 0x12037
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x14023ebf8]
lea rax, [0x140208ed8]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x480]
mov qword [rsp + 0x28], rax
lea rdx, [0x140208f11]
mov r8, r12
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [0x14023ebf8]
lea rax, [0x140208d48]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x480]
mov qword [rsp + 0x28], rax
lea rdx, [0x1401c1380]
mov r8d, 0x31c39
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
cmp qword [0x140208ef0], r15
jne 0x14006391a
mov rcx, qword [0x14023ebf8]
lea rax, [0x140208ef0]
mov qword [rsp + 0x30], r15
lea r9, [rbp + 0x480]
mov qword [rsp + 0x28], rax
lea rdx, [0x140168d10]
mov r8d, 0x31c39
mov qword [rsp + 0x20], r15
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
mov rcx, qword [rbx + 0x58]
lea rdx, [0x1401f2fc0]
mov qword [rsp + 0x28], rdi
movaps xmm3, xmm6
mov r8d, 0x824
mov qword [rsp + 0x20], r15
call fcn.140030070
xor ecx, ecx
mov qword [0x140240270], rax
call fcn.1400285e0
mov rbx, qword [0x140208ce0]
mov rsi, qword [0x140208ee0]
test rbx, rbx
jne 0x14006397f
mov r8d, 0xfe3
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140208ce0]
cmp qword [rbx + 0x98], r15
je 0x1400639a2
mov r8d, reloc.WS2_32.dll_WSACleanup
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULL_backendsimgui_impl_win32.cpp
lea rcx, str.io.BackendPlatformUserData__nullptr___Already_initialized_a_platform_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x140063b1e
lea rcx, [rbp + 0x4c8]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140063b1e
mov rax, qword [0x140208ce0]
test rax, rax
je 0x1400639de
inc dword [rax + 0xf4]
mov rdx, qword [0x140208cd0]
mov ecx, 0x48
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rdi, rax
test rax, rax
je 0x140063a11
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
mov qword [rdi + 0x40], rax
jmp 0x140063a14
mov rdi, r15
mov qword [rbx + 0x98], rdi
lea rax, str.imgui_impl_win32
mov qword [rbx + 0x88], rax
or dword [rbx + 0xc], 6
mov rbx, qword [0x140208ce0]
mov qword [rdi], rsi
mov rax, qword [rbp + 0x4d0]
mov qword [rdi + 0x20], rax
mov rax, qword [rbp + 0x4c8]
mov qword [rdi + 0x18], rax
mov dword [rdi + 0x28], 9
cmp dword [rbx + 0x48a0], r15d
jg 0x140063a77
mov r8d, 0x6fd
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a8]
mov rbx, r15
mov rcx, qword [rax]
lea rax, str.xinput1_4.dll
mov qword [rbp + 0x870], rax
lea rax, str.xinput1_3.dll
mov qword [rbp + 0x878], rax
lea rax, str.xinput9_1_0.dll
mov qword [rbp + 0x880], rax
lea rax, str.xinput1_2.dll
mov qword [rbp + 0x888], rax
lea rax, str.xinput1_1.dll
mov qword [rcx + 0x28], rsi
mov qword [rbp + 0x890], rax
mov byte [rdi + 0x2d], r12b
mov rcx, qword [rbp + rbx*8 + 0x870]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
jne 0x140063af2
inc rbx
cmp rbx, r13
jl 0x140063ad2
jmp 0x140063b1e
lea rdx, str.XInputGetCapabilities
mov qword [rdi + 0x30], rsi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.XInputGetState
mov rcx, rsi
mov qword [rdi + 0x38], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rdi + 0x40], rax
mov rax, qword [0x140208ce0]
mov r14, qword [0x14023ec40]
mov rsi, qword [0x14023ebf8]
test rax, rax
jne 0x140063b59
mov r8d, 0xfe3
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140208ce0]
lea rdi, [rax + 8]
cmp qword [rdi + 0x98], r15
je 0x140063b87
mov r8d, 0x221
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULL_backendsimgui_impl_dx11.cpp
lea rcx, str.io.BackendRendererUserData__nullptr___Already_initialized_a_renderer_backend__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140208ce0]
test rax, rax
je 0x140063b92
inc dword [rax + 0xf4]
mov rdx, qword [0x140208cd0]
mov ecx, 0x78
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov rbx, rax
test rax, rax
je 0x140063bd9
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
mov dword [rax + 0x70], 0x1388
mov dword [rax + 0x74], 0x2710
jmp 0x140063bdc
mov rbx, r15
mov qword [rdi + 0x98], rbx
lea rax, str.imgui_impl_dx11
mov qword [rdi + 0x88], rax
lea r8, [rbp + 0x88]
or dword [rdi + 4], 8
lea rdx, [0x1400eddd0]
mov qword [rbp + 0x88], r15
mov rcx, rsi
mov qword [rbp + 0x90], r15
mov qword [rbp + 0x440], r15
mov rax, qword [rsi]
mov r9, qword [rax]
call r9
test eax, eax
jne 0x140063c80
mov rcx, qword [rbp + 0x88]
lea r8, [rbp + 0x90]
lea rdx, [0x1400edde0]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x140063c80
mov rcx, qword [rbp + 0x90]
lea r8, [rbp + 0x440]
lea rdx, [0x1400eddf0]
mov rax, qword [rcx]
mov r9, qword [rax + 0x30]
call r9
test eax, eax
jne 0x140063c80
mov qword [rbx], rsi
mov qword [rbx + 8], r14
mov rax, qword [rbp + 0x440]
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x140063c92
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x140063ca4
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [0x140208ce0]
test rax, rax
jne 0x140063ce4
mov r8d, 0xb5b
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140208ce0]
movss xmm0, dword [0x1400f2ed0]
xorps xmm10, xmm10
movss xmm1, dword [0x1400f2eb4]
xor bl, bl
movss xmm12, dword [0x1400f2e98]
movss xmm9, dword [0x1400f2fe4]
movss xmm8, dword [0x1400f2f24]
movss xmm14, dword [0x1400f2e5c]
movss xmm15, dword [0x1400f2df8]
movss xmm13, dword [0x1400f2f68]
movss xmm7, dword [0x1400f2fb4]
movss xmm11, dword [0x1400f3030]
unpcklps xmm0, xmm1
movsd qword [rax + 0x381c], xmm0
xorps xmm0, xmm0
mov dword [rax + 0x3824], 0x3f800000
mov qword [rax + 0x37f0], 0x40000000
mov dword [rax + 0x3818], r15d
unpcklps xmm0, xmm10
movsd qword [rax + 0x37e8], xmm0
mov dword [rax + 0x3810], 0x41200000
mov dword [rax + 0x38a8], r15d
mov dword [rbp - 0x18], ebx
nop dword [rax + rax]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, [rbp + 0xb88]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140063e01
nop
lea rcx, [rbp + 0xb88]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0xb88]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0xb90], 0x12
lea rcx, [rbp + 0xb88]
movzx ebx, bl
cmove ebx, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140063db0
mov dword [rbp - 0x18], ebx
test bl, bl
jne 0x1400685ba
mov ecx, 0x77
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140063e1e
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x140207ad0]
mov rax, qword [0x140208ce0]
test rax, rax
jne 0x140063e4b
mov r8d, 0xfe3
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140208ce0]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x140207aa8]
mulss xmm0, dword [0x1400f2f08]
cmp ecx, 0xff
jg 0x140063e74
cmp byte [reloc.WS2_32.dll_accept], 0
mov eax, Ordinal_301
jne 0x140063e77
mov eax, r15d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x140207aa8], r8d
cmp r8d, 0xff
jle 0x140063eb4
mov dword [0x140207aa8], 0xff
mov r8d, 0xff
mov rcx, qword [0x140208ee0]
xor edx, edx
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x140207aa8], 0
mov edx, r15d
mov rcx, qword [0x140208ee0]
cmovg edx, r13d
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, Ordinal_50
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx ebx, ax
mov ecx, reloc.WLDAP32.dll_Ordinal_50
shr ebx, 0xf
and bl, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx edi, ax
mov ecx, 0x33
shr edi, 0xf
and dil, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx esi, ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
shr esi, 0xf
and sil, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r14d, ax
mov ecx, WSAStartup
shr r14d, 0xf
and r14b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r15d, ax
mov ecx, WSAStartup
shr r15d, 0xf
and r15b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r12d, ax
mov ecx, reloc.WS2_32.dll_WSAStartup
shr r12d, 0xf
and r12b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx r13d, ax
mov ecx, 0x51
shr r13d, 0xf
and r13b, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, 0x45
and al, 1
mov dword [rbp + 0x20], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
mov ecx, gethostname
and al, 1
mov dword [rbp - 0x80], eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x14022a3fc]
cmp ecx, 1
jne 0x140063fce
test bl, bl
je 0x140064081
cmp byte [0x140208cdb], 0
jmp 0x140064071
cmp ecx, 2
jne 0x140063fe8
test dil, dil
je 0x140064081
cmp byte [0x140208f16], 0
jmp 0x140064071
cmp ecx, 3
jne 0x140063fff
test sil, sil
je 0x140064081
cmp byte [0x140208d6b], 0
jmp 0x140064071
cmp ecx, 4
jne 0x140064012
test r14b, r14b
je 0x140064081
cmp byte [0x140208d61], 0
jmp 0x140064071
cmp ecx, 5
jne 0x140064025
test r15b, r15b
je 0x140064081
cmp byte [0x140208d6e], 0
jmp 0x140064071
cmp ecx, 6
jne 0x140064038
test r12b, r12b
je 0x140064081
cmp byte [0x140208d69], 0
jmp 0x140064071
cmp ecx, 7
jne 0x14006404b
test r13b, r13b
je 0x140064081
cmp byte [0x140208cde], 0
jmp 0x140064071
cmp ecx, 8
jne 0x14006405f
cmp byte [rbp + 0x20], 0
je 0x140064081
cmp byte [0x140208cfc], 0
jmp 0x140064071
cmp ecx, 9
jne 0x140064081
cmp byte [rbp - 0x80], 0
je 0x140064081
cmp byte [0x140208d6c], 0
jne 0x140064081
cmp byte [0x140208f13], 0
sete byte [0x140208f13]
mov ecx, dword [0x140208d64]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064126
cmp byte [0x140208e3f], 1
jne 0x140064126
mov ecx, 8
call fcn.1400cdc38
lea rcx, [0x14005ea90]
mov r9, rax
lea r8, [0x14006ce60]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x438]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x430], rax
test rax, rax
je 0x1400688a2
cmp dword [rbp + 0x438], 0
je 0x140068962
movaps xmm0, xmmword [rbp + 0x430]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140068962
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x430], xmm0
mov eax, dword [0x140208d50]
cmp eax, 1
jne 0x140064145
test bl, bl
je 0x1400641f8
cmp byte [0x140208cdb], 0
jmp 0x1400641e8
cmp eax, 2
jne 0x14006415f
test dil, dil
je 0x1400641f8
cmp byte [0x140208f16], 0
jmp 0x1400641e8
cmp eax, 3
jne 0x140064176
test sil, sil
je 0x1400641f8
cmp byte [0x140208d6b], 0
jmp 0x1400641e8
cmp eax, 4
jne 0x140064189
test r14b, r14b
je 0x1400641f8
cmp byte [0x140208d61], 0
jmp 0x1400641e8
cmp eax, 5
jne 0x14006419c
test r15b, r15b
je 0x1400641f8
cmp byte [0x140208d6e], 0
jmp 0x1400641e8
cmp eax, 6
jne 0x1400641af
test r12b, r12b
je 0x1400641f8
cmp byte [0x140208d69], 0
jmp 0x1400641e8
cmp eax, 7
jne 0x1400641c2
test r13b, r13b
je 0x1400641f8
cmp byte [0x140208cde], 0
jmp 0x1400641e8
cmp eax, 8
jne 0x1400641d6
cmp byte [rbp + 0x20], 0
je 0x1400641f8
cmp byte [0x140208cfc], 0
jmp 0x1400641e8
cmp eax, 9
jne 0x1400641f8
cmp byte [rbp - 0x80], 0
je 0x1400641f8
cmp byte [0x140208d6c], 0
jne 0x1400641f8
cmp byte [0x140208f12], 0
sete byte [0x140208f12]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x140068914
mov ecx, dword [0x140208d5c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064222
mov byte [0x140209f5f], 1
mov ecx, dword [0x140208f20]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064242
cmp byte [0x140208cdd], 1
jne 0x140064242
mov byte [0x140209f5d], 1
mov ecx, dword [0x140208d58]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064262
cmp byte [0x140208cdc], 1
jne 0x140064262
mov byte [0x140209f5e], 1
mov ecx, dword [0x140208d54]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov r12d, 1
test r12b, al
je 0x140064300
cmp byte [0x140208e3c], 0
je 0x140064300
mov ecx, r12d
call fcn.1400cdc38
lea rcx, [rbp + 0x428]
xor r15d, r15d
mov qword [rsp + 0x28], rcx
lea r8, [0x14006ce90]
xor ecx, ecx
mov dword [rsp + 0x20], r15d
mov r9, rax
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x420], rax
test rax, rax
je 0x1400688b8
cmp dword [rbp + 0x428], r15d
je 0x140068968
movaps xmm0, xmmword [rbp + 0x420]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140068968
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x420], xmm0
jmp 0x140064303
xor r15d, r15d
mov ecx, dword [0x140208cf4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400643a5
cmp byte [0x140208f0f], 0
je 0x1400643a5
mov ecx, 8
call fcn.1400cdc38
lea rcx, [0x14005ee60]
mov r9, rax
lea r8, [0x14006ce60]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x418]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x410], rax
test rax, rax
je 0x1400688cb
cmp dword [rbp + 0x418], 0
je 0x140068968
movaps xmm0, xmmword [rbp + 0x410]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140068968
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x410], xmm0
mov ecx, dword [0x140208e30]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064433
cmp byte [0x140208e3d], 0
je 0x140064433
mov rcx, r12
call fcn.1400cdc38
lea rcx, [rbp + 0x408]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x14006cec0]
xor ecx, ecx
mov dword [rsp + 0x20], r15d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x400], rax
test rax, rax
je 0x1400688de
cmp dword [rbp + 0x408], 0
je 0x140068968
movaps xmm0, xmmword [rbp + 0x400]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140068968
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x400], xmm0
mov ecx, dword [0x140208f24]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400644c1
cmp byte [0x140208e36], 0
je 0x1400644c1
mov rcx, r12
call fcn.1400cdc38
lea rcx, [rbp + 0x3f8]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x14006d0c0]
xor ecx, ecx
mov dword [rsp + 0x20], r15d
xor edx, edx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x3f0], rax
test rax, rax
je 0x1400688f1
cmp dword [rbp + 0x3f8], 0
je 0x140068968
movaps xmm0, xmmword [rbp + 0x3f0]
lea rcx, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140068968
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x3f0], xmm0
mov ecx, dword [0x140208f30]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400647f9
cmp byte [0x140208f0c], 0
je 0x1400647f9
xor edx, edx
cmp byte [0x140208cda], dl
jne 0x1400646a2
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov r8d, reloc.WLDAP32.dll_Ordinal_22
lea rdx, str.Fake_Lag_ON:_Activado_
lea rcx, [0x140207a58]
call fcn.14006a520
movups xmm6, xmmword [0x140207c38]
mov qword [rbp + 0x630], r15
mov ecx, reloc.WLDAP32.dll_Ordinal_32
xorps xmm0, xmm0
mov qword [rbp + 0x638], r15
movups xmmword [rbp + 0x620], xmm0
call fcn.1400cdc38
movups xmm0, xmmword [str.Fake_Lag_ON:_Activado_]
mov qword [rbp + 0x620], rax
lea r9, [rsp + 0x70]
mov qword [rbp + 0x630], reloc.WLDAP32.dll_Ordinal_22
lea r8, [rbp + 0x620]
mov qword [rbp + 0x638], Ordinal_32
lea rdx, [rbp + 0x640]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400f2928]
mov dword [rax + 0x10], ecx
xorps xmm0, xmm0
movzx ecx, word [0x1400f292c]
mov word [rax + 0x14], cx
mov byte [rax + 0x16], 0
mov eax, dword [0x1400f1130]
movups xmmword [rbp + 0x640], xmm0
mov qword [rbp + 0x650], recvfrom
movsd xmm0, qword [str.Notification]
movsd qword [rbp + 0x640], xmm0
mov qword [rbp + 0x658], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x648], eax
mov byte [rbp + 0x64c], 0
movdqa xmmword [rsp + 0x70], xmm6
call fcn.140055540
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32opcionActivada.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov byte [0x140208cda], 1
jmp 0x1400647f9
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, str.Fake_Lag_OFF:_Desactivado_
lea rcx, [0x140207a58]
call fcn.14006a520
movups xmm6, xmmword [0x140207c38]
mov qword [rbp + 0x670], r15
mov ecx, reloc.WLDAP32.dll_Ordinal_32
xorps xmm0, xmm0
mov qword [rbp + 0x678], r15
movups xmmword [rbp + 0x660], xmm0
call fcn.1400cdc38
movups xmm0, xmmword [str.Fake_Lag_OFF:_Desactivado_]
mov qword [rbp + 0x660], rax
lea r9, [rsp + 0x70]
mov qword [rbp + 0x670], reloc.WLDAP32.dll_Ordinal_26
lea r8, [rbp + 0x660]
mov qword [rbp + 0x678], Ordinal_32
lea rdx, [rbp + 0x680]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400f2940]
movsd qword [rax + 0x10], xmm0
xorps xmm0, xmm0
movzx ecx, word [0x1400f2948]
mov word [rax + 0x18], cx
mov byte [rax + 0x1a], 0
mov eax, dword [0x1400f1130]
movups xmmword [rbp + 0x680], xmm0
mov qword [rbp + 0x690], recvfrom
movsd xmm0, qword [str.Notification]
movsd qword [rbp + 0x680], xmm0
mov qword [rbp + 0x698], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x688], eax
mov byte [rbp + 0x68c], 0
movdqa xmmword [rsp + 0x70], xmm6
call fcn.140055540
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32opcionDesactivado.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov byte [0x140208cda], 0
mov ecx, dword [0x140208cf0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064b25
mov rax, qword [0x14022a0c8]
mov edi, r15d
mov rdx, qword [0x14022a0c0]
sub rax, rdx
sar rax, 3
cmp byte [0x140208d62], 0
jne 0x1400649b2
mov dword [rbp - 0x78], 1
mov dword [rbp - 0x74], 0x3d072b02
test rax, rax
je 0x1400648b3
mov rbx, r15
nop dword [rax + rax]
mov rax, qword [0x140208f38]
mov rsi, qword [rdx + rbx]
test rax, rax
jne 0x140064875
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400cdc38
mov qword [0x140208f38], rax
mov dword [rax + 8], r15d
mov rcx, qword [rax]
lea r8, [rbp - 0x78]
mov r9d, 8
mov qword [rsp + 0x20], r15
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x14022a0c8]
inc edi
mov rdx, qword [0x14022a0c0]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x140064850
mov r8d, Ordinal_35
lea rdx, str.App1_:_SPEED__TIMER__Successfully_
lea rcx, [0x140207a58]
call fcn.14006a520
movups xmm6, xmmword [0x140207c38]
mov qword [rbp + 0x6b0], r15
mov ecx, reloc.WLDAP32.dll_Ordinal_32
xorps xmm0, xmm0
mov qword [rbp + 0x6b8], r15
movups xmmword [rbp + 0x6a0], xmm0
call fcn.1400cdc38
movups xmm0, xmmword [str.App1_:__Successfully_]
mov qword [rbp + 0x6a0], rax
lea r9, [rsp + 0x70]
mov qword [rbp + 0x6b0], reloc.WS2_32.dll_setsockopt
lea r8, [rbp + 0x6a0]
mov qword [rbp + 0x6b8], Ordinal_32
lea rdx, [rbp + 0x6c0]
movups xmmword [rax], xmm0
mov ecx, dword [0x1400f29b8]
mov dword [rax + 0x10], ecx
xorps xmm0, xmm0
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
mov eax, dword [0x1400f1130]
movups xmmword [rbp + 0x6c0], xmm0
mov qword [rbp + 0x6d0], recvfrom
movsd xmm0, qword [str.Notification]
movsd qword [rbp + 0x6c0], xmm0
mov qword [rbp + 0x6d8], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x6c8], eax
mov byte [rbp + 0x6cc], 0
movdqa xmmword [rsp + 0x70], xmm6
call fcn.140055540
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32opcionActivada.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov byte [0x140208d62], 1
jmp 0x140064b25
mov dword [rbp - 0x70], 1
mov dword [rbp - 0x6c], 0x3d72e492
test rax, rax
je 0x140064a33
mov rbx, r15
nop dword [rax + rax]
mov rax, qword [0x140208f38]
mov rsi, qword [rdx + rbx]
test rax, rax
jne 0x1400649f5
mov ecx, reloc.WS2_32.dll_recv
call fcn.1400cdc38
mov qword [0x140208f38], rax
mov dword [rax + 8], r15d
mov rcx, qword [rax]
lea r8, [rbp - 0x70]
mov r9d, 8
mov qword [rsp + 0x20], r15
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x14022a0c8]
inc edi
mov rdx, qword [0x14022a0c0]
add rbx, 8
sub rcx, rdx
movsxd rax, edi
sar rcx, 3
cmp rax, rcx
jb 0x1400649d0
mov r8d, Ordinal_32
lea rdx, str.App1_:_SPEED__TIMER___Disabled_
lea rcx, [0x140207a58]
call fcn.14006a520
movups xmm6, xmmword [0x140207c38]
mov qword [rbp + 0x6f0], r15
mov ecx, reloc.WLDAP32.dll_Ordinal_32
xorps xmm0, xmm0
mov qword [rbp + 0x6f8], r15
movups xmmword [rbp + 0x6e0], xmm0
call fcn.1400cdc38
movups xmm0, xmmword [str.App1_:__Disabled_]
mov qword [rbp + 0x6e0], rax
lea r9, [rsp + 0x70]
mov qword [rbp + 0x6f0], reloc.WS2_32.dll_select
lea r8, [rbp + 0x6e0]
mov qword [rbp + 0x6f8], Ordinal_32
lea rdx, [rbp + 0x700]
movups xmmword [rax], xmm0
movzx ecx, word [0x1400f29f0]
mov word [rax + 0x10], cx
xorps xmm0, xmm0
mov byte [rax + 0x12], 0
mov eax, dword [0x1400f1130]
movups xmmword [rbp + 0x700], xmm0
mov qword [rbp + 0x710], recvfrom
movsd xmm0, qword [str.Notification]
movsd qword [rbp + 0x700], xmm0
mov qword [rbp + 0x718], reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x708], eax
mov byte [rbp + 0x70c], 0
movdqa xmmword [rsp + 0x70], xmm6
call fcn.140055540
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32opcionActivada.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov byte [0x140208d62], 0
mov rbx, qword [0x140208ce0]
test rbx, rbx
je 0x140064b3f
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x140064b5c
jmp 0x140064b42
mov rbx, r15
mov r8d, 0x250
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULL_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], 0
jne 0x140064b68
call fcn.14004ae30
call fcn.14004bfe0
call fcn.140009220
mov rcx, qword [0x140208ce0]
movaps xmm0, xmm10
movss xmm1, dword [0x1400f2fc8]
xor edx, edx
unpcklps xmm0, xmm10
mov r8d, 0x20ab
movsd qword [rcx + 0x47b8], xmm0
movaps xmm0, xmm10
unpcklps xmm0, xmm10
movsd qword [rcx + 0x47c0], xmm0
movss xmm0, dword [0x1400f2fec]
mov dword [rcx + 0x47ac], r12d
or dword [rcx + 0x47a8], 3
unpcklps xmm0, xmm1
movsd qword [rcx + 0x47c8], xmm0
mov dword [rcx + 0x47b0], r12d
lea rcx, str.General
call fcn.14000f290
mov rcx, qword [0x140208ce0]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
mov qword [0x14023ec50], rax
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
lea rcx, [rbp + 0x9d0]
movsd xmm0, qword [rax + 0x18]
mov r14, qword [rax + 0x290]
movsd qword [rsp + 0x60], xmm0
movdqa xmm0, xmmword [0x1400f32d0]
movups xmmword [rbp + 0x9d0], xmm0
call fcn.1400045e0
movss xmm0, dword [rsp + 0x60]
lea r8, [rbp + 0x458]
movss xmm1, dword [rsp + 0x64]
lea rdx, [rsp + 0x60]
addss xmm0, dword [0x140207ad8]
addss xmm1, dword [0x140207adc]
mov dword [rsp + 0x28], r15d
mov r9d, eax
mov rcx, r14
movss dword [rsp + 0x20], xmm12
movss dword [rbp + 0x458], xmm0
movss dword [rbp + 0x45c], xmm1
call fcn.14002bb10
cmp dword [0x14022a738], 1
jne 0x140065c94
cmp qword [0x14022a3b0], 0xf
lea rcx, [0x14022a398]
mov r8, qword [0x14022a3a8]
cmova rcx, qword [0x14022a398]
cmp r8, 0xd
jne 0x14006834f
lea rdx, str.BLACK_FULL_V2
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a098], 0xf
lea rcx, [0x14022a080]
mov r8, qword [0x14022a090]
cmova rcx, qword [0x14022a080]
cmp r8, 0xa
jne 0x14006834f
lea rdx, str.PUu07r9YRR
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a3d0], 0xf
lea rcx, [0x14022a3b8]
mov r8, qword [0x14022a3c8]
cmova rcx, qword [0x14022a3b8]
cmp r8, 0x40
jne 0x14006834f
lea rdx, str.10c7bdaca0af437b6627a0054a849ef681109fd862d4feac7dcff52fd9e91d8f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a058], 0xf
lea rcx, [0x14022a040]
mov r8, qword [0x14022a050]
cmova rcx, qword [0x14022a040]
cmp r8, 5
jne 0x14006834f
lea rdx, str.10.0T
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
call fcn.14005f2d0
lea r8, [rbp + 0x460]
mov dword [rbp + 0x460], 0x443cc000
lea rdx, [rsp + 0x60]
mov dword [rbp + 0x464], 0x44098000
lea rcx, [rbp + 0xad8]
call fcn.140055510
lea rcx, [0x140207c48]
mov r8, rax
call fcn.1400045e0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rsp + 0x60]
movss dword [rsp + 0x20], xmm12
mov rcx, r14
call fcn.14002bb10
lea r8, [rbp + 0x468]
mov dword [rbp + 0x468], 0x443cc000
lea rdx, [rsp + 0x60]
mov dword [rbp + 0x46c], 0x44098000
lea rcx, [rbp + 0xad0]
call fcn.140055510
lea rcx, [0x140207c48]
mov r8, rax
call fcn.1400045e0
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rsp + 0x60]
movss dword [rsp + 0x20], xmm12
mov rcx, r14
call fcn.14002bb10
movss xmm0, dword [0x14022a0fc]
ucomiss xmm0, xmm10
jp 0x140064e68
jne 0x140064e68
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x14022a0fc], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x14022a0fc]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm8
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x140064f25
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm1, dword [0x14022a0f8]
je 0x140064ede
comiss xmm14, xmm1
jbe 0x140064ecf
call fcn.140008850
movss xmm1, dword [0x14022a0f8]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x14022a0f8], xmm1
comiss xmm1, xmm14
jb 0x140064f1b
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x140064f1b
comiss xmm1, xmm10
jbe 0x140064f0e
call fcn.140008850
movss xmm1, dword [0x14022a0f8]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x14022a0f8], xmm1
comiss xmm10, xmm1
jb 0x140064f1b
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x14022a0fc], 0
mov rcx, qword [0x140240278]
call fcn.1400127a0
movss xmm0, dword [0x14022a0f8]
lea rcx, [rbp + 0x9e0]
movaps xmm3, xmm7
movss dword [rsp + 0x20], xmm0
movaps xmm2, xmm7
movaps xmm1, xmm7
call fcn.140001e00
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140064f71
cmp byte [0x14023f650], 0
sete byte [0x14023f650]
call fcn.140004ce0
call fcn.14005e830
mov edx, 0xff
mov qword [rbp + 0xc0], 0
mov r9d, edx
mov dword [rbp + 0xb8], 0x44870000
mov r8d, edx
mov dword [rbp + 0xbc], 0x44070000
lea rcx, [rbp + 0xd70]
mov dword [rsp + 0x20], 0x46
call fcn.140037a10
mov rcx, rax
call fcn.1400045e0
mov ebx, eax
call fcn.1400089d0
mov rdx, qword [0x140208e28]
lea rcx, [rbp + 0xa8]
mov dword [rsp + 0x30], ebx
lea r9, [rbp + 0xb8]
mov qword [rsp + 0x28], rcx
lea r8, [rbp + 0xc0]
lea rcx, [rbp + 0xb0]
mov dword [rbp + 0xa8], 0x3f800000
mov qword [rsp + 0x20], rcx
mov rcx, rax
mov dword [rbp + 0xac], 0x3f800000
mov qword [rbp + 0xb0], 0
call fcn.14002c280
lea r8, [rbp + 0xc8]
mov dword [rbp + 0xc8], 0x44390000
lea rdx, [rsp + 0x60]
mov dword [rbp + 0xcc], 0xc2340000
lea rcx, [rbp + 0xac8]
call fcn.140055510
lea r8, [rbp + 0xd0]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xac0]
movss xmm3, dword [rax]
movss xmm4, dword [rax + 4]
mov dword [rbp + 0xd0], 0
mov dword [rbp + 0xd4], 0x42c80000
call fcn.140055510
unpcklps xmm3, xmm4
lea r13, str.BLACK_BULL_V3
mov r9, r13
lea rcx, [rbp + 0xab8]
movq r8, xmm3
movss xmm2, dword [rax + 4]
movss xmm1, dword [rax]
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.140037a80
lea rcx, [rbp + 0x9e0]
mov r10, rax
call fcn.1400045e0
mov r8d, eax
mov rdx, r10
mov r9, r13
mov rcx, r14
call fcn.14002c180
call fcn.140012840
lea rcx, [rbp + 0xd8]
mov dword [rbp + 0xd8], 0x42a00000
mov dword [rbp + 0xdc], 0x41200000
call fcn.140016600
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x30], r15
lea r8, [0x14023ec70]
mov dword [rsp + 0x28], r15d
lea rcx, str.Search
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp + 0xe0], 0x43340000
mov dword [rbp + 0xe4], 0x420c0000
call fcn.140041de0
call fcn.140008850
movss xmm0, dword [0x14023efe0]
addss xmm0, dword [rax + 0x10]
movss dword [0x14023efe0], xmm0
movaps xmm1, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm4, dword [0x1400f2e70]
comiss xmm4, xmm0
jbe 0x14006522e
lea rcx, [rbp + 0xe8]
mov dword [rbp + 0xe8], 0x43c80000
mov dword [rbp + 0xec], 0x43820000
call fcn.140016600
movaps xmm1, xmm10
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
lea rcx, [rbp + 0xd80]
movaps xmm2, xmm10
call fcn.140001e00
movaps xmm3, xmm4
movss dword [rsp + 0x20], xmm4
movaps xmm2, xmm4
lea rcx, [rbp + 0xd90]
movaps xmm1, xmm4
mov rdx, rax
call fcn.140001e00
mov rcx, qword [0x140208d48]
lea r9, [rbp + 0xf0]
mov qword [rsp + 0x28], rdx
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x100]
mov dword [rbp + 0xf0], 0x3f800000
mov dword [rbp + 0xf4], 0x3f800000
mov qword [rbp + 0xf8], 0
mov dword [rbp + 0x100], 0x43960000
mov dword [rbp + 0x104], 0x43960000
mov qword [rsp + 0x20], rax
call fcn.14003a380
lea rcx, [rbp + 0x108]
mov dword [rbp + 0x108], 0x442c8000
mov dword [rbp + 0x10c], 0x43fa0000
call fcn.140016600
lea rdx, [rbp + 0x110]
mov dword [rbp + 0x110], 0x42200000
mov r9d, 8
mov dword [rbp + 0x114], 0x42200000
lea rcx, str.Head
call fcn.14000c430
mov rcx, qword [0x140240270]
call fcn.1400127a0
lea rbx, [0x1400e3594]
mov dword [rbp + 0x118], 0x42200000
mov rcx, rbx
mov dword [rbp + 0x11c], 0x42200000
lea rdx, [rbp + 0x118]
call fcn.140039260
test al, al
je 0x1400652d8
mov dword [rsp + 0x28], r12d
lea r8, str.https:__discord.gg_cosmopanel
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.140012840
call fcn.14000c490
lea rcx, [rbp + 0x120]
mov dword [rbp + 0x120], 0x41200000
mov dword [rbp + 0x124], 0x42700000
call fcn.140016600
lea rdx, [rbp + 0x128]
mov dword [rbp + 0x128], 0x42700000
xor r9d, r9d
mov dword [rbp + 0x12c], 0x44048000
lea rcx, str.Tabs
call fcn.14000c430
xor r8d, r8d
lea rcx, [0x1400f2a38]
call fcn.14003bd60
mov r8d, r12d
lea rcx, [0x1400f2a3c]
call fcn.14003bd60
mov r8d, 2
lea rcx, [0x1400f2a40]
call fcn.14003bd60
call fcn.14000c490
mov eax, dword [0x14022a3f8]
test eax, eax
jne 0x14006558c
lea rcx, [rbp + 0x130]
mov dword [rbp + 0x130], 0x42a00000
mov dword [rbp + 0x134], 0x42700000
call fcn.140016600
lea rdx, [rbp + 0x138]
mov dword [rbp + 0x138], 0x44480000
mov r9d, 8
mov dword [rbp + 0x13c], 0x44048000
lea rcx, str.Menu
call fcn.14000c430
call fcn.1400168c0
lea r9, [0x140208d64]
lea r8, str.Aplicar_en_Partida
lea rdx, [0x140208e3f]
lea rcx, str.Aimbot_Neck
call fcn.14003a810
mov byte [0x140208d6d], al
call fcn.14003f930
xor r9d, r9d
lea r8, str.Aplicar_en_Entrenamiento
lea rdx, [0x140208e3e]
lea rcx, str.Aim_Scope_X2
call fcn.14003a810
mov byte [0x140208d6a], al
test al, al
je 0x140065445
cmp byte [0x140208e3e], 0
je 0x140065445
lea rdx, [0x14005f030]
lea rcx, [rbp + 0x9f0]
call fcn.14006afc0
mov rcx, rax
call fcn.140055dd0
cmp dword [rbp + 0x9f8], 0
jne 0x140068904
xor r9d, r9d
lea r8, str.Aplicar_en_Login
lea rdx, [0x140208e3a]
lea rcx, str.Scope_awm
call fcn.14003a810
mov byte [0x140208d63], al
test al, al
je 0x14006549a
cmp byte [0x140208e3a], 0
je 0x14006549a
lea rcx, [rbp + 0x7d8]
call fcn.14006b030
lea rcx, [rbp + 0x7d8]
call fcn.140055dd0
cmp dword [rbp + 0x7e0], 0
jne 0x140068904
xor r9d, r9d
lea r8, str.Aplicar_en_Login
lea rdx, [0x140208cfe]
lea rcx, str.Aimfov_180
call fcn.14003a810
test al, al
je 0x1400654e9
cmp byte [0x140208cfe], 1
jne 0x1400654e9
lea rcx, [rbp + 0x7e8]
call fcn.14006b0a0
lea rcx, [rbp + 0x7e8]
call fcn.140055dd0
cmp dword [rbp + 0x7f0], 0
jne 0x140068904
call fcn.140016a10
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140016550
call fcn.1400168c0
xor r9d, r9d
lea r8, str.Aplicar_en_Login
lea rdx, [0x140208f0d]
lea rcx, str.Cambio_Awm
call fcn.14003a810
mov byte [0x140208e35], al
test al, al
je 0x140065555
cmp byte [0x140208f0d], 0
je 0x140065555
lea rcx, [rbp + 0x7f8]
call fcn.14006b110
lea rcx, [rbp + 0x7f8]
call fcn.140055dd0
cmp dword [rbp + 0x800], 0
jne 0x140068904
lea r9, [0x140208f30]
lea r8, str.Mini_teleportation
lea rdx, [0x140208f0c]
lea rcx, str.Fake_Lag
call fcn.14003a810
mov byte [0x140208f10], al
call fcn.140016a10
call fcn.14000c490
mov eax, dword [0x14022a3f8]
cmp eax, 1
jne 0x140065992
lea rcx, [rbp + 0x140]
mov dword [rbp + 0x140], 0x42a00000
mov dword [rbp + 0x144], 0x42700000
call fcn.140016600
lea rdx, [rbp + 0x148]
mov dword [rbp + 0x148], 0x44480000
mov r9d, 8
mov dword [rbp + 0x14c], 0x44048000
lea rcx, str.Visual
call fcn.14000c430
call fcn.1400168c0
lea r9, [0x140208d58]
lea r8, str.Aplicar_en_Entrenamiento
lea rdx, [0x140208cdc]
lea rcx, str.Camara_Derecha
call fcn.14003a810
xor r9d, r9d
lea r8, str.Apply_in_Each_Match
lea rdx, [0x140208e38]
lea rcx, str.Menu_chams_v2
call fcn.14003a810
mov byte [0x140208cfd], al
test al, al
je 0x140065642
cmp byte [0x140208e38], 0
je 0x140065642
call fcn.140060f80
call fcn.1400610e0
call fcn.140016a10
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140016550
call fcn.1400168c0
lea r9, [0x140208f20]
lea r8, str.Aplicar_en_Entrenamiento
lea rdx, [0x140208cdd]
lea rcx, str.Wall_Hack
call fcn.14003a810
xor r9d, r9d
lea r8, str.Aplicar_por_Partida
lea rdx, [0x140208f14]
lea rcx, str.Activar_Speed
call fcn.14003a810
test al, al
je 0x1400656cc
cmp byte [0x140208f14], 1
jne 0x1400656cc
lea rdx, [0x14005e770]
lea rcx, [rbp + 0xa00]
call fcn.14006afc0
mov rcx, rax
call fcn.140055dd0
cmp dword [rbp + 0xa08], 0
jne 0x140068904
lea rax, str.SPEED
mov qword [rbp + 0x8b0], rbx
mov qword [rbp + 0x8a0], rax
lea r8, [rbp + 0x8a0]
lea rax, [0x1400e3590]
mov qword [rbp + 0x8a8], rax
lea rax, [0x1400e3598]
mov qword [rbp + 0x8b8], rax
lea rax, [0x1400e361c]
mov qword [rbp + 0x8c0], rax
lea rax, [0x1400e3620]
mov qword [rbp + 0x8c8], rax
lea rax, [0x1400e3624]
mov qword [rbp + 0x8d0], rax
lea rax, [0x1400e3628]
mov qword [rbp + 0x8d8], rax
lea rax, [0x1400e35f4]
mov qword [rbp + 0x8e0], rax
lea rax, [0x1400e35c4]
mov qword [rbp + 0x8e8], rax
call fcn.14003e780
cmp byte [0x140208f13], 0
je 0x14006586f
cmp byte [0x140208d6f], 0
jne 0x140065982
mov rax, qword [0x14022a388]
mov esi, r15d
mov rdx, qword [0x14022a380]
sub rax, rdx
mov byte [0x140208d6f], 1
sar rax, 3
mov byte [0x140208e34], 1
mov dword [rbp - 0x68], 0x60000001
mov dword [rbp - 0x64], 0x3d72cca3
test rax, rax
je 0x1400657fa
mov rdi, r15
mov rbx, qword [rdx + rdi]
call fcn.14006d3a0
mov r9d, 8
mov qword [rsp + 0x20], r15
lea r8, [rbp - 0x68]
mov rdx, rbx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x14022a388]
lea rdi, [rdi + 8]
mov rdx, qword [0x14022a380]
inc esi
sub rcx, rdx
movsxd rax, esi
sar rcx, 3
cmp rax, rcx
jb 0x1400657b3
lea rdx, str.Speed_Hack_Activado_
lea rcx, [0x140207a58]
call fcn.140069fb0
movups xmm6, xmmword [0x140207c38]
lea rdx, str.Speed_Hack_Activado_
lea rcx, [rbp + 0xfc0]
call fcn.140048f90
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp + 0xfe0]
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32opcionActivada.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov ecx, 0x320
jmp 0x140065977
cmp byte [0x140208e34], 0
mov byte [0x140208d6f], 0
je 0x140065982
mov rax, qword [0x14022a388]
mov esi, r15d
mov rdx, qword [0x14022a380]
sub rax, rdx
mov byte [0x140208e34], 0
sar rax, 3
mov dword [rbp - 0x60], 1
mov dword [rbp - 0x5c], 0x3d072b02
test rax, rax
je 0x140065907
mov rdi, r15
nop dword [rax + rax]
mov rbx, qword [rdx + rdi]
call fcn.14006d3a0
mov r9d, 8
mov qword [rsp + 0x20], r15
lea r8, [rbp - 0x60]
mov rdx, rbx
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x14022a388]
lea rdi, [rdi + 8]
mov rdx, qword [0x14022a380]
inc esi
sub rcx, rdx
movsxd rax, esi
sar rcx, 3
cmp rax, rcx
jb 0x1400658c0
lea rdx, str.Speed_Hack_Desactivado_
lea rcx, [0x140207a58]
call fcn.140069fb0
movups xmm6, xmmword [0x140207c38]
lea rdx, str.Speed_Hack_Desactivado_
lea rcx, [rbp + 0x1000]
call fcn.140048f90
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp + 0x1020]
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
mov edx, 0x20001
lea rcx, str.C:_Users_WindowsSystem32opcionDesactivado.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
mov ecx, 0x190
mov edx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Beep]
call fcn.140016a10
call fcn.14000c490
mov eax, dword [0x14022a3f8]
cmp eax, 2
jne 0x140065c9b
lea rcx, [rbp + 0x150]
mov dword [rbp + 0x150], 0x42a00000
mov dword [rbp + 0x154], 0x42700000
call fcn.140016600
lea rdx, [rbp + 0x158]
mov dword [rbp + 0x158], 0x44480000
mov r9d, 8
mov dword [rbp + 0x15c], 0x44048000
lea rcx, str.Settings
call fcn.14000c430
call fcn.1400168c0
xor r9d, r9d
lea r8, str.Ocultar_de_Transmision
lea rdx, [0x140208e3b]
lea rcx, str.Streamer_Mode
call fcn.14003a810
mov byte [0x140208d68], al
test al, al
je 0x140065b84
cmp byte [0x140208e3b], 0
movups xmm6, xmmword [0x140207c38]
je 0x140065ad8
lea rdx, str.Modo_Streamer_Activado
lea rcx, [rbp + 0x1040]
call fcn.140048f90
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp + 0x1060]
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp + 0x48], r15
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x48]
mov r8d, r12d
lea r9, [0x1400d30e0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400d30f0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140065b7e
mov rax, qword [rbp + 0x48]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x48]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x48]
jmp 0x140065b78
lea rdx, str.Modo_Streamer_Desactivado
lea rcx, [rbp + 0x1080]
call fcn.140048f90
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp + 0x10a0]
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp + 0x50], r15
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x50]
mov r8d, r12d
lea r9, [0x1400d30e0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400d30f0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140065b7e
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x50]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r9d, r9d
lea r8, str.Aplicar_Login
lea rdx, [0x140208e39]
lea rcx, str.Star_Bypass
call fcn.14003a810
mov byte [0x140208cff], al
test al, al
je 0x140065bb9
cmp byte [0x140208e39], 0
je 0x140065bb9
call fcn.1400618c0
call fcn.1400448b0
call fcn.140016a10
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140016550
call fcn.1400168c0
xor r9d, r9d
lea r8, str.Aplicar_Login
lea rdx, [0x140208f0e]
lea rcx, str.Delet_Acount_Inv
call fcn.14003a810
mov byte [0x140208f15], al
test al, al
je 0x140065c2a
cmp byte [0x140208f0e], 0
je 0x140065c2a
lea rcx, [rbp + 0x808]
call fcn.14006b180
lea rcx, [rbp + 0x808]
call fcn.140055dd0
cmp dword [rbp + 0x810], 0
jne 0x140068904
cmp byte [0x140208d60], 1
jne 0x140065c88
xor r9d, r9d
lea r8, str.Aplicar_Login
lea rdx, [0x140208e37]
lea rcx, str.Activar_Bypass
call fcn.14003a810
mov byte [0x140208cdf], al
test al, al
je 0x140065c88
cmp byte [0x140208e37], 0
je 0x140065c88
lea rcx, [rbp + 0x788]
call fcn.14006b1f0
lea rcx, [rbp + 0x788]
call fcn.140055dd0
cmp dword [rbp + 0x790], 0
jne 0x140068904
call fcn.140016a10
call fcn.14000c490
jmp 0x140065c9b
lea r13, str.BLACK_BULL_V3
cmp dword [0x14022a738], 2
jne 0x140066a55
cmp qword [0x14022a3b0], 0xf
lea rcx, [0x14022a398]
mov r8, qword [0x14022a3a8]
cmova rcx, qword [0x14022a398]
cmp r8, 0xd
jne 0x14006834f
lea rdx, str.BLACK_FULL_V2
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a098], 0xf
lea rcx, [0x14022a080]
mov r8, qword [0x14022a090]
cmova rcx, qword [0x14022a080]
cmp r8, 0xa
jne 0x14006834f
lea rdx, str.PUu07r9YRR
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a3d0], 0xf
lea rcx, [0x14022a3b8]
mov r8, qword [0x14022a3c8]
cmova rcx, qword [0x14022a3b8]
cmp r8, 0x40
jne 0x14006834f
lea rdx, str.10c7bdaca0af437b6627a0054a849ef681109fd862d4feac7dcff52fd9e91d8f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a058], 0xf
lea rcx, [0x14022a040]
mov r8, qword [0x14022a050]
cmova rcx, qword [0x14022a040]
cmp r8, 5
jne 0x14006834f
lea rdx, str.10.0T
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
call fcn.14005fc20
lea r8, [rbp + 0x160]
mov dword [rbp + 0x160], 0x443cc000
lea rdx, [rsp + 0x60]
mov dword [rbp + 0x164], 0x44098000
lea rcx, [rbp + 0xab0]
call fcn.140055510
lea rcx, [0x140207c48]
mov r8, rax
call fcn.1400045e0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rsp + 0x60]
movss dword [rsp + 0x20], xmm12
mov rcx, r14
call fcn.14002bb10
lea r8, [rbp + 0x168]
mov dword [rbp + 0x168], 0x443cc000
lea rdx, [rsp + 0x60]
mov dword [rbp + 0x16c], 0x44098000
lea rcx, [rbp + 0xa90]
call fcn.140055510
lea rcx, [0x140207c48]
mov r8, rax
call fcn.1400045e0
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rsp + 0x60]
movss dword [rsp + 0x20], xmm12
mov rcx, r14
call fcn.14002bb10
movss xmm0, dword [0x14022a0fc]
ucomiss xmm0, xmm10
jp 0x140065e79
jne 0x140065e79
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x14022a0fc], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x14022a0fc]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm8
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x140065f36
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm1, dword [0x14022a0f8]
je 0x140065eef
comiss xmm14, xmm1
jbe 0x140065ee0
call fcn.140008850
movss xmm1, dword [0x14022a0f8]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x14022a0f8], xmm1
comiss xmm1, xmm14
jb 0x140065f2c
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x140065f2c
comiss xmm1, xmm10
jbe 0x140065f1f
call fcn.140008850
movss xmm1, dword [0x14022a0f8]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x14022a0f8], xmm1
comiss xmm10, xmm1
jb 0x140065f2c
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x14022a0fc], 0
mov rcx, qword [0x140240278]
call fcn.1400127a0
movss xmm0, dword [0x14022a0f8]
lea rcx, [rbp + 0xa10]
movaps xmm3, xmm7
movss dword [rsp + 0x20], xmm0
movaps xmm2, xmm7
movaps xmm1, xmm7
call fcn.140001e00
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140065f82
cmp byte [0x14023ecbd], 0
sete byte [0x14023ecbd]
call fcn.140004ce0
call fcn.14005e830
mov edx, 0xff
mov qword [rbp + 0x188], 0
mov r9d, edx
mov dword [rbp + 0x180], 0x44870000
mov r8d, edx
mov dword [rbp + 0x184], 0x44070000
lea rcx, [rbp + 0xda0]
mov dword [rsp + 0x20], 0x46
call fcn.140037a10
mov rcx, rax
call fcn.1400045e0
mov ebx, eax
call fcn.1400089d0
mov rdx, qword [0x140208e28]
lea rcx, [rbp + 0x170]
mov dword [rsp + 0x30], ebx
lea r9, [rbp + 0x180]
mov qword [rsp + 0x28], rcx
lea r8, [rbp + 0x188]
lea rcx, [rbp + 0x178]
mov dword [rbp + 0x170], 0x3f800000
mov qword [rsp + 0x20], rcx
mov rcx, rax
mov dword [rbp + 0x174], 0x3f800000
mov qword [rbp + 0x178], 0
call fcn.14002c280
lea r8, [rbp + 0x190]
mov dword [rbp + 0x190], 0x44390000
lea rdx, [rsp + 0x60]
mov dword [rbp + 0x194], 0xc2340000
lea rcx, [rbp + 0xa80]
call fcn.140055510
lea r8, [rbp + 0x198]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xaa8]
movss xmm3, dword [rax]
movss xmm4, dword [rax + 4]
mov dword [rbp + 0x198], 0
mov dword [rbp + 0x19c], 0x42c80000
call fcn.140055510
unpcklps xmm3, xmm4
lea rcx, [rbp + 0xae8]
mov r9, r13
movq r8, xmm3
movss xmm2, dword [rax + 4]
movss xmm1, dword [rax]
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.140037a80
lea rcx, [rbp + 0xa10]
mov r10, rax
call fcn.1400045e0
mov r8d, eax
mov rdx, r10
mov r9, r13
mov rcx, r14
call fcn.14002c180
call fcn.140012840
mov rcx, qword [0x140208ce0]
movss xmm6, dword [0x1400f2f14]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov rax, qword [rcx + 0x3ed0]
mov dword [rsp + 0x28], r15d
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400f2f78]
addss xmm1, xmm6
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x1a0], 0x43340000
mov dword [rbp + 0x1a4], 0x420c0000
mov r9d, 0x40
lea r8, [0x14023ec70]
xor edx, edx
lea rcx, str.Search
call fcn.140041de0
mov rbx, qword [0x140208ce0]
test rbx, rbx
jne 0x1400661af
mov r8d, 0xfe3
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140208ce0]
movss xmm0, dword [0x14023ecb8]
movaps xmm1, xmm12
addss xmm0, dword [rbx + 0x18]
movss dword [0x14023ecb8], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm4, dword [0x1400f2e70]
comiss xmm4, xmm0
jbe 0x1400662a0
lea rcx, [rbp + 0x1a8]
mov dword [rbp + 0x1a8], 0x43c80000
mov dword [rbp + 0x1ac], 0x43820000
call fcn.140016600
movaps xmm1, xmm10
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
lea rcx, [rbp + 0xdb0]
movaps xmm2, xmm10
call fcn.140001e00
movaps xmm3, xmm4
movss dword [rsp + 0x20], xmm4
movaps xmm2, xmm4
lea rcx, [rbp + 0xdc0]
movaps xmm1, xmm4
mov rdx, rax
call fcn.140001e00
mov rcx, qword [0x140208d48]
lea r9, [rbp + 0x1b0]
mov qword [rsp + 0x28], rdx
lea r8, [rbp + 0x1b8]
lea rdx, [rbp + 0x1c0]
mov dword [rbp + 0x1b0], 0x3f800000
mov dword [rbp + 0x1b4], 0x3f800000
mov qword [rbp + 0x1b8], 0
mov dword [rbp + 0x1c0], 0x43960000
mov dword [rbp + 0x1c4], 0x43960000
mov qword [rsp + 0x20], rax
call fcn.14003a380
mov rbx, qword [0x140208ce0]
mov rax, qword [rbx + 0x3ed0]
lea rdx, str.Head
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400f2fd4]
addss xmm1, dword [0x1400f2fc4]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
mov dword [rbp + 0x1c8], 0x42200000
mov dword [rbp + 0x1cc], 0x42200000
mov rax, qword [rbx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rcx, qword [rbx + 0x3ed0]
call fcn.140007dd0
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0x1c8]
lea rcx, str.Head
call fcn.14000c0d0
mov rcx, qword [0x140240270]
mov rdi, qword [0x140208ce0]
mov rbx, rcx
mov qword [rbp - 0x80], rcx
test rcx, rcx
jne 0x140066397
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x140066390
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], ecx
jg 0x140066389
mov r8d, 0x6fd
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rbp - 0x80], rcx
mov rbx, rcx
call fcn.140012670
lea rcx, [rdi + 0x4838]
lea rdx, [rbp - 0x80]
call fcn.14001fb50
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 0x3ed0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x290]
call fcn.140029230
lea rdx, [rbp + 0x1d0]
mov dword [rbp + 0x1d0], 0x42200000
lea rcx, [0x1400e3594]
mov dword [rbp + 0x1d4], 0x42200000
call fcn.140038ba0
test al, al
je 0x140066415
mov dword [rsp + 0x28], r12d
lea r8, str.https:__discord.gg_cosmopanel
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.140012840
call fcn.14000c490
mov rcx, qword [0x140208ce0]
lea rdx, str.Tabs
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm6
addss xmm1, xmm13
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
mov dword [rbp + 0x1d8], 0x42700000
mov dword [rbp + 0x1dc], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007dd0
mov edx, eax
mov dword [rsp + 0x20], r15d
xor r9d, r9d
lea r8, [rbp + 0x1d8]
lea rcx, str.Tabs
call fcn.14000c0d0
xor r8d, r8d
lea rcx, [0x1400f2a38]
call fcn.14003bd60
mov r8d, r12d
lea rcx, [0x1400f2a3c]
call fcn.14003bd60
mov r8d, 2
lea rcx, [0x1400f2a40]
call fcn.14003bd60
call fcn.14000c490
mov eax, dword [0x14022a3f8]
test eax, eax
jne 0x140066678
lea rcx, [rbp + 0x1e0]
mov dword [rbp + 0x1e0], 0x42a00000
mov dword [rbp + 0x1e4], 0x42700000
call fcn.140016600
lea rdx, [rbp + 0x1e8]
mov dword [rbp + 0x1e8], 0x44480000
mov r9d, 8
mov dword [rbp + 0x1ec], 0x44048000
lea rcx, str.Menu
call fcn.14000c430
call fcn.1400168c0
lea r9, [0x140208d64]
lea r8, str.Aplicar_en_Partida
lea rdx, [0x140208e3f]
lea rcx, str.Aimbot_Neck
call fcn.14003a810
mov byte [0x140208d6d], al
call fcn.14003f930
xor r9d, r9d
lea r8, str.Aplicar_en_Entrnamiento
lea rdx, [0x140208e3a]
lea rcx, str.Scope_Awm
call fcn.14003a810
mov byte [0x140208d63], al
test al, al
je 0x1400665d5
cmp byte [0x140208e3a], 0
je 0x1400665d5
lea rcx, [rbp + 0x738]
call fcn.14006b030
lea rcx, [rbp + 0x738]
call fcn.140055dd0
cmp dword [rbp + 0x740], 0
jne 0x140068904
call fcn.140016a10
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140016550
call fcn.1400168c0
xor r9d, r9d
lea r8, str.Aplicar_en_Login
lea rdx, [0x140208f0d]
lea rcx, str.Cambio_Awm
call fcn.14003a810
mov byte [0x140208e35], al
test al, al
je 0x140066641
cmp byte [0x140208f0d], 0
je 0x140066641
lea rcx, [rbp + 0x748]
call fcn.14006b110
lea rcx, [rbp + 0x748]
call fcn.140055dd0
cmp dword [rbp + 0x750], 0
jne 0x140068904
lea r9, [0x140208f30]
lea r8, str.Mini_teleportation
lea rdx, [0x140208f0c]
lea rcx, str.Fake_Lag
call fcn.14003a810
mov byte [0x140208f10], al
call fcn.140016a10
call fcn.14000c490
mov eax, dword [0x14022a3f8]
cmp eax, 1
jne 0x140066755
lea rcx, [rbp + 0x1f0]
mov dword [rbp + 0x1f0], 0x42a00000
mov dword [rbp + 0x1f4], 0x42700000
call fcn.140016600
lea rdx, [rbp + 0x1f8]
mov dword [rbp + 0x1f8], 0x44480000
mov r9d, 8
mov dword [rbp + 0x1fc], 0x44048000
lea rcx, str.Visual
call fcn.14000c430
call fcn.1400168c0
xor r9d, r9d
lea r8, str.Apply_in_Each_Match
lea rdx, [0x140208e38]
lea rcx, str.Menu_chams_v2
call fcn.14003a810
mov byte [0x140208cfd], al
test al, al
je 0x14006670d
cmp byte [0x140208e38], 0
je 0x14006670d
call fcn.140060f80
call fcn.1400610e0
call fcn.140016a10
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140016550
call fcn.1400168c0
lea r9, [0x140208f20]
lea r8, str.Aplicar_en_Entrenamiento
lea rdx, [0x140208cdd]
lea rcx, str.Camera_Side
call fcn.14003a810
call fcn.140016a10
call fcn.14000c490
mov eax, dword [0x14022a3f8]
cmp eax, 2
jne 0x140066a55
lea rcx, [rbp + 0x200]
mov dword [rbp + 0x200], 0x42a00000
mov dword [rbp + 0x204], 0x42700000
call fcn.140016600
lea rdx, [rbp + 0x208]
mov dword [rbp + 0x208], 0x44480000
mov r9d, 8
mov dword [rbp + 0x20c], 0x44048000
lea rcx, str.Settings
call fcn.14000c430
call fcn.1400168c0
xor r9d, r9d
lea r8, str.Ocultar_de_Transmision
lea rdx, [0x140208e3b]
lea rcx, str.Streamer_Mode
call fcn.14003a810
mov byte [0x140208d68], al
test al, al
je 0x140066947
cmp byte [0x140208e3b], 0
movups xmm6, xmmword [0x140207c38]
je 0x14006689b
lea rdx, str.Modo_Streamer_Activado
lea rcx, [rbp + 0x10c0]
call fcn.140048f90
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp + 0x10e0]
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp + 0x58], r15
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x58]
mov r8d, r12d
lea r9, [0x1400d30e0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400d30f0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140066941
mov rax, qword [rbp + 0x58]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x58]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x58]
jmp 0x14006693b
lea rdx, str.Modo_Streamer_Desactivado
lea rcx, [rbp + 0x1100]
call fcn.140048f90
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp + 0x1120]
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp + 0x60], r15
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x60]
mov r8d, r12d
lea r9, [0x1400d30e0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400d30f0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140066941
mov rax, qword [rbp + 0x60]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x60]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r9d, r9d
lea r8, str.Aplicar_Login
lea rdx, [0x140208e39]
lea rcx, str.Star_Bypass
call fcn.14003a810
mov byte [0x140208cff], al
test al, al
je 0x14006697c
cmp byte [0x140208e39], 0
je 0x14006697c
call fcn.1400618c0
call fcn.1400448b0
call fcn.140016a10
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140016550
call fcn.1400168c0
xor r9d, r9d
lea r8, str.Aplicar_Login
lea rdx, [0x140208f0e]
lea rcx, str.Delet_Acount_Inv
call fcn.14003a810
mov byte [0x140208f15], al
test al, al
je 0x1400669ed
cmp byte [0x140208f0e], 0
je 0x1400669ed
lea rcx, [rbp + 0x758]
call fcn.14006b180
lea rcx, [rbp + 0x758]
call fcn.140055dd0
cmp dword [rbp + 0x760], 0
jne 0x140068904
cmp byte [0x140208d60], 1
jne 0x140066a4b
xor r9d, r9d
lea r8, str.Aplicar_Login
lea rdx, [0x140208e37]
lea rcx, str.Activar_Bypass
call fcn.14003a810
mov byte [0x140208cdf], al
test al, al
je 0x140066a4b
cmp byte [0x140208e37], 0
je 0x140066a4b
lea rcx, [rbp + 0x768]
call fcn.14006b1f0
lea rcx, [rbp + 0x768]
call fcn.140055dd0
cmp dword [rbp + 0x770], 0
jne 0x140068904
call fcn.140016a10
call fcn.14000c490
cmp dword [0x14022a738], 4
jne 0x140067633
cmp qword [0x14022a3b0], 0xf
lea rcx, [0x14022a398]
mov r8, qword [0x14022a3a8]
cmova rcx, qword [0x14022a398]
cmp r8, 0xd
jne 0x14006834f
lea rdx, str.BLACK_FULL_V2
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a098], 0xf
lea rcx, [0x14022a080]
mov r8, qword [0x14022a090]
cmova rcx, qword [0x14022a080]
cmp r8, 0xa
jne 0x14006834f
lea rdx, str.PUu07r9YRR
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a3d0], 0xf
lea rcx, [0x14022a3b8]
mov r8, qword [0x14022a3c8]
cmova rcx, qword [0x14022a3b8]
cmp r8, 0x40
jne 0x14006834f
lea rdx, str.10c7bdaca0af437b6627a0054a849ef681109fd862d4feac7dcff52fd9e91d8f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a058], 0xf
lea rcx, [0x14022a040]
mov r8, qword [0x14022a050]
cmova rcx, qword [0x14022a040]
cmp r8, 5
jne 0x14006834f
lea rdx, str.10.0T
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
call fcn.140060570
movss xmm0, dword [rsp + 0x60]
lea rcx, [0x140207c48]
movss xmm1, dword [rsp + 0x64]
addss xmm0, xmm9
addss xmm1, dword [0x1400f2fcc]
movss dword [rbp + 0x210], xmm0
movss dword [rbp + 0x214], xmm1
call fcn.1400045e0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rsp + 0x60]
movss dword [rsp + 0x20], xmm12
lea r8, [rbp + 0x210]
mov rcx, r14
call fcn.14002bb10
movss xmm0, dword [rsp + 0x60]
lea rcx, [0x140207c48]
movss xmm1, dword [rsp + 0x64]
addss xmm0, xmm9
addss xmm1, dword [0x1400f2fcc]
movss dword [rbp + 0x218], xmm0
movss dword [rbp + 0x21c], xmm1
call fcn.1400045e0
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rsp + 0x60]
movss dword [rsp + 0x20], xmm12
lea r8, [rbp + 0x218]
mov rcx, r14
call fcn.14002bb10
movss xmm0, dword [0x14022a0fc]
ucomiss xmm0, xmm10
jp 0x140066c35
jne 0x140066c35
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x14022a0fc], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x14022a0fc]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm8
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x140066cf2
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm1, dword [0x14022a0f8]
je 0x140066cab
comiss xmm14, xmm1
jbe 0x140066c9c
call fcn.140008850
movss xmm1, dword [0x14022a0f8]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x14022a0f8], xmm1
comiss xmm1, xmm14
jb 0x140066ce8
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x140066ce8
comiss xmm1, xmm10
jbe 0x140066cdb
call fcn.140008850
movss xmm1, dword [0x14022a0f8]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x14022a0f8], xmm1
comiss xmm10, xmm1
jb 0x140066ce8
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x14022a0fc], 0
mov rcx, qword [0x140240278]
mov rdi, qword [0x140208ce0]
mov rbx, rcx
mov qword [rbp - 0x80], rcx
test rcx, rcx
jne 0x140066d46
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x140066d3f
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], ecx
jg 0x140066d38
mov r8d, 0x6fd
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rbp - 0x80], rcx
mov rbx, rcx
call fcn.140012670
lea rcx, [rdi + 0x4838]
lea rdx, [rbp - 0x80]
call fcn.14001fb50
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 0x3ed0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x290]
call fcn.140029230
movss xmm0, dword [0x14022a0f8]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
movss dword [rbp + 0x4c4], xmm0
mov dword [rbp + 0x4b8], 0x437f0000
mov dword [rbp + 0x4bc], 0x437f0000
mov dword [rbp + 0x4c0], 0x437f0000
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140066dc1
cmp byte [0x14023f321], 0
sete byte [0x14023f321]
cmp qword [0x140208ce0], 0
jne 0x140066de5
mov r8d, 0xb5b
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.14005e830
movdqa xmm0, xmmword [0x1400f3280]
lea rcx, [rbp + 0xa20]
movups xmmword [rbp + 0xa20], xmm0
mov qword [rbp + 0x238], 0
mov dword [rbp + 0x230], 0x44870000
mov dword [rbp + 0x234], 0x44070000
call fcn.1400045e0
mov rbx, qword [0x140208ce0]
mov edi, eax
cmp dword [rbx + 0x48a0], 0
jg 0x140066e50
mov r8d, 0x6fd
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [rbx + 0x48a8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rcx]
call fcn.140008890
mov dword [rbp + 0x220], 0x3f800000
mov rbx, rax
mov dword [rbp + 0x224], 0x3f800000
mov qword [rbp + 0x228], 0
test edi, 0xff000000
je 0x140066f42
mov rdx, qword [0x140208e28]
cmp rdx, qword [rax + 0x98]
setne sil
je 0x140066eb2
mov rcx, rax
call fcn.140029230
mov edx, 6
mov r8d, 4
mov rcx, rbx
call fcn.1400292b0
lea rax, [rbp + 0x220]
mov dword [rsp + 0x28], edi
lea r9, [rbp + 0x228]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x230]
mov rcx, rbx
lea rdx, [rbp + 0x238]
call fcn.140029480
test sil, sil
je 0x140066f42
cmp dword [rbx + 0x68], 0
jg 0x140066f17
mov r8d, 0x713
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.h
lea rcx, str.Size___0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movsxd rcx, dword [rbx + 0x68]
lea eax, [rcx - 1]
mov dword [rbx + 0x68], eax
test eax, eax
jne 0x140066f2a
mov rax, r15
jmp 0x140066f33
mov rax, qword [rbx + 0x70]
mov rax, qword [rax + rcx*8 - 0x10]
mov rcx, rbx
mov qword [rbx + 0x98], rax
call fcn.140028fc0
lea rcx, [rbp + 0x4b8]
call fcn.1400045e0
movss xmm9, dword [rsp + 0x60]
lea rdx, [rbp + 0x98]
movss xmm8, dword [rsp + 0x64]
movaps xmm7, xmm9
movss xmm3, dword [0x1400f3008]
addss xmm9, xmm10
addss xmm7, dword [0x1400f2fdc]
movaps xmm6, xmm8
mov qword [rsp + 0x30], r15
subss xmm6, dword [0x1400f2f58]
addss xmm8, dword [0x1400f2f84]
mov edi, eax
mov qword [rsp + 0x28], r13
mov rax, qword [0x140208ce0]
movss dword [rsp + 0x20], xmm11
movss xmm2, dword [rax + 0x3c20]
mov rcx, qword [rax + 0x3c18]
call fcn.140034d30
movss xmm2, dword [0x1400f2e38]
subss xmm7, xmm9
movss xmm0, dword [rbp + 0x98]
subss xmm6, xmm8
addss xmm0, dword [0x1400f2e68]
mulss xmm7, xmm2
mulss xmm6, xmm2
addss xmm9, xmm7
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 0x9c]
addss xmm8, xmm6
mulss xmm0, xmm2
movd xmm1, eax
subss xmm8, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x244], xmm8
movss dword [rbp + 0x98], xmm1
mulss xmm1, xmm2
subss xmm9, xmm1
movss dword [rbp + 0x240], xmm9
test edi, 0xff000000
je 0x1400670c3
mov rax, qword [r14 + 0x38]
mov rbx, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [r14 + 0x98]
mov rcx, qword [rbx + 0x40]
cmp qword [rcx + 8], rax
je 0x140067076
mov r8d, 0x64d
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [r14 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [0x1400f2a0d]
movss dword [rsp + 0x40], xmm10
lea r9, [rbp + 0x240]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
mov rdx, r14
mov rcx, rbx
mov dword [rsp + 0x20], edi
movups xmmword [rsp + 0x70], xmm0
call fcn.140034f50
call fcn.140012840
lea rcx, [rbp + 0x248]
mov dword [rbp + 0x248], 0x42a00000
mov dword [rbp + 0x24c], 0x41200000
call fcn.140016600
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x250]
mov qword [rsp + 0x30], r15
lea r8, [0x14023ec70]
mov dword [rsp + 0x28], r15d
lea rcx, str.Search
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp + 0x250], 0x43340000
mov dword [rbp + 0x254], 0x420c0000
call fcn.140041de0
call fcn.140008850
movss xmm0, dword [0x14023efe4]
movaps xmm1, xmm12
addss xmm0, dword [rax + 0x10]
movss dword [0x14023efe4], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movss xmm4, dword [0x1400f2e70]
comiss xmm4, xmm0
jbe 0x140067221
lea rcx, [rbp + 0x258]
mov dword [rbp + 0x258], 0x43c80000
mov dword [rbp + 0x25c], 0x43820000
call fcn.140016600
movaps xmm1, xmm10
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
lea rcx, [rbp + 0xdd0]
movaps xmm2, xmm10
call fcn.140001e00
movaps xmm3, xmm4
movss dword [rsp + 0x20], xmm4
movaps xmm2, xmm4
lea rcx, [rbp + 0xde0]
movaps xmm1, xmm4
mov rdx, rax
call fcn.140001e00
mov rcx, qword [0x140208d48]
lea r9, [rbp + 0x260]
mov qword [rsp + 0x28], rdx
lea r8, [rbp + 0x268]
lea rdx, [rbp + 0x270]
mov dword [rbp + 0x260], 0x3f800000
mov dword [rbp + 0x264], 0x3f800000
mov qword [rbp + 0x268], 0
mov dword [rbp + 0x270], 0x43960000
mov dword [rbp + 0x274], 0x43960000
mov qword [rsp + 0x20], rax
call fcn.14003a380
lea rcx, [rbp + 0x278]
mov dword [rbp + 0x278], 0x442c8000
mov dword [rbp + 0x27c], 0x43fa0000
call fcn.140016600
lea rdx, [rbp + 0x280]
mov dword [rbp + 0x280], 0x42200000
mov r9d, 8
mov dword [rbp + 0x284], 0x42200000
lea rcx, str.Head
call fcn.14000c430
mov rcx, qword [0x140240270]
call fcn.1400127a0
lea rdx, [rbp + 0x288]
mov dword [rbp + 0x288], 0x42200000
lea rcx, [0x1400e3594]
mov dword [rbp + 0x28c], 0x42200000
call fcn.140039260
test al, al
je 0x1400672c8
mov dword [rsp + 0x28], r12d
lea r8, str.https:__discord.gg_cosmopanel
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.140012840
call fcn.14000c490
lea rcx, [rbp + 0x290]
mov dword [rbp + 0x290], 0x41200000
mov dword [rbp + 0x294], 0x42700000
call fcn.140016600
lea rdx, [rbp + 0x298]
mov dword [rbp + 0x298], 0x42700000
xor r9d, r9d
mov dword [rbp + 0x29c], 0x44048000
lea rcx, str.Tabs
call fcn.14000c430
mov r8d, 2
lea rcx, [0x1400f2a40]
call fcn.14003bd60
call fcn.14000c490
lea rcx, [rbp + 0x2a0]
mov dword [0x14022a3f8], 2
mov dword [rbp + 0x2a0], 0x42a00000
mov dword [rbp + 0x2a4], 0x42700000
call fcn.140016600
lea rdx, [rbp + 0x2a8]
mov dword [rbp + 0x2a8], 0x44480000
mov r9d, 8
mov dword [rbp + 0x2ac], 0x44048000
lea rcx, str.Settings
call fcn.14000c430
call fcn.1400168c0
xor r9d, r9d
lea r8, str.Ocultar_de_Transmision
lea rdx, [0x140208e3b]
lea rcx, str.Streamer_Mode
call fcn.14003a810
mov byte [0x140208d68], al
test al, al
je 0x140067526
cmp byte [0x140208e3b], 0
movups xmm6, xmmword [0x140207c38]
je 0x14006747a
lea rdx, str.Modo_Streamer_Activado
lea rcx, [rbp + 0x1160]
call fcn.140048f90
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp + 0x1180]
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp + 0x68], r15
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x68]
mov r8d, r12d
lea r9, [0x1400d30e0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400d30f0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140067520
mov rax, qword [rbp + 0x68]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x68]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x68]
jmp 0x14006751a
lea rdx, str.Modo_Streamer_Desactivado
lea rcx, [rbp + 0x11a0]
call fcn.140048f90
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp + 0x11c0]
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp + 0x70], r15
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp + 0x70]
mov r8d, r12d
lea r9, [0x1400d30e0]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400d30f0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140067520
mov rax, qword [rbp + 0x70]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp + 0x70]
mov rdx, rax
call rbx
mov rcx, qword [rbp + 0x70]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
xor r9d, r9d
lea r8, str.Aplicar_Login
lea rdx, [0x140208e39]
lea rcx, str.Star_Bypass
call fcn.14003a810
mov byte [0x140208cff], al
test al, al
je 0x14006755b
cmp byte [0x140208e39], 0
je 0x14006755b
call fcn.1400618c0
call fcn.1400448b0
call fcn.140016a10
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140016550
call fcn.1400168c0
xor r9d, r9d
lea r8, str.Apply_in_Each_Match
lea rdx, [0x140208e38]
lea rcx, str.Menu_chams_v2
call fcn.14003a810
mov byte [0x140208cfd], al
test al, al
je 0x1400675b1
cmp byte [0x140208e38], 0
je 0x1400675b1
call fcn.140060f80
call fcn.1400610e0
cmp byte [0x140208d60], 1
jne 0x14006760f
xor r9d, r9d
lea r8, str.Aplicar_Login
lea rdx, [0x140208e37]
lea rcx, str.Activar_Bypass
call fcn.14003a810
mov byte [0x140208cdf], al
test al, al
je 0x14006760f
cmp byte [0x140208e37], 0
je 0x14006760f
lea rcx, [rbp + 0x778]
call fcn.14006b1f0
lea rcx, [rbp + 0x778]
call fcn.140055dd0
cmp dword [rbp + 0x780], 0
jne 0x140068904
call fcn.140016a10
call fcn.14000c490
movss xmm7, dword [0x1400f2fb4]
movss xmm8, dword [0x1400f2f24]
movss xmm9, dword [0x1400f2fe4]
cmp dword [0x14022a738], 0
jne 0x14006834f
cmp qword [0x14022a3b0], 0xf
lea rcx, [0x14022a398]
mov r8, qword [0x14022a3a8]
cmova rcx, qword [0x14022a398]
cmp r8, 0xd
jne 0x14006834f
lea rdx, str.BLACK_FULL_V2
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a098], 0xf
lea rcx, [0x14022a080]
mov r8, qword [0x14022a090]
cmova rcx, qword [0x14022a080]
cmp r8, 0xa
jne 0x14006834f
lea rdx, str.PUu07r9YRR
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a3d0], 0xf
lea rcx, [0x14022a3b8]
mov r8, qword [0x14022a3c8]
cmova rcx, qword [0x14022a3b8]
cmp r8, 0x40
jne 0x14006834f
lea rdx, str.10c7bdaca0af437b6627a0054a849ef681109fd862d4feac7dcff52fd9e91d8f
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
cmp qword [0x14022a058], 0xf
lea rcx, [0x14022a040]
mov r8, qword [0x14022a050]
cmova rcx, qword [0x14022a040]
cmp r8, 5
jne 0x14006834f
lea rdx, str.10.0T
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006834f
lea r8, [rbp + 0x2b0]
mov dword [rbp + 0x2b0], 0x443cc000
lea rdx, [rsp + 0x60]
mov dword [rbp + 0x2b4], 0x44098000
lea rcx, [rbp + 0xa60]
call fcn.140055510
lea rcx, [0x140207c48]
mov r8, rax
call fcn.1400045e0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rsp + 0x60]
movss dword [rsp + 0x20], xmm12
mov rcx, r14
call fcn.14002bb10
lea r8, [rbp + 0x2b8]
mov dword [rbp + 0x2b8], 0x443cc000
lea rdx, [rsp + 0x60]
mov dword [rbp + 0x2bc], 0x44098000
lea rcx, [rbp + 0xa68]
call fcn.140055510
lea rcx, [0x140207c48]
mov r8, rax
call fcn.1400045e0
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rsp + 0x60]
movss dword [rsp + 0x20], xmm12
mov rcx, r14
call fcn.14002bb10
movss xmm0, dword [0x14022a0fc]
ucomiss xmm0, xmm10
jp 0x14006780c
jne 0x14006780c
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x14022a0fc], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x14022a0fc]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm8
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x1400678c9
cmp byte [reloc.WS2_32.dll_accept], 0
movss xmm1, dword [0x14022a0f8]
je 0x140067882
comiss xmm14, xmm1
jbe 0x140067873
call fcn.140008850
movss xmm1, dword [0x14022a0f8]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
addss xmm1, xmm0
movss dword [0x14022a0f8], xmm1
comiss xmm1, xmm14
jb 0x1400678bf
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x1400678bf
comiss xmm1, xmm10
jbe 0x1400678b2
call fcn.140008850
movss xmm1, dword [0x14022a0f8]
movaps xmm0, xmm15
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm13
subss xmm1, xmm0
movss dword [0x14022a0f8], xmm1
comiss xmm10, xmm1
jb 0x1400678bf
mov byte [reloc.WS2_32.dll_accept], 1
mov dword [0x14022a0fc], 0
lea rcx, [rbp + 0x2c0]
mov dword [rbp + 0x2c0], 0x43b90000
mov dword [rbp + 0x2c4], 0xc1a00000
call fcn.140016600
movaps xmm1, xmm10
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
lea rcx, [rbp + 0xe50]
movaps xmm2, xmm10
call fcn.140001e00
movss xmm3, dword [0x1400f2e70]
lea rcx, [rbp + 0xe30]
movaps xmm2, xmm3
movss dword [rsp + 0x20], xmm3
movaps xmm1, xmm3
mov rdx, rax
call fcn.140001e00
mov rcx, qword [0x140208d40]
lea r9, [rbp + 0x2c8]
mov qword [rsp + 0x28], rdx
lea r8, [rbp + 0x2d0]
lea rdx, [rbp + 0x2d8]
mov dword [rbp + 0x2c8], 0x3f800000
mov dword [rbp + 0x2cc], 0x3f800000
mov qword [rbp + 0x2d0], 0
mov dword [rbp + 0x2d8], 0x43a08000
mov dword [rbp + 0x2dc], 0x441e0000
mov qword [rsp + 0x20], rax
call fcn.14003a380
mov rax, qword [0x140208ce0]
lea r8, [rbp + 0x2e0]
lea rdx, [rbp + 0x2e8]
mov dword [rbp + 0x2e0], 0x443a0000
mov dword [rbp + 0x2e4], 0x44044000
mov rcx, qword [rax + 0x3ed0]
movsd xmm0, qword [rcx + 0x18]
lea rcx, [rbp + 0xa0]
movsd qword [rbp + 0x2e8], xmm0
call fcn.140055510
call fcn.140012e60
movss xmm0, dword [0x1400f2eb4]
lea r8, [rbp + 0xa0]
movss dword [rsp + 0x30], xmm0
lea rdx, [rbp + 0x2e8]
movss xmm0, dword [0x1400f2f14]
mov r9d, 0xff505050
mov dword [rsp + 0x28], 0xf0
mov rcx, rax
movss dword [rsp + 0x20], xmm0
call fcn.14002ba00
lea r8, [rbp + 0x2f0]
mov qword [rbp + 0x2f8], 0
lea rdx, [rsp + 0x60]
mov dword [rbp + 0x2f0], 0x43af0000
lea rcx, [rbp + 0xa70]
mov dword [rbp + 0x2f4], 0x44228000
call fcn.140055510
lea rcx, [0x140207ae0]
mov r8, rax
call fcn.1400045e0
movss xmm0, dword [0x1400f2fe0]
mov r9d, eax
movss xmm2, dword [0x1400f2fa0]
lea rax, [rbp + 0x2f8]
mov dword [rsp + 0x38], recvfrom
mov rdx, r8
mov qword [rsp + 0x28], rax
mov rcx, r14
movss dword [rsp + 0x20], xmm0
call fcn.14002e8a0
mov rcx, qword [0x140240278]
call fcn.1400127a0
movss xmm0, dword [0x14022a0f8]
lea rcx, [rbp - 0x10]
movaps xmm3, xmm7
movss dword [rsp + 0x20], xmm0
movaps xmm2, xmm7
movaps xmm1, xmm7
call fcn.140001e00
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140067ade
cmp byte [0x14023ecbc], 0
sete byte [0x14023ecbc]
call fcn.140004ce0
call fcn.14005e830
mov edx, __WSAFDIsSet
mov qword [rbp + 0x318], 0
mov r9d, edx
mov dword [rbp + 0x310], 0x44870000
mov r8d, edx
mov dword [rbp + 0x314], 0x44070000
lea rcx, [rbp + 0xe20]
mov dword [rsp + 0x20], 0x46
call fcn.140037a10
mov rcx, rax
call fcn.1400045e0
mov ebx, eax
call fcn.1400089d0
mov rdx, qword [0x140208f28]
lea rcx, [rbp + 0x300]
mov dword [rsp + 0x30], ebx
lea r9, [rbp + 0x310]
mov qword [rsp + 0x28], rcx
lea r8, [rbp + 0x318]
lea rcx, [rbp + 0x308]
mov dword [rbp + 0x300], 0x3f800000
mov qword [rsp + 0x20], rcx
mov rcx, rax
mov dword [rbp + 0x304], 0x3f800000
mov qword [rbp + 0x308], 0
call fcn.14002c280
lea r8, [rbp + 0x320]
mov dword [rbp + 0x320], 0x43e10000
lea rdx, [rsp + 0x60]
mov dword [rbp + 0x324], 0x41c80000
lea rcx, [rbp + 0xa78]
call fcn.140055510
lea r8, [rbp + 0x328]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xa88]
movss xmm3, dword [rax]
movss xmm4, dword [rax + 4]
mov dword [rbp + 0x328], 0
mov dword [rbp + 0x32c], 0x42c80000
call fcn.140055510
unpcklps xmm3, xmm4
lea rcx, [rbp + 0x998]
mov r9, r13
movq r8, xmm3
movss xmm2, dword [rax + 4]
movss xmm1, dword [rax]
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.140037a80
lea rcx, [rbp - 0x10]
mov r10, rax
call fcn.1400045e0
mov r8d, eax
mov rdx, r10
mov r9, r13
mov rcx, r14
call fcn.14002c180
lea rcx, [rbp + 0x330]
mov dword [rbp + 0x330], 0x42860000
mov dword [rbp + 0x334], 0x42c80000
call fcn.140016600
movaps xmm1, xmm10
movss dword [rsp + 0x20], xmm10
movaps xmm3, xmm10
lea rcx, [rbp + 0xe40]
movaps xmm2, xmm10
call fcn.140001e00
movss xmm3, dword [0x1400f2e70]
lea rcx, [rbp + 0xe00]
movaps xmm2, xmm3
movss dword [rsp + 0x20], xmm3
movaps xmm1, xmm3
mov rdx, rax
call fcn.140001e00
mov dword [rbp + 0x338], 0x3f800000
mov dword [rbp + 0x33c], 0x3f800000
mov qword [rbp + 0x340], 0
mov dword [rbp + 0x348], 0x42200000
mov dword [rbp + 0x34c], 0x42200000
mov rcx, qword [0x140208ed8]
lea r9, [rbp + 0x338]
mov qword [rsp + 0x28], rdx
lea r8, [rbp + 0x340]
lea rdx, [rbp + 0x348]
mov qword [rsp + 0x20], rax
call fcn.14003a380
call fcn.140012e60
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xdf0]
mov r8d, edx
mov r10, rax
call fcn.140037a10
mov rcx, rax
call fcn.1400045e0
movss xmm0, dword [rsp + 0x60]
lea rcx, str.Wellcome_Back
movss xmm1, dword [rsp + 0x64]
lea r9, [rbp + 0x350]
addss xmm0, dword [0x1400f2f6c]
addss xmm1, dword [0x1400f2f9c]
movss xmm2, dword [0x1400f2f44]
mov rdx, qword [0x140208f18]
mov qword [rsp + 0x40], r15
movss dword [rsp + 0x38], xmm10
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rcx
mov rcx, r10
movss dword [rbp + 0x350], xmm0
movss dword [rbp + 0x354], xmm1
mov dword [rsp + 0x20], eax
call fcn.14002bff0
call fcn.140012e60
mov edx, 0xff
mov dword [rsp + 0x20], 0xff
mov r9d, edx
lea rcx, [rbp + 0xe10]
mov r8d, edx
mov r10, rax
call fcn.140037a10
mov rcx, rax
call fcn.1400045e0
movss xmm0, dword [rsp + 0x60]
lea rcx, str.Recuerda_comprar_con_parrot
movss xmm1, dword [rsp + 0x64]
lea r9, [rbp + 0x358]
addss xmm0, dword [0x1400f2fa4]
addss xmm1, dword [0x1400f2fc4]
movss xmm2, dword [0x1400f2f2c]
mov rdx, qword [0x140208f18]
mov qword [rsp + 0x40], r15
movss dword [rsp + 0x38], xmm10
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rcx
mov rcx, r10
movss dword [rbp + 0x358], xmm0
movss dword [rbp + 0x35c], xmm1
mov dword [rsp + 0x20], eax
call fcn.14002bff0
call fcn.140002f00
mov rcx, rax
mov dword [rbp + 0x360], 0x44340000
lea rdx, str.MIN
mov dword [rbp + 0x364], 0x41c80000
mov rbx, rax
call fcn.140007dd0
mov ecx, eax
lea rdx, [rbp + 0x360]
call fcn.140039770
test al, al
je 0x140067e78
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.CLOSE
mov dword [rbp + 0x368], 0x442a0000
mov rcx, rbx
mov dword [rbp + 0x36c], 0x41a00000
call fcn.140007dd0
mov ecx, eax
lea rdx, [rbp + 0x368]
call fcn.1400393b0
test al, al
jne 0x14006890b
mov rax, qword [0x140208ce0]
mov rcx, qword [rax + 0x3ed0]
movsd xmm0, qword [rcx + 0x18]
movsd qword [rbp + 0x3c8], xmm0
call fcn.140004ce0
call fcn.140012840
lea rcx, [rbp + 0x370]
mov dword [rbp + 0x370], 0x42700000
mov dword [rbp + 0x374], 0x432a0000
call fcn.140016600
lea rdx, [rbp + 0x378]
mov dword [rbp + 0x378], 0x43fa0000
mov r9d, 8
mov dword [rbp + 0x37c], 0x438c0000
lea rcx, str.Inputs
call fcn.14000c430
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x380]
mov qword [rsp + 0x30], r15
lea r8, [0x140208de0]
mov dword [rsp + 0x28], r15d
lea rcx, str.Username
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp + 0x380], 0x43910000
mov dword [rbp + 0x384], 0x42480000
call fcn.140041de0
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x388]
mov qword [rsp + 0x30], r15
lea r8, [0x140208d70]
mov dword [rsp + 0x28], r15d
lea rcx, str.Password
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp + 0x388], 0x43910000
mov dword [rbp + 0x38c], 0x42480000
call fcn.140041de0
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x390]
mov qword [rsp + 0x30], r15
lea r8, [0x140208d00]
mov dword [rsp + 0x28], r15d
lea rcx, str.License
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov dword [rbp + 0x390], 0x43910000
mov dword [rbp + 0x394], 0x42480000
call fcn.140041de0
lea rcx, [rbp + 0x398]
mov dword [rbp + 0x398], 0x432a0000
mov dword [rbp + 0x39c], 0x433e0000
mov dword [rbp + 0x3a8], 0
mov dword [rbp + 0x3ac], 0x433e0000
call fcn.140016600
lea rdx, [rbp + 0x3a0]
mov dword [rbp + 0x3a0], 0x42dc0000
lea rcx, str.Register
mov dword [rbp + 0x3a4], 0x42200000
call fcn.140039260
test al, al
je 0x140068156
lea rdx, [0x140208d00]
lea rcx, [rbp + 0x11e0]
call fcn.140048f90
lea rdx, [0x140208d70]
mov rdi, rax
lea rcx, [rbp + 0xe60]
call fcn.140048f90
lea rdx, [0x140208de0]
mov rbx, rax
lea rcx, [rbp + 0xe80]
call fcn.140048f90
mov r9, rdi
lea rcx, [0x14022a100]
mov r8, rbx
mov rdx, rax
call fcn.14007b2c0
cmp byte [0x14022a318], 0
je 0x1400680f6
call fcn.140061650
call fcn.140061930
movups xmm6, xmmword [0x140207c38]
lea rcx, [0x14022a320]
call fcn.140048e90
mov rdx, rax
lea rcx, [rbp + 0xea0]
call fcn.140048f90
lea rcx, [rbp + 0xec0]
jmp 0x14006811f
movups xmm6, xmmword [0x140207c38]
lea rcx, [0x14022a320]
call fcn.140048e90
mov rdx, rax
lea rcx, [rbp + 0xee0]
call fcn.140048f90
lea rcx, [rbp + 0xf00]
lea rdx, str.Notification
mov rbx, rax
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32logintrick.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
lea rcx, [rbp + 0x3a8]
call fcn.140016600
lea rdx, [rbp + 0x3b0]
mov dword [rbp + 0x3b0], 0x42dc0000
lea rcx, str.Login
mov dword [rbp + 0x3b4], 0x42200000
call fcn.140039260
test al, al
je 0x14006828b
lea rdx, [0x140208d70]
lea rcx, [rbp + 0xf20]
call fcn.140048f90
lea rdx, [0x140208de0]
mov rbx, rax
lea rcx, [rbp + 0xf40]
call fcn.140048f90
mov r8, rbx
lea rcx, [0x14022a100]
mov rdx, rax
call fcn.140079180
movups xmm6, xmmword [0x140207c38]
lea rcx, [0x14022a320]
call fcn.140048e90
cmp byte [0x14022a318], 0
mov rdx, rax
je 0x140068241
lea rcx, [rbp + 0xf60]
call fcn.140048f90
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp + 0xf80]
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32logintrick.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
call fcn.140061930
call fcn.140061650
jmp 0x14006828b
lea rcx, [rbp + 0xfa0]
call fcn.140048f90
lea rdx, str.Notification
mov rbx, rax
lea rcx, [rbp + 0x1140]
call fcn.140048f90
lea r9, [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm6
mov r8, rbx
mov rdx, rax
call fcn.140055540
mov edx, 0x20001
lea rcx, str.C:UsersWindowsSystem32logintrick.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
movaps xmm1, xmm11
movaps xmm0, xmm10
call fcn.140016550
lea rcx, [rbp + 0x9a0]
mov dword [rbp + 0x3b8], 0x432a0000
lea r8, [rbp + 0x3b8]
mov dword [rbp + 0x3bc], 0x447a0000
lea rdx, [rbp + 0x3c8]
call fcn.140055510
lea r8, [rbp + 0x3c0]
lea rdx, [rbp + 0x3c8]
lea rcx, [rbp + 0x9a8]
movss xmm3, dword [rax]
movss xmm4, dword [rax + 4]
mov dword [rbp + 0x3c0], 0
mov dword [rbp + 0x3c4], 0x41200000
call fcn.140055510
unpcklps xmm3, xmm4
lea r9, str.Dev_Parrot.Security
movq r8, xmm3
lea rcx, [rbp + 0x9b0]
movss xmm2, dword [rax + 4]
movss xmm1, dword [rax]
unpcklps xmm1, xmm2
movq rdx, xmm1
call fcn.140037a80
lea rcx, [rbp - 0x10]
mov r10, rax
call fcn.1400045e0
mov r8d, eax
lea r9, str.Dev_Parrot.Security
mov rdx, r10
mov rcx, r14
call fcn.14002c180
call fcn.14000c490
call fcn.140059050
call fcn.14005d5a0
call fcn.140055690
mov rcx, qword [0x140208ce0]
lea rdx, [rbp + 0x3d0]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ed0]
lea rcx, str.Move_detector
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm10
addss xmm1, xmm10
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
movss xmm0, dword [0x140207ad8]
movss xmm1, dword [0x140207adc]
movss dword [rbp + 0x3d0], xmm0
movss dword [rbp + 0x3d4], xmm1
call fcn.140039270
mov rax, qword [0x140208ce0]
mov ecx, dword [rax + 0x3f30]
test ecx, ecx
je 0x140068488
cmp ecx, dword [rax + 0x476c]
jne 0x140068488
mov rcx, qword [0x140208ee0]
lea rdx, [0x140208ef8]
call qword [sym.imp.USER32.dll_GetWindowRect]
cvttss2si edi, dword [0x140207adc]
lea rcx, [rbp + 0xa98]
cvttss2si esi, dword [0x140207ad8]
movaps xmm2, xmm11
call fcn.140013be0
movd xmm0, dword [0x140208efc]
lea rcx, [rbp + 0xaa0]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm11
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.140013be0
mov r9d, esi
mov rcx, qword [0x140208ee0]
mov r8d, ebx
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x140208ef8]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
call fcn.140011c30
mov rdi, qword [0x140208ee0]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140068505
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400684fc
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0xa30]
mov qword [rbp + 0x840], rcx
lea rdx, [rbp + 0x838]
mov rcx, rdi
mov dword [rbp + 0x838], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0xa30], xmm0
mov dword [rbp + 0x848], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.14000b8f0
mov rcx, qword [0x14023ec40]
lea r8, [0x14023ebe8]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0xa40], xmm0
mov edx, r12d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x14023ec40]
lea r8, [rbp + 0xa40]
mov rdx, qword [0x14023ebe8]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x140208ce0]
cmp dword [rbx + 0x48a0], 0
jg 0x140068579
mov r8d, 0x6fd
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a8]
mov rcx, qword [rax]
mov rax, r15
add rcx, 0x48
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14004a3b0
mov rcx, qword [0x14023ebf0]
xor r8d, r8d
mov edx, r12d
mov rax, qword [rcx]
call qword [rax + 0x40]
mov ebx, dword [rbp - 0x18]
mov r13d, 5
jmp 0x140063d90
mov rbx, qword [0x140208ce0]
test rbx, rbx
je 0x1400685d4
mov rdi, qword [rbx + 0xa0]
test rdi, rdi
jne 0x1400685f8
jmp 0x1400685d7
mov rdi, r15
mov r8d, 0x241
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULL_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___No_renderer_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140208ce0]
test rbx, rbx
jne 0x14006861e
mov r8d, 0xfe3
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x140208ce0]
call fcn.14004b360
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140068632
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140068640
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14006864f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x140208ce0]
mov qword [rbx + 0x90], r15
mov qword [rbx + 0xa0], r15
test rax, rax
je 0x14006866f
dec dword [rax + 0xf4]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x140208ce0]
test rax, rax
je 0x140068692
mov rbx, qword [rax + 0x98]
test rbx, rbx
jne 0x1400686b6
jmp 0x140068695
mov rbx, r15
mov r8d, 0xa6
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULL_backendsimgui_impl_win32.cpp
lea rcx, str.bd___nullptr___No_platform_backend_to_shutdown__or_already_shutdown__
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140208ce0]
test rax, rax
jne 0x1400686dc
mov r8d, 0xfe3
lea rdx, str.C:UsersedsonMusicNUEVO_BALCK_BULLimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140208ce0]
mov rcx, qword [rbx + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x1400686f6
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140208ce0]
mov qword [rdi + 0x80], r15
mov qword [rdi + 0x90], r15
test rax, rax
je 0x14006870f
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140208ce0]
mov qword [0x140208ce0], rbx
call fcn.140006d50
mov qword [0x140208ce0], r15
test rbx, rbx
je 0x14006875a
mov rcx, rbx
call fcn.1400203e0
mov rax, qword [0x140208ce0]
test rax, rax
je 0x140068751
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140059440
mov rcx, qword [0x140208ee0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x548]
mov rcx, qword [rbp + 0x570]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400687bb
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400687b6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006888f
call fcn.1400cdf84
mov rdx, qword [rbp - 0x40]
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp], 0
cmp rdx, 0xf
jbe 0x140068806
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068801
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006888f
call fcn.1400cdf84
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x58], 0
cmp rdx, 0xf
jbe 0x14006884d
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068848
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006888f
call fcn.1400cdf84
mov rdx, qword [rbp + 0x40]
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], 0
cmp rdx, 0xf
jbe 0x14006889b
mov rcx, qword [rbp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068896
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140068896
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400cdf84
xor eax, eax
jmp 0x140062fcb
mov ecx, 6
mov dword [rbp + 0x438], 0
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x428], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x418], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x408], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x3f8], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rcx, str.taskkill__f__im_HD_Player.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_Bluestacks.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__f__im_HD_Agent.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140059440
mov rdx, qword [rbp + 0x548]
mov rcx, qword [rbp + 0x570]
call qword [sym.imp.USER32.dll_UnregisterClassW]
jmp 0x140062eac
mov r12d, 1
mov ecx, r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x3e8], r15d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
lea rcx, str.C:WindowsSystem32_tdis.exe
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1400689ba
mov dword [rsp + 0x28], r12d
lea r8, str.C:WindowsSystem32_tdis.exe
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400689f5
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400689f0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov rdx, qword [rbp - 0x40]
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp], r15b
cmp rdx, 0xf
jbe 0x140068a40
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068a3b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov rdx, qword [rbp - 0x20]
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x58], r15b
cmp rdx, 0xf
jbe 0x140068a87
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068a82
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140068ad5
call fcn.1400cdf84
mov rdx, qword [rbp + 0x40]
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], r15b
cmp rdx, 0xf
jbe 0x140062fc8
mov rcx, qword [rbp + 0x28]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062fc3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062fc3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3