Function at 0x140011a00
Capabilities:
Execute command

Disassembly:
jmp 0x14001f720
push rbp
push rdi
sub rsp, 0xff8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x2d2
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140040040]
xor rax, rbp
mov qword [rbp + 0xfb0], rax
lea rcx, [0x14004b139]
call fcn.140011e6a
mov dword [rbp + 0x2a4], 8
mov edx, 0x20
lea rcx, [rbp + 0x2c8]
call fcn.1400110a5
lea rcx, [rbp + 0x2c8]
call fcn.140011a19
nop
movsxd rax, dword [rbp + 0x2a4]
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140011767
mov edx, 0x20
lea rcx, [rbp + 0x308]
call fcn.1400110a5
lea rcx, [rbp + 0x308]
call fcn.140011a19
nop
mov edx, 0xa
lea rcx, [rbp + 0x308]
call fcn.140011767
mov edx, 0x20
lea rcx, [rbp + 0x348]
call fcn.1400110a5
lea rcx, [rbp + 0x348]
call fcn.140011a19
nop
mov edx, 0xa
lea rcx, [rbp + 0x348]
call fcn.140011767
xor edx, edx
lea rcx, str.TankWindowClass
call qword [sym.imp.USER32.dll_FindWindowA]
lea rdx, [rbp + 0x384]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rbp + 0x384]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x3a8], rax
lea rdx, str.Overwatch.exe
mov ecx, dword [rbp + 0x384]
call fcn.140011037
mov qword [rbp + 0x3c8], rax
mov edx, 0x18
lea rcx, [rbp + 0x3e8]
call fcn.14001199c
movabs r9, 0x7fffffffffffffff
mov r8, qword [rbp + 0x3c8]
mov rdx, qword [rbp + 0x3a8]
lea rcx, [rbp + 0x3e8]
call fcn.140011357
mov qword [rbp + 0x1c8], 0
lea rax, [rbp + 0xb18]
mov qword [rbp + 0xb58], rax
lea rdx, str.F3_0F_10_83_________F3_0F_59_05_________F3_0F_10_15
mov rcx, qword [rbp + 0xb58]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x3e8]
call fcn.140011a23
mov qword [rbp + 0x418], rax
movsxd rax, dword [rbp + 0x2a4]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x2c8]
call fcn.14001190b
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xfa8]
mov r9, rcx
mov r8, rax
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, 5
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
movzx eax, byte [rax]
shl eax, 8
mov dword [rbp + 0xfa4], eax
mov edx, 4
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
movzx eax, byte [rax]
mov ecx, dword [rbp + 0xfa4]
or ecx, eax
mov eax, ecx
cdqe
mov qword [rbp + 0x1c8], rax
mov rdx, qword [rbp + 0x1c8]
lea rcx, str.Sensitive_Ptr:0x_llX_n
call fcn.1400116c7
mov dword [rbp + 0x2a4], 7
movsxd rax, dword [rbp + 0x2a4]
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140011767
lea rax, [rbp + 0xb78]
mov qword [rbp + 0xbb8], rax
lea rdx, str.48_8B_05_________49_BE_________________49_33_C6_48_8B_D9
mov rcx, qword [rbp + 0xbb8]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x3e8]
call fcn.140011a23
mov qword [rbp + 0x418], rax
movsxd rax, dword [rbp + 0x2a4]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x2c8]
call fcn.14001190b
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xfa8]
mov r9, rcx
mov r8, rax
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, 3
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
mov dl, 1
mov rcx, rax
call fcn.140011712
mov eax, eax
mov rcx, qword [rbp + 0x418]
add rcx, rax
mov rax, rcx
sub rax, qword [rbp + 0x3c8]
movsxd rcx, dword [rbp + 0x2a4]
add rax, rcx
mov rdx, rax
lea rcx, str.VMXorBase:_0x_llX
call fcn.1400116c7
mov edx, 3
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
mov dl, 1
mov rcx, rax
call fcn.140011712
mov eax, eax
mov rcx, qword [rbp + 0x418]
add rcx, rax
mov rax, rcx
sub rax, qword [rbp + 0x3c8]
movsxd rcx, dword [rbp + 0x2a4]
add rax, rcx
mov qword [rbp + 8], rax
mov dword [rbp + 0x434], 0xa
mov edx, 0x20
lea rcx, [rbp + 0x458]
call fcn.1400110a5
lea rcx, [rbp + 0x458]
call fcn.140011a19
nop
movsxd rax, dword [rbp + 0x434]
mov rdx, rax
lea rcx, [rbp + 0x458]
call fcn.140011767
movsxd rax, dword [rbp + 0x434]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x458]
call fcn.14001190b
movsxd rcx, dword [rbp + 0x2a4]
mov rdx, qword [rbp + 0x418]
add rdx, rcx
mov rcx, rdx
mov qword [rsp + 0x20], 0
mov rdx, qword [rbp + 0xfa8]
mov r9, rdx
mov r8, rax
mov rdx, rcx
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, str._nVM_XOR_KEY:0x
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001117c
mov eax, dword [rbp + 0x434]
dec eax
mov dword [rbp + 0x494], eax
jmp 0x14001fb61
mov eax, dword [rbp + 0x494]
dec eax
mov dword [rbp + 0x494], eax
cmp dword [rbp + 0x494], 2
jl 0x14001fb93
movsxd rax, dword [rbp + 0x494]
mov rdx, rax
lea rcx, [rbp + 0x458]
call fcn.140011e4c
movzx eax, byte [rax]
mov edx, eax
lea rcx, str._02X
call fcn.1400116c7
jmp 0x14001fb53
lea rdx, [rbp + 0x458]
lea rcx, [rbp + 0x308]
call fcn.140011a5f
mov dword [rbp + 0x2a4], 7
movsxd rax, dword [rbp + 0x2a4]
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140011767
lea rax, [rbp + 0xbd8]
mov qword [rbp + 0xc18], rax
lea rdx, str.48_03_0D_____________74_60
mov rcx, qword [rbp + 0xc18]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
mov r8d, 2
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x3e8]
call fcn.140011a23
mov qword [rbp + 0x418], rax
movsxd rax, dword [rbp + 0x2a4]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x2c8]
call fcn.14001190b
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xfa8]
mov r9, rcx
mov r8, rax
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, 3
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
mov dl, 1
mov rcx, rax
call fcn.140011712
mov eax, eax
mov rcx, qword [rbp + 0x418]
add rcx, rax
mov rax, rcx
sub rax, qword [rbp + 0x3c8]
movsxd rcx, dword [rbp + 0x2a4]
add rax, rcx
mov rdx, rax
lea rcx, str._nEntity_Admin:_0x_llX
call fcn.1400116c7
mov edx, 3
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
mov dl, 1
mov rcx, rax
call fcn.140011712
mov eax, eax
mov rcx, qword [rbp + 0x418]
add rcx, rax
mov rax, rcx
sub rax, qword [rbp + 0x3c8]
movsxd rcx, dword [rbp + 0x2a4]
add rax, rcx
mov qword [rbp + 0x48], rax
mov dword [rbp + 0x2a4], 7
movsxd rax, dword [rbp + 0x2a4]
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140011767
lea rax, [rbp + 0xc38]
mov qword [rbp + 0xc78], rax
lea rdx, str.48_8B_0D_________45_33_C0_E8_________48_8B_F0
mov rcx, qword [rbp + 0xc78]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x3e8]
call fcn.140011a23
mov qword [rbp + 0x418], rax
movsxd rax, dword [rbp + 0x2a4]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x2c8]
call fcn.14001190b
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xfa8]
mov r9, rcx
mov r8, rax
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, 3
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
mov dl, 1
mov rcx, rax
call fcn.140011712
mov eax, eax
mov rcx, qword [rbp + 0x418]
add rcx, rax
mov rax, rcx
sub rax, qword [rbp + 0x3c8]
movsxd rcx, dword [rbp + 0x2a4]
add rax, rcx
mov rdx, rax
lea rcx, str._nUnEncrypted_VM:_0x_llX
call fcn.1400116c7
mov edx, 3
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
mov dl, 1
mov rcx, rax
call fcn.140011712
mov eax, eax
mov rcx, qword [rbp + 0x418]
add rcx, rax
mov rax, rcx
sub rax, qword [rbp + 0x3c8]
movsxd rcx, dword [rbp + 0x2a4]
add rax, rcx
mov qword [rbp + 0x28], rax
mov dword [rbp + 0x2a4], 0xa
movsxd rax, dword [rbp + 0x2a4]
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140011767
mov edx, 0x18
lea rcx, [rbp + 0x4b8]
call fcn.14001199c
movabs r9, 0x7fffffffffffffff
mov r8, qword [rbp + 0x3c8]
mov rdx, qword [rbp + 0x3a8]
lea rcx, [rbp + 0x4b8]
call fcn.140011357
lea rax, [rbp + 0xc98]
mov qword [rbp + 0xcd8], rax
lea rdx, str.C7_05_________________C7_05_________________C7_05_________________C6_05___________48_C7_05_________________48_C7_05_________________48_C7_05_________________48_83_C4___E9_________CC_CC_CC_CC_CC_CC_CC_CC_CC
mov rcx, qword [rbp + 0xcd8]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
mov r8d, 1
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x4b8]
call fcn.140011a23
mov qword [rbp + 0x418], rax
movsxd rax, dword [rbp + 0x2a4]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x2c8]
call fcn.14001190b
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xfa8]
mov r9, rcx
mov r8, rax
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, 2
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
mov dl, 1
mov rcx, rax
call fcn.140011712
mov eax, eax
mov rcx, qword [rbp + 0x418]
add rcx, rax
mov rax, rcx
sub rax, qword [rbp + 0x3c8]
movsxd rcx, dword [rbp + 0x2a4]
add rax, rcx
mov rdx, rax
lea rcx, str._nFOV_changer:_0x_llX
call fcn.1400116c7
mov edx, 2
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
mov dl, 1
mov rcx, rax
call fcn.140011712
mov eax, eax
mov rcx, qword [rbp + 0x418]
add rcx, rax
mov rax, rcx
sub rax, qword [rbp + 0x3c8]
movsxd rcx, dword [rbp + 0x2a4]
add rax, rcx
mov qword [rbp + 0x128], rax
mov dword [rbp + 0x2a4], 4
movsxd rax, dword [rbp + 0x2a4]
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140011767
lea rax, [rbp + 0xcf8]
mov qword [rbp + 0xd38], rax
lea rdx, str.48_____30_80_B9_________00_48_____48_____4C____
mov rcx, qword [rbp + 0xd38]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x3e8]
call fcn.140011a23
mov qword [rbp + 0x418], rax
movsxd rax, dword [rbp + 0x2a4]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x2c8]
call fcn.14001190b
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xfa8]
mov r9, rcx
mov r8, rax
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x3c8]
mov rcx, qword [rbp + 0x418]
sub rcx, rax
mov rax, rcx
mov rdx, rax
lea rcx, str._nSombra_GLOW:_0x_llX
call fcn.1400116c7
mov rax, qword [rbp + 0x3c8]
mov rcx, qword [rbp + 0x418]
sub rcx, rax
mov rax, rcx
mov qword [rbp + 0x108], rax
mov dword [rbp + 0x4e4], 0
mov dword [rbp + 0x2a4], 2
movsxd rax, dword [rbp + 0x2a4]
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140011767
lea rax, [rbp + 0xd58]
mov qword [rbp + 0xd98], rax
lea rdx, str.40_53_56_57_48_83_EC___4C_8B___
mov rcx, qword [rbp + 0xd98]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x3e8]
call fcn.140011a23
mov qword [rbp + 0x418], rax
movsxd rax, dword [rbp + 0x2a4]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x2c8]
call fcn.14001190b
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xfa8]
mov r9, rcx
mov r8, rax
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x3c8]
mov rcx, qword [rbp + 0x418]
sub rcx, rax
mov rax, rcx
mov rdx, rax
lea rcx, str._nGet_component_Located:_0x_llX
call fcn.1400116c7
mov dword [rbp + 0x504], 0
mov dword [rbp + 0x524], 1
mov edx, 0x18
lea rcx, [rbp + 0x548]
call fcn.14001199c
movabs r9, 0x7fffffffffffffff
mov r8, qword [rbp + 0x418]
mov rdx, qword [rbp + 0x3a8]
lea rcx, [rbp + 0x548]
call fcn.140011357
xor eax, eax
cmp eax, 1
je 0x1400202dd
mov dword [rbp + 0x504], 0
mov dword [rbp + 0x524], 1
lea rax, [rbp + 0xdb8]
mov qword [rbp + 0xdf8], rax
lea rdx, str.E8_______FE
mov rcx, qword [rbp + 0xdf8]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
mov r8d, dword [rbp + 0x4e4]
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x548]
call fcn.140011a23
mov qword [rbp + 0x418], rax
mov rax, qword [rbp + 0x3c8]
mov rcx, qword [rbp + 0x418]
sub rcx, rax
mov rax, rcx
add rax, 5
mov qword [rbp + 0xa8], rax
cmp dword [rbp + 0x524], 0
je 0x140020259
movsxd rax, dword [rbp + 0x504]
mov rcx, qword [rbp + 0x418]
lea rax, [rcx + rax + 5]
mov qword [rsp + 0x20], 0
mov r9d, 1
lea r8, [rbp + 0x524]
mov rdx, rax
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x504]
inc eax
mov dword [rbp + 0x504], eax
jmp 0x140020207
cmp dword [rbp + 0x524], 0
jne 0x1400202ab
movsxd rax, dword [rbp + 0x504]
mov rcx, qword [rbp + 0x418]
lea rax, [rcx + rax + 5]
mov qword [rsp + 0x20], 0
mov r9d, 1
lea r8, [rbp + 0x524]
mov rdx, rax
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x504]
inc eax
mov dword [rbp + 0x504], eax
jmp 0x140020259
mov eax, dword [rbp + 0x504]
dec eax
cdqe
mov qword [rbp + 0xc8], rax
cmp qword [rbp + 0xc8], 0x14
jae 0x1400202ca
jmp 0x1400202dd
mov eax, dword [rbp + 0x4e4]
inc eax
mov dword [rbp + 0x4e4], eax
jmp 0x140020180
mov rax, qword [rbp + 0x3c8]
mov rcx, qword [rbp + 0x418]
sub rcx, rax
mov rax, rcx
add rax, 5
mov rdx, rax
lea rcx, str._nGet_Key_hooking_add:_0x_llX
call fcn.1400116c7
mov eax, dword [rbp + 0x504]
dec eax
mov edx, eax
lea rcx, str._nRIP_d
call fcn.1400116c7
lea rax, [rbp + 0xe18]
mov qword [rbp + 0xe58], rax
lea rdx, str.e8_________4c_8b_bc_24_________4c_8b_b4_24_________4c_8b_ac_24_________4c_8b_a4_24_________48_8b_b4_24_________48_8b_4d
mov rcx, qword [rbp + 0xe58]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
mov r8d, 2
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x3e8]
call fcn.140011a23
mov qword [rbp + 0x418], rax
mov dword [rbp + 0x2a4], 7
movsxd rax, dword [rbp + 0x2a4]
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140011767
mov qword [rbp + 0x68], 0
cmp qword [rbp + 0x68], 0x3000000
jbe 0x1400203a2
cmp qword [rbp + 0x68], 0x4000000
jb 0x1400204a4
mov edx, 0x18
lea rcx, [rbp + 0x578]
call fcn.14001199c
movabs r9, 0x7fffffffffffffff
mov r8, qword [rbp + 0x418]
mov rdx, qword [rbp + 0x3a8]
lea rcx, [rbp + 0x578]
call fcn.140011357
lea rax, [rbp + 0xe78]
mov qword [rbp + 0xeb8], rax
lea rdx, str.48_8B__________
mov rcx, qword [rbp + 0xeb8]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x578]
call fcn.140011a23
mov qword [rbp + 0x418], rax
movsxd rax, dword [rbp + 0x2a4]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x2c8]
call fcn.14001190b
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xfa8]
mov r9, rcx
mov r8, rax
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, 3
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
mov dl, 1
mov rcx, rax
call fcn.140011712
mov eax, eax
mov rcx, qword [rbp + 0x418]
add rcx, rax
mov rax, rcx
sub rax, qword [rbp + 0x3c8]
movsxd rcx, dword [rbp + 0x2a4]
add rax, rcx
mov qword [rbp + 0x68], rax
jmp 0x14002038a
mov rax, qword [rbp + 0x3c8]
mov rcx, qword [rbp + 0x418]
sub rcx, rax
mov rax, rcx
mov rdx, rax
lea rcx, str._nHEAP_Manager_Located:_0x_llX
call fcn.1400116c7
mov rdx, qword [rbp + 0x68]
lea rcx, str._nHEAP_Manager:_0x_llX
call fcn.1400116c7
mov edx, 0x18
lea rcx, [rbp + 0x5a8]
call fcn.14001199c
movabs r9, 0x7fffffffffffffff
mov r8, qword [rbp + 0x418]
mov rdx, qword [rbp + 0x3a8]
lea rcx, [rbp + 0x5a8]
call fcn.140011357
lea rax, [rbp + 0xed8]
mov qword [rbp + 0xf18], rax
lea rdx, str.48___1D________
mov rcx, qword [rbp + 0xf18]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x5a8]
call fcn.140011a23
mov qword [rbp + 0x418], rax
movsxd rax, dword [rbp + 0x2a4]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x2c8]
call fcn.14001190b
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xfa8]
mov r9, rcx
mov r8, rax
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, 3
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
mov dl, 1
mov rcx, rax
call fcn.140011712
mov eax, eax
mov rcx, qword [rbp + 0x418]
add rcx, rax
mov rax, rcx
sub rax, qword [rbp + 0x3c8]
movsxd rcx, dword [rbp + 0x2a4]
add rax, rcx
mov qword [rbp + 0x88], rax
mov rdx, qword [rbp + 0x88]
lea rcx, str._nHEAP_Manager_Var:_0x_llX
call fcn.1400116c7
lea rax, [rbp + 0xf38]
mov qword [rbp + 0xf78], rax
lea rdx, str.48___________________48__
mov rcx, qword [rbp + 0xf78]
call fcn.140011663
mov qword [rbp + 0xfa8], rax
xor r8d, r8d
mov rdx, qword [rbp + 0xfa8]
lea rcx, [rbp + 0x5a8]
call fcn.140011a23
mov qword [rbp + 0x418], rax
mov dword [rbp + 0x5d4], 0xa
movsxd rax, dword [rbp + 0x5d4]
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140011767
movsxd rax, dword [rbp + 0x5d4]
mov qword [rbp + 0xfa8], rax
lea rcx, [rbp + 0x2c8]
call fcn.14001190b
mov qword [rsp + 0x20], 0
mov rcx, qword [rbp + 0xfa8]
mov r9, rcx
mov r8, rax
mov rdx, qword [rbp + 0x418]
mov rcx, qword [rbp + 0x3a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x3c8]
mov rcx, qword [rbp + 0x418]
sub rcx, rax
mov rax, rcx
mov rdx, rax
lea rcx, str._nHEAP_Manager_Key_Addr:_0x_llX_nKey:0x
call fcn.1400116c7
mov eax, dword [rbp + 0x5d4]
dec eax
mov dword [rbp + 0x5f4], eax
jmp 0x1400206d4
mov eax, dword [rbp + 0x5f4]
dec eax
mov dword [rbp + 0x5f4], eax
cmp dword [rbp + 0x5f4], 2
jl 0x140020706
movsxd rax, dword [rbp + 0x5f4]
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140011e4c
movzx eax, byte [rax]
mov edx, eax
lea rcx, str._02X
call fcn.1400116c7
jmp 0x1400206c6
lea rdx, [rbp + 0x2c8]
lea rcx, [rbp + 0x348]
call fcn.140011a5f
mov rdx, qword [rbp + 8]
lea rcx, str._n_nstatic_constexpr_auto_Address_viewmatrix_base__0x_llX_
call fcn.1400116c7
mov rdx, qword [rbp + 0x28]
lea rcx, str._nstatic_constexpr_auto_Address_viewmatrix_base_test__0x_llX_
call fcn.1400116c7
mov rdx, qword [rbp + 0x48]
lea rcx, str._nstatic_constexpr_auto_Address_entity_base__0x_llX_
call fcn.1400116c7
lea rcx, str._nstatic_constexpr_auto_offset_viewmatrix_ptr__0x7E0_
call fcn.1400116c7
lea rcx, str._nstatic_constexpr_auto_offset_viewmatrix_xor_key__0x
call fcn.1400116c7
mov dword [rbp + 0x614], 9
jmp 0x14002077b
mov eax, dword [rbp + 0x614]
dec eax
mov dword [rbp + 0x614], eax
cmp dword [rbp + 0x614], 2
jl 0x1400207ad
movsxd rax, dword [rbp + 0x614]
mov rdx, rax
lea rcx, [rbp + 0x308]
call fcn.140011e4c
movzx eax, byte [rax]
mov edx, eax
lea rcx, str._02X
call fcn.1400116c7
jmp 0x14002076d
mov rdx, qword [rbp + 0x68]
lea rcx, str.__nstatic_constexpr_auto_HeapManager__0x_llX_
call fcn.1400116c7
mov rdx, qword [rbp + 0x88]
lea rcx, str._nstatic_constexpr_auto_HeapManager_Var__0x_llX_
call fcn.1400116c7
lea rcx, str._nstatic_constexpr_auto_HeapManager_Key__0x
call fcn.1400116c7
mov dword [rbp + 0x634], 9
jmp 0x1400207f6
mov eax, dword [rbp + 0x634]
dec eax
mov dword [rbp + 0x634], eax
cmp dword [rbp + 0x634], 2
jl 0x140020828
movsxd rax, dword [rbp + 0x634]
mov rdx, rax
lea rcx, [rbp + 0x348]
call fcn.140011e4c
movzx eax, byte [rax]
mov edx, eax
lea rcx, str._02X
call fcn.1400116c7
jmp 0x1400207e8
lea rcx, str.__nstatic_constexpr_auto_HeapManager_Pointer__0x160_
call fcn.1400116c7
mov rdx, qword [rbp + 0x128]
lea rcx, str._nstatic_constexpr_auto_changefov__0x_llX_
call fcn.1400116c7
mov rdx, qword [rbp + 0xa8]
lea rcx, str._nstatic_constexpr_auto_GetKeyAdd__0x_llX_
call fcn.1400116c7
mov rdx, qword [rbp + 0xc8]
lea rcx, str._nstatic_constexpr_auto_GetKeyAddRIP__0x_llX_
call fcn.1400116c7
mov rdx, qword [rbp + 0x108]
lea rcx, str._nstatic_constexpr_auto_GlowESP__0x_llX_
call fcn.1400116c7
mov rdx, qword [rbp + 0x1c8]
lea rcx, str._nstatic_constexpr_auto_SensitivePtr__0x_llX_
call fcn.1400116c7
mov dword [rbp + 0x654], 9
jmp 0x1400208ad
mov eax, dword [rbp + 0x654]
dec eax
mov dword [rbp + 0x654], eax
cmp dword [rbp + 0x654], 2
jl 0x1400208b8
jmp 0x14002089f
mov dword [rbp + 0x674], 9
jmp 0x1400208d2
mov eax, dword [rbp + 0x674]
dec eax
mov dword [rbp + 0x674], eax
cmp dword [rbp + 0x674], 2
jl 0x1400208dd
jmp 0x1400208c4
lea rcx, [0x140037cb8]
call fcn.1400116c7
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
mov dword [rbp + 0xf94], 0
lea rcx, [rbp + 0x458]
call fcn.140011460
nop
lea rcx, [rbp + 0x348]
call fcn.140011460
nop
lea rcx, [rbp + 0x308]
call fcn.140011460
nop
lea rcx, [rbp + 0x2c8]
call fcn.140011460
mov eax, dword [rbp + 0xf94]
mov edi, eax
lea rcx, [rbp - 0x30]
lea rdx, [0x140035ea0]
call fcn.140011bfe
mov eax, edi
mov rcx, qword [rbp + 0xfb0]
xor rcx, rbp
call fcn.140011708
lea rsp, [rbp + 0xfc8]
pop rdi
pop rbp
ret